WooYun.org

$user_id = get_sess_userid();
	$hi_id = short_check(get_argg('hi_id'));
	$del_array=get_argp("attach");
	
	//数据表定义区
	$t_hi = $tablePreStr."hi";
	$dbo = new dbex;
	//读写分离定义函数
	dbtarget('w',$dbServs);
	
	if($del_array==NULL){
		$del_array[]=$hi_id;
	}
	
	foreach($del_array as $rs){
		$rs=short_check($rs);
		$sql="delete from $t_hi where hi_id=$rs";

function short_check($str)
{
   $MaxSlen=500;//限制短输入项最多300个字符
   if (!get_magic_quotes_gpc())    // 判断magic_quotes_gpc是否打开
   {
      $str = addslashes($str);    // 进行过滤
   }
		$str = LenLimit($str,$MaxSlen);
		$str = str_replace(array("\'","\\","#"),"",$str);
		if($str!=''){
			$str= htmlspecialchars($str);
		}
		
		return preg_replace("/　+/","",trim($str));
		
}