function comment_delete_action() { $BD = $_POST['comment_post_board']; $ID = $_POST['comment_post_id']; $CM = $_POST['comment_id']; $OK = TRUE; $who = isset($_SESSION['member']['id']) ? $_SESSION['member']['id'] : 0; if ($_POST['comment_delete_member'] != $who) { $OK = FALSE; set_clue('登入身份已經變動要繼續動作請再切換!'); } if (isset($_POST['comment_password'])) { $result = inget('`comment_password`', 'comments', 'WHERE `id` = ' . $CM); $comment = mysql_fetch_assoc($result); if (empty($_POST['comment_password']) || hash('sha256', $_POST['comment_password']) != $comment['comment_password']) { $OK = FALSE; set_clue('密碼不正確無法刪除!'); } } if ($OK) { $delete = '`id` = ' . $CM; incut('comments', $delete); $change['key'] = 'comment_count'; $change['value'] = 'comment_count-1'; $where['key'] = 'id'; $where['value'] = $ID; inset('posts', $change, $where); set_clue('回覆已經刪除!'); header('location: ' . OUT_PATH . $ID); } else { header('location: ' . OUT_PATH . 'clear/' . $CM); } }
function load_page($page) { if (!$page) { $page = 'index.inc.php'; } else { $page = $page . '.inc.php'; } if (file_exists('pool/pages/' . $page)) { $page = 'pool/pages/' . $page; } elseif (file_exists('chrome/content/' . $page)) { $page = 'chrome/content/' . $page; } else { set_clue('您尋找的頁面並不存在!'); $page = load_page('notfound'); } return $page; }