user_property.asp

淘客网上商店网站程序 淘客网上商店网站程序 淘客网上商店网站程序

<!--#include file="Inc/Const.asp"-->
<%
if ChannelID=0 then Cl.ShowErr("参数错误")
if Not Cl.TrueChannelPurview_U(3,ChannelID) then Cl.ShowErr("<br /><li>您无此操作权限！</li>")
dim InfoID,Action,rsP
dim ClassID,tClass
dim SQLMessage,SmsBody,NoPassTxt
dim LinkUrl,sPoint,sModuleName,PassPoint,PointNameStr
NoPassTxt	= Trim(request("NoPassTxt"))
InfoID		= Trim(request("InfoID"))
Action		= Trim(Request("Action"))
PassPoint	= Cl.GetClng(request("Point"))
InfoID		= replace(InfoID," ","")
if Action="" then
	Cl.ShowErr("<br /><li>参数不足！</li>")
end if
Cl.Load_ChannelSetting(ChannelID)
LinkUrl	= Cl.WebDir & Cl.Channel.selectSingleNode("@channeldir").text & "/ShowInfo.asp?InfoID="
PointNameStr = "InfoPoint"
Select Case Clng(Cl.Channel.selectSingleNode("@moduleid").text)
Case 1
	SQL="select InfoID,ClassID,Title,Editor,OnTop,Hot,Elite,NoPassNum,NoPassTxt,Status from Cl_Article where InfoID "
	sModuleName = "Article"
Case 2
	SQL="select InfoID,ClassID,SoftName,Editor,OnTop,Hot,Elite,NoPassNum,NoPassTxt,Status from Cl_Soft where InfoID "
	sModuleName = "Soft"
Case 3
	SQL="select InfoID,ClassID,PhotoName,Editor,OnTop,Hot,Elite,NoPassNum,NoPassTxt,Status from Cl_Photo where InfoID "
	sModuleName = "Photo"
Case 4
	SQL="select InfoID,ClassID,MovieName,Editor,OnTop,Hot,Elite,NoPassNum,NoPassTxt,Status from Cl_Movie where InfoID "
	sModuleName = "Movie"
Case 5
	SQL="select InfoID,ClassID,ProductName,Editor,OnTop,Hot,Elite,NoPassNum,NoPassTxt,Status from Cl_Product where InfoID "
	sModuleName = "Product"
Case 6
	SQL="select InfoID,ClassID,Title,Editor,OnTop,Hot,Elite,NoPassNum,NoPassTxt,Status from Cl_Supply where InfoID "
	sModuleName = "Supply"
Case Else
	Cl.ShowErr("<br /><li>参数错误！</li>")
end Select
if Instr(InfoID,",")=0 then
	InfoID=Cl.GetClng(InfoID)
	SetProperty
else
	if Not IsNumeric(Replace(InfoID,",","")) then
		Cl.ShowErr("<br /><li>请先选定文章！</li>")
	end if
	if Not Cl.TrueChannelPurview_U(1,ChannelID) then
		Cl.ShowErr("<br /><li>对不起，您没有执行批量操作的权限！</li>")
	End if
	SetPropertyMore
end if

Cl.SaveAdminLog

if Request("ComeUrl")<>"" Then
	ComeUrl=Request("ComeUrl")
Else
	ComeUrl="-1"
End If
Call Cl.OutMsg(0,"恭喜您，操作成功，请按确定返回！",ComeUrl)
'response.Redirect ComeUrl

Sub SetProperty()
	SQL=SQL&" =" & InfoID & ""
	Set rsP = Server.CreateObject("ADODB.Recordset")
	OpenConn : rsP.open SQL,Conn,1,1
	if rsP.bof and rsP.eof then
		rsP.close : set rsP=Nothing
		Cl.ShowErr("<li>找不到指定资料!</li>")
	end if
	ClassID = rsP(1)
	Set tClass=Cl.Execute("Select ParentPath,AddPoint From Cl_Class Where ClassID="&ClassID&"")
	if tClass.Eof then Cl.ShowErr("<li>找不到指定栏目!</li>")
	if Not Cl.TrueChannelPurview_U(1,ChannelID) then
		dim sTempP,IsTruePurview
		sTempP=Split(tClass(0) & "," & ClassID,",")
		IsTruePurview=False
		if rsP("Status")=1 then
			for i=1 to Ubound(sTempP)
				IsTruePurview = Cl.TrueClassPurview_U(1,ChannelID,sTempP(i))
				if IsTruePurview Then Exit For
			Next
		elseif Action="SetPassed" or Action="nopassed" or Action="deleted" then
			for i=1 to Ubound(sTempP)
				IsTruePurview = Cl.TrueClassPurview_U(2,ChannelID,sTempP(i))
				if IsTruePurview Then Exit For
			Next
		end if
		if Not IsTruePurview then
			Cl.ShowErr("<li>您无权修改或查看此栏目或资料！</li>")
		end if
	end if
	sPoint=tClass(1)
	if Not IsNumeric(sPoint) then sPoint=0
	sPoint=Clng(sPoint)
	tClass.Close : Set tClass=Nothing
	Call DoExecute()
	rsP.close : set rsP=Nothing
end sub

Sub SetPropertyMore()
	SQL=SQL&" in (" & InfoID & ")"
	Set rsP= Server.CreateObject("ADODB.Recordset")
	OpenConn : rsP.open SQL,Conn,1,1
	Do While Not rsP.Eof
		ClassID=rsP(1)
		sPoint=Cl.Execute("Select AddPoint From Cl_Class Where ClassID="&ClassID&"")(0)
		if Not IsNumeric(sPoint) then sPoint=0
		sPoint=Clng(sPoint)
		Call DoExecute()
		rsP.MoveNext
	Loop
	rsP.close : set rsP=Nothing
end Sub

Sub DoExecute()
	select case Action
	Case "SetOnTop"
	Cl.Execute("Update Cl_"&sModuleName&" Set OnTop="&TrueType&" Where InfoID="&rsP(0))
	Case "CancelOnTop"
	Cl.Execute("Update Cl_"&sModuleName&" Set OnTop="&FalseType&" Where InfoID="&rsP(0))
	Case "SetHot"
	Cl.Execute("Update Cl_"&sModuleName&" Set Hot="&TrueType&" Where InfoID="&rsP(0))
	Case "CancelHot"
	Cl.Execute("Update Cl_"&sModuleName&" Set Hot="&FalseType&" Where InfoID="&rsP(0))
	Case "SetElite"
	Cl.Execute("Update Cl_"&sModuleName&" Set Elite="&TrueType&" Where InfoID="&rsP(0))
	Case "CancelElite"
	Cl.Execute("Update Cl_"&sModuleName&" Set Elite="&FalseType&" Where InfoID="&rsP(0))
	Case "SetPassed"
		Cl.Execute("Update Cl_"&sModuleName&" Set "&PointNameStr&"="&PassPoint&",Censor='"&Cl.MemberName&"',CensorTime='"&Date()&"',Status=1 Where InfoID="&rsP(0))
		SmsBody="恭喜您，您发表的《"&rsP(2)&"》已经通过审核！"
		if Cl.Web_Setting(37)=1 then
			Cl.Execute_U("update " & Db.UserTable & " set " & Db.DataCount & "=" & Db.DataCount & "+1," & Db.UserPoint & "=" & Db.UserPoint & "+"&sPoint&" where " & Db.UserName & "='" & rsP("Editor") & "'")
			SmsBody=SmsBody&"<br />系统在您的"&Cl.Web_Setting(28)&"上添加了："&sPoint&" "&Cl.Web_Setting(29)&""
		else
			Cl.Execute_U("update " & Db.UserTable & " set " & Db.DataCount & "=" & Db.DataCount & "+1 where " & Db.UserName & "='" & rsP("Editor") & "'")
		end if
		SmsBody=SmsBody&"<br /><a href='"&LinkUrl& rsP(0) &"' target='_blank'>点击这里查看具体内容</a><br />再次感谢您使用本系统，让我们一起共建一个美好的网上家园！"
		SQLMessage="insert into " & Db.MessageTable & " (incept,sender,title,content,sendtime,flag,issend) values ('" & rsP("Editor") & "','"&Cl.MemberName&"','您发表的《"&rsP(2)&"》已经通过审核','"&Cl.CheckStr(SmsBody)&"',"&SqlNowString_U&",0,1)"
		Cl.Execute_U(SQLMessage)
	Case "SetPoint"
		if PassPoint>=0 then 
		Cl.Execute("Update Cl_"&sModuleName&" Set "&PointNameStr&"="&PassPoint&",Censor='"&Cl.MemberName&"',CensorTime='"&Date()&"',Status=1 Where InfoID="&rsP(0))
		End if
	Case "CancelPassed"
		Cl.Execute("Update Cl_"&sModuleName&" Set Censor='"&Cl.MemberName&"',CensorTime='"&Date()&"',Status=0 Where InfoID="&rsP(0))
		SmsBody="非常抱歉，您发表的"&Cl.Channel.selectSingleNode("@channelitemname").text&"《"&rsP(2)&"》已经取消审核！"
		if Cl.Web_Setting(37)=1 then
			Cl.Execute_U("update " & Db.UserTable & " set " & Db.DataCount & "=" & Db.DataCount & "-1," & Db.UserPoint & "=" & Db.UserPoint & "-"&sPoint&" where " & Db.UserName & "='" & rsP("Editor") & "'")
			SmsBody=SmsBody&"<br />系统在您的"&Cl.Web_Setting(28)&"上扣了："&sPoint&" "&Cl.Web_Setting(29)&""
		else
			Cl.Execute_U("update " & Db.UserTable & " set " & Db.DataCount & "=" & Db.DataCount & "-1 where " & Db.UserName & "='" & rsP("Editor") & "'")
		end if
		SmsBody=SmsBody&"<br />再次感谢您使用本系统，让我们一起共建一个美好的网上家园！"
		SQLMessage="insert into " & Db.MessageTable & " (incept,sender,title,content,sendtime,flag,issend) values ('" & rsP("Editor") & "','"&Cl.MemberName&"','取消审核"&Cl.Channel.selectSingleNode("@channelitemname").text&"《"&rsP(2)&"》通知','"&Cl.CheckStr(SmsBody)&"',"&SqlNowString_U&",0,1)"
		Cl.Execute_U(SQLMessage)
	Case "nopassed"
		Cl.Execute("Update Cl_"&sModuleName&" Set NoPassNum=NoPassNum+1,NoPassTxt='"&Left(NoPassTxt,250)&"',Censor='"&Cl.MemberName&"',CensorTime='"&Date()&"',Status=-1 Where InfoID="&rsP(0))
		SmsBody="由于：<font color='bb3333'>"&left(NoPassTxt,250)&"</font><br />您发表的"&Cl.Channel.selectSingleNode("@channelitemname").text&"《"&rsP(2)&"》未获审核通过，已被管理员第"&rsP("NoPassNum")+1&"次退回。<br />请到后台管理选择被管理员退回的"&Cl.Channel.selectSingleNode("@channelitemname").text&"，修改后再重新发表。"

		SQLMessage="insert into " & Db.MessageTable & " (incept,sender,title,content,sendtime,flag,issend) values ('" & rsP("Editor") & "','"&Cl.MemberName&"','退回"&Cl.Channel.selectSingleNode("@channelitemname").text&"《"&Cl.CheckStr(rsP(2))&"》通知','"&Cl.CheckStr(SmsBody)&"',"&SqlNowString_U&",0,1)"
		Cl.Execute_U(SQLMessage)
	Case "deleted"
		if rsP("Status")=1 then
			Cl.ShowErr("对不起，此资料已经通过审核，您不能在此删除！")
		End if
		SmsBody="您发表的"&Cl.Channel.selectSingleNode("@channelitemname").text&"《"&rsP(2)&"》未获审核通过。已经删除，<br />仅代表网站全体管理人员向您表示十分遗憾。"
		SQLMessage="insert into " & Db.MessageTable & " (incept,sender,title,content,sendtime,flag,issend) values ('" & rsP("Editor") & "','"&Cl.MemberName&"','您发表"&Cl.Channel.selectSingleNode("@channelitemname").text&"《"&rsP(2)&"》未通过审核，已经删除','"&Cl.CheckStr(SmsBody)&"',"&SqlNowString_U&",0,1)"
		Cl.Execute_U(SQLMessage)
		Cl.Execute("Update Cl_"&sModuleName&" Set Deleted="&TrueType&" Where InfoID="&rsP(0))
		Cl.Execute("delete from Cl_Comment where ChannelID="&ChannelID&" and InfoID="&rsP(0))
	End Select
End Sub
%>
<%
'<!--
'┌───────────────────────────────────────────────────────┐
'│														 │
'│		CreateLive CMS Version 4.0						 │
'│　　　　　　　　				Powered by Aspoo.CN	 	 │
'│　		　　　　　　　　　　						 │
'│　	邮箱: [e-mail]		[e-mail]　　	 │
'│		ＱＱ: 3315263				596197794			 │
'│		网站: www.aspoo.cn			www.aspoo.com		 │
'│		论坛: bbs.aspoo.cn			bbs.aspoo.com		 │
'│														 │
'│	Copyright (C) 2005-2007 Aspoo.CN All Rights Reserved.	 │
'└───────────────────────────────────────────────────────┘
'-->
%>