PageRenderTime 59ms CodeModel.GetById 22ms RepoModel.GetById 0ms app.codeStats 0ms

/source/include/portalcp/portalcp_block.php

https://github.com/jinbo51/DiscuzX
PHP | 1061 lines | 944 code | 111 blank | 6 comment | 304 complexity | a57c0bb020a3f8167275d7eb57c6f0be MD5 | raw file
Possible License(s): BSD-3-Clause 
    

  1. <?php
    2. 

  2. 

  3. /**
    4. 

  4.  *      [Discuz!] (C)2001-2099 Comsenz Inc.
    5. 

  5.  *      This is NOT a freeware, use is subject to license terms
    6. 

  6.  *
    7. 

  7.  *      $Id: portalcp_block.php 32281 2012-12-18 04:48:04Z zhangguosheng $
    8. 

  8.  */
    9. 

  9. 

  10. if(!defined('IN_DISCUZ')) {
    11. 

  11. 	exit('Access Denied');
    12. 

  12. }
    13. 

  13. 

  14. include_once libfile('function/block');
    15. 

  15. $oparr = array('block', 'data', 'style', 'itemdata', 'setting', 'remove', 'item', 'additem', 'blockclass',
    16. 

  16. 				'getblock', 'thumbsetting', 'push', 'recommend', 'verifydata', 'managedata',
    17. 

  17. 				'saveblockclassname', 'saveblocktitle', 'convert', 'favorite', 'banids', 'delrecommend', 'moreurl');
    18. 

  18. $op = in_array($_GET['op'], $oparr, true) ? $_GET['op'] : 'block';
    19. 

  19. $_GET['from'] = $_GET['from'] == 'cp' ? 'cp' : null;
    20. 

  20. $allowmanage = $allowdata = 0;
    21. 

  21. 

  22. $block = array();
    23. 

  23. $bid = !empty($_GET['bid']) ? intval($_GET['bid']) : 0;
    24. 

  24. if($bid) {
    25. 

  25. 	if(!($block = C::t('common_block')->fetch($bid))) {
    26. 

  26. 		showmessage('block_not_exist');
    27. 

  27. 	}
    28. 

  28. 

  29. 	$blockstyle = array();
    30. 

  30. 	if(!empty($block['styleid'])) {
    31. 

  31. 		$blockstyle = block_getstyle($block['styleid']);
    32. 

  32. 	} else {
    33. 

  33. 		$blockstyle = dunserialize($block['blockstyle']);
    34. 

  34. 	}
    35. 

  35. 	$block['moreurl'] = $blockstyle['moreurl'] && in_array($block['blockclass'], array('forum_thread', 'portal_article', 'group_thread'), true) ? 1 : 0;
    36. 

  36. 

  37. 	$_G['block'][$bid] = $block;
    38. 

  38. 	$blockperm = getblockperm($bid);
    39. 

  39. 	if($blockperm['allowmanage']) {
    40. 

  40. 		$allowmanage = 1;
    41. 

  41. 		$allowdata = 1;
    42. 

  42. 	}
    43. 

  43. 	if ($blockperm['allowrecommend'] && !$blockperm['needverify']) {
    44. 

  44. 		$allowdata = 1;
    45. 

  45. 	}
    46. 

  46. }
    47. 

  47. 

  48. if(empty($block['bid'])) {
    49. 

  49. 	$bid = 0;
    50. 

  50. }
    51. 

  51. 

  52. $_GET['classname'] = !empty($_GET['classname']) ? $_GET['classname'] : ($block ? $block['blockclass'] : 'html_html');
    53. 

  53. $theclass = block_getclass($_GET['classname'], true);
    54. 

  54. $theclass['script'] = isset($theclass['script']) ? $theclass['script'] : array();
    55. 

  55. if(!empty($_GET['styleid']) && isset($theclass['style'][$_GET['styleid']])) {
    56. 

  56. 	$thestyle = $theclass['style'][$_GET['styleid']];
    57. 

  57. } elseif(isset($theclass['style'][$block['styleid']])) {
    58. 

  58. 	$_GET['styleid'] = intval($block['styleid']);
    59. 

  59. 	$thestyle = $theclass['style'][$_GET['styleid']];
    60. 

  60. } else {
    61. 

  61. 	$_GET['styleid'] = 0;
    62. 

  62. 	$thestyle = (array)dunserialize($block['blockstyle']);
    63. 

  63. }
    64. 

  64. $_GET['script'] = !empty($_GET['script']) && isset($theclass['script'][$_GET['script']])
    65. 

  65. 		? $_GET['script']
    66. 

  66. 		: (!empty($block['script']) ? $block['script'] : key($theclass['script']));
    67. 

  67. 

  68. $blocktype = (!empty($_GET['blocktype']) || !empty($block['blocktype'])) ? 1 : 0;
    69. 

  69. $nocachetime = in_array($_GET['script'], array('blank', 'line', 'banner', 'vedio', 'google')) ? true : false;
    70. 

  70. $is_htmlblock = ($_GET['classname'] == 'html_html') ? 1 : 0;
    71. 

  71. $showhtmltip = false;
    72. 

  72. if($op == 'data' && $is_htmlblock) {
    73. 

  73. 	$op = 'block';
    74. 

  74. 	$showhtmltip = true;
    75. 

  75. }
    76. 

  76. $block['blockclass'] = empty($block['blockclass']) ? $_GET['classname'] : $block['blockclass'];
    77. 

  77. $is_recommendable = block_isrecommendable($block);
    78. 

  78. 

  79. if($op == 'block') {
    80. 

  80. 	if($bid && !$allowmanage) {
    81. 

  81. 		showmessage('block_edit_nopermission');
    82. 

  82. 	}
    83. 

  83. 	if(!$bid) {
    84. 

  84. 		list($tpl, $id) = explode(':', $_GET['tpl']);
    85. 

  85. 		if(trim($tpl)=='portal/portal_topic_content') {
    86. 

  86. 			if(!$_G['group']['allowaddtopic'] && !$_G['group']['allowmanagetopic']) {
    87. 

  87. 				showmessage('block_topic_nopermission');
    88. 

  88. 			}
    89. 

  89. 		} elseif(!$_G['group']['allowdiy']) {
    90. 

  90. 			showmessage('block_add_nopermission');
    91. 

  91. 		}
    92. 

  92. 	}
    93. 

  93. 

  94. 	if(submitcheck('blocksubmit')) {
    95. 

  95. 		$_POST['cachetime'] = intval($_POST['cachetime']) * 60;
    96. 

  96. 		$_POST['styleid'] = intval($_POST['styleid']);
    97. 

  97. 		$_POST['shownum'] = intval($_POST['shownum']);
    98. 

  98. 		$_POST['picwidth'] = $_POST['picwidth'] ? intval($_POST['picwidth']) : 0;
    99. 

  99. 		$_POST['picheight'] = $_POST['picheight'] ? intval($_POST['picheight']) : 0;
    100. 

  100. 		$_POST['script'] = isset($theclass['script'][$_POST['script']]) ? $_POST['script'] : key($theclass['script']);
    101. 

  101. 		$_POST['a_target'] = in_array($_POST['a_target'], array('blank', 'top', 'self')) ? $_POST['a_target'] : 'blank';
    102. 

  102. 		$_POST['dateformat'] = in_array($_POST['dateformat'], array('Y-m-d', 'm-d', 'H:i', 'Y-m-d H:i')) ? $_POST['dateformat'] : 'Y-m-d';
    103. 

  103. 		$_POST['isblank'] = intval($_POST['isblank']);
    104. 

  104. 		$_POST['cachetimerangestart'] = intval($_POST['cachetimerangestart']);
    105. 

  105. 		$_POST['cachetimerangeend'] = intval($_POST['cachetimerangeend']);
    106. 

  106. 		$summary = getstr($_POST['summary'], '', 0, 0, 0, 1);
    107. 

  107. 		if($summary) {
    108. 

  108. 			$tag = block_ckeck_summary($summary);
    109. 

  109. 			if($tag != $summary) {
    110. 

  110. 				$msg = lang('portalcp', 'block_diy_summary_html_tag').$tag.lang('portalcp', 'block_diy_summary_not_closed');
    111. 

  111. 				showmessage($msg);
    112. 

  112. 			}
    113. 

  113. 		}
    114. 

  114. 

  115. 		$_POST['shownum'] = $_POST['shownum'] > 0 ? $_POST['shownum'] : 10;
    116. 

  116. 		$_POST['parameter']['items'] = $_POST['shownum'];
    117. 

  117. 		$cachetimerange = $_POST['cachetimerangestart'].','.$_POST['cachetimerangeend'];
    118. 

  118. 		if(empty($_G['setting']['blockcachetimerange'])) {
    119. 

  119. 			$cachetimerange = $cachetimerange == '0,23' ? '' : $cachetimerange;
    120. 

  120. 		} else {
    121. 

  121. 			$cachetimerange = $cachetimerange == $_G['setting']['blockcachetimerange'] ? '' : $cachetimerange;
    122. 

  122. 		}
    123. 

  123. 		include_once libfile('function/home');
    124. 

  124. 		$setarr = array(
    125. 

  125. 			'name' => getstr($_POST['name'], 255),
    126. 

  126. 			'summary' => $summary,
    127. 

  127. 			'styleid' => $_POST['styleid'],
    128. 

  128. 			'script' => $_POST['script'],
    129. 

  129. 			'cachetime' => intval($_POST['cachetime']),
    130. 

  130. 			'cachetimerange' => $cachetimerange,
    131. 

  131. 			'punctualupdate' => !empty($_POST['punctualupdate']) ? '1' : '0',
    132. 

  132. 			'shownum' => $_POST['shownum'],
    133. 

  133. 			'picwidth' => $_POST['picwidth'] && $_POST['picwidth'] > 8 && $_POST['picwidth'] < 1960 ? $_POST['picwidth'] : 0,
    134. 

  134. 			'picheight' => $_POST['picheight'] && $_POST['picheight'] > 8 && $_POST['picheight'] < 1960 ? $_POST['picheight'] : 0,
    135. 

  135. 			'target' => $_POST['a_target'],
    136. 

  136. 			'dateuformat' => !empty($_POST['dateuformat']) ? '1' : '0',
    137. 

  137. 			'dateformat' => $_POST['dateformat'],
    138. 

  138. 			'hidedisplay' => $_POST['hidedisplay'] ? '1' : '0',
    139. 

  139. 			'dateline' => TIMESTAMP,
    140. 

  140. 			'isblank' => $_POST['isblank']
    141. 

  141. 		);
    142. 

  142. 

  143. 		$picdata = array();
    144. 

  144. 		if(!empty($_FILES)) {
    145. 

  145. 			foreach($_FILES as $varname => $file) {
    146. 

  146. 				if($file['tmp_name']) {
    147. 

  147. 					$result = pic_upload($file, 'portal');
    148. 

  148. 					$pic = 'portal/'.$result['pic'];
    149. 

  149. 					$picdata[] = array('bid' => $bid, 'pic' => $pic, 'picflag' =>$result['remote'] , 'type' => '1');
    150. 

  150. 					$pic = $result['remote'] ? $_G['setting']['ftp']['attachurl'].$pic : $_G['setting']['attachurl'].$pic;
    151. 

  151. 					$_POST['parameter'][$varname] = $pic;
    152. 

  152. 				}
    153. 

  153. 			}
    154. 

  154. 		}
    155. 

  155. 

  156. 		if(($block['blockclass'] == 'html_html' || $_GET['classname'] == 'html_html') && $_POST['script'] == 'blank' && isset($_POST['parameter']['content'])) {
    157. 

  157. 			$_POST['parameter']['content'] = addslashes($_POST['parameter']['content']);
    158. 

  158. 		}
    159. 

  159. 

  160. 		$parameter = $_POST['parameter'];
    161. 

  161. 		if(isset($block['param'])) {
    162. 

  162. 			$blockobj = block_script($block['blockclass'], $block['script']);
    163. 

  163. 			if($blockobj) {
    164. 

  164. 				$_block_setting = $blockobj->getsetting();
    165. 

  165. 				foreach($block['param'] as $_key => $_val) {
    166. 

  166. 					if(!isset($parameter[$_key]) && (!isset($_block_setting[$_key]) || (isset($_block_setting[$_key]) && $_block_setting[$_key]['type'] !== 'mcheckbox'))) {
    167. 

  167. 						$parameter[$_key] = $_val;
    168. 

  168. 					}
    169. 

  169. 				}
    170. 

  170. 			} else {
    171. 

  171. 				$parameter = $parameter + $block['param'];
    172. 

  172. 			}
    173. 

  173. 		}
    174. 

  174. 		$setarr['param'] = serialize($parameter);
    175. 

  175. 

  176. 		if($bid) {
    177. 

  177. 			C::t('common_block')->update($bid, $setarr);
    178. 

  178. 		} else {
    179. 

  179. 			$setarr['blockclass'] = $_GET['classname'];
    180. 

  180. 			$setarr['uid'] = $_G['uid'];
    181. 

  181. 			$setarr['username'] = $_G['username'];
    182. 

  182. 			$setarr['notinherited'] = 0;
    183. 

  183. 			if($blocktype == 1) {
    184. 

  184. 				$setarr['blocktype'] = '1';
    185. 

  185. 			}
    186. 

  186. 			$bid = C::t('common_block')->insert($setarr, true);
    187. 

  187. 		}
    188. 

  188. 

  189. 		if(!empty($picdata)) {
    190. 

  190. 			C::t('common_block_pic')->insert_by_bid($bid, $picdata);
    191. 

  191. 		}
    192. 

  192. 

  193. 		$_G['block'][$bid] = C::t('common_block')->fetch($bid);
    194. 

  194. 		block_updatecache($bid, true);
    195. 

  195. 		showmessage('do_success', 'portal.php?mod=portalcp&ac=block&op=block&bid='.$bid, array('bid'=>$bid, 'eleid'=> $_GET['eleid']));
    196. 

  196. 	}
    197. 

  197. 

  198. 	loadcache('blockconvert');
    199. 

  199. 	$block['script'] = isset($block['script']) ? $block['script'] : $_GET['script'];
    200. 

  200. 

  201. 	if($block['blockclass'] == 'html_html' && $block['script'] == 'blank'){
    202. 

  202. 		$block['param']['content'] = stripslashes($block['param']['content']);
    203. 

  203. 	}
    204. 

  204. 

  205. 	$settings = block_setting($_GET['classname'], $block['script'], $block['param']);
    206. 

  206. 	$scriptarr = array($block['script'] => ' selected');
    207. 

  207. 	$stylearr = array($_GET['styleid'] => ' selected');
    208. 

  208. 

  209. 	$block = block_checkdefault($block);
    210. 

  210. 	$cachetimearr = array($block['cachetime'] =>' selected="selected"');
    211. 

  211. 	$block['cachetime_min'] = intval($block['cachetime'] / 60);
    212. 

  212. 	$targetarr[$block['target']] = ' selected';
    213. 

  213. 	$block['cachetimerange'] = empty($block['cachetimerange']) ? (isset($_G['setting']['blockcachetimerange']) ? $_G['setting']['blockcachetimerange'] : '') : $block['cachetimerange'];
    214. 

  214. 	$block['cachetimerange'] = empty($block['cachetimerange']) ? array('0', '23') : explode(',', $block['cachetimerange']);
    215. 

  215. 	$cachetimerange = range(0, 23);
    216. 

  216. 	$dateformats = block_getdateformats($block['dateformat']);
    217. 

  217. 

  218. 	$block['summary'] = dhtmlspecialchars($block['summary']);
    219. 

  219. 	$blockclassname = '';
    220. 

  220. 	$blockclass = $block['blockclass'] ? $block['blockclass'] : $_GET['classname'];
    221. 

  221. 	$arr = explode('_', $blockclass);
    222. 

  222. 	if(count($arr) == 2) {
    223. 

  223. 		$blockclassname = $_G['cache']['blockclass'][$arr[0]]['subs'][$blockclass]['name'];
    224. 

  224. 	}
    225. 

  225. 	$blockclassname = empty($blockclassname) ? $blockclass : $blockclassname;
    226. 

  226. 

  227. } elseif($op == 'banids') {
    228. 

  228. 	if(!$bid || (!$allowmanage && !$allowdata)) {
    229. 

  229. 		showmessage('block_edit_nopermission');
    230. 

  230. 	}
    231. 

  231. 

  232. 	if(isset($_GET['bannedids']) && $block['param']['bannedids'] != $_GET['bannedids']) {
    233. 

  233. 		$arr = explode(',', $_GET['bannedids']);
    234. 

  234. 		$arr = array_map('intval', $arr);
    235. 

  235. 		$arr = array_filter($arr);
    236. 

  236. 		$_GET['bannedids'] = implode(',', $arr);
    237. 

  237. 		$block['param']['bannedids'] = $_GET['bannedids'];
    238. 

  238. 		C::t('common_block')->update($bid, array('param'=>serialize($block['param'])));
    239. 

  239. 		$_G['block'][$bid] = $block;
    240. 

  240. 		block_updatecache($bid, true);
    241. 

  241. 	}
    242. 

  242. 

  243. 	showmessage('do_success', 'portal.php?mod=portalcp&ac=block&op=data&bid='.$bid, array('bid'=>$bid, 'eleid'=> $_GET['eleid']));
    244. 

  244. 

  245. } elseif($op == 'data') {
    246. 

  246. 	if(!$bid || (!$allowmanage && !$allowdata)) {
    247. 

  247. 		showmessage('block_edit_nopermission');
    248. 

  248. 	}
    249. 

  249. 

  250. 	if(submitcheck('updatesubmit')) {
    251. 

  251. 		if($_POST['displayorder']) {
    252. 

  252. 			asort($_POST['displayorder']);
    253. 

  253. 			$orders = $ids = array();
    254. 

  254. 			$order = 1;
    255. 

  255. 			foreach($_POST['displayorder'] as $k=>$v) {
    256. 

  256. 				$k = intval($k);
    257. 

  257. 				$ids[] = $k;
    258. 

  258. 				$orders[$k] = $order;
    259. 

  259. 				$order++;
    260. 

  260. 			}
    261. 

  261. 			$items = array();
    262. 

  262. 			foreach(C::t('common_block_item')->fetch_all($ids) as $value) {
    263. 

  263. 				if($value['bid'] == $bid) {
    264. 

  264. 					$items[$value['itemid']] = $value;
    265. 

  265. 				}
    266. 

  266. 			}
    267. 

  267. 			foreach($items as $key=>$value) {
    268. 

  268. 				$itemtype = !empty($_POST['locked'][$key]) ? '1' : '0';
    269. 

  269. 				if($orders[$key] != $value['displayorder'] || $itemtype != $value['itemtype']) {
    270. 

  270. 					C::t('common_block_item')->update($key, array('displayorder'=>$orders[$key], 'itemtype'=>$itemtype));
    271. 

  271. 				}
    272. 

  272. 			}
    273. 

  273. 		}
    274. 

  274. 		showmessage('do_success', 'portal.php?mod=portalcp&ac=block&op=data&bid='.$bid, array('bid'=>$bid, 'eleid'=> $_GET['eleid']));
    275. 

  275. 	}
    276. 

  276. 

  277. 	$itemlist = array();
    278. 

  278. 	if($bid) {
    279. 

  279. 		$preorders = array();
    280. 

  280. 		foreach(C::t('common_block_item')->fetch_all_by_bid($bid, true) as $value) {
    281. 

  281. 			if($value['itemtype']==1 && $value['enddate'] && $value['enddate'] <= TIMESTAMP) {
    282. 

  282. 				continue;
    283. 

  283. 			}
    284. 

  284. 			$value['ispreorder'] = false;
    285. 

  285. 			if($value['itemtype']==1) {
    286. 

  286. 				if($value['startdate'] > TIMESTAMP) {
    287. 

  287. 					$value['ispreorder'] = true;
    288. 

  288. 				} else {
    289. 

  289. 					$preorders[$value['displayorder']] = $value['itemid'];
    290. 

  290. 				}
    291. 

  291. 			}
    292. 

  292. 			$value['itemtypename'] = lang('portalcp', 'itemtypename'.$value['itemtype']);
    293. 

  293. 			$itemlist[$value['itemid']] = $value;
    294. 

  294. 		}
    295. 

  295. 		if($preorders) {
    296. 

  296. 			foreach($itemlist as $key=>$value) {
    297. 

  297. 				if(isset($preorders[$value['displayorder']]) && $value['itemid'] != $preorders[$value['displayorder']]) {
    298. 

  298. 					unset($itemlist[$key]);
    299. 

  299. 				}
    300. 

  300. 			}
    301. 

  301. 		}
    302. 

  302. 	}
    303. 

  303. 

  304. 	$block['param']['bannedids'] = !empty($block['param']['bannedids']) ? $block['param']['bannedids'] : '';
    305. 

  305. 

  306. } elseif($op == 'style') {
    307. 

  307. 	if(!$bid || !$allowmanage) {
    308. 

  308. 		showmessage('block_edit_nopermission');
    309. 

  309. 	}
    310. 

  310. 

  311. 	if(submitcheck('stylesubmit')) {
    312. 

  312. 		$_POST['name'] = trim($_POST['name']);
    313. 

  313. 		$arr = array(
    314. 

  314. 			'name' => $_POST['name'],
    315. 

  315. 			'blockclass' => $_GET['classname'],
    316. 

  316. 		);
    317. 

  317. 		$_POST['template'] = $_POST['template'];
    318. 

  318. 

  319. 		include_once libfile('function/block');
    320. 

  320. 		block_parse_template($_POST['template'], $arr);
    321. 

  321. 		if(!empty($_POST['name'])) {
    322. 

  322. 			$styleid = C::t('common_block_style')->insert($arr, true);
    323. 

  323. 		}
    324. 

  324. 		$arr['fields'] = dunserialize($arr['fields']);
    325. 

  325. 		$arr['template'] = dunserialize($arr['template']);
    326. 

  326. 		$arr = serialize($arr);
    327. 

  327. 		C::t('common_block')->update($bid, array('blockstyle'=>$arr, 'styleid'=>'0'));
    328. 

  328. 

  329. 		showmessage('do_success', 'portal.php?mod=portalcp&ac=block&op=style&bid='.$bid, array('bid'=>$bid, 'eleid'=> $_GET['eleid']));
    330. 

  330. 	}
    331. 

  331. 

  332. 	$template = block_build_template($blockstyle['template']);
    333. 

  333. 

  334. 	$samplecode = '';
    335. 

  335. 	if($block['hidedisplay']) {
    336. 

  336. 		$samplecode = '<ul>\n'
    337. 

  337. 			.'<!--{loop $_G[block_1] $key $value}-->\n'
    338. 

  338. 			.'<li><a href="$value[url]">$value[title]</a></li>\n'
    339. 

  339. 			.'<!--{/loop}-->\n'
    340. 

  340. 			.'</ul>';
    341. 

  341. 		$samplecode = dhtmlspecialchars($samplecode);
    342. 

  342. 		$samplecode = str_replace('\n', '<br />', $samplecode);
    343. 

  343. 	}
    344. 

  344. 

  345. } elseif($op == 'itemdata') {
    346. 

  346. 

  347. 	if(!$bid ||  (!$allowmanage && !$allowdata)) {
    348. 

  348. 		showmessage('block_edit_nopermission');
    349. 

  349. 	}
    350. 

  350. 	if(!$is_recommendable) {
    351. 

  351. 		showmessage('block_no_recommend_library');
    352. 

  352. 	}
    353. 

  353. 

  354. 	$theurl = 'portal.php?mod=portalcp&ac=block&op=itemdata';
    355. 

  355. 	$perpage = 20;
    356. 

  356. 	$page = max(1,intval($_GET['page']));
    357. 

  357. 	$start = ($page-1)*$perpage;
    358. 

  358. 	if($start<0) $start = 0;
    359. 

  359. 

  360. 	if(submitcheck('deletesubmit')) {
    361. 

  361. 		if(!empty($_POST['ids'])) {
    362. 

  362. 			C::t('common_block_item_data')->delete_by_dataid_bid($_POST['ids'], $bid);
    363. 

  363. 		}
    364. 

  364. 

  365. 		$displayorder = array_map('intval', $_POST['displayorder']);
    366. 

  366. 		foreach($displayorder  as $dataid => $displayorder) {
    367. 

  367. 			if($displayorder !== intval($_POST['olddisplayorder'][$dataid])) {
    368. 

  368. 				C::t('common_block_item_data')->update($dataid, array('displayorder' => $displayorder));
    369. 

  369. 			}
    370. 

  370. 		}
    371. 

  371. 		showmessage('do_success', "portal.php?mod=portalcp&ac=block&op=itemdata&bid=$bid&page=$page");
    372. 

  372. 	}
    373. 

  373. 

  374. 	$count = C::t('common_block_item_data')->count_by_bid($bid);
    375. 

  375. 	$multi = '';
    376. 

  376. 	$datalist = array();
    377. 

  377. 	if($count) {
    378. 

  378. 		$datalist = C::t('common_block_item_data')->fetch_all_by_bid($bid, 1, $start, $perpage);
    379. 

  379. 		$multi = multi($count, $perpage, $page, "portal.php?mod=portalcp&ac=block&bid=$bid&op=itemdata");
    380. 

  380. 	}
    381. 

  381. 

  382. } elseif($op == 'setting') {
    383. 

  383. 

  384. 	if(($bid && !$allowmanage)) {
    385. 

  385. 		showmessage('block_edit_nopermission');
    386. 

  386. 	}
    387. 

  387. 

  388. 	$settings = array();
    389. 

  389. 	if($theclass['script'][$_GET['script']]) {
    390. 

  390. 		$settings = block_setting($_GET['classname'], $_GET['script'], $block['param']);
    391. 

  391. 	}
    392. 

  392. 

  393. 	$block['script'] = isset($block['script']) ? $block['script'] : $_GET['script'];
    394. 

  394. 	$scriptarr = array($block['script'] => ' selected');
    395. 

  395. 	$stylearr = array($_GET['styleid'] => ' selected');
    396. 

  396. 

  397. 	$block = block_checkdefault($block);
    398. 

  398. 	$cachetimearr = array($block['cachetime'] =>' selected="selected"');
    399. 

  399. 	$block['cachetime_min'] = intval($block['cachetime'] / 60);
    400. 

  400. 	$targetarr[$block['target']] = ' selected';
    401. 

  401. 

  402. } elseif($op == 'thumbsetting') {
    403. 

  403. 

  404. 	if(($bid && !$allowmanage)) {
    405. 

  405. 		showmessage('block_edit_nopermission');
    406. 

  406. 	}
    407. 

  407. 

  408. 	$block = block_checkdefault($block);
    409. 

  409. 	$cachetimearr = array($block['cachetime'] =>' selected="selected"');
    410. 

  410. 	$block['cachetime_min'] = intval($block['cachetime'] / 60);
    411. 

  411. 	$targetarr[$block['target']] = ' selected';
    412. 

  412. 

  413. 	$dateformats = block_getdateformats($block['dateformat']);
    414. 

  414. 

  415. } elseif($op == 'remove') {
    416. 

  416. 

  417. 	if(!$bid || (!$allowmanage && !$allowdata)) {
    418. 

  418. 		showmessage('block_edit_nopermission');
    419. 

  419. 	}
    420. 

  420. 

  421. 	if($_GET['itemid']) {
    422. 

  422. 		$_GET['itemid'] = intval($_GET['itemid']);
    423. 

  423. 		if(($item = C::t('common_block_item')->fetch($_GET['itemid'])) && $item['bid'] == $bid) {
    424. 

  424. 			C::t('common_block_item')->delete($_GET['itemid']);
    425. 

  425. 			if($item['itemtype'] != '1') {
    426. 

  426. 				block_ban_item($block, $item);
    427. 

  427. 			}
    428. 

  428. 			block_updatecache($bid, true);
    429. 

  429. 		}
    430. 

  430. 	}
    431. 

  431. 	showmessage('do_success', "portal.php?mod=portalcp&ac=block&op=data&bid=$bid", array('bid'=>$bid));
    432. 

  432. 

  433. } elseif( in_array($op, array('item', 'additem', 'push', 'recommend', 'verifydata', 'managedata'))) {
    434. 

  434. 

  435. 	if(!$bid) {
    436. 

  436. 		showmessage('block_edit_nopermission');
    437. 

  437. 	}
    438. 

  438. 

  439. 	$itemid = $_GET['itemid'] ? intval($_GET['itemid']) : 0;
    440. 

  440. 	$dataid = $_GET['dataid'] ? intval($_GET['dataid']) : 0;
    441. 

  441. 	$_GET['id'] = intval($_GET['id']);
    442. 

  442. 	$_GET['idtype'] = preg_replace('/[^\w]/', '', $_GET['idtype']);
    443. 

  443. 

  444. 	$item = $perm = array();
    445. 

  445. 	if($op == 'item' || $op == 'additem') {
    446. 

  446. 		if(!$allowmanage && !$allowdata) {
    447. 

  447. 			showmessage('block_edit_nopermission');
    448. 

  448. 		}
    449. 

  449. 		if($itemid && ($item = C::t('common_block_item')->fetch($itemid))) {
    450. 

  450. 			$item['fields'] = dunserialize($item['fields']);
    451. 

  451. 		}
    452. 

  452. 	} elseif($op == 'push') {
    453. 

  453. 

  454. 		$item = get_push_item($block, $thestyle, $_GET['id'], $_GET['idtype']);
    455. 

  455. 		if($itemid) {
    456. 

  456. 			$item['itemid'] = $itemid;
    457. 

  457. 		}
    458. 

  458. 	} elseif($op == 'recommend') {
    459. 

  459. 		$perm = getblockperm($bid);
    460. 

  460. 		if(!$perm['allowmanage'] && !$perm['allowrecommend']) {
    461. 

  461. 			showmessage('block_no_right_recommend');
    462. 

  462. 		}
    463. 

  463. 

  464. 		$isrepeatrecommend = false;
    465. 

  465. 		$idtype = $_GET['idtype'] == 'gtid' ? 'tid' : $_GET['idtype'];
    466. 

  466. 		if(($item =  C::t('common_block_item_data')->fetch_by_bid_id_idtype($bid, $_GET['id'], $idtype))) {
    467. 

  467. 			$item['fields'] = dunserialize($item['fields']);
    468. 

  468. 			$isrepeatrecommend = true;
    469. 

  469. 

  470. 			if(!$perm['allowmanage'] && $item['uid'] != $_G['uid']) {
    471. 

  471. 				showmessage('data_in_mod_library', null, null, array('striptags' => false));
    472. 

  472. 			}
    473. 

  473. 

  474. 		} else {
    475. 

  475. 			if(in_array($_GET['idtype'],array('tid', 'gtid', 'aid', 'picid', 'blogid'))) {
    476. 

  476. 				$_GET['idtype'] = $_GET['idtype'] == 'gtid' ? 'tids' : $_GET['idtype'].'s';
    477. 

  477. 			}
    478. 

  478. 			$item = get_push_item($block, $thestyle, $_GET['id'], $_GET['idtype'], $block['blockclass'], $block['script']);
    479. 

  479. 			if(empty($item)) showmessage('block_data_type_invalid', null, null, array('msgtype'=>3));
    480. 

  480. 		}
    481. 

  481. 	} elseif($op=='verifydata' || $op=='managedata') {
    482. 

  482. 		if(!$allowmanage && !$allowdata) {
    483. 

  483. 			showmessage('no_right_manage_data');
    484. 

  484. 		}
    485. 

  485. 		if($dataid) {
    486. 

  486. 			$item = C::t('common_block_item_data')->fetch($dataid);
    487. 

  487. 			$item['fields'] = dunserialize($item['fields']);
    488. 

  488. 		}
    489. 

  489. 	}
    490. 

  490. 

  491. 	if(!$item && $op != 'additem') {
    492. 

  492. 		showmessage('block_edit_nopermission');
    493. 

  493. 	}
    494. 

  494. 

  495. 	$item['oldpic'] = $item['pic'];
    496. 

  496. 	if($item['picflag'] == '1') {
    497. 

  497. 		$item['pic'] = $item['pic'] ? $_G['setting']['attachurl'].$item['pic'] : '';
    498. 

  498. 	} elseif($item['picflag'] == '2') {
    499. 

  499. 		$item['pic'] = $item['pic'] ? $_G['setting']['ftp']['attachurl'].$item['pic'] : '';
    500. 

  500. 	}
    501. 

  501. 

  502. 	$item['startdate'] = $item['startdate'] ? dgmdate($item['startdate']) : dgmdate(TIMESTAMP);
    503. 

  503. 	$item['enddate'] = $item['enddate'] ? dgmdate($item['enddate']) : '';
    504. 

  504. 	$orders = range(1, $block['shownum']);
    505. 

  505. 	$orderarr[$item['displayorder']] = ' selected="selected"';
    506. 

  506. 	$item['showstyle'] = !empty($item['showstyle']) ? (array)(dunserialize($item['showstyle'])) : (!empty($item['fields']['showstyle']) ? $item['fields']['showstyle'] : array());
    507. 

  507. 	$showstylearr = array();
    508. 

  508. 	foreach(array('title_b', 'title_i', 'title_u', 'title_c', 'summary_b', 'summary_i', 'summary_u', 'title_c') as $value) {
    509. 

  509. 		if(!empty($item['showstyle'][$value])) {
    510. 

  510. 			$showstylearr[$value] = 'class="a"';
    511. 

  511. 		}
    512. 

  512. 	}
    513. 

  513. 

  514. 	$itemfields = $blockitem = $item;
    515. 

  515. 	unset($itemfields['fields']);
    516. 

  516. 	$item['fields'] = (array)$item['fields'];
    517. 

  517. 	foreach($item['fields'] as $key=>$value) {
    518. 

  518. 		if($theclass['fields'][$key]) {
    519. 

  519. 			switch($theclass['fields'][$key]['datatype']) {
    520. 

  520. 				case 'date':
    521. 

  521. 					$itemfields[$key] = dgmdate($value, 'Y-m-d H:i:s');
    522. 

  522. 					break;
    523. 

  523. 				case 'int':
    524. 

  524. 					$itemfields[$key] = intval($value);
    525. 

  525. 					break;
    526. 

  526. 				case 'string':
    527. 

  527. 					$itemfields[$key] = dhtmlspecialchars($value);
    528. 

  528. 					break;
    529. 

  529. 				default:
    530. 

  530. 					$itemfields[$key] = $value;
    531. 

  531. 			}
    532. 

  532. 		}
    533. 

  533. 	}
    534. 

  534. 

  535. 	$showfields = array();
    536. 

  536. 	if(empty($thestyle['fields'])) {
    537. 

  537. 		$template = block_build_template($thestyle['template']);
    538. 

  538. 		$thestyle['fields'] = block_parse_fields($template);
    539. 

  539. 		C::t('common_block_style')->update(intval($thestyle['styleid']), array('fields'=>serialize($thestyle['fields'])));
    540. 

  540. 	}
    541. 

  541. 	foreach($thestyle['fields'] as $fieldname) {
    542. 

  542. 		$showfields[$fieldname] = "1";
    543. 

  543. 	}
    544. 

  544. 

  545. 	if(submitcheck('itemsubmit') || submitcheck('recommendsubmit') || submitcheck('verifydatasubmit') || submitcheck('managedatasubmit')) {
    546. 

  546. 		$item['bid'] = $block['bid'];
    547. 

  547. 		$item['displayorder'] = intval($_POST['displayorder']);
    548. 

  548. 		$item['startdate'] = !empty($_POST['startdate']) ? strtotime($_POST['startdate']) : 0;
    549. 

  549. 		$item['enddate'] = !empty($_POST['enddate']) ? strtotime($_POST['enddate']) : 0;
    550. 

  550. 		$item['itemtype'] = !empty($_POST['locked']) ? '1' : '2';
    551. 

  551. 		$item['title'] = dhtmlspecialchars($_POST['title']);
    552. 

  552. 		$item['url'] = $_POST['url'];
    553. 

  553. 		$block['param']['summarylength'] = empty($block['param']['summarylength']) ? 80 : $block['param']['summarylength'];
    554. 

  554. 		$block['param']['titlelength'] = empty($block['param']['titlelength']) ? 40 : $block['param']['titlelength'];
    555. 

  555. 		$item['summary'] = cutstr($_POST['summary'], $block['param']['summarylength'], '');
    556. 

  556. 		if($_FILES['pic']['tmp_name']) {
    557. 

  557. 			$result = pic_upload($_FILES['pic'], 'portal');
    558. 

  558. 			$item['pic'] = 'portal/'.$result['pic'];
    559. 

  559. 			$item['picflag'] = $result['remote'] ? '2' : '1';
    560. 

  560. 			$item['makethumb'] = 0;
    561. 

  561. 			$item['thumbpath'] = '';
    562. 

  562. 			$thumbdata = array('bid' => $block['bid'], 'itemid' => $item['itemid'], 'pic' => $item['pic'], 'picflag' => $result['remote'], 'type' => '1');
    563. 

  563. 			C::t('common_block_pic')->insert($thumbdata);
    564. 

  564. 		} elseif($_POST['pic']) {
    565. 

  565. 			$pic = dhtmlspecialchars($_POST['pic']);
    566. 

  566. 			$urls = parse_url($pic);
    567. 

  567. 			if(!empty($urls['scheme']) && !empty($urls['host'])) {
    568. 

  568. 				$item['picflag'] = '0';
    569. 

  569. 				$item['thumbpath'] = '';
    570. 

  570. 			} else {
    571. 

  571. 				$item['picflag'] = intval($_POST['picflag']);
    572. 

  572. 			}
    573. 

  573. 			if($item['pic'] != $pic) {
    574. 

  574. 				$item['pic'] = $pic;
    575. 

  575. 				$item['makethumb'] = 0;
    576. 

  576. 				$item['thumbpath'] = block_thumbpath($block, $item);
    577. 

  577. 			}
    578. 

  578. 		}
    579. 

  579. 		unset($item['oldpic']);
    580. 

  580. 		$item['showstyle'] = $_POST['showstyle']['title_b'] || $_POST['showstyle']['title_i'] || $_POST['showstyle']['title_u'] || $_POST['showstyle']['title_c'] ? $_POST['showstyle'] : array();
    581. 

  581. 		$item['showstyle'] = empty($item['showstyle']) ? '' : serialize($item['showstyle']);
    582. 

  582. 

  583. 		foreach($theclass['fields'] as $key=>$value) {
    584. 

  584. 			if(!isset($item[$key]) && isset($_POST[$key])) {
    585. 

  585. 				if($value['datatype'] == 'int') {
    586. 

  586. 					$_POST[$key] = intval($_POST[$key]);
    587. 

  587. 				} elseif($value['datatype'] == 'date') {
    588. 

  588. 					$_POST[$key] = strtotime($_POST[$key]);
    589. 

  589. 				} else {
    590. 

  590. 					$_POST[$key] = $_POST[$key];
    591. 

  591. 				}
    592. 

  592. 				$item['fields'][$key] = $_POST[$key];
    593. 

  593. 			}
    594. 

  594. 		}
    595. 

  595. 		if(isset($item['fields']['fulltitle'])) {
    596. 

  596. 			$item['fields']['fulltitle'] = $item['title'];
    597. 

  597. 		}
    598. 

  598. 		$item['fields']	= serialize($item['fields']);
    599. 

  599. 

  600. 		$item['title'] = cutstr($item['title'], $block['param']['titlelength'], '');
    601. 

  601. 

  602. 		if($_POST['icflag']) {
    603. 

  603. 			$item['makethumb'] = 1;
    604. 

  604. 			$item['thumbpath'] = block_thumbpath($block, $item);
    605. 

  605. 		}
    606. 

  606. 		if(submitcheck('itemsubmit')) {
    607. 

  607. 

  608. 			if($op == 'additem' && !$item['id']) {
    609. 

  609. 				$item['id'] = ($pushid = intval($_POST['push_id'])) ? $pushid : mt_rand(1,9999);
    610. 

  610. 				$item['idtype'] = 'rand';
    611. 

  611. 			}
    612. 

  612. 			if($item['startdate'] > $_G['timestamp']) {
    613. 

  613. 				C::t('common_block_item')->insert($item, false, true);
    614. 

  614. 			} elseif(empty($item['enddate']) || $item['enddate'] > $_G['timestamp']) {
    615. 

  615. 				C::t('common_block_item')->delete_by_bid_displayorder($bid, $item['displayorder']);
    616. 

  616. 				C::t('common_block_item')->insert($item, false, true);
    617. 

  617. 			} else {
    618. 

  618. 				C::t('common_block_item')->delete_by_itemid_bid($item['itemid'], $bid);
    619. 

  619. 			}
    620. 

  620. 			block_updatecache($bid, true);
    621. 

  621. 			showmessage('do_success', 'portal.php?mod=portalcp&ac=block&op=data&bid='.$block['bid'], array('bid'=>$bid));
    622. 

  622. 

  623. 		} elseif(submitcheck('recommendsubmit')) {
    624. 

  624. 			include_once libfile('function/home');
    625. 

  625. 			$thumbpath = $item['thumbpath'];
    626. 

  626. 			unset($item['itemid']);
    627. 

  627. 			unset($item['thumbpath']);
    628. 

  628. 			$item['itemtype'] = '0';
    629. 

  629. 			$item['uid'] = $_G['uid'];
    630. 

  630. 			$item['username'] = $_G['username'];
    631. 

  631. 			$item['dateline'] = TIMESTAMP;
    632. 

  632. 			$item['isverified'] = empty($_POST['needverify']) && ($perm['allowmanage'] || empty($perm['needverify'])) ? '1' : '0';
    633. 

  633. 			$item['verifiedtime'] = TIMESTAMP;
    634. 

  634. 

  635. 			C::t('common_block_item_data')->insert($item, false, true);
    636. 

  636. 			if($_GET['showrecommendtip'] && (in_array($_GET['idtype'], array('tids', 'tid', 'gtid')))) {
    637. 

  637. 				$modarr = array(
    638. 

  638. 					'tid' => $item['id'],
    639. 

  639. 					'uid' => $item['uid'],
    640. 

  640. 					'username' => $item['username'],
    641. 

  641. 					'dateline' => TIMESTAMP,
    642. 

  642. 					'action' => 'REB',
    643. 

  643. 					'status' => '1',
    644. 

  644. 					'stamp' => '',
    645. 

  645. 					'reason' => getstr($_GET['recommendto'], 20),
    646. 

  646. 				);
    647. 

  647. 				C::t('forum_threadmod')->insert($modarr);
    648. 

  648. 				$data = array('moderated' => 1);
    649. 

  649. 				loadcache('stamptypeid');
    650. 

  650. 				if(array_key_exists(4, $_G['cache']['stamptypeid'])) {
    651. 

  651. 					$data['stamp'] = $_G['cache']['stamptypeid']['4'];
    652. 

  652. 				}
    653. 

  653. 				C::t('forum_thread')->update($item['id'], $data);
    654. 

  654. 			}
    655. 

  655. 			if($_POST['icflag'] && !(C::t('common_block_pic')->count_by_bid_pic($block['bid'], $thumbpath))) {
    656. 

  656. 				$picflag = 0; //common_block_pic表中的picflag标识（0本地，1远程）
    657. 

  657. 				if($_G['setting']['ftp']['on']) {
    658. 

  658. 					$ftp = & discuz_ftp::instance();
    659. 

  659. 					$ftp->connect();
    660. 

  660. 					if($ftp->connectid && $ftp->ftp_size($thumbpath) > 0 || $ftp->upload($_G['setting']['attachurl'].'/'.$thumbpath, $thumbpath)) {
    661. 

  661. 						$picflag = 1; //common_block_pic表中的picflag标识（0本地，1远程）
    662. 

  662. 						@unlink($_G['setting']['attachdir'].'./'.$thumbpath);
    663. 

  663. 					}
    664. 

  664. 				}
    665. 

  665. 

  666. 				$thumbdata = array('bid' => $block['bid'], 'itemid' => 0, 'pic' => $thumbpath, 'picflag' => $picflag, 'type' => '0');
    667. 

  667. 				C::t('common_block_pic')->insert($thumbdata);
    668. 

  668. 			}
    669. 

  669. 			if(!empty($_POST['updateblock'])) {
    670. 

  670. 				block_updatecache($bid, true);
    671. 

  671. 			}
    672. 

  672. 

  673. 			if(($_G['group']['reasonpm'] == 2 || $_G['group']['reasonpm'] == 3) || !empty($_GET['sendreasonpm'])) {
    674. 

  674. 				$sendreasonpm = 1;
    675. 

  675. 			} else {
    676. 

  676. 				$sendreasonpm = 0;
    677. 

  677. 			}
    678. 

  678. 			if($sendreasonpm) {
    679. 

  679. 				require_once libfile('function/misc');
    680. 

  680. 				if((in_array($_GET['idtype'], array('tids', 'tid', 'gtid')))) {
    681. 

  681. 					$sendreasonpmcontent = C::t('forum_thread')->fetch($item['id']);
    682. 

  682. 					sendreasonpm($sendreasonpmcontent, 'recommend_note_post', array(
    683. 

  683. 						'tid' => $item['id'],
    684. 

  684. 						'subject' => $sendreasonpmcontent['subject'],
    685. 

  685. 						'from_id' => 0,
    686. 

  686. 						'from_idtype' => 'recommend'
    687. 

  687. 					));
    688. 

  688. 				}
    689. 

  689. 			}
    690. 

  690. 

  691. 			$showrecommendrate = '';
    692. 

  692. 			if($_G['group']['raterange'] && (in_array($_GET['idtype'], array('tids', 'tid', 'gtid')))) {
    693. 

  693. 				$showrecommendrate = 1;
    694. 

  694. 			}
    695. 

  695. 			if($showrecommendrate) {
    696. 

  696. 				showmessage('do_success', dreferer('portal.php'), array(), array('showdialog' => true, 'closetime' => 0.01, 'extrajs' =>
    697. 

  697. 					'<script type="text/javascript" reload="1">
    698. 

  698. 					showWindow("rate", "forum.php?mod=misc&action=rate&tid='.$item[id].'&pid='.$_GET[recommend_thread_pid].'&showratetip=1", "get", -1);
    699. 

  699. 					</script>'));
    700. 

  700. 			} elseif($_GET['showrecommendtip']) {
    701. 

  701. 				showmessage('do_success', dreferer('portal.php'), array(), array('showdialog' => true, 'closetime' => true, 'extrajs' =>
    702. 

  702. 					'<script type="text/javascript" reload="1">
    703. 

  703. 					window.location.reload();
    704. 

  704. 					</script>'));
    705. 

  705. 			} else {
    706. 

  706. 				showmessage('do_success', dreferer('portal.php'), array(), array('showdialog' => true, 'closetime' => true));
    707. 

  707. 			}
    708. 

  708. 		} elseif(submitcheck('verifydatasubmit')) {
    709. 

  709. 			unset($item['thumbpath']);
    710. 

  710. 			$item['isverified'] = '1';
    711. 

  711. 			$item['verifiedtime'] = TIMESTAMP;
    712. 

  712. 			C::t('common_block_item_data')->update($dataid, $item);
    713. 

  713. 			if(!empty($_POST['updateblock'])) {
    714. 

  714. 				block_updatecache($bid, true);
    715. 

  715. 			}
    716. 

  716. 			showmessage('do_success', dreferer('portal.php?mod=portalcp&ac=portalblock&op=verifieddata&searchkey=%23'.$bid));
    717. 

  717. 		} elseif(submitcheck('managedatasubmit')) {
    718. 

  718. 			unset($item['thumbpath']);
    719. 

  719. 			$item['stickgrade'] = intval($_POST['stickgrade']);
    720. 

  720. 			C::t('common_block_item_data')->update($dataid, $item);
    721. 

  721. 			showmessage('do_success', dreferer('portal.php?mod=portalcp&ac=block&op=itemdata&bid='.$bid));
    722. 

  722. 		}
    723. 

  723. 	}
    724. 

  724. 	if(in_array($block['blockclass'], array('forum_thread', 'portal_article', 'group_thread', 'space_blog'), true)) {
    725. 

  725. 		$picdatas = array();
    726. 

  726. 		$prefix = ($item['picflag'] == 2 ? $_G['setting']['ftp']['attachurl'] : $_G['setting']['attachurl']);
    727. 

  727. 		$itemfields['pics'] = array();
    728. 

  728. 		$first = true;
    729. 

  729. 

  730. 		if(empty($_GET['idtype'])) {
    731. 

  731. 			$_GET['idtype'] = $itemfields['idtype'].'s';
    732. 

  732. 			$_GET['id'] = $itemfields['id'];
    733. 

  733. 		}
    734. 

  734. 

  735. 		if(in_array($_GET['idtype'], array('tids', 'tid'))) {
    736. 

  736. 			$prefix .= 'forum/';
    737. 

  737. 			$firstpost = C::t('forum_post')->fetch_threadpost_by_tid_invisible($_GET['id']);
    738. 

  738. 			foreach(C::t('forum_attachment_n')->fetch_all_by_pid_width('pid:'.$firstpost['pid'], $firstpost['pid'], $block['picwidth']) as $pic) {
    739. 

  739. 				if($first) {
    740. 

  740. 					$first = false;
    741. 

  741. 					$itemfields['pics'][0] = '';
    742. 

  742. 					if(strpos($itemfields['oldpic'], 'nophoto.gif') !== false) {
    743. 

  743. 						$itemfields['oldpic'] = 'forum/'.$pic['attachment'];
    744. 

  744. 					}
    745. 

  745. 				}
    746. 

  746. 				$thumb = $prefix.($pic['thumb'] ? getimgthumbname($pic['attachment']) : $pic['attachment']);
    747. 

  747. 				if('forum/'.$pic['attachment'] == $itemfields['oldpic']) {
    748. 

  748. 					$itemfields['pics'][0] = array('big' => $prefix.$pic['attachment'], 'thumb' => $thumb, 'attachment' => 'forum/'.$pic['attachment'], 'first' => 1);
    749. 

  749. 				} else {
    750. 

  750. 					$itemfields['pics'][] = array('big' => $prefix.$pic['attachment'], 'thumb' => $thumb, 'attachment' => 'forum/'.$pic['attachment'], 'first' => 0);
    751. 

  751. 				}
    752. 

  752. 			}
    753. 

  753. 			if(empty($itemfields['pics'][0])) {
    754. 

  754. 				unset($itemfields['pics'][0]);
    755. 

  755. 			}
    756. 

  756. 		} elseif($_GET['idtype'] == 'aids') {
    757. 

  757. 			$prefix .= 'portal/';
    758. 

  758. 			foreach(C::t('portal_attachment')->fetch_all_by_aid($_GET['id']) as $pic) {
    759. 

  759. 				if($first) {
    760. 

  760. 					$first = false;
    761. 

  761. 					$itemfields['pics'][0] = '';
    762. 

  762. 					if(strpos($itemfields['oldpic'], 'nophoto.gif') !== false) {
    763. 

  763. 						$itemfields['oldpic'] = 'portal/'.$pic['attachment'];
    764. 

  764. 					}
    765. 

  765. 				}
    766. 

  766. 				$thumb = $prefix.($pic['thumb'] ? getimgthumbname($pic['attachment']) : $pic['attachment']);
    767. 

  767. 				if('portal/'.$pic['attachment'] == $itemfields['oldpic']) {
    768. 

  768. 					$itemfields['pics'][0] = array('big' => $prefix.$pic['attachment'], 'thumb' => $thumb, 'attachment' => 'portal/'.$pic['attachment'], 'first' => 1);
    769. 

  769. 				} else {
    770. 

  770. 					$itemfields['pics'][] = array('big' => $prefix.$pic['attachment'], 'thumb' => $thumb, 'attachment' => 'portal/'.$pic['attachment'], 'first' => 0);
    771. 

  771. 				}
    772. 

  772. 			}
    773. 

  773. 			if(empty($itemfields['pics'][0])) {
    774. 

  774. 				unset($itemfields['pics'][0]);
    775. 

  775. 			}
    776. 

  776. 		} elseif($_GET['idtype'] == 'blogids') {
    777. 

  777. 			$itemfields['pics'][] = array('big' => $itemfields['pic'], 'thumb' => 1, 'attachment' => $itemfields['oldpic']);
    778. 

  778. 		}
    779. 

  779. 

  780. 	}
    781. 

  781. 

  782. } elseif ($op == 'getblock') {
    783. 

  783. 

  784. 	if(!$bid || (!$allowmanage && !$allowdata)) {
    785. 

  785. 		showmessage('block_edit_nopermission');
    786. 

  786. 	}
    787. 

  787. 

  788. 	block_get_batch($bid);
    789. 

  789. 	if(!empty($_GET['forceupdate'])) block_updatecache($bid, !empty($_GET['forceupdate']));
    790. 

  790. 	if(strexists($block['summary'], '<script')) {
    791. 

  791. 		$block['summary'] = lang('portalcp', 'block_diy_nopreview');
    792. 

  792. 		$_G['block'][$bid] = $block;
    793. 

  793. 		$_G['block'][$bid]['cachetime'] = 0;
    794. 

  794. 		$_G['block'][$bid]['nocache'] = true;
    795. 

  795. 	}
    796. 

  796. 	$html = block_fetch_content($bid, $block['blocktype']);
    797. 

  797. 

  798. } elseif ($op == 'saveblockclassname') {
    799. 

  799. 

  800. 	if(!$bid || !$allowmanage) {
    801. 

  801. 		showmessage('block_edit_nopermission');
    802. 

  802. 	}
    803. 

  803. 

  804. 	if (submitcheck('saveclassnamesubmit')) {
    805. 

  805. 		$setarr = array('classname'=>getstr($_POST['classname'], 100, 0, 0, 0, -1));
    806. 

  806. 		C::t('common_block')->update($bid, $setarr);
    807. 

  807. 	}
    808. 

  808. 	C::t('common_block')->clear_cache($bid);
    809. 

  809. 

  810. 	showmessage('do_success');
    811. 

  811. } elseif ($op == 'saveblocktitle') {
    812. 

  812. 

  813. 	if(!$bid || !$allowmanage) {
    814. 

  814. 		showmessage('block_edit_nopermission');
    815. 

  815. 	}
    816. 

  816. 

  817. 	if (submitcheck('savetitlesubmit')) {
    818. 

  818. 		$_POST['title'] = preg_replace('/\<script|\<iframe|\<\/iframe\>/is', '', $_POST['title']);
    819. 

  819. 		$title = $_POST['title'];
    820. 

  820. 		$title = preg_replace('/url\([\'"](.*?)[\'"]\)/','url($1)',$title);
    821. 

  821. 

  822. 		$_G['siteurl'] = str_replace(array('/','.'),array('\/','\.'),$_G['siteurl']);
    823. 

  823. 		$title = preg_replace('/\"'.$_G['siteurl'].'(.*?)\"/','"$1"',$title);
    824. 

  824. 

  825. 		$setarr = array('title'=>$title);
    826. 

  826. 		C::t('common_block')->update($bid, $setarr);
    827. 

  827. 	}
    828. 

  828. 

  829. 	C::t('common_block')->clear_cache($bid);
    830. 

  830. 

  831. 	showmessage('do_success');
    832. 

  832. } elseif ($op == 'convert') {
    833. 

  833. 

  834. 	if(!$bid || !$allowmanage) {
    835. 

  835. 		showmessage('block_edit_nopermission');
    836. 

  836. 	}
    837. 

  837. 	block_convert($bid, $_GET['toblockclass']);
    838. 

  838. } elseif ($op == 'favorite') {
    839. 

  839. 	$perm = getblockperm($bid);
    840. 

  840. 	if(!$perm['allowmanage'] && !$perm['allowrecommend']) {
    841. 

  841. 		showmessage('block_no_right_recommend');
    842. 

  842. 	}
    843. 

  843. 	$favoriteop = '';
    844. 

  844. 	if(!block_check_favorite($_G['uid'], $bid)) {
    845. 

  845. 		$setarr = array(
    846. 

  846. 			'uid' => $_G['uid'],
    847. 

  847. 			'bid' => $bid,
    848. 

  848. 		);
    849. 

  849. 		block_add_favorite($setarr);
    850. 

  850. 		$favoriteop = 'add';
    851. 

  851. 	} else {
    852. 

  852. 		block_delete_favorite($_G['uid'], $bid);
    853. 

  853. 		$favoriteop = 'del';
    854. 

  854. 	}
    855. 

  855. } elseif($op == 'delrecommend') {
    856. 

  856. 	$perm = getblockperm($bid);
    857. 

  857. 	if(!$perm['allowmanage'] && !$perm['allowrecommend']) {
    858. 

  858. 		showmessage('block_no_right_recommend');
    859. 

  859. 	}
    860. 

  860. 	if(($_GET['dataid'] = dintval($_GET['dataid']))) {
    861. 

  861. 		C::t('common_block_item_data')->delete($_GET['dataid']);
    862. 

  862. 		block_updatecache($bid, true);
    863. 

  863. 	}
    864. 

  864. 	showmessage('do_success');
    865. 

  865. } elseif($op == 'moreurl') {
    866. 

  866. 	if(!$bid || !$allowmanage) {
    867. 

  867. 		showmessage('block_edit_nopermission');
    868. 

  868. 	}
    869. 

  869. 

  870. 	if(submitcheck('moreurlsubmit')) {
    871. 

  871. 		$arr = array(
    872. 

  872. 			'perpage' => max(1, intval($_POST['perpage'])),
    873. 

  873. 			'seotitle' => $_POST['seotitle'],
    874. 

  874. 			'seokeywords' => $_POST['seokeywords'],
    875. 

  875. 			'seodescription' => $_POST['seodescription'],
    876. 

  876. 		);
    877. 

  877. 		$block['param']['moreurl'] = $arr;
    878. 

  878. 		C::t('common_block')->update($bid, array('param' => serialize($block['param'])));
    879. 

  879. 

  880. 		showmessage('do_success', 'portal.php?mod=portalcp&ac=block&op=moreurl&bid='.$bid, array('bid'=>$bid));
    881. 

  881. 	}
    882. 

  882. 	$block['param']['moreurl'] = !empty($block['param']['moreurl']) ? $block['param']['moreurl'] :
    883. 

  883. 								array('perpage' => 20, 'seotitle' => $block['name'], 'keywords' => '', 'description' => '');
    884. 

  884. }
    885. 

  885. 

  886. include_once template("portal/portalcp_block");
    887. 

  887. 

  888. function block_checkdefault($block) {
    889. 

  889. 	if(empty($block['shownum'])) {
    890. 

  890. 		$block['shownum'] = 10;
    891. 

  891. 	}
    892. 

  892. 	if(!isset($block['cachetime'])) {
    893. 

  893. 		$block['cachetime'] = '3600';
    894. 

  894. 	}
    895. 

  895. 	if(empty($block['picwidth'])) {
    896. 

  896. 		$block['picwidth'] = "200";
    897. 

  897. 	}
    898. 

  898. 	if(empty($block['picheight'])) {
    899. 

  899. 		$block['picheight'] = "200";
    900. 

  900. 	}
    901. 

  901. 	if(empty($block['target'])) {
    902. 

  902. 		$block['target'] = "blank";
    903. 

  903. 	}
    904. 

  904. 	return $block;
    905. 

  905. }
    906. 

  906. 

  907. function block_getdateformats($format='') {
    908. 

  908. 	$formats = array('Y-m-d', 'm-d', 'H:i', 'Y-m-d H:i');
    909. 

  909. 	$return = array();
    910. 

  910. 	foreach($formats as $value) {
    911. 

  911. 		$return[] = array(
    912. 

  912. 			'format' => $value,
    913. 

  913. 			'selected' => $format==$value ? ' selected="selected"' : '',
    914. 

  914. 			'time' => dgmdate(TIMESTAMP, $value)
    915. 

  915. 		);
    916. 

  916. 	}
    917. 

  917. 	return $return;
    918. 

  918. }
    919. 

  919. 

  920. function block_ban_item($block, $item) {
    921. 

  921. 	global $_G;
    922. 

  922. 	$parameters = !empty($block['param']) ? $block['param'] : array();
    923. 

  923. 	$bannedids = !empty($parameters['bannedids']) ? explode(',', $parameters['bannedids']) : array();
    924. 

  924. 	$bannedids[] = intval($item['id']);
    925. 

  925. 	$bannedids = array_unique($bannedids);
    926. 

  926. 	$parameters['bannedids'] = implode(',', $bannedids);
    927. 

  927. 	$_G['block'][$block['bid']]['param'] = $parameters;
    928. 

  928. 	$parameters = serialize($parameters);
    929. 

  929. 	C::t('common_block')->update($block['bid'], array('param'=>$parameters));
    930. 

  930. }
    931. 

  931. 

  932. function get_push_item($block, $blockstyle, $id, $idtype, $blockclass = '', $script = '') {
    933. 

  933. 	$item = array();
    934. 

  934. 	$obj = null;
    935. 

  935. 	if(empty($blockclass) || empty($script)) {
    936. 

  936. 		if($idtype == 'tids') {
    937. 

  937. 			$obj = block_script('forum', 'thread');
    938. 

  938. 		} elseif($idtype == 'gtids') {
    939. 

  939. 			$obj = block_script('group', 'groupthread');
    940. 

  940. 		} elseif($idtype == 'aids') {
    941. 

  941. 			$obj = block_script('portal', 'article');
    942. 

  942. 		} elseif($idtype == 'picids') {
    943. 

  943. 			$obj = block_script('space', 'pic');
    944. 

  944. 		} elseif($idtype == 'blogids') {
    945. 

  945. 			$obj = block_script('space', 'blog');
    946. 

  946. 		}
    947. 

  947. 	} else {
    948. 

  948. 		list($blockclass) = explode('_', $blockclass);
    949. 

  949. 		$obj = block_script($blockclass, $script);
    950. 

  950. 	}
    951. 

  951. 	if($obj && is_object($obj)) {
    952. 

  952. 		$paramter = array($idtype => intval($id));
    953. 

  953. 		if(isset($block['param']['picrequired'])) {
    954. 

  954. 			$paramter['picrequired'] = $block['param']['picrequired'];
    955. 

  955. 		}
    956. 

  956. 		$return = $obj->getData($blockstyle, $paramter);
    957. 

  957. 		if($return['data']) {
    958. 

  958. 			$item = array_shift($return['data']);
    959. 

  959. 		}
    960. 

  960. 	}
    961. 

  961. 	return $item;
    962. 

  962. }
    963. 

  963. 

  964. function block_convert($bid, $toblockclass) {
    965. 

  965. 	global $_G;
    966. 

  966. 	$bid = intval($bid);
    967. 

  967. 	if(empty($bid) || empty($toblockclass)) return false;
    968. 

  968. 	if(($block = C::t('common_block')->fetch($bid))) {
    969. 

  969. 		loadcache('blockconvert');
    970. 

  970. 		$fromblockclass = $block['blockclass'];
    971. 

  971. 		list($bigclass) = explode('_', $fromblockclass);
    972. 

  972. 		$convertrule = null;
    973. 

  973. 		if(!empty($_G['cache']['blockconvert']) && !empty($_G['cache']['blockconvert'][$bigclass][$fromblockclass][$toblockclass])) {
    974. 

  974. 			$convertrule = $_G['cache']['blockconvert'][$bigclass][$fromblockclass][$toblockclass];
    975. 

  975. 		}
    976. 

  976. 		if(!empty($convertrule)) {
    977. 

  977. 			$blockstyle = array();
    978. 

  978. 			if($block['styleid']) {
    979. 

  979. 				if(($blockstyle = C::t('common_block_style')->fetch(intval($block['styleid'])))) {
    980. 

  980. 					unset($blockstyle['styleid']);
    981. 

  981. 					$blockstyle['fields'] = dunserialize($blockstyle['fields']);
    982. 

  982. 					$blockstyle['template'] = dunserialize($blockstyle['template']);
    983. 

  983. 				}
    984. 

  984. 			} elseif($block['blockstyle']) {
    985. 

  985. 				$blockstyle = dunserialize($block['blockstyle']);
    986. 

  986. 			}
    987. 

  987. 

  988. 			if($blockstyle) {
    989. 

  989. 				$blockstyle['name'] = '';
    990. 

  990. 				$blockstyle['blockclass'] = $toblockclass;
    991. 

  991. 				foreach($blockstyle['fields'] as $key => $value) {
    992. 

  992. 					$blockstyle['fields'][$key] = str_replace($convertrule['searchkeys'], $convertrule['replacekeys'], $value);
    993. 

  993. 				}
    994. 

  994. 

  995. 				$fun = create_function('&$v','$v = "{".$v."}";');
    996. 

  996. 				array_walk($convertrule['searchkeys'], $fun);
    997. 

  997. 				array_walk($convertrule['replacekeys'], $fun);
    998. 

  998. 

  999. 				foreach($blockstyle['template'] as $key => $value) {
    1000. 

  1000. 					$blockstyle['template'][$key] = str_replace($convertrule['searchkeys'], $convertrule['replacekeys'], $value);
    1001. 

  1001. 				}
    1002. 

  1002. 				unset($block['bid']);
    1003. 

  1003. 				$block['styleid'] = '0';
    1004. 

  1004. 				$block['script'] = $convertrule['script'];
    1005. 

  1005. 				$block['blockclass'] = $toblockclass;
    1006. 

  1006. 				$block['blockstyle'] = serialize($blockstyle);
    1007. 

  1007. 				$block['param'] = serialize($block['param']);
    1008. 

  1008. 				C::t('common_block')->update($bid, $block);
    1009. 

  1009. 			}
    1010. 

  1010. 		}
    1011. 

  1011. 

  1012. 	}
    1013. 

  1013. }
    1014. 

  1014. 

  1015. function block_check_favorite($uid, $bid){
    1016. 

  1016. 	$uid = intval($uid);
    1017. 

  1017. 	$bid = intval($bid);
    1018. 

  1018. 	if($uid && $bid) {
    1019. 

  1019. 		return C::t('common_block_favorite')->count_by_uid_bid($uid, $bid);
    1020. 

  1020. 	} else {
    1021. 

  1021. 		return false;
    1022. 

  1022. 	}
    1023. 

  1023. }
    1024. 

  1024. 

  1025. function block_add_favorite($setarr){
    1026. 

  1026. 	$arr = array(
    1027. 

  1027. 		'uid' => intval($setarr['uid']),
    1028. 

  1028. 		'bid' => intval($setarr['bid']),
    1029. 

  1029. 		'dateline' => TIMESTAMP
    1030. 

  1030. 	);
    1031. 

  1031. 	return C::t('common_block_favorite')->insert($arr, true);
    1032. 

  1032. }
    1033. 

  1033. 

  1034. function block_delete_favorite($uid, $bid){
    1035. 

  1035. 	$uid = intval($uid);
    1036. 

  1036. 	$bid = intval($bid);
    1037. 

  1037. 	if($uid && $bid) {
    1038. 

  1038. 		return C::t('common_block_favorite')->delete_by_uid_bid($uid, $bid);
    1039. 

  1039. 	} else {
    1040. 

  1040. 		return false;
    1041. 

  1041. 	}
    1042. 

  1042. 

  1043. }
    1044. 

  1044. 

  1045. function block_ckeck_summary($summary){
    1046. 

  1046. 	if($summary) {
    1047. 

  1047. 		$tags = array('div', 'table', 'tbody', 'tr', 'td', 'th');
    1048. 

  1048. 		foreach($tags as $tag) {
    1049. 

  1049. 			preg_match_all('/(<'.$tag.')|(<\/'.$tag.'>)/i', $summary, $all);
    1050. 

  1050. 			if(!empty($all[1]) && !empty($all[2])) {
    1051. 

  1051. 				$all[1] = array_filter($all[1]);
    1052. 

  1052. 				$all[2] = array_filter($all[2]);
    1053. 

  1053. 				if(count($all[1]) !== count($all[2])) {
    1054. 

  1054. 					return $tag;
    1055. 

  1055. 				}
    1056. 

  1056. 			}
    1057. 

  1057. 		}
    1058. 

  1058. 	}
    1059. 

  1059. 	return $summary;
    1060. 

  1060. }
    1061. 

  1061. ?>
    1062.