GetOne($arcQuery);
if (!is_array($cInfos)) {
ShowMsg("读取文档信息出错!", "-1");
exit();
}
$addRow = $dsql->GetOne("SELECT * FROM `{$cInfos['addtable']}` WHERE aid='$aid'; ");
if ($addRow['mid'] != $cfg_ml->M_ID) {
ShowMsg("对不起，您没权限操作此文档", "-1");
exit();
}
$addRow['id'] = $addRow['aid'];
include(DEDEMEMBER."/templets/archives_sg_edit.htm");
exit();
}
/*------------------------------
function _SaveArticle(){ }
------------------------------*/
else if ($dopost == 'save') {
require_once(DEDEINC."/image.func.php");
require_once(DEDEINC."/oxwindow.class.php");
$flag = '';
$typeid = isset($typeid) && is_numeric($typeid) ? $typeid : 0;
$userip = GetIP();
$svali = GetCkVdValue();
if (preg_match("/3/", $safe_gdopen)) {
if (strtolower($vdcode) != $svali || $svali == '') {
ResetVdValue();
ShowMsg('验证码错误', '-1');
exit();
}
}
if ($typeid == 0) {
ShowMsg('请指定文档隶属的栏目', '-1');
exit();
}
$query = "SELECT tp.ispart,tp.channeltype,tp.issend,ch.issend AS cissend,ch.sendrank,ch.arcsta,ch.addtable,ch.fieldset,ch.usertype
FROM `#@__arctype` tp LEFT JOIN `#@__channeltype` ch ON ch.id=tp.channeltype WHERE tp.id='$typeid' ";
$cInfos = $dsql->GetOne($query);
$addtable = $cInfos['addtable'];
//检测栏目是否有投稿权限
if ($cInfos['issend'] != 1 || $cInfos['ispart'] != 0 || $cInfos['channeltype'] != $channelid || $cInfos['cissend'] != 1) {
ShowMsg("您所选择的栏目不支持投稿", "-1");
exit();
}
//校验CSRF
CheckCSRF();
//文档的默认状态
if ($cInfos['arcsta'] == 0) {
$arcrank = 0;
} else if ($cInfos['arcsta'] == 1) {
$arcrank = 0;
} else {
$arcrank = -1;
}
//对保存的内容进行处理
$title = cn_substrR(HtmlReplace($title, 1), $cfg_title_maxlen);
$mid = $cfg_ml->M_ID;
//分析处理附加表数据
$inadd_f = $inadd_m = '';
if (!empty($dede_addonfields)) {
$addonfields = explode(';', $dede_addonfields);
if (is_array($addonfields)) {
foreach ($addonfields as $v) {
if ($v == '') {
continue;
}
$vs = explode(',', $v);
if (!isset(${$vs[0]})) {
${$vs[0]} = '';
}
//自动摘要和远程图片本地化
if ($vs[1] == 'htmltext' || $vs[1] == 'textdata') {
${$vs[0]} = AnalyseHtmlBody(${$vs[0]}, $description, $vs[1]);
}
${$vs[0]} = GetFieldValueA(${$vs[0]}, $vs[1], $aid);
$inadd_f .= ',`'.$vs[0]."` ='".${$vs[0]}."' ";
$inadd_m .= ','.$vs[0];
}
}
//这里对前台提交的附加数据进行一次校验
$fontiterm = PrintAutoFieldsAdd($cInfos['fieldset'], 'autofield', FALSE);
if ($fontiterm != $inadd_m) {
ShowMsg("提交表单同系统配置不相符,请重新提交", "-1");
exit();
}
}
if ($addtable != '') {
$upQuery = "UPDATE `$addtable` SET `title`='$title',`typeid`='$typeid',`arcrank`='$arcrank',userip='$userip'{$inadd_f} WHERE aid='$aid' ";
if (!$dsql->ExecuteNoneQuery($upQuery)) {
ShowMsg("更新附加表 `$addtable` 时出错，请联系管理员", "javascript:;");
exit();
}
}
UpIndexKey($aid, 0, $typeid, $sortrank, '');
$artUrl = MakeArt($aid, true);
if ($artUrl == '') $artUrl = $cfg_phpurl."/view.php?aid=$aid";
//返回成功信息
$msg = "请选择您的后续操作：
发布新内容
查看修改
查看内容
管理内容
";
$wintitle = "成功修改内容";
$wecome_info = "内容管理::修改内容";
$win = new OxWindow();
$win->AddTitle("成功修改内容：");
$win->AddMsgItem($msg);
$winform = $win->GetWindow("hand", " ", false);
$win->Display();
}