DedeV6/src/admin/templets_one_edit.php

<?php
/**
 * 修改自定义页面
 *
 * @version        $id:templets_one_edit.php 23:07 2010年7月20日 tianya $
 * @package        DedeBIZ.Administrator
 * @copyright      Copyright (c) 2022 DedeBIZ.COM
 * @license        GNU GPL v2 (https://www.dedebiz.com/license)
 * @link           https://www.dedebiz.com
 */
require(dirname(__FILE__)."/config.php");
CheckPurview('temp_One');
if (empty($dopost)) $dopost = '';
$aid = isset($aid) && is_numeric($aid) ? $aid : 0;
if ($dopost == "saveedit") {
    include_once(DEDEINC."/archive/sgpage.class.php");
    $files = json_decode(file_get_contents(DEDEDATA.'/admin/files.txt'));
    $currentFolder = basename(__DIR__);
    $realFiles = array();
    foreach ($files as $ff) {
        $rfi = preg_replace("#^admin/#",$currentFolder.'/',$ff->filename);
        $realFiles[] = $rfi;
    }
    function realdir($path) {
        return dirname(realpath($path));
    }
    $uptime = time();
    $body = str_replace('&quot;', '\\"', $body);
    $filename = preg_replace("#^\/#", "", $nfilename);
    if (DEDEBIZ_SAFE_MODE) $ismake = 0; //安全模式不允许编译
    if (!preg_match('#\.htm$#i', trim($template))) {
        ShowMsg("文件扩展名已被系统禁止", "javascript:;");
        exit();
    }
    //如果修改了文件名，删除旧文件
    if ($oldfilename != $filename) {
        $f = str_replace("..", "", $oldfilename);
        $f = $cfg_basedir.$activepath."/$oldfilename";
        if (!file_exists(dirname(__FILE__).'/../license.txt')) {
            ShowMsg("许可协议不存在，无法重名文件", "javascript:;");
            exit();
        }
        $f = str_replace(realdir(dirname(__FILE__).'/../license.txt').'/', "", $f);
        if (in_array($f,$realFiles)) {
            ShowMsg("系统文件禁止重名", "javascript:;");
            exit();
        }
        $oldfilename = $cfg_basedir.'/'.$oldfilename;
        if (is_file($oldfilename)) {
            unlink($oldfilename);
        }
    }
    if ($likeidsel != $oldlikeid) {
        $likeid = $likeidsel;
    }
    $inQuery = "UPDATE `#@__sgpage` SET title='$title',keywords='$keywords',description='$description',likeid='$likeid',ismake='$ismake',filename='$filename',template='$template',uptime='$uptime',body='$body' WHERE aid='$aid'; ";
    if (!$dsql->ExecuteNoneQuery($inQuery)) {
        ShowMsg("更新页面失败，请检查页面是否有问题", "-1");
        exit();
    }
    $sg = new sgpage($aid);
    $sg->SaveToHtml();
    ShowMsg("成功修改一个单页", "templets_one.php");
    exit();
} else if ($dopost == "delete") {
    $row = $dsql->GetOne("SELECT filename FROM `#@__sgpage` WHERE aid='$aid'");
    $filename = preg_replace("#\/{1,}#", "/", $cfg_basedir."/".$row['filename']);
    $dsql->ExecuteNoneQuery(" DELETE FROM `#@__sgpage` WHERE aid='$aid' ");
    if (is_file($filename)) {
        unlink($filename);
    }
    ShowMsg("成功删除一个单页", "templets_one.php");
    exit();
} else if ($dopost == "make") {
    include_once(DEDEINC."/archive/sgpage.class.php");
    $row = $dsql->GetOne("SELECT filename FROM `#@__sgpage` WHERE aid='$aid'");
    $fileurl = $cfg_cmsurl.'/'.preg_replace("#\/{1,}#", "/", $row['filename']);
    $sg = new sgpage($aid);
    $sg->SaveToHtml();
    ShowMsg("成功更新一个单页", $fileurl);
    exit();
} else if ($dopost == "mkall") {
    include_once(DEDEINC."/archive/sgpage.class.php");
    $dsql->Execute("ex", "SELECT aid FROM `#@__sgpage`");
    $i = 0;
    while ($row = $dsql->GetArray("ex")) {
        $sg = new sgpage($row['aid']);
        $sg->SaveToHtml();
        $i++;
    }
    ShowMsg("成功更新".$i."个页面", '-1');
    exit();
} else if ($dopost == "mksel") {
    if (empty($ids)) {
        $ids = '';
    }
    include_once(DEDEINC."/archive/sgpage.class.php");
    $i = 0;
    if ($ids == 0) {
        ShowMsg('您没有选择需要更新的文档', '-1');
        exit();
    } else if (is_array($ids)) {
        foreach ($ids as $aid) {
            $sg = new sgpage($aid);
            $sg->SaveToHtml();
            $i++;
        }
        ShowMsg("成功更新".$i."个页面", '-1');
        exit();
    }
} else if ($dopost == "view") {
    if (empty($aid)) {
        ShowMsg('预览失败，请重新选择', 'javascript:;');
        exit();
    }
    include_once(DEDEINC."/archive/sgpage.class.php");
    $sg = new sgpage($aid);
    $sg->display();
    exit();
}
$row = $dsql->GetOne("SELECT * FROM `#@__sgpage` WHERE aid='$aid' ");
include(DEDEADMIN."/templets/templets_one_edit.htm");
?>