📄 add.php
字号:
<?php
include_once( "inc/auth.php" );
include_once( "inc/utility_all.php" );
include_once( "inc/check_type.php" );
echo "\r\n<html>\r\n<head>\r\n<title>新建用户</title>\r\n<meta http-equiv=\"Content-Type\" content=\"text/html; charset=gb2312\">\r\n</head>\r\n\r\n<body class=\"bodycolor\" topmargin=\"5\">\r\n\r\n";
if ( $BIND_IP != "" && !is_ip( $BIND_IP ) )
{
message( "", "IP地址无效" );
button_back( );
exit( );
}
if ( $NOT_LOGIN != "on" )
{
$USER_NUM_CHECK = 1;
}
include( "inc/reg_check.php" );
if ( $OA_REG_ON != 2 )
{
exit( );
}
if ( strstr( $USER_ID, "\\'" ) != false )
{
message( "错误", "用户名中含有非法字符" );
button_back( );
exit( );
}
if ( strstr( $BYNAME, "\\'" ) != false )
{
message( "错误", "别名中含有非法字符" );
button_back( );
exit( );
}
if ( strstr( $PASSWORD, "\\'" ) != false )
{
message( "错误", "密码中含有非法字符" );
button_back( );
exit( );
}
if ( $BIRTHDAY != "" && !is_date( $BIRTHDAY ) )
{
message( "错误", "生日格式不合法，应形如：".date( "Y-m-d", time( ) ) );
button_back( );
exit( );
}
if ( $BYNAME == $USER_ID )
{
message( "错误", "用户和别名不能相同已存在" );
button_back( );
exit( );
}
$query = "select * from USER where USER_ID='".$USER_ID."' or BYNAME='{$USER_ID}'";
$cursor = exequery( $connection, $query );
if ( $ROW = mysql_fetch_array( $cursor ) )
{
message( "错误", "用户名或别名 ".$USER_ID." 已存在" );
button_back( );
exit( );
}
if ( $BYNAME != "" )
{
$query = "select * from USER where BYNAME='".$BYNAME."' or USER_ID='{$BYNAME}'";
$cursor = exequery( $connection, $query );
if ( $ROW = mysql_fetch_array( $cursor ) )
{
message( "错误", "用户名或别名 ".$BYNAME." 已存在" );
button_back( );
exit( );
}
}
if ( $USER_NO == "" )
{
$USER_NO = 10;
}
if ( !is_number( $USER_NO ) )
{
message( "错误", "用户排序号应为数字" );
button_back( );
exit( );
}
if ( $NOT_LOGIN == "on" )
{
$NOT_LOGIN = 1;
}
else
{
$NOT_LOGIN = 0;
}
if ( $NOT_VIEW_USER == "on" )
{
$NOT_VIEW_USER = 1;
}
else
{
$NOT_VIEW_USER = 0;
}
if ( $NOT_VIEW_TABLE == "on" )
{
$NOT_VIEW_TABLE = 1;
}
else
{
$NOT_VIEW_TABLE = 0;
}
if ( $MOBIL_NO_HIDDEN == "on" )
{
$MOBIL_NO_HIDDEN = "1";
}
else
{
$MOBIL_NO_HIDDEN = "0";
}
$EMAIL_CAPACITY = intval( $EMAIL_CAPACITY );
$FOLDER_CAPACITY = intval( $FOLDER_CAPACITY );
if ( $EMAIL_CAPACITY != "" && ( !is_int( $EMAIL_CAPACITY ) && $EMAIL_CAPACITY < 0 ) )
{
message( "错误", "内部邮箱容量应为整数！" );
button_back( );
exit( );
}
if ( $FOLDER_CAPACITY != "" && ( !is_int( $FOLDER_CAPACITY ) && $FOLDER_CAPACITY < 0 ) )
{
message( "错误", "个人文件柜容量应为整数！" );
button_back( );
exit( );
}
$PASSWORD = crypt( $PASSWORD );
$query = "insert into USER (USER_ID,USER_NAME,SEX,PASSWORD,USER_PRIV,POST_PRIV,POST_DEPT,CANBROADCAST,DEPT_ID,AVATAR,CALL_SOUND,DUTY_TYPE,SMS_ON,MENU_HIDE,EMAIL_CAPACITY,FOLDER_CAPACITY,USER_PRIV_OTHER,USER_NO,NOT_LOGIN,NOT_VIEW_USER,NOT_VIEW_TABLE,BYNAME,BIRTHDAY,THEME,MOBIL_NO,MOBIL_NO_HIDDEN,BIND_IP) values ('".$USER_ID."','{$USER_NAME}','{$SEX}','{$PASSWORD}','{$USER_PRIV}','{$POST_PRIV}','{$TO_ID}','{$CANBROADCAST}','{$DEPT_ID}','1','1','{$DUTY_TYPE}','1','2',{$EMAIL_CAPACITY},{$FOLDER_CAPACITY},'{$PRIV_ID}',{$USER_NO},'{$NOT_LOGIN}','{$NOT_VIEW_USER}','{$NOT_VIEW_TABLE}','{$BYNAME}','{$BIRTHDAY}','{$THEME}','{$MOBIL_NO}','{$MOBIL_NO_HIDDEN}','{$BIND_IP}')";
exequery( $connection, $query );
add_log( 6, $USER_ID, $LOGIN_USER_ID );
message( "", "用户增加成功" );
echo "\r\n<script>\r\nopener.parent.user_list.location.reload();\r\nopener.location=\"user_new.php?DEPT_ID=";
echo $DEPT_ID;
echo "\";\r\n</script>\r\n\r\n<div align=\"center\">\r\n <input type=\"button\" value=\"继续新建用户\" class=\"BigButton\" title=\"继续新建用户\" onclick=\"location='new.php?DEPT_ID=";
echo $DEPT_ID;
echo "'\"> \r\n <input type=\"button\" value=\"建立档案\" class=\"BigButton\" title=\"建立档案\" onclick=\"location='../../hrms/manage/hrms.php?USER_ID=";
echo $USER_ID;
echo "'\"> \r\n <input type=\"button\" value=\"关 闭\" class=\"BigButton\" title=\"关闭窗口\" onclick=\"window.close();\">\r\n</div>\r\n</body>\r\n</html>\r\n";
?>
⌨️ 快捷键说明
复制代码
Ctrl + C
搜索代码
Ctrl + F
全屏模式
F11
切换主题
Ctrl + Shift + D
显示快捷键
?
增大字号
Ctrl + =
减小字号
Ctrl + -