newdebate.php

php论坛源码论坛软件系统亦称电子公告板(BBS)系统

<?php
!function_exists('readover') && exit('Forbidden');

InitGP(array('job','action','uid','step','did','sortid'));
$groupid== 'guest' && Showmsg('not_login');
$editor	= $winddb['editor'] ? 'wysiwyg' : 'textmode';
$sortid	= (int)$sortid;
$did	= (int)$did;
include_once(D_P."data/bbscache/debate_class.php");
!$debateclassdb[$sortid] && Showmsg('debate_classerror');
$sortname=$debateclassdb[$sortid];

if($action == 'add'){
	if(!$step){
		$judgmentdb=explode(',',$debate_admin);
		$juclass='';
		foreach ($judgmentdb as $key=>$value){
			$juclass .= "<option value='$value'> $value </option>";
		}
		if(strpos(",$debate_admin,",",$windid,")===false){
			$juclass .= "<option value='$windid'> $windid </option>";
		}
		require_once(PrintHack('newdebate'));footer();
	}elseif($step==2){
		InitGP(array('judgment','title','obtitle','retitle','endtime','atc_content'));
		
		$judgment	= Char_cv($judgment);
		$title		= Char_cv($title);
		$obtitle	= Char_cv($obtitle);
		$retitle	= Char_cv($retitle);
		$atc_content= Char_cv($atc_content);
		$endtime	= PwStrtoTime($endtime);

		$endtime < $timestamp && Showmsg('debate_time');
		!$title && Showmsg('debate_title');
		$isvisible	=($groupid==3 || $debate_topicopen==0) ? 1 : 0;
		$db->update("INSERT INTO pw_debatethreads (sortid,authorid,author,judgment,title,obtitle,retitle,content,dateline,endtime,obvote,revote,digest,views,ip,isvisible) VALUES ('$sortid','$winduid','$windid','$judgment','$title','$obtitle', '$retitle','$atc_content','$timestamp','$endtime',0,0,0,0,'$onlineip','$isvisible')");

		$did=$db->insert_id();
		require_once(R_P."require/credit.php");
		UserCredit($winduid,$debate_posttype,'set',$debate_postmoney);

		$db->pw_update(
			"SELECT uid FROM pw_debateinfo WHERE uid='$winduid'",
			"UPDATE pw_debateinfo SET posts=posts+1,author='$windid' WHERE uid='$winduid'",
			"INSERT INTO pw_debateinfo(uid,posts,author) VALUES('$winduid',1,'$windid')"
		);
		if($isvisible){
			refreshto("hack.php?H_name=debate&job=viewdebate&did=$did",'debate_post_success');
		}else{
			refreshto("hack.php?H_name=debate&",'debate_post_check');
		}
	}
}elseif($action == 'modify'){
	if(empty($step)){
		$where = !$admincheck ?  "AND authorid='$winduid'" : '';
		@extract($rt=$db->get_one("SELECT sortid,author,judgment,title,obtitle,retitle,content,dateline,endtime FROM pw_debatethreads WHERE did='$did' $where"));
		if(empty($rt)){
			Showmsg('debate_cantedit');
		}
		$endtime	 = get_date($endtime,'Y-m-d');
		$atc_content = $content;
		$judgmentdb	 = array();
		$judgmentdb  = explode(',',$debate_admin);
		$juclass='';
		foreach($judgmentdb as $key=>$value){
			$selected = $value == $judgment ? 'selected' : '';
			$juclass .= "<option value=\"$value\" $selected> $value </option>";
		}
		if(strpos(",$debate_admin,",",$windid,")===false){
			$selected = $windid == $judgment ? 'selected' : '';
			$juclass .= "<option value=\"$windid\" $selected> $windid </option>";
		}
		require_once(PrintHack('newdebate'));footer();
	} elseif($step==2){
		InitGP(array('sortid','judgment','title','obtitle','retitle','endtime','atc_content'));
		$sortid		= (int)$sortid;
		$judgment	= Char_cv($judgment);
		$title		= Char_cv($title);
		$obtitle	= Char_cv($obtitle);
		$retitle	= Char_cv($retitle);
		$endtime	= PwStrtoTime($endtime);
		$atc_content= Char_cv($atc_content);
		$db->update("UPDATE pw_debatethreads SET sortid='$sortid',judgment='$judgment',title='$title',obtitle='$obtitle',retitle='$retitle',content='$atc_content',endtime='$endtime' WHERE did='$did'");
		refreshto("hack.php?H_name=debate&job=viewdebate&did=$did",'debate_edit_success');
	}
}elseif($action == 'del'){
	InitGP(array('did','uid'),1);
	$where = !$admincheck ?  "AND authorid='$winduid'" : '';
	$rt=$db->get_one("SELECT sortid,authorid FROM pw_debatethreads WHERE did='$did' $where");
	!$rt && Showmsg('debate_cantdel');

	require_once(R_P."require/credit.php");
	UserCredit($rt['authorid'],$debate_posttype,'set',"-$debate_postmoney");

	$db->update("UPDATE pw_debateinfo SET posts=posts-1 WHERE uid='$rt[authorid]'");
	$db->update("DELETE FROM pw_debatethreads WHERE did='$did' $where");
	refreshto("hack.php?H_name=debate",'debate_del_success');
}
?>