tree.php

来自「通达OA2007SE源代码 非常好的」· PHP 代码 · 共 196 行

<?
  function userlisttree ($PARENT_ID)
  {
    global $connection;
    global $LOGIN_USER_ID;
    global $MANAGE_FLAG;
    global $LOGIN_DEPT_ID;
    global $LOGIN_USER_PRIV;
    global $PRIV_NO_FLAG;
    global $PRIV_NO;
    global $PARA_URL1;
    global $PARA_URL2;
    global $PARA_TARGET;
    global $PARA_ID;
    global $PARA_VALUE;
    global $ONLINE_REF_SEC;
    if ((0 < $PRIV_NO_FLAG))
    {
      $DEPT_PRIV = is_dept_priv ($PARENT_ID);
    }
    else
    {
      $DEPT_PRIV = 1;
    }
    if (($DEPT_PRIV == 1))
    {
      if ((($LOGIN_USER_PRIV != '1') AND ($PRIV_NO_FLAG == 2)))
      {
        $query1 = (((((''.'SELECT USER_ID,USER_NAME,SEX,LAST_VISIT_TIME,LAST_VISIT_IP from USER,USER_PRIV where DEPT_ID!=0 and DEPT_ID=\'').$PARENT_ID).'\' and USER.USER_PRIV=USER_PRIV.USER_PRIV and USER_PRIV.PRIV_NO>').$PRIV_NO).' and USER_PRIV.USER_PRIV!=1');
      }
      else
      {
        $query1 = (((''.'SELECT USER_ID,USER_NAME,SEX,LAST_VISIT_TIME,LAST_VISIT_IP from USER,USER_PRIV where DEPT_ID!=0 and DEPT_ID=\'').$PARENT_ID).'\' and USER.USER_PRIV=USER_PRIV.USER_PRIV');
      }
      if (($MANAGE_FLAG != '1'))
      {
        ($query1 .= ' and NOT_LOGIN!=\'1\'');
      }
      ($query1 .= ' order by PRIV_NO,USER_NO,USER_NAME');
      $cursor1 = exequery ($connection, $query1);
      while ($ROW = mysql_fetch_array ($cursor1))
      {
        $USER_ID = $ROW['USER_ID'];
        $USER_NAME = $ROW['USER_NAME'];
        $SEX = $ROW['SEX'];
        $LAST_VISIT_TIME = $ROW['LAST_VISIT_TIME'];
        $LAST_VISIT_IP = '';
        if (($SEX == ''))
        {
          $SEX = '0';
        }
        if (((time () - strtotime ($LAST_VISIT_TIME)) < $ONLINE_REF_SEC))
        {
          $IMG_NAME = ($SEX.'-1');
          $LAST_VISIT_IP = $ROW['LAST_VISIT_IP'];
          if (($LAST_VISIT_IP == ''))
          {
            $query = (((''.'select IP from SYS_LOG where TYPE=\'1\' and USER_ID=\'').$USER_ID).'\' order by TIME desc limit 0,1');
            $cursor = exequery ($connection, $query);
            if ($ROW = mysql_fetch_array ($cursor))
            {
              $LAST_VISIT_IP = $ROW['IP'];
            }
          }
          $LAST_VISIT_IP = ((((' ('.htmlspecialchars (convertip ($LAST_VISIT_IP))).' ').$LAST_VISIT_IP).')');
        }
        else
        {
          $IMG_NAME = ($SEX.'-2');
        }
        $USER_NAME = htmlspecialchars ($USER_NAME);
        if (($PARA_ID == ''))
        {
          $URL = (((''.$PARA_URL2).'?USER_ID=').$USER_ID);
        }
        else
        {
          if ((($PARA_ID == 'ISPIRIT') AND ($PARA_VALUE == '1')))
          {
            $query = (((''.'SELECT PASSWORD from USER where USER_ID=\'').$LOGIN_USER_ID).'\'');
            $cursor = exequery ($connection, $query);
            if ($ROW = mysql_fetch_array ($cursor))
            {
              $PWD = $ROW['PASSWORD'];
            }
            $URL = ((((((((''.'/ispirit/go.php?LOGIN_USER_ID=').$LOGIN_USER_ID).'&amp;PWD=').$PWD).'&amp;URL=').$PARA_URL2).'?USER_ID=').$USER_ID);
          }
          else
          {
            $URL = (((((((''.$PARA_URL2).'?USER_ID=').$USER_ID).'&amp;').$PARA_ID).'=').$PARA_VALUE);
          }
        }
        ($XML_TEXT_USER .= ((((((((((((((''.'<TreeNode id="').$USER_ID).'" value="').$USER_ID).'" text="').$USER_NAME).'" href="').$URL).'" img_src="/images/').$IMG_NAME).(((''.'.gif" onload="RAP(\'').$USER_ID).'\');" title="')).$USER_NAME).$LAST_VISIT_IP).(((''.'" target="').$PARA_TARGET).'"/>
')));
      }
    }
    $query = (((''.'SELECT DEPT_ID,DEPT_NAME from DEPARTMENT where DEPT_PARENT=\'').$PARENT_ID).'\' order by DEPT_NO');
    $cursor1 = exequery ($connection, $query);
    while ($ROW = mysql_fetch_array ($cursor1))
    {
      $DEPT_ID1 = $ROW['DEPT_ID'];
      $DEPT_NAME1 = $ROW['DEPT_NAME'];
      $DEPT_NAME1 = htmlspecialchars ($DEPT_NAME1);
      $DEPT_NAME1 = str_replace ('"', '&quot;', $DEPT_NAME1);
      $DEPT_NAME1 = stripslashes ($DEPT_NAME1);
      $CHILD_COUNT = 0;
      $query = (((''.'SELECT 1 from DEPARTMENT where DEPT_PARENT=\'').$DEPT_ID1).'\'');
      $cursor2 = exequery ($connection, $query);
      if ($ROW1 = mysql_fetch_array ($cursor2))
      {
        ++$CHILD_COUNT;
      }
      $query = (((''.'SELECT 1 from USER where DEPT_ID=\'').$DEPT_ID1).'\'');
      $cursor2 = exequery ($connection, $query);
      if ($ROW1 = mysql_fetch_array ($cursor2))
      {
        ++$CHILD_COUNT;
      }
      if ((0 < $PRIV_NO_FLAG))
      {
        $DEPT_PRIV1 = is_dept_priv ($DEPT_ID1);
      }
      else
      {
        $DEPT_PRIV1 = 1;
      }
      if (($DEPT_PRIV1 == 1))
      {
        ($XML_TEXT_DEPT .= (((((''.'<TreeNode id="').$DEPT_ID1).'" text="[').$DEPT_NAME1).']" '));
      }
      else
      {
        ($XML_TEXT_DEPT .= (((((''.'<TreeNode id="').$DEPT_ID1).'" text="').$DEPT_NAME1).'" '));
      }
      if ((($PARA_URL1 != '') AND ($DEPT_PRIV1 == 1)))
      {
        ($XML_TEXT_DEPT .= (((((((((((''.'href="').$PARA_URL1).'?DEPT_ID=').$DEPT_ID1).'&amp;').$PARA_ID).'=').$PARA_VALUE).'" target="').$PARA_TARGET).'"'));
      }
      else
      {
        ($XML_TEXT_DEPT .= 'href="#" target="_self"');
      }
      ($XML_TEXT_DEPT .= (((''.' img_src="/images/node_dept.gif" title="').$DEPT_NAME1).'"'));
      if (((0 < $CHILD_COUNT) OR ($DEPT_PRIV == 1)))
      {
        ($XML_TEXT_DEPT .= (((((((((((((((((''.' Xml="/inc/user_list/tree.php?DEPT_ID=').$DEPT_ID1).'&amp;PARA_URL1=').$PARA_URL1).'&amp;PARA_URL2=').$PARA_URL2).'&amp;PARA_TARGET=').$PARA_TARGET).'&amp;PRIV_NO_FLAG=').$PRIV_NO_FLAG).'&amp;PARA_ID=').$PARA_ID).'&amp;PARA_VALUE=').$PARA_VALUE).'&amp;MANAGE_FLAG=').$MANAGE_FLAG).'"'));
      }
      ($XML_TEXT_DEPT .= '/>
');
    }
    return ($XML_TEXT_USER.$XML_TEXT_DEPT);
  }
  include_once 'inc/auth.php';
  include_once 'inc/utility_all.php';
  include_once 'inc/ip2add.php';
  ob_end_clean ();
  header ('Content-type: text/xml');
  $PARENT_ID = $DEPT_ID;
  if ((0 < $PRIV_NO_FLAG))
  {
    $query = (((''.'SELECT * from USER_PRIV where USER_PRIV=\'').$LOGIN_USER_PRIV).'\'');
    $cursor = exequery ($connection, $query);
    if ($ROW = mysql_fetch_array ($cursor))
    {
      $PRIV_NO = $ROW['PRIV_NO'];
    }
  }
  echo '<?xml version="1.0" encoding="gb2312"?>
';
  echo '<TreeNode>
';
  if (($PARENT_ID == 0))
  {
    $query = 'SELECT * from UNIT';
    $cursor = exequery ($connection, $query);
    if ($ROW = mysql_fetch_array ($cursor))
    {
      $UNIT_NAME = $ROW['UNIT_NAME'];
    }
    $UNIT_NAME = htmlspecialchars ($UNIT_NAME);
    $UNIT_NAME = str_replace ('"', '&quot;', $UNIT_NAME);
    $UNIT_NAME = stripslashes ($UNIT_NAME);
    echo (((''.'  <TreeNode id="0" text="').$UNIT_NAME).'" Xml="" img_src="/images/menu/system.gif">
');
    echo userlisttree ($PARENT_ID);
    echo '  </TreeNode>
';
  }
  else
  {
    echo userlisttree ($PARENT_ID);
  }
  echo '</TreeNode>
';
?>