4-1
admin/main.php
$xoopsOption [ 'template_main' ] = "snews_adm_main.tpl" ; |
include_once "header.php" ; |
include_once "../function.php" ; |
include_once $GLOBALS [ 'xoops' ]->path( '/modules/system/include/functions.php' ); |
$op = system_CleanVars( $_REQUEST , 'op' , '' , 'string' ); |
$sn = system_CleanVars( $_REQUEST , 'sn' , 0, 'int' ); |
header( "location: ../index.php?sn={$sn}" ); |
header( "location: ../index.php?sn={$sn}" ); |
$xoopsTpl ->assign( 'op' , $op ); |
include_once 'footer.php' ; |
$xoopsTpl ->assign( 'content' , $main ); |
global $xoopsTpl , $xoopsUser , $TadUpFiles , $xoopsDB ; |
$tbl = $xoopsDB ->prefix( 'snews' ); |
$sql = "SELECT * FROM `$tbl` WHERE `sn` = '{$sn}'" ; |
$result = $xoopsDB ->query( $sql ) or web_error( $sql ); |
$snews = $xoopsDB ->fetchArray( $result ); |
include_once XOOPS_ROOT_PATH . "/class/xoopsformloader.php" ; |
$form = new XoopsThemeForm( '編輯文章' , 'myForm' , 'main.php' , 'post' , true); |
$select = new XoopsFormRadio( '類別或主題' , 'topic_sn' , $snews [ 'topic_sn' ]); |
$select ->addOptionArray( $options ); |
$form ->addElement( $select ); |
$form ->addElement( new XoopsFormText( '文章標題' , 'title' , 60, 100, $snews [ 'title' ]), true); |
include_once XOOPS_ROOT_PATH . "/modules/tadtools/ck.php" ; |
$ck = new CKEditor( "snews" , "content" , $snews [ 'content' ]); |
$form ->addElement( new XoopsFormLabel( '文章內容' , $editor )); |
$form ->addElement( new XoopsFormRadioYN( '精選' , 'focus' , $snews [ 'focus' ])); |
$username = ( $sn ) ? $snews [ 'username' ] : $xoopsUser ->name(); |
$form ->addElement( new XoopsFormText( '作者' , 'username' , 60, 100, $username )); |
$form ->setExtra( "enctype='multipart/form-data'" ); |
$TadUpFiles ->set_col( 'sn' , $sn ); |
$upform = $TadUpFiles ->upform(true, 'pic' , null, true, '.jpg,.png' ); |
$form ->addElement( new XoopsFormLabel( '封面圖' , $upform )); |
$TadUpFiles ->set_col( 'snews' , $sn ); |
$upform = $TadUpFiles ->upform(true, 'snews' ); |
$form ->addElement( new XoopsFormLabel( '附檔' , $upform )); |
$uid = $_SESSION [ 'snewsAdmin' ] ? $snews [ 'uid' ] : $xoopsUser ->uid(); |
$uid = $xoopsUser ->uid(); |
$form ->addElement( new XoopsFormHidden( 'uid' , $uid )); |
$form ->addElement( new XoopsFormHidden( 'op' , 'snews_update' )); |
$form ->addElement( new XoopsFormHidden( 'sn' , $sn )); |
$form ->addElement( new XoopsFormHidden( 'op' , 'snews_insert' )); |
$form ->addElement( new XoopsFormButton( '' , '' , '儲存' , 'submit' )); |
$snews_form = $form ->render(); |
$xoopsTpl ->assign( 'snews_form' , $snews_form ); |
global $xoopsDB , $TadUpFiles ; |
if (! $GLOBALS [ 'xoopsSecurity' ]->check()) { |
$error = implode( "<br>" , $GLOBALS [ 'xoopsSecurity' ]->getErrors()); |
throw new Exception( $error ); |
$myts = MyTextSanitizer::getInstance(); |
foreach ( $_POST as $key => $value ) { |
$ $key = $myts -> addSlashes ( $value ); |
$tbl = $xoopsDB ->prefix( 'snews' ); |
$sql = "insert into `$tbl` (`focus`, `topic_sn`, `sort`, `title`, `content`, `username`, `create_time`, `update_time`, `uid`) values('{$focus}', '{$topic_sn}', '{$sort}', '{$title}', '{$content}', '{$username}', now(), now(), '{$uid}')" ; |
$xoopsDB ->query( $sql ) or web_error( $sql ); |
$sn = $xoopsDB ->getInsertId(); |
$TadUpFiles ->set_col( 'sn' , $sn ); |
$TadUpFiles ->upload_file( 'pic' , 1920, 640, null, $title , true, false, null, 'png;jpg' ); |
$TadUpFiles ->set_col( 'snews' , $sn ); |
$TadUpFiles ->upload_file( 'snews' , 1920, 640, null, null, true); |
function snews_update( $sn ) |
global $xoopsDB , $TadUpFiles ; |
if (! $GLOBALS [ 'xoopsSecurity' ]->check()) { |
$error = implode( "<br>" , $GLOBALS [ 'xoopsSecurity' ]->getErrors()); |
throw new Exception( $error ); |
$myts = MyTextSanitizer::getInstance(); |
foreach ( $_POST as $key => $value ) { |
$ $key = $myts -> addSlashes ( $value ); |
$tbl = $xoopsDB ->prefix( 'snews' ); |
$sql = "update `$tbl` set `focus`='{$focus}', `topic_sn`='{$topic_sn}', `title`='{$title}', `content`='{$content}', `username`='{$username}',`update_time`= now(), `uid`='{$uid}' where `sn`='{$sn}'" ; |
$xoopsDB ->queryF( $sql ) or web_error( $sql ); |
$TadUpFiles ->set_col( 'sn' , $sn ); |
$TadUpFiles ->upload_file( 'pic' , 1920, 640, null, $title , true, false, null, 'png;jpg' ); |
$TadUpFiles ->set_col( 'snews' , $sn ); |
$TadUpFiles ->upload_file( 'snews' , 1920, 640, null, null, true); |