WooYun.org

elseif($action == 'edit_mood' && moodid) {
          //moodid未初始化，直接代入sql查询
	  $check = $db->result_first("SELECT * FROM {$tablepre}moodwall WHERE id='$moodid' AND uid='$discuz_uid'");
	  if(!$check || !$moodid) {
		  showmessage('moodwall:moodwall_inc_php_2', 'plugin.php?id=moodwall&action=user_mood');
	  }
	  $sql = "SELECT * FROM {$tablepre}moodwall WHERE id='$moodid'";
	  $query = $db->query($sql);
	  $moodlist_edit = array();
	  while($mood_edit = $db->fetch_array($query)) {
		  $moodlist_edit[] = $mood_edit;
	  }

$uid=$_POST[uid];
	 $username=$_POST[username];
	 $bgpic=$_POST[bgpic];
	 $mood=$_POST[mood];
	 $message=$_POST[message];
	 $dateline=time();
          //$_POST得到数据直接入库，前端出库代码也没有做过滤，这里就不贴了。
	 $db->query("INSERT INTO {$tablepre}moodwall (uid,username, bgpic, mood, message, dateline) VALUES ('$uid', '$username', '$bgpic', '$mood', '$message', '$dateline')");