PHP后台管理类介绍
<?
class Admin{//begin class var $action=""; var $table=""; var $pk_val=0; var $pk_name="id"; var $select_sql; var $array_add=array(); var $array_update=array(); var $array_query=array(); var $array_oder_by=array(); var $array_tpl=array(); var $array_valid=array(); var $caption=""; var $html_header=''; var $html_query=''; var $html_cmd='';var $POST;
var $ME; function int_pk_val(){ global $_GET,$_POST; if($this->pk_val)return;if(!empty($_GET['edit_id'])){
$this->pk_val=$_GET['edit_id']; return; }if(!empty($_POST['id'])){
$this->pk_val=$_POST['id']; return; } }function Admin($action,$table,$select_sql){
global $_POST,$ME; /*foreach($_POST as $key=>$val){ $_POST[$key]=trim(nvl($val)); }*/ $this->POST=$_POST; $this->ME=$ME; $this->action=$action; $this->table=$table; $this->select_sql=$select_sql;$this->int_pk_val();
}function execute(){
if(empty($this->action)) $this->display(); else{ $action=$this->action; $this->$action(); } }function display(){
/*显示数据*/ global $CFG,$_POST,$ME;$where=$this->get_where($this->select_sql);
$this->select_sql.=$where;$p=new SXPaging($this->select_sql,nvl($_POST['RequirePage']),nvl($_POST['PageSize']));
if($this->html_cmd) $html_cmd="<INPUT TYPE=hidden NAME=CMD>".$this->html_cmd; else $html_cmd="|<INPUT TYPE=hidden NAME=CMD> <INPUT TYPE=button VALUE=添加 onclick=this.form.CMD.value='add';this.form.submit();> <INPUT TYPE=button VALUE=删除 onclick=this.form.CMD.value='del';this.form.submit();>";include("$CFG->dirtpl/admin/header.html");
echo("<Form method=post action=$ME>"); $str=$p->GetPrint('№',$this->caption,0);if($str)
$str.=$html_cmd.$this->html_query; else{ $str=$this->display_no_data($where); } echo("$str"); echo $this->get_query_state(); echo("</Form>");include("$CFG->dirtpl/admin/footer.html");
}function add($errormsg=''){ global $CFG,$_POST,$ME; $CMD='insert'; $form=(empty($this->array_tpl['form_add']))?$this->array_tpl['form']:$this->array_tpl['form_add']; include($this->array_tpl['header']); include($this->array_tpl['form_header']); include($form); include($this->array_tpl['footer']); }
function insert(){
/*插入数据*/ global $CFG,$_POST,$ME,$DOC_TITLE; $sql_add=$this->get_add_sql(); $errormsg=$this->valid(); if(empty($errormsg)){ $qid=db_query($sql_add); $pk_val=db_insert_id($pk_val); set_logs($this->caption,LOG_TYPE_INSERT,$this->table,$pk_val); $this->go_to_me(); return; }$this->add($errormsg);
}function check_operator($table,$pk_val){
$operator=$_SESSION['SESSION']['user']['id']; $sql="select 1 from $table where $this->pk_name=$pk_val and operator=$operator"; $qid=db_query($sql); return db_fetch_array($qid); }function edit($errormsg=''){
global $CFG,$_POST,$ME,$_GET,$DOC_TITLE; if(empty($this->pk_val))die("编辑ID没有,是程序错了");$CMD="update";
$sql="select * from $this->table where $this->pk_name=$this->pk_val";
$qid=db_query($sql); $_POST=db_fetch_array($qid); if(empty($_POSt['id']))$_POSt['id']=$this->pk_val; $form=empty($this->array_tpl['form_update'])?$this->array_tpl['form']:$this->array_tpl['form_update']; include($this->array_tpl['header']); include($this->array_tpl['form_header']); include($form); include($this->array_tpl['footer']); }function update(){
/*修改*/ global $CFG,$_POST,$ME; $sql=$this->get_update_sql(); $errormsg=$this->valid(); if(empty($errormsg)){ if(!$this->check_operator($this->table,$this->pk_val)){ $errormsg.="<li>不是你添加的数据，你没权修改！"; } } if(!empty($errormsg)){ $this->edit($errormsg);die(); } db_query($sql);set_logs($this->caption,LOG_TYPE_UPDATE,$this->table,$this->pk_val);
$this->go_to_me(); }function del($ctl_name='',$table='',$real_do=0){
/*删除*/ global $_POST,$_SESSION; $operator=$_SESSION['SESSION']['user']['id']; if(!$ctl_name)$ctl_name='del_id'; if($table)$this->table=$table; if(!empty($_POST[$ctl_name])){ //$in=implode(',',$_POST[$ctl_name]); /*$sql=''; if($real_do){ $sql="delete from $this->table where $this->pk_name in ($in)"; }else{ $sql="update $this->table set isdeleted=$operator where $this->pk_name in ($in)"; } db_query($sql);*/ $can_delete_rows=""; foreach($_POST[$ctl_name] as $pk_val){ if($this->check_operator($this->table,$pk_val)){ $sql="delete from $this->table where $this->pk_name = $pk_val"; db_query($sql); set_logs($this->caption,LOG_TYPE_DELETE,$this->table,$pk_val); }else{ $can_delete_rows.="$pk_val,"; } } } if($can_delete_rows)$can_delete_rows="主键为 $can_delete_rows 的数据非您添加，您不能删除!"; $this->go_to_me($can_delete_rows); }function _print(){}
function valid(){ $error_msg=""; $error_msg.=$this->valid_array_valid(); return $error_msg; }function valid_array_valid(){
/*验证数据有效性*/ global $_POST; $error_msg=""; $str=''; $count=count($this->array_valid); for($i=0;$i<$count;$i++){$item=$this->array_valid[$i];
switch($item['valid']){
case 'numeric': if(!is_numeric($this->POST[$item['field']]))$error_msg.="<li>$item[chinese]不是数字"; break; default: if(empty($this->POST[$item['field']]))$error_msg.="<li>$item[chinese]不可为空"; break; }}
if(!empty($error_msg))$error_msg."<br>请您仔细检查."; return $error_msg; }function get_where($sql=''){
global $_POST; $where=''; foreach ($this->array_query as $val){ if(!empty($_POST[$val])) $where.=" and ".substr($val,2) ." like '%$_POST[$val]%'"; } $where.=" and $this->table.isdeleted!=1";if(eregi('where',$sql)) return $where;
return " where ".substr($where,4);
}function get_order_by(){return '';}
function get_add_sql(){ global $_POST,$_SESSION; $fields=implode(",",$this->array_add); $values=""; $operator=$_SESSION['SESSION']['user']['id']; foreach($this->array_add as $val){ $val=trim($val); $values.="'$_POST[$val]',"; }
$values=substr($values,0,strlen($values)-1);
$sql="insert into $this->table (operator,$fields) values($operator,$values)";
return $sql; }function get_update_sql(){
global $_POST; $this->array_update=empty($this->array_update)?$this->array_add:$this->array_update; $sql="update $this->table set ";foreach($this->array_update as $val){
$val=trim($val); $sql.=" $val='$_POST[$val]',"; } $sql=substr($sql,0,strlen($sql)-1); $pk=$this->pk_name; $sql.=" where $pk='$_POST[$pk]'"; return $sql; }function set_select_sql($val){$this->select_sql=$val;} function set_array_add($val){$this->array_add=$val;} function set_array_update($val){$this->array_update=$val;} function set_array_query($val){$this->array_query=$val;} function set_array_valid($val){$this->array_valid=$val;}
function set_oder_by($val){$this->array_oder_by=$val;}
function set_caption($val){$this->caption=$val;} function set_pk_val($val){if(!empty($val))$this->pk_val=$val;} function set_pk_name($val){if(!empty($val))$this->pk_name=$val;}function set_html_query($val){
global $ME; $this->html_query=$val; $this->html_query.="<INPUT TYPE=button VALUE='查询' onclick=this.form.submit();> <INPUT TYPE=button VALUE='重置' onclick=/"location='$ME'/">"; } function set_html_cmd($val){$this->html_cmd=$val;} function set_array_tpl($val){$this->array_tpl=$val;}function get_query_state(){
global $_POST; $js_state="<script language=javascript>try{";foreach($this->array_query as $val){
if(strlen(nvl($_POST[$val])))$js_state.="document.all.$val.value='$_POST[$val]';/n"; } $js_state.="}catch(e){}</script>"; return $js_state; }function display_no_data($where){ global $ME; if(!empty($where)){ return "<input type=button value='本查询没有数据,请重新查询' onclick=/"location='$ME'/">"; }else return "<input type=button value='没有数据,请添加数据' onclick=/"location='$ME?CMD=add'/">"; }
function go_to_me($msg=''){
global $ME; if(!empty($msg))$msg="alert('$msg');"; echo "<script language=javascript>$msg;location='$ME';</script>"; die(); }}//end class
?>