WooYun.org

elseif($act =='check_usname')
{
	require_once(QISHI_ROOT_PATH.'include/fun_user.php');
	$usname=trim($_POST['usname']);
	
	if (strcasecmp(QISHI_DBCHARSET,"utf8")!=0)
	{
	$usname=iconv("utf-8",QISHI_DBCHARSET,$usname);
	}
	$user=get_user_inusername($usname);
 	empty($user)?exit("true"):exit("false");
}

function get_user_inusername($username)
{
	global $db;
	$sql = "select * from ".table('members')." where username = '{$username}' LIMIT 1";
	
	return $db->getone($sql);
}

$user=get_user_inusername($usname);
    var_dump ($user);