| 12345678910111213141516171819202122232425262728293031323334353637383940414243444546474849505152535455565758596061626364656667686970717273747576777879 | <?phpdefine('EmpireCMSAdmin','1');require("../../class/connect.php");require("../../class/db_sql.php");require("../../class/functions.php");$link=db_connect();$empire=new mysqlquery();$editor=1;//验证用户$lur=is_login();$logininid=$lur['userid'];$loginin=$lur['username'];$loginrnd=$lur['rnd'];$loginlevel=$lur['groupid'];$loginadminstyleid=$lur['adminstyleid'];//ehash$ecms_hashur=hReturnEcmsHashStrAll();//验证权限CheckLevel($logininid,$loginin,$classid,"execsql");$enews=RepPostStr($_GET['enews'],1);if(empty($enews)){	$enews='AddSql';}$url="<a href='ListSql.php".$ecms_hashur['whehref']."'>管理SQL语句</a> > 增加SQL语句";$postword='增加SQL语句';if($enews=='EditSql'){	$id=intval($_GET['id']);	$r=$empire->fetch1("select * from {$dbtbpre}enewssql where id='$id'");	$url="<a href='ListSql.php".$ecms_hashur['whehref']."'>管理SQL语句</a> > 修改SQL语句: <b>".$r[sqlname]."</b>";	$postword='修改SQL语句';}db_close();$empire=null;?><!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"><html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><title><?=$postword?></title><link href="../adminstyle/<?=$loginadminstyleid?>/adminstyle.css" rel="stylesheet" type="text/css"></head><body><table width="100%" border="0" align="center" cellpadding="3" cellspacing="1">  <tr>    <td height="25">位置:<?=$url?></td>  </tr></table><form action="DoSql.php" method="POST" name="sqlform">  <table width="100%" border="0" align="center" cellpadding="3" cellspacing="1" class="tableborder">  <?=$ecms_hashur['form']?>    <tr class="header">       <td height="25"><div align="center"><?=$postword?></div></td>    </tr>    <tr>       <td height="25" bgcolor="#FFFFFF"><div align="center">(多条语句请用"回车"格开,每条语句以";"结束,数据表前缀可用:“[!db.pre!]"表示)</div></td>    </tr>    <tr>       <td height="25" bgcolor="#FFFFFF"><div align="center">           <textarea name="sqltext" cols="90" rows="12" id="sqltext"><?=ehtmlspecialchars($r[sqltext])?></textarea>        </div></td>    </tr>    <tr>       <td height="25" bgcolor="#FFFFFF"><div align="center">SQL名称:           <input name="sqlname" type="text" id="sqlname" value="<?=$r[sqlname]?>">          <input type="submit" name="Submit3" value="保存">           <input type="reset" name="Submit2" value="重置">          <input name="enews" type="hidden" id="enews" value="<?=$enews?>">          <input name="id" type="hidden" id="id" value="<?=$id?>">        </div></td>    </tr>  </table>  </form></body></html>
 |