<?php
define('EmpireCMSAdmin','1');
require("../../../e/class/connect.php");
require("../../../e/class/functions.php");
require "../../../e/data/".LoadLang("pub/fun.php");
$link=db_connect();
$empire=new mysqlquery();
$editor=1;
//驗證用戶
$lur=is_login();
$logininid=(int)$lur['userid'];
$loginin=$lur['username'];
$loginrnd=$lur['rnd'];
$loginlevel=(int)$lur['groupid'];
$loginadminstyleid=(int)$lur['adminstyleid'];
//ehash
$ecms_hashur=hReturnEcmsHashStrAll();
//驗證權限
CheckLevel($logininid,$loginin,$classid,"userlist");

//增加自定義信息列表
function AddUserlist($add,$userid,$username){
	global $empire,$dbtbpre;
	$cid=(int)$add['cid'];
	$listtempid=(int)$add['listtempid'];
	$maxnum=(int)$add['maxnum'];
	$lencord=(int)$add['lencord'];
	if(!$add['listname']||!$listtempid||!$add['listsql']||!$add['totalsql']||!$add['filepath']||!$add['filetype']||!$add['lencord'])
	{
		printerror("EmptyUserListname","history.go(-1)");
	}
	$query_first=substr($add['totalsql'],0,7);
	$query_firstlist=substr($add['listsql'],0,7);
	if(!($query_first=="select "||$query_first=="SELECT "||$query_firstlist=="select "||$query_firstlist=="SELECT "))
	{
		printerror("ListSqlError","history.go(-1)");
	}
	//驗證權限
	CheckLevel($userid,$username,$classid,"userlist");
	if(empty($add['pagetitle']))
	{
		$add['pagetitle']=$add['listname'];
	}
	$add['listname']=hRepPostStr($add['listname'],1);
	$add['pagetitle']=AddAddsData(RepPhpAspJspcode($add['pagetitle']));
	$add['pagekeywords']=AddAddsData(RepPhpAspJspcode($add['pagekeywords']));
	$add['pagedescription']=AddAddsData(RepPhpAspJspcode($add['pagedescription']));
	$add['totalsql']=ClearAddsData($add['totalsql']);
	$add['listsql']=ClearAddsData($add['listsql']);
	$add['classid']=(int)$add['classid'];
	$add['filepath']=hRepPostStr($add['filepath'],1);
	$add['filetype']=hRepPostStr($add['filetype'],1);
	$sql=$empire->updatesql("insert into {$dbtbpre}enewsuserlist(listname,pagetitle,filepath,filetype,totalsql,listsql,maxnum,lencord,listtempid,pagekeywords,pagedescription,classid) values('".$add['listname']."','".$add['pagetitle']."','".$add['filepath']."','".$add['filetype']."','".addslashes($add['totalsql'])."','".addslashes($add['listsql'])."','".$maxnum."','".$lencord."','".$listtempid."','".$add['pagekeywords']."','".$add['pagedescription']."','".$add['classid']."');","ins");
	$listid=$empire->lastid($dbtbpre.'enewsuserlist','listid');
	//刷新列表
	$add['listid']=$listid;
	ReUserlist($add,"../");
	if($sql)
	{
		//操作日誌
		insert_dolog("listid=$listid&listname=".$add['listname']);
		printerror("AddUserlistSuccess","AddUserlist.php?enews=AddUserlist&classid=$cid".hReturnEcmsHashStrHref2(0));
	}
	else
	{
		printerror("DbError","history.go(-1)");
	}
}

//修改自定義信息列表
function EditUserlist($add,$userid,$username){
	global $empire,$dbtbpre;
	$cid=(int)$add['cid'];
	$listid=(int)$add['listid'];
	$listtempid=(int)$add['listtempid'];
	$maxnum=(int)$add['maxnum'];
	$lencord=(int)$add['lencord'];
	if(!$listid||!$add['listname']||!$listtempid||!$add['listsql']||!$add['totalsql']||!$add['filepath']||!$add['filetype']||!$add['lencord'])
	{
		printerror("EmptyUserListname","history.go(-1)");
	}
	$query_first=substr($add['totalsql'],0,7);
	$query_firstlist=substr($add['listsql'],0,7);
	if(!($query_first=="select "||$query_first=="SELECT "||$query_firstlist=="select "||$query_firstlist=="SELECT "))
	{
		printerror("ListSqlError","history.go(-1)");
	}
	//驗證權限
	CheckLevel($userid,$username,$classid,"userlist");
	/*
	//刪除舊文件
	if(!($add['oldfilepath']<>$add['filepath']||$add['oldfiletype']<>$add['filetype']))
	{
		DelFiletext($add['oldjsfilename']);
	}
	*/
	if(empty($add['pagetitle']))
	{
		$add['pagetitle']=$add['listname'];
	}
	$add['listname']=hRepPostStr($add['listname'],1);
	$add['pagetitle']=AddAddsData(RepPhpAspJspcode($add['pagetitle']));
	$add['pagekeywords']=AddAddsData(RepPhpAspJspcode($add['pagekeywords']));
	$add['pagedescription']=AddAddsData(RepPhpAspJspcode($add['pagedescription']));
	$add['totalsql']=ClearAddsData($add['totalsql']);
	$add['listsql']=ClearAddsData($add['listsql']);
	$add['classid']=(int)$add['classid'];
	$add['filepath']=hRepPostStr($add['filepath'],1);
	$add['filetype']=hRepPostStr($add['filetype'],1);
	$sql=$empire->query("update {$dbtbpre}enewsuserlist set listname='".$add['listname']."',pagetitle='".$add['pagetitle']."',filepath='".$add['filepath']."',filetype='".$add['filetype']."',totalsql='".addslashes($add['totalsql'])."',listsql='".addslashes($add['listsql'])."',maxnum='".$maxnum."',lencord='".$lencord."',listtempid='".$listtempid."',pagekeywords='".$add['pagekeywords']."',pagedescription='".$add['pagedescription']."',classid='".$add['classid']."' where listid='".$listid."'");
	//刷新列表
	$add['listid']=$listid;
	ReUserlist($add,"../");
	if($sql)
	{
		//操作日誌
	    insert_dolog("listid=$listid&listname=".$add['listname']);
		printerror("EditUserlistSuccess","ListUserlist.php?classid=$cid".hReturnEcmsHashStrHref2(0));
	}
	else
	{
		printerror("DbError","history.go(-1)");
	}
}

//刪除自定義信息列表
function DelUserlist($listid,$userid,$username){
	global $empire,$dbtbpre;
	$cid=(int)$_GET['cid'];
	$listid=(int)$listid;
	if(!$listid)
	{
		printerror("NotChangeUserlistid","history.go(-1)");
	}
	//驗證權限
	CheckLevel($userid,$username,$classid,"userlist");
	$r=$empire->fetch1("select listname from {$dbtbpre}enewsuserlist where listid=$listid");
	$sql=$empire->query("delete from {$dbtbpre}enewsuserlist where listid=$listid");
	if($sql)
	{
		//操作日誌
		insert_dolog("listid=$listid&listname=".$r['listname']);
		printerror("DelUserlistSuccess","ListUserlist.php?classid=$cid".hReturnEcmsHashStrHref2(0));
	}
	else
	{
		printerror("DbError","history.go(-1)");
	}
}

//刷新自定義列表
function DoReUserlist($add,$userid,$username){
	global $empire,$dbtbpre;
	//操作權限
	CheckLevel($userid,$username,$classid,"userlist");
	$listid=eCheckEmptyArray($add['listid']);
	$count=count($listid);
	if(!$count)
	{
		printerror("EmptyReUserlistid","history.go(-1)");
    }
	for($i=0;$i<$count;$i++)
	{
		$listid[$i]=(int)$listid[$i];
		if(empty($listid[$i]))
		{
			continue;
		}
		$ur=$empire->fetch1("select listid,pagetitle,filepath,filetype,totalsql,listsql,maxnum,lencord,listtempid,pagekeywords,pagedescription from {$dbtbpre}enewsuserlist where listid='".$listid[$i]."'");
		ReUserlist($ur,"../");
	}
	//操作日誌
	insert_dolog("");
	printerror("DoReUserlistSuccess",EcmsGetReturnUrl());
}

$addgethtmlpath="../";
$enews=$_POST['enews'];
if(empty($enews))
{$enews=$_GET['enews'];}
if($enews)
{
	hCheckEcmsRHash();
	require("../../../e/data/dbcache/class.php");
	include("../../../e/class/t_functions.php");
}
if($enews=="AddUserlist")
{
	AddUserlist($_POST,$logininid,$loginin);
}
elseif($enews=="EditUserlist")
{
	EditUserlist($_POST,$logininid,$loginin);
}
elseif($enews=="DelUserlist")
{
	$listid=$_GET['listid'];
	DelUserlist($listid,$logininid,$loginin);
}
elseif($enews=="DoReUserlist")
{
	DoReUserlist($_POST,$logininid,$loginin);
}
else
{}
$page=(int)$_GET['page'];
$page=RepPIntvar($page);
$start=0;
$line=20;//每頁顯示條數
$page_line=20;//每頁顯示鏈接數
$offset=$page*$line;//總偏移量
$search='';
$search.=$ecms_hashur['ehref'];
$query="select listid,listname,filepath from {$dbtbpre}enewsuserlist";
$totalquery="select count(*) as total from {$dbtbpre}enewsuserlist";
//類別
$add="";
$classid=(int)$_GET['classid'];
if($classid)
{
	$add=" where classid=$classid";
	$search.="&classid=$classid";
}
$query.=$add;
$totalquery.=$add;
$num=$empire->gettotal($totalquery);//取得總條數
$query=$query." order by listid desc".do_dblimit($line,$offset);
$sql=$empire->query($query);
$returnpage=page2($num,$line,$page_line,$start,$page,$search);
//分類
$cstr="";
$csql=$empire->query("select classid,classname from {$dbtbpre}enewsuserlistclass order by classid");
while($cr=$empire->fetch($csql))
{
	$select="";
	if($cr['classid']==$classid)
	{
		$select=" selected";
	}
	$cstr.="<option value='".$cr['classid']."'".$select.">".$cr['classname']."</option>";
}
?>
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<link href="../adminstyle/<?=$loginadminstyleid?>/adminstyle.css" rel="stylesheet" type="text/css">
<title>管理自定義信息列表</title>
<script>
function CheckAll(form)
  {
  for (var i=0;i<form.elements.length;i++)
    {
    var e = form.elements[i];
    if (e.name != 'chkall')
       e.checked = form.chkall.checked;
    }
  }
</script>
</head>

<body>
<table width="100%" border="0" align="center" cellpadding="0" cellspacing="1">
  <tr> 
    <td width="50%" height="32">位置：<a href=ListUserlist.php<?=$ecms_hashur['whehref']?>>管理自定義信息列表</a></td>
    <td><div align="right" class="emenubutton">
        <input type="button" name="Submit" value="增加自定義列表" onclick="self.location.href='AddUserlist.php?enews=AddUserlist<?=$ecms_hashur['ehref']?>';">
		&nbsp;&nbsp;
        <input type="button" name="Submit5" value="管理自定義列表分類" onclick="self.location.href='UserlistClass.php<?=$ecms_hashur['whehref']?>';">
      </div></td>
  </tr>
</table>

<table width="100%" border="0" align="center" cellpadding="3" cellspacing="1">
  <tr>
    <td> 選擇類別：
      <select name="classid" id="classid" onchange=window.location='ListUserlist.php?<?=$ecms_hashur['ehref']?>&classid='+this.options[this.selectedIndex].value>
          <option value="0">顯示所有類別</option>
          <?=$cstr?>
      </select>
    </td>
  </tr>
</table>
<br>
  
<table width="100%" border="0" align="center" cellpadding="3" cellspacing="1" class="tableborder">
  <form name="form1" method="post" action="ListUserlist.php">
  <?=$ecms_hashur['form']?>
  <?php echo heformhash_get('DoReUserlist'); ?>
    <tr class="header">
      <td width="4%"><div align="center">
          <input type=checkbox name=chkall value=on onclick=CheckAll(this.form)>
        </div></td>
      <td width="7%" height="25"> <div align="center">ID</div></td>
      <td width="32%" height="25"> <div align="center">列表名稱</div></td>
      <td width="29%"><div align="center">頁面地址</div></td>
      <td width="10%"><div align="center">預覽</div></td>
      <td width="18%" height="25"> <div align="center">操作</div></td>
    </tr>
    <?php
	//formhash
	$efh=heformhash_get('DelUserlist',1);
	
  while($r=$empire->fetch($sql))
  {
  $jspath=$public_r['newsurl'].str_replace("../../","",$r['filepath']);
  $eagotourl=eapage_hGetGotoUrl($jspath,'../',$r['listid'],0,'eaGoUrlUserlist',0);
  $eagotourl_onclick='';
  if($eagotourl!=$jspath)
  {
	  $eagotourl_onclick=' onclick="window.open(\''.$eagotourl.'\');return false;"';
  }
  ?>
    <tr bgcolor="#FFFFFF" onmouseout="this.style.backgroundColor='#ffffff'" onmouseover="this.style.backgroundColor='#C3EFFF'">
      <td><div align="center">
          <input name="listid[]" type="checkbox" id="listid[]" value="<?=$r['listid']?>">
        </div></td>
      <td height="25"> <div align="center"> 
          <?=$r['listid']?>
        </div></td>
      <td height="25"> <div align="center"> 
          <?=$r['listname']?>
        </div></td>
      <td><div align="center">
        <input name="textfield" type="text" value="<?=$jspath?>">
      </div></td>
      <td><div align="center">[<a href="<?=$jspath?>"<?=$eagotourl_onclick?> target="_blank">預覽</a>]</div></td>
      <td height="25"> <div align="center">[<a href="AddUserlist.php?enews=EditUserlist&listid=<?=$r['listid']?>&cid=<?=$classid?><?=$ecms_hashur['ehref']?>">修改</a>]&nbsp;[<a href="AddUserlist.php?enews=AddUserlist&docopy=1&listid=<?=$r['listid']?>&cid=<?=$classid?><?=$ecms_hashur['ehref']?>">複製</a>]&nbsp;[<a href="ListUserlist.php?enews=DelUserlist&listid=<?=$r['listid']?>&cid=<?=$classid?><?=$ecms_hashur['href'].$efh?>" onclick="return confirm('確認要刪除？');">刪除</a>]</div></td>
    </tr>
    <?php
  }
  ?>
    <tr bgcolor="#FFFFFF"> 
      <td height="25" colspan="6"> 
        <?=$returnpage?>
        &nbsp;&nbsp;&nbsp; <input type="submit" name="Submit3" value="刷新"> <input name="enews" type="hidden" id="enews" value="DoReUserlist">      </td>
    </tr>
  </form>
</table>
<br>
</body>
</html>
<?php
db_close();
$empire=null;
?>
