:::
7. 置頂、計數器與 join
7-1 post.php
<?php
// 啟用 session
session_start();
/*----引入檔案----*/
require_once "config.php";
require_once "function.php";
/*----整理傳進來的變數或變數初始值----*/
$op=isset($_REQUEST['op'])?$_REQUEST['op']:"";
$sn=isset($_REQUEST['sn'])?intval($_REQUEST['sn']):"";
$error_msg=$main="";
/*----流程控制----*/
switch ($op) {
case 'clear':
session_destroy();
header("location:post.php");
break;
case 'passwd_error':
$main=news_form($sn);
$error_msg=error_msg("密碼錯誤！！請檢查密碼是否正確！");
break;
case 'db_error':
$error_msg=error_msg("資料庫連線錯誤！！請檢查資料庫帳號、密碼是否正確！");
break;
case 'save':
save_news();
header("location:index.php");
exit;
break;
case 'update':
save_news($sn);
header("location:index.php?op=view&sn={$sn}");
exit;
break;
case 'modify':
$main=news_form($sn);
break;
default:
$main=news_form();
break;
}
/*----輸出----*/
show_page('post_tpl');
/*----所有函數----*/
//新聞編輯表單
function news_form($sn=""){
if($sn){
link_db();
//讀取eznews資料表所有欄位，並指定某一筆特定資料
$sql="select * from eznews where sn='$sn'";
//傳回值存到 $result 以供抓取資料用
$result=mysql_query($sql) or die("{$sql}<br>".mysql_error());
$news=mysql_fetch_assoc($result);
// foreach ($news as $k => $v) {
// $$k=$v;
// }
$news_title=$news['news_title'];
$news_content=$news['news_content'];
$ip=$news['ip'];
$author=$news['author'];
$post_time=$news['post_time'];
$next_op="update";
}else{
$news_title=isset($_SESSION['news_title'])?$_SESSION['news_title']:"";
$news_content=isset($_SESSION['news_content'])?$_SESSION['news_content']:"";
$ip=$_SERVER['REMOTE_ADDR'];
$author=isset($_SESSION['author'])?$_SESSION['author']:"";
$post_time=isset($_SESSION['post_time'])?$_SESSION['post_time']:date("Y-m-d H:i:s");
$next_op="save";
}
$main=<<<form
<form action="post.php" method="post" role="form">
<div class="row">
<div class="col-md-5">
<div class="form-group">
<input type="text" name="news_title" placeholder="請輸入新聞標題" class="form-control" value="$news_title">
</div>
</div>
<div class="col-md-3">
<div class="form-group">
<label class="radio-inline">
<input type="radio" name="status" value="">正常
</label>
<label class="radio-inline">
<input type="radio" name="status" value="置頂">置頂
</label>
<label class="radio-inline">
<input type="radio" name="status" value="高亮">高亮
</label>
</div>
</div>
<div class="col-md-2">
<div class="form-group">
<input type="text" name="post_time" id="datetimepicker" placeholder="請輸入發布日期" class="form-control" value="$post_time">
</div>
</div>
<div class="col-md-2">
<div class="form-group">
<input type="text" name="author" placeholder="請輸入發布者" class="form-control" value="$author">
</div>
</div>
</div>
<div class="form-group">
<textarea id="summernote" name="news_content" style="height:300px;" placeholder="請輸入新聞內容" class="form-control">$news_content</textarea>
</div>
<div class="row">
<div class="col-md-3">
<select name="cate_sn" class="form-control">
<option value="">請選擇分類</option>
</select>
</div>
<div class="col-md-3">
<input type="text" name="cate_title" class="form-control" placeholder="請輸入新分類">
</div>
<div class="col-md-3">
<div class="form-group">
<input type="password" name="password" class="form-control" placeholder="請輸入密碼">
</div>
</div>
<div class="col-md-3">
<input type="hidden" name="ip" value="$ip">
<input type="hidden" name="sn" value="$sn">
<input type="hidden" name="op" value="$next_op">
<a href="post.php?op=clear" class="btn btn-danger">清除</a>
<input type="submit" value="儲存" class="btn btn-info">
</div>
</div>
</form>
form;
return $main;
}
//儲存新聞
function save_news($sn=""){
//過濾外面傳來的變數
$op=isset($_POST['op'])?$_POST['op']:"";
$password=isset($_POST['password'])?$_POST['password']:"";
$news_title=isset($_POST['news_title'])?check_input($_POST['news_title']):"";
$news_content=isset($_POST['news_content'])?check_input($_POST['news_content']):"";
$author=isset($_POST['author'])?check_input($_POST['author']):"";
$ip=isset($_POST['ip'])?check_input($_POST['ip']):"";
$post_time=isset($_POST['post_time'])?check_input($_POST['post_time']):"";
$status=isset($_POST['status'])?check_input($_POST['status']):"";
$cate_title=isset($_POST['cate_title'])?check_input($_POST['cate_title']):"";
$cate_sn=isset($_POST['cate_sn'])?intval($_POST['cate_sn']):"";
//接收使用者輸入密碼，失敗轉回發布頁
if(empty($password) or $password!=_POST_PASSWD){
// 產生 cookie
// setcookie('news_title',$news_title);
// setcookie('news_content',$news_content);
// 產生 session，以記住剛剛使用者輸入的資料，避免需要重打
$_SESSION['news_title']=$news_title;
$_SESSION['news_content']=$news_content;
$_SESSION['author']=$author;
$_SESSION['status']=$status;
$_SESSION['cate_sn']=$cate_sn;
//轉回編輯頁面，並用 get 方式，傳遞 $op 以便顯示密碼有誤的訊息
header("location:{$_SERVER['PHP_SELF']}?op=passwd_error");
exit;
}else{
// nl2br()將換行符號轉換為<br>標籤
//$news_content=nl2br($news_content);
// 發布正確，剛剛輸入的內容無需在記住，因此清空之。
session_destroy();
}
link_db();
//新增分類
if(empty($cate_sn) and !empty($cate_title)){
$sql="insert into eznews_cate (cate_title) values('$cate_title')";
mysql_query($sql) or die($sql."<br>".mysql_error());
$cate_sn=mysql_insert_id();
}elseif(!empty($cate_sn) and !empty($cate_title)){
//修改分類
$sql="update eznews_cate cate_title='$cate_title' where cate_sn='$cate_sn'";
mysql_query($sql) or die($sql."<br>".mysql_error());
}
//存到資料庫
if($sn){
$sql="update eznews set cate_sn='$cate_sn', news_title='$news_title', news_content='$news_content', ip='$ip', author='$author', post_time='$post_time', status='$status' where sn='$sn'";
}else{
$sql="insert into eznews (cate_sn,news_title, news_content, ip, author, post_time,status) values('$cate_sn','$news_title', '$news_content', '$ip', '$author', '$post_time', '$status')";
}
mysql_query($sql) or die($sql."<br>".mysql_error());
}
//替特殊符號加入反斜線
function check_input($value){
if (!get_magic_quotes_gpc()){
$value = addslashes($value);
}
return $value;
}
?>
