if($rows[nodetype] != 0) { html_error_quit("该文不可编辑!"); exit(); } */ if ($subject) { if ($_POST["comment"] == 1) { $c = 0; } else { $c = 1; } $useHtmlTag = $_POST["htmltag"] == 1 ? 1 : 0; $trackback = $_POST["trackback"] == 1 ? 1 : 0; $emote = (int) $_POST["emote"]; $query = "UPDATE nodes SET `theme` = '" . addslashes($_POST["theme"]) . "' , `subject` = '" . addslashes($_POST["subject"]) . "' , `body` = '" . addslashes(html_editorstr_format($_POST["blogbody"])) . "' , `changed` = '" . date("YmdHis") . "' , `comment` = '" . $c . "' , `tid` = '" . (int) $_POST["tid"] . "' , `emote` = '" . $emote . "' , `htmltag` = '" . $useHtmlTag . "' , `trackback` = '" . $trackback . "' WHERE `nid` = '" . $nid . "' AND nodetype = 0;"; mysql_query($query, $link); pc_update_record($link, $pc["UID"]); if ($rows["subject"] == $_POST["subject"]) { $log_action = "EDIT NODE: " . $rows[subject]; } else { $log_action = "EDIT NODE: " . $_POST["subject"]; $log_content = "OLD SUBJECT: " . $rows["subject"] . "\nNEW SUBJECT: " . $_POST["subject"]; } if ($rows["type"] == 1) { pc_return("pcdoc.php?userid=" . $pc["USER"] . "&tag=3&pid=" . $rows["pid"]); } else { pc_return("pccon.php?id=" . $pc["UID"] . "&nid=" . $nid); } } else { ?>
function pc_add_node($link, $pc, $pid, $tid, $emote, $comment, $access, $htmlTag, $trackback, $theme, $subject, $body, $nodeType, $autodetecttbp, $tbpUrl, $tbpArt, $convert_encoding, $filtered, $address, $publisher) { global $pcconfig, $support_encodings, $sending_encoding; $pid = intval($pid); $tid = intval($tid); $emote = intval($emote); $comment = $comment == 1 ? 1 : 0; $access = intval($access); $htmlTag = $htmlTag == 1 ? 1 : 0; $trackback = $trackback == 1 ? 1 : 0; $subject = addslashes(trim($subject)); $body = html_editorstr_format(trim($body)); $nodeType = intval($nodeType); //0: 普通;1: log,不可删除 if ($convert_encoding) { if (!strstr($support_encodings, $convert_encoding)) { $convert_encoding = $sending_encoding; } } else { $convert_encoding = $sending_encoding; } if (!$pc || !is_array($pc)) { return FALSE; } if (!$subject) { //检查主题 return -1; } if ($access < 0 || $access > 4) { $access = 2; } //如果参数错误先在私人区发表 if ($access == 3) { if (!pc_load_directory($link, $pc["UID"], $pid)) { return -2; } if (pc_used_space($link, $pc["UID"], 3, $pid) >= $pc["NLIM"]) { //目标文件夹使用空间 return -3; } $tid = 0; } else { $pid = 0; if (pc_used_space($link, $pc["UID"], $access) >= $pc["NLIM"]) { //目标文件夹使用空间 return -3; } if ($tid != 0) { if (!pc_load_topic($link, $pc["UID"], $tid, $topicname, $access)) { return -4; } } } if ($access != 0) { $tbpUrl = ""; $autodetecttbp = FALSE; } $into_filter = false; if (!$filtered) { //未经过过滤检查的要先检查一次 if (bbs_checkbadword($subject) || bbs_checkbadword($body)) { $into_filter = true; } } if (!pc_is_groupwork($pc)) { $publisher = ""; } elseif (!$publisher) { return -10; } else { } if (!$into_filter) { if ($tbpUrl && pc_tbp_check_url($tbpUrl) && $tbpArt) { if ($htmlTag) { $body .= "<br /><br /><strong>相关文章</strong><br />\n" . "<a href='" . $tbpArt . "'>" . $tbpArt . "</a>"; } else { $body .= "\n\n[相关文章]\n" . $tbpArt; } } if (pc_is_groupwork($pc)) { //群体BLOG文章要加一个头 $body = pc_groupwork_addhead($pc, $body, $htmlTag, $publisher); } } if (!isset($pcconfig["SECTION"][$theme])) { $theme = "others"; } $theme = addslashes($theme); $body = addslashes($body); if (!$address) { $address = $_SERVER["REMOTE_ADDR"]; } //日志入库 if ($into_filter) { $query = "INSERT INTO `filter` ( `pid` , `nid` , `tid` , `type` , `state` , `recuser` , `emote` , `hostname` , `changed` , `created` , `uid` , `username` , `comment` , `commentcount` , `subject` , `body` , `access` , `visitcount` , `htmltag`,`trackback` ,`trackbackcount`,`nodetype`,`tbp_url`,`tbp_art`,`auto_tbp`,`tbpencoding`,`theme`,`publisher`) " . "VALUES ( '" . $pid . "', 0 , '" . $tid . "' , '0', '0' , '', '" . $emote . "' , '" . addslashes($_SERVER["REMOTE_ADDR"]) . "',NOW( ) , NOW( ), '" . $pc["UID"] . "' , '" . addslashes($pc["USER"]) . "' , '" . $comment . "', '0', '" . $subject . "', '" . $body . "', '" . $access . "', '0' , '" . $htmlTag . "' ,'" . $trackback . "','0','" . $nodeType . "','" . addslashes($tbpUrl) . "','" . addslashes($tbpArt) . "','" . intval($autodetecttbp) . "','" . addslashes($convert_encoding) . "','" . $theme . "','" . addslashes($publisher) . "');"; } else { $query = "INSERT INTO `nodes` ( `pid` , `tid` , `type` , `recuser` , `emote` , `hostname` , `changed` , `created` , `uid` , `comment` , `commentcount` , `subject` , `body` , `access` , `visitcount` , `htmltag`,`trackback` ,`trackbackcount`,`nodetype`,`theme`,`publisher`) " . "VALUES ( '" . $pid . "', '" . $tid . "' , '0', '', '" . $emote . "' , '" . addslashes($address) . "',NOW( ) , NOW( ), '" . $pc["UID"] . "', '" . $comment . "', '0', '" . $subject . "', '" . $body . "', '" . $access . "', '0' , '" . $htmlTag . "' ,'" . $trackback . "','0','" . $nodeType . "','" . $theme . "','" . addslashes($publisher) . "');"; } if (!mysql_query($query, $link)) { return -5; } //公开区文章发布后更新文章数 if (!$into_filter) { if ($access == 0) { pc_update_record($link, $pc["UID"], "+1"); } } if (!$into_filter) { $detectnum = 0; if ($autodetecttbp) { $detecttbps = array(); $detectnum = pc_detect_trackbackpings($body, $detecttbps, $tbpUrl); } if ($tbpUrl || $detectnum) { //提取日志的nid $query = "SELECT `nid` FROM nodes WHERE `subject` = '" . $subject . "' AND `body` = '" . $body . "' AND `uid` = '" . $pc["UID"] . "' AND `access` = '" . $access . "' AND `pid` = '" . $pid . "' AND `tid` = '" . $tid . "' ORDER BY nid DESC LIMIT 0,1;"; $result = mysql_query($query, $link); $rows = mysql_fetch_array($result); if (!$rows) { return -6; } $thisNid = $rows[nid]; mysql_free_result($result); if ($htmlTag) { $tbbody = undo_html_format(strip_tags(stripslashes($body))); } else { $tbbody = stripslashes($body); } if (strlen($tbbody) > 255) { $tbbody = substr($tbbody, 0, 251) . " ..."; } $subject = stripslashes($subject); $blogname = undo_html_format($pc["NAME"]); if ($pcconfig["ENCODINGTBP"]) { iconv_set_encoding("internal_encoding", $convert_encoding); iconv_set_encoding("output_encoding", $convert_encoding); $subject = iconv($default_encoding, $convert_encoding, $subject); $tbbody = iconv($default_encoding, $convert_encoding, $tbbody); $blogname = iconv($default_encoding, $convert_encoding, $blogname); } $tbarr = array("title" => $subject, "excerpt" => $tbbody, "url" => "http://" . $pcconfig["SITE"] . "/pc/pccon.php?id=" . $pc["UID"] . "&tid=" . $tid . "&nid=" . $thisNid . "&s=all", "blogname" => $blogname); if ($tbpUrl) { //发送引用通告 pc_tbp_trackback_ping($tbpUrl, $tbarr); } for ($i = 0; $i < $detectnum; $i++) { pc_tbp_trackback_ping($detecttbps[$i], $tbarr); } } } if ($into_filter) { return -9; } else { return 0; } }
* * 希望使用水木代码的Web站点加上powered by kbs的图标.该图标 * 位于html/images/poweredby.gif目录,链接指向http://dev.kcn.cn * 使用水木代码的站点可以通过dev.kcn.cn获得代码的最新信息. * */ powered_by_smth(); ?> <p> <?php } else { if (!$_POST["subject"]) { html_error_quit("请输入评论标题!"); exit; } $ret = pc_add_comment($link, $pc, $nid, intval($_POST["emote"]), $currentuser["userid"], $_POST["subject"], html_editorstr_format($_POST["blogbody"]), $_POST["htmltag"] == 1 ? 1 : 0, false); switch ($ret) { case -6: html_error_quit("由于系统原因导致评论失败"); break; case -9: echo "<script language=\"javascript\">alert('您的文章可能含有不当词汇,请等待管理员审核。');</script>"; break; default: } ?> <script language="javascript"> window.location.href="pccon.php?id=<?php echo $uid; ?> &nid=<?php
</table> </form></center> <p align="center"> <?php /** * 水木的web代码bbslib和cgi部分是修改于NJUWWWBBS-0.9,此部分 * 代码遵循原有的nju www bbs的版权声明(GPL)。php部分的代码( * phplib以及php页面)不再遵循GPL,正在考虑使用其他开放源码的版 * 权声明(BSD或者MPL之类)。 * * 希望使用水木代码的Web站点加上powered by kbs的图标.该图标 * 位于html/images/poweredby.gif目录,链接指向http://dev.kcn.cn * 使用水木代码的站点可以通过dev.kcn.cn获得代码的最新信息. * */ powered_by_smth(); ?> </p> <?php } elseif ($act == "edit2") { $emote = intval($_POST["emote"]); $uid = intval($_GET["id"]); $nid = intval($_GET["nid"]); $useHtmlTag = $_POST["htmltag"] == 1 ? 1 : 0; $query = "UPDATE `comments` SET `subject` = '" . addslashes($_POST["subject"]) . "',`changed` = '" . date("YmdHis") . "',`body` = '" . addslashes(html_editorstr_format($_POST["blogbody"])) . "' , `emote` = '" . $emote . "' , `htmltag` = '" . $useHtmlTag . "' WHERE `cid` = '" . $cid . "' AND `username` = '" . $currentuser["userid"] . "' LIMIT 1 ;"; mysql_query($query, $link); pc_return("pccon.php?id=" . $uid . "&nid=" . $nid . "&s=all"); } pc_db_close($link); html_normal_quit(); }