WooYun.org

//保存设置
    public function doset() {
        $user=M('Users');
        $data=array();
		
		$userdata=$_POST['user'];
        $userdata['nickname']= daddslashes(clean_html(trim($userdata["nickname"])));
		$userdata['provinceid']=intval($userdata['provinceid']);
		$userdata['cityid']=intval($userdata['cityid']);
        $userdata['user_info']= daddslashes(trim(htmlspecialchars($userdata['user_info'])));
        if(!preg_match('/^[0-9a-zA-Z\xe0-\xef\x80-\xbf_-]+$/i',$userdata['nickname'])) {
			echo json_encode(array('res'=>'error','tips'=>L('setting2')));
            exit;
        }
        if (!$userdata['nickname'] || !$userdata['provinceid'] || !$userdata['cityid']) {
            echo json_encode(array('res'=>'error','tips'=>L('setting1')));
            exit;
        }
		if ($userdata['qq'] && !is_numeric($userdata['qq'])) {
            echo json_encode(array('res'=>'error','tips'=>L('qqiserror')));
            exit;
        }
		if ($userdata['msn'] && count(explode('@',$userdata['msn']))==1) {
            echo json_encode(array('res'=>'error','tips'=>L('msniserror')));
            exit;
        }
		//昵称检测
        if ($userdata['nickname'] && $userdata['nickname']!=$this->my['nickname']) {
            if (StrLenW($userdata['nickname'])<=12 && StrLenW($userdata['nickname'])>=3) {
                $newnickname=$user->where("nickname='$userdata[nickname]'")->find();
                if ($newnickname) {
                    echo json_encode(array('res'=>'error','tips'=>L('setting4')));
					exit;
                } else {
                    M('Atusers')->where("atuname='".$this->my['user_name']."'")->setField('atnickname',$userdata['nickname']);
                }
            } else {
                echo json_encode(array('res'=>'error','tips'=>L('setting2')));
				exit;
            }
        }
        $user->where("user_id='".$this->my['user_id']."'")->data($userdata)->save();
		$this->finishprofile();
        echo json_encode(array('res'=>'success','tips'=>L('setting3')));
    }