WooYun.org

function save_action(){
		if($_POST['submit']){
			$eid=(int)$_POST['eid'];
			$data['doc']=str_replace("&","&",html_entity_decode($_POST['doc'],ENT_QUOTES,"GB2312"));
			$_POST['lastupdate']=mktime();
			$_POST['integrity']=100;
			unset($_POST['eid']);
			unset($_POST['submit']);
			unset($_POST['doc']);
			if(!$eid){
				$num=$this->obj->DB_select_num("resume_expect","`uid`='".$this->uid."'");
				if($num>=$this->config['user_number']&&$_GET['e']==''){
					$this->ACT_msg("index.php?c=resume","你的简历数已经超过系统设置的简历数了");
				}
				$_POST['doc']='1';
				$_POST['uid']=(int)$this->uid;
				$_POST['defaults']=$num<=0?1:0;
				$nid=$this->obj->insert_into("resume_expect",$_POST);
				$resume = $this->obj->DB_select_once("resume","`uid`='".$this->uid."'","`name`,`edu`,`exp`,`sex`,`birthday`,`idcard_status`,`status`,`r_status`");
				
				$this->obj->update_once("resume_expect",array(
						"edu"=>$resume['edu'],
						"exp"=>$resume['exp'],
						"uname"=>$resume['name'],
						"sex"=>$resume['sex'],
						"birthday"=>$resume['birthday'],
						"idcard_status"=>$resume['idcard_status'],
						"status"=>$resume['status'],
						"r_status"=>$resume['r_status'],
						"photo"=>$resume['photo']
						),array('uid'=>$this->uid));
				$data['eid']=(int)$nid;
				$data['uid']=(int)$this->uid;
				$nid2=$this->obj->insert_into("resume_doc",$data);
				if($nid2){
					if($num==0){
						$this->obj->update_once('resume',array('def_job'=>$nid),array('uid'=>$this->uid));
 					}
					$nid2=$this->obj->DB_update_all("member_statis","`resume_num`=`resume_num`+1","uid='".$this->uid."'");
				}
				if($nid2)
				{
					$this->obj->member_log("添加粘贴简历",2,1);
					$this->ACT_layer_msg("添加成功！",9,"index.php?c=resume");
				}else{
					$this->ACT_layer_msg("添加失败！",8,"index.php?c=resume");
				}
			}else{
				$_POST['height_status']='0';
				$this->obj->update_once("resume_expect",$_POST,array("id"=>$eid));//未对用户权限进行判断
				$nid=$this->obj->update_once("resume_doc",$data,array("eid"=>$eid));//未对用户权限进行判断
				if($nid)
				{
					$this->obj->member_log("更新粘贴简历",2,2);
					$this->ACT_layer_msg("更新成功！",9,"index.php?c=resume");
				}else{
					$this->ACT_layer_msg("更新失败！",8,"index.php?c=resume");
				}
 			}
		}
	}