WooYun.org

if($submit) {
	require DT_ROOT.'/module/'.$module.'/cart.class.php';
	$do = new cart();
	$cart = $do->get();
	if($post) {
		$add = array_map('trim', $add);
		$add['address'] = area_pos($add['areaid'], '').$add['address'];
		$add = array_map('htmlspecialchars', $add);
		$buyer_address = $add['address'];
		if(strlen($buyer_address) < 10) message($L['msg_type_address']);
		$buyer_postcode = $add['postcode'];
		if(strlen($buyer_postcode) < 6) message($L['msg_type_postcode']);
		$buyer_name = $add['truename'];
		if(strlen($buyer_name) < 2) message($L['msg_type_truename']);
		$buyer_mobile = $add['mobile'];
		if(strlen($buyer_mobile) < 11) message($L['msg_type_mobile']);
		$buyer_phone = $add['telephone'];
		$buyer_receive = $add['receive'];
		if(strlen($buyer_receive) < 2) message($L['msg_type_express']);
		$i = 0;
		foreach($post as $k=>$v) {
			$t1 = explode('-', $k);
			$itemid = $t1[0];
			$s1 = $t1[1];
			$s2 = $t1[2];
			$s3 = $t1[3];
			$t = $db->get_one("SELECT * FROM {$table} WHERE itemid=$itemid");