permission_do.php

泛微协同办公系统标准版E-office V5.5的源代码内含泛微办公系统V5.5自动注册文件。

<?php

include_once( "inc/auth.php" );
$f = $_REQUEST['f'];
switch ( $f )
{
case "update" :
	$prcs_user = $_REQUEST['PERMISSION_USER_ID'];
	$prcs_dept = $_REQUEST['PERMISSION_DEPT_ID'];
	$prcs_priv = $_REQUEST['PERMISSION_PRIV_ID'];
	$sql = "\r\n\t\t\t\t\tSELECT * FROM flow_process \r\n\t\t\t\t\t\tWHERE ID='".$_REQUEST['ID']."' \r\n\t\t\t\t\t\tAND FLOW_ID='".$_REQUEST['FLOW_ID']."' ";
	$rs = exequery( $connection, $sql );
	$row = mysql_fetch_array( $rs );
	$pd_user = $row['PRCS_DEFAULT_USER'];
	$pd_manage = $row['PRCS_DEFAULT_MANAGE'];
	$pd_user_s = $pd_user;
	if ( $pd_user != "" )
	{
		$array_u = explode( ",", $pd_user );
		while ( list( $key, $var ) = each( $array_u ) )
		{
			if ( $var != "" )
			{
				$sql = "SELECT * FROM user WHERE USER_ID='".$var."'";
				$rs = exequery( $connection, $sql );
				$row = mysql_fetch_array( $rs );
				$m_priv = $row['USER_PRIV'];
				$m_dept = $row['DEPT_ID'];
				$ishavemu = 1;
				$ishavemd = 1;
				$ishavemp = 1;
				if ( strpos( ",".$prcs_user, ",".$var."," ) === false )
				{
					$ishavemu = 0;
				}
				if ( strpos( ",".$prcs_dept, ",".$m_dept."," ) === false )
				{
					$ishavemd = 0;
				}
				if ( strpos( ",".$prcs_priv, ",".$m_priv."," ) === false )
				{
					$ishavemp = 0;
				}
				if ( !( $ishavemu || $ishavemd || $ishavemp ) )
				{
					$pd_user_s = str_replace( $var.",", "", $pd_user_s );
				}
			}
		}
		$sql = "\r\n\t\t\t\t\tUPDATE flow_process \r\n\t\t\t\t\t\tSET PRCS_DEFAULT_USER='".$pd_user_s."' \r\n\t\t\t\t\t\tWHERE ID='".$_REQUEST['ID']."' \r\n\t\t\t\t\t\t\tAND FLOW_ID='".$_REQUEST['FLOW_ID']."' \r\n\t\t\t\t\t";
		exequery( $connection, $sql );
	}
	if ( $pd_manage != "" )
	{
		$sql = "SELECT * FROM user WHERE USER_ID='".$pd_manage."'";
		$rs = exequery( $connection, $sql );
		$row = mysql_fetch_array( $rs );
		$m_priv = $row['USER_PRIV'];
		$m_dept = $row['DEPT_ID'];
		$ishavemu = 1;
		$ishavemd = 1;
		$ishavemp = 1;
		if ( strpos( ",".$prcs_user, ",".$pd_manage."," ) === false )
		{
			$ishavemu = 0;
		}
		if ( strpos( ",".$prcs_dept, ",".$m_dept."," ) === false )
		{
			$ishavemd = 0;
		}
		if ( strpos( ",".$prcs_priv, ",".$m_priv."," ) === false )
		{
			$ishavemp = 0;
		}
		if ( !( $ishavemu || $ishavemd || $ishavemp ) )
		{
			$sql = "\r\n\t\t\t\t\t\tUPDATE flow_process \r\n\t\t\t\t\t\t\tSET PRCS_DEFAULT_USER='',\r\n\t\t\t\t\t\t\t\tPRCS_DEFAULT_MANAGE='' \r\n\t\t\t\t\t\t\tWHERE ID='".$_REQUEST['ID']."' \r\n\t\t\t\t\t\t\t\tAND FLOW_ID='".$_REQUEST['FLOW_ID']."' \r\n\t\t\t\t\t\t";
			exequery( $connection, $sql );
		}
	}
	$sql = "\r\n\t\t\t\tUPDATE flow_process \r\n\t\t\t\t\tSET PRCS_USER='".$prcs_user."',\r\n\t\t\t\t\t\tPRCS_DEPT='".$prcs_dept."',\r\n\t\t\t\t\t\tPRCS_PRIV='".$prcs_priv."'\r\n\t\t\t\t\tWHERE ID='".$_REQUEST['ID']."' \r\n\t\t\t\t\t\tAND FLOW_ID='".$_REQUEST['FLOW_ID']."' \r\n\t\t\t\t";
	exequery( $connection, $sql );
	header( "location:set_permission.php?ID=".$_REQUEST['ID']."&FLOW_ID=".$_REQUEST['FLOW_ID']."&o=1" );
	exit( );
case "updatedefault" :
	$PRCS_DEFAULT_USER = $_REQUEST['PERMISSION_DEFAULT_USER_ID'];
	$PRCS_DEFAULT_MANAGE = $_REQUEST['MANAGE_ID'];
	$PRCS_DEFAULT_TYPE = $_REQUEST['ifCanmodify'];
	$sql = "\r\n\t\t\t\tUPDATE flow_process \r\n\t\t\t\t\tSET PRCS_DEFAULT_USER='".$PRCS_DEFAULT_USER."',\r\n\t\t\t\t\t\tPRCS_DEFAULT_MANAGE='".$PRCS_DEFAULT_MANAGE."',\r\n\t\t\t\t\t\tPRCS_DEFAULT_TYPE='".$PRCS_DEFAULT_TYPE."'\r\n\t\t\t\t\tWHERE ID='".$_REQUEST['ID']."' \r\n\t\t\t\t\t\tAND FLOW_ID='".$_REQUEST['FLOW_ID']."' \r\n\t\t\t\t";
	exequery( $connection, $sql );
	header( "location:set_permission_default.php?ID=".$_REQUEST['ID']."&FLOW_ID=".$_REQUEST['FLOW_ID']."&o=1" );
	exit( );
}
?>