GetOne($query);
if (!is_array($cInfos)) {
ShowMsg('模型参数不正确', '-1');
exit();
}
//检查会员等级和类型限制
if ($cInfos['sendrank'] > $cfg_ml->M_Rank) {
$row = $dsql->GetOne("Select membername From `#@__arcrank` where `rank`='".$cInfos['sendrank']."' ");
ShowMsg("对不起，需要[".$row['membername']."]才能在这个频道发布文档", "-1", "0", 5000);
exit();
}
if ($cInfos['usertype'] != '' && $cInfos['usertype'] != $cfg_ml->M_MbType) {
ShowMsg("对不起，需要[".$cInfos['usertype']."帐号]才能在这个频道发布文档", "-1", "0", 5000);
exit();
}
include(DEDEMEMBER."/templets/album_add.htm");
exit();
}
/*------------------------------
function _SaveArticle(){ }
------------------------------*/
else if ($dopost == 'save') {
include(DEDEMEMBER.'/inc/archives_check.php');
$svali = GetCkVdValue();
if (preg_match("/1/", $safe_gdopen)) {
if (strtolower($vdcode) != $svali || $svali == '') {
ResetVdValue();
ShowMsg('验证码错误', '-1');
exit();
}
}
$cInfos = $dsql->GetOne("Select * From `#@__channeltype` where id='$channelid'; ");
$maxwidth = isset($maxwidth) && is_numeric($maxwidth) ? $maxwidth : 800;
$pagepicnum = isset($pagepicnum) && is_numeric($pagepicnum) ? $pagepicnum : 12;
$ddmaxwidth = isset($ddmaxwidth) && is_numeric($ddmaxwidth) ? $ddmaxwidth : 200;
$prow = isset($prow) && is_numeric($prow) ? $prow : 3;
$pcol = isset($pcol) && is_numeric($pcol) ? $pcol : 3;
$pagestyle = in_array($pagestyle, array('1', '2', '3')) ? $pagestyle : 2;
include(DEDEMEMBER.'/inc/archives_check.php');
$imgurls = "{dede:pagestyle maxwidth='$maxwidth' pagepicnum='$pagepicnum' ddmaxwidth='$ddmaxwidth' row='$prow' col='$pcol' value='$pagestyle'/}\r\n";
$hasone = false;
$ddisfirst = 1;
//只支持填写地址
for ($i = 1; $i <= 120; $i++) {
if (!isset(${'imgfile'.$i})) {
continue;
}
$f = ${'imgfile'.$i};
$msg = isset(${'imgmsg'.$i}) ? ${'imgmsg'.$i} : "";
if (!empty($f) && filter_var($f, FILTER_VALIDATE_URL)) {
$u = str_replace(array("\"", "'"), "`", $f);
$info = str_replace(array("\"", "'"), "`", $msg);
$imgurls .= "{dede:img ddimg='' text='$info'} $u {/dede:img}\r\n";
}
} //循环结束
$imgurls = addslashes($imgurls);
//分析处理附加表数据
$isrm = 1;
if (!isset($formhtml)) {
$formhtml = 0;
}
$inadd_f = $inadd_v = '';
if (!empty($dede_addonfields)) {
$addonfields = explode(';', $dede_addonfields);
$inadd_f = '';
$inadd_v = '';
if (is_array($addonfields)) {
foreach ($addonfields as $v) {
if ($v == '') {
continue;
}
$vs = explode(',', $v);
if (!isset(${$vs[0]})) {
${$vs[0]} = '';
}
${$vs[0]} = GetFieldValueA(${$vs[0]}, $vs[1], 0);
$inadd_f .= ','.$vs[0];
$inadd_v .= " ,'".${$vs[0]}."' ";
}
}
//这里对前台提交的附加数据进行一次校验
$fontiterm = PrintAutoFieldsAdd(stripslashes($cInfos['fieldset']), 'autofield', FALSE);
if ($fontiterm != $inadd_f) {
ShowMsg("提交表单同系统配置不相符,请重新提交", "-1");
exit();
}
}
//生成文档ID
$arcID = GetIndexKey($arcrank, $typeid, $sortrank, $channelid, $senddate, $mid);
if (empty($arcID)) {
ShowMsg("无法获得主键，因此无法进行后续操作", "-1");
exit();
}
$description = HtmlReplace($description, -1);
$mtypesid = intval($mtypesid); //对输入参数mtypesid未进行int整型转义，导致SQL注入的发生
//保存到主表
$inQuery = "INSERT INTO `#@__archives`(id,typeid,sortrank,flag,ismake,channel,arcrank,click,money,title,shorttitle,
color,writer,source,litpic,pubdate,senddate,mid,description,keywords,mtype)
VALUES ('$arcID','$typeid','$sortrank','$flag','$ismake','$channelid','$arcrank','0','$money','$title','$shorttitle',
'$color','$writer','$source','','$pubdate','$senddate','$mid','$description','$keywords','$mtypesid'); ";
if (!$dsql->ExecuteNoneQuery($inQuery)) {
$gerr = $dsql->GetError();
$dsql->ExecuteNoneQuery("DELETE FROM `#@__arctiny` WHERE id='$arcID' ");
ShowMsg("把数据保存到数据库主表 `#@__archives` 时出错，请联系管理员", "javascript:;");
exit();
}
//保存到附加表
$addtable = trim($cInfos['addtable']);
if (empty($addtable)) {
$dsql->ExecuteNoneQuery("DELETE FROM `#@__archives` WHERE id='$arcID'");
$dsql->ExecuteNoneQuery("DELETE FROM `#@__arctiny` WHERE id='$arcID'");
ShowMsg("没找到当前模型[{$channelid}]的主表信息，无法完成操作", "javascript:;");
exit();
} else {
$query = "INSERT INTO `$addtable`(aid,typeid,userip,redirecturl,templet,pagestyle,maxwidth,imgurls,`row`,col,isrm,ddmaxwidth,pagepicnum{$inadd_f})
Values('$arcID','$typeid','$userip','','','$pagestyle','$maxwidth','$imgurls','$prow','$pcol','$isrm','$ddmaxwidth','$pagepicnum'{$inadd_v}); ";
if (!$dsql->ExecuteNoneQuery($query)) {
$gerr = $dsql->GetError();
$dsql->ExecuteNoneQuery("DELETE FROM `#@__archives` WHERE id='$arcID'");
$dsql->ExecuteNoneQuery("DELETE FROM `#@__arctiny` WHERE id='$arcID'");
ShowMsg("把数据保存到数据库附加表 `{$addtable}` 时出错，请联系管理员".$gerr, "javascript:;");
exit();
}
}
//增加积分
$dsql->ExecuteNoneQuery("UPDATE `#@__member` SET scores=scores+{$cfg_sendarc_scores} WHERE mid='".$cfg_ml->M_ID."' ; ");
//更新统计
countArchives($channelid);
//生成HTML
InsertTags($tags, $arcID);
$artUrl = MakeArt($arcID, true);
if ($artUrl == '') $artUrl = $cfg_phpurl."/view.php?aid=$arcID";
ClearMyAddon($arcID, $title);
//返回成功信息
$msg = "请选择您的后续操作：继续发布图集查看图集修改图集已发布图集管理";
$wintitle = "成功发布图集";
$wecome_info = "图集管理::发布图集";
$win = new OxWindow();
$win->AddTitle("成功发布图集：");
$win->AddMsgItem($msg);
$winform = $win->GetWindow("hand", " ", false);
$win->Display(DEDEMEMBER."/templets/win_templet.htm");
}