search.php

来自「通达OA2007SE源代码 非常好的」· PHP 代码 · 共 810 行 · 第 1/2 页

      }
      if (($KWORD == ''))
      {
        echo '请输入查询条件';
        break;
      }
      break;
    }
    case 4:
    {
      $query = ((((''.'SELECT GROUP_ID,USER_ID,ADD_ID,PSN_NAME,SEX,TEL_NO_DEPT,DEPT_NAME,TEL_NO_HOME,MOBIL_NO,EMAIL,NICK_NAME from ADDRESS where  PSN_NAME like \'%').$KWORD).'%\'').$WHERE_EMPTY);
      $cursor = exequery ($connection, $query);
      $ADD_COUNT = 0;
      while ($ROW = mysql_fetch_array ($cursor))
      {
        $GROUP_ID = $ROW['GROUP_ID'];
        $USER_ID = $ROW['USER_ID'];
        if (($USER_ID != ''))
        {
          if (($USER_ID != $LOGIN_USER_ID))
          {
            continue;
          }
        }
        else
        {
          $query1 = (((''.'SELECT PRIV_DEPT,PRIV_ROLE,PRIV_USER from ADDRESS_GROUP where GROUP_ID = \'').$GROUP_ID).'\'');
          $cursor1 = exequery ($connection, $query1);
          if ($ROW1 = mysql_fetch_array ($cursor1))
          {
            $PRIV_DEPT = $ROW1['PRIV_DEPT'];
            $PRIV_ROLE = $ROW1['PRIV_ROLE'];
            $PRIV_USER = $ROW1['PRIV_USER'];
            if ((((($PRIV_DEPT != 'ALL_DEPT') AND !find_id ($PRIV_DEPT, $LOGIN_DEPT_ID)) AND !find_id ($PRIV_ROLL, $LOGIN_USER_PRIV)) AND !find_id ($PRIV_USER, $LOGIN_USER_ID)))
            {
              continue;
            }
          }
        }
        ++$ADD_COUNT;
        if (($SHOW_COUNT < $USER_COUNT))
        {
          continue;
        }
        else
        {
          $ADD_ID = $ROW['ADD_ID'];
          $PSN_NAME = $ROW['PSN_NAME'];
          $SEX = $ROW['SEX'];
          $TEL_NO_DEPT = $ROW['TEL_NO_DEPT'];
          $DEPT_NAME = $ROW['DEPT_NAME'];
          $TEL_NO_HOME = $ROW['TEL_NO_HOME'];
          $MOBIL_NO = $ROW['MOBIL_NO'];
          $EMAIL = $ROW['EMAIL'];
          $NICK_NAME = $ROW['NICK_NAME'];
          if (($MOBIL_NO != ''))
          {
            ($MOBIL_NO_STR .= ($MOBIL_NO.','));
          }
          if (($SEX == '0'))
          {
            $SEX = '男';
          }
          else
          {
            if (($SEX == '1'))
            {
              $SEX = '女';
            }
            else
            {
              $SEX = '';
            }
          }
          $SHOW_STR = '';
          if (($SEX != ''))
          {
            $SHOW_STR = ('性别：'.$SEX);
          }
          if (($NICK_NAME != ''))
          {
            ($SHOW_STR .= ('，昵称：'.$NICK_NAME));
          }
          if (($DEPT_NAME != ''))
          {
            ($SHOW_STR .= ('，单位名称：'.$DEPT_NAME));
          }
          if (($TEL_NO_DEPT != ''))
          {
            ($SHOW_STR .= ('，单位电话：'.$TEL_NO_DEPT));
          }
          if (($TEL_NO_HOME != ''))
          {
            ($SHOW_STR .= ('，家庭电话：'.$TEL_NO_HOME));
          }
          if (($MOBIL_NO != ''))
          {
            ($SHOW_STR .= ('，手机：'.$MOBIL_NO));
          }
          if (($EMAIL != ''))
          {
            ($SHOW_STR .= ('，电子邮件：'.$EMAIL));
          }
          echo (((('<table border=\'0\' cellpadding=\'0\' cellspacing=\'0\' width=\'100%\' class=\'small\'>
	              <tr>
	               <td><a href="javascript:open_address(\''.$ADD_ID).(((''.'\');"><u>').$PSN_NAME).'</u></a> <br>')).$SHOW_STR).'<br></td>
	              </tr>
	             </table><br>');
          continue;
        }
      }
      if ((($ADD_COUNT == 0) AND ($KWORD != '')))
      {
        echo (('抱歉，没有找到与“'.$KWORD).'” 相关的内容');
      }
      if (($KWORD == ''))
      {
        echo '请输入查询条件';
        break;
      }
      break;
    }
    case 5:
    {
      $query = (((((''.'SELECT SORT_ID,CONTENT_ID,SUBJECT,USER_ID,CONTENT,SEND_TIME,ATTACHMENT_NAME from FILE_CONTENT where (SUBJECT like \'%').$KWORD).'%\') ').$WHERE_EMPTY).'order by SEND_TIME desc');
      $cursor = exequery ($connection, $query);
      $FILE_COUNT = 0;
      while ($ROW = mysql_fetch_array ($cursor))
      {
        $SORT_ID = $ROW['SORT_ID'];
        $CONTENT_ID = $ROW['CONTENT_ID'];
        $SUBJECT = $ROW['SUBJECT'];
        $USER_ID1 = $ROW['USER_ID'];
        $CONTENT = $ROW['CONTENT'];
        $SEND_TIME = $ROW['SEND_TIME'];
        $CONTENT = csubstr (strip_tags ($CONTENT), 0, 300);
        $ATTACHMENT_NAME = str_replace ('*', '，', $ROW['ATTACHMENT_NAME']);
        if (($USER_ID1 != ''))
        {
          if (($USER_ID1 != $LOGIN_USER_ID))
          {
            continue;
          }
        }
        else
        {
          $query1 = (((''.'SELECT SORT_NAME,USER_ID,SORT_PARENT,SHARE_USER from FILE_SORT where SORT_ID=\'').$SORT_ID).'\'');
          $cursor1 = exequery ($connection, $query1);
          if ($ROW1 = mysql_fetch_array ($cursor1))
          {
            $SORT_NAME = $ROW1['SORT_NAME'];
            $USER_ID = $ROW1['USER_ID'];
            $SORT_PARENT = $ROW1['SORT_PARENT'];
            $SHARE_USER = $ROW1['SHARE_USER'];
            $SHARE_USER1 = (share_user_str ($SORT_PARENT).$SHARE_USER);
            if (($SHARE_USER1 != ''))
            {
              if (!find_id ($SHARE_USER1, $LOGIN_USER_ID))
              {
                continue;
              }
            }
            else
            {
              $ACCESS_PRIV = explode ('|', $USER_ID);
              if ((((($ACCESS_PRIV[0] != 'ALL_DEPT') AND !find_id ($ACCESS_PRIV[0], $LOGIN_DEPT_ID)) AND !find_id ($ACCESS_PRIV[1], $LOGIN_USER_PRIV)) AND !find_id ($ACCESS_PRIV[2], $LOGIN_USER_ID)))
              {
                continue;
              }
            }
          }
        }
        ++$FILE_COUNT;
        if (($SHOW_COUNT < $FILE_COUNT))
        {
          continue;
        }
        else
        {
          $SHOW_STR = '';
          if (($SEND_TIME != ''))
          {
            $SHOW_STR = ('发布时间：'.$SEND_TIME);
          }
          if (($ATTACHMENT_NAME != ''))
          {
            ($SHOW_STR .= ('，附件：'.$ATTACHMENT_NAME));
          }
          if (($CONTENT != ''))
          {
            ($SHOW_STR .= ('，文件内容：'.$CONTENT));
          }
          echo (((((('<table border=\'0\' cellpadding=\'0\' cellspacing=\'0\' width=\'100%\' class=\'small\'>
	              <tr>
	               <td><a href="javascript:open_file(\''.$CONTENT_ID).'\',\'').$SORT_ID).(((''.'\');"><u>').$SUBJECT).'</u></a> <br>')).$SHOW_STR).'<br></td>
	              </tr>
	             </table><br>');
          continue;
        }
      }
      if ((($FILE_COUNT == 0) AND ($KWORD != '')))
      {
        echo (('抱歉，没有找到与“'.$KWORD).'” 相关的内容');
      }
      if (($KWORD == ''))
      {
        echo '请输入查询条件';
        break;
      }
      break;
    }
    case 6:
    {
      $query = ((((((''.'SELECT FLOW_RUN.RUN_ID,FLOW_RUN.RUN_NAME,FLOW_TYPE.FLOW_ID,FLOW_RUN_PRCS.PRCS_TIME,FLOW_TYPE.FLOW_NAME,
              FLOW_TYPE.FLOW_TYPE,FLOW_TYPE.MANAGE_USER,FLOW_TYPE.QUERY_USER from FLOW_TYPE,FLOW_RUN,FLOW_RUN_PRCS  
              WHERE (FLOW_RUN.RUN_ID=\'').$KWORD).'\' or FLOW_RUN.RUN_NAME like \'%').$KWORD).'%\') and FLOW_TYPE.FLOW_ID=FLOW_RUN.FLOW_ID and FLOW_RUN.RUN_ID=FLOW_RUN_PRCS.RUN_ID').$WHERE_EMPTY);
      if (($LOGIN_USER_PRIV != 1))
      {
        $query_my = ($query.(((''.' and FLOW_RUN_PRCS.USER_ID=\'').$LOGIN_USER_ID).'\''));
        $cursor = exequery ($connection, $query_my);
        while ($ROW = mysql_fetch_array ($cursor))
        {
          ($MY_RUN_ID .= ($ROW['RUN_ID'].','));
        }
        if (($MY_RUN_ID != ''))
        {
          $MY_RUN_ID = substr ($MY_RUN_ID, 0, -1);
        }
        else
        {
          $MY_RUN_ID = '0';
        }
        ($query .= (((((((((((''.' and (FLOW_RUN.RUN_ID in (\'').$MY_RUN_ID).'\') or FLOW_TYPE.MANAGE_USER like \'%,').$LOGIN_USER_ID).',%\' or  FLOW_TYPE.MANAGE_USER like \'').$LOGIN_USER_ID).',%\' or FLOW_TYPE.QUERY_USER like \'%,').$LOGIN_USER_ID).',%\' or FLOW_TYPE.QUERY_USER like \'').$LOGIN_USER_ID).',%\')'));
      }
      ($query .= ' and FLOW_RUN_PRCS.PRCS_ID=1 order by FLOW_RUN.RUN_ID desc');
      $cursor = exequery ($connection, $query);
      $FLOW_COUNT = 0;
      while ($ROW = mysql_fetch_array ($cursor))
      {
        ++$FLOW_COUNT;
        if (($SHOW_COUNT < $FLOW_COUNT))
        {
          continue;
        }
        else
        {
          $RUN_ID = $ROW['RUN_ID'];
          $RUN_NAME = $ROW['RUN_NAME'];
          $PRCS_TIME = $ROW['PRCS_TIME'];
          $FLOW_ID = $ROW['FLOW_ID'];
          $FLOW_NAME = $ROW['FLOW_NAME'];
          $FLOW_TYPE = $ROW['FLOW_TYPE'];
          $MANAGE_USER = $ROW['MANAGE_USER'];
          $QUERY_USER = $ROW['QUERY_USER'];
          $ATTACHMENT_NAME = $ROW['ATTACHMENT_NAME'];
          $CONTENT = csubstr (strip_tags ($ROW['CONTENT']), 0, 300);
          $ATTACHMENT_NAME = str_replace ('*', '，', $ROW['ATTACHMENT_NAME']);
          $SHOW_STR = '';
          if (($RUN_ID != ''))
          {
            $SHOW_STR = ('流水号：'.$RUN_ID);
          }
          if (($PRCS_TIME != ''))
          {
            ($SHOW_STR .= ('，开始时间：'.$PRCS_TIME));
          }
          if (($ATTACHMENT_NAME != ''))
          {
            ($SHOW_STR .= ('，公共附件：'.$ATTACHMENT_NAME));
          }
          echo (((((('<table border=\'0\' cellpadding=\'0\' cellspacing=\'0\' width=\'100%\' class=\'small\'>
	              <tr>
	               <td><a href="javascript:form_view(\''.$RUN_ID).'\',\'').$FLOW_ID).(((''.'\');"><u>').$RUN_NAME).'</u></a> <br>')).$SHOW_STR).'<br></td>
	              </tr>
	             </table><br>');
          continue;
        }
      }
      if ((($FLOW_COUNT == 0) AND ($KWORD != '')))
      {
        echo (('抱歉，没有找到与“'.$KWORD).'” 相关的内容');
      }
      if (($KWORD == ''))
      {
        echo '请输入查询条件';
        break;
      }
      break;
    }
    case 7:
    {
      $query = 'select MANAGER_ID,MANAGERS from SALE_MANAGER where MANAGER_ID=1';
      $cursor = exequery ($connection, $query);
      if ($ROW = mysql_fetch_array ($cursor))
      {
        $MANAGER_ID = $ROW['MANAGER_ID'];
        $MANAGERS = $ROW['MANAGERS'];
      }
      $WHERE_STR = (((((''.' where ((SELLER=\'').$LOGIN_USER_ID).'\' or CREATOR=\'').$LOGIN_USER_ID).'\')');
      ($WHERE_STR .= (((((''.' or ((find_in_set( \'').$LOGIN_USER_ID).'\',SHAREUSER) and SHARE=\'1\') or (SHAREUSER=\'\' and  SELLER!=\'').$LOGIN_USER_ID).'\' and SHARE=\'1\'))'));
      if (find_id ($MANAGERS, $LOGIN_USER_ID))
      {
        $query1 = 'select DEPT_ID from DEPARTMENT';
        $cursor1 = exequery ($connection, $query1);
        while ($ROW = mysql_fetch_array ($cursor1))
        {
          $DEPT_ID = $ROW['DEPT_ID'];
          if ((is_dept_priv ($DEPT_ID) == 1))
          {
            $TO_ID = (($TO_ID.$DEPT_ID).',');
            continue;
          }
        }
        $TO_ID = (('\''.str_replace (',', '\',\'', substr ($TO_ID, 0, -1))).'\'');
        ($WHERE_STR .= (((((''.' or d.DEPT_ID in (').$TO_ID).') and SELLER!=\'').$LOGIN_USER_ID).'\' '));
      }
      ($WHERE_STR .= ((') and (CUSTOMER_NAME like \'%'.$KWORD).'%\')'));
      $query = ((('SELECT CUSTOMER_ID,CUSTOMER_NAME,TEL_NO,FAX_NO, SELLER,a.EMAIL as EMAIL,b.CODE_NAME as SELLMODE, c.CODE_NAME as KIND,d.USER_NAME as SELLER,d.USER_ID as SELLERID,e.CODE_NAME as CUSTOMER_AREA,a.CREATDATE as CREATDATE,f.USER_NAME as CREATOR,a.CREATOR as CREATORID from CUSTOMER a
         LEFT OUTER JOIN SYS_CODE b
         ON a.SELLMODE = b.CODE_NO AND b.PARENT_NO = \'SELL_MODE\'
         LEFT OUTER JOIN SYS_CODE c
         ON a.KIND = c.CODE_NO AND c.PARENT_NO = \'CRM_KIND\'
         LEFT OUTER JOIN SYS_CODE e ON a.CUSTOMER_AREA=e.CODE_NO AND e.PARENT_NO = \'AREA\'
         LEFT OUTER JOIN USER d ON a.SELLER = d.USER_ID 
         LEFT OUTER JOIN USER f ON a.CREATOR = f.USER_ID'.$WHERE_STR).$WHERE_EMPTY).' order by CREATDATE desc');
      $cursor = exequery ($connection, $query);
      $CUSTOMER_COUNT = 0;
      while ($ROW = mysql_fetch_array ($cursor))
      {
        ++$CUSTOMER_COUNT;
        if (($SHOW_COUNT < $CUSTOMER_COUNT))
        {
          continue;
        }
        else
        {
          $CUSTOMER_ID = $ROW['CUSTOMER_ID'];
          $CUSTOMER_AREA = $ROW['CUSTOMER_AREA'];
          $CUSTOMER_NAME = strip_tags ($ROW['CUSTOMER_NAME']);
          $TEL_NO = $ROW['TEL_NO'];
          $FAX_NO = $ROW['FAX_NO'];
          $SELLER = $ROW['SELLER'];
          $SELLMODE = $ROW['SELLMODE'];
          $KIND = $ROW['KIND'];
          $EMAIL = $ROW['EMAIL'];
          $SELLER = $ROW['SELLER'];
          $CREATOR = $ROW['CREATOR'];
          $CREATDATE = $ROW['CREATDATE'];
          $CREATORID = $ROW['CREATORID'];
          $CONTENT = csubstr (strip_tags ($ROW['CONTENT']), 0, 300);
          $SHOW_STR = '';
          if (($KIND != ''))
          {
            $SHOW_STR = ('客户类别：'.$KIND);
          }
          if (($CUSTOMER_AREA != ''))
          {
            ($SHOW_STR .= ('，地区：'.$CUSTOMER_AREA));
          }
          if (($SELLMODE != ''))
          {
            ($SHOW_STR .= ('，销售方式：'.$SELLMODE));
          }
          if (($TEL_NO != ''))
          {
            ($SHOW_STR .= ('，电话：'.$TEL_NO));
          }
          if (($SELLER != ''))
          {
            ($SHOW_STR .= ('，销售员：'.$SELLER));
          }
          if (($CREATOR != ''))
          {
            ($SHOW_STR .= ('，记录人：'.$CREATOR));
          }
          if (($CREATDATE != ''))
          {
            ($SHOW_STR .= ('，记录日期：'.$CREATDATE));
          }
          echo (((((((''.'<table border=\'0\' cellpadding=\'0\' cellspacing=\'0\' width=\'100%\' class=\'small\'>
	              <tr>
	               <td><a href="javascript:open_customer(\'').$CUSTOMER_ID).'\');"><u>客户名称：').$CUSTOMER_NAME).'</u></a> <br>').$SHOW_STR).'<br></td>
	              </tr>
	             </table><br>');
          continue;
        }
      }
      if ((($CUSTOMER_COUNT == 0) AND ($KWORD != '')))
      {
        echo (('抱歉，没有找到与“'.$KWORD).'” 相关的内容');
      }
      if (($KWORD == ''))
      {
        echo '请输入查询条件';
        break;
      }
      break;
    }
  }
  echo '
</body>
<html>
';
?>