puma outlet351699

[munich463298]

X1.5保存草稿 也加分导致会员利用此漏洞刷分....

因为草稿贴在论坛不可见更可怕的是自己回复草稿贴也会加分......

版主和管理员只能眼睁睁看着他们刷....

在这里将本人的临时解决方案分享下.......解决方案是，加分前判断帖子的状态，如果是草稿贴,cla rks mary jane (http://www.loveshoesbox.com/clarks-shoes-c-300.html),timberland outlet sale785790 (http://www.zkcn.net/home/space.php?uid=5364&do=blog&id=148809)，就不加分


需要修改两个文件,supra vaier shoes (http://www.loveshoesbox.com/supra-vaider-c-316.html)，蓝色代码为原来的，红色为增加的
1. \source\include\post\post_newthread.php （防止发帖时存草稿加分）

找到
if($digest) {
updatepostcredits('+', $_G['uid'], 'digest',womens birkenstock clogs (http://www.loveshoesbox.com/birkenstock-clogs-c-34.html), $_G['fid']);
}
updatepostcredits('+',puma outlet (http://www.pumashoesokay.com/), $_G['uid'], 'post',women Canada Goose down Gloves (http://www.cheapcanadagoosesale.com/canada-goose-gloves-c-4.html), $_G['fid']);

替换为

//存草稿不更新积分
if ($displayorder != -4)
{
if($digest) {
updatepostcredits('+', $_G['uid'],Discuz! X1.5我的分享工具 怎么乱了 (http://www.httyzx.gov.cn/Review.asp?NewsID=381), 'digest',discount ralph lauren uk (http://www.ralphlaurenukshop.com/), $_G['fid']);
}
updatepostcredits('+',birkenstock sandals455241 (http://www.kunmingzu.com/space.php?uid=26323&do=blog&id=697060), $_G['uid'], 'post', $_G['fid']);
}复制代码2. \source\include\post\post_newreply.php (防止回复草稿贴加分)

找到(有两处,discount boat shoes (http://www.timberlands.org/sebago-boat-shoes-c-305.html),需要全部修改)
updatepostcredits('+', $_G['uid'],kids ralph lauren sale (http://www.ralphlaurenukshop.com/), 'reply', $_G['fid']);

替换为
if ($thread['displayorder'] ,men Vest (http://www.cheapcanadagoosesale.com/canada-goose-mens-vest-c-6.html)!= -4)
{
updatepostcredits('+', $_G['uid'],juicy bag (http://www.juicycouturesites.com/), 'reply', $_G['fid']);
}

复制代码