Exemple #1
0
function API_EditBrand($post)
{
    /* 加载后台主操作函数 */
    require_once ROOT_PATH . ADMIN_PATH . '/includes/lib_main.php';
    require_once ROOT_PATH . ADMIN_PATH . '/includes/cls_exchange.php';
    require_once ROOT_PATH . 'includes/cls_image.php';
    /* 检查权限 */
    admin_privilege('brand_manage');
    $is_show = isset($_POST['is_show']) ? 1 : 0;
    $brand_id = !empty($_POST['brand_id']) ? intval($_POST['brand_id']) : 0;
    /*检查品牌名是否重复*/
    $exc = new exchange($GLOBALS['ecs']->table("brand"), $GLOBALS['db'], 'brand_id', 'brand_name');
    $is_only = $exc->is_only('brand_name', $_POST['brand_name'], '', '');
    if (!$is_only) {
        client_show_message(301);
    }
    $param = "brand_name = '{$_POST['brand_name']}', site_url='{$_POST['site_url']}', brand_desc='{$_POST['brand_desc']}', is_show='{$is_show}', sort_order='{$_POST['sort_order']}' ";
    /* 处理图片 */
    $img_name = upload_image($_POST['brand_logo'], 'brandlogo');
    if ($img_name !== false) {
        $param .= " ,brand_logo = '" . basename($img_name) . "' ";
    }
    /* 更新数据 */
    if ($exc->edit($param, $brand_id, '')) {
        /* 清除缓存 */
        clear_cache_files();
        admin_log($_POST['brand_name'], 'edit', 'brand');
        client_show_message(0, true);
    } else {
        client_show_message(302);
    }
}
Exemple #2
0
    if (empty($_POST['id'])) {
        sys_msg('invalid param');
    }
    $id = intval($_POST['id']);
    $auction = auction_info($id);
    if (empty($auction)) {
        sys_msg($_LANG['auction_not_exist']);
    }
    if ($auction['status_no'] != FINISHED) {
        sys_msg($_LANG['invalid_status']);
    }
    if ($auction['deposit'] <= 0) {
        sys_msg($_LANG['no_deposit']);
    }
    /* 处理保证金 */
    $exc->edit("is_finished = 2", $id);
    // 修改状态
    if (isset($_POST['unfreeze'])) {
        /* 解冻 */
        log_account_change($auction['last_bid']['bid_user'], $auction['deposit'], -1 * $auction['deposit'], 0, 0, sprintf($_LANG['unfreeze_auction_deposit'], $auction['act_name']));
    } else {
        /* 扣除 */
        log_account_change($auction['last_bid']['bid_user'], 0, -1 * $auction['deposit'], 0, 0, sprintf($_LANG['deduct_auction_deposit'], $auction['act_name']));
    }
    /* 记日志 */
    admin_log($auction['act_name'], 'edit', 'auction');
    /* 清除缓存 */
    clear_cache_files();
    /* 提示信息 */
    sys_msg($_LANG['settle_deposit_ok']);
} elseif ($_REQUEST['act'] == 'search_goods') {
Exemple #3
0
    if ($file_url == '') {
        $file_url = $_POST['file_url'];
    }
    /* 计算文章打开方式 */
    if ($file_url == '') {
        $open_type = 0;
    } else {
        $open_type = $_POST['FCKeditor1'] == '' ? 1 : 2;
    }
    /* 如果 file_url 跟以前不一样,且原来的文件是本地文件,删除原来的文件 */
    $sql = "SELECT file_url FROM " . $ecs->table('article') . " WHERE article_id = '{$_POST['id']}'";
    $old_url = $db->getOne($sql);
    if ($old_url != '' && $old_url != $file_url && strpos($old_url, 'http://') === false && strpos($old_url, 'https://') === false) {
        @unlink(ROOT_PATH . $old_url);
    }
    if ($exc->edit("title='{$_POST['title']}', cat_id='{$_POST['article_cat']}', article_type='{$_POST['article_type']}', is_open='{$_POST['is_open']}', author='{$_POST['author']}', author_email='{$_POST['author_email']}', keywords ='{$_POST['keywords']}', file_url ='{$file_url}', open_type='{$open_type}', content='{$_POST['FCKeditor1']}', link='{$_POST['link_url']}', description = '{$_POST['description']}'", $_POST['id'])) {
        $link[0]['text'] = $_LANG['back_list'];
        $link[0]['href'] = 'article.php?act=list&' . list_link_postfix();
        $note = sprintf($_LANG['articleedit_succeed'], stripslashes($_POST['title']));
        admin_log($_POST['title'], 'edit', 'article');
        clear_cache_files();
        sys_msg($note, 0, $link);
    } else {
        die($db->error());
    }
} elseif ($_REQUEST['act'] == 'edit_title') {
    check_authz_json('article_manage');
    $id = intval($_POST['id']);
    $title = json_str_iconv(trim($_POST['val']));
    /* 检查文章标题是否重复 */
    if ($exc->num("title", $title, $id) != 0) {
Exemple #4
0
    /*判断代理商或管理员*/
    if (if_agency()) {
        $smarty->assign('if_agency', if_agency());
    }
    $smarty->assign('type_list', $type_list['arr']);
    $smarty->assign('filter', $type_list['filter']);
    $smarty->assign('record_count', $type_list['record_count']);
    $smarty->assign('page_count', $type_list['page_count']);
    make_json_result($smarty->fetch('stock_out_type_list.htm'), '', array('filter' => $type_list['filter'], 'page_count' => $type_list['page_count']));
} elseif ($_REQUEST['act'] == 'remove') {
    check_authz_json('stock_out_type');
    $id = intval($_REQUEST['id']);
    /*add by hg for date 2014-03-26 判断代理商是否非法操作商品*/
    //static_goods($_REQUEST['goods_id']);
    /*end*/
    if ($exc->edit("if_delete = 1", $id)) {
        clear_cache_files();
        //$goods_name = $exc->get_name($goods_id);
        //admin_log(addslashes($goods_name), 'trash', 'goods'); // 记录日志
        $url = 'stock_out_type.php?act=query&' . str_replace('act=remove', '', $_SERVER['QUERY_STRING']);
        ecs_header("Location: {$url}\n");
        exit;
    }
} elseif ($_REQUEST['act'] == 'restore_type') {
    $id = intval($_REQUEST['id']);
    check_authz_json('stock_out_type');
    // 检查权限
    $exc->edit("if_delete = 0, add_time = '" . gmtime() . "'", $id);
    clear_cache_files();
    //$goods_name = $exc->get_name($goods_id);
    //admin_log(addslashes($goods_name), 'restore', 'goods'); // 记录日志
Exemple #5
0
    $smarty->assign('ur_here', $_LANG['add_js_code']);
    $smarty->assign('action_link', array('href' => 'ads.php?act=list', 'text' => $_LANG['ad_list']));
    $smarty->assign('url', $site_url);
    $smarty->assign('js_code', $js_code);
    $smarty->assign('lang_list', $lang_list);
    assign_query_info();
    $smarty->display('ads_js.htm');
} elseif ($_REQUEST['act'] == 'edit_ad_name') {
    check_authz_json('ad_manage');
    $id = intval($_POST['id']);
    $ad_name = json_str_iconv(trim($_POST['val']));
    /* 检查广告名称是否重复 */
    if ($exc->num('ad_name', $ad_name, $id) != 0) {
        make_json_error(sprintf($_LANG['ad_name_exist'], $ad_name));
    } else {
        if ($exc->edit("ad_name = '{$ad_name}'", $id)) {
            admin_log($ad_name, 'edit', 'ads');
            make_json_result(stripslashes($ad_name));
        } else {
            make_json_error($db->error());
        }
    }
} elseif ($_REQUEST['act'] == 'remove') {
    check_authz_json('ad_manage');
    $id = intval($_GET['id']);
    $img = $exc->get_name($id, 'ad_code');
    $exc->drop($id);
    if (strpos($img, 'http://') === false && strpos($img, 'https://') === false) {
        $img_name = basename($img);
        @unlink(ROOT_PATH . DATA_DIR . '/afficheimg/' . $img_name);
    }
Exemple #6
0
} elseif ($_REQUEST['act'] == 'query') {
    $position_list = ad_position_list();
    $smarty->assign('position_list', $position_list['position']);
    $smarty->assign('filter', $position_list['filter']);
    $smarty->assign('record_count', $position_list['record_count']);
    $smarty->assign('page_count', $position_list['page_count']);
    make_json_result($smarty->fetch('ad_position_list.htm'), '', array('filter' => $position_list['filter'], 'page_count' => $position_list['page_count']));
} elseif ($_REQUEST['act'] == 'edit_position_name') {
    check_authz_json('ad_manage');
    $id = intval($_POST['id']);
    $position_name = json_str_iconv(trim($_POST['val']));
    /* 检查名称是否重复 */
    if ($exc->num("position_name", $position_name, $id) != 0) {
        make_json_error(sprintf($_LANG['posit_name_exist'], $position_name));
    } else {
        if ($exc->edit("position_name = '{$position_name}'", $id)) {
            admin_log($position_name, 'edit', 'ads_position');
            make_json_result(stripslashes($position_name));
        } else {
            make_json_result(sprintf($_LANG['brandedit_fail'], $position_name));
        }
    }
} elseif ($_REQUEST['act'] == 'edit_ad_width') {
    check_authz_json('ad_manage');
    $id = intval($_POST['id']);
    $ad_width = json_str_iconv(trim($_POST['val']));
    /* 宽度值必须是数字 */
    if (!preg_match("/^[\\.0-9]+\$/", $ad_width)) {
        make_json_error($_LANG['width_number']);
    }
    /* 广告位宽度应在1-1024之间 */
Exemple #7
0
        }
    }
    $smarty->assign('img_url', $img_url);
    $smarty->display('goods_show_image.htm');
} elseif ($_REQUEST['act'] == 'edit_goods_name') {
    check_authz_json('goods_manage');
    $goods_id = intval($_POST['id']);
    $goods_name = json_str_iconv(trim($_POST['val']));
    /*add by hg for date 2014-04-25 多个商品命名同步*/
    if (!if_agency()) {
        $goods_id = 0;
    } else {
        $host_arr = host($goods_id);
        if ($host_arr) {
            foreach ($host_arr as $v => $k) {
                $exc->edit("goods_name = '{$goods_name}', last_update=" . gmtime(), $k['goods_id']);
            }
        }
    }
    /*end*/
    if ($exc->edit("goods_name = '{$goods_name}', last_update=" . gmtime(), $goods_id)) {
        clear_cache_files();
        make_json_result(stripslashes($goods_name));
    }
} elseif ($_REQUEST['act'] == 'edit_goods_sn') {
    check_authz_json('goods_manage');
    $goods_id = intval($_POST['id']);
    $goods_sn = json_str_iconv(trim($_POST['val']));
    /* 检查是否重复 */
    if (!$exc->is_only('goods_sn', $goods_sn, $goods_id)) {
        make_json_error($_LANG['goods_sn_exists']);
Exemple #8
0
    }
    $param = "pack_name = '{$_POST['pack_name']}', pack_fee = '{$_POST['pack_fee']}', free_money= '{$_POST['free_money']}', pack_desc = '{$_POST['pack_desc']}' ";
    /* 处理图片 */
    if (!empty($_FILES['pack_img']['name'])) {
        $upload_img = $image->upload_image($_FILES['pack_img'], "packimg", $_POST['old_packimg']);
        if ($upload_img == false) {
            sys_msg($image->error_msg);
        }
        $img_name = basename($upload_img);
    } else {
        $img_name = '';
    }
    if (!empty($img_name)) {
        $param .= " ,pack_img = '{$img_name}' ";
    }
    if ($exc->edit($param, $_POST['id'])) {
        $link[0]['text'] = $_LANG['back_list'];
        $link[0]['href'] = 'pack.php?act=list&' . list_link_postfix();
        $note = sprintf($_LANG['packedit_succed'], $_POST['pack_name']);
        sys_msg($note, 0, $link);
        admin_log($_POST['pack_name'], 'edit', 'pack');
    } else {
        die($db->error());
    }
}
/* 删除卡片图片 */
if ($_REQUEST['act'] == 'drop_pack_img') {
    /* 权限判断 */
    admin_priv('pack');
    $pack_id = isset($_GET['id']) ? intval($_GET['id']) : 0;
    /* 取得logo名称 */
Exemple #9
0
    $sort_flag = sort_flag($list['filter']);
    $smarty->assign($sort_flag['tag'], $sort_flag['img']);
    make_json_result($smarty->fetch('bonus_type.htm'), '', array('filter' => $list['filter'], 'page_count' => $list['page_count']));
}
/*------------------------------------------------------ */
//-- 编辑红包类型名称
/*------------------------------------------------------ */
if ($_REQUEST['act'] == 'edit_type_name') {
    check_authz_json('bonus_manage');
    $id = intval($_POST['id']);
    $val = json_str_iconv(trim($_POST['val']));
    /* 检查红包类型名称是否重复 */
    if (!$exc->is_only('type_name', $id, $val)) {
        make_json_error($_LANG['type_name_exist']);
    } else {
        $exc->edit("type_name='{$val}'", $id);
        make_json_result(stripslashes($val));
    }
}
/*------------------------------------------------------ */
//-- 编辑红包金额
/*------------------------------------------------------ */
if ($_REQUEST['act'] == 'edit_type_money') {
    check_authz_json('bonus_manage');
    $id = intval($_POST['id']);
    $val = floatval($_POST['val']);
    /* 检查红包类型名称是否重复 */
    if ($val <= 0) {
        make_json_error($_LANG['type_money_error']);
    } else {
        $exc->edit("type_money='{$val}'", $id);
Exemple #10
0
    $smarty->display('goods_type.htm');
} elseif ($_REQUEST['act'] == 'query') {
    $good_type_list = get_goodstype();
    $smarty->assign('goods_type_arr', $good_type_list['type']);
    $smarty->assign('filter', $good_type_list['filter']);
    $smarty->assign('record_count', $good_type_list['record_count']);
    $smarty->assign('page_count', $good_type_list['page_count']);
    make_json_result($smarty->fetch('goods_type.htm'), '', array('filter' => $good_type_list['filter'], 'page_count' => $good_type_list['page_count']));
} elseif ($_REQUEST['act'] == 'edit_type_name') {
    check_authz_json('goods_type');
    $type_id = !empty($_POST['id']) ? intval($_POST['id']) : 0;
    $type_name = !empty($_POST['val']) ? json_str_iconv(trim($_POST['val'])) : '';
    /* 检查名称是否重复 */
    $is_only = $exc->is_only('cat_name', $type_name, $type_id);
    if ($is_only) {
        $exc->edit("cat_name='{$type_name}'", $type_id);
        admin_log($type_name, 'edit', 'goods_type');
        make_json_result(stripslashes($type_name));
    } else {
        make_json_error($_LANG['repeat_type_name']);
    }
} elseif ($_REQUEST['act'] == 'toggle_enabled') {
    check_authz_json('goods_type');
    $id = intval($_POST['id']);
    $val = intval($_POST['val']);
    $exc->edit("enabled='{$val}'", $id);
    make_json_result($val);
} elseif ($_REQUEST['act'] == 'add') {
    admin_priv('goods_type');
    $smarty->assign('ur_here', $_LANG['new_goods_type']);
    $smarty->assign('action_link', array('href' => 'goods_type.php?act=manage', 'text' => $_LANG['goods_type_list']));
    $smarty->assign('filter', $agency_list['filter']);
    $smarty->assign('record_count', $agency_list['record_count']);
    $smarty->assign('page_count', $agency_list['page_count']);
    /* 排序标记 */
    $sort_flag = sort_flag($agency_list['filter']);
    $smarty->assign($sort_flag['tag'], $sort_flag['img']);
    make_json_result($smarty->fetch('agency_list.htm'), '', array('filter' => $agency_list['filter'], 'page_count' => $agency_list['page_count']));
} elseif ($_REQUEST['act'] == 'edit_agency_name') {
    check_authz_json('agency_manage');
    $id = intval($_POST['id']);
    $name = json_str_iconv(trim($_POST['val']));
    /* 检查名称是否重复 */
    if ($exc->num("agency_name", $name, $id) != 0) {
        make_json_error(sprintf($_LANG['agency_name_exist'], $name));
    } else {
        if ($exc->edit("agency_name = '{$name}'", $id)) {
            admin_log($name, 'edit', 'agency');
            clear_cache_files();
            make_json_result(stripslashes($name));
        } else {
            make_json_result(sprintf($_LANG['agency_edit_fail'], $name));
        }
    }
} elseif ($_REQUEST['act'] == 'remove') {
    check_authz_json('agency_manage');
    $id = intval($_GET['id']);
    $name = $exc->get_name($id);
    $exc->drop($id);
    /* 更新管理员、配送地区、发货单、退货单和订单关联的办事处 */
    $table_array = array('admin_user', 'region', 'order_info', 'delivery_order', 'back_order');
    foreach ($table_array as $value) {
Exemple #12
0
} elseif ($_REQUEST['act'] == 'edit_name') {
    /* 检查权限 */
    check_authz_json('ship_manage');
    /* 取得参数 */
    $id = json_str_iconv(trim($_POST['id']));
    $val = json_str_iconv(trim($_POST['val']));
    /* 检查名称是否为空 */
    if (empty($val)) {
        make_json_error($_LANG['no_shipping_name']);
    }
    /* 检查名称是否重复 */
    if (!$exc->is_only('shipping_name', $val, $id)) {
        make_json_error($_LANG['repeat_shipping_name']);
    }
    /* 更新支付方式名称 */
    $exc->edit("shipping_name = '{$val}'", $id);
    make_json_result(stripcslashes($val));
} elseif ($_REQUEST['act'] == 'edit_desc') {
    /* 检查权限 */
    check_authz_json('ship_manage');
    /* 取得参数 */
    $id = json_str_iconv(trim($_POST['id']));
    $val = json_str_iconv(trim($_POST['val']));
    /* 更新描述 */
    $exc->edit("shipping_desc = '{$val}'", $id);
    make_json_result(stripcslashes($val));
} elseif ($_REQUEST['act'] == 'edit_insure') {
    /* 检查权限 */
    check_authz_json('ship_manage');
    /* 取得参数 */
    $id = json_str_iconv(trim($_POST['id']));
Exemple #13
0
 }
 if ($cat_type == 1 || $cat_type == 5) {
     if ($_POST['parent_id'] > 0) {
         $sql = "SELECT cat_type FROM " . $ecs->table('article_cat') . " WHERE cat_id = '{$_POST['parent_id']}'";
         $p_cat_type = $db->getOne($sql);
         if ($p_cat_type == 4) {
             $cat_type = 5;
         } else {
             $cat_type = 1;
         }
     } else {
         $cat_type = 1;
     }
 }
 $dat = $db->getOne("SELECT cat_name, show_in_nav FROM " . $ecs->table('article_cat') . " WHERE cat_id = '" . $_POST['id'] . "'");
 if ($exc->edit("cat_name = '{$_POST['cat_name']}', cat_desc ='{$_POST['cat_desc']}', keywords='{$_POST['keywords']}',parent_id = '{$_POST['parent_id']}', cat_type='{$cat_type}', sort_order='{$_POST['sort_order']}', show_in_nav = '{$_POST['show_in_nav']}'", $_POST['id'])) {
     if ($_POST['cat_name'] != $dat['cat_name']) {
         //如果分类名称发生了改变
         $sql = "UPDATE " . $ecs->table('nav') . " SET name = '" . $_POST['cat_name'] . "' WHERE ctype = 'a' AND cid = '" . $_POST['id'] . "' AND type = 'middle'";
         $db->query($sql);
     }
     if ($_POST['show_in_nav'] != $dat['show_in_nav']) {
         if ($_POST['show_in_nav'] == 1) {
             //显示
             $nid = $db->getOne("SELECT id FROM " . $ecs->table('nav') . " WHERE ctype = 'a' AND cid = '" . $_POST['id'] . "' AND type = 'middle'");
             if (empty($nid)) {
                 $vieworder = $db->getOne("SELECT max(vieworder) FROM " . $ecs->table('nav') . " WHERE type = 'middle'");
                 $vieworder += 2;
                 $uri = build_uri('article_cat', array('acid' => $_POST['id']), $_POST['cat_name']);
                 //不存在
                 $sql = "INSERT INTO " . $ecs->table('nav') . " (name,ctype,cid,ifshow,vieworder,opennew,url,type) " . "VALUES('" . $_POST['cat_name'] . "', 'a', '" . $_POST['id'] . "','1','{$vieworder}','0', '" . $uri . "','middle')";
Exemple #14
0
    }
    if ($cat_type == 1 || $cat_type == 5) {
        if ($_POST['parent_id'] > 0) {
            $sql = "SELECT cat_type FROM " . $ecs->table('weixin_menu') . " WHERE cat_id = '{$_POST['parent_id']}'";
            $p_cat_type = $db->getOne($sql);
            if ($p_cat_type == 4) {
                $cat_type = 5;
            } else {
                $cat_type = 1;
            }
        } else {
            $cat_type = 1;
        }
    }
    $dat = $db->getOne("SELECT cat_name, weixin_type FROM " . $ecs->table('weixin_menu') . " WHERE cat_id = '" . $_POST['id'] . "'");
    if ($exc->edit("cat_name = '{$_POST['cat_name']}', weixin_key ='{$_POST['weixin_key']}', links ='{$_POST['links']}', parent_id = '{$_POST['parent_id']}', cat_type='{$cat_type}', sort_order='{$_POST['sort_order']}', weixin_type = '{$_POST['weixin_type']}'", $_POST['id'])) {
        if ($_POST['cat_name'] != $dat['cat_name']) {
            //如果菜单名称发生了改变
            $sql = "UPDATE " . $ecs->table('nav') . " SET name = '" . $_POST['cat_name'] . "' WHERE ctype = 'a' AND cid = '" . $_POST['id'] . "' AND type = 'middle'";
            $db->query($sql);
        }
        $link[0]['text'] = '返回菜单列表';
        $link[0]['href'] = 'weixin_menu.php?act=list';
        $note = sprintf('菜单 %s 编辑成功', $_POST['cat_name']);
        admin_log($_POST['cat_name'], 'edit', 'articlecat');
        clear_cache_files();
        sys_msg($note, 0, $link);
    } else {
        die($db->error());
    }
} elseif ($_REQUEST['act'] == 'edit_sort_order') {
Exemple #15
0
    $smarty->assign('ur_here', $_LANG['exchange_goods_add']);
    $smarty->assign('action_link', array('text' => $_LANG['15_exchange_goods_list'], 'href' => 'exchange_goods.php?act=list&' . list_link_postfix()));
    $smarty->assign('form_action', 'update');
    assign_query_info();
    $smarty->display('exchange_goods_info.htm');
}
/*------------------------------------------------------ */
//-- 编辑
/*------------------------------------------------------ */
if ($_REQUEST['act'] == 'update') {
    /* 权限判断 */
    admin_priv('exchange_goods');
    if (empty($_POST['goods_id'])) {
        $_POST['goods_id'] = 0;
    }
    if ($exc->edit("exchange_integral='{$_POST['exchange_integral']}', is_exchange='{$_POST['is_exchange']}', is_hot='{$_POST['is_hot']}' ", $_POST['goods_id'])) {
        $link[0]['text'] = $_LANG['back_list'];
        $link[0]['href'] = 'exchange_goods.php?act=list&' . list_link_postfix();
        admin_log($_POST['goods_id'], 'edit', 'exchange_goods');
        clear_cache_files();
        sys_msg($_LANG['articleedit_succeed'], 0, $link);
    } else {
        die($db->error());
    }
} elseif ($_REQUEST['act'] == 'edit_exchange_integral') {
    check_authz_json('exchange_goods');
    $id = intval($_POST['id']);
    $exchange_integral = floatval($_POST['val']);
    /* 检查文章标题是否重复 */
    if ($exchange_integral < 0 || $exchange_integral == 0 && $_POST['val'] != "{$goods_price}") {
        make_json_error($_LANG['exchange_integral_invalid']);
Exemple #16
0
    /* 权限判断 */
    admin_priv('card_manage');
    if ($_POST['card_name'] != $_POST['old_cardname']) {
        /*检查品牌名是否相同*/
        $is_only = $exc->is_only('card_name', $_POST['card_name'], $_POST['id']);
        if (!$is_only) {
            sys_msg(sprintf($_LANG['cardname_exist'], stripslashes($_POST['card_name'])), 1);
        }
    }
    $param = "card_name = '{$_POST['card_name']}', card_fee = '{$_POST['card_fee']}', free_money= {$_POST['free_money']}, card_desc = '{$_POST['card_desc']}'";
    /* 处理图片 */
    $img_name = basename($image->upload_image($_FILES['card_img'], "cardimg", $_POST['old_cardimg']));
    if ($img_name) {
        $param .= "  ,card_img ='{$img_name}' ";
    }
    if ($exc->edit($param, $_POST['id'])) {
        admin_log($_POST['card_name'], 'edit', 'card');
        $link[0]['text'] = $_LANG['back_list'];
        $link[0]['href'] = 'card.php?act=list&' . list_link_postfix();
        $note = sprintf($_LANG['cardedit_succeed'], $_POST['card_name']);
        sys_msg($note, 0, $link);
    } else {
        die($db->error());
    }
} elseif ($_REQUEST['act'] == 'drop_card_img') {
    /* 权限判断 */
    admin_priv('card_manage');
    $card_id = isset($_GET['id']) ? intval($_GET['id']) : 0;
    /* 取得logo名称 */
    $sql = "SELECT card_img FROM " . $ecs->table('card') . " WHERE card_id = '{$card_id}'";
    $img_name = $db->getOne($sql);
Exemple #17
0
    $links[0] = array('href' => 'shipping_area.php?act=list&shipping=' . intval($_REQUEST['shipping']), 'text' => $_LANG['go_back']);
    sys_msg($_LANG['remove_success'], 0, $links);
} elseif ($_REQUEST['act'] == 'edit_area') {
    /* 检查权限 */
    check_authz_json('shiparea_manage');
    /* 取得参数 */
    $id = intval($_POST['id']);
    $val = json_str_iconv(trim($_POST['val']));
    /* 取得该区域所属的配送id */
    $shipping_id = $exc->get_name($id, 'shipping_id');
    /* 检查是否有重复的配送区域名称 */
    if (!$exc->is_only('shipping_area_name', $val, $id, "shipping_id = '{$shipping_id}'")) {
        make_json_error($_LANG['repeat_area_name']);
    }
    /* 更新名称 */
    $exc->edit("shipping_area_name = '{$val}'", $id);
    /* 记录日志 */
    admin_log($val, 'edit', 'shipping_area');
    /* 返回 */
    make_json_result(stripcslashes($val));
} elseif ($_REQUEST['act'] == 'remove_area') {
    check_authz_json('shiparea_manage');
    $id = intval($_GET['id']);
    $name = $exc->get_name($id);
    $shipping_id = $exc->get_name($id, 'shipping_id');
    $exc->drop($id);
    $db->query('DELETE FROM ' . $ecs->table('area_region') . ' WHERE shipping_area_id=' . $id);
    admin_log($name, 'remove', 'shipping_area');
    $list = get_shipping_area_list($shipping_id);
    $smarty->assign('areas', $list);
    make_json_result($smarty->fetch('shipping_area_list.htm'));
Exemple #18
0
    check_authz_json('supplier_rank');
    $rank_id = intval($_GET['id']);
    if ($exc->drop($rank_id)) {
        /* 更新会员表的等级字段 */
        //$exc_user->edit("user_rank = 0", $rank_id);
        clear_cache_files();
    }
    $url = 'supplier_rank.php?act=query&' . str_replace('act=remove', '', $_SERVER['QUERY_STRING']);
    ecs_header("Location: {$url}\n");
    exit;
} elseif ($_REQUEST['act'] == 'edit_name') {
    check_authz_json('supplier_rank');
    $id = intval($_REQUEST['id']);
    $val = empty($_REQUEST['val']) ? '' : json_str_iconv(trim($_REQUEST['val']));
    if ($exc->is_only('rank_name', $val, $id)) {
        if ($exc->edit("rank_name = '{$val}'", $id)) {
            /* 管理员日志 */
            clear_cache_files();
            make_json_result(stripcslashes($val));
        } else {
            make_json_error($db->error());
        }
    } else {
        make_json_error(sprintf($_LANG['rank_name_exists'], htmlspecialchars($val)));
    }
} elseif ($_REQUEST['act'] == 'edit_sort') {
    check_authz_json('supplier_rank');
    $rank_id = empty($_REQUEST['id']) ? 0 : intval($_REQUEST['id']);
    $val = empty($_REQUEST['val']) ? 0 : intval($_REQUEST['val']);
    if ($val < 0 || $val > 255) {
        make_json_error($_LANG['js_languages']['sort_order_invalid']);
Exemple #19
0
    }
    /*对描述处理*/
    if (!empty($_POST['brand_desc'])) {
        $_POST['brand_desc'] = $_POST['brand_desc'];
    }
    $is_show = isset($_REQUEST['is_show']) ? intval($_REQUEST['is_show']) : 0;
    /*处理URL*/
    $site_url = sanitize_url($_POST['site_url']);
    /* 处理图片 */
    $img_name = basename($image->upload_image($_FILES['brand_logo'], 'brandlogo'));
    $param = "brand_name = '{$_POST['brand_name']}',  site_url='{$site_url}', brand_desc='{$_POST['brand_desc']}', is_show='{$is_show}', sort_order='{$_POST['sort_order']}' ";
    if (!empty($img_name)) {
        //有图片上传
        $param .= " ,brand_logo = '{$img_name}' ";
    }
    if ($exc->edit($param, $_POST['id'])) {
        /* 清除缓存 */
        clear_cache_files();
        admin_log($_POST['brand_name'], 'edit', 'brand');
        $link[0]['text'] = $_LANG['back_list'];
        $link[0]['href'] = 'brand.php?act=list&' . list_link_postfix();
        $note = vsprintf($_LANG['brandedit_succed'], $_POST['brand_name']);
        sys_msg($note, 0, $link);
    } else {
        die($db->error());
    }
} elseif ($_REQUEST['act'] == 'edit_brand_name') {
    check_authz_json('brand_manage');
    $id = intval($_POST['id']);
    $name = json_str_iconv(trim($_POST['val']));
    /* 检查名称是否重复 */
Exemple #20
0
        /* 清除缓存 */
        clear_cache_files();
        $link[0]['text'] = $_LANG['back_list'];
        $link[0]['href'] = 'shophelp.php?act=list_article&cat_id=' . $_POST['cat_id'];
        sys_msg(sprintf($_LANG['articleedit_succeed'], $_POST['title']), 0, $link);
        admin_log($_POST['title'], 'edit', 'shophelp');
    }
} elseif ($_REQUEST['act'] == 'edit_catname') {
    check_authz_json('shophelp_manage');
    $id = intval($_POST['id']);
    $cat_name = json_str_iconv(trim($_POST['val']));
    /* 检查分类名称是否重复 */
    if ($exc_cat->num("cat_name", $cat_name, $id) != 0) {
        make_json_error(sprintf($_LANG['catname_exist'], $cat_name));
    } else {
        if ($exc_cat->edit("cat_name = '{$cat_name}'", $id)) {
            clear_cache_files();
            admin_log($cat_name, 'edit', 'shophelpcat');
            make_json_result(stripslashes($cat_name));
        } else {
            make_json_error($db->error());
        }
    }
} elseif ($_REQUEST['act'] == 'edit_cat_order') {
    check_authz_json('shophelp_manage');
    $id = intval($_POST['id']);
    $order = json_str_iconv(trim($_POST['val']));
    /* 检查输入的值是否合法 */
    if (!preg_match("/^[0-9]+\$/", $order)) {
        make_json_result('', sprintf($_LANG['enter_int'], $order));
    } else {
Exemple #21
0
        }
    }
    $sql = "INSERT INTO " . $ecs->table('user_rank') . "( " . "rank_name, min_points, max_points, discount, special_rank, show_price" . ") VALUES (" . "'{$_POST['rank_name']}', '" . intval($_POST['min_points']) . "', '" . intval($_POST['max_points']) . "', " . "'{$_POST['discount']}', '{$special_rank}', '" . intval($_POST['show_price']) . "')";
    $db->query($sql);
    /* 管理员日志 */
    admin_log(trim($_POST['rank_name']), 'add', 'user_rank');
    clear_cache_files();
    $lnk[] = array('text' => $_LANG['back_list'], 'href' => 'user_rank.php?act=list');
    $lnk[] = array('text' => $_LANG['add_continue'], 'href' => 'user_rank.php?act=add');
    sys_msg($_LANG['add_rank_success'], 0, $lnk);
} elseif ($_REQUEST['act'] == 'remove') {
    check_authz_json('user_rank');
    $rank_id = intval($_GET['id']);
    if ($exc->drop($rank_id)) {
        /* 更新会员表的等级字段 */
        $exc_user->edit("user_rank = 0", $rank_id);
        $rank_name = $exc->get_name($rank_id);
        admin_log(addslashes($rank_name), 'remove', 'user_rank');
        clear_cache_files();
    }
    $url = 'user_rank.php?act=query&' . str_replace('act=remove', '', $_SERVER['QUERY_STRING']);
    ecs_header("Location: {$url}\n");
    exit;
} elseif ($_REQUEST['act'] == 'edit_name') {
    $id = intval($_REQUEST['id']);
    $val = empty($_REQUEST['val']) ? '' : json_str_iconv(trim($_REQUEST['val']));
    check_authz_json('user_rank');
    if ($exc->is_only('rank_name', $val, $id)) {
        if ($exc->edit("rank_name = '{$val}'", $id)) {
            /* 管理员日志 */
            admin_log($val, 'edit', 'user_rank');
Exemple #22
0
    $smarty->assign('filter', $packages['filter']);
    $smarty->assign('record_count', $packages['record_count']);
    $smarty->assign('page_count', $packages['page_count']);
    $sort_flag = sort_flag($packages['filter']);
    $smarty->assign($sort_flag['tag'], $sort_flag['img']);
    make_json_result($smarty->fetch('package_list.htm'), '', array('filter' => $packages['filter'], 'page_count' => $packages['page_count']));
} elseif ($_REQUEST['act'] == 'edit_package_name') {
    check_authz_json('package_manage');
    $id = intval($_POST['id']);
    $val = json_str_iconv(trim($_POST['val']));
    /* 检查活动重名 */
    $sql = "SELECT COUNT(*) " . " FROM " . $hhs->table('goods_activity') . " WHERE act_type='" . GAT_PACKAGE . "' AND act_name='{$val}' AND act_id <> '{$id}'";
    if ($db->getOne($sql)) {
        make_json_error(sprintf($_LANG['package_exist'], $val));
    }
    $exc->edit("act_name='{$val}'", $id);
    make_json_result(stripslashes($val));
} elseif ($_REQUEST['act'] == 'search_goods') {
    include_once ROOT_PATH . 'includes/cls_json.php';
    $json = new JSON();
    $filters = $json->decode($_GET['JSON']);
    $arr = get_goods_list($filters);
    $opt = array();
    foreach ($arr as $key => $val) {
        $opt[$key] = array('value' => $val['goods_id'], 'text' => $val['goods_name'], 'data' => $val['shop_price']);
        $opt[$key]['products'] = get_good_products($val['goods_id']);
    }
    make_json_result($opt);
} elseif ($_REQUEST['act'] == 'add_package_goods') {
    include_once ROOT_PATH . 'includes/cls_json.php';
    $json = new JSON();
    if ($exc->drop($field_id)) {
        /* 删除会员扩展信息表的相应信息 */
        $sql = "DELETE FROM " . $GLOBALS['ecs']->table('reg_extend_info') . " WHERE reg_field_id = '" . $field_id . "'";
        @$GLOBALS['db']->query($sql);
        admin_log(addslashes($field_name), 'remove', 'reg_fields');
        clear_cache_files();
    }
    $url = 'reg_fields.php?act=query&' . str_replace('act=remove', '', $_SERVER['QUERY_STRING']);
    ecs_header("Location: {$url}\n");
    exit;
} elseif ($_REQUEST['act'] == 'edit_name') {
    $id = intval($_REQUEST['id']);
    $val = empty($_REQUEST['val']) ? '' : json_str_iconv(trim($_REQUEST['val']));
    check_authz_json('reg_fields');
    if ($exc->is_only('reg_field_name', $val, $id)) {
        if ($exc->edit("reg_field_name = '{$val}'", $id)) {
            /* 管理员日志 */
            admin_log($val, 'edit', 'reg_fields');
            clear_cache_files();
            make_json_result(stripcslashes($val));
        } else {
            make_json_error($db->error());
        }
    } else {
        make_json_error(sprintf($_LANG['field_name_exist'], htmlspecialchars($val)));
    }
} elseif ($_REQUEST['act'] == 'edit_order') {
    $id = intval($_REQUEST['id']);
    $val = isset($_REQUEST['val']) ? json_str_iconv(trim($_REQUEST['val'])) : '';
    check_authz_json('reg_fields');
    if (is_numeric($val)) {
Exemple #24
0
        sys_msg(sprintf($_LANG['drop_ok'], $count), 0, $link);
    } else {
        $link[] = array('text' => $_LANG['back_list'], 'href' => 'attribute.php?act=list');
        sys_msg($_LANG['no_select_arrt'], 0, $link);
    }
} elseif ($_REQUEST['act'] == 'edit_attr_name') {
    check_authz_json('attr_manage');
    $id = intval($_POST['id']);
    $val = json_str_iconv(trim($_POST['val']));
    /* 取得该属性所属商品类型id */
    $cat_id = $exc->get_name($id, 'cat_id');
    /* 检查属性名称是否重复 */
    if (!$exc->is_only('attr_name', $val, $id, " cat_id = '{$cat_id}'")) {
        make_json_error($_LANG['name_exist']);
    }
    $exc->edit("attr_name='{$val}'", $id);
    admin_log($val, 'edit', 'attribute');
    make_json_result(stripslashes($val));
} elseif ($_REQUEST['act'] == 'edit_sort_order') {
    check_authz_json('attr_manage');
    $id = intval($_POST['id']);
    $val = intval($_POST['val']);
    $exc->edit("sort_order='{$val}'", $id);
    admin_log(addslashes($exc->get_name($id)), 'edit', 'attribute');
    make_json_result(stripslashes($val));
} elseif ($_REQUEST['act'] == 'remove') {
    check_authz_json('attr_manage');
    $id = intval($_GET['id']);
    $db->query("DELETE FROM " . $ecs->table('attribute') . " WHERE attr_id='{$id}'");
    $db->query("DELETE FROM " . $ecs->table('goods_attr') . " WHERE attr_id='{$id}'");
    $url = 'attribute.php?act=query&' . str_replace('act=remove', '', $_SERVER['QUERY_STRING']);
        $sql = "insert into " . $ecs->table('store_inout_goods') . " (inout_rec_id, goods_id, goods_sn, inout_mode, attr_value, number_yingshou, number_shishou ) " . "values('{$rec_id}',  '{$goods_id}', '{$goods_sn}', '2', '{$attr_value}', '{$number_yingshou}', '{$number_shishou}')";
        $db->query($sql);
    }
    $link[0]['text'] = $_LANG['back_list_in'];
    $link[0]['href'] = 'store_inout_in.php?act=list&' . list_link_postfix();
    clear_cache_files();
    sys_msg('恭喜,更新成功!', 0, $link);
} elseif ($_REQUEST['act'] == 'edit_title') {
    check_authz_json('article_manage');
    $id = intval($_POST['id']);
    $title = json_str_iconv(trim($_POST['val']));
    /* 检查文章标题是否重复 */
    if ($exc->num("title", $title, $id) != 0) {
        make_json_error(sprintf($_LANG['title_exist'], $title));
    } else {
        if ($exc->edit("title = '{$title}'", $id)) {
            clear_cache_files();
            admin_log($title, 'edit', 'article');
            make_json_result(stripslashes($title));
        } else {
            make_json_error($db->error());
        }
    }
} elseif ($_REQUEST['act'] == 'toggle_show') {
    check_authz_json('article_manage');
    $id = intval($_POST['id']);
    $val = intval($_POST['val']);
    $exc->edit("is_open = '{$val}'", $id);
    clear_cache_files();
    make_json_result($val);
} elseif ($_REQUEST['act'] == 'toggle_type') {
        set_show_in_nav($row['ctype'], $row['cid'], 0);
    }
    $sql = " DELETE FROM " . $GLOBALS['ecs']->table('nav') . " WHERE id='{$id}' LIMIT 1";
    $db->query($sql);
    clear_cache_files();
    ecs_header("Location: navigator.php?act=list\n");
    exit;
} elseif ($_REQUEST['act'] == 'edit_sort_order') {
    check_authz_json('nav');
    $id = intval($_POST['id']);
    $order = json_str_iconv(trim($_POST['val']));
    /* 检查输入的值是否合法 */
    if (!preg_match("/^[0-9]+\$/", $order)) {
        make_json_error(sprintf($_LANG['enter_int'], $order));
    } else {
        if ($exc->edit("vieworder = '{$order}'", $id)) {
            clear_cache_files();
            make_json_result(stripslashes($order));
        } else {
            make_json_error($db->error());
        }
    }
}
/*------------------------------------------------------ */
//-- 切换是否显示
/*------------------------------------------------------ */
if ($_REQUEST['act'] == 'toggle_ifshow') {
    $id = intval($_POST['id']);
    $val = intval($_POST['val']);
    $row = $db->getRow("SELECT type,ctype,cid FROM " . $GLOBALS['ecs']->table('nav') . " WHERE id = '{$id}' LIMIT 1");
    if ($row['type'] == 'middle' && $row['ctype'] && $row['cid']) {
Exemple #27
0
    admin_log($_POST['link_name'], 'edit', 'friendlink');
    /* 清除缓存 */
    clear_cache_files();
    /* 提示信息 */
    $link[0]['text'] = $_LANG['back_list'];
    $link[0]['href'] = 'friend_link.php?act=list&' . list_link_postfix();
    sys_msg($_LANG['edit'] . "&nbsp;" . stripcslashes($_POST['link_name']) . "&nbsp;" . $_LANG['attradd_succed'], 0, $link);
} elseif ($_REQUEST['act'] == 'edit_link_name') {
    check_authz_json('friendlink');
    $id = intval($_POST['id']);
    $link_name = json_str_iconv(trim($_POST['val']));
    /* 检查链接名称是否重复 */
    if ($exc->num("link_name", $link_name, $id) != 0) {
        make_json_error(sprintf($_LANG['link_name_exist'], $link_name));
    } else {
        if ($exc->edit("link_name = '{$link_name}'", $id)) {
            admin_log($link_name, 'edit', 'friendlink');
            clear_cache_files();
            make_json_result(stripslashes($link_name));
        } else {
            make_json_error($db->error());
        }
    }
} elseif ($_REQUEST['act'] == 'remove') {
    check_authz_json('friendlink');
    $id = intval($_GET['id']);
    /* 获取链子LOGO,并删除 */
    $link_logo = $exc->get_name($id, "link_logo");
    if (strpos($link_logo, 'http://') === false && strpos($link_logo, 'https://') === false) {
        $img_name = basename($link_logo);
        @unlink(ROOT_PATH . DATA_DIR . '/afficheimg/' . $img_name);
Exemple #28
0
    }
    $temp_count = count($user_list['user_list']);
    for ($i = 0; $i < $temp_count; $i++) {
        $user_list['user_list'][$i]['reg_time'] = local_date($_CFG['date_format'], $user_list['user_list'][$i]['reg_time']);
    }
    $user_list['record_count'] = $all_count;
    $smarty->assign('user_list', $user_list['user_list']);
    $smarty->assign('record_count', $user_list['record_count']);
    $smarty->assign('full_page', 1);
    $smarty->assign('action_link', array('text' => $_LANG['back_note'], 'href' => "users.php?act=edit&id={$auid}"));
    assign_query_info();
    $smarty->display('affiliate_list.htm');
} elseif ($_REQUEST['act'] == 'is_fenxiao') {
    $user_id = intval($_POST['id']);
    $is_fenxiao = intval($_POST['val']);
    if ($exc->edit("is_fenxiao = '{$is_fenxiao}'", $user_id)) {
        clear_cache_files();
        make_json_result($is_fenxiao);
    }
}
/**
 *  返回用户列表数据
 *
 * @access  public
 * @param
 *
 * @return void
 */
function user_list()
{
    $result = get_filter();
Exemple #29
0
        make_json_error($_LANG['add_area_error']);
    }
} elseif ($_REQUEST['act'] == 'edit_area_name') {
    check_authz_json('area_manage');
    $id = intval($_POST['id']);
    $region_name = json_str_iconv(trim($_POST['val']));
    if (empty($region_name)) {
        make_json_error($_LANG['region_name_empty']);
    }
    $msg = '';
    /* 查看区域是否重复 */
    $parent_id = $exc->get_name($id, 'parent_id');
    if (!$exc->is_only('region_name', $region_name, $id, "parent_id = '{$parent_id}'")) {
        make_json_error($_LANG['region_name_exist']);
    }
    if ($exc->edit("region_name = '{$region_name}'", $id)) {
        admin_log($region_name, 'edit', 'area');
        make_json_result(stripslashes($region_name));
    } else {
        make_json_error($db->error());
    }
} elseif ($_REQUEST['act'] == 'drop_area') {
    check_authz_json('area_manage');
    $id = intval($_REQUEST['id']);
    $sql = "SELECT * FROM " . $ecs->table('region') . " WHERE region_id = '{$id}'";
    $region = $db->getRow($sql);
    //    /* 如果底下有下级区域,不能删除 */
    //    $sql = "SELECT COUNT(*) FROM " . $ecs->table('region') . " WHERE parent_id = '$id'";
    //    if ($db->getOne($sql) > 0)
    //    {
    //        make_json_error($_LANG['parent_id_exist']);
Exemple #30
0
        if ($exc->edit("vote_name = '{$vote_name}'", $id)) {
            admin_log($vote_name, 'edit', 'vote');
            make_json_result(stripslashes($vote_name));
        }
    }
} elseif ($_REQUEST['act'] == 'edit_option_name') {
    check_authz_json('vote_priv');
    $id = intval($_POST['id']);
    $option_name = json_str_iconv(trim($_POST['val']));
    /* 检查名称是否重复 */
    $vote_id = $db->getOne('SELECT vote_id FROM ' . $ecs->table('vote_option') . " WHERE option_id='{$id}'");
    $sql = 'SELECT COUNT(*) FROM ' . $ecs->table('vote_option') . " WHERE option_name = '{$option_name}' AND vote_id = '{$vote_id}' AND option_id <> {$id}";
    if ($db->getOne($sql) != 0) {
        make_json_error(sprintf($_LANG['vote_option_exist'], $option_name));
    } else {
        if ($exc_opn->edit("option_name = '{$option_name}'", $id)) {
            admin_log($option_name, 'edit', 'vote');
            make_json_result(stripslashes($option_name));
        }
    }
} elseif ($_REQUEST['act'] == 'edit_option_order') {
    check_authz_json('vote_priv');
    $id = intval($_POST['id']);
    $option_order = json_str_iconv(trim($_POST['val']));
    if ($exc_opn->edit("option_order = '{$option_order}'", $id)) {
        admin_log($_LANG['edit_option_order'], 'edit', 'vote');
        make_json_result(stripslashes($option_order));
    }
} elseif ($_REQUEST['act'] == 'remove') {
    check_authz_json('vote_priv');
    $id = intval($_GET['id']);