$fp=fopen($ft,"w"); //把所有的"<",">"符号转换成"<","&rt;"可以去除
HTML标记,好像有个函数可以直接去除,但我记不到了,也没在参考手册里查到,所以用个笨法子了。
$message=str_replace("<","<",str_replace(">",">",$message));
$message=nl2br($message); //先去除符号再变换行,免得换行符也变成字符显示出来。
$f=fputs($fp,$message);
$fp=@fclose($fp);
echo "<script language='
JavaScript'> alert('".$useinfo[2]."!恭喜你,发贴成功!'); </script>";
}
else {
echo "<script language='
JavaScript'> alert('非常报歉,因
数据库原因,你的帖子没能保存!'); </script>";
}
}
}
function userr($username,$userpass,$title,$message) //用户信息校验函数
{
$query="select * from useinfo where usename='".$username."'";
$req=mysql_query($query);
$useinfo=mysql_fetch_array($req);
if ($useinfo[0]==$username)
{
//如果通过校检就调用信息处理函数
if ($userpass==$useinfo[1]) {postf($useinfo,$title,$message);return $useinfo;}
else {
echo "<script language='JavaScript'> alert('密码不正确,请检查!'); </script>";
echo "<meta HTTP-EQUIV='REFRESH' CONTENT='2;URL=post.php'>";
}
}
else
{
echo "<script language='JavaScript'> alert('用户不存在,请确认已注册!'); </script>";
}
}
?>
<META content="text/html; charset=gb2312" http-equiv=Content-Type>
<meta HTTP-EQUIV="REFRESH" CONTENT="2;URL=foxbbs.php">
</head><body topmargin="0">
<?
$tem=$HTTP_COOKIE_VARS[FlyFoxNet];
$temp=explode("|",$tem);
$cookiem=$temp[0];
$useinfo=cuser($cookiem,$action);
if (isset($message))
{
if($username)
{
$useinfo=userr($username,$userpass,$title,$message);