magics.inc.php

极限网络智能办公系统 Office Automation V3.0官方100％源代码.

		showsetting('magics_edit_type', '', '', '<select name="typenew"><option value="1" '.$typeselect[1].'>'.$lang['magics_type_1'].'</option><option value="2" '.$typeselect[2].'>'.$lang['magics_type_2'].'</option><option value="3" '.$typeselect[3].'>'.$lang['magics_type_3'].'</option></select>');

		showsetting('magics_edit_price', 'pricenew', $magic['price'], 'text');
		showsetting('magics_edit_num', 'numnew', $magic['num'], 'text');
		showsetting('magics_edit_weight', 'weightnew', $magic['weight'], 'text');
		showsetting('magics_edit_supplytype', '', '', '<input name="supplytypenew" type="radio" class="radio" value="0" '.$checksupplytype[0].'>&nbsp;'.$lang['magics_goods_stack_none'].'<br><input name="supplytypenew" type="radio" class="radio" value="1" '.$checksupplytype[1].'>&nbsp;'.$lang['magics_goods_stack_day'].'<br><input name="supplytypenew" type="radio" class="radio" value="2" '.$checksupplytype[2].'>&nbsp;'.$lang['magics_goods_stack_week'].'<br><input name="supplytypenew" type="radio" class="radio" value="3" '.$checksupplytype[3].'>&nbsp;'.$lang['magics_goods_stack_month']);
		showsetting('magics_edit_supplynum', 'supplynumnew', $magic['supplynum'], 'text');
		showsetting('magics_edit_filename', 'filenamenew', $magic['filename'], 'text');
		showsetting('magics_edit_description', 'descriptionnew', $magic['description'], 'textarea');

		showtype('magics_edit_perm');
		showsetting('magics_edit_usergroupperm', '', '', $usergroupsperm, '15%');
		if($magic['type'] == 2 || $magic['type'] == 3) {
			showsetting('magics_edit_targetgroupperm', '', '', $targetgroupsperm, '15%');
		}
		if($magic['type'] == 1) {
			showsetting('magics_edit_forumperm', '', '', $forumperm, '15%');
		}
		showtype('', 'bottom');

?>
<br><center><input type="submit" class="button" name="magiceditsubmit" value="<?=$lang['submit']?>"></center>
</form><br>
<?

	} else {

		$namenew	= dhtmlspecialchars(trim($namenew));
		$identifiernew	= dhtmlspecialchars(trim(strtoupper($identifiernew)));
		$descriptionnew	= dhtmlspecialchars($descriptionnew);
		$filenamenew	= dhtmlspecialchars($filenamenew);
		$typenew	= ($typenew > 0 && $typenew <= 3) ? $typenew : 1;
		$availablenew   = !$identifiernew || !$filenamenew ? 0 : 1;

		$magicperm['usergroups'] = is_array($usergroupsperm) && !empty($usergroupsperm) ? "\t".implode("\t",$usergroupsperm)."\t" : '';
		$magicperm['targetgroups'] = is_array($targetgroupsperm) && !empty($targetgroupsperm) ? "\t".implode("\t",$targetgroupsperm)."\t" : '';
		$magicperm['forum'] = is_array($forumperm) && !empty($forumperm) ? "\t".implode("\t",$forumperm)."\t" : '';
		$magicpermnew = addslashes(serialize($magicperm));

		$supplytypenew = intval($supplytypenew);
		$supplynumnew = $supplytypenew ? intval($supplynumnew) : 0;

		if(!$namenew) {
			cpmsg('magics_parameter_invalid');
		}

		$query = $db->query("SELECT magicid FROM {$tablepre}magics WHERE identifier='$identifiernew' AND magicid!='$magicid'");
		if($db->num_rows($query)) {
			cpmsg('magics_identifier_invalid');
		}

		if(preg_match("/[\\\\\/\:\*\?\"\<\>\|]+/", $filenamenew)) {
			cpmsg('magics_filename_illegal');
		} elseif(!is_readable(DISCUZ_ROOT.($magicfile = "./include/magic/$filenamenew"))) {
			cpmsg('magics_filename_invalid');
		}

		$db->query("UPDATE {$tablepre}magics SET available='$availablenew', type='$typenew', name='$namenew', identifier='$identifiernew', description='$descriptionnew', displayorder='$displayordernew', price='$pricenew', num='$numnew', supplytype='$supplytypenew', supplynum='$supplynumnew', weight='$weightnew', filename='$filenamenew', magicperm='$magicpermnew' WHERE magicid='$magicid'");

		updatecache('magics');
		cpmsg('magics_data_succeed', 'admincp.php?action=magic');

	}

} elseif($action == 'magicmarket') {

	if(!submitcheck('marketsubmit')) {

		$marketlist = '';
		$query = $db->query("SELECT ma.*, m.name, m.description, m.weight FROM {$tablepre}magicmarket ma, {$tablepre}magics m WHERE m.magicid=ma.magicid");
		while($market = $db->fetch_array($query)) {
			$market['weight'] = $market['weight'] * $market['num'];
			$marketlist .= "<tr align=\"center\">\n".
				"<td class=\"altbg1\"><input type=\"checkbox\" class=\"checkbox\" name=\"delete[]\" value=\"$market[mid]\"></td>\n".
				"<td class=\"altbg2\">$market[name]</td>\n".
				"<td class=\"altbg1\">$market[username]</td>\n".
				"<td class=\"altbg2\"><input type=\"text\" size=\"5\" name=\"price[$market[mid]]\" value=\"$market[price]\"></td>\n".
				"<td class=\"altbg1\"><input type=\"text\" size=\"5\" name=\"num[$market[mid]]\" value=\"$market[num]\"></td>\n".
				"<td class=\"altbg2\">$market[weight]</td>\n".
				"<td class=\"altbg1\">$market[description]</td>\n";
		}
		shownav('magics_market');

?>
<form method="post" action="admincp.php?action=magicmarket">
<input type="hidden" name="formhash" value="<?=FORMHASH?>">
<table width="100%" border="0" cellpadding="0" cellspacing="0" class="tableborder">
<tr class="header">
<td colspan="10"><?=$lang['magics_market']?></td></tr>
<tr align="center" class="category">
<td width="6%"><input type="checkbox" name="chkall" class="checkbox" onclick="checkall(this.form)"><?=$lang['del']?></td>
<td><?=$lang['name']?></td><td><?=$lang['magics_market_seller']?></td><td><?=$lang['price']?></td><td><?=$lang['num']?></td><td><?=$lang['weight']?></td>
<td width="40%"><?=$lang['description']?></td>
</tr>
<?=$marketlist?>
</table><br>
<center><input type="submit" class="button" name="marketsubmit" value="<?=$lang['submit']?>"></center></form></td></tr>
<?

	} else {

		if($ids = implodeids($delete)) {
			$db->query("DELETE FROM {$tablepre}magicmarket WHERE mid IN ($ids)");
		}

		if(is_array($price)) {
			foreach($price as $id => $val) {
				$db->query("UPDATE {$tablepre}magicmarket SET price='$price[$id]', num='$num[$id]' WHERE mid='$id'");
			}
		}

		cpmsg('magics_data_succeed', 'admincp.php?action=magicmarket');

	}

} elseif($action == 'magiclog') {

	require_once DISCUZ_ROOT.'./forumdata/cache/cache_magics.php';

	$lpp = empty($lpp) ? 50 : $lpp;
	$page = max(1, intval($page));
	$start_limit = ($page - 1) * $lpp;

	$mpurl = "admincp.php?action=magiclog&lpp=$lpp";

	if(!empty($operations) && is_array($operations)) {
		$operationadd = "AND ma.action IN ('".implode('\',\'', $operations)."')";
		foreach($operations as $operation) {
			$mpurl .= '&operations[]='.rawurlencode($operation);
		}
	} else {
		$operationadd = '';
	}

	if(!empty($magicid)) {
		$magicidadd = "AND ma.magicid='$magicid'";
	} else {
		$magicidadd = '';
	}

	$query = $db->query("SELECT COUNT(*) FROM {$tablepre}magiclog ma WHERE 1 $magicidadd $operationadd");
	$num = $db->result($query, 0);

	$multipage = multi($num, $lpp, $page, $mpurl);

	$check = array();
	$check[$magicid] = 'selected="selected"';

	$magicselect = '';
	foreach($_DCACHE['magics'] as $id => $magic) {
		$magicselect .= '<option value="'.$id.'" '.$check[$id].'>'.$magic['name'].'</option>';
	}

	$magicoperations = '';
	foreach(array('1', '2', '3', '4', '5') as $operation) {
		$magicoperations .= '<input class="checkbox" type="checkbox" name="operations[]" value="'.$operation.'" '.(!empty($operations) && is_array($operations) && in_array($operation, $operations) ? 'checked' : '').'> '.$lang['logs_magic_operation_'.$operation].' &nbsp; ';
	}

	$query = $db->query("SELECT ma.*, m.username FROM {$tablepre}magiclog ma
		LEFT JOIN {$tablepre}members m USING (uid)
		WHERE 1 $magicidadd $operationadd ORDER BY dateline DESC LIMIT $start_limit, $lpp");

	while($log = $db->fetch_array($query)) {
		$log['name'] = $_DCACHE['magics'][$log['magicid']]['name'];
		$log['dateline'] = gmdate('Y-n-j H:i', $log['dateline'] + $timeoffset * 3600);
		$log['action'] = $lang['logs_magic_operation_'.$log['action']];
		$logs .= "<tr align=\"center\"><td class=\"altbg1\"><a href=\"viewpro.php?username=".rawurlencode($log['username'])."\" target=\"_blank\">$log[username]</td>".
			"<td class=\"altbg2\">$log[name]</td>".
			"<td class=\"altbg1\">$log[dateline]</td>".
			"<td class=\"altbg2\">$log[amount]</td>".
			"<td class=\"altbg1\">$log[price]</td>".
			"<td class=\"altbg2\">$log[action]</td></tr>";
	}

?>
<table width="100%" border="0" cellpadding="0" cellspacing="0" class="tableborder">
<tr class="header"><td colspan="3"><?=$lang['logs_magic']?></td></tr>


<form method="post" action="admincp.php?action=magiclog">
<input type="hidden" name="formhash" value="<?=FORMHASH?>">
<tr class="altbg2"><td width="20%"><?=$lang['logs_lpp']?></td>
<td width="62%"><input type="text" name="lpp" size="40" maxlength="40" value="<?=$lpp?>"></td>
<td width="18%"><input class="button" type="submit" value="<?=$lang['submit']?>"></td></tr>
</form>

<form method="post" action="admincp.php?action=magiclog">
<input type="hidden" name="formhash" value="<?=FORMHASH?>">
<tr class="altbg1"><td><?=$lang['magics_type']?></td><td><select name="magicid"><option value="0"><?=$lang['magics_type_all']?></option><?=$magicselect?></select></td>
<td><input class="button" type="submit" value="<?=$lang['submit']?>"></td></tr>
</form>

<form method="post" action="admincp.php?action=magiclog">
<input type="hidden" name="formhash" value="<?=FORMHASH?>">
<tr class="altbg2"><td><?=$lang['action']?></td><td><?=$magicoperations?></td>
<td><input class="button" type="submit" value="<?=$lang['submit']?>"></td></tr>
</form>

</table><br>

<?=$multipage?>
<table width="100%" border="0" cellpadding="0" cellspacing="0" class="tableborder">
<tr class="header">
<td width="16%"><?=$lang['username']?></td>
<td width="16%"><?=$lang['name']?></td>
<td width="17%"><?=$lang['time']?></td>
<td width="16%"><?=$lang['num']?></td>
<td width="15%"><?=$lang['price']?></td>
<td width="20%"><?=$lang['action']?></td>
</tr>
<?=$logs?>
</table>
<?=$multipage?>
<?

}

?>