|
|
<?php
|
|
|
|
|
|
define('IN_ASC', true);
|
|
|
|
|
|
require(dirname(__FILE__) . '/includes/init.php');
|
|
|
|
|
|
/* 載入語言文件 */
|
|
|
require_once(ROOT_PATH . 'languages/' .$_CFG['lang']. '/user.php');
|
|
|
|
|
|
$user_id = $_SESSION['user_id'];
|
|
|
$action = isset($_REQUEST['act']) ? trim($_REQUEST['act']) : 'default';
|
|
|
|
|
|
$affiliate = json_decode($GLOBALS['_CFG']['affiliate'],true);
|
|
|
$smarty->assign('affiliate', $affiliate);
|
|
|
|
|
|
$smarty->assign('categories', get_categories_tree()); // 分類樹
|
|
|
$back_act='';
|
|
|
$smarty->assign('_CFG', $_CFG);//附加系統配置
|
|
|
|
|
|
if (file_exists(ROOT_PATH . 'includes/website/config/qq_config.php')) {
|
|
|
$smarty->assign('qq_login', 1);
|
|
|
}
|
|
|
if (file_exists(ROOT_PATH . 'includes/website/config/weixin_config.php')) {
|
|
|
$smarty->assign('weixin_login', 1);
|
|
|
}
|
|
|
if (file_exists(ROOT_PATH . 'includes/website/config/alipay_config.php')) {
|
|
|
$smarty->assign('alipay_login', 1);
|
|
|
}
|
|
|
if (file_exists(ROOT_PATH . 'includes/website/config/weibo_config.php')) {
|
|
|
$smarty->assign('weibo_login', 1);
|
|
|
}
|
|
|
|
|
|
// 不需要登錄的操作或自己驗證是否登錄（如ajax處理）的act
|
|
|
$not_login_arr =
|
|
|
array('login','act_login','act_sms_login','register','act_register','act_edit_password','get_password','oath_register','is_user','send_pwd_email','send_pwd_mobile','password', 'signin', 'add_tag', 'collect', 'return_to_cart', 'logout', 'email_list', 'validate_email', 'send_hash_mail', 'order_query', 'is_registered', 'captchauser', 'captcha_login', 'mobile_is_registered', 'dxyzmuser', 'check_email','clear_history','qpassword_name', 'get_passwd_question', 'check_answer','oath' , 'oath_login', 'other_login', 'mpassword_name');
|
|
|
|
|
|
/* 顯示頁面的action列表 */
|
|
|
$ui_arr = array('register', 'login','del_oath', 'profile', 'headimg', 'order_list', 'order_detail', 'address_list', 'collection_list','oath_login',
|
|
|
'message_list', 'tag_list', 'get_password', 'reset_password', 'booking_list', 'add_booking', 'account_raply',
|
|
|
'account_deposit', 'account_log', 'account_detail', 'act_account', 'pay', 'default', 'bonus', 'group_buy', 'group_buy_detail', 'affiliate', 'comment_list','validate_email','track_packages', 'transform_points','qpassword_name','mpassword_name', 'get_passwd_question','send_pwd_mobile', 'check_answer','bindmobile','user_card', 'back_order', 'back_list', 'back_order_detail', 'back_order_act', 'back_replay', 'del_back_order', 'back_order_detail_edit');
|
|
|
|
|
|
/* 未登錄處理 */
|
|
|
if (empty($_SESSION['user_id']))
|
|
|
{
|
|
|
if (!in_array($action, $not_login_arr))
|
|
|
{
|
|
|
if (in_array($action, $ui_arr))
|
|
|
{
|
|
|
/* 如果需要登錄,並是顯示頁面的操作，記錄當前操作，用於登錄後跳轉到相應操作
|
|
|
if ($action == 'login')
|
|
|
{
|
|
|
if (isset($_REQUEST['back_act']))
|
|
|
{
|
|
|
$back_act = trim($_REQUEST['back_act']);
|
|
|
}
|
|
|
}
|
|
|
else
|
|
|
{}*/
|
|
|
if (!empty($_SERVER['QUERY_STRING']))
|
|
|
{
|
|
|
$back_act = 'user.php?' . strip_tags($_SERVER['QUERY_STRING']);
|
|
|
}
|
|
|
$action = 'login';
|
|
|
}
|
|
|
else
|
|
|
{
|
|
|
//未登錄提交數據。非正常途徑提交數據！
|
|
|
die($_LANG['require_login']);
|
|
|
}
|
|
|
}
|
|
|
}
|
|
|
|
|
|
/* 如果是顯示頁面，對頁面進行相應賦值 */
|
|
|
if (in_array($action, $ui_arr))
|
|
|
{
|
|
|
assign_template();
|
|
|
$position = assign_ur_here(0, $_LANG['user_center']);
|
|
|
$smarty->assign('page_title', $position['title']); // 頁面標題
|
|
|
$smarty->assign('ur_here', $position['ur_here']);
|
|
|
$sql = "SELECT value FROM " . $ecs->table('shop_config') . " WHERE id = 419";
|
|
|
$row = $db->getRow($sql);
|
|
|
$car_off = $row['value'];
|
|
|
$smarty->assign('car_off', $car_off);
|
|
|
/* 是否顯示積分兑換 */
|
|
|
if (!empty($_CFG['points_rule']) && unserialize($_CFG['points_rule']))
|
|
|
{
|
|
|
$smarty->assign('show_transform_points', 1);
|
|
|
}
|
|
|
$smarty->assign('helps', get_shop_help()); // 網店幫助
|
|
|
$smarty->assign('data_dir', DATA_DIR); // 數據目錄
|
|
|
$smarty->assign('action', $action);
|
|
|
$smarty->assign('lang', $_LANG);
|
|
|
}
|
|
|
|
|
|
//用户中心歡迎頁
|
|
|
if ($action == 'default')
|
|
|
{
|
|
|
include_once(ROOT_PATH .'includes/lib_clips.php');
|
|
|
if ($rank = get_rank_info())
|
|
|
{
|
|
|
$smarty->assign('rank_name', sprintf($_LANG['your_level'], $rank['rank_name']));
|
|
|
if (!empty($rank['next_rank_name']))
|
|
|
{
|
|
|
$smarty->assign('next_rank_name', sprintf($_LANG['next_level'], $rank['next_rank'] ,$rank['next_rank_name']));
|
|
|
}
|
|
|
}
|
|
|
|
|
|
$userInfo = $db->getRow('SELECT headimg,mobile_phone FROM ' . $ecs->table('users') . " WHERE user_id = $user_id");
|
|
|
$smarty->assign('headimg', $userInfo['headimg']);
|
|
|
|
|
|
$users_auth_list = $db->getAll('SELECT identity_type FROM ' . $ecs->table('users_auth') . " WHERE user_id = $user_id and type=1");
|
|
|
$auth_list = array('tel'=>($userInfo['mobile_phone']? 1 :0));
|
|
|
foreach($users_auth_list as $key=>$val) {$auth_list[$val['identity_type']] = 1;}
|
|
|
$smarty->assign('info', get_user_default($user_id));
|
|
|
$smarty->assign('user_notice', $_CFG['user_notice']);
|
|
|
$smarty->assign('auth_list', $auth_list);
|
|
|
$smarty->assign('prompt', get_user_prompt($user_id));
|
|
|
$smarty->display('user_default.dwt');
|
|
|
}
|
|
|
|
|
|
if ($action == 'del_oath')
|
|
|
{
|
|
|
if( isset($_REQUEST['type']) ) {
|
|
|
$type = trim($_REQUEST['type']);
|
|
|
}
|
|
|
else {
|
|
|
show_message("參數錯誤！");
|
|
|
}
|
|
|
|
|
|
$db->query("DELETE FROM " . $ecs->table('users_auth') . " WHERE user_id='".$user_id."' and identity_type='".$type."' and type=1");
|
|
|
|
|
|
show_message("解除綁定成功！" , array($_LANG['back_up_page'], $_LANG['profile_lnk']), array($back_act,'user.php'), 'info');
|
|
|
}
|
|
|
|
|
|
/* 顯示會員註冊界面 */
|
|
|
if ($action == 'register')
|
|
|
{
|
|
|
if ((!isset($back_act)||empty($back_act)) && isset($GLOBALS['_SERVER']['HTTP_REFERER']))
|
|
|
{
|
|
|
$back_act = strpos($GLOBALS['_SERVER']['HTTP_REFERER'], 'user.php') ? './index.php' : $GLOBALS['_SERVER']['HTTP_REFERER'];
|
|
|
}
|
|
|
|
|
|
/* 取出註冊擴展字段 */
|
|
|
$sql = 'SELECT * FROM ' . $ecs->table('reg_fields') . ' WHERE type < 2 AND display = 1 ORDER BY dis_order, id';
|
|
|
$extend_info_list = $db->getAll($sql);
|
|
|
$smarty->assign('extend_info_list', $extend_info_list);
|
|
|
|
|
|
/* 驗證碼相關設置 */
|
|
|
if ((intval($_CFG['captcha']) & CAPTCHA_REGISTER) && gd_version() > 0)
|
|
|
{
|
|
|
$smarty->assign('enabled_captcha', 1);
|
|
|
$smarty->assign('rand', mt_rand());
|
|
|
}
|
|
|
|
|
|
/* 密碼提示問題 */
|
|
|
$smarty->assign('passwd_questions', $_LANG['passwd_questions']);
|
|
|
|
|
|
$smarty->assign('ztime', $_CFG['ecsdxt_smsgap']);
|
|
|
|
|
|
/* 增加是否關閉註冊 */
|
|
|
$smarty->assign('shop_reg_closed', $_CFG['shop_reg_closed']);
|
|
|
// $smarty->assign('back_act', $back_act);
|
|
|
$smarty->display('user_register.dwt');
|
|
|
}
|
|
|
|
|
|
/* 註冊會員的處理 */
|
|
|
elseif ($action == 'act_register')
|
|
|
{
|
|
|
/* 增加是否關閉註冊 */
|
|
|
if ($_CFG['shop_reg_closed'])
|
|
|
{
|
|
|
$smarty->assign('action', 'register');
|
|
|
$smarty->assign('shop_reg_closed', $_CFG['shop_reg_closed']);
|
|
|
$smarty->display('user_passport.dwt');
|
|
|
}
|
|
|
else
|
|
|
{
|
|
|
include_once(ROOT_PATH . 'includes/lib_passport.php');
|
|
|
|
|
|
if ($_CFG['ecsdxt_mobile_reg'] == '1'){
|
|
|
$email = isset($_POST['extend_field5']) ? trim($_POST['extend_field5']).'@mail.com' : '';
|
|
|
}else{
|
|
|
$email = isset($_POST['email']) ? trim($_POST['email']) : '';
|
|
|
}
|
|
|
$username = isset($_POST['username']) ? trim($_POST['username']) : '';
|
|
|
$password = isset($_POST['password']) ? trim($_POST['password']) : '';
|
|
|
$other['line'] = isset($_POST['extend_field1']) ? $_POST['extend_field1'] : '';
|
|
|
$other['facebook'] = isset($_POST['extend_field2']) ? $_POST['extend_field2'] : '';
|
|
|
$other['office_phone'] = isset($_POST['extend_field3']) ? $_POST['extend_field3'] : '';
|
|
|
$other['home_phone'] = isset($_POST['extend_field4']) ? $_POST['extend_field4'] : '';
|
|
|
$other['mobile_phone'] = isset($_POST['extend_field5']) ? $_POST['extend_field5'] : '';
|
|
|
$sel_question = empty($_POST['sel_question']) ? '' : compile_str($_POST['sel_question']);
|
|
|
$passwd_answer = isset($_POST['passwd_answer']) ? compile_str(trim($_POST['passwd_answer'])) : '';
|
|
|
|
|
|
|
|
|
$back_act = isset($_POST['back_act']) ? trim($_POST['back_act']) : '';
|
|
|
|
|
|
if(empty($_POST['agreement']))
|
|
|
{
|
|
|
show_message($_LANG['passport_js']['agreement']);
|
|
|
}
|
|
|
if (strlen($username) < 3)
|
|
|
{
|
|
|
show_message($_LANG['passport_js']['username_shorter']);
|
|
|
}
|
|
|
|
|
|
if (strlen($password) < 6)
|
|
|
{
|
|
|
show_message($_LANG['passport_js']['password_shorter']);
|
|
|
}
|
|
|
|
|
|
if (strpos($password, ' ') > 0)
|
|
|
{
|
|
|
show_message($_LANG['passwd_balnk']);
|
|
|
}
|
|
|
|
|
|
$mobile = isset($_POST['extend_field5']) ? trim($_POST['extend_field5']) : '';//手機號
|
|
|
$verifycode = isset($_POST['extend_field']) ? trim($_POST['extend_field']) : '';//驗證碼
|
|
|
|
|
|
if ($_CFG['ecsdxt_mobile_reg'] == '1')
|
|
|
{
|
|
|
require_once(ROOT_PATH . 'includes/lib_sms.php');
|
|
|
require_once(ROOT_PATH . 'languages/' .$_CFG['lang']. '/sms.php');
|
|
|
|
|
|
/* 提交的手機號是否正確 */
|
|
|
if(!ismobile($mobile)) {
|
|
|
show_message($_LANG['invalid_mobile_phone']);
|
|
|
}
|
|
|
|
|
|
/* 提交的驗證碼不能為空 */
|
|
|
if(empty($verifycode)) {
|
|
|
show_message($_LANG['verifycode_empty']);
|
|
|
}
|
|
|
|
|
|
/* 提交的驗證碼是否正確 */
|
|
|
if(empty($mobile)) {
|
|
|
show_message($_LANG['invalid_verify_code']);
|
|
|
}
|
|
|
|
|
|
/* 提交的手機號是否已經註冊帳號 */
|
|
|
$sql = "SELECT COUNT(user_id) FROM " . $ecs->table('users') . " WHERE mobile_phone = '$mobile'";
|
|
|
|
|
|
if ($db->getOne($sql) > 0)
|
|
|
{
|
|
|
show_message($_LANG['mobile_phone_registered']);
|
|
|
}
|
|
|
|
|
|
/* 驗證手機號驗證碼和IP */
|
|
|
$sql = "SELECT COUNT(id) FROM " . $ecs->table('verifycode') ." WHERE mobile='$mobile' AND verifycode='$verifycode' AND getip='" . real_ip() . "' AND status=1 AND dateline>'" . gmtime() ."'-86400";//驗證碼一天內有效
|
|
|
|
|
|
if ($db->getOne($sql) == 0)
|
|
|
{
|
|
|
show_message($_LANG['verifycode_mobile_phone_notmatch']);
|
|
|
}
|
|
|
}
|
|
|
|
|
|
/* 驗證碼檢查 */
|
|
|
if ((intval($_CFG['captcha']) & CAPTCHA_REGISTER) && gd_version() > 0)
|
|
|
{
|
|
|
if (empty($_POST['captcha']))
|
|
|
{
|
|
|
show_message($_LANG['invalid_captcha'], $_LANG['sign_up'], 'user.php?act=register', 'error');
|
|
|
}
|
|
|
|
|
|
/* 檢查驗證碼 */
|
|
|
include_once('includes/cls_captcha.php');
|
|
|
|
|
|
$validator = new captcha();
|
|
|
if (!$validator->check_word($_POST['captcha']))
|
|
|
{
|
|
|
show_message($_LANG['invalid_captcha'], $_LANG['sign_up'], 'user.php?act=register', 'error');
|
|
|
}
|
|
|
}
|
|
|
|
|
|
if (register($username, $password, $email, $other) !== false)
|
|
|
{
|
|
|
if ($_CFG['ecsdxt_customer_registed'] == '1')
|
|
|
{
|
|
|
require_once(ROOT_PATH . 'includes/lib_sms.php');
|
|
|
require_once(ROOT_PATH . 'languages/' .$_CFG['lang']. '/sms.php');
|
|
|
|
|
|
$smarty->assign('shop_name', $_CFG['shop_name']);
|
|
|
$smarty->assign('user_name', $username);
|
|
|
$smarty->assign('user_pwd', $password);
|
|
|
|
|
|
$content = $smarty->fetch('str:' . $_CFG['ecsdxt_customer_registed_value']);
|
|
|
|
|
|
/* 發送註冊成功短信提醒 */
|
|
|
$ret = sendsms($other['mobile_phone'], $content);
|
|
|
|
|
|
if($ret === true)
|
|
|
{
|
|
|
//插入註冊成功短信提醒數據記錄
|
|
|
$sql = "INSERT INTO " . $ecs->table('verifycode') . "(mobile, getip, verifycode, dateline, reguid, status) VALUES ('" . $other['mobile_phone'] . "', '" . real_ip() . "', '$password', '" . gmtime() ."', $_SESSION[user_id], 7)";
|
|
|
$db->query($sql);
|
|
|
}
|
|
|
}
|
|
|
|
|
|
$sql = "UPDATE " . $ecs->table('verifycode') . " SET reguid=" . $_SESSION['user_id'] . ",regdateline='" . gmtime() ."',status=2 WHERE mobile='$mobile' AND verifycode='$verifycode' AND getip='" . real_ip() . "' AND status=1 AND dateline>'" . gmtime() ."'-86400";
|
|
|
$db->query($sql);
|
|
|
|
|
|
/*把新註冊用户的擴展信息插入數據庫*/
|
|
|
$sql = 'SELECT id FROM ' . $ecs->table('reg_fields') . ' WHERE type = 0 AND display = 1 ORDER BY dis_order, id'; //讀出所有自定義擴展字段的id
|
|
|
$fields_arr = $db->getAll($sql);
|
|
|
|
|
|
$extend_field_str = ''; //生成擴展字段的內容字符串
|
|
|
foreach ($fields_arr AS $val)
|
|
|
{
|
|
|
$extend_field_index = 'extend_field' . $val['id'];
|
|
|
if(!empty($_POST[$extend_field_index]))
|
|
|
{
|
|
|
$temp_field_content = strlen($_POST[$extend_field_index]) > 100 ? mb_substr($_POST[$extend_field_index], 0, 99) : $_POST[$extend_field_index];
|
|
|
$extend_field_str .= " ('" . $_SESSION['user_id'] . "', '" . $val['id'] . "', '" . compile_str($temp_field_content) . "'),";
|
|
|
}
|
|
|
}
|
|
|
$extend_field_str = substr($extend_field_str, 0, -1);
|
|
|
|
|
|
if ($extend_field_str) //插入註冊擴展數據
|
|
|
{
|
|
|
$sql = 'INSERT INTO '. $ecs->table('reg_extend_info') . ' (`user_id`, `reg_field_id`, `content`) VALUES' . $extend_field_str;
|
|
|
$db->query($sql);
|
|
|
}
|
|
|
|
|
|
/* 寫入密碼提示問題和答案 */
|
|
|
if (!empty($passwd_answer) && !empty($sel_question))
|
|
|
{
|
|
|
$sql = 'UPDATE ' . $ecs->table('users') . " SET `passwd_question`='$sel_question', `passwd_answer`='$passwd_answer' WHERE `user_id`='" . $_SESSION['user_id'] . "'";
|
|
|
$db->query($sql);
|
|
|
}
|
|
|
|
|
|
$sql = 'SELECT type_id FROM ' . $ecs->table("bonus_type").' WHERE send_type=5 ';
|
|
|
$reg_bonus = $db->getAll($sql);
|
|
|
if($reg_bonus)
|
|
|
{
|
|
|
foreach ($reg_bonus AS $val)
|
|
|
{
|
|
|
$sql = "INSERT INTO ". $ecs->table('user_bonus') ." (bonus_type_id, bonus_sn, user_id, used_time, order_id, emailed) "." VALUES('$val[type_id]', 0, '".$_SESSION['user_id']."', 0, 0, 0)";
|
|
|
$db->query($sql);
|
|
|
}
|
|
|
$reg_bonus_message='<p>您已收到新用户註冊贈送紅包（<a href="user.php?act=bonus">點擊查看</a>）</p>';
|
|
|
}
|
|
|
|
|
|
/* 判斷是否需要自動發送註冊郵件 */
|
|
|
if ($GLOBALS['_CFG']['member_email_validate'] && $GLOBALS['_CFG']['send_verify_email'])
|
|
|
{
|
|
|
send_regiter_hash($_SESSION['user_id']);
|
|
|
}
|
|
|
$ucdata = empty($user->ucdata)? "" : $user->ucdata;
|
|
|
show_message(sprintf($_LANG['register_success'].$reg_bonus_message, $username . $ucdata), array($_LANG['back_up_page'], $_LANG['profile_lnk']), array($back_act, 'user.php'), 'info');
|
|
|
}
|
|
|
else
|
|
|
{
|
|
|
$err->show($_LANG['sign_up'], 'user.php?act=register');
|
|
|
}
|
|
|
}
|
|
|
}
|
|
|
// 第三方登錄接口
|
|
|
elseif($action == 'oath')
|
|
|
{
|
|
|
|
|
|
$type = empty($_REQUEST['type']) ? '' : $_REQUEST['type'];
|
|
|
|
|
|
if($type == "taobao"){
|
|
|
header("location:includes/website/tb_index.php");exit;
|
|
|
}
|
|
|
|
|
|
include_once(ROOT_PATH . 'includes/website/jntoo.php');
|
|
|
|
|
|
|
|
|
|
|
|
$c = &website($type);
|
|
|
if($c)
|
|
|
{
|
|
|
if (empty($_REQUEST['callblock']))
|
|
|
{
|
|
|
if (empty($_REQUEST['callblock']) && isset($GLOBALS['_SERVER']['HTTP_REFERER']))
|
|
|
{
|
|
|
$back_act = strpos($GLOBALS['_SERVER']['HTTP_REFERER'], 'user.php') ? 'index.php' : $GLOBALS['_SERVER']['HTTP_REFERER'];
|
|
|
}
|
|
|
else
|
|
|
{
|
|
|
$back_act = 'index.php';
|
|
|
}
|
|
|
}
|
|
|
else
|
|
|
{
|
|
|
$back_act = trim($_REQUEST['callblock']);
|
|
|
}
|
|
|
|
|
|
if($back_act[4] != ':') $back_act = $ecs->url().$back_act;
|
|
|
$open = empty($_REQUEST['open']) ? 0 : intval($_REQUEST['open']);
|
|
|
$url = $c->login($ecs->url().'user.php?act=oath_login&type='.$type.'&callblock='.urlencode($back_act).'&open='.$open);
|
|
|
if(!$url)
|
|
|
{
|
|
|
show_message( $c->get_error() , '首頁', $ecs->url() , 'error');
|
|
|
}
|
|
|
header('Location: '.$url);
|
|
|
}
|
|
|
else
|
|
|
{
|
|
|
show_message('服務器尚未註冊該插件！' , '首頁',$ecs->url() , 'error');
|
|
|
}
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
// 處理第三方登錄接口
|
|
|
elseif($action == 'oath_login')
|
|
|
{
|
|
|
$type = empty($_REQUEST['type']) ? '' : $_REQUEST['type'];
|
|
|
include_once(ROOT_PATH . 'includes/website/jntoo.php');
|
|
|
$c = &website($type);
|
|
|
if($c)
|
|
|
{
|
|
|
$access = $c->getAccessToken();
|
|
|
if(!$access)
|
|
|
{
|
|
|
show_message( $c->get_error() , '首頁', $ecs->url() , 'error');
|
|
|
}
|
|
|
$c->setAccessToken($access);
|
|
|
$info = $c->getMessage();
|
|
|
if(!$info)
|
|
|
{
|
|
|
show_message($c->get_error() , '首頁' , $ecs->url() , 'error' , false);
|
|
|
}
|
|
|
if(!$info['user_id'])
|
|
|
show_message($c->get_error() , '首頁' , $ecs->url() , 'error' , false);
|
|
|
|
|
|
|
|
|
$info['info_user_id'] = $type . '_' . $info['user_id'];
|
|
|
$info['name'] = str_replace('\'', '', $info['name']);
|
|
|
|
|
|
$count = get_users_auth($info['info_user_id']);
|
|
|
|
|
|
// 有數據---直接登錄
|
|
|
if ($count) {
|
|
|
if ($info['name'] != $count['user_name']) {
|
|
|
if ($user->check_user($info['name'])) {
|
|
|
$info['name'] = $info['name'] . '_' . $type . (rand() * 1000);
|
|
|
}
|
|
|
$sql = 'UPDATE ' . $ecs->table('users_auth') . ' SET user_name = \'' . $info['name'] . '\' WHERE identifier = \'' . $info['info_user_id'] . '\'';
|
|
|
$db->query($sql);
|
|
|
}
|
|
|
$user_name = get_user_name($count['user_id']);
|
|
|
$user->set_session($user_name);
|
|
|
$user->set_cookie($user_name);
|
|
|
update_user_info();
|
|
|
recalculate_price();
|
|
|
ecs_header('Location: ' . $ecs->url());
|
|
|
}
|
|
|
}
|
|
|
|
|
|
assign_template();
|
|
|
$position = assign_ur_here(0, $lANG['bind_login']);
|
|
|
$smarty->assign('page_title', $position['title']);
|
|
|
$smarty->assign('helps', get_shop_help());
|
|
|
$smarty->assign('data_dir', DATA_DIR);
|
|
|
|
|
|
|
|
|
$smarty->assign('login_ret', $login_ret);
|
|
|
$smarty->assign('type', $type);
|
|
|
$smarty->assign('info', $info);
|
|
|
$smarty->assign('access', $access);
|
|
|
$info['type'] = $type;
|
|
|
$info['access_token'] = $access['access_token'];
|
|
|
$oath_info = serialize($info);
|
|
|
$_SESSION[$type . 'oath'] = $oath_info;
|
|
|
|
|
|
$users_auth = get_users_auth($info['info_user_id']);
|
|
|
|
|
|
if ($users_auth) {
|
|
|
$user_id = $users_auth['user_id'];
|
|
|
$jump = 'old_user';
|
|
|
}
|
|
|
|
|
|
if ($_CFG['sms_signin']) {
|
|
|
$sms_security_code = $_SESSION['sms_security_code'] = rand(1000, 9999);
|
|
|
$smarty->assign('sms_security_code', $sms_security_code);
|
|
|
$smarty->assign('enabled_sms_signin', 1);
|
|
|
}
|
|
|
$smarty->assign('ztime', $_CFG['ecsdxt_smsgap']);
|
|
|
$smarty->assign('sms_register', $_CFG['sms_signin']);
|
|
|
|
|
|
if (!empty($user_id)) {
|
|
|
$Loaction = 'user.php?act=oath_register&bind_type=1' . '&info_user_id=' . $info['info_user_id'] . '&user_id=' . $info['user_id'] . '&name=' . $info['name'] . '&sex=' . $info['sex'] . '&rank_id=' . $info['rank_id'] . '&img=' . $info['img'] . '&token=' . $access['access_token'] . '&type=' . $type . '&sess_user=' . $user_id . '&jump=' . $jump;
|
|
|
ecs_header('Location: ' . $Loaction . "\n");
|
|
|
}
|
|
|
|
|
|
/* 取出註冊擴展字段 */
|
|
|
$sql = 'SELECT * FROM ' . $ecs->table('reg_fields') . ' WHERE type < 2 AND display = 1 ORDER BY dis_order, id';
|
|
|
$extend_info_list = $db->getAll($sql);
|
|
|
$smarty->assign('extend_info_list', $extend_info_list);
|
|
|
|
|
|
|
|
|
$smarty->display('user_bind.dwt');
|
|
|
}
|
|
|
|
|
|
|
|
|
else if ($action == 'oath_register') {
|
|
|
$bind_type = (isset($_REQUEST['bind_type']) ? intval($_REQUEST['bind_type']) : 1);
|
|
|
$username = (isset($_REQUEST['username']) ? compile_str($_REQUEST['username']) : '');
|
|
|
$password = (isset($_REQUEST['password']) ? compile_str($_REQUEST['password']) : '');
|
|
|
$mobile_phone = (isset($_REQUEST['mobile_phone']) ? trim($_REQUEST['mobile_phone']) : '');
|
|
|
$captcha_value = (isset($_REQUEST['captcha']) ? trim($_REQUEST['captcha']) : '');
|
|
|
$type = (!isset($_REQUEST['type']) ? $oath_info['type'] : $_REQUEST['type']);
|
|
|
$_SESSION[$type . 'oath'] = isset($_SESSION[$type . 'oath']) && !empty($_SESSION[$type . 'oath']) ? $_SESSION[$type . 'oath'] : $oath_info;
|
|
|
$oath_info = unserialize($_SESSION[$type . 'oath']);
|
|
|
|
|
|
$info_user_id = (!isset($_REQUEST['info_user_id']) ? $oath_info['info_user_id'] : $_REQUEST['info_user_id']);
|
|
|
$user_id = (!isset($_REQUEST['user_id']) ? $oath_info['user_id'] : $_REQUEST['user_id']);
|
|
|
$name = (!isset($_REQUEST['name']) ? $oath_info['name'] : $_REQUEST['name']);
|
|
|
$sex = (!isset($_REQUEST['sex']) ? $oath_info['sex'] : $_REQUEST['sex']);
|
|
|
$rank_id = (!isset($_REQUEST['rank_id']) ? $oath_info['rank_id'] : $_REQUEST['rank_id']);
|
|
|
$img = (isset($oath_info['figureurl_qq_2']) && !empty($oath_info['figureurl_qq_2']) ? $oath_info['figureurl_qq_2'] : $oath_info['img']);
|
|
|
$token = (!isset($_REQUEST['token']) ? $oath_info['access_token'] : $_REQUEST['token']);
|
|
|
|
|
|
$sess_user = (isset($_REQUEST['sess_user']) ? trim($_REQUEST['sess_user']) : 0);
|
|
|
|
|
|
$other = array('identity_type' => $type, 'credential' => $token, 'verified' => 1);
|
|
|
|
|
|
if ($bind_type == 1) {
|
|
|
|
|
|
// 增加綁定
|
|
|
if (!empty($sess_user)) {
|
|
|
$other['user_id'] = $sess_user;
|
|
|
$other['user_name'] = $name;
|
|
|
$other['identifier'] = $info_user_id;
|
|
|
$other['add_time'] = gmtime();
|
|
|
$db->autoExecute($ecs->table('users_auth'), $other, 'INSERT');
|
|
|
$sql = 'UPDATE ' . $ecs->table('users') . ' SET aite_id = \'' . $info_user_id . '\' WHERE user_id = \'' . $sess_user . '\'';
|
|
|
$db->query($sql);
|
|
|
}
|
|
|
// 綁定賬號
|
|
|
else{
|
|
|
$sql = 'SELECT user_id, user_name,headimg FROM ' . $GLOBALS['ecs']->table('users') . ' WHERE user_name = \'' . $username . '\' or email = \'' . $username . '\' or mobile_phone = \'' . $username . '\' LIMIT 1';
|
|
|
$user_info = $db->getRow($sql);
|
|
|
if ($user->login($user_info['user_name'], $password, NULL, 0)) {
|
|
|
|
|
|
$other['user_id'] = $user_info['user_id'];
|
|
|
$other['user_name'] = $name;
|
|
|
$other['identifier'] = $info_user_id;
|
|
|
$other['add_time'] = gmtime();
|
|
|
$db->autoExecute($ecs->table('users_auth'), $other, 'INSERT');
|
|
|
|
|
|
if( !$user_info['headimg'] ) {
|
|
|
$sql = 'UPDATE ' . $ecs->table('users') . ' SET aite_id = \'' . $info_user_id . '\', headimg = \'' . $img . '\' WHERE user_name = \'' . $username . '\'';
|
|
|
}
|
|
|
else {
|
|
|
$sql = 'UPDATE ' . $ecs->table('users') . ' SET aite_id = \'' . $info_user_id . '\' WHERE user_name = \'' . $username . '\'';
|
|
|
}
|
|
|
$db->query($sql);
|
|
|
}
|
|
|
else {
|
|
|
show_message("賬號或者密碼錯誤", array($_LANG['back_up_page'], $_LANG['profile_lnk']), array($back_act, 'user.php'), 'info');
|
|
|
}
|
|
|
}
|
|
|
}
|
|
|
// 註冊綁定
|
|
|
else if ($bind_type == 2) {
|
|
|
if ($user->check_user($username)) {
|
|
|
$username = $username . '_' . $type . rand(10000, 99999);
|
|
|
}
|
|
|
|
|
|
$other1['line'] = isset($_POST['extend_field1']) ? $_POST['extend_field1'] : '';
|
|
|
$other1['facebook'] = isset($_POST['extend_field2']) ? $_POST['extend_field2'] : '';
|
|
|
$other1['office_phone'] = isset($_POST['extend_field3']) ? $_POST['extend_field3'] : '';
|
|
|
$other1['home_phone'] = isset($_POST['extend_field4']) ? $_POST['extend_field4'] : '';
|
|
|
$other1['mobile_phone'] = isset($_POST['extend_field5']) ? $_POST['extend_field5'] : '';
|
|
|
$sel_question = empty($_POST['sel_question']) ? '' : compile_str($_POST['sel_question']);
|
|
|
$passwd_answer = isset($_POST['passwd_answer']) ? compile_str(trim($_POST['passwd_answer'])) : '';
|
|
|
|
|
|
include_once(ROOT_PATH . 'includes/lib_passport.php');
|
|
|
|
|
|
if (register($username, $password, $username."@mail.com", $other1) !== false)
|
|
|
{
|
|
|
if ($_CFG['ecsdxt_customer_registed'] == '1')
|
|
|
{
|
|
|
require_once(ROOT_PATH . 'includes/lib_sms.php');
|
|
|
require_once(ROOT_PATH . 'languages/' .$_CFG['lang']. '/sms.php');
|
|
|
|
|
|
$smarty->assign('shop_name', $_CFG['shop_name']);
|
|
|
$smarty->assign('user_name', $username);
|
|
|
$smarty->assign('user_pwd', $password);
|
|
|
|
|
|
$content = $smarty->fetch('str:' . $_CFG['ecsdxt_customer_registed_value']);
|
|
|
|
|
|
/* 發送註冊成功短信提醒 */
|
|
|
$ret = sendsms($other1['mobile_phone'], $content);
|
|
|
|
|
|
if($ret === true)
|
|
|
{
|
|
|
//插入註冊成功短信提醒數據記錄
|
|
|
$sql = "INSERT INTO " . $ecs->table('verifycode') . "(mobile, getip, verifycode, dateline, reguid, status) VALUES ('" . $other1['mobile_phone'] . "', '" . real_ip() . "', '$password', '" . gmtime() ."', $_SESSION[user_id], 7)";
|
|
|
$db->query($sql);
|
|
|
}
|
|
|
}
|
|
|
|
|
|
$sql = "UPDATE " . $ecs->table('verifycode') . " SET reguid=" . $_SESSION['user_id'] . ",regdateline='" . gmtime() ."',status=2 WHERE mobile='" . $other1['mobile_phone'] . "' AND verifycode='$verifycode' AND getip='" . real_ip() . "' AND status=1 AND dateline>'" . gmtime() ."'-86400";
|
|
|
$db->query($sql);
|
|
|
|
|
|
|
|
|
$other['user_id'] = $_SESSION['user_id'];
|
|
|
$other['user_name'] = $name;
|
|
|
$other['identifier'] = $info_user_id;
|
|
|
$other['add_time'] = gmtime();
|
|
|
$db->autoExecute($ecs->table('users_auth'), $other, 'INSERT');
|
|
|
|
|
|
$user_pass = $user->compile_password(array('password' => $password));
|
|
|
$user_other = array('user_name' => $username, 'password' => $user_pass, 'aite_id' => $info_user_id, 'nick_name' => $name, 'sex' => $sex, 'mobile_phone' => $mobile_phone, 'reg_time' => gmtime(), 'user_rank' => $rank_id, 'user_picture' => $img, 'is_validated' => 1);
|
|
|
|
|
|
|
|
|
if( !$user_info['headimg'] ) {
|
|
|
$sql = 'UPDATE ' . $ecs->table('users') . ' SET aite_id = \'' . $info_user_id . '\', headimg = \'' . $img . '\' WHERE user_name = \'' . $username . '\'';
|
|
|
}
|
|
|
else {
|
|
|
$sql = 'UPDATE ' . $ecs->table('users') . ' SET aite_id = \'' . $info_user_id . '\' WHERE user_name = \'' . $username . '\'';
|
|
|
}
|
|
|
$db->query($sql);
|
|
|
|
|
|
|
|
|
/*把新註冊用户的擴展信息插入數據庫*/
|
|
|
$sql = 'SELECT id FROM ' . $ecs->table('reg_fields') . ' WHERE type = 0 AND display = 1 ORDER BY dis_order, id'; //讀出所有自定義擴展字段的id
|
|
|
$fields_arr = $db->getAll($sql);
|
|
|
|
|
|
$extend_field_str = ''; //生成擴展字段的內容字符串
|
|
|
foreach ($fields_arr AS $val)
|
|
|
{
|
|
|
$extend_field_index = 'extend_field' . $val['id'];
|
|
|
if(!empty($_POST[$extend_field_index]))
|
|
|
{
|
|
|
$temp_field_content = strlen($_POST[$extend_field_index]) > 100 ? mb_substr($_POST[$extend_field_index], 0, 99) : $_POST[$extend_field_index];
|
|
|
$extend_field_str .= " ('" . $_SESSION['user_id'] . "', '" . $val['id'] . "', '" . compile_str($temp_field_content) . "'),";
|
|
|
}
|
|
|
}
|
|
|
$extend_field_str = substr($extend_field_str, 0, -1);
|
|
|
|
|
|
if ($extend_field_str) //插入註冊擴展數據
|
|
|
{
|
|
|
$sql = 'INSERT INTO '. $ecs->table('reg_extend_info') . ' (`user_id`, `reg_field_id`, `content`) VALUES' . $extend_field_str;
|
|
|
$db->query($sql);
|
|
|
}
|
|
|
|
|
|
/* 寫入密碼提示問題和答案 */
|
|
|
if (!empty($passwd_answer) && !empty($sel_question))
|
|
|
{
|
|
|
$sql = 'UPDATE ' . $ecs->table('users') . " SET `passwd_question`='$sel_question', `passwd_answer`='$passwd_answer' WHERE `user_id`='" . $_SESSION['user_id'] . "'";
|
|
|
$db->query($sql);
|
|
|
}
|
|
|
|
|
|
$sql = 'SELECT type_id FROM ' . $ecs->table("bonus_type").' WHERE send_type=5 ';
|
|
|
$reg_bonus = $db->getAll($sql);
|
|
|
if($reg_bonus)
|
|
|
{
|
|
|
foreach ($reg_bonus AS $val)
|
|
|
{
|
|
|
$sql = "INSERT INTO ". $ecs->table('user_bonus') ." (bonus_type_id, bonus_sn, user_id, used_time, order_id, emailed) "." VALUES('$val[type_id]', 0, '".$_SESSION['user_id']."', 0, 0, 0)";
|
|
|
$db->query($sql);
|
|
|
}
|
|
|
$reg_bonus_message='<p>您已收到新用户註冊贈送紅包（<a href="user.php?act=bonus">點擊查看</a>）</p>';
|
|
|
}
|
|
|
|
|
|
/* 判斷是否需要自動發送註冊郵件 */
|
|
|
if ($GLOBALS['_CFG']['member_email_validate'] && $GLOBALS['_CFG']['send_verify_email'])
|
|
|
{
|
|
|
send_regiter_hash($_SESSION['user_id']);
|
|
|
}
|
|
|
$ucdata = empty($user->ucdata)? "" : $user->ucdata;
|
|
|
show_message(sprintf($_LANG['register_success'].$reg_bonus_message, $username . $ucdata), array($_LANG['back_up_page'], $_LANG['profile_lnk']), array($back_act, 'user.php'), 'info');
|
|
|
}
|
|
|
else
|
|
|
{
|
|
|
$err->show($_LANG['sign_up'], 'user.php?act=register');
|
|
|
}
|
|
|
}
|
|
|
|
|
|
if (empty($sess_user) || ($_REQUEST['jump'] == 'old_user')) {
|
|
|
$user->set_session($username);
|
|
|
$user->set_cookie($username);
|
|
|
update_user_info();
|
|
|
recalculate_price();
|
|
|
ecs_header('Location: ' . $ecs->url());
|
|
|
}
|
|
|
else {
|
|
|
ecs_header('Location: user.php');
|
|
|
}
|
|
|
}
|
|
|
else if ($action == 'is_user') {
|
|
|
include_once ROOT_PATH . 'includes/lib_passport.php';
|
|
|
include ROOT_PATH . 'includes/cls_json.php';
|
|
|
$json = new JSON();
|
|
|
|
|
|
$username = trim($_GET['username']);
|
|
|
$username = json_str_iconv($username);
|
|
|
$password = (isset($_GET['password']) ? json_str_iconv($_GET['password']) : '');
|
|
|
$res = array('result' => 'ok', 'message' => '');
|
|
|
|
|
|
|
|
|
$sql = 'SELECT user_name FROM ' . $GLOBALS['ecs']->table('users') . ' WHERE user_name = \'' . $username . '\' or email = \'' . $username . '\' or mobile_phone = \'' . $username . '\' LIMIT 1';
|
|
|
$username = $db->getOne($sql);
|
|
|
if ( !$username ) {
|
|
|
exit($json->encode(array('result' => 'false', 'message' => '用户名錯誤！')));
|
|
|
}
|
|
|
|
|
|
if ( ! $user->check_user($username, $password) ) {
|
|
|
exit($json->encode(array('result' => 'false', 'message' => '用户名或者密碼錯誤！')));
|
|
|
}
|
|
|
|
|
|
$captcha_str = addslashes(trim($_GET['captcha']));
|
|
|
$captcha = intval($_CFG['captcha']);
|
|
|
|
|
|
if (($captcha & CAPTCHA_LOGIN) && (!($captcha & CAPTCHA_LOGIN_FAIL) || (($captcha & CAPTCHA_LOGIN_FAIL) && (2 < $_SESSION['login_fail']))) && (0 < gd_version())) {
|
|
|
|
|
|
/* 檢查驗證碼 */
|
|
|
include_once('includes/cls_captcha.php');
|
|
|
|
|
|
$validator = new captcha();
|
|
|
$validator->session_word = 'captcha_login';
|
|
|
if (!$validator->check_word($_GET['captcha']))
|
|
|
{
|
|
|
$res['result'] = 'false';
|
|
|
$res['message'] = $_LANG['invalid_captcha'];
|
|
|
}
|
|
|
}
|
|
|
|
|
|
exit($json->encode($res));
|
|
|
}
|
|
|
|
|
|
|
|
|
// 處理其它登錄接口
|
|
|
elseif($action == 'other_login')
|
|
|
{
|
|
|
$type = empty($_REQUEST['type']) ? '' : $_REQUEST['type'];
|
|
|
session_start();
|
|
|
$info = $_SESSION['user_info'];
|
|
|
|
|
|
if(empty($info)){
|
|
|
show_message("非法訪問或請求超時！" , '首頁' , $ecs->url() , 'error' , false);
|
|
|
}
|
|
|
if(!$info['user_id'])
|
|
|
show_message("非法訪問或訪問出錯，請聯繫管理員！", '首頁' , $ecs->url() , 'error' , false);
|
|
|
|
|
|
|
|
|
$info_user_id = $type .'_'.$info['user_id']; // 加個標識！！！防止 其他的標識 一樣 // 以後的ID 標識 將以這種形式 辨認
|
|
|
$info['name'] = str_replace("'" , "" , $info['name']); // 過濾掉 逗號 不然出錯 很難處理 不想去 搞什麼編碼的了
|
|
|
|
|
|
|
|
|
$sql = 'SELECT user_name,password,aite_id FROM '.$ecs->table('users').' WHERE aite_id = \''.$info_user_id.'\' OR aite_id=\''.$info['user_id'].'\'';
|
|
|
|
|
|
$count = $db->getRow($sql);
|
|
|
$login_name = $info['name'];
|
|
|
if(!$count) // 沒有當前數據
|
|
|
{
|
|
|
if($user->check_user($info['name'])) // 重名處理
|
|
|
{
|
|
|
$info['name'] = $info['name'].'_'.$type.(rand()*1000);
|
|
|
}
|
|
|
$login_name = $info['name'];
|
|
|
$user_pass = $user->compile_password(array('password'=>$info['user_id']));
|
|
|
$sql = 'INSERT INTO '.$ecs->table('users').'(user_name , password, aite_id , sex , reg_time , user_rank , is_validated) VALUES '.
|
|
|
"('$info[name]' , '$user_pass' , '$info_user_id' , '$info[sex]' , '".gmtime()."' , '$info[rank_id]' , '1')" ;
|
|
|
$db->query($sql);
|
|
|
}
|
|
|
else
|
|
|
{
|
|
|
$login_name = $count['user_name'];
|
|
|
$sql = '';
|
|
|
if($count['aite_id'] == $info['user_id'])
|
|
|
{
|
|
|
$sql = 'UPDATE '.$ecs->table('users')." SET aite_id = '$info_user_id' WHERE aite_id = '$count[aite_id]'";
|
|
|
$db->query($sql);
|
|
|
}
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
$user->set_session($login_name);
|
|
|
$user->set_cookie($login_name);
|
|
|
update_user_info();
|
|
|
recalculate_price();
|
|
|
|
|
|
$redirect_url = "http://".$_SERVER["HTTP_HOST"].str_replace("user.php", "index.php", $_SERVER["REQUEST_URI"]);
|
|
|
header('Location: '.$redirect_url);
|
|
|
|
|
|
}
|
|
|
/* 驗證用户註冊郵件 */
|
|
|
elseif ($action == 'validate_email')
|
|
|
{
|
|
|
$hash = empty($_GET['hash']) ? '' : trim($_GET['hash']);
|
|
|
if ($hash)
|
|
|
{
|
|
|
include_once(ROOT_PATH . 'includes/lib_passport.php');
|
|
|
$id = register_hash('decode', $hash);
|
|
|
if ($id > 0)
|
|
|
{
|
|
|
$sql = "UPDATE " . $ecs->table('users') . " SET is_validated = 1 WHERE user_id='$id'";
|
|
|
$db->query($sql);
|
|
|
$sql = 'SELECT user_name, email FROM ' . $ecs->table('users') . " WHERE user_id = '$id'";
|
|
|
$row = $db->getRow($sql);
|
|
|
show_message(sprintf($_LANG['validate_ok'], $row['user_name'], $row['email']),$_LANG['profile_lnk'], 'user.php');
|
|
|
}
|
|
|
}
|
|
|
show_message($_LANG['validate_fail']);
|
|
|
}
|
|
|
|
|
|
/* 驗證用户註冊用户名是否可以註冊 */
|
|
|
elseif ($action == 'is_registered')
|
|
|
{
|
|
|
include_once(ROOT_PATH . 'includes/lib_passport.php');
|
|
|
|
|
|
$username = trim($_GET['username']);
|
|
|
$username = json_str_iconv($username);
|
|
|
|
|
|
if ($user->check_user($username) || admin_registered($username))
|
|
|
{
|
|
|
echo 'false';
|
|
|
}
|
|
|
else
|
|
|
{
|
|
|
echo 'true';
|
|
|
}
|
|
|
}
|
|
|
|
|
|
/* 驗證手機號是否已註冊 */
|
|
|
elseif ($action == 'mobile_is_registered')
|
|
|
{
|
|
|
include_once(ROOT_PATH . 'includes/lib_passport.php');
|
|
|
|
|
|
$mobile = trim($_GET['mobile']);
|
|
|
$mobile = json_str_iconv($mobile);
|
|
|
|
|
|
if ($user->check_user($mobile) || $user->check_mobile($mobile))
|
|
|
{
|
|
|
echo 'true';
|
|
|
}
|
|
|
else
|
|
|
{
|
|
|
echo 'false';
|
|
|
}
|
|
|
}
|
|
|
|
|
|
// 驗證用户註冊短信驗證碼是否正確
|
|
|
elseif($action == 'dxyzmuser')
|
|
|
{
|
|
|
$mobile = trim($_POST['mobile']);
|
|
|
$verifycode = trim($_POST['dxyzm']);
|
|
|
/* 驗證手機號驗證碼和IP */
|
|
|
$sql = "SELECT COUNT(id) FROM " . $ecs->table('verifycode') ." WHERE mobile='$mobile' AND verifycode='$verifycode' AND getip='" . real_ip() . "' AND status=1 AND dateline>'" . gmtime() ."'-86400";//驗證碼一天內有效
|
|
|
if ($db->getOne($sql) == 0)
|
|
|
{
|
|
|
echo 'false';
|
|
|
}else{
|
|
|
echo 'true';
|
|
|
}
|
|
|
}
|
|
|
|
|
|
// 驗證用户註冊驗證碼是否正確
|
|
|
elseif($action == 'captchauser')
|
|
|
{
|
|
|
/* 檢查驗證碼 */
|
|
|
include_once('includes/cls_captcha.php');
|
|
|
|
|
|
$validator = new captcha();
|
|
|
if (!$validator->check_word($_POST['captcha']))
|
|
|
{
|
|
|
echo 'false';
|
|
|
}else{
|
|
|
echo 'true';
|
|
|
}
|
|
|
}
|
|
|
|
|
|
// 驗證用户註冊驗證碼是否正確
|
|
|
elseif($action == 'captcha_login')
|
|
|
{
|
|
|
/* 檢查驗證碼 */
|
|
|
include_once('includes/cls_captcha.php');
|
|
|
|
|
|
$validator = new captcha();
|
|
|
$validator->session_word = 'captcha_login';
|
|
|
if (!$validator->check_word($_GET['captcha']))
|
|
|
{
|
|
|
echo 'false';
|
|
|
}else{
|
|
|
echo 'true';
|
|
|
}
|
|
|
}
|
|
|
|
|
|
/* 驗證用户郵箱地址是否被註冊 */
|
|
|
elseif($action == 'check_email')
|
|
|
{
|
|
|
$email = trim($_GET['email']);
|
|
|
if ($user->check_email($email))
|
|
|
{
|
|
|
echo 'false';
|
|
|
}
|
|
|
else
|
|
|
{
|
|
|
echo 'ok';
|
|
|
}
|
|
|
}
|
|
|
/* 用户登錄界面 */
|
|
|
elseif ($action == 'login')
|
|
|
{
|
|
|
if (empty($back_act))
|
|
|
{
|
|
|
if (empty($back_act) && isset($GLOBALS['_SERVER']['HTTP_REFERER']))
|
|
|
{
|
|
|
$back_act = strpos($GLOBALS['_SERVER']['HTTP_REFERER'], 'user.php') ? './index.php' : $GLOBALS['_SERVER']['HTTP_REFERER'];
|
|
|
}
|
|
|
else
|
|
|
{
|
|
|
$back_act = 'user.php';
|
|
|
}
|
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
$captcha = intval($_CFG['captcha']);
|
|
|
if (($captcha & CAPTCHA_LOGIN) && (!($captcha & CAPTCHA_LOGIN_FAIL) || (($captcha & CAPTCHA_LOGIN_FAIL) && $_SESSION['login_fail'] > 2)) && gd_version() > 0)
|
|
|
{
|
|
|
$GLOBALS['smarty']->assign('enabled_captcha', 1);
|
|
|
$GLOBALS['smarty']->assign('rand', mt_rand());
|
|
|
}
|
|
|
|
|
|
$smarty->assign('ztime', $_CFG['ecsdxt_smsgap']);
|
|
|
$smarty->assign('back_act', $back_act);
|
|
|
$smarty->display('user_login.html');
|
|
|
}
|
|
|
|
|
|
/* 處理會員的登錄 */
|
|
|
elseif ($action == 'act_login')
|
|
|
{
|
|
|
$username = isset($_POST['username']) ? trim($_POST['username']) : '';
|
|
|
$password = isset($_POST['password']) ? trim($_POST['password']) : '';
|
|
|
$back_act = isset($_POST['back_act']) ? trim($_POST['back_act']) : '';
|
|
|
|
|
|
|
|
|
$captcha = intval($_CFG['captcha']);
|
|
|
if (($captcha & CAPTCHA_LOGIN) && (!($captcha & CAPTCHA_LOGIN_FAIL) || (($captcha & CAPTCHA_LOGIN_FAIL) && $_SESSION['login_fail'] > 2)) && gd_version() > 0)
|
|
|
{
|
|
|
if (empty($_POST['captcha']))
|
|
|
{
|
|
|
show_message($_LANG['invalid_captcha'], $_LANG['relogin_lnk'], 'user.php', 'error');
|
|
|
}
|
|
|
|
|
|
/* 檢查驗證碼 */
|
|
|
include_once('includes/cls_captcha.php');
|
|
|
|
|
|
$validator = new captcha();
|
|
|
$validator->session_word = 'captcha_login';
|
|
|
if (!$validator->check_word($_POST['captcha']))
|
|
|
{
|
|
|
show_message($_LANG['invalid_captcha'], $_LANG['relogin_lnk'], 'user.php', 'error');
|
|
|
}
|
|
|
}
|
|
|
|
|
|
$login_type = intval($_POST['login_type']);
|
|
|
if($login_type==3)
|
|
|
{
|
|
|
$card_info = $db->getRow("select * from " . $ecs->table('user_card') ." where card_no='$username' and card_pass='$password' and is_show =1 " );
|
|
|
//var_dump($card_info);exit;
|
|
|
if($card_info)
|
|
|
{
|
|
|
$user_id = intval($card_info['user_id']);
|
|
|
if($user_id)
|
|
|
{
|
|
|
$user_name = $db->getOne("select user_name from " . $ecs->table('users') ." where user_id='$user_id'" );
|
|
|
if ($user_name)
|
|
|
{
|
|
|
$_SESSION['user_id'] = $user_id;
|
|
|
$_SESSION['user_name'] = $username;
|
|
|
show_message($_LANG['login_success'] . $ucdata , array($_LANG['back_up_page'], $_LANG['profile_lnk']), array($back_act,'user.php'), 'info');
|
|
|
}
|
|
|
else
|
|
|
{
|
|
|
$_SESSION['login_fail'] ++ ;
|
|
|
show_message($_LANG['login_failure'], $_LANG['relogin_lnk'], 'user.php', 'error');
|
|
|
}
|
|
|
}
|
|
|
else
|
|
|
{
|
|
|
include_once(ROOT_PATH . 'includes/lib_passport.php');
|
|
|
$cu_user_name = 'card_'.$card_info['card_no'];
|
|
|
$user_name = 'card_'.$card_info['card_no'];
|
|
|
$email = $card_info['email']==''?$cu_user_name.'@mail.com':$card_info['email'];
|
|
|
$other = array();
|
|
|
include_once(ROOT_PATH . 'includes/lib_passport.php');
|
|
|
if (register($cu_user_name, $password, $email, $other) !== false)
|
|
|
{
|
|
|
$db->autoExecute($ecs->table('user_card'), array('user_id'=>$_SESSION['user_id'],'bind_time'=>gmtime(),'card_status'=>1), 'UPDATE', " id='$card_info[id]' ");
|
|
|
$arr['user_money'] = floatval($card_info['user_money']);
|
|
|
$arr['pay_points'] = $card_info['pay_points'];
|
|
|
$arr['rank_points'] = $card_info['rank_points'];
|
|
|
if($card_info['card_level'])
|
|
|
{
|
|
|
$card_rank = $db->getOne(" select rank_id from " . $ecs->table('user_rank') . " where rank_name='$card_info[card_level]' ");
|
|
|
if($card_rank) $arr['user_rank'] = $card_rank;
|
|
|
$sql = 'UPDATE ' . $ecs->table('users') . " SET `user_rank`='$card_rank' WHERE `user_id`='" . $_SESSION['user_id'] . "'";
|
|
|
$db->query($sql);
|
|
|
}
|
|
|
log_account_change($_SESSION['user_id'], $arr['user_money'], 0, $arr['rank_points'], $arr['pay_points'], '綁定會卡'.$card_no.'充值等級積分:'.$arr['rank_points'].',消費積分'.$arr['pay_points']);
|
|
|
$sql = 'UPDATE ' . $ecs->table('user_card') . " SET `user_money`='0', `pay_points`='0', `rank_points`='0' WHERE `card_no`='" . $card_no . "'";
|
|
|
$db->query($sql);
|
|
|
$ucdata = empty($user->ucdata)? "" : $user->ucdata;
|
|
|
show_message(sprintf($_LANG['login_success'], $cu_user_name . $ucdata), array($_LANG['back_up_page'], $_LANG['profile_lnk']), array($back_act, 'user.php'), 'info');
|
|
|
}
|
|
|
else
|
|
|
{
|
|
|
$_SESSION['login_fail'] ++ ;
|
|
|
show_message($_LANG['login_failure'], $_LANG['relogin_lnk'], 'user.php', 'error');
|
|
|
}
|
|
|
}
|
|
|
}
|
|
|
else
|
|
|
{
|
|
|
$num = $db->getOne("select count(*) from " . $ecs->table('user_card') ." where card_no='$username' and card_pass ='$password' and user_id=0 and is_show=1 " );
|
|
|
if($num==1)
|
|
|
{
|
|
|
show_message('此卡號還未綁定，您可以用此新註冊一個會員帳號並綁定此卡號，如果您已有本站會員帳號，請登錄後在會員中心綁定此卡號後方可登錄!', array('立即註冊並綁定此卡號','重新登錄'), array('user.php?act=register&card_no='.$username.'&card_pass='.$password,'user.php'), 'error');
|
|
|
}
|
|
|
show_message('會員卡卡號不存在', '請重新登錄', 'user.php', 'error');
|
|
|
}
|
|
|
}
|
|
|
|
|
|
$username = $db->getOne("SELECT user_name FROM " .$ecs->table('users'). " WHERE mobile_phone='$username' or user_name='$username' or email='$username'");
|
|
|
|
|
|
if (empty($username))
|
|
|
{
|
|
|
$username = isset($_POST['username']) ? trim($_POST['username']) : '';
|
|
|
}
|
|
|
|
|
|
if ($user->login($username, $password,isset($_POST['remember'])))
|
|
|
{
|
|
|
update_user_info();
|
|
|
recalculate_price();
|
|
|
|
|
|
$ucdata = isset($user->ucdata)? $user->ucdata : '';
|
|
|
show_message($_LANG['login_success'] . $ucdata , array($_LANG['back_up_page'], $_LANG['profile_lnk']), array($back_act,'user.php'), 'info');
|
|
|
}
|
|
|
else
|
|
|
{
|
|
|
$_SESSION['login_fail'] ++ ;
|
|
|
show_message($_LANG['login_failure'], $_LANG['relogin_lnk'], 'user.php', 'error');
|
|
|
}
|
|
|
}
|
|
|
|
|
|
/* 處理手機短信登錄 */
|
|
|
elseif ($action == 'act_sms_login')
|
|
|
{
|
|
|
require_once(ROOT_PATH . 'languages/' .$_CFG['lang']. '/sms.php');
|
|
|
|
|
|
$mobile = isset($_POST['mobile']) ? trim($_POST['mobile']) : '';
|
|
|
$verifycode = isset($_POST['extend_field']) ? trim($_POST['extend_field']) : '';
|
|
|
$back_act = isset($_POST['back_act']) ? trim($_POST['back_act']) : '';
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
$sql = "SELECT user_name from " . $ecs->table('users') . " WHERE mobile_phone='$mobile' or user_name='$mobile'";
|
|
|
$row = $db->getRow($sql);
|
|
|
if ($row == 0)
|
|
|
{
|
|
|
show_message('此手機號尚未註冊，請先註冊。', '註冊會員', 'user.php?act=register', 'error');
|
|
|
}
|
|
|
$username = $row['user_name'];
|
|
|
|
|
|
/* 驗證手機號驗證碼和IP */
|
|
|
$sql = "SELECT COUNT(id) FROM " . $ecs->table('verifycode') ." WHERE mobile='$mobile' AND verifycode='$verifycode' AND getip='" . real_ip() . "' AND status=1 AND dateline>'" . gmtime() ."'-86400";//驗證碼一天內有效
|
|
|
|
|
|
|
|
|
if ($db->getOne($sql) == 0)
|
|
|
{
|
|
|
show_message($_LANG['verifycode_mobile_phone_notmatch']);
|
|
|
}
|
|
|
|
|
|
if ($user->login($username, null, true))
|
|
|
{
|
|
|
update_user_info();
|
|
|
recalculate_price();
|
|
|
|
|
|
$sql = "UPDATE " . $ecs->table('verifycode') . " SET reguid=" . $_SESSION['user_id'] . ",regdateline='" . gmtime() ."',status=2 WHERE mobile='$mobile' AND verifycode='$verifycode' AND getip='" . real_ip() . "' AND status=1 AND dateline>'" . gmtime() ."'-86400";
|
|
|
$db->query($sql);
|
|
|
|
|
|
$ucdata = isset($user->ucdata)? $user->ucdata : '';
|
|
|
show_message($_LANG['login_success'] . $ucdata , array($_LANG['back_up_page'], $_LANG['profile_lnk']), array($back_act,'user.php'), 'info');
|
|
|
}
|
|
|
else
|
|
|
{
|
|
|
$_SESSION['login_fail'] ++ ;
|
|
|
show_message($_LANG['login_failure'], $_LANG['relogin_lnk'], 'user.php', 'error');
|
|
|
}
|
|
|
}
|
|
|
|
|
|
/* 處理 ajax 的登錄請求 */
|
|
|
elseif ($action == 'signin')
|
|
|
{
|
|
|
include_once('includes/cls_json.php');
|
|
|
$json = new JSON;
|
|
|
|
|
|
$username = !empty($_POST['username']) ? json_str_iconv(trim($_POST['username'])) : '';
|
|
|
$password = !empty($_POST['password']) ? trim($_POST['password']) : '';
|
|
|
$captcha = !empty($_POST['captcha']) ? json_str_iconv(trim($_POST['captcha'])) : '';
|
|
|
$result = array('error' => 0, 'content' => '');
|
|
|
|
|
|
$captcha = intval($_CFG['captcha']);
|
|
|
if (($captcha & CAPTCHA_LOGIN) && (!($captcha & CAPTCHA_LOGIN_FAIL) || (($captcha & CAPTCHA_LOGIN_FAIL) && $_SESSION['login_fail'] > 2)) && gd_version() > 0)
|
|
|
{
|
|
|
if (empty($captcha))
|
|
|
{
|
|
|
$result['error'] = 1;
|
|
|
$result['content'] = $_LANG['invalid_captcha'];
|
|
|
die($json->encode($result));
|
|
|
}
|
|
|
|
|
|
/* 檢查驗證碼 */
|
|
|
include_once('includes/cls_captcha.php');
|
|
|
|
|
|
$validator = new captcha();
|
|
|
$validator->session_word = 'captcha_login';
|
|
|
if (!$validator->check_word($_POST['captcha']))
|
|
|
{
|
|
|
|
|
|
$result['error'] = 1;
|
|
|
$result['content'] = $_LANG['invalid_captcha'];
|
|
|
die($json->encode($result));
|
|
|
}
|
|
|
}
|
|
|
|
|
|
if ($user->login($username, $password))
|
|
|
{
|
|
|
update_user_info(); //更新用户信息
|
|
|
recalculate_price(); // 重新計算購物車中的商品價格
|
|
|
$smarty->assign('user_info', get_user_info());
|
|
|
$ucdata = empty($user->ucdata)? "" : $user->ucdata;
|
|
|
$result['ucdata'] = $ucdata;
|
|
|
$result['content'] = $smarty->fetch('library/member_info.lbi');
|
|
|
}
|
|
|
else
|
|
|
{
|
|
|
$_SESSION['login_fail']++;
|
|
|
if ($_SESSION['login_fail'] > 2)
|
|
|
{
|
|
|
$smarty->assign('enabled_captcha', 1);
|
|
|
$result['html'] = $smarty->fetch('library/member_info.lbi');
|
|
|
}
|
|
|
$result['error'] = 1;
|
|
|
$result['content'] = $_LANG['login_failure'];
|
|
|
}
|
|
|
die($json->encode($result));
|
|
|
}
|
|
|
|
|
|
/* 退出會員中心 */
|
|
|
elseif ($action == 'logout')
|
|
|
{
|
|
|
if ((!isset($back_act)|| empty($back_act)) && isset($GLOBALS['_SERVER']['HTTP_REFERER']))
|
|
|
{
|
|
|
$back_act = strpos($GLOBALS['_SERVER']['HTTP_REFERER'], 'user.php') ? './index.php' : $GLOBALS['_SERVER']['HTTP_REFERER'];
|
|
|
}
|
|
|
|
|
|
$user->logout();
|
|
|
$ucdata = empty($user->ucdata)? "" : $user->ucdata;
|
|
|
show_message($_LANG['logout'] . $ucdata, array($_LANG['back_up_page'], $_LANG['back_home_lnk']), array($back_act, 'index.php'), 'info');
|
|
|
}
|
|
|
|
|
|
/* 個人資料頁面 */
|
|
|
elseif ($action == 'profile')
|
|
|
{
|
|
|
include_once(ROOT_PATH . 'includes/lib_transaction.php');
|
|
|
|
|
|
$user_info = get_profile($user_id);
|
|
|
|
|
|
/* 取出註冊擴展字段 */
|
|
|
$sql = 'SELECT * FROM ' . $ecs->table('reg_fields') . ' WHERE type < 2 AND display = 1 ORDER BY dis_order, id';
|
|
|
$extend_info_list = $db->getAll($sql);
|
|
|
|
|
|
$sql = 'SELECT reg_field_id, content ' .
|
|
|
'FROM ' . $ecs->table('reg_extend_info') .
|
|
|
" WHERE user_id = $user_id";
|
|
|
$extend_info_arr = $db->getAll($sql);
|
|
|
|
|
|
$temp_arr = array();
|
|
|
foreach ($extend_info_arr AS $val)
|
|
|
{
|
|
|
$temp_arr[$val['reg_field_id']] = $val['content'];
|
|
|
}
|
|
|
|
|
|
foreach ($extend_info_list AS $key => $val)
|
|
|
{
|
|
|
switch ($val['id'])
|
|
|
{
|
|
|
case 1: $extend_info_list[$key]['content'] = $user_info['line']; break;
|
|
|
case 2: $extend_info_list[$key]['content'] = $user_info['facebook']; break;
|
|
|
case 3: $extend_info_list[$key]['content'] = $user_info['office_phone']; break;
|
|
|
case 4: $extend_info_list[$key]['content'] = $user_info['home_phone']; break;
|
|
|
case 5: $extend_info_list[$key]['content'] = $user_info['mobile_phone']; break;
|
|
|
default: $extend_info_list[$key]['content'] = empty($temp_arr[$val['id']]) ? '' : $temp_arr[$val['id']] ;
|
|
|
}
|
|
|
}
|
|
|
|
|
|
$smarty->assign('extend_info_list', $extend_info_list);
|
|
|
|
|
|
/* 密碼提示問題 */
|
|
|
$smarty->assign('passwd_questions', $_LANG['passwd_questions']);
|
|
|
|
|
|
$smarty->assign('profile', $user_info);
|
|
|
$smarty->display('user_transaction.dwt');
|
|
|
}
|
|
|
|
|
|
/* 修改個人資料的處理 */
|
|
|
elseif ($action == 'act_edit_profile')
|
|
|
{
|
|
|
include_once(ROOT_PATH . 'includes/lib_transaction.php');
|
|
|
|
|
|
$birthday = trim($_POST['birthdayYear']) .'-'. trim($_POST['birthdayMonth']) .'-'.
|
|
|
trim($_POST['birthdayDay']);
|
|
|
$email = trim($_POST['email']);
|
|
|
$other['line'] = $line = isset($_POST['extend_field1']) ? trim($_POST['extend_field1']) : '';
|
|
|
$other['facebook'] = $qq = isset($_POST['extend_field2']) ? trim($_POST['extend_field2']) : '';
|
|
|
$other['office_phone'] = $office_phone = isset($_POST['extend_field3']) ? trim($_POST['extend_field3']) : '';
|
|
|
$other['home_phone'] = $home_phone = isset($_POST['extend_field4']) ? trim($_POST['extend_field4']) : '';
|
|
|
$other['mobile_phone'] = $mobile_phone = isset($_POST['extend_field5']) ? trim($_POST['extend_field5']) : '';
|
|
|
$sel_question = empty($_POST['sel_question']) ? '' : compile_str($_POST['sel_question']);
|
|
|
$passwd_answer = isset($_POST['passwd_answer']) ? compile_str(trim($_POST['passwd_answer'])) : '';
|
|
|
|
|
|
/* 更新用户擴展字段的數據 */
|
|
|
$sql = 'SELECT id FROM ' . $ecs->table('reg_fields') . ' WHERE type = 0 AND display = 1 ORDER BY dis_order, id'; //讀出所有擴展字段的id
|
|
|
$fields_arr = $db->getAll($sql);
|
|
|
|
|
|
foreach ($fields_arr AS $val) //循環更新擴展用户信息
|
|
|
{
|
|
|
$extend_field_index = 'extend_field' . $val['id'];
|
|
|
if(isset($_POST[$extend_field_index]))
|
|
|
{
|
|
|
$temp_field_content = strlen($_POST[$extend_field_index]) > 100 ? mb_substr(htmlspecialchars($_POST[$extend_field_index]), 0, 99) : htmlspecialchars($_POST[$extend_field_index]);
|
|
|
$sql = 'SELECT * FROM ' . $ecs->table('reg_extend_info') . " WHERE reg_field_id = '$val[id]' AND user_id = '$user_id'";
|
|
|
if ($db->getOne($sql)) //如果之前沒有記錄，則插入
|
|
|
{
|
|
|
$sql = 'UPDATE ' . $ecs->table('reg_extend_info') . " SET content = '$temp_field_content' WHERE reg_field_id = '$val[id]' AND user_id = '$user_id'";
|
|
|
}
|
|
|
else
|
|
|
{
|
|
|
$sql = 'INSERT INTO '. $ecs->table('reg_extend_info') . " (`user_id`, `reg_field_id`, `content`) VALUES ('$user_id', '$val[id]', '$temp_field_content')";
|
|
|
}
|
|
|
$db->query($sql);
|
|
|
}
|
|
|
}
|
|
|
|
|
|
/* 寫入密碼提示問題和答案 */
|
|
|
if (!empty($passwd_answer) && !empty($sel_question))
|
|
|
{
|
|
|
$sql = 'UPDATE ' . $ecs->table('users') . " SET `passwd_question`='$sel_question', `passwd_answer`='$passwd_answer' WHERE `user_id`='" . $_SESSION['user_id'] . "'";
|
|
|
$db->query($sql);
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
if (!empty($office_phone) && !preg_match( '/^[\d|\_|\-|\s]+$/', $office_phone ) )
|
|
|
{
|
|
|
show_message($_LANG['passport_js']['office_phone_invalid']);
|
|
|
}
|
|
|
if (!empty($home_phone) && !preg_match( '/^[\d|\_|\-|\s]+$/', $home_phone) )
|
|
|
{
|
|
|
show_message($_LANG['passport_js']['home_phone_invalid']);
|
|
|
}
|
|
|
if (!is_email($email))
|
|
|
{
|
|
|
show_message($_LANG['msg_email_format']);
|
|
|
}
|
|
|
if (!empty($line))
|
|
|
{
|
|
|
show_message($_LANG['passport_js']['line_invalid']);
|
|
|
}
|
|
|
if (!empty($qq) && !preg_match('/^\d+$/', $qq))
|
|
|
{
|
|
|
show_message($_LANG['passport_js']['qq_invalid']);
|
|
|
}
|
|
|
if (!empty($mobile_phone) && !preg_match('/^[\d-\s]+$/', $mobile_phone))
|
|
|
{
|
|
|
show_message($_LANG['passport_js']['mobile_phone_invalid']);
|
|
|
}
|
|
|
|
|
|
|
|
|
$profile = array(
|
|
|
'user_id' => $user_id,
|
|
|
'email' => isset($_POST['email']) ? trim($_POST['email']) : '',
|
|
|
'sex' => isset($_POST['sex']) ? intval($_POST['sex']) : 0,
|
|
|
'birthday' => $birthday,
|
|
|
'other' => isset($other) ? $other : array()
|
|
|
);
|
|
|
|
|
|
|
|
|
if (edit_profile($profile))
|
|
|
{
|
|
|
show_message($_LANG['edit_profile_success'], $_LANG['profile_lnk'], 'user.php?act=profile', 'info');
|
|
|
}
|
|
|
else
|
|
|
{
|
|
|
if ($user->error == ERR_EMAIL_EXISTS)
|
|
|
{
|
|
|
$msg = sprintf($_LANG['email_exist'], $profile['email']);
|
|
|
}
|
|
|
else
|
|
|
{
|
|
|
$msg = $_LANG['edit_profile_failed'];
|
|
|
}
|
|
|
show_message($msg, '', '', 'info');
|
|
|
}
|
|
|
}
|
|
|
|
|
|
/* 會員頭像頁面 */
|
|
|
elseif ($action == 'headimg')
|
|
|
{
|
|
|
include_once(ROOT_PATH . 'includes/lib_transaction.php');
|
|
|
|
|
|
$sql = 'SELECT headimg FROM ' . $ecs->table('users') . " WHERE user_id = $user_id";
|
|
|
$headimg = $db->getOne($sql);
|
|
|
|
|
|
$smarty->assign('headimg', $headimg);
|
|
|
$smarty->display('user_transaction.dwt');
|
|
|
}
|
|
|
|
|
|
/* 修改會員頭像 */
|
|
|
elseif ($action == 'act_edit_headimg')
|
|
|
{
|
|
|
if($_FILES['headimg']['size'] == 0)
|
|
|
{
|
|
|
show_message("您沒有選擇要修改的頭像圖片！", $_LANG['profile_lnk'], 'user.php?act=headimg', 'info');
|
|
|
}
|
|
|
|
|
|
$sql = 'SELECT headimg FROM ' . $ecs->table('users') . " WHERE user_id = $user_id";
|
|
|
$old_headimg = $db->getOne($sql);
|
|
|
|
|
|
include_once (ROOT_PATH . '/includes/cls_image.php');
|
|
|
$image = new cls_image($_CFG['bgcolor']);
|
|
|
$headimg_original = $image->upload_image($_FILES['headimg'], 'headimg/' . date('Ym'));
|
|
|
|
|
|
$headimg_path = ROOT_PATH . DATA_DIR . '/headimg/' . date('Ym') . '/';
|
|
|
|
|
|
$headimg_thumb = $image->make_thumb($headimg_original, '150', '150', $headimg_path);
|
|
|
@unlink($old_headimg);
|
|
|
@unlink($headimg_original);
|
|
|
$sql = 'UPDATE ' . $ecs->table('users') . " SET `headimg`='$headimg_thumb' WHERE `user_id`='" . $_SESSION['user_id'] . "'";
|
|
|
$db->query($sql);
|
|
|
show_message('成功修改會員頭像', $_LANG['profile_lnk'], 'user.php?act=headimg', 'info');
|
|
|
}
|
|
|
|
|
|
/* 密碼找回-->修改密碼界面 */
|
|
|
elseif ($action == 'get_password')
|
|
|
{
|
|
|
include_once(ROOT_PATH . 'includes/lib_passport.php');
|
|
|
|
|
|
if (isset($_GET['code']) && isset($_GET['uid'])) //從郵件處獲得的act
|
|
|
{
|
|
|
$code = trim($_GET['code']);
|
|
|
$uid = intval($_GET['uid']);
|
|
|
|
|
|
/* 判斷鏈接的合法性 */
|
|
|
$user_info = $user->get_profile_by_id($uid);
|
|
|
if (empty($user_info) || ($user_info && md5($user_info['user_id'] . $_CFG['hash_code'] . $user_info['reg_time']) != $code))
|
|
|
{
|
|
|
show_message($_LANG['parm_error'], $_LANG['back_home_lnk'], './', 'info');
|
|
|
}
|
|
|
|
|
|
$smarty->assign('uid', $uid);
|
|
|
$smarty->assign('code', $code);
|
|
|
$smarty->assign('action', 'reset_password');
|
|
|
$smarty->display('user_passport.dwt');
|
|
|
}
|
|
|
else
|
|
|
{
|
|
|
//顯示用户名和email表單
|
|
|
$smarty->display('user_passport.dwt');
|
|
|
}
|
|
|
}
|
|
|
|
|
|
/* 密碼找回-->輸入用户名界面 */
|
|
|
elseif ($action == 'qpassword_name')
|
|
|
{
|
|
|
//顯示輸入要找回密碼的賬號表單
|
|
|
$smarty->display('user_passport.dwt');
|
|
|
}
|
|
|
/* 密碼找回-->輸入用户名界面 */
|
|
|
elseif ($action == 'mpassword_name')
|
|
|
{
|
|
|
//顯示輸入要找回密碼的賬號表單
|
|
|
$smarty->display('user_passport.dwt');
|
|
|
}
|
|
|
/* 密碼找回-->根據註冊用户名取得密碼提示問題界面 */
|
|
|
elseif ($action == 'get_passwd_question')
|
|
|
{
|
|
|
if (empty($_POST['user_name']))
|
|
|
{
|
|
|
show_message($_LANG['no_passwd_question'], $_LANG['back_home_lnk'], './', 'info');
|
|
|
}
|
|
|
else
|
|
|
{
|
|
|
$user_name = trim($_POST['user_name']);
|
|
|
}
|
|
|
|
|
|
//取出會員密碼問題和答案
|
|
|
$sql = 'SELECT user_id, user_name, passwd_question, passwd_answer FROM ' . $ecs->table('users') . " WHERE user_name = '" . $user_name . "'";
|
|
|
$user_question_arr = $db->getRow($sql);
|
|
|
|
|
|
//如果沒有設置密碼問題，給出錯誤提示
|
|
|
if (empty($user_question_arr['passwd_answer']))
|
|
|
{
|
|
|
show_message($_LANG['no_passwd_question'], $_LANG['back_home_lnk'], './', 'info');
|
|
|
}
|
|
|
|
|
|
$_SESSION['temp_user'] = $user_question_arr['user_id']; //設置臨時用户，不具有有效身份
|
|
|
$_SESSION['temp_user_name'] = $user_question_arr['user_name']; //設置臨時用户，不具有有效身份
|
|
|
$_SESSION['passwd_answer'] = $user_question_arr['passwd_answer']; //存儲密碼問題答案，減少一次數據庫訪問
|
|
|
|
|
|
$captcha = intval($_CFG['captcha']);
|
|
|
if (($captcha & CAPTCHA_LOGIN) && (!($captcha & CAPTCHA_LOGIN_FAIL) || (($captcha & CAPTCHA_LOGIN_FAIL) && $_SESSION['login_fail'] > 2)) && gd_version() > 0)
|
|
|
{
|
|
|
$GLOBALS['smarty']->assign('enabled_captcha', 1);
|
|
|
$GLOBALS['smarty']->assign('rand', mt_rand());
|
|
|
}
|
|
|
|
|
|
$smarty->assign('passwd_question', $_LANG['passwd_questions'][$user_question_arr['passwd_question']]);
|
|
|
$smarty->display('user_passport.dwt');
|
|
|
}
|
|
|
|
|
|
/* 密碼找回-->根據提交的密碼答案進行相應處理 */
|
|
|
elseif ($action == 'check_answer')
|
|
|
{
|
|
|
$captcha = intval($_CFG['captcha']);
|
|
|
if (($captcha & CAPTCHA_LOGIN) && (!($captcha & CAPTCHA_LOGIN_FAIL) || (($captcha & CAPTCHA_LOGIN_FAIL) && $_SESSION['login_fail'] > 2)) && gd_version() > 0)
|
|
|
{
|
|
|
if (empty($_POST['captcha']))
|
|
|
{
|
|
|
show_message($_LANG['invalid_captcha'], $_LANG['back_retry_answer'], 'user.php?act=qpassword_name', 'error');
|
|
|
}
|
|
|
|
|
|
/* 檢查驗證碼 */
|
|
|
include_once('includes/cls_captcha.php');
|
|
|
|
|
|
$validator = new captcha();
|
|
|
$validator->session_word = 'captcha_login';
|
|
|
if (!$validator->check_word($_POST['captcha']))
|
|
|
{
|
|
|
show_message($_LANG['invalid_captcha'], $_LANG['back_retry_answer'], 'user.php?act=qpassword_name', 'error');
|
|
|
}
|
|
|
}
|
|
|
|
|
|
if (empty($_POST['passwd_answer']) || $_POST['passwd_answer'] != $_SESSION['passwd_answer'])
|
|
|
{
|
|
|
show_message($_LANG['wrong_passwd_answer'], $_LANG['back_retry_answer'], 'user.php?act=qpassword_name', 'info');
|
|
|
}
|
|
|
else
|
|
|
{
|
|
|
$_SESSION['user_id'] = $_SESSION['temp_user'];
|
|
|
$_SESSION['user_name'] = $_SESSION['temp_user_name'];
|
|
|
unset($_SESSION['temp_user']);
|
|
|
unset($_SESSION['temp_user_name']);
|
|
|
$smarty->assign('uid', $_SESSION['user_id']);
|
|
|
$smarty->assign('action', 'reset_password');
|
|
|
$smarty->display('user_passport.dwt');
|
|
|
}
|
|
|
}
|
|
|
|
|
|
/* 發送密碼修改確認郵件 */
|
|
|
elseif ($action == 'send_pwd_email')
|
|
|
{
|
|
|
include_once(ROOT_PATH . 'includes/lib_passport.php');
|
|
|
|
|
|
/* 初始化會員用户名和郵件地址 */
|
|
|
$user_name = !empty($_POST['user_name']) ? trim($_POST['user_name']) : '';
|
|
|
$email = !empty($_POST['email']) ? trim($_POST['email']) : '';
|
|
|
|
|
|
//用户名和郵件地址是否匹配
|
|
|
$user_info = $user->get_user_info($user_name);
|
|
|
|
|
|
if ($user_info && $user_info['email'] == $email)
|
|
|
{
|
|
|
//生成code
|
|
|
//$code = md5($user_info[0] . $user_info[1]);
|
|
|
|
|
|
$code = md5($user_info['user_id'] . $_CFG['hash_code'] . $user_info['reg_time']);
|
|
|
//發送郵件的函數
|
|
|
if (send_pwd_email($user_info['user_id'], $user_name, $email, $code))
|
|
|
{
|
|
|
show_message($_LANG['send_success'] . $email, $_LANG['back_home_lnk'], './', 'info');
|
|
|
}
|
|
|
else
|
|
|
{
|
|
|
//發送郵件出錯
|
|
|
show_message($_LANG['fail_send_password'], $_LANG['back_page_up'], './', 'info');
|
|
|
}
|
|
|
}
|
|
|
else
|
|
|
{
|
|
|
//用户名與郵件地址不匹配
|
|
|
show_message($_LANG['username_no_email'], $_LANG['back_page_up'], '', 'info');
|
|
|
}
|
|
|
}
|
|
|
|
|
|
/* 手機短信找回密碼 */
|
|
|
elseif ($action == 'send_pwd_mobile')
|
|
|
{
|
|
|
require_once(ROOT_PATH . 'includes/lib_sms.php');
|
|
|
require_once(ROOT_PATH . 'languages/' .$_CFG['lang']. '/sms.php');
|
|
|
|
|
|
if ($_CFG['ecsdxt_mobile_pwd'] == '0')
|
|
|
show_message($_LANG['ecsdxt_mobile_pwd_closed']);
|
|
|
|
|
|
include_once(ROOT_PATH . 'includes/lib_passport.php');
|
|
|
|
|
|
/* 初始化會員用户名和手機 */
|
|
|
$mobile = !empty($_POST['mobile']) ? trim($_POST['mobile']) : '';
|
|
|
|
|
|
/* 用户名和手機是否匹配 */
|
|
|
$sql = "SELECT COUNT(user_id) FROM " . $ecs->table('users') ." WHERE mobile_phone = '$mobile' or user_name = '$mobile'";
|
|
|
|
|
|
if ($db->getOne($sql) > 0)
|
|
|
{
|
|
|
/* 是否找回過密碼 */
|
|
|
$sql = "SELECT COUNT(id) FROM " . $ecs->table('verifycode') ." WHERE status=3 AND getip='" . real_ip() . "' AND dateline>'" . gmtime() ."'-".$_CFG['ecsdxt_smsgap'];
|
|
|
|
|
|
if ($db->getOne($sql) > 0)
|
|
|
{
|
|
|
$message = sprintf($_LANG['send_pwd_mobile_excessived'], $_CFG['ecsdxt_smsgap']);
|
|
|
show_message($message, $_LANG['back_page_up'], '', 'info');
|
|
|
}
|
|
|
|
|
|
$new_password = getverifycode();
|
|
|
|
|
|
$smarty->assign('shop_name', $_CFG['shop_name']);
|
|
|
$smarty->assign('user_name', $mobile);
|
|
|
$smarty->assign('new_password', $new_password);
|
|
|
|
|
|
$content = $smarty->fetch('str:' . $_CFG['ecsdxt_mobile_pwd_value']);
|
|
|
|
|
|
/* 發送註冊手機短信驗證 */
|
|
|
$ret = sendsms($mobile, $content);
|
|
|
|
|
|
if($ret === true)
|
|
|
{
|
|
|
//插入獲取驗證碼數據記錄
|
|
|
$sql = "INSERT INTO " . $ecs->table('verifycode') . "(mobile, getip, verifycode, dateline, status) VALUES ('" . $mobile . "', '" . real_ip() . "', '$new_password', '" . gmtime() ."', 3)";
|
|
|
$db->query($sql);
|
|
|
|
|
|
$user_name = $db->getOne("SELECT user_name FROM " .$ecs->table('users'). " WHERE mobile_phone='$mobile' or user_name='$mobile'");
|
|
|
|
|
|
if ($user->edit_user(array('username'=> $user_name, 'old_password'=>null, 'password'=>$new_password), 1))
|
|
|
{
|
|
|
$sql="UPDATE ".$ecs->table('users'). "SET `ec_salt`='0' WHERE user_name= '".$user_name."'";
|
|
|
$db->query($sql);
|
|
|
|
|
|
$user->logout();
|
|
|
show_message($_LANG['send_pwd_mobile_success'], $_LANG['relogin_lnk'], 'user.php?act=login', 'info');
|
|
|
}
|
|
|
else
|
|
|
{
|
|
|
show_message($_LANG['send_pwd_mobile_false'], $_LANG['back_page_up'], '', 'info');
|
|
|
}
|
|
|
}
|
|
|
else
|
|
|
{
|
|
|
show_message($_LANG['send_pwd_mobile_failured'] . $ret, $_LANG['back_page_up'], '', 'info');
|
|
|
}
|
|
|
}
|
|
|
else
|
|
|
{
|
|
|
//用户名與手機不匹配
|
|
|
show_message($_LANG['username_no_mobile'], $_LANG['back_page_up'], '', 'info');
|
|
|
}
|
|
|
}
|
|
|
|
|
|
/* 綁定手機頁面 */
|
|
|
elseif ($action == 'bindmobile')
|
|
|
{
|
|
|
$smarty->assign('ztime', $_CFG['ecsdxt_smsgap']);
|
|
|
$smarty->display('user_transaction.dwt');
|
|
|
}
|
|
|
|
|
|
/* 綁定手機頁面 */
|
|
|
elseif ($action == 'act_bindmobile')
|
|
|
{
|
|
|
require_once(ROOT_PATH . 'includes/lib_sms.php');
|
|
|
require_once(ROOT_PATH . 'languages/' .$_CFG['lang']. '/sms.php');
|
|
|
|
|
|
$mobile = isset($_POST['mobile']) ? trim($_POST['mobile']) : '';//手機號
|
|
|
$verifycode = isset($_POST['verifycode']) ? trim($_POST['verifycode']) : '';//驗證碼
|
|
|
|
|
|
if ($_CFG['ecsdxt_mobile_bind'] == '1')
|
|
|
{
|
|
|
/* 提交的手機號是否正確 */
|
|
|
if(!ismobile($mobile)) {
|
|
|
show_message($_LANG['invalid_mobile_phone']);
|
|
|
}
|
|
|
|
|
|
/* 提交的驗證碼不能為空 */
|
|
|
if(empty($verifycode)) {
|
|
|
show_message($_LANG['verifycode_empty']);
|
|
|
}
|
|
|
|
|
|
/* 提交的驗證碼是否正確 */
|
|
|
if(empty($mobile)) {
|
|
|
show_message($_LANG['invalid_verify_code']);
|
|
|
}
|
|
|
|
|
|
/* 提交的手機號是否已經綁定帳號 */
|
|
|
$sql = "SELECT COUNT(user_id) FROM " . $ecs->table('users') . " WHERE mobile_phone = '$mobile'";
|
|
|
|
|
|
if ($db->getOne($sql) > 0)
|
|
|
{
|
|
|
show_message($_LANG['mobile_phone_binded']);
|
|
|
}
|
|
|
|
|
|
/* 驗證手機號驗證碼和IP */
|
|
|
$sql = "SELECT COUNT(id) FROM " . $ecs->table('verifycode') ." WHERE mobile='$mobile' AND verifycode='$verifycode' AND getip='" . real_ip() . "' AND status=4 AND dateline>'" . gmtime() ."'-86400";//驗證碼一天內有效
|
|
|
|
|
|
if ($db->getOne($sql) == 0)
|
|
|
{
|
|
|
//手機號與驗證碼不匹配
|
|
|
show_message($_LANG['verifycode_mobile_phone_notmatch']);
|
|
|
}
|
|
|
|
|
|
/* 更新驗證碼錶更新用户手機字段 */
|
|
|
$sql = "UPDATE " . $ecs->table('verifycode') . " SET reguid=" . $_SESSION['user_id'] . ",regdateline='" . gmtime() ."',status=5 WHERE mobile='$mobile' AND verifycode='$verifycode' AND getip='" . real_ip() . "' AND status=4 AND dateline>'" . gmtime() ."'-86400";
|
|
|
$db->query($sql);
|
|
|
$sql = "UPDATE " . $ecs->table('users') . " SET mobile_phone='" . $mobile ."' WHERE user_id=" . $_SESSION['user_id'] . "";
|
|
|
$db->query($sql);
|
|
|
|
|
|
show_message($_LANG['bind_mobile_success'], $_LANG['back_page_up'], 'user.php?act=profile', 'info');
|
|
|
}
|
|
|
else
|
|
|
{
|
|
|
//手機綁定未開啓
|
|
|
show_message($_LANG['ecsdxt_mobile_bind_closed'], $_LANG['back_page_up'], '', 'info');
|
|
|
}
|
|
|
}
|
|
|
|
|
|
/* 重置新密碼 */
|
|
|
elseif ($action == 'reset_password')
|
|
|
{
|
|
|
//顯示重置密碼的表單
|
|
|
$smarty->display('user_passport.dwt');
|
|
|
}
|
|
|
|
|
|
/* 修改會員密碼 */
|
|
|
elseif ($action == 'act_edit_password')
|
|
|
{
|
|
|
require_once(ROOT_PATH . 'includes/lib_sms.php');
|
|
|
include_once(ROOT_PATH . 'includes/lib_passport.php');
|
|
|
|
|
|
$old_password = isset($_POST['old_password']) ? trim($_POST['old_password']) : null;
|
|
|
$new_password = isset($_POST['new_password']) ? trim($_POST['new_password']) : '';
|
|
|
$user_id = isset($_POST['uid']) ? intval($_POST['uid']) : $user_id;
|
|
|
$code = isset($_POST['code']) ? trim($_POST['code']) : '';
|
|
|
|
|
|
if (strlen($new_password) < 6)
|
|
|
{
|
|
|
show_message($_LANG['passport_js']['password_shorter']);
|
|
|
}
|
|
|
|
|
|
$user_info = $user->get_profile_by_id($user_id); //論壇記錄
|
|
|
|
|
|
if (($user_info && (!empty($code) && md5($user_info['user_id'] . $_CFG['hash_code'] . $user_info['reg_time']) == $code)) || ($_SESSION['user_id']>0 && $_SESSION['user_id'] == $user_id && $user->check_user($_SESSION['user_name'], $old_password)))
|
|
|
{
|
|
|
|
|
|
if ($user->edit_user(array('username'=> (empty($code) ? $_SESSION['user_name'] : $user_info['user_name']), 'old_password'=>$old_password, 'password'=>$new_password), empty($code) ? 0 : 1))
|
|
|
{
|
|
|
/* 獲取用户手機號 */
|
|
|
$sql = "SELECT user_id, mobile_phone FROM " . $ecs->table('users') . " WHERE user_name='$user_info[user_name]' LIMIT 1";
|
|
|
$row = $db->getRow($sql);
|
|
|
|
|
|
/* 修改會員密碼成功後給用户發送短信提醒 */
|
|
|
if ($_CFG['ecsdxt_mobile_changepwd'] == '1' && $row && ismobile($row['mobile_phone']))
|
|
|
{
|
|
|
$smarty->assign('shop_name', $_CFG['shop_name']);
|
|
|
$smarty->assign('user_name', $_SESSION['user_name']);
|
|
|
$smarty->assign('new_password', $new_password);
|
|
|
|
|
|
$content = $smarty->fetch('str:' . $_CFG['ecsdxt_mobile_changepwd_value']);
|
|
|
|
|
|
/* 發送修改密碼短信提醒 */
|
|
|
$ret = sendsms($row['mobile_phone'], $content);
|
|
|
|
|
|
if($ret === true)
|
|
|
{
|
|
|
//插入密碼短信提醒數據記錄
|
|
|
$sql = "INSERT INTO " . $ecs->table('verifycode') . "(mobile, getip, verifycode, dateline, reguid, status) VALUES ('" . $row['mobile_phone'] . "', '" . real_ip() . "', '$new_password', '" . gmtime() ."', $_SESSION[user_id], 6)";
|
|
|
$db->query($sql);
|
|
|
}
|
|
|
}
|
|
|
|
|
|
$sql="UPDATE ".$ecs->table('users'). "SET `ec_salt`='0' WHERE user_id= '".$user_id."'";
|
|
|
$db->query($sql);
|
|
|
$user->logout();
|
|
|
show_message($_LANG['edit_password_success'], $_LANG['relogin_lnk'], 'user.php?act=login', 'info');
|
|
|
}
|
|
|
else
|
|
|
{
|
|
|
show_message($_LANG['edit_password_failure'], $_LANG['back_page_up'], '', 'info');
|
|
|
}
|
|
|
}
|
|
|
else
|
|
|
{
|
|
|
show_message($_LANG['edit_password_failure'], $_LANG['back_page_up'], '', 'info');
|
|
|
}
|
|
|
|
|
|
}
|
|
|
|
|
|
/* 添加一個紅包 */
|
|
|
elseif ($action == 'act_add_bonus')
|
|
|
{
|
|
|
include_once(ROOT_PATH . 'includes/lib_transaction.php');
|
|
|
|
|
|
$bouns_sn = isset($_POST['bonus_sn']) ? intval($_POST['bonus_sn']) : '';
|
|
|
|
|
|
if (add_bonus($user_id, $bouns_sn))
|
|
|
{
|
|
|
show_message($_LANG['add_bonus_sucess'], $_LANG['back_up_page'], 'user.php?act=bonus', 'info');
|
|
|
}
|
|
|
else
|
|
|
{
|
|
|
$err->show($_LANG['back_up_page'], 'user.php?act=bonus');
|
|
|
}
|
|
|
}
|
|
|
|
|
|
/* 查看訂單列表 */
|
|
|
elseif ($action == 'order_list')
|
|
|
{
|
|
|
include_once(ROOT_PATH . 'includes/lib_transaction.php');
|
|
|
include_once (ROOT_PATH . 'includes/lib_transaction_1.php');
|
|
|
|
|
|
$page = isset($_REQUEST['page']) ? intval($_REQUEST['page']) : 1;
|
|
|
|
|
|
$record_count = $db->getOne("SELECT COUNT(*) FROM " .$ecs->table('order_info'). " WHERE user_id = '$user_id'");
|
|
|
|
|
|
$pager = get_pager('user.php', array('act' => $action), $record_count, $page);
|
|
|
|
|
|
//$orders = get_user_orders($user_id, $pager['size'], $pager['start']);
|
|
|
$orders = get_user_orders_1($user_id, $pager['size'], $pager['start'], $where);
|
|
|
$merge = get_user_merge($user_id);
|
|
|
|
|
|
$smarty->assign('merge', $merge);
|
|
|
$smarty->assign('pager', $pager);
|
|
|
$smarty->assign('orders', $orders);
|
|
|
$smarty->display('user_transaction.dwt');
|
|
|
}
|
|
|
|
|
|
/* 查看訂單詳情 */
|
|
|
elseif ($action == 'order_detail')
|
|
|
{
|
|
|
include_once(ROOT_PATH . 'includes/lib_transaction.php');
|
|
|
include_once(ROOT_PATH . 'includes/lib_payment.php');
|
|
|
include_once(ROOT_PATH . 'includes/lib_order.php');
|
|
|
include_once(ROOT_PATH . 'includes/lib_clips.php');
|
|
|
|
|
|
$order_id = isset($_GET['order_id']) ? intval($_GET['order_id']) : 0;
|
|
|
|
|
|
/* 訂單詳情 */
|
|
|
$order = get_order_detail($order_id, $user_id);
|
|
|
|
|
|
if ($order === false)
|
|
|
{
|
|
|
$err->show($_LANG['back_home_lnk'], './');
|
|
|
|
|
|
exit;
|
|
|
}
|
|
|
|
|
|
/* 是否顯示添加到購物車 */
|
|
|
if ($order['extension_code'] != 'group_buy' && $order['extension_code'] != 'exchange_goods')
|
|
|
{
|
|
|
$smarty->assign('allow_to_cart', 1);
|
|
|
}
|
|
|
|
|
|
/* 訂單商品 */
|
|
|
$goods_list = order_goods($order_id);
|
|
|
foreach ($goods_list AS $key => $value)
|
|
|
{
|
|
|
$goods_list[$key]['market_price'] = price_format($value['market_price'], false);
|
|
|
$goods_list[$key]['goods_price'] = price_format($value['goods_price'], false);
|
|
|
$goods_list[$key]['subtotal'] = price_format($value['subtotal'], false);
|
|
|
}
|
|
|
|
|
|
/* 設置能否修改使用餘額數 */
|
|
|
if ($order['order_amount'] > 0 && $_CFG['use_surplus'])
|
|
|
{
|
|
|
if ($order['order_status'] == OS_UNCONFIRMED || $order['order_status'] == OS_CONFIRMED)
|
|
|
{
|
|
|
$user = user_info($order['user_id']);
|
|
|
if ($user['user_money'] + $user['credit_line'] > 0)
|
|
|
{
|
|
|
$smarty->assign('allow_edit_surplus', 1);
|
|
|
$smarty->assign('max_surplus', sprintf($_LANG['max_surplus'], $user['user_money']));
|
|
|
}
|
|
|
}
|
|
|
}
|
|
|
|
|
|
/* 未發貨，未付款時允許更換支付方式 */
|
|
|
if ($order['order_amount'] > 0 && $order['pay_status'] == PS_UNPAYED && $order['shipping_status'] == SS_UNSHIPPED)
|
|
|
{
|
|
|
$payment_list = available_payment_list(false, 0, true);
|
|
|
|
|
|
/* 過濾掉當前支付方式和餘額支付方式 */
|
|
|
if(is_array($payment_list))
|
|
|
{
|
|
|
foreach ($payment_list as $key => $payment)
|
|
|
{
|
|
|
if ($payment['pay_id'] == $order['pay_id'] || $payment['pay_code'] == 'balance')
|
|
|
{
|
|
|
unset($payment_list[$key]);
|
|
|
}
|
|
|
}
|
|
|
}
|
|
|
$smarty->assign('payment_list', $payment_list);
|
|
|
}
|
|
|
|
|
|
/* 訂單 支付 配送 狀態語言項 */
|
|
|
$order['order_status'] = $_LANG['os'][$order['order_status']];
|
|
|
$order['pay_status'] = $_LANG['ps'][$order['pay_status']];
|
|
|
$order['shipping_status'] = $_LANG['ss'][$order['shipping_status']];
|
|
|
|
|
|
/* 物流跟蹤--開始 青蜂網絡www.0769web.net */
|
|
|
if($order['shipping_id']!=-1){
|
|
|
$shipping = get_shipping_object($order['shipping_id']);
|
|
|
$result = $shipping->getorder($order['invoice_no']);
|
|
|
$kuaidi_list['data'] = $result['data'];
|
|
|
$kuaidi_list['shipping_name'] = $order['shipping_name'];
|
|
|
$kuaidi_list['invoice_no'] = $order['invoice_no'];
|
|
|
$smarty->assign('kuaidi_list', $kuaidi_list);
|
|
|
}
|
|
|
/* 物流跟蹤--開始 青蜂網絡www.0769web.net */
|
|
|
|
|
|
$smarty->assign('order', $order);
|
|
|
$smarty->assign('goods_list', $goods_list);
|
|
|
$smarty->display('user_transaction.dwt');
|
|
|
}
|
|
|
|
|
|
/* 取消訂單 */
|
|
|
elseif ($action == 'cancel_order')
|
|
|
{
|
|
|
include_once(ROOT_PATH . 'includes/lib_transaction.php');
|
|
|
include_once(ROOT_PATH . 'includes/lib_order.php');
|
|
|
|
|
|
$order_id = isset($_GET['order_id']) ? intval($_GET['order_id']) : 0;
|
|
|
|
|
|
if (cancel_order($order_id, $user_id))
|
|
|
{
|
|
|
/* 客户取消訂單時給商家發送短信提醒 */
|
|
|
if ($_CFG['ecsdxt_order_canceled'] == '1' && $_CFG['ecsdxt_shop_mobile'] != '')
|
|
|
{
|
|
|
require_once(ROOT_PATH . 'includes/lib_sms.php');
|
|
|
|
|
|
$smarty->assign('shop_name', $_CFG['shop_name']);
|
|
|
$sql = "SELECT order_sn FROM " . $ecs->table('order_info') . " WHERE order_id='$order_id' LIMIT 1";
|
|
|
$row = $db->getRow($sql);
|
|
|
$smarty->assign('order_sn', $row['order_sn']);
|
|
|
|
|
|
$content = $smarty->fetch('str:' . $_CFG['ecsdxt_order_canceled_value']);
|
|
|
|
|
|
$ret = sendsms($_CFG['ecsdxt_shop_mobile'], $content);
|
|
|
}
|
|
|
|
|
|
/* 獲取用户手機號 */
|
|
|
$sql = "SELECT user_id, mobile_phone FROM " . $ecs->table('users') . " WHERE user_name='$_SESSION[user_name]' LIMIT 1";
|
|
|
$row = $db->getRow($sql);
|
|
|
|
|
|
/* 客户取消訂單時給客户發送短信提醒 */
|
|
|
if ($_CFG['ecsdxt_customer_canceled'] == '1' && $row['mobile_phone'] != '')
|
|
|
{
|
|
|
require_once(ROOT_PATH . 'includes/lib_sms.php');
|
|
|
|
|
|
$smarty->assign('shop_name', $_CFG['shop_name']);
|
|
|
$sql = "SELECT order_sn FROM " . $ecs->table('order_info') . " WHERE order_id='$order_id' LIMIT 1";
|
|
|
$row_order = $db->getRow($sql);
|
|
|
$smarty->assign('order_sn', $row_order['order_sn']);
|
|
|
|
|
|
$content = $smarty->fetch('str:' . $_CFG['ecsdxt_customer_canceled_value']);
|
|
|
|
|
|
$ret = sendsms($row['mobile_phone'], $content);
|
|
|
}
|
|
|
|
|
|
ecs_header("Location: user.php?act=order_list\n");
|
|
|
exit;
|
|
|
}
|
|
|
else
|
|
|
{
|
|
|
$err->show($_LANG['order_list_lnk'], 'user.php?act=order_list');
|
|
|
}
|
|
|
}
|
|
|
|
|
|
/* 收貨地址列表界面*/
|
|
|
elseif ($action == 'address_list')
|
|
|
{
|
|
|
include_once(ROOT_PATH . 'includes/lib_transaction.php');
|
|
|
include_once(ROOT_PATH . 'languages/' .$_CFG['lang']. '/shopping_flow.php');
|
|
|
$smarty->assign('lang', $_LANG);
|
|
|
|
|
|
/* 取得國家列表、商店所在國家、商店所在國家的省列表 */
|
|
|
$smarty->assign('country_list', get_regions());
|
|
|
$smarty->assign('shop_province_list', get_regions(1, $_CFG['shop_country']));
|
|
|
|
|
|
/* 獲得用户所有的收貨人信息 */
|
|
|
$consignee_list = get_consignee_list($_SESSION['user_id']);
|
|
|
|
|
|
if (count($consignee_list) < 5 && $_SESSION['user_id'] > 0)
|
|
|
{
|
|
|
/* 如果用户收貨人信息的總數小於5 則增加一個新的收貨人信息 */
|
|
|
$consignee_list[] = array('country' => $_CFG['shop_country'], 'email' => isset($_SESSION['email']) ? $_SESSION['email'] : '');
|
|
|
}
|
|
|
|
|
|
$smarty->assign('consignee_list', $consignee_list);
|
|
|
|
|
|
//取得國家列表，如果有收貨人列表，取得省市區列表
|
|
|
foreach ($consignee_list AS $region_id => $consignee)
|
|
|
{
|
|
|
$consignee['country'] = isset($consignee['country']) ? intval($consignee['country']) : 0;
|
|
|
$consignee['province'] = isset($consignee['province']) ? intval($consignee['province']) : 0;
|
|
|
$consignee['city'] = isset($consignee['city']) ? intval($consignee['city']) : 0;
|
|
|
|
|
|
$province_list[$region_id] = get_regions(1, $consignee['country']);
|
|
|
$city_list[$region_id] = get_regions(2, $consignee['province']);
|
|
|
$district_list[$region_id] = get_regions(3, $consignee['city']);
|
|
|
}
|
|
|
|
|
|
/* 獲取默認收貨ID */
|
|
|
$address_id = $db->getOne("SELECT address_id FROM " .$ecs->table('users'). " WHERE user_id='$user_id'");
|
|
|
|
|
|
//賦值於模板
|
|
|
$smarty->assign('real_goods_count', 1);
|
|
|
$smarty->assign('shop_country', $_CFG['shop_country']);
|
|
|
$smarty->assign('shop_province', get_regions(1, $_CFG['shop_country']));
|
|
|
$smarty->assign('province_list', $province_list);
|
|
|
$smarty->assign('address', $address_id);
|
|
|
$smarty->assign('city_list', $city_list);
|
|
|
$smarty->assign('district_list', $district_list);
|
|
|
$smarty->assign('currency_format', $_CFG['currency_format']);
|
|
|
$smarty->assign('integral_scale', $_CFG['integral_scale']);
|
|
|
$smarty->assign('name_of_region', array($_CFG['name_of_region_1'], $_CFG['name_of_region_2'], $_CFG['name_of_region_3'], $_CFG['name_of_region_4']));
|
|
|
|
|
|
$smarty->display('user_transaction.dwt');
|
|
|
}
|
|
|
|
|
|
/* 添加/編輯收貨地址的處理 */
|
|
|
elseif ($action == 'act_edit_address')
|
|
|
{
|
|
|
include_once(ROOT_PATH . 'includes/lib_transaction.php');
|
|
|
include_once(ROOT_PATH . 'languages/' .$_CFG['lang']. '/shopping_flow.php');
|
|
|
$smarty->assign('lang', $_LANG);
|
|
|
|
|
|
$address = array(
|
|
|
'user_id' => $user_id,
|
|
|
'address_id' => intval($_POST['address_id']),
|
|
|
'country' => isset($_POST['country']) ? intval($_POST['country']) : 0,
|
|
|
'province' => isset($_POST['province']) ? intval($_POST['province']) : 0,
|
|
|
'city' => isset($_POST['city']) ? intval($_POST['city']) : 0,
|
|
|
'district' => isset($_POST['district']) ? intval($_POST['district']) : 0,
|
|
|
'address' => isset($_POST['address']) ? compile_str(trim($_POST['address'])) : '',
|
|
|
'consignee' => isset($_POST['consignee']) ? compile_str(trim($_POST['consignee'])) : '',
|
|
|
'email' => isset($_POST['email']) ? compile_str(trim($_POST['email'])) : '',
|
|
|
'tel' => isset($_POST['tel']) ? compile_str(make_semiangle(trim($_POST['tel']))) : '',
|
|
|
'mobile' => isset($_POST['mobile']) ? compile_str(make_semiangle(trim($_POST['mobile']))) : '',
|
|
|
'best_time' => isset($_POST['best_time']) ? compile_str(trim($_POST['best_time'])) : '',
|
|
|
'sign_building' => isset($_POST['sign_building']) ? compile_str(trim($_POST['sign_building'])) : '',
|
|
|
'zipcode' => isset($_POST['zipcode']) ? compile_str(make_semiangle(trim($_POST['zipcode']))) : '',
|
|
|
);
|
|
|
|
|
|
if (update_address($address))
|
|
|
{
|
|
|
show_message($_LANG['edit_address_success'], $_LANG['address_list_lnk'], 'user.php?act=address_list');
|
|
|
}
|
|
|
}
|
|
|
|
|
|
/* 刪除收貨地址 */
|
|
|
elseif ($action == 'drop_consignee')
|
|
|
{
|
|
|
include_once('includes/lib_transaction.php');
|
|
|
|
|
|
$consignee_id = intval($_GET['id']);
|
|
|
|
|
|
if (drop_consignee($consignee_id))
|
|
|
{
|
|
|
ecs_header("Location: user.php?act=address_list\n");
|
|
|
exit;
|
|
|
}
|
|
|
else
|
|
|
{
|
|
|
show_message($_LANG['del_address_false']);
|
|
|
}
|
|
|
}
|
|
|
|
|
|
/* 顯示收藏商品列表 */
|
|
|
elseif ($action == 'collection_list')
|
|
|
{
|
|
|
include_once(ROOT_PATH . 'includes/lib_clips.php');
|
|
|
|
|
|
$page = isset($_REQUEST['page']) ? intval($_REQUEST['page']) : 1;
|
|
|
|
|
|
$record_count = $db->getOne("SELECT COUNT(*) FROM " .$ecs->table('collect_goods').
|
|
|
" WHERE user_id='$user_id' ORDER BY add_time DESC");
|
|
|
|
|
|
$pager = get_pager('user.php', array('act' => $action), $record_count, $page);
|
|
|
$smarty->assign('pager', $pager);
|
|
|
$smarty->assign('goods_list', get_collection_goods($user_id, $pager['size'], $pager['start']));
|
|
|
$smarty->assign('url', $ecs->url());
|
|
|
$lang_list = array(
|
|
|
'UTF8' => $_LANG['charset']['utf8'],
|
|
|
'GB2312' => $_LANG['charset']['zh_cn'],
|
|
|
'BIG5' => $_LANG['charset']['zh_tw'],
|
|
|
);
|
|
|
$smarty->assign('lang_list', $lang_list);
|
|
|
$smarty->assign('user_id', $user_id);
|
|
|
$smarty->display('user_clips.dwt');
|
|
|
}
|
|
|
|
|
|
/* 刪除收藏的商品 */
|
|
|
elseif ($action == 'delete_collection')
|
|
|
{
|
|
|
include_once(ROOT_PATH . 'includes/lib_clips.php');
|
|
|
|
|
|
$collection_id = isset($_GET['collection_id']) ? intval($_GET['collection_id']) : 0;
|
|
|
|
|
|
if ($collection_id > 0)
|
|
|
{
|
|
|
$db->query('DELETE FROM ' .$ecs->table('collect_goods'). " WHERE rec_id='$collection_id' AND user_id ='$user_id'" );
|
|
|
}
|
|
|
|
|
|
ecs_header("Location: user.php?act=collection_list\n");
|
|
|
exit;
|
|
|
}
|
|
|
|
|
|
/* 添加關注商品 */
|
|
|
elseif ($action == 'add_to_attention')
|
|
|
{
|
|
|
$rec_id = (int)$_GET['rec_id'];
|
|
|
if ($rec_id)
|
|
|
{
|
|
|
$db->query('UPDATE ' .$ecs->table('collect_goods'). "SET is_attention = 1 WHERE rec_id='$rec_id' AND user_id ='$user_id'" );
|
|
|
}
|
|
|
ecs_header("Location: user.php?act=collection_list\n");
|
|
|
exit;
|
|
|
}
|
|
|
/* 取消關注商品 */
|
|
|
elseif ($action == 'del_attention')
|
|
|
{
|
|
|
$rec_id = (int)$_GET['rec_id'];
|
|
|
if ($rec_id)
|
|
|
{
|
|
|
$db->query('UPDATE ' .$ecs->table('collect_goods'). "SET is_attention = 0 WHERE rec_id='$rec_id' AND user_id ='$user_id'" );
|
|
|
}
|
|
|
ecs_header("Location: user.php?act=collection_list\n");
|
|
|
exit;
|
|
|
}
|
|
|
/* 顯示留言列表 */
|
|
|
elseif ($action == 'message_list')
|
|
|
{
|
|
|
include_once(ROOT_PATH . 'includes/lib_clips.php');
|
|
|
|
|
|
$page = isset($_REQUEST['page']) ? intval($_REQUEST['page']) : 1;
|
|
|
|
|
|
$order_id = empty($_GET['order_id']) ? 0 : intval($_GET['order_id']);
|
|
|
$order_info = array();
|
|
|
|
|
|
/* 獲取用户留言的數量 */
|
|
|
if ($order_id)
|
|
|
{
|
|
|
$sql = "SELECT COUNT(*) FROM " .$ecs->table('feedback').
|
|
|
" WHERE parent_id = 0 AND order_id = '$order_id' AND user_id = '$user_id'";
|
|
|
$order_info = $db->getRow("SELECT * FROM " . $ecs->table('order_info') . " WHERE order_id = '$order_id' AND user_id = '$user_id'");
|
|
|
$order_info['url'] = 'user.php?act=order_detail&order_id=' . $order_id;
|
|
|
}
|
|
|
else
|
|
|
{
|
|
|
$sql = "SELECT COUNT(*) FROM " .$ecs->table('feedback').
|
|
|
" WHERE parent_id = 0 AND user_id = '$user_id' AND user_name = '" . $_SESSION['user_name'] . "' AND order_id=0";
|
|
|
}
|
|
|
|
|
|
$record_count = $db->getOne($sql);
|
|
|
$act = array('act' => $action);
|
|
|
|
|
|
if ($order_id != '')
|
|
|
{
|
|
|
$act['order_id'] = $order_id;
|
|
|
}
|
|
|
|
|
|
$pager = get_pager('user.php', $act, $record_count, $page, 5);
|
|
|
|
|
|
$smarty->assign('message_list', get_message_list($user_id, $_SESSION['user_name'], $pager['size'], $pager['start'], $order_id));
|
|
|
$smarty->assign('pager', $pager);
|
|
|
$smarty->assign('order_info', $order_info);
|
|
|
$smarty->display('user_clips.dwt');
|
|
|
}
|
|
|
|
|
|
/* 顯示評論列表 */
|
|
|
elseif ($action == 'comment_list')
|
|
|
{
|
|
|
include_once(ROOT_PATH . 'includes/lib_clips.php');
|
|
|
|
|
|
$page = isset($_REQUEST['page']) ? intval($_REQUEST['page']) : 1;
|
|
|
|
|
|
/* 獲取用户留言的數量 */
|
|
|
$sql = "SELECT COUNT(*) FROM " .$ecs->table('comment').
|
|
|
" WHERE parent_id = 0 AND user_id = '$user_id'";
|
|
|
$record_count = $db->getOne($sql);
|
|
|
$pager = get_pager('user.php', array('act' => $action), $record_count, $page, 5);
|
|
|
|
|
|
$smarty->assign('comment_list', get_comment_list($user_id, $pager['size'], $pager['start']));
|
|
|
$smarty->assign('pager', $pager);
|
|
|
$smarty->display('user_clips.dwt');
|
|
|
}
|
|
|
|
|
|
/* 添加我的留言 */
|
|
|
elseif ($action == 'act_add_message')
|
|
|
{
|
|
|
include_once(ROOT_PATH . 'includes/lib_clips.php');
|
|
|
|
|
|
$message = array(
|
|
|
'user_id' => $user_id,
|
|
|
'user_name' => $_SESSION['user_name'],
|
|
|
'user_email' => $_SESSION['email'],
|
|
|
'msg_type' => isset($_POST['msg_type']) ? intval($_POST['msg_type']) : 0,
|
|
|
'msg_title' => isset($_POST['msg_title']) ? trim($_POST['msg_title']) : '',
|
|
|
'msg_content' => isset($_POST['msg_content']) ? trim($_POST['msg_content']) : '',
|
|
|
'order_id'=>empty($_POST['order_id']) ? 0 : intval($_POST['order_id']),
|
|
|
'upload' => (isset($_FILES['message_img']['error']) && $_FILES['message_img']['error'] == 0) || (!isset($_FILES['message_img']['error']) && isset($_FILES['message_img']['tmp_name']) && $_FILES['message_img']['tmp_name'] != 'none')
|
|
|
? $_FILES['message_img'] : array()
|
|
|
);
|
|
|
|
|
|
if (add_message($message))
|
|
|
{
|
|
|
show_message($_LANG['add_message_success'], $_LANG['message_list_lnk'], 'user.php?act=message_list&order_id=' . $message['order_id'],'info');
|
|
|
}
|
|
|
else
|
|
|
{
|
|
|
$err->show($_LANG['message_list_lnk'], 'user.php?act=message_list');
|
|
|
}
|
|
|
}
|
|
|
|
|
|
/* 標籤雲列表 */
|
|
|
elseif ($action == 'tag_list')
|
|
|
{
|
|
|
include_once(ROOT_PATH . 'includes/lib_clips.php');
|
|
|
|
|
|
$good_id = isset($_GET['id']) ? intval($_GET['id']) : 0;
|
|
|
|
|
|
$smarty->assign('tags', get_user_tags($user_id));
|
|
|
$smarty->assign('tags_from', 'user');
|
|
|
$smarty->display('user_clips.dwt');
|
|
|
}
|
|
|
|
|
|
/* 刪除標籤雲的處理 */
|
|
|
elseif ($action == 'act_del_tag')
|
|
|
{
|
|
|
include_once(ROOT_PATH . 'includes/lib_clips.php');
|
|
|
|
|
|
$tag_words = isset($_GET['tag_words']) ? trim($_GET['tag_words']) : '';
|
|
|
delete_tag($tag_words, $user_id);
|
|
|
|
|
|
ecs_header("Location: user.php?act=tag_list\n");
|
|
|
exit;
|
|
|
|
|
|
}
|
|
|
|
|
|
/* 顯示缺貨登記列表 */
|
|
|
elseif ($action == 'booking_list')
|
|
|
{
|
|
|
include_once(ROOT_PATH . 'includes/lib_clips.php');
|
|
|
|
|
|
$page = isset($_REQUEST['page']) ? intval($_REQUEST['page']) : 1;
|
|
|
|
|
|
/* 獲取缺貨登記的數量 */
|
|
|
$sql = "SELECT COUNT(*) " .
|
|
|
"FROM " .$ecs->table('booking_goods'). " AS bg, " .
|
|
|
$ecs->table('goods') . " AS g " .
|
|
|
"WHERE bg.goods_id = g.goods_id AND user_id = '$user_id'";
|
|
|
$record_count = $db->getOne($sql);
|
|
|
$pager = get_pager('user.php', array('act' => $action), $record_count, $page);
|
|
|
|
|
|
$smarty->assign('booking_list', get_booking_list($user_id, $pager['size'], $pager['start']));
|
|
|
$smarty->assign('pager', $pager);
|
|
|
$smarty->display('user_clips.dwt');
|
|
|
}
|
|
|
/* 添加缺貨登記頁面 */
|
|
|
elseif ($action == 'add_booking')
|
|
|
{
|
|
|
include_once(ROOT_PATH . 'includes/lib_clips.php');
|
|
|
|
|
|
$goods_id = isset($_GET['id']) ? intval($_GET['id']) : 0;
|
|
|
if ($goods_id == 0)
|
|
|
{
|
|
|
show_message($_LANG['no_goods_id'], $_LANG['back_page_up'], '', 'error');
|
|
|
}
|
|
|
|
|
|
/* 根據規格屬性獲取貨品規格信息 */
|
|
|
$goods_attr = '';
|
|
|
if ($_GET['spec'] != '')
|
|
|
{
|
|
|
$goods_attr_id = $_GET['spec'];
|
|
|
|
|
|
$attr_list = array();
|
|
|
$sql = "SELECT a.attr_name, g.attr_value " .
|
|
|
"FROM " . $ecs->table('goods_attr') . " AS g, " .
|
|
|
$ecs->table('attribute') . " AS a " .
|
|
|
"WHERE g.attr_id = a.attr_id " .
|
|
|
"AND g.goods_attr_id " . db_create_in($goods_attr_id);
|
|
|
$res = $db->query($sql);
|
|
|
while ($row = $db->fetchRow($res))
|
|
|
{
|
|
|
$attr_list[] = $row['attr_name'] . ': ' . $row['attr_value'];
|
|
|
}
|
|
|
$goods_attr = join(chr(13) . chr(10), $attr_list);
|
|
|
}
|
|
|
$smarty->assign('goods_attr', $goods_attr);
|
|
|
|
|
|
$smarty->assign('info', get_goodsinfo($goods_id));
|
|
|
$smarty->display('user_clips.dwt');
|
|
|
|
|
|
}
|
|
|
|
|
|
/* 添加缺貨登記的處理 */
|
|
|
elseif ($action == 'act_add_booking')
|
|
|
{
|
|
|
include_once(ROOT_PATH . 'includes/lib_clips.php');
|
|
|
|
|
|
$booking = array(
|
|
|
'goods_id' => isset($_POST['id']) ? intval($_POST['id']) : 0,
|
|
|
'goods_amount' => isset($_POST['number']) ? intval($_POST['number']) : 0,
|
|
|
'desc' => isset($_POST['desc']) ? trim($_POST['desc']) : '',
|
|
|
'linkman' => isset($_POST['linkman']) ? trim($_POST['linkman']) : '',
|
|
|
'email' => isset($_POST['email']) ? trim($_POST['email']) : '',
|
|
|
'tel' => isset($_POST['tel']) ? trim($_POST['tel']) : '',
|
|
|
'booking_id' => isset($_POST['rec_id']) ? intval($_POST['rec_id']) : 0
|
|
|
);
|
|
|
|
|
|
// 查看此商品是否已經登記過
|
|
|
$rec_id = get_booking_rec($user_id, $booking['goods_id']);
|
|
|
if ($rec_id > 0)
|
|
|
{
|
|
|
show_message($_LANG['booking_rec_exist'], $_LANG['back_page_up'], '', 'error');
|
|
|
}
|
|
|
|
|
|
if (add_booking($booking))
|
|
|
{
|
|
|
show_message($_LANG['booking_success'], $_LANG['back_booking_list'], 'user.php?act=booking_list',
|
|
|
'info');
|
|
|
}
|
|
|
else
|
|
|
{
|
|
|
$err->show($_LANG['booking_list_lnk'], 'user.php?act=booking_list');
|
|
|
}
|
|
|
}
|
|
|
|
|
|
/* 刪除缺貨登記 */
|
|
|
elseif ($action == 'act_del_booking')
|
|
|
{
|
|
|
include_once(ROOT_PATH . 'includes/lib_clips.php');
|
|
|
|
|
|
$id = isset($_GET['id']) ? intval($_GET['id']) : 0;
|
|
|
if ($id == 0 || $user_id == 0)
|
|
|
{
|
|
|
ecs_header("Location: user.php?act=booking_list\n");
|
|
|
exit;
|
|
|
}
|
|
|
|
|
|
$result = delete_booking($id, $user_id);
|
|
|
if ($result)
|
|
|
{
|
|
|
ecs_header("Location: user.php?act=booking_list\n");
|
|
|
exit;
|
|
|
}
|
|
|
}
|
|
|
|
|
|
/* 確認收貨 */
|
|
|
elseif ($action == 'affirm_received')
|
|
|
{
|
|
|
include_once(ROOT_PATH . 'includes/lib_transaction.php');
|
|
|
|
|
|
$order_id = isset($_GET['order_id']) ? intval($_GET['order_id']) : 0;
|
|
|
|
|
|
if (affirm_received($order_id, $user_id))
|
|
|
{
|
|
|
/* 客户確認收貨時給商家發送短信提醒 */
|
|
|
if ($_CFG['ecsdxt_order_confirm'] == '1' && $_CFG['ecsdxt_shop_mobile'] != '')
|
|
|
{
|
|
|
require_once(ROOT_PATH . 'includes/lib_sms.php');
|
|
|
|
|
|
$smarty->assign('shop_name', $_CFG['shop_name']);
|
|
|
$sql = "SELECT order_sn FROM " . $ecs->table('order_info') . " WHERE order_id='$order_id' LIMIT 1";
|
|
|
$row = $db->getRow($sql);
|
|
|
$smarty->assign('order_sn', $row['order_sn']);
|
|
|
|
|
|
$content = $smarty->fetch('str:' . $_CFG['ecsdxt_order_confirm_value']);
|
|
|
|
|
|
$ret = sendsms($_CFG['ecsdxt_shop_mobile'], $content);
|
|
|
}
|
|
|
|
|
|
/* 獲取用户手機號 */
|
|
|
$sql = "SELECT user_id, mobile_phone FROM " . $ecs->table('users') . " WHERE user_name='$_SESSION[user_name]' LIMIT 1";
|
|
|
$row = $db->getRow($sql);
|
|
|
|
|
|
/* 客户確認收貨時給客户發送短信提醒 */
|
|
|
if ($_CFG['ecsdxt_customer_confirm'] == '1' && $row['mobile_phone'] != '')
|
|
|
{
|
|
|
require_once(ROOT_PATH . 'includes/lib_sms.php');
|
|
|
|
|
|
$smarty->assign('shop_name', $_CFG['shop_name']);
|
|
|
$sql = "SELECT order_sn FROM " . $ecs->table('order_info') . " WHERE order_id='$order_id' LIMIT 1";
|
|
|
$row = $db->getRow($sql);
|
|
|
$smarty->assign('order_sn', $row['order_sn']);
|
|
|
|
|
|
$content = $smarty->fetch('str:' . $_CFG['ecsdxt_customer_confirm_value']);
|
|
|
|
|
|
$ret = sendsms($row['mobile_phone'], $content);
|
|
|
}
|
|
|
|
|
|
ecs_header("Location: user.php?act=order_list\n");
|
|
|
exit;
|
|
|
}
|
|
|
else
|
|
|
{
|
|
|
$err->show($_LANG['order_list_lnk'], 'user.php?act=order_list');
|
|
|
}
|
|
|
}
|
|
|
|
|
|
/* 會員退款申請界面 */
|
|
|
elseif ($action == 'account_raply')
|
|
|
{
|
|
|
$smarty->display('user_transaction.dwt');
|
|
|
}
|
|
|
|
|
|
/* 會員預付款界面 */
|
|
|
elseif ($action == 'account_deposit')
|
|
|
{
|
|
|
include_once(ROOT_PATH . 'includes/lib_clips.php');
|
|
|
|
|
|
$surplus_id = isset($_GET['id']) ? intval($_GET['id']) : 0;
|
|
|
$account = get_surplus_info($surplus_id);
|
|
|
|
|
|
$smarty->assign('payment', get_online_payment_list(false));
|
|
|
$smarty->assign('order', $account);
|
|
|
$smarty->display('user_transaction.dwt');
|
|
|
}
|
|
|
|
|
|
/* 會員賬目明細界面 */
|
|
|
elseif ($action == 'account_detail')
|
|
|
{
|
|
|
include_once(ROOT_PATH . 'includes/lib_clips.php');
|
|
|
|
|
|
$page = isset($_REQUEST['page']) ? intval($_REQUEST['page']) : 1;
|
|
|
|
|
|
$account_type = 'user_money';
|
|
|
|
|
|
/* 獲取記錄條數 */
|
|
|
$sql = "SELECT COUNT(*) FROM " .$ecs->table('account_log').
|
|
|
" WHERE user_id = '$user_id'" .
|
|
|
" AND $account_type <> 0 ";
|
|
|
$record_count = $db->getOne($sql);
|
|
|
|
|
|
//分頁函數
|
|
|
$pager = get_pager('user.php', array('act' => $action), $record_count, $page);
|
|
|
|
|
|
//獲取剩餘餘額
|
|
|
$surplus_amount = get_user_surplus($user_id);
|
|
|
if (empty($surplus_amount))
|
|
|
{
|
|
|
$surplus_amount = 0;
|
|
|
}
|
|
|
|
|
|
//獲取餘額記錄
|
|
|
$account_log = array();
|
|
|
$sql = "SELECT * FROM " . $ecs->table('account_log') .
|
|
|
" WHERE user_id = '$user_id'" .
|
|
|
" AND $account_type <> 0 " .
|
|
|
" ORDER BY log_id DESC";
|
|
|
$res = $GLOBALS['db']->selectLimit($sql, $pager['size'], $pager['start']);
|
|
|
while ($row = $db->fetchRow($res))
|
|
|
{
|
|
|
$row['change_time'] = local_date($_CFG['date_format'], $row['change_time']);
|
|
|
$row['type'] = $row[$account_type] > 0 ? $_LANG['account_inc'] : $_LANG['account_dec'];
|
|
|
$row['user_money'] = price_format(abs($row['user_money']), false);
|
|
|
$row['frozen_money'] = price_format(abs($row['frozen_money']), false);
|
|
|
$row['rank_points'] = abs($row['rank_points']);
|
|
|
$row['pay_points'] = abs($row['pay_points']);
|
|
|
$row['short_change_desc'] = sub_str($row['change_desc'], 60);
|
|
|
$row['amount'] = $row[$account_type];
|
|
|
$account_log[] = $row;
|
|
|
}
|
|
|
|
|
|
//模板賦值
|
|
|
$smarty->assign('surplus_amount', price_format($surplus_amount, false));
|
|
|
$smarty->assign('account_log', $account_log);
|
|
|
$smarty->assign('pager', $pager);
|
|
|
$smarty->display('user_transaction.dwt');
|
|
|
}
|
|
|
|
|
|
/* 會員充值和提現申請記錄 */
|
|
|
elseif ($action == 'account_log')
|
|
|
{
|
|
|
include_once(ROOT_PATH . 'includes/lib_clips.php');
|
|
|
|
|
|
$page = isset($_REQUEST['page']) ? intval($_REQUEST['page']) : 1;
|
|
|
|
|
|
/* 獲取記錄條數 */
|
|
|
$sql = "SELECT COUNT(*) FROM " .$ecs->table('user_account').
|
|
|
" WHERE user_id = '$user_id'" .
|
|
|
" AND process_type " . db_create_in(array(SURPLUS_SAVE, SURPLUS_RETURN));
|
|
|
$record_count = $db->getOne($sql);
|
|
|
|
|
|
//分頁函數
|
|
|
$pager = get_pager('user.php', array('act' => $action), $record_count, $page);
|
|
|
|
|
|
//獲取剩餘餘額
|
|
|
$surplus_amount = get_user_surplus($user_id);
|
|
|
if (empty($surplus_amount))
|
|
|
{
|
|
|
$surplus_amount = 0;
|
|
|
}
|
|
|
|
|
|
//獲取餘額記錄
|
|
|
$account_log = get_account_log($user_id, $pager['size'], $pager['start']);
|
|
|
|
|
|
//模板賦值
|
|
|
$smarty->assign('surplus_amount', price_format($surplus_amount, false));
|
|
|
$smarty->assign('account_log', $account_log);
|
|
|
$smarty->assign('pager', $pager);
|
|
|
$smarty->display('user_transaction.dwt');
|
|
|
}
|
|
|
|
|
|
/* 對會員餘額申請的處理 */
|
|
|
|
|
|
elseif ($action == 'act_account')
|
|
|
|
|
|
{
|
|
|
|
|
|
include_once(ROOT_PATH . 'includes/lib_clips.php');
|
|
|
|
|
|
include_once(ROOT_PATH . 'includes/lib_order.php');
|
|
|
|
|
|
$amount = isset($_POST['amount']) ? floatval($_POST['amount']) : 0;
|
|
|
|
|
|
if ($amount <= 0)
|
|
|
|
|
|
{
|
|
|
|
|
|
show_message($_LANG['amount_gt_zero']);
|
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
/*青蜂網絡(www.0769web.net)分銷微分銷優化提現流程*/
|
|
|
|
|
|
$real_name=$_POST['real_name'];//真實姓名
|
|
|
|
|
|
$bank_name=$_POST['bank_name'];//開户行
|
|
|
|
|
|
$bank_account=$_POST['bank_account'];//銀行賬户
|
|
|
|
|
|
$mobile_phone=$_POST['mobile_phone'];//開户行
|
|
|
|
|
|
$user_note=$_POST['user_note'];//留言
|
|
|
|
|
|
|
|
|
|
|
|
$tx_info="真實姓名:【".$real_name."】開户行:【".$bank_name."】銀行賬户:【".$bank_account."】手機:【".$mobile_phone."】留言:【".$user_note."】";
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
/*青蜂網絡(www.0769web.net)分銷微分銷優化提現流程*/
|
|
|
|
|
|
/* 變量初始化 */
|
|
|
|
|
|
$surplus = array(
|
|
|
|
|
|
'user_id' => $user_id,
|
|
|
|
|
|
'rec_id' => !empty($_POST['rec_id']) ? intval($_POST['rec_id']) : 0,
|
|
|
|
|
|
'process_type' => isset($_POST['surplus_type']) ? intval($_POST['surplus_type']) : 0,
|
|
|
|
|
|
'payment_id' => isset($_POST['payment_id']) ? intval($_POST['payment_id']) : 0,
|
|
|
|
|
|
'user_note' => $tx_info,
|
|
|
|
|
|
'amount' => $amount
|
|
|
|
|
|
);
|
|
|
|
|
|
|
|
|
|
|
|
/* 退款申請的處理 */
|
|
|
|
|
|
if ($surplus['process_type'] == 1)
|
|
|
|
|
|
{
|
|
|
|
|
|
/* 判斷是否有足夠的餘額的進行退款的操作 */
|
|
|
|
|
|
$sur_amount = get_user_surplus($_SESSION['user_id']);
|
|
|
|
|
|
//$sql = "SELECT user_money FROM " .$GLOBALS['ecs']->table('users').
|
|
|
|
|
|
" WHERE user_id = '$user_id'";
|
|
|
|
|
|
//$sur_amount= $GLOBALS['db']->getOne($sql);
|
|
|
|
|
|
if ($amount > $sur_amount)
|
|
|
|
|
|
{
|
|
|
|
|
|
$content = $_LANG['surplus_amount_error'];
|
|
|
|
|
|
show_message($content, $_LANG['back_page_up'], '', 'info');
|
|
|
|
|
|
}
|
|
|
|
|
|
$user_yishenqing = $db->getOne("select sum(amount) from " . $ecs->table('user_account') ." where process_type=1 and is_paid=0 and user_id = '$user_id' ");
|
|
|
|
|
|
$user_yishenqing=$user_yishenqing*-1;
|
|
|
|
|
|
$all_amout=$amount+$user_yishenqing;
|
|
|
|
|
|
|
|
|
|
|
|
if ($all_amout > $sur_amount)
|
|
|
|
|
|
{
|
|
|
|
|
|
$content = "申請提醒總金額大於自己的餘額";
|
|
|
|
|
|
show_message($content, $_LANG['back_page_up'], '', 'info');
|
|
|
|
|
|
}
|
|
|
|
|
|
//插入會員賬目明細
|
|
|
|
|
|
$amount = '-'.$amount;
|
|
|
|
|
|
$surplus['payment'] = '';
|
|
|
|
|
|
$surplus['rec_id'] = insert_user_account($surplus, $amount);
|
|
|
|
|
|
|
|
|
|
|
|
/* 如果成功提交 */
|
|
|
|
|
|
if ($surplus['rec_id'] > 0)
|
|
|
|
|
|
{
|
|
|
|
|
|
$content = $_LANG['surplus_appl_submit'];
|
|
|
|
|
|
show_message($content, $_LANG['back_account_log'], 'user.php?act=account_log', 'info');
|
|
|
|
|
|
}
|
|
|
|
|
|
else
|
|
|
|
|
|
{
|
|
|
|
|
|
$content = $_LANG['process_false'];
|
|
|
|
|
|
show_message($content, $_LANG['back_page_up'], '', 'info');
|
|
|
|
|
|
}
|
|
|
|
|
|
}
|
|
|
|
|
|
/* 如果是會員預付款，跳轉到下一步，進行線上支付的操作 */
|
|
|
|
|
|
else
|
|
|
|
|
|
{
|
|
|
|
|
|
if ($surplus['payment_id'] <= 0)
|
|
|
|
|
|
{
|
|
|
|
|
|
show_message($_LANG['select_payment_pls']);
|
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
include_once(ROOT_PATH .'includes/lib_payment.php');
|
|
|
|
|
|
|
|
|
|
|
|
//獲取支付方式名稱
|
|
|
|
|
|
$payment_info = array();
|
|
|
|
|
|
$payment_info = payment_info($surplus['payment_id']);
|
|
|
|
|
|
$surplus['payment'] = $payment_info['pay_name'];
|
|
|
|
|
|
|
|
|
|
|
|
if ($surplus['rec_id'] > 0)
|
|
|
|
|
|
{
|
|
|
|
|
|
//更新會員賬目明細
|
|
|
|
|
|
$surplus['rec_id'] = update_user_account($surplus);
|
|
|
|
|
|
}
|
|
|
|
|
|
else
|
|
|
|
|
|
{
|
|
|
|
|
|
//插入會員賬目明細
|
|
|
|
|
|
$surplus['rec_id'] = insert_user_account($surplus, $amount);
|
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
//取得支付信息，生成支付代碼
|
|
|
|
|
|
$payment = unserialize_config($payment_info['pay_config']);
|
|
|
|
|
|
|
|
|
|
|
|
//生成偽訂單號, 不足的時候補0
|
|
|
|
|
|
$order = array();
|
|
|
|
|
|
$order['order_sn'] = $surplus['rec_id'];
|
|
|
|
|
|
$order['user_name'] = $_SESSION['user_name'];
|
|
|
|
|
|
$order['surplus_amount'] = $amount;
|
|
|
|
|
|
|
|
|
|
|
|
//計算支付手續費用
|
|
|
|
|
|
$payment_info['pay_fee'] = pay_fee($surplus['payment_id'], $order['surplus_amount'], 0);
|
|
|
|
|
|
|
|
|
|
|
|
//計算此次預付款需要支付的總金額
|
|
|
|
|
|
$order['order_amount'] = $amount + $payment_info['pay_fee'];
|
|
|
|
|
|
|
|
|
|
|
|
//記錄支付log
|
|
|
|
|
|
$order['log_id'] = insert_pay_log($surplus['rec_id'], $order['order_amount'], $type=PAY_SURPLUS, 0);
|
|
|
|
|
|
|
|
|
|
|
|
/* 調用相應的支付方式文件 */
|
|
|
|
|
|
include_once(ROOT_PATH . 'includes/modules/payment/' . $payment_info['pay_code'] . '.php');
|
|
|
|
|
|
|
|
|
|
|
|
/* 取得在線支付方式的支付按鈕 */
|
|
|
|
|
|
$pay_obj = new $payment_info['pay_code'];
|
|
|
|
|
|
//開始青蜂網絡(www.0769web.net)分銷開發，兼容微信支付
|
|
|
|
|
|
$order['pay_id']=4;
|
|
|
|
|
|
$GLOBALS['db']->autoExecute($ecs->table('order_info'), $order, 'INSERT');
|
|
|
|
|
|
$new_order_id = $db->insert_id();
|
|
|
|
|
|
$amount = $order['order_amount'];
|
|
|
|
|
|
$type=PAY_SURPLUS;
|
|
|
|
|
|
|
|
|
|
|
|
$is_paid=0;
|
|
|
|
|
|
$sql = 'INSERT INTO ' .$GLOBALS['ecs']->table('pay_log')." (order_id, order_amount, order_type, is_paid)".
|
|
|
|
|
|
" VALUES ('$new_order_id', '$amount', '$type', '$is_paid')";
|
|
|
|
|
|
$GLOBALS['db']->query($sql);
|
|
|
|
|
|
//結束
|
|
|
|
|
|
$payment_info['pay_button'] = $pay_obj->get_code($order, $payment);
|
|
|
|
|
|
|
|
|
|
|
|
/* 模板賦值 */
|
|
|
|
|
|
$smarty->assign('payment', $payment_info);
|
|
|
|
|
|
$smarty->assign('pay_fee', price_format($payment_info['pay_fee'], false));
|
|
|
|
|
|
$smarty->assign('amount', price_format($amount, false));
|
|
|
|
|
|
$smarty->assign('order', $order);
|
|
|
|
|
|
$smarty->display('user_transaction.dwt');
|
|
|
|
|
|
}
|
|
|
|
|
|
}
|
|
|
/* 刪除會員餘額 */
|
|
|
elseif ($action == 'cancel')
|
|
|
{
|
|
|
include_once(ROOT_PATH . 'includes/lib_clips.php');
|
|
|
|
|
|
$id = isset($_GET['id']) ? intval($_GET['id']) : 0;
|
|
|
if ($id == 0 || $user_id == 0)
|
|
|
{
|
|
|
ecs_header("Location: user.php?act=account_log\n");
|
|
|
exit;
|
|
|
}
|
|
|
|
|
|
$result = del_user_account($id, $user_id);
|
|
|
if ($result)
|
|
|
{
|
|
|
ecs_header("Location: user.php?act=account_log\n");
|
|
|
exit;
|
|
|
}
|
|
|
}
|
|
|
|
|
|
/* 會員通過帳目明細列表進行再付款的操作 */
|
|
|
elseif ($action == 'pay')
|
|
|
{
|
|
|
include_once(ROOT_PATH . 'includes/lib_clips.php');
|
|
|
include_once(ROOT_PATH . 'includes/lib_payment.php');
|
|
|
include_once(ROOT_PATH . 'includes/lib_order.php');
|
|
|
|
|
|
//變量初始化
|
|
|
$surplus_id = isset($_GET['id']) ? intval($_GET['id']) : 0;
|
|
|
$payment_id = isset($_GET['pid']) ? intval($_GET['pid']) : 0;
|
|
|
|
|
|
if ($surplus_id == 0)
|
|
|
{
|
|
|
ecs_header("Location: user.php?act=account_log\n");
|
|
|
exit;
|
|
|
}
|
|
|
|
|
|
//如果原來的支付方式已禁用或者已刪除, 重新選擇支付方式
|
|
|
if ($payment_id == 0)
|
|
|
{
|
|
|
ecs_header("Location: user.php?act=account_deposit&id=".$surplus_id."\n");
|
|
|
exit;
|
|
|
}
|
|
|
|
|
|
//獲取單條會員帳目信息
|
|
|
$order = array();
|
|
|
$order = get_surplus_info($surplus_id);
|
|
|
|
|
|
//支付方式的信息
|
|
|
$payment_info = array();
|
|
|
$payment_info = payment_info($payment_id);
|
|
|
|
|
|
/* 如果當前支付方式沒有被禁用，進行支付的操作 */
|
|
|
if (!empty($payment_info))
|
|
|
{
|
|
|
//取得支付信息，生成支付代碼
|
|
|
$payment = unserialize_config($payment_info['pay_config']);
|
|
|
|
|
|
//生成偽訂單號
|
|
|
$order['order_sn'] = $surplus_id;
|
|
|
|
|
|
//獲取需要支付的log_id
|
|
|
$order['log_id'] = get_paylog_id($surplus_id, $pay_type = PAY_SURPLUS);
|
|
|
|
|
|
$order['user_name'] = $_SESSION['user_name'];
|
|
|
$order['surplus_amount'] = $order['amount'];
|
|
|
|
|
|
//計算支付手續費用
|
|
|
$payment_info['pay_fee'] = pay_fee($payment_id, $order['surplus_amount'], 0);
|
|
|
|
|
|
//計算此次預付款需要支付的總金額
|
|
|
$order['order_amount'] = $order['surplus_amount'] + $payment_info['pay_fee'];
|
|
|
|
|
|
//如果支付費用改變了，也要相應的更改pay_log表的order_amount
|
|
|
$order_amount = $db->getOne("SELECT order_amount FROM " .$ecs->table('pay_log')." WHERE log_id = '$order[log_id]'");
|
|
|
if ($order_amount <> $order['order_amount'])
|
|
|
{
|
|
|
$db->query("UPDATE " .$ecs->table('pay_log').
|
|
|
" SET order_amount = '$order[order_amount]' WHERE log_id = '$order[log_id]'");
|
|
|
}
|
|
|
|
|
|
/* 調用相應的支付方式文件 */
|
|
|
include_once(ROOT_PATH . 'includes/modules/payment/' . $payment_info['pay_code'] . '.php');
|
|
|
|
|
|
/* 取得在線支付方式的支付按鈕 */
|
|
|
$pay_obj = new $payment_info['pay_code'];
|
|
|
$payment_info['pay_button'] = $pay_obj->get_code($order, $payment);
|
|
|
|
|
|
/* 模板賦值 */
|
|
|
$smarty->assign('payment', $payment_info);
|
|
|
$smarty->assign('order', $order);
|
|
|
$smarty->assign('pay_fee', price_format($payment_info['pay_fee'], false));
|
|
|
$smarty->assign('amount', price_format($order['surplus_amount'], false));
|
|
|
$smarty->assign('action', 'act_account');
|
|
|
$smarty->display('user_transaction.dwt');
|
|
|
}
|
|
|
/* 重新選擇支付方式 */
|
|
|
else
|
|
|
{
|
|
|
include_once(ROOT_PATH . 'includes/lib_clips.php');
|
|
|
|
|
|
$smarty->assign('payment', get_online_payment_list());
|
|
|
$smarty->assign('order', $order);
|
|
|
$smarty->assign('action', 'account_deposit');
|
|
|
$smarty->display('user_transaction.dwt');
|
|
|
}
|
|
|
}
|
|
|
|
|
|
/* 添加標籤(ajax) */
|
|
|
elseif ($action == 'add_tag')
|
|
|
{
|
|
|
include_once('includes/cls_json.php');
|
|
|
include_once('includes/lib_clips.php');
|
|
|
|
|
|
$result = array('error' => 0, 'message' => '', 'content' => '');
|
|
|
$id = isset($_POST['id']) ? intval($_POST['id']) : 0;
|
|
|
$tag = isset($_POST['tag']) ? json_str_iconv(trim($_POST['tag'])) : '';
|
|
|
|
|
|
if ($user_id == 0)
|
|
|
{
|
|
|
/* 用户沒有登錄 */
|
|
|
$result['error'] = 1;
|
|
|
$result['message'] = $_LANG['tag_anonymous'];
|
|
|
}
|
|
|
else
|
|
|
{
|
|
|
add_tag($id, $tag); // 添加tag
|
|
|
clear_cache_files('goods'); // 刪除緩存
|
|
|
|
|
|
/* 重新獲得該商品的所有緩存 */
|
|
|
$arr = get_tags($id);
|
|
|
|
|
|
foreach ($arr AS $row)
|
|
|
{
|
|
|
$result['content'][] = array('word' => htmlspecialchars($row['tag_words']), 'count' => $row['tag_count']);
|
|
|
}
|
|
|
}
|
|
|
|
|
|
$json = new JSON;
|
|
|
|
|
|
echo $json->encode($result);
|
|
|
exit;
|
|
|
}
|
|
|
|
|
|
/* 添加收藏商品(ajax) */
|
|
|
elseif ($action == 'collect')
|
|
|
{
|
|
|
include_once(ROOT_PATH .'includes/cls_json.php');
|
|
|
$json = new JSON();
|
|
|
$result = array('error' => 0, 'message' => '');
|
|
|
$goods_id = $_GET['id'];
|
|
|
|
|
|
if (!isset($_SESSION['user_id']) || $_SESSION['user_id'] == 0)
|
|
|
{
|
|
|
$result['error'] = 1;
|
|
|
$result['message'] = $_LANG['login_please'];
|
|
|
die($json->encode($result));
|
|
|
}
|
|
|
else
|
|
|
{
|
|
|
/* 檢查是否已經存在於用户的收藏夾 */
|
|
|
$sql = "SELECT COUNT(*) FROM " .$GLOBALS['ecs']->table('collect_goods') .
|
|
|
" WHERE user_id='$_SESSION[user_id]' AND goods_id = '$goods_id'";
|
|
|
if ($GLOBALS['db']->GetOne($sql) > 0)
|
|
|
{
|
|
|
$result['error'] = 1;
|
|
|
$result['message'] = $GLOBALS['_LANG']['collect_existed'];
|
|
|
die($json->encode($result));
|
|
|
}
|
|
|
else
|
|
|
{
|
|
|
$time = gmtime();
|
|
|
$sql = "INSERT INTO " .$GLOBALS['ecs']->table('collect_goods'). " (user_id, goods_id, add_time)" .
|
|
|
"VALUES ('$_SESSION[user_id]', '$goods_id', '$time')";
|
|
|
|
|
|
if ($GLOBALS['db']->query($sql) === false)
|
|
|
{
|
|
|
$result['error'] = 1;
|
|
|
$result['message'] = $GLOBALS['db']->errorMsg();
|
|
|
die($json->encode($result));
|
|
|
}
|
|
|
else
|
|
|
{
|
|
|
$result['error'] = 0;
|
|
|
$result['message'] = $GLOBALS['_LANG']['collect_success'];
|
|
|
die($json->encode($result));
|
|
|
}
|
|
|
}
|
|
|
}
|
|
|
}
|
|
|
|
|
|
/* 刪除留言 */
|
|
|
elseif ($action == 'del_msg')
|
|
|
{
|
|
|
$id = isset($_GET['id']) ? intval($_GET['id']) : 0;
|
|
|
$order_id = empty($_GET['order_id']) ? 0 : intval($_GET['order_id']);
|
|
|
|
|
|
if ($id > 0)
|
|
|
{
|
|
|
$sql = 'SELECT user_id, message_img FROM ' .$ecs->table('feedback'). " WHERE msg_id = '$id' LIMIT 1";
|
|
|
$row = $db->getRow($sql);
|
|
|
if ($row && $row['user_id'] == $user_id)
|
|
|
{
|
|
|
/* 驗證通過，刪除留言，回覆，及相應文件 */
|
|
|
if ($row['message_img'])
|
|
|
{
|
|
|
@unlink(ROOT_PATH . DATA_DIR . '/feedbackimg/'. $row['message_img']);
|
|
|
}
|
|
|
$sql = "DELETE FROM " .$ecs->table('feedback'). " WHERE msg_id = '$id' OR parent_id = '$id'";
|
|
|
$db->query($sql);
|
|
|
}
|
|
|
}
|
|
|
ecs_header("Location: user.php?act=message_list&order_id=$order_id\n");
|
|
|
exit;
|
|
|
}
|
|
|
|
|
|
/* 刪除評論 */
|
|
|
elseif ($action == 'del_cmt')
|
|
|
{
|
|
|
$id = isset($_GET['id']) ? intval($_GET['id']) : 0;
|
|
|
if ($id > 0)
|
|
|
{
|
|
|
$sql = "DELETE FROM " .$ecs->table('comment'). " WHERE comment_id = '$id' AND user_id = '$user_id'";
|
|
|
$db->query($sql);
|
|
|
}
|
|
|
ecs_header("Location: user.php?act=comment_list\n");
|
|
|
exit;
|
|
|
}
|
|
|
|
|
|
/* 合併訂單 */
|
|
|
elseif ($action == 'merge_order')
|
|
|
{
|
|
|
include_once(ROOT_PATH .'includes/lib_transaction.php');
|
|
|
include_once(ROOT_PATH .'includes/lib_order.php');
|
|
|
$from_order = isset($_POST['from_order']) ? trim($_POST['from_order']) : '';
|
|
|
$to_order = isset($_POST['to_order']) ? trim($_POST['to_order']) : '';
|
|
|
if (merge_user_order($from_order, $to_order, $user_id))
|
|
|
{
|
|
|
show_message($_LANG['merge_order_success'],$_LANG['order_list_lnk'],'user.php?act=order_list', 'info');
|
|
|
}
|
|
|
else
|
|
|
{
|
|
|
$err->show($_LANG['order_list_lnk']);
|
|
|
}
|
|
|
}
|
|
|
/* 將指定訂單中商品添加到購物車 */
|
|
|
elseif ($action == 'return_to_cart')
|
|
|
{
|
|
|
include_once(ROOT_PATH .'includes/cls_json.php');
|
|
|
include_once(ROOT_PATH .'includes/lib_transaction.php');
|
|
|
$json = new JSON();
|
|
|
|
|
|
$result = array('error' => 0, 'message' => '', 'content' => '');
|
|
|
$order_id = isset($_POST['order_id']) ? intval($_POST['order_id']) : 0;
|
|
|
if ($order_id == 0)
|
|
|
{
|
|
|
$result['error'] = 1;
|
|
|
$result['message'] = $_LANG['order_id_empty'];
|
|
|
die($json->encode($result));
|
|
|
}
|
|
|
|
|
|
if ($user_id == 0)
|
|
|
{
|
|
|
/* 用户沒有登錄 */
|
|
|
$result['error'] = 1;
|
|
|
$result['message'] = $_LANG['login_please'];
|
|
|
die($json->encode($result));
|
|
|
}
|
|
|
|
|
|
/* 檢查訂單是否屬於該用户 */
|
|
|
$order_user = $db->getOne("SELECT user_id FROM " .$ecs->table('order_info'). " WHERE order_id = '$order_id'");
|
|
|
if (empty($order_user))
|
|
|
{
|
|
|
$result['error'] = 1;
|
|
|
$result['message'] = $_LANG['order_exist'];
|
|
|
die($json->encode($result));
|
|
|
}
|
|
|
else
|
|
|
{
|
|
|
if ($order_user != $user_id)
|
|
|
{
|
|
|
$result['error'] = 1;
|
|
|
$result['message'] = $_LANG['no_priv'];
|
|
|
die($json->encode($result));
|
|
|
}
|
|
|
}
|
|
|
|
|
|
$message = return_to_cart($order_id);
|
|
|
|
|
|
if ($message === true)
|
|
|
{
|
|
|
$result['error'] = 0;
|
|
|
$result['message'] = $_LANG['return_to_cart_success'];
|
|
|
die($json->encode($result));
|
|
|
}
|
|
|
else
|
|
|
{
|
|
|
$result['error'] = 1;
|
|
|
$result['message'] = $_LANG['order_exist'];
|
|
|
die($json->encode($result));
|
|
|
}
|
|
|
|
|
|
}
|
|
|
|
|
|
/* 編輯使用餘額支付的處理 */
|
|
|
elseif ($action == 'act_edit_surplus')
|
|
|
{
|
|
|
/* 檢查是否登錄 */
|
|
|
if ($_SESSION['user_id'] <= 0)
|
|
|
{
|
|
|
ecs_header("Location: ./\n");
|
|
|
exit;
|
|
|
}
|
|
|
|
|
|
/* 檢查訂單號 */
|
|
|
$order_id = intval($_POST['order_id']);
|
|
|
if ($order_id <= 0)
|
|
|
{
|
|
|
ecs_header("Location: ./\n");
|
|
|
exit;
|
|
|
}
|
|
|
|
|
|
/* 檢查餘額 */
|
|
|
$surplus = floatval($_POST['surplus']);
|
|
|
if ($surplus <= 0)
|
|
|
{
|
|
|
$err->add($_LANG['error_surplus_invalid']);
|
|
|
$err->show($_LANG['order_detail'], 'user.php?act=order_detail&order_id=' . $order_id);
|
|
|
}
|
|
|
|
|
|
include_once(ROOT_PATH . 'includes/lib_order.php');
|
|
|
|
|
|
/* 取得訂單 */
|
|
|
$order = order_info($order_id);
|
|
|
if (empty($order))
|
|
|
{
|
|
|
ecs_header("Location: ./\n");
|
|
|
exit;
|
|
|
}
|
|
|
|
|
|
/* 檢查訂單用户跟當前用户是否一致 */
|
|
|
if ($_SESSION['user_id'] != $order['user_id'])
|
|
|
{
|
|
|
ecs_header("Location: ./\n");
|
|
|
exit;
|
|
|
}
|
|
|
|
|
|
/* 檢查訂單是否未付款，檢查應付款金額是否大於0 */
|
|
|
if ($order['pay_status'] != PS_UNPAYED || $order['order_amount'] <= 0)
|
|
|
{
|
|
|
$err->add($_LANG['error_order_is_paid']);
|
|
|
$err->show($_LANG['order_detail'], 'user.php?act=order_detail&order_id=' . $order_id);
|
|
|
}
|
|
|
|
|
|
/* 計算應付款金額（減去支付費用） */
|
|
|
$order['order_amount'] -= $order['pay_fee'];
|
|
|
|
|
|
/* 餘額是否超過了應付款金額，改為應付款金額 */
|
|
|
if ($surplus > $order['order_amount'])
|
|
|
{
|
|
|
$surplus = $order['order_amount'];
|
|
|
}
|
|
|
|
|
|
/* 取得用户信息 */
|
|
|
$user = user_info($_SESSION['user_id']);
|
|
|
|
|
|
/* 用户帳户餘額是否足夠 */
|
|
|
if ($surplus > $user['user_money'] + $user['credit_line'])
|
|
|
{
|
|
|
$err->add($_LANG['error_surplus_not_enough']);
|
|
|
$err->show($_LANG['order_detail'], 'user.php?act=order_detail&order_id=' . $order_id);
|
|
|
}
|
|
|
|
|
|
/* 修改訂單，重新計算支付費用 */
|
|
|
$order['surplus'] += $surplus;
|
|
|
$order['order_amount'] -= $surplus;
|
|
|
if ($order['order_amount'] > 0 && $_CFG['use_surplus'])
|
|
|
{
|
|
|
$cod_fee = 0;
|
|
|
if ($order['shipping_id'] > 0)
|
|
|
{
|
|
|
$regions = array($order['country'], $order['province'], $order['city'], $order['district']);
|
|
|
$shipping = shipping_area_info($order['shipping_id'], $regions);
|
|
|
if ($shipping['support_cod'] == '1')
|
|
|
{
|
|
|
$cod_fee = $shipping['pay_fee'];
|
|
|
}
|
|
|
}
|
|
|
|
|
|
$pay_fee = 0;
|
|
|
if ($order['pay_id'] > 0)
|
|
|
{
|
|
|
$pay_fee = pay_fee($order['pay_id'], $order['order_amount'], $cod_fee);
|
|
|
}
|
|
|
|
|
|
$order['pay_fee'] = $pay_fee;
|
|
|
$order['order_amount'] += $pay_fee;
|
|
|
}
|
|
|
|
|
|
/* 如果全部支付，設為已確認、已付款 */
|
|
|
if ($order['order_amount'] == 0)
|
|
|
{
|
|
|
if ($order['order_status'] == OS_UNCONFIRMED)
|
|
|
{
|
|
|
$order['order_status'] = OS_CONFIRMED;
|
|
|
$order['confirm_time'] = gmtime();
|
|
|
}
|
|
|
$order['pay_status'] = PS_PAYED;
|
|
|
$order['pay_time'] = gmtime();
|
|
|
}
|
|
|
$order = addslashes_deep($order);
|
|
|
update_order($order_id, $order);
|
|
|
|
|
|
/* 更新用户餘額 */
|
|
|
$change_desc = sprintf($_LANG['pay_order_by_surplus'], $order['order_sn']);
|
|
|
log_account_change($user['user_id'], (-1) * $surplus, 0, 0, 0, $change_desc);
|
|
|
|
|
|
/* 跳轉 */
|
|
|
ecs_header('Location: user.php?act=order_detail&order_id=' . $order_id . "\n");
|
|
|
exit;
|
|
|
}
|
|
|
|
|
|
/* 編輯使用餘額支付的處理 */
|
|
|
elseif ($action == 'act_edit_payment')
|
|
|
{
|
|
|
/* 檢查是否登錄 */
|
|
|
if ($_SESSION['user_id'] <= 0)
|
|
|
{
|
|
|
ecs_header("Location: ./\n");
|
|
|
exit;
|
|
|
}
|
|
|
|
|
|
/* 檢查支付方式 */
|
|
|
$pay_id = intval($_POST['pay_id']);
|
|
|
if ($pay_id <= 0)
|
|
|
{
|
|
|
ecs_header("Location: ./\n");
|
|
|
exit;
|
|
|
}
|
|
|
|
|
|
include_once(ROOT_PATH . 'includes/lib_order.php');
|
|
|
$payment_info = payment_info($pay_id);
|
|
|
if (empty($payment_info))
|
|
|
{
|
|
|
ecs_header("Location: ./\n");
|
|
|
exit;
|
|
|
}
|
|
|
|
|
|
/* 檢查訂單號 */
|
|
|
$order_id = intval($_POST['order_id']);
|
|
|
if ($order_id <= 0)
|
|
|
{
|
|
|
ecs_header("Location: ./\n");
|
|
|
exit;
|
|
|
}
|
|
|
|
|
|
/* 取得訂單 */
|
|
|
$order = order_info($order_id);
|
|
|
if (empty($order))
|
|
|
{
|
|
|
ecs_header("Location: ./\n");
|
|
|
exit;
|
|
|
}
|
|
|
|
|
|
/* 檢查訂單用户跟當前用户是否一致 */
|
|
|
if ($_SESSION['user_id'] != $order['user_id'])
|
|
|
{
|
|
|
ecs_header("Location: ./\n");
|
|
|
exit;
|
|
|
}
|
|
|
|
|
|
/* 檢查訂單是否未付款和未發貨 以及訂單金額是否為0 和支付id是否為改變*/
|
|
|
if ($order['pay_status'] != PS_UNPAYED || $order['shipping_status'] != SS_UNSHIPPED || $order['goods_amount'] <= 0 || $order['pay_id'] == $pay_id)
|
|
|
{
|
|
|
ecs_header("Location: user.php?act=order_detail&order_id=$order_id\n");
|
|
|
exit;
|
|
|
}
|
|
|
|
|
|
$order_amount = $order['order_amount'] - $order['pay_fee'];
|
|
|
$pay_fee = pay_fee($pay_id, $order_amount);
|
|
|
$order_amount += $pay_fee;
|
|
|
|
|
|
$sql = "UPDATE " . $ecs->table('order_info') .
|
|
|
" SET pay_id='$pay_id', pay_name='$payment_info[pay_name]', pay_fee='$pay_fee', order_amount='$order_amount'".
|
|
|
" WHERE order_id = '$order_id'";
|
|
|
$db->query($sql);
|
|
|
|
|
|
/* 跳轉 */
|
|
|
ecs_header("Location: user.php?act=order_detail&order_id=$order_id\n");
|
|
|
exit;
|
|
|
}
|
|
|
|
|
|
/* 保存訂單詳情收貨地址 */
|
|
|
elseif ($action == 'save_order_address')
|
|
|
{
|
|
|
include_once(ROOT_PATH .'includes/lib_transaction.php');
|
|
|
|
|
|
$address = array(
|
|
|
'consignee' => isset($_POST['consignee']) ? compile_str(trim($_POST['consignee'])) : '',
|
|
|
'email' => isset($_POST['email']) ? compile_str(trim($_POST['email'])) : '',
|
|
|
'address' => isset($_POST['address']) ? compile_str(trim($_POST['address'])) : '',
|
|
|
'zipcode' => isset($_POST['zipcode']) ? compile_str(make_semiangle(trim($_POST['zipcode']))) : '',
|
|
|
'tel' => isset($_POST['tel']) ? compile_str(trim($_POST['tel'])) : '',
|
|
|
'mobile' => isset($_POST['mobile']) ? compile_str(trim($_POST['mobile'])) : '',
|
|
|
'sign_building' => isset($_POST['sign_building']) ? compile_str(trim($_POST['sign_building'])) : '',
|
|
|
'best_time' => isset($_POST['best_time']) ? compile_str(trim($_POST['best_time'])) : '',
|
|
|
'order_id' => isset($_POST['order_id']) ? intval($_POST['order_id']) : 0
|
|
|
);
|
|
|
if (save_order_address($address, $user_id))
|
|
|
{
|
|
|
ecs_header('Location: user.php?act=order_detail&order_id=' .$address['order_id']. "\n");
|
|
|
exit;
|
|
|
}
|
|
|
else
|
|
|
{
|
|
|
$err->show($_LANG['order_list_lnk'], 'user.php?act=order_list');
|
|
|
}
|
|
|
}
|
|
|
|
|
|
/* 我的紅包列表 */
|
|
|
elseif ($action == 'bonus')
|
|
|
{
|
|
|
include_once(ROOT_PATH .'includes/lib_transaction.php');
|
|
|
|
|
|
$page = isset($_REQUEST['page']) ? intval($_REQUEST['page']) : 1;
|
|
|
$record_count = $db->getOne("SELECT COUNT(*) FROM " .$ecs->table('user_bonus'). " WHERE user_id = '$user_id'");
|
|
|
|
|
|
$pager = get_pager('user.php', array('act' => $action), $record_count, $page);
|
|
|
$bonus = get_user_bouns_list($user_id, $pager['size'], $pager['start']);
|
|
|
|
|
|
$smarty->assign('pager', $pager);
|
|
|
$smarty->assign('bonus', $bonus);
|
|
|
$smarty->display('user_transaction.dwt');
|
|
|
}
|
|
|
|
|
|
/* 我的團購列表 */
|
|
|
elseif ($action == 'group_buy')
|
|
|
{
|
|
|
include_once(ROOT_PATH .'includes/lib_transaction.php');
|
|
|
|
|
|
//待議
|
|
|
$smarty->display('user_transaction.dwt');
|
|
|
}
|
|
|
|
|
|
/* 團購訂單詳情 */
|
|
|
elseif ($action == 'group_buy_detail')
|
|
|
{
|
|
|
include_once(ROOT_PATH .'includes/lib_transaction.php');
|
|
|
|
|
|
//待議
|
|
|
$smarty->display('user_transaction.dwt');
|
|
|
}
|
|
|
|
|
|
// 用户推薦頁面
|
|
|
elseif ($action == 'affiliate')
|
|
|
{
|
|
|
$goodsid = intval(isset($_REQUEST['goodsid']) ? $_REQUEST['goodsid'] : 0);
|
|
|
if(empty($goodsid))
|
|
|
{
|
|
|
//我的推薦頁面
|
|
|
|
|
|
$page = !empty($_REQUEST['page']) && intval($_REQUEST['page']) > 0 ? intval($_REQUEST['page']) : 1;
|
|
|
$size = !empty($_CFG['page_size']) && intval($_CFG['page_size']) > 0 ? intval($_CFG['page_size']) : 10;
|
|
|
|
|
|
empty($affiliate) && $affiliate = array();
|
|
|
|
|
|
if(empty($affiliate['config']['separate_by']))
|
|
|
{
|
|
|
//推薦註冊分成
|
|
|
$affdb = [];
|
|
|
$num = count($affiliate['item']);
|
|
|
$up_uid = "'$user_id'";
|
|
|
$all_uid = "'$user_id'";
|
|
|
for ($i = 1 ; $i <=$num ;$i++)
|
|
|
{
|
|
|
$count = 0;
|
|
|
if ($up_uid)
|
|
|
{
|
|
|
$sql = "SELECT user_id FROM " . $ecs->table('users') . " WHERE parent_id IN($up_uid)";
|
|
|
$query = $db->query($sql);
|
|
|
$up_uid = '';
|
|
|
while ($rt = $db->fetch_array($query))
|
|
|
{
|
|
|
$up_uid .= $up_uid ? ",'$rt[user_id]'" : "'$rt[user_id]'";
|
|
|
if($i < $num)
|
|
|
{
|
|
|
$all_uid .= ", '$rt[user_id]'";
|
|
|
}
|
|
|
$count++;
|
|
|
}
|
|
|
}
|
|
|
$affdb[$i]['num'] = $count;
|
|
|
$affdb[$i]['point'] = $affiliate['item'][$i-1]['level_point'];
|
|
|
$affdb[$i]['money'] = $affiliate['item'][$i-1]['level_money'];
|
|
|
}
|
|
|
$smarty->assign('affdb', $affdb);
|
|
|
|
|
|
$sqlcount = "SELECT count(*) FROM " . $ecs->table('order_info') . " o".
|
|
|
" LEFT JOIN".$ecs->table('users')." u ON o.user_id = u.user_id".
|
|
|
" LEFT JOIN " . $ecs->table('affiliate_log') . " a ON o.order_id = a.order_id" .
|
|
|
" WHERE o.user_id > 0 AND (u.parent_id IN ($all_uid) AND o.is_separate = 0 OR a.user_id = '$user_id' AND o.is_separate > 0)";
|
|
|
|
|
|
$sql = "SELECT o.*, a.log_id, a.user_id as suid, a.user_name as auser, a.money, a.point, a.separate_type FROM " . $ecs->table('order_info') . " o".
|
|
|
" LEFT JOIN".$ecs->table('users')." u ON o.user_id = u.user_id".
|
|
|
" LEFT JOIN " . $ecs->table('affiliate_log') . " a ON o.order_id = a.order_id" .
|
|
|
" WHERE o.user_id > 0 AND (u.parent_id IN ($all_uid) AND o.is_separate = 0 OR a.user_id = '$user_id' AND o.is_separate > 0)".
|
|
|
" ORDER BY order_id DESC" ;
|
|
|
|
|
|
/*
|
|
|
SQL解釋：
|
|
|
|
|
|
訂單、用户、分成記錄關聯
|
|
|
一個訂單可能有多個分成記錄
|
|
|
|
|
|
1、訂單有效 o.user_id > 0
|
|
|
2、滿足以下之一：
|
|
|
a.直接下線的未分成訂單 u.parent_id IN ($all_uid) AND o.is_separate = 0
|
|
|
其中$all_uid為該ID及其下線(不包含最後一層下線)
|
|
|
b.全部已分成訂單 a.user_id = '$user_id' AND o.is_separate > 0
|
|
|
|
|
|
*/
|
|
|
|
|
|
$affiliate_intro = nl2br(sprintf($_LANG['affiliate_intro'][$affiliate['config']['separate_by']], $affiliate['config']['expire'], $_LANG['expire_unit'][$affiliate['config']['expire_unit']], $affiliate['config']['level_register_all'], $affiliate['config']['level_register_up'], $affiliate['config']['level_money_all'], $affiliate['config']['level_point_all']));
|
|
|
}
|
|
|
else
|
|
|
{
|
|
|
//推薦訂單分成
|
|
|
$sqlcount = "SELECT count(*) FROM " . $ecs->table('order_info') . " o".
|
|
|
" LEFT JOIN".$ecs->table('users')." u ON o.user_id = u.user_id".
|
|
|
" LEFT JOIN " . $ecs->table('affiliate_log') . " a ON o.order_id = a.order_id" .
|
|
|
" WHERE o.user_id > 0 AND (o.parent_id = '$user_id' AND o.is_separate = 0 OR a.user_id = '$user_id' AND o.is_separate > 0)";
|
|
|
|
|
|
|
|
|
$sql = "SELECT o.*, a.log_id,a.user_id as suid, a.user_name as auser, a.money, a.point, a.separate_type,u.parent_id as up FROM " . $ecs->table('order_info') . " o".
|
|
|
" LEFT JOIN".$ecs->table('users')." u ON o.user_id = u.user_id".
|
|
|
" LEFT JOIN " . $ecs->table('affiliate_log') . " a ON o.order_id = a.order_id" .
|
|
|
" WHERE o.user_id > 0 AND (o.parent_id = '$user_id' AND o.is_separate = 0 OR a.user_id = '$user_id' AND o.is_separate > 0)" .
|
|
|
" ORDER BY order_id DESC" ;
|
|
|
|
|
|
/*
|
|
|
SQL解釋：
|
|
|
|
|
|
訂單、用户、分成記錄關聯
|
|
|
一個訂單可能有多個分成記錄
|
|
|
|
|
|
1、訂單有效 o.user_id > 0
|
|
|
2、滿足以下之一：
|
|
|
a.訂單下線的未分成訂單 o.parent_id = '$user_id' AND o.is_separate = 0
|
|
|
b.全部已分成訂單 a.user_id = '$user_id' AND o.is_separate > 0
|
|
|
|
|
|
*/
|
|
|
|
|
|
$affiliate_intro = nl2br(sprintf($_LANG['affiliate_intro'][$affiliate['config']['separate_by']], $affiliate['config']['expire'], $_LANG['expire_unit'][$affiliate['config']['expire_unit']], $affiliate['config']['level_money_all'], $affiliate['config']['level_point_all']));
|
|
|
|
|
|
}
|
|
|
|
|
|
$count = $db->getOne($sqlcount);
|
|
|
|
|
|
$max_page = ($count> 0) ? ceil($count / $size) : 1;
|
|
|
if ($page > $max_page)
|
|
|
{
|
|
|
$page = $max_page;
|
|
|
}
|
|
|
|
|
|
$res = $db->SelectLimit($sql, $size, ($page - 1) * $size);
|
|
|
$logdb = array();
|
|
|
while ($rt = $GLOBALS['db']->fetchRow($res))
|
|
|
{
|
|
|
if(!empty($rt['suid']))
|
|
|
{
|
|
|
//在affiliate_log有記錄
|
|
|
if($rt['separate_type'] == -1 || $rt['separate_type'] == -2)
|
|
|
{
|
|
|
//已被撤銷
|
|
|
$rt['is_separate'] = 3;
|
|
|
}
|
|
|
}
|
|
|
$rt['order_sn'] = substr($rt['order_sn'], 0, strlen($rt['order_sn']) - 5) . "***" . substr($rt['order_sn'], -2, 2);
|
|
|
$logdb[] = $rt;
|
|
|
}
|
|
|
|
|
|
$url_format = "user.php?act=affiliate&page=";
|
|
|
|
|
|
$pager = array(
|
|
|
'page' => $page,
|
|
|
'size' => $size,
|
|
|
'sort' => '',
|
|
|
'order' => '',
|
|
|
'record_count' => $count,
|
|
|
'page_count' => $max_page,
|
|
|
'page_first' => $url_format. '1',
|
|
|
'page_prev' => $page > 1 ? $url_format.($page - 1) : "javascript:;",
|
|
|
'page_next' => $page < $max_page ? $url_format.($page + 1) : "javascript:;",
|
|
|
'page_last' => $url_format. $max_page,
|
|
|
'array' => array()
|
|
|
);
|
|
|
for ($i = 1; $i <= $max_page; $i++)
|
|
|
{
|
|
|
$pager['array'][$i] = $i;
|
|
|
}
|
|
|
|
|
|
$smarty->assign('url_format', $url_format);
|
|
|
$smarty->assign('pager', $pager);
|
|
|
|
|
|
|
|
|
$smarty->assign('affiliate_intro', $affiliate_intro);
|
|
|
$smarty->assign('affiliate_type', $affiliate['config']['separate_by']);
|
|
|
|
|
|
$smarty->assign('logdb', $logdb);
|
|
|
}
|
|
|
else
|
|
|
{
|
|
|
//單個商品推薦
|
|
|
$smarty->assign('userid', $user_id);
|
|
|
$smarty->assign('goodsid', $goodsid);
|
|
|
|
|
|
$types = array(1,2,3,4,5);
|
|
|
$smarty->assign('types', $types);
|
|
|
|
|
|
$goods = get_goods_info($goodsid);
|
|
|
$shopurl = $ecs->url();
|
|
|
$goods['goods_img'] = (strpos($goods['goods_img'], 'http://') === false && strpos($goods['goods_img'], 'https://') === false) ? $shopurl . $goods['goods_img'] : $goods['goods_img'];
|
|
|
$goods['goods_thumb'] = (strpos($goods['goods_thumb'], 'http://') === false && strpos($goods['goods_thumb'], 'https://') === false) ? $shopurl . $goods['goods_thumb'] : $goods['goods_thumb'];
|
|
|
$goods['shop_price'] = price_format($goods['shop_price']);
|
|
|
|
|
|
$smarty->assign('goods', $goods);
|
|
|
}
|
|
|
|
|
|
$smarty->assign('shopname', $_CFG['shop_name']);
|
|
|
$smarty->assign('userid', $user_id);
|
|
|
$smarty->assign('shopurl', $ecs->url());
|
|
|
$smarty->assign('logosrc', 'themes/' . $_CFG['template'] . '/images/logo.gif');
|
|
|
|
|
|
$smarty->display('user_affiliate.html');
|
|
|
}
|
|
|
|
|
|
//首頁郵件訂閲ajax操做和驗證操作
|
|
|
elseif ($action =='email_list')
|
|
|
{
|
|
|
$job = $_GET['job'];
|
|
|
|
|
|
if($job == 'add' || $job == 'del')
|
|
|
{
|
|
|
if(isset($_SESSION['last_email_query']))
|
|
|
{
|
|
|
if(time() - $_SESSION['last_email_query'] <= 30)
|
|
|
{
|
|
|
die($_LANG['order_query_toofast']);
|
|
|
}
|
|
|
}
|
|
|
$_SESSION['last_email_query'] = time();
|
|
|
}
|
|
|
|
|
|
$email = trim($_GET['email']);
|
|
|
$email = htmlspecialchars($email);
|
|
|
|
|
|
if (!is_email($email))
|
|
|
{
|
|
|
$info = sprintf($_LANG['email_invalid'], $email);
|
|
|
die($info);
|
|
|
}
|
|
|
$ck = $db->getRow("SELECT * FROM " . $ecs->table('email_list') . " WHERE email = '$email'");
|
|
|
if ($job == 'add')
|
|
|
{
|
|
|
if (empty($ck))
|
|
|
{
|
|
|
$hash = substr(md5(time()), 1, 10);
|
|
|
$sql = "INSERT INTO " . $ecs->table('email_list') . " (email, stat, hash) VALUES ('$email', 0, '$hash')";
|
|
|
$db->query($sql);
|
|
|
$info = $_LANG['email_check'];
|
|
|
$url = $ecs->url() . "user.php?act=email_list&job=add_check&hash=$hash&email=$email";
|
|
|
send_mail('', $email, $_LANG['check_mail'], sprintf($_LANG['check_mail_content'], $email, $_CFG['shop_name'], $url, $url, $_CFG['shop_name'], local_date('Y-m-d')), 1);
|
|
|
}
|
|
|
elseif ($ck['stat'] == 1)
|
|
|
{
|
|
|
$info = sprintf($_LANG['email_alreadyin_list'], $email);
|
|
|
}
|
|
|
else
|
|
|
{
|
|
|
$hash = substr(md5(time()),1 , 10);
|
|
|
$sql = "UPDATE " . $ecs->table('email_list') . "SET hash = '$hash' WHERE email = '$email'";
|
|
|
$db->query($sql);
|
|
|
$info = $_LANG['email_re_check'];
|
|
|
$url = $ecs->url() . "user.php?act=email_list&job=add_check&hash=$hash&email=$email";
|
|
|
send_mail('', $email, $_LANG['check_mail'], sprintf($_LANG['check_mail_content'], $email, $_CFG['shop_name'], $url, $url, $_CFG['shop_name'], local_date('Y-m-d')), 1);
|
|
|
}
|
|
|
die($info);
|
|
|
}
|
|
|
elseif ($job == 'del')
|
|
|
{
|
|
|
if (empty($ck))
|
|
|
{
|
|
|
$info = sprintf($_LANG['email_notin_list'], $email);
|
|
|
}
|
|
|
elseif ($ck['stat'] == 1)
|
|
|
{
|
|
|
$hash = substr(md5(time()),1,10);
|
|
|
$sql = "UPDATE " . $ecs->table('email_list') . "SET hash = '$hash' WHERE email = '$email'";
|
|
|
$db->query($sql);
|
|
|
$info = $_LANG['email_check'];
|
|
|
$url = $ecs->url() . "user.php?act=email_list&job=del_check&hash=$hash&email=$email";
|
|
|
send_mail('', $email, $_LANG['check_mail'], sprintf($_LANG['check_mail_content'], $email, $_CFG['shop_name'], $url, $url, $_CFG['shop_name'], local_date('Y-m-d')), 1);
|
|
|
}
|
|
|
else
|
|
|
{
|
|
|
$info = $_LANG['email_not_alive'];
|
|
|
}
|
|
|
die($info);
|
|
|
}
|
|
|
elseif ($job == 'add_check')
|
|
|
{
|
|
|
if (empty($ck))
|
|
|
{
|
|
|
$info = sprintf($_LANG['email_notin_list'], $email);
|
|
|
}
|
|
|
elseif ($ck['stat'] == 1)
|
|
|
{
|
|
|
$info = $_LANG['email_checked'];
|
|
|
}
|
|
|
else
|
|
|
{
|
|
|
if ($_GET['hash'] == $ck['hash'])
|
|
|
{
|
|
|
$sql = "UPDATE " . $ecs->table('email_list') . "SET stat = 1 WHERE email = '$email'";
|
|
|
$db->query($sql);
|
|
|
$info = $_LANG['email_checked'];
|
|
|
}
|
|
|
else
|
|
|
{
|
|
|
$info = $_LANG['hash_wrong'];
|
|
|
}
|
|
|
}
|
|
|
show_message($info, $_LANG['back_home_lnk'], 'index.php');
|
|
|
}
|
|
|
elseif ($job == 'del_check')
|
|
|
{
|
|
|
if (empty($ck))
|
|
|
{
|
|
|
$info = sprintf($_LANG['email_invalid'], $email);
|
|
|
}
|
|
|
elseif ($ck['stat'] == 1)
|
|
|
{
|
|
|
if ($_GET['hash'] == $ck['hash'])
|
|
|
{
|
|
|
$sql = "DELETE FROM " . $ecs->table('email_list') . "WHERE email = '$email'";
|
|
|
$db->query($sql);
|
|
|
$info = $_LANG['email_canceled'];
|
|
|
}
|
|
|
else
|
|
|
{
|
|
|
$info = $_LANG['hash_wrong'];
|
|
|
}
|
|
|
}
|
|
|
else
|
|
|
{
|
|
|
$info = $_LANG['email_not_alive'];
|
|
|
}
|
|
|
show_message($info, $_LANG['back_home_lnk'], 'index.php');
|
|
|
}
|
|
|
}
|
|
|
|
|
|
/* ajax 發送驗證郵件 */
|
|
|
elseif ($action == 'send_hash_mail')
|
|
|
{
|
|
|
include_once(ROOT_PATH .'includes/cls_json.php');
|
|
|
include_once(ROOT_PATH .'includes/lib_passport.php');
|
|
|
$json = new JSON();
|
|
|
|
|
|
$result = array('error' => 0, 'message' => '', 'content' => '');
|
|
|
|
|
|
if ($user_id == 0)
|
|
|
{
|
|
|
/* 用户沒有登錄 */
|
|
|
$result['error'] = 1;
|
|
|
$result['message'] = $_LANG['login_please'];
|
|
|
die($json->encode($result));
|
|
|
}
|
|
|
|
|
|
if (send_regiter_hash($user_id))
|
|
|
{
|
|
|
$result['message'] = $_LANG['validate_mail_ok'];
|
|
|
die($json->encode($result));
|
|
|
}
|
|
|
else
|
|
|
{
|
|
|
$result['error'] = 1;
|
|
|
$result['message'] = $GLOBALS['err']->last_message();
|
|
|
}
|
|
|
|
|
|
die($json->encode($result));
|
|
|
}
|
|
|
else if ($action == 'track_packages')
|
|
|
{
|
|
|
include_once(ROOT_PATH . 'includes/lib_transaction.php');
|
|
|
include_once(ROOT_PATH .'includes/lib_order.php');
|
|
|
|
|
|
$page = isset($_REQUEST['page']) ? intval($_REQUEST['page']) : 1;
|
|
|
|
|
|
$orders = array();
|
|
|
|
|
|
$sql = "SELECT order_id,order_sn,invoice_no,shipping_id FROM " .$ecs->table('order_info').
|
|
|
" WHERE user_id = '$user_id' AND shipping_status = '" . SS_SHIPPED . "'";
|
|
|
$res = $db->query($sql);
|
|
|
$record_count = 0;
|
|
|
while ($item = $db->fetch_array($res))
|
|
|
{
|
|
|
$shipping = get_shipping_object($item['shipping_id']);
|
|
|
|
|
|
if (method_exists ($shipping, 'query'))
|
|
|
{
|
|
|
$query_link = $shipping->query($item['invoice_no']);
|
|
|
}
|
|
|
else
|
|
|
{
|
|
|
$query_link = $item['invoice_no'];
|
|
|
}
|
|
|
|
|
|
if ($query_link != $item['invoice_no'])
|
|
|
{
|
|
|
$item['query_link'] = $query_link;
|
|
|
$orders[] = $item;
|
|
|
$record_count += 1;
|
|
|
}
|
|
|
}
|
|
|
$pager = get_pager('user.php', array('act' => $action), $record_count, $page);
|
|
|
$smarty->assign('pager', $pager);
|
|
|
$smarty->assign('orders', $orders);
|
|
|
$smarty->display('user_transaction.dwt');
|
|
|
}
|
|
|
else if ($action == 'order_query')
|
|
|
{
|
|
|
$_GET['order_sn'] = trim(substr($_GET['order_sn'], 1));
|
|
|
$order_sn = empty($_GET['order_sn']) ? '' : addslashes($_GET['order_sn']);
|
|
|
include_once(ROOT_PATH .'includes/cls_json.php');
|
|
|
$json = new JSON();
|
|
|
|
|
|
$result = array('error'=>0, 'message'=>'', 'content'=>'');
|
|
|
|
|
|
if(isset($_SESSION['last_order_query']))
|
|
|
{
|
|
|
if(time() - $_SESSION['last_order_query'] <= 10)
|
|
|
{
|
|
|
$result['error'] = 1;
|
|
|
$result['message'] = $_LANG['order_query_toofast'];
|
|
|
die($json->encode($result));
|
|
|
}
|
|
|
}
|
|
|
$_SESSION['last_order_query'] = time();
|
|
|
|
|
|
if (empty($order_sn))
|
|
|
{
|
|
|
$result['error'] = 1;
|
|
|
$result['message'] = $_LANG['invalid_order_sn'];
|
|
|
die($json->encode($result));
|
|
|
}
|
|
|
|
|
|
$sql = "SELECT order_id, order_status, shipping_status, pay_status, ".
|
|
|
" shipping_time, shipping_id, invoice_no, user_id ".
|
|
|
" FROM " . $ecs->table('order_info').
|
|
|
" WHERE order_sn = '$order_sn' LIMIT 1";
|
|
|
|
|
|
$row = $db->getRow($sql);
|
|
|
if (empty($row))
|
|
|
{
|
|
|
$result['error'] = 1;
|
|
|
$result['message'] = $_LANG['invalid_order_sn'];
|
|
|
die($json->encode($result));
|
|
|
}
|
|
|
|
|
|
$order_query = array();
|
|
|
$order_query['order_sn'] = $order_sn;
|
|
|
$order_query['order_id'] = $row['order_id'];
|
|
|
$order_query['order_status'] = $_LANG['os'][$row['order_status']] . ',' . $_LANG['ps'][$row['pay_status']] . ',' . $_LANG['ss'][$row['shipping_status']];
|
|
|
|
|
|
if ($row['invoice_no'] && $row['shipping_id'] > 0)
|
|
|
{
|
|
|
$sql = "SELECT shipping_code FROM " . $ecs->table('shipping') . " WHERE shipping_id = '$row[shipping_id]'";
|
|
|
$shipping_code = $db->getOne($sql);
|
|
|
$plugin = ROOT_PATH . 'includes/modules/shipping/' . $shipping_code . '.php';
|
|
|
if (file_exists($plugin))
|
|
|
{
|
|
|
include_once($plugin);
|
|
|
$shipping = new $shipping_code;
|
|
|
$order_query['invoice_no'] = $shipping->query((string)$row['invoice_no']);
|
|
|
}
|
|
|
else
|
|
|
{
|
|
|
$order_query['invoice_no'] = (string)$row['invoice_no'];
|
|
|
}
|
|
|
}
|
|
|
|
|
|
$order_query['user_id'] = $row['user_id'];
|
|
|
/* 如果是匿名用户顯示發貨時間 */
|
|
|
if ($row['user_id'] == 0 && $row['shipping_time'] > 0)
|
|
|
{
|
|
|
$order_query['shipping_date'] = local_date($GLOBALS['_CFG']['date_format'], $row['shipping_time']);
|
|
|
}
|
|
|
$smarty->assign('order_query', $order_query);
|
|
|
$result['content'] = $smarty->fetch('library/order_query.lbi');
|
|
|
die($json->encode($result));
|
|
|
}
|
|
|
elseif ($action == 'transform_points')
|
|
|
{
|
|
|
$rule = array();
|
|
|
if (!empty($_CFG['points_rule']))
|
|
|
{
|
|
|
$rule = unserialize($_CFG['points_rule']);
|
|
|
}
|
|
|
$cfg = array();
|
|
|
if (!empty($_CFG['integrate_config']))
|
|
|
{
|
|
|
$cfg = unserialize($_CFG['integrate_config']);
|
|
|
$_LANG['exchange_points'][0] = empty($cfg['uc_lang']['credits'][0][0])? $_LANG['exchange_points'][0] : $cfg['uc_lang']['credits'][0][0];
|
|
|
$_LANG['exchange_points'][1] = empty($cfg['uc_lang']['credits'][1][0])? $_LANG['exchange_points'][1] : $cfg['uc_lang']['credits'][1][0];
|
|
|
}
|
|
|
$sql = "SELECT user_id, user_name, pay_points, rank_points FROM " . $ecs->table('users') . " WHERE user_id='$user_id'";
|
|
|
$row = $db->getRow($sql);
|
|
|
if ($_CFG['integrate_code'] == 'ucenter')
|
|
|
{
|
|
|
$exchange_type = 'ucenter';
|
|
|
$to_credits_options = array();
|
|
|
$out_exchange_allow = array();
|
|
|
foreach ($rule as $credit)
|
|
|
{
|
|
|
$out_exchange_allow[$credit['appiddesc'] . '|' . $credit['creditdesc'] . '|' . $credit['creditsrc']] = $credit['ratio'];
|
|
|
if (!array_key_exists($credit['appiddesc']. '|' .$credit['creditdesc'], $to_credits_options))
|
|
|
{
|
|
|
$to_credits_options[$credit['appiddesc']. '|' .$credit['creditdesc']] = $credit['title'];
|
|
|
}
|
|
|
}
|
|
|
$smarty->assign('selected_org', $rule[0]['creditsrc']);
|
|
|
$smarty->assign('selected_dst', $rule[0]['appiddesc']. '|' .$rule[0]['creditdesc']);
|
|
|
$smarty->assign('descreditunit', $rule[0]['unit']);
|
|
|
$smarty->assign('orgcredittitle', $_LANG['exchange_points'][$rule[0]['creditsrc']]);
|
|
|
$smarty->assign('descredittitle', $rule[0]['title']);
|
|
|
$smarty->assign('descreditamount', round((1 / $rule[0]['ratio']), 2));
|
|
|
$smarty->assign('to_credits_options', $to_credits_options);
|
|
|
$smarty->assign('out_exchange_allow', $out_exchange_allow);
|
|
|
}
|
|
|
else
|
|
|
{
|
|
|
$exchange_type = 'other';
|
|
|
|
|
|
$bbs_points_name = $user->get_points_name();
|
|
|
$total_bbs_points = $user->get_points($row['user_name']);
|
|
|
|
|
|
/* 論壇積分 */
|
|
|
$bbs_points = array();
|
|
|
foreach ($bbs_points_name as $key=>$val)
|
|
|
{
|
|
|
$bbs_points[$key] = array('title'=>$_LANG['bbs'] . $val['title'], 'value'=>$total_bbs_points[$key]);
|
|
|
}
|
|
|
|
|
|
/* 兑換規則 */
|
|
|
$rule_list = array();
|
|
|
foreach ($rule as $key=>$val)
|
|
|
{
|
|
|
$rule_key = substr($key, 0, 1);
|
|
|
$bbs_key = substr($key, 1);
|
|
|
$rule_list[$key]['rate'] = $val;
|
|
|
switch ($rule_key)
|
|
|
{
|
|
|
case TO_P :
|
|
|
$rule_list[$key]['from'] = $_LANG['bbs'] . $bbs_points_name[$bbs_key]['title'];
|
|
|
$rule_list[$key]['to'] = $_LANG['pay_points'];
|
|
|
break;
|
|
|
case TO_R :
|
|
|
$rule_list[$key]['from'] = $_LANG['bbs'] . $bbs_points_name[$bbs_key]['title'];
|
|
|
$rule_list[$key]['to'] = $_LANG['rank_points'];
|
|
|
break;
|
|
|
case FROM_P :
|
|
|
$rule_list[$key]['from'] = $_LANG['pay_points'];$_LANG['bbs'] . $bbs_points_name[$bbs_key]['title'];
|
|
|
$rule_list[$key]['to'] =$_LANG['bbs'] . $bbs_points_name[$bbs_key]['title'];
|
|
|
break;
|
|
|
case FROM_R :
|
|
|
$rule_list[$key]['from'] = $_LANG['rank_points'];
|
|
|
$rule_list[$key]['to'] = $_LANG['bbs'] . $bbs_points_name[$bbs_key]['title'];
|
|
|
break;
|
|
|
}
|
|
|
}
|
|
|
$smarty->assign('bbs_points', $bbs_points);
|
|
|
$smarty->assign('rule_list', $rule_list);
|
|
|
}
|
|
|
$smarty->assign('shop_points', $row);
|
|
|
$smarty->assign('exchange_type', $exchange_type);
|
|
|
$smarty->assign('action', $action);
|
|
|
$smarty->assign('lang', $_LANG);
|
|
|
$smarty->display('user_transaction.dwt');
|
|
|
}
|
|
|
elseif ($action == 'act_transform_points')
|
|
|
{
|
|
|
$rule_index = empty($_POST['rule_index']) ? '' : trim($_POST['rule_index']);
|
|
|
$num = empty($_POST['num']) ? 0 : intval($_POST['num']);
|
|
|
|
|
|
|
|
|
if ($num <= 0 || $num != floor($num))
|
|
|
{
|
|
|
show_message($_LANG['invalid_points'], $_LANG['transform_points'], 'user.php?act=transform_points');
|
|
|
}
|
|
|
|
|
|
$num = floor($num); //格式化為整數
|
|
|
|
|
|
$bbs_key = substr($rule_index, 1);
|
|
|
$rule_key = substr($rule_index, 0, 1);
|
|
|
|
|
|
$max_num = 0;
|
|
|
|
|
|
/* 取出用户數據 */
|
|
|
$sql = "SELECT user_name, user_id, pay_points, rank_points FROM " . $ecs->table('users') . " WHERE user_id='$user_id'";
|
|
|
$row = $db->getRow($sql);
|
|
|
$bbs_points = $user->get_points($row['user_name']);
|
|
|
$points_name = $user->get_points_name();
|
|
|
|
|
|
$rule = array();
|
|
|
if ($_CFG['points_rule'])
|
|
|
{
|
|
|
$rule = unserialize($_CFG['points_rule']);
|
|
|
}
|
|
|
list($from, $to) = explode(':', $rule[$rule_index]);
|
|
|
|
|
|
$max_points = 0;
|
|
|
switch ($rule_key)
|
|
|
{
|
|
|
case TO_P :
|
|
|
$max_points = $bbs_points[$bbs_key];
|
|
|
break;
|
|
|
case TO_R :
|
|
|
$max_points = $bbs_points[$bbs_key];
|
|
|
break;
|
|
|
case FROM_P :
|
|
|
$max_points = $row['pay_points'];
|
|
|
break;
|
|
|
case FROM_R :
|
|
|
$max_points = $row['rank_points'];
|
|
|
}
|
|
|
|
|
|
/* 檢查積分是否超過最大值 */
|
|
|
if ($max_points <=0 || $num > $max_points)
|
|
|
{
|
|
|
show_message($_LANG['overflow_points'], $_LANG['transform_points'], 'user.php?act=transform_points' );
|
|
|
}
|
|
|
|
|
|
switch ($rule_key)
|
|
|
{
|
|
|
case TO_P :
|
|
|
$result_points = floor($num * $to / $from);
|
|
|
$user->set_points($row['user_name'], array($bbs_key=>0 - $num)); //調整論壇積分
|
|
|
log_account_change($row['user_id'], 0, 0, 0, $result_points, $_LANG['transform_points'], ACT_OTHER);
|
|
|
show_message(sprintf($_LANG['to_pay_points'], $num, $points_name[$bbs_key]['title'], $result_points), $_LANG['transform_points'], 'user.php?act=transform_points');
|
|
|
|
|
|
case TO_R :
|
|
|
$result_points = floor($num * $to / $from);
|
|
|
$user->set_points($row['user_name'], array($bbs_key=>0 - $num)); //調整論壇積分
|
|
|
log_account_change($row['user_id'], 0, 0, $result_points, 0, $_LANG['transform_points'], ACT_OTHER);
|
|
|
show_message(sprintf($_LANG['to_rank_points'], $num, $points_name[$bbs_key]['title'], $result_points), $_LANG['transform_points'], 'user.php?act=transform_points');
|
|
|
|
|
|
case FROM_P :
|
|
|
$result_points = floor($num * $to / $from);
|
|
|
log_account_change($row['user_id'], 0, 0, 0, 0-$num, $_LANG['transform_points'], ACT_OTHER); //調整商城積分
|
|
|
$user->set_points($row['user_name'], array($bbs_key=>$result_points)); //調整論壇積分
|
|
|
show_message(sprintf($_LANG['from_pay_points'], $num, $result_points, $points_name[$bbs_key]['title']), $_LANG['transform_points'], 'user.php?act=transform_points');
|
|
|
|
|
|
case FROM_R :
|
|
|
$result_points = floor($num * $to / $from);
|
|
|
log_account_change($row['user_id'], 0, 0, 0-$num, 0, $_LANG['transform_points'], ACT_OTHER); //調整商城積分
|
|
|
$user->set_points($row['user_name'], array($bbs_key=>$result_points)); //調整論壇積分
|
|
|
show_message(sprintf($_LANG['from_rank_points'], $num, $result_points, $points_name[$bbs_key]['title']), $_LANG['transform_points'], 'user.php?act=transform_points');
|
|
|
}
|
|
|
}
|
|
|
elseif ($action == 'act_transform_ucenter_points')
|
|
|
{
|
|
|
$rule = array();
|
|
|
if ($_CFG['points_rule'])
|
|
|
{
|
|
|
$rule = unserialize($_CFG['points_rule']);
|
|
|
}
|
|
|
$shop_points = array(0 => 'rank_points', 1 => 'pay_points');
|
|
|
$sql = "SELECT user_id, user_name, pay_points, rank_points FROM " . $ecs->table('users') . " WHERE user_id='$user_id'";
|
|
|
$row = $db->getRow($sql);
|
|
|
$exchange_amount = intval($_POST['amount']);
|
|
|
$fromcredits = intval($_POST['fromcredits']);
|
|
|
$tocredits = trim($_POST['tocredits']);
|
|
|
$cfg = unserialize($_CFG['integrate_config']);
|
|
|
if (!empty($cfg))
|
|
|
{
|
|
|
$_LANG['exchange_points'][0] = empty($cfg['uc_lang']['credits'][0][0])? $_LANG['exchange_points'][0] : $cfg['uc_lang']['credits'][0][0];
|
|
|
$_LANG['exchange_points'][1] = empty($cfg['uc_lang']['credits'][1][0])? $_LANG['exchange_points'][1] : $cfg['uc_lang']['credits'][1][0];
|
|
|
}
|
|
|
list($appiddesc, $creditdesc) = explode('|', $tocredits);
|
|
|
$ratio = 0;
|
|
|
|
|
|
if ($exchange_amount <= 0)
|
|
|
{
|
|
|
show_message($_LANG['invalid_points'], $_LANG['transform_points'], 'user.php?act=transform_points');
|
|
|
}
|
|
|
if ($exchange_amount > $row[$shop_points[$fromcredits]])
|
|
|
{
|
|
|
show_message($_LANG['overflow_points'], $_LANG['transform_points'], 'user.php?act=transform_points');
|
|
|
}
|
|
|
foreach ($rule as $credit)
|
|
|
{
|
|
|
if ($credit['appiddesc'] == $appiddesc && $credit['creditdesc'] == $creditdesc && $credit['creditsrc'] == $fromcredits)
|
|
|
{
|
|
|
$ratio = $credit['ratio'];
|
|
|
break;
|
|
|
}
|
|
|
}
|
|
|
if ($ratio == 0)
|
|
|
{
|
|
|
show_message($_LANG['exchange_deny'], $_LANG['transform_points'], 'user.php?act=transform_points');
|
|
|
}
|
|
|
$netamount = floor($exchange_amount / $ratio);
|
|
|
include_once(ROOT_PATH . './includes/lib_uc.php');
|
|
|
$result = exchange_points($row['user_id'], $fromcredits, $creditdesc, $appiddesc, $netamount);
|
|
|
if ($result === true)
|
|
|
{
|
|
|
$sql = "UPDATE " . $ecs->table('users') . " SET {$shop_points[$fromcredits]}={$shop_points[$fromcredits]}-'$exchange_amount' WHERE user_id='{$row['user_id']}'";
|
|
|
$db->query($sql);
|
|
|
$sql = "INSERT INTO " . $ecs->table('account_log') . "(user_id, {$shop_points[$fromcredits]}, change_time, change_desc, change_type)" . " VALUES ('{$row['user_id']}', '-$exchange_amount', '". gmtime() ."', '" . $cfg['uc_lang']['exchange'] . "', '98')";
|
|
|
$db->query($sql);
|
|
|
show_message(sprintf($_LANG['exchange_success'], $exchange_amount, $_LANG['exchange_points'][$fromcredits], $netamount, $credit['title']), $_LANG['transform_points'], 'user.php?act=transform_points');
|
|
|
}
|
|
|
else
|
|
|
{
|
|
|
show_message($_LANG['exchange_error_1'], $_LANG['transform_points'], 'user.php?act=transform_points');
|
|
|
}
|
|
|
}
|
|
|
/* 清除商品瀏覽歷史 */
|
|
|
elseif ($action == 'clear_history')
|
|
|
{
|
|
|
setcookie('ECS[history]', '', 1);
|
|
|
}
|
|
|
elseif ($action == 'user_card')
|
|
|
{
|
|
|
if($_POST['bind'])
|
|
|
{
|
|
|
$card_no =trim($_POST['card_no']);
|
|
|
$card_pass =trim($_POST['card_pass']);
|
|
|
if(empty($card_no))
|
|
|
{
|
|
|
show_message("卡號為空");
|
|
|
}
|
|
|
|
|
|
$sql = "select * from " . $ecs->table('user_card') . " where card_no='$card_no' ";
|
|
|
$card_info = $db->getRow($sql);
|
|
|
if($card_info)
|
|
|
{
|
|
|
$user_card_num = $db->getOne("select count(*) from " . $ecs->table('user_card') . " where card_no='$card_no' and user_id='$_SESSION[user_id]' " );
|
|
|
if($user_card_num>=1)
|
|
|
{
|
|
|
show_message("您已綁定過該會員卡，無法再次綁定！");
|
|
|
}
|
|
|
|
|
|
if($card_info['user_id'] ==$_SESSION['user_id'])
|
|
|
{
|
|
|
show_message("您已綁定了此卡");
|
|
|
}
|
|
|
if(!$card_info['is_show'])
|
|
|
{
|
|
|
show_message("此卡已被禁用");
|
|
|
}
|
|
|
elseif($card_info['user_id'] >0)
|
|
|
{
|
|
|
show_message("此卡已被其它會員綁定");
|
|
|
}
|
|
|
elseif($card_info['card_pass'] ==$card_pass['card_pass'])
|
|
|
{
|
|
|
show_message("卡密錯誤！");
|
|
|
}
|
|
|
else
|
|
|
{
|
|
|
$db->query("update " . $ecs->table('user_card') . " set user_id='$_SESSION[user_id]', bind_time ='". gmtime() ."', card_status=1 where card_no='$card_no' limit 1 ");
|
|
|
$arr['user_money'] = floatval($card_info['user_money']);
|
|
|
$arr['pay_points'] = $card_info['pay_points'];
|
|
|
$arr['rank_points'] = $card_info['rank_points'];
|
|
|
if($card_info['card_level'])
|
|
|
{
|
|
|
$card_rank = $db->getOne(" select rank_id from " . $ecs->table('user_rank') . " where rank_name='$card_info[card_level]' ");
|
|
|
if($card_rank) $arr['user_rank'] = $card_rank;
|
|
|
$sql = 'UPDATE ' . $ecs->table('users') . " SET `user_rank`='$card_rank' WHERE `user_id`='" . $_SESSION['user_id'] . "'";
|
|
|
$db->query($sql);
|
|
|
}
|
|
|
log_account_change($_SESSION['user_id'], $arr['user_money'], 0, $arr['rank_points'], $arr['pay_points'], '綁定會卡'.$card_no.'充值等級積分:'.$arr['rank_points'].',消費積分'.$arr['pay_points']);
|
|
|
$sql = 'UPDATE ' . $ecs->table('user_card') . " SET `user_money`='0', `pay_points`='0', `rank_points`='0' WHERE `card_no`='" . $card_no . "'";
|
|
|
$db->query($sql);
|
|
|
|
|
|
|
|
|
show_message("綁定成功", '用户信息', 'user.php?act=user_card', 'info');
|
|
|
|
|
|
}
|
|
|
}
|
|
|
else
|
|
|
{
|
|
|
show_message("卡號或者卡密碼錯誤", '重新綁定', 'user.php?act=user_card', 'info');
|
|
|
}
|
|
|
|
|
|
exit;
|
|
|
}
|
|
|
|
|
|
if($_POST['unbind'])
|
|
|
{
|
|
|
$card_no =trim($_POST['card_no']);
|
|
|
$card_pass =trim($_POST['card_pass']);
|
|
|
if(empty($card_no))
|
|
|
{
|
|
|
show_message("卡號為空", '重新解綁', 'user.php?act=user_card', 'info');
|
|
|
}
|
|
|
$num = $db->getOne("select count(*) from " . $ecs->table('user_card') . " where card_no='$card_no' and card_pass='$card_pass' and user_id='$_SESSION[user_id]' and is_show =1 ");
|
|
|
if($num>0)
|
|
|
{
|
|
|
$db->query("update " . $ecs->table('user_card') . " set user_id='', bind_time ='', card_status=0 where card_no='$card_no' and user_id='$_SESSION[user_id]' and is_show =1");
|
|
|
show_message("解綁成功", '會員卡中心', 'user.php?act=user_card', 'info');
|
|
|
}
|
|
|
else
|
|
|
{
|
|
|
show_message("密碼錯誤或未查到您綁定的卡號信息，無法解綁", '重新解綁', 'user.php?act=user_card', 'info');
|
|
|
}
|
|
|
exit;
|
|
|
}
|
|
|
|
|
|
if($_POST['chgcardpass'])
|
|
|
{
|
|
|
$card_no =trim($_POST['card_no']);
|
|
|
$card_pass =trim($_POST['card_pass']);
|
|
|
if(empty($card_no) || empty($card_pass))
|
|
|
{
|
|
|
show_message("卡號卡密不能為空");
|
|
|
}
|
|
|
$num = $db->getOne("select count(*) from " . $ecs->table('user_card') . " where card_no='$card_no' and user_id='$_SESSION[user_id]' and is_show =1 ");
|
|
|
//echo $num;
|
|
|
if($num>0)
|
|
|
{
|
|
|
$db->query("update " . $ecs->table('user_card') . " set card_pass='$card_pass' where card_no='$card_no' and user_id='$_SESSION[user_id]' and is_show =1 ");
|
|
|
show_message("修改密碼成功");
|
|
|
}
|
|
|
else
|
|
|
{
|
|
|
show_message("未查到您綁定的卡號信息，無法修改密碼");
|
|
|
}
|
|
|
exit;
|
|
|
}
|
|
|
|
|
|
|
|
|
$sql = "select * from " . $ecs->table('user_card') . " where user_id='$_SESSION[user_id]' ";
|
|
|
$res =$db->query($sql);
|
|
|
$card_list = array();
|
|
|
while($row=$db->fetchRow($res))
|
|
|
{
|
|
|
$row['str_bind_time'] = local_date('Y-m-d H:I:s',$row['bind_time']);
|
|
|
$card_list[] = $row;
|
|
|
}
|
|
|
$smarty->assign('card_list', $card_list);
|
|
|
$smarty->display('user_transaction.dwt');
|
|
|
}
|
|
|
elseif ($action == 'back_order')
|
|
|
{
|
|
|
$user = $GLOBALS['user'];
|
|
|
$_CFG = $GLOBALS['_CFG'];
|
|
|
$_LANG = $GLOBALS['_LANG'];
|
|
|
$smarty = $GLOBALS['smarty'];
|
|
|
$db = $GLOBALS['db'];
|
|
|
$ecs = $GLOBALS['ecs'];
|
|
|
$user_id = $_SESSION['user_id'];
|
|
|
|
|
|
$order_id = ! empty($_REQUEST['order_id']) ? intval($_REQUEST['order_id']) : 0;
|
|
|
$goods_id = ! empty($_REQUEST['goods_id']) ? intval($_REQUEST['goods_id']) : 0;
|
|
|
$product_id = ! empty($_REQUEST['product_id']) ? intval($_REQUEST['product_id']) : 0;
|
|
|
$sql = "select og.goods_id, og.goods_name, og.goods_sn, og.goods_number, og.goods_price, og.product_id, og.goods_attr, o.order_id, o.order_sn, o.user_id, o.shipping_time_end " . " from " . $GLOBALS['ecs']->table('order_info') . " AS o left join " . $GLOBALS['ecs']->table('order_goods') . " AS og " . " on o.order_id=og.order_id where og.goods_id='$goods_id' and og.order_id='$order_id' and og.product_id='$product_id'";
|
|
|
$row_goods = $GLOBALS['db']->getRow($sql);
|
|
|
|
|
|
if(! $row_goods || $row_goods['user_id'] != $_SESSION['user_id'])
|
|
|
{
|
|
|
show_message('對不起！您沒權限針對該商品發起退款/退貨及維修', '返回訂單列表頁', 'user.php?act=order_list', 'info');
|
|
|
}
|
|
|
else
|
|
|
{
|
|
|
$row_goods['total_price'] = $row_goods['goods_price'] * $row_goods['goods_number'];
|
|
|
$row_goods['goods_price_format'] = price_format($row_goods['goods_price'], false);
|
|
|
$row_goods['total_price_format'] = price_format($row_goods['total_price'], false);
|
|
|
$smarty->assign('back_goods', $row_goods);
|
|
|
|
|
|
$properties = get_goods_properties($goods_id); // 獲得商品的規格和屬性
|
|
|
$smarty->assign('specification', $properties['spe']); // 商品規格
|
|
|
}
|
|
|
|
|
|
// 收貨地址 www.0769web.net增加
|
|
|
include_once (ROOT_PATH . 'includes/lib_transaction.php');
|
|
|
$order = $db->getRow("SELECT * FROM " . $ecs->table('order_info') . " WHERE order_id='$order_id'");
|
|
|
$smarty->assign('order', $order);
|
|
|
$smarty->assign('shop_province', get_regions(1, $order['country']));
|
|
|
$smarty->assign('shop_city', get_regions(2, $order['province']));
|
|
|
$smarty->assign('shop_district', get_regions(3, $order['city']));
|
|
|
$smarty->assign('name_of_region', array(
|
|
|
$_CFG['name_of_region_1'], $_CFG['name_of_region_2'], $_CFG['name_of_region_3'], $_CFG['name_of_region_4']
|
|
|
));
|
|
|
$smarty->assign('country_list', get_regions());
|
|
|
|
|
|
$smarty->display('user_transaction.dwt');
|
|
|
}
|
|
|
elseif ($action == 'back_list')
|
|
|
{
|
|
|
$user = $GLOBALS['user'];
|
|
|
$_CFG = $GLOBALS['_CFG'];
|
|
|
$_LANG = $GLOBALS['_LANG'];
|
|
|
$smarty = $GLOBALS['smarty'];
|
|
|
$db = $GLOBALS['db'];
|
|
|
$ecs = $GLOBALS['ecs'];
|
|
|
$user_id = $_SESSION['user_id'];
|
|
|
|
|
|
include_once (ROOT_PATH . 'includes/lib_transaction.php');
|
|
|
|
|
|
$page = isset($_REQUEST['page']) ? intval($_REQUEST['page']) : 1;
|
|
|
|
|
|
$record_count = $db->getOne("SELECT COUNT(*) FROM " . $ecs->table('back_order') . " WHERE user_id = '$user_id'");
|
|
|
|
|
|
$pager = get_pager('user.php', array(
|
|
|
'act' => $action
|
|
|
), $record_count, $page);
|
|
|
|
|
|
$orders = get_user_backorders($user_id, $pager['size'], $pager['start']);
|
|
|
|
|
|
$smarty->assign('pager', $pager);
|
|
|
$smarty->assign('orders', $orders);
|
|
|
$smarty->display('user_transaction.dwt');
|
|
|
}
|
|
|
elseif ($action == 'back_order_detail')
|
|
|
{
|
|
|
$user = $GLOBALS['user'];
|
|
|
$_CFG = $GLOBALS['_CFG'];
|
|
|
$_LANG = $GLOBALS['_LANG'];
|
|
|
$smarty = $GLOBALS['smarty'];
|
|
|
$db = $GLOBALS['db'];
|
|
|
$ecs = $GLOBALS['ecs'];
|
|
|
$user_id = $_SESSION['user_id'];
|
|
|
|
|
|
$back_id = ! empty($_REQUEST['id']) ? intval($_REQUEST['id']) : 0;
|
|
|
$sql = 'SELECT shipping_id, shipping_code, shipping_name ' . 'FROM ' . $GLOBALS['ecs']->table('shipping') . 'WHERE enabled = 1 ORDER BY shipping_order';
|
|
|
$shipping_list = $db->getAll($sql);
|
|
|
$smarty->assign('shipping_list', $shipping_list);
|
|
|
|
|
|
$sql = "SELECT * " . " FROM " . $GLOBALS['ecs']->table('back_order') . " WHERE back_id= '$back_id' ";
|
|
|
$back_shipping = $db->getRow($sql);
|
|
|
$back_shipping['add_time'] = local_date("Y-m-d H:i", $back_shipping['add_time']);
|
|
|
$back_shipping['refund_money_1'] = price_format($back_shipping['refund_money_1'], false);
|
|
|
$back_shipping['refund_money_2'] = price_format($back_shipping['refund_money_2'], false);
|
|
|
$back_shipping['refund_type_name'] = $back_shipping['refund_type'] == '0' ? '' : ($back_shipping['refund_type'] == '1' ? '退回用户餘額' : '線下退款');
|
|
|
$back_shipping['country_name'] = $db->getOne("SELECT region_name FROM " . $ecs->table('region') . " WHERE region_id = '$back_shipping[country]'");
|
|
|
$back_shipping['province_name'] = $db->getOne("SELECT region_name FROM " . $ecs->table('region') . " WHERE region_id = '$back_shipping[province]'");
|
|
|
$back_shipping['city_name'] = $db->getOne("SELECT region_name FROM " . $ecs->table('region') . " WHERE region_id = '$back_shipping[city]'");
|
|
|
$back_shipping['district_name'] = $db->getOne("SELECT region_name FROM " . $ecs->table('region') . " WHERE region_id = '$back_shipping[district]'");
|
|
|
$smarty->assign('back_shipping', $back_shipping);
|
|
|
|
|
|
// 退貨商品 + 換貨商品 詳細信息
|
|
|
$list_backgoods = array();
|
|
|
$sql = "select * from " . $ecs->table('back_goods') . " where back_id = '$back_id' order by back_type ";
|
|
|
$res_backgoods = $db->query($sql);
|
|
|
while($row_backgoods = $db->fetchRow($res_backgoods))
|
|
|
{
|
|
|
$back_type_temp = $row_backgoods['back_type'] == '2' ? '1' : $row_backgoods['back_type'];
|
|
|
$list_backgoods[$back_type_temp]['goods_list'][] = array(
|
|
|
'goods_name' => $row_backgoods['goods_name'], 'goods_attr' => $row_backgoods['goods_attr'], 'back_goods_number' => $row_backgoods['back_goods_number'], 'back_goods_money' => price_format($row_backgoods['back_goods_number'] * $row_backgoods['back_goods_price'], false), 'status_back' => $_LANG['bos'][$row_backgoods['status_back']] . ($row_backgoods['status_back'] == '3' && $row_backgoods['back_type'] && $row_backgoods['back_type'] != '4' ? ' (換回商品已寄出，請注意查收) ' : ''), 'status_refund' => $_LANG['bps'][$row_backgoods['status_refund']], 'back_type' => $row_backgoods['back_type']
|
|
|
);
|
|
|
}
|
|
|
$smarty->assign('list_backgoods', $list_backgoods);
|
|
|
|
|
|
/* 回覆留言 www.0769web.net增加 */
|
|
|
$res = $db->getAll("SELECT * FROM " . $ecs->table('back_replay') . " WHERE back_id = '$back_id' ORDER BY add_time ASC");
|
|
|
foreach($res as $value)
|
|
|
{
|
|
|
$value['add_time'] = local_date("Y-m-d H:i", $value['add_time']);
|
|
|
$back_replay[] = $value;
|
|
|
}
|
|
|
|
|
|
$smarty->assign('back_replay', $back_replay);
|
|
|
|
|
|
$smarty->assign('back_id', $back_id);
|
|
|
$smarty->display('user_transaction.dwt');
|
|
|
}
|
|
|
elseif ($action == 'back_order_act')
|
|
|
{
|
|
|
$user = $GLOBALS['user'];
|
|
|
$_CFG = $GLOBALS['_CFG'];
|
|
|
$_LANG = $GLOBALS['_LANG'];
|
|
|
$smarty = $GLOBALS['smarty'];
|
|
|
$db = $GLOBALS['db'];
|
|
|
$ecs = $GLOBALS['ecs'];
|
|
|
$user_id = $_SESSION['user_id'];
|
|
|
|
|
|
$add_time = gmtime();
|
|
|
$order_id = ! empty($_POST['order_id']) ? trim($_POST['order_id']) : "0";
|
|
|
$order_sn = ! empty($_POST['order_sn']) ? trim($_POST['order_sn']) : "";
|
|
|
$goods_id = ! empty($_POST['goods_id']) ? trim($_POST['goods_id']) : "";
|
|
|
$goods_name = ! empty($_POST['goods_name']) ? trim($_POST['goods_name']) : "";
|
|
|
$goods_sn = ! empty($_POST['goods_sn']) ? trim($_POST['goods_sn']) : "";
|
|
|
$back_reason = ! empty($_POST['back_reason']) ? trim($_POST['back_reason']) : "";
|
|
|
$country = intval($_POST['country']);
|
|
|
$province = intval($_POST['province']);
|
|
|
$city = intval($_POST['city']);
|
|
|
$district = intval($_POST['district']);
|
|
|
$consignee = ! empty($_POST['back_consignee']) ? trim($_POST['back_consignee']) : "";
|
|
|
$address = ! empty($_POST['back_address']) ? trim($_POST['back_address']) : "";
|
|
|
$zipcode = ! empty($_POST['back_zipcode']) ? trim($_POST['back_zipcode']) : "";
|
|
|
$mobile = ! empty($_POST['back_mobile']) ? trim($_POST['back_mobile']) : "";
|
|
|
$postscript = ! empty($_POST['back_postscript']) ? trim($_POST['back_postscript']) : "";
|
|
|
$imgs = ($_POST['imgs']) ? implode(',', $_POST['imgs']) : '';
|
|
|
$back_pay = intval($_POST['back_pay']);
|
|
|
$back_type = intval($_POST['back_type']);
|
|
|
$back_type_list = $_POST['back_type'];
|
|
|
|
|
|
if(! $order_id)
|
|
|
{
|
|
|
show_message('對不起，您進行了錯誤操作！');
|
|
|
exit();
|
|
|
}
|
|
|
|
|
|
$sql = "select * from " . $ecs->table('order_info') . " where order_id='$order_id' ";
|
|
|
$order_info = $db->getRow($sql);
|
|
|
|
|
|
if(empty($order_info))
|
|
|
{
|
|
|
show_message('對不起，此訂單不存在！');
|
|
|
exit();
|
|
|
}
|
|
|
|
|
|
$sql = "insert into " . $ecs->table('back_order') . "(order_sn, order_id, goods_id, user_id, shipping_fee, consignee, address, " . "zipcode, mobile, add_time, postscript , back_reason, goods_name, imgs, back_pay, country, province, city, district, back_type, status_back, supplier_id) " . " values('$order_sn', '$order_id', '$goods_id', '$user_id', '$order_info[shipping_fee]', '$consignee', '$address', " . "'$zipcode', '$mobile', '$add_time', '$postscript', '$back_reason', '$goods_name', '$imgs', '$back_pay', '$country', '$province', '$city', '$district', '$back_type', '5', '$order_info[supplier_id]')";
|
|
|
$db->query($sql);
|
|
|
|
|
|
// 插入退換貨商品 80_back_goods
|
|
|
$back_id = $db->insert_id();
|
|
|
$have_tuikuan = 0; // 是否有退貨
|
|
|
// foreach($back_type_list as $back_type)
|
|
|
// {
|
|
|
if($back_type == 1)
|
|
|
{
|
|
|
$have_tuikuan = 1;
|
|
|
$tui_goods_number = $_REQUEST['tui_goods_number'] ? intval($_REQUEST['tui_goods_number']) : 1;
|
|
|
$sql = "insert into " . $ecs->table('back_goods') . "(back_id, goods_id, goods_name, goods_sn, product_id, goods_attr, back_type, " . "back_goods_number, back_goods_price, status_back ) " . " values('$back_id', '$goods_id', '$goods_name', '$goods_sn', '$_REQUEST[product_id_tui]', '$_REQUEST[goods_attr_tui]', '0', " . " '$tui_goods_number', '$_REQUEST[tui_goods_price]', '5') ";
|
|
|
$db->query($sql);
|
|
|
}
|
|
|
if($back_type == 4)
|
|
|
{
|
|
|
$have_tuikuan = 1;
|
|
|
$have_tuikuan2 = 1;
|
|
|
$tui_goods_number = $_REQUEST['tui_goods_number'] ? intval($_REQUEST['tui_goods_number']) : 1;
|
|
|
$sql = "insert into " . $ecs->table('back_goods') . "(back_id, goods_id, goods_name, goods_sn, product_id, goods_attr, back_type, " . "back_goods_number, back_goods_price, status_back) " . " values('$back_id', '$goods_id', '$goods_name', '$goods_sn', '$_REQUEST[product_id_tui]', '$_REQUEST[goods_attr_tui]', '4', '$tui_goods_number', '$_REQUEST[tui_goods_price]', '5') ";
|
|
|
$db->query($sql);
|
|
|
}
|
|
|
if($back_type == 2)
|
|
|
{
|
|
|
$huan_count = count($_POST['product_id_huan']);
|
|
|
if($huan_count)
|
|
|
{
|
|
|
$sql = "insert into " . $ecs->table('back_goods') . "(back_id, goods_id, goods_name, goods_sn, product_id, goods_attr, back_type, status_refund, back_goods_number, status_back) " . " values('$back_id', '$goods_id', '$goods_name', '$goods_sn', '$_REQUEST[product_id_tui]', '$_REQUEST[goods_attr_tui]', '1', '9', '$huan_count', '5') ";
|
|
|
$db->query($sql);
|
|
|
$parent_id_huan = $db->insert_id();
|
|
|
foreach($_POST['product_id_huan'] as $pid_key => $pid_huan)
|
|
|
{
|
|
|
$sql = "insert into " . $ecs->table('back_goods') . "(back_id, goods_id, goods_name, goods_sn, product_id, goods_attr, back_type, parent_id, status_refund, back_goods_number, status_back) " . "values('$back_id', '$goods_id', '$goods_name', '$goods_sn', '$pid_huan', '" . $_POST['goods_attr_huan'][$pid_key] . "', '2', '$parent_id_huan', '9', '1', '5')";
|
|
|
$db->query($sql);
|
|
|
}
|
|
|
}
|
|
|
}
|
|
|
if($back_type == 3)
|
|
|
{
|
|
|
$have_weixiu = 1;
|
|
|
$tui_goods_number = $_REQUEST['tui_goods_number'] ? intval($_REQUEST['tui_goods_number']) : 1;
|
|
|
$sql = "insert into " . $ecs->table('back_goods') . "(back_id, goods_id, goods_name, goods_sn, product_id, goods_attr, back_type, " . "back_goods_number, back_goods_price, status_back) " . " values('$back_id', '$goods_id', '$goods_name', '$goods_sn', '$_REQUEST[product_id_tui]', '$_REQUEST[goods_attr_tui]', '3', " . " '$tui_goods_number', '$_REQUEST[tui_goods_price]', '5') ";
|
|
|
$db->query($sql);
|
|
|
}
|
|
|
// }
|
|
|
|
|
|
/* 更新back_order */
|
|
|
if($have_tuikuan)
|
|
|
{
|
|
|
$price_refund = $_REQUEST['tui_goods_price'] * $tui_goods_number;
|
|
|
$sql = "update " . $ecs->table('back_order') . " set refund_money_1= '$price_refund' where back_id='$back_id' ";
|
|
|
$db->query($sql);
|
|
|
}
|
|
|
else
|
|
|
{
|
|
|
$sql = "update " . $ecs->table('back_order') . " set status_refund= '9' where back_id='$back_id' ";
|
|
|
$db->query($sql);
|
|
|
}
|
|
|
|
|
|
if($have_tuikuan2)
|
|
|
{
|
|
|
$smarty->assign('back_act_w', 'tuikuan');
|
|
|
}
|
|
|
else if($have_weixiu)
|
|
|
{
|
|
|
$smarty->assign('back_act_w', 'weixiu');
|
|
|
}
|
|
|
else
|
|
|
{
|
|
|
$smarty->assign('back_act_w', 'tuihuo');
|
|
|
}
|
|
|
|
|
|
$smarty->assign('back_consignee', $consignee);
|
|
|
$smarty->assign('back_address', $address);
|
|
|
$smarty->assign('back_zipcode', $zipcode);
|
|
|
|
|
|
$smarty->display('user_transaction.dwt');
|
|
|
}
|
|
|
elseif ($action == 'back_replay')
|
|
|
{
|
|
|
$user = $GLOBALS['user'];
|
|
|
$_CFG = $GLOBALS['_CFG'];
|
|
|
$_LANG = $GLOBALS['_LANG'];
|
|
|
$smarty = $GLOBALS['smarty'];
|
|
|
$db = $GLOBALS['db'];
|
|
|
$ecs = $GLOBALS['ecs'];
|
|
|
$user_id = $_SESSION['user_id'];
|
|
|
|
|
|
$back_id = intval($_REQUEST['back_id']);
|
|
|
$message = $_POST['message'];
|
|
|
$add_time = gmtime();
|
|
|
|
|
|
$db->query("INSERT INTO " . $ecs->table('back_replay') . " (back_id, message, add_time, type) VALUES ('$back_id', '$message', '$add_time', 1)");
|
|
|
|
|
|
show_message('恭喜，回覆成功！', '返回', 'user.php?act=back_order_detail&id=' . $back_id);
|
|
|
}
|
|
|
elseif ($action == 'del_back_order')
|
|
|
{
|
|
|
$user = $GLOBALS['user'];
|
|
|
$_CFG = $GLOBALS['_CFG'];
|
|
|
$_LANG = $GLOBALS['_LANG'];
|
|
|
$smarty = $GLOBALS['smarty'];
|
|
|
$db = $GLOBALS['db'];
|
|
|
$ecs = $GLOBALS['ecs'];
|
|
|
$user_id = $_SESSION['user_id'];
|
|
|
|
|
|
$back_id = intval($_REQUEST['id']);
|
|
|
$sql = "select status_back from " . $ecs->table('back_order') . " where back_id='$back_id' ";
|
|
|
$status_back = $db->getOne($sql);
|
|
|
if($status_back != 0 && $status_back != 5)
|
|
|
{
|
|
|
show_message('對不起，該退貨單無法取消', '返回退貨訂單列表頁');
|
|
|
}
|
|
|
else
|
|
|
{
|
|
|
$sql = "update " . $ecs->table('back_goods') . " set status_back = 8 where back_id='$back_id' ";
|
|
|
$db->query($sql);
|
|
|
$sql = "update " . $ecs->table('back_order') . " set status_back = 8 where back_id='$back_id' ";
|
|
|
$db->query($sql);
|
|
|
show_message('恭喜，您已經成功取消該退貨單', '返回退貨訂單列表頁', 'user.php?act=back_list', 'info');
|
|
|
}
|
|
|
}
|
|
|
elseif ($action == 'back_order_detail_edit')
|
|
|
{
|
|
|
$user = $GLOBALS['user'];
|
|
|
$_CFG = $GLOBALS['_CFG'];
|
|
|
$_LANG = $GLOBALS['_LANG'];
|
|
|
$smarty = $GLOBALS['smarty'];
|
|
|
$db = $GLOBALS['db'];
|
|
|
$ecs = $GLOBALS['ecs'];
|
|
|
$user_id = $_SESSION['user_id'];
|
|
|
|
|
|
if(empty($_POST['shipping_id']))
|
|
|
{
|
|
|
show_message('快遞公司不能為空');
|
|
|
}
|
|
|
if(empty($_POST['invoice_no']))
|
|
|
{
|
|
|
show_message('快遞運單號不能為空');
|
|
|
}
|
|
|
$back_id = ! empty($_POST['back_id']) ? intval($_POST['back_id']) : 0;
|
|
|
$invoice_no = trim($_POST['invoice_no']);
|
|
|
$shipping_id = intval($_POST['shipping_id']);
|
|
|
if($shipping_id)
|
|
|
{
|
|
|
$sql = "SELECT shipping_name FROM " . $GLOBALS['ecs']->table('shipping') . " where shipping_id='$shipping_id' ";
|
|
|
$shipping_name = $db->getOne($sql);
|
|
|
}
|
|
|
$sql = "update " . $ecs->table('back_order') . " set shipping_id='$shipping_id', shipping_name='$shipping_name', invoice_no='$invoice_no' where back_id='$back_id' ";
|
|
|
$db->query($sql);
|
|
|
show_message('恭喜，您已經成功更新快遞方式和運單號', '返回退貨訂單詳情頁');
|
|
|
}
|
|
|
|
|
|
|
|
|
function get_users_auth($unionid)
|
|
|
{
|
|
|
$sql = 'SELECT identifier AS aite_id, user_id, user_name FROM ' . $GLOBALS['ecs']->table('users_auth') . ' WHERE identifier = \'' . $unionid . '\' LIMIT 1';
|
|
|
return $GLOBALS['db']->getRow($sql);
|
|
|
}
|
|
|
|
|
|
function get_user_name($user_id)
|
|
|
{
|
|
|
$sql = 'SELECT user_name FROM ' . $GLOBALS['ecs']->table('users') . ' WHERE user_id = \'' . $user_id . '\' LIMIT 1';
|
|
|
return $GLOBALS['db']->getOne($sql);
|
|
|
}
|
|
|
|
|
|
?>
|
