156 lines
5.5 KiB
PHP
156 lines
5.5 KiB
PHP
<!DOCTYPE html>
|
|
<html lang="en">
|
|
|
|
<head>
|
|
<meta charset="utf-8">
|
|
<meta http-equiv="X-UA-Compatible" content="IE=edge">
|
|
<meta name="viewport" content="width=device-width, initial-scale=1">
|
|
|
|
|
|
<!-- Styles -->
|
|
<?php require("./header-files.php");
|
|
require_once("../include/my_func.inc.php");
|
|
|
|
require_once("../include/const.inc.php");
|
|
include_once("kindeditor.php");
|
|
?>
|
|
<title><?php echo $OJ_NAME;?> - Admin</title>
|
|
|
|
</head>
|
|
|
|
<body>
|
|
|
|
<?php require("./nav.php");?>
|
|
<?php
|
|
if ($mod=='hacker') {
|
|
header("Location:index.php");
|
|
}
|
|
?>
|
|
<?php
|
|
if(isset($_POST['news_id'])){
|
|
require_once("../include/check_post_key.php");
|
|
$title = $_POST['title'];
|
|
$content = $_POST['content'];
|
|
|
|
$content = str_replace("<p>", "", $content);
|
|
$content = str_replace("</p>", "<br />", $content);
|
|
$content = str_replace(",", ",", $content);
|
|
|
|
$user_id = $_SESSION[$OJ_NAME.'_'.'user_id'];
|
|
$news_id = intval($_POST['news_id']);
|
|
|
|
if(false){
|
|
$title = stripslashes($title);
|
|
$content = stripslashes($content);
|
|
}
|
|
|
|
|
|
|
|
$title = RemoveXSS($title);
|
|
$content = RemoveXSS($content);
|
|
|
|
$sql = "UPDATE `news` SET `title`=?,`time`=now(),`content`=?,user_id=? WHERE `news_id`=?";
|
|
echo $sql;
|
|
pdo_query($sql,$title,$content,$user_id,$news_id) ;
|
|
|
|
?><script>location.href="news_list.php";</script><?php
|
|
exit();
|
|
}else{
|
|
$news_id = intval($_GET['id']);
|
|
$sql = "SELECT * FROM `news` WHERE `news_id`=?";
|
|
$result = pdo_query($sql,$news_id);
|
|
if(count($result)!=1){
|
|
echo "No such News!";
|
|
exit(0);
|
|
}
|
|
|
|
$row = $result[0];
|
|
|
|
$title = htmlentities($row['title'],ENT_QUOTES,"UTF-8");
|
|
$content = $row['content'];
|
|
}
|
|
?>
|
|
<div class="content-wrap">
|
|
<div class="main">
|
|
<div class="container-fluid">
|
|
<div class="row">
|
|
<div class="col-lg-8 p-0">
|
|
<div class="page-header">
|
|
<div class="page-title">
|
|
<h1>后台主页</h1>
|
|
</div>
|
|
</div>
|
|
</div><!-- /# column -->
|
|
<div class="col-lg-4 p-0">
|
|
<div class="page-header">
|
|
<div class="page-title">
|
|
<ol class="breadcrumb text-right">
|
|
<li>常规设置</li>
|
|
<li class="active">新闻编辑</li>
|
|
</ol>
|
|
</div>
|
|
</div>
|
|
</div><!-- /# column -->
|
|
</div><!-- /# row -->
|
|
<div class="main-content">
|
|
<div class="row">
|
|
<div class="col-lg-12">
|
|
<div class="card alert">
|
|
<div class="card-header">
|
|
<h4>新闻修改 N<?php echo $news_id;?></h4>
|
|
<div class="card-header-right-icon">
|
|
<ul>
|
|
<li class="card-close" data-dismiss="alert"><i class="ti-close"></i></li>
|
|
</ul>
|
|
</div>
|
|
</div>
|
|
<div class="card-body">
|
|
<form action=news_edit.php method='post'>
|
|
<?php require_once("../include/set_post_key.php");?>
|
|
<label for=title>标题</label><input type="text" name="title" class="form-control" value="<?php echo $title;?>">
|
|
<lable for=content>内容</lable>
|
|
<textarea name='content' rows=15 class="kindeditor" ><?php echo htmlentities($content,ENT_QUOTES,"UTF-8")?></textarea><br>
|
|
<input type=hidden name='news_id' value=<?php echo $news_id?>>
|
|
<button type='submit' class="btn btn-info btn-addon i"><i class="fa fa-save"></i>保存</button>
|
|
</form>
|
|
</div>
|
|
</div>
|
|
</div>
|
|
</div><!-- /# row -->
|
|
</div>
|
|
<!-- /# main content -->
|
|
CopyRight © 1999-<?php echo date('Y');?> MasterOJ.All rights reserved
|
|
</div><!-- /# container-fluid -->
|
|
</div><!-- /# main -->
|
|
</div><!-- /# content wrap -->
|
|
|
|
|
|
|
|
<script src="assets/js/lib/jquery.min.js"></script><!-- jquery vendor -->
|
|
<script src="assets/js/lib/jquery.nanoscroller.min.js"></script><!-- nano scroller -->
|
|
<script src="assets/js/lib/sidebar.js"></script><!-- sidebar -->
|
|
<script src="assets/js/lib/bootstrap.min.js"></script><!-- bootstrap -->
|
|
<script src="assets/js/lib/mmc-common.js"></script>
|
|
<script src="assets/js/lib/mmc-chat.js"></script>
|
|
<!-- Chart js -->
|
|
<script src="assets/js/lib/chart-js/Chart.bundle.js"></script>
|
|
<script src="assets/js/lib/chart-js/chartjs-init.js"></script>
|
|
<!-- // Chart js -->
|
|
|
|
|
|
<script src="assets/js/lib/sparklinechart/jquery.sparkline.min.js"></script><!-- scripit init-->
|
|
<script src="assets/js/lib/sparklinechart/sparkline.init.js"></script><!-- scripit init-->
|
|
|
|
<!-- Datamap -->
|
|
<script src="assets/js/lib/datamap/d3.min.js"></script>
|
|
<script src="assets/js/lib/datamap/topojson.js"></script>
|
|
<script src="assets/js/lib/datamap/datamaps.world.min.js"></script>
|
|
<script src="assets/js/lib/datamap/datamap-init.js"></script>
|
|
<!-- // Datamap -->-->
|
|
<script src="assets/js/lib/weather/jquery.simpleWeather.min.js"></script>
|
|
<script src="assets/js/lib/weather/weather-init.js"></script>
|
|
<script src="assets/js/lib/owl-carousel/owl.carousel.min.js"></script>
|
|
<script src="assets/js/lib/owl-carousel/owl.carousel-init.js"></script>
|
|
<script src="assets/js/scripts.js"></script><!-- scripit init-->
|
|
</body>
|
|
</html>
|