-
Notifications
You must be signed in to change notification settings - Fork 0
/
amountbonus.php
executable file
·152 lines (144 loc) · 8.26 KB
/
amountbonus.php
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
<?php
require "include/bittorrent.php";
dbconn();
loggedinorreturn();
if (get_user_class() < UC_ADMINISTRATOR)
stderr("出错啦！", "没有权限进行本操作！");
if ($_SERVER["REQUEST_METHOD"] == "POST")
{
if ($_POST['doit'] == 'yes') {
sql_query("UPDATE users SET seedbonus = seedbonus + 25.0 WHERE status='confirmed'");
write_log("25.0 bonus point is sent to everyone. -" . $CURUSER["username"] ,'normal');
stderr("成功！", "成功为每个人增加了25个萝卜");
die;
}
if ($_POST['wage'] == 'yes') {
if (get_user_class() < 14)stderr("出错啦", "只有站长方有本权限");
$point=$_POST['amount'];
$class=$_POST['class'];
if(!is_numeric($point))stderr("别玩了！", "填写的萝卜不是正常的数值！");
if($point<=0)stderr("别玩了！", "工资怎么会是负数呢？");
$dt = sqlesc(date("Y-m-d H:i:s"));
if($class=="forummods")//论坛版主
{
$classname="论坛版主";
$query1 = sql_query("SELECT userid FROM forummods GROUP by userid");
while($dat=mysql_fetch_assoc($query1))
{ sql_query("UPDATE users SET seedbonus = seedbonus + $point WHERE id=$dat[userid]");
if(mysql_num_rows(sql_query("SELECT * FROM users WHERE id=$dat[userid]"))>0)sql_query("INSERT INTO messages (sender, receiver, added, subject, msg) VALUES (0, $dat[userid], $dt, '福利来啦！', '管理组为所有"."$classname"."发放了$point"."个萝卜，请笑纳！')") or sqlerr(__FILE__,__LINE__);
}
}
elseif($class=="picker")//美工
{
$classname="美工/技术组";
$query3 = sql_query("SELECT * FROM users WHERE picker='yes'");
while($dat=mysql_fetch_assoc($query3))
{ sql_query("UPDATE users SET seedbonus = seedbonus + $point WHERE id=".$dat[id]);
if(mysql_num_rows(sql_query("SELECT * FROM users WHERE id=".$dat[id]))>0)sql_query("INSERT INTO messages (sender, receiver, added, subject, msg) VALUES (0, $dat[id], $dt, '福利来啦！', '管理组为所有"."$classname"."发放了$point"."个萝卜，请笑纳！')") or sqlerr(__FILE__,__LINE__);}}
elseif($class=="support")//客服
{
$classname="客服";
$query3 = sql_query("SELECT * FROM users WHERE support='yes'");
while($dat=mysql_fetch_assoc($query3))
{ sql_query("UPDATE users SET seedbonus = seedbonus + $point WHERE id=".$dat[id]);
if(mysql_num_rows(sql_query("SELECT * FROM users WHERE id=".$dat[id]))>0)sql_query("INSERT INTO messages (sender, receiver, added, subject, msg) VALUES (0, $dat[id], $dt, '福利来啦！', '管理组为所有"."$classname"."发放了$point"."个萝卜，请笑纳！')") or sqlerr(__FILE__,__LINE__);}}
elseif($class=="all")
{ $classname="用户";
$query2 = sql_query("SELECT * FROM users");
while($dat=mysql_fetch_assoc($query2))
{ sql_query("UPDATE users SET seedbonus = seedbonus + $point WHERE id=".$dat[id]);
if(mysql_num_rows(sql_query("SELECT * FROM users WHERE id=".$dat[id]))>0)sql_query("INSERT INTO messages (sender, receiver, added, subject, msg) VALUES (0, $dat[id], $dt, '福利来啦！', '管理组为所有"."$classname"."发放了$point"."个萝卜，请笑纳！')") or sqlerr(__FILE__,__LINE__);}}
else{
$classname=($class==10?"贵宾":($class==11?"养老族":($class==12?"保种员":($class==13?"发布员":($class==14?"管理员":($class==15?"站长":"主管"))))));
sql_query("UPDATE users SET seedbonus = seedbonus + $point WHERE class = $class");
$query = sql_query("SELECT id FROM users WHERE class = $class");
while($dat=mysql_fetch_assoc($query))
{ sql_query("INSERT INTO messages (sender, receiver, added, subject, msg) VALUES (0, $dat[id], $dt, '福利来啦！', '管理组为所有"."$classname"."发放了$point"."个萝卜，请笑纳！')") or sqlerr(__FILE__,__LINE__);
}
}
// write_log("25.0 bonus point is sent to everyone. -" . $CURUSER["username"] ,'normal');
stderr("成功", "成功给所有$classname"."发放$point"."个萝卜");
die;
}
if ($_POST["username"] == "" || $_POST["seedbonus"] == "" || $_POST["seedbonus"] == "")
stderr("错误！", "丢失了重要数据");
$username = sqlesc($_POST["username"]);
$seedbonus = sqlesc($_POST["seedbonus"]);
/* if ( $seedbonus == 0 )
{
stderr("错误！", "萝卜未变动");
header("Location: " . get_protocol_prefix() . "$BASEURL/userdetails.php?id=".htmlspecialchars($arr[0]));
die;
}
*/ $arr= mysql_fetch_assoc(sql_query("SELECT id, bonuscomment FROM users WHERE username=$username"));
$bonuscomment=$arr[bonuscomment];
$bonuscomment = date("Y-m-d") . " " .($seedbonus>=0?$seedbonus:-$seedbonus). " Points ".($seedbonus>=0?"added":"subtracted")." by ".$CURUSER["username"].".\n" .htmlspecialchars($bonuscomment);
sql_query("UPDATE users SET seedbonus=seedbonus + $seedbonus, bonuscomment = ".sqlesc($bonuscomment)." WHERE username=$username") or sqlerr(__FILE__, __LINE__);
$dt = sqlesc(date("Y-m-d H:i:s"));
print_r( $arr );
if ( $seedbonus > 0 )
$bonuschangedmsg = '站点为您增加了[color=red][b]'.$seedbonus.'[/b][/color]个萝卜，感谢您对本站的贡献！';
elseif ( $seedbonus < 0 )
$bonuschangedmsg = '您的萝卜被减少了[color=red][b]'.abs($seedbonus).'[/b][/color]个，请注意您在本站的言行！';
else
$bonuschangedmsg = '萝卜好像没有变化，今天不会是4月1日吧？！';
if ( $reason )
$bonuschangedmsg .= '原因是：'.chr(10).chr(10).'[quote]'.$reason.'[/quote]';
$bonuschangedmsg .= chr(10).chr(10).chr(10).'操作人：'.$CURUSER['username'];
print($bonuschangedmsg);
sql_query("INSERT INTO messages (sender, receiver, added, subject, msg) VALUES (0, $arr[id], $dt, '萝卜变动', ".sqlesc($bonuschangedmsg).")") or sqlerr(__FILE__,__LINE__);
$res = sql_query("SELECT id FROM users WHERE username=$username");
$arr = mysql_fetch_row($res);
if (!$arr)
stderr("Error", "Unable to update account.");
header("Location: " . get_protocol_prefix() . "$BASEURL/userdetails.php?id=".htmlspecialchars($arr[0]));
die;
}
stdhead("改变用户的萝卜");
?>
<h1>改变用户的萝卜</h1>
<?php
begin_main_frame("",false, 50);
begin_main_frame("调整某个特定用户的萝卜",false,50);
echo "<form method=\"post\" action=\"amountbonus.php\">";
print("<table width=100% border=1 cellspacing=0 cellpadding=4>\n");
?>
<tr><td class="rowhead" width="100px">用户名：</td><td class="rowfollow"><input type="text" name="username" size="20"/></td></tr>
<tr><td class="rowhead">萝卜调整量：</td><td class="rowfollow"><input type="text" name="seedbonus" size="5"/></td></tr>
<tr><td class="rowhead">原因：</td><td class="rowfollow"><textarea rows="10" name="reason" cols="60"></textarea></td></tr>
<tr><td colspan="2" class="toolbox" align="center"><input type="submit" value="就这样！" class="btn"/></td></tr>
<?php end_table();?>
</form>
<?php end_main_frame();?>
<?php begin_main_frame("给每个人发放25个萝卜",false,50);?>
<form action="amountbonus.php" method="post">
<table width=100% border=1 cellspacing=0 cellpadding=5>
<tr><td class="rowfollow" width="100%">
你确定要给每个人都增加25个萝卜？<br /><br /></td></tr>
<tr><td class="toolbox" align="center"><input type = "hidden" name = "doit" value = "yes" />
<input type="submit" class="btn" value="确定" />
</td></tr>
<?php end_table();?>
</form>
<?php
//UC_STAFFLEADER
if (get_user_class() >= 14)
{
begin_main_frame("发工资",false,50);
echo "
<form action=\"amountbonus.php\" method=\"post\" >
<table width=100% border=1 cellspacing=0 cellpadding=5>
<tr><td class=\"rowfollow\" width=\"100%\">
给<select name=\"class\"><option value=\"all\">所有用户<option value=10>贵宾</option><option value=11>养老族</option><option value=12>保种员</option><option value=13 selected=\"selected\">发布员</option><option value=14>管理员</option><option value=15>站长</option><option value=16>主管</option><option value=\"forummods\">论坛版主</option><option value=\"picker\">美工/技术组</option><option value=\"support\">客服</option></select>等级用户增加<input name = \"amount\" value=\"5000\" size=\"8\"/>个萝卜
<br /><br /></td></tr>
<tr><td class=\"toolbox\" align=\"center\"><input type = \"hidden\" name = \"wage\" value = \"yes\" />
<input type=\"submit\" class=\"btn\" value=\"确定\" />
</td></tr>";
end_table();
echo "</form>";
}
?>
<?php
end_main_frame();
end_main_frame();
stdfoot();