HEX
Server: Apache
System: Linux top 5.8.11-1.el7.elrepo.x86_64 #1 SMP Tue Sep 22 18:18:35 EDT 2020 x86_64
User: www (1000)
PHP: 7.4.33
Disabled: passthru,exec,system,putenv,chroot,chgrp,chown,shell_exec,popen,proc_open,pcntl_exec,ini_alter,ini_restore,dl,openlog,syslog,readlink,symlink,popepassthru,pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,imap_open,apache_setenv
Upload Files
File: /www/wwwroot/www.018111.cn/wp-content/themes/jian/inc/admin/pages/price_log.php
<?php
// Exit if accessed directly.
defined('ABSPATH') || exit;
global $wpdb;
// Authentication
if ( ! current_user_can( 'manage_options' ) ) {
	return;
}
$no_add = (!empty($_GET['action']) && $_GET['action'] =='add') ? false :true;
$is_delete = (!empty($_GET['action']) && $_GET['action'] =='delete') ? true :false;
$id = !empty($_GET['id']) ? (int)$_GET['id'] : 0 ;


?>


<!-- 编辑页 -->
<?php
$CaoCdk = new CaoCdk();
// POST data
$is_edit = (isset($_POST['price']) || isset($_POST['rate']) ) ? true :false;
$price = (isset($_POST['price'])) ? $_POST['price'] : 0;
$rate = (isset($_POST['rate'])) ? $_POST['rate'] : 1;

if ($is_edit) {
    $result = $wpdb->query("UPDATE $wpdb->postmeta SET meta_value = $price WHERE 1=1 AND meta_key = 'cao_price'");
    $result2 = $wpdb->query("UPDATE $wpdb->postmeta SET meta_value = $rate WHERE 1=1 AND meta_key = 'cao_vip_rate'");
    if ($result || $result2) {
        echo '<div id="message" class="updated notice is-dismissible"><p>修改成功</p></div>'; 
    }else{
        echo '<div id="message" class="error notice is-dismissible"><p>修改失败</p></div>'; 
    }
}

?>
<div class="wrap">
    <h1>批量修改资源文章价格</h1>
    <p style=" color: #ffffff; padding: 20px; background: #FF5722; margin-top: 20px; ">提示:该操作不可逆转的修改所有文章的价格,修改只对已经设置过价格的文章有效,未设置过的文章没有价格和折扣字段,不能修改,只能修改,不能统一设置</p>
    <!-- <form id="poststuff"> -->
    <form action="" id="editprice" method="post" name="post">
        <input name="action" type="hidden" value="add"></input>
            <table class="form-table">
                <tbody>
                    <tr>
                        <th scope="row"><label for="price">文章资源价格<p>【如果设置为0则等于免费资源】</p></label></th>
                        <td><input class="small-text" id="price" step="0.1" name="price" type="number" value="1"></input></td>

                    </tr>
                    <tr>
                        <th scope="row"><label for="rate">文章资源会员折扣/小数<p>【0.N 等于N折;1 等于不打折;0 等于免费】</p></label></th>
                        <td><input class="small-text" id="rate" step="0.1" name="rate" type="number" value="1"> </input></td>
                    </tr>
                    
                </tbody>
            </table>
            <p class="submit"><input type="submit" name="submit" id="submit" class="button button-primary" value="批量修改"></p>
    </form>
</div>