国内流行的内容管理系统(CMS)多端全媒体解决方案 https://www.dedebiz.com
Ви не можете вибрати більше 25 тем Теми мають розпочинатися з літери або цифри, можуть містити дефіси (-) і не повинні перевищувати 35 символів.

407 рядки
20KB

  1. <?php
  2. if (!defined('DEDEINC')) exit('dedebiz');
  3. /**
  4. * 系统核心函数
  5. * @version $id:customfields.func.php 2 20:50 2010年7月7日 tianya $
  6. * @package DedeBIZ.Libraries
  7. * @copyright Copyright (c) 2022 DedeBIZ.COM
  8. * @license GNU GPL v2 (https://www.dedebiz.com/license)
  9. * @link https://www.dedebiz.com
  10. */
  11. /**
  12. * 获得一个附加表单发布时用
  13. *
  14. * @access public
  15. * @param object $ctag 标签
  16. * @param string $admintype 管理员类型
  17. * @return string
  18. */
  19. function GetFormItem($ctag, $admintype = 'admin')
  20. {
  21. $fieldname = $ctag->GetName();
  22. $fieldType = $ctag->GetAtt('type');
  23. $formitem = $formitem = GetSysTemplets("custom_fields_{$admintype}.htm");
  24. $innertext = trim($ctag->GetInnerText());
  25. if ($innertext != '') {
  26. $formitem = $innertext;
  27. }
  28. if ($fieldType == 'select') {
  29. $myformItem = '';
  30. $items = explode(',', $ctag->GetAtt("default"));
  31. $myformItem = "<select name='$fieldname' class='form-control admin-input-sm'>";
  32. foreach ($items as $v) {
  33. $v = trim($v);
  34. if ($v != '') {
  35. $myformItem .= "<option value='$v'>$v</option>";
  36. }
  37. }
  38. $myformItem .= "</select>";
  39. $innertext = $myformItem;
  40. } else if ($fieldType == 'stepselect') {
  41. global $hasSetEnumJs, $cfg_cmspath;
  42. $cmspath = ((empty($cfg_cmspath) || !preg_match('/[/$]/', $cfg_cmspath)) ? $cfg_cmspath.'/' : $cfg_cmspath);
  43. $myformItem = '';
  44. $myformItem .= "<input type='hidden' id='hidden_{$fieldname}' name='{$fieldname}' value='0'>";
  45. $myformItem .= "<span id='span_{$fieldname}'></span>";
  46. $myformItem .= "<span id='span_{$fieldname}_son'></span>";
  47. $myformItem .= "<span id='span_{$fieldname}_sec'></span>";
  48. if ($hasSetEnumJs != 'hasset') {
  49. $myformItem .= '<script src="'.$cmspath.'static/web/js/enums.js"></script>'."";
  50. $GLOBALS['hasSetEnumJs'] = 'hasset';
  51. }
  52. $myformItem .= "<script>
  53. var em_{$fieldname}s = [];
  54. fetch('{$cmspath}static/enums/{$fieldname}.json').then((resp)=>resp.json()).then((d)=>{
  55. Object.entries(d).forEach(v=>{
  56. em_{$fieldname}s[parseFloat(v[0])]= v[1];
  57. });
  58. MakeTopSelect('$fieldname', 0);
  59. })
  60. </script>";
  61. $formitem = str_replace('~name~', $ctag->GetAtt('itemname'), $formitem);
  62. $formitem = str_replace('~form~', $myformItem, $formitem);
  63. return $formitem;
  64. } else if ($fieldType == 'radio') {
  65. $myformItem = '';
  66. $items = explode(',', $ctag->GetAtt("default"));
  67. $i = 0;
  68. foreach ($items as $v) {
  69. $v = trim($v);
  70. if ($v != '') {
  71. $myformItem .= ($i == 0 ? "<div class='form-check form-check-inline'><label class='form-check-label'><input type='radio' name='$fieldname' class='form-check-input' value='$v' checked> $v</label></div>" : "<div class='form-check form-check-inline'><label class='form-check-label'><input type='radio' name='$fieldname' class='form-check-input' value='$v'> $v</label></div>");
  72. $i++;
  73. }
  74. }
  75. $innertext = $myformItem;
  76. } else if ($fieldType == 'checkbox') {
  77. $myformItem = '';
  78. $items = explode(',', $ctag->GetAtt("default"));
  79. foreach ($items as $v) {
  80. $v = trim($v);
  81. if ($v != '') {
  82. if ($admintype == 'membermodel') {
  83. $myformItem .= "<div class='form-check form-check-inline'><label class='form-check-label'><input type='checkbox' name='{$fieldname}[]' class='form-check-input' value='$v'> $v</label></div>";
  84. } else {
  85. $myformItem .= "<div class='form-check form-check-inline'><label class='form-check-label'><input type='checkbox' name='{$fieldname}[]' class='form-check-input' value='$v'> $v</label></div>";
  86. }
  87. }
  88. }
  89. $innertext = $myformItem;
  90. } else if ($fieldType == 'htmltext' || $fieldType == 'textdata') {
  91. $dfvalue = ($ctag->GetAtt('default') != '' ? $ctag->GetAtt('default') : '');
  92. $dfvalue = str_replace('{{', '<', $dfvalue);
  93. $dfvalue = str_replace('}}', '>', $dfvalue);
  94. if ($admintype == 'admin') {
  95. $innertext = GetEditor($fieldname, $dfvalue, 350, 'Basic', 'string');
  96. } else if ($admintype == 'diy') {
  97. $innertext = GetEditor($fieldname, $dfvalue, 350, 'Diy', 'string');
  98. } else {
  99. $innertext = GetEditor($fieldname, $dfvalue, 350, 'Member', 'string');
  100. }
  101. } else if ($fieldType == "multitext") {
  102. $innertext = "<textarea name='$fieldname' id='$fieldname' class='form-control admin-textarea-sm'></textarea>";
  103. } else if ($fieldType == "datetime") {
  104. $nowtime = GetDateTimeMk(time());
  105. $innertext = "<input type='text' name='$fieldname' value='$nowtime' id='$fieldname' class='form-control admin-input-lg datepicker'>";
  106. } else if ($fieldType == 'img') {
  107. $fname = defined('DEDEADMIN')? 'form1' : 'addcontent';
  108. $innertext = "<input type='text' name='$fieldname' id='$fieldname' class='form-control admin-input-lg' placeholder='请选择图片上传或填写图片地址'> <input type='button' name='".$fieldname."_bt' class='btn btn-success btn-sm' value='选择' onclick=\"SelectImage('$fname.$fieldname','big')\">";
  109. } else if ($fieldType == 'media') {
  110. $fname = defined('DEDEADMIN')? 'form1' : 'addcontent';
  111. $innertext = "<input type='text' name='$fieldname' id='$fieldname' class='form-control admin-input-lg' placeholder='请选择多媒体上传或填写多媒体地址'> <input type='button' name='".$fieldname."_bt' class='btn btn-success btn-sm' value='选择' onclick=\"SelectMedia('$fname.$fieldname')\">";
  112. } else if ($fieldType == 'addon') {
  113. $fname = defined('DEDEADMIN')? 'form1' : 'addcontent';
  114. $innertext = "<input type='text' name='$fieldname' id='$fieldname' class='form-control admin-input-lg' placeholder='请选择附件上传或填写附件地址'> <input type='button' name='".$fieldname."_bt' class='btn btn-success btn-sm' value='选择' onclick=\"SelectSoft('$fname.$fieldname')\">";
  115. } else if ($fieldType == 'int' || $fieldType == 'float') {
  116. $dfvalue = ($ctag->GetAtt('default') != '' ? $ctag->GetAtt('default') : '0');
  117. $innertext = "<input type='text' name='$fieldname' id='$fieldname' class='form-control admin-input-sm' value='$dfvalue'>";
  118. } else if ($fieldType == 'relation') {
  119. $dfvalue = ($ctag->GetAtt('default') != '' ? $ctag->GetAtt('default') : '');
  120. $channel = ($ctag->GetAtt('channel') == "") ? "1" : $ctag->GetAtt('channel');
  121. $innertext = "<textarea name='$fieldname' id='$fieldname' class='form-control admin-textarea-sm'>$dfvalue</textarea><br><button type='button' class='btn btn-success btn-sm' onclick='SelectArcList(\"form1.$fieldname\", $channel);'>选择关联文档</button>";
  122. if ($ctag->GetAtt('automake') == 1) {
  123. $innertext .= "<input type='hidden' name='automake[$fieldname]' value='1'>";
  124. }
  125. $innertext .= <<<EOT
  126. <script>
  127. if (typeof SelectArcList === "undefined") {
  128. function SelectArcList(fname,cid) {
  129. var posLeft = 10;
  130. var posTop = 10;
  131. window.open("content_select_list.php?f=" + fname+"&channelid="+cid, "selArcList", "scrollbars=yes,resizable=yes,statebar=no,width=800,height=500,left=" + posLeft + ", top=" + posTop);
  132. }
  133. }
  134. </script>
  135. EOT;
  136. } else {
  137. $dfvalue = ($ctag->GetAtt('default') != '' ? $ctag->GetAtt('default') : '');
  138. $innertext = "<input type='text' name='$fieldname' id='$fieldname' class='form-control admin-input-lg' value='$dfvalue'>
  139. ";
  140. }
  141. $formitem = str_replace("~name~", $ctag->GetAtt('itemname'), $formitem);
  142. $formitem = str_replace("~form~", $innertext, $formitem);
  143. return $formitem;
  144. }
  145. /**
  146. * 处理不同类型的数据
  147. *
  148. * @access public
  149. * @param string $dvalue 默认值
  150. * @param string $dtype 默认类型
  151. * @param int $aid 文档id
  152. * @param string $job 操作类型
  153. * @param string $addvar 值
  154. * @param string $admintype 管理类型
  155. * @param string $fieldname 变量类型
  156. * @return string
  157. */
  158. function GetFieldValue($dvalue, $dtype, $aid = 0, $job = 'add', $addvar = '', $admintype = 'admin', $fieldname = '')
  159. {
  160. global $cfg_basedir, $cfg_cmspath, $adminid, $cfg_ml, $cfg_cookie_encode;
  161. if (empty($adminid)) $adminid = isset($cfg_ml) ? $cfg_ml->M_ID : 1;
  162. if ($dtype == 'int') {
  163. if ($dvalue == '') {
  164. return 0;
  165. }
  166. return GetAlabNum($dvalue);
  167. } else if ($dtype == 'relation') {
  168. $dvalue = trim(preg_replace("#[^0-9,]#", "", $dvalue));
  169. return $dvalue;
  170. } else if ($dtype == 'stepselect') {
  171. $dvalue = trim(preg_replace("#[^0-9\.]#", "", $dvalue));
  172. return $dvalue;
  173. } else if ($dtype == 'float') {
  174. if ($dvalue == '') {
  175. return 0;
  176. }
  177. return GetAlabNum($dvalue);
  178. } else if ($dtype == 'datetime') {
  179. if ($dvalue == '') {
  180. return 0;
  181. }
  182. return GetMkTime($dvalue);
  183. } else if ($dtype == 'checkbox') {
  184. $okvalue = '';
  185. if (is_array($dvalue)) {
  186. $okvalue = join(',', $dvalue);
  187. }
  188. return $okvalue;
  189. } else if ($dtype == "htmltext") {
  190. if ($admintype == 'member' || $admintype == 'diy') {
  191. $dvalue = RemoveXSS(HtmlReplace($dvalue, -1));
  192. }
  193. return $dvalue;
  194. } else if ($dtype == "multitext") {
  195. if ($admintype == 'member' || $admintype == 'diy') {
  196. $dvalue = RemoveXSS(HtmlReplace($dvalue, 0));
  197. }
  198. return $dvalue;
  199. } else if ($dtype == "textdata") {
  200. $ipath = $cfg_cmspath."/data/textdata";
  201. $tpath = ceil($aid / 5000);
  202. if (!is_dir($cfg_basedir.$ipath)) {
  203. MkdirAll($cfg_basedir.$ipath, $GLOBALS['cfg_dir_purview']);
  204. }
  205. if (!is_dir($cfg_basedir.$ipath.'/'.$tpath)) {
  206. MkdirAll($cfg_basedir.$ipath.'/'.$tpath, $GLOBALS['cfg_dir_purview']);
  207. }
  208. $ipath = $ipath.'/'.$tpath;
  209. $filename = "{$ipath}/{$aid}-".cn_substr(md5($cfg_cookie_encode), 0, 16).".txt";
  210. //会员投稿文档安全处理
  211. if ($admintype == 'member' || $admintype == 'diy') {
  212. $dvalue = RemoveXSS(HtmlReplace($dvalue, -1));
  213. }
  214. $fp = fopen($cfg_basedir.$filename, "w");
  215. fwrite($fp, stripslashes($dvalue));
  216. fclose($fp);
  217. return $filename;
  218. } else if ($dtype == 'img' || $dtype == 'imgfile') {
  219. return addslashes($dvalue);
  220. } else if ($dtype == 'addon' && $admintype == 'diy') {
  221. if ($admintype == 'diy') {
  222. return addslashes($dvalue);
  223. }
  224. $dvalue = MemberUploads($fieldname, '', 0, 'addon', '', -1, -1, false);
  225. return $dvalue;
  226. } else {
  227. if ($admintype == 'member' || $admintype == 'diy') {
  228. $dvalue = RemoveXSS(HtmlReplace($dvalue, 1));
  229. }
  230. return $dvalue;
  231. }
  232. }
  233. /**
  234. * 获得带值的表单修改时用
  235. *
  236. * @access public
  237. * @param object $ctag 标签
  238. * @param mixed $fvalue 变量值
  239. * @param string $admintype 会员类型
  240. * @param string $fieldname 变量名称
  241. * @return string
  242. */
  243. function GetFormItemValue($ctag, $fvalue, $admintype = 'admin', $fieldname = '')
  244. {
  245. global $cfg_basedir;
  246. $fieldname = $ctag->GetName();
  247. $formitem = $formitem = GetSysTemplets("custom_fields_{$admintype}.htm");
  248. $innertext = trim($ctag->GetInnerText());
  249. if ($innertext != '') {
  250. $formitem = $innertext;
  251. }
  252. $ftype = $ctag->GetAtt('type');
  253. $myformItem = '';
  254. if (preg_match("/select|radio|checkbox/i", $ftype)) {
  255. $items = explode(',', $ctag->GetAtt('default'));
  256. }
  257. if ($ftype == 'select') {
  258. $myformItem = "<select name='$fieldname' class='form-control admin-input-sm'>";
  259. if (is_array($items)) {
  260. foreach ($items as $v) {
  261. $v = trim($v);
  262. if ($v == '') {
  263. continue;
  264. }
  265. $myformItem .= ($fvalue == $v ? "<option value='$v' selected>$v</option>" : "<option value='$v'>$v</option>");
  266. }
  267. }
  268. $myformItem .= "</select>";
  269. $innertext = $myformItem;
  270. } else if ($ctag->GetAtt("type") == 'stepselect') {
  271. global $hasSetEnumJs, $cfg_cmspath;
  272. $cmspath = ((empty($cfg_cmspath) || preg_match('/[/$]/', $cfg_cmspath)) ? $cfg_cmspath.'/' : $cfg_cmspath);
  273. $myformItem = '';
  274. $myformItem .= "<input type='hidden' id='hidden_{$fieldname}' name='{$fieldname}' value='{$fvalue}'>";
  275. $myformItem .= "<span id='span_{$fieldname}'></span>";
  276. $myformItem .= "<span id='span_{$fieldname}_son'></span>";
  277. $myformItem .= "<span id='span_{$fieldname}_sec'></span>";
  278. if ($hasSetEnumJs != 'hasset') {
  279. $myformItem .= '<script src="'.$cmspath.'static/web/js/enums.js"></script>'."";
  280. $GLOBALS['hasSetEnumJs'] = 'hasset';
  281. }
  282. $myformItem .= "<script>
  283. var em_{$fieldname}s = [];
  284. fetch('{$cmspath}static/enums/{$fieldname}.json').then((resp)=>resp.json()).then((d)=>{
  285. Object.entries(d).forEach(v=>{
  286. em_{$fieldname}s[parseFloat(v[0])]= v[1];
  287. });
  288. MakeTopSelect('$fieldname', $fvalue);
  289. })
  290. </script>";
  291. $formitem = str_replace('~name~', $ctag->GetAtt('itemname'), $formitem);
  292. $formitem = str_replace('~form~', $myformItem, $formitem);
  293. return $formitem;
  294. } else if ($ftype == 'radio') {
  295. if (is_array($items)) {
  296. foreach ($items as $v) {
  297. $v = trim($v);
  298. if ($v == '') continue;
  299. $myformItem .= ($fvalue == $v ? "<div class='form-check form-check-inline'><label class='form-check-label'><input type='radio' name='$fieldname' class='form-check-input' value='$v' checked> $v</label></div>" : "<div class='form-check form-check-inline'><label class='form-check-label'><input type='radio' name='$fieldname' class='form-check-input' value='$v'> $v</label></div>");
  300. }
  301. }
  302. $innertext = $myformItem;
  303. }
  304. //checkbox
  305. else if ($ftype == 'checkbox') {
  306. $myformItem = '';
  307. $fvalues = explode(',', $fvalue);
  308. if (is_array($items)) {
  309. foreach ($items as $v) {
  310. $v = trim($v);
  311. if ($v == '') {
  312. continue;
  313. }
  314. if (in_array($v, $fvalues)) {
  315. $myformItem .= "<div class='form-check form-check-inline'><label class='form-check-label'><input type='checkbox' name='{$fieldname}[]' class='form-check-input' value='$v' checked> $v</label></div>";
  316. } else {
  317. $myformItem .= "<div class='form-check form-check-inline'><label class='form-check-label'><input type='checkbox' name='{$fieldname}[]' class='form-check-input' value='$v'> $v</label></div>";
  318. }
  319. }
  320. }
  321. $innertext = $myformItem;
  322. }
  323. //文本数据的特殊处理
  324. else if ($ftype == "textdata") {
  325. if (is_file($cfg_basedir.$fvalue)) {
  326. $fp = fopen($cfg_basedir.$fvalue, 'r');
  327. $okfvalue = '';
  328. while (!feof($fp)) {
  329. $okfvalue .= fgets($fp, 1024);
  330. }
  331. fclose($fp);
  332. } else {
  333. $okfvalue = '';
  334. }
  335. if ($admintype == 'admin') {
  336. $myformItem = GetEditor($fieldname, $okfvalue, 350, 'Basic', 'string')." <input type='hidden' name='{$fieldname}_file' value='{$fvalue}'> ";
  337. } else {
  338. $myformItem = GetEditor($fieldname, $okfvalue, 350, 'Member', 'string')." <input type='hidden' name='{$fieldname}_file' value='{$fvalue}'> ";
  339. }
  340. $innertext = $myformItem;
  341. } else if ($ftype == "htmltext") {
  342. if ($admintype == 'admin') {
  343. $myformItem = GetEditor($fieldname, $fvalue, 350, 'Basic', 'string')." ";
  344. } else {
  345. $myformItem = GetEditor($fieldname, $fvalue, 350, 'Member', 'string')." ";
  346. }
  347. $innertext = $myformItem;
  348. } else if ($ftype == "multitext") {
  349. $innertext = "<textarea name='$fieldname' id='$fieldname' class='form-control admin-textarea-sm'>$fvalue</textarea>";
  350. } else if ($ftype == "datetime") {
  351. $nowtime = GetDateTimeMk($fvalue);
  352. $innertext = "<input type='text' name='$fieldname' value='$nowtime' id='$fieldname' class='form-control admin-input-lg'>";
  353. } else if ($ftype == "img") {
  354. $tmpValue = $fvalue;
  355. $ndtp = new DedeTagParse();
  356. $ndtp->LoadSource($fvalue);
  357. if (!is_array($ndtp->CTags)) {
  358. $ndtp->Clear();
  359. $fvalue = "";
  360. } else {
  361. $ntag = $ndtp->GetTag("img");
  362. if (!empty($ntag)) {
  363. $fvalue = trim($ntag->GetInnerText());
  364. }
  365. }
  366. $fvalue = empty($fvalue)? $tmpValue : $fvalue;
  367. $fname = defined('DEDEADMIN')? 'form1' : 'addcontent';
  368. $innertext = "<input type='text' name='$fieldname' value='$fvalue' id='$fieldname' class='form-control admin-input-lg'> <input type='button' name='".$fieldname."_bt' class='btn btn-success btn-sm' value='选择' onclick=\"SelectImage('$fname.$fieldname','big')\">";
  369. } else if ($ftype == "imgfile") {
  370. $fname = defined('DEDEADMIN')? 'form1' : 'addcontent';
  371. $innertext = "<input type='text' name='$fieldname' value='$fvalue' id='$fieldname' class='form-control admin-input-lg'>";
  372. } else if ($ftype == "media") {
  373. $fname = defined('DEDEADMIN')? 'form1' : 'addcontent';
  374. $selectStr = "<input type='button' name='".$fieldname."_bt' class='btn btn-success btn-sm' value='选择' onclick=\"SelectMedia('$fname.$fieldname')\">";
  375. $innertext = "<input type='text' name='$fieldname' value='$fvalue' id='$fieldname' class='form-control admin-input-lg'> $selectStr";
  376. } else if ($ftype == "addon") {
  377. $fname = defined('DEDEADMIN')? 'form1' : 'addcontent';
  378. $selectStr = "<input type='button' name='".$fieldname."_bt' class='btn btn-success btn-sm' value='选择' onclick=\"SelectSoft('$fname.$fieldname')\">";
  379. $innertext = "<input type='text' name='$fieldname' id='$fieldname' value='$fvalue' class='form-control admin-input-lg'> $selectStr";
  380. } else if ($ftype == "int" || $ftype == "float") {
  381. $innertext = "<input type='text' name='$fieldname' id='$fieldname' class='form-control admin-input-sm' value='$fvalue'>";
  382. } else if ($ftype == "relation") {
  383. $fname = defined('DEDEADMIN')? 'form1' : 'addcontent';
  384. $channel = ($ctag->GetAtt('channel') == "") ? "1" : $ctag->GetAtt('channel');
  385. $innertext = "<textarea name='$fieldname' id='$fieldname' class='form-control admin-textarea-sm'>$fvalue</textarea><br><button type='button' class='btn btn-success btn-sm' onclick='SelectArcList(\"$fname.$fieldname\", $channel);'>选择关联文档</button>";
  386. if ($ctag->GetAtt('automake') == 1) {
  387. $innertext .= "<input type='hidden' name='automake[$fieldname]' value='1'>";
  388. }
  389. $innertext .= <<<EOT
  390. <script>
  391. if (typeof SelectArcList === "undefined") {
  392. function SelectArcList(fname,cid) {
  393. var posLeft = 10;
  394. var posTop = 10;
  395. window.open("content_select_list.php?f=" + fname+"&channelid="+cid, "selArcList", "scrollbars=yes,resizable=yes,statebar=no,width=800,height=500,left=" + posLeft + ", top=" + posTop);
  396. }
  397. }
  398. </script>
  399. EOT;
  400. } else {
  401. $innertext = "<input type='text' name='$fieldname' id='$fieldname' class='form-control admin-input-lg' value='$fvalue'>";
  402. }
  403. $formitem = str_replace('~name~', $ctag->GetAtt('itemname'), $formitem);
  404. $formitem = str_replace('~form~', $innertext, $formitem);
  405. return $formitem;
  406. }
  407. ?>