user_droit.php

VIP信息处理系统源码

<?php

  if (($_POST['Submit'] == '确认提交' AND !empty ($_POST['username'])))
  {
    $rsa = mysql_query ('' . 'select * from admin where username=\'' . $_POST['username'] . '\'');
    $numn = mysql_num_rows ($rsa);
    if ($numn < 1)
    {
      echo '不存在此用户，请输入正确的用户名!';
      fun_alert ('不存在此用户，请输入正确的用户名!');
      fun_back ();
      exit ();
    }

    $rsdr = mysql_query ('' . 'select * from droit where username=\'' . $_POST['username'] . '\'');
    $numdr = mysql_num_rows ($rsdr);
    if (0 < $numdr)
    {
      $flag_editdroit = 1;
    }
    else
    {
      $flag_editdroit = 0;
    }

    $arr_field = explode ('|', $_POST['hn_strfield']);
    $field_sql = '';
    $value_sql = '';
    while (list ($k, $v) = each ($arr_field))
    {
      if (!empty ($v))
      {
        if ($flag_editdroit == 1)
        {
          $field_sql .= '' . ',`' . $v . '`=\'' . $_POST[$v] . '\'';
          continue;
        }
        else
        {
          $field_sql .= '' . ',`' . $v . '`';
          $value_sql .= '' . ',\'' . $_POST[$v] . '\'';
          continue;
        }

        continue;
      }
    }

    if ($flag_editdroit == 1)
    {
      $sql = '' . 'update `droit` set `is_admin`=\'' . $_POST['is_admin'] . '\' ' . $field_sql . ' where username=\'' . $_POST['username'] . '\'';
    }
    else
    {
      $sql = '' . 'insert into `droit`(`username`,`is_admin` ' . $field_sql . ')  values(\'' . $_POST['username'] . '\',\'' . $_POST['is_admin'] . '\' ' . $value_sql . ')';
    }

    $rsi = mysql_query ($sql);
    if ($rsi)
    {
      fun_alert ('用户授权操作成功！');
    }
    else
    {
      fun_alert ('用户授权操作失败！');
    }

    fun_back ();
    exit ();
  }

  $rsdr = mysql_query ('' . 'select * from droit where username=\'' . $_REQUEST['droituser'] . '\'');
  $rowdr = mysql_fetch_array ($rsdr);
  $sql = 'select * from menu where s_id=\'0\' order by sort';
  $rs = mysql_query ($sql);
  $disp_str = '';
  $strfield = '';
  while ($row = mysql_fetch_array ($rs))
  {
    $id = $row['id'];
    $item = eregi_replace ('<br>', ' ', $row['item']);
    $disp_str .= '' . '
	<tr bgcolor="#f0f0f0" align=center><td>有关 ' . $item . ' 权限设置</td></tr>
	<tr class="listbody_admin"><td>
		<table width="100%" border="1" cellpadding="2" cellspacing="0" bordercolorlight="#CCCCCC" bordercolordark="#ffffff" align=center><tr class="listbody_admin">
	';
    $sql_s = '' . 'select * from menu where s_id=\'' . $id . '\' order by sort';
    $rs_s = mysql_query ($sql_s);
    $i = 0;
    while ($row_s = mysql_fetch_array ($rs_s))
    {
      ++$i;
      $s_id = $row_s['id'];
      $s_item = $row_s['item'];
      $smid = 'm' . $s_id;
      $strfield .= '|' . $smid;
      $disp_str .= '' . '	<td width=25%><input type=checkbox name=' . $smid . ' value=1';
      if ($rowdr['' . $smid] == 1)
      {
        $disp_str .= ' checked';
      }

      $disp_str .= '' . '>' . $s_item . '</td>';
      if ($i % 4 == 0)
      {
        $disp_str .= '</tr><tr class="listbody_admin">';
        continue;
      }
    }

    $j = $i % 4;
    while (($j < 4 AND $j != 0))
    {
      $disp_str .= '	<td width=25%>&nbsp;</td>';
      ++$j;
    }

    $disp_str .= '</tr></table></td></tr>';
  }

  echo '<s';
  echo 'cript>
<!--
function check_sub(){
	if(check_null("用户名",document.form1.username)){return false;}
	return true;
}
-->
</script>
';
  echo '<s';
  echo 'tyle type="text/css">
<!--
.style1 {color: #FFFFFF}
-->
</style>
      <table width="100%" border="1" cellpadding="2" cellspacing="0" bordercolor="#FFFFFF" bordercolorlight="#CCCCCC" bordercolordark="#ffffff" bgcolor="#CCCCCC" >
	  <tr bgcolor="F0F0F0">
		<td width="100" height="25"><div align="center">
		  用户授权
		</div></td>
	  	<td>&nbsp;
	    </td></tr>
	  </table> 
      <table width="100%';
  echo '" border="0" cellspacing="1" cellpadding="2" class="listtable_admin">
        <form name="form1" method="post" action=""  onSubmit="return check_sub()">
        <tr align="center" class="listbody_admin"> 
            <td class="listtbhd_admin">用户授权</td>
          </tr>
          <tr class="listbody_admin">
            <td height="30" width="13%"><table width="50%"  border="0" align="center" cell';
  echo 'padding="0" cellspacing="3">
                <tr>
                  <td><div align="right">用 户 名:</div></td>
                  <td><input name="username" type="text" class="text" id="username" value="';
  echo $_REQUEST[droituser];
  echo '" size="12" maxlength="20"></td>
                  <td><div align="right">超级管理员</div></td>
                  <td><input type="radio" name="is_admin" value="1" ';
  if ($rowdr['is_admin'] == 1)
  {
    echo ' checked';
  }

  echo '>是
                  <input type="radio" name="is_admin" value="0" ';
  if ($rowdr['is_admin'] == 0)
  {
    echo ' checked';
  }

  echo '>否</td>
                </tr>
              </table>
            </td>
          </tr>
		  ';
  echo $disp_str;
  echo '          <tr>
            <td height="30" align="center"><input type="submit" name="Submit" value="确认提交" class="subbt">
              <input type="reset" name="Submit2" value="清空重置" class="subbt">
            <input name="hn_strfield" type="hidden" id="hn_strfield" value="';
  echo $strfield;
  echo '"></td>
          </tr>
        </form>
      </table>
      ';
?>