WooYun.org

//判断用户是否锁定，锁定则不许操作
$sql ="select locked from $t_users where user_id=$user_id";
$row = $dbo->getRow($sql);
if($row['locked']==1){
	session_destroy();
	trigger_error($m_langpackage->m_user_locked);//非法操作
}
if(empty($_POST)){
	$gid = intval(get_args('id'));
}else{
	$gid=get_args('gid');
	if (!$gid){
		action_return(1,$m_langpackage->m_del_select,'modules.php?app=user_guestbook');
	}
	$gid=implode(',',$gid);//如果是数组..就直接过来了...
}
$sql="select user_id from $t_shop_guestbook where gid=$gid";
//echo $sql;
$row=$dbo->getRow($sql);
if($row['user_id']!=$user_id){
	action_return(0,$m_langpackage->m_not_del,'-1');
}
$del = del_guestbook($dbo,$t_shop_guestbook,$gid,$user_id);
if($del) {
	action_return(1,$m_langpackage->m_del_success);
} else {
	action_return(0,$m_langpackage->m_del_fail,'-1');
}
exit;
?>