WooYun.org

function sava_ajaxresume_action()
	{
		$data['uid']=(int)$_POST['uid'];//邀请面试人的uid
		$data['title']='面试邀请';
		$data['content']=iconv("utf-8","gbk",$_POST['content']);//邀请内容
		$data['fid']=$this->uid;
		$data['datetime']=time();
		$info['content']=$data['content'];
		$info['jobname']=iconv("utf-8","gbk",$_POST['jobname']);//邀请面试的职位
		$info['username']=iconv("utf-8","gbk",$_POST['username']);
        $p_uid=(int)$_POST['uid'];
		$black=$this->obj->DB_select_once("blacklist","`p_uid`='".$p_uid."' and `c_uid`='".$this->uid."'");//查询面试人是不是在自己公司的黑名单
		if(!empty($black))
		{
			$arr['status']=8;
			echo json_encode($arr);die;
		}
		$black=$this->obj->DB_select_once("blacklist","`c_uid`='".$p_uid."' and `p_uid`='".$this->uid."'");//查询公司在不在面试人的黑名单
		if(!empty($black))
		{
			$arr['status']=9;
			echo json_encode($arr);die;
		}
		if(!$this->uid || !$this->username || $_COOKIE['usertype']!=2)//公司的uid，username都有值$usertype=2
		{
			$arr['status']=0;
			echo json_encode($arr);die;
		}else{
$umessage = $this->obj->DB_select_once("userid_msg","`uid`='".$p_uid."' AND `fid`='".$this->uid."'");//查询里面无
			if(is_array($umessage))
			{
			 	$arr['status']=7;
			}else{
                               ：
                               ：//前面条件满足才能发送面试邀请
                         }