WooYun.org

/**


 * 添加评论的操作


 *


 * @return array 评论添加状态和提示信息


 */


public function addcomment() {


    // 返回结果集默认值


    $return = array (


        'status' => 0,


        'data' => L ( 'PUBLIC_CONCENT_IS_ERROR' )


    );


    // 获取接收数据


    $data = $_POST;


    // 安全过滤


    foreach ( $data as $key => $val ) {


        $data [$key] = t ( $data [$key] );


    }


    // 评论所属与评论内容


    $data ['app'] = $data ['app_name'];


    $data ['table'] = $data ['table_name'];


    $data ['content'] = h ( $data ['content'] );


    // 判断资源是否被删除


    $dao = M ( $data ['table'] );


    $idField = $dao->getPk ();


    $map [$idField] = $data ['row_id'];


    $sourceInfo = $dao->where ( $map )->find ();





    if (! $sourceInfo) {


        $return ['status'] = 0;


        $return ['data'] = '内容已被删除，评论失败';


        exit ( json_encode ( $return ) );


    }


    ... ... ... ... ... ...


    // 添加评论操作


    $data ['comment_id'] = model ( 'Comment' )->addComment ( $data );


    if ($data ['comment_id']) {


        $return ['status'] = 1;


        $return ['data'] = $this->parseComment ( $data );





        // 同步到微吧


        if ($data ['app'] == 'weiba')


            $this->_upateToweiba ( $data );





        ... ... ... ... ...


}

// 同步到微吧


if ($data ['app'] == 'weiba')


    $this->_upateToweiba ( $data );

// 同步到微吧


function _upateToweiba($data) {


    $postDetail = D ( 'weiba_post' )->where ( 'feed_id=' . $data ['row_id'] )->find ();


    if (! $postDetail)


        return false;





    ... ... ... ... ...


}

/**


 * t函数用于过滤标签，输出没有html的干净的文本


 * @param string text 文本内容


 * @return string 处理后内容


 */


function t($text){


    $text = nl2br($text);


    $text = real_strip_tags($text);


    $text = addslashes($text);


    $text = trim($text);


    return $text;


}

function real_strip_tags($str, $allowable_tags="") {


    $str = html_entity_decode($str,ENT_QUOTES,'UTF-8');


    return strip_tags($str, $allowable_tags);


}