getRow('SELECT a.catid,a.modid,a.if_upimg,a.catname,b.catid as parentid,a.if_mappoint,b.catname as parentname FROM `' . $db_mymps . 'category` AS a LEFT JOIN `' . $db_mymps . 'category` AS b ON a.parentid = b.catid WHERE a.catid = \'' . $catid . '\''); } define('IN_SMT', true); define('CURSCRIPT', 'post'); define('IN_MYMPS', true); define('IN_MANAGE', true); require_once dirname(__FILE__) . '/include/global.php'; require_once dirname(__FILE__) . '/data/config.php'; require_once MYMPS_DATA . '/config.db.php'; require_once MYMPS_INC . '/db.class.php'; require_once MYMPS_INC . '/upfile.fun.php'; require_once MYMPS_DATA . '/config.inc.php'; ifsiteopen(); $authcodesettings = read_static_cache('authcodesettings'); !in_array($action, array('input', 'edit', 'ok')) && ($action = 'input'); $action = isset($action) ? trim($action) : ''; if ($action != 'ok') { $ip = ''; $ip = GetIP(); $ip2area = ip2area($ip); } if ($act == 'dopost') { if (!$mixcode || $mixcode != md5($cookiepre)) { exit('FORBIDDEN'); exit(); } empty($areaid) && write_msg('请选择您要发布的地区！'); empty($title) && write_msg('请输入信息标题!'); empty($content) && write_msg('您还没有输入信息描述!'); empty($tel) && write_msg('联系电话不能为空！'); empty($contact_who) && write_msg('联系人不能为空！'); mymps_check_upimage('mymps_img_'); $lat = isset($lat) ? (double) $lat : ''; $lng = isset($lng) ? (double) $lng : ''; $id = $action == 'edit' ? intval($id) : ''; $userid = isset($userid) ? mhtmlspecialchars($userid) : ''; $manage_pwd = isset($manage_pwd) ? trim($manage_pwd) : ''; $catid = intval($catid); if (empty($catid)) { write_msg('您未指定发布的信息栏目'); } $areaid = intval($areaid); $streetid = intval($streetid); $title = trim(mhtmlspecialchars($title)); $content = $mymps_global['cfg_post_editor'] == 1 ? $content : textarea_post_change($content); $begintime = $timestamp; $activetime = $endtime = intval($endtime); $endtime = $endtime == 0 ? 0 : $endtime * 3600 * 24 + $begintime; $ismember = intval($ismember); $mappoint = isset($mappoint) ? trim(mhtmlspecialchars($mappoint)) : ''; $tel = isset($tel) ? trim(mhtmlspecialchars($tel)) : ''; $qq = isset($qq) ? trim(mhtmlspecialchars($qq)) : ''; $web_address = trim(mhtmlspecialchars($web_address)); $email = isset($email) ? trim(mhtmlspecialchars($email)) : ''; $result = verify_badwords_filter($mymps_global['cfg_if_info_verify'], $title, $content); $title = $result['title']; $content = $result['content']; $content = preg_replace('/]+>(.+?)<\\/a>/i', '$1', $content); $info_level = $result['level']; unset($result); $extra = isset($extra) ? $extra : ''; $d = $db->getRow('SELECT catname,dir_typename,modid,gid FROM `' . $db_mymps . 'category` WHERE catid = \'' . $catid . '\''); if ($action == 'input') { if (!empty($mymps_global['cfg_allow_post_area']) && !empty($ip2area)) { $i = 1; $allow_post_area = array(); $allow_post_area = explode('=', $mymps_global['cfg_allow_post_area']); $allow_post_areas = explode(',', $allow_post_area[0]); foreach ($allow_post_areas as $k => $v) { if (strstr($ip2area, $v)) { $i = $i + 1; } } if ($allow_post_area[1] == '-1' && $i == 1) { write_msg('系统判断您的IP并非' . $allow_post_area[0] . '本地IP！
如果您要继续操作，请联系客服。'); exit(); } else { if ($allow_post_area[1] == 0 && $i == 1) { $info_level = 0; } } unset($allow_post_area); unset($address); unset($ipdata); unset($allow_post_areas); unset($i); } $checkquestion = isset($checkquestion) ? $checkquestion : ''; $data = ''; @include MYMPS_DATA . '/caches/checkanswer_settings.php'; if (is_array($data)) { $whenpost = $data['whenpost']; $result = read_static_cache('checkanswer'); if ($whenpost == 1 && is_array($result)) { if (!is_array($checkquestion) || empty($checkquestion['answer']) || empty($checkquestion['id'])) { write_msg('您还没有输入验证问题！'); exit(); } if ($result[$checkquestion['id']]['answer'] != $checkquestion['answer']) { write_msg('您输入的验证问题答案不正确，请重新输入！'); } } $result = $checkquestion = $whenpost = $data = NULL; } $img_count = upload_img_num('mymps_img_'); if (!empty($mymps_global['cfg_disallow_post_tel']) && !empty($tel)) { $disallow_tel = array(); $disallow_tel = explode('=', $mymps_global['cfg_disallow_post_tel']); $disallow_telarray = explode(',', $disallow_tel[0]); if ($disallow_tel[1] == -1) { in_array($tel, $disallow_telarray) && write_msg('您的电话号码' . $tel . ' 已被管理员加入黑名单！
如果您要继续操作，请联系客服。'); } else if ($disallow_tel[1] == 0) { in_array($tel, $disallow_telarray) && ($info_level = 0); } unset($disallow_tel); unset($disallow_telarray); } if ($yet = $db->getOne('SELECT begintime FROM `' . $db_mymps . 'information` WHERE title=\'' . $title . '\' AND tel = \'' . $tel . '\' ORDER BY id DESC')) { if ($timestamp - $yet < 3600 * 24) { write_msg('请勿重复发布信息！', '?action=input&catid=' . $catid); } unset($yet); } if (empty($ismember)) { if ($mymps_global['cfg_if_nonmember_info'] != 1) { write_msg('对不起，您还没有登录！请您登录后再发布信息！'); } if ($mymps_global['cfg_if_nonmember_info'] == 1 && 0 < $mymps_global['cfg_nonmember_perday_post']) { $count = mymps_count('information', 'WHERE ip = \'' . $ip . '\' AND begintime > \'' . mktime(0, 0, 0) . '\' AND ismember = \'0\''); $mymps_global[cfg_nonmember_perday_post] <= $count && write_msg('很抱歉！游客每天只能发布 ' . $mymps_global[cfg_nonmember_perday_post] . ' 条信息
如果您要继续操作，请联系客服。'); } empty($manage_pwd) && write_msg('请输入您的管理密码！以便于以后对该信息的修改和删除'); empty($contact_who) && write_msg('请填写联系人！'); $manage_pwd = md5($manage_pwd); if ($authcodesettings['post'] == 1 && !($randcode = mymps_chk_randcode($checkcode))) { write_msg('验证码输入错误，请返回重新输入'); } $sql = 'INSERT INTO `' . $db_mymps . 'information` (title,content,gid,catid,catname,dir_typename,areaid,begintime,activetime,endtime,manage_pwd,ismember,ip,ip2area,info_level,qq,email,tel,contact_who,img_count,mappoint,latitude,longitude)VALUES(\'' . $title . '\',\'' . $content . '\',\'' . $d['gid'] . '\',\'' . $catid . '\',\'' . $d['catname'] . '\',\'' . $d['dir_typename'] . '\',\'' . $areaid . '\',\'' . $begintime . '\',\'' . $activetime . '\',\'' . $endtime . '\',\'' . $manage_pwd . '\',\'' . $ismember . '\',\'' . $ip . '\',\'' . $ip2area . '\',\'' . $info_level . '\',\'' . $qq . '\',\'' . $email . '\',\'' . $tel . '\',\'' . $contact_who . '\',\'' . $img_count . '\',\'' . $mappoint . '\',\'' . $lat . '\',\'' . $lng . '\')'; } else if ($ismember == 1) { $s_uid = $status = ''; require_once MYMPS_INC . '/member.class.php'; if (!$member_log->chk_in()) { write_msg('对不起,您还没有登录！'); } $memberinfo = $member_log->get_info(); $status = $memberinfo['status']; $face = $memberinfo['prelogo']; if (empty($status)) { write_msg('您的账号 [' . $s_uid . '] 目前处于待审状态！
请进入邮箱查收验证邮件或等待客服人员开通账号！'); exit(); } $per = $db->getRow('SELECT a.money_own,b.perday_maxpost,b.info_maxpost FROM `' . $db_mymps . 'member` AS a LEFT JOIN `' . $db_mymps . 'member_level` AS b ON a.levelid = b.id WHERE a.userid = \'' . $s_uid . '\''); $perday_maxpost = $per['perday_maxpost']; if (!empty($perday_maxpost)) { $count = mymps_count('information', 'WHERE userid LIKE \'' . $s_uid . '\' AND begintime > \'' . mktime(0, 0, 0) . '\''); $perday_maxpost <= $count && write_msg('很抱歉！您当前的会员级别每天只能发布 ' . $perday_maxpost . ' 条信息
如果您要继续操作，请联系客服。'); } if ($per[info_maxpost]) { $count = mymps_count('information', 'WHERE userid = \'' . $s_uid . '\''); $per[info_maxpost] <= $count && write_msg('很抱歉！您已超出发布数量总量限制
如果您要继续发布信息，请升级会员。'); } if (!empty($perpost_money_cost)) { if ($per['money_own'] < $perpost_money_cost) { write_msg('您当前金币余额不足，发布一条信息需要支付' . $perpost_money_cost . '个金币！'); exit(); } } chk_member_purview('purview_info'); $perpost_money_cost = $mymps_global['cfg_member_perpost_consume'] ? $mymps_global['cfg_member_perpost_consume'] : 0; $userid = trim($s_uid); if ($userid) { $row = $db->getRow('SELECT per_certify,com_certify FROM `' . $db_mymps . 'member` WHERE userid = \'' . $userid . '\''); if ($row['per_certify'] == 1 || $row['com_certify'] == 1) { $certify = 1; } else { $certify = 0; } unset($row); } if ($authcodesettings['memberpost'] == 1 && !($randcode = mymps_chk_randcode($checkcode))) { write_msg('验证码输入错误，请返回重新输入'); } $sql = 'INSERT INTO `' . $db_mymps . 'information` (title,content,begintime,activetime,endtime,gid,catid,catname,dir_typename,areaid,userid,ismember,ip,ip2area,info_level,qq,email,tel,contact_who,img_count,mappoint,certify,latitude,longitude,face) Values (\'' . $title . '\',\'' . $content . '\',\'' . $begintime . '\',\'' . $activetime . '\',\'' . $endtime . '\',\'' . $d['gid'] . '\',\'' . $catid . '\',\'' . $d['catname'] . '\',\'' . $d['dir_typename'] . '\',\'' . $areaid . '\',\'' . $userid . '\',\'' . $ismember . '\',\'' . $ip . '\',\'' . $ip2area . '\',\'' . $info_level . '\',\'' . $qq . '\',\'' . $email . '\',\'' . $tel . '\',\'' . $contact_who . '\',\'' . $img_count . '\',\'' . $mappoint . '\',\'' . $certify . '\',\'' . $lat . '\',\'' . $lng . '\',\'' . $face . '\')'; $score_change = get_credit_score(); $score_changer = $score_change['score']['rank']['information']; $score_changer = $score_changer == 0 ? '+0' : $score_changer; if ($score_changer) { $db->query('UPDATE `' . $db_mymps . 'member` SET score = score' . $score_changer . (' WHERE userid = \'' . $userid . '\'')); } $score_change = $score_changer = NULL; if (!empty($perpost_money_cost)) { $db->query('UPDATE `' . $db_mymps . 'member` SET money_own = money_own-\'' . $perpost_money_cost . '\' WHERE userid = \'' . $userid . '\''); } } else { exit('Access Denied!'); } $db->query($sql); $id = $db->insert_id(); $k = $v = NULL; if (is_array($extra) && 1 < $d['modid']) { foreach ($extra as $k => $v) { $v = is_array($v) ? implode(',', $v) : $v; $sql1 .= ',`' . $k . '`'; $sql2 .= ',\'' . $v . '\''; } $sql = '(id.' . $sql1 . ')VALUES(\'' . $id . '\',\'\',\'\')'; $db->query('INSERT INTO `' . $db_mymps . 'information_' . $d[modid] . '` (`id`' . $sql1 . ')VALUES(\'' . $id . '\'' . $sql2 . ')'); unset($sql1); unset($sql2); } if (0 < $img_count) { $img_path = ''; for ($i = 0; $i < $img_count; $i++) { $name_file = 'mymps_img_' . $i; if ($_FILES[$name_file]['name']) { $destination = '/information/' . date('Ym') . '/'; $mymps_image = start_upload($name_file, $destination, $mymps_global['cfg_upimg_watermark'], $mymps_mymps['cfg_information_limit']['width'], $mymps_mymps['cfg_information_limit']['height']); $db->query('INSERT INTO `' . $db_mymps . 'info_img` (image_id,path,prepath,infoid,uptime) VALUES (\'' . $i . '\',\'' . $mymps_image[0] . '\',\'' . $mymps_image[1] . '\',\'' . $id . '\',\'' . $timestamp . '\')'); } if ($i === 0) { $img_path = $mymps_image[1]; } } if ($img_path) { $db->query('UPDATE `' . $db_mymps . 'information` SET img_path = \'' . $img_path . '\' WHERE id = \'' . $id . '\''); } } write_msg('', '?action=ok&id=' . $id . '&title=' . urlencode($title) . '&level=' . $info_level . '&filepath=' . $infopath); } else if ($action == 'edit') { if (is_array($_FILES)) { for ($i = 0; $i < count($_FILES); $i++) { $name_file = 'mymps_img_' . $i; if ($_FILES[$name_file]['name']) { $destination = '/information/' . date('Ym') . '/'; $mymps_image = start_upload($name_file, $destination, $mymps_global['cfg_upimg_watermark'], $mymps_mymps['cfg_information_limit']['width'], $mymps_mymps['cfg_information_limit']['height']); if ($row = $db->getRow('SELECT path,prepath FROM `' . $db_mymps . 'info_img` WHERE infoid = \'' . $id . '\' AND image_id = \'' . $i . '\'')) { @unlink(MYMPS_ROOT . $row['path']); @unlink(MYMPS_ROOT . $row['prepath']); $db->query('UPDATE `' . $db_mymps . 'info_img` SET image_id = \'' . $i . '\' , path = \'' . $mymps_image[0] . '\' , prepath = \'' . $mymps_image[1] . '\' , uptime = \'' . $timestamp . '\' WHERE image_id = \'' . $i . '\' AND infoid = \'' . $id . '\''); } else { $db->query('INSERT INTO `' . $db_mymps . 'info_img` (image_id,path,prepath,infoid,uptime) VALUES (\'' . $i . '\',\'' . $mymps_image[0] . '\',\'' . $mymps_image[1] . '\',\'' . $id . '\',\'' . $timestamp . '\')'); } if ($i === 0 && $mymps_image[1]) { $db->query('UPDATE `' . $db_mymps . 'information` SET img_path = \'' . $mymps_image[1] . '\' WHERE id = \'' . $id . '\''); } } } } if (is_array($delinfoimg)) { $img_path = $db->getOne('SELECT img_path FROM `' . $db_mymps . 'information` WHERE id = \'' . $id . '\''); foreach ($delinfoimg as $key => $val) { if ($val == 'on') { $infoimgrow = $db->getRow('SELECT id,path,prepath FROM `' . $db_mymps . 'info_img` WHERE image_id = \'' . $key . '\' AND infoid = \'' . $id . '\''); if ($infoimgrow) { @unlink(MYMPS_ROOT . $infoimgrow['path']); @unlink(MYMPS_ROOT . $infoimgrow['prepath']); mymps_delete('info_img', 'WHERE id = \'' . $infoimgrow['id'] . '\''); if ($infoimgrow['prepath'] == $img_path) { $db->query('UPDATE `' . $db_mymps . 'information` SET img_path = \'\' WHERE id = \'' . $id . '\''); } } unset($infoimgrow); } } } $sql = $k = $v = NULL; if (is_array($extra) && 1 < $d['modid']) { foreach ($extra as $k => $v) { $sql .= is_array($v) ? '`' . $k . '` = \'' . implode(',', $v) . '\',' : '`' . $k . ('` = \'' . $v . '\','); } $sql = $sql ? substr($sql, 0, -1) : NULL; if ($sql) { $db->query('UPDATE `' . $db_mymps . 'information_' . $d[modid] . '` SET ' . $sql . ' WHERE id = \'' . $id . '\''); unset($sql); } } $manage_pwd = empty($manage_pwd) ? '' : 'manage_pwd=\'' . md5($manage_pwd) . '\','; $userid = empty($userid) ? '' : 'userid=\'' . $userid . '\','; $img_count = mymps_count('info_img', 'WHERE infoid = \'' . $id . '\''); $img_path = $mymps_image[1] ? $mymps_image[1] : ''; $d = $db->getRow('SELECT catname,dir_typename FROM `' . $db_mymps . 'category` WHERE catid = \'' . $catid . '\''); $sql = 'UPDATE `' . $db_mymps . 'information` SET ' . $manage_pwd . ' ' . $userid . ' title = \'' . $title . '\',content = \'' . $content . '\',catid = \'' . $catid . '\', areaid = \'' . $areaid . '\', activetime = \'' . $activetime . '\', endtime = \'' . $endtime . '\', ismember = \'' . $ismember . '\' , ip = \'' . $ip . '\' , ip2area = \'' . $ip2area . '\' , info_level = \'' . $info_level . '\' , qq = \'' . $qq . '\' , email = \'' . $email . '\' , tel = \'' . $tel . '\' , contact_who = \'' . $contact_who . '\' , img_count = \'' . $img_count . '\' , mappoint = \'' . $mappoint . '\',catname=\'' . $d['catname'] . '\',dir_typename=\'' . $d['dir_typename'] . '\' WHERE id = \'' . $id . '\''; $db->query($sql); $editlimit = mgetcookie('editlimit'); $editlimit = $editlimit + 1; msetcookie('editlimit', $editlimit, 3600 * 24); write_msg('操作成功！您已经成功修改该信息！
若信息内容无变化请刷新浏览器！', Rewrite('info', array('id' => $id, 'dir_typename' => $d['dir_typename']))); } } else { $catid = isset($catid) ? intval($catid) : ''; if ($action == 'input') { if ($catname && !$catid) { $catid = $db->getOne('SELECT catid FROM `' . $db_mymps . 'category` WHERE catname = \'' . $catname . '\''); } if (!$catid) { $loc = get_location('post', '', '选择分类-发布信息'); $page_title = $loc['page_title']; globalassign(); $categories = get_categories_tree(0, 'category'); include mymps_tpl('info_post'); } else { if (!empty($mymps_global['cfg_allow_post_area']) && !empty($ip2area)) { $i = 1; $allow_post_area = array(); $allow_post_area = explode('=', $mymps_global['cfg_allow_post_area']); $allow_post_areas = explode(',', $allow_post_area[0]); foreach ($allow_post_areas as $k => $v) { if (strstr($ip2area, $v)) { $i = $i + 1; } } if ($allow_post_area[1] == '-1' && $i == 1) { write_msg('系统判断您的IP并非' . $allow_post_area[0] . '本地IP！
如果您要继续操作，请联系客服。'); exit(); } else { if ($allow_post_area[1] == 0 && $i == 1) { $info_level = 0; } } unset($allow_post_area); unset($ip2area); unset($address); unset($ipdata); unset($allow_post_areas); unset($i); } if (!empty($mymps_global['cfg_forbidden_post_ip'])) { foreach (explode(',', $mymps_global['cfg_forbidden_post_ip']) as $ctrlip) { if (preg_match('/^(' . preg_quote($ctrlip = trim($ctrlip), '/') . ')/', $ip)) { $ctrlip = $ctrlip . '%'; write_msg('您当前的IP ' . $ip . ' 已被管理员加入黑名单，不允许发布信息！'); exit(); } } } $cat = post_cat_info($catid); if ($cat['parentid'] == 0) { $loc = get_location('post', '', '选择分类-发布' . $cat[catname] . '信息'); $page_title = $loc['page_title']; $categories = get_categories_tree($catid, 'category'); globalassign(); include mymps_tpl('info_post'); exit(); } else if ($db->getOne('SELECT COUNT(catid) FROM `' . $db_mymps . 'category` WHERE parentid = \'' . $catid . '\'')) { $cat_option = $db->getAll('SELECT catid,catname FROM `' . $db_mymps . 'category` WHERE parentid = \'' . $catid . '\' ORDER BY catorder ASC'); } require_once MYMPS_DATA . '/info_lasttime.php'; require_once MYMPS_DATA . '/info.type.inc.php'; require_once MYMPS_INC . '/member.class.php'; if ($log = $member_log->chk_in()) { chk_member_purview('purview_info'); } if ($mymps_global['cfg_post_editor'] == 1) { $acontent = get_editor('content', 'Member', '', '350px', '300px', 'include/kindeditor'); } else { $acontent = ''; } $post = array(); if ($log) { $memberinfo = $member_log->get_info(); $his_money = $memberinfo['money_own']; $status = $memberinfo['status']; $sj_certify = $memberinfo['sj_certify']; if ($status < 1) { write_msg('您的会员账号尚未通过审核，不能发布信息！'); exit(); } if ($sj_certify == 0 && $mymps_global['cfg_member_verify'] == 4) { write_msg('还差最后一步，填写手机号码认证通过后就可以发布信息啦 ^_^', 'member/index.php?m=certify&ac=sjrz'); } $his_money - $mymps_global['cfg_member_perpost_consume'] < 0 && write_msg('您的用户余额 ' . $his_money . '过低 不能再发布信息，请联系管理员充值', '/member/index.php?m=pay'); $per = $db->getRow('SELECT b.perday_maxpost,b.info_maxpost FROM `' . $db_mymps . 'member` AS a LEFT JOIN `' . $db_mymps . 'member_level` AS b ON a.levelid = b.id WHERE a.userid = \'' . $s_uid . '\''); $perday_maxpost = $per[perday_maxpost]; if (!empty($perday_maxpost)) { $count = mymps_count('information', 'WHERE userid = \'' . $s_uid . '\' AND begintime > \'' . mktime(0, 0, 0) . '\''); $perday_maxpost <= $count && write_msg('很抱歉！您当前的会员级别每天只能发布' . $perday_maxpost . '条信息'); } if ($per[info_maxpost]) { $count = mymps_count('information', 'WHERE userid = \'' . $s_uid . '\''); $per[info_maxpost] <= $count && write_msg('很抱歉！您已超出发布数量总量限制
如果您要继续发布信息，请升级会员。'); } $onload = ''; $post['mobile'] = $memberinfo['mobile']; $post['qq'] = $memberinfo['qq']; $post['email'] = $memberinfo['email']; $post['userid'] = $memberinfo['userid']; $post['contact_who'] = $memberinfo['cname']; $post['ismember'] = 1; $post['manage_pwd'] = ''; $post['imgcode'] = $authcodesettings['memberpost'] == 1 ? 1 : ''; } else { if (!empty($mymps_global['cfg_nonmember_perday_post'])) { $count = mymps_count('information', 'WHERE ip = \'' . $ip . '\' AND begintime > \'' . mktime(0, 0, 0) . '\' AND ismember = \'0\''); $mymps_global[cfg_nonmember_perday_post] <= $count && write_msg('很抱歉！游客每天只能发布' . $mymps_global[cfg_nonmember_perday_post] . '条信息'); } $mymps_global['cfg_if_nonmember_info'] == '0' && write_msg('对不起，您还没有登录！请您登录后再发布信息！', $mymps_global['cfg_member_logfile'] . '?url=' . urlencode(getUrl())); $onload = ''; $post['manage_pwd'] = 1; $post['ismember'] = 0; $post['imgcode'] = $authcodesettings['post'] == 1 ? 1 : ''; } $post['mymps_extra_value'] = return_category_info_options($cat['modid']); $post['upload_img'] = $cat['if_upimg'] == 1 ? get_upload_image_view(1, $id) : ''; $post['GetInfoLastTime'] = GetInfoLastTime(); $post['action'] = 'input'; $post['submit'] = '提交发布'; $post['ip'] = $ip; $post['catid'] = $catid; $post['mixcode'] = md5($cookiepre); $post['select_where_option'] = cat_list('area'); $loc = get_location('post', '', '发布' . $cat[catname] . '信息-发布信息'); $page_title = $loc['page_title']; $whenpost = ''; $whenpost = $db->getOne('SELECT value FROM `' . $db_mymps . 'config` WHERE description = \'whenpost\' AND type = \'checkanswe\''); if ($whenpost == '1' && ($checkanswer = read_static_cache('checkanswer'))) { $checkquestion['id'] = $randid = array_rand($checkanswer, 1); $checkquestion['question'] = $checkanswer[$randid]['question']; $checkquestion['answer'] = $checkanswer[$randid]['answer']; } globalassign(); include mymps_tpl('info_post_write'); } } else if ($action == 'edit') { $page_title = '修改信息-' . $mymps_global['SiteName']; require_once MYMPS_DATA . '/info_lasttime.php'; require_once MYMPS_DATA . '/info.type.inc.php'; require_once MYMPS_INC . '/member.class.php'; $editlimit = mgetcookie('editlimit'); if (30 < $editlimit) { write_msg('您今天修改的信息太多了，休息一下吧 ^_^'); } $id = intval($id); if (!($post = is_member_info($id))) { write_msg('操作失败！你所指定的信息不存在或者已被删除！'); } $catid = $post['catid']; $areaid = $post['areaid']; $cat = $db->getRow('SELECT a.if_upimg,a.modid,b.catid FROM `' . $db_mymps . 'category` AS a LEFT JOIN `' . $db_mymps . 'category` AS b ON a.parentid = b.catid WHERE a.catid = \'' . $catid . '\''); if ($post['ismember'] == 1) { if (!($log = $member_log->chk_in())) { write_msg('', $mymps_global['SiteUrl'] . '/' . $mymps_global['cfg_member_logfile'] . '?url=' . urlencode($mymps_global['SiteUrl'] . '/' . $mymps_global['cfg_postfile'] . '?action=edit&id=' . $id)); } else { if ($log && $s_uid != $post['userid']) { write_msg('操作失败！该信息不是您发布的！', 'information.php?id=' . $id); } } $nav_bar = '' . $post['title'] . ' » 修改信息'; } else { if ($post[ismember] == 0 && !empty($manage_pwd)) { if (mymps_count('information', 'WHERE id = \'' . $id . '\' AND manage_pwd = \'' . md5($manage_pwd) . '\' AND ismember = 0') == 0) { write_msg('操作失败！您输入的管理密码不正确！'); } $post['manage_pwd'] = '管理密码： 如不修改，请留空'; $post[ismember] = 0; $nav_bar = '' . $post['title'] . ' » 输入管理密码 » 修改信息'; } else { if ($post[ismember] == 0 && empty($manage_pwd)) { $action = '修改'; $title = '输入管理密码-' . $action . '信息-' . $post[title]; $nav_bar = '' . $post[title] . ' » 输入管理密码 » ' . $action . '信息'; $post['part'] = $part; globalassign(); include mymps_tpl('info_write_pwd'); exit(); } } } $post['mobile'] = $post['tel']; if ($mymps_global['cfg_post_editor'] == 1) { $acontent = get_editor('content', 'Member', $post[content], '350px', '300px', 'include/kindeditor'); } else { $acontent = '' . de_textarea_post_change($post[content]) . ''; } $title = '修改信息内容-' . $post['title']; $post['GetInfoLastTime'] = GetInfoLastTime($post['activetime']); $post['mymps_extra_value'] = return_category_info_options($cat['modid'], $id); $post['mymps_extra_value'] = is_array($post['mymps_extra_value']) ? $post['mymps_extra_value'] : array(); $post['upload_img'] = get_upload_image_edit($cat['if_upimg'], $id); $post['action'] = 'edit'; $post['submit'] = '保存修改'; $post['select_where_option'] = cat_list('area', 0, $post[areaid]); $post['mixcode'] = md5($cookiepre); $cat = post_cat_info($catid); globalassign(); include mymps_tpl('info_post_write'); } else if ($action == 'ok') { $ok['id'] = intval($id); $ok['filepath'] = trim(mhtmlspecialchars($filepath)); $ok['title'] = trim(mhtmlspecialchars($title)); $ok['level'] = intval($level); $r = $db->getRow('SELECT a.dir_typename,a.userid FROM `' . $db_mymps . 'information` AS a WHERE a.id = \'' . $ok['id'] . '\''); $ok['info_uri'] = Rewrite('info', array('id' => $ok['id'], 'dir_typename' => $r['dir_typename'])); if (!$title || !$id) { exit('Access Denied!'); } $nav_bar = '信息发布状态提示'; globalassign(); include mymps_tpl('info_post_write_ok'); } } is_object($db) && $db->Close(); ?>