基于PHP的光影游戏积分系统 php版.zip

<?php /*********************/ /* */ /* Version : 5.1.0 */ /* Author : RM */ /* Comment : 071223 */ /* */ /*********************/ function sedit( ) { global $db; global $web_dbtop; global $web_headdir; $str = "card_".intval( $_COOKIE['usersid'] ); if ( $_FILES['UserPhoto']['name'] != "" ) { $tmp_file = $_FILES['UserPhoto']['tmp_name']; $file_types = explode( ".", $_FILES['UserPhoto']['name'] ); $file_type = $file_types[count( $file_types ) - 1]; if ( strtolower( $file_type ) != "jpg" & strtolower( $file_type ) != "gif" & strtolower( $file_type ) != "bmp" & strtolower( $file_type ) != "png" ) { echo "<script language=javascript>alert('格式错误请重新选择图片！');history.go(-1);</script>"; exit( ); } $file_name = $str.".".$file_type; if ( !copy( $tmp_file, "../".$web_headdir.$file_name ) ) { echo "<script language=javascript>alert('上传错误请重试！！');history.go(-1);</script>"; exit( ); } } if ( $_FILES['UserPhoto']['name'] != "" ) { $UserPhoto = $web_headdir.$file_name; } else { $UserPhoto = $_POST['SysPhoto']; } if ( $_POST['UserInterested'] ) { $UserInterested = implode( ",", $_POST['UserInterested'] ); } $sql = "update ".$web_dbtop."users set id={$_POST['gid']},email='{$_POST['email']}',name='{$_POST['UserNick']}',"; if ( $_POST['password'] ) { $sql .= "password='".md5( $_POST['password'] )."',"; } $sql .= "vip=".intval( $_POST['vip'] ).",vipdate='".$_POST['vipdate'].( "',points=".$_POST['points'].",back={$_POST['back']},experience={$_POST['experience']},maxexperience={$_POST['maxexperience']},secques='{$_POST['UserSecQues']}',secans='{$_POST['UserSecAns']}'\r\n\t,sex='{$_POST['UserGender']}',head='{$UserPhoto}',qq='{$_POST['UserQQ']}',birthday='{$_POST['BirthYear']}-{$_POST['BirthMonth']}-{$_POST['BirthDay']}'\r\n\t,tel='{$_POST['UserPhone']}',address='{$_POST['UserPro']}-{$_POST['UserCity']}-{$_POST['UserAddr']}',education='{$_POST['UserQualifications']}',job='{$_POST['UserJob']}',bent='{$UserInterested}',caption='{$_POST['UserDescription']}',tjid={$_POST['tjid']} where id={$_POST['id']}" ); $query = $db->query( $sql ); } function dellogin( ) { global $db; global $web_dbtop; $db->query( "delete from ".$web_dbtop."users where vip=0 and logintime < date_add(curdate(),INTERVAL -2 month)" ); } function jd( ) { global $db; global $web_dbtop; $db->query( "update ".$web_dbtop."users set dj=0,djly=NULL where id={$_GET['id']}" ); } function djcz( ) { global $db; global $web_dbtop; $db->query( "update ".$web_dbtop."users set dj=1,djly='".$_POST['djly'].( "' where id in (".$_POST['id'].")" ) ); $db->query( "delete from ".$web_dbtop."game16_auto where uid in ({$_POST['id']})" ); $db->query( "delete from ".$web_dbtop."game28_auto where uid in ({$_POST['id']})" ); } function del( ) { global $db; global $web_dbtop; if ( isset( $_POST['id'] ) ) { $id = implode( ",", $_POST['id'] ); } else { $id = $_GET['id']; } $query = $db->query( "Select id,head,cardpic from ".$web_dbtop."users where id in ({$id})" ); while ( $rs = $db->fetch_array( $query ) ) { if ( stristr( $rs['head'], "userspic/head/" ) ) { deletefile( "../".$rs['head'] ); } deletefile( "../".$rs['cardpic'] ); } $db->query( "delete from ".$web_dbtop."users where id in ({$id})" ); $db->query( "delete from ".$web_dbtop."adip where uid in ({$id})" ); $db->query( "delete from ".$web_dbtop."adlogusers where uid in ({$id})" ); $db->query( "delete from ".$web_dbtop."advice where usersid in ({$id})" ); $db->query( "delete from ".$web_dbtop."backlog where usersid in ({$id})" ); $db->query( "delete from ".$web_dbtop."bbs_posts where uid in ({$id})" ); $db->query( "delete from ".$web_dbtop."bbs_reply where uid in ({$id})" ); $db->query( "delete from ".$web_dbtop."business where uid in ({$id})" ); $db->query( "delete from ".$web_dbtop."card where uid in ({$id})" ); $db->query( "delete from ".$web_dbtop."exchange where uid in ({$id})" ); $db->query( "delete from ".$web_dbtop."game_log where uid in ({$id})" ); $db->query( "delete from ".$web_dbtop."game11_auto where uid in ({$id})" ); $db->query( "delete from ".$web_dbtop."game11_auto_tz where uid in ({$id})" ); $db->query( "delete from ".$web_dbtop."game11_users_tz where uid in ({$id})" ); $db->query( "delete from ".$web_dbtop."game16_auto where uid in ({$id})" ); $db->query( "delete from ".$web_dbtop."game16_auto_tz where uid in ({$id})" ); $db->query( "delete from ".$web_dbtop."game16_users_tz where uid in ({$id})" ); $db->query( "delete from ".$web_dbtop."game28_auto where uid in ({$id})" ); $db->query( "delete from ".$web_dbtop."game28_auto_tz where uid in ({$id})" ); $db->query( "delete from ".$web_dbtop."game28_users_tz where uid in ({$id})" ); $db->query( "delete from ".$web_dbtop."gamebox_log where uid in ({$id})" ); $db->query( "delete from ".$web_dbtop."gamedodge where uid in ({$id})" ); $db->query( "delete from ".$web_dbtop."msg where usersid in ({$id})" ); $db->query( "delete from ".$web_dbtop."userslog where usersid in ({$id})" ); $db->query( "delete from ".$web_dbtop."webip where uid in ({$id})" ); $db->query( "delete from ".$web_dbtop."tjlog where uid in ({$id})" ); } function main( ) { global $db; global $web_dbtop; global $web_moneyname; echo "<TABLE width=\"96%\" border=0 align=center cellpadding=0 cellSpacing=1 class=tbtitle style=\"BACKGROUND: #cad9ea;\">\r\n <TBODY>\r\n <TR>\r\n <TD bgColor=#f5fafe><table width=\"96%\" border=\"0\" align=\"center\" cellpadding=\"3\" cellspacing=\"1\">\r\n <tr>\r\n <form action=\"admin_users.php\" method=\"get\">\r\n <td width=\"10%\"><strong>搜索用户：</strong></td>\r\n <td width=\"21%\"><input id=keyword size=20 name=keyword></td>\r\n <td width=\"10%\" align=\"center\"><INPUT class=inputbut type=submit value=搜索 name=Submit></td>\r\n </form>\r\n <td width=\"10%\"><STRONG>查看方式</STRONG>：</td>\r\n <td width=\"35%\"><A href=\"admin_users.php?sorting=vip\">VIP</a> | <A href=\"admin_users.php?sorting=time\">注册时间</A> | <A href=\"admin_users.php?sorting=points\">"; echo $web_moneyname; echo "</A> | <A href=\"admin_users.php?sorting=loginip\">IP</a> | <A href=\"admin_users.php?sorting=djpoints\">兑奖</a> | <A href=\"admin_usersyc.php\">检测异常帐户</a></td>\r\n </tr>\r\n </table></TD>\r\n </TR>\r\n </TBODY>\r\n</TABLE>\r\n<TABLE width=\"96%\" border=0 align=center cellpadding=\"5\" cellSpacing=1 class=tbtitle style=\"BACKGROUND: #cad9ea;\">\r\n<form name=\"form\" method=\"post\">\r\n <TBODY>\r\n <TR bgColor=\"#f5fafe\">\r\n <TD width=\"4%\">&nbsp;</TD>\r\n\t <TD align=\"center\">用户ID</TD>\r\n <TD width=\"17%\" align=\"center\">用户E-mail</TD>\r\n <TD width=\"10%\" align=\"center\">"; echo $web_moneyname; echo "</TD>\r\n\t <TD width=\"10%\" align=\"center\">银行</TD>\r\n <TD width=\"6%\" align=\"center\">兑奖数</TD>\r\n <TD width=\"13%\" align=\"center\">登陆IP</TD>\r\n <TD width=\"17%\" align=\"center\">操作</TD>\r\n </TR>\r\n\t"; $intpage = 20; if ( isset( $_GET['page'] ) ) { $rsnum = ( $_GET['page'] - 1 ) * $intpage; } else { $rsnum = 0; } $sorting = $_REQUEST['sorting'] ? ( $sorting = $_REQUEST['sorting'] ) : "id"; $sql = "Select * from ".$web_dbtop."users"; if ( $_REQUEST['keyword'] ) { $sql .= " where id=".intval( $_REQUEST['keyword'] )." or name like '%".trim( $_REQUEST['keyword'] )."%' or loginip like '%".trim( $_REQUEST['keyword'] )."%' or email like '%".trim( $_REQUEST['keyword'] )."%'"; } if ( $sorting == "points" ) { $sorting = "points+back