AddSql.php
2.71 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
<?php
define('EmpireCMSAdmin','1');
require("../../class/connect.php");
require("../../class/db_sql.php");
require("../../class/functions.php");
$link=db_connect();
$empire=new mysqlquery();
$editor=1;
//驗證用戶
$lur=is_login();
$logininid=$lur['userid'];
$loginin=$lur['username'];
$loginrnd=$lur['rnd'];
$loginlevel=$lur['groupid'];
$loginadminstyleid=$lur['adminstyleid'];
//ehash
$ecms_hashur=hReturnEcmsHashStrAll();
//驗證權限
CheckLevel($logininid,$loginin,$classid,"execsql");
$enews=RepPostStr($_GET['enews'],1);
if(empty($enews))
{
$enews='AddSql';
}
$url="<a href='ListSql.php".$ecms_hashur['whehref']."'>管理SQL語句</a> > 增加SQL語句";
$postword='增加SQL語句';
if($enews=='EditSql')
{
$id=intval($_GET['id']);
$r=$empire->fetch1("select * from {$dbtbpre}enewssql where id='$id'");
$url="<a href='ListSql.php".$ecms_hashur['whehref']."'>管理SQL語句</a> > 修改SQL語句: <b>".$r[sqlname]."</b>";
$postword='修改SQL語句';
}
db_close();
$empire=null;
?>
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<title><?=$postword?></title>
<link href="../adminstyle/<?=$loginadminstyleid?>/adminstyle.css" rel="stylesheet" type="text/css">
</head>
<body>
<table width="100%" border="0" align="center" cellpadding="3" cellspacing="1">
<tr>
<td height="25">位置：<?=$url?></td>
</tr>
</table>
<form action="DoSql.php" method="POST" name="sqlform">
<table width="100%" border="0" align="center" cellpadding="3" cellspacing="1" class="tableborder">
<?=$ecms_hashur['form']?>
<tr class="header">
<td height="25"><div align="center"><?=$postword?></div></td>
</tr>
<tr>
<td height="25" bgcolor="#FFFFFF"><div align="center">(多條語句請用"回車"格開,每條語句以";"結束，數據表前綴可用：「[!db.pre!]"表示)</div></td>
</tr>
<tr>
<td height="25" bgcolor="#FFFFFF"><div align="center">
<textarea name="sqltext" cols="90" rows="12" id="sqltext"><?=ehtmlspecialchars($r[sqltext])?></textarea>
</div></td>
</tr>
<tr>
<td height="25" bgcolor="#FFFFFF"><div align="center">SQL名稱：
<input name="sqlname" type="text" id="sqlname" value="<?=$r[sqlname]?>">
<input type="submit" name="Submit3" value="保存">
<input type="reset" name="Submit2" value="重置">
<input name="enews" type="hidden" id="enews" value="<?=$enews?>">
<input name="id" type="hidden" id="id" value="<?=$id?>">
</div></td>
</tr>
</table>
</form>
</body>
</html>