支持修改userid

src/admin/sys_admin_user_edit.php

@@ -41,13 +41,29 @@ if ($dopost == 'saveedit') {
         $typeid = join(',', $typeids);
         if ($typeid == '0') $typeid = '';
     }
+    $olduserid = preg_replace("/[^0-9a-zA-Z_@!\.-]/", '', $olduserid);
+    $userid = preg_replace("/[^0-9a-zA-Z_@!\.-]/", '', $userid);
+    $usql = "";
+    if ($olduserid !== $userid) {
+        $row = $dsql->GetOne("SELECT mid FROM `#@__member` WHERE userid LIKE '$userid' ");
+        if (is_array($row)) {
+            ShowMsg("您指定的会员名<span class='text-primary'>{$userid}</span>已存在，请使用别的会员名", "-1");
+            exit();
+        }
+        $row = $dsql->GetOne("SELECT id FROM `#@__admin` WHERE userid LIKE '$userid' ");
+        if (is_array($row)) {
+            ShowMsg("您指定的会员名<span class='text-primary'>{$userid}</span>已存在，请使用别的会员名", "-1");
+            exit();
+        }
+        $usql = ",userid='$userid'";
+    }
     if ($id != 1) {
-        $query = "UPDATE `#@__admin` SET uname='$uname',usertype='$usertype',tname='$tname',email='$email',typeid='$typeid' $pwd WHERE id='$id'";
+        $query = "UPDATE `#@__admin` SET uname='$uname',usertype='$usertype',tname='$tname',email='$email',typeid='$typeid' $pwd $usql WHERE id='$id'";
     } else {
-        $query = "UPDATE `#@__admin` SET uname='$uname',tname='$tname',email='$email',typeid='$typeid' $pwd WHERE id='$id'";
+        $query = "UPDATE `#@__admin` SET uname='$uname',tname='$tname',email='$email',typeid='$typeid' $pwd $usql WHERE id='$id'";
     }
     $dsql->ExecuteNoneQuery($query);
-    $query = "UPDATE `#@__member` SET uname='$uname',email='$email'$pwdm WHERE mid='$id'";
+    $query = "UPDATE `#@__member` SET uname='$uname',email='$email'$pwdm $usql WHERE mid='$id'";
     $dsql->ExecuteNoneQuery($query);
     ShowMsg("成功修改一个用户", "sys_admin_user.php");
     exit();

src/admin/templets/sys_admin_user_edit.htm

@@ -17,9 +17,10 @@
 				<input type="hidden" name="dopost" value="saveedit">
 				<input type="hidden" name="_csrf_token" value="<?php echo $GLOBALS['csrf_token'];?>">
 				<input type="hidden" name="id" value="<?php echo $row['id']?>">
+				<input type="hidden" name="olduserid" value="<?php echo $row['userid']?>">
 				<tr>
 					<td width="260">会员名：</td>
-					<td><?php echo $row['userid']?></td>
+					<td><input type="text" name="userid" id="userid" value="<?php echo $row['userid']?>" class="admin-input-sm"></td>
 				</tr>
 				<tr>
 					<td>昵称：</td>