function helplist($num, $id = '', $aids = "", $orderby = "aid asc") { if (is_numeric($id)) { $wherestr[] = "typeid = " . $id; } elseif (is_array($id)) { $ids = getdotstring($id, 'int'); $wherestr[] = "typeid in ({$ids})"; } elseif (is_string($id) && (strexists($id, ',') || strexists($id, '|'))) { if (strexists($id, ',')) { $ids = getdotstring($id, 'int'); } else { $ids = getdotstring(explode('|', $ids), 'int'); } $wherestr[] = "typeid in ({$ids})"; } else { $wherestr[] = ""; } if (!empty($aids)) { $aids = getdotstring($aids, 'int'); $wherestr[] = "aid in ({$ids})"; } $num = GetNum($num); $wheresql = implode(' AND ', $wherestr); //条件汇总 $articleobj = new TableClass('article', 'aid'); $articlearray = $articleobj->getdata($num, $wheresql, $orderby, 'aid,typeid,title'); return $articlearray; }
/** * 删除指定ID信息 * * @param unknown_type $id * @return unknown */ function del($id, $uname = "", $other = "") { if (is_numeric($id)) { $wherestr[] = $this->idname . " = " . $id; } elseif (is_array($id)) { $ids = getdotstring($id, 'int'); $wherestr[] = $this->idname . " in ({$ids})"; } elseif (is_string($id) && (strexists($id, ',') || strexists($id, '|'))) { if (strexists($id, ',')) { $ids = getdotstring($id, 'int'); } else { $ids = getdotstring(explode('|', $ids), 'int'); } $wherestr[] = $this->idname . " in ({$ids})"; } else { return lang('ID_format_error'); } if ($uname != "") { $wherestr[] = "uname = '" . $uname . "'"; } if ($other != "") { $wherestr[] = $other; } $wheresql = implode(' AND ', $wherestr); //条件汇总 $this->db->query("delete from {$this->table} where " . $wheresql); return "OK"; }
} $scopestring = getscopestring('readperm', $_POST['readperm']); if ($scopestring) { $blockcodearr[] = $scopestring; } $scopestring = getscopestring('downloads', $_POST['downloads']); if ($scopestring) { $blockcodearr[] = $scopestring; } if (!empty($_POST['t_fid'])) { $blockcodearr[] = 't_fid/' . implode(',', $_POST['t_fid']); } if (!empty($_POST['t_typeid'])) { $blockcodearr[] = 't_typeid/' . implode(',', $_POST['t_typeid']); } $_POST['t_authorid'] = getdotstring($_POST['t_authorid'], 'int'); if (!empty($_POST['t_authorid'])) { $blockcodearr[] = 't_authorid/' . $_POST['authorid']; } if (!empty($_POST['t_dateline'])) { $blockcodearr[] = 't_dateline/' . $_POST['t_dateline']; } if (!empty($_POST['t_lastpost'])) { $blockcodearr[] = 't_lastpost/' . $_POST['t_lastpost']; } $scopestring = getscopestring('t_readperm', $_POST['t_readperm']); if ($scopestring) { $blockcodearr[] = $scopestring; } $scopestring = getscopestring('t_price', $_POST['t_price']); if ($scopestring) {
function runsql($paramarr, $bbsdb = '', $returncount = 0, $multicachekey = '') { global $_G, $_SGLOBAL, $_SBLOCK; //處理SQL $sqlstring = getblocksql($paramarr['sql']); //初始化 $listcount = 1; //連接數據庫 //$thedb = empty($bbsdb)?$_SGLOBAL['db']:$bbsdb; //分頁 if (!empty($paramarr['perpage'])) { $countsql = ''; if (empty($countsql)) { $countsql = getcountsql($sqlstring, 'SELECT(.+?)FROM(.+?)WHERE(.+?)ORDER', 2, 3); } if (empty($countsql)) { $countsql = getcountsql($sqlstring, 'SELECT(.+?)FROM(.+?)WHERE(.+?)LIMIT', 2, 3); } if (empty($countsql)) { $countsql = getcountsql($sqlstring, 'SELECT(.+?)FROM(.+?)WHERE(.+?)$', 2, 3); } if (empty($countsql)) { $countsql = getcountsql($sqlstring, 'SELECT(.+?)FROM(.+?)ORDER', 2, -1); } if (empty($countsql)) { $countsql = getcountsql($sqlstring, 'SELECT(.+?)FROM(.+?)LIMIT', 2, -1); } if (empty($countsql)) { $countsql = getcountsql($sqlstring, 'SELECT(.+?)FROM(.+?)$', 2, -1); } if (!empty($countsql)) { if ($returncount > 0) { //需要更新計數緩存時 $listcount = DB::result_first($countsql); return $listcount; } else { //無需更新緩存時 $listcount = intval(unserialize($_SBLOCK[$multicachekey]['value'])); } if ($listcount) { $paramarr['perpage'] = intval($paramarr['perpage']); if (empty($paramarr['perpage'])) { $paramarr['perpage'] = 20; } if (empty($_G['page'])) { $_G['page'] = 1; } $_G['page'] = intval($_G['page']); if ($_G['page'] < 1) { $_G['page'] = 1; } $start = ($_G['page'] - 1) * $paramarr['perpage']; //SQL文 $sqlstring = preg_replace("/ LIMIT(.+?)\$/is", '', $sqlstring); $sqlstring .= ' LIMIT ' . $start . ',' . $paramarr['perpage']; } } } elseif (!empty($paramarr['limit'])) { $paramarr['limit'] = getdotstring($paramarr['limit'], 'int', true, array(), 1, false); if ($paramarr['limit']) { //SQL文 $sqlstring = preg_replace("/ LIMIT(.+?)\$/is", '', $sqlstring); $sqlstring .= ' LIMIT ' . $paramarr['limit']; } } return array($sqlstring, $listcount); }
function runsql($paramarr, $bbsdb = '') { global $_SGLOBAL, $_SGET; //处理SQL $sqlstring = getblocksql($paramarr['sql']); //初始化 $listcount = 1; //连接数据库 $thedb = empty($bbsdb) ? $_SGLOBAL['db'] : $bbsdb; //分页 if (!empty($paramarr['perpage'])) { $countsql = ''; if (empty($countsql)) { $countsql = getcountsql($sqlstring, 'SELECT(.+?)FROM(.+?)WHERE(.+?)ORDER', 2, 3); } if (empty($countsql)) { $countsql = getcountsql($sqlstring, 'SELECT(.+?)FROM(.+?)WHERE(.+?)LIMIT', 2, 3); } if (empty($countsql)) { $countsql = getcountsql($sqlstring, 'SELECT(.+?)FROM(.+?)WHERE(.+?)$', 2, 3); } if (empty($countsql)) { $countsql = getcountsql($sqlstring, 'SELECT(.+?)FROM(.+?)ORDER', 2, -1); } if (empty($countsql)) { $countsql = getcountsql($sqlstring, 'SELECT(.+?)FROM(.+?)LIMIT', 2, -1); } if (empty($countsql)) { $countsql = getcountsql($sqlstring, 'SELECT(.+?)FROM(.+?)$', 2, -1); } if (!empty($countsql)) { $query = $thedb->query($countsql); $listcount = $thedb->result($query, 0); if ($listcount) { $paramarr['perpage'] = intval($paramarr['perpage']); if (empty($paramarr['perpage'])) { $paramarr['perpage'] = 20; } if (empty($_SGET['page'])) { $_SGET['page'] = 1; } $_SGET['page'] = intval($_SGET['page']); if ($_SGET['page'] < 1) { $_SGET['page'] = 1; } $start = ($_SGET['page'] - 1) * $paramarr['perpage']; //SQL文 $sqlstring = preg_replace("/ LIMIT(.+?)\$/is", '', $sqlstring); $sqlstring .= ' LIMIT ' . $start . ',' . $paramarr['perpage']; } } } elseif (!empty($paramarr['limit'])) { $paramarr['limit'] = getdotstring($paramarr['limit'], 'int', true, array(), 1, false); if ($paramarr['limit']) { //SQL文 $sqlstring = preg_replace("/ LIMIT(.+?)\$/is", '', $sqlstring); $sqlstring .= ' LIMIT ' . $paramarr['limit']; } } return array($sqlstring, $listcount); }
$dateline = !empty($_GET['dateline']) ? intval($_GET['dateline']) : 0; $updatetime = !empty($_GET['updatetime']) ? intval($_GET['updatetime']) : 0; $start = !empty($_GET['start']) ? intval($_GET['start']) : 0; $limit = !empty($_GET['limit']) ? intval($_GET['limit']) : 10; $friendnum[] = empty($_GET['startfriendnum']) ? 0 : intval($_GET['startfriendnum']); $friendnum[] = empty($_GET['endfriendnum']) ? 0 : intval($_GET['endfriendnum']); $viewnum[] = empty($_GET['startviewnum']) ? 0 : intval($_GET['startviewnum']); $viewnum[] = empty($_GET['endviewnum']) ? 0 : intval($_GET['endviewnum']); $credit[] = empty($_GET['startcredit']) ? 0 : intval($_GET['startcredit']); $credit[] = empty($_GET['endcredit']) ? 0 : intval($_GET['endcredit']); $uids = getdotstring($uid, 'int'); if($uids) $wherearr[] = 'uid IN ('.$uids.')'; if($dateline) $wherearr[] = "dateline>'".($_SGLOBAL['timestamp']-$dateline)."'"; if($updatetime) $wherearr[] = "updatetime>'".($_SGLOBAL['timestamp']-$updatetime)."'"; $friendnumstr = getscopequery('friendnum', $friendnum); if($friendnumstr) $wherearr[] = $friendnumstr; $viewnumstr = getscopequery('viewnum', $viewnum); if($viewnumstr) $wherearr[] = $viewnumstr; $creditstr = getscopequery('credit', $credit); if($creditstr) $wherearr[] = $creditstr; if(isset($_GET['avatar'])) { $wherearr[] = "avatar='".(empty($_GET['avatar']) ? 0 : intval($_GET['avatar']))."'";
$wherestro[] = "uname='" . $_USERS['uname'] . "'"; $wherestro[] = "oid in(" . $oids . ")"; if (!empty($wherestro)) { $wheresqlo = implode(' AND ', $wherestro); } //条件汇总 $dataarray = $o->getdata("", $wheresqlo, "", "oid,uid,uname,goodsurl,goodsname,goodsprice,goodsnum,goodssite,siteurl,orderweight"); //计算商品总价格和总重量 $countmoney = $countweight = 0; $tempoids = array(); foreach ($dataarray as $value) { $tempoids[] = $value['oid']; $countmoney += $value['goodsprice'] * $value['goodsnum']; $countweight += $value['orderweight']; } $ids = getdotstring($tempoids, 'int'); $auth = $ids . "\t" . $countmoney . "\t" . $countweight; $LOCKDATA = cookie_authcode($auth, 'ENCODE'); //加密数据 //print_r($dataarray); //获取地区信息 $areaobj = new TableClass('area', 'aid'); $areaarray = $areaobj->getdata('', 'state=1'); //获取用户地址 $addressobj = new TableClass('address', 'aid'); $addressarray = $addressobj->getdata('', "uname='" . $_USERS['uname'] . "'", "def desc,aid desc"); //获取优惠卷 include_once INC_PATH . "/coupon.class.php"; $couponobj = CouponClass::init(); $wherestrc[] = "uname='" . $_USERS['uname'] . "'"; $wherestrc[] = "endtime >= " . time();
function joinid($id) { //ID处理 if (is_numeric($id)) { $wherestr = "gid = '{$id}'"; } elseif (is_array($id)) { $ids = getdotstring($id, 'int'); $wherestr = "gid in ({$ids})"; } elseif (is_string($id) && (strexists($id, ',') || strexists($id, '|'))) { if (strexists($id, ',')) { $ids = getdotstring($id, 'int'); } else { $tempids = explode('|', $id); $ids = getdotstring($tempids, 'int'); } $wherestr = "gid in ({$ids})"; } else { return ''; } return $wherestr; }
//总信息数 $pagesize = 20; //一页显示信息数 $page = isset($page) ? max(1, intval($page)) : 1; //处理页码变量 $offset = ($page - 1) * $pagesize; //偏移量 $dataarray = $Table->getdata("{$offset},{$pagesize}", $wheresql, $orderstr); //获取团购数据 //print_r($dataarray); //包含后台模板文件 include "tpl/admin_list.htm"; } elseif ($action == "updatestate" && !empty($ids)) { //更改状态 $state = GetNum($state); $ids = getdotstring(explode('|', $ids)); $wheresqlarr = "adminid in({$ids})"; editstate($Table->table, "state", $wheresqlarr, $state); //更改状态操作 exit("1"); } elseif ($action == "del" && !empty($did)) { //执行删除操作 $did = GetNum($did); $info = $Table->del($did); if ($info == "OK") { showmsg("删除成功!", PHP_SELF); } else { showmsg($info, PHP_SELF); } } elseif ($action == "dels") { if (empty($delids)) {
$sql['from'] = ', ' . tname('album') . ' a '; if ($groupids) { $sql['from'] .= ', ' . tname('space') . ' s '; $wherearr[] = "s.groupid IN({$groupids})"; $wherearr[] = "p.uid = s.uid"; } $wherearr[] = "a.friend='0' AND a.albumid=p.albumid"; $picids = getdotstring($_POST['network'][$key]['picid'], 'int'); if ($picids) { $wherearr[] = 'p.picid IN (' . $picids . ')'; } $albumids = getdotstring($_POST['network'][$key]['albumid'], 'int'); if ($albumids) { $wherearr[] = 'p.albumid IN (' . $albumids . ')'; } $uids = getdotstring($_POST['network'][$key]['uid'], 'int'); if ($uids) { $wherearr[] = 'p.uid IN (' . $uids . ')'; } if ($wherearr) { $sql['where'] = 'WHERE ' . implode(' AND ', $wherearr); } $sql['order'] = 'ORDER BY p.dateline DESC'; $sql['limit'] = getlimit($_POST['network'][$key]['start'], $_POST['network'][$key]['limit']); break; } $sqlstring = implode(' ', $sql); $_POST['network'][$key]['sql'] = $sqlstring; $network[$key] = $_POST['network'][$key]; } else { $network[$key] = array();
showmessage('block_thread_code_sql'); } $_POST['sql'] = getblocksql($_POST['sql']); $blockcodearr[] = 'sql/' . rawurlencode($_POST['sql']); } else { //向导模式 if ($_POST['setaid']) { //指定id $_POST['id'] = getdotstring($_POST['id'], 'int'); if (empty($_POST['aid'])) { showmessage('block_announcement_code_aid'); } else { $blockcodearr[] = 'id/' . $_POST['id']; } } else { $_POST['author'] = getdotstring($_POST['author'], 'char', false, array(), 0); if (!empty($_POST['author'])) { $blockcodearr[] = 'author/' . rawurlencode($_POST['author']); } } $orderarr = array(); if ($_POST['order']) { foreach ($_POST['order'] as $okey => $order) { if (!empty($order)) { $sc = $_POST['sc'][$okey]; if (!empty($sc)) { $sc = ' ' . $sc; } $orderarr[] = $order . $sc; } }
$s[$val['goodsseller']] = $val['sendprice']; } } else { $s[$val['goodsseller']] = $val['sendprice']; } } $countdata = $Cart->countmoney($dataarray); //生成校验数据 $ids = getdotstring($gids, 'int'); $auth = $ids . "\t" . $countdata['totalmoney']; $paydata = cookie_authcode($auth, 'ENCODE'); include template('payconfirm'); //包含输出指定模板 } else { //处理提交信息 @(list($ids, $totalmoney) = explode("\t", cookie_authcode($__PAYDATA, 'DECODE'))); if ($ids == getdotstring($gids, 'int') and !empty($ids)) { $tempids = $ids; } else { exit(lang('Data_exception')); } //处理扣费和订单转移并且记录日志操作 $info = $Cart->carttoorder($tempids); if ($info == 'OK') { print "<script language='javascript'>alert(" . lang('Submitted_successfully') . ");</script>"; jumpurl(url("m.php")); } else { print "<script language='javascript'>alert('" . $info . "');</script>"; jumpurl(url("m.php")); } }
} $scopestring = getscopestring('goodrate', $_POST['goodrate']); if ($scopestring) { $blockcodearr[] = $scopestring; } $scopestring = getscopestring('badrate', $_POST['badrate']); if ($scopestring) { $blockcodearr[] = $scopestring; } if (!empty($_POST['digest'])) { $blockcodearr[] = 'digest/' . implode(',', $_POST['digest']); } if (!empty($_POST['top'])) { $blockcodearr[] = 'top/' . implode(',', $_POST['top']); } $_POST['haveattach'] = getdotstring($_POST['haveattach'], 'int'); if (!empty($_POST['haveattach'])) { $blockcodearr[] = 'haveattach/' . $_POST['haveattach']; } if (!empty($_POST['showspacename'])) { $blockcodearr[] = 'showspacename/1'; } if (!empty($_POST['showgroupname'])) { $blockcodearr[] = 'showgroupname/1'; } } $orderarr = array(); if ($_POST['order']) { foreach ($_POST['order'] as $okey => $order) { if (!empty($order)) { $sc = $_POST['sc'][$okey];
} $_POST['sql'] = getblocksql($_POST['sql']); $blockcodearr[] = 'sql/' . rawurlencode($_POST['sql']); } else { //向导模式 if ($_POST['setuid']) { //指定tid $_POST['uid'] = getdotstring($_POST['uid'], 'int'); if (empty($_POST['uid'])) { showmessage('block_member_code_uid'); } else { $blockcodearr[] = 'uid/' . $_POST['uid']; } } else { if (!empty($_POST['groupid'])) { $_POST['groupid'] = getdotstring($_POST['groupid'], 'int'); if (!empty($_POST['groupid'])) { $blockcodearr[] = 'groupid/' . $_POST['groupid']; } } if (!empty($_POST['regdate'])) { $blockcodearr[] = 'regdate/' . $_POST['regdate']; } if (!empty($_POST['lastvisit'])) { $blockcodearr[] = 'lastvisit/' . $_POST['lastvisit']; } if (!empty($_POST['lastpost'])) { $blockcodearr[] = 'lastpost/' . $_POST['lastpost']; } $scopestring = getscopestring('posts', $_POST['posts']); if ($scopestring) {
$Table = new TableClass("order", "oid"); AjaxHead(); //禁止页面缓存 set_time_limit(0); if (!empty($type) || !empty($oid)) { if (!empty($oid)) { if (is_numeric($oid)) { $wherestr[] = "oid" . " = " . $oid; } elseif (is_array($oid)) { $ids = getdotstring($oid, 'int'); $wherestr[] = "oid" . " in ({$ids})"; } elseif (is_string($oid) && (strexists($oid, ',') || strexists($oid, '|'))) { if (strexists($oid, ',')) { $ids = getdotstring($oid, 'int'); } else { $ids = getdotstring(explode('|', $ids), 'int'); } $wherestr[] = "oid" . " in ({$ids})"; } else { exit("ID格式错误"); } } elseif (!empty($type)) { if ($type == "all") { } elseif ($type == "idlist") { if (GetNum($startid) and GetNum($endid)) { $wherestr[] = "oid >={$startid}"; $wherestr[] = "oid <={$endid}"; } else { showmsg("ID范围必须填写!", PHP_SELF); } } elseif ($type == "timelist") {
if (!defined('IN_SUPESITE_ADMINCP')) { exit('Access Denied'); } $blockcodearr = array(); if ($_POST['blockmodel'] == '2') { //高级模式 if (empty($_POST['sql'])) { showmessage('block_thread_code_sql'); } $_POST['sql'] = getblocksql($_POST['sql']); $blockcodearr[] = 'sql/' . rawurlencode($_POST['sql']); } else { //向导模式 if ($_POST['setpollid']) { //指定tid $_POST['pollid'] = getdotstring($_POST['pollid'], 'int'); if (empty($_POST['pollid'])) { showmessage('block_poll_code_pollid'); } else { $blockcodearr[] = 'pollid/' . $_POST['pollid']; } } else { if (!empty($_POST['dateline'])) { $blockcodearr[] = 'dateline/' . $_POST['dateline']; } } $orderarr = array(); if ($_POST['order']) { foreach ($_POST['order'] as $okey => $order) { if (!empty($order)) { $sc = $_POST['sc'][$okey];
$blockcodearr[] = 'sql/' . rawurlencode($_POST['sql']); } else { //向导模式 if ($_POST['setblogid']) { //指定aid $_POST['blogid'] = getdotstring($_POST['blogid'], 'int'); if (empty($_POST['blogid'])) { showmessage('block_uchblog_code_blogid'); } else { $blockcodearr[] = 'blogid/' . $_POST['blogid']; } } else { if (!empty($_POST['picflag'])) { $blockcodearr[] = 'picflag/' . $_POST['picflag']; } $_POST['uid'] = getdotstring($_POST['uid'], 'int'); if (!empty($_POST['uid'])) { $blockcodearr[] = 'uid/' . $_POST['uid']; } if (!empty($_POST['dateline'])) { $blockcodearr[] = 'dateline/' . $_POST['dateline']; } $scopestring = getscopestring('viewnum', $_POST['viewnum']); if ($scopestring) { $blockcodearr[] = $scopestring; } $scopestring = getscopestring('replaynum', $_POST['replaynum']); if ($scopestring) { $blockcodearr[] = $scopestring; } $scopestring = getscopestring('tracenum', $_POST['tracenum']);
} $blockcodearr[] = 'perpage/' . $_POST['perpage']; } $_POST['cachetime'] = intval($_POST['cachetime']); if (empty($_POST['perpage']) && !empty($_POST['cachetime'])) { $blockcodearr[] = 'cachetime/' . $_POST['cachetime']; } $_POST['subjectlen'] = intval($_POST['subjectlen']); if (!empty($_POST['subjectlen'])) { $blockcodearr[] = 'subjectlen/' . $_POST['subjectlen']; if (!empty($_POST['subjectdot'])) { $blockcodearr[] = 'subjectdot/' . $_POST['subjectdot']; } } if (!empty($_POST['bbsurltype'])) { $_POST['bbsurltype'] = getdotstring($_POST['bbsurltype'], 'char', false, array('bbs', 'site'), 0); if (!empty($_POST['bbsurltype'])) { $blockcodearr[] = 'bbsurltype/' . $_POST['bbsurltype']; } } if ($_POST['showdetail']) { $blockcodearr[] = 'showdetail/' . $_POST['showdetail']; $_POST['messagelen'] = intval($_POST['messagelen']); if (!empty($_POST['messagelen'])) { $blockcodearr[] = 'messagelen/' . $_POST['messagelen']; if (!empty($_POST['messagedot'])) { $blockcodearr[] = 'messagedot/' . $_POST['messagedot']; } } } if ($_POST['tpl'] == 'data' && empty($_POST['cachename'])) {
$htmlurl = $catarr[$row['catid']]['domain']; } else { $htmlurl = S_URL_ALL . '/' . substr($_SCONFIG['newspath'], 2) . '/' . substr($catarr[$row['catid']]['htmlpath'], 2); } $htmlpath = S_HTML_ROOT . '/' . substr($catarr[$row['catid']]['htmlpath'], 2); if (!is_dir($htmlpath)) { @mkdir($htmlpath); } $hotnews2 = $chotnews2[$row['catid']]; $picnews = $cpicnews[$row['catid']]; $newcomments = $cnewcomments[$row['catid']]; //子分类处理 $subnewlist = array(); if (!empty($csubarr[$row['catid']])) { foreach ($csubarr[$row['catid']] as $cvalue) { $tparam['catids'] = getdotstring($cvalue['subcatid'], 'int'); $query = $_SGLOBAL['db']->query("SELECT * FROM " . tname('spaceitems') . " WHERE folder = 1 AND catid IN (" . $tparam['catids'] . ") ORDER BY dateline DESC LIMIT 0, 6"); while ($value = $_SGLOBAL['db']->fetch_array($query)) { $value['subject'] = cutstr($value['subject'], 36, 0); //标题样式 if (!empty($value['styletitle'])) { $value['subject'] = '<span style=\'' . mktitlestyle($value['styletitle']) . '\'>' . $value['subject'] . '</span>'; } $value['url'] = gethtmlurl2($value['catid']) . '/' . sgmdate($value['dateline'], 'Y') . '/' . sgmdate($value['dateline'], 'n') . '/' . $catarr[$value['catid']]['pre_html'] . $value['itemid'] . '.html'; $subnewlist[] = $value; } } } $newslist = array(); $syear = $smoon = ''; $query = $_SGLOBAL['db']->query("SELECT * FROM " . tname('spaceitems') . " WHERE catid = '{$row['catid']}' AND itemid >= '{$row['eitemid']}' AND itemid <= '{$row['sitemid']}' ORDER BY dateline DESC");
$gtype = $typeobj->getone($tid); if ($gtype['node'] == 0) { $childgtype = $typeobj->getdata('', "node=" . $gtype['typeid']); foreach ($childgtype as $child) { $tids[] = $child['typeid']; } $position = "<span>></span><a href='recommend.php?action=list&tid=" . $gtype['typeid'] . "'>" . $gtype['typename'] . "</a>"; $typename = $gtype['typename']; } else { $cgtype = $typeobj->getone($gtype['node']); $typename = $cgtype['typename']; $position = "<span>></span><a href='recommend.php?action=list&tid=" . $cgtype['typeid'] . "'>" . $cgtype['typename'] . "</a>"; $position .= "<span>></span><a href='recommend.php?action=list&tid=" . $gtype['typeid'] . "'>" . $gtype['typename'] . "</a>"; } $tids[] = $tid; $wherestr[] = "gtypeid in(" . getdotstring($tids, 'int') . ")"; $wherestr[] = "Audit=1"; if (!empty($wherestr)) { $wheresql = implode(' AND ', $wherestr); } //条件汇总 //获取当前页码 $total = $goodsobj->getcount($wheresql); //总信息数 $pagesize = 12; //一页显示信息数 $page = isset($page) ? max(1, intval($page)) : 1; //处理页码变量 $offset = ($page - 1) * $pagesize; //偏移量 $dataarray = $goodsobj->getdata("{$offset},{$pagesize}", $wheresql, 'listorder asc,gid desc', 'gid,gtypeid,goodsurl,goodsname,goodsprice,goodsseller,goodsimg,sellerurl,shopname,rindex,views,buynum,listorder,flag,addtime');
function block_uchspace($paramarr) { global $_SGLOBAL, $_SC, $_SGET; dbconnect(2); if (empty($paramarr['sql'])) { $sql = array(); $sql['select'] = 'SELECT s.*'; $sql['from'] = 'FROM ' . tname('space', '2') . ' s'; if (!empty($paramarr['showdetail'])) { $sql['select'] = 'SELECT sf.*, s.*'; $sql['from'] .= ' LEFT JOIN ' . tname('spacefield', '2') . ' sf ON sf.uid=s.uid'; } $wherearr = array(); //where if (!empty($paramarr['uid'])) { $paramarr['uid'] = getdotstring($paramarr['uid'], 'int'); if ($paramarr['uid']) { $wherearr[] = 's.uid IN (' . $paramarr['uid'] . ')'; } } else { if (!empty($paramarr['avatar'])) { if ($paramarr['avatar'] == 1) { $wherearr[] = 's.avatar = 0'; } else { $wherearr[] = 's.avatar = 1'; } } $scopequery = getscopequery('s', 'viewnum', $paramarr); if (!empty($scopequery)) { $wherearr[] = $scopequery; } $scopequery = getscopequery('s', 'friendnum', $paramarr); if (!empty($scopequery)) { $wherearr[] = $scopequery; } } $sql['where'] = ''; if (!empty($wherearr)) { $sql['where'] = 'WHERE ' . implode(' AND ', $wherearr); } //order if (!empty($paramarr['order'])) { $sql['order'] = 'ORDER BY ' . $paramarr['order']; } //limit if (!empty($paramarr['perpage'])) { $paramarr['perpage'] = intval($paramarr['perpage']); if (empty($paramarr['perpage'])) { $paramarr['perpage'] = 20; } if (empty($_SGET['page'])) { $_SGET['page'] = 1; } $_SGET['page'] = intval($_SGET['page']); if ($_SGET['page'] < 1) { $_SGET['page'] = 1; } $start = ($_SGET['page'] - 1) * $paramarr['perpage']; $sql['limit'] = 'LIMIT ' . $start . ',' . $paramarr['perpage']; } else { if (empty($paramarr['limit'])) { $sql['limit'] = 'LIMIT 0,1'; } else { $paramarr['limit'] = getdotstring($paramarr['limit'], 'int', true, array(), 1, false); if ($paramarr['limit']) { $sql['limit'] = 'LIMIT ' . $paramarr['limit']; } else { $sql['limit'] = 'LIMIT 0,1'; } } } //query $sqlstring = implode(' ', $sql); //multi $listcount = 1; if (!empty($paramarr['perpage'])) { $listcount = $_SGLOBAL['db_uch']->result($_SGLOBAL['db_uch']->query('SELECT COUNT(*) FROM ' . tname('space', '2') . ' ' . $sql['where']), 0); if ($listcount) { $urlarr = $_SGET; unset($urlarr['page']); $theblockarr['multipage'] = multi($listcount, $paramarr['perpage'], $_SGET['page'], $urlarr, 0); } } } else { $uchdb = $_SGLOBAL['db_uch']; include_once S_ROOT . './function/block_sql.func.php'; list($sqlstring, $listcount) = runsql($paramarr, $uchdb); if (!empty($paramarr['perpage'])) { if ($listcount) { $urlarr = $_SGET; unset($urlarr['page']); $theblockarr['multipage'] = multi($listcount, $paramarr['perpage'], $_SGET['page'], $urlarr, 0); } } } //查询数据 if ($listcount) { //预处理 include_once S_ROOT . './uc_client/client.php'; //查询 $query = $_SGLOBAL['db_uch']->query($sqlstring); while ($value = $_SGLOBAL['db_uch']->fetch_array($query)) { //头像处理 $value['avatarflash'] = uc_avatar($_SGLOBAL['supe_uid']); $theblockarr[] = $value; } } return $theblockarr; }
if (!empty($_POST) and !empty($adminname) and !empty($adminid)) { $adminid = GetNum($adminid); if (empty($adminid)) { showmsg("缺少ID参数!", "-1"); } //出错! if (empty($adminname)) { showmsg("管理员名不能为空!", "-1"); } //出错! if (strlen($adminpwd) != 32) { $adminpwd = md5($adminpwd); } //用户密码加密 if (is_array($mid)) { $adminmid = getdotstring($mid, 'int'); } //格式化成id,id形式 foreach ($menuarray as $value) { if (in_array($value['mid'], $mid)) { $temparray[] = $value['mcode']; } } $adminpurview = implode_field_value($temparray); //格式化成id,id形式 $arrayadd = array("adminname" => Char_cv($adminname), "adminpwd" => Char_cv($adminpwd), "adminmid" => $adminmid, "adminpurview" => $adminpurview); $info = $Table->edit($adminid, $arrayadd); if ($info == "OK") { exit("<script language='javascript'>alert('编辑成功');parent.\$.fn.colorbox.close();</script>"); } else { exit("<script language='javascript'>alert('编辑失败');history.go(-1);</script>");