25 || !preg_match('/^[a-zA-Z0-9_-]+$/', $tplid)) { header('HTTP/1.1 400 Bad Request'); echo 'Invalid tplid'; return false; } $reason = isset($_POST['reason']) ? substr(trim(strval($_POST['reason'])), 0, 200) : ''; $approved = ($status == '0') ? '2' : '1'; $approved_at = time(); if (isset($_POST['approved_at']) && preg_match('/^\d+$/', strval($_POST['approved_at']))) { $approved_at = intval($_POST['approved_at']); } $itemsModel = app::get('taoexlib')->model('sms_sample_items'); $sampleModel = app::get('taoexlib')->model('sms_sample'); $filter = array('tplid' => $tplid); $itemsData = array( 'approved' => $approved, 'approvedtime' => $approved_at, ); if ($status == '0') { $itemsData['sync_reason'] = $reason; } $itemsModel->update($itemsData, $filter); $sampleModel->update(array('approved' => $approved), $filter); echo 'OK'; return true; } }