message_add.php

VIP信息处理系统源码

<?php

  if ($rowdroit['is_admin'] == 1)
  {
    $sqlfadmin = '';
  }
  else
  {
    $sqlowner = '' . 'select username from advertizer where adser_owner=\'' . $_SESSION['admin_username'] . '\'';
    $rsowner = mysql_query ($sqlowner);
    $sqlfadmin = ' and (';
    while ($rowner = mysql_fetch_array ($rsowner))
    {
      $sqlfadmin .= '' . 'username=\'' . $rowner['username'] . '\' or ';
    }

    $sqlfadmin = substr ($sqlfadmin, 0, strlen ($sqlfadmin) - 4) . ')';
  }

  if (($_POST['submit'] == '确认提交' AND !empty ($_POST['conn'])))
  {
    $now_date = date ('Y-m-d H:i:s');
    if ($_POST['to_type'] == '<adser>')
    {
      $optype = 'adser';
      $t_type = 4;
      $sql_user = '' . 'select id,comname as s_name from advertizer where username=\'' . $_POST['username'] . '\' ' . $sqlfadmin;
    }
    else
    {
      if ($_POST['to_type'] == '<web>')
      {
        $optype = 'web';
        $sql_user = '' . 'select id,s_name from webmember where username=\'' . $_POST['username'] . '\'';
        $t_type = 2;
      }
      else
      {
        fun_alert ('请选择公告对象！');
        fun_back ();
        exit ();
      }
    }

    if (empty ($_POST['hn_edit_id']))
    {
      if ($_POST[feedback] == '')
      {
        $rs = mysql_query ($sql_user);
        $num = mysql_num_rows ($rs);
        if ($num < 1)
        {
          echo '<script>alert(\'没有此会员！请重新输入！\');history.go(-1)</script>';
          exit ();
        }

        $row = mysql_fetch_array ($rs);
        $userid = $row[id];
        $username = $_POST[username];
        $s_name = $row[s_name];
      }
      else
      {
        $rs = mysql_query ('' . 'select userid,username,s_name from message where id=\'' . $_POST['feedback'] . '\'');
        $row = mysql_fetch_array ($rs);
        $userid = $row[userid];
        $username = $row[username];
        $s_name = $row[s_name];
      }

      $row = mysql_fetch_array (mysql_query ('' . 'select * from webmember where username=\'' . $_SESSION['web_username'] . '\''));
      $inst_que = '' . 'INSERT INTO message(s_id,tit,conn,time,userid,username,s_name,to_type,admin_user)
				   VALUES (\'' . $_POST['feedback'] . '\',\'' . $_POST['tit'] . '\',\'' . $_POST['conn'] . '\',\'' . $now_date . '\',\'' . $userid . '\',\'' . $username . '\',\'' . $s_name . '\',\'' . $t_type . '\',\'' . $_SESSION['admin_username'] . '\')';
      $re_inst = mysql_query ($inst_que);
      $str_mes = '添加';
      if ($_POST[feedback] == '')
      {
        $pid = mysql_insert_id ();
      }
      else
      {
        $pid = $_POST[feedback];
      }
    }
    else
    {
      if ($rowdroit['is_admin'] == 1)
      {
        $pid = $_POST['hn_edit_id'];
        $inst_que = '' . 'update message  set tit=\'' . $_POST['tit'] . '\',conn=\'' . $_POST['conn'] . '\',time=\'' . $now_date . '\' where id=\'' . $_POST['hn_edit_id'] . '\'';
        $re_inst = mysql_query ($inst_que);
        $str_mes = '修改';
      }
    }

    if (!$re_inst)
    {
      fun_alert ('留言' . $str_mes . '失败！');
    }

    if ($op == 'web')
    {
      $nid = 56;
    }
    else
    {
      $nid = 57;
    }

    fun_goto ('' . '?tm=' . $tm . '&nid=' . $nid . '&nm=message_view&op=' . $op . '&id=' . $pid);
    exit ();
  }

  if (!empty ($_REQUEST['edit_id']))
  {
    $sql = '' . 'select * from message where id=\'' . $_REQUEST['edit_id'] . '\'';
    $rs = mysql_query ($sql);
    $row = mysql_fetch_array ($rs);
  }

  echo '<s';
  echo 'cript>
function check_sub(){
	if(document.form1.feedback.value==""){
		if(check_null("留言主题",document.form1.tit)){return false;}
		if(check_null("用 户 名",document.form1.username)){return false;}
	}
	if(check_null("留言内容",document.form1.conn)){return false;}
	return true;
}
function showshortcut(){
	var val=document.form1.shortcut.value;
	if(val!="#" && val!="#cls"){
		document.form1.tit.va';
  echo 'lue=arr_shortcut[val];
		document.form1.conn.value=arr_shortcut[val];
	}else if(val=="#cls"){
		document.form1.tit.value="";
		document.form1.conn.value="";
	}
}
</script>
      <table width="100%" border="0" cellspacing="1" cellpadding="2" class="listtable_admin">
		<form name="form1" method="post" action="" onSubmit="return check_sub()">
        <tr align="center" class="listbody_admin"> 
			  <td he';
  echo 'ight="25" colspan="2" class="listtbhd_admin"><div align="center">';
  if ($_POST['hdn_id'] == '')
  {
    echo ($op == 'web' ? '添加网站主' : '添加广告主');
  }

  echo '回复';
  echo '留言</div></td>
			</tr>
			<tr class="listbody_admin">
			  <td width="20%" height="25"  align="center">留言主题：</td>
			  <td width="80%"><input name="tit" type="text" class="text" id="tit"  size="81" maxlength="50" value="';
  echo $row[tit];
  echo '">
			    ';
  echo '<s';
  echo 'elect name="shortcut" onChange="showshortcut()">
			      <option value=#>选择快捷留言</option>
				  ';
  while (true)
  {
    if (list ($sk, $sv) = each ($cfg_shortmessage))
    {
      echo '' . '<option value=' . $sk . '>' . $sk . '</option>';
    }
  }

  echo '			      <option value=#cls>清除留言内容</option>
                </select>
				';
  echo '<script>var arr_shortcut=new Array();';
  reset ($cfg_shortmessage);
  while (true)
  {
    if (list ($sk, $sv) = each ($cfg_shortmessage))
    {
      echo '' . 'arr_shortcut["' . $sk . '"]="' . $sv . '";';
    }
  }

  echo '</script>';
  echo '				</td>
			</tr>
			<tr class="listbody_admin">
			  <td width="20%" height="25"  align="center">留言对象：</td>
			  <td width="80%">';
  echo '<s';
  echo 'elect name="to_type">
			    ';
  if ($op != 'adser')
  {
    echo '<option value="<web>"';
    if ($row['to_type'] == '2')
    {
      echo ' selected';
    }

    echo '>网站主</option>';
  }

  if ($op != 'web')
  {
    echo '<option value="<adser>"';
    if ($row['to_type'] == '4')
    {
      echo ' selected';
    }

    echo '> 广告主 </option>';
  }

  echo '		      </select>	  <input name="hn_edit_id" type="hidden" id="hn_edit_id" value="';
  echo $_REQUEST['edit_id'];
  echo '"><input name="feedback" type="hidden" id="feedback" value="';
  echo $_POST['hdn_id'];
  echo '"></td>
			</tr>
			<tr class="listbody_admin">
			  <td width="20%" height="25"  align="center">用 户 名：</td>
			  <td width="80%"><input name="username" type="text" class="text" id="username" ';
  if (!empty ($_REQUEST['edit_id']))
  {
    echo '' . ' value=\'' . $row['username'] . '\' readonly=\'\'';
  }

  echo ;
  echo ' size="10" maxlength="20"></td>
			</tr>
			<tr class="listbody_admin">
			  <td height="25" align="center">留言内容：</td>
			  <td><textarea name="conn" cols="80" rows="10" wrap="VIRTUAL" id="conn" class="text">';
  echo $row['conn'];
  echo '</textarea></td>
			</tr>
			<tr class="listbody_admin">
			  <td height="25" colspan="2" align="center">
			  <input name="submit" type="submit" class="subbt" value="确认提交"> 
			  <input name="button_r" type="button" class="subbt" value="返回上页" onClick="history.go(-1);"></td>
			</tr>
	    </form>
	  </table>
		 <br>
      ';
  if (!empty ($_POST['hdn_id']))
  {
    echo '      <table width="100%" border="0" cellspacing="1" cellpadding="2" class="listtable_admin">
        <tr align="center" class="listbody_admin"> 
			  <td  align="center" class="listtbhd_admin" >留 言</td>
			</tr>
        <tr align="center" class="listbody_admin"> 
			  <td bgcolor="f9f9f9"><iframe src="';
    echo '' . '../web/message_viewold.php?&id=' . $_POST['hdn_id'];
    echo '" frameborder="0" scrolling="yes" width="100%" height="300" marginheight="10" marginwidth="10"></iframe></td>
			</tr>
		</table>
      ';
  }

?>