sys_admin_user_edit.php

来自「这是matlab的一个小程序」· PHP 代码 · 共 113 行

<?php
require_once(dirname(__FILE__)."/config.php");
CheckPurview('sys_User');
require_once(DEDEINC."/typelink.class.php");
if(empty($dopost))
{
	$dopost = '';
}
$id = ereg_replace('[^0-9]','',$id);
if($dopost=='saveedit')
{
	$pwd = trim($pwd);
	if($pwd!='' && ereg("[^0-9a-zA-Z_@!\.-]",$pwd))
	{
		ShowMsg('密码不合法，请使用[0-9a-zA-Z_@!.-]内的字符！','-1',0,3000);
		exit();
	}
	$safecodeok = substr(md5($cfg_cookie_encode.$randcode),0,24);
	if($safecodeok!=$safecode)
	{
		ShowMsg("请填写正确的安全验证串！","sys_admin_user_edit.php?id={$id}&dopost=edit");
		exit();
	}
	$pwdm = '';
	if($pwd!='')
	{
		$pwdm = ",pwd='".md5($pwd)."'";
		$pwd = ",pwd='".substr(md5($pwd),5,20)."'";
	}
	if($id!=1)
	{
		$query = "Update `#@__admin` set uname='$uname',usertype='$usertype',tname='$tname',email='$email',typeid='$typeid' $pwd where id='$id'";
	}
	else
	{
		$query = "Update `#@__admin` set uname='$uname',tname='$tname',email='$email',typeid='$typeid' $pwd where id='$id'";
	}
	$dsql->ExecuteNoneQuery($query);
	$query = "Update `#@__member` set uname='$uname',email='$email'$pwdm where mid='$id'";
	$dsql->ExecuteNoneQuery($query);
	ShowMsg("成功更改一个帐户！","sys_admin_user.php");
	exit();
}
else if($dopost=='delete')
{
	if(empty($userok))
	{
		$userok="";
	}
	if($userok!="yes")
	{
		$randcode = mt_rand(10000,99999);
		$safecode = substr(md5($cfg_cookie_encode.$randcode),0,24);
		require_once(DEDEINC."/oxwindow.class.php");
		$wintitle = "删除用户";
		$wecome_info = "<a href='sys_admin_user.php'>系统帐号管理</a>::删除用户";
		$win = new OxWindow();
		$win->Init("sys_admin_user_edit.php","js/blank.js","POST");
		$win->AddHidden("dopost",$dopost);
		$win->AddHidden("userok","yes");
		$win->AddHidden("randcode",$randcode);
		$win->AddHidden("safecode",$safecode);
		$win->AddHidden("id",$id);
		$win->AddTitle("系统警告！");
		$win->AddMsgItem("你确信要删除用户：$userid 吗？","50");
		$win->AddMsgItem("安全验证串：<input name='safecode' type='text' id='safecode' size='16' style='width:200px' />&nbsp;(复制本代码： <font color='red'>$safecode</font> )","30");
		$winform = $win->GetWindow("ok");
		$win->Display();
		exit();
	}
	$safecodeok = substr(md5($cfg_cookie_encode.$randcode),0,24);
	if($safecodeok!=$safecode)
	{
		ShowMsg("请填写正确的安全验证串！","sys_admin_user.php");
		exit();
	}

	//不能删除id为1的创建人帐号，不能删除自己
	$rs = $dsql->ExecuteNoneQuery2("Delete From `#@__admin` where id='$id' And id<>1 And id<>'".$cuserLogin->getUserID()."' ");
	if($rs>0)
	{
		//更新前台用户信息
		$dsql->ExecuteNoneQuery("Update From `#@__member` set matt='0' where mid='$id' limit 1");
		ShowMsg("成功删除一个帐户！","sys_admin_user.php");
	}
	else
	{
		ShowMsg("不能删除id为1的创建人帐号，不能删除自己！","sys_admin_user.php",0,3000);
	}
	exit();
}

//显示用户信息
$randcode = mt_rand(10000,99999);
$safecode = substr(md5($cfg_cookie_encode.$randcode),0,24);
$typeOptions = '';
$row = $dsql->GetOne("Select * From `#@__admin` where id='$id'");
$dsql->SetQuery("Select id,typename From `#@__arctype` where reid=0 And (ispart=0 Or ispart=1)");
$dsql->Execute('op');
while($nrow = $dsql->GetObject('op'))
{
	if($row['typeid']==$nrow->id)
	{
		$typeOptions .= "<option value='{$nrow->id}' selected>{$nrow->typename}</option>\r\n";
	}
	else
	{
		$typeOptions .= "<option value='{$nrow->id}'>{$nrow->typename}</option>\r\n";
	}
}
include DedeInclude('templets/sys_admin_user_edit.htm');

?>