www.gusucode.com > 123phpshop电商系统 v1.2源码程序 > code/admin/admin/update.php
<?php
/**
* 123PHPSHOP
* ============================================================================
* 版权所有 2015 上海序程信息科技有限公司，并保留所有权利。
* 网站地址: http://www.123PHPSHOP.com；
* ----------------------------------------------------------------------------
* 这是一个免费的软件。您可以在商业目的和非商业目的地前提下对程序除本声明之外的
* 代码进行修改和使用；您可以对程序代码以任何形式任何目的的再发布，但一定请保留
* 本声明和上海序程信息科技有限公司的联系方式！本软件中使用到的第三方代码版权属
* 于原公司所有。上海序程信息科技有限公司拥有对本声明和123PHPSHOP软件使用的最终
* 解释权！
* ============================================================================
* 作者: 123PHPSHOP团队
* 手机: 13391334121
* 邮箱: service@123phpshop.com
*/
?>
<?php require_once('../../Connections/localhost.php'); ?>
<?php
function GetSQLValueString($theValue, $theType, $theDefinedValue = "", $theNotDefinedValue = "")
{
$theValue = (!get_magic_quotes_gpc()) ? addslashes($theValue) : $theValue;
switch ($theType) {
case "text":
$theValue = ($theValue != "") ? "'" . $theValue . "'" : "NULL";
break;
case "long":
case "int":
$theValue = ($theValue != "") ? intval($theValue) : "NULL";
break;
case "double":
$theValue = ($theValue != "") ? "'" . doubleval($theValue) . "'" : "NULL";
break;
case "date":
$theValue = ($theValue != "") ? "'" . $theValue . "'" : "NULL";
break;
case "defined":
$theValue = ($theValue != "") ? $theDefinedValue : $theNotDefinedValue;
break;
}
return $theValue;
}
$editFormAction = $_SERVER['PHP_SELF'];
if (isset($_SERVER['QUERY_STRING'])) {
$editFormAction .= "?" . htmlentities($_SERVER['QUERY_STRING']);
}
if ((isset($_POST["MM_update"])) && ($_POST["MM_update"] == "form1")) {
$updateSQL = sprintf("UPDATE member SET password=%s, username=%s, mobile=%s, email=%s WHERE id=%s",
GetSQLValueString(md5($_POST['password']), "text"),
GetSQLValueString($_POST['username'], "text"),
GetSQLValueString($_POST['mobile'], "text"),
GetSQLValueString($_POST['email'], "text"),
GetSQLValueString($_POST['id'], "int"));
if(empty($_POST['password']) || !isset($_POST['password'])){
$updateSQL = sprintf("UPDATE member SET username=%s, mobile=%s, email=%s WHERE id=%s",
GetSQLValueString($_POST['username'], "text"),
GetSQLValueString($_POST['mobile'], "text"),
GetSQLValueString($_POST['email'], "text"),
GetSQLValueString($_POST['id'], "int"));
}
mysql_select_db($database_localhost, $localhost);
$Result1 = mysql_query($updateSQL, $localhost) or die(mysql_error());
$updateGoTo = "index.php";
header(sprintf("Location: %s", $updateGoTo));
}
$colname_admin = "-1";
if (isset($_GET['id'])) {
$colname_admin = (get_magic_quotes_gpc()) ? $_GET['id'] : addslashes($_GET['id']);
}
mysql_select_db($database_localhost, $localhost);
$query_admin = sprintf("SELECT * FROM member WHERE id = %s", $colname_admin);
$admin = mysql_query($query_admin, $localhost) or die(mysql_error());
$row_admin = mysql_fetch_assoc($admin);
$totalRows_admin = mysql_num_rows($admin);
?><!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<title>无标题文档</title>
<link href="../../css/common_admin.css" rel="stylesheet" type="text/css" />
</head>
<body>
<span class="phpshop123_title">管理员信息更新</span>
</p>
<p> </p>
<form action="<?php echo $editFormAction; ?>" method="post" name="admin_update_form" id="admin_update_form">
<table align="center" class="phpshop123_form_box">
<tr valign="baseline">
<td nowrap="nowrap" align="right">账号:</td>
<td><input name="username" id="username" type="text" value="<?php echo $row_admin['username']; ?>" size="32" maxlength="16" /></td>
</tr>
<tr valign="baseline">
<td nowrap="nowrap" align="right">密码:</td>
<td><input name="password" id="password" type="password" value="" size="32" maxlength="16" /></td>
</tr>
<tr valign="baseline">
<td nowrap align="right">确认：</td>
<td><input name="password2" id="password2" type="password" value="" size="32" maxlength="16" /></td>
</tr>
<tr valign="baseline">
<td nowrap align="right">手机:</td>
<td><input name="mobile" id="mobile" type="text" value="<?php echo $row_admin['mobile']; ?>" size="32" maxlength="11"></td>
</tr>
<tr valign="baseline">
<td nowrap align="right">邮箱:</td>
<td><input name="email" id="email" type="text" value="<?php echo $row_admin['email']; ?>" size="32" maxlength="32"></td>
</tr>
<tr valign="baseline">
<td nowrap align="right"> </td>
<td><input type="submit" value="更新记录"></td>
</tr>
</table>
<input type="hidden" name="MM_update" value="form1">
<input type="hidden" name="id" id="id" value="<?php echo $row_admin['id']; ?>">
</form>
<script language="JavaScript" type="text/javascript" src="../../js/jquery-1.7.2.min.js"></script>
<script language="JavaScript" type="text/javascript" src="../../js/jquery.validate.min.js" charset="UTF-8"></script>
<script>
$().ready(function(){
$("#admin_update_form").validate({
rules: {
username: {
required: true,
minlength: 6,
remote:{
url: "ajax_update_username.php",
type: "post",
dataType: 'json',
data: {
'username': function(){return $("#username").val();},
'id': function(){return $("#id").val();}
}
}
},
password: {
minlength: 8
},
password2: {
minlength: 8 ,
equalTo:"#password"
},
mobile: {
minlength: 11,
remote:{
url: "ajax_update_mobile.php",
type: "post",
dataType: 'json',
data: {
'mobile': function(){return $("#mobile").val();},
'id': function(){return $("#id").val();}
}
}
},
email: {
email:true,
required: true,
minlength: 6,
remote:{
url: "ajax_update_email.php",
type: "post",
dataType: 'json',
data: {
'email': function(){return $("#email").val();},
'id': function(){return $("#id").val();}
}
}
}
},
messages: {
username: {
remote:"用户名已存在"
},
email: {
remote:"邮件地址已经存在"
},
mobile: {
remote:"手机号码已经存在"
}
}
});
});</script>
</body>
</html>
<?php
mysql_free_result($admin);
?>