mayi_cms/m/include/inc_post.php

<?php

function check_upimage_wap($file = 'filename')
{
	global $mymps_global;
	$size = $mymps_global['cfg_upimg_size'] * 1024;
	$upimg_allow = explode(',', $mymps_global['cfg_upimg_type']);

	if ($size < $_FILES[$file]['size']) {
		errormsg('上传文件应小于' . $mymps_global['cfg_upimg_size'] . 'KB');
	}

	if (!in_array(FileExt($_FILES[$file]['name']), $upimg_allow)) {
		errormsg('系统只允许上传' . $mymps_global['cfg_upimg_type'] . '格式的图片！');
	}

	if (!preg_match('/^image\\//i', $_FILES[$file]['type'])) {
		errormsg('很抱歉，系统无法识别您上传的文件的格式，请换一张图片上传！');
	}

	return true;
}

function mymps_check_upimage_wap($file = 'filename')
{
	if (is_array($_FILES)) {
		for ($i = 0; $i < count($_FILES); $i++) {
			if ($_FILES[$file . $i]['name']) {
				check_upimage_wap($file . $i);
			}
		}
	}
}

function get_upload_image_view_wap($if_upimg = 1)
{
	global $mymps_global;
	global $db;
	global $db_mymps;

	if ($if_upimg == 1) {
		$cfg_upimg_number = $mymps_global[cfg_upimg_number] ? $mymps_global[cfg_upimg_number] : '3';

		for ($i = 0; $i < $cfg_upimg_number; $i++) {
			$mymps .= '<input class="input" style="width:210px;overflow: hidden;padding:5px 0;" type="file" name="mymps_img_' . $i . '" datatype="filter" msg="图片文件格式不正确">';
		}
	}

	return $mymps;
}

CURSCRIPT != 'wap' && exit('FORBIDDEN');
$catid = isset($catid) ? intval($catid) : '';
$areaid = isset($areaid) ? intval($areaid) : '';
require_once MYMPS_DATA . '/info_lasttime.php';
$authcodesettings = read_static_cache('authcodesettings');

if ($action == 'post') {
	$content = isset($content) ? textarea_post_change($content) : '';
	$result = verify_badwords_filter($mymps_global['cfg_if_info_verify'], $title, $content);
	$title = $result['title'];
	$content = $result['content'];
	$content = preg_replace('/<a[^>]+>(.+?)<\\/a>/i', '', $content);
	$info_level = $result['level'];
	$mixcode = isset($mixcode) ? trim($mixcode) : '';
	$manage_pwd = isset($manage_pwd) ? trim($manage_pwd) : '';
	$begintime = $timestamp;
	$lat = isset($lat) ? (double) $lat : '';
	$lng = isset($lng) ? (double) $lng : '';
	$activetime = $endtime = intval($endtime);
	$endtime = $endtime == 0 ? 0 : $endtime * 3600 * 24 + $begintime;
	$d = $db->getRow('SELECT catname,dir_typename,modid,gid FROM `' . $db_mymps . 'category` WHERE catid = \'' . $catid . '\'');
	$catname = $d['catname'];
	$dir_typename = $d['dir_typename'];
	if (!$mixcode || $mixcode != md5($cookiepre)) {
		errormsg('系统判断您的来路不正确！');
	}

	if (empty($catid)) {
		redirectmsg('您选择发布的分类不存在!', 'index.php?mod=category');
	}

	if (!($areaid = $db->getOne('SELECT areaid FROM `' . $db_mymps . 'area` WHERE areaid = \'' . $areaid . '\''))) {
		redirectmsg('您选择发布的地区不存在!', 'index.php?mod=post&catid=' . $catid);
	}

	empty($areaid) && errormsg('请选择您要发布的地区!', 'index.php?mod=post&catid=' . $catid . '');
	empty($title) && errormsg('请输入信息标题!');
	empty($content) && errormsg('您还没有输入信息描述!');
	empty($contact_who) && errormsg('联系人不能为空!');
	empty($tel) && errormsg('联系电话不能为空!');

	if ($iflogin == 1) {
		if ($authcodesettings['memberpost'] == 1 && !($randcode = mymps_chk_randcode($checkcode))) {
			errormsg('验证码输入错误，请返回重新输入');
		}
	}
	else if ($iflogin == 0) {
		if ($authcodesettings['post'] == 1 && !($randcode = mymps_chk_randcode($checkcode))) {
			errormsg('验证码输入错误，请返回重新输入');
		}

		if (empty($manage_pwd)) {
			errormsg('管理密码不能为空，该密码用于修改/删除该信息，请谨记!');
		}
	}

	require_once MYMPS_INC . '/upfile.fun.php';
	require_once MYMPS_DATA . '/config.inc.php';
	mymps_check_upimage_wap('mymps_img_');
	if (!empty($mymps_global['cfg_disallow_post_tel']) && !empty($tel)) {
		$disallow_tel = array();
		$disallow_tel = explode('=', $mymps_global['cfg_disallow_post_tel']);
		$disallow_telarray = explode(',', $disallow_tel[0]);

		if ($disallow_tel[1] == -1) {
			in_array($tel, $disallow_telarray) && redirectmsg('您的电话号码<b style=\'color:red\'>' . $tel . '</b> 已被管理员加入黑名单!<br />如果您要继续操作，请联系客服。', 'index.php?mod=post&catid=' . $catid . '&areaid=' . $areaid);
		}
		else if ($disallow_tel[1] == 0) {
			in_array($tel, $disallow_telarray) && ($info_level = 0);
		}

		unset($disallow_tel);
		unset($disallow_telarray);
	}

	$ip = GetIP();

	if (!empty($mymps_global['cfg_forbidden_post_ip'])) {
		foreach (explode(',', $mymps_global['cfg_forbidden_post_ip']) as $ctrlip) {
			if (preg_match('/^(' . preg_quote($ctrlip = trim($ctrlip), '/') . ')/', $ip)) {
				$ctrlip = $ctrlip . '%';
				redirectmsg('您当前的IP <b style=\'color:red\'>' . $ip . '</b> 已被管理员加入黑名单，不允许发布信息！<br />如果您要继续操作，请联系客服。', 'index.php?mod=post&catid=' . $catid . '&areaid=' . $areaid);
				exit();
			}
		}
	}

	$post_time = 1;

	if (!empty($post_time)) {
		$count = mymps_count('information', 'WHERE ip = \'' . $ip . '\' AND begintime > (' . $timestamp . ' - 5)');
		$post_time <= $count && redirectmsg('您的发布时间太快了，休息一会儿。', 'index.php?mod=member&action=mypost');
	}

	$img_count = upload_img_num('mymps_img_');

	switch ($id) {
	case true:
		if (!$db->getOne('SELECT COUNT(id) FROM `' . $db_mymps . 'information` WHERE id = \'' . $id . '\' AND userid = \'' . $s_uid . '\'')) {
			redirectmsg('您要修改的信息不存在或者不是您发布的！', 'index.php?mod=information&id=' . $id);
			exit();
		}

		if (empty($iflogin)) {
			redirectmsg('您还没有登录，不能修改信息！', 'index.php?mod=information&id=' . $id);
			exit();
		}

		if (is_array($_FILES)) {
			for ($i = 0; $i < count($_FILES); $i++) {
				$name_file = 'mymps_img_' . $i;

				if ($_FILES[$name_file]['name']) {
					$destination = '/information/' . date('Ym') . '/';
					$mymps_image = start_upload($name_file, $destination, $mymps_global['cfg_upimg_watermark'], $mymps_mymps['cfg_information_limit']['width'], $mymps_mymps['cfg_information_limit']['height']);

					if ($row = $db->getRow('SELECT path,prepath FROM `' . $db_mymps . 'info_img` WHERE infoid = \'' . $id . '\' AND image_id = \'' . $i . '\'')) {
						@unlink(MYMPS_ROOT . $row['path']);
						@unlink(MYMPS_ROOT . $row['prepath']);
						$db->query('UPDATE `' . $db_mymps . 'info_img` SET image_id = \'' . $i . '\' , path = \'' . $mymps_image[0] . '\' , prepath = \'' . $mymps_image[1] . '\' , uptime = \'' . $timestamp . '\' WHERE image_id = \'' . $i . '\' AND infoid = \'' . $id . '\'');
					}
					else {
						$db->query('INSERT INTO `' . $db_mymps . 'info_img` (image_id,path,prepath,infoid,uptime) VALUES (\'' . $i . '\',\'' . $mymps_image[0] . '\',\'' . $mymps_image[1] . '\',\'' . $id . '\',\'' . $timestamp . '\')');
					}

					if ($i === 0) {
						$db->query('UPDATE `' . $db_mymps . 'information` SET img_path = \'' . $mymps_image[1] . '\' WHERE id = \'' . $id . '\'');
					}
				}
			}
		}

		if (is_array($delinfoimg)) {
			$img_path = $db->getOne('SELECT img_path FROM `' . $db_mymps . 'information` WHERE id = \'' . $id . '\'');

			foreach ($delinfoimg as $key => $val) {
				if ($val == 'on') {
					$infoimgrow = $db->getRow('SELECT id,path,prepath FROM `' . $db_mymps . 'info_img` WHERE image_id = \'' . $key . '\' AND infoid = \'' . $id . '\'');

					if ($infoimgrow) {
						@unlink(MYMPS_ROOT . $infoimgrow['path']);
						@unlink(MYMPS_ROOT . $infoimgrow['prepath']);
						mymps_delete('info_img', 'WHERE id = \'' . $infoimgrow['id'] . '\'');

						if ($infoimgrow['prepath'] == $img_path) {
							$db->query('UPDATE `' . $db_mymps . 'information` SET img_path = \'\' WHERE id = \'' . $id . '\'');
						}
					}

					unset($infoimgrow);
				}
			}
		}

		$sql = $k = $v = NULL;
		if (is_array($extra) && 1 < $d['modid']) {
			foreach ($extra as $k => $v) {
				$sql .= is_array($v) ? '`' . $k . '` = \'' . implode(',', $v) . '\',' : '`' . $k . ('` = \'' . $v . '\',');
			}

			$sql = $sql ? substr($sql, 0, -1) : NULL;

			if ($sql) {
				$db->query('UPDATE `' . $db_mymps . 'information_' . $d[modid] . '` SET ' . $sql . ' WHERE id = \'' . $id . '\'');
				unset($sql);
			}
		}

		$manage_pwd = empty($manage_pwd) ? '' : 'manage_pwd=\'' . md5($manage_pwd) . '\',';
		$img_count = mymps_count('info_img', 'WHERE infoid = \'' . $id . '\'');
		$img_path = $mymps_image[1] ? $mymps_image[1] : '';
		$sql = 'UPDATE `' . $db_mymps . 'information` SET ' . $manage_pwd . ' title = \'' . $title . '\',content = \'' . $content . '\',catid = \'' . $catid . '\', areaid = \'' . $areaid . '\', activetime = \'' . $activetime . '\', endtime = \'' . $endtime . '\' , info_level = \'' . $info_level . '\' , qq = \'' . $qq . '\' , email = \'' . $email . '\' , tel = \'' . $tel . '\' , contact_who = \'' . $contact_who . '\' , img_count = \'' . $img_count . '\' , mappoint = \'' . $mappoint . '\',catname=\'' . $d['catname'] . '\',dir_typename=\'' . $d['dir_typename'] . '\' WHERE id = \'' . $id . '\'';
		$db->query($sql);
		redirectmsg('操作成功！您已经成功修改该信息！', 'index.php?mod=member&action=mypost');
		break;

	case false:
		$perpost_money_cost = $mymps_global['cfg_member_perpost_consume'] ? $mymps_global['cfg_member_perpost_consume'] : 0;

		if ($iflogin == 1) {
			$db->getOne('SELECT id FROM `' . $db_mymps . 'information` WHERE title = \'' . $title . '\' AND userid = \'' . $s_uid . '\'') && errormsg('本信息标题已经存在，本站禁止发布重复信息！请更换标题。或者您已经发过同样信息想重复发布，可到帐号管理后台进行刷新操作即可。');
			$row = $db->getRow('SELECT a.per_certify,a.com_certify,a.status,a.money_own,b.perday_maxpost,b.info_maxpost,a.prelogo FROM `' . $db_mymps . 'member` AS a LEFT JOIN `' . $db_mymps . 'member_level` AS b ON a.levelid = b.id WHERE a.userid = \'' . $s_uid . '\'');
			$perday_maxpost = $row['perday_maxpost'];
			$info_maxpost = $row['info_maxpost'];

			if (empty($row['status'])) {
				redirectmsg('您账号当前为待审状态，暂不能发布信息！', 'index.php');
			}

			if (!empty($perday_maxpost)) {
				$count = mymps_count('information', 'WHERE userid = \'' . $s_uid . '\' AND begintime > \'' . mktime(0, 0, 0) . '\'');
				$perday_maxpost <= $count && redirectmsg('很抱歉！您当前的会员级别每天只能发布 ' . $perday_maxpost . ' 条信息。', 'index.php?mod=post&catid=' . $catid);
			}

			if (!empty($info_maxpost)) {
				$count = mymps_count('information', 'WHERE userid = \'' . $s_uid . '\'');
				$info_maxpost <= $count && redirectmsg('您已超出当前会员级别发帖总量限制，如需继续发布请升级会员。', 'index.php?mod=member&action=levelup');
			}

			if (!empty($perpost_money_cost)) {
				if ($row['money_own'] < $perpost_money_cost) {
					redirectmsg('您当前金币余额不足，发布一条信息需要支付' . $perpost_money_cost . '个金币！', 'index.php?mod=member');
					exit();
				}
			}

			$userid = trim($s_uid);

			if ($userid) {
				if ($row['per_certify'] == 1 || $row['com_certify'] == 1) {
					$certify = 1;
				}
				else {
					$certify = 0;
				}
			}

			$sql = 'INSERT INTO `' . $db_mymps . 'information` (title,content,begintime,activetime,endtime,catid,gid,catname,dir_typename,areaid,userid,ismember,info_level,qq,email,tel,contact_who,img_count,certify,ip,ip2area,latitude,longitude,face) VALUES (\'' . $title . '\',\'' . $content . '\',\'' . $begintime . '\',\'' . $activetime . '\',\'' . $endtime . '\',\'' . $catid . '\',\'' . $d['gid'] . '\',\'' . $catname . '\',\'' . $dir_typename . '\',\'' . $areaid . '\',\'' . $userid . '\',\'1\',\'' . $info_level . '\',\'' . $qq . '\',\'' . $email . '\',\'' . $tel . '\',\'' . $contact_who . '\',\'' . $img_count . '\',\'' . $certify . '\',\'' . $ip . '\',\'wap\',\'' . $lat . '\',\'' . $lng . '\',\'' . $row['prelogo'] . '\')';
			$score_change = get_credit_score();
			$score_changer = $score_change['score']['rank']['information'];
			$score_changer = $score_changer == 0 ? '+0' : $score_changer;

			if ($score_changer) {
				$db->query('UPDATE `' . $db_mymps . 'member` SET score = score' . $score_changer . (' WHERE userid = \'' . $userid . '\''));
			}

			$score_change = $score_changer = NULL;

			if (!empty($perpost_money_cost)) {
				$db->query('UPDATE `' . $db_mymps . 'member` SET money_own = money_own-\'' . $perpost_money_cost . '\' WHERE userid = \'' . $userid . '\'');
			}
		}
		else {
			$manage_pwd = md5($manage_pwd);
			if ($mymps_global['cfg_if_nonmember_info'] == 1 && 0 < $mymps_global['cfg_nonmember_perday_post']) {
				$count = mymps_count('information', 'WHERE ip = \'' . $ip . '\' AND begintime > \'' . mktime(0, 0, 0) . '\' AND ismember = \'0\'');
				$mymps_global[cfg_nonmember_perday_post] <= $count && redirectmsg('很抱歉！游客每天只能发布 ' . $mymps_global[cfg_nonmember_perday_post] . ' 条信息。', 'index.php?mod=post&catid=' . $catid . '&areaid=' . $areaid);
			}

			$sql = 'INSERT INTO `' . $db_mymps . 'information` (title,content,begintime,activetime,endtime,catid,gid,catname,dir_typename,areaid,ismember,info_level,qq,email,tel,contact_who,img_count,certify,ip,ip2area,manage_pwd,latitude,longitude) VALUES (\'' . $title . '\',\'' . $content . '\',\'' . $begintime . '\',\'' . $activetime . '\',\'' . $endtime . '\',\'' . $catid . '\',\'' . $d['gid'] . '\',\'' . $catname . '\',\'' . $dir_typename . '\',\'' . $areaid . '\',\'0\',\'' . $info_level . '\',\'' . $qq . '\',\'' . $email . '\',\'' . $tel . '\',\'' . $contact_who . '\',\'' . $img_count . '\',\'' . $certify . '\',\'' . $ip . '\',\'wap\',\'' . $manage_pwd . '\',\'' . $lat . '\',\'' . $lng . '\')';
		}

		$db->query($sql);
		$id = $db->insert_id();
		$k = $v = NULL;
		if (is_array($extra) && 1 < $d['modid']) {
			foreach ($extra as $k => $v) {
				$v = is_array($v) ? implode(',', $v) : $v;
				$sql1 .= ',`' . $k . '`';
				$sql2 .= ',\'' . $v . '\'';
			}

			$sql = '(id.' . $sql1 . ')VALUES(\'' . $id . '\',\'\',\'\')';
			$db->query('INSERT INTO `' . $db_mymps . 'information_' . $d[modid] . '` (`id`' . $sql1 . ')VALUES(\'' . $id . '\'' . $sql2 . ')');
			unset($sql1);
			unset($sql2);
		}

		if (0 < $img_count) {
			for ($i = 0; $i < $img_count; $i++) {
				$name_file = 'mymps_img_' . $i;

				if ($_FILES[$name_file]['name']) {
					$destination = '/information/' . date('Ym') . '/';
					$mymps_image = start_upload($name_file, $destination, $mymps_global['cfg_upimg_watermark'], $mymps_mymps['cfg_information_limit']['width'], $mymps_mymps['cfg_information_limit']['height']);
					$db->query('INSERT INTO `' . $db_mymps . 'info_img` (image_id,path,prepath,infoid,uptime) VALUES (\'' . $i . '\',\'' . $mymps_image[0] . '\',\'' . $mymps_image[1] . '\',\'' . $id . '\',\'' . $begintime . '\')');
				}

				if ($i === 0) {
					$img_path = $mymps_image[1];
				}
			}

			$db->query('UPDATE `' . $db_mymps . 'information` SET img_path = \'' . $img_path . '\' WHERE id = \'' . $id . '\'');
		}

		$msg = 0 < $info_level ? '成功发布一条信息!' : '您的信息审核通过后将显示在网站上!';
		redirectmsg($msg, 'index.php?mod=index');
		break;
	}
}
else {
	require_once MYMPS_DATA . '/info.type.inc.php';
	if (!$catid && !$id) {
		$loc = get_location_m('post', '', '选择分类-发布信息');
		$page_title = $loc['page_title'];
		$categories = get_categories_tree(0, 'category');
		include mymps_tpl('post_cat');
		exit();
	}
	else {
		if (!$catid && $id && $s_uid) {
			if (!($info = $db->getRow('SELECT * FROM `' . $db_mymps . 'information` WHERE id = \'' . $id . '\' AND userid = \'' . $s_uid . '\''))) {
				errormsg('该信息不存在或者不是你发布的！');
				exit();
			}

			$cat = $db->getRow('SELECT catid,catname,parentid,modid,if_upimg,gid FROM `' . $db_mymps . 'category` WHERE catid = \'' . $info['catid'] . '\'');
			$show_mod_option = return_category_info_options($cat['modid'], $id);
			$mixcode = md5($cookiepre);

			if ($iflogin == 1) {
				$info['imgcode'] = $authcodesettings['memberpost'] == 1 ? 1 : '';
			}
			else {
				$info['imgcode'] = $authcodesettings['post'] == 1 ? 1 : '';
			}

			$info['content'] = $mymps_global['cfg_post_editor'] == 1 ? clear_html($info['content'], false) : $info['content'];
			$info['content'] = de_textarea_post_change($info['content']);
			$catid = $info['catid'];
			$loc = get_location_m('post', '', '修改' . $cat[catname] . '信息-发布信息');
			$page_title = $loc['page_title'];
			include mymps_tpl('post');
			exit();
		}
		else if ($catid) {
			if ($iflogin == 1) {
				$perpost_money_cost = $mymps_global['cfg_member_perpost_consume'] ? $mymps_global['cfg_member_perpost_consume'] : 0;
				$row = $db->getRow('SELECT money_own,sj_certify,mobile FROM `' . $db_mymps . 'member` WHERE userid = \'' . $s_uid . '\'');

				if (!empty($perpost_money_cost)) {
					if ($row['money_own'] < $perpost_money_cost) {
						redirectmsg('您当前金币余额不足，发布一条信息需要支付' . $perpost_money_cost . '个金币！', 'index.php?mod=member');
						exit();
					}
				}

				if ($row['sj_certify'] == 0 && $mymps_global['cfg_member_verify'] == 4) {
					redirectmsg('还差最后一步，填写手机号码认证通过后就可以发布信息啦', 'index.php?mod=member&action=sjrz');
				}
			}

			$cat = $db->getRow('SELECT catid,catname,parentid,modid,if_upimg,gid FROM `' . $db_mymps . 'category` WHERE catid = \'' . $catid . '\'');
			$cat['parentname'] = $db->getOne('SELECT catname FROM `' . $db_mymps . 'category` WHERE catid = \'' . $cat['parentid'] . '\'');

			if ($cat['parentid'] == 0) {
				$categories = get_categories_tree($catid, 'category');
				$loc = get_location_m('post', '', '选择分类-发布信息');
				$page_title = $loc['page_title'];
				include mymps_tpl('post_cat');
			}
			else if (0 < $cat['parentid']) {
				if ($iflogin != 1) {
					if ($mymps_global['cfg_if_nonmember_info'] != 1) {
						$returnurl = 'index.php?mod=post&catid=' . $catid;
						$returnurl = urlencode($returnurl);
						redirectmsg('请登录后发布信息！', 'index.php?mod=login&returnurl=' . $returnurl);
					}
				}
				else if ($user = $db->getRow('SELECT qq,email,mobile,cname FROM `' . $db_mymps . 'member` WHERE userid = \'' . $s_uid . '\'')) {
					$info['tel'] = $user['mobile'];
					$info['contact_who'] = $user['cname'];
					$info['qq'] = $user['qq'];
				}

				if ($child = $db->getAll('SELECT catid,catname FROM `' . $db_mymps . 'category` WHERE parentid = \'' . $catid . '\'')) {
					$info['catname'] = '<select name="catid" style="width:60%" onChange="location.href=\'index.php?mod=post&catid=\'+(this.options[this.selectedIndex].value)">';
					$info['catname'] .= '<option value="">请选择子分类</option>';

					foreach ($child as $k => $v) {
						$info['catname'] .= '<option value="' . $v[catid] . '">' . $v[catname] . '</option>';
					}

					$info['catname'] .= '</select>';
				}
				else {
					$info['catname'] = $db->getOne('SELECT catname FROM `' . $db_mymps . 'category` WHERE catid = \'' . $catid . '\'');
				}

				$return_url = 'index.php?mod=post&catid=' . $catid;
				$show_mod_option = return_category_info_options($cat['modid']);
				$mixcode = md5($cookiepre);

				if ($iflogin == 1) {
					$info['imgcode'] = $authcodesettings['memberpost'] == 1 ? 1 : '';
				}
				else {
					$info['imgcode'] = $authcodesettings['post'] == 1 ? 1 : '';
				}

				$loc = get_location_m('post', '', '发布' . $cat[catname] . '信息-发布信息');
				$page_title = $loc['page_title'];
				include mymps_tpl('post');
			}
		}
	}
}

?>