--- fenglin/bbs/ch_username_sub.php 2004/10/24 10:29:34 1.1
+++ fenglin/bbs/ch_username_sub.php 2010/01/07 01:21:28 1.4
@@ -10,10 +10,17 @@ if ($_SESSION["BBS_uid"]==0)
exit();
}
+$permit = false;
+if (preg_match("/^[A-Za-z]{3,12}$/",$_SESSION["BBS_username"]))
+{
+ error_msg ("您无权修改用户名！", true);
+ exit();
+}
+
$username=htmlspecialchars(trim($_POST["username"]));
$username=addslashes($username);
-if (!ereg("^[A-Za-z]{5,12}$",$username))
+if (!preg_match("/^[A-Za-z]{5,12}$/",$username))
{
error_msg ("用户名填写不正确！", true);
exit();
@@ -26,20 +33,6 @@ if (!check_str($username))
$db_conn=include "./db_open.inc.php";
-$permit = false;
-$rs = mysql_query("select m_username from user_list where UID=".$_SESSION["BBS_uid"])
- or die("Query status error!");
-if ($row=mysql_fetch_array($rs))
- $permit = $row["m_username"];
-else
- $permit = false;
-mysql_free_result($rs);
-if (!$permit)
-{
- error_msg ("您无权修改用户名！", false, true);
- exit();
-}
-
$rs=mysql_query("select UID from user_list where username='$username' limit 1");
if (mysql_num_rows($rs)>0)
{
@@ -48,31 +41,13 @@ if (mysql_num_rows($rs)>0)
}
mysql_free_result($rs);
-mysql_query("update user_list set username='$username', m_username = 0".
+mysql_query("update user_list set username='$username'".
" where UID=".$_SESSION["BBS_uid"])
or die("Update error!");
mysql_close($db_conn);
-?>
-
-
-
-更改用户名
-
-
-
-
-
-
-
- 更改用户名完成，以后请使用新的用户名登陆。
-
-
- [关闭窗口]
-
-
-
-
-
-
+$_SESSION["BBS_username"] = $username;
+
+header ("Location: main.php");
+?>