| 123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367 | <?phpdefine('EmpireCMSAdmin','1');require("../../class/connect.php");require("../../class/db_sql.php");require("../../class/functions.php");require "../".LoadLang("pub/fun.php");$link=db_connect();$empire=new mysqlquery();$editor=1;//验证用户$lur=is_login();$logininid=$lur['userid'];$loginin=$lur['username'];$loginrnd=$lur['rnd'];$loginlevel=$lur['groupid'];$loginadminstyleid=$lur['adminstyleid'];//ehash$ecms_hashur=hReturnEcmsHashStrAll();//验证权限CheckLevel($logininid,$loginin,$classid,"card");//增加点卡function AddCard($add,$userid,$username){	global $empire,$dbtbpre;	if(!$add[card_no]||!$add[password]||!$add[money])	{printerror("EmptyCard","history.go(-1)");}	//验证权限	CheckLevel($userid,$username,$classid,"card");	$num=$empire->gettotal("select count(*) as total from {$dbtbpre}enewscard where card_no='$add[card_no]' limit 1");	if($num)	{printerror("ReCard","history.go(-1)");}	$cardtime=date("Y-m-d H:i:s");	$add[cardfen]=(int)$add[cardfen];	$add[money]=(int)$add[money];	$add[carddate]=(int)$add[carddate];	$add[cdgroupid]=(int)$add[cdgroupid];	$add[cdzgroupid]=(int)$add[cdzgroupid];	$add['card_no']=hRepPostStr($add['card_no'],1);	$add['password']=hRepPostStr($add['password'],1);	$add['endtime']=hRepPostStr($add['endtime'],1);	$sql=$empire->query("insert into {$dbtbpre}enewscard(card_no,password,cardfen,money,cardtime,endtime,carddate,cdgroupid,cdzgroupid) values('$add[card_no]','$add[password]',$add[cardfen],$add[money],'$cardtime','$add[endtime]',$add[carddate],$add[cdgroupid],$add[cdzgroupid]);");	$cardid=$empire->lastid();	if($sql)	{		//操作日志	    insert_dolog("cardid=$cardid&card_no=$add[card_no]&cardfen=$add[cardfen]&carddate=$add[carddate]");		printerror("AddCardSuccess","AddCard.php?enews=AddCard".hReturnEcmsHashStrHref2(0));	}	else	{printerror("DbError","history.go(-1)");}}//批量增加点卡function AddMoreCard($add,$userid,$username){	global $empire,$dbtbpre;	$donum=(int)$add['donum'];	$cardnum=(int)$add['cardnum'];	$passnum=(int)$add['passnum'];	$add[cardfen]=(int)$add[cardfen];	$add[money]=(int)$add[money];	$add[carddate]=(int)$add[carddate];	$add[cdgroupid]=(int)$add[cdgroupid];	$add[cdzgroupid]=(int)$add[cdzgroupid];	$add['endtime']=hRepPostStr($add['endtime'],1);	if(!$donum||!$cardnum||!$passnum||!$add[money])	{printerror("EmptyMoreCard","history.go(-1)");}	//验证权限	CheckLevel($userid,$username,$classid,"card");	$cardtime=date("Y-m-d H:i:s");	//写入卡号	$no=1;    while($no<=$donum)	{		$card_no=strtolower(no_make_password($cardnum));		$password=strtolower(no_make_password($passnum));		$num=$empire->gettotal("select count(*) as total from {$dbtbpre}enewscard where card_no='$card_no' limit 1");		if(!$num)		{			$sql=$empire->query("insert into {$dbtbpre}enewscard(card_no,password,cardfen,money,cardtime,endtime,carddate,cdgroupid,cdzgroupid) values('$card_no','$password',$add[cardfen],$add[money],'$cardtime','$add[endtime]',$add[carddate],$add[cdgroupid],$add[cdzgroupid]);");			$no+=1;	    }    }	if($sql)	{		//操作日志		insert_dolog("cardnum=$donum&cardfen=$add[cardfen]&carddate=$add[carddate]");		printerror("AddMoreCardSuccess","AddMoreCard.php".hReturnEcmsHashStrHref2(1));	}	else	{printerror("DbError","history.go(-1)");}}//修改点卡function EditCard($add,$userid,$username){	global $empire,$time,$dbtbpre;	$add[cardid]=(int)$add[cardid];	if(!$add[card_no]||!$add[password]||!$add[money]||!$add[cardid])	{printerror("EmptyCard","history.go(-1)");}	//验证权限	CheckLevel($userid,$username,$classid,"card");	$num=$empire->gettotal("select count(*) as total from {$dbtbpre}enewscard where card_no='$add[card_no]' and cardid<>".$add[cardid]." limit 1");	if($num)	{printerror("ReCard","history.go(-1)");}	$add[cardfen]=(int)$add[cardfen];	$add[money]=(int)$add[money];	$add[carddate]=(int)$add[carddate];	$add[cdgroupid]=(int)$add[cdgroupid];	$add[cdzgroupid]=(int)$add[cdzgroupid];	$add['card_no']=hRepPostStr($add['card_no'],1);	$add['password']=hRepPostStr($add['password'],1);	$add['endtime']=hRepPostStr($add['endtime'],1);	$sql=$empire->query("update {$dbtbpre}enewscard set card_no='$add[card_no]',password='$add[password]',cardfen=$add[cardfen],money=$add[money],endtime='$add[endtime]',carddate=$add[carddate],cdgroupid=$add[cdgroupid],cdzgroupid=$add[cdzgroupid] where cardid='$add[cardid]'");	if($sql)	{		//操作日志	    insert_dolog("cardid=$add[cardid]&card_no=$add[card_no]&cardfen=$add[cardfen]&carddate=$add[carddate]");		printerror("EditCardSuccess","ListCard.php?time=$time".hReturnEcmsHashStrHref2(0));	}	else	{printerror("DbError","history.go(-1)");}}//删除点卡function DelCard($cardid,$userid,$username){	global $empire,$time,$dbtbpre;	$cardid=(int)$cardid;	if(!$cardid)	{printerror("NotChangeCardid","history.go(-1)");}	//验证权限	CheckLevel($userid,$username,$classid,"card");	$r=$empire->fetch1("select card_no,cardfen,carddate from {$dbtbpre}enewscard where cardid='$cardid'");	$sql=$empire->query("delete from {$dbtbpre}enewscard where cardid='$cardid'");	if($sql)	{		//操作日志		insert_dolog("cardid=$cardid&card_no=$r[card_no]&cardfen=$r[cardfen]&carddate=$r[carddate]");		printerror("DelCardSuccess","ListCard.php?time=$time".hReturnEcmsHashStrHref2(0));	}	else	{printerror("DbError","history.go(-1)");}}//批量删除点卡function DelCard_all($add,$userid,$username){	global $empire,$time,$dbtbpre;	$cardid=$add[cardid];	$count=count($cardid);	if(!$count)	{		printerror("NotChangeCardid","history.go(-1)");	}	//验证权限	CheckLevel($userid,$username,$classid,"card");	$ids='';	$dh='';	for($i=0;$i<$count;$i++)	{		$ids.=$dh.intval($cardid[$i]);		$dh=',';	}	$sql=$empire->query("delete from {$dbtbpre}enewscard where cardid in (".$ids.")");	if($sql)	{		//操作日志		insert_dolog("");		printerror("DelCardSuccess","ListCard.php?time=$add[time]".hReturnEcmsHashStrHref2(0));	}	else	{printerror("DbError","history.go(-1)");}}$enews=$_POST['enews'];if(empty($enews)){$enews=$_GET['enews'];}if($enews){	hCheckEcmsRHash();}//增加点卡if($enews=="AddCard"){	$add=$_POST['add'];	AddCard($add,$logininid,$loginin);}//修改点卡elseif($enews=="EditCard"){	$time=(int)$_POST['time'];	$add=$_POST['add'];	EditCard($add,$logininid,$loginin);}//删除点卡elseif($enews=="DelCard"){	$time=(int)$_GET['time'];	$cardid=$_GET['cardid'];	DelCard($cardid,$logininid,$loginin);}elseif($enews=="AddMoreCard")//批量增加点卡{	$add=$_POST;	AddMoreCard($add,$logininid,$loginin);}elseif($enews=="DelCard_all")//批量删除点卡{	DelCard_all($_POST,$logininid,$loginin);}$search=$ecms_hashur['ehref'];$time=$_GET['time'];if(empty($time)){$time=$_POST['time'];}$time=RepPostStr($time,1);$page=(int)$_GET['page'];$page=RepPIntvar($page);$start=0;$line=25;$page_line=25;$add="";//搜索$sear=$_POST['sear'];if(empty($sear)){$sear=$_GET['sear'];}$sear=RepPostStr($sear,1);if($sear){	$show=$_POST['show'];	if(empty($show))	{$show=$_GET['show'];}	$show=RepPostStr($show,1);	$keyboard=$_POST['keyboard'];	if(empty($keyboard))	{$keyboard=$_GET['keyboard'];}	$keyboard=RepPostVar2($keyboard);	if($show==1)	{$add=" where card_no like '%$keyboard%'";}	elseif($show==2)	{$add=" where money='$keyboard'";}	elseif($show==3)	{$add=" where cardfen='$keyboard'";}	else	{$add=" where carddate='$keyboard'";}	$search.="&sear=1&show=$show&keyboard=$keyboard";}//过期if($time){	$today=date("Y-m-d");	$search.="&time=$time";	if($add)	{$add.=" and endtime<>'0000-00-00' and endtime<'$today'";}	else	{$add.=" where endtime<>'0000-00-00' and endtime<'$today'";}}$offset=$line*$page;$totalquery="select count(*) as total from {$dbtbpre}enewscard".$add;$num=$empire->gettotal($totalquery);$query="select cardid,card_no,password,cardfen,money,endtime,cardtime,carddate from {$dbtbpre}enewscard".$add;$query.=" order by cardid desc limit $offset,$line";$sql=$empire->query($query);$returnpage=page2($num,$line,$page_line,$start,$page,$search);?><!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"><html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><title>管理点卡</title><link href="../adminstyle/<?=$loginadminstyleid?>/adminstyle.css" rel="stylesheet" type="text/css"><script>function CheckAll(form)  {  for (var i=0;i<form.elements.length;i++)    {    var e = form.elements[i];    if (e.name != 'chkall')       e.checked = form.chkall.checked;    }  }</script></head><body><table width="100%" border="0" align="center" cellpadding="3" cellspacing="1">  <tr>     <td width="50%">位置:<a href="ListCard.php<?=$ecms_hashur['whehref']?>">管理点卡</a></td>    <td><div align="right" class="emenubutton">        <input type="button" name="Submit5" value="增加点卡" onclick="self.location.href='AddCard.php?enews=AddCard<?=$ecms_hashur['ehref']?>';">		          <input type="button" name="Submit52" value="批量增加点卡" onclick="self.location.href='AddMoreCard.php<?=$ecms_hashur['whehref']?>';">		          <input type="button" name="Submit53" value="管理过期点卡" onclick="self.location.href='ListCard.php?time=1<?=$ecms_hashur['ehref']?>';">      </div></td>  </tr></table><br><table width="100%" border="0" cellpadding="0" cellspacing="1">  <form name=search method=get action=ListCard.php>  <?=$ecms_hashur['eform']?>    <tr bgcolor="#FFFFFF">       <td height="25" colspan="6"> 搜索:         <input name="keyboard" type="text" id="keyboard"> <select name="show" id="show">          <option value="1">卡号</option>          <option value="2">金额</option>          <option value="3">点数</option>          <option value="4">天数</option>        </select> <input type="submit" name="Submit" value="搜索"> <input name="sear" type="hidden" id="sear" value="1">         <input name="time" type="hidden" id="time" value="<?=$time?>"> </td>    </tr>	</form></table>  <table width="100%" border="0" cellpadding="0" cellspacing="1" class="tableborder">  <form name="listcardform" method="post" action="ListCard.php" onsubmit="return confirm('确认要删除?');">  <?=$ecms_hashur['form']?>    <input type="hidden" name="enews" value="DelCard_all">	<input name="time" type="hidden" id="time" value="<?=$time?>">    <tr class="header">       <td width="4%"><div align="center"></div></td>      <td width="7%" height="25"> <div align="center">ID</div></td>      <td width="36%" height="25"> <div align="center">卡号</div></td>      <td width="14%" height="25"> <div align="center">金额(元)</div></td>      <td width="12%"><div align="center">有效期</div></td>      <td width="12%" height="25"> <div align="center">点数</div></td>      <td width="15%" height="25"> <div align="center">操作</div></td>    </tr>    <?  while($r=$empire->fetch($sql))  {  ?>    <tr bgcolor="#FFFFFF" onmouseout="this.style.backgroundColor='#ffffff'" onmouseover="this.style.backgroundColor='#C3EFFF'">       <td><div align="center">           <input name="cardid[]" type="checkbox" id="cardid[]" value="<?=$r[cardid]?>">        </div></td>      <td height="25"> <div align="center">           <?=$r[cardid]?>        </div></td>      <td height="25"> <div align="center"> <a alt="End Time:<?=$r[endtime]?><br>Add Time:<?=$r[cardtime]?>">           <?=$r[card_no]?>          </a> </div></td>      <td height="25"> <div align="center">           <?=$r[money]?>        </div></td>      <td><div align="center"><?=$r[carddate]?></div></td>      <td height="25"> <div align="center">           <?=$r[cardfen]?>        </div></td>      <td height="25"> <div align="center">[<a href="AddCard.php?enews=EditCard&cardid=<?=$r[cardid]?>&time=<?=$time?><?=$ecms_hashur['ehref']?>">修改</a>] [<a href="ListCard.php?enews=DelCard&cardid=<?=$r[cardid]?>&time=<?=$time?><?=$ecms_hashur['href']?>" onclick="return confirm('确认要删除?');">删除</a>]</div></td>    </tr>    <?  }  ?>    <tr bgcolor="#FFFFFF">       <td height="25"> <div align="center">           <input type=checkbox name=chkall value=on onclick="CheckAll(this.form)">        </div></td>      <td height="25" colspan="6">          <?=$returnpage?>           <input type="submit" name="Submit2" value="删除选中"> </td>    </tr>  </form></table></body></html><?db_close();$empire=null;?>
 |