editrec.php

火花留言本

<?php
// *** Restrict Access To Page: Grant or deny access to this page
$FF_authorizedUsers=" ";
$FF_authFailedURL="sparklog.php";
$FF_grantAccess=0;
session_start();
if (isset($HTTP_SESSION_VARS["MM_Username"])) {
  if (true || !(isset($HTTP_SESSION_VARS["MM_UserAuthorization"])) || $HTTP_SESSION_VARS["MM_UserAuthorization"]=="" || strpos($FF_authorizedUsers, $HTTP_SESSION_VARS["MM_UserAuthorization"])) {
    $FF_grantAccess = 1;
  }
}
if (!$FF_grantAccess) {
  $FF_qsChar = "?";
  if (strpos($FF_authFailedURL, "?")) $FF_qsChar = "&";
  $FF_referrer = $HTTP_SERVER_VARS['PHP_SELF'];
  if (isset($HTTP_SERVER_VARS['QUERY_STRING']) && strlen($HTTP_SERVER_VARS['QUERY_STRING']) > 0) $FF_referrer .= "?" . $HTTP_SERVER_VARS['QUERY_STRING'];
  $FF_authFailedURL = $FF_authFailedURL . $FF_qsChar . "accessdenied=" . urlencode($FF_referrer);
  header("Location: $FF_authFailedURL");
  exit;
}

$currentPage = $_SERVER["PHP_SELF"];

$maxRows_RecBoard = 8;
$pageNum_RecBoard = 0;
if (isset($_GET['pageNum_RecBoard'])) {
  $pageNum_RecBoard = $_GET['pageNum_RecBoard'];
}
$startRow_RecBoard = $pageNum_RecBoard * $maxRows_RecBoard;

mysql_select_db($database_connBoard, $connBoard);
$query_RecBoard = "SELECT * FROM board ORDER BY digiB_id DESC";
$query_limit_RecBoard = sprintf("%s LIMIT %d, %d", $query_RecBoard, $startRow_RecBoard, $maxRows_RecBoard);
$RecBoard = mysql_query($query_limit_RecBoard, $connBoard) or die(mysql_error());
$row_RecBoard = mysql_fetch_assoc($RecBoard);

if (isset($_GET['totalRows_RecBoard'])) {
  $totalRows_RecBoard = $_GET['totalRows_RecBoard'];
} else {
  $all_RecBoard = mysql_query($query_RecBoard);
  $totalRows_RecBoard = mysql_num_rows($all_RecBoard);
}
$totalPages_RecBoard = ceil($totalRows_RecBoard/$maxRows_RecBoard)-1;

$queryString_RecBoard = "";
if (!empty($_SERVER['QUERY_STRING'])) {
  $params = explode("&", $_SERVER['QUERY_STRING']);
  $newParams = array();
  foreach ($params as $param) {
    if (stristr($param, "pageNum_RecBoard") == false && 
        stristr($param, "totalRows_RecBoard") == false) {
      array_push($newParams, $param);
    }
  }
  if (count($newParams) != 0) {
    $queryString_RecBoard = "&" . htmlentities(implode("&", $newParams));
  }
}
$queryString_RecBoard = sprintf("&totalRows_RecBoard=%d%s", $totalRows_RecBoard, $queryString_RecBoard);

$MM_paramName = ""; 

// *** Go To Record and Move To Record: create strings for maintaining URL and Form parameters
// create the list of parameters which should not be maintained
$MM_removeList = "&index=";
if ($MM_paramName != "") $MM_removeList .= "&".strtolower($MM_paramName)."=";
$MM_keepURL="";
$MM_keepForm="";
$MM_keepBoth="";
$MM_keepNone="";
// add the URL parameters to the MM_keepURL string
reset ($HTTP_GET_VARS);
while (list ($key, $val) = each ($HTTP_GET_VARS)) {
	$nextItem = "&".strtolower($key)."=";
	if (!stristr($MM_removeList, $nextItem)) {
		$MM_keepURL .= "&".$key."=".urlencode($val);
	}
}
// add the URL parameters to the MM_keepURL string
if(isset($HTTP_POST_VARS)){
	reset ($HTTP_POST_VARS);
	while (list ($key, $val) = each ($HTTP_POST_VARS)) {
		$nextItem = "&".strtolower($key)."=";
		if (!stristr($MM_removeList, $nextItem)) {
			$MM_keepForm .= "&".$key."=".urlencode($val);
		}
	}
}
// create the Form + URL string and remove the intial '&' from each of the strings
$MM_keepBoth = $MM_keepURL."&".$MM_keepForm;
if (strlen($MM_keepBoth) > 0) $MM_keepBoth = substr($MM_keepBoth, 1);
if (strlen($MM_keepURL) > 0)  $MM_keepURL = substr($MM_keepURL, 1);
if (strlen($MM_keepForm) > 0) $MM_keepForm = substr($MM_keepForm, 1);
?>