📄 search.php
字号:
<?php
include_once( "inc/auth.php" );
include_once( "inc/utility_all.php" );
echo "\n<html>\n<head>\n<title>人员查询结果 </title>\n<meta http-equiv=\"Content-Type\" content=\"text/html; charset=gb2312\">\n";
echo "<s";
echo "cript Language=\"JavaScript\">\nfunction delete_user(DEPT_ID,USER_ID)\n{\n msg='确认要删除用户 '+USER_ID+' 么?';\n if(window.confirm(msg))\n {\n URL=\"delete.php?DEPT_ID=\" + DEPT_ID + \"&USER_ID=\" + USER_ID;\n window.location=URL;\n }\n}\n\nfunction no_pass(DEPT_ID,USER_ID)\n{\n msg='确认要清空用户 '+USER_ID+' 的密码么?';\n if(window.confirm(msg))\n {\n URL=\"no_pass.php?DEPT_ID=\" + DEPT_ID + \"&USER_ID=\" + USER_I";
echo "D;\n window.location=URL;\n }\n}\n</script>\n</head>\n\n<body class=\"bodycolor\" topmargin=\"5\" >\n";
$query = "SELECT * from USER_PRIV where USER_PRIV={$LOGIN_USER_PRIV}";
$cursor = exequery( $connection, $query );
if ( $ROW = mysql_fetch_array( $cursor ) )
{
$PRIV_NO = $ROW['PRIV_NO'];
}
if ( $USER_ID != "" )
{
$WHERE_STR .= " and USER_ID like '%".$USER_ID."%'";
}
if ( $USER_NAME != "" )
{
$WHERE_STR .= " and USER_NAME like '%".$USER_NAME."%'";
}
if ( $SEX != "" )
{
$WHERE_STR .= " and SEX={$SEX}";
}
if ( $DEPT_ID != "" )
{
$WHERE_STR .= " and USER.DEPT_ID={$DEPT_ID}";
}
if ( $DUTY_TYPE != "" )
{
$WHERE_STR .= " and DUTY_TYPE={$DUTY_TYPE}";
}
if ( $USER_PRIV != "" )
{
$WHERE_STR .= " and USER.USER_PRIV={$USER_PRIV}";
}
if ( $POST_PRIV != "" )
{
$WHERE_STR .= " and POST_PRIV={$POST_PRIV}";
}
if ( $CANBROADCAST != "" )
{
$WHERE_STR .= " and CANBROADCAST={$CANBROADCAST}";
}
echo "<table border=\"0\" width=\"100%\" cellspacing=\"0\" cellpadding=\"3\" class=\"small\">\n <tr>\n <td class=\"Big\"><img src=\"/images/edit.gif\" WIDTH=\"22\" HEIGHT=\"20\" align=\"absmiddle\">";
echo "<s";
echo "pan class=\"big3\"> 用户查询</span>\n </td>\n </tr>\n</table>\n";
$USER_COUNT = 0;
if ( $LOGIN_USER_PRIV != "1" )
{
$query = "SELECT * from USER,USER_PRIV,DEPARTMENT where DEPARTMENT.DEPT_ID=USER.DEPT_ID and USER.USER_PRIV=USER_PRIV.USER_PRIV and USER_PRIV.PRIV_NO>{$PRIV_NO} and USER_PRIV.USER_PRIV!=1 ".$WHERE_STR." order by DEPT_NO,PRIV_NO,USER_NAME";
}
else
{
$query = "SELECT * from USER,USER_PRIV,DEPARTMENT where DEPARTMENT.DEPT_ID=USER.DEPT_ID and USER.USER_PRIV=USER_PRIV.USER_PRIV ".$WHERE_STR." order by DEPT_NO,PRIV_NO,USER_NAME";
}
$cursor = exequery( $connection, $query );
while ( $ROW = mysql_fetch_array( $cursor ) )
{
$USER_ID = $ROW['USER_ID'];
$USER_NAME = $ROW['USER_NAME'];
$DEPT_ID = $ROW['DEPT_ID'];
$USER_PRIV = $ROW['USER_PRIV'];
$POST_PRIV = $ROW['POST_PRIV'];
$DUTY_TYPE = $ROW['DUTY_TYPE'];
if ( !is_dept_priv( $DEPT_ID ) )
{
}
else
{
++$USER_COUNT;
$query1 = "SELECT * from DEPARTMENT where DEPT_ID=".$DEPT_ID;
$cursor1 = exequery( $connection, $query1 );
if ( $ROW = mysql_fetch_array( $cursor1 ) )
{
$DEPT_NAME = $ROW['DEPT_NAME'];
}
else
{
$DEPT_NAME = "离职人员/外部人员";
}
if ( $POST_PRIV == "0" )
{
$POST_PRIV = "本部门";
}
else if ( $POST_PRIV == "1" )
{
$POST_PRIV = "全体";
}
else if ( $POST_PRIV == "2" )
{
$POST_PRIV = "指定部门";
}
$query1 = "SELECT * from USER_PRIV where USER_PRIV='{$USER_PRIV}'";
$cursor1 = exequery( $connection, $query1 );
if ( $ROW = mysql_fetch_array( $cursor1 ) )
{
$USER_PRIV = $ROW['PRIV_NAME'];
}
if ( $DUTY_TYPE != "" )
{
$query1 = "SELECT * from ATTEND_CONFIG where DUTY_TYPE={$DUTY_TYPE}";
$cursor1 = exequery( $connection, $query1 );
if ( $ROW = mysql_fetch_array( $cursor1 ) )
{
$DUTY_NAME = $ROW['DUTY_NAME'];
}
}
else
{
$DUTY_NAME = "";
}
$DEPT_LONG_NAME = dept_long_name( $DEPT_ID );
if ( $USER_COUNT == 1 )
{
echo "\n <table align=\"center\" border=\"0\" cellspacing=\"1\" width=\"100%\" class=\"small\" bgcolor=\"#000000\" cellpadding=\"3\">\n\n";
}
$query = "SELECT * from SYS_LOG where USER_ID='{$USER_ID}' and TYPE='1' order by TIME desc";
$cursor1 = exequery( $connection, $query );
if ( $ROW1 = mysql_fetch_array( $cursor1 ) )
{
$TIME = $ROW1['TIME'];
}
else
{
$TIME = "";
}
$query = "SELECT count(*) from SYS_LOG where USER_ID='{$USER_ID}'";
$cursor1 = exequery( $connection, $query );
if ( $ROW1 = mysql_fetch_array( $cursor1 ) )
{
$LOGIN_COUNT = $ROW1[0];
}
if ( $USER_COUNT % 2 == 1 )
{
$TableLine = "TableLine1";
}
else
{
$TableLine = "TableLine2";
}
echo " <tr class=\"";
echo $TableLine;
echo "\">\n <td nowrap align=\"center\" title=\"";
echo $DEPT_LONG_NAME;
echo "\">";
echo $DEPT_NAME;
echo "</td>\n <td nowrap align=\"center\">";
echo $USER_ID;
echo "</td>\n <td nowrap align=\"center\">";
echo $USER_NAME;
echo "</td>\n <td nowrap align=\"center\">";
echo $DEPT_NAME;
echo "</td>\n <td nowrap align=\"center\">";
echo $DUTY_NAME;
echo "</td>\n <td nowrap align=\"center\">";
echo $USER_PRIV;
echo "</td>\n <td nowrap align=\"center\">";
echo $POST_PRIV;
echo "</td>\n <td nowrap align=\"center\">";
echo $TIME;
echo "</td>\n <td nowrap align=\"center\">";
echo $LOGIN_COUNT;
echo "</td>\n <td nowrap align=\"center\">\n <a href=\"user_edit.php?USER_ID=";
echo $USER_ID;
echo "\"> 编辑</a> \n";
if ( $USER_ID != "admin" && $USER_ID != $LOGIN_USER_ID )
{
echo " <a href=\"javascript:delete_user('";
echo $DEPT_ID;
echo "','";
echo $USER_ID;
echo "');\"> 删除</a>\n";
}
if ( $LOGIN_USER_ID == "admin" )
{
echo " <br><a href=\"javascript:no_pass('";
echo $DEPT_ID;
echo "','";
echo $USER_ID;
echo "');\">admin清空密码</a>\n";
}
echo " </td>\n </tr>\n";
}
}
if ( 0 < $USER_COUNT )
{
echo " <thead class=\"TableHeader\">\n <td nowrap align=\"center\">部门</td>\n <td nowrap align=\"center\">用户名</td>\n <td nowrap align=\"center\">真实姓名</td>\n <td nowrap align=\"center\">部门</td>\n <td nowrap align=\"center\">排班</td>\n <td nowrap align=\"center\">角色</td>\n <td nowrap align=\"center\">管理范围</td>\n <td nowrap align=\"center\">最后一次登录时间</td>\n <td nowrap align=\"cent";
echo "er\">登录次数</td>\n <td nowrap align=\"center\">操作</td>\n </thead>\n </table>\n";
message( "", "共".$USER_COUNT."个可管理用户" );
}
else
{
message( "", "无符合条件的用户!" );
}
echo "\n<br>\n<div align=\"center\">\n <input type=\"button\" value=\"返回\" class=\"BigButton\" onClick=\"history.back();\">\n</div>\n\n</body>\n</html>";
?>
⌨️ 快捷键说明
复制代码
Ctrl + C
搜索代码
Ctrl + F
全屏模式
F11
切换主题
Ctrl + Shift + D
显示快捷键
?
增大字号
Ctrl + =
减小字号
Ctrl + -