$mbcontent = $show_r['kq_mbcontent'];
$actionmd5 = md5("danye_update");
$actionurl = "action/ac_update.php";
} else {
$actionurl = "action/ac_add.php";
$actionmd5 = md5("danye_add");
}
$editorpass = 0;
if (permission("news_add") || !permission("news_edt")) {
$editorpass = 1;
} else {
$actionurl = "";
$btnaction = 'disabled="disabled"';
}
$lanmuid = $id;
$lanmumsg = get_first_date('lanmu', "where id='" . $lanmuid . "'");
$pagename = $lanmumsg['kq_name'] . '单页';
?>
<div id="urHere"> 管理中心<b>></b><strong><?php
echo $pagename;
?>
</strong> </div>
<?php
if (!$editorpass) {
?>
<div class="gonggao">
<h3>温馨提示：</h3>
<p><?php
echo $message;
?>
</p>
if ($updpass) {
if ($huodong == 'adv') {
?>
<link href="datepicker/jquery-ui.css" rel="stylesheet">
<style>
.ui-timepicker-div .ui-widget-header { margin-bottom: 8px;}
.ui-timepicker-div dl { text-align: left; }
.ui-timepicker-div dl dt { height: 25px; margin-bottom: -25px; }
.ui-timepicker-div dl dd { margin: 0 10px 10px 65px; }
.ui-timepicker-div td { font-size: 90%; }
.ui-tpicker-grid-label { background: none; border: none; margin: 0; padding: 0; }
.ui_tpicker_hour_label,.ui_tpicker_minute_label,.ui_tpicker_second_label,.ui_tpicker_millisec_label,.ui_tpicker_time_label{padding-left:20px}
</style>
<?php
if (count(get_first_date("winmsg", "where kq_newsid='" . $list_r['id'] . "' ")) <= 0) {
?>
<a href="index.php?name=win_add&id=<?php
echo $list_r['id'];
?>
" class="win_btn" target="_blank"><span class="renbtn">发布中奖</span></a>
<?php
} else {
echo '<span class="danpage">已经发奖</span>  ';
}
}
?>
<a href="index.php?name=<?php
echo $updateurl;
?>
&id=<?php
<th width="150">留言内容</th>
<th width="60">发布时间</th>
</tr>
</thead>
<tbody>
<?php
if (!$list_total) {
echo '<tr> <td colspan="4" align="center">暂无记录</td> </tr> ';
} else {
while ($list_r = $conn->result($list_sql)) {
$list_r = dell_slashes($list_r);
//找出信息
$newsmsg = get_first_date('news', "where id='" . $list_r['kq_newsid'] . "'");
//
$giflanm = get_first_date('lanmu', "where id='" . $newsmsg['kq_lmid'] . "'");
if ($giflanm['kq_type'] == 'gitf') {
$neurl = 'git-' . $list_r['kq_newsid'] . ".html";
} else {
$neurl = 'show-' . $list_r['kq_newsid'] . '.html';
}
?>
<tr>
<td align="center"><?php
echo $list_r['kq_number'];
?>
</td>
<td class="td_title"><a href="<?php
echo $neurl;
?>
" target="_blank" title="点击查看"><?php
/**
* [is_login 是否登陆监测]
* @param [type] $uid [description]
* @param string $only [description]
* @param integer $false [description]
* @return boolean [description]
*/
function is_login($uid, $only = '1', $false = 1)
{
$user = get_first_date('user', "where kq_uniqueid='" . $uid . "'");
if (count($user) > 0) {
if ($only) {
return $user;
} else {
return true;
}
} else {
if ($false) {
echo "<script>alert('请登陆后操作');window.location.href='/';</script>";
exit;
} else {
return false;
}
}
}
echo '<li data-status="1" class="add_user_a" data-id="' . $v['id'] . '" data-name="' . $v['kq_name'] . '">';
echo '<input type="hidden" name="kq_username[]" value="' . $v['kq_name'] . '">
<input type="hidden" name="kq_userid[]" value="' . $v['id'] . '">';
echo '<a href="javascript:void(0)" >' . $v['kq_name'] . '</a>';
echo '</li>';
}
} else {
echo '没有数据';
}
echo '</ul></div>';
} elseif ($data['action'] == 'onemsg') {
$id = '';
if (isset($data['id'])) {
$id = $data['id'];
}
$user = get_first_date('user', "where id='" . $id . "' order by id desc");
echo '
<table id="kq" class="tableBasic" border="0" cellpadding="8" cellspacing="0" width="400">
<tr>
<td>用户名</td>
<td>' . $user['kq_name'] . '</td>
<td>电话</td>
<td>' . $user['kq_tel'] . '</td>
</tr>
<tr>
<td>头像</td>
<td><img src="' . pic_url($user['kq_picurl']) . '" /></td>
<td>邮箱</td>
<td>' . $user['kq_email'] . '</td>
</tr>
break;
case 'liuyan_add':
$user = is_login(@$_COOKIE['uid']);
$data['kq_uuid'] = uuid();
$data['kq_ctime'] = time();
$data['kq_ip'] = $_SERVER["REMOTE_ADDR"];
unset($data['action']);
$data2 = array();
if ($data['kq_content']) {
$data2['status'] = 3;
$data2['msg'] = "留言内容不能为空";
}
//判断是否已经评论过
$hasuser = has_date("liuyan", "where kq_newsid='" . $data['kq_newsid'] . "' and kq_userid='" . $user['id'] . "'");
//获取当前
$liuyan = get_first_date("liuyan", "where kq_newsid='" . $data['kq_newsid'] . "'");
if ($hasuser) {
$data2['status'] = 2;
$data2['msg'] = "不可重复留言";
} else {
$data['kq_userid'] = $user['id'];
$data['kq_name'] = $user['kq_name'];
$data['kq_content'] = nl2br($data['kq_content']);
if (count($liuyan) > 0) {
$data['kq_number'] = $liuyan['kq_number'] + 1;
} else {
$data['kq_number'] = 1;
}
if ($conn->post_insert("" . DB_EXT . "liuyan", $data)) {
update_looknum($data['kq_newsid']);
update_uptime($data['kq_newsid']);
$hasroot = 0;
//表示在2级目录
if ($hasroot) {
define("KQ_URL", "http://" . $_SERVER['HTTP_HOST'] . substr(str_replace("\\", "/", dirname(dirname(__FILE__))), strrpos(str_replace("\\", "/", dirname(dirname(__FILE__))), "/")) . "/");
} else {
define("KQ_URL", "http://" . $_SERVER['HTTP_HOST'] . "/");
}
define("KQ_PATH", substr(str_replace("\\", "/", dirname(__FILE__)), 0, strrpos(str_replace("\\", "/", dirname(__FILE__)), "/") + 1));
//样式目录路径
$styledir = KQ_URL;
require_once KQ_PATH . "admin/class/class_config.inc.php";
require_once KQ_PATH . "fun/qzglobal.fun.inc.php";
require_once KQ_PATH . "inc/thumbs.class.php";
//网站配置信息
$get_config_array = get_first_date('config', "where kq_basename='kongqi'");
$kq_title = $get_config_array['kq_title'];
$kq_name = $get_config_array['kq_name'];
$kq_keyword = $get_config_array['kq_keyword'];
$kq_description = $get_config_array['kq_description'];
$kq_url = $get_config_array['kq_url'];
$kq_tel = $get_config_array['kq_tel'];
$kq_phone = $get_config_array['kq_phone'];
$kq_qq = $get_config_array['kq_qq'];
$kq_email = $get_config_array['kq_email'];
$kq_address = $get_config_array['kq_address'];
$kq_fax = $get_config_array['kq_fax'];
$kq_youbian = $get_config_array['kq_youbian'];
$kq_youlink = $get_config_array['kq_link'];
$kq_icp = $get_config_array['kq_icp'];
//ICP
require "base.inc.php";
$data = $_GET;
$data = guolv(add_slashes($data));
switch ($data['action']) {
case 'ly_list':
$page = $data['page'];
$liuyan = get_first_date('liuyan', "where kq_newsid='" . $data['id'] . "' and kq_checked='1' order by id desc limit " . ($page - 1) * $pagesize . "," . $pagesize . "", "more");
$total = $conn->rows($conn->selectall("" . DB_EXT . "liuyan", "where kq_newsid='" . $data['id'] . "'"));
$total = ceil($total / $pagesize);
$str = '';
$lypic = '';
$border = "";
if (count($liuyan) > 0) {
//获取用户
foreach ($liuyan as $key => $v) {
$user = get_first_date('user', "where id='" . $v['kq_userid'] . "'");
if (count($user) > 0) {
$pic = '<img src="' . pic_url($user['kq_picurl']) . '" >';
} else {
$pic = '';
}
if (isset($data['showpic'])) {
$lypic = ' <dd><img class="img_fll lazy" src="' . pic_url($v['kq_picurl'], "260x260/") . '"></dd>';
$border = 'style="border:none"';
}
$str .= '<dl>
<dt>' . $pic . '</dt>
<dd ' . $border . '><em>' . $v['kq_number'] . '楼</em><b>' . $v['kq_name'] . '</b><span>(' . date('Y-m-d H:i:s', $v['kq_ctime']) . ')</span><p>' . $v['kq_content'] . '</p></dd>
' . $lypic . '
<div class="clear_float"></div>
</dl>';
?>
" class="inpMain" id="sort[]" size="5" /></td>
<td align="center"><?php
echo $list_r['id'];
?>
</td>
<td><?php
echo $list_r['kq_name'];
?>
</td>
<td>
<?php
if ($list_r['kq_fid'] == 0) {
echo '根节点';
} else {
$fname = get_first_date("nav", "where id='" . $list_r['kq_fid'] . "'");
echo $fname['kq_name'];
}
?>
</td>
<td><?php
echo $list_r['kq_wburl'] == '' ? $list_r['kq_url'] : $list_r['kq_wburl'];
?>
</td>
<td>
<?php
if ($hasaccess) {
?>
<a href="index.php?name=<?php
echo $upurl;
?>
</head>
<body>
<?php
require_once KQ_PATH . 'inc/state.inc.php';
?>
<div class="warp">
<!-- 头部 -->
<?php
require_once KQ_PATH . 'inc/header.inc.php';
?>
<!-- 中间内容 -->
<div class="help_warp ">
<div class="wm1000">
<div class="adv_top">
<?php
$advtop = get_first_date('adv', "where kq_position='" . $advpid . "' order by kq_sort desc limit 1");
if (count($advtop) > 0) {
$blank = $advtop['kq_url'] == '' ? '' : 'target="_blank"';
echo '<a href="' . empty_url($advtop['kq_url']) . '" ' . $blank . '><img class="lazy" data-original="' . pic_url($advtop['kq_picurl']) . '" alt=""></a>';
}
?>
</div><!-- adv_top -->
<div class="help_cont">
<div class="left">
<ul class="help_list">
<?php
if (count($help_list) > 0) {
foreach ($help_list as $key => $value) {
echo '<li><a href="help-' . $value['kq_lmid'] . '-' . $value['id'] . '.html" title="' . $value['kq_title'] . '">' . Strsub($value['kq_title'], 14) . '</a></li>';
}
}
require_once KQ_PATH . 'inc/state.inc.php';
?>
<div class="warp">
<!-- 头部 -->
<?php
require_once KQ_PATH . 'inc/header.inc.php';
?>
<!-- 中间内容 -->
<div id="container">
<div class="wm1000">
<div class="adv_top">
<?php
$advtop = get_first_date('adv', "where kq_position='index' and kq_checked=1 order by kq_sort desc limit 1");
if (count($advtop) > 0) {
$blank = $advtop['kq_url'] == '' ? '' : 'target="_blank"';
echo '<a href="' . empty_url($advtop['kq_url'], "javascript:void(0)") . '" ' . $blank . '><img class="lazy" src="' . pic_url($advtop['kq_picurl']) . '" alt=""></a>';
}
?>
</div><!-- adv_top -->
<div class="clear_float"></div>
<div class="left">
<?php
if (count($topadv) > 0) {
?>
<div class="list_top_adv">
<ul>
<?php
require_once "../qqconnect/API/qqConnectAPI.php";
require_once "base.inc.php";
$qc = new QC();
$token = $qc->qq_callback();
$openid = $qc->get_openid();
$qc2 = new QC($token, $openid);
$arr = $qc2->get_user_info();
//判断是否已经注册，如果是已经注册了则登陆
$user = get_first_date('user', "where kq_openid='" . $openid . "'");
if (count($user) > 0) {
setcookie("user", $user['kq_name'], time() + 7200 * 12, "/");
setcookie("uid", $user['kq_uniqueid'], time() + 7200 * 12, "/");
header("Location:../user.html");
} else {
$data['kq_name'] = $arr["nickname"];
$data['kq_ctime'] = time();
$data['kq_uuid'] = uuid();
$data['kq_openid'] = $openid;
$data['kq_token'] = $token;
$data['kq_uniqueid'] = sha1(uuid());
$data['kq_picurl'] = $arr['figureurl_qq_2'];
$data['kq_sex'] = $arr["gender"] == '男' ? '1' : '2';
if ($conn->post_insert("" . DB_EXT . "user", $data)) {
setcookie("user", $data['kq_name'], time() + 7200 * 12, "/");
setcookie("uid", $data['kq_uniqueid'], time() + 7200 * 12, "/");
header("Location:../user.html");
} else {
header("Location:../");
}
<?php
session_start();
require_once "../class/class_config.inc.php";
require_once FUN_PATH . "global.func.inc.php";
require_once CLASS_PATH . "class_alert.inc.php";
$data = $_POST;
if ($data['action'] == 'add') {
$data['kq_uuid'] = uuid();
$data['kq_ctime'] = time();
$data['kq_adminid'] = $_SESSION['name'];
unset($data['action']);
unset($data['_']);
if ($conn->post_insert("" . DB_EXT . "lyreply", $data)) {
$array = array('status' => 1);
$json = json_encode($array);
echo $json;
} else {
$array = array('status' => 0);
$json = json_encode($array);
echo $json;
}
} elseif ($data['action'] == 'get') {
$show = get_first_date('lyreply', "where kq_lyid='" . $data['id'] . "'");
echo json_encode($show);
}
session_start();
define("KQ_WORK", true);
require_once "inc/base.inc.php";
$id = '';
if (isset($_GET['uuid'])) {
$id = $_GET['uuid'];
}
if (!isset($_COOKIE['uid'])) {
echo "<script>alert('请登陆后操作');window.location.href='/';</script>";
exit;
}
$user = is_login($_COOKIE['uid']);
//防止RSF攻击
$_SESSION['add_input'] = md5(uniqid('', true));
//获取信息
$show_r = get_first_date('news', "where kq_uuid='" . $id . "'");
?>
<!DOCTYPE html>
<html lang="zh-CN">
<head>
<meta charset="UTF-8">
<title><?php
echo $kq_title;
?>
</title>
<meta name="keywords" content="<?php
echo $kq_keyword;
?>
" />
<meta name="description" content="<?php
echo $kq_description;
<a href="/"><img src="images/logo.jpg" alt="<?php
echo $kq_name;
?>
"></a>
</div>
<div class="clear_float"></div>
</div>
<div class="gonggao">
<div class="wm1000">
<span style="float: left" >公告<em class="iconfont"></em>: </span>
<div class="news_gg">
<ul>
<?php
$gongaolan = get_first_date('news', "where kq_checked='1' and kq_lmid='6' order by kq_sort desc", 'more');
if (count($gongaolan) > 0) {
foreach ($gongaolan as $key => $value) {
$strurl = "help-" . $value['kq_lmid'] . "-" . $value['id'] . ".html";
echo '<li><a href="' . web_url($value['kq_wburl'], $strurl) . '" target="_blank">' . $value['kq_title'] . '</a></li>';
}
}
?>
</ul>
<div class="clear_float"></div>
</div>
</div>
</div>
@($data['kq_model'] = 0);
}
unset($data['type']);
unset($data['id']);
unset($data['submit']);
if (isset($data['kq_url'])) {
if ($data['kq_url']) {
$isdir = has_date('lanmu', "where kq_url='" . $data['kq_url'] . "' and kq_uuid !='" . $_POST['id'] . "'");
if ($isdir) {
new Alert("目录存在，请更换名字", "back");
exit;
}
}
}
//获取自己信息
$seldata = get_first_date('lanmu', "where kq_uuid='" . $_POST['id'] . "'");
if ($seldata['id'] == $data['kq_fid']) {
new Alert("不能自己是自己的分类", "back");
exit;
}
if ($conn->post_update("" . DB_EXT . "lanmu", $data, "kq_uuid='" . $_POST['id'] . "'")) {
new Alert("更新成功", "href", "../index.php?name=class_list");
} else {
new Alert("更新失败", "back");
}
break;
//城市更新
//城市更新
case md5("city_update"):
unset($data['type']);
unset($data['id']);
<a href="javascript:void(0)" class="btn open_city">打开城市选择</a>
<div class="select_add">
<ul class="add_city">
</ul>
<div class="clear"></div>
</div>
<div class="clear"></div>
<div class="select_city_list" >
<div class="city_warp">
<p>
<span>输入城市立即搜索：</span> <input type="text" class="inpMain" id="select_city"><span style="color:#f00"> 可同时一次性发表多个城市</span>
<ul class="city_ul">
<?php
$city = get_first_date("city", "where kq_islast=0 limit 20", "more");
foreach ($city as $key => $value) {
echo "<li data-id='" . $value['id'] . "' data-status='0'>" . $value['kq_title'] . "</li>";
}
?>
<div class="clear"></div>
</ul>
<div class="clear"></div>
</div>
</div>
</tr>
<tr>
<td align="right">外部链接：</td>
<td colspan="2"><input name="kq_wburl" size="40" class="inpMain" type="text" id="kq_wburl" /></td>
</tr>
} else {
$pwd = sha1(trim($_POST['password']));
}
if (strtoupper(trim($_POST['code'])) != strtoupper($_SESSION['code'])) {
new Alert("验证码不正确", "back");
exit;
}
$namesql = $conn->selectall("" . DB_EXT . "admin", "where kq_name='" . setdefensesql($name) . "'");
if ($conn->rows($namesql)) {
$pwdsql = $conn->selectall("" . DB_EXT . "admin", "where kq_name='" . setdefensesql($name) . "' and kq_pwd='" . setdefensesql($pwd) . "'");
if ($conn->rows($pwdsql)) {
$checksql = $conn->selectall("" . DB_EXT . "admin", "where kq_name='" . setdefensesql($name) . "' and kq_pwd='" . setdefensesql($pwd) . "' and kq_checked='1'");
if ($conn->rows($checksql)) {
$admin_r = $conn->result($checksql);
$_SESSION['name'] = $name;
$_SESSION['pwd'] = $pwd;
$group = get_first_date('admingroup', "where id='" . $admin_r['kq_groupid'] . "'");
$_SESSION['group'] = json_decode($group['kq_group'], true);
$_SESSION['uniqid'] = $admin_r['kq_uniqid'];
header('Location:../index.php');
} else {
new Alert("管理员被禁用", "back");
}
} else {
new Alert("密码不正确", "back");
exit;
}
} else {
new Alert("用户名不存在", "back");
exit;
}
<?php
define("KQ_WORK", true);
require_once "inc/base.inc.php";
$id = '';
if (isset($_GET['id'])) {
$id = setdefensesql($_GET['id']);
}
//获取好礼相送的目录
$giflanm = get_first_date('lanmu', "where kq_type='gitf' order by id desc");
if ($id) {
$show_r = get_first_date('news', "where id='" . $id . "' ");
} else {
$show_r = get_first_date('news', "where kq_lmid='" . $giflanm['id'] . "' and kq_checked='1' order by id asc ");
}
$list_r = get_first_date('news', "where kq_lmid='" . $giflanm['id'] . "' and kq_checked='1' and id <>'" . $show_r['id'] . "' order by id desc ", "more");
$navname = "gift";
?>
<!DOCTYPE html>
<html lang="zh-CN">
<head>
<meta charset="UTF-8">
<title><?php
echo $show_r['kq_title'];
?>
</title>
<meta name="keywords" content="<?php
echo $show_r['kq_keyword'];
?>
" />
<meta name="description" content="<?php
<?php
require_once "../class/class_config.inc.php";
require_once FUN_PATH . "global.func.inc.php";
require_once CLASS_PATH . "class_alert.inc.php";
$key = '';
if (isset($_GET['key'])) {
$key = $_GET['key'];
}
$city = get_first_date("city", "where kq_title like '%" . $key . "%' and kq_islast=0 ", "more");
if (count($city) > 0) {
foreach ($city as $key => $value) {
echo "<li data-id='" . $value['id'] . "' data-status='0'>" . $value['kq_title'] . "</li>";
}
}
exit;
}
}
break;
/*栏目单个删除*/
/*栏目单个删除*/
case md5("city_del"):
if (!isset($_GET['id'])) {
new Alert("非法操作", "back");
exit;
} else {
$id = trim($_GET['id']);
}
//判断是否存在子类
//取得自身ID
$selftdata = get_first_date("city", "where kq_uuid='" . $id . "'");
if (has_subclass2(@$selftdata['id']) == 'ok') {
new Alert('删除失败，存在子类', "back");
exit;
} else {
if ($conn->delete("" . DB_EXT . "city", "kq_uuid='" . $id . "'")) {
new Alert("删除成功", "back");
exit;
} else {
new Alert("删除失败", "back");
exit;
}
}
break;
/*信息单个删除*/
/*信息单个删除*/
session_start();
define("KQ_WORK", true);
require_once "inc/base.inc.php";
$ed = '';
if (isset($_GET['ed'])) {
$ed = $_GET['ed'];
}
if (!isset($_COOKIE['uid'])) {
echo "<script>alert('请登陆后操作');window.location.href='/';</script>";
exit;
}
$user = is_login($_COOKIE['uid']);
//防止RSF攻击
$_SESSION['add_input'] = md5(uniqid('', true));
//是否存在记录
$hasdata = get_first_date('news', "where kq_userid='" . $user['id'] . "'");
if (count($hasdata) > 0) {
echo "<script>alert('已经发布过了请删除后再发布');window.location.href='user-list.html'</script>";
exit;
}
?>
<!DOCTYPE html>
<html lang="zh-CN">
<head>
<meta charset="UTF-8">
<title><?php
echo $kq_title;
?>
</title>
<meta name="keywords" content="<?php
echo $kq_keyword;
<?php
define("KQ_WORK", true);
require_once "inc/base.inc.php";
$id = '';
if (isset($_GET['id'])) {
$id = setdefensesql($_GET['id']);
}
$navname = 'index';
$show_r = get_first_date('news', "where id='" . $id . "' limit 1");
//获取栏目信息
$lmmsg = get_first_date('lanmu', "where id='" . $show_r['kq_lmid'] . "'");
if ($show_r['kq_endtime'] < $ontime) {
$navname = 'over';
}
$user = get_first_date('user', "where kq_checked='1' order by id desc limit 100", 'more');
if (isset($_COOKIE['user'])) {
$isuser = is_login($_COOKIE['uid']);
if ($show_r['kq_userid'] == $isuser['id']) {
} else {
if (!$show_r['kq_checked']) {
echo '<h1>信息审核中!!!</h1>';
exit;
}
}
} else {
if (!$show_r['kq_checked']) {
echo '<h1>信息审核中!!!</h1>';
exit;
}
}
//本页配置信息
$pagename = "获奖";
$addname = '';
$backurl = "win_list";
$actionmd5 = md5("win_add");
$btnaction = "";
//提交状态
if (!permission("root")) {
$actionurl = "";
$hasaccess = 0;
$btnaction = 'disabled="disabled"';
} else {
$actionurl = "action/ac_add.php";
$hasaccess = 1;
}
$news = get_first_date('news', "where id='" . $id . "'");
$message = "没有权限，不能操作";
//游客提示语
?>
<div id="urHere"> 管理中心<b>></b><strong><?php
echo $pagename;
?>
添加</strong> </div>
<?php
if (!$hasaccess) {
?>
<div class="gonggao">
<h3>温馨提示：</h3>
<p><?php
echo $message;
?>