--- fenglin/bbs/reg_user_service.php	2025/04/09 06:00:54	1.4
+++ fenglin/bbs/reg_user_service.php	2025/04/23 05:13:56	1.7
@@ -1,4 +1,4 @@
-<?
+<?php
 	require_once "../lib/common.inc.php";
 	require_once "../lib/str_process.inc.php";
 	require_once "../lib/vn_gif.inc.php";
@@ -130,7 +130,7 @@
 		));
 	}
 
-	if ((!isset($_SESSION["BBS_reg_vn_str"])) || $_SESSION["BBS_reg_vn_str"] == "" || VN_check($_SESSION["BBS_reg_vn_str"], $vn_str) != 0)
+	if ((!isset($_SESSION["BBS_vn_str"])) || $_SESSION["BBS_vn_str"] == "" || strcasecmp($_SESSION["BBS_vn_str"], $vn_str) != 0)
 	{
 		$result_set["return"]["code"] = -1;
 		array_push($result_set["return"]["errorFields"], array(
@@ -171,7 +171,7 @@
 	}
 
 	// Check availability of username and nickname
-	$sql = "SELECT UID FROM user_list WHERE username = '$username'";
+	$sql = "SELECT UID FROM user_list WHERE username = '$username' FOR UPDATE";
 	
 	$rs = mysqli_query($db_conn, $sql);
 	if ($rs == false)
@@ -193,7 +193,7 @@
 	}
 	mysqli_free_result($rs);
 
-	$sql = "SELECT UID FROM user_nickname WHERE nickname = '$nickname'";
+	$sql = "SELECT UID FROM user_nickname WHERE nickname = '$nickname' FOR UPDATE";
 
 	$rs = mysqli_query($db_conn, $sql);
 	if ($rs == false)
@@ -215,7 +215,7 @@
 	}
 	mysqli_free_result($rs);
 	
-	$sql = "SELECT UID FROM user_pubinfo WHERE email = '$email'";
+	$sql = "SELECT UID FROM user_pubinfo WHERE email = '$email' FOR UPDATE";
 	
 	$rs = mysqli_query($db_conn, $sql);
 	if ($rs == false)
@@ -334,7 +334,7 @@
 		exit(json_encode($result_set));
 	}
 
-	$_SESSION["BBS_reg_vn_str"] = "";
+	$_SESSION["BBS_vn_str"] = "";
 
 	mysqli_close($db_conn);
 	exit(json_encode($result_set));