360桌面換膚

【user.php】數據庫中兩個數據表一個是所有的主題皮膚，另一個則是當前的桌面主題【注意邏輯關係濾清思路】

else if($action == 'getskins')
{
     $sql = "select themename from {$tablepre}userdesktoptheme where uid='".$SESSION['uid']."'";
     $themename = $db->fetchOneBySql($sql);
     if (!$themename)
     {
          $themename = 'theme_basic';
     }
    
     $sql = "select * from {$tablepre}themes order by id asc";
     $res = $db->fetchAssocArrBySql($sql);    
     foreach($res as $k => $v)
     {    
          $num = $k + 1;
          $photo = $v['photo'];    
          $name = $v['name'];
          $cname = $v['cname'];
          $default = '';
          if ($name == $themename)
          {
               $default = 'default-skin';
          }
          eval ("\$themes .= \"".$tpl->get("changeskin", $templates, $language)."\";");    
     }
     eval ("\$skins = \"".$tpl->get("skins", $templates, $language)."\";");
     echo $skins;    
}
else if($action == 'changeskin')
{    
     $themename = $_POST['themename'];
     if ($themename)
     {
          $sql = "select id from {$tablepre}userdesktoptheme where uid='".$SESSION['uid']."'";
          $haveid = $db->fetchOneBySql($sql);
          if ($haveid)
          {
               $sql = "update {$tablepre}userdesktoptheme set themename='".addslashes($themename)."' where id='$haveid'";
          }
          else
          {
               $sql = "insert into {$tablepre}userdesktoptheme(uid,themename) values('".$SESSION['uid']."','".addslashes($themename)."')";
          }
          $db->query($sql);
     }    
     exit;
}