bbs/bbs.php

这里只显示每个文件的开头 60 行。登录后可以解锁完整代码。

微信扫码关注公众号，代码整理好后第一时间通知你。

<?php 
require '../function/conn.php';
require '../function/function.php';

$action = $_GET["action"];
$S_id = $_GET["S_id"];


if ($action == "add") {
    $B_title = htmlspecialchars($_POST["B_title"]);
    $B_sort = intval($_POST["B_sort"]);
    $B_content = removexss($_POST["B_content"]);

if(xcode($_POST["code"],'DECODE',$_SESSION["CmsCode"],0)!=$_SESSION["CmsCode"] || $_POST["code"]=="" || $_SESSION["CmsCode"]==""){
    box("请重新拖动滑块进行验证！", "back", "error");
}else{
    $_SESSION["CmsCode"]="refresh";
    if($B_title=="" || $B_content==""){
        box("请填全内容后提交！", "back", "error");
    }else{

    if (stripos($B_content, "<script") !== false) {
        box("不支持加入javascript", "back", "error");
    }

    $S_sh = getrx("select * from ".TABLE."bsort where S_id=" . $B_sort,"S_sh");
    if ($S_sh == 1) {
        $B_sh = 0;
    } else {
        $B_sh = 1;
    }

    mysqli_query($conn, "insert into ".TABLE."bbs(B_title,B_content,B_time,B_mid,B_sort,B_sh) values('" . $B_title . "','" . $B_content . "','" . date('Y-m-d H:i:s') . "'," . $_SESSION["M_id"] . "," . $B_sort . "," . $B_sh . ")");
    $sql = "Select * from ".TABLE."bbs where B_del=0 order by B_id desc limit 1";
    $result = mysqli_query($conn, $sql);
    $row = mysqli_fetch_assoc($result);
    if (mysqli_num_rows($result) > 0) {
        $B_id = $row["B_id"];
    }
    if ($B_sh == 1) {
        box("发布成功！", "item.php?id=" . $B_id, "success");
    } else {
        box("发布成功！请等待审核", "./", "success");
    }

}
}
}


$_SESSION["from"] = $C_dir . "bbs/bbs.php?S_id=" . $S_id;
$sql = "Select * from ".TABLE."slide order by S_id desc limit 1";
$result = mysqli_query($conn, $sql);
$row = mysqli_fetch_assoc($result);
if (mysqli_num_rows($result) > 0) {
    if ($C_memberbg == "" || is_null($C_memberbg)) {
        $S_pic = $row["S_pic"];
    } else {
        $S_pic = $C_memberbg;
    }