?? file_main.php
字號:
<?
/********************************************************************************/
/* 極限辦公自動化系統 (極限OA) */
/* ======================== */
/* 歡迎使用 極限OA,在您開始使用之前,請務必完整閱讀本軟件附帶的全部說明檔 */
/********************************************************************************/
/* Welcome to http://www.xsp.cn & http://oa.xsp.cn */
/* 技術支持論壇 http://www.1119.net */
/********************************************************************************/
/* 商業購買請聯系 臨海市極限網絡有限公司 */
/* 聯系電話: (0576) 5131349 郵件: mkt@xsp.cn QQ: 562873 */
/********************************************************************************/
if(!defined('KIN_UNION')){die("Hacking attempt");}
$personid = personalfolder();
$fid = $fid?$fid:$personid;
if($fid) {
$folder = $db->query_fetch("select * from $table_folder where id='$fid'");
$pre_s = true;
if($folder[type] == 1)
$folder[ttype] = '個人文件夾';
elseif($folder[type] == 2)
$folder[ttype] = '部門文件夾';
elseif($folder[type] == 3)
$folder[ttype] = '共享文件夾';
elseif($folder[type] == 0) {
$folder[ttype] = '根目錄';
$pre_s = false;
}
}
if($sysaction == 'folderdel') {
checkright(41,11,4);
if(!$fid)
showmessage("沒有指定欲刪除的文件夾 請返回");
//刪除處理
$folders=$db->query("SELECT id FROM $table_folder WHERE INSTR(CONCAT(',',plist,','), ',$fid,')>0");
$flist = "0";
while($thisb=$db->fetch_array($folders)) {
$flist .= ",$thisb[id]";
}
$files=$db->query("SELECT fname FROM $table_file WHERE fid IN ($flist)");
while($thisf=$db->fetch_array($files)) {
unlink("./data/$thisf[fname]");
}
$sql = "DELETE FROM $table_folder WHERE id IN ($flist);";
$sql .= "DELETE FROM $table_file WHERE fid IN ($flist)";
//$db->query($sql);
showmessage("文件夾刪除成功","document.php?action=file");
//header("Location:document.php");exit;
}elseif($sysaction == 'folderadd') {
checkright(41,11,2);
if($addsubmit) {
if(!$edit) {
$ttime = date('Y-m-d H:i:s',$timestamp);
$tmp = $db->query_fetch("select * from $table_folder where id='$upfolder'");
if($tmp[id] < 2)
showmessage("對不起 不允許創建文件夾于根目錄下 請返回");
if($tmp[type] == 2 && $name) {
$tmp2 = $db->query_fetch("select id from $table_folder where name='$name' && pid='3'");
if($tmp3[id]) {
showmessage("對不起 已有此部門的文件夾存在 請返回");
}
$tmp3 = $db->query_fetch("select name from $table_department where name='$name'");
if(!$tmp3[name])
showmessage("對不起 此部門不存在 請返回");
//$db->query("insert into $table_folder (type,name,des,mid,admin,dorder,pid,ttime)
// values ('2','$name','$des','$union_uid','$union_user','$dorder','$tmp[pid]','$ttime')");
}else {
//$db->query("insert into $table_folder (type,name,des,mid,admin,dorder,pid,ttime)
// values ('$tmp[type]','$name','$des','$union_uid','$union_user','$dorder','$tmp[pid]','$ttime')");
}
$sql = "insert into $table_folder (type,name,des,mid,admin,dorder,pid,ttime)
values ('$tmp[type]','$name','$des','$union_uid','$union_user','$dorder','$tmp[id]','$ttime')";
//echo $sql;
$db->query($sql);
$tmpfid = $db->insert_id();
$db->query("update $table_folder set plist='$tmpfid,$tmp[plist]' where id='$tmpfid'");
header("Location:document.php?action=file&fid=$tmpfid");exit;
}else {
checkright(41,11,3);
$tmp0 = $db->query_fetch("select * from $table_folder where pid='$fid'");
if($tmp0[id] != $upfolder) {
$tmp = $db->query_fetch("select * from $table_folder where id='$upfolder'");
if($tmp[id] < 2)
showmessage("對不起 不允許更改文件夾于根目錄下 請返回");
if($tmp[type] == 2 && $name) {
$tmp2 = $db->query_fetch("select id from $table_folder where id!='$fid' && name='$name' && pid='3'");
if($tmp2[id]) {
showmessage("對不起 已有此部門的文件夾存在 請返回");
}
$tmp3 = $db->query_fetch("select name from $table_department where name='$name'");
if(!$tmp3[name])
showmessage("對不起 此部門不存在 請返回");
}
$sql = "update $table_folder set type='$tmp[type]',name='$name',des='$des',dorder='$dorder',pid='$tmp[id]' where id='$fid'";
}else {
$tmp = $db->query_fetch("select * from $table_folder where id='$fid'");
if($tmp[type] == 2 && $name) {
$tmp2 = $db->query_fetch("select id from $table_folder where id!='$fid' && name='$name' && pid='3'");
if($tmp2[id]) {
showmessage("對不起 已有此部門的文件夾存在 請返回");
}
$tmp3 = $db->query_fetch("select name from $table_department where name='$name'");
if(!$tmp3[name])
showmessage("對不起 此部門不存在 請返回");
}
$sql = "update $table_folder set name='$name',des='$des'";
}
$db->query($sql);
updateparentlists();
header("Location:document.php?action=file&fid=$fid");exit;
}
}else {
if($edit == 1) {
$fol_t = $db->query_fetch("select * from $table_folder where id='$fid'");
$upid = $fol_t[pid];
$fo_type = $fol_t[type];
}else {
$upid = $fid;
$fo_type = $folder[type];
}
$foldersel = makebbschoosercode('upfolder',$upid);
$foldtypes = array("type$folder[type]"=>' checked');
$query = $db->query("select * from $table_folder where pid='3'");
while($ls = $db->fetch_array($query)) {
$depart_folder[$ls[name]] = 1;
}
$query = $db->query("select * from $table_department where fig='1' order by id ASC");
while($list = $db->fetch_array($query)) {
if($depart_folder[$list[name]]) $list[sel] = ' disabled';
else $list[sel] = '';
$depart_list[$list[id]] = $list;
}
}
}elseif($sysaction == 'fileadd') {
checkright(41,11,2);
if (function_exists("set_time_limit") && !get_cfg_var('safe_mode')){
set_time_limit(10000);
}
if($edit) {
include_once 'includes/upload.php';
if(!$id) {
$picftpsave = 'file';
$maxpicftpsize = '5000000';
pic_attach_upload();
if($content_err)
showmessage($content_err);
$extension = strtolower(substr(strrchr($picftp_name, "."), 1));
$filename = substr($picftp_name, 0, strlen($picftp_name) - strlen($extension) - 1);
$name = $name?$name:$filename;
$ttime = date('Y-m-d H:i:s',$timestamp);
$db->query("insert into $table_file (fid,name,fname,extension,filetype,size,time,ttime)
values ('$fid','$name','$picftp_fname','$extension','$picftp_type','$picftp_size','$timestamp','$ttime')");
showmessage('文件上傳成功 正在轉向',"document.php?action=file_main&fid=$fid");
}else {
checkright(41,11,3);
$fil_t = $db->query_fetch("select * from $table_file where id='$id'");
if($attachedit == 'del') {
@unlink("./data/$fil_t[fname]");
$db->query("delete from $table_file where id='$id'");
showmessage('文件刪除成功 正在轉向',"document.php?action=file_main&fid=$fid");
}
if($attachedit == 'new') {
@unlink("./data/$fil_t[fname]");
$picftpsave = 'file';
$maxpicftpsize = '5000000';
pic_attach_upload();
if($content_err)
showmessage($content_err);
$extension = strtolower(substr(strrchr($picftp_name, "."), 1));
$filename = substr($picftp_name, 0, strlen($picftp_name) - strlen($extension) - 1);
$name = $name?$name:$filename;
$codi = ",name='$name',fname='$picftp_fname',extension='$extension',filetype='$picftp_type',size='$picftp_size'";
}else {
if($name)
$codi = ",name='$name'";
}
$db->query("update $table_file set edit='$timestamp'$codi where id='$id'");
showmessage('文件修改成功 正在轉向',"document.php?action=file_main&fid=$fid");
}
}else {
if($id) {
$fil_t = $db->query_fetch("select * from $table_file where id='$id'");
if($fil_t[name]) {
$tmmp = explode(':',attachicon($fil_t['extension']));
$fil_t['typeimg'] = $tmmp[0];
}
}
}
}elseif($sysaction == 'filedown') {
$attach = $db->query_fetch("SELECT * FROM $table_file WHERE id='$id'");
$filename = './data/'.$attach['fname'];
if(is_readable($filename)) {
$filesize = filesize($filename);
header('Pragma: no-cache');
header("Cache-control: private");
header("Content-type: ".$attach['filetype']);
header("Content-Length: $filesize");
header("Content-Disposition: attachment; filename=".$attach['name'].".".$attach['extension']);
header("Content-Description: http://www.xsp.cn");
$fp=fopen($filename,'rb');
while(!feof($fp)) {
print(fread($fp, 4096));
flush();
}
exit;
} else {
showmessage('文件不存在 可能已經被刪除');
}
}
if($pre_s) {
$perpage = 10;
if(!$page) {
$page = 1;
}
$offset = ($page - 1) * $perpage;
$query = $db->query("SELECT COUNT(*) FROM $table_file where fid='$fid'");
$num = $total = $db->result($query, 0);
$multipage = pages($num, $perpage, $page, "document.php?action=file_main&fid=$fid");
$query = $db->query("select * from $table_file where fid='$fid' order by id ASC LIMIT $offset, $perpage");
while($list = $db->fetch_array($query)) {
if($timestamp - $list['time'] < 3600*24)
$list['new'] = 1;
$tmmp = explode(':',attachicon($list['extension']));
$list['typeimg'] = $tmmp[0];
$list['typename'] = $tmmp[1];
$list[size] = sizecount($list[size]);
$list[name] = wordscut($list[name],28,'..');
$file_list[$list['id']] = $list;
}
if($num < $perpage) {
for($ji=1;$ji<=($perpage-$num);$ji++) {
$jii = -1000 + $ji;
$file_list[$jii] = array('blank'=>1);
}
}
}
include getData('document_file_main');
#######################################################################
function personalfolder() {
global $db,$table_folder,$union_uid,$union_user,$timestamp;
$ps = $db->query_fetch("select id from $table_folder where type=1 && mid='$union_uid'");
if($ps[id]) {
return $ps[id];
}else {
$ttime = date('Y-m-d H:i:s',$timestamp);
$sql = "insert into $table_folder (type,name,des,mid,admin,dorder,pid,outspread,ttime)
values ('1','個人文件夾','個人專用文件夾','$union_uid','$union_user','0','1','1','$ttime')";
//echo $sql.'<br>';
$db->query($sql);
$inrid = $db->insert_id();
$plist = "$inrid,1,-1";
$sql = "update $table_folder set plist='$inrid,1,-1' where id='$inrid'";
//echo $sql;
$db->query($sql);
}
}
function makebbschoosercode ($name,$selectedid=-1,$unionid=-1,$depth="",$topname="請選擇所屬目錄",$title="跟目錄",$displaytop=0,$displayid=0) {
global $db,$table_folder,$union_uid;
if ($unionid==-1) {
$union_select .= "<select name=\"$name\" size=\"1\" onchange=\"changetype(this.options[this.selectedIndex].value)\">\n";
if ($displaytop==1) {
$union_select .= "<option value=\"-1\" ".iif($selectedid==$unionid,"SELECTED","").">$depth$topname</option>\n";
}
} else {
$unioninfo=$db->fetch_array($db->query("SELECT id,type,name FROM $table_folder WHERE !(type=1 && mid!='$union_uid') && id='$unionid'"));
$union_select .= "<option value=\"$unioninfo[id]\" " . iif($selectedid==$unionid,"SELECTED","") . ">$depth$unioninfo[name]" .iif($displayid," $unioninfo[id]","-")."</option>\n";
}
$depth.="-";
$unions=$db->query("SELECT id FROM $table_folder WHERE !(type=1 && mid!='$union_uid') && pid='$unionid' ORDER BY dorder");
while ($union=$db->fetch_array($unions)) {
$union_select .= makebbschoosercode("union_p",$selectedid,$union[id],$depth,"","",1,$displayid);
}
if ($unionid==-1) {
$union_select .= "</select>\n";
}
return $union_select;
}
function makeparentlist($fid) {
global $db,$table_folder;
$folderinfo=$db->query_fetch("SELECT pid,plist FROM $table_folder WHERE id=$fid");
$folderlist=$fid;
if ($folderinfo[pid] != -1) {
$folderlist .= ','.makeparentlist($folderinfo[pid]);
}
if (substr($folderlist, -2) != "-1") {
$folderlist.=",-1";
}
return $folderlist;
}
function updateparentlists($fid=-1) {
global $db,$table_folder;
$unions=$db->query("SELECT id FROM $table_folder where pid='$fid'");
while($union=$db->fetch_array($unions)) {
$parentlist = makeparentlist($union['id']);
$db->query("UPDATE $table_folder SET plist='".addslashes($parentlist)."' WHERE id=$union[id]");
updateparentlists($union['id']);
}
}
?>?? 快捷鍵說明
復制代碼
Ctrl + C
搜索代碼
Ctrl + F
全屏模式
F11
切換主題
Ctrl + Shift + D
顯示快捷鍵
?
增大字號
Ctrl + =
減小字號
Ctrl + -