action.php文件
<?php
require('config.php');
$action=$arr_request['action'];
$key_liuyan=$arr_request['key_liuyan'];
if (!isset($PHP_AUTH_USER))
{
Header('WWW-Authenticate:Basic realm="管理留言"');
Header('HTTP/1.0 401 Unauthorized');
echo '需要受权,你没有这权限!<BR>';
echo '单击刷新来重试.<br>';
exit;
}
else
{
if (strlen($PHP_AUTH_USER)!=0)
{
if ($action=="delete")
echo "对不起,你没有删除留言的权限!!!<br>";
else if ($action="huifu")
echo "对不起,你暂时还不能恢复,现在只有版主有这权限!!!<br>";
else
echo "对不起,你没有管理留言本的权限!!!";
exit;
}
$pass=$PHP_AUTH_PW;
// echo $pass;
$result=0;
while($pass%10!=0)
{
$result=$result+$pass%10;
$pass=($pass-$pass%10)/10;
// echo $result;
// echo "<br>";
}
$tt=$result*222;
//echo $tt;
if (!checkpass($tt,$action,$db_name,$table_name_control,$id_link))
{
if ($action=="delete")
echo "对不起,你没有删除留言的权限!!!<br>";
else if ($action="huifu")
echo "对不起,你暂时还不能恢复,现在只有版主有这权限!!!<br>";
else
echo "对不起,你没有管理留言本的权限!!!";
exit;
}
}
if ($action=="delete")
{
//printf("delete");
//echo $key_liuyan;
$str_sql="delete from $table_name where key_liuyan=$key_liuyan";
$re=mysql_db_query($db_name,$str_sql,$id_link);
if (!$re)
{
echo "删除出错";
}
else
{
echo "成功删除";
echo "<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">";
echo "<HTML><HEAD><TITLE>发表文章</TITLE>";
echo "<META content="text/html; charset=gb2312" http-equiv=Content-Type>";
echo "<meta HTTP-EQUIV="REFRESH" CONTENT="2;URL=display.php">";
echo "</head><body topmargin="0"><br>";
echo "<ul>回复成功,将自动显示留言内容";
echo " <br>";
echo "<a href=display.php>如果你的浏览器没有自动的返回到留言簿首页,请点击这里";
echo "</a></ul>";
}
}
else if ($action=="huifu")
{
//printf("huifu");
// echo $key_liuyan;
?>
<form action="action.php?action=ok" method="post">
<input type="hidden" name="key" value="<?php echo $key_liuyan?>">
<textarea name="huifu" cols="50" rows="6"></textarea>
<input type="submit" value="回复">
</form>
<?php
}
else if ($action=="ok")
{
$key=$arr_request['key'];
$huifuold=$huifu;
$time=date('Y/m/d H:i:s');
$time='('.$time . ')<br>';
$huifuold=$time .$huifuold ;
$huifu_ok=computer_message($huifuold,$hang_zifu_number);
if (strlen($key)==0)
{ echo "error";
exit;
}
$str_sql="update $table_name set huifu_biaozi=1,
huifu='$huifu_ok' where key_liuyan=$key";
// echo $str_sql;
$re=mysql_db_query($db_name,$str_sql,$id_link);
if (!$re)
{
echo "更新出错";
}
else
{
echo "回复成功";
echo "<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">";
echo "<HTML><HEAD><TITLE>发表文章</TITLE>";
echo "<META content="text/html; charset=gb2312" http-equiv=Content-Type>";
echo "<meta HTTP-EQUIV="REFRESH" CONTENT="2;URL=display.php">";
echo "</head><body topmargin="0"><br>";
echo "<ul>回复成功,将自动显示留言内容";
echo " <br>";
echo "<a href=display.php>如果你的浏览器没有自动的返回到留言簿首页，?
请点这里返回.";
echo "</a></ul>";
exit;
}
}
else
printf("error");
?>