www.gusucode.com > citySHOP B2C商城系统 进销存 2.0.6码程序 > upload/box.php
<?php if (!NOROBOT) { define('NOROBOT', true); } require_once './include/common.inc.php'; header('Content-Type:text/html;charset=GB2312'); if (!empty($_POST)) { foreach ($_POST as $s => $v) { $$s = iconv('UTF-8', 'gbk//TRANSLIT', $$s); } } $showbox = 'none'; $msg = isset($msg) ? $msg : ''; if ($act == 'plform') { if (!$mall_uid) { exit('login_plform:你还没有登陆,请先登陆再进行评价!'); } $buynum = $db->result_first("SELECT COUNT(og.gid) FROM {$tablepre}ordersgoods og,{$tablepre}orders o WHERE o.uid='$mall_uid' AND o.oid=og.oid AND o.stats>0 AND og.gid='$gid'"); if(!$buynum){ exit('updatereply:只有购买过该商品的用户才能评价。'); }elseif($db->result_first("SELECT COUNT(gid) FROM {$tablepre}goodsreplys WHERE gid='$gid' AND type='0' AND uid='$mall_uid'")>=$buynum){ exit('updatereply:对不起,你已经评价过该商品了。'); } if (submitcheck('postsubmit')) { if (empty($title) || empty($message)) { exit('plform:标题或内容未填。'); } $title = scriptfilter($title); $message = scriptfilter($message); /** * 加入最新动态 */ addaction($mall_uid,"<span class=\"cred\">$mall_user</span> 发表了评价,获得 <span class=\"cred\">$credits_set[reply]</span> 积分:$message"); $db->query("INSERT INTO `{$tablepre}goodsreplys` (`gid`,`title`,`message` , `uid` , `pubdate` , `username` ) VALUES ('$gid','$title','$message', '$mall_uid', '$timestamp', '$mall_user') "); exit('updatereply:恭喜!提交成功,您的评价将在后台审核通过后显示。'); } else { $showbox = 'plform'; } } elseif ($act == 'zxform') { if (!$mall_uid) { exit('login_zxform:你还没有登陆,请先登陆再进行评价!'); } if (submitcheck('postsubmit')) { if (empty($message)) { exit('zxform:内容不能为空。'); } $message = scriptfilter($message); /** * 加入最新动态 */ addaction($mall_uid,"<span class=\"cred\">$mall_user</span> 发表了咨询:$message"); $db->query("INSERT INTO `{$tablepre}goodsreplys` (`gid`,`message` , `uid` , `pubdate` , `username`,`type` ) VALUES ('$gid','$message', '$mall_uid', '$timestamp', '$mall_user','1') "); exit('updateask:恭喜!提交成功,您的咨询将在客服回复后显示。'); } else { $msg = '亲爱的 ' . $mall_user .',我们尽快回复您,并以站内信提醒。'; $showbox = 'zxform'; } } elseif ($act == 'getGoodsAskList') { $gid = intval($gid); $tpp = $tpps['goodsask']; $page = max(1, intval($page)); $start_limit = ($page - 1) * $tpp; $countnum = $db->result_first("SELECT COUNT(*) FROM {$tablepre}goodsreplys WHERE `type`='1' AND `gid`='$gid' AND (`check`=1 OR (`uid`='$mall_uid' && `type`='1'))"); $multipage = multi($countnum, $tpp, $page, "javascript:getGoodsAskList"); $query = $db->query("SELECT gr.*,ug.grouptitle,ug.color,ug.groupavatar FROM {$tablepre}goodsreplys gr,{$tablepre}members m LEFT JOIN {$tablepre}usergroups ug ON ug.groupid=m.groupid WHERE gr.type='1' AND gr.uid=m.uid AND gr.gid='$gid' AND (gr.check=1 OR (gr.uid='$mall_uid' && gr.type='1')) ORDER BY gr.rid DESC LIMIT $start_limit,$tpp"); $content = ''; $lou = 0; $total = $db->num_rows($query); $topuser = ''; while ($arr = $db->fetch_array($query)) { $lou++; if ($lou == $total) { $topuser = '<h3>沙发:<span class="nobold">' . $arr['username'] . '</span> ' . $topuser; } elseif ($lou == ($total - 1)) { $topuser = '板凳:<span class="nobold">' . $arr['username'] . '</span> ' . $topuser; } elseif ($lou == ($total - 2)) { $topuser = '地板:<span class="nobold">' . $arr['username'] . '</span> ' . $topuser; } if ($arr['uid'] == $mall_uid && !$arr['check']) { $replys = '<div class="gm-re c999"> 亲爱的 ' . $mall_user .',我们尽快回复您,并以站内信提醒。</div>'; } else { $replys = $arr['reply'] == '' ? '' : "<div class=\"gm-re\"> <ul> <li class=\"gm-head\"></li> <li class=\"gm-name\">商城客服</li> </ul> <p>$arr[reply]</p> <div class=\"clearBoth\"></div> </div>"; } $arr['groupavatar'] = empty($arr['groupavatar'])?'lv0.gif':$arr['groupavatar']; $arr['pubdate'] = strftime("%Y-%m-%d %H:%M", $arr['pubdate']); $content .= "<div class=\"goodreply-box\"> <ul class=\"gb-left\"> <li><img src=\"images/medal/$arr[groupavatar]\" /></li> <li>$arr[username]</li> <li><span style=\"color:$arr[color];\">$arr[grouptitle]</span></li> </ul> <div class=\"gb-right\"> <span class=\"gb-right-top\"></span> <div class=\"gb-right-middle\"> <span class=\"arrow\"></span> <p class=\"gb-right-middle-content\"> <span class=\"content\">$arr[message]</span> <span class=\"date\">$arr[pubdate]</span> </p> $replys </div> <span class=\"gb-right-bottom\"></span> </div> <div class=\"clearBoth\"></div> </div>\n"; } $topuser .= '</h3>'; if ($lou == 0) { $content = "<h3><center>暂时没有人发表咨询,快来抢沙发。</center></h3>"; } else { $content = $topuser . $content; $content .= $multipage; } exit($content); } elseif ($act == 'getGoodsReplyList') { $gid = intval($gid); $tpp = $tpps['goodsreply']; $page = max(1, intval($page)); $start_limit = ($page - 1) * $tpp; $countnum = $db->result_first("SELECT COUNT(*) FROM {$tablepre}goodsreplys WHERE `type`='0' AND `gid`='$gid' AND (`check`=1 OR (`uid`='$mall_uid' && `type`='0'))"); $multipage = multi($countnum, $tpp, $page, "javascript:getGoodsReplyList"); $query = $db->query("SELECT gr.*,ug.grouptitle,ug.color,ug.groupavatar FROM {$tablepre}goodsreplys gr,{$tablepre}members m LEFT JOIN {$tablepre}usergroups ug ON ug.groupid=m.groupid WHERE gr.type='0' AND gr.uid=m.uid AND gr.gid='$gid' AND (gr.check=1 OR (gr.uid='$mall_uid' && gr.type='0')) ORDER BY gr.pubdate DESC LIMIT $start_limit,$tpp"); $content = ''; $lou = 0; $total = $db->num_rows($query); $topuser = ''; while ($arr = $db->fetch_array($query)) { $lou++; if ($lou == $total) { $topuser = '<h3>沙发:<span class="nobold">' . $arr['username'] . '</span> ' . $topuser; } elseif ($lou == ($total - 1)) { $topuser = '板凳:<span class="nobold">' . $arr['username'] . '</span> ' . $topuser; } elseif ($lou == ($total - 2)) { $topuser = '地板:<span class="nobold">' . $arr['username'] . '</span> ' . $topuser; } $retips = ''; if ($arr['uid'] == $mall_uid && !$arr['check']) { $retips = '<br /><span class="c999">(亲爱的 ' . $mall_user . ',您发表的评价客服正在审核。)</span>'; } $arr['groupavatar'] = empty($arr['groupavatar'])?'lv0.gif':$arr['groupavatar']; $arr['pubdate'] = strftime("%Y-%m-%d %H:%M", $arr['pubdate']); $content .= "<div class=\"goodreply-box\"> <ul class=\"gb-left\"> <li><img src=\"images/medal/$arr[groupavatar]\" /></li> <li>$arr[username]</li> <li><span style=\"color:$arr[color];\">$arr[grouptitle]</span></li> </ul> <div class=\"gb-right\"> <span class=\"gb-right-top\"></span> <div class=\"gb-right-middle\"> <span class=\"arrow\"></span> <p class=\"gb-right-middle-title\"> <span class=\"content\">$arr[title]</span> <span class=\"date\">$arr[pubdate]</span> </p> <p>$arr[message] $retips</p> </div> <span class=\"gb-right-bottom\"></span> </div> <div class=\"clearBoth\"></div> </div>\n"; } $topuser .= '</h3>'; if ($lou == 0) { $content = "<h3><center>暂时没有人发表评论,快来抢沙发。</center></h3>"; } else { $content = $topuser . $content; $content .= $multipage; } exit($content); } elseif ($act == 'login') { $def_username = isset($_MCOOKIE['mall_username']) ? $_MCOOKIE['mall_username'] : ''; if (submitcheck('postsubmit')) { $frombox = true; include (APP_ROOT . './login.php'); } else { $showbox = 'login'; $referer = isset($referer) ? $referer : ''; } } elseif ($act == 'recieveform' || $act == 'recievearea') { if (!$mall_uid) { exit('对不起,你还没有登陆,请先登陆再继续操作!'); } if (submitcheck('postsubmit')) { $db->query("UPDATE {$tablepre}members SET `email`='$email' WHERE uid='$mall_uid'"); if($db->result_first("SELECT adid FROM {$tablepre}address WHERE uid='$mall_uid' AND `default`='1'")){ $db->query("UPDATE {$tablepre}address SET `realname`='$crealname',`province`='$province',`city`='$city',`area`='$area',`address`='$address',`homephone`='$homephone',`mobilphone`='$mobilphone' WHERE uid='$mall_uid' AND `default`='1'"); }else{ $db->query("INSERT INTO {$tablepre}address (`uid`,`realname`,`homephone`,`mobilphone`,`province`,`city`,`area`,`address`,`default`) VALUES ('$mall_uid','$crealname','$homephone','$mobilphone','$province','$city','$area','$address','1')"); } $act = 'recievearea'; } $query = $db->query("SELECT * FROM {$tablepre}members m LEFT JOIN {$tablepre}address a ON a.uid=m.uid AND a.default=1 WHERE m.uid='$mall_uid'"); $member = $db->fetch_array($query); $query = $db->query("SELECT * FROM {$tablepre}address WHERE uid='$mall_uid'"); $addrs = array(); $placeids = '0'; while($arr = $db->fetch_array($query)){ $placeids .= ','.$arr['province'].','.$arr['city'].','.$arr['area']; $addrs[] = $arr; } $query = $db->query("SELECT * FROM {$tablepre}places WHERE placeid IN ($placeids)"); while($arr = $db->fetch_array($query)){ $place[$arr['placeid']] = $arr['name']; } $showbox = $act; } elseif ($act == 'paysendform' || $act == 'paysendarea') { if (!$mall_uid) { exit('对不起,你还没有登陆,请先登陆再继续操作!'); } $query = $db->query("SELECT * FROM {$tablepre}members m,{$tablepre}address a WHERE m.uid=a.uid AND m.uid='$mall_uid' AND a.default='1'"); $member = $db->fetch_array($query); $sendway = isset($sendway)?$sendway:$member['sendway']; $ret = getfreight($sendway, $tweight,array($member['province'], $member['city'], $member['area']),$realprice); $freight = number_format($ret['yf'],2,'.',''); $ttprice = $tprice; if (submitcheck('postsubmit')) { $sqladd = ''; if($sendway == 'company_express'){ $sqladd = ",`sendtime`='$sendtime',`givecall`='$givecall'"; $member['sendtime'] = $sendtime; $member['givecall'] = $givecall; } $db->query("UPDATE {$tablepre}members SET `payway`='$payway',`sendway`='$sendway' $sqladd WHERE uid='$mall_uid'"); $member['payway'] = $payway; $member['sendway'] = $sendway; $act = 'paysendarea'; } /** * 货到付款选择快递运输时加服务费 */ $payway = isset($payway)?$payway:$member['payway']; $sendway = isset($sendway)?$sendway:$member['sendway']; $ser = $payway=='cash_on_delivery' && $sendway=='logistics_transport'?($payways[$payway]['ser']+number_format(($ttprice + $freight)*$payways[$payway]['perser']/100, 2,'.','')):0.00; $ttprice = $tprice+$ser; $totalpay = number_format(($ttprice + $freight), 2,'.',''); if ($act == 'paysendform') { $paycont = ''; foreach ($payways as $s => $pay) { if ($pay['stats'] && values_exists(array($member['province'], $member['city'], $member['area']), $pay['supportcitys'])) { $chked = $member['payway'] == $s ? 'checked="checked"' : ''; $paycont .= "<input type=\"radio\" name=\"payway\" value=\"$s\" $chked onclick=\"listsend('$s');\" /><strong>$pay[name]</strong> <br /><p class=\"c666\" id=\"{$s}_tip\" style=\"padding-left:20px;".($member['payway']==$s?'':'display:none')."\">".nl2br($pay['tip'])."</p>"; } } } $showbox = $act; } elseif ($act == 'getsendway') { if (!$mall_uid) { exit('对不起,你还没有登陆,请先登陆再继续操作!'); } $query = $db->query("SELECT * FROM {$tablepre}members m,{$tablepre}address a WHERE m.uid=a.uid AND m.uid='$mall_uid' AND a.default='1'"); $member = $db->fetch_array($query); $way = isset($way) ? trim($way) : $member['payway']; $sendcont = ''; $wayarr = array(); $place = array($member['province'], $member['city'],$member['area']); /** * 送货时间段选择 */ $timechoce = ''; $timechoce = '送货时间:<br />'; $chked = 'checked="checked"'; $nhour = date('H',$timestamp); foreach ($sendways['company_express']['timechoce']['options'] as $s => $v) { $chked = $member['sendtime'] == $s ? 'checked="checked"' : ''; $timechoce .= '<input type="radio" name="sendtime" value="' . $s . '" ' . $chked . ' />' . $v . '<br />'; $chked = ''; } $timechoce .= '是否送货前电话确认:<input type="radio" name="givecall" value="1" ' . ($member['givecall'] == 1 ? 'checked="checked"' : '') . ' />是 <input type="radio" name="givecall" value="0" ' . ($member['givecall'] == 0 ? 'checked="checked"' : '') . ' />否'; $showtm = ''; foreach ($sendways as $s => $send) { if ($send['stats'] && values_exists($place, $send['supportcitys']) && in_array($way, $send['supportpay'])) { $wayarr[] = $s; $chked = $member['sendway'] == $s ? 'checked="checked"' : ''; $click = 'onclick="showwin(\''.$s.'\');"'; $areatip = ''; if($s =='onsite_self_mentioning'){ foreach ($send['attr'] as $at) { if (values_exists($place, $at['supcitys'])) { $send['tips'] = $at['tip']; } } }else{ foreach ($send['attr'] as $at) { if (values_exists($place, $at['supcitys'])) { $addr = getplace("$member[city],$member[area]"); $send['tips'] = $at['free']=='0'?$at['tip']:'至'.$addr[$member['city']].$addr[$member['area']].','.$at['tip']; } } } $scont = $s == 'company_express' ? $send['tips'].'<br />'.$timechoce : "<span class=\"c999\">$send[tips]</span>"; $showtm = $member['sendway'] != $s ? 'style="display:none"' : ''; $sendcont .= "<input type=\"radio\" name=\"sendway\" value=\"$s\" $chked $click /><strong>$send[name]</strong> <div id=\"{$s}_tip\" $showtm class=\"cartip\">$scont</div><br />"; } } $showbox = $act; } elseif ($act == 'activeauth') { if (submitcheck('postsubmit')) { $frombox = true; $activeauth = true; include (APP_ROOT . './login.php'); } $referer = isset($referer) ? $referer : ''; $showbox = $act; } elseif ($act == 'activesuccess') { $showbox = $act; } elseif ($act == 'search') { include (APP_ROOT . './wordsplit/lib_splitword_full.php'); $sp = new SplitWord(); $keys = $sp->SplitRMM(trim($keywords)); $keysarr = explode(' ', $keys); foreach ($keysarr as $k) { echo '<li><p>' . $k . '</p><em>345个结果</em></li>'; } $sp->Clear(); exit; } elseif ($act == 'suborder'){ $oid = intval($oid); if(!$oid){ exit('close:error'); } $query = $db->query("SELECT * FROM {$tablepre}orders WHERE oid!='$oid' AND stats='0' AND uid='$mall_uid' AND del='0'"); $orders = array(); while($arr = $db->fetch_array($query)){ $arr['bh'] = $arr['oid']+$order_start_number; $arr['total'] = number_format($arr['dgmoney']+$arr['yfmoney']-$arr['yhmoney'],2); $arr['gettime'] = strftime($timeformat,$arr['gettime']); $orders[] = $arr; } if(empty($orders)){ exit('<span class="cred">对不起,没有查询到可合并的订单。</span'); } $showbox = $act; } else { exit('close:error'); } include(template('box')); ?>