WooYun.org

public function all() {
		//$this->userIsLogin ();
		$_Obj = M($this->objName);
		$categoryObj = M("category");
		$_Obj->pageSize = 20;
		$where = "1=1";
		$key = StringUtil::GetSQLValueString($_POST['key']);
		$cid = intval($_GET['cid']);
		if ($key != "") {
			$where .= " and title like '$key%'";
		}
		if (!empty($cid) && $cid != "") {
			$where .= " and classid = " . $cid;
		}
		if ($_GET["type"] == "user") {
			$where .= " and uid = " . $_COOKIE['userId'];
		}
		if (isset($_GET['yz'])) {
			$where .= " AND yz =".$_GET['yz'];
		}
		if (isset($_GET['levels'])) {
			$where .= " AND levels =".$_GET['levels'];
		}
		if (isset($_GET['special'])) {
			$where .= " AND special =".$_GET['special'];
		}
		if (isset($_GET['top'])) {
			$where .= " AND top =".$_GET['top'];
		}
		if (isset($_GET['flashpic'])) {
			$where .= " AND flashpic =".$_GET['flashpic'];
		}
		if (isset($_GET['isphoto'])) {
			$where .= " AND isphoto =".$_GET['isphoto'];
		}
		$_Obj->setSortId();
		$orderBy = $_GET['sortId'];
		$_objAry = $_Obj->where($where)->orderby("id ".$orderBy)->getList();
		$this->setValue("categoryObj", $categoryObj);
		$this->setValue("objAry", $_objAry);
		$this->setValue("Obj", $_Obj);
		$this->setValue("action", "list");
		$this->forward("user/newsList.html");
	}