PageRenderTime 54ms CodeModel.GetById 14ms RepoModel.GetById 1ms app.codeStats 0ms

/source/include/portalcp/portalcp_block.php

https://github.com/kuaileshike/upload
PHP | 1044 lines | 928 code | 110 blank | 6 comment | 297 complexity | 377d56a7dcc272834c11801e9792562d MD5 | raw file
    

  1. <?php
    2. 

  2. 

  3. /**
    4. 

  4.  *      [Discuz!] (C)2001-2099 Comsenz Inc.
    5. 

  5.  *      This is NOT a freeware, use is subject to license terms
    6. 

  6.  *
    7. 

  7.  *      $Id: portalcp_block.php 31516 2012-09-04 09:19:42Z zhangguosheng $
    8. 

  8.  */
    9. 

  9. 

  10. if(!defined('IN_DISCUZ')) {
    11. 

  11. 	exit('Access Denied');
    12. 

  12. }
    13. 

  13. 

  14. include_once libfile('function/block');
    15. 

  15. $oparr = array('block', 'data', 'style', 'itemdata', 'setting', 'remove', 'item', 'additem', 'blockclass',
    16. 

  16. 				'getblock', 'thumbsetting', 'push', 'recommend', 'verifydata', 'managedata',
    17. 

  17. 				'saveblockclassname', 'saveblocktitle', 'convert', 'favorite', 'banids', 'delrecommend', 'moreurl');
    18. 

  18. $op = in_array($_GET['op'], $oparr, true) ? $_GET['op'] : 'block';
    19. 

  19. $_GET['from'] = $_GET['from'] == 'cp' ? 'cp' : null;
    20. 

  20. $allowmanage = $allowdata = 0;
    21. 

  21. 

  22. $block = array();
    23. 

  23. $bid = !empty($_GET['bid']) ? intval($_GET['bid']) : 0;
    24. 

  24. if($bid) {
    25. 

  25. 	if(!($block = C::t('common_block')->fetch($bid))) {
    26. 

  26. 		showmessage('block_not_exist');
    27. 

  27. 	}
    28. 

  28. 

  29. 	$blockstyle = array();
    30. 

  30. 	if(!empty($block['styleid'])) {
    31. 

  31. 		$blockstyle = block_getstyle($block['styleid']);
    32. 

  32. 	} else {
    33. 

  33. 		$blockstyle = dunserialize($block['blockstyle']);
    34. 

  34. 	}
    35. 

  35. 	$block['moreurl'] = $blockstyle['moreurl'] && in_array($block['blockclass'], array('forum_thread', 'portal_article', 'group_thread'), true) ? 1 : 0;
    36. 

  36. 

  37. 	$_G['block'][$bid] = $block;
    38. 

  38. 	$blockperm = getblockperm($bid);
    39. 

  39. 	if($blockperm['allowmanage']) {
    40. 

  40. 		$allowmanage = 1;
    41. 

  41. 		$allowdata = 1;
    42. 

  42. 	}
    43. 

  43. 	if ($blockperm['allowrecommend'] && !$blockperm['needverify']) {
    44. 

  44. 		$allowdata = 1;
    45. 

  45. 	}
    46. 

  46. }
    47. 

  47. 

  48. if(empty($block['bid'])) {
    49. 

  49. 	$bid = 0;
    50. 

  50. }
    51. 

  51. 

  52. $_GET['classname'] = !empty($_GET['classname']) ? $_GET['classname'] : ($block ? $block['blockclass'] : 'html_html');
    53. 

  53. $theclass = block_getclass($_GET['classname'], true);
    54. 

  54. $theclass['script'] = isset($theclass['script']) ? $theclass['script'] : array();
    55. 

  55. if(!empty($_GET['styleid']) && isset($theclass['style'][$_GET['styleid']])) {
    56. 

  56. 	$thestyle = $theclass['style'][$_GET['styleid']];
    57. 

  57. } elseif(isset($theclass['style'][$block['styleid']])) {
    58. 

  58. 	$_GET['styleid'] = intval($block['styleid']);
    59. 

  59. 	$thestyle = $theclass['style'][$_GET['styleid']];
    60. 

  60. } else {
    61. 

  61. 	$_GET['styleid'] = 0;
    62. 

  62. 	$thestyle = (array)dunserialize($block['blockstyle']);
    63. 

  63. }
    64. 

  64. $_GET['script'] = !empty($_GET['script']) && isset($theclass['script'][$_GET['script']])
    65. 

  65. 		? $_GET['script']
    66. 

  66. 		: (!empty($block['script']) ? $block['script'] : key($theclass['script']));
    67. 

  67. 

  68. $blocktype = (!empty($_GET['blocktype']) || !empty($block['blocktype'])) ? 1 : 0;
    69. 

  69. $nocachetime = in_array($_GET['script'], array('blank', 'line', 'banner', 'vedio', 'google')) ? true : false;
    70. 

  70. $is_htmlblock = ($_GET['classname'] == 'html_html') ? 1 : 0;
    71. 

  71. $showhtmltip = false;
    72. 

  72. if($op == 'data' && $is_htmlblock) {
    73. 

  73. 	$op = 'block';
    74. 

  74. 	$showhtmltip = true;
    75. 

  75. }
    76. 

  76. $block['blockclass'] = empty($block['blockclass']) ? $_GET['classname'] : $block['blockclass'];
    77. 

  77. $is_recommendable = block_isrecommendable($block);
    78. 

  78. 

  79. if($op == 'block') {
    80. 

  80. 	if($bid && !$allowmanage) {
    81. 

  81. 		showmessage('block_edit_nopermission');
    82. 

  82. 	}
    83. 

  83. 	if(!$bid) {
    84. 

  84. 		list($tpl, $id) = explode(':', $_GET['tpl']);
    85. 

  85. 		if(trim($tpl)=='portal/portal_topic_content') {
    86. 

  86. 			if(!$_G['group']['allowaddtopic'] && !$_G['group']['allowmanagetopic']) {
    87. 

  87. 				showmessage('block_topic_nopermission');
    88. 

  88. 			}
    89. 

  89. 		} elseif(!$_G['group']['allowdiy']) {
    90. 

  90. 			showmessage('block_add_nopermission');
    91. 

  91. 		}
    92. 

  92. 	}
    93. 

  93. 

  94. 	if(submitcheck('blocksubmit')) {
    95. 

  95. 		$_POST['cachetime'] = intval($_POST['cachetime']) * 60;
    96. 

  96. 		$_POST['styleid'] = intval($_POST['styleid']);
    97. 

  97. 		$_POST['shownum'] = intval($_POST['shownum']);
    98. 

  98. 		$_POST['picwidth'] = $_POST['picwidth'] ? intval($_POST['picwidth']) : 0;
    99. 

  99. 		$_POST['picheight'] = $_POST['picheight'] ? intval($_POST['picheight']) : 0;
    100. 

  100. 		$_POST['script'] = isset($theclass['script'][$_POST['script']]) ? $_POST['script'] : key($theclass['script']);
    101. 

  101. 		$_POST['a_target'] = in_array($_POST['a_target'], array('blank', 'top', 'self')) ? $_POST['a_target'] : 'blank';
    102. 

  102. 		$_POST['dateformat'] = in_array($_POST['dateformat'], array('Y-m-d', 'm-d', 'H:i', 'Y-m-d H:i')) ? $_POST['dateformat'] : 'Y-m-d';
    103. 

  103. 		$_POST['isblank'] = intval($_POST['isblank']);
    104. 

  104. 		$_POST['cachetimerangestart'] = intval($_POST['cachetimerangestart']);
    105. 

  105. 		$_POST['cachetimerangeend'] = intval($_POST['cachetimerangeend']);
    106. 

  106. 		$summary = getstr($_POST['summary'], '', 0, 0, 0, 1);
    107. 

  107. 		if($summary) {
    108. 

  108. 			$tag = block_ckeck_summary($summary);
    109. 

  109. 			if($tag != $summary) {
    110. 

  110. 				$msg = lang('portalcp', 'block_diy_summary_html_tag').$tag.lang('portalcp', 'block_diy_summary_not_closed');
    111. 

  111. 				showmessage($msg);
    112. 

  112. 			}
    113. 

  113. 		}
    114. 

  114. 

  115. 		$_POST['shownum'] = $_POST['shownum'] > 0 ? $_POST['shownum'] : 10;
    116. 

  116. 		$_POST['parameter']['items'] = $_POST['shownum'];
    117. 

  117. 		$cachetimerange = $_POST['cachetimerangestart'].','.$_POST['cachetimerangeend'];
    118. 

  118. 		if(empty($_G['setting']['blockcachetimerange'])) {
    119. 

  119. 			$cachetimerange = $cachetimerange == '0,23' ? '' : $cachetimerange;
    120. 

  120. 		} else {
    121. 

  121. 			$cachetimerange = $cachetimerange == $_G['setting']['blockcachetimerange'] ? '' : $cachetimerange;
    122. 

  122. 		}
    123. 

  123. 		include_once libfile('function/home');
    124. 

  124. 		$setarr = array(
    125. 

  125. 			'name' => getstr($_POST['name'], 255),
    126. 

  126. 			'summary' => $summary,
    127. 

  127. 			'styleid' => $_POST['styleid'],
    128. 

  128. 			'script' => $_POST['script'],
    129. 

  129. 			'cachetime' => intval($_POST['cachetime']),
    130. 

  130. 			'cachetimerange' => $cachetimerange,
    131. 

  131. 			'punctualupdate' => !empty($_POST['punctualupdate']) ? '1' : '0',
    132. 

  132. 			'shownum' => $_POST['shownum'],
    133. 

  133. 			'picwidth' => $_POST['picwidth'] && $_POST['picwidth'] > 8 && $_POST['picwidth'] < 1960 ? $_POST['picwidth'] : 0,
    134. 

  134. 			'picheight' => $_POST['picheight'] && $_POST['picheight'] > 8 && $_POST['picheight'] < 1960 ? $_POST['picheight'] : 0,
    135. 

  135. 			'target' => $_POST['a_target'],
    136. 

  136. 			'dateuformat' => !empty($_POST['dateuformat']) ? '1' : '0',
    137. 

  137. 			'dateformat' => $_POST['dateformat'],
    138. 

  138. 			'hidedisplay' => $_POST['hidedisplay'] ? '1' : '0',
    139. 

  139. 			'dateline' => TIMESTAMP,
    140. 

  140. 			'isblank' => $_POST['isblank']
    141. 

  141. 		);
    142. 

  142. 

  143. 		$picdata = array();
    144. 

  144. 		if(!empty($_FILES)) {
    145. 

  145. 			foreach($_FILES as $varname => $file) {
    146. 

  146. 				if($file['tmp_name']) {
    147. 

  147. 					$result = pic_upload($file, 'portal');
    148. 

  148. 					$pic = 'portal/'.$result['pic'];
    149. 

  149. 					$picdata[] = array('bid' => $bid, 'pic' => $pic, 'picflag' =>$result['remote'] , 'type' => '1');
    150. 

  150. 					$pic = $result['remote'] ? $_G['setting']['ftp']['attachurl'].$pic : $_G['setting']['attachurl'].$pic;
    151. 

  151. 					$_POST['parameter'][$varname] = $pic;
    152. 

  152. 				}
    153. 

  153. 			}
    154. 

  154. 		}
    155. 

  155. 

  156. 		if(($block['blockclass'] == 'html_html' || $_GET['classname'] == 'html_html') && $_POST['script'] == 'blank' && isset($_POST['parameter']['content'])) {
    157. 

  157. 			$_POST['parameter']['content'] = addslashes($_POST['parameter']['content']);
    158. 

  158. 		}
    159. 

  159. 

  160. 		$parameter = $_POST['parameter'];
    161. 

  161. 		if(isset($block['param'])) {
    162. 

  162. 			$parameter = $parameter + $block['param'];
    163. 

  163. 		}
    164. 

  164. 		$setarr['param'] = serialize($parameter);
    165. 

  165. 

  166. 		if($bid) {
    167. 

  167. 			C::t('common_block')->update($bid, $setarr);
    168. 

  168. 		} else {
    169. 

  169. 			$setarr['blockclass'] = $_GET['classname'];
    170. 

  170. 			$setarr['uid'] = $_G['uid'];
    171. 

  171. 			$setarr['username'] = $_G['username'];
    172. 

  172. 			$setarr['notinherited'] = 0;
    173. 

  173. 			if($blocktype == 1) {
    174. 

  174. 				$setarr['blocktype'] = '1';
    175. 

  175. 			}
    176. 

  176. 			$bid = C::t('common_block')->insert($setarr, true);
    177. 

  177. 		}
    178. 

  178. 

  179. 		if(!empty($picdata)) {
    180. 

  180. 			C::t('common_block_pic')->insert_by_bid($bid, $picdata);
    181. 

  181. 		}
    182. 

  182. 

  183. 		$_G['block'][$bid] = C::t('common_block')->fetch($bid);
    184. 

  184. 		block_updatecache($bid, true);
    185. 

  185. 		showmessage('do_success', 'portal.php?mod=portalcp&ac=block&op=block&bid='.$bid, array('bid'=>$bid, 'eleid'=> $_GET['eleid']));
    186. 

  186. 	}
    187. 

  187. 

  188. 	loadcache('blockconvert');
    189. 

  189. 	$block['script'] = isset($block['script']) ? $block['script'] : $_GET['script'];
    190. 

  190. 

  191. 	if($block['blockclass'] == 'html_html' && $block['script'] == 'blank'){
    192. 

  192. 		$block['param']['content'] = stripslashes($block['param']['content']);
    193. 

  193. 	}
    194. 

  194. 

  195. 	$settings = block_setting($_GET['classname'], $block['script'], $block['param']);
    196. 

  196. 	$scriptarr = array($block['script'] => ' selected');
    197. 

  197. 	$stylearr = array($_GET['styleid'] => ' selected');
    198. 

  198. 

  199. 	$block = block_checkdefault($block);
    200. 

  200. 	$cachetimearr = array($block['cachetime'] =>' selected="selected"');
    201. 

  201. 	$block['cachetime_min'] = intval($block['cachetime'] / 60);
    202. 

  202. 	$targetarr[$block['target']] = ' selected';
    203. 

  203. 	$block['cachetimerange'] = empty($block['cachetimerange']) ? (isset($_G['setting']['blockcachetimerange']) ? $_G['setting']['blockcachetimerange'] : '') : $block['cachetimerange'];
    204. 

  204. 	$block['cachetimerange'] = empty($block['cachetimerange']) ? array('0', '23') : explode(',', $block['cachetimerange']);
    205. 

  205. 	$cachetimerange = range(0, 23);
    206. 

  206. 	$dateformats = block_getdateformats($block['dateformat']);
    207. 

  207. 

  208. 	$block['summary'] = dhtmlspecialchars($block['summary']);
    209. 

  209. 	$blockclassname = '';
    210. 

  210. 	$blockclass = $block['blockclass'] ? $block['blockclass'] : $_GET['classname'];
    211. 

  211. 	$arr = explode('_', $blockclass);
    212. 

  212. 	if(count($arr) == 2) {
    213. 

  213. 		$blockclassname = $_G['cache']['blockclass'][$arr[0]]['subs'][$blockclass]['name'];
    214. 

  214. 	}
    215. 

  215. 	$blockclassname = empty($blockclassname) ? $blockclass : $blockclassname;
    216. 

  216. 

  217. } elseif($op == 'banids') {
    218. 

  218. 	if(!$bid || (!$allowmanage && !$allowdata)) {
    219. 

  219. 		showmessage('block_edit_nopermission');
    220. 

  220. 	}
    221. 

  221. 

  222. 	if(isset($_GET['bannedids']) && $block['param']['bannedids'] != $_GET['bannedids']) {
    223. 

  223. 		$arr = explode(',', $_GET['bannedids']);
    224. 

  224. 		$arr = array_map('intval', $arr);
    225. 

  225. 		$arr = array_filter($arr);
    226. 

  226. 		$_GET['bannedids'] = implode(',', $arr);
    227. 

  227. 		$block['param']['bannedids'] = $_GET['bannedids'];
    228. 

  228. 		C::t('common_block')->update($bid, array('param'=>serialize($block['param'])));
    229. 

  229. 		$_G['block'][$bid] = $block;
    230. 

  230. 		block_updatecache($bid, true);
    231. 

  231. 	}
    232. 

  232. 

  233. 	showmessage('do_success', 'portal.php?mod=portalcp&ac=block&op=data&bid='.$bid, array('bid'=>$bid, 'eleid'=> $_GET['eleid']));
    234. 

  234. 

  235. } elseif($op == 'data') {
    236. 

  236. 	if(!$bid || (!$allowmanage && !$allowdata)) {
    237. 

  237. 		showmessage('block_edit_nopermission');
    238. 

  238. 	}
    239. 

  239. 

  240. 	if(submitcheck('updatesubmit')) {
    241. 

  241. 		if($_POST['displayorder']) {
    242. 

  242. 			asort($_POST['displayorder']);
    243. 

  243. 			$orders = $ids = array();
    244. 

  244. 			$order = 1;
    245. 

  245. 			foreach($_POST['displayorder'] as $k=>$v) {
    246. 

  246. 				$k = intval($k);
    247. 

  247. 				$ids[] = $k;
    248. 

  248. 				$orders[$k] = $order;
    249. 

  249. 				$order++;
    250. 

  250. 			}
    251. 

  251. 			$items = array();
    252. 

  252. 			foreach(C::t('common_block_item')->fetch_all($ids) as $value) {
    253. 

  253. 				if($value['bid'] == $bid) {
    254. 

  254. 					$items[$value['itemid']] = $value;
    255. 

  255. 				}
    256. 

  256. 			}
    257. 

  257. 			foreach($items as $key=>$value) {
    258. 

  258. 				$itemtype = !empty($_POST['locked'][$key]) ? '1' : '0';
    259. 

  259. 				if($orders[$key] != $value['displayorder'] || $itemtype != $value['itemtype']) {
    260. 

  260. 					C::t('common_block_item')->update($key, array('displayorder'=>$orders[$key], 'itemtype'=>$itemtype));
    261. 

  261. 				}
    262. 

  262. 			}
    263. 

  263. 		}
    264. 

  264. 		showmessage('do_success', 'portal.php?mod=portalcp&ac=block&op=data&bid='.$bid, array('bid'=>$bid, 'eleid'=> $_GET['eleid']));
    265. 

  265. 	}
    266. 

  266. 

  267. 	$itemlist = array();
    268. 

  268. 	if($bid) {
    269. 

  269. 		$preorders = array();
    270. 

  270. 		foreach(C::t('common_block_item')->fetch_all_by_bid($bid, true) as $value) {
    271. 

  271. 			if($value['itemtype']==1 && $value['enddate'] && $value['enddate'] <= TIMESTAMP) {
    272. 

  272. 				continue;
    273. 

  273. 			}
    274. 

  274. 			$value['ispreorder'] = false;
    275. 

  275. 			if($value['itemtype']==1) {
    276. 

  276. 				if($value['startdate'] > TIMESTAMP) {
    277. 

  277. 					$value['ispreorder'] = true;
    278. 

  278. 				} else {
    279. 

  279. 					$preorders[$value['displayorder']] = $value['itemid'];
    280. 

  280. 				}
    281. 

  281. 			}
    282. 

  282. 			$value['itemtypename'] = lang('portalcp', 'itemtypename'.$value['itemtype']);
    283. 

  283. 			$itemlist[$value['itemid']] = $value;
    284. 

  284. 		}
    285. 

  285. 		if($preorders) {
    286. 

  286. 			foreach($itemlist as $key=>$value) {
    287. 

  287. 				if(isset($preorders[$value['displayorder']]) && $value['itemid'] != $preorders[$value['displayorder']]) {
    288. 

  288. 					unset($itemlist[$key]);
    289. 

  289. 				}
    290. 

  290. 			}
    291. 

  291. 		}
    292. 

  292. 	}
    293. 

  293. 

  294. 	$block['param']['bannedids'] = !empty($block['param']['bannedids']) ? $block['param']['bannedids'] : '';
    295. 

  295. 

  296. } elseif($op == 'style') {
    297. 

  297. 	if(!$bid || !$allowmanage) {
    298. 

  298. 		showmessage('block_edit_nopermission');
    299. 

  299. 	}
    300. 

  300. 

  301. 	if(submitcheck('stylesubmit')) {
    302. 

  302. 		$_POST['name'] = trim($_POST['name']);
    303. 

  303. 		$arr = array(
    304. 

  304. 			'name' => $_POST['name'],
    305. 

  305. 			'blockclass' => $_GET['classname'],
    306. 

  306. 		);
    307. 

  307. 		$_POST['template'] = $_POST['template'];
    308. 

  308. 

  309. 		include_once libfile('function/block');
    310. 

  310. 		block_parse_template($_POST['template'], $arr);
    311. 

  311. 		if(!empty($_POST['name'])) {
    312. 

  312. 			$styleid = C::t('common_block_style')->insert($arr, true);
    313. 

  313. 		}
    314. 

  314. 		$arr['fields'] = dunserialize($arr['fields']);
    315. 

  315. 		$arr['template'] = dunserialize($arr['template']);
    316. 

  316. 		$arr = serialize($arr);
    317. 

  317. 		C::t('common_block')->update($bid, array('blockstyle'=>$arr, 'styleid'=>'0'));
    318. 

  318. 

  319. 		showmessage('do_success', 'portal.php?mod=portalcp&ac=block&op=style&bid='.$bid, array('bid'=>$bid, 'eleid'=> $_GET['eleid']));
    320. 

  320. 	}
    321. 

  321. 

  322. 	$template = block_build_template($blockstyle['template']);
    323. 

  323. 

  324. 	$samplecode = '';
    325. 

  325. 	if($block['hidedisplay']) {
    326. 

  326. 		$samplecode = '<ul>\n'
    327. 

  327. 			.'<!--{loop $_G[block_1] $key $value}-->\n'
    328. 

  328. 			.'<li><a href="$value[url]">$value[title]</a></li>\n'
    329. 

  329. 			.'<!--{/loop}-->\n'
    330. 

  330. 			.'</ul>';
    331. 

  331. 		$samplecode = dhtmlspecialchars($samplecode);
    332. 

  332. 		$samplecode = str_replace('\n', '<br />', $samplecode);
    333. 

  333. 	}
    334. 

  334. 

  335. } elseif($op == 'itemdata') {
    336. 

  336. 

  337. 	if(!$bid ||  (!$allowmanage && !$allowdata)) {
    338. 

  338. 		showmessage('block_edit_nopermission');
    339. 

  339. 	}
    340. 

  340. 	if(!$is_recommendable) {
    341. 

  341. 		showmessage('block_no_recommend_library');
    342. 

  342. 	}
    343. 

  343. 

  344. 	$theurl = 'portal.php?mod=portalcp&ac=block&op=itemdata';
    345. 

  345. 	$perpage = 20;
    346. 

  346. 	$page = max(1,intval($_GET['page']));
    347. 

  347. 	$start = ($page-1)*$perpage;
    348. 

  348. 	if($start<0) $start = 0;
    349. 

  349. 

  350. 	if(submitcheck('deletesubmit')) {
    351. 

  351. 		if(!empty($_POST['ids'])) {
    352. 

  352. 			C::t('common_block_item_data')->delete_by_dataid_bid($_POST['ids'], $bid);
    353. 

  353. 		}
    354. 

  354. 		showmessage('do_success', "portal.php?mod=portalcp&ac=block&op=itemdata&bid=$bid&page=$page");
    355. 

  355. 	}
    356. 

  356. 

  357. 	$count = C::t('common_block_item_data')->count_by_bid($bid);
    358. 

  358. 	$multi = '';
    359. 

  359. 	$datalist = array();
    360. 

  360. 	if($count) {
    361. 

  361. 		$datalist = C::t('common_block_item_data')->fetch_all_by_bid($bid, 1, $start, $perpage);
    362. 

  362. 		$multi = multi($count, $perpage, $page, "portal.php?mod=portalcp&ac=block&bid=$bid&op=itemdata");
    363. 

  363. 	}
    364. 

  364. 

  365. } elseif($op == 'setting') {
    366. 

  366. 

  367. 	if(($bid && !$allowmanage)) {
    368. 

  368. 		showmessage('block_edit_nopermission');
    369. 

  369. 	}
    370. 

  370. 

  371. 	$settings = array();
    372. 

  372. 	if($theclass['script'][$_GET['script']]) {
    373. 

  373. 		$settings = block_setting($_GET['classname'], $_GET['script'], $block['param']);
    374. 

  374. 	}
    375. 

  375. 

  376. 	$block['script'] = isset($block['script']) ? $block['script'] : $_GET['script'];
    377. 

  377. 	$scriptarr = array($block['script'] => ' selected');
    378. 

  378. 	$stylearr = array($_GET['styleid'] => ' selected');
    379. 

  379. 

  380. 	$block = block_checkdefault($block);
    381. 

  381. 	$cachetimearr = array($block['cachetime'] =>' selected="selected"');
    382. 

  382. 	$block['cachetime_min'] = intval($block['cachetime'] / 60);
    383. 

  383. 	$targetarr[$block['target']] = ' selected';
    384. 

  384. 

  385. } elseif($op == 'thumbsetting') {
    386. 

  386. 

  387. 	if(($bid && !$allowmanage)) {
    388. 

  388. 		showmessage('block_edit_nopermission');
    389. 

  389. 	}
    390. 

  390. 

  391. 	$block = block_checkdefault($block);
    392. 

  392. 	$cachetimearr = array($block['cachetime'] =>' selected="selected"');
    393. 

  393. 	$block['cachetime_min'] = intval($block['cachetime'] / 60);
    394. 

  394. 	$targetarr[$block['target']] = ' selected';
    395. 

  395. 

  396. 	$dateformats = block_getdateformats($block['dateformat']);
    397. 

  397. 

  398. } elseif($op == 'remove') {
    399. 

  399. 

  400. 	if(!$bid || (!$allowmanage && !$allowdata)) {
    401. 

  401. 		showmessage('block_edit_nopermission');
    402. 

  402. 	}
    403. 

  403. 

  404. 	if($_GET['itemid']) {
    405. 

  405. 		$_GET['itemid'] = intval($_GET['itemid']);
    406. 

  406. 		if(($item = C::t('common_block_item')->fetch($_GET['itemid'])) && $item['bid'] == $bid) {
    407. 

  407. 			C::t('common_block_item')->delete($_GET['itemid']);
    408. 

  408. 			if($item['itemtype'] != '1') {
    409. 

  409. 				block_ban_item($block, $item);
    410. 

  410. 			}
    411. 

  411. 			block_updatecache($bid, true);
    412. 

  412. 		}
    413. 

  413. 	}
    414. 

  414. 	showmessage('do_success', "portal.php?mod=portalcp&ac=block&op=data&bid=$bid", array('bid'=>$bid));
    415. 

  415. 

  416. } elseif( in_array($op, array('item', 'additem', 'push', 'recommend', 'verifydata', 'managedata'))) {
    417. 

  417. 

  418. 	if(!$bid) {
    419. 

  419. 		showmessage('block_edit_nopermission');
    420. 

  420. 	}
    421. 

  421. 

  422. 	$itemid = $_GET['itemid'] ? intval($_GET['itemid']) : 0;
    423. 

  423. 	$dataid = $_GET['dataid'] ? intval($_GET['dataid']) : 0;
    424. 

  424. 	$_GET['id'] = intval($_GET['id']);
    425. 

  425. 	$_GET['idtype'] = preg_replace('/[^\w]/', '', $_GET['idtype']);
    426. 

  426. 

  427. 	$item = $perm = array();
    428. 

  428. 	if($op == 'item' || $op == 'additem') {
    429. 

  429. 		if(!$allowmanage && !$allowdata) {
    430. 

  430. 			showmessage('block_edit_nopermission');
    431. 

  431. 		}
    432. 

  432. 		if($itemid && ($item = C::t('common_block_item')->fetch($itemid))) {
    433. 

  433. 			$item['fields'] = dunserialize($item['fields']);
    434. 

  434. 		}
    435. 

  435. 	} elseif($op == 'push') {
    436. 

  436. 

  437. 		$item = get_push_item($block, $thestyle, $_GET['id'], $_GET['idtype']);
    438. 

  438. 		if($itemid) {
    439. 

  439. 			$item['itemid'] = $itemid;
    440. 

  440. 		}
    441. 

  441. 	} elseif($op == 'recommend') {
    442. 

  442. 		$perm = getblockperm($bid);
    443. 

  443. 		if(!$perm['allowmanage'] && !$perm['allowrecommend']) {
    444. 

  444. 			showmessage('block_no_right_recommend');
    445. 

  445. 		}
    446. 

  446. 

  447. 		$isrepeatrecommend = false;
    448. 

  448. 		$idtype = $_GET['idtype'] == 'gtid' ? 'tid' : $_GET['idtype'];
    449. 

  449. 		if(($item =  C::t('common_block_item_data')->fetch_by_bid_id_idtype($bid, $_GET['id'], $idtype))) {
    450. 

  450. 			$item['fields'] = dunserialize($item['fields']);
    451. 

  451. 			$isrepeatrecommend = true;
    452. 

  452. 

  453. 			if(!$perm['allowmanage'] && $item['uid'] != $_G['uid']) {
    454. 

  454. 				showmessage('data_in_mod_library', null, null, array('striptags' => false));
    455. 

  455. 			}
    456. 

  456. 

  457. 		} else {
    458. 

  458. 			if(in_array($_GET['idtype'],array('tid', 'gtid', 'aid', 'picid', 'blogid'))) {
    459. 

  459. 				$_GET['idtype'] = $_GET['idtype'] == 'gtid' ? 'tids' : $_GET['idtype'].'s';
    460. 

  460. 			}
    461. 

  461. 			$item = get_push_item($block, $thestyle, $_GET['id'], $_GET['idtype'], $block['blockclass'], $block['script']);
    462. 

  462. 			if(empty($item)) showmessage('block_data_type_invalid', null, null, array('msgtype'=>3));
    463. 

  463. 		}
    464. 

  464. 	} elseif($op=='verifydata' || $op=='managedata') {
    465. 

  465. 		if(!$allowmanage && !$allowdata) {
    466. 

  466. 			showmessage('no_right_manage_data');
    467. 

  467. 		}
    468. 

  468. 		if($dataid) {
    469. 

  469. 			$item = C::t('common_block_item_data')->fetch($dataid);
    470. 

  470. 			$item['fields'] = dunserialize($item['fields']);
    471. 

  471. 		}
    472. 

  472. 	}
    473. 

  473. 

  474. 	if(!$item && $op != 'additem') {
    475. 

  475. 		showmessage('block_edit_nopermission');
    476. 

  476. 	}
    477. 

  477. 

  478. 	$item['oldpic'] = $item['pic'];
    479. 

  479. 	if($item['picflag'] == '1') {
    480. 

  480. 		$item['pic'] = $item['pic'] ? $_G['setting']['attachurl'].$item['pic'] : '';
    481. 

  481. 	} elseif($item['picflag'] == '2') {
    482. 

  482. 		$item['pic'] = $item['pic'] ? $_G['setting']['ftp']['attachurl'].$item['pic'] : '';
    483. 

  483. 	}
    484. 

  484. 

  485. 	$item['startdate'] = $item['startdate'] ? dgmdate($item['startdate']) : dgmdate(TIMESTAMP);
    486. 

  486. 	$item['enddate'] = $item['enddate'] ? dgmdate($item['enddate']) : '';
    487. 

  487. 	$orders = range(1, $block['shownum']);
    488. 

  488. 	$orderarr[$item['displayorder']] = ' selected="selected"';
    489. 

  489. 	$item['showstyle'] = !empty($item['showstyle']) ? (array)(dunserialize($item['showstyle'])) : (!empty($item['fields']['showstyle']) ? $item['fields']['showstyle'] : array());
    490. 

  490. 	$showstylearr = array();
    491. 

  491. 	foreach(array('title_b', 'title_i', 'title_u', 'title_c', 'summary_b', 'summary_i', 'summary_u', 'title_c') as $value) {
    492. 

  492. 		if(!empty($item['showstyle'][$value])) {
    493. 

  493. 			$showstylearr[$value] = 'class="a"';
    494. 

  494. 		}
    495. 

  495. 	}
    496. 

  496. 

  497. 	$itemfields = $blockitem = $item;
    498. 

  498. 	unset($itemfields['fields']);
    499. 

  499. 	$item['fields'] = (array)$item['fields'];
    500. 

  500. 	foreach($item['fields'] as $key=>$value) {
    501. 

  501. 		if($theclass['fields'][$key]) {
    502. 

  502. 			switch($theclass['fields'][$key]['datatype']) {
    503. 

  503. 				case 'date':
    504. 

  504. 					$itemfields[$key] = dgmdate($value, 'Y-m-d H:i:s');
    505. 

  505. 					break;
    506. 

  506. 				case 'int':
    507. 

  507. 					$itemfields[$key] = intval($value);
    508. 

  508. 					break;
    509. 

  509. 				case 'string':
    510. 

  510. 					$itemfields[$key] = dhtmlspecialchars($value);
    511. 

  511. 					break;
    512. 

  512. 				default:
    513. 

  513. 					$itemfields[$key] = $value;
    514. 

  514. 			}
    515. 

  515. 		}
    516. 

  516. 	}
    517. 

  517. 

  518. 	$showfields = array();
    519. 

  519. 	if(empty($thestyle['fields'])) {
    520. 

  520. 		$template = block_build_template($thestyle['template']);
    521. 

  521. 		$thestyle['fields'] = block_parse_fields($template);
    522. 

  522. 		C::t('common_block_style')->update(intval($thestyle['styleid']), array('fields'=>serialize($thestyle['fields'])));
    523. 

  523. 	}
    524. 

  524. 	foreach($thestyle['fields'] as $fieldname) {
    525. 

  525. 		$showfields[$fieldname] = "1";
    526. 

  526. 	}
    527. 

  527. 

  528. 	if(submitcheck('itemsubmit') || submitcheck('recommendsubmit') || submitcheck('verifydatasubmit') || submitcheck('managedatasubmit')) {
    529. 

  529. 		$item['bid'] = $block['bid'];
    530. 

  530. 		$item['displayorder'] = intval($_POST['displayorder']);
    531. 

  531. 		$item['startdate'] = !empty($_POST['startdate']) ? strtotime($_POST['startdate']) : 0;
    532. 

  532. 		$item['enddate'] = !empty($_POST['enddate']) ? strtotime($_POST['enddate']) : 0;
    533. 

  533. 		$item['itemtype'] = !empty($_POST['locked']) ? '1' : '2';
    534. 

  534. 		$item['title'] = dhtmlspecialchars($_POST['title']);
    535. 

  535. 		$item['url'] = $_POST['url'];
    536. 

  536. 		$block['param']['summarylength'] = empty($block['param']['summarylength']) ? 80 : $block['param']['summarylength'];
    537. 

  537. 		$block['param']['titlelength'] = empty($block['param']['titlelength']) ? 40 : $block['param']['titlelength'];
    538. 

  538. 		$item['summary'] = cutstr($_POST['summary'], $block['param']['summarylength'], '');
    539. 

  539. 		if($_FILES['pic']['tmp_name']) {
    540. 

  540. 			$result = pic_upload($_FILES['pic'], 'portal');
    541. 

  541. 			$item['pic'] = 'portal/'.$result['pic'];
    542. 

  542. 			$item['picflag'] = $result['remote'] ? '2' : '1';
    543. 

  543. 			$item['makethumb'] = 0;
    544. 

  544. 			$item['thumbpath'] = '';
    545. 

  545. 			$thumbdata = array('bid' => $block['bid'], 'itemid' => $item['itemid'], 'pic' => $item['pic'], 'picflag' => $result['remote'], 'type' => '1');
    546. 

  546. 			C::t('common_block_pic')->insert($thumbdata);
    547. 

  547. 		} elseif($_POST['pic']) {
    548. 

  548. 			$pic = dhtmlspecialchars($_POST['pic']);
    549. 

  549. 			$urls = parse_url($pic);
    550. 

  550. 			if(!empty($urls['scheme']) && !empty($urls['host'])) {
    551. 

  551. 				$item['picflag'] = '0';
    552. 

  552. 				$item['thumbpath'] = '';
    553. 

  553. 			} else {
    554. 

  554. 				$item['picflag'] = intval($_POST['picflag']);
    555. 

  555. 			}
    556. 

  556. 			if($item['pic'] != $pic) {
    557. 

  557. 				$item['pic'] = $pic;
    558. 

  558. 				$item['makethumb'] = 0;
    559. 

  559. 				$item['thumbpath'] = block_thumbpath($block, $item);
    560. 

  560. 			}
    561. 

  561. 		}
    562. 

  562. 		unset($item['oldpic']);
    563. 

  563. 		$item['showstyle'] = $_POST['showstyle']['title_b'] || $_POST['showstyle']['title_i'] || $_POST['showstyle']['title_u'] || $_POST['showstyle']['title_c'] ? $_POST['showstyle'] : array();
    564. 

  564. 		$item['showstyle'] = empty($item['showstyle']) ? '' : serialize($item['showstyle']);
    565. 

  565. 

  566. 		foreach($theclass['fields'] as $key=>$value) {
    567. 

  567. 			if(!isset($item[$key]) && isset($_POST[$key])) {
    568. 

  568. 				if($value['datatype'] == 'int') {
    569. 

  569. 					$_POST[$key] = intval($_POST[$key]);
    570. 

  570. 				} elseif($value['datatype'] == 'date') {
    571. 

  571. 					$_POST[$key] = strtotime($_POST[$key]);
    572. 

  572. 				} else {
    573. 

  573. 					$_POST[$key] = $_POST[$key];
    574. 

  574. 				}
    575. 

  575. 				$item['fields'][$key] = $_POST[$key];
    576. 

  576. 			}
    577. 

  577. 		}
    578. 

  578. 		if(isset($item['fields']['fulltitle'])) {
    579. 

  579. 			$item['fields']['fulltitle'] = $item['title'];
    580. 

  580. 		}
    581. 

  581. 		$item['fields']	= serialize($item['fields']);
    582. 

  582. 

  583. 		$item['title'] = cutstr($item['title'], $block['param']['titlelength'], '');
    584. 

  584. 

  585. 		if($_POST['icflag']) {
    586. 

  586. 			$item['makethumb'] = 1;
    587. 

  587. 			$item['thumbpath'] = block_thumbpath($block, $item);
    588. 

  588. 		}
    589. 

  589. 		if(submitcheck('itemsubmit')) {
    590. 

  590. 

  591. 			if($op == 'additem' && !$item['id']) {
    592. 

  592. 				$item['id'] = ($pushid = intval($_POST['push_id'])) ? $pushid : mt_rand(1,9999);
    593. 

  593. 				$item['idtype'] = 'rand';
    594. 

  594. 			}
    595. 

  595. 			if($item['startdate'] > $_G['timestamp']) {
    596. 

  596. 				C::t('common_block_item')->insert($item, false, true);
    597. 

  597. 			} elseif(empty($item['enddate']) || $item['enddate'] > $_G['timestamp']) {
    598. 

  598. 				C::t('common_block_item')->delete_by_bid_displayorder($bid, $item['displayorder']);
    599. 

  599. 				C::t('common_block_item')->insert($item, false, true);
    600. 

  600. 			} else {
    601. 

  601. 				C::t('common_block_item')->delete_by_itemid_bid($item['itemid'], $bid);
    602. 

  602. 			}
    603. 

  603. 			block_updatecache($bid, true);
    604. 

  604. 			showmessage('do_success', 'portal.php?mod=portalcp&ac=block&op=data&bid='.$block['bid'], array('bid'=>$bid));
    605. 

  605. 

  606. 		} elseif(submitcheck('recommendsubmit')) {
    607. 

  607. 			include_once libfile('function/home');
    608. 

  608. 			$thumbpath = $item['thumbpath'];
    609. 

  609. 			unset($item['itemid']);
    610. 

  610. 			unset($item['thumbpath']);
    611. 

  611. 			$item['itemtype'] = '0';
    612. 

  612. 			$item['uid'] = $_G['uid'];
    613. 

  613. 			$item['username'] = $_G['username'];
    614. 

  614. 			$item['dateline'] = TIMESTAMP;
    615. 

  615. 			$item['isverified'] = empty($_POST['needverify']) && ($perm['allowmanage'] || empty($perm['needverify'])) ? '1' : '0';
    616. 

  616. 			$item['verifiedtime'] = TIMESTAMP;
    617. 

  617. 

  618. 			C::t('common_block_item_data')->insert($item, false, true);
    619. 

  619. 			if($_GET['showrecommendtip'] && (in_array($_GET['idtype'], array('tids', 'tid', 'gtid')))) {
    620. 

  620. 				$modarr = array(
    621. 

  621. 					'tid' => $item['id'],
    622. 

  622. 					'uid' => $item['uid'],
    623. 

  623. 					'username' => $item['username'],
    624. 

  624. 					'dateline' => TIMESTAMP,
    625. 

  625. 					'action' => 'REB',
    626. 

  626. 					'status' => '1',
    627. 

  627. 					'stamp' => '',
    628. 

  628. 					'reason' => getstr($_GET['recommendto'], 20),
    629. 

  629. 				);
    630. 

  630. 				C::t('forum_threadmod')->insert($modarr);
    631. 

  631. 				$data = array('moderated' => 1);
    632. 

  632. 				loadcache('stamptypeid');
    633. 

  633. 				if(array_key_exists(4, $_G['cache']['stamptypeid'])) {
    634. 

  634. 					$data['stamp'] = $_G['cache']['stamptypeid']['4'];
    635. 

  635. 				}
    636. 

  636. 				C::t('forum_thread')->update($item['id'], $data);
    637. 

  637. 			}
    638. 

  638. 			if($_POST['icflag'] && !(C::t('common_block_pic')->count_by_bid_pic($block['bid'], $thumbpath))) {
    639. 

  639. 				$picflag = 0; //common_block_pic表中的picflag标识（0本地，1远程）
    640. 

  640. 				if($_G['setting']['ftp']['on']) {
    641. 

  641. 					$ftp = & discuz_ftp::instance();
    642. 

  642. 					$ftp->connect();
    643. 

  643. 					if($ftp->connectid && $ftp->ftp_size($thumbpath) > 0 || $ftp->upload($_G['setting']['attachurl'].'/'.$thumbpath, $thumbpath)) {
    644. 

  644. 						$picflag = 1; //common_block_pic表中的picflag标识（0本地，1远程）
    645. 

  645. 						@unlink($_G['setting']['attachdir'].'./'.$thumbpath);
    646. 

  646. 					}
    647. 

  647. 				}
    648. 

  648. 

  649. 				$thumbdata = array('bid' => $block['bid'], 'itemid' => 0, 'pic' => $thumbpath, 'picflag' => $picflag, 'type' => '0');
    650. 

  650. 				C::t('common_block_pic')->insert($thumbdata);
    651. 

  651. 			}
    652. 

  652. 			if(!empty($_POST['updateblock'])) {
    653. 

  653. 				block_updatecache($bid, true);
    654. 

  654. 			}
    655. 

  655. 

  656. 			if(($_G['group']['reasonpm'] == 2 || $_G['group']['reasonpm'] == 3) || !empty($_GET['sendreasonpm'])) {
    657. 

  657. 				$sendreasonpm = 1;
    658. 

  658. 			} else {
    659. 

  659. 				$sendreasonpm = 0;
    660. 

  660. 			}
    661. 

  661. 			if($sendreasonpm) {
    662. 

  662. 				require_once libfile('function/misc');
    663. 

  663. 				if((in_array($_GET['idtype'], array('tids', 'tid', 'gtid')))) {
    664. 

  664. 					$sendreasonpmcontent = C::t('forum_thread')->fetch($item['id']);
    665. 

  665. 					sendreasonpm($sendreasonpmcontent, 'recommend_note_post', array(
    666. 

  666. 						'tid' => $item['id'],
    667. 

  667. 						'subject' => $sendreasonpmcontent['subject'],
    668. 

  668. 						'from_id' => 0,
    669. 

  669. 						'from_idtype' => 'recommend'
    670. 

  670. 					));
    671. 

  671. 				}
    672. 

  672. 			}
    673. 

  673. 

  674. 			$showrecommendrate = '';
    675. 

  675. 			if($_G['group']['raterange'] && (in_array($_GET['idtype'], array('tids', 'tid', 'gtid')))) {
    676. 

  676. 				$showrecommendrate = 1;
    677. 

  677. 			}
    678. 

  678. 			if($showrecommendrate) {
    679. 

  679. 				showmessage('do_success', dreferer('portal.php'), array(), array('showdialog' => true, 'closetime' => 0.01, 'extrajs' =>
    680. 

  680. 					'<script type="text/javascript" reload="1">
    681. 

  681. 					showWindow("rate", "forum.php?mod=misc&action=rate&tid='.$item[id].'&pid='.$_GET[recommend_thread_pid].'&showratetip=1", "get", -1);
    682. 

  682. 					</script>'));
    683. 

  683. 			} elseif($_GET['showrecommendtip']) {
    684. 

  684. 				showmessage('do_success', dreferer('portal.php'), array(), array('showdialog' => true, 'closetime' => true, 'extrajs' =>
    685. 

  685. 					'<script type="text/javascript" reload="1">
    686. 

  686. 					window.location.reload();
    687. 

  687. 					</script>'));
    688. 

  688. 			} else {
    689. 

  689. 				showmessage('do_success', dreferer('portal.php'), array(), array('showdialog' => true, 'closetime' => true));
    690. 

  690. 			}
    691. 

  691. 		} elseif(submitcheck('verifydatasubmit')) {
    692. 

  692. 			unset($item['thumbpath']);
    693. 

  693. 			$item['isverified'] = '1';
    694. 

  694. 			$item['verifiedtime'] = TIMESTAMP;
    695. 

  695. 			C::t('common_block_item_data')->update($dataid, $item);
    696. 

  696. 			if(!empty($_POST['updateblock'])) {
    697. 

  697. 				block_updatecache($bid, true);
    698. 

  698. 			}
    699. 

  699. 			showmessage('do_success', dreferer('portal.php?mod=portalcp&ac=portalblock&op=verifieddata&searchkey=%23'.$bid));
    700. 

  700. 		} elseif(submitcheck('managedatasubmit')) {
    701. 

  701. 			unset($item['thumbpath']);
    702. 

  702. 			$item['stickgrade'] = intval($_POST['stickgrade']);
    703. 

  703. 			C::t('common_block_item_data')->update($dataid, $item);
    704. 

  704. 			showmessage('do_success', dreferer('portal.php?mod=portalcp&ac=block&op=itemdata&bid='.$bid));
    705. 

  705. 		}
    706. 

  706. 	}
    707. 

  707. 	if(in_array($block['blockclass'], array('forum_thread', 'portal_article', 'group_thread', 'space_blog'), true)) {
    708. 

  708. 		$picdatas = array();
    709. 

  709. 		$prefix = ($item['picflag'] == 2 ? $_G['setting']['ftp']['attachurl'] : $_G['setting']['attachurl']);
    710. 

  710. 		$itemfields['pics'] = array();
    711. 

  711. 		$first = true;
    712. 

  712. 

  713. 		if(empty($_GET['idtype'])) {
    714. 

  714. 			$_GET['idtype'] = $itemfields['idtype'].'s';
    715. 

  715. 			$_GET['id'] = $itemfields['id'];
    716. 

  716. 		}
    717. 

  717. 

  718. 		if(in_array($_GET['idtype'], array('tids', 'tid'))) {
    719. 

  719. 			$prefix .= 'forum/';
    720. 

  720. 			$firstpost = C::t('forum_post')->fetch_threadpost_by_tid_invisible($_GET['id']);
    721. 

  721. 			foreach(C::t('forum_attachment_n')->fetch_all_by_pid_width('pid:'.$firstpost['pid'], $firstpost['pid'], $block['picwidth']) as $pic) {
    722. 

  722. 				if($first) {
    723. 

  723. 					$first = false;
    724. 

  724. 					$itemfields['pics'][0] = '';
    725. 

  725. 					if(strpos($itemfields['oldpic'], 'nophoto.gif') !== false) {
    726. 

  726. 						$itemfields['oldpic'] = 'forum/'.$pic['attachment'];
    727. 

  727. 					}
    728. 

  728. 				}
    729. 

  729. 				$thumb = $prefix.($pic['thumb'] ? getimgthumbname($pic['attachment']) : $pic['attachment']);
    730. 

  730. 				if('forum/'.$pic['attachment'] == $itemfields['oldpic']) {
    731. 

  731. 					$itemfields['pics'][0] = array('big' => $prefix.$pic['attachment'], 'thumb' => $thumb, 'attachment' => 'forum/'.$pic['attachment'], 'first' => 1);
    732. 

  732. 				} else {
    733. 

  733. 					$itemfields['pics'][] = array('big' => $prefix.$pic['attachment'], 'thumb' => $thumb, 'attachment' => 'forum/'.$pic['attachment'], 'first' => 0);
    734. 

  734. 				}
    735. 

  735. 			}
    736. 

  736. 			if(empty($itemfields['pics'][0])) {
    737. 

  737. 				unset($itemfields['pics'][0]);
    738. 

  738. 			}
    739. 

  739. 		} elseif($_GET['idtype'] == 'aids') {
    740. 

  740. 			$prefix .= 'portal/';
    741. 

  741. 			foreach(C::t('portal_attachment')->fetch_all_by_aid($_GET['id']) as $pic) {
    742. 

  742. 				if($first) {
    743. 

  743. 					$first = false;
    744. 

  744. 					$itemfields['pics'][0] = '';
    745. 

  745. 					if(strpos($itemfields['oldpic'], 'nophoto.gif') !== false) {
    746. 

  746. 						$itemfields['oldpic'] = 'portal/'.$pic['attachment'];
    747. 

  747. 					}
    748. 

  748. 				}
    749. 

  749. 				$thumb = $prefix.($pic['thumb'] ? getimgthumbname($pic['attachment']) : $pic['attachment']);
    750. 

  750. 				if('portal/'.$pic['attachment'] == $itemfields['oldpic']) {
    751. 

  751. 					$itemfields['pics'][0] = array('big' => $prefix.$pic['attachment'], 'thumb' => $thumb, 'attachment' => 'portal/'.$pic['attachment'], 'first' => 1);
    752. 

  752. 				} else {
    753. 

  753. 					$itemfields['pics'][] = array('big' => $prefix.$pic['attachment'], 'thumb' => $thumb, 'attachment' => 'portal/'.$pic['attachment'], 'first' => 0);
    754. 

  754. 				}
    755. 

  755. 			}
    756. 

  756. 			if(empty($itemfields['pics'][0])) {
    757. 

  757. 				unset($itemfields['pics'][0]);
    758. 

  758. 			}
    759. 

  759. 		} elseif($_GET['idtype'] == 'blogids') {
    760. 

  760. 			$itemfields['pics'][] = array('big' => $itemfields['pic'], 'thumb' => 1, 'attachment' => $itemfields['oldpic']);
    761. 

  761. 		}
    762. 

  762. 

  763. 	}
    764. 

  764. 

  765. } elseif ($op == 'getblock') {
    766. 

  766. 

  767. 	if(!$bid || (!$allowmanage && !$allowdata)) {
    768. 

  768. 		showmessage('block_edit_nopermission');
    769. 

  769. 	}
    770. 

  770. 

  771. 	block_get_batch($bid);
    772. 

  772. 	if(!empty($_GET['forceupdate'])) block_updatecache($bid, !empty($_GET['forceupdate']));
    773. 

  773. 	if(strexists($block['summary'], '<script')) {
    774. 

  774. 		$block['summary'] = lang('portalcp', 'block_diy_nopreview');
    775. 

  775. 		$_G['block'][$bid] = $block;
    776. 

  776. 		$_G['block'][$bid]['cachetime'] = 0;
    777. 

  777. 		$_G['block'][$bid]['nocache'] = true;
    778. 

  778. 	}
    779. 

  779. 	$html = block_fetch_content($bid, $block['blocktype']);
    780. 

  780. 

  781. } elseif ($op == 'saveblockclassname') {
    782. 

  782. 

  783. 	if(!$bid || !$allowmanage) {
    784. 

  784. 		showmessage('block_edit_nopermission');
    785. 

  785. 	}
    786. 

  786. 

  787. 	if (submitcheck('saveclassnamesubmit')) {
    788. 

  788. 		$setarr = array('classname'=>getstr($_POST['classname'], 100, 0, 0, 0, -1));
    789. 

  789. 		C::t('common_block')->update($bid, $setarr);
    790. 

  790. 	}
    791. 

  791. 	C::t('common_block')->clear_cache($bid);
    792. 

  792. 

  793. 	showmessage('do_success');
    794. 

  794. } elseif ($op == 'saveblocktitle') {
    795. 

  795. 

  796. 	if(!$bid || !$allowmanage) {
    797. 

  797. 		showmessage('block_edit_nopermission');
    798. 

  798. 	}
    799. 

  799. 

  800. 	if (submitcheck('savetitlesubmit')) {
    801. 

  801. 		$_POST['title'] = preg_replace('/\<script|\<iframe|\<\/iframe\>/is', '', $_POST['title']);
    802. 

  802. 		$title = $_POST['title'];
    803. 

  803. 		$title = preg_replace('/url\([\'"](.*?)[\'"]\)/','url($1)',$title);
    804. 

  804. 

  805. 		$_G['siteurl'] = str_replace(array('/','.'),array('\/','\.'),$_G['siteurl']);
    806. 

  806. 		$title = preg_replace('/\"'.$_G['siteurl'].'(.*?)\"/','"$1"',$title);
    807. 

  807. 

  808. 		$setarr = array('title'=>$title);
    809. 

  809. 		C::t('common_block')->update($bid, $setarr);
    810. 

  810. 	}
    811. 

  811. 

  812. 	C::t('common_block')->clear_cache($bid);
    813. 

  813. 

  814. 	showmessage('do_success');
    815. 

  815. } elseif ($op == 'convert') {
    816. 

  816. 

  817. 	if(!$bid || !$allowmanage) {
    818. 

  818. 		showmessage('block_edit_nopermission');
    819. 

  819. 	}
    820. 

  820. 	block_convert($bid, $_GET['toblockclass']);
    821. 

  821. } elseif ($op == 'favorite') {
    822. 

  822. 	$perm = getblockperm($bid);
    823. 

  823. 	if(!$perm['allowmanage'] && !$perm['allowrecommend']) {
    824. 

  824. 		showmessage('block_no_right_recommend');
    825. 

  825. 	}
    826. 

  826. 	$favoriteop = '';
    827. 

  827. 	if(!block_check_favorite($_G['uid'], $bid)) {
    828. 

  828. 		$setarr = array(
    829. 

  829. 			'uid' => $_G['uid'],
    830. 

  830. 			'bid' => $bid,
    831. 

  831. 		);
    832. 

  832. 		block_add_favorite($setarr);
    833. 

  833. 		$favoriteop = 'add';
    834. 

  834. 	} else {
    835. 

  835. 		block_delete_favorite($_G['uid'], $bid);
    836. 

  836. 		$favoriteop = 'del';
    837. 

  837. 	}
    838. 

  838. } elseif($op == 'delrecommend') {
    839. 

  839. 	$perm = getblockperm($bid);
    840. 

  840. 	if(!$perm['allowmanage'] && !$perm['allowrecommend']) {
    841. 

  841. 		showmessage('block_no_right_recommend');
    842. 

  842. 	}
    843. 

  843. 	if(($_GET['dataid'] = dintval($_GET['dataid']))) {
    844. 

  844. 		C::t('common_block_item_data')->delete($_GET['dataid']);
    845. 

  845. 		block_updatecache($bid, true);
    846. 

  846. 	}
    847. 

  847. 	showmessage('do_success');
    848. 

  848. } elseif($op == 'moreurl') {
    849. 

  849. 	if(!$bid || !$allowmanage) {
    850. 

  850. 		showmessage('block_edit_nopermission');
    851. 

  851. 	}
    852. 

  852. 

  853. 	if(submitcheck('moreurlsubmit')) {
    854. 

  854. 		$arr = array(
    855. 

  855. 			'perpage' => max(1, intval($_POST['perpage'])),
    856. 

  856. 			'seotitle' => $_POST['seotitle'],
    857. 

  857. 			'seokeywords' => $_POST['seokeywords'],
    858. 

  858. 			'seodescription' => $_POST['seodescription'],
    859. 

  859. 		);
    860. 

  860. 		$block['param']['moreurl'] = $arr;
    861. 

  861. 		C::t('common_block')->update($bid, array('param' => serialize($block['param'])));
    862. 

  862. 

  863. 		showmessage('do_success', 'portal.php?mod=portalcp&ac=block&op=moreurl&bid='.$bid, array('bid'=>$bid));
    864. 

  864. 	}
    865. 

  865. 	$block['param']['moreurl'] = !empty($block['param']['moreurl']) ? $block['param']['moreurl'] :
    866. 

  866. 								array('perpage' => 20, 'seotitle' => $block['name'], 'keywords' => '', 'description' => '');
    867. 

  867. }
    868. 

  868. 

  869. include_once template("portal/portalcp_block");
    870. 

  870. 

  871. function block_checkdefault($block) {
    872. 

  872. 	if(empty($block['shownum'])) {
    873. 

  873. 		$block['shownum'] = 10;
    874. 

  874. 	}
    875. 

  875. 	if(!isset($block['cachetime'])) {
    876. 

  876. 		$block['cachetime'] = '3600';
    877. 

  877. 	}
    878. 

  878. 	if(empty($block['picwidth'])) {
    879. 

  879. 		$block['picwidth'] = "200";
    880. 

  880. 	}
    881. 

  881. 	if(empty($block['picheight'])) {
    882. 

  882. 		$block['picheight'] = "200";
    883. 

  883. 	}
    884. 

  884. 	if(empty($block['target'])) {
    885. 

  885. 		$block['target'] = "blank";
    886. 

  886. 	}
    887. 

  887. 	return $block;
    888. 

  888. }
    889. 

  889. 

  890. function block_getdateformats($format='') {
    891. 

  891. 	$formats = array('Y-m-d', 'm-d', 'H:i', 'Y-m-d H:i');
    892. 

  892. 	$return = array();
    893. 

  893. 	foreach($formats as $value) {
    894. 

  894. 		$return[] = array(
    895. 

  895. 			'format' => $value,
    896. 

  896. 			'selected' => $format==$value ? ' selected="selected"' : '',
    897. 

  897. 			'time' => dgmdate(TIMESTAMP, $value)
    898. 

  898. 		);
    899. 

  899. 	}
    900. 

  900. 	return $return;
    901. 

  901. }
    902. 

  902. 

  903. function block_ban_item($block, $item) {
    904. 

  904. 	global $_G;
    905. 

  905. 	$parameters = !empty($block['param']) ? $block['param'] : array();
    906. 

  906. 	$bannedids = !empty($parameters['bannedids']) ? explode(',', $parameters['bannedids']) : array();
    907. 

  907. 	$bannedids[] = intval($item['id']);
    908. 

  908. 	$bannedids = array_unique($bannedids);
    909. 

  909. 	$parameters['bannedids'] = implode(',', $bannedids);
    910. 

  910. 	$_G['block'][$block['bid']]['param'] = $parameters;
    911. 

  911. 	$parameters = serialize($parameters);
    912. 

  912. 	C::t('common_block')->update($block['bid'], array('param'=>$parameters));
    913. 

  913. }
    914. 

  914. 

  915. function get_push_item($block, $blockstyle, $id, $idtype, $blockclass = '', $script = '') {
    916. 

  916. 	$item = array();
    917. 

  917. 	$obj = null;
    918. 

  918. 	if(empty($blockclass) || empty($script)) {
    919. 

  919. 		if($idtype == 'tids') {
    920. 

  920. 			$obj = block_script('forum', 'thread');
    921. 

  921. 		} elseif($idtype == 'gtids') {
    922. 

  922. 			$obj = block_script('group', 'groupthread');
    923. 

  923. 		} elseif($idtype == 'aids') {
    924. 

  924. 			$obj = block_script('portal', 'article');
    925. 

  925. 		} elseif($idtype == 'picids') {
    926. 

  926. 			$obj = block_script('space', 'pic');
    927. 

  927. 		} elseif($idtype == 'blogids') {
    928. 

  928. 			$obj = block_script('space', 'blog');
    929. 

  929. 		}
    930. 

  930. 	} else {
    931. 

  931. 		list($blockclass) = explode('_', $blockclass);
    932. 

  932. 		$obj = block_script($blockclass, $script);
    933. 

  933. 	}
    934. 

  934. 	if($obj && is_object($obj)) {
    935. 

  935. 		$paramter = array($idtype => intval($id));
    936. 

  936. 		if(isset($block['param']['picrequired'])) {
    937. 

  937. 			$paramter['picrequired'] = $block['param']['picrequired'];
    938. 

  938. 		}
    939. 

  939. 		$return = $obj->getData($blockstyle, $paramter);
    940. 

  940. 		if($return['data']) {
    941. 

  941. 			$item = array_shift($return['data']);
    942. 

  942. 		}
    943. 

  943. 	}
    944. 

  944. 	return $item;
    945. 

  945. }
    946. 

  946. 

  947. function block_convert($bid, $toblockclass) {
    948. 

  948. 	global $_G;
    949. 

  949. 	$bid = intval($bid);
    950. 

  950. 	if(empty($bid) || empty($toblockclass)) return false;
    951. 

  951. 	if(($block = C::t('common_block')->fetch($bid))) {
    952. 

  952. 		loadcache('blockconvert');
    953. 

  953. 		$fromblockclass = $block['blockclass'];
    954. 

  954. 		list($bigclass) = explode('_', $fromblockclass);
    955. 

  955. 		$convertrule = null;
    956. 

  956. 		if(!empty($_G['cache']['blockconvert']) && !empty($_G['cache']['blockconvert'][$bigclass][$fromblockclass][$toblockclass])) {
    957. 

  957. 			$convertrule = $_G['cache']['blockconvert'][$bigclass][$fromblockclass][$toblockclass];
    958. 

  958. 		}
    959. 

  959. 		if(!empty($convertrule)) {
    960. 

  960. 			$blockstyle = array();
    961. 

  961. 			if($block['styleid']) {
    962. 

  962. 				if(($blockstyle = C::t('common_block_style')->fetch(intval($block['styleid'])))) {
    963. 

  963. 					unset($blockstyle['styleid']);
    964. 

  964. 					$blockstyle['fields'] = dunserialize($blockstyle['fields']);
    965. 

  965. 					$blockstyle['template'] = dunserialize($blockstyle['template']);
    966. 

  966. 				}
    967. 

  967. 			} elseif($block['blockstyle']) {
    968. 

  968. 				$blockstyle = dunserialize($block['blockstyle']);
    969. 

  969. 			}
    970. 

  970. 

  971. 			if($blockstyle) {
    972. 

  972. 				$blockstyle['name'] = '';
    973. 

  973. 				$blockstyle['blockclass'] = $toblockclass;
    974. 

  974. 				foreach($blockstyle['fields'] as $key => $value) {
    975. 

  975. 					$blockstyle['fields'][$key] = str_replace($convertrule['searchkeys'], $convertrule['replacekeys'], $value);
    976. 

  976. 				}
    977. 

  977. 

  978. 				$fun = create_function('&$v','$v = "{".$v."}";');
    979. 

  979. 				array_walk($convertrule['searchkeys'], $fun);
    980. 

  980. 				array_walk($convertrule['replacekeys'], $fun);
    981. 

  981. 

  982. 				foreach($blockstyle['template'] as $key => $value) {
    983. 

  983. 					$blockstyle['template'][$key] = str_replace($convertrule['searchkeys'], $convertrule['replacekeys'], $value);
    984. 

  984. 				}
    985. 

  985. 				unset($block['bid']);
    986. 

  986. 				$block['styleid'] = '0';
    987. 

  987. 				$block['script'] = $convertrule['script'];
    988. 

  988. 				$block['blockclass'] = $toblockclass;
    989. 

  989. 				$block['blockstyle'] = serialize($blockstyle);
    990. 

  990. 				$block['param'] = serialize($block['param']);
    991. 

  991. 				C::t('common_block')->update($bid, $block);
    992. 

  992. 			}
    993. 

  993. 		}
    994. 

  994. 

  995. 	}
    996. 

  996. }
    997. 

  997. 

  998. function block_check_favorite($uid, $bid){
    999. 

  999. 	$uid = intval($uid);
    1000. 

  1000. 	$bid = intval($bid);
    1001. 

  1001. 	if($uid && $bid) {
    1002. 

  1002. 		return C::t('common_block_favorite')->count_by_uid_bid($uid, $bid);
    1003. 

  1003. 	} else {
    1004. 

  1004. 		return false;
    1005. 

  1005. 	}
    1006. 

  1006. }
    1007. 

  1007. 

  1008. function block_add_favorite($setarr){
    1009. 

  1009. 	$arr = array(
    1010. 

  1010. 		'uid' => intval($setarr['uid']),
    1011. 

  1011. 		'bid' => intval($setarr['bid']),
    1012. 

  1012. 		'dateline' => TIMESTAMP
    1013. 

  1013. 	);
    1014. 

  1014. 	return C::t('common_block_favorite')->insert($arr, true);
    1015. 

  1015. }
    1016. 

  1016. 

  1017. function block_delete_favorite($uid, $bid){
    1018. 

  1018. 	$uid = intval($uid);
    1019. 

  1019. 	$bid = intval($bid);
    1020. 

  1020. 	if($uid && $bid) {
    1021. 

  1021. 		return C::t('common_block_favorite')->delete_by_uid_bid($uid, $bid);
    1022. 

  1022. 	} else {
    1023. 

  1023. 		return false;
    1024. 

  1024. 	}
    1025. 

  1025. 

  1026. }
    1027. 

  1027. 

  1028. function block_ckeck_summary($summary){
    1029. 

  1029. 	if($summary) {
    1030. 

  1030. 		$tags = array('div', 'table', 'tbody', 'tr', 'td', 'th');
    1031. 

  1031. 		foreach($tags as $tag) {
    1032. 

  1032. 			preg_match_all('/(<'.$tag.')|(<\/'.$tag.'>)/i', $summary, $all);
    1033. 

  1033. 			if(!empty($all[1]) && !empty($all[2])) {
    1034. 

  1034. 				$all[1] = array_filter($all[1]);
    1035. 

  1035. 				$all[2] = array_filter($all[2]);
    1036. 

  1036. 				if(count($all[1]) !== count($all[2])) {
    1037. 

  1037. 					return $tag;
    1038. 

  1038. 				}
    1039. 

  1039. 			}
    1040. 

  1040. 		}
    1041. 

  1041. 	}
    1042. 

  1042. 	return $summary;
    1043. 

  1043. }
    1044. 

  1044. ?>
    1045.