WooYun.org

public function mailactivity() {
        parent::tologin();
        $_authmsg=daddslashes($_GET['auth']);
        $authmsg=base64_decode($_authmsg);  //这里反了……
        $tem=explode(":",$authmsg);
        $send_id=$tem[0];
        $user=M('Users');
        $row = $user->field('auth_email')->where("user_id='$send_id'")->find();
        $auth_email=$row['auth_email'];
        if ($_authmsg==$auth_email) {
            $user->where("user_id='$send_id'")->setField(array('auth_email'=>1,'regmailauth'=>1));
			setcookie('setok', json_encode(array('lang'=>L('mail6'),'ico'=>1)),0,'/');
        } else {
            setcookie('setok', json_encode(array('lang'=>L('mail7'),'ico'=>2)),0,'/');
        }
        header('location:'.SITE_URL.'/?m=guide');
    }