UserClass.php
5.57 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
<?php
define('EmpireCMSAdmin','1');
require("../../class/connect.php");
require("../../class/db_sql.php");
require("../../class/functions.php");
$link=db_connect();
$empire=new mysqlquery();
$editor=1;
//驗證用戶
$lur=is_login();
$logininid=$lur['userid'];
$loginin=$lur['username'];
$loginrnd=$lur['rnd'];
$loginlevel=$lur['groupid'];
$loginadminstyleid=$lur['adminstyleid'];
//ehash
$ecms_hashur=hReturnEcmsHashStrAll();
//驗證權限
CheckLevel($logininid,$loginin,$classid,"user");
//增加部門
function AddUserClass($add,$userid,$username){
global $empire,$dbtbpre;
if(!$add[classname])
{
printerror("EmptyUserClass","history.go(-1)");
}
//驗證權限
CheckLevel($userid,$username,$classid,"user");
$add[classname]=hRepPostStr($add[classname],1);
$sql=$empire->query("insert into {$dbtbpre}enewsuserclass(classname) values('".$add[classname]."');");
$lastid=$empire->lastid();
if($sql)
{
//操作日誌
insert_dolog("classid=".$lastid."<br>classname=".$add[classname]);
printerror("AddUserClassSuccess","UserClass.php".hReturnEcmsHashStrHref2(1));
}
else
{printerror("DbError","history.go(-1)");}
}
//修改部門
function EditUserClass($add,$userid,$username){
global $empire,$dbtbpre;
$classid=(int)$add[classid];
if(!$add[classname]||!$classid)
{
printerror("EmptyUserClass","history.go(-1)");
}
//驗證權限
CheckLevel($userid,$username,$classid,"user");
$add[classname]=hRepPostStr($add[classname],1);
$sql=$empire->query("update {$dbtbpre}enewsuserclass set classname='".$add[classname]."' where classid='$classid'");
if($sql)
{
//操作日誌
insert_dolog("classid=".$classid."<br>classname=".$add[classname]);
printerror("EditUserClassSuccess","UserClass.php".hReturnEcmsHashStrHref2(1));
}
else
{printerror("DbError","history.go(-1)");}
}
//刪除部門
function DelUserClass($classid,$userid,$username){
global $empire,$dbtbpre;
$classid=(int)$classid;
if(!$classid)
{
printerror("NotDelUserClassid","history.go(-1)");
}
//驗證權限
CheckLevel($userid,$username,$classid,"user");
$r=$empire->fetch1("select classname from {$dbtbpre}enewsuserclass where classid='$classid'");
$sql=$empire->query("delete from {$dbtbpre}enewsuserclass where classid='$classid'");
if($sql)
{
//操作日誌
insert_dolog("classid=".$classid."<br>classname=".$r[classname]);
printerror("DelUserClassSuccess","UserClass.php".hReturnEcmsHashStrHref2(1));
}
else
{printerror("DbError","history.go(-1)");}
}
$enews=$_POST['enews'];
if(empty($enews))
{$enews=$_GET['enews'];}
if($enews)
{
hCheckEcmsRHash();
}
if($enews=="AddUserClass")//增加部門
{
AddUserClass($_POST,$logininid,$loginin);
}
elseif($enews=="EditUserClass")//修改部門
{
EditUserClass($_POST,$logininid,$loginin);
}
elseif($enews=="DelUserClass")//刪除部門
{
$classid=$_GET['classid'];
DelUserClass($classid,$logininid,$loginin);
}
else
{}
$sql=$empire->query("select classid,classname from {$dbtbpre}enewsuserclass order by classid desc");
?>
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<title></title>
<link href="../adminstyle/<?=$loginadminstyleid?>/adminstyle.css" rel="stylesheet" type="text/css">
</head>
<body>
<table width="100%" border="0" align="center" cellpadding="3" cellspacing="1">
<tr>
<td><p>位置：<a href="ListUser.php<?=$ecms_hashur['whehref']?>">管理用戶</a> > <a href="UserClass.php<?=$ecms_hashur['whehref']?>">管理部門</a></p>
</td>
</tr>
</table>
<form name="form1" method="post" action="UserClass.php">
<table width="100%" border="0" align="center" cellpadding="3" cellspacing="1" class="tableborder">
<?=$ecms_hashur['form']?>
<tr class="header">
<td height="25">增加部門:
<input name=enews type=hidden id="enews" value=AddUserClass>
</td>
</tr>
<tr>
<td height="25" bgcolor="#FFFFFF"> 部門名稱:
<input name="classname" type="text" id="classname">
<input type="submit" name="Submit" value="增加">
<input type="reset" name="Submit2" value="重置"></td>
</tr>
</table>
</form>
<table width="100%" border="0" align="center" cellpadding="3" cellspacing="1" class="tableborder">
<tr class="header">
<td width="10%"><div align="center">ID</div></td>
<td width="59%" height="25"><div align="center">部門名稱</div></td>
<td width="31%" height="25"><div align="center">操作</div></td>
</tr>
<?
while($r=$empire->fetch($sql))
{
?>
<form name=form2 method=post action=UserClass.php>
<?=$ecms_hashur['form']?>
<input type=hidden name=enews value=EditUserClass>
<input type=hidden name=classid value=<?=$r[classid]?>>
<tr bgcolor="#FFFFFF" onmouseout="this.style.backgroundColor='#ffffff'" onmouseover="this.style.backgroundColor='#C3EFFF'">
<td><div align="center"><?=$r[classid]?></div></td>
<td height="25"> <div align="center">
<input name="classname" type="text" id="classname" value="<?=$r[classname]?>">
</div></td>
<td height="25"><div align="center">
<input type="submit" name="Submit3" value="修改">
<input type="button" name="Submit4" value="刪除" onclick="if(confirm('確認要刪除?')){self.location.href='UserClass.php?enews=DelUserClass&classid=<?=$r[classid]?><?=$ecms_hashur['href']?>';}">
</div></td>
</tr>
</form>
<?
}
db_close();
$empire=null;
?>
</table>
</body>
</html>