PageRenderTime 47ms CodeModel.GetById 17ms RepoModel.GetById 1ms app.codeStats 0ms

/apps/photos/admin/manage.php

https://bitbucket.org/johnroyer/phpwind8.7
PHP | 308 lines | 280 code | 24 blank | 4 comment | 96 complexity | e69e347c46edf3e9631b1e13b8ddd803 MD5 | raw file
    

  1. <?php

    2. 

  2. !function_exists('adminmsg') && exit('Forbidden');

    3. 

  3. 

    4. 

  4. //* @include_once pwCache::getPath(D_P.'data/bbscache/o_config.php');

    5. 

  5. pwCache::getData(D_P.'data/bbscache/o_config.php');

    6. 

  6. !$action && $action = 'albums';

    7. 

  7. if ($action == 'albums') {

    8. 

  8. 

    9. 

  9. 	if ($job == 'delete') {

    10. 

  10. 

    11. 

  11. 		S::gp(array('selid','aname','owner','crtime_s','crtime_e','lasttime_s','lasttime_e','private','lines','orderway','ordertype'));

    12. 

  12. 		empty($selid) && adminmsg("no_album_selid", "$basename&action=albums");

    13. 

  13. 		require_once(R_P . 'u/require/core.php');

    14. 

  14. 		foreach ($selid as $key => $aid) {

    15. 

  15. 			$query = $db->query("SELECT cn.pid,cn.path,cn.ifthumb,ca.ownerid FROM pw_cnphoto cn LEFT JOIN pw_cnalbum ca ON cn.aid=ca.aid WHERE cn.aid=" . S::sqlEscape($aid));

    16. 

  16. 			if (($num = $db->num_rows($query)) > 0) {

    17. 

  17. 				$affected_rows = 0;

    18. 

  18. 				while ($rt = $db->fetch_array($query)) {

    19. 

  19. 					$uids[] = $rt['ownerid'];

    20. 

  20. 					pwDelatt($rt['path'], $db_ifftp);

    21. 

  21. 					if ($rt['ifthumb']) {

    22. 

  22. 						$lastpos = strrpos($rt['path'],'/') + 1;

    23. 

  23. 						pwDelatt(substr($rt['path'], 0, $lastpos) . 's_' . substr($rt['path'], $lastpos), $db_ifftp);

    24. 

  24. 					}

    25. 

  25. 					$affected_rows += delAppAction('photo',$rt['pid'])+1;//TODO 效率？

    26. 

  26. 				}

    27. 

  27. 				pwFtpClose($ftp);

    28. 

  28. 				countPosts("-$affected_rows");

    29. 

  29. 			}

    30. 

  30. 			$db->update("DELETE FROM pw_cnphoto WHERE aid=" . S::sqlEscape($aid));

    31. 

  31. 			$db->update("DELETE FROM pw_cnalbum WHERE aid=" . S::sqlEscape($aid));

    32. 

  32. 		}

    33. 

  33. 		$uids = array_unique($uids);

    34. 

  34. 		updateUserAppNum($uids,'photo','recount');

    35. 

  35. 		adminmsg('operate_success',"$basename&action=albums&job=list&aname=".rawurlencode($aname)."&owner=".rawurlencode($owner)."&crtime_s=$crtime_s&crtime_e=$crtime_e&lasttime_s=$lasttime_s&lasttime_e=$lasttime_e&private=$private&lines=$lines&orderway=$orderway&ordertype=$ordertype&page=$page&");

    36. 

  36. 	} elseif ($job == 'edit') {

    37. 

  37. 		S::gp(array('aid'));

    38. 

  38. 		$album = $db->get_one("SELECT * FROM pw_cnalbum WHERE aid=".S::sqlEscape($aid));

    39. 

  39. 		empty($album) && Showmsg('album_not_exist',"$basename&action=albums");

    40. 

  40. 		if (empty($_POST['step'])) {

    41. 

  41. 			S::gp(array('aname','owner','crtime_s','crtime_e','lasttime_s','lasttime_e','private','lines','orderway','ordertype','page'));

    42. 

  42. 			${'private_'.$album['private']} = 'selected';

    43. 

  43. 			require_once PrintApp('admin');

    44. 

  44. 		} else {

    45. 

  45. 			S::gp(array('aname','aintro','private','pwd','repwd'));

    46. 

  46. 			S::gp(array('url_aname','url_owner','url_crtime_s','url_crtime_e','url_lasttime_s','url_lasttime_e','url_private','url_lines','url_orderway','url_ordertype','url_page'));

    47. 

  47. 			//密碼情況

    48. 

  48. 			if ($pwd) {

    49. 

  49. 				if (strlen($pwd) < 3 || strlen($pwd) > 15) {

    50. 

  50. 					Showmsg('photo_password_minlimit');

    51. 

  51. 				}

    52. 

  52. 				$S_key = array("\\",'&',' ',"'",'"','/','*',',','<','>',"\r","\t","\n",'#','%','?');

    53. 

  53. 				if (str_replace($S_key,'',$pwd) != $pwd) {

    54. 

  54. 					Showmsg('illegal_password');

    55. 

  55. 				}

    56. 

  56. 				if ($pwd != $repwd) {

    57. 

  57. 					Showmsg('password_confirm');

    58. 

  58. 				}

    59. 

  59. 				$pwd = md5($pwd);

    60. 

  60. 				$sqlArr = array('aname' => $aname,'aintro' => $aintro, 'private' => $private, 'albumpwd'=>$pwd);

    61. 

  61. 			} else {

    62. 

  62. 				$sqlArr = array('aname' => $aname,'aintro' => $aintro, 'private' => $private);

    63. 

  63. 			}

    64. 

  64. 			$db->update("UPDATE pw_cnalbum SET ".S::sqlSingle($sqlArr)." WHERE aid=".S::sqlEscape($aid));

    65. 

  65. 			adminmsg('operate_success',"$basename&action=albums&job=list&aname=".rawurlencode($url_aname)."&owner=".rawurlencode($url_owner)."&crtime_s=$url_crtime_s&crtime_e=$url_crtime_e&lasttime_s=$url_lasttime_s&lasttime_e=$url_lasttime_e&private=$url_private&lines=$url_lines&orderway=$url_orderway&ordertype=$url_ordertype&page=$url_page&");

    66. 

  66. 		}

    67. 

  67. 	} else {

    68. 

  68. 		S::gp(array('aname','owner','crtime_s','crtime_e','lasttime_s','lasttime_e','private','lines','orderway','ordertype','page', 'searchDisplay'));

    69. 

  69. 		$photoPrivateSelection = array(

    70. 

  70. 			'-1'=>'不限制', 

    71. 

  71. 			'0'=>'全站可見', 

    72. 

  72. 			'1'=>'僅好友可見', 

    73. 

  73. 			'2'=>'僅自己可見', 

    74. 

  74. 			'3'=>'需要密碼訪問',

    75. 

  75. 		);

    76. 

  76. 		$photoPrivateSelection = formSelect('private', $private, $photoPrivateSelection, 'class="select_wa"');

    77. 

  77. 		$orderBySelection = array(

    78. 

  78. 			'crtime'=>'按發表時間排序',

    79. 

  79. 			'lasttime'=>'最後更新時間',

    80. 

  80. 		);

    81. 

  81. 		$orderBySelection = formSelect('orderway', $orderway, $orderBySelection, 'class="select_wa fl mr20"');

    82. 

  82. 		$crttimeStartString = $crtime_s && is_numeric($crtime_s) ? get_date($crtime_s, 'Y-m-d') : $crtime_s;

    83. 

  83. 		$crttimeEndString = $crtime_e && is_numeric($crtime_e) ? get_date($crtime_e, 'Y-m-d') : $crtime_e;

    84. 

  84. 		$lasttimeStartString = $lasttime_s && is_numeric($lasttime_s) ? get_date($lasttime_s, 'Y-m-d') : $lasttime_s;

    85. 

  85. 		$lasttimeEndString = $lasttime_e && is_numeric($lasttime_e) ? get_date($lasttime_e, 'Y-m-d') : $lasttime_e;

    86. 

  86. 		$lines = $lines <= 0 ? 30 : $lines;

    87. 

  87. 		$private = null === $private ? -1 : $private;

    88. 

  88. 		null === $searchDisplay && $searchDisplay = 'none';

    89. 

  89. 		

    90. 

  90. 		$ascChecked = $ordertype == 'asc' ? 'checked' : '';

    91. 

  91. 		$descChecked = !$ascChecked ? 'checked' : '';

    92. 

  92. 		

    93. 

  93. 		$albumdb = array();

    94. 

  94. 		if (empty($aname) && empty($owner) && empty($crtime_s) && empty($crtime_e) && empty($lasttime_s) && empty($lasttime_e) && ($private == '-1')) {

    95. 

  95. 			$noticeMessage = getLangInfo('cpmsg', 'noenough_condition');

    96. 

  96. 		} else {

    97. 

  97. 		

    98. 

  98. 		$encode_aname = rawurlencode($aname);

    99. 

  99. 		$encode_owner = rawurlencode($owner);

    100. 

  100. 		$crtime_s && !is_numeric($crtime_s) && $crtime_s = PwStrtoTime($crtime_s);

    101. 

  101. 		$crtime_e && !is_numeric($crtime_e) && $crtime_e = PwStrtoTime($crtime_e);

    102. 

  102. 		$crtime_e && $sqlcrtime_e = $crtime_e + 86400;

    103. 

  103. 		$lasttime_s && !is_numeric($lasttime_s) && $lasttime_s = PwStrtoTime($lasttime_s);

    104. 

  104. 		$lasttime_e && !is_numeric($lasttime_e) && $lasttime_e = PwStrtoTime($lasttime_e);

    105. 

  105. 		$lasttime_e && $sqllasttime_e = $lasttime_e + 86400;

    106. 

  106. 		$sql = "atype='0'";

    107. 

  107. 		$urladd = '';

    108. 

  108. 		if ($aname) {

    109. 

  109. 			$aname = str_replace('*','%',$aname);

    110. 

  110. 			$sql .= ' AND aname LIKE '.S::sqlEscape($aname);

    111. 

  111. 			$urladd .= '&aname='.rawurlencode($aname);

    112. 

  112. 		}

    113. 

  113. 		if ($owner) {

    114. 

  114. 			$owner = str_replace('*','%',$owner);

    115. 

  115. 			$sql .= ' AND owner LIKE '.S::sqlEscape($owner);

    116. 

  116. 			$urladd .= '&owner='.rawurlencode($owner);

    117. 

  117. 		}

    118. 

  118. 		if ($crtime_s) {

    119. 

  119. 			$sql .= ' AND crtime>='.S::sqlEscape($crtime_s);

    120. 

  120. 			$urladd .= "&crtime_s=$crtime_s";

    121. 

  121. 		}

    122. 

  122. 		if ($crtime_e) {

    123. 

  123. 			$sql .= ' AND crtime<='.S::sqlEscape($sqlcrtime_e);

    124. 

  124. 			$urladd .= "&crtime_e=$crtime_e";

    125. 

  125. 		}

    126. 

  126. 		if ($lasttime_s) {

    127. 

  127. 			$sql .= ' AND lasttime>='.S::sqlEscape($lasttime_s);

    128. 

  128. 			$urladd .= "&lasttime_s=$lasttime_s";

    129. 

  129. 		}

    130. 

  130. 		if ($lasttime_e) {

    131. 

  131. 			$sql .= ' AND lasttime<='.S::sqlEscape($sqllasttime_e);

    132. 

  132. 			$urladd .= "&lasttime_e=$lasttime_e";

    133. 

  133. 		}

    134. 

  134. 		if ($private != -1) {

    135. 

  135. 			$sql .= ' AND private='.S::sqlEscape($private);

    136. 

  136. 			$urladd .= "&private=$private";

    137. 

  137. 		}

    138. 

  138. 		$orderway = $orderway == 'crtime' ? 'crtime' : 'lasttime';

    139. 

  139. 		$ordertype = $ordertype == 'asc' ? 'asc' : 'desc';

    140. 

  140. 		$urladd .= "&orderway=$orderway&ordertype=$ordertype&lines=$lines&searchDisplay=$searchDisplay";

    141. 

  141. 		$count = $db->get_value("SELECT COUNT(*) AS count FROM pw_cnalbum WHERE $sql");

    142. 

  142. 		//empty($count) && adminmsg('album_not_exist',"$basename&action=albums");

    143. 

  143. 		!is_numeric($lines) && $lines=30;

    144. 

  144. 		$page < 1 && $page = 1;

    145. 

  145. 		$numofpage = ceil($count/$lines);

    146. 

  146. 		if ($numofpage && $page > $numofpage) {

    147. 

  147. 			$page = $numofpage;

    148. 

  148. 		}

    149. 

  149. 		$pages=numofpage($count,$page,$numofpage,"$basename&action=$action&job=list$urladd&");

    150. 

  150. 		$start = ($page-1)*$lines;

    151. 

  151. 		$limit = S::sqlLimit($start,$lines);

    152. 

  152. 		$query = $db->query("SELECT aid,aname,private,ownerid,owner,photonum,lasttime,lastpid,crtime FROM pw_cnalbum WHERE $sql "."ORDER BY $orderway $ordertype ".$limit);

    153. 

  153. 		while ($rt = $db->fetch_array($query)) {

    154. 

  154. 			$rt['s_aname'] = substrs($rt['aname'],30);

    155. 

  155. 			$rt['lasttime'] = $rt['lasttime'] ? get_date($rt['lasttime']) : '-';

    156. 

  156. 			$rt['crtime'] 	= $rt['crtime'] ? get_date($rt['crtime']) : '-';

    157. 

  157. 			$albumdb[] = $rt;

    158. 

  158. 		}

    159. 

  159. 		

    160. 

  160. 		}

    161. 

  161. 		

    162. 

  162. 		$aname = str_replace('%', '*', $aname);

    163. 

  163. 		$owner = str_replace('%', '*', $owner);

    164. 

  164. 		

    165. 

  165. 		require_once PrintApp('admin');

    166. 

  166. 	}

    167. 

  167. } elseif ($action == 'photos') {

    168. 

  168. 	

    169. 

  169. 	${'ordertypedesc'} = 'checked';

    170. 

  170. 		

    171. 

  171. 	if ($job == 'delete') {

    172. 

  172. 

    173. 

  173. 		S::gp(array('aid','aname','uploader','pintro','uptime_s','uptime_e','orderway','ordertype','lines','page','selid'));

    174. 

  174. 		require_once(R_P . 'u/require/core.php');

    175. 

  175. 		foreach ($selid as $key => $pid) {

    176. 

  176. 			$photo = $db->get_one("SELECT cp.path,ca.aid,ca.lastphoto,ca.lastpid,ca.ownerid FROM pw_cnphoto cp LEFT JOIN pw_cnalbum ca ON cp.aid=ca.aid WHERE cp.pid=" . S::sqlEscape($pid) . " AND ca.atype='0'");

    177. 

  177. 			if (empty($photo)) {

    178. 

  178. 				adminmsg('data_error',"$basename&action=photos");

    179. 

  179. 			}

    180. 

  180. 			$uids[] = $photo['ownerid'];

    181. 

  181. 			$db->update("DELETE FROM pw_cnphoto WHERE pid=" . S::sqlEscape($pid));

    182. 

  182. 

    183. 

  183. 			$pwSQL = array();

    184. 

  184. 			if ($photo['path'] == $photo['lastphoto']) {

    185. 

  185. 				$pwSQL['lastphoto'] = $db->get_value("SELECT path FROM pw_cnphoto WHERE aid=" . S::sqlEscape($photo['aid']) . " ORDER BY pid DESC LIMIT 1");

    186. 

  186. 			}

    187. 

  187. 			if (strpos(",$photo[lastpid],",",$pid,") !== false) {

    188. 

  188. 				$pwSQL['lastpid'] = implode(',',getLastPid($photo['aid']));

    189. 

  189. 			}

    190. 

  190. 			$upsql = $pwSQL ? ',' . S::sqlSingle($pwSQL) : '';

    191. 

  191. 			$db->update("UPDATE pw_cnalbum SET photonum=photonum-1{$upsql} WHERE aid=" . S::sqlEscape($photo['aid']));

    192. 

  192. 

    193. 

  193. 			pwDelatt($photo['path'], $db_ifftp);

    194. 

  194. 			$lastpos = strrpos($photo['path'],'/') + 1;

    195. 

  195. 			pwDelatt(substr($photo['path'], 0, $lastpos) . 's_' . substr($photo['path'], $lastpos), $db_ifftp);

    196. 

  196. 			pwFtpClose($ftp);

    197. 

  197. 

    198. 

  198. 			$affected_rows = delAppAction('photo',$pid) + 1;

    199. 

  199. 			countPosts("-$affected_rows");

    200. 

  200. 		}

    201. 

  201. 		$uids = array_unique($uids);

    202. 

  202. 		updateUserAppNum($uids,'photo','recount');

    203. 

  203. 		adminmsg('operate_success',"$basename&action=photos&job=list&aid=$aid&aname=".rawurlencode($aname)."&uploader=".rawurlencode($uploader)."&pintro=".rawurlencode($pintro)."&uptime_s=$uptime_s&uptime_e=$uptime_e&orderway=$orderway&ordertype=$ordertype&lines=$lines&page=$page&");

    204. 

  204. 

    205. 

  205. 	} else {

    206. 

  206. 

    207. 

  207. 		require_once(R_P . 'u/require/core.php');

    208. 

  208. 		S::gp(array('aid','aname','uploader','pintro','uptime_s','uptime_e','orderway','ordertype','lines','page'));

    209. 

  209. 		$cnpho = array();

    210. 

  210. 		$orderBySelection = array(

    211. 

  211. 			'default'=>'默認排序',

    212. 

  212. 			'uptime'=>'上傳日期',

    213. 

  213. 			'hits'=>'瀏覽數',

    214. 

  214. 			'c_num'=>'評論數',

    215. 

  215. 		);

    216. 

  216. 		$orderBySelection = formSelect('orderway', $orderway, $orderBySelection, 'class="select_wa fl mr20"');

    217. 

  217. 		$uptimeStartString = $uptime_s && is_numeric($uptime_s) ? get_date($uptime_s, 'Y-m-d') : $uptime_s;

    218. 

  218. 		$uptimeEndString = $uptime_e && is_numeric($uptime_e) ? get_date($uptime_e, 'Y-m-d') : $uptime_e;

    219. 

  219. 		!is_numeric($lines) && $lines = 30;

    220. 

  220. 		

    221. 

  221. 		if (empty($aid) && empty($aname) && empty($uploader) && empty($pintro) && empty($uptime_s) && empty($uptime_e)) {

    222. 

  222. 			$noticeMessage = getLangInfo('cpmsg', 'noenough_condition');

    223. 

  223. 		} else {

    224. 

  224. 		$uptime_s=$uptime_s && !is_numeric($uptime_s) ?  PwStrtoTime($uptime_s):$uptime_s;

    225. 

  225. 		$uptime_e=$uptime_e && !is_numeric($uptime_e) ?  PwStrtoTime($uptime_e):$uptime_e;	

    226. 

  226. 		$uptime_e && $sqluptime_e = $uptime_e + 86400;

    227. 

  227. 		$urladd = '';

    228. 

  228. 		$sql = "ca.atype='0'";

    229. 

  229. 		if ($aid) {

    230. 

  230. 			$sql .= ' AND ca.aid ='.S::sqlEscape($aid);

    231. 

  231. 			$urladd .= '&aid='.$aid;

    232. 

  232. 		}

    233. 

  233. 		if ($aname) {

    234. 

  234. 			$aname = str_replace('*','%',$aname);

    235. 

  235. 			$sql .= ' AND ca.aname LIKE '.S::sqlEscape($aname);

    236. 

  236. 			$urladd .= '&aname='.rawurlencode($aname);

    237. 

  237. 		}

    238. 

  238. 		if ($uploader) {

    239. 

  239. 			$uploader = str_replace('*','%',$uploader);

    240. 

  240. 			$sql .= ' AND cp.uploader LIKE '.S::sqlEscape($uploader);

    241. 

  241. 			$urladd .= '&uploader='.rawurlencode($uploader);

    242. 

  242. 		}

    243. 

  243. 		if ($pintro) {

    244. 

  244. 			$pintro = str_replace('*','%',$pintro);

    245. 

  245. 			$sql .= ' AND cp.pintro LIKE '.S::sqlEscape($pintro);

    246. 

  246. 			$urladd .= '&pintro='.rawurlencode($pintro);

    247. 

  247. 		}

    248. 

  248. 		if ($uptime_s) {

    249. 

  249. 			$sql .= ' AND cp.uptime>='.S::sqlEscape($uptime_s);

    250. 

  250. 			$urladd .= "&uptime_s=$uptime_s";

    251. 

  251. 		}

    252. 

  252. 		if ($uptime_e) {

    253. 

  253. 			$sql .= ' AND cp.uptime<='.S::sqlEscape($sqluptime_e);

    254. 

  254. 			$urladd .= "&uptime_e=$uptime_e";

    255. 

  255. 		}

    256. 

  256. 		switch ($orderway) {

    257. 

  257. 			case 'uptime' :

    258. 

  258. 				$orderway = 'cp.uptime';

    259. 

  259. 				$orderwayurl = 'uptime';

    260. 

  260. 				break;

    261. 

  261. 			case 'hits' :

    262. 

  262. 				$orderway = 'cp.hits';

    263. 

  263. 				$orderwayurl = 'hits';

    264. 

  264. 				break;

    265. 

  265. 			case 'c_num' :

    266. 

  266. 				$orderway = 'cp.c_num';

    267. 

  267. 				$orderwayurl = 'c_num';

    268. 

  268. 				break;

    269. 

  269. 			default:

    270. 

  270. 				$orderway = '';break;

    271. 

  271. 		}

    272. 

  272. 		${'ordertypedesc'} = '';

    273. 

  273. 		$ordertype == 'asc' ? 'asc' : 'desc';

    274. 

  274. 		

    275. 

  275. 		${'ordertype'.$ordertype} = 'checked';

    276. 

  276. 		

    277. 

  277. 		$sqladd = $orderway ? "ORDER BY $orderway $ordertype" : '';

    278. 

  278. 		$urladd .= $orderwayurl ? "&orderway=$orderwayurl&ordertype=$ordertype" : '';

    279. 

  279. 		$count = $db->get_value("SELECT COUNT(*) AS count FROM pw_cnphoto cp LEFT JOIN pw_cnalbum ca ON cp.aid=ca.aid WHERE $sql");

    280. 

  280. 		//empty($count) && adminmsg('no_photos',"$basename&action=photos&job=list");

    281. 

  281. 		

    282. 

  282. 		$page < 1 && $page = 1;

    283. 

  283. 		$numofpage = ceil($count/$lines);

    284. 

  284. 		if ($numofpage && $page > $numofpage) {

    285. 

  285. 			$page = $numofpage;

    286. 

  286. 		}

    287. 

  287. 		$pages=numofpage($count,$page,$numofpage,"$basename&action=$action&job=list&lines=$lines$urladd&");

    288. 

  288. 		$start = ($page-1)*$lines;

    289. 

  289. 		$limit = S::sqlLimit($start,$lines);

    290. 

  290. 		$query = $db->query("SELECT cp.pid,cp.aid,cp.path,cp.uploader,cp.uptime,cp.ifthumb,cp.hits,cp.c_num,ca.aname FROM pw_cnphoto cp LEFT JOIN pw_cnalbum ca ON cp.aid=ca.aid WHERE ".$sql." ".$sqladd." ".$limit);

    291. 

  291. 		$cnpho = array();

    292. 

  292. 		while ($rt = $db->fetch_array($query)) {

    293. 

  293. 			$rt['s_aname']	= substrs($rt['aname'],10);

    294. 

  294. 			$rt['path']	= getphotourl($rt['path'], $rt['ifthumb']);

    295. 

  295. 			$rt['uptime']	= get_date($rt['uptime']);

    296. 

  296. 			$cnpho[] = $rt;

    297. 

  297. 		}

    298. 

  298. 		

    299. 

  299. 		$aname = str_replace('%', '*', $aname);

    300. 

  300. 		$uploader = str_replace('%', '*', $uploader);

    301. 

  301. 		$pintro = str_replace('%', '*', $pintro);

    302. 

  302. 		

    303. 

  303. 		}

    304. 

  304. 		

    305. 

  305. 		require_once PrintApp('admin');

    306. 

  306. 	}

    307. 

  307. }

    308. 

  308. ?>
    309.