teamcp.php

自己写的一个网络日志(BLOG)系统

<?php
!function_exists('usermsg') && exit('Forbidden');
include_once D_P.'data/cache/forum_cache_team.php';
include_once R_P.'mod/ipfrom_mod.php';

!$db_teamifopen && usermsg('team_close');
if ($db_teamgroups && strpos($db_teamgroups,"$groupid")===false) {
	usermsg('team_groupright');
}

$teamid = (int)$teamid;
if (!$job) {
	$teamdb = array();
	$query = $db->query("SELECT teamid,name,cid FROM pw_team WHERE uid='$admin_uid'");
	while ($rt = $db->fetch_array($query)) {
		$rt['cname'] = $_TEAM[$rt['cid']]['name'];
		$teamdb[] = $rt;
	}
	require_once PrintEot('teamcp');footer();
} elseif ($job=='add') {
	if ($db_teamlimit) {
		$count = $db->get_value("SELECT COUNT(*) FROM pw_team WHERE uid='$admin_uid'");
		$count >= $db_teamlimit && usermsg('team_limit');
	}
	if ($step!=2) {
		$rt['icon'] = 'nopic.jpg';
		$input = '';
		$gbooktype_0 = 'CHECKED';
		$forumcache = forumoption('team');
		require_once PrintEot('teamcp');footer();
	} else {
		!$name && usermsg('teamcp_name');
		!$cid && usermsg('teamcp_cate');
		$ckteamid = $db->get_value("SELECT teamid FROM pw_team WHERE name='$name'");
		$ckteamid && usermsg('team_nameerror');
		$name	 = Char_cv($name);
		$descrip = Char_cv($descrip);
		$notice  = Char_cv($notice);
		$gbooktype=(int)$gbooktype;
		$type=$type==1 ? 1 : 0;
		include_once(R_P.'mod/upload_mod.php');
		$attachdir = "$imgdir/upload";
		$icon = Char_cv($icon);
		$uploaddb = UploadFile('t'.$admin_uid,1);
		if ($uploaddb[0]['attachurl']) {
			$icon && P_unlink("$attachdir/$icon");
			$icon = $uploaddb[0]['attachurl'];
		}
		$db->update("INSERT INTO pw_team(uid,username,name,cid,descrip,icon,notice,type,ifshow,gbooktype) VALUES('$admin_uid','$admin_name','$name','$cid','$descrip','$icon','$notice','$type','$ifshow','$gbooktype')");
		$teamid=$db->insert_id();
		$db->update("INSERT INTO pw_tuser(admin,uid,teamid,joindate,blogs,ifcheck) VALUES('$admin_uid','$admin_uid','$teamid','$timestamp','0','1')");
		$db->update("UPDATE pw_team SET bloggers=bloggers+1 WHERE teamid='$teamid' AND uid='$admin_uid'");
		usermsg('operate_success',$basename);
	}
} elseif($job=='edit'){
	$rt=$db->get_one("SELECT name,cid,descrip,notice,icon,type,ifshow,gbooktype FROM pw_team WHERE teamid='$teamid' AND uid='$admin_uid'");
	if(!$step){
		!$rt && usermsg('undefine_action');
		$forumcache = forumoption('team',$rt['cid']);
		$name		= $rt['name'];
		$descrip	= $rt['descrip'];
		$notice		= $rt['notice'];
		$input = '';
		if (!$rt['icon']) {
			$rt['icon'] = 'nopic.jpg';
		} else {
			$input = '<input type="hidden" name="icon" value="'.$rt['icon'].'">';
		}
		$rt['type']==1 && $typechecked='checked';
		${'gbooktype_'.$rt['gbooktype']}='checked';
		if($rt['ifshow'] == 0){
			$ifshow_0='checked';
		}elseif($rt['ifshow'] == 1){
			$ifshow_1='checked';
		}elseif($rt['ifshow'] == 2){
			$ifshow_2='checked';
		}elseif($rt['ifshow'] == 3){
			$ifshow_3='checked';
		}else{
			$ifshow_0='checked';
		}

		require_once PrintEot('teamcp');footer();
	} elseif($_POST['step']==2){
		!$rt && usermsg('undefine_action');
		!$name && usermsg('teamcp_name');
		!$cid && usermsg('teamcp_cate');
		$name	 = Char_cv($name);
		$descrip = Char_cv($descrip);
		$notice  = Char_cv($notice);
		$gbooktype=(int)$gbooktype;
		$type=$type==1 ? 1 : 0;

		include_once(R_P.'mod/upload_mod.php');
		$attachdir = "$imgdir/upload";
		$icon = Char_cv($icon);
		$uploaddb = UploadFile('t'.$admin_uid,1);
		if ($uploaddb[0]['attachurl']) {
			$icon && P_unlink("$attachdir/$icon");
			$icon = $uploaddb[0]['attachurl'];
		}
		$db->update("UPDATE pw_team SET name='$name',cid='$cid',descrip='$descrip',icon='$icon',notice='$notice',type='$type',gbooktype='$gbooktype' WHERE teamid='$teamid' AND uid='$admin_uid'");
		usermsg('operate_success',$basename);
	}
} elseif($job=='del'){
	if($_POST['step']==2){
		if(!$selid = checkselid($selid)){
			usermsg('operate_error');	
		}
		$delid='';
		$query=$db->query("SELECT teamid FROM pw_team WHERE teamid IN($selid) AND uid='$admin_uid'");
		while($rt=$db->fetch_array($query)){
			$delid.=$delid ? ",$rt[teamid]" : "$rt[teamid]";
		}
		empty($delid) && usermsg('undefine_action');
		$db->update("DELETE FROM pw_tblog WHERE teamid IN($delid)");
		$db->update("DELETE FROM pw_tuser WHERE teamid IN($delid)");
		$db->update("DELETE FROM pw_team WHERE teamid IN($delid)");
		$db->update("DELETE FROM pw_tgbook WHERE teamid IN($delid)");
	}
	usermsg('operate_success',$basename);
} elseif($job=='gbook'){
	require_once(R_P.'mod/page_mod.php');
	(int)$page < 1 && $page = 1;
	$rs=$db->get_one("SELECT uid FROM pw_team WHERE teamid='$teamid'");
	$rs['uid']!=$admin_uid && usermsg('undefine_action');
	if(empty($step)){
		$rs=$db->get_one("SELECT COUNT(*) AS sum FROM pw_tgbook WHERE teamid='$teamid'");
		$sum=$rs['sum'];
		$pages=page($sum,$page,$db_perpage,"{$basename}&teamid=$teamid&job=gbook&");
		
		$limit="LIMIT ".($page-1)*$db_perpage.",$db_perpage";
		$gbookdb=array();
		$query=$db->query("SELECT * FROM pw_tgbook WHERE teamid='$teamid' ORDER BY postdate DESC $limit");
		while($rt=$db->fetch_array($query)){
			empty($rt['name']) && $rt['name']='guest';
			$rt['content']=substrs($rt['content'],75);
			$rt['postdate'] = get_date($rt['postdate'],'Y-m-d');
			$gbookdb[]=$rt;
		}
		require_once PrintEot('teamcp');footer();
	}elseif($_POST['step']==2){
		if(!$selid = checkselid($selid)){
			usermsg('operate_error');	
		}
		$db->update("DELETE FROM pw_tgbook WHERE teamid='$teamid' AND id IN($selid)");
		usermsg('operate_success',$basename);
	}
}
?>