post.php

mv 具体不是很清楚

<?php
require_once("global.php");
require(PHP168_PATH."inc/class.inc.php");
$Guidedb=new Guide_DB;

if(!$webdb[memberPost])
{
	showerr("管理员关闭了前台发布功能");
}



if($_POST)
{
	if(!$_POST[fid])
	{
		showerr("请选择一个栏目");
	}
	$fidDB=$db->get_one("SELECT * FROM {$pre}mv_sort WHERE fid='$fid'");

	if($fidDB[type])
	{
		showerr("大分类,不允许发表内容");
	}

	if($fidDB[allowpost])
	{
		if( !$web_admin&&!in_array($groupdb[gid],explode(",",$fidDB[allowpost])) )
		{
			$detail=explode(",",$fidDB[admin]);
			if(!$lfjid||!in_array($lfjid,$detail))
			{
				showerr("你所在用户组,无权发表");
			}
		}
	}

	if(!$postdb[title]){
		showerr("标题不能为空");
	}

	foreach( $_FILES AS $key=>$value ){

		$i=(int)substr($key,10);
		if(is_array($value)){
			$postfile=$value['tmp_name'];
			$array[name]=$value['name'];
			$array[size]=$value['size'];
		} else{
			$postfile=$$key;
			$array[name]=${$key.'_name'};
			$array[size]=${$key.'_size'};
		}
		if($ftype[$i]=='in'&&$array[name]){

			$detail=explode(",",$webdb[group_UpMv].',3,4');
			if($i==2&&!in_array($groupdb['gid'],$detail))showerr("你所在用户组不能在前台上传视频");

			if($i==1&&!eregi("(gif|jpg|png)$",$array[name])){
				showerr("缩略图,只能上传GIF,JPG,PNG格式的文件,你不能上传此文件:$array[name]");
			}
			$array[path]=$webdb[updir]."/mv/$fid";
	
			$array[updateTable]=1;	//统计用户上传的文件占用空间大小
			$filename=upfile($postfile,$array);
			if($i==1){
				$postdb[picurl]="mv/$fid/$filename";
			}else{
				$postdb[videourl]="mv/$fid/$filename";
			}
		}

	}
	if($postdb[picurl]&&!eregi("(gif|jpg|png)$",$postdb[picurl])){
		//showerr("缩略图,只能上传GIF,JPG,PNG格式的文件,你不能上传此文件:$array[name]");
	}
	if(!$postdb[videourl]){
		showerr("视频地址不能为空");
	}
}


if($action=="postnew")
{

	foreach( $postdb AS $key=>$value){
		$postdb[$key]=filtrate($postdb[$key]);
	}


	if($postdb[picurl]&&!eregi("(jpg|gif|png)$",$postdb[picurl]))
	{
		$postdb[picurl]=tempdir($postdb[picurl]);
		delete_attachment($lfjdb[uid],$postdb[picurl]);
		showerr("缩略图只能是jpg,gif,png,你刚刚所上传的已被系统自动删除");
	}
	if(is_file(PHP168_PATH."$webdb[updir]/$postdb[picurl]")&&($webdb[if_gdimg]))
	{
		$smallpic="$postdb[picurl].gif";
		$Newpicpath=PHP168_PATH."$webdb[updir]/$smallpic";
		gdpic(PHP168_PATH."$webdb[updir]/$postdb[picurl]",$Newpicpath,200,150);
		if( file_exists($Newpicpath) )
		{
			$postdb[picurl]="$smallpic";
		}
	}

	if($postdb[picurl]){
		$postdb[ispic]=1;
	}else{
		$postdb[ispic]=0;
	}
	
	$detail=explode(",",$webdb[postMvPassYz].',3,4');
	if(in_array($groupdb['gid'],$detail))
	{
		$postdb[yz]=1;
	}
	else
	{
		$postdb[yz]=0;
	}

	$db->query("
	INSERT INTO `{$pre}mv_video` ( `title` , `albumid` , `fid` , `fname` , `info` , `hits` , `comments` , `posttime` , `list` , `uid` , `username` , `titlecolor` , `fonttype` , `picurl` , `ispic` , `yz` , `yzer` , `yztime` , `levels` , `levelstime` , `keywords` , `jumpurl` , `iframeurl` , `style` , `head_tpl` , `main_tpl` , `foot_tpl` , `target` , `ishtml` , `ip` , `lastfid` , `money` , `passwd` , `editer` , `edittime` , `begintime` , `endtime` , `content` , `videourl`,`playtype` ) 
	VALUES (
	'$postdb[title]','','$fid','$fidDB[name]','0','0','0','$timestamp','$timestamp','$lfjdb[uid]','$lfjdb[username]','','','$postdb[picurl]','$postdb[ispic]','$postdb[yz]','','','','','$postdb[keywords]','','','','','','','','','$onlineip','','','','','','','','$postdb[content]','$postdb[videourl]','$postdb[playtype]'
	)
	");

	//$rs=$db->get_one("SELECT * FROM `{$pre}mv_video` ORDER BY id DESC LIMIT 1");
	refreshto("list.php?job=list","发表成功");
}
elseif($action=="edit")
{

	$rsdb=$db->get_one("SELECT * FROM `{$pre}mv_video` WHERE id='$id'");
	if($rsdb[uid]!=$lfjuid&&!$web_admin){
		showerr("你无权修改");
	}
	
	foreach( $postdb AS $key=>$value){
		$postdb[$key]=filtrate($postdb[$key]);
	}
	
	if($postdb[picurl]){
		$postdb[ispic]=1;
	}else{
		$postdb[ispic]=0;
	}

	$db->query("UPDATE `{$pre}mv_video` SET fid='$fid',fname='$fidDB[name]',title='$postdb[title]',videourl='$postdb[videourl]',picurl='$postdb[picurl]',content='$postdb[content]',author='$postdb[author]',playtype='$postdb[playtype]',ispic='$postdb[ispic]' WHERE id='$id'");
	refreshto("list.php?job=list","修改成功");
}
elseif($job=="edit"||$job=="postnew")
{
	if($job=="edit")
	{
		$rsdb=$db->get_one("SELECT * FROM `{$pre}mv_video` WHERE id='$id'");
		if($rsdb[uid]!=$lfjuid&&!$web_admin)
		{
			showerr("你无权修改");
		}
		$playtype[$rsdb[playtype]]=' checked ';
		$atc="edit";
	}
	else
	{
		$atc="postnew";
		$playtype[auto]=' checked ';
	}

	$sort_fid=$Guidedb->Select("{$pre}mv_sort","fid",$rsdb[fid]);
	/*过滤一些不允许投稿的栏目*/

	//非超级管理员
	if(!$web_admin)
	{
		unset($fiddb);
		$query = $db->query("SELECT fid,admin,allowpost FROM {$pre}mv_sort");
		while($rs = $db->fetch_array($query))
		{
			$detail_admin=@explode(",",$rs[admin]);
			$detail_allowpost=@explode(",",$rs[allowpost]);
			if(!$rs[allowpost])
			{
				$fiddb[]=$rs[fid];
			}elseif(($lfjid&&@in_array($lfjid,$detail_admin))||@in_array($groupdb['gid'],$detail_allowpost))
			{
				$fiddb[]=$rs[fid];
			}
		}
	}

	if(!$web_admin)
	{
		$fiddb || $fiddb=array();
		foreach( $fiddb AS $key=>$value)
		{
			$sort_fid=str_replace("value='$value'","value='@@@$value'",$sort_fid);
		}

		$sort_fid=preg_replace("/<option([^<>@]+)>([^<>]+)<\/option>/is","",$sort_fid);
		$sort_fid=str_replace("@@@","",$sort_fid);
	}

	if( !eregi("value='([0-9]+)'",$sort_fid) ){
		showerr("你所在用户组,无权发布,请管理员在后台用户组设置指定栏目,才可发布");
	}

	
	require("head.php");
	require("template/post.htm");
	require("foot.php");
}

?>