You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
204 lines
6.6 KiB
204 lines
6.6 KiB
<?php
|
|
define('EmpireCMSAdmin','1');
|
|
require("../../class/connect.php");
|
|
require("../../class/db_sql.php");
|
|
require("../../class/functions.php");
|
|
$link=db_connect();
|
|
$empire=new mysqlquery();
|
|
$editor=1;
|
|
//验证用户
|
|
$lur=is_login();
|
|
$logininid=$lur['userid'];
|
|
$loginin=$lur['username'];
|
|
$loginrnd=$lur['rnd'];
|
|
$loginlevel=$lur['groupid'];
|
|
$loginadminstyleid=$lur['adminstyleid'];
|
|
//ehash
|
|
$ecms_hashur=hReturnEcmsHashStrAll();
|
|
//验证权限
|
|
CheckLevel($logininid,$loginin,$classid,"player");
|
|
|
|
//验证文件
|
|
function CheckPlayerFilename($filename){
|
|
if(strstr($filename,"\\")||strstr($filename,"/")||strstr($filename,".."))
|
|
{
|
|
printerror("PlayerFileNotExist","history.go(-1)");
|
|
}
|
|
//文件是否存在
|
|
if(!file_exists("../../DownSys/play/".$filename))
|
|
{
|
|
printerror("PlayerFileNotExist","history.go(-1)");
|
|
}
|
|
}
|
|
|
|
//------------------增加播放器
|
|
function AddPlayer($add,$userid,$username){
|
|
global $empire,$dbtbpre;
|
|
if(!$add[player]||!$add[filename])
|
|
{
|
|
printerror("EmptyPlayerName","history.go(-1)");
|
|
}
|
|
CheckPlayerFilename($add[filename]);
|
|
$add['player']=hRepPostStr($add['player'],1);
|
|
$add['bz']=hRepPostStr($add['bz'],1);
|
|
$sql=$empire->query("insert into {$dbtbpre}enewsplayer(player,filename,bz) values('".$add['player']."','".eaddslashes($add[filename])."','".$add[bz]."');");
|
|
$id=$empire->lastid();
|
|
if($sql)
|
|
{
|
|
//操作日志
|
|
insert_dolog("id=$id<br>player=$add[player]");
|
|
printerror("AddPlayerSuccess","player.php".hReturnEcmsHashStrHref2(1));
|
|
}
|
|
else
|
|
{printerror("DbError","history.go(-1)");}
|
|
}
|
|
|
|
//----------------修改播放器
|
|
function EditPlayer($add,$userid,$username){
|
|
global $empire,$dbtbpre;
|
|
$add[id]=(int)$add[id];
|
|
if(!$add[player]||!$add[filename]||!$add[id])
|
|
{
|
|
printerror("EmptyPlayerName","history.go(-1)");
|
|
}
|
|
CheckPlayerFilename($add[filename]);
|
|
$add['player']=hRepPostStr($add['player'],1);
|
|
$add['bz']=hRepPostStr($add['bz'],1);
|
|
$sql=$empire->query("update {$dbtbpre}enewsplayer set player='".$add['player']."',filename='".eaddslashes($add[filename])."',bz='".$add['bz']."' where id='$add[id]'");
|
|
if($sql)
|
|
{
|
|
//操作日志
|
|
insert_dolog("id=$add[id]<br>player=$add[player]");
|
|
printerror("EditPlayerSuccess","player.php".hReturnEcmsHashStrHref2(1));
|
|
}
|
|
else
|
|
{printerror("DbError","history.go(-1)");}
|
|
}
|
|
|
|
//---------------删除播放器
|
|
function DelPlayer($id,$userid,$username){
|
|
global $empire,$dbtbpre;
|
|
$id=(int)$id;
|
|
if(!$id)
|
|
{
|
|
printerror("NotDelPlayerID","history.go(-1)");
|
|
}
|
|
$r=$empire->fetch1("select id,player from {$dbtbpre}enewsplayer where id='$id'");
|
|
if(!$r[id])
|
|
{
|
|
printerror("NotDelPlayerID","history.go(-1)");
|
|
}
|
|
$sql=$empire->query("delete from {$dbtbpre}enewsplayer where id='$id'");
|
|
if($sql)
|
|
{
|
|
//操作日志
|
|
insert_dolog("id=$id<br>player=$r[player]");
|
|
printerror("DelPlayerSuccess","player.php".hReturnEcmsHashStrHref2(1));
|
|
}
|
|
else
|
|
{printerror("DbError","history.go(-1)");}
|
|
}
|
|
|
|
$enews=$_POST['enews'];
|
|
if(empty($enews))
|
|
{$enews=$_GET['enews'];}
|
|
if($enews)
|
|
{
|
|
hCheckEcmsRHash();
|
|
}
|
|
//增加播放器
|
|
if($enews=="AddPlayer")
|
|
{
|
|
AddPlayer($_POST,$logininid,$loginin);
|
|
}
|
|
//修改播放器
|
|
elseif($enews=="EditPlayer")
|
|
{
|
|
EditPlayer($_POST,$logininid,$loginin);
|
|
}
|
|
//删除播放器
|
|
elseif($enews=="DelPlayer")
|
|
{
|
|
$id=$_GET['id'];
|
|
DelPlayer($id,$logininid,$loginin);
|
|
}
|
|
$sql=$empire->query("select id,player,filename,bz from {$dbtbpre}enewsplayer order by id");
|
|
?>
|
|
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
|
|
<html>
|
|
<head>
|
|
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
|
|
<title>增加播放器</title>
|
|
<link href="../adminstyle/<?=$loginadminstyleid?>/adminstyle.css" rel="stylesheet" type="text/css">
|
|
</head>
|
|
|
|
<body>
|
|
<table width="100%" border="0" align="center" cellpadding="3" cellspacing="1">
|
|
<tr>
|
|
<td>位置：<a href="player.php<?=$ecms_hashur['whehref']?>">管理播放器</a></td>
|
|
</tr>
|
|
</table>
|
|
<form name="addplayerform" method="post" action="player.php">
|
|
<table width="100%" border="0" align="center" cellpadding="3" cellspacing="1" class="tableborder">
|
|
<?=$ecms_hashur['form']?>
|
|
<tr class="header">
|
|
<td height="25" colspan="4">增加播放器: <input type=hidden name=enews value=AddPlayer></td>
|
|
</tr>
|
|
<tr>
|
|
<td width="14%" height="25" bgcolor="#FFFFFF">播放器名称</td>
|
|
<td width="33%" bgcolor="#FFFFFF">文件名</td>
|
|
<td width="13%" bgcolor="#FFFFFF">说明</td>
|
|
<td width="40%" bgcolor="#FFFFFF"> </td>
|
|
</tr>
|
|
<tr>
|
|
<td height="25" bgcolor="#FFFFFF">
|
|
<input name="player" type="text" id="player" value="">
|
|
</td>
|
|
<td bgcolor="#FFFFFF">e/DownSys/play/
|
|
<input name="filename" type="text" id="filename" value="">
|
|
<a href="#ecms" onclick="window.open('ChangePlayerFile.php?returnform=opener.document.addplayerform.filename.value<?=$ecms_hashur['ehref']?>','','width=400,height=500,scrollbars=yes');">[选择]</a></td>
|
|
<td bgcolor="#FFFFFF"><input name="bz" type="text" id="bz"></td>
|
|
<td bgcolor="#FFFFFF"><input type="submit" name="Submit" value="增加"></td>
|
|
</tr>
|
|
</table>
|
|
</form>
|
|
<table width="100%" border="0" align="center" cellpadding="3" cellspacing="1" class="tableborder">
|
|
<tr class="header">
|
|
<td width="8%">
|
|
<div align="center">ID</div></td>
|
|
<td width="14%" height="25">播放器名称</td>
|
|
<td width="33%">文件名</td>
|
|
<td width="13%">说明</td>
|
|
<td width="32%" height="25"> 操作</td>
|
|
</tr>
|
|
<?
|
|
while($r=$empire->fetch($sql))
|
|
{
|
|
?>
|
|
<form name="playerform<?=$r[id]?>" method=post action=player.php>
|
|
<?=$ecms_hashur['form']?>
|
|
<input type=hidden name=enews value=EditPlayer>
|
|
<input type=hidden name=id value=<?=$r[id]?>>
|
|
<tr bgcolor="#FFFFFF" onmouseout="this.style.backgroundColor='#ffffff'" onmouseover="this.style.backgroundColor='#C3EFFF'">
|
|
<td><div align="center"><?=$r[id]?></div></td>
|
|
<td height="25"> <input name="player" type="text" value="<?=$r[player]?>">
|
|
</td>
|
|
<td>e/DownSys/play/
|
|
<input name="filename" type="text" value="<?=$r[filename]?>">
|
|
<a href="#ecms" onclick="window.open('ChangePlayerFile.php?returnform=opener.document.playerform<?=$r[id]?>.filename.value<?=$ecms_hashur['ehref']?>','','width=400,height=500,scrollbars=yes');">[选择]</a></td>
|
|
<td><input name="bz" type="text" value="<?=$r[bz]?>"></td>
|
|
<td height="25"> <div align="left">
|
|
<input type="submit" name="Submit3" value="修改">
|
|
|
|
<input type="button" name="Submit4" value="删除" onclick="if(confirm('确认要删除?')){self.location.href='player.php?enews=DelPlayer&id=<?=$r[id]?><?=$ecms_hashur['href']?>';}">
|
|
</div></td>
|
|
</tr>
|
|
</form>
|
|
<?
|
|
}
|
|
db_close();
|
|
$empire=null;
|
|
?>
|
|
</table>
|
|
</body>
|
|
</html>
|
|
|