box.php

1、上传所有文件至服务器目录。 2、使用 MYSQL 管理工具

<?PHP
error_reporting(7);

if ($HTTP_GET_VARS['HTTP_POST_VARS']['action'] == $HTTP_POST_VARS['action']) {
  unset($HTTP_POST_VARS['action']);
}
$HTTP_POST_VARS['action'] = trim($HTTP_POST_VARS['action']);

if ($HTTP_POST_VARS['action']) {
	$action = $HTTP_POST_VARS['action'];
} else if ($HTTP_GET_VARS['action']) {
	$action = $HTTP_GET_VARS['action'];
}

if ($HTTP_GET_VARS['HTTP_POST_VARS']['id'] == $HTTP_POST_VARS['id']) {
  unset($HTTP_POST_VARS['id']);
}
$HTTP_POST_VARS['id'] = intval(trim($HTTP_POST_VARS['id']));

unset($musicid);
if ($HTTP_POST_VARS['id']) {
	$musicid = intval($HTTP_POST_VARS['id']);
} else if ($HTTP_GET_VARS['id']) {
	$musicid = intval($HTTP_GET_VARS['id']);
}
$realmusicid = $musicid;

if ((!isset($action) or $action=="")) {
  $action="show";
}

$templatesused = '';

// ############################### 查看 ###############################
if ($action=="show") {
  $templatesused = 'musicbox';
  include("./global.php");

  if (!$permissions['canusebox']) {
      show_nopermission(1);
  }

  $musicid = $realmusicid;
  $username = $bbuserinfo['username'];
  $musics = $DB_site->query("SELECT * 
                             FROM ".$table["musicbox"]."
                             WHERE UserID=".$bbuserinfo['userid']."
                             ORDER BY MusicID DESC");

  $musicnum = $DB_site->num_rows($musics);
  $maxmusicnum = intval($permissions['maxboxmusic']);

  if ($music=$DB_site->fetch_array($musics)) {
    $num = 1;
    $firstcolor = $recmdMusicFirstColorOne;
    $secondcolor = $recmdMusicFirstColorTwo;
    $id = $music['MusicID'];
    $musicname = $music['MusicName'];
    $sclassid = $music['SClassID'];
    $nclassid = $music['NClassID'];
    $singer = $music['Singer'];
    eval("\$boxmusics = \"".gettemplate('musicbox_musiclist_lists')."\";");

    while ($music=$DB_site->fetch_array($musics)) {
      $num++;
      if (($num%2)==0) {
        $firstcolor = $recmdMusicSecondColorOne;
        $secondcolor = $recmdMusicSecondColorTwo;
      } else {
        $firstcolor = $recmdMusicFirstColorOne;
        $secondcolor = $recmdMusicFirstColorTwo;
      }
      $id = $music['MusicID'];
      $musicname = $music['MusicName'];
      $sclassid = $music['SClassID'];
      $nclassid = $music['NClassID'];
      $singer = $music['Singer'];
      eval("\$boxmusics .= \"".gettemplate('musicbox_musiclist_lists')."\";");
    }
  } else {
    eval("\$boxmusics = \"".gettemplate('musicbox_musiclist_nolist')."\";");
  }
  $DB_site->free_result($musics);
  eval("dooutput(\"".gettemplate("musicbox")."\");");

}

// ############################### 删除 ###############################
if ($action=="del") {
  include("./global.php");

  if (!$permissions['canusebox']) {
      show_nopermission(1);
  }

  $musicid = $realmusicid;
  $result = $DB_site->query("DELETE FROM ".$table["musicbox"]."
                             WHERE UserID=".$bbuserinfo['userid']." AND MusicID=".$musicid);

  eval("smallredirect(\"".gettemplate("musicbox_message_bel")."\",\"box.php?action=show&s=$session[dbsessionhash]\");");

}

// ############################### 添加 ###############################
if ($action=="add") {
  include("./global.php");

  if (!$permissions['canusebox']) {
      show_nopermission(1);
  }

  $musicid = $realmusicid;
  $result = $DB_site->query("SELECT * 
                             FROM ".$table["musicbox"]."
                             WHERE UserID=".$bbuserinfo['userid']." AND MusicID=".$musicid);

  $ishave = $DB_site->num_rows($result);
  if ($ishave==0) {
    $boxmusicnum = $DB_site->query_first("SELECT COUNT(*) AS num 
                                          FROM ".$table["musicbox"]."
                                          WHERE UserID=" . $bbuserinfo['userid'] );

    if ($boxmusicnum[num] < intval($permissions['maxboxmusic'])) {
      $musics = $DB_site->query("SELECT * 
                                 FROM ".$table["musiclist"]."
                                 WHERE ID=".$musicid);

      $rightid = $DB_site->num_rows($musics);
      if ($rightid==1) {
        $music = $DB_site->fetch_array($musics);
        $DB_site->query("INSERT INTO ".$table["musicbox"]." 
                         (ID,UserID,MusicID,MusicName,Singer,ClassID,SClassID,NClassID) VALUES 
                         (NULL,".$bbuserinfo['userid'].",".$music['ID'].",'".addslashes($music['MusicName'])."',
                         '".addslashes($music['Singer'])."',".$music['ClassID'].",".$music['SClassID'].",".$music['NClassID'].")");
        $DB_site->free_result($musics);
        $templatename = "musicbox_message_add_ok";
      } else {
        $templatename = "musicbox_message_add_error";
      }
    } else {
      $templatename = "musicbox_message_maxed";
    }
  } else {
    $templatename = "musicbox_message_add_have";
  }
  eval("smallredirect(\"".gettemplate($templatename)."\",\"box.php?action=show&s=$session[dbsessionhash]\");");

}
?>