gettotal("select count(*) as total from {$dbtbpre}enewsuser where username='$username' limit 1"); if($num) {printerror("ReUsername","history.go(-1)");} //管理目录 $insert_class=''; for($i=0;$iquery("insert into {$dbtbpre}enewsuser(username,password,rnd,groupid,adminclass,checked,styleid,filelevel,salt,loginnum,lasttime,lastip,truename,email,classid,addtime,addip,userprikey,salt2,lastipport,preipport,addipport,wname,tel,wxno,qq) values('$username','$password','$rnd','$groupid','$insert_class','$checked','$styleid','$filelevel','$salt',0,0,'','$truename','$email','$classid','$addtime','$addip','$userprikey','$salt2','$addipport','$addipport','$addipport','$wname','$tel','$wxno','$qq');"); $userid=$empire->lastid(); //安全提问 $equestion=(int)$_POST['equestion']; $eanswer=$_POST['eanswer']; if($equestion) { if(!$eanswer) { printerror('EmptyEAnswer',''); } $eanswer=ReturnHLoginQuestionStr($userid,$username,$equestion,$eanswer); } else { $equestion=0; $eanswer=''; } $empire->query("insert into {$dbtbpre}enewsuseradd(userid,equestion,eanswer,openip) values('$userid','$equestion','$eanswer','$openip');"); if($sql) { $cache_enews='douserinfo'; $cache_ecmstourl=urlencode('user/AddUser.php?enews=AddUser'.hReturnEcmsHashStrHref2(0)); $cache_mess='AddUserSuccess'; $cache_uid=$userid; $cache_url="../CreateCache.php?enews=$cache_enews&uid=$cache_uid&ecmstourl=$cache_ecmstourl&mess=$cache_mess".hReturnEcmsHashStrHref2(0); //操作日志 insert_dolog("userid=".$userid."
username=".$username); //printerror("AddUserSuccess","AddUser.php?enews=AddUser".hReturnEcmsHashStrHref2(0)); echo''; db_close(); $empire=null; exit(); } else {printerror("DbError","history.go(-1)");} } //------------------------修改用户 function EditUser($userid,$username,$password,$repassword,$groupid,$adminclass,$oldusername,$checked,$styleid,$loginuserid,$loginusername){ global $empire,$class_r,$dbtbpre; $userid=(int)$userid; $oldusername=RepPostVar($oldusername); $username=str_replace(',','',$username); $username=str_replace('|','',$username); $username=RepPostVar($username); $password=RepPostVar($password); $add=''; if(!$userid||!$username) {printerror("EnterUsername","history.go(-1)");} //操作权限 CheckLevel($loginuserid,$loginusername,$classid,"user"); //修改用户名 if($oldusername<>$username) { $num=$empire->gettotal("select count(*) as total from {$dbtbpre}enewsuser where username='$username' and userid<>$userid limit 1"); if($num) {printerror("ReUsername","history.go(-1)");} //修改信息 //$nsql=$empire->query("update {$dbtbpre}enewsnews set username='$username' where username='$oldusername'"); //修改日志 $lsql=$empire->query("update {$dbtbpre}enewslog set username='$username' where username='$oldusername'"); $lsql=$empire->query("update {$dbtbpre}enewsdolog set username='$username' where username='$oldusername'"); } //修改密码 if($password) { if($password!=$repassword) {printerror("NotRepassword","history.go(-1)");} if(strlen($password)<6) { printerror("LessPassword","history.go(-1)"); } $salt=make_password(8); $salt2=make_password(20); $password=DoEmpireCMSAdminPassword($password,$salt,$salt2); $add=",password='$password',salt='$salt',salt2='$salt2'"; } //管理目录 $insert_class=''; for($i=0;$iquery("update {$dbtbpre}enewsuser set username='$username',groupid='$groupid',adminclass='$insert_class',checked='$checked',styleid='$styleid',filelevel='$filelevel',truename='$truename',email='$email',classid='$classid',wname='$wname',tel='$tel',wxno='$wxno',qq='$qq'".$add." where userid='$userid'"); //安全提问 $equestion=(int)$_POST['equestion']; $eanswer=$_POST['eanswer']; $uadd=''; if($equestion) { if($equestion!=$_POST['oldequestion']&&!$eanswer) { printerror('EmptyEAnswer',''); } if($eanswer) { $eanswer=ReturnHLoginQuestionStr($userid,$username,$equestion,$eanswer); $uadd=",eanswer='$eanswer'"; } } else { $uadd=",eanswer=''"; } $empire->query("update {$dbtbpre}enewsuseradd set equestion='$equestion',openip='$openip'".$uadd." where userid='$userid'"); if($sql) { //操作日志 insert_dolog("userid=".$userid."
username=".$username); if($_POST['oldadminclass']<>$insert_class) { DelFiletext('../../data/fc/ListEnews'.$userid.'.php'); DelFiletext('../../data/fc/userclass'.$userid.'.js'); //删除导航缓存 $empire->query("delete from {$dbtbpre}enewsclassnavcache where navtype='userenews' and userid='$userid'"); $cache_enews='douserinfo'; $cache_ecmstourl=urlencode('user/ListUser.php'.hReturnEcmsHashStrHref2(1)); $cache_mess='EditUserSuccess'; $cache_uid=$userid; $cache_url="../CreateCache.php?enews=$cache_enews&uid=$cache_uid&ecmstourl=$cache_ecmstourl&mess=$cache_mess".hReturnEcmsHashStrHref2(0); echo''; db_close(); $empire=null; exit(); } printerror("EditUserSuccess","ListUser.php".hReturnEcmsHashStrHref2(1)); } else {printerror("DbError","history.go(-1)");} } //-----------------------删除用户 function DelUser($userid,$loginuserid,$loginusername){ global $empire,$dbtbpre; $userid=(int)$userid; if(!$userid) {printerror("NotDelUserid","history.go(-1)");} //操作权限 CheckLevel($loginuserid,$loginusername,$classid,"user"); //验证是否最后一个管理员 $num=$empire->gettotal("select count(*) as total from {$dbtbpre}enewsuser"); if($num<=1) { printerror("LastUserNotToDel","history.go(-1)"); } $r=$empire->fetch1("select username from {$dbtbpre}enewsuser where userid='$userid'"); $sql=$empire->query("delete from {$dbtbpre}enewsuser where userid='$userid'"); $sql1=$empire->query("delete from {$dbtbpre}enewsuseradd where userid='$userid'"); if($sql) { DelFiletext('../../data/fc/ListEnews'.$userid.'.php'); DelFiletext('../../data/fc/userclass'.$userid.'.js'); //删除导航缓存 $empire->query("delete from {$dbtbpre}enewsclassnavcache where navtype='userenews' and userid='$userid'"); //操作日志 insert_dolog("userid=".$userid."
username=".$r[username]); printerror("DelUserSuccess","ListUser.php".hReturnEcmsHashStrHref2(1)); } else {printerror("DbError","history.go(-1)");} } $enews=$_POST['enews']; if(empty($enews)) {$enews=$_GET['enews'];} if($enews) { hCheckEcmsRHash(); include('../../data/dbcache/class.php'); } //增加用户 if($enews=="AddUser") { $username=$_POST['username']; $password=$_POST['password']; $repassword=$_POST['repassword']; $groupid=$_POST['groupid']; $adminclass=$_POST['adminclass']; $checked=$_POST['checked']; $styleid=$_POST['styleid']; AddUser($username,$password,$repassword,$groupid,$adminclass,$checked,$styleid,$logininid,$loginin); } //修改用户 elseif($enews=="EditUser") { $userid=$_POST['userid']; $username=$_POST['username']; $password=$_POST['password']; $repassword=$_POST['repassword']; $groupid=$_POST['groupid']; $adminclass=$_POST['adminclass']; $oldusername=$_POST['oldusername']; $checked=$_POST['checked']; $styleid=$_POST['styleid']; EditUser($userid,$username,$password,$repassword,$groupid,$adminclass,$oldusername,$checked,$styleid,$logininid,$loginin); } //删除用户 elseif($enews=="DelUser") { $userid=$_GET['userid']; DelUser($userid,$logininid,$loginin); } $page=(int)$_GET['page']; $page=RepPIntvar($page); $start=0; $line=25;//每页显示条数 $page_line=12;//每页显示链接数 $offset=$page*$line;//总偏移量 $url="管理用户"; //排序 $mydesc=(int)$_GET['mydesc']; $desc=$mydesc?'asc':'desc'; $orderby=(int)$_GET['orderby']; if($orderby==1)//用户名 { $order="username ".$desc.",userid desc"; $usernamedesc=$mydesc?0:1; } elseif($orderby==2)//用户组 { $order="groupid ".$desc.",userid desc"; $groupiddesc=$mydesc?0:1; } elseif($orderby==3)//状态 { $order="checked ".$desc.",userid desc"; $checkeddesc=$mydesc?0:1; } elseif($orderby==4)//登陆次数 { $order="loginnum ".$desc.",userid desc"; $loginnumdesc=$mydesc?0:1; } elseif($orderby==5)//最后登陆 { $order="lasttime ".$desc.",userid desc"; $lasttimedesc=$mydesc?0:1; } else//用户ID { $order="userid ".$desc; $useriddesc=$mydesc?0:1; } $search="&orderby=$orderby&mydesc=$mydesc".$ecms_hashur['ehref']; $query="select * from {$dbtbpre}enewsuser"; $num=$empire->num($query);//取得总条数 $query=$query." order by ".$order." limit $offset,$line"; $sql=$empire->query($query); $returnpage=page2($num,$line,$page_line,$start,$page,$search); ?> 管理用户
位置：
  

fetch($sql)) { $classname='--'; if($r[classid]) { $cr=$empire->fetch1("select classname from {$dbtbpre}enewsuserclass where classid='$r[classid]'"); $classname=$cr['classname']; } $gr=$empire->fetch1("select groupname from {$dbtbpre}enewsgroup where groupid='$r[groupid]'"); if($r[checked]) {$zt="禁用";} else {$zt="开启";} $lasttime='---'; if($r[lasttime]) { $lasttime=date("Y-m-d H:i:s",$r[lasttime]); } $usercertkey='--'; ?>
证书
操作
用户组：
部门   ：
时间：
IP   ：