submit.php

来自「极限网络智能办公系统 - Office Automation 2008 官方10」· PHP 代码 · 共 91 行

<?php
 

include_once( "inc/auth.php" );
include_once( "inc/utility_all.php" );
if ( $PASS1 != "" )
{
	$query = "SELECT * from SYS_PARA where PARA_NAME='SEC_PASS_MIN' or PARA_NAME='SEC_PASS_MAX' or PARA_NAME='SEC_PASS_SAFE'";
	$cursor = exequery( $connection, $query );
	while ( $ROW = mysql_fetch_array( $cursor ) )
	{
		$PARA_NAME = $ROW['PARA_NAME'];
		$PARA_VALUE = $ROW['PARA_VALUE'];
		if ( $PARA_NAME == "SEC_PASS_MIN" )
		{
			$SEC_PASS_MIN = $PARA_VALUE;
		}
		else if ( $PARA_NAME == "SEC_PASS_MAX" )
		{
			$SEC_PASS_MAX = $PARA_VALUE;
		}
		else if ( $PARA_NAME == "SEC_PASS_SAFE" )
		{
			$SEC_PASS_SAFE = $PARA_VALUE;
		}
	}
	if ( strlen( $PASS1 ) < $SEC_PASS_MIN || strlen( $PASS2 ) < $SEC_PASS_MIN || $SEC_PASS_MAX < strlen( $PASS1 ) || $SEC_PASS_MAX < strlen( $PASS2 ) )
	{
		message( "错误", "密码长度应".$SEC_PASS_MIN."-".$SEC_PASS_MAX."位!" );
		button_back( );
		exit( );
	}
	if ( $PASS1 != $PASS2 )
	{
		message( "错误", "输入的密码不一致！" );
		button_back( );
		exit( );
	}
	if ( strstr( $PASS1, "\\'" ) != false )
	{
		message( "错误", "密码中含有非法字符" );
		button_back( );
		exit( );
	}
	if ( $SEC_PASS_SAFE == "1" && ( !eregi( "[a-z]", $PASS1 ) && !eregi( "[0-9]", $PASS1 ) ) )
	{
		message( "错误", "密码必须同时包含字母和数字!" );
		button_back( );
		exit( );
	}
}
$PASSWORD = crypt( $PASS1 );
$query = "update USER set PASSWORD='".$PASSWORD."'";
if ( $TO_ID != "ALL_DEPT" )
{
	if ( $TO_ID != "" )
	{
		$where_str .= "find_in_set(DEPT_ID,'".$TO_ID."') or ";
	}
	if ( $PRIV_ID != "" )
	{
		$where_str .= "find_in_set(USER_PRIV,'".$PRIV_ID."') or ";
	}
	if ( $COPY_TO_ID != "" )
	{
		$where_str .= "find_in_set(USER_ID,'".$COPY_TO_ID."') or ";
	}
}
$where_str = substr( $where_str, 0, -4 );
if ( $where_str != "" )
{
	$query .= " where ".$where_str;
}
exequery( $connection, $query );
if ( $TO_NAME != "" )
{
	$REMARK .= "部门：".$TO_NAME."<br>";
}
if ( $PRIV_NAME != "" )
{
	$REMARK .= "角色：".$PRIV_NAME."<br>";
}
if ( $COPY_TO_NAME != "" )
{
	$REMARK .= "人员：".$COPY_TO_NAME."<br>";
}
add_log( 14, "批量设置密码：<br>".$REMARK, $LOGIN_USER_ID );
message( "提示", "密码已修改" );
button_back( );
?>