WooYun.org

<div class="home_box">
	<div class="boxtitle">
	<h3>最新推荐</h3>
	</div>
	<ul class="list_12">
		{loop M("module")->l("article","w[classid='$classid'&&attrib_j=1&&status=1];f[title,html,date];n[10];s[id,1]") $k $v} //classid直接带入查询
		<li><span>{date('m/d',strtotime($v['date']))}</span><a href="{url($v['html'])}">{$v['title']}</a></li>
		{/loop}
	</ul>
</div>
下面的一样，就省略了

public function l($table,$func=""){
	$array=explode(";",$func);
	if(count($array)>1){
		foreach($array as $v){
			$this->tagsresolve($v);
		}
	}else{
		$this->tagsresolve($func);
	}
。。。。
	return D($table)->field($field)->where($where)->sort($sortf,$sorts,$sortp)->limit($limit)->getall();

private function tagsresolve($string){
	$str=substr(substr($string,2),0,-1);
	switch(substr($string,0,1)){
	case "w": //w时
	$exp=explode(',',$str);//这里用逗号分割
	if($exp[1]){//如果我们的语句中有逗号，就会被处理
		return $this->op['where']=$exp[0].$this->whereclass($exp[1]); 
	}elseif($str){
		return $this->op['where']=$str;
	}
	break;