}
$diyid = empty($diyid) ? 0 : intval($diyid);
/*----------------
function __SaveEdit()
-----------------*/
if ($dopost == "save") {
$public = isset($public) && is_numeric($public) ? $public : 0;
$name = htmlspecialchars($name, ENT_COMPAT, "GB2312");
$query = "UPDATE `#@__diyforms` SET name = '{$name}', listtemplate='{$listtemplate}', viewtemplate='{$viewtemplate}', posttemplate='{$posttemplate}', public='{$public}' WHERE diyid='{$diyid}' ";
$dsql->ExecuteNoneQuery($query);
ShowMsg("成功更改一个自定义表单！", "diy_main.php");
exit;
} else {
if ($dopost == "delete") {
@set_time_limit(0);
CheckPurview('c_Del');
$row = $dsql->GetOne("SELECT * FROM #@__diyforms WHERE diyid='{$diyid}'");
if (empty($job)) {
$job = "";
}
//确认提示
if ($job == "") {
$wintitle = "自定义表单管理-删除自定义表单";
$wecome_info = "<a href='diy_main.php'>自定义表单管理</a>::删除自定义表单";
$win = new OxWindow();
$win->Init("diy_edit.php", "js/blank.js", "POST");
$win->AddHidden("job", "yes");
$win->AddHidden("dopost", $dopost);
$win->AddHidden("diyid", $diyid);
$win->AddTitle("！将删除所有与该自定义表单相关的文件和数据<br />你确实要删除 \"" . $row['name'] . "\" 这个自定义表单？");
$winform = $win->GetWindow("ok");
<?php
/**
* 系统权限组编辑
*
* @version $Id: sys_group_edit.php 1 22:28 2010年7月20日Z tianya $
* @package DedeCMS.Administrator
* @copyright Copyright (c) 2007 - 2010, DesDev, Inc.
* @license http://help.dedecms.com/usersguide/license.html
* @link http://www.dedecms.com
*/
require_once dirname(__FILE__) . "/config.php";
CheckPurview('sys_Group');
if (empty($dopost)) {
$dopost = "";
}
if ($dopost == 'save') {
if ($rank == 10) {
ShowMsg('超级管理员的权限不允许更改!', 'sys_group.php');
exit;
}
$purview = "";
if (is_array($purviews)) {
foreach ($purviews as $p) {
$purview .= "{$p} ";
}
$purview = trim($purview);
}
$dsql->ExecuteNoneQuery("UPDATE `#@__admintype` SET typename='{$typename}',purviews='{$purview}' WHERE CONCAT(`rank`)='{$rank}'");
ShowMsg('成功更改用户组的权限!', 'sys_group.php');
exit;
<?php
/**
* 配送方式设置
*
* @version $Id: shops_delivery.php 1 15:46 2010年7月20日Z tianya $
* @package DedeCMS.Administrator
* @copyright Copyright (c) 2007 - 2010, DesDev, Inc.
* @license http://help.dedecms.com/usersguide/license.html
* @link http://www.dedecms.com
*/
require_once dirname(__FILE__) . "/config.php";
CheckPurview('shops_Delivery');
require_once DEDEINC . '/datalistcp.class.php';
if (!isset($do)) {
$do = '';
}
if ($do == 'add') {
if (empty($dname) || strlen($dname) > 100) {
ShowMsg("请填写配送方式名称!", "-1");
exit;
}
$price = preg_replace("#[^.0-9]#", "", $price);
if ($price < 0.01) {
$price = '0.00';
}
$des = cn_substrR($des, 255);
$InQuery = "INSERT INTO #@__shops_delivery(`dname`,`price`,`des`) VALUES ('{$dname}','{$price}','{$des}');";
$result = $dsql->ExecuteNoneQuery($InQuery);
if ($result) {
ShowMsg("成功添加一个配送方式!", "shops_delivery.php");
<?php
/**
* 自定义表单列表
*
* @version $Id: diy_list.php 1 18:31 2010年7月12日Z tianya $
* @package DedeCMS.Administrator
* @copyright Copyright (c) 2007 - 2010, DesDev, Inc.
* @license http://help.dedecms.com/usersguide/license.html
* @link http://www.dedecms.com
*/
require_once dirname(__FILE__) . "/config.php";
CheckPurview('c_New');
$diyid = isset($diyid) && is_numeric($diyid) ? $diyid : 0;
$action = isset($action) && in_array($action, array('post', 'list', 'edit', 'check', 'delete')) ? $action : '';
if (empty($diyid)) {
showMsg("非法操作!", 'javascript:;');
exit;
}
require_once DEDEINC . '/diyform.cls.php';
$diy = new diyform($diyid);
if ($action == 'post') {
if (empty($do)) {
$postform = $diy->getForm('post', '', 'admin');
include DEDEADMIN . '/templets/diy_post.htm';
} else {
if ($do == 2) {
$dede_fields = empty($dede_fields) ? '' : trim($dede_fields);
$dede_fieldshash = empty($dede_fieldshash) ? '' : trim($dede_fieldshash);
if (!empty($dede_fields)) {
if ($dede_fieldshash != md5($dede_fields . $cfg_cookie_encode)) {
<?php
require_once dirname(__FILE__) . "/config.php";
CheckPurview('sys_Data');
if (empty($dopost)) {
$dopost = '';
}
if ($dopost == "viewinfo") {
echo "[<a href='#' onclick='javascript:HideObj(\"_mydatainfo\")'><u>关闭</u></a>]\r\n<xmp>";
if (empty($tablename)) {
echo "没有指定表名！";
} else {
$dsql->SetQuery("SHOW CREATE TABLE " . $dsql->dbName . "." . $tablename);
$dsql->Execute('me');
$row2 = $dsql->GetArray('me', MYSQL_BOTH);
$ctinfo = $row2[1];
echo trim($ctinfo);
}
echo '</xmp>';
exit;
} else {
if ($dopost == "opimize") {
echo "[<a href='#' onclick='javascript:HideObj(\"_mydatainfo\")'><u>关闭</u></a>]\r\n<xmp>";
if (empty($tablename)) {
echo "没有指定表名！";
} else {
$rs = $dsql->ExecuteNoneQuery("OPTIMIZE TABLE `{$tablename}` ");
if ($rs) {
echo "执行优化表： {$tablename} OK！";
} else {
echo "执行优化表： {$tablename} 失败，原因是：" . $dsql->GetError();
<?php
/**
* 系统密码提示问
*
* @version $Id: sys_safe.php 1 22:28 2010年7月20日Z tianya $
* @package DedeCMS.Administrator
* @copyright Copyright (c) 2007 - 2010, DesDev, Inc.
* @license http://help.dedecms.com/usersguide/license.html
* @link http://www.dedecms.com
*/
require_once dirname(__FILE__) . "/config.php";
CheckPurview('sys_Safe');
$safeconfigfile = DEDEDATA . "/safe/inc_safe_config.php";
if (empty($dopost)) {
$dopost = "";
}
if ($dopost == "save") {
$configstr = $shortname = "";
$gdopen = empty($gdopen) ? "" : $gdopen;
$codetype = empty($codetype) ? 1 : $codetype;
$gdtype = empty($gdtype) ? 1 : $gdtype;
$gdstyle = empty($gdstyle) ? "" : $gdstyle;
$gd_wwidth = empty($gd_wwidth) ? 0 : $gd_wwidth;
$gd_wheight = empty($gd_wheight) ? 0 : $gd_wheight;
$codelen = empty($codelen) ? 4 : $codelen;
$gdfaq_reg = empty($gdfaq_reg) ? 0 : $gdfaq_reg;
$gdfaq_send = empty($gdfaq_send) ? 0 : $gdfaq_send;
$gdfaq_msg = empty($gdfaq_msg) ? 0 : $gdfaq_msg;
if (is_array($gdopen)) {
$configstr = "\$safe_gdopen = '" . implode(",", $gdopen) . "';\r\n";
<?php
/**
* 导出采集规则
*
* @version $Id: co_edit_text.php 1 14:31 2010年7月12日Z tianya $
* @package DedeCMS.Administrator
* @copyright Copyright (c) 2007 - 2010, DesDev, Inc.
* @license http://help.dedecms.com/usersguide/license.html
* @link http://www.dedecms.com
*/
require_once dirname(__FILE__) . "/config.php";
CheckPurview('co_Export');
if (empty($dopost)) {
$dopost = '';
}
if ($dopost != 'done') {
require_once DEDEADMIN . "/inc/inc_catalog_options.php";
$totalcc = $channelid = $usemore = 0;
if (!empty($nid)) {
$mrow = $dsql->GetOne("SELECT COUNT(*) AS dd FROM `#@__co_htmls` WHERE nid='{$nid}' AND isdown='1' ");
$totalcc = $mrow['dd'];
$rrow = $dsql->GetOne("SELECT channelid,usemore FROM `#@__co_note` WHERE nid='{$nid}' ");
$channelid = $rrow['channelid'];
$usemore = $rrow['usemore'];
} else {
$mrow = $dsql->GetOne("SELECT COUNT(*) AS dd FROM `#@__co_htmls` WHERE isdown='1' ");
$totalcc = $mrow['dd'];
}
include DedeInclude("templets/co_export.htm");
exit;
<?php
/**
* 会员信息管理
*
* @version $Id: member_info_main.php 1 14:08 2010年7月19日Z tianya $
* @package DedeCMS.Administrator
* @copyright Copyright (c) 2007 - 2010, DesDev, Inc.
* @license http://help.dedecms.com/usersguide/license.html
* @link http://www.dedecms.com
*/
require_once dirname(__FILE__) . "/config.php";
CheckPurview('sys_Log');
require_once DEDEINC . "/datalistcp.class.php";
require_once DEDEINC . "/common.func.php";
setcookie("ENV_GOBACK_URL", $dedeNowurl, time() + 3600, "/");
$sql = $where = "";
$dtime = empty($dtime) ? 0 : $dtime;
$ischeck = empty($ischeck) ? "" : $ischeck;
$dopost = empty($dopost) ? "" : $dopost;
if ($type == "feed") {
$table = "#@__member_feed";
$id = "aid";
$tpl = DEDEADMIN . "/templets/member_feed_main.htm";
} else {
$table = "#@__member_msg";
$id = "id";
$tpl = DEDEADMIN . "/templets/member_mood_main.htm";
}
if (in_array($ischeck, array('-1', '1'))) {
$type = array('-1' => '0', '1' => '1');
if ($rs == 1) {
$dsql->ExecuteNoneQuery("DELETE FROM #@__uploads WHERE aid='" . $myrow['aid'] . "'");
}
}
ShowMsg('成功删除选定的文件！', $backurl);
exit;
}
} else {
if ($dopost == 'save') {
if ($aid == "") {
exit;
}
//检查是否有修改权限
$myrow = $dsql->GetOne("SELECT * FROM #@__uploads WHERE aid='" . $aid . "'");
if ($myrow['mid'] != $cuserLogin->getUserID()) {
CheckPurview('sys_Upload');
}
//检测文件类型
$addquery = "";
if (is_uploaded_file($upfile)) {
if ($mediatype == 1) {
$sparr = array("image/pjpeg", "image/jpeg", "image/gif", "image/png", "image/xpng", "image/wbmp");
if (!in_array($upfile_type, $sparr)) {
ShowMsg("你上传的不是图片类型的文件！", "javascript:history.go(-1);");
exit;
}
} else {
if ($mediatype == 2) {
$sparr = array("application/x-shockwave-flash");
if (!in_array($upfile_type, $sparr)) {
ShowMsg("你上传的不是Flash类型的文件！", "javascript:history.go(-1);");
<?php
/**
* 模块管理
*
* @version $Id: module_main.php 1 14:17 2010年7月20日Z tianya $
* @package DedeCMS.Administrator
* @copyright Copyright (c) 2007 - 2010, DesDev, Inc.
* @license http://help.dedecms.com/usersguide/license.html
* @link http://www.dedecms.com
*/
require_once dirname(__FILE__) . "/config.php";
CheckPurview('sys_module');
require_once dirname(__FILE__) . "/../include/dedemodule.class.php";
require_once dirname(__FILE__) . "/../include/oxwindow.class.php";
if (empty($action)) {
$action = '';
}
require_once DEDEDATA . "/admin/config_update.php";
$mdir = DEDEDATA . '/module';
$mdurl = $updateHost . 'dedecms/module_' . $cfg_soft_lang . '/modulelist.txt';
function TestWriteAble($d)
{
$tfile = '_dedet.txt';
$d = preg_replace("#\\/\$#", '', $d);
$fp = @fopen($d . '/' . $tfile, 'w');
if (!$fp) {
return FALSE;
} else {
fclose($fp);
$rs = @unlink($d . '/' . $tfile);
<?php
require_once(dirname(__FILE__)."/config.php");
CheckPurview('plus_站内新闻发布');
if(empty($dopost)) $dopost = "";
$aid = ereg_replace("[^0-9]","",$aid);
$dsql = new DedeSql(false);
if($dopost=="del")
{
$dsql->SetQuery("Delete From #@__mynews where aid='$aid';");
$dsql->ExecuteNoneQuery();
$dsql->Close();
ShowMsg("成功删除一条站内新闻！","mynews_main.php");
exit();
}
else if($dopost=="editsave")
{
$dsql->SetQuery("Update #@__mynews set title='$title',typeid='$typeid',writer='$writer',senddate='".GetMKTime($sdate)."',body='$body' where aid='$aid';");
$dsql->ExecuteNoneQuery();
$dsql->Close();
ShowMsg("成功更改一条站内新闻！","mynews_main.php");
exit();
}
$myNews = $dsql->GetOne("Select #@__mynews.*,#@__arctype.typename From #@__mynews left join #@__arctype on #@__arctype.ID=#@__mynews.typeid where #@__mynews.aid='$aid';");
require_once(dirname(__FILE__)."/templets/mynews_edit.htm");
ClearAllLink();
?>
<?php
/**
* 圈子公告管理
*
* @version $Id: group_notice.php 1 15:34 2011-1-21 tianya $
* @package DedeCMS.Administrator
* @copyright Copyright (c) 2007 - 2010, DesDev, Inc.
* @license http://help.dedecms.com/usersguide/license.html
* @link http://www.dedecms.com
*/
require_once dirname(__FILE__) . "/config.php";
require_once DEDEINC . '/datalistcp.class.php';
CheckPurview('group_Edit');
$id = isset($id) && is_numeric($id) ? $id : 0;
$gid = isset($gid) && is_numeric($gid) ? $gid : 0;
$action = isset($action) ? trim($action) : '';
$keyword = isset($keyword) ? trim($keyword) : '';
$keyword = stripslashes($keyword);
$keyword = preg_replace("#[\"\r\n\t\\*\\?\\(\\)\$%']#", " ", trim($keyword));
$keyword = addslashes($keyword);
$username = isset($username) ? trim($username) : '';
$username = stripslashes($username);
$username = preg_replace("#[\"\r\n\t\\*\\?\\(\\)\$%']#", " ", trim($username));
$username = addslashes($username);
if ($gid < 1) {
ShowMsg("含有非法操作!.", "-1");
exit;
}
if ($action == "del") {
if ($id > 0) {
<?php
/**
* 自定义表单列表管理
*
* @version $Id: diy_main.php 1 18:31 2010年7月12日Z tianya $
* @package DedeCMS.Administrator
* @copyright Copyright (c) 2007 - 2010, DesDev, Inc.
* @license http://help.dedecms.com/usersguide/license.html
* @link http://www.dedecms.com
*/
require_once dirname(__FILE__) . "/config.php";
CheckPurview('c_List');
require_once DEDEINC . "/datalistcp.class.php";
require_once DEDEINC . "/common.func.php";
setcookie("ENV_GOBACK_URL", $dedeNowurl, time() + 3600, "/");
$sql = "Select `diyid`,`name`,`table` From #@__diyforms order by diyid asc";
$dlist = new DataListCP();
$dlist->SetTemplet(DEDEADMIN . "/templets/diy_main.htm");
$dlist->SetSource($sql);
$dlist->display();
$dlist->Close();
<?php
require_once(dirname(__FILE__)."/config.php");
$t1 = ExecTime();
CheckPurview('sys_MakeHtml');
require_once(dirname(__FILE__)."/../include/inc_arcpart_view.php");
if($dopost=="view")
{
$pv = new PartView();
$templet = str_replace("{style}",$cfg_df_style,$templet);
$pv->SetTemplet($cfg_basedir.$cfg_templets_dir."/".$templet);
$pv->Display();
$pv->Close();
}
else if($dopost=="make")
{
header("Content-Type: text/html; charset={$cfg_ver_lang}");
$homeFile = dirname(__FILE__)."/".$position;
$homeFile = str_replace("\\","/",$homeFile);
$homeFile = str_replace("//","/",$homeFile);
$fp = fopen($homeFile,"w") or die("你指定的文件名有问题，无法创建文件");
fclose($fp);
if($saveset==1)
{
$dsql = new DedeSql(false);
$dsql->SetQuery("update #@__homepageset set templet='$templet',position='$position' ");
$dsql->ExecuteNoneQuery();
$dsql->Close();
}
$templet = str_replace("{style}",$cfg_df_style,$templet);
$pv = new PartView();
$pv->SetTemplet($cfg_basedir.$cfg_templets_dir."/".$templet);
<?php
require(dirname(__FILE__)."/config.php");
CheckPurview('plus_投票模块');
if(empty($dopost)) $dopost = "";
//////////////////////////////////////////
if($dopost=="save")
{
//$ismore,$votename
$starttime = GetMkTime($starttime);
$endtime = GetMkTime($endtime);
$voteitems = "";
$j=0;
for($i=1;$i<=15;$i++)
{
if(!empty(${"voteitem".$i})){
$j++;
$voteitems .= "<v:note id=\\'$j\\' count=\\'0\\'>".${"voteitem".$i}."</v:note>\r\n";
}
}
$dsql = new DedeSql(false);
$inQuery = "
insert into #@__vote(votename,starttime,endtime,totalcount,ismore,votenote)
Values('$votename','$starttime','$endtime','0','$ismore','$voteitems');
";
$dsql->SetQuery($inQuery);
if(!$dsql->ExecuteNoneQuery())
{
$dsql->Close();
ShowMsg("增加投票失败，请检查数据是否非法！","-1");
exit();
}
<?php
require_once(dirname(__FILE__)."/../config.php");
CheckPurview('story_New');
require_once(dirname(__FILE__)."/../../include/inc_photograph.php");
require_once(dirname(__FILE__)."/../../include/pub_oxwindow.php");
require_once(dirname(__FILE__)."/../inc/inc_archives_functions.php");
if( empty($chapterid)
|| (!empty($addchapter) && !empty($chapternew)) )
{
if(empty($chapternew))
{
ShowMsg("由于你发布的内容没选择章节，系统拒绝发布！","-1");
exit();
}
$dsql = new DedeSql();
$row = $dsql->GetOne("Select * From #@__story_chapter where bookid='$bookid' order by chapnum desc");
if(is_array($row)) $nchapnum = $row['chapnum']+1;
else $nchapnum = 1;
$query = "INSERT INTO `#@__story_chapter`(`bookid`,`catid`,`chapnum`,`memberid`,`chaptername`,`bookname`)
VALUES ('$bookid', '$catid', '$nchapnum', '0', '$chapternew','$bookname');";
$rs = $dsql->ExecuteNoneQuery($query);
if($rs){
$chapterid = $dsql->GetLastID();
}
else
{
ShowMsg("增加章节失败，请检查原因！","-1");
exit();
}
}else
$maintable = trim($row['maintable']) == '' ? '#@__archives' : trim($row['maintable']);
$arr = $dsql->GetOne("SELECT flag FROM `{$maintable}` WHERE id='{$aid}' ");
$flag = $arr['flag'] == '' ? $flagname : $arr['flag'] . ',' . $flagname;
$dsql->ExecuteNoneQuery(" UPDATE `{$maintable}` SET `flag`='{$flag}' WHERE id='{$aid}' ");
} else {
$maintable = trim($row['addtable']);
$arr = $dsql->GetOne("SELECT flag FROM `{$maintable}` WHERE aid='{$aid}' ");
$flag = $arr['flag'] == '' ? $flagname : $arr['flag'] . ',' . $flagname;
$dsql->ExecuteNoneQuery(" UPDATE `{$maintable}` SET `flag`='{$flag}' WHERE aid='{$aid}' ");
}
}
ShowMsg("成功对选中文档增加指定的属性！", $ENV_GOBACK_URL);
exit;
} else {
if ($dopost == 'attsDel') {
CheckPurview('a_Commend,sys_ArcBatch');
if (!empty($aid) && empty($qstr)) {
$qstr = $aid;
}
if ($qstr == '') {
ShowMsg("参数无效！", $ENV_GOBACK_URL);
exit;
}
if (empty($flagname)) {
ShowMsg("必须指定要删除的属性！", $ENV_GOBACK_URL);
exit;
}
$arcids = preg_replace("#[^0-9,]#", '', preg_replace("#`#", ',', $qstr));
$query = "SELECT arc.id,arc.typeid,ch.issystem,ch.maintable,ch.addtable FROM `#@__arctiny` arc\n LEFT JOIN `#@__arctype` tp ON tp.id=arc.typeid\n LEFT JOIN `#@__channeltype` ch ON ch.id=tp.channeltype\n WHERE arc.id in({$arcids}) ";
$dsql->SetQuery($query);
$dsql->Execute();
<?php
/**
* 获取用户的统计信息
*
* @version $Id: sys_admin_user_edit.php 1 16:22 2010年7月20日Z tianya $
* @package DedeCMS.Administrator
* @copyright Copyright (c) 2007 - 2010, DesDev, Inc.
* @license http://help.dedecms.com/usersguide/license.html
* @link http://www.dedecms.com
*/
require_once dirname(__FILE__) . "/config.php";
CheckPurview('sys_User');
if (isset($dopost) && $dopost == 'getone') {
$row = $dsql->GetOne("SELECT userid FROM `#@__admin` WHERE id='{$uid}'; ");
$userid = $row['userid'];
$y = intval(MyDate('Y', time()));
$m = intval(MyDate('m', time()));
$d = intval(MyDate('d', time()));
//全部
$sql = "SELECT addtable FROM `#@__channeltype` WHERE issystem='-1'";
$dsql->Execute('me', $sql);
while ($frow = $dsql->GetArray('me')) {
$dd = empty($dd) ? "0" : $dd;
$cc = empty($cc) ? "0" : $cc;
$row = $dsql->GetOne("SELECT COUNT(aid) AS dd,SUM(click) AS cc FROM `{$frow['addtable']}` WHERE mid='{$uid}'; ");
$dd += $row['dd'];
$cc += $row['cc'];
}
$row = $dsql->GetOne("SELECT COUNT(id) AS dd,SUM(click) AS cc FROM `#@__archives` WHERE mid='{$uid}'; ");
$dd = $row['dd'] + $dd;
<?php
require_once dirname(__FILE__) . "/config.php";
require_once DEDEINC . "/datalistcp.class.php";
CheckPurview('plus_Mail');
if (!isset($dopost)) {
$dopost = '';
}
$id = empty($id) ? 0 : intval($id);
if ($dopost == "add") {
require_once DEDEADMIN . "/templets/mail_type_add.htm";
} elseif ($dopost == "edit") {
$row = $dsql->GetOne("SELECT * FROM `#@__mail_title` WHERE id={$id}");
require_once DEDEADMIN . "/templets/mail_title_edit.htm";
} elseif ($dopost == "addsave") {
if ($typename == "") {
ShowMsg("分类名不能为空", "-1");
exit;
}
$typename = Html2Text($typename, 1);
$description = Html2Text($description, 1);
$query = "INSERT INTO #@__mail_type (typename,description) VALUES ('{$typename}','{$description}')";
if (!$dsql->ExecuteNoneQuery($query)) {
ShowMsg("更新数据库#@__mail_type表时出错，请检查！", "javascript:;");
exit;
} else {
ShowMsg("添加分类成功！", "mail_type.php");
exit;
}
} elseif ($dopost == "editsave") {
if ($typename == "") {
<?php
require_once dirname(__FILE__) . "/config.php";
CheckPurview('co_AddNote');
if (empty($step)) {
$step = "";
}
if (empty($exrule)) {
$exrule = "";
}
//选择操作频道类型，载入表单
/*----------------------
function Init(){ }
----------------------*/
if (empty($step)) {
require_once DEDEADMIN . "/templets/co_add_step0.htm";
exit;
} else {
if ($step == 1) {
require_once DEDEADMIN . "/templets/co_add_step1.htm";
exit;
} else {
if ($step == 2) {
//对完整规则进行测试
if ($dopost == 'test') {
include DEDEINC . "/dedecollection.class.php";
$usemore = !isset($usemore) ? 0 : 1;
$listconfig = "{dede:noteinfo notename=\\\"{$notename}\\\" channelid=\\\"{$channelid}\\\" macthtype=\\\"{$macthtype}\\\"\r\nrefurl=\\\"{$refurl}\\\" sourcelang=\\\"{$sourcelang}\\\" cosort=\\\"{$cosort}\\\" isref=\\\"{$isref}\\\" exptime=\\\"{$exptime}\\\" usemore=\\\"{$usemore}\\\" /}\r\n\r\n{dede:listrule sourcetype=\\\"{$sourcetype}\\\" rssurl=\\\"{$rssurl}\\\" regxurl=\\\"{$regxurl}\\\"\r\nstartid=\\\"{$startid}\\\" endid=\\\"{$endid}\\\" addv=\\\"{$addv}\\\" urlrule=\\\"{$urlrule}\\\"\r\n musthas=\\\"{$musthas}\\\" nothas=\\\"{$nothas}\\\" listpic=\\\"{$listpic}\\\" usemore=\\\"{$usemore}\\\"}\r\n\t{dede:addurls}{$addurls}{/dede:addurls}\r\n\t{dede:batchrule}{$batchrule}{/dede:batchrule}\r\n\t{dede:regxrule}{$regxrule}{/dede:regxrule}\r\n\t{dede:areastart}{$areastart}{/dede:areastart}\r\n\t{dede:areaend}{$areaend}{/dede:areaend}\r\n{/dede:listrule}\r\n";
$tmplistconfig = stripslashes($listconfig);
$notename = stripslashes($notename);
if ($sourcetype == 'rss' && ($refurl = '')) {
<?php
@ob_start();
@set_time_limit(3600);
require_once(dirname(__FILE__)."/config.php");
CheckPurview('sys_description');
$tjnum = 0;
if($action=='getfields')
{
AjaxHead();
$dsql = new DedeSql(false);
if(!$dsql->linkID){
echo "<font color='red'>连接数据源的数据库失败！</font><br>";
echo $qbutton;
exit();
}
$channel = $dsql->getone("select addtable from #@__channeltype where ID=$channel");
$channel = str_replace('#@__',$cfg_dbprefix,$channel['addtable']);
$dsql->GetTableFields($channel);
echo "<div style='border:1px solid #ababab;background-color:#FEFFF0;margin-top:6px;padding:3px;line-height:160%'>";
echo "表(".$channel.")含有的字段：<br>";
while($row = $dsql->GetFieldObject()){
echo "<a href=\"javascript:pf('{$row->name}')\"><u>".$row->name."</u></a>\r\n";
}
echo "<input type='hidden' name='addtable' value='$channel' />";
echo "</div>";
$dsql->Close();
exit();
}elseif($action == 'fetch')
{
header("Content-Type: text/html; charset={$cfg_ver_lang}");
<?php
/**
* @version $Id: story_edit_photo_action.php 1 9:02 2010年9月25日Z 蓝色随想 $
* @package DedeCMS.Module.Book
* @copyright Copyright (c) 2007 - 2010, DesDev, Inc.
* @license http://help.dedecms.com/usersguide/license.html
* @link http://www.dedecms.com
*/
require_once dirname(__FILE__) . "/config.php";
CheckPurview('story_Edit');
include_once DEDEINC . "/image.func.php";
include_once DEDEINC . "/oxwindow.class.php";
require_once DEDEADMIN . "/inc/inc_archives_functions.php";
if (empty($chapterid) || !empty($addchapter) && !empty($chapternew)) {
if (empty($chapternew)) {
ShowMsg("由于你发布的内容没选择章节，系统拒绝发布！", "-1");
exit;
}
$dsql = new DedeSql();
$row = $dsql->GetOne("SELECT * FROM #@__story_chapter WHERE bookid='{$bookid}' ORDER BY chapnum DESC");
if (is_array($row)) {
$nchapnum = $row['chapnum'] + 1;
} else {
$nchapnum = 1;
}
$query = "INSERT INTO `#@__story_chapter`(`bookid`,`catid`,`chapnum`,`mid`,`chaptername`,`bookname`)\n VALUES ('{$bookid}', '{$catid}', '{$nchapnum}', '0', '{$chapternew}','{$bookname}');";
$rs = $dsql->ExecuteNoneQuery($query);
if ($rs) {
$chapterid = $dsql->GetLastID();
} else {
<?php
/**
* 插件编辑
*
* @version $Id: plus_edit.php 1 15:46 2010年7月20日Z tianya $
* @package DedeCMS.Administrator
* @copyright Copyright (c) 2007 - 2010, DesDev, Inc.
* @license http://help.dedecms.com/usersguide/license.html
* @link http://www.dedecms.com
*/
require_once dirname(__FILE__) . "/config.php";
CheckPurview('sys_plus');
$aid = preg_replace("#[^0-9]#", "", $aid);
if ($dopost == "show") {
$dsql->ExecuteNoneQuery("UPDATE #@__plus SET isshow=1 WHERE aid='{$aid}';");
ShowMsg("成功启用一个插件,请刷新导航菜单!", "plus_main.php");
exit;
} else {
if ($dopost == "hide") {
$dsql->ExecuteNoneQuery("UPDATE #@__plus SET isshow=0 WHERE aid='{$aid}';");
ShowMsg("成功禁用一个插件,请刷新导航菜单!", "plus_main.php");
exit;
} else {
if ($dopost == "delete") {
if (empty($job)) {
$job = "";
}
if ($job == "") {
require_once DEDEINC . "/oxwindow.class.php";
$wintitle = "删除插件";
<?php
require_once(dirname(__FILE__)."/config.php");
CheckPurview('co_NewRule');
require_once(dirname(__FILE__)."/../include/pub_datalist.php");
require_once(dirname(__FILE__)."/../include/inc_functions.php");
setcookie("ENV_GOBACK_URL",$dedeNowurl,time()+3600,"/");
$sql = "
Select
aid,rulename,etype,dtime
From #@__co_exrule
order by aid desc
";
$dlist = new DataList();
$dlist->Init();
$dlist->SetSource($sql);
$dlist->SetTemplet(dirname(__FILE__)."/templets/co_export_rule.htm");
$dlist->display();
$dlist->Close();
ClearAllLink();
?>
<?php
/**
* 文档编辑
*
* @version $Id: article_edit.php 1 14:12 2010年7月12日Z tianya $
* @package DedeCMS.Administrator
* @copyright Copyright (c) 2007 - 2010, DesDev, Inc.
* @license http://help.dedecms.com/usersguide/license.html
* @link http://www.dedecms.com
*/
require_once dirname(__FILE__) . "/config.php";
CheckPurview('a_Edit,a_AccEdit,a_MyEdit');
require_once DEDEINC . "/customfields.func.php";
require_once DEDEADMIN . "/inc/inc_archives_functions.php";
if (file_exists(DEDEDATA . '/template.rand.php')) {
require_once DEDEDATA . '/template.rand.php';
}
if (empty($dopost)) {
$dopost = '';
}
$aid = isset($aid) && is_numeric($aid) ? $aid : 0;
if ($dopost != 'save') {
require_once DEDEADMIN . "/inc/inc_catalog_options.php";
require_once DEDEINC . "/dedetag.class.php";
ClearMyAddon();
//读取归档信息
$query = "SELECT ch.typename AS channelname,ar.membername AS rankname,arc.*\r\n FROM `#@__archives` arc\r\n LEFT JOIN `#@__channeltype` ch ON ch.id=arc.channel\r\n LEFT JOIN `#@__arcrank` ar ON ar.rank=arc.arcrank WHERE arc.id='{$aid}' ";
$arcRow = $dsql->GetOne($query);
if (!is_array($arcRow)) {
ShowMsg("读取档案基本信息出错!", "-1");
<?php
require_once(dirname(__FILE__)."/config.php");
empty($_COOKIE['ENV_GOBACK_URL']) ? $ENV_GOBACK_URL = "-1" : $ENV_GOBACK_URL=$_COOKIE['ENV_GOBACK_URL'];
CheckPurview('sys_Keyword');
$keyword = trim($keyword);
$rank = ereg_replace("[^0-9]","",$rank);
if(ereg(" ",$keyword)||$keyword=="")
{
ShowMsg("关键字不能带有空格或为空！",-1);
exit();
}
$dsql = new DedeSql(false);
$row = $dsql->GetOne("Select * From #@__keywords where keyword like '$keyword'");
if(is_array($row))
{
$dsql->Close();
ShowMsg("关键字已存在库中！","-1");
exit();
}
$inquery = "
INSERT INTO #@__keywords(keyword,rank,sta,rpurl) VALUES ('$keyword','$rank','1','$rpurl');
";
$dsql->SetQuery($inquery);
$dsql->ExecuteNoneQuery();
ClearAllLink();
ShowMsg("成功增加一个关键字！",$ENV_GOBACK_URL);
?>
<?php
require_once dirname(__FILE__) . "/config.php";
@set_time_limit(0);
CheckPurview('sys_ArcBatch');
if (empty($dopost)) {
$dopost = '';
}
if ($dopost == 'analyse') {
$arr = $dsql->getone("select maintable from `#@__channeltype` where id='{$channelid}' ");
if (is_array($arr)) {
$maintable = $arr['maintable'];
} else {
showmsg('频道id不正确，无法处理！', 'javascript:;');
exit;
}
$dsql->SetQuery("Select count(title) as dd,title From `{$maintable}` where channel='{$channelid}' group by title order by dd desc limit 0, {$pagesize}");
$dsql->Execute();
$allarc = 0;
include DedeInclude('templets/article_result_same.htm');
exit;
} else {
if ($dopost == 'delsel') {
require_once dirname(__FILE__) . "/../include/typelink.class.php";
require_once dirname(__FILE__) . "/inc/inc_batchup.php";
if (empty($titles)) {
header("Content-Type: text/html; charset={$cfg_ver_lang}");
echo "<meta http-equiv=\"Content-Type\" content=\"text/html; charset={$cfg_ver_lang}\">\r\n";
echo "没有指定删除的文档！";
exit;
}
<?php
/**
* 自定义标记修改
*
* @version $Id: mytag_edit.php 1 15:37 2010年7月20日Z tianya $
* @package DedeCMS.Administrator
* @copyright Copyright (c) 2007 - 2010, DesDev, Inc.
* @license http://help.dedecms.com/usersguide/license.html
* @link http://www.dedecms.com
*/
require dirname(__FILE__) . "/config.php";
CheckPurview('temp_Other');
require_once DEDEINC . "/typelink.class.php";
if (empty($dopost)) {
$dopost = '';
}
$aid = intval($aid);
$ENV_GOBACK_URL = empty($_COOKIE['ENV_GOBACK_URL']) ? 'mytag_main.php' : $_COOKIE['ENV_GOBACK_URL'];
if ($dopost == 'delete') {
$dsql->ExecuteNoneQuery("DELETE FROM #@__mytag WHERE aid='{$aid}'");
ShowMsg("成功删除一个自定义标记！", $ENV_GOBACK_URL);
exit;
} else {
if ($dopost == "saveedit") {
$starttime = GetMkTime($starttime);
$endtime = GetMkTime($endtime);
$query = "UPDATE `#@__mytag`\r\n SET\r\n typeid='{$typeid}',\r\n timeset='{$timeset}',\r\n starttime='{$starttime}',\r\n endtime='{$endtime}',\r\n normbody='{$normbody}',\r\n expbody='{$expbody}'\r\n WHERE aid='{$aid}' ";
$dsql->ExecuteNoneQuery($query);
ShowMsg("成功更改一个自定义标记！", $ENV_GOBACK_URL);
exit;
<?php
/**
* 会员管理
*
* @version $Id: member_main.php 1 10:49 2010年7月20日Z tianya $
* @package DedeCMS.Administrator
* @copyright Copyright (c) 2007 - 2010, DesDev, Inc.
* @license http://help.dedecms.com/usersguide/license.html
* @link http://www.dedecms.com
*/
require_once dirname(__FILE__) . "/config.php";
CheckPurview('member_List');
require_once DEDEINC . "/datalistcp.class.php";
setcookie("ENV_GOBACK_URL", $dedeNowurl, time() + 3600, "/");
if (!isset($sex)) {
$sex = '';
}
if (!isset($mtype)) {
$mtype = '';
}
if (!isset($spacesta)) {
$spacesta = -10;
}
if (!isset($matt)) {
$matt = 10;
}
if (!isset($keyword)) {
$keyword = '';
} else {
$keyword = trim(FilterSearch($keyword));
<?php
/**
* 多站点设置
*
* @version $Id: sys_multiserv.php 1 22:28 2010年7月20日Z tianya $
* @package DedeCMS.Administrator
* @copyright Copyright (c) 2007 - 2010, DesDev, Inc.
* @license http://help.dedecms.com/usersguide/license.html
* @link http://www.dedecms.com
*/
require_once dirname(__FILE__) . "/config.php";
CheckPurview('sys_SoftConfig');
if (empty($dopost)) {
$dopost = '';
}
//保存
if ($dopost == "save") {
$configfile = DEDEDATA . "/cache/inc_remote_config.php";
$rminfo = serialize(array('rmhost' => $c_rmhost, 'rmport' => $c_rmport, 'rmname' => $c_rmname, 'rmpwd' => $c_rmpwd));
$query = "UPDATE `#@__multiserv_config` SET\n `remoteuploads` = '{$c_remoteuploads}' ,\n `remoteupUrl` ='{$c_remoteupUrl}' ,\n `rminfo` = '{$rminfo}',\n `servinfo` = '{$c_servinfo}'";
$dsql->ExecuteNoneQuery($query);
//更新配置缓存文件
$configstr = "\$remoteuploads = '" . $c_remoteuploads . "';\r\n";
$configstr .= "\$remoteupUrl = '" . $c_remoteupUrl . "';\r\n";
$configstr .= "\$rmhost = '" . $c_rmhost . "';\r\n";
$configstr .= "\$rmport = '" . $c_rmport . "';\r\n";
$configstr .= "\$rmname = '" . $c_rmname . "';\r\n";
$configstr .= "\$rmpwd = '" . $c_rmpwd . "';\r\n";
$configstr = "<" . "?php\r\n" . $configstr . "?" . ">\r\n";
$fp = fopen($configfile, "w") or die("写入文件 {$safeconfigfile} 失败，请检查权限！");
