WooYun.org

//修改昵称
	public function editNickname() {
		$Model = M("user");
		$state = $Model -> save(array('uid' => $_SESSION['uid'], 'nickname' => $_POST['nickname']));
		if ($state) {
			$_SESSION['nickname'] = $_POST['nickname'];
			$this -> success('修改昵称成功!');
		} else {
			$this -> error('昵称修改失败');
		}
	//修改用户资料
	public function edit() {
		$this -> field = M('user') -> find(session("uid"));
		$this -> display();
	}
	//编辑基本信息（个性签名，个性域名）
	public function edit_message() {
		$_POST['signature'] = mb_substr($_POST['signature'], 0, 50, 'utf-8');
		//修改资料
		if ($this -> _db -> where("uid=" . session('uid')) -> save()) {
			$_SESSION['domain'] = $_POST['domain'];
			$_SESSION['signature'] = $_POST['signature'];
			$this -> _ajax(1, '修改成功!');
		}
	}

public function addComment() {
		$Model = K('Comment');
		$ModelCache= cache('model');
		$mid = Q('mid',0,'intval');
		$cid = Q('cid', 0, 'intval');
		$aid = Q('aid', 0, 'intval');
		if (!session("uid")) {
			$this -> _ajax('nologin', '没有登录');
		}
		//-验证评论发表间隔时间
		Q('session.comment_send_time', 0, 'intval');
		//间隔时间小于配置项
		if (!IN_ADMIN && Q('session.comment_send_time') + C('comment_step_time') > time()) {
			$_time = Q('session.comment_send_time') + C('comment_step_time') - time();
			$step = $_time / 60 > 1 ? intval($_time / 60) . '分钟' : $_time . '秒';
			$this -> error('请' . $step . '后发表');
		}
		$content=Q('content');
		if (!$content) {
			$this -> error('评论内容不能为空');
		}
		$state = $Model -> where("cid={$cid} && aid={$aid} && " . C("DB_PREFIX") . "comment.uid=" . session('uid')) 
						-> where("content='$content'") -> order("comment_id DESC") -> find();
		if ($state) {
			$this -> error('请不要发表重复内容');
		}
		//添加积分
		$reply_credits = intval(C('reply_credits'));
		$credits_msg = '';
		if ($reply_credits) {
			$sql = "UPDATE " . C('DB_PREFIX') . 'user AS u SET credits=credits+' . $reply_credits;
			M() -> exe($sql);
			$_SESSION['credits'] += $reply_credits;
			$credits_msg = '奖励' . $reply_credits . '个积分';
		}
		//添加
		if ($comment_id = $Model -> addComment()) {
			//记录发表时间
			session('comment_send_time', time());
			//修改文章评论数
			M($ModelCache[$mid]['table_name']) -> inc('comment_num', 'aid=' . $aid);
			$comment_state = M('role')->where('rid='.$_SESSION['rid'])->getField('comment_state');
			if($comment_state == 1 || IN_ADMIN){
				$comment = $this -> getCommentHtml($comment_id);
				$msg =  '评论成功！' . $credits_msg;
			}else{
				$comment='';
				$msg =  '评论成功，审核后显示';
			}
			//添加动态
			$Message= mb_substr($content, 0, 30, 'utf-8');
			$DyMessge = "<a target='_blank' href='".__WEB__."?a=Index&c=Index&m=content&mid={$mid}&cid={$cid}&aid={$aid}'>".$Message."</a>";
			addDynamic($_SESSION['uid'],"发表了评论: " . $DyMessge);
			//向文章作者发送系统消息
			$article = M($ModelCache[$mid]['table_name'])->where("aid=$aid")->find();
			$articleUrl = __WEB__."?a=Index&c=Index&m=content&mid={$mid}&cid={$cid}&aid={$aid}";
			$title = mb_substr($article['title'], 0,30,'utf-8');
			addSystemMessage($_SESSION['uid']," <a target='_blank' href='".$articleUrl."'>{$title}</a> 有了新评论");
			$this -> _ajax(1,$msg, $comment);
		} else {
			$this -> error('失败了哟');
		}
	}