--- fenglin/bbs/reg_user_service.php 2025/04/09 06:00:54 1.4 +++ fenglin/bbs/reg_user_service.php 2025/04/16 01:51:52 1.6 @@ -130,7 +130,7 @@ )); } - if ((!isset($_SESSION["BBS_reg_vn_str"])) || $_SESSION["BBS_reg_vn_str"] == "" || VN_check($_SESSION["BBS_reg_vn_str"], $vn_str) != 0) + if ((!isset($_SESSION["BBS_vn_str"])) || $_SESSION["BBS_vn_str"] == "" || strcasecmp($_SESSION["BBS_vn_str"], $vn_str) != 0) { $result_set["return"]["code"] = -1; array_push($result_set["return"]["errorFields"], array( @@ -171,7 +171,7 @@ } // Check availability of username and nickname - $sql = "SELECT UID FROM user_list WHERE username = '$username'"; + $sql = "SELECT UID FROM user_list WHERE username = '$username' FOR UPDATE"; $rs = mysqli_query($db_conn, $sql); if ($rs == false) @@ -193,7 +193,7 @@ } mysqli_free_result($rs); - $sql = "SELECT UID FROM user_nickname WHERE nickname = '$nickname'"; + $sql = "SELECT UID FROM user_nickname WHERE nickname = '$nickname' FOR UPDATE"; $rs = mysqli_query($db_conn, $sql); if ($rs == false) @@ -215,7 +215,7 @@ } mysqli_free_result($rs); - $sql = "SELECT UID FROM user_pubinfo WHERE email = '$email'"; + $sql = "SELECT UID FROM user_pubinfo WHERE email = '$email' FOR UPDATE"; $rs = mysqli_query($db_conn, $sql); if ($rs == false) @@ -334,7 +334,7 @@ exit(json_encode($result_set)); } - $_SESSION["BBS_reg_vn_str"] = ""; + $_SESSION["BBS_vn_str"] = ""; mysqli_close($db_conn); exit(json_encode($result_set));