WooYun.org

/**


     * 提交申请认证


     * @return void


     */


    public function doAuthenticate(){


    	$verifyInfo = D('user_verified')->where('uid='.$this->mid)->find();      


        $data['usergroup_id'] = intval($_POST['usergroup_id']);


        if(!$data['usergroup_id']) $data['usergroup_id'] = 5;


       	$data['company'] = t($_POST['company']);	


        $data['realname'] = t($_POST['realname']);


        $data['idcard'] = t($_POST['idcard']);


        $data['phone'] = t($_POST['phone']);


        $data['reason'] = t($_POST['reason']);


        //$data['info'] = t($_POST['info']);


        $data['attach_id'] = t($_POST['attach_ids']);//attach_ids通过t函数过滤


        if(D('user_verified_category')->where('pid='.$data['usergroup_id'])->find()){


        	$data['user_verified_category_id'] = intval($_POST['verifiedCategory']);


    	}else{


    		$data['user_verified_category_id'] = 0;


    	}


        $Regx1 = '/^[0-9]*$/';


        $Regx2 = '/^[A-Za-z0-9]*$/';


        $Regx3 = '/^[A-Za-z|\x{4e00}-\x{9fa5}]+$/u';


......


preg_match_all('/./us', $data['reason'], $matchs);   //一个汉字也为一个字符


        if(count($matchs[0])>140){


        	//$this->error('认证理由不能超过140个字符');	


        	echo '认证理由不能超过140个字符';exit;


        }


        // preg_match_all('/./us', $data['info'], $match);   //一个汉字也为一个字符


        // if(count($match[0])>140){


        // 	$this->error('认证资料不能超过140个字符');	


        // }       


    	if($verifyInfo){


    		$data['verified'] = 0;


    		$res = D('user_verified')->where('uid='.$verifyInfo['uid'])->save($data);//data数据进入数据库


    	}else{


    		$data['uid'] = $this->mid; 


    		$res = D('user_verified')->add($data);


    	}


        if($res){


        	//echo '1';


        	model('Notify')->sendNotify($this->mid,'public_account_doAuthenticate');


        	$touid = D('user_group_link')->where('user_group_id=1')->field('uid')->findAll();


			foreach($touid as $k=>$v){


				model('Notify')->sendNotify($v['uid'], 'verify_audit');


			}


        	//return $this->ajaxReturn(null, '申请成功，请等待审核', 1);


        	echo '1';


        }else{


        	//$this->error("申请失败");


        	echo '申请失败';exit;


        }


    }

/**


     * 申请认证


     * @return void


     */


    public function authenticate(){


    	$auType = model('UserGroup')->where('is_authenticate=1')->findall();


    	$this->assign('auType', $auType);


    	$verifyInfo = D('user_verified')->where('uid='.$this->mid)->find();


    	if($verifyInfo['attach_id']){


			  $a = explode('|', $verifyInfo['attach_id']);


			  foreach($a as $key=>$val){


			  	if($val !== "") {


			  		$attachInfo = D('attach')->where("attach_id=$a[$key]")->find();//attach_id在这里进入数据库


			  		$verifyInfo['attachment'] .= $attachInfo['name'].'&nbsp;<a href="'.getImageUrl($attachInfo['save_path'].$attachInfo['save_name']).'" target="_blank">下载</a><br />';


			  	}


			  }


		}

/**


 * t函数用于过滤标签，输出没有html的干净的文本


 * @param string text 文本内容


 * @return string 处理后内容


 */


function t($text){


    $text = nl2br($text);


    $text = real_strip_tags($text);


    $text = addslashes($text);


    $text = trim($text);


    return $text;


}

function real_strip_tags($str, $allowable_tags="") {


    $str = html_entity_decode($str,ENT_QUOTES,'UTF-8');


    return strip_tags($str, $allowable_tags);


}