mayi_cms/member/include/inc_group.php

<?php

if (!defined('IN_MYMPS')) {
	exit('Forbidden');
}

$ac = in_array($ac, array('list', 'detail', 'signin')) ? $ac : 'list';
$id = isset($id) ? intval($id) : '';

if (submit_check('group_submit')) {
	if (is_array($selectedids)) {
		$create_in = create_in($selectedids);
		$query = $db->query('SELECT * FROM `' . $db_mymps . 'group` ' . $where . ' AND groupid ' . $create_in);

		while ($row = $db->fetchRow($query)) {
			$delete[$row['id']]['picture'] = $row['picture'];
			$delete[$row['id']]['pre_picture'] = $row['pre_picture'];
		}

		foreach ($delete as $k => $v) {
			@unlink(MYMPS_ROOT . $v['picture']);
			@unlink(MYMPS_ROOT . $v['pre_picture']);
		}

		$db->query('DELETE FROM `' . $db_mymps . 'group` ' . $where . ' AND groupid ' . $create_in);
		unset($delete);
		unset($row);
		unset($query);
		unset($create_in);
		write_msg('', '?m=group&type=corp&success=3&status=' . $status . '&page=' . $page);
	}

	include MYMPS_DATA . '/config.inc.php';
	$name_file = 'group_image';
	$gname = trim(mhtmlspecialchars($_POST['gname']));
	$content = trim($_POST['content']);
	$des = textarea_post_change(mhtmlspecialchars($_POST['des']));
	$cate_id = intval($_POST['cate_id']);
	$areaid = intval($_POST['areaid']);
	$meetdate = intval(strtotime($_POST['meetdate']));
	$enddate = intval(strtotime($_POST['enddate']));
	$picture = isset($_POST['picture_old']) ? mhtmlspecialchars($_POST['picture_old']) : '';
	$pre_picture = isset($_POST['pre_picture_old']) ? mhtmlspecialchars($_POST['pre_picture_old']) : '';
	$gaddress = isset($_POST['gaddress']) ? trim(mhtmlspecialchars($_POST['gaddress'])) : '';

	if (empty($gname)) {
		write_msg('', '?m=group&type=corp&ac=detail&error=37&id=' . $id);
	}

	if (empty($content)) {
		write_msg('', '?m=group&type=corp&ac=detail&error=35&id=' . $id);
	}

	if ($_FILES[$name_file]['name']) {
		require_once MYMPS_INC . '/upfile.fun.php';
		check_upimage($name_file);
		$destination = '/group/' . date('Ym') . '/';
		$mymps_image = empty($id) ? start_upload($name_file, $destination, 0, $mymps_mymps['cfg_group_limit']['width'], $mymps_mymps['cfg_group_limit']['height']) : start_upload($name_file, $destination, 0, $mymps_mymps['cfg_group_limit']['width'], $mymps_mymps['cfg_group_limit']['height'], $picture, $pre_picture);
		$picture = $mymps_image[0];
		$pre_picture = $mymps_image[1];
		unset($mymps_image);
		unset($_FILES);
	}

	if (empty($id)) {
		$db->query('INSERT INTO `' . $db_mymps . 'group` (gname,des,content,pre_picture,picture,cate_id,areaid,gaddress,meetdate,enddate,userid,dateline,glevel) VALUES (\'' . $gname . '\',\'' . $des . '\',\'' . $content . '\',\'' . $pre_picture . '\',\'' . $picture . '\',\'' . $cate_id . '\',\'' . $areaid . '\',\'' . $gaddress . '\',\'' . $meetdate . '\',\'' . $enddate . '\',\'' . $s_uid . '\',\'' . $timestamp . '\',\'' . $glevel . '\')');
		$score_change = get_credit_score();
		$score_changer = $score_change['score']['rank']['group'];
		$db->query('UPDATE `' . $db_mymps . 'member` SET score = score' . $score_changer . (' WHERE userid = \'' . $s_uid . '\''));
		$score_change = $score_changer = NULL;
		$url = '?m=group&type=corp&success=8&ac=detail&id=' . $id . '&alert=3';
	}
	else {
		$db->query('UPDATE `' . $db_mymps . 'group` SET gname = \'' . $gname . '\',des = \'' . $des . '\',content = \'' . $content . '\',cate_id = \'' . $cate_id . '\',areaid = \'' . $areaid . '\',gaddress=\'' . $gaddress . '\',picture=\'' . $picture . '\',pre_picture=\'' . $pre_picture . '\',meetdate = \'' . $meetdate . '\',dateline = \'' . $timestamp . '\' ' . $where . ' AND groupid = \'' . $id . '\'');
	}

	write_msg('', $url ? $url : '?m=group&type=corp&success=8&ac=detail&id=' . $id);
}
else if (submit_check('group_signin_submit')) {
	empty($selectids) && write_msg('', '?m=group&type=corp&ac=signin&error=1&page=' . $page);
	$db->query('DELETE FROM `' . $db_mymps . 'group_signin` ' . $where . ' AND signid ' . create_in($selectedids));
	unset($selectedids);
	write_msg('', '?m=group&type=corp&success=3&ac=signin&page=' . $page);
}
else {
	if ($ac == 'list') {
		require_once MYMPS_DATA . '/grouplevel.inc.php';
		$rows_num = mymps_count('group', $where);
		$param = setParam(array('m', 'type', 'ac'));
		$group = page1('SELECT a.*,b.cate_name FROM `' . $db_mymps . 'group` AS a LEFT JOIN `' . $db_mymps . 'group_category` AS b ON a.cate_id = b.cate_id WHERE a.userid = \'' . $s_uid . '\' ORDER BY a.dateline DESC');
	}
	else if ($ac == 'detail') {
		require_once MYMPS_DATA . '/grouplevel.inc.php';
		require_once MYMPS_ROOT . '/plugin/group/include/functions.php';
		require_once MYMPS_INC . '/class.fun.php';

		if ($id) {
			$edit = $db->getRow('SELECT * FROM `' . $db_mymps . 'group` WHERE groupid = \'' . $id . '\'');
			$edit['meetdate'] = date('Y-m-d', $edit['meetdate']);
			$edit['enddate'] = date('Y-m-d', $edit['enddate']);
			$des = de_textarea_post_change($edit['des']);
		}

		$acontent = get_editor('content', 'Member', $edit['content'], '90%', '400px');
	}
	else if ($ac == 'signin') {
		require_once MYMPS_DATA . '/group_signin_status.inc.php';

		if (empty($id)) {
			$param = setParam('m', 'ac', 'id');
			$rows_num = $db->getOne('SELECT COUNT(a.signid) FROM `' . $db_mymps . 'group_signin` AS a LEFT JOIN `' . $db_mymps . 'group` AS b ON a.groupid = b.groupid WHERE b.userid = \'' . $s_uid . '\'');
			$signin = page1('SELECT a.*,b.gname FROM `' . $db_mymps . 'group_signin` AS a LEFT JOIN `' . $db_mymps . 'group` AS b ON a.groupid = b.groupid  WHERE b.userid = \'' . $s_uid . '\' ORDER BY dateline DESC');
		}
		else {
			$signin = $db->getRow('SELECT a.*,b.gname FROM `' . $db_mymps . 'group_signin` AS a LEFT JOIN `' . $db_mymps . 'group` AS b ON a.groupid = b.groupid WHERE b.userid = \'' . $s_uid . '\' AND a.signid = \'' . $id . '\'');
			$ac = $ac . '_view';
		}
	}

	$location = location('corp');
	include mymps_tpl('group_' . $ac);
	unset($glevel);
}

?>