members_add.php

来自「程序安装简便容易」· PHP 代码 · 共 61 行

<?php
!$_SERVER['PHP_SELF'] && $_SERVER['PHP_SELF']=$_SERVER['SCRIPT_NAME'];
substr($_SERVER['PHP_SELF'],-9,-4)!=='admin' && exit('Forbidden');

if(!empty($_GET['do'])) {
	if($_GET['do']=='add') {
		$username=$_POST['username'];
		$password=$_POST['password'];
		$email=$_POST['email'];
		$groupid=$_POST['groupid'];
		if(!$groupid) $groupid='1';
		if(!$username || !$password || !$email) {
			echo "<script language=\"javascript\">alert(\"用户名,密码或email为空！请填写！\")</script>";
			echo "<meta http-equiv='refresh' content='0;url=admin.php?job=members_add'>";
			exit;
		} else {
			$username=trim($username);
			$s_key=array("\\",'&',' ',"'",'"','/','*',',','<','>',"\r","\t","\n",'#','|','.',";",);
			foreach($s_key as $value){
				if(strpos($username,$value)!==false) {
					echo "<script language=\"javascript\">alert(\"用户名包含不可接受字符\“$value\”！\")</script>";
					echo "<meta http-equiv='refresh' content='0;url=admin.php?job=members_add'>";
					exit;
				}
				if(strpos($password,$value)!==false) { 
					echo "<script language=\"javascript\">alert(\"密码包含不可接受字符\“$value\”！\")</script>";
					echo "<meta http-equiv='refresh' content='0;url=admin.php?job=members_add'>";
					exit;
				}
			}
			if(strlen($username)>14) {
				echo "<script language=\"javascript\">alert(\"用户名太长！\")</script>";
				echo "<meta http-equiv='refresh' content='0;url=admin.php?job=members_add'>";
				exit;
			}
			$password=md5($password);
			if($email && !ereg("^[-a-zA-Z0-9_\.]+\@([0-9A-Za-z][0-9A-Za-z-]+\.)+[A-Za-z]{2,3}$",$email)){
				echo "<script language=\"javascript\">alert(\"Email格式错误！\")</script>";
				echo "<meta http-equiv='refresh' content='0;url=admin.php?job=members_add'>";
				exit;
			}
			$rs=get_one("SELECT COUNT(*) AS count FROM duoxun_members WHERE username='$username'");
			if($rs['count']>0) {
				echo "<script language=\"javascript\">alert(\"该用户名已经被注册了,请重新填写！\")</script>";
				echo "<meta http-equiv='refresh' content='0;url=admin.php?job=members_add'>";
				exit;
			}
			query("INSERT INTO duoxun_members(username,password,email,groupid,gender,site,regdate,regip,lastip,lastlogin) VALUES('$username','$password','$email','$groupid','3','http://www.duoxun.com','$timestamp','$onlineip','$onlineip','$timestamp')");
			echo "<script language=\"javascript\">alert(\"新用户添加成功！请继续操作！\")</script>";
			echo "<meta http-equiv='refresh' content='0;url=admin.php?job=members_add'>";
			exit;
		}
	}
}		
		



require_once template('members_add','admin');

?>