function Signfunc($starttime, $currency)
{
    global $db, $winduid, $windid, $onlineip, $groupid, $tdtime, $db_signgroup, $db_signmoney, $db_signcurtype, $credit;
    if (!in_array($db_signcurtype, array('money', 'rvrc', 'credit', 'currency'))) {
        return false;
    }
    $set_a = array();
    require_once R_P . 'require/credit.php';
    if (!$starttime) {
        $set_a = array($tdtime, $db_signmoney);
    } elseif (!$db_signmoney || strpos($db_signgroup, ",{$groupid},") === false) {
        $db->update("UPDATE pw_memberdata SET starttime='0' WHERE uid=" . pwEscape($winduid));
    } else {
        $days = floor(($tdtime - $starttime) / 86400);
        $cost = $days * $db_signmoney;
        $cost < 0 && ($cost = 0);
        if ($currency >= $cost) {
            $set_a = array($tdtime, $cost);
        } else {
            $cost = $currency - $currency % $db_signmoney;
            $cost < 0 && ($cost = 0);
            $set_a = array(0, $cost);
        }
    }
    if ($set_a) {
        $credit->addLog('main_showsign', array($db_signcurtype => -$set_a[1]), array('uid' => $winduid, 'username' => $windid, 'ip' => $onlineip));
        $credit->set($winduid, $db_signcurtype, -$set_a[1], false);
        $credit->runsql();
        $db->update("UPDATE pw_memberdata SET starttime=" . pwEscape($set_a[0], false) . " WHERE uid=" . pwEscape($winduid));
    }
    return true;
}

 function execute(&$postdata)
 {
     global $timestamp, $db_ptable, $onlineip;
     $this->setPostData($postdata);
     $pwSQL = pwSqlSingle(array('fid' => $this->data['fid'], 'icon' => $this->data['icon'], 'author' => $this->data['author'], 'authorid' => $this->data['authorid'], 'subject' => $this->data['title'], 'ifcheck' => $this->data['ifcheck'], 'type' => $this->data['w_type'], 'postdate' => $timestamp, 'lastpost' => $timestamp, 'lastposter' => $this->data['lastposter'], 'hits' => 1, 'replies' => 0, 'topped' => $this->data['topped'], 'digest' => $this->data['digest'], 'special ' => $this->data['special'], 'state' => 0, 'ifupload' => $this->data['ifupload'], 'ifmail' => $this->data['ifmail'], 'anonymous' => $this->data['anonymous'], 'ptable' => $db_ptable, 'ifmagic' => $this->data['ifmagic'], 'ifhide' => $this->data['hideatt'], 'tpcstatus' => $this->data['tpcstatus'], 'modelid' => $this->data['modelid']));
     $this->db->update("INSERT INTO pw_threads SET {$pwSQL}");
     $this->tid = $this->db->insert_id();
     # memcache refresh
     $threadList = L::loadClass("threadlist");
     $threadList->updateThreadIdsByForumId($this->data['fid'], $this->tid);
     $pw_tmsgs = GetTtable($this->tid);
     if (is_object($postdata->tag)) {
         $postdata->tag->insert($this->tid);
         $this->data['tags'] .= "\t" . $postdata->tag->relate($this->data['title'], $this->data['content']);
     }
     if (is_object($this->att) && ($aids = $this->att->getAids())) {
         $this->att->pw_attachs->updateById($aids, array('tid' => $this->tid));
     }
     $ipTable = L::loadClass('IPTable');
     $pwSQL = pwSqlSingle(array('tid' => $this->tid, 'aid' => $this->data['aid'], 'userip' => $onlineip, 'ifsign' => $this->data['ifsign'], 'buy' => '', 'ipfrom' => $ipTable->getIpFrom($onlineip), 'tags' => $this->data['tags'], 'ifconvert' => $this->data['convert'], 'ifwordsfb' => $this->data['ifwordsfb'], 'content' => $this->data['content'], 'magic' => $this->data['magic']));
     $this->db->update("INSERT INTO {$pw_tmsgs} SET {$pwSQL}");
     if ($this->data['digest']) {
         $this->db->update("UPDATE pw_memberdata SET digests=digests+1 WHERE uid=" . pwEscape($this->data['authorid']));
         $this->post->user['digests']++;
     }
     $this->post->updateUserInfo($this->type, $this->creditSet(), $this->data['content']);
     $this->afterpost();
 }

function vote($readvote)
{
    global $db, $votetype, $ifview, $votedb, $votesum, $action, $viewvoter, $tid, $admincheck, $vote_close;
    $votearray = unserialize($readvote['voteopts']);
    $votetype = $readvote['multiple'] ? 'checkbox' : 'radio';
    $votesum = 0;
    $votedb = $voter = array();
    $ifview = $viewvoter == 'yes' ? 'no' : 'yes';
    foreach ($votearray as $key => $option) {
        $votesum += $option[1];
    }
    if ($viewvoter == 'yes') {
        $query = $db->query("SELECT username,vote FROM pw_voter WHERE tid=" . pwEscape($tid) . " LIMIT 500");
        while ($rt = $db->fetch_array($query)) {
            $voter[$rt['vote']] .= "<span class=bold>{$rt['username']}</span>" . ' ';
        }
    }
    foreach ($votearray as $key => $value) {
        $vote = array();
        if ($readvote['previewable'] == 0 || $readvote['havevote'] || $vote_close) {
            $vote['width'] = floor(500 * $value[1] / ($votesum + 1));
            $vote['num'] = $value[1];
        } else {
            $vote['width'] = 0;
            $vote['num'] = '*';
        }
        $vote['name'] = $value[0];
        $vote['voter'] = $voter[$key];
        $votedb[$key] = $vote;
    }
}

 function alterName($uid, $oldname, $username)
 {
     global $db_plist;
     $this->db->update("UPDATE pw_threads SET author=" . pwEscape($username) . " WHERE authorid=" . pwEscape($uid));
     $ptable_a = array('pw_posts');
     if ($db_plist && count($db_plist) > 1) {
         foreach ($db_plist as $key => $val) {
             if ($key == 0) {
                 continue;
             }
             $ptable_a[] = 'pw_posts' . $key;
         }
     }
     foreach ($ptable_a as $val) {
         $this->db->update("UPDATE {$val} SET author=" . pwEscape($username) . " WHERE authorid=" . pwEscape($uid));
     }
     $this->db->update("UPDATE pw_cmembers SET username=" . pwEscape($username) . " WHERE uid=" . pwEscape($uid));
     $this->db->update("UPDATE pw_colonys SET admin=" . pwEscape($username) . " WHERE admin=" . pwEscape($oldname));
     $this->db->update("UPDATE pw_announce SET author=" . pwEscape($username) . " WHERE author=" . pwEscape($oldname));
     $this->db->update("UPDATE pw_medalslogs SET awardee=" . pwEscape($username) . " WHERE awardee=" . pwEscape($oldname));
     $query = $this->db->query("SELECT fid,forumadmin,fupadmin FROM pw_forums WHERE forumadmin LIKE " . pwEscape("%,{$oldname},%", false) . " OR fupadmin LIKE " . pwEscape("%,{$oldname},%", false));
     while ($rt = $this->db->fetch_array($query)) {
         $rt['forumadmin'] = str_replace(",{$oldname},", ",{$username},", $rt['forumadmin']);
         $rt['fupadmin'] = str_replace(",{$oldname},", ",{$username},", $rt['fupadmin']);
         $this->db->update("UPDATE pw_forums SET forumadmin=" . pwEscape($rt['forumadmin'], false) . ",fupadmin=" . pwEscape($rt['fupadmin'], false) . " WHERE fid=" . pwEscape($rt['fid'], false));
     }
 }

 /**
  * 获取个人APP列表
  */
 function userApplist($uids, $appids = '', $arrt = 0)
 {
     if (!$uids) {
         return false;
     }
     if (is_numeric($uids)) {
         $sql_uid = ' uid=' . pwEscape($uids);
     } else {
         $sql_uid = ' uid IN(' . pwImplode(explode(',', $uids)) . ')';
     }
     if (is_numeric($appids)) {
         $sql_appid = ' AND appid=' . pwEscape($appids);
     } elseif ($appids) {
         $sql_appid = ' AND appid IN(' . pwImplode(explode(',', $appids)) . ')';
     }
     $query = $this->_db->query("SELECT uid,appid,appname FROM pw_userapp WHERE {$sql_uid} {$sql_appid}");
     while ($rt = $this->_db->fetch_array($query)) {
         if ($this->_appslist[$rt['appid']] && $this->_appslist[$rt['appid']]) {
             if ($arrt == 1) {
                 $this->_app_array[$rt['appid']] = $rt['appname'];
             } elseif ($arrt == 2) {
                 $this->_app_array[$rt['uid']][$rt['appid']] = $rt;
             } else {
                 $this->_app_array[] = $rt;
             }
         }
     }
     if (!$this->_app_array || !$this->appifopen) {
         $this->_app_array = array();
     }
     return $this->_app_array;
 }

 function updataById($tplid, $array)
 {
     $array = $this->_checkData($array);
     if (!$array) {
         return null;
     }
     $this->_db->update("UPDATE " . $this->_tableName . " SET " . pwSqlSingle($array, false) . " WHERE tplid=" . pwEscape($tplid));
 }

 /**
  * 获得页面的SEO设置信息
  * @param $mode
  * @param $page
  * @param $type
  * @return String
  */
 function getSEOSetForPage($mode, $page, $type)
 {
     $r = $this->_db->get_value("SElECT content FROM " . $this->_tableName . " WHERE mode = " . pwEscape($mode) . " AND page = " . pwEscape($page) . " AND type = " . pwEscape($type));
     if (!$r && strpos($page, '_') === false) {
         $r = $this->_db->get_value("SElECT content FROM " . $this->_tableName . " WHERE mode = " . pwEscape($mode) . " AND page = 'thread' AND type = " . pwEscape($type));
     }
     return $r;
 }

 function deleteByAuthorId($authorId)
 {
     if ($authorId < 1) {
         return false;
     }
     $this->_db->update("DELETE FROM " . $this->_tableName . " WHERE authorid=" . pwEscape($authorId, false));
     return $this->_db->affected_rows();
 }

 function getDatasByInvokePiece($invokePieceId)
 {
     $temp = array();
     $query = $this->_db->query("SELECT * FROM " . $this->_tableName . " WHERE invokepieceid=" . pwEscape($invokePieceId));
     while ($rt = $this->_db->fetch_array($query)) {
         $temp[] = $rt;
     }
     return $temp;
 }

 function isInstall($uid)
 {
     $appid = array();
     $query = $this->db->query("SELECT appid FROM " . UC_DBTABLEPRE . "userapp WHERE uid=" . pwEscape($uid));
     while ($rt = $this->db->fetch_array($query)) {
         $appid[] = $rt['appid'];
     }
     return new ApiResponse($appid);
 }

 function getDatasBySid($sid)
 {
     $temp = array();
     $query = $this->_db->query("SELECT * FROM pw_block WHERE sid=" . pwEscape($sid));
     while ($rt = $this->_db->fetch_array($query)) {
         $temp[] = $rt;
     }
     return $temp;
 }

function getImagesByTid($tid)
{
    global $db;
    $temp = array();
    $query = $db->query("SELECT attachurl FROM pw_attachs WHERE tid=" . pwEscape($tid, false) . " AND type='img' LIMIT 5");
    while ($rt = $db->fetch_array($query)) {
        $a_url = geturl($rt['attachurl'], 'show');
        $temp[] = is_array($a_url) ? $a_url[0] : $a_url;
    }
    return $temp;
}

 function deleteDataByParam($mode, $scr = '', $fid = false)
 {
     $sqladd = '';
     if ($scr) {
         $sqladd = ' AND scr=' . pwEscape($scr);
     }
     if (is_numeric($fid)) {
         $sqladd = ' AND fid=' . pwEscape($fid);
     }
     $this->_db->update("DELETE FROM " . $this->_tableName . " WHERE mode=" . pwEscape($mode) . $sqladd);
 }

 function insertAppevent($uid, $appevent = array(), $appid)
 {
     //插入用户的单个应用信息
     $rt = $this->db->get_one("SELECT uid FROM pw_userapp WHERE uid=" . pwEscape($uid) . " AND appid=" . pwEscape($appid));
     if ($rt && $appevent) {
         $appevent = serialize($appevent);
         $this->db->update("UPDATE pw_userapp SET appevent=" . pwEscape($appevent) . "WHERE uid=" . pwEscape($uid) . " AND appid=" . pwEscape($appid));
         return new ApiResponse(true);
     }
     return new ApiResponse(false);
 }

 function getForumByFid($fid)
 {
     $fid = intval($fid);
     if ($fid < 1) {
         return $this->buildResponse(FORUM_INVALID_PARAMS);
     }
     $data = array();
     $result = $GLOBALS['db']->get_one("SELECT f.fid,f.name as forumname,fdata.tpost as todaypost FROM pw_forums f LEFT JOIN pw_forumdata fdata ON f.fid = fdata.fid  WHERE f.fid= " . pwEscape($fid) . " ORDER BY f.vieworder");
     $result['forumname'] = strip_tags($result['forumname']);
     return $this->buildResponse(0, array('forum' => $result));
 }

 function send($uids, $fromUid, $subject, $content)
 {
     $fromUser = '';
     if ($fromUid) {
         $fromUser = $this->db->get_value("SELECT username FROM pw_members WHERE uid=" . pwEscape($fromUid));
     }
     !is_numeric($uids) && ($uids = explode(',', $uids));
     $msg = array('toUid' => $uids, 'fromUid' => $fromUid, 'fromUser' => $fromUser, 'subject' => Char_cv(stripslashes($subject)), 'content' => Char_cv(stripslashes($content)));
     require_once R_P . 'require/msg.php';
     pwSendMsg($msg);
     return new ApiResponse(true);
 }

 function alterName($uid, $newname)
 {
     $u = $this->db->get_one("SELECT username FROM pw_members WHERE uid=" . pwEscape($uid));
     if (!$u || $u['username'] == $newname) {
         return new ApiResponse(1);
     }
     if ($unique = $this->db->get_one("SELECT uid FROM pw_members WHERE username=" . pwEscape($newname))) {
         return new ApiResponse(API_USER_USERNAME_NOT_UNIQUE);
     }
     $this->db->update("UPDATE pw_members SET username=" . pwEscape($newname) . " WHERE uid=" . pwEscape($uid));
     $user = L::loadClass('ucuser');
     $user->alterName($uid, $u['username'], $newname);
     return new ApiResponse(1);
 }

function wap_login($username, $password, $safecv, $lgt = 0)
{
    global $db, $timestamp, $onlineip, $db_ckpath, $db_ckdomain, $db_bbsurl, $db_ifsafecv;
    $men = $db->get_one("SELECT m.uid,m.password,m.safecv,m.groupid,m.yz,md.onlineip FROM pw_members m LEFT JOIN pw_memberdata md ON md.uid=m.uid WHERE m." . ($lgt ? 'uid' : 'username') . "=" . pwEscape($username));
    if ($men) {
        $e_login = explode("|", $men['onlineip']);
        if ($e_login[0] != $onlineip . ' *' || $timestamp - $e_login[1] > 600 || $e_login[2] > 1) {
            $men_uid = $men['uid'];
            $men_pwd = $men['password'];
            $check_pwd = $password;
            if ($men['yz'] > 2) {
                wap_msg('login_jihuo');
            }
            if (strlen($men_pwd) == 16) {
                $check_pwd = substr($password, 8, 16);
                /*支持 16 位 md5截取密码*/
            }
            if ($men_pwd == $check_pwd && (!$db_ifsafecv || $men['safecv'] == $safecv)) {
                if (strlen($men_pwd) == 16) {
                    $db->update("UPDATE pw_members SET password=" . pwEscape($password) . " WHERE uid=" . pwEscape($men_uid));
                }
                $L_groupid = (int) $men['groupid'];
                Cookie("ck_info", $db_ckpath . "\t" . $db_ckdomain);
            } else {
                global $L_T;
                $L_T = $e_login[2];
                $L_T ? $L_T-- : ($L_T = 5);
                $F_login = "{$onlineip} *|{$timestamp}|{$L_T}";
                $db->update("UPDATE pw_memberdata SET onlineip=" . pwEscape($F_login) . " WHERE uid=" . pwEscape($men_uid));
                wap_msg('login_pwd_error');
            }
        } else {
            global $L_T;
            $L_T = 600 - ($timestamp - $e_login[1]);
            wap_msg('login_forbid');
        }
    } else {
        global $errorname;
        $errorname = $username;
        wap_msg('user_not_exists');
    }
    Cookie("winduser", StrCode($men_uid . "\t" . PwdCode($password) . "\t" . $safecv));
    Cookie('lastvisit', '', 0);
    wap_msg('wap_login', 'index.php');
}

 function update($uploaddb)
 {
     foreach ($uploaddb as $key => $value) {
         if ($value['attname'] == 'postcate' && ($value['id'] == '13' || $value['id'] == '27')) {
             $fieldname = 'pcattach';
         } else {
             $fieldname = 'field' . $value['id'];
         }
         $this->attachs[$fieldname] = $value['fileuploadurl'];
         if ($value['attname'] == 'topic') {
             $tablename = GetTopcitable($this->pcid);
         } elseif ($value['attname'] == 'postcate') {
             $tablename = GetPcatetable($this->pcid);
         }
         if ($this->attachs) {
             $this->db->update("UPDATE {$tablename} SET " . pwSqlSingle($this->attachs) . " WHERE tid=" . pwEscape($this->tid));
         }
     }
 }

function wap_check($fid, $action)
{
    global $db, $groupid, $_G, $_time, $db_titlemax, $db_postmin, $db_postmax, $subject, $content;
    $subject = trim($subject);
    $content = trim($content);
    if ($action == 'new' && (!$subject || strlen($subject) > $db_titlemax)) {
        wap_msg('subject_limit');
    }
    if (strlen($content) >= $db_postmax || strlen($content) < $db_postmin) {
        wap_msg('content_limit');
    }
    $fm = $db->get_one("SELECT f.forumadmin,f.fupadmin,f.password,f.allowvisit,f.f_type,f.f_check,f.allowpost,f.allowrp,fe.forumset FROM pw_forums f LEFT JOIN pw_forumsextra fe USING(fid) WHERE f.fid=" . pwEscape($fid));
    $forumset = unserialize($fm['forumset']);
    if (!$fm || $fm['password'] != '' || $fm['f_type'] == 'hidden' || $fm['allowvisit'] && @strpos($fm['allowvisit'], ",{$groupid},") === false) {
        wap_msg('post_right');
    }
    if ($action == 'new') {
        $isGM = CkInArray($GLOBALS['windid'], $GLOBALS['manager']);
        $isBM = admincheck($fm['forumadmin'], $fm['fupadmin'], $GLOBALS['windid']);
        if ($fm['f_check'] == '1' || $fm['f_check'] == '3') {
            wap_msg('post_right');
        }
        if ($fm['allowpost'] && strpos($fm['allowpost'], ",{$groupid},") === false) {
            wap_msg('post_right');
        }
        if (!$fm['allowpost'] && $_G['allowpost'] == 0) {
            wap_msg('post_group');
        }
        if ($forumset['allowtime'] && !$isGM && !allowcheck($forumset['allowtime'], "{$_time['hours']}", '') && !pwRights($isBM, 'allowtime')) {
            wap_msg('post_right');
        }
    } elseif ($action == 'reply') {
        if ($fm['f_check'] == '2' || $fm['f_check'] == '3') {
            wap_msg('reply_right');
        }
        if ($fm['allowrp'] && strpos($fm['allowrp'], ",{$groupid},") === false) {
            wap_msg('reply_right');
        }
        if (!$fm['allowrp'] && $_G['allowrp'] == 0) {
            wap_msg('reply_group');
        }
    }
}