GetOne($query); $addtable = $cInfos['addtable']; //检测栏目是否有投稿权限 if($cInfos['issend']!=1 || $cInfos['ispart']!=0|| $cInfos['channeltype']!=$channelid || $cInfos['cissend']!=1) { ShowMsg("你所选择的栏目不支持投稿!","-1"); exit(); } //文档的默认状态 if($cInfos['arcsta']==0) { $ismake = 0; $arcrank = 0; } else if($cInfos['arcsta']==1) { $ismake = -1; $arcrank = 0; } else { $ismake = 0; $arcrank = -1; } //对保存的内容进行处理 $title = cn_substrR(HtmlReplace($title,1),$cfg_title_maxlen); $writer = cn_substrR(HtmlReplace($writer,1),20); if(empty($description)) $description = ''; $description = cn_substrR(HtmlReplace($description,1),250); $keywords = cn_substrR(HtmlReplace($tags,1),30); $mid = $cfg_ml->M_ID; $midQuery = "SELECT mid FROM `#@__arctiny` WHERE id='$aid'"; $midRow = $dsql->GetOne($midQuery); if($midRow['mid'] != $mid) { ShowMsg('您暂无权限在这里进行修改文档!','javascript:;'); exit; } $isadmin = ($cfg_ml->fields['matt']==10 ? true : false); if (empty($oldlitpic)) { $oldlitpic = ''; } //处理上传的缩略图 if($litpic != '') { $litpic = MemberUploads('litpic', $oldlitpic, $mid, 'image', '', $cfg_ddimg_width, $cfg_ddimg_height, false, $isadmin); SaveUploadInfo($title, $litpic, 1); } else { $litpic =$oldlitpic; if (strpos( $litpic, '..') !== false || strpos( $litpic, $cfg_user_dir."/{$userid}/" ) === false) exit('not allowed path!'); }