echo"<style>";
echo"<!--";
echo"a{font-size:9pt;color:blue}";
echo"-->";
echo"</style>";
}
function GetMessages($msgStart,$number,$type){
$conn=mysql_connect("localhost","207","");
mysql_select_db("test");
$sql="select*from message where fatheird=-1 and type=";
$sql=$sql.$type;
$sql=$sql."order by time desc LIMIT ";
$sql=$sql.$msgStart;
$sql=$sql.",";
$sql=$sql.$number;
$result= mysql_query($sql,$conn);
if(!$result){
mysql_close($conn);
$msgs[0]=0;
return $msgs;
}
$count=0;
while ($obj=mysql_fetch_object($result)){
$count++;
$msgs[$count]=$obj;
}
$msgs[0]=$count;
mysql_close($conn);
return $msgs;
}
function InsertMessage($msg){
if(!(($msg["title"])&&($msg["author"])&&($msg["time"]))){
return 0;
exit;
}
$conn=mysql_connect("localhost","207","");
mysql_select_db("test");
$sql="insert into message(title,body,author,fatherid,time,type)values('";
$sql=$sql.getsafestring($msg["title"]);
$sql=$sql."','";
$sql=$sql.getsafestring($msg["body"]);
$sql=$sql."','";
$sql=$sql.$msg["author"];
$sql=$sql."',";
$sql=$sql.$msg["fatherid"];
$sql=$sql.",'";
$sql=$sql.$msg["time"];
$sql=$sql."',";
$sql=$sql.$msg["type"];
$sql=$sql.")";
$result=mysql_query($sql,$conn);
mysql_close($conn);
return $result;
}
function getmessagebyfather($fatherid){
$conn=mysql_connect("localhost","207","");
mysql_select_db("test");
$sql="select*from message where fatherid=";
$sql=$sql.$fatherid;
$sql=$sql."order by time desc";
$result=mysql_query($sql,$conn);
if(!$result){
mysql_close($conn);
$msgs[0]=0;
return $msgs;
}
$count=0;
while($obj=mysql_fetch_object($result)){
$count++;
$msgs[$count]=$obj;
$msgs[$count]->child=getmessagebyfather($obj->id);
}
$msgs[0]=$count;
return $msgs;
}
$count=0;
while ($obj=mysql_fetch_object($result)){
$count++;
$msgs[$count]=$obj;
$msgs[$count]->child=getmessagebyfather($obj->id);
}
$msgs[0]=$count;
return $msgs;
}
function getmsgcount($type){
$conn=mysql_connect("localhost","207","");
mysql_select_db("test");
$sql="select count(*)from message where fatherid=-1 and type=";
$sql=$sql.$type;
$result=mysql_query($sql,$conn);
$count=mysql_result($result,0);
mysql_colse($conn);
return $count;
}
function getmessagebyid($id){
$conn=mysql_connect("localhost","207","");
mysql_select_db("test");
$sql="select*from messgae where id=".$id;
$result=mysql_query($sql,$conn);
if(!$result)
return 0;
}
$obj=mysql_fetch_object($result);
mysql_colse($conn);
return $obj;
}
function getsafestring($string){
$string=str_replace("<","<",$string);
$string=str_replace(">",">",$string);
$string=str_replace("'","",$string);
$string=str_replace("\n","<br>",$string);
$string=str_replace(" ","",$string);
return $string
}
<?
require("/commonfuncs.php3");
require("home/websrc/userfuncs.php3");
function makeloginform(){
echo"Please login first<br>";
echo"<form action+";
echo $GLOBALS["PHP_SELF"];
if(!$HTTP_COOKKIE_VARS["UserID"]){
if(!$UserName){
makeloginform();
exit;
}
if(!$userinfo=getuserbyname($UserName))){
echo "Login Name Error!";
exit;
}
if($userinfo->password!=$Password){
echo "Login Password Error!";
exit;
}
$conn=DBConnect();
$sql="insert into useronline(uid,logintime,username)values(";
$sql=$sql.$userinfo->name;
$sql=$sql."')";
mysql_query($sql,$conn);
DBClose($conn);
if(!(setcookie("UserID",$userinfo->id,"","/"))){
echo"Set Cookie Error!!";
exit;
}
$strHeader="Location:".$PHP_SELF;
header($strHeader);
exit;
}
?>
延伸阅读
文章来源于领测软件测试网 https://www.ltesting.net/
