'; } } return $mymps; } CURSCRIPT != 'wap' && exit('FORBIDDEN'); $catid = isset($catid) ? intval($catid) : ''; $areaid = isset($areaid) ? intval($areaid) : ''; require_once MYMPS_DATA . '/info_lasttime.php'; $authcodesettings = read_static_cache('authcodesettings'); if ($action == 'post') { $content = isset($content) ? textarea_post_change($content) : ''; $result = verify_badwords_filter($mymps_global['cfg_if_info_verify'], $title, $content); $title = $result['title']; $content = $result['content']; $content = preg_replace('/]+>(.+?)<\\/a>/i', '', $content); $info_level = $result['level']; $mixcode = isset($mixcode) ? trim($mixcode) : ''; $manage_pwd = isset($manage_pwd) ? trim($manage_pwd) : ''; $begintime = $timestamp; $lat = isset($lat) ? (double) $lat : ''; $lng = isset($lng) ? (double) $lng : ''; $activetime = $endtime = intval($endtime); $endtime = $endtime == 0 ? 0 : $endtime * 3600 * 24 + $begintime; $d = $db->getRow('SELECT catname,dir_typename,modid,gid FROM `' . $db_mymps . 'category` WHERE catid = \'' . $catid . '\''); $catname = $d['catname']; $dir_typename = $d['dir_typename']; if (!$mixcode || $mixcode != md5($cookiepre)) { errormsg('系统判断您的来路不正确！'); } if (empty($catid)) { redirectmsg('您选择发布的分类不存在!', 'index.php?mod=category'); } if (!($areaid = $db->getOne('SELECT areaid FROM `' . $db_mymps . 'area` WHERE areaid = \'' . $areaid . '\''))) { redirectmsg('您选择发布的地区不存在!', 'index.php?mod=post&catid=' . $catid); } empty($areaid) && errormsg('请选择您要发布的地区!', 'index.php?mod=post&catid=' . $catid . ''); empty($title) && errormsg('请输入信息标题!'); empty($content) && errormsg('您还没有输入信息描述!'); empty($contact_who) && errormsg('联系人不能为空!'); empty($tel) && errormsg('联系电话不能为空!'); if ($iflogin == 1) { if ($authcodesettings['memberpost'] == 1 && !($randcode = mymps_chk_randcode($checkcode))) { errormsg('验证码输入错误，请返回重新输入'); } } else if ($iflogin == 0) { if ($authcodesettings['post'] == 1 && !($randcode = mymps_chk_randcode($checkcode))) { errormsg('验证码输入错误，请返回重新输入'); } if (empty($manage_pwd)) { errormsg('管理密码不能为空，该密码用于修改/删除该信息，请谨记!'); } } require_once MYMPS_INC . '/upfile.fun.php'; require_once MYMPS_DATA . '/config.inc.php'; mymps_check_upimage_wap('mymps_img_'); if (!empty($mymps_global['cfg_disallow_post_tel']) && !empty($tel)) { $disallow_tel = array(); $disallow_tel = explode('=', $mymps_global['cfg_disallow_post_tel']); $disallow_telarray = explode(',', $disallow_tel[0]); if ($disallow_tel[1] == -1) { in_array($tel, $disallow_telarray) && redirectmsg('您的电话号码' . $tel . ' 已被管理员加入黑名单!
如果您要继续操作，请联系客服。', 'index.php?mod=post&catid=' . $catid . '&areaid=' . $areaid); } else if ($disallow_tel[1] == 0) { in_array($tel, $disallow_telarray) && ($info_level = 0); } unset($disallow_tel); unset($disallow_telarray); } $ip = GetIP(); if (!empty($mymps_global['cfg_forbidden_post_ip'])) { foreach (explode(',', $mymps_global['cfg_forbidden_post_ip']) as $ctrlip) { if (preg_match('/^(' . preg_quote($ctrlip = trim($ctrlip), '/') . ')/', $ip)) { $ctrlip = $ctrlip . '%'; redirectmsg('您当前的IP ' . $ip . ' 已被管理员加入黑名单，不允许发布信息！
如果您要继续操作，请联系客服。', 'index.php?mod=post&catid=' . $catid . '&areaid=' . $areaid); exit(); } } } $post_time = 1; if (!empty($post_time)) { $count = mymps_count('information', 'WHERE ip = \'' . $ip . '\' AND begintime > (' . $timestamp . ' - 5)'); $post_time <= $count && redirectmsg('您的发布时间太快了，休息一会儿。', 'index.php?mod=member&action=mypost'); } $img_count = upload_img_num('mymps_img_'); switch ($id) { case true: if (!$db->getOne('SELECT COUNT(id) FROM `' . $db_mymps . 'information` WHERE id = \'' . $id . '\' AND userid = \'' . $s_uid . '\'')) { redirectmsg('您要修改的信息不存在或者不是您发布的！', 'index.php?mod=information&id=' . $id); exit(); } if (empty($iflogin)) { redirectmsg('您还没有登录，不能修改信息！', 'index.php?mod=information&id=' . $id); exit(); } if (is_array($_FILES)) { for ($i = 0; $i < count($_FILES); $i++) { $name_file = 'mymps_img_' . $i; if ($_FILES[$name_file]['name']) { $destination = '/information/' . date('Ym') . '/'; $mymps_image = start_upload($name_file, $destination, $mymps_global['cfg_upimg_watermark'], $mymps_mymps['cfg_information_limit']['width'], $mymps_mymps['cfg_information_limit']['height']); if ($row = $db->getRow('SELECT path,prepath FROM `' . $db_mymps . 'info_img` WHERE infoid = \'' . $id . '\' AND image_id = \'' . $i . '\'')) { @unlink(MYMPS_ROOT . $row['path']); @unlink(MYMPS_ROOT . $row['prepath']); $db->query('UPDATE `' . $db_mymps . 'info_img` SET image_id = \'' . $i . '\' , path = \'' . $mymps_image[0] . '\' , prepath = \'' . $mymps_image[1] . '\' , uptime = \'' . $timestamp . '\' WHERE image_id = \'' . $i . '\' AND infoid = \'' . $id . '\''); } else { $db->query('INSERT INTO `' . $db_mymps . 'info_img` (image_id,path,prepath,infoid,uptime) VALUES (\'' . $i . '\',\'' . $mymps_image[0] . '\',\'' . $mymps_image[1] . '\',\'' . $id . '\',\'' . $timestamp . '\')'); } if ($i === 0) { $db->query('UPDATE `' . $db_mymps . 'information` SET img_path = \'' . $mymps_image[1] . '\' WHERE id = \'' . $id . '\''); } } } } if (is_array($delinfoimg)) { $img_path = $db->getOne('SELECT img_path FROM `' . $db_mymps . 'information` WHERE id = \'' . $id . '\''); foreach ($delinfoimg as $key => $val) { if ($val == 'on') { $infoimgrow = $db->getRow('SELECT id,path,prepath FROM `' . $db_mymps . 'info_img` WHERE image_id = \'' . $key . '\' AND infoid = \'' . $id . '\''); if ($infoimgrow) { @unlink(MYMPS_ROOT . $infoimgrow['path']); @unlink(MYMPS_ROOT . $infoimgrow['prepath']); mymps_delete('info_img', 'WHERE id = \'' . $infoimgrow['id'] . '\''); if ($infoimgrow['prepath'] == $img_path) { $db->query('UPDATE `' . $db_mymps . 'information` SET img_path = \'\' WHERE id = \'' . $id . '\''); } } unset($infoimgrow); } } } $sql = $k = $v = NULL; if (is_array($extra) && 1 < $d['modid']) { foreach ($extra as $k => $v) { $sql .= is_array($v) ? '`' . $k . '` = \'' . implode(',', $v) . '\',' : '`' . $k . ('` = \'' . $v . '\','); } $sql = $sql ? substr($sql, 0, -1) : NULL; if ($sql) { $db->query('UPDATE `' . $db_mymps . 'information_' . $d[modid] . '` SET ' . $sql . ' WHERE id = \'' . $id . '\''); unset($sql); } } $manage_pwd = empty($manage_pwd) ? '' : 'manage_pwd=\'' . md5($manage_pwd) . '\','; $img_count = mymps_count('info_img', 'WHERE infoid = \'' . $id . '\''); $img_path = $mymps_image[1] ? $mymps_image[1] : ''; $sql = 'UPDATE `' . $db_mymps . 'information` SET ' . $manage_pwd . ' title = \'' . $title . '\',content = \'' . $content . '\',catid = \'' . $catid . '\', areaid = \'' . $areaid . '\', activetime = \'' . $activetime . '\', endtime = \'' . $endtime . '\' , info_level = \'' . $info_level . '\' , qq = \'' . $qq . '\' , email = \'' . $email . '\' , tel = \'' . $tel . '\' , contact_who = \'' . $contact_who . '\' , img_count = \'' . $img_count . '\' , mappoint = \'' . $mappoint . '\',catname=\'' . $d['catname'] . '\',dir_typename=\'' . $d['dir_typename'] . '\' WHERE id = \'' . $id . '\''; $db->query($sql); redirectmsg('操作成功！您已经成功修改该信息！', 'index.php?mod=member&action=mypost'); break; case false: $perpost_money_cost = $mymps_global['cfg_member_perpost_consume'] ? $mymps_global['cfg_member_perpost_consume'] : 0; if ($iflogin == 1) { $db->getOne('SELECT id FROM `' . $db_mymps . 'information` WHERE title = \'' . $title . '\' AND userid = \'' . $s_uid . '\'') && errormsg('本信息标题已经存在，本站禁止发布重复信息！请更换标题。或者您已经发过同样信息想重复发布，可到帐号管理后台进行刷新操作即可。'); $row = $db->getRow('SELECT a.per_certify,a.com_certify,a.status,a.money_own,b.perday_maxpost,b.info_maxpost,a.prelogo FROM `' . $db_mymps . 'member` AS a LEFT JOIN `' . $db_mymps . 'member_level` AS b ON a.levelid = b.id WHERE a.userid = \'' . $s_uid . '\''); $perday_maxpost = $row['perday_maxpost']; $info_maxpost = $row['info_maxpost']; if (empty($row['status'])) { redirectmsg('您账号当前为待审状态，暂不能发布信息！', 'index.php'); } if (!empty($perday_maxpost)) { $count = mymps_count('information', 'WHERE userid = \'' . $s_uid . '\' AND begintime > \'' . mktime(0, 0, 0) . '\''); $perday_maxpost <= $count && redirectmsg('很抱歉！您当前的会员级别每天只能发布 ' . $perday_maxpost . ' 条信息。', 'index.php?mod=post&catid=' . $catid); } if (!empty($info_maxpost)) { $count = mymps_count('information', 'WHERE userid = \'' . $s_uid . '\''); $info_maxpost <= $count && redirectmsg('您已超出当前会员级别发帖总量限制，如需继续发布请升级会员。', 'index.php?mod=member&action=levelup'); } if (!empty($perpost_money_cost)) { if ($row['money_own'] < $perpost_money_cost) { redirectmsg('您当前金币余额不足，发布一条信息需要支付' . $perpost_money_cost . '个金币！', 'index.php?mod=member'); exit(); } } $userid = trim($s_uid); if ($userid) { if ($row['per_certify'] == 1 || $row['com_certify'] == 1) { $certify = 1; } else { $certify = 0; } } $sql = 'INSERT INTO `' . $db_mymps . 'information` (title,content,begintime,activetime,endtime,catid,gid,catname,dir_typename,areaid,userid,ismember,info_level,qq,email,tel,contact_who,img_count,certify,ip,ip2area,latitude,longitude,face) VALUES (\'' . $title . '\',\'' . $content . '\',\'' . $begintime . '\',\'' . $activetime . '\',\'' . $endtime . '\',\'' . $catid . '\',\'' . $d['gid'] . '\',\'' . $catname . '\',\'' . $dir_typename . '\',\'' . $areaid . '\',\'' . $userid . '\',\'1\',\'' . $info_level . '\',\'' . $qq . '\',\'' . $email . '\',\'' . $tel . '\',\'' . $contact_who . '\',\'' . $img_count . '\',\'' . $certify . '\',\'' . $ip . '\',\'wap\',\'' . $lat . '\',\'' . $lng . '\',\'' . $row['prelogo'] . '\')'; $score_change = get_credit_score(); $score_changer = $score_change['score']['rank']['information']; $score_changer = $score_changer == 0 ? '+0' : $score_changer; if ($score_changer) { $db->query('UPDATE `' . $db_mymps . 'member` SET score = score' . $score_changer . (' WHERE userid = \'' . $userid . '\'')); } $score_change = $score_changer = NULL; if (!empty($perpost_money_cost)) { $db->query('UPDATE `' . $db_mymps . 'member` SET money_own = money_own-\'' . $perpost_money_cost . '\' WHERE userid = \'' . $userid . '\''); } } else { $manage_pwd = md5($manage_pwd); if ($mymps_global['cfg_if_nonmember_info'] == 1 && 0 < $mymps_global['cfg_nonmember_perday_post']) { $count = mymps_count('information', 'WHERE ip = \'' . $ip . '\' AND begintime > \'' . mktime(0, 0, 0) . '\' AND ismember = \'0\''); $mymps_global[cfg_nonmember_perday_post] <= $count && redirectmsg('很抱歉！游客每天只能发布 ' . $mymps_global[cfg_nonmember_perday_post] . ' 条信息。', 'index.php?mod=post&catid=' . $catid . '&areaid=' . $areaid); } $sql = 'INSERT INTO `' . $db_mymps . 'information` (title,content,begintime,activetime,endtime,catid,gid,catname,dir_typename,areaid,ismember,info_level,qq,email,tel,contact_who,img_count,certify,ip,ip2area,manage_pwd,latitude,longitude) VALUES (\'' . $title . '\',\'' . $content . '\',\'' . $begintime . '\',\'' . $activetime . '\',\'' . $endtime . '\',\'' . $catid . '\',\'' . $d['gid'] . '\',\'' . $catname . '\',\'' . $dir_typename . '\',\'' . $areaid . '\',\'0\',\'' . $info_level . '\',\'' . $qq . '\',\'' . $email . '\',\'' . $tel . '\',\'' . $contact_who . '\',\'' . $img_count . '\',\'' . $certify . '\',\'' . $ip . '\',\'wap\',\'' . $manage_pwd . '\',\'' . $lat . '\',\'' . $lng . '\')'; } $db->query($sql); $id = $db->insert_id(); $k = $v = NULL; if (is_array($extra) && 1 < $d['modid']) { foreach ($extra as $k => $v) { $v = is_array($v) ? implode(',', $v) : $v; $sql1 .= ',`' . $k . '`'; $sql2 .= ',\'' . $v . '\''; } $sql = '(id.' . $sql1 . ')VALUES(\'' . $id . '\',\'\',\'\')'; $db->query('INSERT INTO `' . $db_mymps . 'information_' . $d[modid] . '` (`id`' . $sql1 . ')VALUES(\'' . $id . '\'' . $sql2 . ')'); unset($sql1); unset($sql2); } if (0 < $img_count) { for ($i = 0; $i < $img_count; $i++) { $name_file = 'mymps_img_' . $i; if ($_FILES[$name_file]['name']) { $destination = '/information/' . date('Ym') . '/'; $mymps_image = start_upload($name_file, $destination, $mymps_global['cfg_upimg_watermark'], $mymps_mymps['cfg_information_limit']['width'], $mymps_mymps['cfg_information_limit']['height']); $db->query('INSERT INTO `' . $db_mymps . 'info_img` (image_id,path,prepath,infoid,uptime) VALUES (\'' . $i . '\',\'' . $mymps_image[0] . '\',\'' . $mymps_image[1] . '\',\'' . $id . '\',\'' . $begintime . '\')'); } if ($i === 0) { $img_path = $mymps_image[1]; } } $db->query('UPDATE `' . $db_mymps . 'information` SET img_path = \'' . $img_path . '\' WHERE id = \'' . $id . '\''); } $msg = 0 < $info_level ? '成功发布一条信息!' : '您的信息审核通过后将显示在网站上!'; redirectmsg($msg, 'index.php?mod=index'); break; } } else { require_once MYMPS_DATA . '/info.type.inc.php'; if (!$catid && !$id) { $loc = get_location_m('post', '', '选择分类-发布信息'); $page_title = $loc['page_title']; $categories = get_categories_tree(0, 'category'); include mymps_tpl('post_cat'); exit(); } else { if (!$catid && $id && $s_uid) { if (!($info = $db->getRow('SELECT * FROM `' . $db_mymps . 'information` WHERE id = \'' . $id . '\' AND userid = \'' . $s_uid . '\''))) { errormsg('该信息不存在或者不是你发布的！'); exit(); } $cat = $db->getRow('SELECT catid,catname,parentid,modid,if_upimg,gid FROM `' . $db_mymps . 'category` WHERE catid = \'' . $info['catid'] . '\''); $show_mod_option = return_category_info_options($cat['modid'], $id); $mixcode = md5($cookiepre); if ($iflogin == 1) { $info['imgcode'] = $authcodesettings['memberpost'] == 1 ? 1 : ''; } else { $info['imgcode'] = $authcodesettings['post'] == 1 ? 1 : ''; } $info['content'] = $mymps_global['cfg_post_editor'] == 1 ? clear_html($info['content'], false) : $info['content']; $info['content'] = de_textarea_post_change($info['content']); $catid = $info['catid']; $loc = get_location_m('post', '', '修改' . $cat[catname] . '信息-发布信息'); $page_title = $loc['page_title']; include mymps_tpl('post'); exit(); } else if ($catid) { if ($iflogin == 1) { $perpost_money_cost = $mymps_global['cfg_member_perpost_consume'] ? $mymps_global['cfg_member_perpost_consume'] : 0; $row = $db->getRow('SELECT money_own,sj_certify,mobile FROM `' . $db_mymps . 'member` WHERE userid = \'' . $s_uid . '\''); if (!empty($perpost_money_cost)) { if ($row['money_own'] < $perpost_money_cost) { redirectmsg('您当前金币余额不足，发布一条信息需要支付' . $perpost_money_cost . '个金币！', 'index.php?mod=member'); exit(); } } if ($row['sj_certify'] == 0 && $mymps_global['cfg_member_verify'] == 4) { redirectmsg('还差最后一步，填写手机号码认证通过后就可以发布信息啦', 'index.php?mod=member&action=sjrz'); } } $cat = $db->getRow('SELECT catid,catname,parentid,modid,if_upimg,gid FROM `' . $db_mymps . 'category` WHERE catid = \'' . $catid . '\''); $cat['parentname'] = $db->getOne('SELECT catname FROM `' . $db_mymps . 'category` WHERE catid = \'' . $cat['parentid'] . '\''); if ($cat['parentid'] == 0) { $categories = get_categories_tree($catid, 'category'); $loc = get_location_m('post', '', '选择分类-发布信息'); $page_title = $loc['page_title']; include mymps_tpl('post_cat'); } else if (0 < $cat['parentid']) { if ($iflogin != 1) { if ($mymps_global['cfg_if_nonmember_info'] != 1) { $returnurl = 'index.php?mod=post&catid=' . $catid; $returnurl = urlencode($returnurl); redirectmsg('请登录后发布信息！', 'index.php?mod=login&returnurl=' . $returnurl); } } else if ($user = $db->getRow('SELECT qq,email,mobile,cname FROM `' . $db_mymps . 'member` WHERE userid = \'' . $s_uid . '\'')) { $info['tel'] = $user['mobile']; $info['contact_who'] = $user['cname']; $info['qq'] = $user['qq']; } if ($child = $db->getAll('SELECT catid,catname FROM `' . $db_mymps . 'category` WHERE parentid = \'' . $catid . '\'')) { $info['catname'] = ''; $info['catname'] .= '请选择子分类'; foreach ($child as $k => $v) { $info['catname'] .= '' . $v[catname] . ''; } $info['catname'] .= ''; } else { $info['catname'] = $db->getOne('SELECT catname FROM `' . $db_mymps . 'category` WHERE catid = \'' . $catid . '\''); } $return_url = 'index.php?mod=post&catid=' . $catid; $show_mod_option = return_category_info_options($cat['modid']); $mixcode = md5($cookiepre); if ($iflogin == 1) { $info['imgcode'] = $authcodesettings['memberpost'] == 1 ? 1 : ''; } else { $info['imgcode'] = $authcodesettings['post'] == 1 ? 1 : ''; } $loc = get_location_m('post', '', '发布' . $cat[catname] . '信息-发布信息'); $page_title = $loc['page_title']; include mymps_tpl('post'); } } } } ?>