WooYun.org

include_once( "inc/utility_all.php" );
include_once( "inc/conn.php" );
include_once( "api/diary.class.php" );
include_once( "E-mobile/func_all.php" );
$diff = $_REQUEST['diff'];
switch ( $diff )
{
				case "reply" :
								$Diary = new diary( );
								$replyinfor = array( );
								$replyinfor['content'] = $_REQUEST['content'];
								$replyinfor['diaryid'] = $_REQUEST['diary_id'];
								$replyinfor['useid'] = $_REQUEST['user_id'];
								$replyinfor['replytime'] = date( "Y-m-d H:i:s", time( ) );
								$check = $Diary->New_Reply_Diary( $y );
								echo "success";
								break;

public function New_Reply_Diary( $info )
				{
								global $connection;
								$sql = "INSERT INTO diary_review \r\n\t              (DIA_ID,USER_ID,DIA_RE_CONTENT,DIA_RE_DATE,DIA_RE_PARENT_ID) \r\n\t\t\t\t  VALUES \r\n\t\t\t\t  (".$info['diaryid'].",'".$info['useid']."','".$info['content']."',\r\n\t\t\t\t\t'".$info['replytime']."',0)\r\n\t\t\t    ";
								exequery( $connection, $sql );
				}