WooYun.org

function doedit(){
		$this->_anti_copy();
		if(isset($this->post['predoctitle'])){
			$title = $this->post['predoctitle'];
			$content=string::stripscript($_ENV['doc']->replace_danger_word($this->post['content']));
			$this->view->assign("content",stripslashes($content));
			$this->view->assign("title",$title);
			//$this->view->display("previewdoc");
			$_ENV['block']->view('previewdoc');
			return;
		}

if(!$_ENV['doc']->check_eng_pcnt($doc['content']) || !$_ENV['doc']->check_extlink_pcnt($doc['content'])) {
					if($this->setting['save_spam']) {
						$doc['visible'] = 0;
					} else {
						$this->message($this->view->lang['spam_msg'],"BACK",0);
					}
				}
			}
			if( $this->setting['verify_doc'] == -1 && $this->user['newdocs'] != -1 && $increase_edition) { //如果开启首次编辑审核,且用户尚未通过审核,且编辑的是他从未编辑过的词条
				$_ENV['user']->update_newdocs($this->user['uid'], +1); //则newdocs +1
			}
			$_ENV['doc']->edit_doc($doc,"1", $increase_edition);
			$_ENV['doc']->unset_editlock($doc['did'],$this->user['uid']);
			if($doc['visible']==1 && $_ENV['doc']->is_addcredit($doc['did'],$this->user['uid'])){
				$_ENV['user']->add_credit($this->user['uid'],'doc-edit',$this->setting['credit_edit'],$this->setting['coin_edit']);
			}
			$_ENV['user']->update_field('edits',$this->user['edits']+1,$this->user['uid']);
			$_ENV['doc']->del_autosave('',$this->user['uid'],$doc['did']);

function edit_doc($doc,$edittype='1',$increase_edition=true) {
		if($this->base->setting['base_createdoc']==1){
			$edition = $doc;
		}else{
			$edition=$this->db->fetch_first("SELECT * FROM ".DB_TABLEPRE."doc WHERE did=".$doc['did']);
			$edition=string::haddslashes($edition,1);
		}
		$edition_sql = $increase_edition ? 'edits=edits+1,editions=editions+1,' : '';
		$this->db->query("UPDATE ".DB_TABLEPRE."doc SET
		tag='".$doc['tags']."' ,summary='".$doc['summary']."' ,content='".$doc['content']."',lastedit='".$doc['time']."',
		lasteditor='".$this->base->user['username']."',lasteditorid='".$this->base->user['uid']."',{$edition_sql}visible='".$doc['visible']."' WHERE did=".$doc['did']);
		
		$words=string::hstrlen($edition['content']);
		$images=util::getimagesnum($edition['content']);
		if(!empty($this->base->setting['db_storage']) && $this->base->setting['db_storage']=='txt'){
			$content=stripslashes($edition['content']);
			$edition['content']='';
		}
	
		if($increase_edition == true) {
			$this->db->query("INSERT INTO ".DB_TABLEPRE."edition
			(did,author,authorid,time,ip,title,tag,summary,content,words,images,reason,`type`)
			VALUES ('".$edition['did']."','".$this->base->user['username']."','".$this->base->user['uid']."','".$edition['lastedit']."','".$this->base->ip."','".$edition['title']."','".$edition['tags']."','".$edition['summary']."','".$edition['content']."','$words','$images','".$doc['reason']."','$edittype')");
			$eid = $this->db->insert_id();

function doremove(){
		$did=isset($this->post['did'])?$this->post['did']:$this->get[2];
		$eids=isset($this->post['eid'])?$this->post['eid']:array($this->get[3]);
		foreach($eids as $eid){
			if(!is_numeric($eid)&&!is_numeric($did)){
				$this->message($this->view->lang['parameterError'],'BACK',0);
			}
		}
		
		$result=$_ENV['doc']->remove_edition($eids, $did);

function remove_edition($eid, $did=0){
		if(is_array($eid)){
			$eid=implode(",",$eid);
		}
		
		$sql="INSERT INTO ".DB_TABLEPRE."recycle (type,keyword,content,file,adminid,admin,dateline) values ";
		$query=$this->db->query("SELECT * FROM ".DB_TABLEPRE."edition WHERE eid IN ($eid)");
		$delete_count = array();
		while($edition=$this->db->fetch_array($query)){
			$delete_count[$edition['did']]=0;
			$file=$this->get_edition_fileinfo($edition['eid'],'file');
			$file=($edition['content'])?"N;":serialize(array("$file"));
			$sql.="('edition','".$edition['title']."','".addslashes(serialize($edition))."','$file','".$this->base->user['uid']."','".$this->base->user['username']."','".$this->base->time."'),";