WooYun.org

public function send_newmail() {


		$_username = param::get_cookie('_regusername');


		$_userid = param::get_cookie('_reguserid');


		$_ssouid = param::get_cookie('_reguseruid');


		$newemail = $_GET['newemail'];





		if($newemail==''){//邮箱为空，直接返回错误


			return '2';


		}


		$this->_init_phpsso();


		$status = $this->client->ps_checkemail($newemail);


		if($status=='-5'){//邮箱被占用


			exit('-1');


		}


		if ($status==-1) {


			$status = $this->client->ps_get_member_info($newemail, 3);


			if($status) {


				$status = unserialize($status);	//接口返回序列化，进行判断


				if (!isset($status['uid']) || $status['uid'] != intval($_ssouid)) {


					exit('-1');


				}


			} else {


				exit('-1');


			}


		}


		//验证邮箱格式


		pc_base::load_sys_func('mail');


		$code = sys_auth($_userid.'|'.microtime(true), 'ENCODE', get_auth_key('email'));


		$url = APP_PATH."index.php?m=member&c=index&a=register&code=$code&verify=1";


		


		//读取配置获取验证信息


		$member_setting = getcache('member_setting');


		$message = $member_setting['registerverifymessage'];


		$message = str_replace(array('{click}','{url}','{username}','{email}','{password}'), array('<a href="'.$url.'">'.L('please_click').'</a>',$url,$_username,$newemail,$password), $message);


		


 		if(sendmail($newemail, L('reg_verify_email'), $message)){


			//更新新的邮箱，用来验证


 			$this->db->update(array('email'=>$newemail), array('userid'=>$_userid));


			$this->client->ps_member_edit($_username, $newemail, '', '', $_ssouid);


			$return = '1';


		}else{


			$return = '2';


		}


		echo $return;


   	}

public static function get_cookie($var, $default = '') {


		$var = pc_base::load_config('system','cookie_pre').$var;


		$value = isset($_COOKIE[$var]) ? sys_auth($_COOKIE[$var], 'DECODE') : $default;


		if(in_array($var,array('_userid','userid','siteid','_groupid','_roleid'))) {


			$value = intval($value);


		} elseif(in_array($var,array('_username','username','_nickname','admin_username','sys_lang'))) { //  site_model auth


			$value = safe_replace($value);


		}


		return $value;


	}