PageRenderTime 55ms CodeModel.GetById 23ms RepoModel.GetById 0ms app.codeStats 1ms

/source/gl/log/log.php

http://prosporous.googlecode.com/
PHP | 700 lines | 627 code | 15 blank | 58 comment | 128 complexity | 126db36f20e72f604cf1849d8bd69d50 MD5 | raw file
Possible License(s): LGPL-2.1
  1. <?php
  2. /* * ??????UTF-8???.
  3. * Created on 2010-10-2
  4. *
  5. * @author EXT <isrn@qq.com>
  6. *
  7. */
  8. include ('../../includes/global.php');
  9. include ('../global.php');
  10. include ("../power.php");
  11. include ("../clas/ext.php");
  12. //include ("../clas/relation.php");
  13. //$relation = new relation();
  14. //Initialize array for form js
  15. $plugurl = array();
  16. $plugjs = array();
  17. $fckplugin = '';
  18. //The first letter of "get real value"
  19. function grv($type, $blm, $dvalue=false) {
  20. //print_r($type);
  21. if ($dvalue) {
  22. return $dvalue;
  23. } else {
  24. switch ($type) {
  25. case 'function': {
  26. $a = explode('#', $blm);
  27. return $a[0]($a[1]);
  28. break;
  29. }
  30. case '$_GET': {
  31. return $_GET[$blm];
  32. break;
  33. }
  34. case '$_SESSION': {
  35. return $_SESSION[$blm];
  36. break;
  37. }
  38. case '$_POST': {
  39. return $_POST[$blm];
  40. break;
  41. }
  42. case '$_COOKIE': {
  43. return $_COOKIE[$blm];
  44. break;
  45. }
  46. case '$_SERVER': {
  47. return $_SERVER[$blm];
  48. break;
  49. }
  50. case '$_ENV': {
  51. return $_ENV[$blm];
  52. break;
  53. }
  54. case '$_FILES': {
  55. return $_FILES[$blm];
  56. break;
  57. }
  58. case '0': {
  59. return $blm;
  60. break;
  61. }
  62. case '1': {
  63. break;
  64. }
  65. default: {
  66. return $blm;
  67. break;
  68. }
  69. }
  70. }
  71. }
  72. //
  73. Tr(basename($_SERVER['PHP_SELF']), 'thisurl');
  74. Tr('??????', 'thistitle');
  75. $_GET['tid'] = $_REQUEST['tid'];
  76. $_POST['tid'] = $_REQUEST['tid'];
  77. $tmpml = 'log/';
  78. Tr($_REQUEST['tid'], 'tid');
  79. Tr('10', 'pagenum');
  80. $paixu = array('zd' => 'id', 'order' => 'DESC');
  81. Tr($paixu, 'paixu');
  82. Tr($_REQUEST['tid'], 'rightid');
  83. Tr('0', 'hideupdata');
  84. Tr('0', 'hideadd');
  85. //$_SESSION['rcg']!='A'&&$_SESSION['rcg']['zdgxkey'][$_GET['tid']]=1;
  86. //Configuration add items
  87. $showcf = array(
  88. 0 => array('title' => '????', 'zd' => array('username', 'optime', 'ip', 'opp', 'optid', 'opid', 'modularname',)),
  89. 1 => array('title' => '????', 'zd' => array('log'))
  90. );
  91. $listcf = array(//Configuration list items
  92. 'show' => array('username', 'optime', 'ip', 'opp', 'optid', 'opid', 'modularname', 'log'),
  93. //virtual list'
  94. 'xnlist' => array(
  95. //array('id' => 453, 'fname' => 'ddcode', 'type' => 'input', 'name' => '????', 'wd' => 120, 'url' => ""),
  96. //array('id' => 451, 'fname' => 'cname', 'type' => 'input', 'name' => '???', 'wd' => 120, 'url' => ""),
  97. //array('id' => 450, 'fname' => 'gname', 'type' => 'input', 'name' => '???', 'wd' => 120, 'url' => ""),
  98. //array('id' => 454, 'fname' => 'dgdate', 'type' => 'input', 'name' => '????', 'wd' => 120, 'url' => ""),
  99. //array('id' => 452, 'fname' => 'dhdate', 'type' => 'input', 'name' => '????', 'wd' => 120, 'url' => ""),
  100. //array('id' => 456, 'fname' => 'addtime', 'type' => 'input', 'name' => '????', 'wd' => 120, 'url' => "")
  101. ),
  102. //Advanced search
  103. //'gj'=>array('user','ct','usertype'),
  104. //'ss'=>'ct',//olny one
  105. //'pt'=>" and user like '".$_SESSION['userinfo']['user']."' ",//sql
  106. 'editdisble' => array('username', 'optime', 'ip', 'opp', 'optid', 'opid', 'modularname', 'log')
  107. //'zdgx'=>array('ct'),
  108. //'zdgxkey'=>array('ct'),
  109. //'save'=>array('user','ct'),
  110. //'zd'=>array('user','ct')
  111. );
  112. switch ($_REQUEST['op']) {
  113. case 'list': {
  114. $fldata = Dgd(array(
  115. 'db' => 'd_sevenel',
  116. 'cd' => "tid = '" . $_GET['tid'] . "' order by px asc ",
  117. 'tn' => "fld"
  118. ));
  119. Tr($_GET['bdtid'], 'bdtid');
  120. Tr($_GET['bdid'], 'bdid');
  121. if (count($listcf['show']) > 0) {
  122. foreach ($fldata as $key => $v) {
  123. if (in_array($v['fname'], $listcf['show'])) {
  124. $xr[] = $v;
  125. }
  126. }
  127. } else {
  128. foreach ($fldata as $key => $v) {
  129. if ($v['xr'] == 0) {
  130. $xr[] = $v;
  131. }
  132. }
  133. }
  134. if (count($listcf['xnlist']) > 0) {
  135. foreach ($listcf['xnlist'] as $v) {
  136. $xr[] = $v;
  137. }
  138. }
  139. Tr($xr, 'xr');
  140. if (count($listcf['gj']) > 0) {
  141. foreach ($fldata as $key => $v) {
  142. if (in_array($v['fname'], $listcf['gj'])) {
  143. $gj[] = $v;
  144. }
  145. }
  146. } else {
  147. foreach ($fldata as $key => $v) {
  148. if ($v['gj'] == 1) {
  149. $gj[] = $v;
  150. }
  151. }
  152. }
  153. if ($gj != '') {
  154. foreach ($gj as $key => $value) {
  155. $js[] = EXT::GG($value['id']);
  156. }
  157. }
  158. Tr($ckbox, 'ckbox');
  159. Tr($js, 'js');
  160. $gj && Tr('1', 'gjright');
  161. if ($listcf['ss']) {
  162. Tr($listcf['ss'], 'titlesearch');
  163. } else {
  164. Tr('tt', 'titlesearch');
  165. }
  166. $tree = Dgd(array(
  167. 'db' => 'd_sevenel',
  168. 'cd' => "id = '" . $_GET['tid'] . "' ",
  169. 'tn' => "tree",
  170. 'limit' => 1
  171. ));
  172. Tr($tree, 'tree');
  173. if ($tree['expand']) {
  174. $fstree = Dgd(array(
  175. 'db' => 'd_sevenel',
  176. 'cd' => "id in (0," . $tree['expand'] . ") ",
  177. 'tn' => "tree"
  178. ));
  179. }
  180. $fsstr = '';
  181. if ($fstree) {
  182. foreach ($fstree as $fsvalue) {
  183. $fsstr.=",{xtype:\"button\",text:\"??" . $fsvalue['title'] . "\",iconCls:\"fsadd\",pressed:true,handler:function(){
  184. var record = grid.getStore().getAt(rowIndex);
  185. fsadd('" . $fsvalue['id'] . "','" . $fsvalue['title'] . "',\"./show1/i.php?op=add&tid=" . $fsvalue['id'] . "&bdtid=" . $_GET['tid'] . "&bdid=\",record.data.id); }}
  186. ,{xtype:\"button\",text:\"??" . $fsvalue['title'] . "\",iconCls:\"fslist\",pressed:true,handler:function(){
  187. var record = grid.getStore().getAt(rowIndex);
  188. fslist('" . $fsvalue['id'] . "','" . $fsvalue['title'] . "',\"./show1/l.php?op=list&tid=" . $fsvalue['id'] . "&bdtid=" . $_GET['tid'] . "&bdid=\",record.data.id);
  189. }}";
  190. }
  191. }
  192. Tr($fsstr, 'fstree');
  193. Jc($fsstr);
  194. $table = Dgd(array(
  195. 'db' => 'd_sevenel',
  196. 'cd' => "id = '" . $tree['table'] . "' ",
  197. 'tn' => "datamod",
  198. 'limit' => 1
  199. ));
  200. Tr($table, 'table');
  201. Ts($tmpml . '/list.html');
  202. break;
  203. }
  204. case 'fy': {
  205. if ($_SESSION['rcg'] != 'A' && !$_SESSION['rcg']['c'][$_POST['tid']]) {
  206. $pt = $listcf['pt'];
  207. }
  208. $fldata = Dgd(array(
  209. 'db' => 'd_sevenel',
  210. 'cd' => "tid = '" . $_POST['tid'] . "' order by px asc ",
  211. 'tn' => "fld"
  212. ));
  213. $zhuanyi = array();
  214. $btsc = array();
  215. $gjsc = array();
  216. foreach ($fldata as $key => $value) {
  217. if ($value['zy'] == 1) {
  218. $zhuanyi[] = $value;
  219. }
  220. if ($value['bt'] == 1) {
  221. $btsc[$value['fname']] = $value['type'];
  222. }
  223. }
  224. $condition = '';
  225. $_POST['user'] && $condition.="and user like '%" . $_POST['user'] . "%' ";
  226. $_POST['bdtid'] && $condition.="and bdtid = '" . $_POST['bdtid'] . "' ";
  227. $_POST['bdid'] && $condition.="and bdid = '" . $_POST['bdid'] . "' ";
  228. if (count($listcf['gj']) > 0) {
  229. foreach ($fldata as $key => $v) {
  230. if (in_array($v['fname'], $listcf['gj'])) {
  231. $gj[] = $v;
  232. }
  233. }
  234. } else {
  235. foreach ($fldata as $key => $v) {
  236. if ($v['gj'] == 1) {
  237. $gj[] = $v;
  238. }
  239. }
  240. }
  241. if ($gj != '') {
  242. $xzt = array('combo', 'recommend', 'radiogroup', 'combo1');
  243. foreach ($gj as $value) {
  244. if (in_array($value['type'], $xzt)) {
  245. $_POST[$value['fname']] != '' && $condition.="and " . $value['fname'] . " = '" . $_POST[$value['fname']] . "' ";
  246. } else {
  247. if ($value['type'] == 'checkboxgroup') {
  248. if ($_POST[$value['fname']]) {
  249. foreach ($_POST[$value['fname']] as $cv) {
  250. $cv != '' && $condition.="and " . $value['fname'] . " like '%" . $cv . "%' ";
  251. }
  252. }
  253. } else {
  254. $_POST[$value['fname']] != '' && $condition.="and " . $value['fname'] . " like '%" . $_POST[$value['fname']] . "%' ";
  255. }
  256. }
  257. }
  258. }
  259. $dbinfo = Dgd(array(
  260. 'db' => 'd_sevenel',
  261. 'tn' => $_POST['dbname'],
  262. 'start' => $_POST['start'],
  263. 'limit' => $_POST['limit'],
  264. 'total' => true,
  265. //'ce'=>1,
  266. 'cd' => " 1 and del!=1 and tid = 0 " . $condition . " " . $pt . " order by " . $paixu['zd'] . " " . $paixu['order'] . " "
  267. ));
  268. //??
  269. //??
  270. $tempb = 0;
  271. foreach ($dbinfo['data'] as $key => $value) {
  272. // $tempb+=$value['ct'];
  273. foreach ($zhuanyi as $zyv) {
  274. switch ($zyv['type']) {
  275. case 'fileup': {
  276. //echo $dbinfo['data'][$key][$zyv['fname']];
  277. $config = json_decode($zyv['cfg'], true);
  278. $dvalue = array(0 => array('rar', 'zip', 'tar', '.tz'),
  279. 1 => array('jpg', 'gif', 'png', 'bmp'),
  280. 2 => array('mp3', 'mp4', 'avi', 'wmv', 'mid', '.rm', 'mvb', 'mov', 'wma', 'wav'),
  281. 3 => array('doc', 'xls', 'txt', 'ocx', 'lsx', 'ppt', 'pdf', 'chm'),
  282. 4 => array('doc', 'xls', 'txt', 'ocx', 'lsx', 'ppt', 'pdf', 'chm', 'mp3', 'mp4', 'avi', 'wmv', 'mid', '.rm', 'mvb', 'mov', 'wma', 'wav', 'jpg', 'gif', 'png', 'bmp', 'rar', 'zip', 'tar', '.tz')
  283. );
  284. $otype = substr(strtolower($dbinfo['data'][$key][$zyv['fname']]), -3);
  285. if (in_array($otype, $dvalue[0])) {
  286. $dbinfo['data'][$key][$zyv['fname']] = "<a href=\"/uplods/pic/" . $dbinfo['data'][$key][$zyv['fname']] . "\" target='_blank'><img src=\"../img/archive.png\">??[Download]</a>";
  287. }
  288. if (in_array($otype, $dvalue[1])) {
  289. if ($config['sl1'] == 1) {
  290. $dbinfo['data'][$key][$zyv['fname']] = "<img src=\"/uplods/thumb1/" . $dbinfo['data'][$key][$zyv['fname']] . "\" >";
  291. } elseif ($config['sl2'] == 1) {
  292. $dbinfo['data'][$key][$zyv['fname']] = "<img src=\"/uplods/thumb2/" . $dbinfo['data'][$key][$zyv['fname']] . "\" >";
  293. } elseif ($config['sypic'] == 1 || $config['sytxt'] == 1) {
  294. $dbinfo['data'][$key][$zyv['fname']] = "<img src=\"/uplods/sytp/" . $dbinfo['data'][$key][$zyv['fname']] . "\" width=\"100px\">";
  295. } else {
  296. $dbinfo['data'][$key][$zyv['fname']] = "<img src=\"/uplods/pic/" . $dbinfo['data'][$key][$zyv['fname']] . "\" width=\"100px\">";
  297. }
  298. }
  299. if (in_array($otype, $dvalue[2])) {
  300. $dbinfo['data'][$key][$zyv['fname']] = "<a href=\"/uplods/pic/" . $dbinfo['data'][$key][$zyv['fname']] . "\" target='_blank'><img src=\"../img/film_link.png\">??[Download]</a>";
  301. }
  302. if (in_array($otype, $dvalue[3])) {
  303. $dbinfo['data'][$key][$zyv['fname']] = "<a href=\"/uplods/pic/" . $dbinfo['data'][$key][$zyv['fname']] . "\" target='_blank'><img src=\"../img/report_word.png\">??[Download]</a>";
  304. }
  305. break;
  306. }
  307. case 'radiogroup': {
  308. $tempxx = json_decode($zyv['zyz'], true);
  309. foreach ($tempxx as $value) {
  310. if ($value['yv'] == $dbinfo['data'][$key][$zyv['fname']]) {
  311. $dbinfo['data'][$key][$zyv['fname']] = $value['xv'];
  312. }
  313. }
  314. break;
  315. }
  316. case 'checkboxgroup': {
  317. $tempxx = json_decode($zyv['zyz'], true);
  318. $nowv = explode('#_#', $dbinfo['data'][$key][$zyv['fname']]);
  319. $dbinfo['data'][$key][$zyv['fname']] = '';
  320. foreach ($tempxx as $value) {
  321. if (in_array($value['yv'], $nowv)) {
  322. $dbinfo['data'][$key][$zyv['fname']].=$value['xv'] . "<BR>";
  323. }
  324. }
  325. break;
  326. }
  327. case 'combo': {
  328. $tempxx = json_decode($zyv['zyz'], true);
  329. foreach ($tempxx as $value) {
  330. if ($value['yv'] == $dbinfo['data'][$key][$zyv['fname']]) {
  331. $dbinfo['data'][$key][$zyv['fname']] = $value['xv'];
  332. }
  333. }
  334. break;
  335. }
  336. case 'combo1': {
  337. $config = json_decode($zyv['cfg'], true);
  338. $tq = Dgd(array(
  339. 'db' => 'd_sevenel',
  340. 'tn' => $config['table'],
  341. 'cd' => " " . $config['y'] . " = '" . $dbinfo['data'][$key][$zyv['fname']] . "' and " . $config['conditon'],
  342. 'limit' => 1
  343. ));
  344. $dbinfo['data'][$key][$zyv['fname']] = $tq[$config['x']];
  345. break;
  346. }
  347. case 'recommend': {
  348. $config = json_decode($zyv['cfg'], true);
  349. if ($dbinfo['data'][$key][$zyv['fname']] != 0) {
  350. $dbinfo['data'][$key][$zyv['fname']] = "<a href=\"#\" onclick='gxzd(\"" . $dbinfo['data'][$key]['id'] . "\",\"" . $zyv['fname'] . "\",\"0\")' title=\"??????????\" > <img src=\"../img/" . $config['paixu'] . "\"></a> <a href=\"#\" title=\"??[order]\" onclick='tjpx(\"" . $_POST['tid'] . "@" . $_POST['dbname'] . "\",\"" . $zyv['fname'] . "\")' > <img src=\"../img/sucaiwcom8170000bzc.gif\" ait=\"??[order]\"></a>";
  351. } else {
  352. $dbinfo['data'][$key][$zyv['fname']] = "<a href=\"#\" onclick='gxzd(\"" . $dbinfo['data'][$key]['id'] . "\",\"" . $zyv['fname'] . "\",\"1\")' title=\"????????\" ><img src=\"../img/flag.png\"></a> <a href=\"#\" title=\"??[order]\" onclick='tjpx(\"" . $_POST['tid'] . "@" . $_POST['dbname'] . "\",\"" . $zyv['fname'] . "\")' > <img src=\"../img/sucaiwcom8170000bzc.gif\" ait=\"??[order]\"></a>";
  353. }
  354. break;
  355. }
  356. }
  357. }
  358. $dbinfo['data'][$key]['addtime'] = date("Y-m-d H:i:s");
  359. $dbinfo['data'][$key]['truetime'] = date("Y-m-d H:i:s", $dbinfo['data'][$key]['at']);
  360. $dbinfo['data'][$key]['del'] = $dbinfo['data'][$key]['del'];
  361. $dbinfo['data'][$key]['log'] = $dbinfo['data'][$key]['log'];
  362. //$dbinfo['data'][$key]['opration'] = $relation->show(array(9, 10), $_POST['tid'], $dbinfo['data'][$key]['id']);
  363. }
  364. /*
  365. $tempz=$d_sevenel->Dqsql("select sum(ct) as total from `se_user` where tid = '".$_POST['tid']."' and del != '1' ");
  366. $dbinfo['dq']=$tempb;
  367. $dbinfo['zong']=$tempz[0]['total'];
  368. */ echo json_encode($dbinfo);
  369. break;
  370. }
  371. case 'width_change': {
  372. $id = $_POST['id'];
  373. Du('sevenel', 'fld', array('wd' => $_POST['width']), 'id', $id, 1);
  374. echo 'ok';
  375. break;
  376. }
  377. case 'del': {
  378. $_POST['del'] = 1;
  379. $_POST['ids'] = json_decode(stripslashes($_POST['ids']));
  380. if (is_array($_POST['ids'])) {
  381. foreach ($_POST['ids'] as $id) {
  382. Du('sevenel', $_POST['dbname'], $_POST, 'id', $id, 0);
  383. $str = $_SESSION['userinfo']['user'] . "_" . (date("Y-m-d H:i:s")) . "_D<br>";
  384. $sql = "update se_" . $_POST['dbname'] . " set log =CONCAT('" . $str . "',log) where id=" . $id . "";
  385. $d_sevenel->Desql($sql);
  386. }
  387. } else {
  388. Du('sevenel', $_POST['dbname'], $_POST, 'id', $id, 0);
  389. $str = $_SESSION['userinfo']['user'] . "_" . (date("Y-m-d H:i:s")) . "_D<br>";
  390. $sql = "update se_" . $_POST['dbname'] . " set log =CONCAT('" . $str . "',log) where id=" . $id . "";
  391. $d_sevenel->Desql($sql);
  392. }
  393. echo '{success:true,msg:\'ok\'}';
  394. break;
  395. }
  396. case 'add': {
  397. $tree_id = $_GET['tid'];
  398. Tr($_GET['tid'], 'tid');
  399. Tr($_GET['bdtid'], 'bdtid');
  400. Tr($_GET['bdid'], 'bdid');
  401. $tree = Dgd(array(
  402. 'db' => 'd_sevenel',
  403. 'cd' => "id = $tree_id",
  404. 'tn' => "tree",
  405. 'limit' => 1
  406. ));
  407. $tname = gettabname($tree['table'], $dbcfg['prefix'], true);
  408. Tr($tname, 'tname');
  409. if ($_GET['id']) {
  410. Tr($_GET['id'], 'id');
  411. $fdada = Dgd(array(
  412. 'db' => 'd_sevenel',
  413. 'cd' => " id = '" . $_GET['id'] . "' and del != '1' ",
  414. 'tn' => "$tname",
  415. 'limit' => 1
  416. ));
  417. Tr($fdada['gid'], 'gid');
  418. Tr(preg_replace("/[\s]{2,}/", "", $fdada['lg']), 'lg');
  419. }
  420. if ($_GET['id'] == 0) {
  421. Tr('??', 'action');
  422. } else {
  423. Tr('??', 'action');
  424. }
  425. if ($showcf) {
  426. $fcf = '';
  427. foreach ($showcf as $value) {
  428. if ($value['column']) {
  429. $fcf.="{
  430. layout: 'column',
  431. border: false,
  432. defaults: {
  433. columnWidth: '." . floor((10 / $value['column'])) . "',
  434. border: false
  435. },items:[
  436. ";
  437. for ($i = 0; $i < $value['column']; $i++) {
  438. $fcf.="{
  439. bodyStyle: 'padding-right:10px;',
  440. items:{
  441. xtype:'fieldset',
  442. //draggable:true,
  443. frame: false,
  444. //checkboxToggle : true,
  445. bodyStyle:'background:white;',
  446. title: '<font color=red size=4>" . $value[$i]['title'] . "</font>',
  447. autoHeight: true,
  448. items: [";
  449. foreach ($value[$i]['zd'] as $zdm) {
  450. $fcf.=EXT::GB($zdm) . ",";
  451. }
  452. $fcf = substr($fcf, 0, -1);
  453. $fcf.="]}},";
  454. }
  455. $fcf = substr($fcf, 0, -1);
  456. $fcf.="]},";
  457. } else {
  458. $fcf.="{
  459. xtype:'fieldset',
  460. bodyStyle:'background:white;',
  461. title: '<font color=red size=4>" . $value['title'] . "</font>',
  462. autoHeight: true,
  463. items: [";
  464. foreach ($value['zd'] as $zdm) {
  465. $fcf.=EXT::GB($zdm) . ",";
  466. }
  467. $fcf = substr($fcf, 0, -1);
  468. $fcf.="]},";
  469. }
  470. }
  471. $fcf = substr($fcf, 0, -1);
  472. Tr($fcf, 'fcf');
  473. Tr($plugurl, 'plugurl');
  474. Tr($plugjs, 'plugjs');
  475. Tr($fckplugin, 'fckplugin');
  476. }
  477. Ts($tmpml . 'add.html');
  478. break;
  479. }
  480. case 'save': {
  481. $id = $_POST['id'];
  482. $tree_id = $_POST['tid'];
  483. $tree = Dgd(array(
  484. 'db' => 'd_sevenel',
  485. 'cd' => "id = $tree_id",
  486. 'tn' => "tree",
  487. 'limit' => '1'
  488. ));
  489. $tabname = gettabname($tree['table'], '', true);
  490. $fld = Dgd(array(
  491. 'db' => 'd_sevenel',
  492. 'cd' => "tid = $tree_id",
  493. 'tn' => "fld"
  494. ));
  495. /* if(!$id){
  496. $wyyz='user';
  497. $wztemp=Dgd(array(
  498. 'db'=>'d_sevenel',
  499. 'cd'=>"$wyyz like '".$_POST[$wyyz]."'",
  500. 'tn'=>$tabname,
  501. 'limit'=>'1'
  502. ));
  503. if($wztemp!=''){
  504. ext_request_failure('??????');
  505. exit();
  506. }
  507. }
  508. */ foreach ($fld as $key => $value) {
  509. switch ($value['type']) {
  510. case 'datefield': {
  511. if ($value['zy'] != 1) {
  512. if (strtotime($_POST[$value['fname']])) {
  513. $save[$value['fname']] = strtotime($_POST[$value['fname']]);
  514. } else {
  515. $save[$value['fname']] = $_POST[$value['fname']];
  516. }
  517. } else {
  518. $save[$value['fname']] = $_POST[$value['fname']];
  519. }
  520. break;
  521. }
  522. case 'checkboxgroup': {
  523. $save[$value['fname']] = implode("#_#", $_POST[$value['fname']]);
  524. break;
  525. }
  526. case 'password';
  527. {
  528. if ($value['yxwk'] == '1') {
  529. if ($_POST[$value['fname']] == $_POST[$value['fname'] . '-cfrm']) {
  530. $save [$value['fname']] = md5($_POST[$value['fname']]);
  531. } else {
  532. ext_request_failure('???????');
  533. exit();
  534. }
  535. } else {
  536. $save [$value['fname']] = md5($_POST[$value['fname']]);
  537. }
  538. break;
  539. }
  540. case 'fileup': {
  541. //print_r($_FILES);exit;
  542. if ($_FILES[$value['fname']]['name'] != '') {
  543. $cp = 1;
  544. //????
  545. $config = json_decode($value['cfg'], true);
  546. $dvalue = array(0 => array('rar', 'zip', 'tar', '.tz'),
  547. 1 => array('jpg', 'gif', 'png', 'bmp'),
  548. 2 => array('mp3', 'mp4', 'avi', 'wmv', 'mid', '.rm', 'mvb', 'mov', 'wma', 'wav'),
  549. 3 => array('doc', 'xls', 'txt', 'ocx', 'lsx', 'ppt', 'pdf', 'chm'),
  550. 4 => array('doc', 'xls', 'txt', 'ocx', 'lsx', 'ppt', 'pdf', 'chm', 'mp3', 'mp4', 'avi', 'wmv', 'mid', '.rm', 'mvb', 'mov', 'wma', 'wav', 'jpg', 'gif', 'png', 'bmp', 'rar', 'zip', 'tar', '.tz')
  551. );
  552. if (!$_FILES[$value['fname']]['name']) {
  553. $cp = 0;
  554. }
  555. $otype = substr(strtolower($_FILES[$value['fname']]['name']), -3);
  556. if (!in_array($otype, $dvalue[$config['type']])) {
  557. $cp = 0;
  558. header("Content-type: text/html; charset: UTF-8");
  559. echo "{success:true,msg:'%u4E0A%u4F20%u683C%u5F0F%u4E0D%u5141%u8BB8%21%u8BF7%u8054%u7CFB%u7BA1%u5458%21<BR> Upload format is not allowed! Please contact the administrator!'}";
  560. exit;
  561. }
  562. if ($_FILES[$value['fname']]['size'] / 1000 > $config['size']) {
  563. $cp = 0;
  564. header("Content-type: text/html; charset: UTF-8");
  565. echo "{success:true,msg:'%u6587%u4EF6%u5927%u5C0F%u8D85%u8FC7%u9650%u5236%21<br> The file size limit expired!'}";
  566. exit;
  567. }
  568. if ($cp) {
  569. $bsname = time();
  570. $bcname = $bsname . "." . $otype;
  571. $filename = "../../uplods/pic/" . $bcname;
  572. $copymes = copy($_FILES[$value['fname']]['tmp_name'], $filename);
  573. $save[$value['fname']] = $bcname;
  574. }
  575. if (in_array($otype, $dvalue[1])) {
  576. if ($config['sl1'] == 1) {
  577. @createthumb($_FILES[$value['fname']]['tmp_name'], "." . $otype, $bsname, $config['sl1x'], $config['sl1y'], '1');
  578. }
  579. if ($config['sl2'] == 1) {
  580. @createthumb($_FILES[$value['fname']]['tmp_name'], "." . $otype, $bsname, $config['sl2x'], $config['sl2y'], '2');
  581. }
  582. if ($config['sypic'] == 1) {
  583. $sypicname = "../../uplods/sypic/" . $bcname;
  584. $sypicwz = "../../uplods/" . $config['sytp'] . "";
  585. //echo $sypicwz ,$config['sytp'],$config['sywz'];
  586. @imageWaterMark($filename, $sypicname, $config['sypicwz'], $sypicwz, "", 20, 'wqy-microhei-lite.ttc', "#00FF00");
  587. }
  588. if ($config['sytxt'] == 1) {
  589. $sypicname = "../../uplods/sytxt/" . $bcname;
  590. $sypicwz = "";
  591. @imageWaterMark($filename, $sypicname, $config['sytxtwz'], "", $config['sywz'], $config['sywzdx'], $config['syzt'], "#" . $config['syys']);
  592. }
  593. if ($config['sytxt'] == 1 && $config['sypic'] == 1) {
  594. $filename = "../../uplods/sypic/" . $bcname;
  595. $sypicname = "../../uplods/sytp/" . $bcname;
  596. $sypicwz = "";
  597. @imageWaterMark($filename, $sypicname, $config['sytxtwz'], "", $config['sywz'], $config['sywzdx'], $config['syzt'], "#" . $config['syys']);
  598. }
  599. }
  600. }
  601. break;
  602. }
  603. default: {
  604. $save[$value['fname']] = $_POST[$value['fname']];
  605. }
  606. }
  607. }
  608. $save['tid'] = $tree_id;
  609. !$_POST['lg'] && $save['lg'] = 'zh';
  610. $_POST['bdid'] && $save['bdid'] = $_POST['bdid'];
  611. $_POST['bdtid'] && $save['bdtid'] = $_POST['bdtid'];
  612. !$_POST['gid'] && $save['gid'] = Mct();
  613. $save['at'] = time();
  614. //???
  615. if ($id != 0) {
  616. if ($listcf['editdisble'] != '') {
  617. foreach ($listcf['editdisble'] as $tv) {
  618. unset($save[$tv]);
  619. }
  620. }
  621. if (Du('sevenel', $tabname, $save, 'id', $id, 1)) {
  622. ext_request('ok');
  623. $str = $_SESSION['userinfo']['user'] . "_" . (date("Y-m-d H:i:s")) . "_U<br>";
  624. $sql = "update se_" . $tabname . " set log =CONCAT('" . $str . "',log) where id=" . $id . "";
  625. $d_sevenel->Desql($sql);
  626. }
  627. } else {
  628. $save['addtime'] = strtotime(date("Y-m-d H:i:s"));
  629. $save['log'] = $_SESSION['userinfo']['user'] . "_" . (date("Y-m-d H:i:s")) . "_I<br>";
  630. if (Di('sevenel', $tabname, $save))
  631. ;
  632. ext_request('ok');
  633. }
  634. break;
  635. }
  636. case 'yuding': {
  637. $id = $_POST['id'];
  638. $prodinfo = Dgd(array(
  639. 'db' => 'd_sevenel',
  640. 'cd' => "id = $id",
  641. 'tn' => "info",
  642. 'limit' => '1'
  643. ));
  644. if ($prodinfo) {
  645. $insert['tid'] = '108';
  646. $insert['tt'] = $prodinfo['tt'];
  647. $insert['pic1'] = $prodinfo['pic1'];
  648. $insert['ct'] = $prodinfo['ct'];
  649. $insert['input2'] = $prodinfo['input2'];
  650. $insert['input1'] = $prodinfo['input1'];
  651. $insert['ubb1'] = $prodinfo['ubb1'];
  652. $insert['input4'] = $_SESSION['userinfo']['user'];
  653. $insert['input5'] = $_POST['num'];
  654. $insert['input6'] = $_POST['num'] * $prodinfo['ct'];
  655. $insert['tj1'] = 2;
  656. $insert['lg'] = 'zh';
  657. $insert['bdid'] = $prodinfo['id'];
  658. $insert['bdtid'] = $prodinfo['tid'];
  659. $insert['gid'] = Mct();
  660. $insert['at'] = time();
  661. Di('sevenel', 'info', $insert);
  662. echo "????????????";
  663. exit;
  664. } else {
  665. echo "????,??????";
  666. exit;
  667. }
  668. break;
  669. }
  670. case 'qkzd': {
  671. $save[$_POST['zd']] = '';
  672. if (Du('sevenel', $_POST['tname'], $save, 'id', $_POST['id'], 1))
  673. ext_request('ok'); break;
  674. }
  675. case 'gxzd': {
  676. $save[$_POST['zd']] = $_POST['xz'];
  677. if (Du('sevenel', $_POST['tname'], $save, 'id', $_POST['id'], 1))
  678. ext_request('ok'); break;
  679. }
  680. default: {
  681. Ts($tmpml . 'index.html');
  682. break;
  683. }
  684. }
  685. ?>