bbsal.php

来自「linux/unix环境下的建站系统」· PHP 代码 · 共 504 行 · 第 1/2 页

<?php
	require("www2-funcs.php");
	login_init();
	assert_login();

	$hostname=bbs_sysconf_str("MYSQLHOST");
	$username=bbs_sysconf_str("MYSQLUSER");
	$password=bbs_sysconf_str("MYSQLPASSWORD");
	$dbname=bbs_sysconf_str("MYSQLSMSDATABASE");

function al_print_form($al){
?>
<table border="0">
<tr><td>姓名:</td><td><input name="t_name" maxlength=13 size=13 value=<?php echo htmlspecialchars($al[2]);?>></td></tr>
<tr><td>分组:</td><td><input name="t_group" maxlength=13 size=13 value=<?php echo htmlspecialchars($al[15]);?>></td></tr>
<tr><td>bbsid:</td><td><input name="t_bbsid" maxlength=13 size=13 value=<?php echo htmlspecialchars($al[3]);?>></td></tr>
<tr><td>学校:</td><td><input name="t_school" size=50  value=<?php echo htmlspecialchars($al[4]);?>></td></tr>
<tr><td>邮政编码:</td><td><input name="t_zipcode" maxlength=6 size=6  value=<?php echo htmlspecialchars($al[5]);?>></td></tr>
<tr><td>家庭住址:</td><td><input name="t_homeaddr" size=50 value=<?php echo htmlspecialchars($al[6]);?>></td></tr>
<tr><td>工作地址:</td><td><input name="t_companyaddr" size=50 value=<?php echo htmlspecialchars($al[7]);?>></td></tr>
<tr><td>家庭电话:</td><td><input name="t_tel_h" maxlength=20 size=20 value=<?php echo htmlspecialchars($al[8]);?>></td></tr>
<tr><td>工作电话:</td><td><input name="t_tel_o" maxlength=20 size=20 value=<?php echo htmlspecialchars($al[9]);?>></td></tr>
<tr><td>手机号码:</td><td><input name="t_mobile" maxlength=13 size=13 value=<?php echo htmlspecialchars($al[10]);?>></td></tr>
<tr><td>email:</td><td><input name="t_email" maxlength=30 size=30 value=<?php echo htmlspecialchars($al[11]);?>></td></tr>
<tr><td>qq:</td><td><input name="t_qq" maxlength=10 size=10 value=<?php echo htmlspecialchars($al[12]);?>></td></tr>
<tr><td>生日:</td><td><input name="t_birth_year" maxlength=4 size=4 value=<?php echo substr($al[13],0,4);?>>年<input name="t_birth_month" maxlength=2 size=2 value=<?php echo substr($al[13],5,2);?>>月<input name="t_birth_day" maxlength=2 size=2 value=<?php echo substr($al[13],8,2);?>>日</td></tr>
<tr><td>备注:</td><td><input name="t_memo" size=50 value=<?php echo htmlspecialchars($al[14]);?>></td></tr>
</table>
<center>
<input type=submit name=submit value="提交">
<input type=reset name=reset value="重置">
</center>
</form>

<?php
}
	if( $_GET["start"] ){
		$startnum = $_GET["start"];
	}else if( $_POST["start"] ){
		$startnum = $_POST["start"];
	}else
		$startnum = 0;
	settype($startnum,"integer");

	if( $_GET["count"] ){
		$count = $_GET["count"];
	}else if( $_POST["count"] ){
		$count = $_POST["count"];
	}else
		$count = 10;
	settype($count,"integer");

	if( $_GET["desc"] ){
		$desc = $_GET["desc"];
	}else if( $_POST["desc"] ){
		$desc = $_POST["desc"];
	}else
		$desc = 0;
	settype($desc, "integer");
	if($desc == 1)
		$descstr="DESC";
	else
		$descstr="ASC";

	if( $_GET["order"] ){
		$order = $_GET["order"];
	}else if( $_POST["order"] ){
		$order = $_POST["order"];
	}
	if( $order != "bbsid" && $order != "name" )
		$order="groupname";

	$db = mysql_connect($hostname, $username, $password) or die(mysql_error());
	mysql_select_db($dbname, $db) or die(mysql_error());

	if( $_GET["action"] ){
		$action = $_GET["action"];
	}

	if(isset($action) && $action == "del"){
		if( $_GET["id"] ){
			$id = $_GET["id"];
		}
		else{
			html_error_quit("参数错误1");
		}
		settype($id, "integer");
		if($id < 0)
			html_error_quit("参数错误2");

		$sqlstr = "DELETE FROM addr WHERE userid=\"".$currentuser["userid"]."\" AND id=".$id;
		$result = mysql_query($sqlstr) or die(mysql_error());

	}else if(isset($action) && $action=="detail"){
		if( $_GET["id"] ){
			$id = $_GET["id"];
		}
		else{
			html_error_quit("参数错误1");
		}
		settype($id, "integer");
		if($id < 0)
			html_error_quit("参数错误2");

		$sqlstr = "SELECT * FROM addr WHERE userid=\"".$currentuser["userid"]."\" AND id=".$id;

		$result = mysql_query($sqlstr) or die(mysql_error());

		if( ! $result ){
			html_error_quit("数据错误");
		}
		$row = mysql_fetch_row($result);
		if( ! $row )
			html_error_quit("数据错误1");
		page_header("通讯录条目显示");
?>
<a href="javascript:location.reload()">刷新</a>
<hr class=default>
<table border="1" width="613" align="center" cellpadding="0" cellspacing="0">
<tr><td>姓名</td><td><?php echo htmlspecialchars($row[2]);?></td></tr>
<tr><td>bbsid</td><td><?php echo htmlspecialchars($row[3]);?></td></tr>
<tr><td>分组</td><td><?php echo htmlspecialchars($row[15]);?></td></tr>
<tr><td>生日</td><td><?php echo htmlspecialchars($row[13]);?></td></tr>
<tr><td>学校</td><td><?php echo htmlspecialchars($row[4]);?></td></tr>
<tr><td>邮政编码</td><td><?php echo htmlspecialchars($row[5]);?></td></tr>
<tr><td>家庭地址</td><td><?php echo htmlspecialchars($row[6]);?></td></tr>
<tr><td>家庭电话</td><td><?php echo htmlspecialchars($row[9]);?></td></tr>
<tr><td>公司地址</td><td><?php echo htmlspecialchars($row[7]);?></td></tr>
<tr><td>公司电话</td><td><?php echo htmlspecialchars($row[8]);?></td></tr>
<tr><td>手机</td><td><?php echo htmlspecialchars($row[10]);?></td></tr>
<tr><td>email</td><td><?php echo htmlspecialchars($row[11]);?></td></tr>
<tr><td>qq</td><td><?php echo htmlspecialchars($row[12]);?></td></tr>
<tr><td>备注</td><td><pre><?php echo $row[14];?></pre></td></tr>
</table>
<center>
<a href="javascript:history.go(-1)">返回</a>
</center>
</body>
</html>
<?php
	}else if(isset($action) && ( $action=="add" || $action=="edit" ) ){
			if( $action == "edit" ){
				if( $_GET["id"] ){
					$edit_id = $_GET["id"];
				}else if ($_POST["id"]){
					$edit_id = $_POST["id"];
				}
				else
					html_error_quit("参数错误");

				settype($edit_id, "integer");
				if($edit_id < 0)
					html_error_quit("参数错误7");
			}else {
				$sqlstr = "SELECT COUNT(*) FROM addr WHERE userid=\"".$currentuser["userid"]."\"";

				$result = mysql_query($sqlstr) or die(mysql_error());
				if( ! $result ){
					html_error_quit("数据错误");
				}else{
					$row = mysql_fetch_row($result);
					if( ! $row )
						html_error_quit("数据错误1");
					$allcount = $row[0];
					settype($allcount, "integer");
					if( $allcount > 400 )
						html_error_quit("通讯录满");
				}
			}


			if( $_GET["submit"] || $_POST["submit"] ){
				if( $_POST["t_name"] ){
					$t_name = $_POST["t_name"];
				}else{
					html_error_quit("用户名输入错误");
				}
				$t_name = substr($t_name,0,12);
				//$t_name[12]=0;

				if( $_POST["t_group"] ){
					$t_group = $_POST["t_group"];
					$t_group = substr($t_group,0,12);
					//$t_group[12]=0;
				}else{
					$t_group="";
				}

				if( $_POST["t_bbsid"] ){
					$t_bbsid = $_POST["t_bbsid"];
					$t_bbsid = substr($t_bbsid,0,12);
					//$t_bbsid[12]=0;
				}else{
					$t_bbsid="";
				}

				if( $_POST["t_school"] ){
					$t_school = $_POST["t_school"];
					$t_school = substr($t_school,0,99);
					//$t_school[99]=0;
				}else{
					$t_school="";
				}

				if( $_POST["t_zipcode"] ){
					$t_zipcode = $_POST["t_zipcode"];
					$t_zipcode = substr($t_zipcode,0,6);
					//$t_zipcode[6]=0;
				}else{
					$t_zipcode="";
				}

				if( $_POST["t_homeaddr"] ){
					$t_homeaddr = $_POST["t_homeaddr"];
					$t_homeaddr = substr($t_homeaddr,0,99);
					//$t_homeaddr[99]=0;
				}else{
					$t_homeaddr="";
				}

				if( $_POST["t_companyaddr"] ){
					$t_companyaddr = $_POST["t_companyaddr"];
					$t_companyaddr = substr($t_companyaddr,0,99);
					//$t_companyaddr[99]=0;
				}else{
					$t_companyaddr="";
				}

				if( $_POST["t_tel_h"] ){
					$t_tel_h = $_POST["t_tel_h"];
					//$t_tel_h[19]=0;
					$t_tel_h = substr($t_tel_h,0,19);
				}else{
					$t_tel_h="";
				}

				if( $_POST["t_tel_o"] ){
					$t_tel_o = $_POST["t_tel_o"];
					$t_tel_o = substr($t_tel_o,0,19);
					//$t_tel_o[19]=0;
				}else{
					$t_tel_o="";
				}

				if( $_POST["t_mobile"] ){
					$t_mobile = $_POST["t_mobile"];
					$t_mobile = substr($t_mobile,0,12);
					//$t_mobile[12]=0;
				}else{
					$t_mobile="";
				}