<?php
/**
 * Enter description here...
 *
 * @author Administrator
 * @package defaultPackage
 * @version  $Id: group_notice.php,v 1.1 2008/12/11 02:09:53 blt Exp $
 */
require_once(dirname(__FILE__)."/config.php");
require_once(DEDEINC.'/datalistcp.class.php');
CheckPurview('group_Edit');

$id = isset($id) && is_numeric($id) ? $id : 0;
$gid = isset($gid) && is_numeric($gid) ? $gid : 0;
$action = isset($action) ? trim($action) : '';

$keyword = isset($keyword) ? trim($keyword) : '';
$keyword = stripslashes($keyword);
$keyword = ereg_replace("[\"\r\n\t\*\?\(\)\$%']"," ",trim($keyword));
$keyword = addslashes($keyword);

$username = isset($username) ? trim($username) : '';
$username = stripslashes($username);
$username = ereg_replace("[\"\r\n\t\*\?\(\)\$%']"," ",trim($username));
$username = addslashes($username);

if($gid < 1)
{
	ShowMsg("含有非法操作!.","-1");
	exit();
}

if($action=="del")
{
	if($id > 0)
	{
		$db->ExecuteNoneQuery("DELETE FROM #@__group_notice WHERE id='$id'");
	}
}
else if($action=="edit")
{
	$row = $db->GetOne("SELECT * FROM #@__group_notice WHERE id='$id'");
	$title = $row['title'];
	$notice = $row['notice'];
}
else if($action=="save")
{
	$row = $db->GetOne("SELECT * FROM #@__group_notice WHERE id='$id'");
	if(empty($title))
	{
		$title = $row['title'];
	}
	if(empty($notice))
	{
		$notice = $row['notice'];
	}
	$db->ExecuteNoneQuery("UPDATE #@__group_notice SET notice='".$notice."',title='".$title."' WHERE id='$id'");
}
unset($row);

//列表加载模板
$wheresql = "WHERE gid='{$gid}'";
if(!empty($keyword))
{
	$wheresql .= " AND	(title like '%".$keyword."%' OR notice like '%".$keyword."%')";
}
if(!empty($username))
{
	$wheresql .= " AND uname like '%".$username."%'";
}
$sql = "SELECT * FROM #@__group_notice $wheresql ORDER BY stime DESC";

$dl = new DataListCP();
$dl->pageSize = 20;
$dl->SetParameter("keyword",$keyword);
$dl->SetParameter("username",$username);
$dl->SetParameter("gid",$gid);

//这两句的顺序不能更换
$dl->SetTemplate(DEDEADMIN."/templets/group_notice.htm");      //载入模板
$dl->SetSource($sql);            //设定查询SQL
$dl->Display();                  //显示

?>