word.php
6.15 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
<?php
define('EmpireCMSAdmin','1');
require("../../class/connect.php");
require("../../class/db_sql.php");
require("../../class/functions.php");
require "../".LoadLang("pub/fun.php");
$link=db_connect();
$empire=new mysqlquery();
$editor=1;
//驗證用戶
$lur=is_login();
$logininid=$lur['userid'];
$loginin=$lur['username'];
$loginrnd=$lur['rnd'];
$loginlevel=$lur['groupid'];
$loginadminstyleid=$lur['adminstyleid'];
//ehash
$ecms_hashur=hReturnEcmsHashStrAll();
//驗證權限
CheckLevel($logininid,$loginin,$classid,"word");
//------------------增加禁用字符
function AddWord($oldword,$newword,$userid,$username){
global $empire,$dbtbpre;
if(!$oldword)
{printerror("EmptyWord","history.go(-1)");}
//驗證權限
CheckLevel($userid,$username,$classid,"word");
$sql=$empire->query("insert into {$dbtbpre}enewswords(oldword,newword) values('".eaddslashes($oldword)."','".eaddslashes($newword)."');");
$wordid=$empire->lastid();
GetConfig();//更新緩存
if($sql)
{
//操作日誌
insert_dolog("wordid=".$wordid);
printerror("AddWordSuccess","word.php".hReturnEcmsHashStrHref2(1));
}
else
{printerror("DbError","history.go(-1)");}
}
//----------------修改禁用字符
function EditWord($wordid,$oldword,$newword,$userid,$username){
global $empire,$dbtbpre;
if(!$oldword||!$wordid)
{printerror("EmptyWord","history.go(-1)");}
//驗證權限
CheckLevel($userid,$username,$classid,"word");
$wordid=(int)$wordid;
$sql=$empire->query("update {$dbtbpre}enewswords set oldword='".eaddslashes($oldword)."',newword='".eaddslashes($newword)."' where wordid='$wordid'");
GetConfig();//更新緩存
if($sql)
{
//操作日誌
insert_dolog("wordid=".$wordid);
printerror("EditWordSuccess","word.php".hReturnEcmsHashStrHref2(1));
}
else
{printerror("DbError","history.go(-1)");}
}
//---------------刪除禁用字符
function DelWord($wordid,$userid,$username){
global $empire,$dbtbpre;
$wordid=(int)$wordid;
if(!$wordid)
{printerror("NotDelWordid","history.go(-1)");}
//驗證權限
CheckLevel($userid,$username,$classid,"word");
$sql=$empire->query("delete from {$dbtbpre}enewswords where wordid='$wordid'");
GetConfig();//更新緩存
if($sql)
{
//操作日誌
insert_dolog("wordid=".$wordid);
printerror("DelWordSuccess","word.php".hReturnEcmsHashStrHref2(1));
}
else
{printerror("DbError","history.go(-1)");}
}
$enews=$_POST['enews'];
if(empty($enews))
{$enews=$_GET['enews'];}
if($enews)
{
hCheckEcmsRHash();
}
//增加過濾字符
if($enews=="AddWord")
{
$oldword=$_POST['oldword'];
$newword=$_POST['newword'];
AddWord($oldword,$newword,$logininid,$loginin);
}
//修改過濾字符
elseif($enews=="EditWord")
{
$wordid=$_POST['wordid'];
$oldword=$_POST['oldword'];
$newword=$_POST['newword'];
EditWord($wordid,$oldword,$newword,$logininid,$loginin);
}
//刪除過濾字符
elseif($enews=="DelWord")
{
$wordid=$_GET['wordid'];
DelWord($wordid,$logininid,$loginin);
}
else
{}
$page=(int)$_GET['page'];
$page=RepPIntvar($page);
$start=0;
$line=30;//每頁顯示條數
$page_line=12;//每頁顯示鏈接數
$offset=$page*$line;//總偏移量
$search='';
$search.=$ecms_hashur['ehref'];
$totalquery="select count(*) as total from {$dbtbpre}enewswords";
$num=$empire->gettotal($totalquery);
$query="select wordid,oldword,newword from {$dbtbpre}enewswords order by wordid desc limit $offset,$line";
$sql=$empire->query($query);
$returnpage=page2($num,$line,$page_line,$start,$page,$search);
?>
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<title>過濾字符</title>
<link href="../adminstyle/<?=$loginadminstyleid?>/adminstyle.css" rel="stylesheet" type="text/css">
</head>
<body>
<table width="100%" border="0" align="center" cellpadding="3" cellspacing="1">
<tr>
<td>位置:<a href="word.php<?=$ecms_hashur['whehref']?>">管理過濾字符</a></td>
</tr>
</table>
<form name="form1" method="post" action="word.php">
<input type=hidden name=enews value=AddWord>
<table width="100%" border="0" align="center" cellpadding="3" cellspacing="1" class="tableborder">
<?=$ecms_hashur['form']?>
<tr class="header">
<td height="25">增加過濾字符:</td>
</tr>
<tr>
<td height="25" bgcolor="#FFFFFF"> 將新聞內容包含
<textarea name="oldword" cols="45" rows="5" id="oldword"></textarea>
替換成
<textarea name="newword" cols="45" rows="5" id="newword"></textarea>
<input type="submit" name="Submit" value="增加">
<input type="reset" name="Submit2" value="重置"></td>
</tr>
</table>
</form>
<table width="100%" border="0" align="center" cellpadding="3" cellspacing="1" class="tableborder">
<tr class="header">
<td width="86%" height="25">過濾字符</td>
<td width="14%" height="25"><div align="center">操作</div></td>
</tr>
<?
while($r=$empire->fetch($sql))
{
?>
<form name=form2 method=post action=word.php>
<?=$ecms_hashur['form']?>
<input type=hidden name=enews value=EditWord>
<input type=hidden name=wordid value=<?=$r[wordid]?>>
<tr bgcolor="#FFFFFF" onmouseout="this.style.backgroundColor='#ffffff'" onmouseover="this.style.backgroundColor='#C3EFFF'">
<td height="25"> 將新聞內容包含
<textarea name="oldword" cols="43" rows="5" id="oldword"><?=ehtmlspecialchars($r[oldword])?></textarea>
替換成
<textarea name="newword" cols="43" rows="5" id="newword"><?=ehtmlspecialchars($r[newword])?></textarea>
</td>
<td height="25"><div align="center">
<input type="submit" name="Submit3" value="修改">
<input type="button" name="Submit4" value="刪除" onclick="if(confirm('確認要刪除?')){self.location.href='word.php?enews=DelWord&wordid=<?=$r[wordid]?><?=$ecms_hashur['href']?>';}">
</div></td>
</tr>
</form>
<?
}
db_close();
$empire=null;
?>
<tr bgcolor="#FFFFFF">
<td height="25" colspan="2">
<?=$returnpage?>
</td>
</tr>
</table>
</body>
</html>