diff --git a/apply/index.php b/apply/index.php
index 12a64ac..a028872 100644
--- a/apply/index.php
+++ b/apply/index.php
@@ -1,62 +1,69 @@
query("SELECT * FROM `lylme_groups`");
-
-if(isset($_REQUEST['authcode'])){
+if(isset($_REQUEST['authcode'])) {
session_start();
- if(strtolower($_REQUEST['authcode'])== $_SESSION['authcode']){
- if(isset($_POST['name'])&& isset($_POST['url'])&& isset($_POST['icon'])&& isset($_POST['group_id'])&& isset($_POST['mail'])!=NULL){
-
+ if(strtolower($_REQUEST['authcode'])== $_SESSION['authcode']) {
+ if(isset($_POST['name'])&& isset($_POST['url'])&& isset($_POST['icon'])&& isset($_POST['group_id'])&& isset($_POST['mail'])!=NULL) {
$status = $conf["apply"];
if($status==2) {
exit('');
}
$name=strip_tags(daddslashes($_POST['name']));
$url=strip_tags(daddslashes($_POST['url']));
- $icon=daddslashes($_POST['icon']);
- $group_id=daddslashes($_POST['group_id']);
+ $icon=strip_tags(daddslashes($_POST['icon']));
+ $group_id=strip_tags(daddslashes($_POST['group_id']));
$mail=strip_tags(daddslashes($_POST['mail']));
$sw = 1;
$date = date("Y-m-d H:i:s");
- if(empty($status)){
+ if(empty($status)) {
$status=0;
}
}
- if($sw == 1){
- if(empty($name) || empty($url) || empty($icon) || empty($group_id) || empty($mail) ){
+ if($sw == 1) {
+ if(empty($name) || empty($url) || empty($icon) || empty($group_id) || empty($mail) ) {
exit('');
} else if(!preg_match('{^http[s]?://([\w-]+\.)+[\w]+(/[\w-./%&=]*)\.(jpg|png|ico)$}i', $icon)
- || !preg_match('{^http[s]?://([\w-]+\.)+[\w-]+(/[\w-./?%&#=]*)?$}i', $url)) {
+ || !preg_match('{^http[s]?://([\w-]+\.)+[\w-]+(/[\w-./?%&#=]*)?$}i', $url)) {
exit('');
- } else{
+ } else {
+ if($DB->num_rows($DB->query("SELECT * FROM `lylme_apply` WHERE `apply_url` LIKE '".$url."';"))>0) {
+ exit('');
+ }
$sql = "INSERT INTO `lylme_apply` (`apply_id`, `apply_name`, `apply_url`, `apply_group`, `apply_icon`, `apply_mail`, `apply_time`, `apply_status`) VALUES (NULL, '".$name."', '".$url."', '".$group_id."', '".$icon."', '".$mail."', '".$date."', '".$status."');";
- if($DB->query($sql)){
+ if($DB->query($sql)) {
switch ($status) {
case 0:
- echo '';
+ echo '';
break;
case 1:
- echo '';
+ $link_order = $DB->count('select MAX(id) from `lylme_links`')+1;
+ $sql1 = "INSERT INTO `lylme_links` (`id`, `name`, `group_id`, `url`, `icon`, `PS`,`link_order`) VALUES (NULL, '" . $name . "', '" . $group_id . "', '" . $url . "', '" . $icon . "', '" . $mail . "的提交 ', '" . $link_order . "');";
+ if($DB->query($sql1)) {
+ echo '';
+ } else {
+ echo '';
+ }
break;
}
- } else{
+ } else {
echo '';
}
}
}
- } else{
+ } else {
echo '';
}
exit();
}
?>
-
-申请收录 - <?php echo $conf['title'];?>
+申请收录 - <?php echo $conf['title'];
+?>
@@ -64,60 +71,60 @@ if(isset($_REQUEST['authcode'])){
-
-
-
-
-
-
-
@@ -191,20 +196,28 @@ if(isset($_REQUEST['authcode'])){
-
+ var inputInt = document.getElementById('icon');
+ var submit = document.getElementById("submit");
+ function sw_on() {
+ inputInt.style.borderColor = "#ebebeb";
+ submit.disabled = false;
+ submit.value = "提交";
+ }
+ function sw_off() {
+ inputInt.style.borderColor = "#ff0000";
+ submit.disabled = true;
+ submit.value = "输入不符合要求";
+ }
+ inputInt.oninput = function() {
+ var re =/^http[s]?:\/\/([\w-]+\.)+[\w]+(\/[\w-./%&=]*)\.(jpg|png|ico|gif)$/
+ if (!re.test(this.value)) {
+ sw_off();
+ } else {
+ sw_on();
+ }
+ }
+ ;
+ sw_on();
+}
+
+
; ?>)
-
-