WooYun.org

include_once("kernel/eidolon.class.php");
$eidolon=new Eidolon("templets/userinfo.html");
include_once("kernel/member.class.php");
$member=new Member();
if($res=$member->searchByName($_GET["username"],0,""))
{
	foreach($res as $v)
	{
		extract($v,EXTR_OVERWRITE);
	}
}
$eidolon->parseBlock("_main");
$eidolon->showBlock("_main");

$res=$member->searchByName($_GET["username"],0,""))

function searchByName($key,$mo,$order)
	{
			$where="";	
			$where.=($this->role_id>0)?" AND role_id=".($this->role_id - 1):"";
			$where.=($this->mg_id>0)? " AND members.mg_id=".$this->mg_id:"";
			if($order!="member_name" && $order !="member_reg_date" && $order != "member_log_date" && $order != "role_id")
			{
				$order="member_id";
			}
			if($key=="")
			{
				$sql= "SELECT * FROM members LEFT JOIN member_groups ON members.mg_id=member_groups.mg_id WHERE 1=1 ".$where." ORDER BY '".$order."' DESC  LIMIT ".$this->getLimit();;
			}			
			else if($mo==1)
			{
					$sql= "SELECT * FROM members LEFT JOIN member_groups ON members.mg_id=member_groups.mg_id WHERE member_name LIKE '%".$key."%' ".$where." ORDER BY '".$order."' DESC  LIMIT ".$this->getLimit();;
			}
			else
			{
					$sql="SELECT * FROM members LEFT JOIN member_groups ON members.mg_id=member_groups.mg_id WHERE member_name='".$key."' ".$where." ORDER BY '".$order."' DESC  LIMIT ".$this->getLimit();
			}//echo $sql;
			return $this->find($sql);
	}

$sql="SELECT * FROM members LEFT JOIN member_groups ON members.mg_id=member_groups.mg_id WHERE member_name='".$key."' ".$where." ORDER BY '".$order."' DESC  LIMIT ".$this->getLimit();