Your IP : 216.73.216.170
<?php
$inc_path = "../../haibo/en/";$ua_sm_compile_dir = "newmember/";
require($inc_path."global.php");
require("session.php");$tb_prefix= $_SESSION['Version']."_";
uaCheckPermission(2);
require($inc_path.APP_NAME.'include/page.php');
uses("member","companynews", "company","newstype","sectioncontent","section","trade","access","setting");
$sectioncontent =new Sectioncontents();
$section= new Newsection();
$newstype = new Newstypes();
$companynews = new Companynewses();
$company = new Companies();
$access = new Accesses();
$trade = new Trades();
$setting= new Settings();
$tables = $sectioncontent->getTable(true);
$tpl_file = "sectioncontent_index";
$company_id = $company->field("id", "member_id=".$_SESSION['MemberID']);
$conditions = "member_id=".$_SESSION['MemberID'];
if (empty($company_id)){
gotoUrl("./company.php");
}
if ($_GET['action'] == "mod") {
if(!empty($_GET['id'])){
$sql = "select * from ".$_SESSION['Version']."_img where sectioncontents_id = ".$_GET['id']." and member_id = ".$_SESSION['MemberID']." order by img_range DESC
";
setvar("s",$_GET['id']);
setvar("p",$_GET['id']);
$res = $g_db->GetArray($sql);
setvar("imglist",$res);
$res = $sectioncontent->read("id AS ID,type_id AS TypeId,title AS Title,status AS Status ,content AS Content,keyw AS Keyw,des AS Des,beizu1 AS Beizu1,created AS CreateDate,pic",$_GET['id']);
$res['Content']= stripslashes($res['Content']);
$res['Content']= html_entity_decode($res['Content']);
setvar("NewsInfo",$res);
setvar("ShowCaption","none");
$aaa =$section->findAll("id AS ID,name AS Name","member_id=".$_SESSION['MemberID'] );
setvar("NewsTypes",$aaa);
}else{
$aaa =$section->findAll("id AS ID,name AS Name","member_id=".$_SESSION['MemberID'] );
if(count($aaa)==0){flash("./tip.php","./newsection.php","请添加一个主板块");
}
setvar("NewsTypes",$aaa);
$bbb=array();
$bbb['TypeId']=$sid;
setvar("NewsInfo",$bbb);
$res['Content']= html_entity_decode($res['Content']);
}
$tpl_file = "sectioncontent_edit";
}
if (isset($_POST['save'])) {
require(LIB_PATH.'controllers/upload.inc.php');
require(LIB_PATH.'controllers/GDImage.inc.php');
require($inc_path .APP_NAME. 'include/inc.imageWaterMark.php');
$vals=$_POST['news'];
if(!empty($_FILES['picture']['name'])) {
$f = $_FILES['picture'];
ini_set("memory_limit", "32M");
$check_path = uaCheckMediaPath('..'.DS.'..'.DS.$_SESSION['MemberName'].DS.$_SESSION['Version'].DS.$_SESSION['MemberName'].DS."types".DS);
$file_ext = fileext($f['name']);
if($_SESSION['Version']=='en'){$p_name=$_POST['title'];
$p_name = str_replace(" ","",$p_name);
$p_name = str_replace("&","",$p_name);
$p_name = str_replace(",","",$p_name);
$p_name = str_replace("/","",$p_name);
$p_name = str_replace(".","",$p_name);
$p_name = str_replace("%","",$p_name);
$p_name = str_replace("(","",$p_name);
$p_name = str_replace(")","",$p_name);
$p_name = str_replace("#","",$p_name);
$p_name = str_replace("@","",$p_name);
$p_name = str_replace("*","",$p_name);
$p_name = str_replace("=","",$p_name);
$p_name = str_replace(":","",$p_name);
$p_name = str_replace("-","",$p_name);
$p_name = str_replace("_","",$p_name);
$p_name = str_replace("!","",$p_name);
$p_name = str_replace("?","",$p_name);
$p_name = str_replace("\'","",$p_name);
$p_name = str_replace("\"","",$p_name);
$p_name = str_replace("'","",$p_name);
$p_name = str_replace("+","",$p_name);
$p_name = str_replace("'","",$p_name);
$p_name = str_replace("`","",$p_name);
$p_name = str_replace("$","",$p_name);
$p_name = str_replace("[","",$p_name);
$p_name = str_replace("]","",$p_name);
$p_name = str_replace("“","",$p_name);
$p_name = str_replace("”","",$p_name);
$p_name = str_replace("，","",$p_name);
$p_name=strtolower($p_name);
$this_product_pic = $_SESSION['MemberID']."_page_sub_".$p_name."_".$time_stamp.$file_ext;}
else $this_product_pic = $_SESSION['MemberID']."_page_sub_".$time_stamp.$file_ext;
$u = new upload($f['name']);
if($u->checkImage()){
$uploade_file = move_uploaded_file($f['tmp_name'],$check_path.$this_product_pic);
}else{
flash("./tip.php","./sectioncontent.php?id=".$_POST['newsid'], $cfg['room']['pic_upload_error'],0);
}
if(!$uploade_file){
flash("./tip.php","./sectioncontent.php?id=".$_POST['newsid'],$cfg['room']['pic_upload_false'],0);
}
$image = new GDImage2($check_path,uaCheckMediaPath('..'.DS.'..'.DS.$_SESSION['MemberName'].DS.$_SESSION['Version'].DS.$_SESSION['MemberName'].DS."types".DS,"small".DS));
$image->makeThumb($this_product_pic);
$set_watermark = $setting->field("ab","aa='watermark'");
if($set_watermark && empty($pid)){
$water_text = $setting->field("ab","aa='watertext'");
$water_color = $setting->field("ab","aa='watercolor'");
if (empty($water_text)) {
$water_text = URL;
}
imageWaterMark($check_path.$this_product_pic,8,"",$water_text,5,$water_color);
}
if(!empty($this_product_pic)) {
$sql="select pic from ".$_SESSION['Version']."_sectioncontents where id=".$_POST['newsid']."";
$rr = $g_db->GetAll($sql);
foreach($rr as $k=>$v){
if($_SESSION['Version']=="en") {
@unlink('../../upload/'.$_SESSION['MemberName'].'/upload/small/'.$v['pic']);
@unlink('../../upload/'.$_SESSION['MemberName'].'/upload/middle/'.$v['pic']);
@unlink('../../upload/'.$_SESSION['MemberName'].'/upload/big/'.$v['pic']);
} else {
@unlink('../../'.$_SESSION['Version'].'/upload/'.$_SESSION['MemberName'].'/upload/small/'.$v['pic']);
@unlink('../../'.$_SESSION['Version'].'/upload/'.$_SESSION['MemberName'].'/upload/middle/'.$v['pic']);
@unlink('../../'.$_SESSION['Version'].'/upload/'.$_SESSION['MemberName'].'/upload/big/'.$v['pic']);
}
}
$vals['pic'] = $this_product_pic;
}
}
if($_POST['pic_del']==1) {
$sql="select pic from ".$_SESSION['Version']."_sectioncontents where id=".$_POST['newsid']."";
$rr = $g_db->GetAll($sql);
foreach($rr as $k=>$v){
if($_SESSION['Version']=="en") {
@unlink('../../upload/'.$_SESSION['MemberName'].'/upload/small/'.$v['pic']);
@unlink('../../upload/'.$_SESSION['MemberName'].'/upload/middle/'.$v['pic']);
@unlink('../../upload/'.$_SESSION['MemberName'].'/upload/big/'.$v['pic']);
} else {
@unlink('../../'.$_SESSION['Version'].'/upload/'.$_SESSION['MemberName'].'/upload/small/'.$v['pic']);
@unlink('../../'.$_SESSION['Version'].'/upload/'.$_SESSION['MemberName'].'/upload/middle/'.$v['pic']);
@unlink('../../'.$_SESSION['Version'].'/upload/'.$_SESSION['MemberName'].'/upload/big/'.$v['pic']);
}
}
$vals['pic']='';
}
$vals['title'] = stripslashes(trim($_POST['title']));
$vals['title2'] = stripslashes(trim($_POST['title']));
$vals['keyw'] = stripslashes(trim($_POST['keyw']));
$vals['beizu1'] = stripslashes(trim($_POST['beizu1']));
$vals['des'] = stripslashes($_POST['des2']);
$vals['content']= htmlspecialchars($_POST['des']);
$vals['type_id']=$_POST['sort'];
array_walk($vals,"uatrim");
if(!empty($_POST['newsid'])){
$vals['modified'] = $time_stamp;
$sectioncontent->save($vals, "update",$_POST['newsid'],null, " and member_id=".$_SESSION['MemberID']);
flash("./tip.php", "./sectioncontent.php?id=".$_POST['newsid'],$cfg['room']['action_complete']);
}else {
$vals['created'] = $time_stamp;
$vals['member_id'] = $_SESSION['MemberID'];
$vals['company_id'] = $company_id;
$result = $sectioncontent->save($vals);
flash("./tip.php", "./sectioncontent.php",$cfg['room']['action_complete']);
}
}
if ($_POST['del']) {
$ids=implode(',',$_POST['newsid']);
$sql="select pic from ".$_SESSION['Version']."_sectioncontents where id in (".$ids.")";
$rr = $g_db->GetAll($sql);
foreach($rr as $k=>$v){
if($_SESSION['Version']=="en") {
@unlink('../../upload/'.$_SESSION['MemberName'].'/upload/small/'.$v['pic']);
@unlink('../../upload/'.$_SESSION['MemberName'].'/upload/middle/'.$v['pic']);
@unlink('../../upload/'.$_SESSION['MemberName'].'/upload/big/'.$v['pic']);
} else {
@unlink('../../'.$_SESSION['Version'].'/upload/'.$_SESSION['MemberName'].'/upload/small/'.$v['pic']);
@unlink('../../'.$_SESSION['Version'].'/upload/'.$_SESSION['MemberName'].'/upload/middle/'.$v['pic']);
@unlink('../../'.$_SESSION['Version'].'/upload/'.$_SESSION['MemberName'].'/upload/big/'.$v['pic']);
}
}
$result = $sectioncontent->del($_POST['newsid'], $conditions);
if ($result) {
flash("./tip.php", "./sectioncontent.php",$cfg['room']['action_complete']);
}else {
flash("./tip.php", "./sectioncontent.php",$cfg['room']['not_defined_error']);
}
}
$tmpamount = $sectioncontent->findCount($conditions);
pageft($tmpamount,10);
$sql = "select News.title as CompanynewsTitle,News.status as CompanynewsStatus,News.created as CompanynewsCreated,News.id as CompanynewsId,News.type_id,".$_SESSION['Version']."_newsection.name FROM ".$_SESSION['Version']."_sectioncontents AS News left join ".$_SESSION['Version']."_newsection on ".$_SESSION['Version']."_newsection.id=News.type_id WHERE News.".$conditions
;
$res = $g_db->GetArray($sql);
setvar("News",$res);
setvar("NavStatus",$newstype->type_status);
setvar("ByPages",$pagenav);
include("head.php");template("newmember/".$tpl_file);
?>