国内流行的内容管理系统(CMS)多端全媒体解决方案 https://www.dedebiz.com
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

124 lines
5.3KB

  1. <?php
  2. /**
  3. * 单表模型编辑器
  4. *
  5. * @version $Id: archives_sg_add.php 1 13:52 2010年7月9日Z tianya $
  6. * @package DedeBIZ.User
  7. * @copyright Copyright (c) 2022, DedeBIZ.COM
  8. * @license https://www.dedebiz.com/license
  9. * @link https://www.dedebiz.com
  10. */
  11. require_once(dirname(__FILE__)."/config.php");
  12. CheckRank(0, 0);
  13. require_once(DEDEINC."/dedetag.class.php");
  14. require_once(DEDEINC."/customfields.func.php");
  15. require_once(DEDEMEMBER."/inc/inc_catalog_options.php");
  16. require_once(DEDEMEMBER."/inc/inc_archives_functions.php");
  17. $channelid = isset($channelid) && is_numeric($channelid) ? $channelid : 1;
  18. $aid = isset($aid) && is_numeric($aid) ? $aid : 0;
  19. $mtypesid = isset($mtypesid) && is_numeric($mtypesid) ? $mtypesid : 0;
  20. $menutype = 'content';
  21. /*-------------
  22. function _ShowForm(){ }
  23. --------------*/
  24. if (empty($dopost)) {
  25. //读取归档信息
  26. $arcQuery = "SELECT ch.*,arc.* FROM `#@__arctiny` arc LEFT JOIN `#@__channeltype` ch ON ch.id=arc.channel WHERE arc.id='$aid' ";
  27. $cInfos = $dsql->GetOne($arcQuery);
  28. if (!is_array($cInfos)) {
  29. ShowMsg("读取文档信息出错", "-1");
  30. exit();
  31. }
  32. $addRow = $dsql->GetOne("SELECT * FROM `{$cInfos['addtable']}` WHERE aid='$aid'; ");
  33. if ($addRow['mid'] != $cfg_ml->M_ID) {
  34. ShowMsg("对不起,您没权限操作此文档", "-1");
  35. exit();
  36. }
  37. $addRow['id'] = $addRow['aid'];
  38. include(DEDEMEMBER."/templets/archives_sg_edit.htm");
  39. exit();
  40. }
  41. /*------------------------------
  42. function _SaveArticle(){ }
  43. ------------------------------*/
  44. else if ($dopost == 'save') {
  45. require_once(DEDEINC."/image.func.php");
  46. require_once(DEDEINC."/libraries/oxwindow.class.php");
  47. $flag = '';
  48. $typeid = isset($typeid) && is_numeric($typeid) ? $typeid : 0;
  49. $userip = GetIP();
  50. if ($typeid == 0) {
  51. ShowMsg('请指定文档所属栏目', '-1');
  52. exit();
  53. }
  54. $query = "SELECT tp.ispart,tp.channeltype,tp.issend,ch.issend AS cissend,ch.sendrank,ch.arcsta,ch.addtable,ch.fieldset,ch.usertype FROM `#@__arctype` tp LEFT JOIN `#@__channeltype` ch ON ch.id=tp.channeltype WHERE tp.id='$typeid' ";
  55. $cInfos = $dsql->GetOne($query);
  56. $addtable = $cInfos['addtable'];
  57. //检测栏目是否有投稿权限
  58. if ($cInfos['issend'] != 1 || $cInfos['ispart'] != 0 || $cInfos['channeltype'] != $channelid || $cInfos['cissend'] != 1) {
  59. ShowMsg("您所选择的栏目不支持投稿", "-1");
  60. exit();
  61. }
  62. //校验CSRF
  63. CheckCSRF();
  64. //文档的默认状态
  65. if ($cInfos['arcsta'] == 0) {
  66. $arcrank = 0;
  67. } else if ($cInfos['arcsta'] == 1) {
  68. $arcrank = 0;
  69. } else {
  70. $arcrank = -1;
  71. }
  72. //对保存的内容进行处理
  73. $title = cn_substrR(HtmlReplace($title, 1), $cfg_title_maxlen);
  74. $mid = $cfg_ml->M_ID;
  75. //分析处理附加表数据
  76. $inadd_f = $inadd_m = '';
  77. if (!empty($dede_addonfields)) {
  78. $addonfields = explode(';', $dede_addonfields);
  79. if (is_array($addonfields)) {
  80. foreach ($addonfields as $v) {
  81. if ($v == '') {
  82. continue;
  83. }
  84. $vs = explode(',', $v);
  85. if (!isset(${$vs[0]})) {
  86. ${$vs[0]} = '';
  87. }
  88. //自动摘要和远程图片本地化
  89. if ($vs[1] == 'htmltext' || $vs[1] == 'textdata') {
  90. ${$vs[0]} = AnalyseHtmlBody(${$vs[0]}, $description, $vs[1]);
  91. }
  92. ${$vs[0]} = GetFieldValueA(${$vs[0]}, $vs[1], $aid);
  93. $inadd_f .= ',`'.$vs[0]."` ='".${$vs[0]}."' ";
  94. $inadd_m .= ','.$vs[0];
  95. }
  96. }
  97. //这里对前台提交的附加数据进行一次校验
  98. $fontiterm = PrintAutoFieldsAdd(stripslashes($cInfos['fieldset']), 'autofield', FALSE);
  99. if ($fontiterm != $inadd_m) {
  100. ShowMsg("提交表单同系统配置不相符,请重新提交", "-1");
  101. exit();
  102. }
  103. }
  104. if ($addtable != '') {
  105. $upQuery = "UPDATE `$addtable` SET `title`='$title',`typeid`='$typeid',`arcrank`='$arcrank',userip='$userip'{$inadd_f} WHERE aid='$aid' ";
  106. if (!$dsql->ExecuteNoneQuery($upQuery)) {
  107. ShowMsg("数据保存到数据库附加表时出错,请联系管理员", "javascript:;");
  108. exit();
  109. }
  110. }
  111. UpIndexKey($aid, 0, $typeid, $sortrank, '');
  112. $artUrl = MakeArt($aid, true);
  113. if ($artUrl == '') $artUrl = $cfg_phpurl."/view.php?aid=$aid";
  114. //返回成功信息
  115. $msg = "请选择您的后续操作:<a href='archives_sg_add.php?cid=$typeid' class='btn btn-success btn-sm'>发布新内容</a><a href='archives_do.php?channelid=$channelid&aid=".$aid."&dopost=edit' class='btn btn-success btn-sm'>查看修改</a><a href='$artUrl' target='_blank' class='btn btn-success btn-sm'>查看内容</a><a href='content_sg_list.php?channelid=$channelid' class='btn btn-success btn-sm'>管理内容</a>";
  116. $wintitle = "成功修改内容";
  117. $wecome_info = "内容管理::修改内容";
  118. $win = new OxWindow();
  119. $win->AddTitle("成功修改内容");
  120. $win->AddMsgItem($msg);
  121. $winform = $win->GetWindow("hand", "&nbsp;", false);
  122. $win->Display(DEDEMEMBER."/templets/win_templet.htm");
  123. }
  124. ?>