function new_comment($arr = array())
{
$sql = 'SELECT c.user_name,c.content,c.add_time,b.blog_id,b.title,b.url_type FROM ' . table('comment') . ' AS c LEFT JOIN ' . table('blog') . ' AS b ON c.blog_id=b.blog_id' . ' WHERE 1 ORDER BY c.add_time DESC LIMIT 10';
if ($comment_list = $GLOBALS['db']->getall($sql)) {
foreach ($comment_list as $key => $val) {
$comment_list[$key]['url'] = build_url('blog', $val['blog_id'], $val['url_type']);
$comment_list[$key]['add_time'] = pbtime($val['add_time']);
}
}
$GLOBALS['smarty']->assign('new_comment', $comment_list);
}
* www.simple-log.com
*/
require_once PBBLOG_ROOT . '/includes/base.function.php';
if ($action == 'comment_list') {
//页数处理
$pg = isset($_GET['pg']) ? intval($_GET['pg']) : 1;
$page_size = !empty($page_size) ? $page_size : '15';
$sql = 'SELECT count(*) FROM ' . table('comment');
$page_count = intval(($db->getone($sql) - 1) / $page_size) + 1;
$page_arr = create_page($page_count, $pg, 0);
//获取分组数据
$start = ($pg - 1) * $page_size;
$sql = 'SELECT o.* , u.title FROM ' . table('comment') . ' o LEFT JOIN ' . table('blog') . ' u on o.blog_id=u.blog_id' . " ORDER BY comment_id DESC LIMIT " . $start . ' , ' . $page_size;
if ($comment_list = $db->getall($sql)) {
foreach ($comment_list as $key => $val) {
$comment_list[$key]['add_time'] = pbtime($val['add_time']);
$comment_list[$key]['short_comment'] = pbsubstr($val['content'], 10);
$comment_list[$key]['content'] = unprocess_text($val['content']);
$comment_list[$key]['short_comment'] = unprocess_text($comment_list[$key]['short_comment']);
}
}
$smarty->assign('comment_list', $comment_list);
$smarty->assign('page_arr', $page_arr);
$smarty->assign('page_count', $page_count);
$smarty->assign('pg', $pg);
$smarty->assign('url', 'admin.php?act=comment_list&pg=');
$smarty->assign('admin_title', '评论列表');
$smarty->display('comment_list.html');
} elseif ($action == 'del_comment') {
$comment_id = intval($_GET['id']);
$blog_id = $db->getone('SELECT blog_id FROM ' . table('comment') . " WHERE comment_id='" . $comment_id . "'");
/**
* $Author: pengwenfei p@simple-log.com
* $Date: 2010-08-07
* www.simple-log.com
*/
if ($action == 'blog_list') {
$pg = isset($_GET['pg']) ? intval($_GET['pg']) : 1;
$page_size = !empty($config['page_size']) ? $config['page_size'] : '15';
$sql = 'SELECT count(*) FROM ' . table('blog');
$page_count = intval(($db->getone($sql) - 1) / $page_size) + 1;
$page_arr = create_page($page_count, $pg, 0);
$start = ($pg - 1) * $page_size;
$sql = 'SELECT b.blog_id,b.title,b.description,b.add_time,b.views,b.comments,b.password,b.view_group,b.url_type,u.user_name,c.cat_name,c.cat_id ,c.url_type as cat_url_type FROM ' . table('blog') . ' AS b LEFT JOIN ' . table('user') . ' AS u on b.user_id=u.user_id' . ' LEFT JOIN ' . table('category') . ' AS c on b.cat_id=c.cat_id' . " ORDER BY b.open_type DESC , b.blog_id DESC LIMIT " . $start . ' , ' . $page_size;
$blog_list = $db->getall($sql);
foreach ($blog_list as $key => $val) {
$blog_list[$key]['add_time'] = pbtime($val['add_time']);
//$blog_list[$key]['description']=unprocess_text($val['description']);
}
$smarty->assign('blog_list', $blog_list);
$smarty->assign('page_arr', $page_arr);
$smarty->assign('page_count', $page_count);
$smarty->assign('pg', $pg);
$smarty->assign('url', 'admin.php?act=blog_list&pg=');
$smarty->display('blog_list.html');
} elseif ($action == 'del_blog') {
$blog_id = intval($_GET['id']);
$sql = 'DELETE FROM ' . table('blog') . " WHERE blog_id='" . $blog_id . "'";
if ($db->query($sql)) {
$blog_id = intval($_GET['id']);
$sql = 'DELETE FROM ' . table('tags') . " WHERE blog_id='" . $blog_id . "'";
$db->query($sql);
function get_comments_children($id, $re_comments = array())
{
$sql = 'SELECT * FROM ' . table('comment') . " WHERE comment_id='" . $id . "' order by comment_id ASC LIMIT 1 ";
if ($re_comment = $GLOBALS['db']->getrow($sql)) {
$re_comment['add_time'] = pbtime($re_comment['add_time']);
$re_comments[] = $re_comment;
while ($re_comment['parent_id'] > 0) {
$sql = 'SELECT * FROM ' . table('comment') . " WHERE comment_id='" . $re_comment['parent_id'] . "' order by comment_id ASC LIMIT 1 ";
$re_comment = $GLOBALS['db']->getrow($sql);
$re_comment['add_time'] = pbtime($re_comment['add_time']);
$re_comments[] = $re_comment;
}
return array_reverse($re_comments);
}
}
if ($db->query($sql) === false) {
$res['error'] = '于' . $date . '自动保存到草稿箱失败';
} else {
$res['content'] = '于' . $date . '自动保存到草稿箱' . ' <a href="#" onclick="javascript:get_auto_data()" id="get_page">获取草稿内容覆盖现在编辑日志</a>';
}
die($json->encode($res));
} elseif ($action == 'get_auto_save') {
require PBBLOG_ROOT . '/includes/json.class.php';
$json = new JSON();
$res = array('title' => '', 'desc' => '', 'content' => '', 'error' => 'no');
$id = intval($_POST['id']);
$sql = 'SELECT * FROM ' . table('page') . " WHERE relate_id='" . $id . "'" . " AND user_id='" . $user_id . "' AND type='-1'";
if (!($row = $db->getrow($sql))) {
$res['error'] = '获取草稿箱数据失败';
} else {
$res['title'] = $row['title'];
$res['desc'] = $row['desc'];
$res['content'] = $row['content'];
}
die($json->encode($res));
} elseif ($action == 'check_auto_date') {
require PBBLOG_ROOT . '/includes/json.class.php';
$json = new JSON();
$res = 'no';
$id = intval($_POST['id']) > 0 ? intval($_POST['id']) : 0;
$sql = 'SELECT add_time FROM ' . table('page') . " WHERE relate_id='" . $id . "'" . " AND user_id='" . $user_id . "' AND type='-1'";
if ($row = $db->getone($sql)) {
$res = '系统在' . pbtime($row) . '自动保存到草稿箱' . ' <a href="#" onclick="javascript:get_auto_data()" id="get_page">获取草稿内容覆盖现在编辑日志</a>';
}
die($json->encode($res));
}
* $Date: 2010-02-16
* www.simple-log.com
*/
if ($action == 'member_list') {
require_once PBBLOG_ROOT . '/includes/base.function.php';
$pg = isset($_GET['pg']) ? intval($_GET['pg']) : 1;
$page_size = !empty($page_size) ? $page_size : '15';
$sql = 'SELECT count(*) FROM ' . table('user');
$page_count = intval(($db->getone($sql) - 1) / $page_size) + 1;
$page_arr = create_page($page_count, $pg, 0);
$start = ($pg - 1) * $page_size;
$sql = 'SELECT o.user_id,o.user_name,o.reg_time,o.last_time,u.group_name FROM ' . table('user') . " o LEFT JOIN " . table('user_group') . " u on o.group_id=u.group_id" . " ORDER BY o.user_id DESC LIMIT " . $start . ' , ' . $page_size;
$user_list = $db->getall($sql);
foreach ($user_list as $key => $val) {
$user_list[$key]['reg_time'] = pbtime($user_list[$key]['reg_time']);
$user_list[$key]['last_time'] = pbtime($user_list[$key]['last_time']);
}
$smarty->assign('user_list', $user_list);
$smarty->assign('page_arr', $page_arr);
$smarty->assign('page_count', $page_count);
$smarty->assign('pg', $pg);
$smarty->assign('url', 'admin.php?act=member_list&pg=');
$smarty->assign('admin_title', '会员列表');
$smarty->display('member_list.html');
} elseif ($action == 'del_member') {
$member_id = intval($_GET['id']);
$sql = 'DELETE FROM ' . table('user') . " WHERE user_id='" . $member_id . "'";
if ($db->query($sql)) {
sys_message('删除会员成功', $referer_url);
} else {
sys_message('删除会员失败，请重新删除', $referer_url);
/**
* $Author: pengwenfei p@simple-log.com
* $Date: 2010-08-07
* www.simple-log.com
*/
if ($action == 'page_list') {
$pg = isset($_GET['pg']) ? intval($_GET['pg']) : 1;
$page_size = !empty($config['page_size']) ? $config['page_size'] : '15';
$sql = 'SELECT count(*) FROM ' . table('page') . ' WHERE type=0';
$page_count = intval(($db->getone($sql) - 1) / $page_size) + 1;
$page_arr = create_page($page_count, $pg, 0);
$start = ($pg - 1) * $page_size;
$sql = 'SELECT b.*, u.user_name FROM ' . table('page') . ' AS b LEFT JOIN ' . table('user') . ' AS u on b.user_id=u.user_id' . " WHERE b.type=0 ORDER BY b.page_id DESC LIMIT " . $start . ' , ' . $page_size;
$pages_list = $db->getall($sql);
foreach ($pages_list as $key => $val) {
$pages_list[$key]['add_time'] = pbtime($val['add_time']);
}
$smarty->assign('pages_list', $pages_list);
$smarty->assign('page_arr', $page_arr);
$smarty->assign('page_count', $page_count);
$smarty->assign('pg', $pg);
$smarty->assign('url', 'admin.php?act=page_list&pg=');
$smarty->display('page_list.html');
} elseif ($action == 'del_page') {
$id = intval($_GET['id']);
$sql = 'DELETE FROM ' . table('page') . " WHERE page_id='" . $id . "'";
if ($db->query($sql)) {
$db->query($sql);
sys_message('删除页面成功', $referer_url);
} else {
sys_message('删除页面失败，请重新删除', $referer_url);
$xml_body .= "<pubDate>{$val['add_time']}</pubDate> \n";
$xml_body .= "<guid>{$u}/blog.php?id={$val['blog_id']}</guid> \n";
$xml_body .= "</item> \n";
}
} elseif ($act == 'comments') {
$sql = 'SELECT b.blog_id,b.title,b.url_type,c.user_name,c.content,c.add_time FROM ' . table('blog') . ' AS b LEFT JOIN ' . table('comment') . ' AS c on b.blog_id=c.blog_id' . " ORDER BY c.comment_id DESC ";
if ($comments = $db->getall($sql)) {
$xml_body = '';
foreach ($comments as $key => $val) {
//评论是否还在审核中
if ($val['status'] == 1) {
$val['content'] = '该评论正在审核中';
} else {
$val['content'] = unprocess_text($val['content']);
}
$val['add_time'] = pbtime($val['add_time']);
$url = build_url('blog', $val['blog_id'], $val['url_type']);
$xml_body .= "<item> \n";
$xml_body .= "<title>【评论:{$val['title']}】</title> \n";
$xml_body .= "<author>{$val['user_name']}</author> \n";
$xml_body .= "<link>{$url}</link> \n";
$xml_body .= "<description><![CDATA[{$val['content']}]]></description> \n";
$xml_body .= "<pubDate>{$val['add_time']}</pubDate> \n";
$xml_body .= "<guid>{$url}</guid> \n";
$xml_body .= "</item> \n";
}
}
}
$u = dirname($url);
$logo = $u . '/themes/' . $config['template_name'] . "/logo.jpg";
$xml = "<?xml version=\"1.0\" encoding=\"UTF-8\"?> \n";
* www.simple-log.com
*/
define('IN_PBBLOG', true);
require dirname(__FILE__) . '/includes/core.php';
$id = !empty($_GET['id']) ? intval($_GET['id']) : '1';
$keywords = !empty($_GET['keywords']) ? htmlspecialchars($_GET['keywords']) : '';
/* 根据用户所在组等级和所在页面以及日志密码md5哈希得到缓存编号 */
$pw = isset($_POST['pw']) ? htmlspecialchars(trim($_POST['pw'])) : '';
$cache_id = md5($_SESSION['group_id'] . '-' . $id . '-' . $pw . '-' . $keywords);
/*------------------------------------------------------ */
//-- 判断是否存在缓存，如果存在则调用缓存，反之读取相应内容
/*------------------------------------------------------ */
if (!$smarty->is_cached('diy_page.html', $cache_id)) {
if ($keywords) {
$where = " WHERE b.url_type='" . $keywords . "' ";
} else {
$where = " WHERE b.page_id='" . $id . "' AND type=0 ";
}
$sql = 'SELECT b.page_id,b.title,b.desc,b.add_time,b.content FROM ' . table('page') . ' AS b LEFT JOIN ' . table('user') . ' AS u on b.user_id=u.user_id' . $where;
if ($page = $db->getrow($sql)) {
$page['add_time'] = pbtime($page['add_time']);
$page['content'] = htmlspecialchars_decode($page['content']);
$id = $page['page_id'];
}
$smarty->assign('page', $page);
//调用assign_page_info函数，对页面进行模板初始化，包括页面标题，博客名称，博客描述等
assign_page_info($page['title'], '', $page['desc']);
//调用边栏赋值函数，对页面边栏进行初始化
assign_sidebar_info();
}
$smarty->display('diy_page.html', $cache_id);
$keywords = !empty($_GET['keywords']) ? htmlspecialchars($_GET['keywords']) : '';
/* 根据用户所在组等级和所在页面以及日志密码md5哈希得到缓存编号 */
$pw = isset($_POST['pw']) ? htmlspecialchars(trim($_POST['pw'])) : '';
$cache_id = md5($_SESSION['group_id'] . '-' . $id . '-' . $pw . '-' . $keywords);
/*------------------------------------------------------ */
//-- 判断是否存在缓存，如果存在则调用缓存，反之读取相应内容
/*------------------------------------------------------ */
if (!$smarty->is_cached('blog.html', $cache_id)) {
if ($keywords) {
$where = " WHERE b.url_type='" . $keywords . "' ";
} else {
$where = " WHERE b.blog_id='" . $id . "' ";
}
$sql = 'SELECT b.blog_id,b.title,b.description,b.add_time,b.views,b.comments,b.content,b.password,b.view_group,b.open_type,b.url_type,u.user_name,c.cat_name,c.cat_id,c.url_type as cat_url_type FROM ' . table('blog') . ' AS b LEFT JOIN ' . table('user') . ' AS u on b.user_id=u.user_id' . ' LEFT JOIN ' . table('category') . ' AS c on b.cat_id=c.cat_id ' . $where;
if ($blog = $db->getrow($sql)) {
$blog['add_time'] = pbtime($blog['add_time']);
$blog['content'] = htmlspecialchars_decode($blog['content']);
$id = $blog['blog_id'];
if ($blog['password']) {
if (trim($_POST['pw']) != $blog['password']) {
if ($group_id != 1) {
$blog['content'] = <<<DTD
\t\t\t\t\t\t<form name="form1" method="post" action="blog.php?id={$id}">
\t\t\t\t\t\t请输入查看密码：
\t\t\t\t\t\t<input type="text" name="pw" id="pw" />
\t\t\t\t\t\t<input type="submit" name="button" id="button" value="提交" />
\t\t\t\t\t\t</form>
DTD;
}
}
} else {
