WooYun.org

if($action == 'delete_image'){
	$strSql = sprintf("select file_id,file_name,save_name from %switkey_file where file_id in(%s)",TABLEPRE,$fileid);
	$arrFileInfo = db_factory::get_one($strSql);
	$resText = CommonClass::delFileByFileId($fileid);
	if($resText){
		$array = explode(',', $arrServiceInfo['pic']);
		$newArr = CommonClass::returnNewArr($arrFileInfo['save_name'], $array);
		$_POST['file_ids'] = implode(",", $newArr);
		updateFilepath($arrServiceInfo['service_id'], $_POST['file_ids'], 'pic');
		kekezu::echojson('删除成功',1,array('fileid'=>$fileid,'save_name'=>$arrFileInfo['save_name']));die;
	}
}

$strSql = sprintf("select file_id,file_name,save_name from %switkey_file where file_id in(%s)",TABLEPRE,$fileid);

$resText = CommonClass::delFileByFileId($fileid);

public static function delFileByFileId($fileId){
		$strSql = sprintf("select file_id,file_name,save_name from %switkey_file where file_id in(%s)",TABLEPRE,$fileId);
		$arrFileInfo = db_factory::get_one($strSql);
		$filename = S_ROOT.$arrFileInfo['save_name'];
		if(file_exists($filename)){
			unlink($filename);
		}
		return db_factory::execute("delete from ".TABLEPRE."witkey_file where file_id = ".$fileId);
	}

if($action == 'delete_goodsfile'){
	$strSql = sprintf("select file_id,file_name,save_name from %switkey_file where file_id in(%s)",TABLEPRE,$fileid);
	$arrFileInfo = db_factory::get_one($strSql);
	$resText = CommonClass::delFileByFileId($fileid);
	if($resText){
		$array = explode(',', $arrServiceInfo['file_path']);
		$newArr = CommonClass::returnNewArr($arrFileInfo['save_name'], $array);
		$_POST['file_path_2'] = implode(",", $newArr);
		updateFilepath($arrServiceInfo['service_id'], $_POST['file_path_2'], 'file');
		kekezu::echojson('删除成功',1,array('fileid'=>$fileid,'save_name'=>$arrFileInfo['save_name']));die;
	}
}

if (isset($formhash)&&kekezu::submitcheck($formhash)) {
	$arrGoodsConfig = unserialize($kekezu->_model_list[6]['config']);
	$goodsprice   = floatval($goodsprice);
	$floatMinCash = floatval($arrGoodsConfig['min_cash']);
	if($floatMinCash&&($goodsprice < $floatMinCash)){
		$tips['errors']['goodsprice'] = '最小金额不能少于'.$floatMinCash.'元';
		kekezu::show_msg($tips,null,NULL,NULL,'error');
	}
	if (strtoupper ( CHARSET ) == 'GBK') {
		$goodsname = kekezu::utftogbk($goodsname );
		$goodsdesc = kekezu::utftogbk($goodsdesc );
		$unite_price = kekezu::utftogbk($unite_price );
	}
	$arrData = array(
			'model_id'		=> $arrServiceInfo['model_id']?$arrServiceInfo['model_id']:6,
			'uid'			=> $gUid,
			'username'		=> $gUserInfo['username'],
			'indus_id'		=> $indus_id,
			'indus_pid'		=> $indus_pid,
			'title'			=> $goodsname,
			'price'		    => $goodsprice,
			'pic'			=> $file_ids,
			'content'		=> $goodsdesc,
			'unite_price'	=> $unite_price,
			'submit_method'	=> $submit_method,
			'file_path'		=> $file_path_2,
			'confirm_max'   => intval($arrGoodsConfig['confirm_max_day'])
	);
	if(!$pk['service_id']){
		$arrData['profit_rate'] = $arrGoodsConfig['service_profit'];
		$arrData['on_time'] = time();
		$arrData['service_status'] = 2;
	}
	$objServiceT = new keke_table_class ( 'witkey_service' );
	$objServiceT->save ( $arrData,$pk);
	unset($objServiceT);
	if ($objId&&$intTaskId) {
		$strBidSql  = ' UPDATE `'.TABLEPRE.'witkey_task_bid`  SET `hasdel`=1 WHERE (`bid_id` ='.$objId.')  and task_id = '.$intTaskId;
		$strWorkSql = ' UPDATE `'.TABLEPRE.'witkey_task_work` SET `hasdel`=1 WHERE (`work_id`='.$objId.')  and task_id = '.$intTaskId;
		db_factory::execute($strBidSql);
		db_factory::execute($strWorkSql);
	}
	kekezu::show_msg('操作成功',$strJumpUrl,NULL,NULL,'ok');
}

$objServiceT->save ( $arrData,$pk);

function save($fields, $pk = array()) {
		foreach ( $fields as $k => $v ) {
			$kk = ucfirst ( $k );
			$set_query = "set" . $kk;
			$this->_table_obj->$set_query ( $v );
		}
		$keys = array_keys ( $pk );
		$key = $keys [0];
		//echo $key."\n";
		//print_r($pk);
		//echo $pk[$key];
		if (! empty ( $pk [$key] )) {
			$this->_table_obj->setWhere ( " $key = '" . $pk [$key] . "'" );
			$edit_query = "edit_" . $this->_pre . $this->_table_name;
			$res = $this->_table_obj->$edit_query ();
		} else {
			$create_query = "create_" . $this->_pre . $this->_table_name;
			$res = $this->_table_obj->$create_query ();
		}
		if ($res) {
			return $res;
		} else {
			return false;
		}
	}