WooYun.org

if($step==2){
	if(!$psid){
		showerr('请选择一个图集!');
	}
	$ck=0;
	
	foreach($photoDB[url] AS $key=>$value){ //对$photoDB[url]数组循环出来
		if(!eregi("\.(gif|jpg|jpeg|png|bmp)$",$value)){
			delete_attachment($uid,tempdir($value));
			continue;
		}
	
		$picpath = "homepage/pic/".ceil($uid/1000)."/";
		$picurl = $picpath.basename($value);
	
		move_attachment($uid,tempdir($value),$picpath);	//图片转移目录与加水印
		if(!is_file(ROOT_PATH."$webdb[updir]/$picurl")){
			$picurl=$value;
		}
		
		$Newpicpath=ROOT_PATH."$webdb[updir]/{$picurl}.gif";
		gdpic(ROOT_PATH."$webdb[updir]/$picurl",$Newpicpath,150,150);
		if(!is_file($Newpicpath)){
			copy(ROOT_PATH."$webdb[updir]/{$picurl}",$Newpicpath);
		}
		$title = filtrate($photoDB[name][$key]);//刚才是$photoDB[url] 现在是photoDB[name] 
所以这个 photoDB[name] 我们就可以不用提交数组了 提交一个字符串。
所以又是截取字符了。
用filtrate处理了一下 不过关系不大
		$title = get_word($title,32);//这里截取32个字符 这里不影响
	
		$db->query("INSERT INTO `{$_pre}pic` (`psid` , `uid` , `username` ,  `title` , `url` , `level` , `yz` , `posttime` , `isfm` , `orderlist`  ) VALUES ('$psid', '$uid', '$lfjid', '$title', '$picurl', '0', '1', '$timestamp', '0', '0')");// 把$title 带入查询 在$title后的$picurl 是
	$picurl = $picpath.basename($value); 数组中循环中的value 限制了必须为jpg结尾 不用考虑 注释掉就行 basename 无影响
		$ck++;
	}

function join_set(){
	extract($GLOBALS); //这里我们直接创建GLOBALS 然后变量覆盖掉$_pre
	global $address_select,$rsdb,$listdb;
	$address_select = '';/*
	if(!is_table("{$_pre}address")){
		$db->query("CREATE TABLE `{$_pre}address` AS ( SELECT * FROM `{$_pre}content_2`);");
		$db->query("ALTER TABLE `{$_pre}address` ADD PRIMARY KEY ( `rid` );");
		$db->query("ALTER TABLE `{$_pre}address` CHANGE `rid` `rid` MEDIUMINT( 7 ) NOT NULL AUTO_INCREMENT ;");		
		$db->query("ALTER TABLE `{$_pre}address` ADD INDEX ( `uid` );");
		$db->query("TRUNCATE TABLE `{$_pre}address`;");
		$db->query("ALTER TABLE `{$_pre}address` DROP `id` ,DROP `fid` ,DROP `content` ,DROP `order_sendtype` ,DROP `order_paytype` ;");
	}*/
	if($job!='edit'){
		$rsdb[order_username] = $lfjdb[truename];
		$rsdb[order_phone] = $lfjdb[telephone];
		$rsdb[order_mobphone] = $lfjdb[mobphone];
		$rsdb[order_email] = $lfjdb[email];
		$rsdb[order_qq] = $lfjdb[oicq];
		$rsdb[order_postcode] = $lfjdb[postalcode];
		$rsdb[order_address] = $lfjdb[address];
  
		$query = $db->query("SELECT * FROM `{$_pre}address` WHERE uid='$lfjuid'");
		while($rs = $db->fetch_array($query)){
			$address_select.="<option value='$rs[rid]'>地址:{$rs[order_address]} 联系人:{$rs[order_username]} 电话:{$rs[order_mobphone]}</option>";
			
		}