<?php
define('EmpireCMSAdmin','1');
require("../../../e/class/connect.php");
require("../../../e/class/functions.php");
require "../../../e/data/".LoadLang("pub/fun.php");
$link=db_connect();
$empire=new mysqlquery();
$editor=1;
//驗證用戶
$lur=is_login();
$logininid=(int)$lur['userid'];
$loginin=$lur['username'];
$loginrnd=$lur['rnd'];
$loginlevel=(int)$lur['groupid'];
$loginadminstyleid=(int)$lur['adminstyleid'];
//ehash
$ecms_hashur=hReturnEcmsHashStrAll();
//驗證權限
CheckLevel($logininid,$loginin,$classid,"link");

//------------------增加友情鏈接
function AddLink($add,$userid,$username){
	global $empire,$dbtbpre;
	if(!$add['lname']||!$add['lurl'])
	{printerror("EmptyLname","history.go(-1)");}
	//驗證權限
	CheckLevel($userid,$username,$classid,"link");
	$ltime=date("Y-m-d H:i:s");
	$add['lname']=hRepPostStr($add['lname'],1);
	$add['lpic']=hRepPostStr2(eDoRepPostComStr($add['lpic'],1));
	$add['lurl']=hRepPostStr2(eDoRepPostComStr($add['lurl'],1));
	$add['email']=hRepPostStr($add['email'],1);
	$add['onclick']=(int)$add['onclick'];
	$add['myorder']=(int)$add['myorder'];
	$add['ltype']=(int)$add['ltype'];
	$add['checked']=(int)$add['checked'];
	$add['classid']=(int)$add['classid'];
	$add['cid']=(int)$add['cid'];
	$add['width']=hRepPostStr($add['width'],1);
	$add['height']=hRepPostStr($add['height'],1);
	$add['target']=hRepPostStr($add['target'],1);
	$sql=$empire->updatesql("insert into {$dbtbpre}enewslink(lname,lpic,lurl,ltime,onclick,width,height,target,myorder,email,lsay,ltype,checked,classid) values('".$add['lname']."','".$add['lpic']."','".$add['lurl']."','".$ltime."','".$add['onclick']."','".$add['width']."','".$add['height']."','".$add['target']."','".$add['myorder']."','".$add['email']."','".eaddslashes($add['lsay'])."','".$add['ltype']."','".$add['checked']."','".$add['classid']."');","ins");
	$lastid=$empire->lastid($dbtbpre.'enewslink','lid');
	if($sql)
	{
		//操作日誌
		insert_dolog("lid=".$lastid."<br>lname=".$add['lname']);
		printerror("AddLinkSuccess","AddLink.php?enews=AddLink&cid=".$add['cid'].hReturnEcmsHashStrHref2(0));
	}
	else
	{printerror("DbError","history.go(-1)");}
}

//----------------修改友情鏈接
function EditLink($add,$userid,$username){
	global $empire,$dbtbpre;
	$add['lid']=(int)$add['lid'];
	if(!$add['lname']||!$add['lurl']||!$add['lid'])
	{printerror("EmptyLname","history.go(-1)");}
	//驗證權限
	CheckLevel($userid,$username,$classid,"link");
	$add['lname']=hRepPostStr($add['lname'],1);
	$add['lpic']=hRepPostStr2(eDoRepPostComStr($add['lpic'],1));
	$add['lurl']=hRepPostStr2(eDoRepPostComStr($add['lurl'],1));
	$add['email']=hRepPostStr($add['email'],1);
	$add['onclick']=(int)$add['onclick'];
	$add['myorder']=(int)$add['myorder'];
	$add['ltype']=(int)$add['ltype'];
	$add['checked']=(int)$add['checked'];
	$add['classid']=(int)$add['classid'];
	$add['cid']=(int)$add['cid'];
	$add['width']=hRepPostStr($add['width'],1);
	$add['height']=hRepPostStr($add['height'],1);
	$add['target']=hRepPostStr($add['target'],1);
	$sql=$empire->query("update {$dbtbpre}enewslink set lname='".$add['lname']."',lpic='".$add['lpic']."',lurl='".$add['lurl']."',onclick='".$add['onclick']."',width='".$add['width']."',height='".$add['height']."',target='".$add['target']."',myorder='".$add['myorder']."',email='".$add['email']."',lsay='".eaddslashes($add['lsay'])."',ltype='".$add['ltype']."',checked='".$add['checked']."',classid='".$add['classid']."' where lid='".$add['lid']."'");
	if($sql)
	{
		//操作日誌
		insert_dolog("lid=".$add['lid']."<br>lname=".$add['lname']);
		printerror("EditLinkSuccess","ListLink.php?classid=".$add['cid'].hReturnEcmsHashStrHref2(0));
	}
	else
	{printerror("DbError","history.go(-1)");}
}

//---------------刪除友情鏈接
function DelLink($lid,$cid,$userid,$username){
	global $empire,$dbtbpre;
	$lid=(int)$lid;
	$cid=(int)$cid;
	if(!$lid)
	{printerror("EmptyLid","history.go(-1)");}
	//驗證權限
	CheckLevel($userid,$username,$classid,"link");
	$r=$empire->fetch1("select lname from {$dbtbpre}enewslink where lid='$lid'");
	$sql=$empire->query("delete from {$dbtbpre}enewslink where lid='$lid'");
	if($sql)
	{
		//操作日誌
		insert_dolog("lid=".$lid."<br>lname=".$r['lname']);
		printerror("DelLinkSuccess","ListLink.php?classid=$cid".hReturnEcmsHashStrHref2(0));
	}
	else
	{printerror("DbError","history.go(-1)");}
}

$enews=$_POST['enews'];
if(empty($enews))
{$enews=$_GET['enews'];}
if($enews)
{
	hCheckEcmsRHash();
}
if($enews=="AddLink")
{
	AddLink($_POST,$logininid,$loginin);
}
elseif($enews=="EditLink")
{
	EditLink($_POST,$logininid,$loginin);
}
elseif($enews=="DelLink")
{
	$lid=$_GET['lid'];
	$cid=$_GET['cid'];
	DelLink($lid,$cid,$logininid,$loginin);
}
else
{}

$search=$ecms_hashur['ehref'];
$page=(int)$_GET['page'];
$page=RepPIntvar($page);
$start=0;
$line=16;//每頁顯示條數
$page_line=25;//每頁顯示鏈接數
$offset=$page*$line;//總偏移量
$query="select * from {$dbtbpre}enewslink";
$totalquery="select count(*) as total from {$dbtbpre}enewslink";
//類別
$add="";
$classid=(int)$_GET['classid'];
if($classid)
{
	$add=" where classid=$classid";
	$search.="&classid=$classid";
}
$query.=$add;
$totalquery.=$add;
$num=$empire->gettotal($totalquery);//取得總條數
$query=$query." order by myorder,lid".do_dblimit($line,$offset);
$sql=$empire->query($query);
$returnpage=page2($num,$line,$page_line,$start,$page,$search);
//類別
$cstr="";
$csql=$empire->query("select classid,classname from {$dbtbpre}enewslinkclass order by classid");
while($cr=$empire->fetch($csql))
{
	$select="";
	if($cr['classid']==$classid)
	{
		$select=" selected";
	}
	$cstr.="<option value='".$cr['classid']."'".$select.">".$cr['classname']."</option>";
}
?>
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<link href="../adminstyle/<?=$loginadminstyleid?>/adminstyle.css" rel="stylesheet" type="text/css">
<title>管理友情鏈接</title>
</head>

<body>
<table width="100%" border="0" align="center" cellpadding="0" cellspacing="1">
  <tr> 
    <td width="50%" height="32">位置：<a href="ListLink.php<?=$ecms_hashur['whehref']?>">管理友情鏈接</a></td>
    <td><div align="right" class="emenubutton">
        <input type="button" name="Submit5" value="增加友情鏈接" onclick="self.location.href='AddLink.php?enews=AddLink<?=$ecms_hashur['ehref']?>';">
      </div></td>
  </tr>
</table>

<table width="100%" border="0" align="center" cellpadding="3" cellspacing="1">
  <tr> 
    <td> 選擇類別： 
      <select name="classid" id="classid" onchange=window.location='ListLink.php?<?=$ecms_hashur['ehref']?>&classid='+this.options[this.selectedIndex].value>
        <option value="0">顯示所有類別</option>
        <?=$cstr?>
      </select> </td>
  </tr>
</table>
<br>
<table width="100%" border="0" align="center" cellpadding="3" cellspacing="1" class="tableborder">
  <tr class="header"> 
    <td width="6%" height="25"> <div align="center">ID</div></td>
    <td width="51%" height="25"> <div align="center">預覽</div></td>
    <td width="11%" height="25"> <div align="center">點擊</div></td>
    <td width="12%"><div align="center">狀態</div></td>
    <td width="20%" height="25"> <div align="center">操作</div></td>
  </tr>
  <?php
  //formhash
  $efh=heformhash_get('DelLink',1);
  
  while($r=$empire->fetch($sql))
  {
	$eagotourl=eapage_hGetGotoUrl($r['lurl'],'../',$r['lid'],0,'eaGoUrlFlink',0);
	$eagotourl_onclick='';
	if($eagotourl!=$r['lurl'])
	{
		$eagotourl_onclick=' onclick="window.open(\''.$eagotourl.'\');return false;"';
	}
  //文字
  if(empty($r['lpic']))
  {
	$logo="<a href='".$r['lurl']."'".$eagotourl_onclick." target=_blank>".$r['lname']."</a>";
  }
  //圖片
  else
  {
	//$logo="<a href='".$r['lurl']."' target=".$r['target']."><img src='".$r['lpic']."' alt='".$r['lname']."' border=0 width='".$r['width']."' height='".$r['height']."'></a>";
	$logo="[LOGO]<a href='".$r['lurl']."'".$eagotourl_onclick." target=_blank>".$r['lname']."</a>";
  }
  if(empty($r['checked']))
  {$checked="關閉";}
  else
  {$checked="顯示";}
  ?>
  <tr bgcolor="#FFFFFF" onmouseout="this.style.backgroundColor='#ffffff'" onmouseover="this.style.backgroundColor='#C3EFFF'"> 
    <td height="25"> <div align="center"> 
        <?=$r['lid']?>
      </div></td>
    <td height="25"> <div align="center"> 
        <?=$logo?>
      </div></td>
    <td height="25"> <div align="center"> 
        <?=$r['onclick']?>
      </div></td>
    <td><div align="center"><?=$checked?></div></td>
    <td height="25"> <div align="center">[<a href="AddLink.php?enews=EditLink&lid=<?=$r['lid']?>&cid=<?=$classid?><?=$ecms_hashur['ehref']?>">修改</a>]&nbsp;[<a href="ListLink.php?enews=DelLink&lid=<?=$r['lid']?>&cid=<?=$classid?><?=$ecms_hashur['href'].$efh?>" onclick="return confirm('確認要刪除？');">刪除</a>]</div></td>
  </tr>
  <?php
  }
  ?>
  <tr bgcolor="#FFFFFF"> 
    <td height="25" colspan="5">&nbsp;&nbsp;&nbsp; 
      <?=$returnpage?>
    </td>
  </tr>
</table>
<br>
</body>
</html>
<?php
db_close();
$empire=null;
?>