adm_order.php

这个版本只是修正了一些BUG

<?php
/***********************************************
	adm_order.php

	Version  : 1.0.0
	Author   : Tracemouse ([e-mail])
	Copyright: http://www.vitci.com
	Writed   : 2003/12/29
	Modified : 2004/03/18
************************************************/

require "./common.php";
$file_name='./adm_order.php';

if ((!$editsubmit)&&(!$searchsubmit)&&(!$listsubmit))  //未发送表单
{
	if ($action == 'chg')      //修改页面
    	{
 		$query = $db->query("SELECT * FROM $table_orders WHERE oid='$oid'");
 		if($dbq_rec = $db->fetch_array($query))
        	{
    		 	$oid=$dbq_rec['oid'];
             		$postuser=$dbq_rec['username'];
             		$did=$dbq_rec['did'];
             		$pid=$dbq_rec['pid'];
             		$totalprice=$dbq_rec['totalprice'];
             		$realname=$dbq_rec['realname'];
             		$addr=$dbq_rec['addr'];
             		$postalcode=$dbq_rec['postalcode'];
             		$tel=$dbq_rec['tel'];
             		$postdate=gmdate($dateformat,$dbq_rec['posttime']);
             		$mobile=$dbq_rec['mobile'];
  		}
 		$query = $db->query("SELECT * FROM $table_orderstatus");
        	$status_select="";
        	while($dbq_rec = $db->fetch_array($query))
        	{
   			$isselected = ($dbq_rec['pid'] == $pid)?"selected":"";
   			$status_select = $status_select."<option ".$isselected." value=".$dbq_rec['pid'].">&darr; ".$dbq_rec['subject']."</option>";
 		}
        	$query = $db->query("SELECT * FROM $table_delivery");
        	$delivery_select="";
        	while($dbq_rec = $db->fetch_array($query))
        	{
   			$isselected = ($dbq_rec['did'] == $did)?"selected":"";$dbq_rec['expenses'] = number_format($dbq_rec['expenses'],0);
   			if ($dbq_rec['did'] == $did) $expenses=$dbq_rec['expenses'];
   			$delivery_select = $delivery_select."<option ".$isselected." value=".$dbq_rec['did'].">&rarr; ".$dbq_rec['subject']." 【附加费用： ".$dbq_rec['expenses']."元】</option>";
 		}
 		
 		$query = $db->query("SELECT a.oid,a.productid,a.amount,a.price,b.productname FROM $table_basket a, $table_products b where a.oid = '$oid' and a.username = '$postuser' and a.productid=b.productid order by a.productid");
        	$productlist=array();
        	$sumprice=0;
        	while($dbq_rec = $db->fetch_array($query))
        	{
        		$dbq_rec['pricesum']=$dbq_rec['price']*$dbq_rec['amount'];
        		$sumprice=$sumprice + $dbq_rec['pricesum'];
        		$dbq_rec['price'] = number_format($dbq_rec['price'],2);
   			$productlist[]=$dbq_rec;	
   		}
   		$sumprice = number_format($sumprice+$expenses,2);
        	$display = 'edit';
	}
    	elseif ($action=='del')
    	{
    		$sqlstr="UPDATE $table_orders SET pid = 0 WHERE oid = '$oid'";
        	if($query=$db->query($sqlstr))        	gotourl($language['delsuccess'],$file_name);
        	else						        	gotourl($language['db_err'].":<br>".$sqlstr);
    	}
	else  // 查询页面
	{
        	$query=$db->query("SELECT * FROM $table_orderstatus ORDER BY pid");
        	$statuslist=array();
        	while($dbq_rec=$db->fetch_array($query))
        	{
        		$statuslist[]=$dbq_rec;
        	}
        	$query=$db->query("SELECT * FROM $table_delivery ORDER BY did");
        	$deliverylist=array();
        	while($dbq_rec=$db->fetch_array($query))
        	{
        		$deliverylist[]=$dbq_rec;
        	}
        	unset($dbq_rec);unset($query);
        	$enddate=gmdate($dateformat,$timestamp);
        	$display = 'search';
	}
}
elseif ($editsubmit)           //发送表单处理
{
    if ($pid=8)
    {
    	$addcredits=intval(($totalprice/100)*$basecredits);
    	$sqlstr="UPDATE	$table_members SET credits =credits +$addcredits where username='$postuser'";
    	$query = $db->query($sqlstr);
    }
	$sqlstr="UPDATE	$table_orders SET totalprice = $totalprice,
             		did=$did,pid=$pid,
             		realname='$realname',addr='$addr',postalcode='$postalcode',
    		 	tel='$tel',mobile='$mobile'
    		 	WHERE oid = '$oid'";

  	if($query = $db->query($sqlstr))   		gotourl($language['editsuccess']);
 	else							  		gotourl($language['db_err'].":<br>".$sqlstr);

}
elseif ($searchsubmit)
{

	$reclist = array();
    	/*
    	if($isdelete)
    	{
    		$sqlstr="delete from $table_orders  where pid < 999 "; 
    		$sqlstr=(empty($oid))?$sqlstr:$sqlstr."AND oid = '$oid' ";
    		$sqlstr=(empty($postuser))?$sqlstr:$sqlstr."AND username = '$postuser' ";
    		$sqlstr=($pid == 999)?$sqlstr:$sqlstr."AND pid = $pid ";
    		$sqlstr=(empty($did))?$sqlstr:$sqlstr."AND did = $did ";
    		if(!empty($startdate))
    		{
        		$pieces = explode("-", $startdate);
        		$year=$pieces[0];
        		$month=$pieces[1];
        		$day=$pieces[2];
        		$starttime=mktime(0,0,0,$month,$day,$year);
        		$sqlstr.="AND posttime > $starttime ";
    		}
    		if(!empty($enddate))
    		{
        		$pieces = explode("-", $enddate);
        		$year=$pieces[0];
        		$month=$pieces[1];
        		$day=$pieces[2];
        		$endtime=mktime(24,60,60,$month,$day,$year);
        		$sqlstr.="AND posttime < $endtime ";
    		}
    		$query = $db->query($sqlstr);	
    	}*/
    	$sqlstr="SELECT a.oid,a.username,a.totalprice,a.posttime,a.pid,a.did,b.subject FROM $table_orders a, $table_orderstatus b WHERE a.pid = b.pid ";
    	$sqlstr=(empty($oid))?$sqlstr:$sqlstr."AND a.oid = '$oid' ";
    	$sqlstr=(empty($postuser))?$sqlstr:$sqlstr."AND a.username = '$postuser' ";
    	$sqlstr=($pid == 999)?$sqlstr:$sqlstr."AND a.pid = $pid ";
    	$sqlstr=(empty($did))?$sqlstr:$sqlstr."AND a.did = $did ";
    	if(!empty($startdate))
    	{
        	$pieces = explode("-", $startdate);
        	$year=$pieces[0];
        	$month=$pieces[1];
        	$day=$pieces[2];
        	$starttime=mktime(0,0,0,$month,$day,$year);
        	$sqlstr.="AND a.posttime > $starttime ";
    	}
    	if(!empty($enddate))
    	{
        	$pieces = explode("-", $enddate);
        	$year=$pieces[0];
        	$month=$pieces[1];
        	$day=$pieces[2];
        	$endtime=mktime(24,60,60,$month,$day,$year);
        	$sqlstr.="AND a.posttime < $endtime ";
    	}
    	$sqlstr.="ORDER BY a.posttime,a.oid,a.username";
    	 
    	$query = $db->query($sqlstr);
    	while($dbq_rec = $db->fetch_array($query))
    	{
    		$oid=$dbq_rec['oid'];
    		if($isdelete)
    		{
    			$sqlstr="delete from $table_basket where oid='$oid'";
    		 
    			if(!($query1 = $db->query($sqlstr)))	gotourl($language['db_err'].":<br>".$sqlstr);
    			$sqlstr="delete from $table_orders where oid='$oid'";
    		 
    			if(!($query1 = $db->query($sqlstr)))	gotourl($language['db_err'].":<br>".$sqlstr);
    		}
    		else
    		{
    			$dbq_rec['postdate'] = gmdate($dateformat.' '.$timeformat,$dbq_rec['posttime']);
   			$reclist[] = $dbq_rec;
   		}
	}
	if($isdelete)		gotourl($language['delsuccess'],$file_name);
  	$display = 'list';
}

include template('order');
?>