repal.php回复用的页面,因为回复可以不必要是用户,所以没加用户身份校验
<html> <head> <title>回复论题:<? echo $zt;?></title> <meta http-equiv="Content-Type" content="text/html; charset=gb2312"> <STYLE type=text/css> P {FONT-FAMILY: normal; FONT-SIZE: 9pt; LINE-HEIGHT: 14pt} DIV {FONT-FAMILY: normal; FONT-SIZE: 9pt; LINE-HEIGHT: 14pt} </STYLE> <LINK href="js/cpcw.css" rel=stylesheet /LINK> <?php include "linkfox.inc.php"; //包含进文件 include "info.inc.php";
function yy($f) { $oldmess=@file($f); //引用原文处理 for ($i=0;$i<count($oldmess);$i++) { if (ord(substr($oldmess[$i],0,1))==161) //第一位是否全角空格 $mess=$mess.$oldmess[$i]; else $mess=$mess." ".trim($oldmess[$i]); } return $mess; }
function mesput($query,$use,$id) { $req=mysql_query($query); if ($req) { echo "<script language='JavaScript'> alert('谢谢你的回复!系统将返回论题!'); </script>"; echo "<script language='JavaScript'> javascript:location.href='dispbbs.php?id=".$id."&use=".$use."'; </script>;"; echo "<div align='center'><a href='dispbbs.php?id=".$id."&use=".$use."'>如果系统没有反应,请点击</a></a>"; } else echo "<script language='JavaScript'> alert('写入失败!'); </script>"; } function usehf($message,$useinfo,$id,$use,$ft,$mess,$c) //用户回复就直接从表里调出用户信息 { $query="select * from useinfo where usename='".$useinfo[0]."'"; $req=mysql_query($query); if ($req) { $useinfo=mysql_fetch_array($req); $fo=fopen($ft,"a"); $message=str_replace("<","<",str_replace(">",">",$message)); $message=nl2br($message); $gip=getenv("REMOTE_ADDR"); $messages=$message."ㄞㄚㄓ".$useinfo[2]."ㄞㄚㄓ".$useinfo[3]."ㄞㄚㄓ".$useinfo[9]."ㄞㄚㄓ".$useinfo[8]."ㄞㄚㄓ".$useinfo[14]."ㄞㄚㄓ".$useinfo[11]."ㄞㄚㄓ".$time."ㄞㄚㄓ".$gip."δεζ"; if($c==dd) //如果是引用回复,加上原文内容 { $messages="<font color='999999'>".$mess."<div align='center'>★原文……★……引用★</div></font><br>".$messages; } $fp=fputs($fo,$messages); $time=date(Y年n月j日G时i分); //主题回复数加一,覆盖上一回复人与时间 $query="update foxbbs set hfnum=hfnum+1,hfname='".$ft."',hfusename='".$useinfo[2]."',hfdate='".$time."' where id='".$id."'"; mesput($query,$use,$id); } else { echo "<script language='JavaScript'> alert('数据库错误:104号'); </script>"; } }
function gr($ft,$message,$youname,$youmail,$youoicq,$youweb,$youaddr,$youbq,$id,$use,$mess,$c) //非注册用户 { if (!uinfo($youmail,mail)||strlen($youmail)<12) //校验MAIL { echo "<script language='JavaScript'> alert('请输入正确的MAIL地址!'); </script>"; } else if (!uinfo($youoicq,oicq)||strlen($youoicq)>12) //校验OICQ,只能判断是否数字和位数,如果有更好的方法就好。 {
echo "<script language='JavaScript'> alert('请输入正确的OICQ号!'); </script>"; }
else { if (uinfo($youweb,web)==OK&&substr($youweb,0,3)!=htt) $youweb="http://".$youweb; else if (uinfo($youweb,web)==OK&&substr($youweb,0,3)==htt) $youweb=$youweb; else $youweb="不告诉你"; $time=date(Y年n月j日G时i分); //取当前时间 $message=str_replace("<","<",str_replace(">",">",$message)); $message=nl2br($message); $gip=getenv("REMOTE_ADDR"); $messages=$message."ㄞㄚㄓ".$youname."ㄞㄚㄓ".$youoicq."ㄞㄚㄓ".$youweb."ㄞㄚㄓ".$youmail."ㄞㄚㄓ".$youbq."ㄞㄚㄓ".$youaddr."ㄞㄚㄓ".$time."ㄞㄚㄓ".$gip."δεζ"; if($c==dd) //如果是引用回复 { $messages="<font color='999999'>".$mess."<div align='center'>★原文……★……引用★</div></font><br>".$messages; } $fo=fopen($ft,"a"); $fp=fputs($fo,$messages); $query="update foxbbs set hfnum=hfnum+1,hfname='".$ft."',hfusename='".$youname."',hfdate='".$time."' where id='".$id."'"; mesput($query,$use,$id); } } ?> </head>
<body bgcolor="#FFFFFF"> <? $tem=$HTTP_COOKIE_VARS[FlyFoxNet]; $temp=explode("|",$tem); $cookiem=$temp[0]; $useinfo=cuser($cookiem,$action);
if (!$useinfo[0]){ $useinfo[2]="游客"; $usename=1;}
$query="select mesname from foxbbs where id='".$id."'"; $req=mysql_query($query); if ($req) { $f=mysql_fetch_array($req); $mess=yy($f[0]); if ($message&&$action=add) { $ft="foxbbs/".$f[0].".bbs"; if (ord(substr($message,0,1))!=161) $message=" ".$message; for ($i=0;$i<10;$i++) { if ($bq[$i]) $youbq=$bq[$i]; } if ($usename) gr($ft,$message,$youname,$youmail,$youoicq,$youweb,$youaddr,$youbq,$id,$use,$mess,$c); else usehf($message,$useinfo,$id,$use,$ft,$mess,$c); } } else echo "<script language='JavaScript'> alert('打开文件错误!可能服务器忙,请稍候再试!'); </script>";
?> <table width="100%" cellpadding="4" cellspacing="0" border="0"> <tr> <td height="20"> <div align="right"></div> </td> <td height="20" width="75"> </td> <td height="20" width="75"> </td> <td height="20" width="75"> </td> <td height="20" width="75"> </td> </tr> <tr> <td height="20"> <div align="right"></div> </td> <td height="20" width="10%"> <div align="center"><a href="reguse.php?action=xy"><img src="images/top_register.gif" width="74" height="21" border="0"></a></div> </td> <td height="20" width="10%"> <div align="center"><a href="useinfo.php?action=find"><img src="images/top_members.gif" width="74" height="21" border="0"></a></div> </td> <td height="20" width="10%"><a href="useinfo.php?action=edit"><img src="images/top_profile.gif" width="74" height="21" border="0"></a></td> <td height="20" width="10%"><a href="okey.php?d=q"><img src="images/top_logout.gif" width="74" height="21" border="0"></a></td> </tr> <tr> <td height="20"> <div align="left">当前位置:<font color="#0000FF">狐网─>狐网论坛─>回复主题:<?echo "<font color='ff0000'>".$zt."</font>";?></font></div> </td> <td> <div align="center"><a href="foxbbs.php"><img src="images/index.gif" width="70" height="20" border="0" align="middle"></a></div> </td> <td height="20" width="10%"> <div align="center"><a href="superuse.php"><img src="images/super.gif" width="70" height="20" border="0" align="middle"></a></div> </td> <td height="20" width="10%"> <div align="center"><a href="reguse.php?action=xy"><img src="images/dl.gif" width="70" height="20" border="0" align="middle"></a></div> </td> <td height="20" width="10%"> <div align="center"><a href="../index.php"><img src="images/fox.gif" width="70" height="20" border="0" align="middle"></a></div> </td> </tr> </table>
<script language="JavaScript"> <!-- var submitcount=0;
function checkSubmit() { if (submitcount == 0) { submitcount++; return true; } else { if (submitcount>0){ alert("帖子已成功提交了,别急,等等!"); return false; } } }
function check_com(){ if(document.form.youname.value.length ==0){ submitcount--; alert("名字不能为空!快填上吧!"); return false; } if(document.form.youmail.value.length ==0){ submitcount--; alert("EMAIL不能为空!快填上吧!"); return false; } if(document.form.youoicq.value.length ==0){ submitcount--; alert("OICQ不能为空!快填上吧!"); return false; }
if(document.form.message.value.length == 0){ submitcount--; alert("内容不能为空!"); return false; } return true; } //--> </script>
<table width='70%' border='0' cellspacing='0' cellpadding='0' bgcolor='#000000' align='center'> <tr> <td> <table width='100%' border='0' cellspacing='0' cellpadding='0'> <tr bgcolor='#006699'> <td><div align="center"><font color="ffffff"><? echo "<font color='00ff00'>".$useinfo[2]."</font>"; ?> 你正在回复的主题是:[<? echo $zt; ?>]</font></div></td> </tr> <tr bgcolor='#eeeeee'> <td> <form name="form" onSubmit="return check_com()" method="post"><div align="center"> <? if ($usename) //不是注册用户就显示输入框输入游客信息。 { echo "你的大名:<input onFocus='this.select()' style='BACKGROUND-COLOR: #ffffff; BORDER-BOTTOM: #000000 1px dashed; BORDER-LEFT: #000000 1px dashed; BORDER-RIGHT: #000000 1px dashed; BORDER-TOP: #000000 1px dashed;' type='text' name='youname' size='30' maxlength='30' value='".$youname."'>"; echo "OICQ:<input onFocus='this.select()' style='BACKGROUND-COLOR: #ffffff; BORDER-BOTTOM: #000000 1px dashed; BORDER-LEFT: #000000 1px dashed; BORDER-RIGHT: #000000 1px dashed; BORDER-TOP: #000000 1px dashed;' type='text' name='youoicq' size='16' maxlength='16' value='".$youoicq."'><br>"; echo "来自何方:<input onFocus='this.select()' style='BACKGROUND-COLOR: #ffffff; BORDER-BOTTOM: #000000 1px dashed; BORDER-LEFT: #000000 1px dashed; BORDER-RIGHT: #000000 1px dashed; BORDER-TOP: #000000 1px dashed;' type='text' name='youaddr' size='55' value='".$youaddr."'><br>"; echo "电子信箱:<input onFocus='this.select()' style='BACKGROUND-COLOR: #ffffff; BORDER-BOTTOM: #000000 1px dashed; BORDER-LEFT: #000000 1px dashed; BORDER-RIGHT: #000000 1px dashed; BORDER-TOP: #000000 1px dashed;' type='text' name='youmail' size='55' value='".$youmail."'><br>"; echo "个人主页:<input onFocus='this.select()' style='BACKGROUND-COLOR: #ffffff; BORDER-BOTTOM: #000000 1px dashed; BORDER-LEFT: #000000 1px dashed; BORDER-RIGHT: #000000 1px dashed; BORDER-TOP: #000000 1px dashed;' type='text' name='youweb' size='55' value='".$youweb."'><br>"; echo "表情<br><input type='radio' name='bq[0]' value='a'><img src='images/a.gif'><input type='radio' name='bq[1]' value='1'><img src='images/1.gif'>"; echo "<input type='radio' name='bq[2]' value='2'><img src='images/2.gif'><input type='radio' name='bq[3]' value='3'><img src='images/3.gif'>"; echo "<input type='radio' name='bq[4]' value='4'><img src='images/4.gif'><input type='radio' name='bq[5]' value='5'><img src='images/5.gif'>"; echo "<input type='radio' name='bq[6]' value='6'><img src='images/6.gif'><input type='radio' name='bq[7]' value='7'><img src='images/7.gif'>"; echo "<input type='radio' name='bq[8]' value='8'><img src='images/8.gif'><input type='radio' name='bq[9]' value='9'><img src='images/9.gif'><br>"; } echo "<div align='center'>回复内容<br>"; echo "<textarea onFocus='this.select()' style='BACKGROUND-COLOR: #ffffff; BORDER-BOTTOM: #000000 1px dashed; BORDER-LEFT: #000000 1px dashed; BORDER-RIGHT: #000000 1px dashed; BORDER-TOP: #000000 1px dashed;' name='message' cols='64' rows='5' wrap='VIRTUAL'>".$message."</textarea><br>"; ?> <input type="submit" name="Submit" value="确定" onClick="return checkSubmit()"> <input type="reset" name="Submit2" value="重写"></div></div></form> </td> </tr> <tr bgcolor='#eeeeee'>//如果是引用原文就显示 <td><div align="center"><? if ($c==dd) echo "原文如下<br><div align='left'>".$mess;?></div></td> </tr> </table> </td> </tr> </table>
</body> </html> |