WooYun.org

//#####################@ 订单增加 @#####################//
        case 'add':
                $cart_info = cart_info(unserialize($_c_cart_list));
                $info_list = $cart_info['list'];
                $money = $cart_info['money'];
                if (isset($_p_pesubmit)) {
                        //!count($info_list) && pe_error('购物车商品为空');
                        $order = $db->pe_select('order', array('order by'=>'order_id desc'));
                        substr($order['order_id'], 0 , 6) != date('ymd') && $_p_info['order_id'] = $order_id = date('ymd').'0001';
                        $_p_info['order_productmoney'] = $money['order_productmoney'];
                        $_p_info['order_wlmoney'] = $money['order_wlmoney'];
                        $_p_info['order_money'] = $money['order_money'];
                        $_p_info['order_atime'] = time();
                        $_p_info['user_id'] = $_s_user_id;
                        $_p_info['user_name'] = $_s_user_name;
                        $_p_info['user_address'] = "{$_p_province}{$_p_city}{$_p_info['user_address']}";
                        if ($order_id = $db->pe_insert('order', $_p_info)) {
                                foreach ($info_list as $v) {
                                        $orderdata['product_id'] = $v['product_id'];
                                        $orderdata['product_name'] = $v['product_name'];
                                        $orderdata['product_smoney'] = $v['product_smoney'];
                                        $orderdata['product_num'] = $v['product_num'];
                                        $orderdata['order_id'] = $order_id;
                                        $db->pe_insert('orderdata', $orderdata);
                                        //更新商品库存数量
                                        $db->pe_update('product', array('product_id'=>$v['product_id']), "`product_num`=`product_num`-{$v['product_num']}");
                                }
                                //清空购物车
                                if (pe_login('user')) {
                                        $db->pe_delete('cart', array('user_id'=>$_s_user_id));
                                }
                                else {
                                        setcookie('cart_list', '', 0, '/');
                                }
                                pe_success('订单提交成功，请选择支付方式！', "{$pe['host_root']}index.php?mod=order&act=pay&id={$order_id}");
                        }
                        else {
                                pe_error('订单提交失败...');
                        }       
                }
                //调用用户个人信息里的收货地址
                $info = $db->pe_select('user', array('user_id'=>$_s_user_id));
                $seo = pe_seo('填写收货信息');
                include(pe_tpl('order_add.html'));
        break;

public function pe_insert($table, $set)
        {
                //处理设置语句
                $sqlset = $this->_doset($set);
                return $this->sql_insert("insert into `".dbpre."{$table}` {$sqlset}");
        }
.........
//处理设置语句
        protected function _doset($set)
        {
                if (is_array($set)) {
                        foreach ($set as $k => $v) {
                                $set_arr[] = "`{$k}` = '{$v}'";
                        }
                        $sqlset = 'set '.implode($set_arr, ' , ');
                }
                else {
                        $sqlset = "set {$set}";
                }
                return $sqlset;
        }
.........
public function sql_insert($sql)
        {
                $this->query($sql);
                if ($insert_id = mysql_insert_id()) {
                        return $insert_id;
                }
                else {
                        $result = mysql_affected_rows();
                        return $result > 0 ? $result : 0;
                }
        }
.........
public function query($sql)
        {
                $this->sql[] = $sql;
                return mysql_query($sql, $this->dbconn);
        }