@@ -58,7 +58,7 @@ html{background:#f2f2f2} | |||||
body{margin:0;line-height:22px;font:12px Helvetica Neue,Helvetica,PingFang SC,Tahoma,Arial,sans-serif} | body{margin:0;line-height:22px;font:12px Helvetica Neue,Helvetica,PingFang SC,Tahoma,Arial,sans-serif} | ||||
a{text-decoration:none!important} | a{text-decoration:none!important} | ||||
table{background:#fff} | table{background:#fff} | ||||
.bg{margin:10px;border-radius:2px;box-shadow:0 1px 2px 0 rgba(0,0,0,.05)} | |||||
.bg{margin:10px;border-radius:.2rem;box-shadow:0 1px 2px 0 rgba(0,0,0,.05)} | |||||
.linerow{border-bottom:1px solid #eee!important} | .linerow{border-bottom:1px solid #eee!important} | ||||
.napisdiv{left:40;top:10;width:150px;height:100px;position:absolute;z-index:3;display:none} | .napisdiv{left:40;top:10;width:150px;height:100px;position:absolute;z-index:3;display:none} | ||||
</style> | </style> | ||||
@@ -51,7 +51,7 @@ html{background:#f2f2f2} | |||||
body{margin:0;line-height:22px;font:12px Helvetica Neue,Helvetica,PingFang SC,Tahoma,Arial,sans-serif} | body{margin:0;line-height:22px;font:12px Helvetica Neue,Helvetica,PingFang SC,Tahoma,Arial,sans-serif} | ||||
a{text-decoration:none!important} | a{text-decoration:none!important} | ||||
table{background:#fff} | table{background:#fff} | ||||
.bg{margin:10px;border-radius:2px;box-shadow:0 1px 2px 0 rgba(0,0,0,.05)} | |||||
.bg{margin:10px;border-radius:.2rem;box-shadow:0 1px 2px 0 rgba(0,0,0,.05)} | |||||
.linerow{border-bottom:1px solid #eee!important} | .linerow{border-bottom:1px solid #eee!important} | ||||
</style> | </style> | ||||
</head> | </head> | ||||
@@ -128,7 +128,7 @@ table{background:#fff} | |||||
</tr>\r\n"; | </tr>\r\n"; | ||||
echo $line; | echo $line; | ||||
} else if (is_dir("$inpath/$file")) { | } else if (is_dir("$inpath/$file")) { | ||||
if (preg_match("#^_(.*)$#i", $file)) continue; #屏蔽FrontPage扩展目录和linux隐蔽目录 | |||||
if (preg_match("#^_(.*)$#i", $file)) continue; | |||||
if (preg_match("#^\.(.*)$#i", $file)) continue; | if (preg_match("#^\.(.*)$#i", $file)) continue; | ||||
$line = "\n<tr height='28'> | $line = "\n<tr height='28'> | ||||
<td class='linerow'><a href=select_soft.php?f=$f&activepath=" . urlencode("$activepath/$file") . $addparm . "><img src='img/dir.gif'>$file</a></td> | <td class='linerow'><a href=select_soft.php?f=$f&activepath=" . urlencode("$activepath/$file") . $addparm . "><img src='img/dir.gif'>$file</a></td> | ||||
@@ -168,7 +168,7 @@ table{background:#fff} | |||||
</td> | </td> | ||||
</tr> | </tr> | ||||
<tr> | <tr> | ||||
<td colspan="3" height="30">请点击要选择的文件,红色字样的为刚上传的文件</td> | |||||
<td colspan="3" height="30">点击选择的文件,红色字样的为刚上传的文件</td> | |||||
</tr> | </tr> | ||||
</table> | </table> | ||||
</body> | </body> |
@@ -43,7 +43,7 @@ html{background:#f2f2f2} | |||||
body{margin:0;line-height:22px;font:12px Helvetica Neue,Helvetica,PingFang SC,Tahoma,Arial,sans-serif} | body{margin:0;line-height:22px;font:12px Helvetica Neue,Helvetica,PingFang SC,Tahoma,Arial,sans-serif} | ||||
a{text-decoration:none!important} | a{text-decoration:none!important} | ||||
table{background:#fff} | table{background:#fff} | ||||
.bg{margin:10px;border-radius:2px;box-shadow:0 1px 2px 0 rgba(0,0,0,.05)} | |||||
.bg{margin:10px;border-radius:.2rem;box-shadow:0 1px 2px 0 rgba(0,0,0,.05)} | |||||
.linerow{border-bottom:1px solid #eee!important} | .linerow{border-bottom:1px solid #eee!important} | ||||
</style> | </style> | ||||
</head> | </head> | ||||
@@ -183,7 +183,7 @@ table{background:#fff} | |||||
<table width="100%"> | <table width="100%"> | ||||
<form action="select_templets_post.php" method="POST" enctype="multipart/form-data" name="myform"> | <form action="select_templets_post.php" method="POST" enctype="multipart/form-data" name="myform"> | ||||
<input type="hidden" name="activepath" value="<?php echo $activepath ?>"> | <input type="hidden" name="activepath" value="<?php echo $activepath ?>"> | ||||
<input type="hidden" name="f" value='<?php echo $f ?>'> | |||||
<input type="hidden" name="f" value="<?php echo $f ?>"> | |||||
<input type="hidden" name="job" value="upload"> | <input type="hidden" name="job" value="upload"> | ||||
<tr> | <tr> | ||||
<td> | <td> | ||||
@@ -1,77 +1,80 @@ | |||||
<!DOCTYPE html | |||||
PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"> | |||||
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"> | |||||
<html xmlns="http://www.w3.org/1999/xhtml"> | <html xmlns="http://www.w3.org/1999/xhtml"> | ||||
<head> | <head> | ||||
<meta http-equiv="Content-Type" content="text/html; charset=<?php echo $cfg_soft_lang; ?>"> | <meta http-equiv="Content-Type" content="text/html; charset=<?php echo $cfg_soft_lang; ?>"> | ||||
<title><?php echo $diy->name;?></title> | |||||
<title><?php echo $diy->name; ?></title> | |||||
<link rel="stylesheet" href="../static/css/bootstrap.min.css"> | <link rel="stylesheet" href="../static/css/bootstrap.min.css"> | ||||
<link href="../static/font-awesome/css/font-awesome.min.css" rel="stylesheet"> | |||||
<link href="css/base.css" rel="stylesheet" type="text/css" /> | |||||
<link rel="stylesheet" href="../static/font-awesome/css/font-awesome.min.css"> | |||||
<link rel="stylesheet" href="css/base.css"> | |||||
</head> | </head> | ||||
<body background='images/allbg.gif' leftmargin='8' topmargin='8'> | |||||
<body background="images/allbg.gif" leftmargin="8" topmargin="8"> | |||||
<div class="bodytitle mt-3"> | <div class="bodytitle mt-3"> | ||||
<div class="bodytitleleft"></div> | <div class="bodytitleleft"></div> | ||||
<div class="bodytitletxt" style="padding-left:10px;"><?php echo $diy->name;?>内容列表</div> | |||||
<div class="bodytitletxt" style="padding-left:10px;"><?php echo $diy->name; ?>列表</div> | |||||
</div> | </div> | ||||
<form action="diy_list.php" method="post"> | <form action="diy_list.php" method="post"> | ||||
<input type="hidden" name="diyid" value="<?php echo $diyid;?>" /> | |||||
<table width="98%" border="0" cellpadding="1" cellspacing="1" align="center" class="table maintable" | |||||
style="background:#CFCFCF;"> | |||||
<input type="hidden" name="diyid" value="<?php echo $diyid; ?>"> | |||||
<table width="98%" border="0" cellpadding="1" cellspacing="1" align="center" class="table maintable" style="background:#CFCFCF"> | |||||
<tr> | <tr> | ||||
<td colspan="3" height="28" background='images/tbg.gif'> | |||||
<div style='float:left'> <a href='diy_main.php'><b>自定义表单管理</b></a> > <b>内容列表</b></div> | |||||
<div style='float:right;padding-right:8px;'> | |||||
<a href="../plus/diy.php?action=list&diyid=<?php echo $diy->diyid; ?>" target="_blank"><img | |||||
src='images/gtk-tmp.png' align='left' title='预览' alt='预览' /><u>前台预览</u></a> | |||||
</div> | |||||
<td colspan="3" height="28" background="images/tbg.gif"> | |||||
<div style="float:left"><a href="diy_main.php">自定义表单管理</a> > <?php echo $diy->name; ?></div> | |||||
<div style="float:right;padding-right:10px"><a href="/plus/diy.php?action=list&diyid=<?php echo $diy->diyid; ?>" target="_blank"><img src="images/gtk-tmp.png" align="left" title="前台预览">前台预览</a></div> | |||||
</td> | </td> | ||||
</tr> | </tr> | ||||
{dede:datalist} | {dede:datalist} | ||||
<?php | <?php | ||||
if(!empty($fields)) | |||||
{ | |||||
$allowhtml = array('htmltext'); | |||||
$fields['sta'] = $fields['ifcheck'] == 1 ? '已审核' : '未审核'; | |||||
echo '<tr bgcolor="#F8FDE3"><td width="20%"><input type="checkbox" name="id[]" value="'.$fields['id'].'" class="np" />id</td><td><a href="diy_list.php?action=edit&diyid='.$diy->diyid.'&id='.$fields['id'].'">'.$fields['id'].'</a> 状态: '.$fields['sta'].'</td><td width="10%" align="center"><a href="diy_list.php?action=edit&diyid='.$diy->diyid.'&id='.$fields['id'].'"><img src="images/feedback-edit.gif" border="0" width="45" height="18"></a></td></tr>'; | |||||
foreach($fieldlist as $field=>$fielddata) | |||||
{ | |||||
if($fields[$field]=='') continue; | |||||
if($fielddata[1]=='img') | |||||
if(!empty($fields)) | |||||
{ | { | ||||
$fields[$field] = "<a href='{$fields[$field]}' target='_blank'><img src='images/channeladd.gif' border='0' /> 图片附件</a>\r\n"; | |||||
} | |||||
else if($fielddata[1]=='addon') | |||||
{ | |||||
$fields[$field] = "<a href='{$fields[$field]}' target='_blank'><img src='images/channeladd.gif' border='0' /> 其它附件</a>"; | |||||
} | |||||
else | |||||
{ | |||||
if(!in_array($fielddata[1],$allowhtml)){ | |||||
$fields[$field] = dede_htmlspecialchars($fields[$field]); | |||||
$allowhtml = array('htmltext'); | |||||
$fields['sta'] = $fields['ifcheck'] == 1 ?'已审核':'未审核'; | |||||
echo '<tr bgcolor="#F8FDE3" height="28"><td width="18%"><input type="checkbox" name="id[]" value="'.$fields['id'].'" class="np"></td><td><a href="diy_list.php?action=edit&diyid='.$diy->diyid.'&id='.$fields['id'].'">'.$fields['id'].'</a> '.$fields['sta'].'</td><td width="12%" align="center"><a href="diy_list.php?action=edit&diyid='.$diy->diyid.'&id='.$fields['id'].'"><img src="images/feedback-edit.gif" border="0" width="46" height="18"></a></td></tr>'; | |||||
foreach($fieldlist as $field=>$fielddata) | |||||
{ | |||||
if($fields[$field]=='') continue; | |||||
if($fielddata[1]=='img'){ | |||||
$fields[$field] = "<a href='{$fields[$field]}' target='_blank'><img src='images/channeladd.gif' border='0'>图片附件</a>\r\n"; | |||||
} | |||||
else if($fielddata[1]=='addon'){ | |||||
$fields[$field] = "<a href='{$fields[$field]}' target='_blank'><img src='images/channeladd.gif' border='0'>其它附件</a>"; | |||||
} else { | |||||
if(!in_array($fielddata[1],$allowhtml)){ | |||||
$fields[$field] = dede_htmlspecialchars($fields[$field]); | |||||
} | |||||
} | |||||
echo '<tr height="28"><td bgcolor="#fff">'.$fielddata[0].'</td><td bgcolor="#fff" colspan="2">'.$fields[$field].'</td></tr>'; | |||||
} | } | ||||
} else { | |||||
echo '<tr height="28"><td bgcolor="#fff">暂无记录</td></tr>'; | |||||
} | } | ||||
echo '<tr><td bgcolor="#ffffff" >'.$fielddata[0].'</td><td bgcolor="#ffffff" colspan="2">'.$fields[$field].'</td></tr>'; | |||||
} | |||||
} else { | |||||
echo "<tr><td bgcolor=\"#ffffff\">暂无记录</td></tr>"; | |||||
} | |||||
?> | |||||
?> | |||||
{/dede:datalist} | {/dede:datalist} | ||||
<tr> | <tr> | ||||
<td colspan="3" bgcolor="#ffffff">{dede:pagelist listsize=5 /}</td> | |||||
<td colspan="3" bgcolor="#fff">{dede:pagelist listsize='8'/}</td> | |||||
</tr> | </tr> | ||||
<tr> | <tr> | ||||
<td colspan="3" height='36' align="center" bgcolor="#F8FCF1"> | |||||
<label><input type="radio" name="action" value="check" class='np' /> 审核</label> | |||||
<label><input type="radio" name="action" value="delete" class='np' /> 删除</label> | |||||
| |||||
<button type="submit" name="submit" class='btn btn-success'>提交</button> | |||||
<td colspan="3" height="36" bgcolor="#F8FCF1"> | |||||
<label><input type="button" name="select" onClick="selAll()" value="全选"></label> | |||||
<label><input type="button" name="select" onClick="noSelAll()" value="取消"></label> | |||||
<label><input type="radio" name="action" class="btn btn-success btn-sm" value="check">审核</label> | |||||
<label><input type="radio" name="action" class="btn btn-success btn-sm" value="delete">删除</label> | |||||
<label><input type="submit" name="submit" class="btn btn-success btn-sm" value="提交"></label> | |||||
</td> | </td> | ||||
</tr> | </tr> | ||||
</table> | </table> | ||||
</form> | </form> | ||||
<script> | |||||
function selAll(){ | |||||
var a = document.getElementsByTagName("input"); | |||||
for (var i = 0; i < a.length; i++){ | |||||
if (a[i].type == "checkbox") a[i].checked = true; | |||||
} | |||||
} | |||||
function noSelAll(){ | |||||
var a = document.getElementsByTagName("input"); | |||||
for (var i = 0; i < a.length; i++){ | |||||
if (a[i].type == "checkbox") a[i].checked = false; | |||||
} | |||||
} | |||||
</script> | |||||
</body> | </body> | ||||
</html> | </html> |
@@ -1,5 +1,4 @@ | |||||
<?php | <?php | ||||
/** | /** | ||||
* | * | ||||
* 自定义表单 | * 自定义表单 | ||||
@@ -11,19 +10,15 @@ | |||||
* @link https://www.dedebiz.com | * @link https://www.dedebiz.com | ||||
*/ | */ | ||||
require_once(dirname(__FILE__) . "/../include/common.inc.php"); | require_once(dirname(__FILE__) . "/../include/common.inc.php"); | ||||
$diyid = isset($diyid) && is_numeric($diyid) ? $diyid : 0; | $diyid = isset($diyid) && is_numeric($diyid) ? $diyid : 0; | ||||
$action = isset($action) && in_array($action, array('post', 'list', 'view')) ? $action : 'post'; | $action = isset($action) && in_array($action, array('post', 'list', 'view')) ? $action : 'post'; | ||||
$id = isset($id) && is_numeric($id) ? $id : 0; | $id = isset($id) && is_numeric($id) ? $id : 0; | ||||
if (empty($diyid)) { | if (empty($diyid)) { | ||||
showMsg('非法操作!', 'javascript:;'); | showMsg('非法操作!', 'javascript:;'); | ||||
exit(); | exit(); | ||||
} | } | ||||
require_once DEDEINC . '/diyform.cls.php'; | require_once DEDEINC . '/diyform.cls.php'; | ||||
$diy = new diyform($diyid); | $diy = new diyform($diyid); | ||||
/*---------------------------- | /*---------------------------- | ||||
function Post(){ } | function Post(){ } | ||||
---------------------------*/ | ---------------------------*/ | ||||
@@ -46,11 +41,8 @@ if ($action == 'post') { | |||||
showmsg('自定义表单不存在', '-1'); | showmsg('自定义表单不存在', '-1'); | ||||
exit(); | exit(); | ||||
} | } | ||||
$addvar = $addvalue = ''; | $addvar = $addvalue = ''; | ||||
if (!empty($dede_fields)) { | if (!empty($dede_fields)) { | ||||
$fieldarr = explode(';', $dede_fields); | $fieldarr = explode(';', $dede_fields); | ||||
if (is_array($fieldarr)) { | if (is_array($fieldarr)) { | ||||
foreach ($fieldarr as $field) { | foreach ($fieldarr as $field) { | ||||
@@ -59,34 +51,45 @@ if ($action == 'post') { | |||||
if ($fieldinfo[1] == 'textdata') { | if ($fieldinfo[1] == 'textdata') { | ||||
${$fieldinfo[0]} = FilterSearch(stripslashes(${$fieldinfo[0]})); | ${$fieldinfo[0]} = FilterSearch(stripslashes(${$fieldinfo[0]})); | ||||
${$fieldinfo[0]} = addslashes(${$fieldinfo[0]}); | ${$fieldinfo[0]} = addslashes(${$fieldinfo[0]}); | ||||
} | |||||
//获取地址,表单添加text数据类型ip字段型后模板用<input type="hidden" name="ip" value=""> | |||||
if($fieldinfo[0] == 'ip') | |||||
{ | |||||
${$fieldinfo[0]}=GetIP(); | |||||
} | |||||
//获取时间,表单添加text数据类型sj字段型后模板用<input type="hidden" name="sj" value=""> | |||||
if($fieldinfo[0] == 'sj') | |||||
{ | |||||
${$fieldinfo[0]}=date("Y-m-d H:i"); | |||||
} else { | } else { | ||||
${$fieldinfo[0]} = GetFieldValue(${$fieldinfo[0]}, $fieldinfo[1], 0, 'add', '', 'diy', $fieldinfo[0]); | |||||
${$fieldinfo[0]} = GetFieldValue(${$fieldinfo[0]}, $fieldinfo[1],0,'add','','diy', $fieldinfo[0]); | |||||
} | } | ||||
$addvar .= ', `' . $fieldinfo[0] . '`'; | $addvar .= ', `' . $fieldinfo[0] . '`'; | ||||
$addvalue .= ", '" . ${$fieldinfo[0]} . "'"; | $addvalue .= ", '" . ${$fieldinfo[0]} . "'"; | ||||
} | } | ||||
} | } | ||||
} | } | ||||
$query = "INSERT INTO `{$diy->table}` (`id`, `ifcheck` $addvar) VALUES (NULL, 0 $addvalue); "; | $query = "INSERT INTO `{$diy->table}` (`id`, `ifcheck` $addvar) VALUES (NULL, 0 $addvalue); "; | ||||
if ($dsql->ExecuteNoneQuery($query)) { | if ($dsql->ExecuteNoneQuery($query)) { | ||||
$id = $dsql->GetLastID(); | $id = $dsql->GetLastID(); | ||||
if ($diy->public == 2) { | |||||
//diy.php?action=view&diyid={$diy->diyid}&id=$id | |||||
if ($diy->public == 2) | |||||
{ | |||||
$goto = "diy.php?action=list&diyid={$diy->diyid}"; | $goto = "diy.php?action=list&diyid={$diy->diyid}"; | ||||
$bkmsg = '发布成功,现在转向表单列表页...'; | |||||
$bkmsg = '发布成功,现在转向表单列表页'; | |||||
} else { | } else { | ||||
$goto = !empty($cfg_cmspath) ? $cfg_cmspath : '/'; | $goto = !empty($cfg_cmspath) ? $cfg_cmspath : '/'; | ||||
$bkmsg = '发布成功,请等待管理员处理...'; | |||||
$bkmsg = '发布成功,请等待管理员处理'; | |||||
//提交后返回提交页面 | |||||
echo"<script>alert('提交成功');history.go(-1)</script>"; | |||||
} | } | ||||
ShowMsg($bkmsg, $goto); | |||||
showmsg($bkmsg, $goto); | |||||
} | } | ||||
} | } | ||||
} | } | ||||
/*---------------------------- | /*---------------------------- | ||||
function list(){ } | function list(){ } | ||||
---------------------------*/ else if ($action == 'list') { | |||||
---------------------------*/ | |||||
else if ($action == 'list') { | |||||
if (empty($diy->public)) { | if (empty($diy->public)) { | ||||
ShowMsg('后台关闭前台浏览', 'javascript:;'); | ShowMsg('后台关闭前台浏览', 'javascript:;'); | ||||
exit(); | exit(); | ||||
@@ -96,7 +99,6 @@ function list(){ } | |||||
$query = "SELECT * FROM `{$diy->table}` ORDER BY id DESC"; | $query = "SELECT * FROM `{$diy->table}` ORDER BY id DESC"; | ||||
else | else | ||||
$query = "SELECT * FROM `{$diy->table}` WHERE ifcheck=1 ORDER BY id DESC"; | $query = "SELECT * FROM `{$diy->table}` WHERE ifcheck=1 ORDER BY id DESC"; | ||||
$datalist = new DataListCP(); | $datalist = new DataListCP(); | ||||
$datalist->pageSize = 10; | $datalist->pageSize = 10; | ||||
$datalist->SetParameter('action', 'list'); | $datalist->SetParameter('action', 'list'); | ||||
@@ -110,7 +112,6 @@ function list(){ } | |||||
showMsg('后台关闭前台浏览', 'javascript:;'); | showMsg('后台关闭前台浏览', 'javascript:;'); | ||||
exit(); | exit(); | ||||
} | } | ||||
if (empty($id)) { | if (empty($id)) { | ||||
showMsg('非法操作!未指定id', 'javascript:;'); | showMsg('非法操作!未指定id', 'javascript:;'); | ||||
exit(); | exit(); | ||||
@@ -126,7 +127,6 @@ function list(){ } | |||||
showmsg('你访问的记录不存在或未经审核', '-1'); | showmsg('你访问的记录不存在或未经审核', '-1'); | ||||
exit(); | exit(); | ||||
} | } | ||||
$fieldlist = $diy->getFieldList(); | $fieldlist = $diy->getFieldList(); | ||||
include DEDEROOT . "/templets/plus/{$diy->viewTemplate}"; | include DEDEROOT . "/templets/plus/{$diy->viewTemplate}"; | ||||
} | |||||
} |