WooYun.org

public function saveOrUpdate() {
		$this->userIsLogin ();
		$powerObj = M('power');
		$groupObj = M('group');
        $fieldObj = M("field");
		$_Obj = M($this->objName);
		$newsObj = M("content");
		$msgObj = new Msg();
		//栏目发布权限判断
		$userGroupId = $powerObj->getUserGroupId();
		$groupObj->load($userGroupId);
		$postCategoryAry = explode(",", $groupObj->post);
		$_Obj->classid = $_POST['info']['pid'];
		if (!Authen::isAdmin() && !in_array($_Obj->classid, $postCategoryAry)) {
			$msgObj->addMsg('error', Config::lang("NOTPOWERADDNEWSTHISCATEGORY"));
		}
        
		//表单数据获取
		$_Obj->create();
		$newsObj->create();
.....
$_Obj->haveDoubleRow($msgObj,"title", Config::lang("TITLECANNOTDOUBLE"));

public function create($datas = '') {
        $data = array();
        $data = $datas;
        if (empty($data)) {
            $data = $_POST['info'];
        } elseif (is_object($data)) {
            $data = get_object_vars($data);
        } elseif (!is_array($data)) {
        	$msg = Config::lang("ILLEGALDATA");
            exit($msg);
        }
        if (empty($_POST['info']) && empty($data)) { return false; }
        $fieldsType = $this->types; //字段和默认值
        $fieldsName = $this->fields; //字段和类型
        $formKeyAry = array_keys($data); //post过来的所有$key
        /* @var $key type */
        foreach ($formKeyAry as $key) {
            if (array_key_exists($key, $this->fields)) {
                $val = isset($data[$key]) ? $data[$key] : NULL;
                if (is_scalar($val)) {
                    if (false !== strpos($fieldsType[$key], 'int')) {
                        $val = intval($val);
                    } elseif (false !== strpos($fieldsType[$key], 'float') || false !== strpos($fieldsType[$key], 'double')) {
                        $val = floatval($val);
                    }
                }
                if (!is_null($val)) {
                    $this->$key = StringUtil::new_html_special_chars($val);
                }
                if (($data[$key] == "" || $data[$key] == NULL || $data[$key] === 0) && $fieldsName[$key] != "") {
                    $this->$key = $fieldsName[$key];
                }
            }
        }
        return $this;
    }

public function haveDoubleRow($msgObj,$cloum,$errorMsg) {
    	$sql = "select * from " . $this->table . " where ".$cloum." = '".$this->$cloum."'";
    	$pri = $this->PRI;
    	$rowNum = empty($this->$pri) ? 1 : 2;
    	$ifExists = $this->ifExists($sql,$rowNum);
    	if ($ifExists) {
    		$msgObj->addMsg('error', $errorMsg);
    	}
    	return $ifExists;
    }