WooYun.org

case 'updateinfo':
                $id       = intval($_POST['id']);
                checkInfoUser($id, trim($_REQUEST['password']));
                $title    = $_POST['title'] ? htmlspecialchars_deep(trim($_POST['title'])) : '';
                $areaid   = $_POST['areaid'] ? intval($_POST['areaid']) : '';
                $enddate  = !empty($_POST['enddate']) ? (intval($_POST['enddate']*3600*24)) + time() : '0';
                $content  = $_POST['content'] ? htmlspecialchars_deep(trim($_POST['content'])) : '';
                $linkman  = $_POST['linkman'] ? htmlspecialchars_deep(trim($_POST['linkman'])) : '';
                $phone    = $_POST['phone'] ? trim($_POST['phone']) : ''; //没用html函数处理
                $qq       = $_POST['qq'] ? intval($_POST['qq']) : '';
                $email    = $_POST['email'] ? htmlspecialchars_deep(trim($_POST['email'])) : '';
                $address  = $_POST['address'] ? trim($_POST['address']) : '';
                $mappoint = $_POST['mappoint'] ? trim($_POST['mappoint']) : '';
                if(empty($title))showmsg("标题不能为空");
                if(empty($phone) && empty($qq) && empty($email))showmsg("电话、qq、email，必须填写一项");
                check_words(array($title,$content));
                $items = array(
                        'areaid' => $areaid,
                        'title' => $title,
                        'content' => $content,
                        'linkman' => $linkman,
                        'email' => $email,
                        'qq' => $qq,
                        'phone' => $phone,
                        'mappoint' => $mappoint,
                        'address' => $address,
                        'enddate' => $enddate
                );
                $res = editInfo($items, $_POST['cus_value'], $id);
                $res ? $msg="恭喜您，修改成功！" : $msg="抱歉修改失败，请与客服联系。";
                $link = "view.php?id=$id";
                showmsg($msg, $link);
        break;