diff --git a/src/admin/diy_list.php b/src/admin/diy_list.php
index 9cd61111..53fa76f3 100644
--- a/src/admin/diy_list.php
+++ b/src/admin/diy_list.php
@@ -13,7 +13,7 @@ CheckPurview('c_New');
$diyid = isset($diyid) && is_numeric($diyid) ? $diyid : 0;
$action = isset($action) && in_array($action, array('post', 'list', 'edit', 'check', 'delete', 'excel')) ? $action : '';
if (empty($diyid)) {
- showMsg("操作失败", 'javascript:;');
+ showMsg('操作失败', '-1');
exit();
}
require_once DEDEINC.'/diyform.class.php';
@@ -27,13 +27,13 @@ if ($action == 'post') {
$dede_fieldshash = empty($dede_fieldshash) ? '' : trim($dede_fieldshash);
if (!empty($dede_fields)) {
if ($dede_fieldshash != md5($dede_fields.$cfg_cookie_encode)) {
- showMsg("数据校验不对,程序返回", '-1');
+ showMsg('数据校验不对', '-1');
exit();
}
}
$diyform = $dsql->GetOne("SELECT * FROM `#@__diyforms` WHERE diyid=$diyid");
if (!is_array($diyform)) {
- showmsg("表单不存在,程序返回", '-1');
+ showmsg('表单不存在', '-1');
exit();
}
$addvar = $addvalue = '';
@@ -88,13 +88,13 @@ if ($action == 'post') {
if (empty($do)) {
$id = isset($id) && is_numeric($id) ? $id : 0;
if (empty($id)) {
- showMsg('操作失败,未指定id', 'javascript:;');
+ showMsg('操作失败,未指定id', '-1');
exit();
}
$query = "SELECT * FROM {$diy->table} WHERE id=$id";
$row = $dsql->GetOne($query);
if (!is_array($row)) {
- showmsg("您浏览的记录不存在或待审核", '-1');
+ showmsg('您浏览的记录不存在或待审核', '-1');
exit();
}
$postform = $diy->getForm('edit', $row, 'admin');
@@ -107,7 +107,7 @@ if ($action == 'post') {
$diyform = $dsql->GetOne("SELECT * FROM `#@__diyforms` WHERE diyid=$diyid");
$diyco = $dsql->GetOne("SELECT * FROM `$diy->table` WHERE id='$id'");
if (!is_array($diyform)) {
- showmsg("表单不存在,程序返回", '-1');
+ showmsg("表单不存在", '-1');
exit();
}
$addsql = '';
@@ -207,6 +207,6 @@ if ($action == 'post') {
}
echo "";
} else {
- showmsg('未定义操作', "-1");
+ showmsg('未定义操作', '-1');
}
?>
\ No newline at end of file
diff --git a/src/apps/diy.php b/src/apps/diy.php
index 44e255e4..5c4964df 100755
--- a/src/apps/diy.php
+++ b/src/apps/diy.php
@@ -13,7 +13,7 @@ $diyid = isset($diyid) && is_numeric($diyid) ? $diyid : 0;
$action = isset($action) && in_array($action, array('post', 'list', 'view')) ? $action : 'post';
$id = isset($id) && is_numeric($id) ? $id : 0;
if (empty($diyid)) {
- showMsg('操作失败', 'javascript:;');
+ showMsg('操作失败', '/');
exit();
}
require_once DEDEINC.'/diyform.class.php';
@@ -28,13 +28,13 @@ if ($action == 'post') {
$dede_fieldshash = empty($dede_fieldshash) ? '' : trim($dede_fieldshash);
if (!empty($dede_fields)) {
if ($dede_fieldshash != md5($dede_fields.$cfg_cookie_encode)) {
- showMsg('数据校验不对,程序返回', '-1');
+ showMsg('数据校验不对', '-1');
exit();
}
}
$diyform = $dsql->GetOne("SELECT * FROM `#@__diyforms` WHERE diyid='$diyid' ");
if (!is_array($diyform)) {
- showmsg('表单不存在,程序返回', '-1');
+ showmsg('表单不存在', '-1');
exit();
}
$addvar = $addvalue = '';
@@ -47,14 +47,18 @@ if ($action == 'post') {
if ($fieldinfo[1] == 'textdata') {
${$fieldinfo[0]} = FilterSearch(stripslashes(${$fieldinfo[0]}));
${$fieldinfo[0]} = addslashes(${$fieldinfo[0]});
- }
- //获取地址,表单添加text数据类型ip字段型后模板用
+ }
+ //获取提交链接,表单添加字段文字为链接,字段名称默认为link,数据类型为单行文本后模板里用使用
+ if ($fieldinfo[0] == 'link') {
+ ${$fieldinfo[0]} = $_SERVER['HTTP_REFERER'];
+ }
+ //获取提交地址,表单添加字段文字为地址,字段名称默认为ip,数据类型为单行文本后模板里用使用
if ($fieldinfo[0] == 'ip') {
- ${$fieldinfo[0]}=GetIP();
+ ${$fieldinfo[0]} = GetIP();
}
- //获取时间,表单添加text数据类型sj字段型后模板用
- if ($fieldinfo[0] == 'sj') {
- ${$fieldinfo[0]}=date("Y-m-d H:i:s");
+ //获取提交日期,表单添加字段文字为日期,字段名称默认为date,数据类型为单行文本后模板里用使用
+ if ($fieldinfo[0] == 'date') {
+ ${$fieldinfo[0]} = date("Y-m-d H:i:s");
} else {
${$fieldinfo[0]} = GetFieldValue(${$fieldinfo[0]}, $fieldinfo[1],0,'add','','diy', $fieldinfo[0]);
}
@@ -68,10 +72,10 @@ if ($action == 'post') {
$id = $dsql->GetLastID();
if ($diy->public == 2) {
$goto = "diy.php?action=list&diyid={$diy->diyid}";
- $bkmsg = '发布成功,正在前往表单列表';
+ $bkmsg = '提交成功,正在前往表单列表';
} else {
$goto = '/';
- $bkmsg = '发布成功,请等待管理员处理';
+ $bkmsg = '提交成功,请等待管理员处理';
}
ShowMsg($bkmsg, $goto);
}
@@ -96,11 +100,11 @@ if ($action == 'post') {
$datalist->Display();
} else if ($action == 'view') {
if (empty($diy->public)) {
- showMsg('表单已关闭前台浏览', 'javascript:;');
+ showMsg('表单已关闭前台浏览', '/');
exit();
}
if (empty($id)) {
- showMsg('操作失败,未指定id', 'javascript:;');
+ showMsg('操作失败,未指定id', '/');
exit();
}
if ($diy->public == 2) {
@@ -109,7 +113,6 @@ if ($action == 'post') {
$query = "SELECT * FROM `{$diy->table}` WHERE id='$id' AND ifcheck=1";
}
$row = $dsql->GetOne($query);
-
if (!is_array($row)) {
showmsg('您浏览的记录不存在或待审核', '-1');
exit();