WooYun.org

public function userpreview() {
        $username=trim(rawurldecode($this->_post('username')));
        if ($username) {
            parent::init();
            $user = M('Users')->where("user_name='$username'")->find();
            if ($user) {
				if ($user['cityid']) {//用户所在地
					$dtModel=M('District');
					$pdata = $dtModel->where("id='$user[cityid]'")->find();
					$pdata2 = $dtModel->where("id='$pdata[upid]'")->find();
					$user['live_city']=$pdata2['name'].' '.$pdata['name'];
				}
                $isfriend=D('Friend')->followstatus($user['user_id'],$this->my['user_id']);