WooYun.org

public function edit() {


		$this->email = isset($this->data['email']) ? $this->data['email'] : '';


		$this->uid = isset($this->data['uid']) ? $this->data['uid'] : '';





		$userinfo = $this->getuserinfo(1);


		


		if (isset($this->data['password']) && !empty($this->data['password'])) {


			$this->password = create_password($this->data['password'], $userinfo['random']);


		}


		


		$this->random = !empty($this->data['random']) ? $this->data['random'] : $userinfo['random'];


		if (isset($this->data['newpassword']) && !empty($this->data['newpassword'])) {


			$this->newpassword = create_password($this->data['newpassword'], $this->random);


		}





		if ($userinfo == -1) {


			exit('-1');


		}





		if (isset($this->password) && !empty($this->password) && $userinfo['password'] != $this->password) {


			exit('-2');


		}





		if ($this->email && $userinfo['email'] != $this->email) {


			if($this->checkemail(1) == -1) exit('-3');


		}	


		


		$data = array();


		$data['appname'] = $this->applist[$this->appid]['name'];


		


		if (!empty($this->email) && $userinfo['email'] != $this->email) {


			$data['email'] = $this->email;


		}





		if (isset($this->newpassword) && $userinfo['password'] != $this->newpassword) {


			$data['password'] = $this->newpassword;


			$data['random'] = $this->random;


		}





		if (!empty($data)) {


			


			//ucenter部份


			if ($this->config['ucuse']) {


				pc_base::load_config('uc_config');


				require_once PHPCMS_PATH.'api/uc_client/client.php';


				$r = uc_user_edit($userinfo['username'], '', (isset($this->data['newpassword']) && !empty($this->data['newpassword']) ? $this->data['newpassword'] : ''), $data['email'],1);


				if ($r != 1) {


				 //{-1:用户不存在;-2:旧密码错误;-3:email已经存在 ;1:成功;0:未作修改}


					switch ($r) {


						case '-1':


							exit('-2');


						break;


						case '0':				


						case '-4':						


						case '-5':						


						case '-6':


						case '-7':


						case '-8':


							exit('0');


						break;


					}


				}


			}


			if (empty($data['email'])) unset($data['email']);


		


			/*插入消息队列*/


			$noticedata = $data;


			$noticedata['uid'] = $userinfo['uid'];


			messagequeue::add('member_edit', $noticedata);


			if($this->username) {


				$res = $this->db->update($data, array('username'=>$this->username));


			} else {


				$res = $this->db->update($data, array('uid'=>$this->uid));


			}


			exit("$res");


		} else {


			exit('0');


		}


	}

uid=1&newpassword=admin123456

uid=1&email=123'