WooYun.org

<?php
require_once str_replace('\\','/',dirname(__FILE__)).'/../../../include/cms/cms_system.inc.php';
$cms_info = &$cms->get_cms_info();
$cms->set_module('POLL');
$poll_id = $_REQUEST['pPollId'];
$act = $_REQUEST['pAct'];
$cms->echo_header();
$conn = &$cms->get_adodb_conn();
$rs = &$cms_info->get_poll_rs($conn, 'poll_id='.$poll_id);
$poll_title = $rs->fields[1];
$poll_voters = $rs->fields[2];
$poll_type = $rs->fields[3];
$smarty->assign_by_ref('act', $act);
$smarty->assign_by_ref('poll_title', $poll_title);
$smarty->assign_by_ref('poll_id', $poll_id);
$rs = &$cms_info->get_poll_item_rs($conn, 'item_pollid='.$poll_id, 'item_id');

<?php
require_once str_replace('\\','/',dirname(__FILE__)).'/../../../include/cms/cms_system.inc.php';
$cms->set_module('POLL');
$poll_id = $_REQUEST['pPollId'];
$item_ids = $_REQUEST['pPollItemIds'];
if (!is_array($item_ids) || count($item_ids) <= 0) {
    $cms->echo_header(FALSE);
    ?>
    <script language="JavaScript">
        function alertErrMsg()
        {
            alert('必须选择调查选项?);
            document.location.href = './vote.php?pPollId=<?php echo $poll_id; ?>';
        }   //end function
        window.onload = alertErrMsg;
    </script>
    <?php
    $cms->echo_footer(FALSE);
    exit;
}   //end if
$result_url = './vote.php?pPollId='.$poll_id.'&pAct=result';
$conn = &$cms->get_adodb_conn();
$cms_info = &$cms->get_cms_info();
if (TRUE == $cms->arguments['poll_cookie']) {
    $cookie_poll = $_COOKIE['sCookiePoll'];
    $poll_ids = split('::', $cookie_poll);
    if (in_array($poll_id, $poll_ids)) {    //已投过票
        $cms->echo_header(FALSE);
        ?>
        <script language="JavaScript">
            function alertErrMsg()
            {
                alert('您已经对此调查投过票，不能投第二次?);
                document.location.href = "<?php echo $result_url; ?>";
            }   //end function
            window.onload = alertErrMsg;
        </script>
        <?php
        $cms->echo_footer(FALSE);
        exit;
    }   //end if
}   //end if
$cms_info->update_poll_vote($conn, $poll_id, $item_ids);
if (TRUE == $cms->arguments['poll_cookie']) {   //设置 COOKIE
    $cookie_poll .= ($cookie_poll) ? '::'.$poll_id : $poll_id;
    setcookie ('sCookiePoll', $cookie_poll);
}   //end if
header("Location: $result_url");
?>

<?php
require_once str_replace('\\','/',dirname(__FILE__)).'/../../../include/cms/cms_system.inc.php';
$conn = &$cms->get_adodb_conn('', 'Info');
//$conn->debug = TRUE;
$cms_info = &$cms->get_cms_info();
$cms->set_module('CHECK');
//此参数用于生成静态文件，直接运行朿PHP，不跳转到静态页靿
if ($_SERVER['PATH_INFO']) {
    $params = explode('/', preg_replace('/\?.+$/', '', $_SERVER['PATH_INFO']));
    $cat_body_id = $params[1];
    $run = (isset($params[2]) && 'create_static' == $params[2]) ? TRUE : FALSE;
} else {
    $cat_body_id = $_REQUEST['pCatBodyId'];
    $run = ('create_static' == $_REQUEST['pRun']) ? TRUE : FALSE;
}   //end if    
if (!$cat_body_id)
    $cms->trigger_error('参数 $pCatBodyId 不能为空?, E_USER_ERROR);
//  获取当前内容记录
//$rs = &$cms_info->get_cat_body_rs($conn, "cat_body_id=".$cat_body_id." AND cat_body_confirm=1", '', TRUE, FALSE);
$rs = &$cms_info->get_cat_body_rs($conn, "cat_body_id=".$cat_body_id, '', TRUE, FALSE);
if ($rs->RecordCount() <= 0)
    $cms->trigger_error('没找到ID 号为 '.$cat_body_id.' 的内容，该内容不存在，或者已被删除?, E_USER_ERROR);
$cat_body_confirm = $rs->fields[11];
if ($cat_body_confirm == 0)
    $cms->trigger_error('ID 号为 '.$cat_body_id.' 的内容未通过验证?, E_USER_ERROR);
$_REQUEST['pCatId'] = $cat_id = $rs->fields[1];
$cat_body_title = $rs->fields[2];
$cat_body_author = $rs->fields[3];
$cat_body_type = $rs->fields[4];
$cat_body_url = $rs->fields[5];
$cat_body_keyword = $rs->fields[6];
$cat_body_indate = $rs->fields[7];
$cat_body_outdate = $rs->fields[8];
$cat_body_click = $rs->fields[9];
$cat_body_content = ('I' == $cat_body_type)?'<img src="'.$cat_body_url.'" border="1" />':$rs->fields[13];

<?php
require_once str_replace('\\','/',dirname(__FILE__)).'/../../../include/cms/cms_system.inc.php';
$conn = &$cms->get_adodb_conn('', 'Info');
//$conn->debug = TRUE;
$cms_info = &$cms->get_cms_info();
$cms->set_module('DOC');
$cat_body_id = $_POST['cat_body_id'];
$rs = &$cms_info->get_cat_body_rs($conn, "cat_body_id=".$cat_body_id, '', TRUE, FALSE);
echo $rs->fields[9];
//echo $cat_body_id;
?>