Beispiel #1
0
function is_vdvalue($validate)
{
    if ($validate != strtolower(GetCkVdValue())) {
        ResetVdValue();
        return false;
    }
    return true;
}
Beispiel #2
0
     }
     $row = $dsql->GetOne("SELECT * FROM `#@__member_pms` WHERE id='{$id}' AND (fromid='{$cfg_ml->M_ID}' OR toid='{$cfg_ml->M_ID}')");
     if (!is_array($row)) {
         ShowMsg('对不起,你指定的消息不存在或你没权限查看!', '-1');
         exit;
     }
     $dsql->ExecuteNoneQuery("UPDATE `#@__member_pms` SET hasview=1 WHERE id='{$id}' AND folder='inbox' AND toid='{$cfg_ml->M_ID}'");
     $dsql->ExecuteNoneQuery("UPDATE `#@__member_pms` SET hasview=1 WHERE folder='outbox' AND toid='{$cfg_ml->M_ID}'");
     include_once dirname(__FILE__) . '/templets/pm-read.htm';
     exit;
 } else {
     if ($dopost == 'savesend') {
         $svali = GetCkVdValue();
         if (preg_match("/5/", $safe_gdopen)) {
             if (strtolower($vdcode) != $svali || $svali == '') {
                 ResetVdValue();
                 ShowMsg('验证码错误!', '-1');
                 exit;
             }
         }
         $faqkey = isset($faqkey) && is_numeric($faqkey) ? $faqkey : 0;
         if ($safe_faq_msg == 1) {
             if ($safefaqs[$faqkey]['answer'] != $safeanswer || $safeanswer == '') {
                 ShowMsg('验证问题答案错误', '-1');
                 exit;
             }
         }
         if ($subject == '') {
             ShowMsg("请填写信息标题!", "-1");
             exit;
         }
Beispiel #3
0
 function ac_edit_save()
 {
     $data['askaid'] = request('askaid', '');
     $data['askaid'] = is_numeric($data['askaid']) ? $data['askaid'] : 0;
     $data['title'] = request('title', '');
     $data['content'] = request('content', '');
     $data['faqkey'] = request('faqkey', '');
     $data['vdcode'] = request('vdcode', '');
     $data['safeanswer'] = request('safeanswer', '');
     //获取问题的基本信息
     $question = $this->question->get_one("id='{$data['askaid']}'");
     //对问题进行判断
     if ($question['uid'] != $this->cfg_ml->M_ID && $this->cfg_ml->isAdmin != 1) {
         ShowMsg('非法操作,请返回', '-1');
         exit;
     } else {
         if ($question['expiredtime'] < $GLOBALS['cfg_ask_timestamp'] && $this->cfg_ml->isAdmin != 1) {
             ShowMsg('问题已经过期', '-1');
             exit;
         } else {
             if ($question['status'] == 1 && $this->cfg_ml->isAdmin != 1) {
                 ShowMsg('问题已经解决,不能被修改!', '-1');
                 exit;
             }
         }
     }
     //检查问题名称
     if ($data['title'] == '') {
         ShowMsg('问题名称不能为空');
         exit;
     } else {
         if (strlen($data['title']) > 80) {
             ShowMsg('问题不能大于80字节');
             exit;
         } else {
             if (strlen($data['title']) < 8) {
                 ShowMsg('问题不能小于8字节');
                 exit;
             }
         }
     }
     //检查问题内容
     if (empty($data['content'])) {
         ShowMsg('问题说明内容不能为空!');
         exit;
     }
     //检查验证码
     if (preg_match("#7#", $GLOBALS['safe_gdopen'])) {
         $svali = GetCkVdValue();
         if (strtolower($data['vdcode']) != $svali || $svali == '') {
             ResetVdValue();
             ShowMsg('验证码错误!', '-1');
             exit;
         }
     }
     //检查验证问题
     $faqkey = isset($data['faqkey']) && is_numeric($data['faqkey']) ? $data['faqkey'] : 0;
     if ($GLOBALS['gdfaq_ask'] == 'Y') {
         global $safefaqs;
         if ($safefaqs[$faqkey]['answer'] != $data['safeanswer'] || $data['safeanswer'] == '') {
             ShowMsg('验证问题答案错误', '-1');
             exit;
         }
     }
     $data['title'] = preg_replace("#{$GLOBALS['cfg_replacestr']}#", "***", HtmlReplace($data['title'], 1));
     $data['content'] = preg_replace("#{$GLOBALS['cfg_replacestr']}#", "***", HtmlReplace($data['content'], -1));
     //保存修改问题
     $set = "title = '{$data['title']}',content = '{$data['content']}'";
     $wheresql = "id ='{$data['askaid']}'";
     $rs = $this->question->update_ask($set, $wheresql);
     if ($rs) {
         //保存附加信息
         if ($addition == 1) {
             $this->question->update_additions($addi, $data['askaid']);
         }
         clearmyaddon($data['askaid'], $data['title']);
         ShowMsg("编辑成功!", "?ct=question&askaid=" . $data['askaid']);
         exit;
     } else {
         ShowMsg("编辑失败!", "?ct=question&askaid=" . $data['askaid']);
         exit;
     }
 }