zhangjingyu 
m_galbum.php文件部分代码：

} elseif ($a == 'upload') {

    if (!$ifadmin && !$colony['ifFullMember']) {
        Showmsg('colony_cnmenber');
    }
    banUser();
    S::gp(array('aid', 'job'));

    $tmpActionUrl .= '&a=upload' . ($job ? '&job=' . $job : '') . '&aid=' . $aid;

    if (empty($_POST['step'])) {

        $extra_url = $options = '';
        $count = $db->get_value("SELECT COUNT(*) AS count FROM pw_cnalbum WHERE atype='1' AND ownerid=" . S::sqlEscape($cyid));
        if (empty($count) && $ifadmin) {
            $db->update("INSERT INTO pw_cnalbum SET " . S::sqlSingle(array(
                'aname'        => '默认相册',        'aintro'    => '',
                'atype'        => 1,                'private'    => 0,
                'ownerid'    => $cyid,            'owner'        => $colony['cname'],
                'lasttime'    => $timestamp,        'crtime'    => $timestamp,
                'memopen'   => 1
            )));
            //* $db->update("UPDATE pw_colonys SET albumnum=albumnum+1 WHERE id=" . S::sqlEscape($cyid));
            pwQuery::update('pw_colonys', 'id=:id', array($cyid), null, array(PW_EXPR=>array('albumnum=albumnum+1')));
        }
        $query = $db->query("SELECT aid,aname,memopen FROM pw_cnalbum WHERE atype='1' AND ownerid=" . S::sqlEscape($cyid) . ' ORDER BY aid DESC');
        while ($rt = $db->fetch_array($query)) {
            if ($ifadmin || ($colony['ifFullMember'] && $rt['memopen'] == 1)) {
                $memopen = 1;
            } else {
                $memopen = 0;
            }
            if ($memopen == 1) {
         &