gbookfun.php

一、超强系统模型扩展功能 EmpireCMS卓越之处在于：不仅提供了网站管理功能

<?php
//发表留言
function AddGbook($add){
	global $empire,$dbtbpre,$level_r;
	CheckCanPostUrl();//验证来源
	$bid=(int)getcvar('gbookbid');
	if(empty($bid))
	{
		$bid=intval($add[bid]);
	}
	$name=RepPostStr(trim($add[name]));
	$email=RepPostStr($add[email]);
	$call=RepPostStr($add[call]);
	$lytext=RepPostStr($add[lytext]);
	if(empty($bid)||empty($name)||empty($email)||!trim($lytext))
	{
		printerror("EmptyGbookname","history.go(-1)",1);
    }
	$lasttime=getcvar('lastgbooktime');
	if($lasttime)
	{
		if(time()-$lasttime<$public_r['regbooktime'])
		{
			printerror("GbOutTime","",1);
		}
	}
	//版面是否存在
	$br=$empire->fetch1("select bid,checked,groupid from {$dbtbpre}enewsgbookclass where bid='$bid';");
	if(empty($br[bid]))
	{
		printerror("EmptyGbook","history.go(-1)",1);
	}
	//权限
	if($br['groupid'])
	{
		$user=islogin();
		if($level_r[$br[groupid]][level]>$level_r[$user[groupid]][level])
		{
			printerror("HaveNotEnLevel","history.go(-1)",1);
		}
	}
	$lytime=date("Y-m-d H:i:s");
	$ip=egetip();
	$userid=(int)getcvar('mluserid');
	$username=getcvar('mlusername');
	$sql=$empire->query("insert into {$dbtbpre}enewsgbook(name,email,`call`,lytime,lytext,retext,bid,ip,checked,userid,username) values('$name','$email','$call','$lytime','$lytext','',$bid,'$ip',$br[checked],$userid,'$username');");
	if($sql)
	{
		esetcookie("lastgbooktime",time(),time()+3600*24);//设置最后发表时间
		$reurl=DoingReturnUrl("../tool/gbook?bid=$bid",$add['ecmsfrom']);
		printerror("AddGbookSuccess",$reurl,1);
	}
	else
	{printerror("DbError","history.go(-1)",1);}
}
?>