function searchgrade($newky)
{
$obj = new mysql_helper();
$conn = $obj->connect();
$sql = "call myproce4({$newky})";
$result = $obj->mysql_selecte($sql, $conn);
$obj->mysql_close($conn);
$result = mysql_fetch_array($result);
return $result;
}
<?php
$obj = new mysql_helper();
$conn = $obj->connect();
$file_name_show = xfs($_POST["xy"]) . '/' . xfs($_POST["xh"]) . '_' . xfs($_POST["xm"]) . '_' . xfs($_POST["xy"]) . '_' . xfs($_POST["bj"]) . '.doc';
$filename = xfs($_POST["xh"]) . '_' . xfs($_POST["xm"]) . '_' . xfs($_POST["xy"]) . '_' . xfs($_POST["bj"]);
$stunumb = xfs($_POST["xh"]);
$listdir = xfs($_POST["xy"]);
$sqlc = "select stunumber from upload_table where stunumber='{$stunumb}'";
@($result = $obj->mysql_selecte($sqlc, $conn));
$result = mysql_fetch_array($result);
if ($result[0] == $stunumb) {
$sqlu = "update upload_table set filename='{$filename}' where stunumber='{$stunumb}'";
@$obj->mysql_do($sqlu, $conn);
} else {
$sql = "insert into upload_table(filename,stunumber,academy) values('{$filename}','{$stunumb}','{$listdir}')";
$sql1 = "insert into zg_grade(stunumber,grade,judeger) values('{$stunumb}','','1')";
$sql2 = "insert into zg_grade(stunumber,grade,judeger) values('{$stunumb}','','2')";
$sql3 = "insert into zg_grade(stunumber,grade,judeger) values('{$stunumb}','','3')";
@$obj->mysql_do($sql, $conn);
@$obj->mysql_do($sql1, $conn);
@$obj->mysql_do($sql2, $conn);
@$obj->mysql_do($sql3, $conn);
}
@$obj->mysql_close($conn);
$POST_MAX_SIZE = ini_get('post_max_size');
$unit = strtoupper(substr($POST_MAX_SIZE, -1));
$multiplier = $unit == 'M' ? 1048576 : ($unit == 'K' ? 1024 : ($unit == 'G' ? 1073741824 : 1));
if ((int) $_SERVER['CONTENT_LENGTH'] > $multiplier * (int) $POST_MAX_SIZE && $POST_MAX_SIZE) {
header("HTTP/1.1 500 Internal Server Error");
echo "POST exceeded maximum allowed size.";
