WooYun.org

function m__edit() {
    global $dbm;
    $params = array();
    if (!is_numeric($_POST['user_id'])) die('{"code":"210","msg":"会员UID必须是数字"}'); 
    // 验证会员信息是否合法
    if (empty($_POST['uname'])) die('{"code":"210","msg":"会员名不能为空"}');
    //if (empty($_POST['pro'])) die('{"code":"200","msg":"请选择所在的省份"}');
    //if (empty($_POST['city'])) die('{"code":"201","msg":"请选择所在的城市"}');
   //$rules = "/\w+([-+.']\w+)*@\w+([-.]\w+)*\.\w+([-.]\w+)*/";
    //if (trim($_POST['uemail']) != '' && !preg_match($rules, $_POST['uemail'])) die('{"code":"270","msg":"请正确填写邮箱格式!"}');
    $params['uname'] = $_POST['uname'];
    $params['uemail'] = isset($_POST['uemail']) && $_POST['uemail']!= '' ? $_POST['uemail'] : '';
    $params['uphone'] = isset($_POST['uphone']) && trim($_POST['uphone']) != '' ? trim($_POST['uphone']) : '';
    $params['uqq'] = isset($_POST['uqq']) && trim($_POST['uqq']) != '' ? trim($_POST['uqq']) : '';
    /*$params['motto'] = isset($_POST['motto']) && !empty($_POST['motto']) ? htmlspecialchars($_POST['motto']) : '';*/
    if (intval($_POST['user_id']) > 0) {
        if (isset($_POST['upass']) && $_POST['upass'] != '') {
            if (strlen($_POST['upass']) < 5 || strlen($_POST['upass']) > 20) {
                die('{"code":"280","msg":"密码不符合要求，必须5到20字符"}');
            } 
            if ($_POST['upass'] != $_POST['re_pass']) die('{"code":"270","msg":"两次密码不一致"}');
            $params['upass'] = helper :: password_encrypt($_POST['upass']);
        } 
        $where = " user_id ='" . $_POST['user_id'] . "'";
        $res = $dbm -> single_update(TB_PREFIX . "user_list", $params, $where);
        if (empty($res['error'])) {
            die('{"code":"0","msg":"更新会员资料成功"}');
        } 
        die('{"code":"280","msg":"更新会员资料失败，请核实后再添加"}');
    } 
}