WooYun.org

application/www/pic.php
function infolist()
	{
	
		$sid 		= trim($_REQUEST["sid"]);//获取参数
		$pageNum 	= trim($_REQUEST["pageNum"]);
		
		$pageSize = 16 ;
		if( $pageNum > 1 )
		{
			$pageNum  = $pageNum;
			$LIMITnum = ceil( ( $pageNum -1 ) * $pageSize );
		}else{
			$pageNum  = 1;
			$LIMITnum = 0 ;
		}
		
		$addsql = '';
		$webtitle = '图片中心';
		//处理你现在的位置
		if( $GLOBALS["WebConfig"]["webhtml"] == 1 )
		{
			$nowaddress = '您的位置：<a href="'.BASE_WEBURL.'/">首页</a> > <a href="'.BASE_WEBURL.'/pic.html">图片中心</a>';
		}else{
			$nowaddress = '您的位置：<a href="'.BASE_WEBURL.'/">首页</a> > <a href="'.BASE_WEBURL.'/?load=pic&act=infolist">图片中心</a>';
		}
		
		//左则自定义内容
		$sqlQuery 	= " SELECT per_id,per_column,per_main  FROM  ".SQL_PREFIX."personal  WHERE per_type = 'piclist' ORDER BY `per_id` ";	
		$infoper 	= $GLOBALS['MySql']  ->  selectOne($sqlQuery);
		$GLOBALS['Getin'] -> getcolumn( $infoper["per_column"] );
		if( $sid > 0 )
		{
			$addsql = " and pis_id = ".$sid;
			$endArray["sid"] = $sid;
		}
		if( $sid != '' )
		{
			$seletsort = " SELECT pis_id,pis_name  FROM ".SQL_PREFIX."picsort WHERE pis_id = ".$sid." or  pis_parentid = ".$sid ;//注入
			$sortInfo  = $GLOBALS['MySql']  ->  selectInfo($seletsort);
			$sinid 	   = '';
			$addpage   = '&sid='.$sid;
			if($sortInfo!='')