372 lines
18 KiB
PHP
Executable File
372 lines
18 KiB
PHP
Executable File
<?php
|
|
|
|
/**
|
|
* [Discuz!] (C)2001-2099 Comsenz Inc.
|
|
* This is NOT a freeware, use is subject to license terms
|
|
*
|
|
* $Id: admincp_block.php 29236 2012-03-30 05:34:47Z chenmengshu $
|
|
*/
|
|
|
|
if(!defined('IN_DISCUZ') || !defined('IN_ADMINCP')) {
|
|
exit('Access Denied');
|
|
}
|
|
|
|
cpheader();
|
|
$operation = in_array($operation, array('jscall', 'list', 'perm')) ? $operation : 'list';
|
|
|
|
shownav('portal', 'block');
|
|
loadcache('blockclass');
|
|
|
|
if($operation=='perm') {
|
|
$bid = intval($_GET['bid']);
|
|
if(!submitcheck('permsubmit')) {
|
|
loadcache('diytemplatename');
|
|
$block = C::t('common_block')->fetch($bid);
|
|
shownav('portal', 'block', 'block_perm');
|
|
showsubmenu(cplang('block_perm_edit').' - '.($block['name'] ? $block['name'] : cplang('block_name_null')));
|
|
showtips('block_perm_tips');
|
|
showformheader("block&operation=perm&bid=$bid");
|
|
|
|
$inheritance_checked = !$block['notinherited'] ? 'checked' : '';
|
|
showtableheader('<label><input class="checkbox" type="checkbox" name="inheritance" value="1" '.$inheritance_checked.'/>'.cplang('block_perm_inheritance').'</label>', 'fixpadding');
|
|
|
|
showsubtitle(array('', 'username',
|
|
'<input class="checkbox" type="checkbox" name="chkallmanage" onclick="checkAll(\'prefix\', this.form, \'allowmanage\', \'chkallmanage\')" id="chkallmanage" /><label for="chkallmanage">'.cplang('block_perm_manage').'</label>',
|
|
'<input class="checkbox" type="checkbox" name="chkallrecommend" onclick="checkAll(\'prefix\', this.form, \'allowrecommend\', \'chkallrecommend\')" id="chkallrecommend" /><label for="chkallrecommend">'.cplang('block_perm_recommend').'</label>',
|
|
'<input class="checkbox" type="checkbox" name="chkallneedverify" onclick="checkAll(\'prefix\', this.form, \'needverify\', \'chkallneedverify\')" id="chkallneedverify" /><label for="chkallneedverify">'.cplang('block_perm_needverify').'</label>',
|
|
'block_perm_inherited'
|
|
));
|
|
|
|
$block_per = C::t('common_block_permission')->fetch_all_by_bid($bid);
|
|
$members = C::t('common_member')->fetch_all(array_keys($block_per));
|
|
$line = '−';
|
|
foreach($block_per as $uid => $value) {
|
|
if(!empty($value['inheritedtplname'])) {
|
|
showtablerow('', array('class="td25"'), array(
|
|
"",
|
|
"{$members[$uid]['username']}",
|
|
$value['allowmanage'] ? '√' : $line,
|
|
$value['allowrecommend'] ? '√' : $line,
|
|
$value['needverify'] ? '√' : $line,
|
|
'<a href="'.ADMINSCRIPT.'?action=diytemplate&operation=perm&targettplname='.$value['inheritedtplname'].'">'.$_G['cache']['diytemplatename'][$value['inheritedtplname']].'</a>',
|
|
));
|
|
} else {
|
|
showtablerow('', array('class="td25"'), array(
|
|
"<input type=\"checkbox\" class=\"checkbox\" name=\"delete[$uid]\" value=\"$uid\" />
|
|
<input type=\"hidden\" name=\"perm[$uid][allowmanage]\" value=\"{$value['allowmanage']}\" />
|
|
<input type=\"hidden\" name=\"perm[$uid][allowrecommend]\" value=\"{$value['allowrecommend']}\" />
|
|
<input type=\"hidden\" name=\"perm[$uid][needverify]\" value=\"{$value['needverify']}\" />",
|
|
"{$members[$uid]['username']}",
|
|
"<input type=\"checkbox\" class=\"checkbox\" name=\"allowmanage[$uid]\" value=\"1\" ".($value['allowmanage'] ? 'checked' : '').' />',
|
|
"<input type=\"checkbox\" class=\"checkbox\" name=\"allowrecommend[$uid]\" value=\"1\" ".($value['allowrecommend'] ? 'checked' : '').' />',
|
|
"<input type=\"checkbox\" class=\"checkbox\" name=\"needverify[$uid]\" value=\"1\" ".($value['needverify'] ? 'checked' : '').' />',
|
|
$line,
|
|
));
|
|
}
|
|
}
|
|
showtablerow('', array('class="td25"'), array(
|
|
cplang('add_new'),
|
|
'<input type="text" class="txt" name="newuser" value="" size="20" />',
|
|
'<input type="checkbox" class="checkbox" name="newallowmanage" value="1" />',
|
|
'<input type="checkbox" class="checkbox" name="newallowrecommend" value="1" />',
|
|
'<input type="checkbox" class="checkbox" name="newneedverify" value="1" />',
|
|
'',
|
|
));
|
|
|
|
showsubmit('permsubmit', 'submit', 'del');
|
|
showtablefooter();
|
|
showformfooter();
|
|
} else {
|
|
|
|
if(!($block = C::t('common_block')->fetch($bid))) {
|
|
cpmsg('block_not_exists');
|
|
}
|
|
|
|
$users = array();
|
|
if(is_array($_GET['perm'])) {
|
|
foreach($_GET['perm'] as $uid => $value) {
|
|
$user = array();
|
|
if(empty($_GET['delete']) || !in_array($uid, $_GET['delete'])) {
|
|
$user = array();
|
|
$user['allowmanage'] = $_GET['allowmanage'][$uid] ? 1 : 0;
|
|
$user['allowrecommend'] = $_GET['allowrecommend'][$uid] ? 1 : 0;
|
|
$user['needverify'] = $_GET['needverify'][$uid] ? 1 : 0;
|
|
if($value['allowmanage'] != $user['allowmanage'] || $value['allowrecommend'] != $user['allowrecommend'] || $value['needverify'] != $user['needverify'] ) {
|
|
$user['uid'] = intval($uid);
|
|
$users[] = $user;
|
|
}
|
|
}
|
|
}
|
|
}
|
|
if(!empty($_GET['newuser'])) {
|
|
$uid = C::t('common_member')->fetch_uid_by_username($_GET['newuser']);
|
|
if($uid) {
|
|
$user['uid'] = $uid;
|
|
$user['allowmanage'] = $_GET['newallowmanage'] ? 1 : 0;
|
|
$user['allowrecommend'] = $_GET['newallowrecommend'] ? 1 : 0;
|
|
$user['needverify'] = $_GET['newneedverify'] ? 1 : 0;
|
|
$users[$user['uid']] = $user;
|
|
} else {
|
|
cpmsg_error($_GET['newuser'].cplang('block_has_no_allowauthorizedblock'));
|
|
}
|
|
}
|
|
|
|
require_once libfile('class/blockpermission');
|
|
$blockpermsission = & block_permission::instance();
|
|
if(!empty($users)) {
|
|
$blockpermsission->add_users_perm($bid, $users);
|
|
}
|
|
|
|
if(!empty($_GET['delete'])) {
|
|
$blockpermsission->delete_users_perm($bid, $_GET['delete']);
|
|
}
|
|
|
|
$notinherited = !$_POST['inheritance'] ? '1' : '0';
|
|
if($notinherited != $block['notinherited']) {
|
|
if($notinherited) {
|
|
$blockpermsission->delete_inherited_perm_by_bid($bid);
|
|
} else {
|
|
$blockpermsission->remake_inherited_perm($bid);
|
|
}
|
|
C::t('common_block')->update($bid, array('notinherited' => $notinherited));
|
|
}
|
|
|
|
cpmsg('block_perm_update_succeed', "action=block&operation=perm&bid=$bid", 'succeed');
|
|
}
|
|
|
|
} else {
|
|
|
|
if(submitcheck('deletesubmit')) {
|
|
|
|
if($_POST['ids']) {
|
|
C::t('common_block_item')->delete_by_bid($_POST['ids']);
|
|
C::t('common_block')->delete($_POST['ids']);
|
|
C::t('common_block_permission')->delete_by_bid_uid_inheritedtplname($_POST['ids']);
|
|
cpmsg('block_delete_succeed', 'action=block&operation=jscall', 'succeed');
|
|
} else {
|
|
cpmsg('block_choose_at_least_one_block', 'action=block&operation=jscall', 'error');
|
|
}
|
|
|
|
} elseif(submitcheck('clearsubmit')) {
|
|
|
|
include_once libfile('function/block');
|
|
block_clear();
|
|
cpmsg('block_clear_unused_succeed', 'action=block', 'succeed');
|
|
|
|
} else {
|
|
|
|
loadcache(array('diytemplatename'));
|
|
$searchctrl = '<span style="float: right; padding-right: 40px;">'
|
|
.'<a href="javascript:;" onclick="$(\'tb_search\').style.display=\'\';$(\'a_search_show\').style.display=\'none\';$(\'a_search_hide\').style.display=\'\';" id="a_search_show" style="display:none">'.cplang('show_search').'</a>'
|
|
.'<a href="javascript:;" onclick="$(\'tb_search\').style.display=\'none\';$(\'a_search_show\').style.display=\'\';$(\'a_search_hide\').style.display=\'none\';" id="a_search_hide">'.cplang('hide_search').'</a>'
|
|
.'</span>';
|
|
showsubmenu('block', array(
|
|
array('block_list', 'block', $operation=='list'),
|
|
array('block_jscall', 'block&operation=jscall', $operation=='jscall')
|
|
), $searchctrl);
|
|
|
|
$mpurl = ADMINSCRIPT.'?action=block&operation='.$operation;
|
|
|
|
$intkeys = array('bid');
|
|
$strkeys = array('blockclass');
|
|
$strkeys[] = 'targettplname';
|
|
$randkeys = array();
|
|
$likekeys = array('name');
|
|
$results = getwheres($intkeys, $strkeys, $randkeys, $likekeys);
|
|
foreach($likekeys as $k) {
|
|
$_GET[$k] = dhtmlspecialchars($_GET[$k]);
|
|
}
|
|
$wherearr = $results['wherearr'];
|
|
$mpurl .= '&'.implode('&', $results['urls']);
|
|
|
|
$wherearr[] = $operation=='jscall' ? "blocktype='1'" : "blocktype='0'";
|
|
if($_GET['permname']) {
|
|
$bids = '';
|
|
$uid = ($uid = C::t('common_member')->fetch_uid_by_username($_GET['permname'])) ? $uid : C::t('common_member_archive')->fetch_uid_by_username($_GET['permname']);
|
|
if($uid) {
|
|
$bids = array_keys(C::t('common_block_permission')->fetch_all_by_uid($uid));
|
|
}
|
|
if(($bids = dimplode($bids))) {
|
|
$wherearr[] = 'bid IN ('.$bids.')';
|
|
} else {
|
|
cpmsg_error($_GET['permname'].cplang('block_the_username_has_not_block'));
|
|
}
|
|
$mpurl .= '&permname='.$_GET['permname'];
|
|
}
|
|
|
|
$wheresql = empty($wherearr)?'1':implode(' AND ', $wherearr);
|
|
$wheresql = str_replace(array('bid', 'blockclass', ' name', 'blocktype', 'targettplname'), array('b.bid', 'b.blockclass', ' b.name', 'b.blocktype', 'tb.targettplname'), $wheresql);
|
|
|
|
$orders = getorders(array('bid', 'dateline'), 'bid');
|
|
$ordersql = $orders['sql'];
|
|
if($orders['urls']) $mpurl .= '&'.implode('&', $orders['urls']);
|
|
$orderby = array($_GET['orderby']=>' selected');
|
|
$ordersc = array($_GET['ordersc']=>' selected');
|
|
|
|
$perpage = empty($_GET['perpage'])?0:intval($_GET['perpage']);
|
|
if(!in_array($perpage, array(10,20,50,100))) $perpage = 20;
|
|
$perpages = array($perpage=>' selected');
|
|
$mpurl .= '&perpage='.$perpage;
|
|
|
|
$searchlang = array();
|
|
$keys = array('search', 'likesupport', 'lengthabove1', 'resultsort', 'defaultsort', 'orderdesc', 'orderasc', 'perpage_10', 'perpage_20', 'perpage_50', 'perpage_100',
|
|
'block_dateline', 'block_id', 'block_name', 'block_blockclass', 'block_add_jscall', 'block_choose_blockclass_to_add_jscall', 'block_diytemplate', 'block_permname', 'block_permname_tips');
|
|
foreach ($keys as $key) {
|
|
$searchlang[$key] = cplang($key);
|
|
}
|
|
$diytemplatename_sel = '<select name="targettplname" id="targettplname">';
|
|
$diytemplatename_sel .= '<option value="">'.cplang('diytemplate_name').'</option>';
|
|
foreach($_G['cache']['diytemplatename'] as $key=>$value) {
|
|
$selected = ($key == $_GET['targettplname'] ? ' selected' : '');
|
|
$diytemplatename_sel .= "<option value=\"$key\"$selected>$value</option>";
|
|
}
|
|
$diytemplatename_sel .= '</select>';
|
|
$blockclass_sel = '<select name="blockclass" id="blockclass">';
|
|
$blockclass_sel .= '<option value="">'.cplang('blockstyle_blockclass_sel').'</option>';
|
|
foreach($_G['cache']['blockclass'] as $key=>$value) {
|
|
foreach($value['subs'] as $subkey=>$subvalue) {
|
|
$selected = ($subkey == $_GET['blockclass'] ? ' selected' : '');
|
|
$blockclass_sel .= "<option value=\"$subkey\"$selected>{$subvalue['name']}</option>";
|
|
}
|
|
}
|
|
$blockclass_sel .= '</select>';
|
|
$addjscall = $operation == 'jscall' ? '<input type="button" class="btn" onclick="addjscall()" value="'.$searchlang['block_add_jscall'].'" />' : '';
|
|
$firstrow = "<th>{$searchlang['block_diytemplate']}</th><td>$diytemplatename_sel</td><th>{$searchlang['block_blockclass']}</th><td colspan=\"2\">$blockclass_sel $addjscall</td>";
|
|
$adminscript = ADMINSCRIPT;
|
|
echo <<<SEARCH
|
|
<script>disallowfloat = '{$_G['setting']['disallowfloat']}';</script>
|
|
<script type="text/javascript" src="{$_G['setting']['jspath']}portal.js?{$_G['style']['verhash']}"></script>
|
|
<div id="ajaxwaitid"></div>
|
|
<form method="get" autocomplete="off" action="$adminscript" id="tb_search">
|
|
<table cellspacing="3" cellpadding="3" class="tb tb2">
|
|
<tr>
|
|
$firstrow
|
|
</tr>
|
|
<tr>
|
|
<th>{$searchlang['block_id']}</th><td><input type="text" class="txt" name="bid" value="{$_GET['bid']}"></td>
|
|
<th>{$searchlang['block_name']}*</th><td><input type="text" class="txt" name="name" value="{$_GET['name']}">{$searchlang['lengthabove1']} *{$searchlang['likesupport']}</td>
|
|
</tr>
|
|
<tr>
|
|
<th>{$searchlang['resultsort']}</th>
|
|
<td>
|
|
<select name="orderby">
|
|
<option value="">{$searchlang['defaultsort']}</option>
|
|
<option value="dateline"{$orderby['dateline']}>{$searchlang['block_dateline']}</option>
|
|
</select>
|
|
<select name="ordersc">
|
|
<option value="desc"{$ordersc['desc']}>{$searchlang['orderdesc']}</option>
|
|
<option value="asc"{$ordersc['asc']}>{$searchlang['orderasc']}</option>
|
|
</select>
|
|
<select name="perpage">
|
|
<option value="10"{$perpages[10]}>{$searchlang['perpage_10']}</option>
|
|
<option value="20"{$perpages[20]}>{$searchlang['perpage_20']}</option>
|
|
<option value="50"{$perpages[50]}>{$searchlang['perpage_50']}</option>
|
|
<option value="100"{$perpages[100]}>{$searchlang['perpage_100']}</option>
|
|
</select>
|
|
<input type="hidden" name="action" value="block">
|
|
<input type="hidden" name="operation" value="$operation">
|
|
</td>
|
|
<th>{$searchlang['block_permname']}</th><td><input type="text" class="txt" name="permname" value="{$_GET['permname']}">{$searchlang['block_permname_tips']}
|
|
<input type="submit" name="searchsubmit" value="{$searchlang['search']}" class="btn"></td>
|
|
</tr>
|
|
</table>
|
|
</form>
|
|
<script type="text/javascript">
|
|
function addjscall() {
|
|
var blockclass = $('blockclass').value;
|
|
if(blockclass) {
|
|
showWindow('blockclass', 'portal.php?mod=portalcp&ac=block&op=block&blocktype=1&from=cp&classname=' + blockclass);
|
|
} else {
|
|
alert('{$searchlang['block_choose_blockclass_to_add_jscall']}');
|
|
}
|
|
}
|
|
</script>
|
|
SEARCH;
|
|
|
|
$start = ($page-1)*$perpage;
|
|
|
|
showformheader('block&operation='.$operation);
|
|
showtableheader();
|
|
|
|
$list = $diypage = array();
|
|
include_once libfile('function/block');
|
|
if($operation=='jscall') {
|
|
showsubtitle(array('', 'block_name', 'block_script', 'block_style', 'block_dateline', 'block_page', 'operation'));
|
|
$multipage = '';
|
|
if(($count = C::t('common_block')->count_by_admincpwhere($wheresql))) {
|
|
foreach(C::t('common_block')->fetch_all_by_admincpwhere($wheresql, $ordersql, $start, $perpage) as $value) {
|
|
if($value['targettplname']) {
|
|
$diyurl = block_getdiyurl($value['targettplname']);
|
|
$diyurl = $diyurl['url'];
|
|
$tplname = isset($_G['cache']['diytemplatename'][$value['targettplname']]) ? $_G['cache']['diytemplatename'][$value['targettplname']] : $value['targettplname'];
|
|
$diypage[$value['bid']][$value['targettplname']] = $diyurl ? '<a href="'.$diyurl.'" target="_blank">'.$tplname.'</a>' : $tplname;
|
|
}
|
|
$list[$value['bid']] = $value;
|
|
}
|
|
if($list) {
|
|
foreach($list as $bid => $value) {
|
|
$inpage = empty($diypage[$bid]) ? cplang('block_page_nopage') : implode('<br/>' ,$diypage[$bid]);
|
|
$theclass = block_getclass($value['blockclass'], true);
|
|
showtablerow('', array('class="td25"'), array(
|
|
"<input type=\"checkbox\" class=\"checkbox\" name=\"ids[]\" value=\"{$value['bid']}\">",
|
|
!empty($value['name']) ? $value['name'] : cplang('block_name_null'),
|
|
$theclass['script'][$value['script']],
|
|
$value['styleid'] ? $theclass['style'][$value['styleid']]['name'] : lang('portalcp', 'blockstyle_diy'),
|
|
!empty($value['dateline']) ? dgmdate($value['dateline']) : cplang('block_dateline_null'),
|
|
$inpage,
|
|
"<a href=\"portal.php?mod=portalcp&ac=block&op=block&bid={$value['bid']}&blocktype=1&from=cp\" target=\"_blank\" onclick=\"showWindow('showblock',this.href);return false;\">".cplang('block_setting')."</a>  ".
|
|
"<a href=\"portal.php?mod=portalcp&ac=block&op=getblock&forceupdate=1&inajax=1&bid={$value['bid']}&from=cp\" onclick=\"ajaxget(this.href,'','','','',function(){location.reload();});return false;\">".cplang('block_update')."</a>  ".
|
|
"<a href=\"portal.php?mod=portalcp&ac=block&op=data&bid={$value['bid']}&blocktype=1&from=cp\" target=\"_blank\" onclick=\"showWindow('showblock',this.href);return false;\">".cplang('block_data')."</a>  ".
|
|
"<a href=\"javascript:;\" onclick=\"prompt('".cplang('block_copycode_message')."', '<!--{block/{$value['bid']}}-->')\">".cplang('block_copycode_inner')."</a>  ".
|
|
"<a href=\"javascript:;\" onclick=\"prompt('".cplang('block_copycode_jsmessage')."', '<script type="text/javascript" src="{$_G['siteurl']}api.php?mod=js&bid={$value['bid']}"></script>')\">".cplang('block_copycode_outer')."</a> <a href=\"".ADMINSCRIPT."?action=block&operation=perm&bid={$value['bid']}\">".cplang('portalcategory_perm').'</a>'
|
|
));
|
|
}
|
|
}
|
|
$multipage = multi($count, $perpage, $page, $mpurl);
|
|
}
|
|
|
|
showsubmit('', '', '', '<input type="checkbox" name="chkall" id="chkall" class="checkbox" onclick="checkAll(\'prefix\', this.form, \'ids\')" /><label for="chkall">'.cplang('select_all').'</label> <input type="submit" class="btn" name="deletesubmit" value="'.cplang('block_delete').'" />', $multipage);
|
|
showtablefooter();
|
|
showformfooter();
|
|
|
|
} else {
|
|
|
|
showsubtitle(array('block_name', 'block_script', 'block_style', 'block_dateline', 'block_page', 'operation'));
|
|
$multipage = '';
|
|
if(($count = C::t('common_block')->count_by_admincpwhere($wheresql))) {
|
|
foreach(C::t('common_block')->fetch_all_by_admincpwhere($wheresql, $ordersql, $start, $perpage) as $value) {
|
|
if($value['targettplname']) {
|
|
$diyurl = block_getdiyurl($value['targettplname']);
|
|
$diyurl = $diyurl['url'];
|
|
$tplname = isset($_G['cache']['diytemplatename'][$value['targettplname']]) ? $_G['cache']['diytemplatename'][$value['targettplname']] : $value['targettplname'];
|
|
$diypage[$value['bid']][$value['targettplname']] = $diyurl ? '<a href="'.$diyurl.'" target="_blank">'.$tplname.'</a>' : $tplname;
|
|
}
|
|
$list[$value['bid']] = $value;
|
|
}
|
|
if($list) {
|
|
foreach($list as $bid => $value) {
|
|
$inpage = empty($diypage[$bid]) ? cplang('block_page_unused') : implode('<br/>' ,$diypage[$bid]);
|
|
$theclass = block_getclass($value['blockclass'], true);
|
|
showtablerow('', '', array(
|
|
$value['name'] ? $value['name'] : cplang('block_name_null'),
|
|
$theclass['script'][$value['script']],
|
|
$value['styleid'] ? $theclass['style'][$value['styleid']]['name'] : lang('portalcp', 'blockstyle_diy'),
|
|
!empty($value['dateline']) ? dgmdate($value['dateline']) : cplang('block_dateline_null'),
|
|
$inpage,
|
|
"<a href=\"portal.php?mod=portalcp&ac=block&op=block&bid={$value['bid']}&from=cp\" target=\"_blank\" onclick=\"showWindow('showblock',this.href);return false;\">".cplang('block_setting')."</a>  "
|
|
."<a href=\"portal.php?mod=portalcp&ac=block&op=data&bid={$value['bid']}&from=cp\" target=\"_blank\" onclick=\"showWindow('showblock',this.href);return false;\">".cplang('block_data')."</a>  "
|
|
.$diyop." <a href=\""
|
|
.ADMINSCRIPT."?action=block&operation=perm&bid={$value['bid']}\">".cplang('portalcategory_perm').'</a>'
|
|
));
|
|
}
|
|
}
|
|
$multipage = multi($count, $perpage, $page, $mpurl);
|
|
}
|
|
|
|
showsubmit('', '', '', '<input type="submit" class="btn" name="clearsubmit" value="'.cplang('block_clear_unused').'" />', $multipage);
|
|
showtablefooter();
|
|
showformfooter();
|
|
}
|
|
}
|
|
}
|
|
?>
|