WooYun.org

//#####################@ 购物车商品更改数量 @#####################//
	case 'cartnum':
		$money['order_productmoney'] = $money['order_wlmoney'] = $money['order_money'] = 0;
		if (pe_login('user')) {
			$result = $db->pe_update('cart', array('user_id'=>$_s_user_id, 'product_id'=>$_g_product_id), array('product_num'=>$_g_product_num));
		}
		else {
			$cart_list = unserialize($_c_cart_list);
			$cart_list[$_g_product_id]['product_num'] = $_g_product_num;
			$result = is_array($cart_list[$_g_product_id]) ? true : false;
			setcookie('cart_list', serialize($cart_list), 0, '/');
		}
		$cart_info = cart_info($cart_list);
		echo json_encode(array('result'=>$result, 'money'=>$cart_info['money']));
	break;

public function pe_update($table, $where, $set)
	{
		//处理设置语句
		$sqlset = $this->_doset($set);
		//处理条件语句
		$sqlwhere = $this->_dowhere($where);
		return $this->sql_update("update `".dbpre."{$table}` {$sqlset} {$sqlwhere}");	
	}

//处理条件语句
	protected function _dowhere($where)
	{
		if (is_array($where)) {
			foreach ($where as $k => $v) {
				if (is_array($v)) {
					$where_arr[] = "`{$k}` in('".implode("','", $v)."')";			
				}
				else {
					in_array($k, array('order by', 'group by')) ? ($sqlby = " {$k} {$v}") : ($where_arr[] = "`{$k}` = '{$v}'");
				}
			}
			$sqlwhere = is_array($where_arr) ? 'where '.implode($where_arr, ' and ').$sqlby : $sqlby;
		}
		else {
			$where && $sqlwhere = (stripos(trim($where), 'order by') === 0 or stripos(trim($where), 'group by') === 0) ? "{$where}" : "where 1 {$where}";
		}
		return $sqlwhere;
	}
	//处理设置语句
	protected function _doset($set)
	{
		if (is_array($set)) {
			foreach ($set as $k => $v) {
				$set_arr[] = "`{$k}` = '{$v}'";
			}
			$sqlset = 'set '.implode($set_arr, ' , ');
		}
		else {
			$sqlset = "set {$set}";
		}
		return $sqlset;
	}