WooYun.org

if($sms_id=$_GET["sms_id"])
{
	include_once("kernel/sms.class.php");
	$sms=new Sms();
	$sms->sms_id=$sms_id;
	if($res=$sms->gets())
	{
		$sms_sender=$res[0]["sms_sender"];
		$sms_subject=$res[0]["sms_subject"];
		$sms_content=nl2br($res[0]["sms_content"]);
		$sms_receiver=$res[0]["sms_receiver"];
	}
}

function gets()
	{
		$where="1=1";
		if($this->sms_id>0)
		{
			$where.=" AND sms_id=".$this->sms_id;
		}
		if($this->sms_sender!="")
		{
			$where.=" AND sms_sender='".$this->sms_sender."'";
		}
		if($this->sms_receiver!="")
		{
			$where.=" AND sms_receiver='".$this->sms_receiver."'";
		}
		if($this->sms_type>0)
		{
			$where.=" AND sms_type=".$this->sms_type;
		}
		$sql="SELECT * FROM sms_box WHERE ".$where." ORDER BY sms_stat,sms_id DESC LIMIT ".$this->getLimit(); //echo $sql;
		return $this->find($sql);
	}