members.php

全新且完善的强大网上商店系统

			$db->query("UPDATE $table_customers SET customers_password='$password' where customers_email_address='$customers_email_address'");
		}
    $sql_data_array = array('customers_firstname' => $newname,
                              'customers_email_address' => $emailnew,
                              'status'=>$statusnew, 
                              'customers_password' => md5($newpassword));
                              
		tep_db_perform($table_customers, $sql_data_array,'update'," customers_email_address='$customers_email_address'");
    
		cpmsg("用户资料成功更新。$emailnew");
	}

} elseif($act == "usergroups") {

	if(!$groupsubmit) {

		if($type != "detail" || !$id) {
			$membergroup = $specifiedgroup = $sysgroup = "";
			$upperlimit = $lowerlimit = $misconfig = 0;
			$query = $db->query("SELECT groupid, specifiedusers, status, grouptitle, creditshigher, creditslower, groupdiscount FROM $table_usergroups ORDER BY creditslower");
			while($group = $db->fetch_array($query)) {
				if($group[status] == "Member" && !$group[specifiedusers]) {
					$configuration=$db->query("select configuration_value from $table_configuration  where configuration_key = 'DEFAULT_DISCOUNT'");
					$configuration = $db->fetch_array($configuration); 
					$checked=($group[groupdiscount]==$configuration['configuration_value']) ? 'checked' : '' ;
					$membergroup .= "<tr align=\"center\"><td bgcolor=\"#f8f8f8\"><input type=\"checkbox\" name=\"delete[{$group[groupid]}]\" value=\"$group[groupid]\"></td>\n".
						"<td bgcolor=\"#f8f8f8\"><input type=\"text\" size=\"12\" name=\"group_title[{$group[groupid]}]\" value=\"$group[grouptitle]\"></td>\n".
						"<td bgcolor=\"#f8f8f8\"><input type=\"text\" size=\"6\" name=\"group_creditshigher[{$group[groupid]}]\" value=\"$group[creditshigher]\">\n".
						"<td bgcolor=\"#f8f8f8\"><input type=\"text\" size=\"6\" name=\"group_creditslower[{$group[groupid]}]\" value=\"$group[creditslower]\"></td>\n".
						"<td bgcolor=\"#f8f8f8\"></td>\n".
						"<td bgcolor=\"#f8f8f8\"><input type=\"text\" size=\"2\" name=\"group_discount[{$group[groupid]}]\" value=\"$group[groupdiscount]\"></td>".
						"<td bgcolor=\"#f8f8f8\"><input type=\"checkbox\" name=\"default[{$group[groupid]}]\" value=\"$group[groupid]\" $checked></td></tr>\n";
					if($group[creditshigher] > 0 && $upperlimit != $group[creditshigher]) {
						//echo "$upperlimit $group[creditshigher]<br>"; //debug
						$misconfig = 1;
					}
					$lowerlimit = $group[creditshigher] < $lowerlimit ? $group[creditshigher] : $lowerlimit;
					$upperlimit = $group[creditslower] > $upperlimit ? $group[creditslower] : $upperlimit;
				} elseif($group[specifiedusers]) {
					$group[specifiedusers] = str_replace("\t", ", ", substr($group[specifiedusers], 1, -1));
					$specifiedgroup .= "<tr align=\"center\"><td bgcolor=\"#f8f8f8\"><input type=\"checkbox\" name=\"delete[{$group[groupid]}]\" value=\"$group[groupid]\"></td>\n".
						"<td bgcolor=\"#f8f8f8\"><input type=\"text\" size=\"12\" name=\"group_title[{$group[groupid]}]\" value=\"$group[grouptitle]\"></td>\n".
						"<td bgcolor=\"#f8f8f8\"><input type=\"text\" size=\"20\" name=\"group_specifiedusers[{$group[groupid]}]\" value=\"$group[specifiedusers]\">\n".
						"<td bgcolor=\"#f8f8f8\"><input type=\"text\" size=\"2\" name=\"group_discount[{$group[groupid]}]\" value=\"$group[groupdiscount]\"></td>\n";
				} else {
					$sysgroup .= "<tr align=\"center\">\n".
						"<td bgcolor=\"#f8f8f8\"><input type=\"text\" size=\"12\" name=\"group_title[{$group[groupid]}]\" value=\"$group[grouptitle]\"></td>\n".
						"<td bgcolor=\"#f8f8f8\">$group[status]</td>\n".
						
					
						"<td bgcolor=\"".ALTBG2."\"><a href=\"".tep_href_link('admincp.php','act=usergroups&type=detail&id='.$group[groupid])."\">[详情]</a></td></tr>\n";
				}
			}
			if($misconfig || $upperlimit < 9999 || $lowerlimit > 0) {
				$warning = "<script>alert('当前积分设定存在明显问题，请根据提示尽快修正。');</script><span class=\"mediumtxt\"><b>警告！</b>您当前的设定并未覆盖整个积分范围(建议 -99999 到 99999)，或相邻两组间积分上下限存在<br>空隙或重叠。请立即完善会员组设定或恢复到默认，否则将导致部分用户无法访问论坛的严重问题！</span><br><br>";
			}

?>
<table cellspacing="0" cellpadding="0" border="0" width="95%" align="center">
<tr><td bgcolor="<?=BORDERCOLOR?>">
<table border="0" cellspacing="<?=BORDERWIDTH?>" cellpadding="<?=TABLESPACE?>" width="100%">
<tr class="header"><td>特别提示</td></tr>
<tr bgcolor="<?=ALTBG1?>"><td>
<br><ul><li>Soobic! 商店系统的用户组分为系统组、特殊组和会员组，区别在于确定所在用户组的方式：系统组按照用户的系统头衔确定；特殊组按照指定的特别用户名确定；会员组按照会员的积分来确定。每个组可以分别设置相应的折扣。</ul>
<ul><li>系统组和特殊组的设定不需要指定积分，Soobic! 预留了4个系统头衔，特殊组的多个用户名之间可用半角逗号 "," 分割。</ul>
<ul><li>会员组积分设定的总体范围必须能满足实际的要求，如 0 到 99999，而且，不同的组之间积分范围不要出现重叠，否则将出现混乱。导致店主亏本</ul>
<ul><li>如果您不小心误操作，导致问题，可点击“恢复默认”按钮将设定恢复到初始状态。</ul>
<ul><li>折扣请填写数字，如：7折，就直接写入,开启会员积分功能，请点击　常规选项，会员积分，开启会员积分功能</ul>
<ul><li>会员未登时显示的默认折扣，但非会员购物，仍按原价计算，建议将最小的折扣设为默认.<br>注意：只能将一个组的折扣设为默认</ul>
</td></tr></table></td></tr></table>

<form method="post" action="<?=tep_href_link('admincp.php','act=usergroups&type=member')?>">
<table cellspacing="0" cellpadding="0" border="0" width="95%" align="center">
<tr><td bgcolor="<?=BORDERCOLOR?>">
<table border="0" cellspacing="<?=BORDERWIDTH?>" cellpadding="<?=TABLESPACE?>" width="100%">
<tr class="header"><td colspan="7">会员用户组</td></tr>
<tr class="header" align="center"><td width="45"><input type="checkbox" name="chkall" class="header" onclick="checkall(this.form)">删?</td>
<td>组头衔</td><td>积分下限</td><td>积分上限</td><td></td><td>折扣</td><td>设为默认</td></tr>
<?=$membergroup?>
<tr height="1" bgcolor="#F8F8F8"><td colspan="7"></td></tr>
<tr align="center" bgcolor="#F8F8F8"><td>新增：</td>
<td><input type="text" size="12" name="grouptitlenew"></td>
<td><input type="text" size="6" name="creditshighernew"></td>
<td><input type="text" size="6" name="creditslowernew"></td>
<td></td>
<td><input type="text" size="2" name="groupdiscountnew"></td>
<td>&nbsp;</td>
</tr></table></td></tr></table><br><center><?=$warning?>
<input type="submit" name="groupsubmit" value="编辑会员用户组">&nbsp;
<input type="button" name="reset" value="恢复到默认设定" onClick="top.main.location.href='<?=tep_href_link('admincp.php','act=usergroups&type=member&reset=yes&groupsubmit=yes')?>';"></center></form><br><br>

<form method="post" action="<?=tep_href_link('admincp.php','act=usergroups&type=specified')?>">
<table cellspacing="0" cellpadding="0" border="0" width="95%" align="center">
<tr><td bgcolor="<?=BORDERCOLOR?>">
<table border="0" cellspacing="<?=BORDERWIDTH?>" cellpadding="<?=TABLESPACE?>" width="100%">
<tr class="header"><td colspan="6">特殊用户组</td></tr>
<tr class="header" align="center"><td width="45"><input type="checkbox" name="chkall" class="header" onclick="checkall(this.form)">删?</td>
<td>组头衔</td><td>包含用户</td><td>折扣</td></tr>
<?=$specifiedgroup?>
<tr height="1" bgcolor="#f8f8f8"><td colspan="6"></td></tr>
<tr align="center" bgcolor="#f8f8f8"><td>新增：</td>
<td><input type="text" size="12" name="grouptitlenew"></td>
<td><input type="text" size="20" name="specifiedusersnew"></td>
<td>&nbsp;</td>
</tr></table></td></tr></table><br><center>
<input type="submit" name="groupsubmit" value="编辑特殊用户组"></center></form><br><br>

<form method="post" action="<?=tep_href_link('admincp.php','act=usergroups&type=system')?>">
<table cellspacing="0" cellpadding="0" border="0" width="95%" align="center">
<tr><td bgcolor="<?=BORDERCOLOR?>">
<table border="0" cellspacing="<?=BORDERWIDTH?>" cellpadding="<?=TABLESPACE?>" width="100%">
<tr class="header"><td colspan="5">系统用户组 - 点击组头衔编辑详细权限设置</td></tr>
<tr class="header" align="center">
<td>组头衔</td><td>系统头衔</td><td>编辑</td></tr>
<?=$sysgroup?>
</table></td></tr></table><br><center>
<input type="submit" name="groupsubmit" value="编辑系统用户组"></center></form>
<?

		} else {

			if(!$detailsubmit) {
				$query = $db->query("SELECT * FROM $table_usergroups WHERE groupid='$id'");
				$group = $db->fetch_array($query);
				$checksearch = array($group['allowsearch'] => 'checked');
				$checkavatar = array($group['allowavatar'] => 'checked');
?>        
				<table cellspacing="0" cellpadding="0" border="0" width="90%" align="center">
<tr><td bgcolor="<?=BORDERCOLOR?>">
<table border="0" cellspacing="<?=BORDERWIDTH?>" cellpadding="<?=TABLESPACE?>" width="100%">
<tr class="header"><td>特别提示</td></tr>
<tr bgcolor="<?=ALTBG1?>"><td>
<br><ul><li>管理权限是必须权限，只有拥有管理权限，才能使用基本权限</ul>
<br><ul><li>用户组头衔只是为了方便记忆，没有特殊意义</ul>
</td></tr></table></td></tr></table> 
<?				
        echo "<form method=\"post\" action=\"".tep_href_link('admincp.php','act=usergroups&type=detail&id='.$id)."\">\n";

				showtype("编辑用户组", "top");
				showsetting("用户组头衔", "grouptitlenew", $group[grouptitle], "text");

				showtype("基本权限");
				showsetting("允许编辑常规选项：", "allowsetconfignew", $group[allowsetconfig], "radio", "设置是否允许编辑商店常规选项");
				showsetting("允许编辑商品各分类设置：", "allowsetproductnew", $group[allowsetproduct], "radio", "设置是否允许编辑商品及其分类");
				showsetting("允许设置外挂模块：", "allowsetmodulesnew", $group[allowsetmodules], "radio", "设置是否允许编辑外挂模块");
				showsetting("允许编辑顾客信息：", "alloweditcustomernew", $group[alloweditcustomer], "radio", "设置是否允许编辑顾客信息");
				showsetting("允许编辑编辑订单：", "alloweditordernew", $group[alloweditorder], "radio", "设置是否允许查看修改编辑订单");
				showsetting("允许设置界面风格：", "allowsetstylenew", $group[allowsetstyle], "radio", "设置是否允许改变界面风格及更换模板");
				showsetting("允许管理数据：", "allowadmindatanew", $group[allowadmindata], "radio", "设置是否允许对商店数据进行操作");
				
				showtype("管理权限");
				showsetting("拥有订单操作员权限：", "isoperatornew", $group[isoperator], "radio", "设置是否拥有订单操作员权限");
				showsetting("拥有副管理员权限：", "isviceadminnew", $group[isviceadmin], "radio", "设置是否拥有副管理员权限");
				showsetting("拥有管理员权限：", "isadminnew", $group[isadmin], "radio", "设置是否拥有管理员权限");

				showtype("", "bottom");

				echo "<br><center><input type=\"submit\" name=\"detailsubmit\" value=\"更新权限设置\"><center></form>";

			} else {

				if($isadminnew) {
					$isviceadminnew = $isoperatornew = 1;
				} elseif($isviceadminnew) {
					$isoperatornew = 1;
				}
				
				$sql_data_array = array('grouptitle' => $grouptitlenew,
                              'allowsetconfig' => $allowsetconfignew,
                              'allowsetproduct' => $allowsetproductnew,
															'allowsetmodules' => $allowsetmodulesnew,
															'alloweditcustomer'=>$alloweditcustomernew,
															'alloweditorder'=>$alloweditordernew,
															'allowsetstyle'=>$allowsetstylenew,
															'allowadmindata'=>$allowadmindatanew,
															'isoperator'=>$isoperatornew,
															'isviceadmin'=>$isviceadminnew,
															'isadmin'=>$isadminnew
															);
                              
		    tep_db_perform($table_usergroups, $sql_data_array,'update'," groupid='$id'");
				
				updatecache("usergroups");
				cpmsg("用户组权限设置成功更新。");

			}

		}

	} else {

		if($type == "member") {
			if($reset != "yes") {
				if($grouptitlenew && ($creditshighernew || $creditslowernew)) {
					$db->query("INSERT INTO $table_usergroups (grouptitle, status, creditshigher, creditslower, groupdiscount, allowvisit, allowview, allowpost, allowsigbbcode)
						VALUES ('$grouptitlenew', 'Member', '$creditshighernew', '$creditslowernew', '$groupdiscountnew',  '1', '1', '1', '1')");
				}
				if(is_array($group_title)) {
					$ids = $comma = "";
					foreach($group_title as $id => $title) {
						if($default[$id]){
						   $db->query("update $table_configuration set configuration_value = '" .$group_discount[$id]. "' where configuration_key = 'DEFAULT_DISCOUNT'");
						}
						if($delete[$id]) {
							$ids .= "$comma'$id'";
							$comma = ', ';
						} else {
							$db->query("UPDATE $table_usergroups SET grouptitle='$group_title[$id]', creditshigher='$group_creditshigher[$id]', creditslower='$group_creditslower[$id]', groupdiscount='$group_discount[$id]' WHERE groupid='$id'");
						}
					}
				}
				if($ids) {
					$db->query("DELETE FROM $table_usergroups WHERE groupid IN ($ids)");
				}
			} else {
				if(!$confirmed) {
					cpmsg("本操作不可恢复，您确定要清除现有<br>记录并把用户组设定恢复默认吗？", tep_href_link('admincp.php','act=usergroups&type=member&reset=yes&groupsubmit=yes'), "form");
				} else {
					$db->query("DELETE FROM $table_usergroups WHERE status='Member' AND specifiedusers=''");
//fix some error when the admin use a table not cdb_
					$groupreset =
<<<EOT
INSERT INTO $table_usergroups VALUES ('', '', 'Member', '新手会员', 0, 50,          '0','0','0','0','0','0','0','0','0','0','0');
INSERT INTO $table_usergroups VALUES ('', '', 'Member', '初级会员', 50, 200,        '0','0','0','0','0','0','0','0','0','0','0');
INSERT INTO $table_usergroups VALUES ('', '', 'Member', '中级会员', 200, 500,       '0','0','0','0','0','0','0','0','0','0','0');
INSERT INTO $table_usergroups VALUES ('', '', 'Member', '高级会员', 500, 1000,      '0','0','0','0','0','0','0','0','0','0','0');
INSERT INTO $table_usergroups VALUES ('', '', 'Member', '白银会员', 1000, 3000,     '0','0','0','0','0','0','0','0','0','0','0');
INSERT INTO $table_usergroups VALUES ('', '', 'Member', '黄金会员', 3000, 9999999,  '0','0','0','0','0','0','0','0','0','0','0');
EOT;

					$sqlquery = splitsql($groupreset);
					foreach($sqlquery as $sql) {
						$db->query($sql);
					}

					updatecache("usergroups");
					cpmsg("用户会员组成功恢复。");
				}
			}
		} elseif($type == "specified") {
			if($specifiedusersnew) {
				$specified = trim($specifiedusersnew);
				$comma = ", ";
			} else {
				$specified = $comma = "";
			}
			if(is_array($group_specifiedusers)) {
				foreach($group_specifiedusers as $user) {
					$specified .= $comma.trim($user);
					$comma = ", ";
				}
			}
			$admins = $comma = "";
			$specified = "'".str_replace(",", "', '", str_replace(" ", "", $specified))."'";
			$query = $db->query("SELECT customers_email_address FROM $table_customers WHERE customers_email_address IN ($specified) AND (status='Admin')");
			while($member = $db->fetch_array($query)) {
				$admins .= "$comma$member[username]";
				$comma = ", ";
			}
			if($admins) {
				cpmsg("对不起，特殊用户组中包含商店管理员($admins)，这可能造成管理权限的丢失，您可以通过其他设置方式达到所需的权限设定，请返回修改。");
			}

			if($grouptitlenew && $specifiedusersnew) {
				$specifiedusersnew = "\t".str_replace(",", "\t", str_replace(" ", "", $specifiedusersnew))."\t";
				$db->query("INSERT INTO $table_usergroups (grouptitle, specifiedusers, status)
					VALUES ('$grouptitlenew', '$specifiedusersnew', 'Member')");
			}
			if(is_array($group_title)) {
				$ids = $comma = "";
				foreach($group_title as $id => $title) {
					if($delete[$id]) {
						$ids .= "$comma'$id'";
						$comma = ", ";
					} else {
						$group_specifiedusers[$id] = "\t".str_replace(",", "\t", str_replace(" ", "", $group_specifiedusers[$id]))."\t";
						$db->query("UPDATE $table_usergroups SET grouptitle='$group_title[$id]', specifiedusers='$group_specifiedusers[$id]', groupdiscount='$group_discount[$id]' WHERE groupid='$id'");
					}
				}
			}
			if($ids) {
				$db->query("DELETE FROM $table_usergroups WHERE groupid IN ($ids)");
			}
		} elseif($type == "system") {
			if(is_array($group_title)) {
				foreach($group_title as $id => $title) {
					$db->query("UPDATE $table_usergroups SET grouptitle='$group_title[$id]' WHERE groupid='$id'");
				}
			}
		}

		updatecache("usergroups");
		cpmsg("用户组成功更新。如您添加了新的用户组，<br>请不要忘记修改其相应的权限设置");
	}

} 

?>