program/axis/receive/content.php

这里只显示每个文件的开头 60 行。登录后可以解锁完整代码。

微信扫码关注公众号，代码整理好后第一时间通知你。

<?php
$axis_id=intval(@$_GET['axis_id']);
if($axis_id==0){exit("{'state':'fail','info':'<span class=fail>axis_id err</span>'}");}

$sql="select `username` from ".self::$table_pre."group where `id`=".$axis_id;
$group=$pdo->query($sql,2)->fetch(2);
if($group['username']!=$_SESSION['monxin']['username']){exit("{'state':'fail','info':'<span class=fail>".self::$language['unauthorized_operation']."</span>'}");}

$time=time();
if($_POST['date']!=''){
	$_POST['date']=get_unixtime($_POST['date'],self::$config['other']['date_style']);
}else{
	$_POST['date']=$time;	
}

if($_POST['icon']!=''){
	if(file_exists('./temp/'.$_POST['icon'])){
		get_date_dir('./program/axis/img/');
		$path='./program/axis/img/'.$_POST['icon'];
		if(copy('./temp/'.$_POST['icon'],$path)){
			safe_unlink('./temp/'.$_POST['icon']);
			$image=new image();
			$image->thumb($path,$path,128,128);
		}else{
			$_POST['icon']='';
		}
	}	
}


$_POST=safe_str($_POST);
if($_POST['content']==''){exit("{'state':'fail','info':'<span class=fail>".self::$language['content'].self::$language['is_null']."</span>'}");}

$id=intval(@$_GET['id']);
if($id>0){
	$sql="select * from ".self::$table_pre."log where `id`='$id'";
	$r=$pdo->query($sql,2)->fetch(2);
	$old=$r;
	if($r['g_id']!=$axis_id){exit("{'state':'fail','info':'<span class=fail>".self::$language['unauthorized_operation']."</span>'}");}
	if($_POST['icon']==''){$_POST['icon']=$r['icon'];}
	
	
	$sql="update ".self::$table_pre."log set `content`='".$_POST['content']."',`date`='".$_POST['date']."',`date_name`='".$_POST['date_name']."',`icon`='".$_POST['icon']."',`bold`='".intval($_POST['bold'])."' where `id`='$id'";
	if($pdo->exec($sql)){
		if($_POST['icon']!=$r['icon']){
			safe_unlink('./program/axis/img/'.$old['icon']);	
		}
		
		$reg='#<img.*src=&\#34;(program/'.self::$config['class_name'].'/attachd/.*)&\#34;.*>#iU';
		$new_imgs=get_match_all($reg,$_POST['content']);
		//var_dump($new_imgs);
		$old_imgs=get_match_all($reg,$r['content']);
		foreach($old_imgs as $v){
			if(!in_array($v,$new_imgs)){
				$sql="select count(id) as c from ".self::$table_pre."log where `content` like '%".$v."%'";
				$r=$pdo->query($sql,2)->fetch(2);
				if($r['c']==0){
					$path=$v;
					safe_unlink($path);
					reg_attachd_img("del",self::$config['class_name'],$path,$pdo);