WooYun.org

public function info_save()
    {
        $rules = array('name:required:昵称不能为空!','real_name:required:真实姓名不能为空!','sex:int:性别必需选择！','birthday:date:生日日期格式不正确！','mobile:mobi:手机格式不正确','phone:phone:电话格式不正确');
        $info = Validator::check($rules);
        if(is_array($info)){
            $this->redirect("info",false,array('msg'=>array("info",$info['msg'])));
        }else{
            $data = array(
                    'name'=>Filter::str(Req::args('name')),
                    'real_name'=>Filter::str(Req::args('real_name')),
                    'sex'=>Filter::int(Req::args('sex')),
                    'birthday'=>Req::args('birthday'),
                    'mobile'=>Req::args('mobile'),
                    'phone'=>Req::args('phone'),
                    'province'=>Req::args('province'),
                    'city'=>Req::args('city'),
                    'county'=>Req::args('county'),
                    'addr'=>Filter::text(Req::args('addr'))
                );
        }
        $name = Filter::sql(Req::args("name"));
        $id = $this->user['id'];
        $this->model->table("user")->data(array("name"=>$name))->where("id=$id")->update();
        $this->model->table("customer")->data($data)->where("user_id=$id")->update();
        $obj = $this->model->table("user as us")->join("left join customer as cu on us.id = cu.user_id")->fields("us.*,cu.group_id,cu.login_time")->where("us.id=$id")->find();
                    $this->safebox->set('user',$obj,$this->cookie_time);
        $this->redirect("info");
    }

'birthday'=>Req::args('birthday'),
                    'mobile'=>Req::args('mobile'),
                    'phone'=>Req::args('phone'),
                    'province'=>Req::args('province'),
                    'city'=>Req::args('city'),
                    'county'=>Req::args('county'),
                    'addr'=>Filter::text(Req::args('addr'))