WooYun.org

$truename=replace_bad_word($truename);
		$introduce=replace_bad_word($introduce);
		$address=replace_bad_word($address);
		if($cityid)
		{
			@extract($db->get_one("SELECT fup AS provinceid FROM {$pre}area WHERE fid='$cityid'"));
		}
		
		$array=array(
			"uid"=>$lfjuid,
			"username"=>$lfjid,
			"email"=>$email,
			"password"=>$password,
			"icon"=>$icon,
			"sex"=>$sex,
			"bday"=>$bday,
			"introduce"=>$introduce,
			"oicq"=>$oicq,
			"msn"=>$msn,
			"homepage"=>$homepage,
			"address"=>$address,
			"postalcode"=>$postalcode,
			"mobphone"=>$mobphone,
			"telephone"=>$telephone,
			"idcard"=>$idcard,
			"truename"=>$truename,
			"provinceid"=>$provinceid,
			"cityid"=>$cityid,
		);
		if($lfjdb[email_yz]&&$lfjdb[email]!=$email){
			if(!$webdb[EditYzEmail]){
				showerr("你不可以再修改邮箱,因为已经审核过了.");
			}else{
				$array[email_yz]=0;
			}
		}
		if($lfjdb[mob_yz]&&$lfjdb[mobphone]!=$mobphone){
			if(!$webdb[EditYzMob]){
				showerr("你不可以再修改手机号码,因为已经审核过了.");
			}else{
				$array[mob_yz]=0;
			}			
		}
		if($lfjdb[idcard_yz]&&($lfjdb[idcard]!=$idcard||$lfjdb[truename]!=$truename)){
			if(!$webdb[EditYzIdcard]){
				showerr("你不可以再修改身份证资料,因为已经审核过了.");
			}else{
				$array[idcard_yz]=0;
			}			
		}	
		$userDB->edit_user($array);

/*过滤不健康的字*/
function replace_bad_word($str){
	global $Limitword;
	@include_once(ROOT_PATH."data/limitword.php");
	foreach( $Limitword AS $old=>$new){
		strlen($old)>2 && $str=str_replace($old,trim($new),$str);
	}
	return $str;
}