submit.php

来自「通达OA2007SE源代码 非常好的」· PHP 代码 · 共 100 行

<?
  include_once 'inc/auth.php';
  include_once 'inc/utility_all.php';
  if (($PASS1 != ''))
  {
    $query = 'SELECT * from SYS_PARA where PARA_NAME=\'SEC_PASS_MIN\' or PARA_NAME=\'SEC_PASS_MAX\' or PARA_NAME=\'SEC_PASS_SAFE\'';
    $cursor = exequery ($connection, $query);
    while ($ROW = mysql_fetch_array ($cursor))
    {
      $PARA_NAME = $ROW['PARA_NAME'];
      $PARA_VALUE = $ROW['PARA_VALUE'];
      if (($PARA_NAME == 'SEC_PASS_MIN'))
      {
        $SEC_PASS_MIN = $PARA_VALUE;
        continue;
      }
      else
      {
        if (($PARA_NAME == 'SEC_PASS_MAX'))
        {
          $SEC_PASS_MAX = $PARA_VALUE;
          continue;
        }
        else
        {
          if (($PARA_NAME == 'SEC_PASS_SAFE'))
          {
            $SEC_PASS_SAFE = $PARA_VALUE;
            continue;
          }
          continue;
        }
        continue;
      }
    }
    if (((((strlen ($PASS1) < $SEC_PASS_MIN) OR (strlen ($PASS2) < $SEC_PASS_MIN)) OR ($SEC_PASS_MAX < strlen ($PASS1))) OR ($SEC_PASS_MAX < strlen ($PASS2))))
    {
      message ('错误', (((('密码长度应'.$SEC_PASS_MIN).'-').$SEC_PASS_MAX).'位!'));
      button_back ();
      exit ();
    }
    if (($PASS1 != $PASS2))
    {
      message ('错误', '输入的密码不一致！');
      button_back ();
      exit ();
    }
    if ((strstr ($PASS1, '\\\'') != false))
    {
      message ('错误', '密码中含有非法字符');
      button_back ();
      exit ();
    }
    if ((($SEC_PASS_SAFE == '1') AND (!eregi ('[a-z]', $PASS1) OR !eregi ('[0-9]', $PASS1))))
    {
      message ('错误', '密码必须同时包含字母和数字!');
      button_back ();
      exit ();
    }
  }
  $PASSWORD = crypt ($PASS1);
  $query = (((''.'update USER set PASSWORD=\'').$PASSWORD).'\'');
  if (($TO_ID != 'ALL_DEPT'))
  {
    if (($TO_ID != ''))
    {
      ($where_str .= (((''.'find_in_set(DEPT_ID,\'').$TO_ID).'\') or '));
    }
    if (($PRIV_ID != ''))
    {
      ($where_str .= (((''.'find_in_set(USER_PRIV,\'').$PRIV_ID).'\') or '));
    }
    if (($COPY_TO_ID != ''))
    {
      ($where_str .= (((''.'find_in_set(USER_ID,\'').$COPY_TO_ID).'\') or '));
    }
  }
  $where_str = substr ($where_str, 0, -4);
  if (($where_str != ''))
  {
    ($query .= (' where '.$where_str));
  }
  exequery ($connection, $query);
  if (($TO_NAME != ''))
  {
    ($REMARK .= (('部门：'.$TO_NAME).'<br>'));
  }
  if (($PRIV_NAME != ''))
  {
    ($REMARK .= (('角色：'.$PRIV_NAME).'<br>'));
  }
  if (($COPY_TO_NAME != ''))
  {
    ($REMARK .= (('人员：'.$COPY_TO_NAME).'<br>'));
  }
  add_log (14, ('批量设置密码：<br>'.$REMARK), $LOGIN_USER_ID);
  message ('提示', '密码已修改');
  button_back ();
?>