| 关键词: value user nbsp info action key exeUpdate sql id 不过 |
action\users\user_ico_cut_save.action.php1<?php2 //引入模块公共方法文件3 require("foundation/module_users.php");4 require("foundation/aintegral.php");5 require("foundation/fcontent_format.php");6 require("api/base_support.php");7 //语言包引8 $u_langpackage=new userslp;9 //数据库操作10 dbtarget('w',$dbServs);11 $dbo=new dbex();12 $photo_url=short_check(get_argg('pic')); //这里这里.13 $user_id=get_sess_userid();//用户ID14 $user_name=get_sess_username();//用户名15 $ico_url=long_check(get_argp('u_ico_url'));16 往下看17 ;18 ;19 ;20 21 if(preg_match("/uploadfiles\/photo_store/",$photo_url)){22 unlink($photo_url);//删除临时图片文件 // you know\iwebsns\action\poll\poll_submit.action.php1//变量声明区2 $user_id=get_sess_userid();3 $user_name=get_sess_username();4 $userico=get_sess_userico();5 $cho=get_argp('pol_cho'); //此处可控未过滤6 $pid=intval(get_argg('pid'));7 $anon=short_check(get_argp('anonymity'));8 $total_credit=intval(get_argp('credit'));9 $per_int=intval(get_argp('percredit'));10 $p_subject=short_check(get_argp('subject')); 往下看11 foreach($cho as $v){12 $option.=",".$v;13 }14 $sql="select `option` from $t_polloption where oid in(0.$option)"; //you know tooaction\users\user_info.action1<?php2require("foundation/module_users.php");3//引入语言包4$u_langpackage=new userslp;5//变量获得6$user_id =get_sess_userid();7$model = short_check(get_argg('model'));8$birth_year = short_check(get_argp('birth_year'));9$birth_month = short_check(get_argp('birth_month'));10$birth_day = short_check(get_argp('birth_day'));11$reside_city = short_check(get_argp('reside_city'));12$reside_province = short_check(get_argp('reside_province'));13$birth_city = short_check(get_argp('birth_city'));14$birth_province = short_check(get_argp('birth_province'));15$is_finish=intval(get_argg('is_finish'));16$info = get_argp('info'); //看这里17往下看18//更新自定义信息表19if(!empty($info)){20foreach($info as $key => $value){21if($value!==''){22$key=explode('|',$key);23$sql="insert into $t_user_info (user_id,info_id,info_value) values ($user_id,'".$key[0]."','$value')";//直接查询, 不过受Gpc24$dbo -> exeUpdate($sql);25}26}27} |
|
声明:文章版权归原作者所有 部分文章转自互联网 如有侵权请联系
[邮箱地址] 删除
|