WooYun.org

source/cp_clbum.php


} elseif($_GET['op'] == 'editpic') {


	


	$managealbum = checkperm('managealbum');


	include_once(S_ROOT.'./source/function_bbcode.php');


	


	if($albumid > 0) {


		$query = $_SGLOBAL['db']->query("SELECT * FROM ".tname('album')." WHERE albumid='$albumid'");


		if(!$album = $_SGLOBAL['db']->fetch_array($query)) {


			showmessage('no_privilege');


		}


		


		if($album['uid'] != $_SGLOBAL['supe_uid'] && !$managealbum) {


			showmessage('no_privilege');


		}


	}


	


	if(submitcheck('editpicsubmit')) {


		if($_GET['subop'] == 'delete') {


			//删除


			$updates = $deleteids = array();


			foreach ($_POST['title'] as $picid => $value) {


				if(empty($_POST['ids'][$picid])) {


					$title = getstr($value, 150, 1, 1, 1);


					


					$wherearr = array('picid'=>$picid);


					if(!$managealbum) $wherearr['uid']  = $_SGLOBAL['supe_uid'];//自己


					


					updatetable('pic', array('title'=>$title), $wherearr);


				} else {


					$deleteids[$picid] = $picid;


				}


			}


			if($deleteids) {


				include_once(S_ROOT.'./source/function_delete.php');


				deletepics($deleteids);


			}


			


		} elseif($_GET['subop'] == 'update') {


			


			foreach ($_POST['title'] as $picid => $value) {


				$title = getstr($value, 150, 1, 1, 1);//


				//echo 2222222;exit();


				$wherearr = array('picid'=>$picid);//这里可以看到KEY没有过滤~~


				if(!$managealbum) $wherearr['uid']  = $_SGLOBAL['supe_uid'];//自己





				updatetable('pic', array('title'=>$title), $wherearr);


			}