admincp_blog.php 13 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316
  1. <?php
  2. /**
  3. * [Discuz!] (C)2001-2099 Comsenz Inc.
  4. * This is NOT a freeware, use is subject to license terms
  5. *
  6. * $Id: admincp_blog.php 32130 2012-11-14 09:20:40Z zhengqingpeng $
  7. */
  8. if(!defined('IN_DISCUZ') || !defined('IN_ADMINCP')) {
  9. exit('Access Denied');
  10. }
  11. include_once libfile('function/portalcp');
  12. cpheader();
  13. $detail = $_GET['detail'];
  14. $uid = $_GET['uid'];
  15. $blogid = $_GET['blogid'];
  16. $users = $_GET['users'];
  17. $keywords = $_GET['keywords'];
  18. $lengthlimit = $_GET['lengthlimit'];
  19. $viewnum1 = $_GET['viewnum1'];
  20. $viewnum2 = $_GET['viewnum2'];
  21. $replynum1 = $_GET['replynum1'];
  22. $replynum2 = $_GET['replynum2'];
  23. $hot1 = $_GET['hot1'];
  24. $hot2 = $_GET['hot2'];
  25. $starttime = $_GET['starttime'];
  26. $endtime = $_GET['endtime'];
  27. $searchsubmit = $_GET['searchsubmit'];
  28. $blogids = $_GET['blogids'];
  29. $friend = $_GET['friend'];
  30. $ip = $_GET['ip'];
  31. $orderby = $_GET['orderby'];
  32. $ordersc = $_GET['ordersc'];
  33. $fromumanage = $_GET['fromumanage'] ? 1 : 0;
  34. $muticondition = '';
  35. $muticondition .= $uid ? '&uid='.$uid : '';
  36. $muticondition .= $blogid ? '&blogid='.$blogid : '';
  37. $muticondition .= $users ? '&users='.$users : '';
  38. $muticondition .= $keywords ? '&keywords='.$keywords : '';
  39. $muticondition .= $lengthlimit ? '&lengthlimit='.$lengthlimit : '';
  40. $muticondition .= $viewnum1 ? '&viewnum1='.$viewnum1 : '';
  41. $muticondition .= $viewnum2 ? '&viewnum2='.$viewnum2 : '';
  42. $muticondition .= $replynum1 ? '&replynum1='.$replynum1 : '';
  43. $muticondition .= $replynum2 ? '&replynum2='.$replynum2 : '';
  44. $muticondition .= $hot1 ? '&hot1='.$hot1 : '';
  45. $muticondition .= $hot2 ? '&hot2='.$hot2 : '';
  46. $muticondition .= $starttime ? '&starttime='.$starttime : '';
  47. $muticondition .= $endtime ? '&endtime='.$endtime : '';
  48. $muticondition .= $friend ? '&friend='.$friend : '';
  49. $muticondition .= $ip ? '&ip='.$ip : '';
  50. $muticondition .= $orderby ? '&orderby='.$orderby : '';
  51. $muticondition .= $ordersc ? '&ordersc='.$ordersc : '';
  52. $muticondition .= $fromumanage ? '&fromumanage='.$fromumanage : '';
  53. $muticondition .= $searchsubmit ? '&searchsubmit='.$searchsubmit : '';
  54. $muticondition .= $_GET['search'] ? '&search='.$_GET['search'] : '';
  55. $muticondition .= $detail ? '&detail='.$detail : '';
  56. if(!submitcheck('blogsubmit')) {
  57. if(empty($_GET['search'])) {
  58. $newlist = 1;
  59. $detail = 1;
  60. }
  61. if($fromumanage) {
  62. $starttime = !preg_match("/^(0|\d{4}\-\d{1,2}\-\d{1,2})$/", $starttime) ? '' : $starttime;
  63. $endtime = $_G['adminid'] == 3 || !preg_match("/^(0|\d{4}\-\d{1,2}\-\d{1,2})$/", $endtime) ? '' : $endtime;
  64. } else {
  65. $starttime = !preg_match("/^(0|\d{4}\-\d{1,2}\-\d{1,2})$/", $starttime) ? dgmdate(TIMESTAMP - 86400 * 7, 'Y-n-j') : $starttime;
  66. $endtime = $_G['adminid'] == 3 || !preg_match("/^(0|\d{4}\-\d{1,2}\-\d{1,2})$/", $endtime) ? dgmdate(TIMESTAMP, 'Y-n-j') : $endtime;
  67. }
  68. shownav('topic', 'nav_blog');
  69. showsubmenu('nav_blog', array(
  70. array('newlist', 'blog', !empty($newlist)),
  71. array('search', 'blog&search=true', empty($newlist)),
  72. ));
  73. empty($newlist) && showsubmenusteps('', array(
  74. array('blog_search', !$searchsubmit),
  75. array('nav_blog', $searchsubmit)
  76. ));
  77. if($muticondition) {
  78. showtips('blog_tips');
  79. }
  80. echo <<<EOT
  81. <script type="text/javascript" src="static/js/calendar.js"></script>
  82. <script type="text/JavaScript">
  83. function page(number) {
  84. $('blogforum').page.value=number;
  85. $('blogforum').searchsubmit.click();
  86. }
  87. </script>
  88. EOT;
  89. showtagheader('div', 'searchposts', !$searchsubmit && empty($newlist));
  90. showformheader("blog".(!empty($_GET['search']) ? '&search=true' : ''), '', 'blogforum');
  91. showhiddenfields(array('page' => $page, 'pp' => $_GET['pp'] ? $_GET['pp'] : $_GET['perpage']));
  92. showtableheader();
  93. showsetting('blog_search_detail', 'detail', $detail, 'radio');
  94. showsetting('blog_search_perpage', '', $_GET['perpage'], "<select name='perpage'><option value='20'>$lang[perpage_20]</option><option value='50'>$lang[perpage_50]</option><option value='100'>$lang[perpage_100]</option></select>");
  95. showsetting('resultsort', '', $orderby, "<select name='orderby'><option value=''>$lang[defaultsort]</option><option value='dateline'>$lang[forums_edit_extend_order_starttime]</option><option value='viewnum'>$lang[blog_search_view]</option><option value='replynum'>$lang[blog_search_reply]</option><option value='hot'>$lang[blog_search_hot]</option></select> ");
  96. showsetting('', '', $ordersc, "<select name='ordersc'><option value='desc'>$lang[orderdesc]</option><option value='asc'>$lang[orderasc]</option></select>", '', 0, '', '', '', true);
  97. showsetting('blog_search_uid', 'uid', $uid, 'text');
  98. showsetting('blog_search_blogid', 'blogid', $blogid, 'text');
  99. showsetting('blog_search_user', 'users', $users, 'text');
  100. showsetting('blog_search_keyword', 'keywords', $keywords, 'text');
  101. showsetting('blog_search_friend', '', $friend, "<select name='friend'><option value='0'>$lang[setting_home_privacy_alluser]</option><option value='1'>$lang[setting_home_privacy_friend]</option><option value='2'>$lang[setting_home_privacy_specified_friend]</option><option value='3'>$lang[setting_home_privacy_self]</option><option value='4'>$lang[setting_home_privacy_password]</option></select>");
  102. showsetting('blog_search_ip', 'ip', $ip, 'text');
  103. showsetting('blog_search_lengthlimit', 'lengthlimit', $lengthlimit, 'text');
  104. showsetting('blog_search_view', array('viewnum1', 'viewnum2'), array('', ''), 'range');
  105. showsetting('blog_search_reply', array('replynum1', 'replynum2'), array('', ''), 'range');
  106. showsetting('blog_search_hot', array('hot1', 'hot2'), array('', ''), 'range');
  107. showsetting('blog_search_time', array('starttime', 'endtime'), array($starttime, $endtime), 'daterange');
  108. echo '<input type="hidden" name="fromumanage" value="'.$fromumanage.'">';
  109. showsubmit('searchsubmit');
  110. showtablefooter();
  111. showformfooter();
  112. showtagfooter('div');
  113. } else {
  114. if($_GET['blogids']) {
  115. $blogids = authcode($_GET['blogids'], 'DECODE');
  116. $blogidsadd = $blogids ? explode(',', $blogids) : $_GET['delete'];
  117. include_once libfile('function/delete');
  118. $deletecount = count(deleteblogs($blogidsadd));
  119. $cpmsg = cplang('blog_succeed', array('deletecount' => $deletecount));
  120. } else {
  121. $blogs = $catids = array();
  122. $selectblogids = !empty($_GET['ids']) && is_array($_GET['ids']) ? $_GET['ids'] : array();
  123. if($selectblogids) {
  124. $query = C::t('home_blog')->fetch_all($selectblogids);
  125. foreach($query as $value) {
  126. $blogs[$value['blogid']] = $value;
  127. $catids[] = intval($value['catid']);
  128. }
  129. }
  130. if($blogs) {
  131. $selectblogids = array_keys($blogs);
  132. if($_POST['optype'] == 'delete') {
  133. include_once libfile('function/delete');
  134. $deletecount = count(deleteblogs($selectblogids));
  135. $cpmsg = cplang('blog_succeed', array('deletecount' => $deletecount));
  136. } elseif($_POST['optype'] == 'move') {
  137. $tocatid = intval($_POST['tocatid']);
  138. $catids[] = $tocatid;
  139. $catids = array_merge($catids);
  140. C::t('home_blog')->update($selectblogids, array('catid'=>$tocatid));
  141. foreach($catids as $catid) {
  142. $catid = intval($catid);
  143. $cnt = C::t('home_blog')->count_by_catid($catid);
  144. C::t('home_blog_category')->update($catid, array('num'=>$cnt));
  145. }
  146. $cpmsg = cplang('blog_move_succeed');
  147. } else {
  148. $cpmsg = cplang('blog_choose_at_least_one_operation');
  149. }
  150. } else {
  151. $cpmsg = cplang('blog_choose_at_least_one_blog');
  152. }
  153. }
  154. ?>
  155. <script type="text/JavaScript">alert('<?php echo $cpmsg;?>');parent.$('blogforum').searchsubmit.click();</script>
  156. <?php
  157. }
  158. if(submitcheck('searchsubmit', 1) || $newlist) {
  159. $blogids = $blogcount = '0';
  160. $sql = $error = '';
  161. $keywords = trim($keywords);
  162. $users = trim($users);
  163. $uids = array();
  164. if($blogid != '') {
  165. $blogid = explode(',', $blogid);
  166. }
  167. if($users != '') {
  168. $uids = C::t('common_member')->fetch_all_uid_by_username(array_map('trim', explode(',', $users)));
  169. if(!$uids) {
  170. $uids = array(-1);
  171. }
  172. }
  173. $uid = trim($uid, ', ');
  174. if($uid != '') {
  175. $uid = explode(',', $uid);
  176. if($uids && $uids[0] != -1) {
  177. $uids = array_intersect($uids, $uid);
  178. } else {
  179. $uids = $uid;
  180. }
  181. if(!$uids) {
  182. $uids = array(-1);
  183. }
  184. }
  185. if($starttime != '') {
  186. $starttime = strtotime($starttime);
  187. }
  188. if($_G['adminid'] == 1 && $endtime != dgmdate(TIMESTAMP, 'Y-n-j')) {
  189. if($endtime != '') {
  190. $endtime = strtotime($endtime);
  191. }
  192. } else {
  193. $endtime = TIMESTAMP;
  194. }
  195. if(($_G['adminid'] == 2 && $endtime - $starttime > 86400 * 16) || ($_G['adminid'] == 3 && $endtime - $starttime > 86400 * 8)) {
  196. $error = 'blog_mod_range_illegal';
  197. }
  198. if(!$error) {
  199. if($detail) {
  200. $pagetmp = $page;
  201. $_GET['perpage'] = intval($_GET['perpage']) < 1 ? 20 : intval($_GET['perpage']);
  202. $perpage = $_GET['pp'] ? $_GET['pp'] : $_GET['perpage'];
  203. do{
  204. $query = C::t('home_blog')->fetch_all_by_search(1, $blogid, $uids, $starttime, $endtime, $hot1, $hot2, $viewnum1, $viewnum2, $replynum1, $replynum2, $friend, $ip, $keywords, $lengthlimit, $orderby, $ordersc, (($pagetmp - 1) * $perpage), $perpage, null, null, null, null, false, array(0, 1));
  205. $pagetmp--;
  206. } while(!count($query) && $pagetmp);
  207. $blogs = '';
  208. foreach($query as $blog) {
  209. $blog['dateline'] = dgmdate($blog['dateline']);
  210. $blog['subject'] = cutstr($blog['subject'], 30);
  211. switch ($blog['friend']) {
  212. case '0':
  213. $privacy_name = $lang[setting_home_privacy_alluser];
  214. break;
  215. case '1':
  216. $privacy_name = $lang[setting_home_privacy_friend];
  217. break;
  218. case '2':
  219. $privacy_name = $lang[setting_home_privacy_specified_friend];
  220. break;
  221. case '3':
  222. $privacy_name = $lang[setting_home_privacy_self];
  223. break;
  224. case '4':
  225. $privacy_name = $lang[setting_home_privacy_password];
  226. break;
  227. default:
  228. $privacy_name = $lang[setting_home_privacy_alluser];
  229. }
  230. $blog['friend'] = $blog['friend'] ? " <a href=\"".ADMINSCRIPT."?action=blog&friend=$blog[friend]\">$privacy_name</a>" : $privacy_name;
  231. $blogs .= showtablerow('', '', array(
  232. "<input class=\"checkbox\" type=\"checkbox\" name=\"ids[]\" value=\"$blog[blogid]\" />",
  233. $blog['blogid'],
  234. "<a href=\"home.php?mod=space&uid=$blog[uid]\" target=\"_blank\">$blog[username]</a>",
  235. "<a href=\"home.php?mod=space&uid=$blog[uid]&do=blog&id=$blog[blogid]\" target=\"_blank\">$blog[subject]</a>",
  236. $blog['viewnum'],
  237. $blog['replynum'],
  238. $blog['hot'],
  239. $blog['dateline'],
  240. $blog['friend']
  241. ), TRUE);
  242. }
  243. $blogcount = C::t('home_blog')->count_all_by_search($blogid, $uids, $starttime, $endtime, $hot1, $hot2, $viewnum1, $viewnum2, $replynum1, $replynum2, $friend, $ip, $keywords, $lengthlimit, null, null, null, false, array(0, 1));
  244. $multi = multi($blogcount, $perpage, $page, ADMINSCRIPT."?action=blog".($perpage ? '&perpage='.$perpage : '').$muticondition);
  245. } else {
  246. $blogcount = 0;
  247. $query = C::t('home_blog')->fetch_all_by_search(2, $blogid, $uids, $starttime, $endtime, $hot1, $hot2, $viewnum1, $viewnum2, $replynum1, $replynum2, $friend, $ip, $keywords, $lengthlimit, null, null, 0, 0, null, null, null, null, false, array(0, 1));
  248. foreach($query as $blog) {
  249. $blogids .= ','.$blog['blogid'];
  250. $blogcount++;
  251. }
  252. $multi = '';
  253. }
  254. if(!$blogcount) {
  255. $error = 'blog_post_nonexistence';
  256. }
  257. }
  258. showtagheader('div', 'postlist', $searchsubmit || $newlist);
  259. showformheader('blog&frame=no', 'target="blogframe"');
  260. if(!$muticondition) {
  261. showtableheader(cplang('blog_new_result').' '.$blogcount, 'fixpadding');
  262. } else {
  263. showtableheader(cplang('blog_result').' '.$blogcount.(empty($newlist) ? ' <a href="###" onclick="$(\'searchposts\').style.display=\'\';$(\'postlist\').style.display=\'none\';$(\'blogforum\').pp.value=\'\';$(\'blogforum\').page.value=\'\';" class="act lightlink normal">'.cplang('research').'</a>' : ''), 'fixpadding');
  264. }
  265. if($error) {
  266. echo "<tr><td class=\"lineheight\" colspan=\"15\">$lang[$error]</td></tr>";
  267. } else {
  268. if($detail) {
  269. showsubtitle(array('', 'blogid', 'author', 'subject', 'view', 'reply', 'hot', 'time', 'privacy'));
  270. echo $blogs;
  271. $optypehtml = ''
  272. .'<input type="radio" name="optype" id="optype_delete" value="delete" class="radio" /><label for="optype_delete">'.cplang('delete').'</label>&nbsp;&nbsp;'
  273. ;
  274. $optypehtml .= '<input type="radio" name="optype" id="optype_move" value="move" class="radio" /><label for="optype_move">'.cplang('article_opmove').'</label> '
  275. .category_showselect('blog', 'tocatid', false)
  276. .'&nbsp;&nbsp;';
  277. showsubmit('', '', '', '<input type="checkbox" name="chkall" id="chkall" class="checkbox" onclick="checkAll(\'prefix\', this.form, \'ids\')" /><label for="chkall">'.cplang('select_all').'</label>&nbsp;&nbsp;'.$optypehtml.'<input type="submit" class="btn" name="blogsubmit" value="'.cplang('submit').'" />', $multi);
  278. } else {
  279. showhiddenfields(array('blogids' => authcode($blogids, 'ENCODE')));
  280. showsubmit('blogsubmit', 'delete', $detail ? 'del' : '', '', $multi);
  281. }
  282. }
  283. showtablefooter();
  284. showformfooter();
  285. echo '<iframe name="blogframe" style="display:none;"></iframe>';
  286. showtagfooter('div');
  287. }
  288. ?>