/[LeafOK_CVS]/fenglin/bbs/reg_user_service.php
ViewVC logotype

Diff of /fenglin/bbs/reg_user_service.php

Parent Directory Parent Directory | Revision Log Revision Log | View Patch Patch

Revision 1.1 by sysadm, Mon Mar 31 14:13:22 2025 UTC Revision 1.2 by sysadm, Tue Apr 1 12:18:40 2025 UTC
# Line 145  Line 145 
145                  exit(json_encode($result_set));                  exit(json_encode($result_set));
146          }          }
147    
148            // Secure SQL statement
149            $nickname = mysqli_real_escape_string($db_conn, $nickname);
150            $realname = mysqli_real_escape_string($db_conn, $realname);
151            
152          // Begin transaction          // Begin transaction
153          $rs = mysqli_query($db_conn, "SET autocommit=0");          $rs = mysqli_query($db_conn, "SET autocommit=0");
154          if ($rs == false)          if ($rs == false)
# Line 167  Line 171 
171          }          }
172    
173          // Check availability of username and nickname          // Check availability of username and nickname
174          $sql = "SELECT UID FROM user_list WHERE username = '" .          $sql = "SELECT UID FROM user_list WHERE username = '$username'";
                         mysqli_real_escape_string($db_conn, $username) . "'";  
175                    
176          $rs = mysqli_query($db_conn, $sql);          $rs = mysqli_query($db_conn, $sql);
177          if ($rs == false)          if ($rs == false)
# Line 190  Line 193 
193          }          }
194          mysqli_free_result($rs);          mysqli_free_result($rs);
195    
196          $sql = "SELECT UID FROM user_nickname WHERE nickname = '" .          $sql = "SELECT UID FROM user_nickname WHERE nickname = '$nickname'";
                         mysqli_real_escape_string($db_conn, $nickname) . "'";  
197    
198          $rs = mysqli_query($db_conn, $sql);          $rs = mysqli_query($db_conn, $sql);
199          if ($rs == false)          if ($rs == false)
# Line 213  Line 215 
215          }          }
216          mysqli_free_result($rs);          mysqli_free_result($rs);
217                    
218          $sql = "SELECT UID FROM user_pubinfo WHERE email = '" .          $sql = "SELECT UID FROM user_pubinfo WHERE email = '$email'";
                         mysqli_real_escape_string($db_conn, $email) . "'";  
219                    
220          $rs = mysqli_query($db_conn, $sql);          $rs = mysqli_query($db_conn, $sql);
221          if ($rs == false)          if ($rs == false)
# Line 259  Line 260 
260    
261          $uid = mysqli_insert_id($db_conn);          $uid = mysqli_insert_id($db_conn);
262    
263          $sql = "INSERT INTO user_reginfo(UID, name, birthday, signup_dt, signup_ip) VALUES($uid, '" .          $sql = "INSERT INTO user_reginfo(UID, name, birthday, signup_dt, signup_ip)
264                          mysqli_real_escape_string($db_conn, $realname) . "', '$year-$month-$day', NOW(), '".                          VALUES($uid, '$realname', '$year-$month-$day', NOW(), '".
265                          client_addr() . "')";                          client_addr() . "')";
266    
267          $rs = mysqli_query($db_conn, $sql);          $rs = mysqli_query($db_conn, $sql);
# Line 273  Line 274 
274                  exit(json_encode($result_set));                  exit(json_encode($result_set));
275          }          }
276    
277          $sql = "INSERT INTO user_pubinfo(UID, nickname, email, gender, gender_pub, qq, last_login_dt) VALUES($uid, '" .          $sql = "INSERT INTO user_pubinfo(UID, nickname, email, gender, gender_pub, qq, last_login_dt)
278                          mysqli_real_escape_string($db_conn, $nickname) . "', '$email', '$gender', $gender_public, '$qq', NOW())";                          VALUES($uid, '$nickname', '$email', '$gender', $gender_public, '$qq', NOW())";
279    
280          $rs = mysqli_query($db_conn, $sql);          $rs = mysqli_query($db_conn, $sql);
281          if ($rs == false)          if ($rs == false)
# Line 286  Line 287 
287                  exit(json_encode($result_set));                  exit(json_encode($result_set));
288          }          }
289    
290          $sql = "INSERT INTO user_nickname(UID, nickname, begin_dt, begin_reason) VALUES($uid, '" .          $sql = "INSERT INTO user_nickname(UID, nickname, begin_dt, begin_reason)
291                          mysqli_real_escape_string($db_conn, $nickname) . "', NOW(), 'R')";                          VALUES($uid, '$nickname', NOW(), 'R')";
292    
293          $rs = mysqli_query($db_conn, $sql);          $rs = mysqli_query($db_conn, $sql);
294          if ($rs == false)          if ($rs == false)

Legend:
Removed lines/characters  
Changed lines/characters
  Added lines/characters
webmaster@leafok.com
 ViewVC Help
Powered by ViewVC 1.3.0-beta1