GetOne($arcQuery); if(!is_array($cInfos)) { ShowMsg("读取文档信息出错!","-1"); exit(); } $addRow = $dsql->GetOne("SELECT * FROM `{$cInfos['addtable']}` WHERE aid='$aid'; "); if($addRow['mid']!=$cfg_ml->M_ID) { ShowMsg("对不起,你没权限操作此文档!","-1"); exit(); } $addRow['id'] = $addRow['aid']; include(DEDEMEMBER."/templets/archives_sg_edit.htm"); exit(); } /*------------------------------ function _SaveArticle(){ } ------------------------------*/ else if($dopost=='save') { require_once(DEDEINC."/image.func.php"); require_once(DEDEINC."/oxwindow.class.php"); $flag = ''; $typeid = isset($typeid) && is_numeric($typeid) ? $typeid : 0; $userip = GetIP(); $svali = GetCkVdValue(); if(preg_match("/3/",$safe_gdopen)){ if(strtolower($vdcode)!=$svali || $svali=='') { ResetVdValue(); ShowMsg('验证码错误!', '-1'); exit(); } } if($typeid==0) { ShowMsg('请指定文档隶属的栏目!','-1'); exit(); } $query = "SELECT tp.ispart,tp.channeltype,tp.issend,ch.issend AS cissend,ch.sendrank,ch.arcsta,ch.addtable,ch.fieldset,ch.usertype FROM `#@__arctype` tp LEFT JOIN `#@__channeltype` ch ON ch.id=tp.channeltype WHERE tp.id='$typeid' "; $cInfos = $dsql->GetOne($query); $addtable = $cInfos['addtable']; //检测栏目是否有投稿权限 if($cInfos['issend']!=1 || $cInfos['ispart']!=0|| $cInfos['channeltype']!=$channelid || $cInfos['cissend']!=1) { ShowMsg("你所选择的栏目不支持投稿!","-1"); exit(); } // 校验CSRF CheckCSRF(); //文档的默认状态 if($cInfos['arcsta']==0) { $arcrank = 0; } else if($cInfos['arcsta']==1) { $arcrank = 0; } else { $arcrank = -1; } //对保存的内容进行处理 $title = cn_substrR(HtmlReplace($title, 1), $cfg_title_maxlen); $mid = $cfg_ml->M_ID; //分析处理附加表数据 $inadd_f = $inadd_m = ''; if(!empty($dede_addonfields)) { $addonfields = explode(';',$dede_addonfields); if(is_array($addonfields)) { foreach($addonfields as $v) { if($v=='') { continue; } $vs = explode(',',$v); if(!isset(${$vs[0]})) { ${$vs[0]} = ''; } //自动摘要和远程图片本地化 if($vs[1]=='htmltext'||$vs[1]=='textdata') { ${$vs[0]} = AnalyseHtmlBody(${$vs[0]},$description,$vs[1]); } ${$vs[0]} = GetFieldValueA(${$vs[0]},$vs[1],$aid); $inadd_f .= ',`'.$vs[0]."` ='".${$vs[0]}."' "; $inadd_m .= ','.$vs[0]; } } // 这里对前台提交的附加数据进行一次校验 $fontiterm = PrintAutoFieldsAdd($cInfos['fieldset'],'autofield', FALSE); if ($fontiterm != $inadd_m) { ShowMsg("提交表单同系统配置不相符,请重新提交!", "-1"); exit(); } } if($addtable!='') { $upQuery = "UPDATE `$addtable` SET `title`='$title',`typeid`='$typeid',`arcrank`='$arcrank',userip='$userip'{$inadd_f} WHERE aid='$aid' "; if(!$dsql->ExecuteNoneQuery($upQuery)) { ShowMsg("更新附加表 `$addtable` 时出错,请联系管理员!","javascript:;"); exit(); } } UpIndexKey($aid,0,$typeid,$sortrank,''); $artUrl = MakeArt($aid,true); if($artUrl=='') $artUrl = $cfg_phpurl."/view.php?aid=$aid"; //返回成功信息 $msg = "请选择你的后续操作: 发布新内容    查看更改    查看内容    管理内容 "; $wintitle = "成功更改内容!"; $wecome_info = "内容管理::更改内容"; $win = new OxWindow(); $win->AddTitle("成功更改内容:"); $win->AddMsgItem($msg); $winform = $win->GetWindow("hand"," ",false); $win->Display(); }