WooYun.org

function jtbc_cms_module_manage_usersetdisp()
{
  $tbackurl = $_GET['backurl'];
  global $conn;
  global $ndatabase, $nidfield, $nfpre;
  global $nusername;
  $tsqlstr = "select * from $ndatabase where " . ii_cfname('username') . "='$nusername'";
  $trs = ii_conn_query($tsqlstr, $conn);
  $trs = ii_conn_fetch_array($trs);
  if ($trs)
  {
    global $face_width_max, $face_height_max;
    $tface_width = ii_get_num($_POST['face_width']);
    $tface_height = ii_get_num($_POST['face_height']);
    if ($tface_width > $face_width_max) $tface_width = $face_width_max;
    if ($tface_height > $face_height_max) $tface_height = $face_height_max;
    $tsqlstr = "update $ndatabase set
    " . ii_cfname('face') . "=" . ii_get_num($_POST['face']) . ",
    " . ii_cfname('face_u') . "=" . ii_get_num($_POST['face_u']) . ",
    " . ii_cfname('face_url') . "='" . ii_left(ii_cstr($_POST['face_url']), 255) . "',//这里是主要的问题所在
    " . ii_cfname('face_width') . "=$tface_width,
    " . ii_cfname('face_height') . "=$tface_height,
    " . ii_cfname('sign') . "='" . ii_left(ii_cstr($_POST['sign']), 100) . "'
    where " . ii_cfname('username') . "='$nusername'";
    $trs = ii_conn_query($tsqlstr, $conn);
    if ($trs) mm_imessage(ii_itake('global.lng_public.edit_succeed', 'lng'), $tbackurl);
    else mm_client_alert(ii_itake('global.lng_public.sudd', 'lng'), $tbackurl);
  }
  else mm_client_alert(ii_itake('global.lng_public.sudd', 'lng'), $tbackurl);
}

function ii_cstr($strers)
{
  if (get_magic_quotes_gpc()) return $strers;
  else return addslashes($strers);
}

function ii_left($strers, $len, $type = 0)
{
  if (!(ii_isnull($strers)))
  {
    if ($type == 0) return mb_substr($strers, 0, $len, CHARSET);
    else return substr($strers, 0, $len);
  }
}