PHP sstripslashes函数代码示例

 function parseRequest()
 {
     global $_SITE_CONFIG;
     $request = $_GET ? $_GET : $_POST;
     $module = $request['module'];
     $method = $request['method'];
     $log = $request;
     $log['paramsArray'] = $this->myAddslashes(unserialize($request['params']));
     doLog($log, empty($_POST) ? '$_GET: ' : '$_POST: ');
     $errCode = 0;
     $errMessage = '';
     if ($_SITE_CONFIG['site_close']) {
         $errCode = 2;
         $errMessage = 'Site Closed';
     } elseif (!$_SITE_CONFIG['my_status']) {
         $errCode = 2;
         $errMessage = 'Manyou Service Disabled';
     } elseif (!$_SITE_CONFIG['site_key']) {
         $errCode = 11;
         $errMessage = 'Client SiteKey NOT Exists';
     } elseif (!$_SITE_CONFIG['my_site_key']) {
         $errCode = 12;
         $errMessage = 'My SiteKey NOT Exists';
     } elseif (empty($module) || empty($method)) {
         $errCode = '3';
         $errMessage = 'Invalid Method: ' . $moudle . '.' . $method;
     }
     if (get_magic_quotes_gpc()) {
         $request['params'] = sstripslashes($request['params']);
     }
     $mySign = $module . '|' . $method . '|' . $request['params'] . '|' . $_SITE_CONFIG['my_site_key'];
     $mySign = md5($mySign);
     if ($mySign != $request['sign']) {
         $errCode = '10';
         $errMessage = 'Error Sign';
     }
     if ($errCode) {
         return new APIErrorResponse($errCode, $errMessage);
     }
     $params = unserialize($request['params']);
     $params = $this->myAddslashes($params);
     if ($module == 'Batch' && $method == 'run') {
         $response = array();
         foreach ($params as $param) {
             $response[] = $this->callback($param['module'], $param['method'], $param['params']);
         }
         return new APIResponse($response, 'Batch');
     }
     return $this->callback($module, $method, $params);
 }

 //输入检查
 $_POST['catid'] = intval($_POST['catid']);
 $_POST['customfieldid'] = intval($_POST['customfieldid']);
 $_POST['picid'] = empty($_POST['picid']) ? 0 : intval($_POST['picid']);
 //图文资讯标志
 //检查输入
 $_POST['subject'] = shtmlspecialchars(trim($_POST['subject']));
 //标题支持html
 if (strlen($_POST['subject']) < 2 || strlen($_POST['subject']) > 80) {
     showmessage('space_suject_length_error');
 }
 if (empty($_POST['catid'])) {
     showmessage('admin_func_catid_error');
 }
 //自定义信息
 $setcustomfieldtext = empty($_POST['customfieldtext'][$_POST['customfieldid']]) ? serialize(array()) : addslashes(serialize(shtmlspecialchars(sstripslashes($_POST['customfieldtext'][$_POST['customfieldid']]))));
 //TAG处理
 if (empty($_POST['tagname'])) {
     $_POST['tagname'] = '';
 }
 $tagarr = posttag($_POST['tagname']);
 //构建数据
 $setsqlarr = array('catid' => $_POST['catid'], 'subject' => scensor($_POST['subject'], 1), 'hash' => $_POST['hash'], 'picid' => $_POST['picid']);
 $_SGET['folder'] = checkperm('allowdirectpost') ? 1 : (isset($_SGET['folder']) && intval($_SGET['folder']) == 0 ? 0 : 1);
 //标题样式
 empty($_POST['strong']) ? $_POST['strong'] = '' : ($_POST['strong'] = 1);
 empty($_POST['reply_notify']) ? $_POST['reply_notify'] = 0 : ($_POST['reply_notify'] = intval($_POST['reply_notify']));
 empty($_POST['allowedit']) ? $_POST['allowedit'] = 0 : ($_POST['allowedit'] = intval($_POST['allowedit']));
 empty($_POST['pollid']) ? $_POST['pollid'] = 0 : ($_POST['pollid'] = intval($_POST['pollid']));
 empty($_POST['underline']) ? $_POST['underline'] = '' : ($_POST['underline'] = 1);
 empty($_POST['em']) ? $_POST['em'] = '' : ($_POST['em'] = 1);

//.........这里部分代码省略.........
    $params['operation_list'] = array();
    $params['reply_list'] = array();
    preg_match("/\\[em\\:(\\d+)\\:\\]/s", $params['content'], $ms);
    $mood = empty($ms[1]) ? 0 : intval($ms[1]);
    $message = rawurldecode(getstr($params['content'], 1000, 1, 1, 1, 2));
    preg_match_all("/[@](.*)[(]([\\d]+)[)]\\s*/U", $message, $matches, PREG_SET_ORDER);
    # 加上链接
    foreach ($matches as $value) {
        $TmpString = $value[0];
        $TmpName = $value[1];
        $UserId = $value[2];
        $result = $_SGLOBAL['db']->query("select uid,username,name from " . tname('space') . " where uid={$UserId}");
        if ($rs = $_SGLOBAL['db']->fetch_array($result)) {
            $realname = $rs['name'];
            if (empty($realname)) {
                $realname = $rs['username'];
            }
            $params['department_list'][intval($UserId)] = $realname;
            $ValidValue = getAtName($TmpString, $TmpName, $realname);
            $ValidValue = trim($ValidValue);
            $at_friend = "space.php?uid=" . $UserId;
            if ($ValidValue != false) {
                $message = str_replace($ValidValue, "<a href={$at_friend}>@" . $realname . "</a> ", $message);
                if (!in_array($UserId, $UserIds)) {
                    $UserIds[] = $UserId;
                }
            }
        }
    }
    $message = preg_replace("/\\[em:(\\d+):]/is", "<img src=\"image/face/\\1.gif\" class=\"face\">", $message);
    $message = preg_replace("/\\<br.*?\\>/is", ' ', $message);
    $params['content'] = $message;
    $setarr = array('uid' => $params['uid'], 'username' => $params['uname'], 'dateline' => $_SGLOBAL['timestamp'], 'from' => $params['uid'], 'message' => $message, 'mood' => $mood, 'ip' => getonlineip(), 'fromdevice' => 'web');
    if ($params['device']) {
        $setarr['fromdevice'] = $params['device'];
    }
    if ($params['ip']) {
        $setarr['ip'] = $params['ip'];
    }
    $newdoid = inserttable('doing', $setarr, 1);
    @(include_once S_ROOT . './data/data_creditrule.php');
    $isComplain = TRUE;
    /*if($isComplain && ($_SGLOBAL['member']['credit'] < $_SGLOBAL['creditrule']['complain']['credit'])){ # 如果积分不够
          $isComplain = FALSE;
          $note = cplang('note_complain_credit_failed', array("space.php?do=doing&doid=$newdoid"));
          notification_complain_add($_SGLOBAL['supe_uid'], 'complain', $note);
          $complain_msg = 'note_complain_credit_failed';
      }*/
    # 这部分可能会出错
    foreach ($UserIds as $UserId) {
        if ($isComplain) {
            $UserDept = isDepartment($UserId, 1);
            if ($UserDept) {
                $nowtime = time();
                $complain = array('doid' => $newdoid, 'uid' => $params['uid'], 'uname' => $params['uname'], 'atdepartment' => $UserDept['department'], 'atdeptuid' => $UserId, 'from' => $params['uid'], 'atuid' => $UserId, 'atuname' => $UserDept['department'], 'isreply' => 0, 'addtime' => $nowtime, 'dateline' => $nowtime, 'expire' => 0, 'times' => 1, 'issendmsg' => 0, 'message' => $message, 'datatime' => date("Ymd", $nowtime));
                inserttable('complain', $complain, 0);
                $note = cplang('note_complain_buchu', array("space.php?do=complain_item&doid={$newdoid}", date('Y-m-d H:i', $nowtime + 3600 * 24)));
                notification_complain_add($UserId, 'complain', $note);
                $complainOK = TRUE;
            } else {
                $note = cplang('note_doing_at', array("space.php?do=doing&doid={$newdoid}"));
                notification_add($UserId, 'atyou', $note);
            }
        }
    }
    if ($complainOK) {
        $note = cplang('note_complain_user_success', array("space.php?do=complain_item&doid={$newdoid}"));
        notification_complain_add($params['uid'], 'complain', $note);
        $complain_msg = 'note_complain_user_success';
        getreward('complain', 1, $params['uid']);
    }
    if (!$complainOK && $isComplain) {
        if ($UserId == '0000') {
            //系统管理员 虽然并没有什么用
            $note = cplang("您好，您的诉求已发送成功。谢谢您对ihome社区的大力支持!", array("space.php?do=doing&doid={$newdoid}"));
            notification_complain_add($_SGLOBAL['supe_uid'], 'complain', $note);
        } else {
            $note = cplang('note_complain_user_failed', array("space.php?do=doing&doid={$newdoid}"));
            notification_complain_add($_SGLOBAL['supe_uid'], 'complain', $note);
            $complain_msg = 'note_complain_user_failed';
        }
    }
    $feedarr = array('appid' => UC_APPID, 'icon' => 'doing', 'uid' => $params['uid'], 'username' => $params['uname'], 'dateline' => $_SGLOBAL['timestamp'], 'title_template' => cplang('feed_doing_title'), 'title_data' => saddslashes(serialize(sstripslashes(array('message' => $message)))), 'body_template' => '', 'body_data' => '', 'id' => $newdoid, 'idtype' => 'doid', 'fromdevice' => 'web', 'ip' => getonlineip());
    if ($params['device']) {
        $feedarr['fromdevice'] = $params['device'];
    }
    if ($params['ip']) {
        $feedarr['ip'] = $params['ip'];
    }
    $feedarr['hash_template'] = md5($feedarr['title_template'] . "\t" . $feedarr['body_template']);
    //ϲºÃhash
    $feedarr['hash_data'] = md5($feedarr['title_template'] . "\t" . $feedarr['title_data'] . "\t" . $feedarr['body_template'] . "\t" . $feedarr['body_data']);
    //ºÏ²¢hash
    $feedid = inserttable('feed', $feedarr, 1);
    updatestat('doing');
    $setarr = array('note' => $message);
    $reward = getreward('doing', 0);
    updatetable('spacefield', $setarr, array('uid' => $params['uid']));
    return json_encode($params);
}

function notification_add($uid, $type, $note, $returnid=0) {
	global $_SGLOBAL;

	//获取对方的筛选条件
	$tospace = getspace($uid);
	
	//更新我的好友关系热度
	if($_SGLOBAL['supe_uid']) {
		addfriendnum($tospace['uid'], $tospace['username']);
	}
	
	$setarr = array(
		'uid' => $uid,
		'type' => $type,
		'new' => 1,
		'authorid' => $_SGLOBAL['supe_uid'],
		'author' => $_SGLOBAL['supe_username'],
		'note' => addslashes(sstripslashes($note)),
		'dateline' => $_SGLOBAL['timestamp']
	);

	$filter = empty($tospace['privacy']['filter_note'])?array():array_keys($tospace['privacy']['filter_note']);
	if(cknote_uid($setarr, $filter)) {
		//更新用户通知
		$_SGLOBAL['db']->query("UPDATE ".tname('space')." SET notenum=notenum+1 WHERE uid='$uid'");
	
		if($returnid) {
			return inserttable('notification', $setarr, $returnid);
		} else {
			inserttable('notification', $setarr);
		}
	}
}

    //链接数据库
    dbconnect();
} else {
    error_reporting(0);
    set_magic_quotes_runtime(0);
    defined('MAGIC_QUOTES_GPC') || define('MAGIC_QUOTES_GPC', get_magic_quotes_gpc());
    include_once S_ROOT . './config.php';
    include_once S_ROOT . './data/data_config.php';
    include_once S_ROOT . './source/function_common.php';
    //链接数据库
    dbconnect();
    $get = $post = array();
    $code = @$_GET['code'];
    parse_str(authcode($code, 'DECODE', UC_KEY), $get);
    if (MAGIC_QUOTES_GPC) {
        $get = sstripslashes($get);
    }
    if ($_SGLOBAL['timestamp'] - $get['time'] > 3600) {
        exit('Authracation has expiried');
    }
    if (empty($get)) {
        exit('Invalid Request');
    }
    include_once S_ROOT . './uc_client/lib/xml.class.php';
    $post = xml_unserialize(file_get_contents('php://input'));
    if (in_array($get['action'], array('test', 'deleteuser', 'renameuser', 'gettag', 'synlogin', 'synlogout', 'updatepw', 'updatebadwords', 'updatehosts', 'updateapps', 'updateclient', 'updatecredit', 'getcredit', 'getcreditsettings', 'updatecreditsettings', 'addfeed'))) {
        $uc_note = new uc_note();
        echo $uc_note->{$get}['action']($get, $post);
        exit;
    } else {
        exit(API_RETURN_FAILED);

                             $replaces[] = $itemvalue[$key];
                         }
                         $bwzt['related'][$appid]['data'][$itemkey]['html'] = stripslashes(str_replace($searchs, $replaces, $_SGLOBAL['tagtpl']['data'][$appid]['template']));
                     } else {
                         unset($bwzt['related'][$appid]['data'][$itemkey]);
                     }
                 }
             } else {
                 $bwzt['related'][$appid]['data'] = '';
             }
             if (empty($bwzt['related'][$appid]['data'])) {
                 unset($bwzt['related'][$appid]);
             }
         }
     }
     updatetable('bwztfield', array('related' => addslashes(serialize(sstripslashes($bwzt['related']))), 'relatedtime' => $_SGLOBAL['timestamp']), array('bwztid' => $bwzt['bwztid']));
     //更新
 } else {
     $bwzt['related'] = empty($bwzt['related']) ? array() : unserialize($bwzt['related']);
 }
 //作者的其他最新日志
 $otherlist = array();
 $query = $_SGLOBAL['db']->query("SELECT * FROM " . tname('bwzt') . " WHERE uid='{$space['uid']}' ORDER BY dateline DESC LIMIT 0,6");
 while ($value = $_SGLOBAL['db']->fetch_array($query)) {
     if ($value['bwztid'] != $bwzt['bwztid'] && empty($value['friend'])) {
         $otherlist[] = $value;
     }
 }
 //最新的日志
 $newlist = array();
 $query = $_SGLOBAL['db']->query("SELECT * FROM " . tname('bwzt') . " WHERE hot>=3 ORDER BY dateline DESC LIMIT 0,6");

     $rs = $_SGLOBAL['db']->fetch_array($result);
     $realname = $rs['name'];
     //调用检查函数将@后的内容进行验证，为UID对应的姓名相同则返回@与姓名，不相同则继续判断下一个@，没有找到匹配的最终将返回false
     $ValidValue = getAtName($TmpString, $TmpName, $realname);
     $ValidValue = trim($ValidValue);
     $at_friend = "space.php?uid=" . $UserId;
     $Message = str_replace($ValidValue, "<a href={$at_friend}>@" . $realname . "</a> ", $Message);
 }
 //替换表情
 $Message = preg_replace("/\\[em:(\\d+):]/is", "<img src=\"image/face/\\1.gif\" class=\"face\">", $Message);
 $Message = preg_replace("/\\<br.*?\\>/is", ' ', $Message);
 //print_r($Message);
 $arr = array("username" => getstr($username, 15, 1, 1, 1), "message" => $Message, "uid" => intval($userid), "replynum" => 0, "mood" => 0, 'dateline' => $_SGLOBAL['timestamp'], 'ip' => getonlineip());
 $newdoid = inserttable('doing', $arr, 1);
 //事件feed
 $feedarr = array('appid' => UC_APPID, 'icon' => 'doing', 'uid' => $userid, 'username' => $username, 'dateline' => $_SGLOBAL['timestamp'], 'title_template' => cplang('feed_doing_title'), 'title_data' => saddslashes(serialize(sstripslashes(array('message' => $Message)))), 'body_template' => '', 'body_data' => '', 'id' => $newdoid, 'idtype' => 'doid');
 $feedarr['hash_template'] = md5($feedarr['title_template'] . "\t" . $feedarr['body_template']);
 //喜好hash
 $feedarr['hash_data'] = md5($feedarr['title_template'] . "\t" . $feedarr['title_data'] . "\t" . $feedarr['body_template'] . "\t" . $feedarr['body_data']);
 //合并hash
 inserttable('feed', $feedarr, 1);
 updatestat('doing');
 //更新空间note
 $setarr = array('note' => $Message);
 if (!empty($_POST['spacenote'])) {
     $reward = getreward('updatemood', 0);
     $setarr['spacenote'] = $Message;
 } else {
     $reward = getreward('doing', 0);
 }
 updatetable('spacefield', $setarr, array('uid' => $userid));

        $query = $_SGLOBAL['db']->query("SELECT uid FROM " . tname('tagspace') . " WHERE tagid='{$tagid}' AND grade > 8 LIMIT 0 , 5");
        while ($value = $_SGLOBAL['db']->fetch_array($query)) {
            $notearr[] = array('uid' => $value['uid'], 'type' => 'mtag', 'new' => 1, 'authorid' => $_SGLOBAL['supe_uid'], 'author' => $_SGLOBAL['supe_username'], 'note' => addslashes(sstripslashes($message)), 'dateline' => $_SGLOBAL['timestamp']);
        }
        if (!$notearr) {
            $groups = array();
            @(include_once S_ROOT . './data/data_usergroup.php');
            foreach ($_SGLOBAL['usergroup'] as $gid => $value) {
                if ($value['managemtag']) {
                    $groups[] = $gid;
                }
            }
            if ($groups) {
                $query = $_SGLOBAL['db']->query("SELECT uid FROM " . tname('space') . " WHERE groupid IN (" . simplode($groups) . ") LIMIT 0 , 5");
                while ($value = $_SGLOBAL['db']->fetch_array($query)) {
                    $notearr[] = array('uid' => $value['uid'], 'type' => 'mtag', 'new' => 1, 'authorid' => $_SGLOBAL['supe_uid'], 'author' => $_SGLOBAL['supe_username'], 'note' => addslashes(sstripslashes($message)), 'dateline' => $_SGLOBAL['timestamp']);
                }
            }
        }
        note_apply($notearr);
        showmessage('do_success');
    }
} else {
    //创建新群组
    if (!checkperm('allowmtag')) {
        showmessage('no_privilege');
    }
    //实名认证
    ckrealname('share');
    //新用户见习
    cknewuser();

    if ($listcount) {
        $query = $_SGLOBAL['db']->query('SELECT * FROM ' . tname('ads') . $wheresql . ' ORDER BY displayorder LIMIT ' . $start . ',' . $perpage);
        while ($ad = $_SGLOBAL['db']->fetch_array($query)) {
            $listvalue[] = $ad;
        }
        $multipage = multi($listcount, $perpage, $page, $theurl);
    }
    $viewclass = ' class="active"';
} elseif ($_GET['op'] == 'edit') {
    $query = $_SGLOBAL['db']->query("SELECT * FROM " . tname('ads') . " WHERE adid='{$_POST['adid']}'");
    $thevalue = $_SGLOBAL['db']->fetch_array($query);
    if ($thevalue['style'] != 'pageoutindex' && $thevalue['style'] != 'all') {
        $pageout_style = 'none';
    }
    $parameters = empty($thevalue['parameters']) ? array() : unserialize($thevalue['parameters']);
    $parameters = sstripslashes($parameters);
    $isupdate = '<input type="hidden" name="update" value="1"><input type="hidden" name="adid" value="' . $thevalue['adid'] . '">';
} elseif ($_GET['op'] == 'add') {
    if ($system == '0') {
        $addsystemclass = ' class="active"';
    } else {
        $adduserclass = ' class="active"';
    }
    $thevalue = array('adid' => '', 'title' => '', 'adtype' => '', 'parameters' => '', 'pagetype' => '', 'type' => '', 'style' => '');
} elseif ($_GET['op'] == 'code') {
    if (empty($_POST['adid'])) {
        showmessage('ad_no_ads');
    }
    $query = $_SGLOBAL['db']->query("SELECT * FROM " . tname('ads') . " WHERE adid='{$_POST['adid']}' AND system = 1");
    if ($thevalue = $_SGLOBAL['db']->fetch_array($query)) {
        $parameters = unserialize($thevalue['parameters']);

        case 'text':
            $adcodes['textcontent'] = getstr($_POST['adcode']['textcontent'], 0, 1, 1);
            $adcodes['texturl'] = $_POST['adcode']['texturl'];
            $adcodes['textsize'] = floatval($_POST['adcode']['textsize']);
            $size = empty($adcodes['textsize']) ? '' : 'style="font-size:' . $adcodes['textsize'] . 'px;"';
            $html = '<span style="padding:0.8em"><a href="' . stripslashes($_POST['adcode']['texturl']) . '" target="_blank" ' . $size . '>' . $adcodes['textcontent'] . '</a></span>';
            break;
        default:
            break;
    }
    if (empty($adcodes)) {
        cpmessage('please_check_whether_the_option_complete_required');
    } else {
        $adcodes['type'] = $_POST['adcode']['type'];
    }
    $setarr = array('title' => $_POST['title'], 'pagetype' => $_POST['pagetype'], 'adcode' => addslashes(serialize(sstripslashes($adcodes))), 'system' => $_POST['system'], 'available' => empty($_POST['system']) ? 1 : intval($_POST['available']));
    if (empty($adid)) {
        $adid = inserttable('ad', $setarr, 1);
    } else {
        updatetable('ad', $setarr, array('adid' => $adid));
    }
    //写入模板
    $tpl = S_ROOT . './data/adtpl/' . $adid . '.htm';
    swritefile($tpl, $html);
    //缓存更新
    include_once S_ROOT . './source/function_cache.php';
    ad_cache();
    cpmessage('do_success', 'admincp.php?ac=ad');
} elseif (submitcheck('delsubmit')) {
    include_once S_ROOT . './source/function_delete.php';
    if (!empty($_POST['adids']) && deleteads($_POST['adids'])) {

function privacy_update()
{
    global $_SGLOBAL, $space;
    updatetable('spacefield', array('privacy' => addslashes(serialize(sstripslashes($space['privacy'])))), array('uid' => $_SGLOBAL['supe_uid']));
}

			$html  = '<span style="padding:0.8em"><a href="'.stripslashes($_POST['adcode']['texturl']).'" target="_blank" '.$size.'>'.$adcodes['textcontent'].'</a></span>';
			break;
		default:
			break;
	}

	if(empty($adcodes)) {
		cpmessage('please_check_whether_the_option_complete_required');
	} else {
		$adcodes['type'] = $_POST['adcode']['type'];
	}

	$setarr = array(
		'title' => $_POST['title'],
		'pagetype' => $_POST['pagetype'],
		'adcode' => addslashes(serialize(sstripslashes($adcodes))),
		'system' => $_POST['system'],
		'available' => empty($_POST['system'])?1:intval($_POST['available'])
	);

	if(empty($adid)) {
		$adid = inserttable('ad', $setarr, 1);
	} else {
		updatetable('ad', $setarr, array('adid' => $adid));
	}

	//写入模板
	$tpl = S_ROOT.'./data/adtpl/'.$adid.'.htm';
	swritefile($tpl, $html);

	//缓存更新

    $WallRecFlag = intval($_GET['flag']);
    if ($WallRecId > 0) {
        $WallRecFlag = $WallRecFlag ? 0 : 1;
        if ($WallRecFlag) {
            updatetable('wallfield', array('pass' => $WallRecFlag, 'display' => 0, 'checktime' => $_SGLOBAL['timestamp']), array('id' => $WallRecId));
            // 更新审批状态
        } else {
            updatetable('wallfield', array('pass' => $WallRecFlag, 'display' => 0, 'checktime' => 0), array('id' => $WallRecId));
            // 更新审批状态
        }
    }
    $query = $_SGLOBAL['db']->query("SELECT * FROM " . tname('wallfield') . " where id=" . $WallRecId);
    $value = $_SGLOBAL['db']->fetch_array($query);
    $message = "<a href=\"plugin.php?pluginid=wall&ac=track&wallid=" . $WallId . "\">#" . $WallTitle . "#</a> " . $value['message'];
    if ($WallRecFlag && $value['feedid'] == 0) {
        $feedarr = array('appid' => UC_APPID, 'icon' => 'doing', 'uid' => $value['uid'], 'username' => $value['username'], 'dateline' => $value['timeline'], 'title_template' => cplang('feed_doing_title'), 'title_data' => saddslashes(serialize(sstripslashes(array('message' => $message)))), 'body_template' => '', 'body_data' => '', 'id' => $value['id'], 'idtype' => 'wallid');
        $feedarr['hash_template'] = md5($feedarr['title_template'] . "\t" . $feedarr['body_template']);
        $feedarr['hash_data'] = md5($feedarr['title_template'] . "\t" . $feedarr['title_data'] . "\t" . $feedarr['body_template'] . "\t" . $feedarr['body_data']);
        $FeedId = inserttable('feed', $feedarr, 1);
        if ($FeedId) {
            updatetable('wallfield', array('feedid' => $FeedId), array('id' => $WallRecId));
        }
    } elseif ($WallRecFlag == 0 && $value['feedid']) {
        $_SGLOBAL['db']->query("DELETE FROM " . tname("feed") . " WHERE feedid =" . $value['feedid']);
        updatetable('wallfield', array('feedid' => 0), array('id' => $WallRecId));
    }
    cpmessage("do_success", "admincp.php?ac=wallcontentmanage", 1);
} elseif ($op == 'delete') {
    $WallRecId = intval($_GET['id']);
    $query = $_SGLOBAL['db']->query("SELECT * FROM " . tname('wallfield') . " where id=" . $WallRecId);
    $value = $_SGLOBAL['db']->fetch_array($query);

function verify_eventmembers($uids, $status)
{
    global $_SGLOBAL, $event;
    if ($_SGLOBAL['supe_userevent']['status'] < 3) {
        showmessage('no_privilege_manage_event_members');
    }
    $eventid = $_SGLOBAL['supe_userevent']['eventid'];
    if ($eventid != $event['eventid']) {
        $query = $_SGLOBAL['db']->query("SELECT * FROM " . tname("event") . " WHERE eventid='{$eventid}'");
        $event = $_SGLOBAL['db']->fetch_array($query);
    }
    $status = intval($status);
    if ($status < -1 || $status > 3) {
        showmessage("bad_userevent_status");
        // 请选择正确的活动成员状态
    }
    if ($event['verify'] == 0 && $status == 0) {
        showmessage("event_not_set_verify");
    }
    if ($status == 3 && $_SGLOBAL['supe_uid'] != $event['uid']) {
        showmessage("only_creator_can_set_admin");
        // 只有创建者可以设管理员
    }
    $newids = $actions = $userevents = array();
    $num = 0;
    // 活动人数变化
    $query = $_SGLOBAL['db']->query("SELECT ue.*, sf.* FROM " . tname("userevent") . " ue LEFT JOIN " . tname("spacefield") . " sf ON ue.uid=sf.uid WHERE ue.uid IN (" . simplode($uids) . ") AND ue.eventid='{$eventid}'");
    while ($value = $_SGLOBAL['db']->fetch_array($query)) {
        if ($value['status'] == $status || $event['uid'] == $value['uid'] || $value['status'] == 1) {
            // 相同 status 者，创建者，关注者 不处理
            continue;
        }
        if ($status == 2) {
            //设为普通成员
            $newids[] = $value['uid'];
            $userevents[$value['uid']] = $value;
            if ($value['status'] == 0) {
                // 加入
                $actions[$value['uid']] = "set_verify";
                $num += $value['fellow'] + 1;
            } elseif ($value['status'] == 3) {
                // 取消组织者身份
                $actions[$value['uid']] = "unset_admin";
            }
        } elseif ($status == 3) {
            //设为组织者
            $newids[] = $value['uid'];
            $userevents[$value['uid']] = $value;
            $actions[$value['uid']] = "set_admin";
            if ($value['status'] == 0) {
                $num += $value['fellow'] + 1;
            }
        } elseif ($status == 0) {
            //设为待审核
            $newids[] = $value['uid'];
            $userevents[$value['uid']] = $value;
            $actions[$value['uid']] = "unset_verify";
            if ($value['status'] >= 2) {
                $num -= $value['fellow'] + 1;
            }
        } elseif ($status == -1) {
            //删除成员
            $newids[] = $value['uid'];
            $userevents[$value['uid']] = $value;
            $actions[$value['uid']] = "set_delete";
            if ($value['status'] >= 2) {
                $num -= $value['fellow'] + 1;
            }
        }
    }
    if (empty($newids)) {
        return array();
    }
    if ($event['limitnum'] > 0 && $event['membernum'] + $num > $event['limitnum']) {
        // 活动人数超了
        showmessage("event_will_full");
    }
    $note_inserts = $note_ids = $feed_inserts = array();
    $feedarr = array('appid' => UC_APPID, 'icon' => 'event', 'uid' => '', 'username' => '', 'dateline' => $_SGLOBAL['timestamp'], 'title_template' => cplang('event_join'), 'title_data' => array('title' => $event['title'], "eventid" => $event['eventid'], "uid" => $event['uid'], "username" => $event['username']), 'body_template' => '', 'body_data' => array(), 'body_general' => '', 'image_1' => '', 'image_1_link' => '', 'image_2' => '', 'image_2_link' => '', 'image_3' => '', 'image_3_link' => '', 'image_4' => '', 'image_4_link' => '', 'target_ids' => '', 'friend' => '');
    $feedarr = sstripslashes($feedarr);
    //去掉转义
    $feedarr['title_data'] = serialize(sstripslashes($feedarr['title_data']));
    //数组转化
    $feedarr['body_data'] = serialize(sstripslashes($feedarr['body_data']));
    //数组转化
    $feedarr['hash_template'] = md5($feedarr['title_template'] . "\t" . $feedarr['body_template']);
    //喜好hash
    $feedarr['hash_data'] = md5($feedarr['title_template'] . "\t" . $feedarr['title_data'] . "\t" . $feedarr['body_template'] . "\t" . $feedarr['body_data']);
    //合并hash
    $feedarr = saddslashes($feedarr);
    //增加转义
    foreach ($newids as $id) {
        if ($status > 1 && $userevents[$id]['status'] == 0) {
            // 通过审核参加了活动，发布参加活动feed
            $feedarr['uid'] = $userevents[$id]['uid'];
            $feedarr['username'] = $userevents[$id]['username'];
            $feed_inserts[] = "('{$feedarr['appid']}', 'event', '{$feedarr['uid']}', '{$feedarr['username']}', '{$feedarr['dateline']}', '0', '{$feedarr['hash_template']}', '{$feedarr['hash_data']}', '{$feedarr['title_template']}', '{$feedarr['title_data']}', '{$feedarr['body_template']}', '{$feedarr['body_data']}', '{$feedarr['body_general']}', '{$feedarr['image_1']}', '{$feedarr['image_1_link']}', '{$feedarr['image_2']}', '{$feedarr['image_2_link']}', '{$feedarr['image_3']}', '{$feedarr['image_3_link']}', '{$feedarr['image_4']}', '{$feedarr['image_4_link']}')";
        }
        $userevents[$id]['privacy'] = empty($userevents[$id]['privacy']) ? array() : unserialize($userevents[$id]['privacy']);
        $filter = empty($userevents[$id]['privacy']['filter_note']) ? array() : array_keys($userevents[$id]['privacy']['filter_note']);
//.........这里部分代码省略.........

 function getstr($string, $length, $in_slashes = 0, $out_slashes = 0, $html = 0, $charset = "utf-8")
 {
     $string = trim($string);
     if ($in_slashes) {
         //传入的字符有slashes
         $string = sstripslashes($string);
     }
     if ($html < 0) {
         //去掉html标签
         $string = preg_replace("/(\\<[^\\<]*\\>|\r|\n|\\s|\\[.+?\\])/is", ' ', $string);
         $string = shtmlspecialchars($string);
     } elseif ($html == 0) {
         //转换html标签
         $string = shtmlspecialchars($string);
     }
     if ($length && strlen($string) > $length) {
         //截断字符
         $wordscut = '';
         if (strtolower($charset) == 'utf-8') {
             //utf8编码
             $n = 0;
             $tn = 0;
             $noc = 0;
             while ($n < strlen($string)) {
                 $t = ord($string[$n]);
                 if ($t == 9 || $t == 10 || 32 <= $t && $t <= 126) {
                     $tn = 1;
                     $n++;
                     $noc++;
                 } elseif (194 <= $t && $t <= 223) {
                     $tn = 2;
                     $n += 2;
                     $noc += 2;
                 } elseif (224 <= $t && $t < 239) {
                     $tn = 3;
                     $n += 3;
                     $noc += 2;
                 } elseif (240 <= $t && $t <= 247) {
                     $tn = 4;
                     $n += 4;
                     $noc += 2;
                 } elseif (248 <= $t && $t <= 251) {
                     $tn = 5;
                     $n += 5;
                     $noc += 2;
                 } elseif ($t == 252 || $t == 253) {
                     $tn = 6;
                     $n += 6;
                     $noc += 2;
                 } else {
                     $n++;
                 }
                 if ($noc >= $length) {
                     break;
                 }
             }
             if ($noc > $length) {
                 $n -= $tn;
             }
             $wordscut = substr($string, 0, $n);
         } else {
             for ($i = 0; $i < $length - 1; $i++) {
                 if (ord($string[$i]) > 127) {
                     $wordscut .= $string[$i] . $string[$i + 1];
                     $i++;
                 } else {
                     $wordscut .= $string[$i];
                 }
             }
         }
         $string = $wordscut;
     }
     if ($out_slashes) {
         //$string = saddslashes($string);
     }
     return trim($string);
 }