product_process.php

php模块设计。。。里面的模块很有学习价值

<?
	include("db_conn.php");
	include("db_func.php");

	// 处理用户输入的特殊字符 BEGIN
 	function ChangeWord($NewWord){
    		$NewWord=str_replace("\r\n","<br>",$NewWord);
    		$NewWord=ereg_replace("[']+", "`", $NewWord);
		return $NewWord;
 	}
	// 处理用户输入的特殊字符 END

	if ($p_id == '') // 判断 p_id 是否有值
	  $message = "未更新任何产品信息！";
	else
	{
	    // check 参数值为 add, 所以执行增加产品的操作
	    if ($check==add)
	    {
	      $SQLStr = "INSERT INTO product (p_id, c_id, p_name, p_info, p_source, p_cost, p_price, p_sell, p_numbers, p_link, p_pic, p_date, p_actival, p_hot, p_commend) ";
              $SQLStr .= "VALUES('$p_id', '$c_id', '$p_name', '" . ChangeWord($p_info) . "', '$p_source', '$p_cost', '$p_price', '0', '$p_numbers', '$p_link', '$p_pic', '$p_date', '$p_actival', '$p_hot', '$p_commend')";
	      $message = "已增加一笔新的产品信息！";
	    }

	    // check 参数值为 upd, 所以执行更新产品信息的操作
	    if ($check==upd)
	    {
	      $SQLStr = "UPDATE product SET p_id='$p_id', c_id='$c_id', p_name='$p_name', p_info='" . ChangeWord($p_info) . "', p_source='$p_source', p_cost='$p_cost', ";
              $SQLStr .= "p_price='$p_price', p_numbers='$p_numbers', p_link='$p_link', p_pic='$p_pic', p_date='$p_date', p_actival='$p_actival', p_hot='$p_hot', p_commend='$p_commend' WHERE p_id = '$p_id'";
	      $message = "产品信息已更新！";
	    }

	    // 判断按下按钮为 upd 按钮, 所以执行多笔产品更新数据的操作
	    if(isset($_POST['upd']))
	    {
	      for ($i=0;$i<count($p_id);$i++)
		{
	      	 $SQLStr = "UPDATE product SET p_actival ='$p_actival[$i]', p_commend='$p_commend[$i]' WHERE p_id = '$p_id[$i]'";
	      	 db_query($SQLStr);
		}
	      $message = "更新" . count($p_id) . "笔产品信息！";
	    }

	    // 判断按下按钮为 del 按钮, 所以执行删除多笔产品的操作
	    if(isset($_POST['del']))
    	    {
	      for ($i=0;$i<count($p_id);$i++)
		{
	         $SQLStr = "DELETE FROM product WHERE p_id = '$p_id[$i]'";
	         $message = "删除" . count($p_id) . "笔产品信息！";
	        }
	    }

	   db_query($SQLStr);
	 }
?>
<!--// 将用户导回 manage.php 页面, 并以信息窗呈现执行结果 //-->
<script>
alert("<?php echo $message; ?>");
location.href = "manage.php";
</script>