postnew.php

自己写的一个网络日志(BLOG)系统

<?php
/**
 * Copyright (c) 2003-07  PHPWind.net. All rights reserved.
 * 
 * @filename: postnew.php
 * @author: Noizy ([e-mail]), QQ:7703883
 * @modify: Mon Mar 19 18:21:07 CST 2007
 */
!defined('USERPOST') && exit('Forbidden');
if ($_POST['step']!=2) {
	$atc_title = $html_CK = $ifsign_CK = $atc_content = $allowreply_0 = '';
	$icon_0 = $allowreply_1 = 'CHECKED';
	$ifhide_0 = 'SELECTED';
	if ($type == 'bookmark') {
		$bookmarkurl = '';
	} elseif ($type == 'file') {
		$absoluteurl = array();
		$unit = 'GB';
		$version = 'v1.0';
		$size = $language = $filetype = $os_Win9x = $os_Me = $os_NT = $os_2000 = $os_XP = $os_2003 = $os_linux = $os_unix = $level = $publish = $publishlink = $manner = '';
		$updatetime = get_date($timestamp,"Y-m-d");
	} elseif ($type == 'goods') {
		$quality_secondhand = $price = $feemode_2 = $maillfee = $expressfee = $emsfee = $province = $city = $alipay = $paypal = $pay99bill = '';
		$quality_new = $feemode_1 = 'CHECKED';
	} elseif ($type == 'music') {
		$musicurl = array();
		$singer = '';
	} elseif ($type == 'photo') {
		$absoluteurl = array();
	}
	if ($db_cbbbsopen=='1') {
		require_once(R_P.'mod/passport.php');
		$bbsfcache = '';
		$_BBSFDB = UpdateBbsForum();
		foreach ($_BBSFDB as $value) {
			$bbsfcache .= "<option value=\"$value[fid]\">$value[option]</option>";
		}
		unset($_BBSFDB);
	}
	foreach ($catedb as $value) {
		$add = '';
		for ($i=0;$i<$value['type'];$i++) {
			$add .= '>';
		}
		$forumcache .= "<option value=\"$value[cid]\">$add $value[name]</option>";
	}
	foreach ($dirdb as $value) {
 		$itemcache .= "<option id=\"dirop$value[typeid]\" value=\"$value[typeid]\">$value[name]</option>";
 		$itemarray[$value['typeid']] = array('name' => $value['name'],'vieworder' => (int)$value['vieworder']);
	}
	require_once PrintEot('post');footer();
} else {
	$spostnum = $postnum = '';
	list($postnum) = explode(',',$_GROUP['postnum']);
	list($limitnum) = explode(',',$_GROUP['limitnum']);
	$limitnum && ($timestamp - $admindb['lastpost'] < $limitnum) && usermsg('time_limit');
	$postnum && $admindb['todaypost'] >= $postnum && usermsg('post_limit');
	InitGP(array('atc_ifsign','atc_autourl','gdcode','atc_iconid','atc_cid','atc_dirid','atc_tagdb','atc_allowreply','atc_ifhide','atc_bbsfid','atc_teamid'),'P');
	if ($admindb['items'] < $postgd) {
		$cknum = GetCookie('cknum');
		Cookie('cknum','',0);
		if (!$gdcode || !SafeCheck(explode("\t",StrCode($cknum,'DECODE')),$gdcode)) {
			usermsg('gdcode_error');
		}
	}
	$intofeild = $updatefeile = '';
	if ($type == 'photo') {
		$absoluteurl = GetGP('absoluteurl','P');
		$temparray = array();
		if (is_array($absoluteurl)) {
			foreach ($absoluteurl as $key => $value) {
				is_numeric($key) && $value && $temparray[$key] = $value;
			}
		}
		if (!empty($temparray)) {
			Strip_S($temparray);
			$absoluteurl = addslashes(serialize($temparray));
		} else {
			$absoluteurl = '';
		}
		$intofeild   = ',absoluteurl';
		$updatefeile = ",'$absoluteurl'";
	} elseif ($type == 'music') {
		InitGP(array('singer','songname','songurl'),'P');
		$musicurl = array();
		if (is_array($songname) && is_array($songurl)) {
			foreach ($songname as $key => $value) {
				is_numeric($key) && $value && $musicurl[$key]['name'] = $value;
			}
			foreach ($songurl as $key => $value) {
				is_numeric($key) && $value && $musicurl[$key]['url'] = $value;
			}
		}
		if (!empty($musicurl)) {
			Strip_S($musicurl);
			$musicurl = addslashes(serialize($musicurl));
		} else {
			$musicurl = '';
		}
		$intofeild   = ',singer,musicurl';
		$updatefeile = ",'$singer','$musicurl'";
	} elseif ($type == 'goods') {
		InitGP(array('quality','price','feemode','maillfee','expressfee','emsfee','province','city','alipay','paypal','pay99bill'),'P');
		$price		= round($price,2);
		$feemode	= (int)$feemode;
		$maillfee	= (int)$maillfee;
		$expressfee = (int)$expressfee;
		$emsfee 	= (int)$emsfee;
		$intofeild   = ',quality,price,feemode,maillfee,expressfee,emsfee,province,city,alipay,paypal,pay99bill';
		$updatefeile = ",'$quality','$price','$feemode','$maillfee','$expressfee','$emsfee','$province','$city','$alipay','$paypal','$pay99bill'";
	} elseif ($type == 'bookmark') {
		$bookmarkurl = GetGP('bookmarkurl','P');
		(!$bookmarkurl || !preg_match("/^http|mms/i",$bookmarkurl)) && usermsg('bookmark_url_error');
		$intofeild   = ',bookmarkurl';
		$updatefeile = ",'$bookmarkurl'";
	} elseif ($type == 'file') {
		InitGP(array('filesize','unit','version','updatetime','language','filetype','os','level','publish','publishlink','manner','filename','fileurl'),'P');
		$absoluteurl = $newos = array();
		if (is_array($filename) && is_array($fileurl)) {
			foreach ($filename as $key => $value) {
				is_numeric($key) && $value && $absoluteurl[$key]['name'] = $value;
			}
			foreach ($url as $key => $value) {
				is_numeric($key) && $value && $absoluteurl[$key]['url'] = $value;
			}
		}
		if (!empty($absoluteurl)) {
			Strip_S($absoluteurl);
			$absoluteurl = addslashes(serialize($absoluteurl));
		} else {
			$absoluteurl = '';
		}
		$flsize = (int)$flsize;
		if (is_array($os)) {
			foreach ($os as $key => $value) {
				is_numeric($key) && $value && $newos[$key] = $value;
			}
		}
		if (!empty($newos)) {
			Strip_S($newos);
			$os = addslashes(implode(',',$newos));
		} else {
			$os = '';
		}
		$intofeild   = ',absoluteurl,size,unit,version,updatetime,language,type,os,level,publish,publishlink,manner';
		$updatefeile = ",'$absoluteurl','$filesize','$unit','$version','$updatetime','$language','$filetype','$os','$level','$publish','$publishlink','$manner'";
	}
	($type != 'blog' && (!$intofeild || !$updatefeile)) && usermsg('undefined_action');
	
	$attachdb = (array)$_POST['attachdb'];
	list($atc_title,$atc_content) = ConCheck($_POST['atc_title'],$_POST['atc_content']);
	$atc_ifsign = $atc_ifsign ? 1 : 0;
	($_GROUP['htmlcode'] && $_POST['atc_htmlcode']) && $atc_ifsign += 2;
	$atc_content = Atc_cv($atc_content,$atc_ifsign);
	$ifconvert = ($atc_content==convert($atc_content,$db_post)) ? 0 : 1;
	$ifwordsfb = 0;
	$cktitle = $atc_title;
	$ckcontent = $atc_content;
	foreach ($_FORBIDDB as $value) {
		$cktitle = N_strireplace($value['word'],$value['wordreplace'],$cktitle);
		$ckcontent = N_strireplace($value['word'],$value['wordreplace'],$ckcontent);
	}
	if ($cktitle != $atc_title) {
		$atc_title = $cktitle;
		$ifwordsfb = 1;
	}
	if ($ckcontent != $atc_content) {
		$atc_content = $ckcontent;
		$ifwordsfb = 1;
	}
	$atc_cid		= (int)$atc_cid;
	$atc_dirid		= (int)$atc_dirid;
	$atc_iconid 	= (int)$atc_iconid;
	$ifcheck		= $db_postcheck ? 0 : 1;
	$atc_allowreply = (int)$atc_allowreply;
	$atc_ifhide 	= (int)$atc_ifhide;
	$atc_bbsfid 	= (int)$atc_bbsfid;
	$atc_teamid 	= (int)$atc_teamid;
	$ipfrom 		= cvipfrom($onlineip);
	$db->update("INSERT INTO pw_items (cid,bbsfid,dirid,uid,author,type,icon,subject,postdate,lastpost,allowreply,ifcheck,ifwordsfb,ifhide) VALUES ('$atc_cid','$atc_bbsfid','$atc_dirid','$admin_uid','".addslashes($admin_name)."','$type','$atc_iconid','$atc_title','$timestamp','$timestamp','$atc_allowreply','$ifcheck','$ifwordsfb','$atc_ifhide')");
	$itemid = $db->insert_id();
	$newtagdb = array();
	if (is_array($atc_tagdb)) {
		foreach ($atc_tagdb as $key => $value) {
			is_numeric($key) && $value && $newtagdb[$key] = $value;
		}
	}
 	$atc_tagdb = AddTag($newtagdb,$type,$itemid);
	$db->update("INSERT INTO pw_$type (itemid,tags,userip,ifsign,ipfrom{$intofeild},ifconvert,content) VALUES('$itemid','$atc_tagdb','$onlineip','$atc_ifsign','$ipfrom'{$updatefeile},'$ifconvert','$atc_content')");
	$ifcheck && $db->update("UPDATE pw_categories SET counts=counts+1 WHERE cid='$atc_cid'");
	updatecache_cate($type);
	$userdb = $ifcheck ? array('uid' => $admin_uid,'type' => $type,'items' => $admindb['items'],'todaypost' => $admindb['todaypost'],'lastpost' => $admindb['lastpost']) : array();
	update_post($userdb);
	UploadSQL($admin_uid,$itemid,$atc_cid,$type);
	if ($db_cbbbsopen=='1' && (int)$atc_bbsfid>1) {
		
		$uploads = $db->get_value("SELECT uploads FROM pw_items WHERE itemid='$itemid'");
		$uploads = unserialize($uploads);
		if (is_array($uploads)) {
			foreach ($uploads as $key => $value) {
				is_numeric($key) && $value && $uploads = $value;
			}
		}
		if($uploads['type'] == 'img' && !empty($uploads['type'])){
			$atc_content .= '</br></br></br><font color="red">blog鍥剧墖:</font></br><img src="'.$db_blogurl.'/'.$attpath.'/'.$uploads['attachurl'].'"/>';
		}elseif(!empty($uploads['type'])){
			$atc_content .= '</br></br></br>blog闄勪欢:<a href="'.$db_blogurl.'/'.$attpath.'/'.$uploads['attachurl'].'"/><font color="red">'.$uploads['name'].'</font></a>';
		}else{
			$atc_content .= '';
		}
		
		require_once(R_P.'mod/passport.php');
		IntoBbsForum($atc_bbsfid,$itemid,$type);
	} else {
		$atc_bbsfid = 0;
	}
	$atc_teamid > 0 && pushitem($itemid,$atc_teamid,$type);
	usermsg('operate_success',"$user_file?action=itemcp&type=$type");
}
function AddTag($tagdb,$tagtype,$tid){
	global $db,$admin_uid,$admin_name,$atc_title,$timestamp;
	$return = '';
	if (!$tid) {
		return $return;
	}
	$tagdb = array_unique($tagdb);
	$tagnum = $tagtype.'num';
	foreach ($tagdb as $value) {
		if ($value) {
			$value = trim(Tag_cv($value));
			$tagid = $db->get_value("SELECT tagid FROM pw_tags WHERE tagname='$value'");
			if ($tagid) {
				$db->update("UPDATE pw_tags SET $tagnum=$tagnum+1,allnum=allnum+1 WHERE tagid='$tagid'");
				$db->update("INSERT INTO pw_taginfo (tagid,tagname,uid,itemid,tagtype,author,subject,addtime) VALUES ('$tagid','$value','$admin_uid','$tid','$tagtype','".addslashes($admin_name)."','$atc_title','$timestamp')");
				$return .= ($return ? ',' : '').$value;
			}
		}
	}
	return $return;
}
function update_post($userdb){
	global $db,$db_credit,$timestamp,$tdtime;
	if (!empty($userdb)) {
		$memberid = getmemberid($userdb['items']);
		$typenum = $userdb['type'].'s';
		if ($userdb['lastpost'] < $tdtime) {
			$userdb['todaypost'] = 1;
		} else {
			$userdb['todaypost']++;
		}
		list($rvrc,$money) = explode(',',$db_credit);
		$rvrc = floor($rvrc/10);
		$db->update("UPDATE pw_user SET memberid='$memberid', $typenum=$typenum+1,items=items+1,todaypost='$userdb[todaypost]',lastpost='$timestamp',rvrc=rvrc+'$rvrc',money=money+'$money' WHERE uid='$userdb[uid]'");
	}
}
function Tag_cv($tag){
	$chars = "`~!@#$%^&*()_-+=|\\{}[]:\";',./<>?";
	$len = strlen($chars);
	for ($i=0; $i<$len; $i++) {
		$tag = str_replace($chars[$i],'',$tag);
	}
	return $tag;
}
function getmemberid($nums){
	global $_gmember;
	$gid = 0;
	foreach ($_gmember as $key => $value) {
		(int)$nums>=$value['creditneed'] && $gid = $key;
	}
	return $gid;
}
?>