WooYun.org

<?php
include_once("head.php");
if($uname=="")
{
	exit("<script language='javascript'>parent.location.reload();</script>");
}
include_once("kernel/eidolon.class.php");
$sms_id=$_GET["sms_id"];
include_once("kernel/sms.class.php");
$sms=new Sms();
$sms->sms_id=$sms_id;
if($res=$sms->gets())
{
	$sms_sender=$res[0]["sms_sender"];
	$sms_subject=$res[0]["sms_subject"];
	$sms_content=nl2br($res[0]["sms_content"]);
}
$sms->change("sms_stat",1);
$eidolon=new Eidolon("templets/sms_show.html");
$eidolon->parseBlock("_main");
$eidolon->showBlock("_main");
?>

function gets()
	{
		$where="1=1";
		if($this->sms_id>0)
		{
			$where.=" AND sms_id=".$this->sms_id;
		}
		if($this->sms_sender!="")
		{
			$where.=" AND sms_sender='".$this->sms_sender."'";
		}
		if($this->sms_receiver!="")
		{
			$where.=" AND sms_receiver='".$this->sms_receiver."'";
		}
		if($this->sms_type>0)
		{
			$where.=" AND sms_type=".$this->sms_type;
		}
		$sql="SELECT * FROM sms_box WHERE ".$where." ORDER BY sms_stat,sms_id DESC LIMIT ".$this->getLimit(); //echo $sql;
		return $this->find($sql);
	}