/var/www/(Del)tsolpv.com/2013/webadmin/productdet_modify.php


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
<?php
include 'config.php';

// Check if the user is logged in

if ((!isSet($_SESSION['loginname'])) || ($loggin <> '1'))
{
header("Location: login.php");
exit;
}
require(
"configure.php");

$pdid                htmlspecialchars($_POST["pdid"],ENT_QUOTES);
$pdcode                htmlspecialchars($_POST["pdcode"],ENT_QUOTES);
$pdtitleen            htmlspecialchars($_POST["pdtitleen"],ENT_QUOTES);
$pdtitlesc            htmlspecialchars($_POST["pdtitlesc"],ENT_QUOTES);
$pdfeaten            preg_replace("/'/","\'",$_POST["pdfeaten"]);
$pdfeatsc            preg_replace("/'/","\'",$_POST["pdfeatsc"]);
$pdadven            preg_replace("/'/","\'",$_POST["pdadven"]);
$pdadvsc            preg_replace("/'/","\'",$_POST["pdadvsc"]);
$pdparen            preg_replace("/'/","\'",$_POST["pdparen"]);
$pdparsc            preg_replace("/'/","\'",$_POST["pdparsc"]);
$nowdate             date("Y-m-d H:i:s");


// old record
$result5 mysql_query("SELECT * FROM product_det_cat WHERE pdid= '".$pdid."' ");
$a_inc2 = array();
while(
$row5 mysql_fetch_array($result5,MYSQL_ASSOC)){
    
$a_inc2[$row5{'pdcatid'}] = $row5{'pdcatid'};
}

$cntpdcatid          count($_POST['pdcatidSelect']);
$i=1;
foreach(
$_POST['pdcatidSelect'] as $pdcatidbox){
    
$pdcatid[$i++] =  $pdcatidbox;
    
//echo "<br>selected:".$pdcatidbox;
}

$oldpdcatlist $a_inc2;
$newpdcatlist $pdcatid;

//var_dump($oldpdcatlist);
//var_dump($newpdcatlist);
foreach($oldpdcatlist as $oldpdcatid){
    if(
in_array($oldpdcatid$newpdcatlist)==false ){
        
//echo "$oldpdcatid is old -> delete $oldpdcatid <br/>";
        // Delete 产品类别 db
        
$sql3 "DELETE FROM product_det_cat WHERE pdcatid="$oldpdcatid ." AND pdid="$pdid ." ";
        
mysql_query($sql3);
        
// Update Category Sort
        
$sql5 "UPDATE product_det_cat SET psort = psort-1 WHERE psort >=(select psort from product_det_cat where pdcatid="$oldpdcatid ." AND pdid="$pdid .") AND pdcatid="$oldpdcatid ." AND pdid="$pdid ." ";
        
mysql_query($sql5);    
    }
}

foreach(
$newpdcatlist as $newpdcatid){
    if(
in_array($newpdcatid$oldpdcatlist)==false ){
        
//echo "$newpdcatid is new -> insert $newpdcatid <br/>";
        // Sort
        
$sql "select max(psort) as maxid ";
        
$sql .= "from product_det_cat WHERE pdcatid = '".$newpdcatid."' ";
        
$result=mysql_query($sql);
        
$row mysql_fetch_array($result,MYSQL_ASSOC);
        
$psort $row{maxid}+1;    
        
        
$sql2 "insert into product_det_cat (pdid, pdcatid, psort) values ('$pdid', '".$newpdcatid."', '$psort')";
        
mysql_query($sql2);
    }
}



// Modify 
$sql "update product_det set pdcode='$pdcode', pdtitleen='$pdtitleen', pdtitlesc='$pdtitlesc', pdfeaten='$pdfeaten', pdfeatsc='$pdfeatsc', pdadven='$pdadven', pdadvsc='$pdadvsc', pdparen='$pdparen', pdparsc='$pdparsc', modifyday='$nowdate', cmsloginid='".$_SESSION['cmsloginid']."' ";
$sql .= " where pdid="$pdid ." ";
mysql_query($sql);

if( 
mysql_errno() > ){
    echo 
'Modify 产品项目 Error:<br />'mysql_error() .'<br />SQL: '$sql;
    exit;
}

mysql_close($dbh);

header("Location: productdet_index.php?msg=修改成功");
?>