DedeV6/src/dede/shops_operations.php

<?php

/**
 * 订单操作
 *
 * @version        $Id: shops_operations.php 1 15:46 2010年7月20日Z tianya $
 * @package        DedeBIZ.Administrator
 * @copyright      Copyright (c) 2020, DedeBIZ.COM
 * @license        https://www.dedebiz.com/license
 * @link           https://www.dedebiz.com
 */
require_once(dirname(__FILE__) . "/config.php");
CheckPurview('shops_Operations');
require_once(DEDEINC . '/datalistcp.class.php');

if (isset($dopost)) {
    CheckPurview('shops_Operations_cpanel');
    if ($dopost == 'up') {
        $nids = explode('`', $nid);
        $wh = '';
        foreach ($nids as $n) {
            if ($wh == '') $wh = " WHERE oid='$n' ";
            else $wh .= " OR oid='$n' ";
        }
        $sql = "UPDATE `#@__shops_orders` SET `state`='1' $wh ";
        $dsql->ExecuteNoneQuery($sql);
    } else if ($dopost == 'push') {
        $nids = explode('`', $nid);
        $wh = '';
        foreach ($nids as $n) {
            if ($wh == '') $wh = " WHERE oid='$n' ";
            else $wh .= " OR oid='$n' ";
        }
        $sql = "UPDATE `#@__shops_orders` SET `state`='2' $wh ";
        $dsql->ExecuteNoneQuery($sql);
    } else if ($dopost == 'ok') {
        $nids = explode('`', $nid);
        $wh = '';
        foreach ($nids as $n) {
            if ($wh == '') $wh = " WHERE oid='$n' ";
            else $wh .= " OR oid='$n' ";
        }
        $sql = "UPDATE `#@__shops_orders` SET `state`='4' $wh ";
        $dsql->ExecuteNoneQuery($sql);
    } else if ($dopost == 'delete') {
        $nids = explode('`', $nid);
        foreach ($nids as $n) {
            $query = "DELETE FROM `#@__shops_products` WHERE oid='$n'";
            $query2 = "DELETE FROM `#@__shops_orders` WHERE oid='$n'";
            $query3 = "DELETE FROM `#@__shops_userinfo` WHERE oid='$n'";
            $dsql->ExecuteNoneQuery($query);
            $dsql->ExecuteNoneQuery($query2);
            $dsql->ExecuteNoneQuery($query3);
        }
        ShowMsg("成功删除指定的订单记录！", $ENV_GOBACK_URL);
        exit();
    } else {
        ShowMsg("不充许的操作范围！", $ENV_GOBACK_URL);
        exit();
    }
    ShowMsg("成功更改指定的订单记录！", $ENV_GOBACK_URL);
    exit();
}

$addsql = '';
if (empty($oid)) $oid = 0;
setcookie("ENV_GOBACK_URL", $dedeNowurl, time() + 3600, "/");
if (isset($buyid)) {
    $buyid  = preg_replace("#[^-0-9A-Z]#", "", $buyid);
    $addsql = "WHERE s.oid='" . $buyid . "'";
}
if (isset($sta)) {
    $addsql = "WHERE s.`state`='$sta'";
}
$sql = "SELECT s.`oid`,s.`cartcount`,s.`price`,s.`state`,s.`stime`,s.priceCount,s.dprice,s.paytype,u.`consignee`,u.`tel`,s.`userid` FROM `#@__shops_orders` AS s LEFT JOIN `#@__shops_userinfo` AS u ON s.oid=u.oid $addsql ORDER BY `stime` DESC";

$dlist = new DataListCP();
$dlist->SetParameter("oid", $oid);
if (isset($sta)) $dlist->SetParameter("sta", $sta);
$tplfile = DEDEADMIN . "/templets/shops_operations.htm";

//这两句的顺序不能更换
$dlist->SetTemplate($tplfile);      //载入模板
$dlist->SetSource($sql);            //设定查询SQLexit('dd');
$dlist->Display();

function GetSta($sta)
{
    if ($sta == 0) {
        return '未付款';
    } else if ($sta == 1) {
        return '已付款';
    } else if ($sta == 2) {
        return '已发货';
    } else if ($sta == 3) {
        return '已确认';
    } else {
        return '已完成';
    }
}

function GetsType($pid)
{
    global $dsql;
    $pid = intval($pid);
    $row = $dsql->GetOne("SELECT name FROM `#@__payment` WHERE id='$pid'");
    if (is_array($row)) {
        return $row['name'];
    } else {
        return '-';
    }
}

function GetMemberID($mid)
{
    global $dsql;
    if ($mid == 0) return '0';
    $row = $dsql->GetOne("SELECT userid FROM `#@__member` WHERE mid='$mid' ");
    if (is_array($row)) {
        return "<a href='member_view.php?id={$mid}'>" . $row['userid'] . "</a>";
    } else {
        return '0';
    }
}