<? 
// Evitamos la inyeccion SQL de comillas 

// Modificamos las variables pasadas por URL 
foreach($_GET as $variable=>$valor){ 
$_GET[$variable] = addslashes($valor); 
} 
// Modificamos las variables de formularios 
foreach($_POST as $variable=>$valor){ 
$_POST[$variable] = addslashes($valor); 
} 

?> 
 
 
 <? // evitamos la inyeccion por envenamiento de cookies 
function addslashes__recursive($var){
if (!is_array($var))
return addslashes($var);
$new_var = array();
foreach ($var as $k => $v)$new_var[addslashes($k)]=addslashes__recursive($v);
return $new_var;
}
$_POST=addslashes__recursive($_POST);
$_GET=addslashes__recursive($_GET);
$_REQUEST=addslashes__recursive($_REQUEST);
$_SERVER=addslashes__recursive($_SERVER);
$_COOKIE=addslashes__recursive($_COOKIE);
?>


<?
class plantilla{
        function plantilla($template_file){
                $this->tpl_file = './' . $template_file . '.tpl';
        }
        
        function asigna_variables($vars){
                $this->vars= (empty($this->vars)) ? $vars : $this->vars . $vars;
        }
        
        function muestra(){
                if (!($this->fd = @fopen($this->tpl_file, 'r'))) {
                        sostenedor_error('error al abrir la plantilla ' . $this->tpl_file);
                } else{
                        $this->template_file = fread($this->fd, filesize($this->tpl_file));
                        fclose($this->fd);
                        $this->mihtml = $this->template_file;
                        $this->mihtml = str_replace ("'", "\'", $this->mihtml);
                        $this->mihtml = preg_replace('#\{([a-z0-9\-_]*?)\}#is', "' . $\\1 . '", $this->mihtml);
                        reset ($this->vars);
                        while (list($key, $val) = each($this->vars)) {
                                $$key = $val;
                        }
                        eval("\$this->mihtml = '$this->mihtml';");
                        reset ($this->vars);
                        while (list($key, $val) = each($this->vars)) {
                                unset($$key);
                        }
                        $this->mihtml=str_replace ("\'", "'", $this->mihtml);
                        return $this->mihtml;
                }
        }
}
?>