exit; } if (pc_file_num($link, $pc["UID"], $pid) + 1 > $pc["NLIM"]) { pc_html_init("gb2312", stripslashes($pc["NAME"])); html_error_quit("目标文件夹中的文件数已达上限 " . $pc["NLIM"] . " 个!"); exit; } if (intval($_COOKIE["BLOGFAVNID"])) { if ($_COOKIE["BLOGFAVACTION"] == "favcut") { $query = "UPDATE nodes SET `pid` = '" . $pid . "' WHERE `nid` = '" . intval($_COOKIE["BLOGFAVNID"]) . "';"; } elseif ($_COOKIE["BLOGFAVACTION"] == "favcopy") { $query = "SELECT * FROM nodes WHERE `nid` = '" . intval($_COOKIE["BLOGFAVNID"]) . "' LIMIT 0 , 1 ;"; $result = mysql_query($query, $link); $rows = mysql_fetch_array($result); mysql_free_result($result); $query = "INSERT INTO `nodes` ( `nid` , `pid` , `type` , `source` , `hostname` , `changed` , `created` , `uid` , `comment` , `commentcount` , `subject` , `body` , `access` , `visitcount` , `tid` , `emote` ,`htmltag`) " . "VALUES ('', '" . $pid . "', '0', '" . addslashes($rows["source"]) . "', '" . addslashes($rows["hostname"]) . "', NOW( ) , '" . addslashes($rows["created"]) . "', '" . $pc["UID"] . "', '" . intval($rows["comment"]) . "', '" . intval($rows["commentcount"]) . "', '" . addslashes($rows["subject"]) . "', '" . addslashes($rows["body"]) . "', '3', '" . intval($rows["visitcount"]) . "', '" . intval($rows["tid"]) . "', '" . intval($rows["emote"]) . "','" . intval($rows["htmltag"]) . "');"; } mysql_query($query, $link); } setcookie("BLOGFAVACTION"); setcookie("BLOGFAVNID"); pc_html_init("gb2312", stripslashes($pc["NAME"])); pc_update_record($link, $pc["UID"]); $log_action = "CUT/COPY FAV"; pc_return("pcdoc.php?userid=" . $pc["USER"] . "&tag=3&pid=" . $pid); } if (pc_is_groupwork($pc)) { pc_group_logs($link, $pc, $log_action, $log_content); } html_normal_quit(); }
$query = 'UPDATE filter SET state = 2 WHERE fid = ' . $fid . ' LIMIT 1;'; mysql_query($query); } } if (strtolower($_GET['filter']) == 'r') { if ($node[state] == 4) { $nid = $node[nid]; $query = 'SELECT * FROM nodes WHERE nid = ' . $nid . ' LIMIT 1;'; $result = mysql_query($query); $node_o = mysql_fetch_array($result); if (!$node_o) { html_error_quit("作者已经将文章删除"); } if ($node_o[body] != '@ @ 本文已被管理员屏蔽 @ @' && !isset($_GET["or"])) { html_error_quit("原文已经被修改过<br/><a href='pcadmin_flt.php?filter=r&or=1&fid=" . $fid . "'>强行恢复</a>"); } $body = addslashes($node[body]); $query = "UPDATE nodes SET `body` = '" . $body . "', `changed`='" . $node[changed] . "' where `nid` = " . $nid . ";"; if (!mysql_query($query)) { html_error_quit("修改原文出错"); } pc_update_record($link, $node[uid]); $query = "DELETE FROM filter WHERE `fid` = '" . $fid . "' "; if (!mysql_query($query)) { html_error_quit("从过滤表删除出错,但是文章已经恢复..."); } } } pc_db_close($link); pc_return("pcdoc.php?userid=_filter&tag=" . $node[state]);
<?php require "pcadmin_inc.php"; pc_admin_check_permission(); $link = pc_db_connect(); $nid = intval($_GET["nid"]); $query = 'SELECT * FROM filter WHERE nid = ' . $nid . ' LIMIT 1;'; $result = mysql_query($query); $node = mysql_fetch_array($result); if ($node) { html_error_quit("文章已经被删除过"); } $query = 'SELECT * FROM nodes WHERE nid = ' . $nid . ' LIMIT 1;'; $result = mysql_query($query); $node = mysql_fetch_array($result); if (!$node) { html_error_quit("文章不存在"); } $uid = $node[uid]; $query = "INSERT INTO `filter` ( `pid` , `nid` , `tid` , `type` , `state` , `recuser` , `emote` , `hostname` , `changed` , `created` , `uid` , `username` , `comment` , `commentcount` , `subject` , `body` , `access` , `visitcount` , `htmltag`,`trackback` ,`trackbackcount`,`nodetype`,`theme`,`publisher`) " . "VALUES ( '" . $node[pid] . "' , '" . $node[nid] . "' , '" . $node[tid] . "' , '" . $node[type] . "' , 4 , '" . $currentuser["userid"] . "' , '" . $node[emote] . "' , '" . $node[hostname] . "' , '" . $node[changed] . "' , '" . $node[created] . "' , '" . $node[uid] . "' , '" . addslashes($_GET["userid"]) . "' , '" . $node[comment] . "' , '" . $node[commentcount] . "' , '" . $node[subject] . "' , '" . $node[body] . "' , '" . $node[access] . "' , '" . $node[visitcount] . "' , '" . $node[htmltag] . "','" . $node[trackback] . "' ,'" . $node[trackbackcount] . "','" . $node[nodetype] . "','" . $node[theme] . "','" . $node[publisher] . "');"; if (!mysql_query($query)) { html_error_quit("插入过滤表出错"); } $query = "UPDATE nodes SET `body` = '@ @ 本文已被管理员屏蔽 @ @' where `nid` = " . $nid . ";"; if (!mysql_query($query)) { html_error_quit("修改原文出错"); } pc_update_record($link, $uid); pc_db_close($link); pc_return("pcdoc.php?userid=_filter&tag=4");
</table> </form></center> <p align="center"> <?php /** * 水木的web代码bbslib和cgi部分是修改于NJUWWWBBS-0.9,此部分 * 代码遵循原有的nju www bbs的版权声明(GPL)。php部分的代码( * phplib以及php页面)不再遵循GPL,正在考虑使用其他开放源码的版 * 权声明(BSD或者MPL之类)。 * * 希望使用水木代码的Web站点加上powered by kbs的图标.该图标 * 位于html/images/poweredby.gif目录,链接指向http://dev.kcn.cn * 使用水木代码的站点可以通过dev.kcn.cn获得代码的最新信息. * */ powered_by_smth(); ?> </p> <?php } elseif ($act == "edit2") { $emote = intval($_POST["emote"]); $uid = intval($_GET["id"]); $nid = intval($_GET["nid"]); $useHtmlTag = $_POST["htmltag"] == 1 ? 1 : 0; $query = "UPDATE `comments` SET `subject` = '" . addslashes($_POST["subject"]) . "',`changed` = '" . date("YmdHis") . "',`body` = '" . addslashes(html_editorstr_format($_POST["blogbody"])) . "' , `emote` = '" . $emote . "' , `htmltag` = '" . $useHtmlTag . "' WHERE `cid` = '" . $cid . "' AND `username` = '" . $currentuser["userid"] . "' LIMIT 1 ;"; mysql_query($query, $link); pc_return("pccon.php?id=" . $uid . "&nid=" . $nid . "&s=all"); } pc_db_close($link); html_normal_quit(); }