📄 customer_info.php

📁 泛微协同办公系统标准版E-office V5.5的源代码内含泛微办公系统V5.5自动注册文件。
💻 PHP
字号:
<?php

function default_validate( )
{
	global $connection;
	global $customer_id;
	global $customer_name;
	global $manage_user;
	$query2 = "select up.* from user_priv as up, user as u where up.USER_PRIV=u.USER_PRIV and u.USER_ID='".$manage_user."'";
	$cursor2 = exequery( $connection, $query2 );
	if ( $row2 = mysql_fetch_array( $cursor2 ) )
	{
		$priv_no = $row2['PRIV_NO'];
	}
	$query3 = "select up.* from user_priv as up, user as u where up.USER_PRIV=u.USER_PRIV and u.USER_ID='".$_SESSION['LOGIN_USER_ID']."'";
	$cursor3 = exequery( $connection, $query3 );
	if ( $row3 = mysql_fetch_array( $cursor3 ) )
	{
		$login_priv_no = $row3['PRIV_NO'];
	}
	if ( $login_priv_no < $priv_no )
	{
		$purview_ses = "<a href=\"#\" onclick=\"customer_detail('".$customer_id."');\">".$customer_name."</a>";
	}
	else
	{
		$purview_ses = false;
	}
	return $purview_ses;
}

function dept_validate( )
{
	global $connection;
	global $purview_dept;
	if ( $purview_dept == "ALL_DEPT" )
	{
		return true;
	}
	$query2 = "select d.* from department as d, user as u where u.DEPT_ID=d.DEPT_ID and u.USER_ID='".$_SESSION['LOGIN_USER_ID']."'";
	$cursor2 = exequery( $connection, $query2 );
	if ( $row2 = mysql_fetch_array( $cursor2 ) )
	{
		$dept_id = $row2['DEPT_ID'];
	}
	if ( array_search( $dept_id, explode( ",", $purview_dept ) ) !== false )
	{
		return true;
	}
	else
	{
		return false;
	}
}

function role_validate( )
{
	global $connection;
	global $purview_role;
	$query2 = "select up.* from user_priv as up, user as u where up.USER_PRIV=u.USER_PRIV and u.USER_ID='".$_SESSION['LOGIN_USER_ID']."'";
	$cursor2 = exequery( $connection, $query2 );
	if ( $row2 = mysql_fetch_array( $cursor2 ) )
	{
		$login_priv_no = $row2['USER_PRIV'];
	}
	if ( array_search( $login_priv_no, explode( ",", $purview_role ) ) !== false )
	{
		return true;
	}
	else
	{
		return false;
	}
}

function user_validate( )
{
	global $connection;
	global $purview_user;
	if ( array_search( $_SESSION['LOGIN_USER_ID'], explode( ",", $purview_user ) ) !== false )
	{
		return true;
	}
	else
	{
		return false;
	}
}

include_once( "inc/auth.php" );
$connection = openconnection( );
$query = "SELECT * from CUSTOMER where CUSTOMER_NAME like '%{$CUSTOMER_NAME}%' order by CUSTOMER_NAME";
$cursor = exequery( $connection, $query );
while ( $ROW = mysql_fetch_array( $cursor ) )
{
	$customer_id = $ROW['CUSTOMER_ID'];
	$customer_name = $ROW['CUSTOMER_NAME'];
	$manage_user = $ROW['MANAGE_USER'];
	$purview = $ROW['PURVIEW'];
	$purview_dept = $ROW['PURVIEW_DEPT'];
	$purview_role = $ROW['PURVIEW_ROLE'];
	$purview_user = $ROW['PURVIEW_USER'];
	switch ( $purview )
	{
	case "1" :
		$purview_ses = default_validate( );
		break;
	case "2" :
		$purview_ses = "<a href=\"#\" onclick=\"customer_detail('".$customer_id."');\">".$customer_name."</a>";
		break;
	case "3" :
		$dept_validate = dept_validate( );
		$role_validate = role_validate( );
		$user_validate = user_validate( );
		if ( ( $dept_validate || $role_validate || $user_validate ) === false )
		{
			$purview_ses = default_validate( );
		}
		else
		{
			$purview_ses = "<a href=\"#\" onclick=\"customer_detail('".$customer_id."');\">".$customer_name."</a>";
		}
	}
	if ( $manage_user == $_SESSION['LOGIN_USER_ID'] || $manage_user == "" )
	{
		$purview_ses = "<a href=\"#\" onclick=\"customer_detail('".$customer_id."');\">".$customer_name."</a>";
	}
	if ( $purview_ses == false )
	{
	}
	else
	{
		$str_customer_id .= $customer_id.",";
	}
}
$str_customer_id = substr( $str_customer_id, 0, -1 );
$str_customer_id = $str_customer_id == "" ? 0 : $str_customer_id;
echo "\r\n<html>\r\n<head>\r\n<title>选择客户</title>\r\n<meta http-equiv=\"Content-Type\" content=\"text/html; charset=gb2312\">\r\n";
include_once( "inc/menu_button.js" );
echo "\r\n";
echo "<s";
echo "cript Language=\"JavaScript\">\r\nvar parent_window = parent.dialogArguments;\r\n\r\nfunction add_customer(customer_id,customer_name)\r\n{\r\n  var objCid = parent_window.form1.CUSTOMER_ID;\r\n  var objLid = parent_window.form1.linkman_id;\r\n  var objUser = parent_window.form1.linkman_user;\r\n  if (objCid.value != customer_id){\r\n\t  objLid.value = \"\";\r\n\t  objUser.value = \"\";\r\n  }\r\n\r\n  parent_window.form1.CUSTOMER_";
echo "ID.value=\"\";\r\n\tparent_window.form1.CUSTOMER_NAME.value=\"\";\r\n\t\r\n  CUSTOMER_VAL=parent_window.form1.CUSTOMER_ID.value;\r\n  if(CUSTOMER_VAL.indexOf(\",\"+customer_id+\",\")<0 && CUSTOMER_VAL.indexOf(customer_id+\",\")!=0 && (parent_window.form1.CUSTOMER_ID.value!=\"ALL_CUSTOMER\"))\r\n  {\r\n    parent_window.form1.CUSTOMER_ID.value+=customer_id;\r\n    parent_window.form1.CUSTOMER_NAME.value+=customer_name;\r\n  }\r\n ";
echo " parent_window.disabledSlID();\r\n}\r\n\r\n</script>\r\n</head>\r\n\r\n<body class=\"bodycolor\" onMouseover=\"borderize_on(event)\" onMouseout=\"borderize_off(event)\" onclick=\"borderize_on1(event)\" topmargin=\"0\" leftmargin=\"0\">\r\n";
$query = "SELECT * from CUSTOMER where CUSTOMER_ID IN(".$str_customer_id.") and  CUSTOMER_NAME like '%{$CUSTOMER_NAME}%' order by CUSTOMER_NAME";
$cursor = exequery( $connection, $query );
$CUSTOMER_COUNT = 0;
while ( $ROW = mysql_fetch_array( $cursor ) )
{
	$customer_id = $ROW['CUSTOMER_ID'];
	$customer_name = $ROW['CUSTOMER_NAME'];
	$manage_user = $ROW['MANAGE_USER'];
	$purview = $ROW['PURVIEW'];
	$purview_dept = $ROW['PURVIEW_DEPT'];
	$purview_role = $ROW['PURVIEW_ROLE'];
	$purview_user = $ROW['PURVIEW_USER'];
	switch ( $purview )
	{
	case "1" :
		$purview_ses = default_validate( );
		break;
	case "2" :
		$purview_ses = "<a href=\"#\" onclick=\"customer_detail('".$customer_id."');\">".$customer_name."</a>";
		break;
	case "3" :
		$dept_validate = dept_validate( );
		$role_validate = role_validate( );
		$user_validate = user_validate( );
		if ( ( $dept_validate || $role_validate || $user_validate ) === false )
		{
			$purview_ses = default_validate( );
		}
		else
		{
			$purview_ses = "<a href=\"#\" onclick=\"customer_detail('".$customer_id."');\">".$customer_name."</a>";
		}
	}
	if ( $manage_user == $_SESSION['LOGIN_USER_ID'] || $manage_user == "" )
	{
		$purview_ses = "<a href=\"#\" onclick=\"customer_detail('".$customer_id."');\">".$customer_name."</a>";
	}
	if ( $purview_ses == false )
	{
	}
	else
	{
		++$CUSTOMER_COUNT;
		if ( $CUSTOMER_COUNT == 1 )
		{
			echo "<table border=\"0\" cellspacing=\"1\" width=\"95%\" class=\"small\" cellpadding=\"5\"  bordercolorlight=\"#000000\" bordercolordark=\"#FFFFFF\"  align=\"center\">\r\n";
		}
		echo "<tr class=\"TableLine1\">\r\n  <td align=\"center\" onclick=\"javascript:add_customer('";
		echo $customer_id;
		echo "','";
		echo $customer_name;
		echo "')\" style=\"cursor:hand\">";
		echo $customer_name;
		echo "</a></td>\r\n</tr>\r\n";
		++$CUSTOMER_COUNT;
		if ( 100 <= $CUSTOMER_COUNT )
		{
			break;
		}
	}
}
if ( $CUSTOMER_COUNT == 0 )
{
	message( "提示", "没有定义客户" );
}
else
{
	echo "<thead class=\"TableHeader\">\r\n  <th>选择客户（最多显示50条）</th>\r\n</thead>\r\n</table>\r\n";
}
echo "</body>\r\n</html>\r\n";
?>
⌨️ 快捷键说明

复制代码 Ctrl + C
搜索代码 Ctrl + F
全屏模式 F11
切换主题 Ctrl + Shift + D
显示快捷键 ?
增大字号 Ctrl + =
减小字号 Ctrl + -