sys_admin_user_edit.php
4.55 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
<?php
/**
* 编辑系统管理员
*
* @version $Id: sys_admin_user_edit.php 1 16:22 2010年7月20日Z tianya $
* @package DedeCMS.Administrator
* @copyright Copyright (c) 2007 - 2010, DesDev, Inc.
* @license http://help.dedecms.com/usersguide/license.html
* @link http://www.dedecms.com
*/
require_once(dirname(__FILE__).'/config.php');
CheckPurview('sys_User');
require_once(DEDEINC.'/typelink.class.php');
if(empty($dopost)) $dopost = '';
$id = preg_replace("#[^0-9]#", '', $id);
if($dopost=='saveedit')
{
$pwd = trim($pwd);
if($pwd!='' && preg_match("#[^0-9a-zA-Z_@!\.-]#", $pwd))
{
ShowMsg('密码不合法，请使用[0-9a-zA-Z_@!.-]内的字符！', '-1', 0, 3000);
exit();
}
$safecodeok = substr(md5($cfg_cookie_encode.$randcode), 0, 24);
if($safecodeok != $safecode)
{
ShowMsg("请填写正确的安全验证串！", "sys_admin_user_edit.php?id={$id}&dopost=edit");
exit();
}
$pwdm = '';
if($pwd != '')
{
$pwdm = ",pwd='".md5($pwd)."'";
$pwd = ",pwd='".substr(md5($pwd), 5, 20)."'";
}
if(empty($typeids))
{
$typeid = '';
} else {
$typeid = join(',', $typeids);
if($typeid=='0') $typeid = '';
}
if($id!=1){
$query = "UPDATE `#@__admin` SET uname='$uname',usertype='$usertype',tname='$tname',email='$email',typeid='$typeid' $pwd WHERE id='$id'";
}else{
$query = "UPDATE `#@__admin` SET uname='$uname',tname='$tname',email='$email',typeid='$typeid' $pwd WHERE id='$id'";
}
$dsql->ExecuteNoneQuery($query);
$query = "UPDATE `#@__member` SET uname='$uname',email='$email'$pwdm WHERE mid='$id'";
$dsql->ExecuteNoneQuery($query);
ShowMsg("成功更改一个帐户！", "sys_admin_user.php");
exit();
}
else if($dopost=='delete')
{
if(empty($userok)) $userok="";
if($userok!="yes")
{
$randcode = mt_rand(10000, 99999);
$safecode = substr(md5($cfg_cookie_encode.$randcode),0,24);
require_once(DEDEINC."/oxwindow.class.php");
$wintitle = "删除用户";
$wecome_info = "<a href='sys_admin_user.php'>系统帐号管理</a>::删除用户";
$win = new OxWindow();
$win->Init("sys_admin_user_edit.php","js/blank.js","POST");
$win->AddHidden("dopost", $dopost);
$win->AddHidden("userok", "yes");
$win->AddHidden("randcode", $randcode);
$win->AddHidden("safecode", $safecode);
$win->AddHidden("id", $id);
$win->AddTitle("系统警告！");
$win->AddMsgItem("你确信要删除用户：$userid 吗？","50");
$win->AddMsgItem("安全验证串：<input name='safecode' type='text' id='safecode' size='16' style='width:200px' /> (复制本代码： <font color='red'>$safecode</font> )","30");
$winform = $win->GetWindow("ok");
$win->Display();
exit();
}
$safecodeok = substr(md5($cfg_cookie_encode.$randcode),0,24);
if($safecodeok!=$safecode)
{
ShowMsg("请填写正确的安全验证串！", "sys_admin_user.php");
exit();
}
//不能删除id为1的创建人帐号，不能删除自己
$rs = $dsql->ExecuteNoneQuery2("DELETE FROM `#@__admin` WHERE id='$id' AND id<>1 AND id<>'".$cuserLogin->getUserID()."' ");
if($rs>0)
{
//更新前台用户信息
$dsql->ExecuteNoneQuery("UPDATE `#@__member` SET matt='0' WHERE mid='$id' LIMIT 1");
ShowMsg("成功删除一个帐户！","sys_admin_user.php");
}
else
{
ShowMsg("不能删除id为1的创建人帐号，不能删除自己！","sys_admin_user.php",0,3000);
}
exit();
}
//显示用户信息
$randcode = mt_rand(10000,99999);
$safecode = substr(md5($cfg_cookie_encode.$randcode),0,24);
$typeOptions = '';
$row = $dsql->GetOne("SELECT * FROM `#@__admin` WHERE id='$id'");
$typeids = explode(',', $row['typeid']);
$dsql->SetQuery("SELECT id,typename FROM `#@__arctype` WHERE reid=0 AND (ispart=0 OR ispart=1)");
$dsql->Execute('op');
while($nrow = $dsql->GetObject('op'))
{
$typeOptions .= "<option value='{$nrow->id}' class='btype'".(in_array($nrow->id, $typeids) ? ' selected' : '').">{$nrow->typename}</option>\r\n";
$dsql->SetQuery("SELECT id,typename FROM #@__arctype WHERE reid={$nrow->id} AND (ispart=0 OR ispart=1)");
$dsql->Execute('s');
while($nrow = $dsql->GetObject('s'))
{
$typeOptions .= "<option value='{$nrow->id}' class='stype'".(in_array($nrow->id, $typeids) ? ' selected' : '').">—{$nrow->typename}</option>\r\n";
}
}
include DedeInclude('templets/sys_admin_user_edit.htm');