コード例 #1
0
ファイル: save-project.php プロジェクト: mtpkiss/phpMyXSS
    foreach ($modid as $modid_item) {
        if (isset($_POST["mod_" . $modid_item])) {
            $var = $_POST["mod_" . $modid_item];
            if (is_array($var)) {
                foreach ($var as $var_item) {
                    if (isset($_POST["mod_" . $modid_item . "_" . $var_item])) {
                        $val = $_POST["mod_" . $modid_item . "_" . $var_item];
                        $modconfig[] = array($modid_item, $var_item, $val);
                    }
                }
            } else {
                if (isset($_POST["mod_" . $modid_item . "_" . $var])) {
                    $val = $_POST["mod_" . $modid_item . "_" . $var];
                    $modconfig[] = array($modid_item, $var, $val);
                }
            }
        }
    }
}
if ($id == "" || $title == "" || !in_array($status, $allow_optionStatus) || !in_array($protect, $allow_optionProtect) || !in_array($mailAlert, $allow_optionMail)) {
    die("Error: Something you input is invalid.");
}
$pmxProj = new pmxProject($title, $desc, $status, $protect, $mailAlert, $mail, $comments, $modid, $modconfig);
if ($pmxProj->isExistID($id) == FALSE) {
    die("Error: Project id is invalid.");
}
if ($pmxProj->updateProj($id) == TRUE) {
    echo "Success: You have updated project \"" . esc_html($title) . "\" successful";
} else {
    echo "Error: Sorry. We are fail to update the project \"" . esc_html($title) . "\".";
}