<?php
define('EmpireCMSAdmin','1');
require("../../class/connect.php");
require("../../class/db_sql.php");
require("../../class/functions.php");
$link=db_connect();
$empire=new mysqlquery();
$editor=1;
//验证用户
$lur=is_login();
$logininid=$lur['userid'];
$loginin=$lur['username'];
$loginrnd=$lur['rnd'];
$loginlevel=$lur['groupid'];
$loginadminstyleid=$lur['adminstyleid'];
//ehash
$ecms_hashur=hReturnEcmsHashStrAll();
//验证权限
CheckLevel($logininid,$loginin,$classid,"spacedata");
//删除留言
function hDelMemberGbook($add,$userid,$username){
global $empire,$dbtbpre;
$gid=intval($add['gid']);
if(!$gid)
{
printerror("NotDelMemberGbookid","history.go(-1)");
}
$sql=$empire->query("delete from {$dbtbpre}enewsmembergbook where gid='$gid'");
if($sql)
{
//操作日志
insert_dolog("gid=".$gid);
printerror("DelMemberGbookSuccess",EcmsGetReturnUrl());
}
else
{
printerror("DbError","history.go(-1)");
}
}
//批量删除留言
function hDelMemberGbook_All($add,$userid,$username){
global $empire,$dbtbpre;
$gid=$add['gid'];
$count=count($gid);
if(empty($count))
{
printerror("NotDelMemberGbookid","history.go(-1)");
}
for($i=0;$i<$count;$i++)
{
$addsql.="gid='".intval($gid[$i])."' or ";
}
$addsql=substr($addsql,0,strlen($addsql)-4);
$sql=$empire->query("delete from {$dbtbpre}enewsmembergbook where (".$addsql.")");
if($sql)
{
//操作日志
insert_dolog("");
printerror("DelMemberGbookSuccess",EcmsGetReturnUrl());
}
else
{
printerror("DbError","history.go(-1)");
}
}
$enews=$_GET['enews'];
if(empty($enews))
{$enews=$_POST['enews'];}
if($enews)
{
hCheckEcmsRHash();
}
if($enews=="hDelMemberGbook")
{
hDelMemberGbook($_GET,$logininid,$loginin);
}
elseif($enews=="hDelMemberGbook_All")
{
hDelMemberGbook_All($_POST,$logininid,$loginin);
}
include("../../member/class/user.php");
include "../".LoadLang("pub/fun.php");
$page=(int)$_GET['page'];
$page=RepPIntvar($page);
$start=0;
$line=12;//每页显示条数
$page_line=12;//每页显示链接数
$offset=$page*$line;//总偏移量
//搜索
$search='';
$search.=$ecms_hashur['ehref'];
$and='';
if($_GET['sear'])
{
$keyboard=RepPostVar2($_GET['keyboard']);
if($keyboard)
{
$show=RepPostStr($_GET['show'],1);
if($show==1)//留言内容
{
$and.=" where gbtext like '%$keyboard%'";
}
elseif($show==2)//回复内容
{
$and.=" where retext like '%$keyboard%'";
}
elseif($show==3)//留言者
{
$and.=" where uname like '%$keyboard%'";
}
elseif($show==4)//空间主人用户ID
{
$and.=" where userid='$keyboard'";
}
elseif($show==5)//留言者IP
{
$and.=" where ip like '%$keyboard%'";
}
$search.="&sear=1&keyboard=$keyboard&show=$show";
}
}
$query="select gid,isprivate,uid,uname,ip,addtime,gbtext,retext,userid,eipport from {$dbtbpre}enewsmembergbook".$and;
$totalquery="select count(*) as total from {$dbtbpre}enewsmembergbook".$and;
$num=$empire->gettotal($totalquery);//取得总条数
$query=$query." order by gid desc limit $offset,$line";
$sql=$empire->query($query);
$returnpage=page2($num,$line,$page_line,$start,$page,$search);
$url="会员空间 > <a href=MemberGbook.php".$ecms_hashur['whehref'].">管理留言</a>";
?>
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<title>留言管理</title>
<link href="../adminstyle/<?=$loginadminstyleid?>/adminstyle.css" rel="stylesheet" type="text/css">
</head>
<body>
<table width="100%" border="0" align="center" cellpadding="3" cellspacing="1">
<tr>
<td width="50%">位置:
<?=$url?>
</td>
<td><div align="right"> </div></td>
</tr>
</table>
<table width="100%" border="0" align="center" cellpadding="3" cellspacing="1">
<form name="searchgb" method="get" action="MemberGbook.php">
<?=$ecms_hashur['eform']?>
<tr>
<td><div align="center">搜索：
<input name="keyboard" type="text" id="keyboard" value="<?=$keyboard?>">
<select name="show" id="show">
<option value="1"<?=$show==1?' selected':''?>>留言内容</option>
<option value="2"<?=$show==2?' selected':''?>>回复内容</option>
<option value="3"<?=$show==3?' selected':''?>>留言者</option>
<option value="4"<?=$show==4?' selected':''?>>空间主人用户ID</option>
<option value="5"<?=$show==5?' selected':''?>>留言者IP</option>
</select>
<input type="submit" name="Submit" value="搜索">
<input name="sear" type="hidden" id="sear" value="1">
</div></td>
</tr>
</form>
</table>
<form name=thisform method=post action=MemberGbook.php onsubmit="return confirm('确认要执行操作?');">
<?=$ecms_hashur['form']?>
<?
while($r=$empire->fetch($sql))
{
$ur=$empire->fetch1("select ".egetmf('username')." from ".eReturnMemberTable()." where ".egetmf('userid')."='$r[userid]'");
if($r['uid'])
{
$r['uname']="<b><a href='../../space/?userid=$r[uid]' target='_blank'>$r[uname]</a></b>";
}
$username=$ur['username'];
$private='';
if($r['isprivate'])
{
$private='<b>[悄悄话]</b>';
}
?>
<table width="700" border="0" align="center" cellpadding="3" cellspacing="1" class=tableborder>
<tr class=header>
<td width="55%" height="23">发布者:
<?=$r[uname]?>
</td>
<td width="45%">发布时间:
<?=$r[addtime]?>
(IP: <?=$r[ip]?>:<?=$r[eipport]?>) </td>
</tr>
<tr bgcolor="#FFFFFF">
<td height="23" colspan="2"> <table border=0 width='100%' cellspacing=1 cellpadding=10 bgcolor='#cccccc'>
<tr>
<td width='100%' bgcolor='#FFFFFF' style='word-break:break-all'>
<?=$private.nl2br($r[gbtext])?>
</td>
</tr>
</table>
<table width="100%" border="0" align="center" cellpadding="3" cellspacing="1" style='word-break:break-all'>
<tr>
<td><img src="../../data/images/regb.gif" width="18" height="18"><strong><font color="#FF0000">回复:</font></strong>
<?=nl2br($r[retext])?>
</td>
</tr>
</table>
</td>
</tr>
<tr bgcolor="#FFFFFF">
<td height="23" colspan="2"><div align="right">
<table width="100%" border="0" cellspacing="1" cellpadding="3">
<tr>
<td width="55%"><strong>空间主人: <a href="MemberGbook.php?sear=1&show=4&keyboard=<?=$r[userid]?><?=$ecms_hashur['ehref']?>">
<?=$username?>
</a> </strong></td>
<td width="45%">
<div align="left"><strong>操作:</strong> [<a href="MemberGbook.php?enews=hDelMemberGbook&gid=<?=$r[gid]?><?=$ecms_hashur['href']?>" onclick="return confirm('确认要删除?');">删除</a>]
<input name="gid[]" type="checkbox" value="<?=$r[gid]?>">
</div></td>
</tr>
</table>
</div></td>
</tr>
</table>
<br>
<?
}
?>
<table width="700" border="0" align="center" cellpadding="3" cellspacing="1">
<tr>
<td>分页:
<?=$returnpage?>
<input type="submit" name="Submit2" value="批量删除" onClick="document.thisform.enews.value='hDelMemberGbook_All';">
<input name="enews" type="hidden" id="enews" value="hDelMemberGbook_All">
</td>
</tr>
</table>
</form>
</body>
</html>
<?
db_close();
$empire=null;
?>