線上書籍

Home

[1032]PHP入門

<?php // 啟用 session session_start(); /*----引入檔案----*/ require_once "config.php"; require_once "function.php"; /*----整理傳進來的變數或變數初始值----*/ $op=isset($_REQUEST['op'])?$_REQUEST['op']:""; $sn=isset($_REQUEST['sn'])?intval($_REQUEST['sn']):""; $error_msg=$main=""; /*----流程控制----*/ switch ($op) { case 'clear': session_destroy(); header("location:post.php"); break; case 'passwd_error': $main=news_form($sn); $error_msg=error_msg("密碼錯誤!!請檢查密碼是否正確!"); break; case 'db_error': $error_msg=error_msg("資料庫連線錯誤!!請檢查資料庫帳號、密碼是否正確!"); break; case 'save': save_news(); header("location:index.php"); exit; break; case 'update': save_news($sn); header("location:index.php?op=view&sn={$sn}"); exit; break; case 'modify': $main=news_form($sn); break; default: $main=news_form(); break; } /*----輸出----*/ show_page('post_tpl'); /*----所有函數----*/ //新聞編輯表單 function news_form($sn=""){ if($sn){ link_db(); //讀取eznews資料表所有欄位,並指定某一筆特定資料 $sql="select * from eznews where sn='$sn'"; //傳回值存到 $result 以供抓取資料用 $result=mysql_query($sql) or die("{$sql}<br>".mysql_error()); $news=mysql_fetch_assoc($result); // foreach ($news as $k => $v) { // $$k=$v; // } $news_title=$news['news_title']; $news_content=$news['news_content']; $ip=$news['ip']; $author=$news['author']; $post_time=$news['post_time']; $next_op="update"; }else{ $news_title=isset($_SESSION['news_title'])?$_SESSION['news_title']:""; $news_content=isset($_SESSION['news_content'])?$_SESSION['news_content']:""; $ip=$_SERVER['REMOTE_ADDR']; $author=isset($_SESSION['author'])?$_SESSION['author']:""; $post_time=isset($_SESSION['post_time'])?$_SESSION['post_time']:date("Y-m-d H:i:s"); $next_op="save"; } $main=<<<form <form action="post.php" method="post" role="form"> <div class="row"> <div class="col-md-5"> <div class="form-group"> <input type="text" name="news_title" placeholder="請輸入新聞標題" class="form-control" value="$news_title"> </div> </div> <div class="col-md-3"> <div class="form-group"> <label class="radio-inline"> <input type="radio" name="status" value="">正常 </label> <label class="radio-inline"> <input type="radio" name="status" value="置頂">置頂 </label> <label class="radio-inline"> <input type="radio" name="status" value="高亮">高亮 </label> </div> </div> <div class="col-md-2"> <div class="form-group"> <input type="text" name="post_time" id="datetimepicker" placeholder="請輸入發布日期" class="form-control" value="$post_time"> </div> </div> <div class="col-md-2"> <div class="form-group"> <input type="text" name="author" placeholder="請輸入發布者" class="form-control" value="$author"> </div> </div> </div> <div class="form-group"> <textarea id="summernote" name="news_content" style="height:300px;" placeholder="請輸入新聞內容" class="form-control">$news_content</textarea> </div> <div class="row"> <div class="col-md-3"> <select name="cate_sn" class="form-control"> <option value="">請選擇分類</option> </select> </div> <div class="col-md-3"> <input type="text" name="cate_title" class="form-control" placeholder="請輸入新分類"> </div> <div class="col-md-3"> <div class="form-group"> <input type="password" name="password" class="form-control" placeholder="請輸入密碼"> </div> </div> <div class="col-md-3"> <input type="hidden" name="ip" value="$ip"> <input type="hidden" name="sn" value="$sn"> <input type="hidden" name="op" value="$next_op"> <a href="post.php?op=clear" class="btn btn-danger">清除</a> <input type="submit" value="儲存" class="btn btn-info"> </div> </div> </form> form; return $main; } //儲存新聞 function save_news($sn=""){ //過濾外面傳來的變數 $op=isset($_POST['op'])?$_POST['op']:""; $password=isset($_POST['password'])?$_POST['password']:""; $news_title=isset($_POST['news_title'])?check_input($_POST['news_title']):""; $news_content=isset($_POST['news_content'])?check_input($_POST['news_content']):""; $author=isset($_POST['author'])?check_input($_POST['author']):""; $ip=isset($_POST['ip'])?check_input($_POST['ip']):""; $post_time=isset($_POST['post_time'])?check_input($_POST['post_time']):""; $status=isset($_POST['status'])?check_input($_POST['status']):""; $cate_title=isset($_POST['cate_title'])?check_input($_POST['cate_title']):""; $cate_sn=isset($_POST['cate_sn'])?intval($_POST['cate_sn']):""; //接收使用者輸入密碼,失敗轉回發布頁 if(empty($password) or $password!=_POST_PASSWD){ // 產生 cookie // setcookie('news_title',$news_title); // setcookie('news_content',$news_content); // 產生 session,以記住剛剛使用者輸入的資料,避免需要重打 $_SESSION['news_title']=$news_title; $_SESSION['news_content']=$news_content; $_SESSION['author']=$author; $_SESSION['status']=$status; $_SESSION['cate_sn']=$cate_sn; //轉回編輯頁面,並用 get 方式,傳遞 $op 以便顯示密碼有誤的訊息 header("location:{$_SERVER['PHP_SELF']}?op=passwd_error"); exit; }else{ // nl2br()將換行符號轉換為<br>標籤 //$news_content=nl2br($news_content); // 發布正確,剛剛輸入的內容無需在記住,因此清空之。 session_destroy(); } link_db(); //新增分類 if(empty($cate_sn) and !empty($cate_title)){ $sql="insert into eznews_cate (cate_title) values('$cate_title')"; mysql_query($sql) or die($sql."<br>".mysql_error()); $cate_sn=mysql_insert_id(); }elseif(!empty($cate_sn) and !empty($cate_title)){ //修改分類 $sql="update eznews_cate cate_title='$cate_title' where cate_sn='$cate_sn'"; mysql_query($sql) or die($sql."<br>".mysql_error()); } //存到資料庫 if($sn){ $sql="update eznews set cate_sn='$cate_sn', news_title='$news_title', news_content='$news_content', ip='$ip', author='$author', post_time='$post_time', status='$status' where sn='$sn'"; }else{ $sql="insert into eznews (cate_sn,news_title, news_content, ip, author, post_time,status) values('$cate_sn','$news_title', '$news_content', '$ip', '$author', '$post_time', '$status')"; } mysql_query($sql) or die($sql."<br>".mysql_error()); } //替特殊符號加入反斜線 function check_input($value){ if (!get_magic_quotes_gpc()){ $value = addslashes($value); } return $value; } ?>