view.php | searchcode

/view.php

https://gitlab.com/jonz94/2016NCU_FreshWeb_HW
PHP | 240 lines | 219 code | 6 blank | 15 comment | 22 complexity | 1b84e2cec9c635506b4fbb3c0b2fb9b0 MD5 | raw file

<!DOCTYPE html>
<!-- 會員系統 PHP CODE -->
<?php 
  header("Content-Type: text/html; charset=utf-8");
  require_once("connMysql.php");
  //啟用 SESSION
  session_start();
  //檢查是否經過登入
  if(isset($_SESSION["loginUser"]) && ($_SESSION["loginUser"]!="")){
  //有登入
    $username = $_SESSION["loginUser"];
    $query_RecUser = "SELECT `nickname`, `permission` FROM `user` WHERE `username`='".$username."'";
    $RecUser = mysql_query($query_RecUser);
    $row_RecUser = mysql_fetch_assoc($RecUser);
    $nickname = $row_RecUser["nickname"];
    //帳號等級為 member
    if($row_RecUser["permission"]=="member"){
      $lv="member";
    //帳號等級為 admin
    }else{
      $lv="admin";
    }
  //沒登入、為 guest
  }else{
    $lv="guest";
  }

  //執行會員登入
  if(isset($_POST["username"]) && isset($_POST["password"])){   
    //繫結登入會員資料
    $query_Login = "SELECT * FROM `user` WHERE `username`='".$_POST["username"]."'";
    $Login = mysql_query($query_Login);   
    //取出帳號密碼的值
    $row_Login=mysql_fetch_assoc($Login);
    $username = $row_Login["username"];
    $password = $row_Login["password"];
    //比對密碼，若登入成功則呈現登入狀態
    if(md5($_POST["password"])==$password){
      //設定登入者的名稱及等級
      $_SESSION["loginUser"]=$username;
      //登入後重新載入
      if (isset($_GET['id'])) {
       $id = $_GET['id'];
      }else{
?>
      <script type="text/javascript">
        window.alert("登入成功!");
        window.location.assign("index.php");
      </script>
<?php
      }
?>
      <script type="text/javascript">
        window.alert("登入成功!");
        window.location.assign("view.php?id=<?php echo $id;?>");
      </script>
<?php
    }else{
?>
    <script type="text/javascript">
      window.alert("錯誤的帳號或密碼! 請重新登入!\n將被轉移至登入畫面!");
      window.location.assign("login.php");
    </script>
<?php
    }
  }
  //執行登出動作
  if(isset($_GET["logout"]) && ($_GET["logout"]=="true")){
    unset($_SESSION["loginUser"]);
    header("Location: index.php");
  }

/* 顯示留言 */
  // $id 顯示第幾筆留言
  if (isset($_GET['id'])) {
   $id = $_GET['id'];
  }else{
    $id = 1;
  }

  $query_RecComment = "SELECT `comment`.*, `user`.`nickname`, `user`.`username`, `user`.`sex` FROM `comment`,`user` WHERE `comment`.`id`='".$id."' AND `comment`.`user_id`=`user`.`id`";
  $RecComment = mysql_query($query_RecComment);
  if(!$row_RecComment=mysql_fetch_assoc($RecComment)){ ?>
    <script type="text/javascript">
      window.alert("該留言不存在!\n將被轉移至首頁!");
      window.location.assign("index.php");
    </script>
<?php
  }
?>

<html lang="zh-Hant-TW">

<head>
  <meta charset="utf-8">
  <meta http-equiv=X-UA-Compatible content="IE=edge">
  <meta name=viewport content="width=device-width, initial-scale=1">
  <meta name=description content="">
  <meta name=author content="">
  <link rel="icon" href="/images/icon.jpg">
  <title>查看留言</title>
  <link href="/css/bootstrap.min.css" rel="stylesheet">
  <link href="/css/index.css" rel="stylesheet">
  <!--[if lt IE 9]><script src=~/Scripts/AssetsBS3/ie8-responsive-file-warning.js></script><![endif]-->
  <script src="/js/ie-emulation-modes-warning.js"></script>
  <!--[if lt IE 9]><script src=https://oss.maxcdn.com/html5shiv/3.7.2/html5shiv.min.js></script><script src=https://oss.maxcdn.com/respond/1.4.2/respond.min.js></script><![endif]-->
</head>

<body class="custom-homepage">
  <nav class="navbar navbar-inverse navbar-fixed-top" role=navigation>
    <div class=container>
      <div class=navbar-header>
        <button type=button class="navbar-toggle collapsed" data-toggle=collapse data-target=#navbar aria-expanded=false aria-controls=navbar> <span class=sr-only>Toggle navigation</span> <span class=icon-bar></span> <span class=icon-bar></span> <span class=icon-bar></span> </button> <a class=navbar-brand href="/">小卓的留言板</a>
      </div>
      <div id=navbar class="navbar-collapse collapse">
        <ul class="nav navbar-nav">
          <li class="active"><a href="#">留言板</a></li>
          <li><a href="about.php#">關於此站</a></li>
          <li class="dropdown"><a href="./" class="dropdown-toggle" data-toggle="dropdown" role="button" aria-expanded="false">To Do List<span class="caret"></span></a>
            <ul class="dropdown-menu dropdown-inverse" role="menu">
              <li><a href="todolist.php">ver. ul</a></li>
              <li><a href="todolist2.php">ver. table</a></li>
              <li><a href="todolist3.php">ver. div</a></li>
            </ul>
          </li>
          <li class="dropdown"><a href="./" class="dropdown-toggle" data-toggle="dropdown" role="button" aria-expanded="false">網站地圖<span class="caret"></span></a>
            <ul class="dropdown-menu dropdown-inverse" role="menu">
              <li class="dropdown-header">留言板</li>
              <li><a href="index.php#">觀看留言</a></li>
              <li><a href="post.php">發表留言</a></li>
              <li class="divider"></li>
              <li class="dropdown-header">To Do List</a></li>
              <li><a href="todolist.php">ver. ul</a></li>
              <li><a href="todolist2.php">ver. table</a></li>
              <li><a href="todolist3.php">ver. div</a></li>
              <li class="divider"></li>
              <li class="dropdown-header">會員相關</li>
              <!--下拉式選單選項，根據是否有登入而有不同顯示-->
              <?php if($lv=="guest"){ ?>
              <li><a href="login.php">登入</a></li>
              <li><a href="signup.php">註冊</a></li>
              <?php }else{ ?>
              <li><a href="update.php">更新資料</a></li>
              <li><a href="?logout=true">登出</a></li>
              <?php } ?> 
            </ul>
          </li>
          <?php if( $lv == "admin" ){ ?>
          <li><a href="/phpmyadmin/" target="_blank">資料庫管理</a></li>
          <?php } ?>
        </ul>
        <!--導覽列左側，根據是否有登入而有不同顯示-->
        <?php if($lv=="guest"){ ?>
        <form class="navbar-form navbar-right" role="form" method="post" action="">
          <div class=form-group>
            <input name="username" id="username" placeholder="帳號" class=form-control>
          </div>
          <div class=form-group>
            <input name="password" id="password" type=password placeholder="密碼" class=form-control>
          </div>
          <button type=submit class="btn btn-primary">登入</button>
          <a class="btn btn-info" href="signup.php" role=button>註冊</a>
        </form>
        <?php }else{ ?>
          <form class="navbar-form navbar-right" role="form">
            <font color="white">歡迎， <?php echo $nickname; ?> さん　
            <a class="btn btn-success" href="post.php" role=button>留言</a>
            <a class="btn btn-info" href="update.php" role=button>設定</a>
            <a class="btn btn-danger" href="?logout=true" role=button>登出</a></font>
          </form>
        <?php } ?>
      </div> 
    </div>
  </nav>
  <div class=jumbotron>
    <div class=container>
      <div class="panel panel-default">
        <div id="comment_subject" class="panel-heading" >
          <h2 style="margin-left: 30px;">
            <small>#Author : </small> 
            <?php if($row_RecComment["sex"]=="女"){ ?>
              <img src="/images/Female.svg" style="width: 30px; height: 30px; padding-bottom: 5px;"> 
            <?php }else{ ?>
              <img src="/images/Male.svg" style="width: 30px; height: 30px; padding-bottom: 5px;"> 
            <?php }
            echo $row_RecComment["nickname"];?> さん
          </h2>
        </div>
        <div class="panel-body">
          <div class="panel panel-default" style="margin: 20px 20px; padding-bottom: 10px;">
            <div class="panel-body">
              <div class="col-md-6">
                <h2><small>#Title : </small><?php echo $row_RecComment["subject"];?></h2>
              </div>
              <div id="comment_time" align="right" class="col-md-6">
                <h2><small>#Time : </small><?php echo $row_RecComment["time"]; ?></h2>
              </div>
            </div>
          </div>
          <div class="panel panel-default" style="margin: 20px 20px; padding: 0px 20px 0px;">
            <div class="panel-body">
              <h2><small>#content:</small></h2>
              <p><?php echo nl2br($row_RecComment["content"]);?></p>
            </div>
          </div>
          <div align="right" style="padding-right: 20px;">
            <!--根據權限顯示不同東西-->
            <?php if( $lv!="guest" ){ ?>
            <a class="btn btn-lg btn-success" href="recomment.php" role=button>回覆 &raquo;</a>
            <?php if ( $lv=="admin" || $row_RecComment["username"]==$username) { ?>
            <a class="btn btn-lg btn-primary" href="edit.php?id=<?php echo $id;?>" role=button>修改 &raquo;</a>
            <a class="btn btn-lg btn-danger" href="delete.php?id=<?php echo $id;?>" role=button>刪除 &raquo;</a>
            <?php } } ?>
          </div>
        </div>
      </div>
    </div>
  </div>
  <div class=container>
    <hr>
    <footer>
      <p>
        <!--根據權限顯示不同東西-->
        <?php if ( $lv == "admin"){ ?> 
        <span class="label label-primary">管理員</span>
        <?php }elseif( $lv == "member"){ ?>
        <span class="label label-success">會員</span>
        <?php }else{ ?>
        <span class="label label-warning">訪客</span>
        <?php } ?>
        &copy; NoCopyright 2016
      </p>
    </footer>
  </div>
  <script src="https://use.typekit.net/ova0edr.js"></script>
  <script>try{Typekit.load({ async: true });}catch(e){}</script>
  <script src=https://ajax.googleapis.com/ajax/libs/jquery/1.11.1/jquery.min.js></script>
  <script src=https://maxcdn.bootstrapcdn.com/bootstrap/3.3.1/js/bootstrap.min.js></script>
  <script src=/Scripts/AssetsBS3/ie10-viewport-bug-workaround.js></script>
</body>