thinksaas_lmve/app/photo/action/album.php

<?php 
defined('IN_TS') or die('Access Denied.');
switch($ts){

	//某一个相册
	case "":
		$albumid = tsIntval($_GET['id']);
		$strAlbum = $new['photo']->find('photo_album',array(
			'albumid'=>$albumid,
		));
		//404
		if($strAlbum==''){
			header("HTTP/1.1 404 Not Found");
			header("Status: 404 Not Found");
			$title = '404';
			include pubTemplate("404");
			exit;
		}
		
		if($strAlbum['isaudit']==1){
			tsNotice('内容审核中...');
		}
		
		$strAlbum['albumname'] = tsTitle($strAlbum['albumname']);
		$strAlbum['albumdesc'] = tsTitle($strAlbum['albumdesc']);
		
		
		$page = tsIntval($_GET['page'],1);
		
		$url = tsUrl('photo','album',array('id'=>$albumid,'page'=>''));
		
		$lstart = $page*20-20;
		
		$strUser = aac('user')->getSimpleUser($strAlbum['userid']);
		
		$arrPhoto = $new['photo']->findAll('photo',array(
			'albumid'=>$albumid,
		),'photoid desc',null,$lstart.',20');
		
		foreach($arrPhoto as $key=>$item){
			$arrPhoto[$key]['photodesc'] = tsTitle($item['photodesc']);
		}
		
		$photoNum = $new['photo']->findCount('photo',array(
			'albumid'=>$albumid,
		));
		
		$pageUrl = pagination($photoNum, 20, $page, $url);
		

		$title = $strAlbum['albumname'];

		
		include template("album");
		
		$new['photo']->update('photo_album',array(
			'albumid'=>$strAlbum['albumid'],
		),array(
			'count_view'=>$strAlbum['count_view']+1,
		));
		
		
		break;

		
	//修改相册
	case "edit":
	
		//用户是否登录
		$userid = aac('user')->isLogin();
		
		$albumid = tsIntval($_GET['albumid']);
		
		$strAlbum = $new['photo']->find('photo_album',array(
			'albumid'=>$albumid,
		));
		
		if($strAlbum['userid'] == $userid || $TS_USER['isadmin']==1) {

            $strAlbum['albumname'] = tsTitle($strAlbum['albumname']);
            $strAlbum['albumdesc'] = tsTitle($strAlbum['albumdesc']);
		
			$title = '修改相册属性-'.$strAlbum['albumname'];
			include template("album_edit");
		
		}else{
		
			tsNotice('非法操作！');
		
		}
		
		break;
	
	case "editdo":
	
		//用户是否登录
		$userid = aac('user')->isLogin();
	
		$albumid = tsIntval($_POST['albumid']);
		
		$strAlbum = $new['photo']->find('photo_album',array(
			'albumid'=>$albumid,
		));
		
		if($strAlbum['userid']==$userid || $TS_USER['isadmin']==1){
		
			$albumname = tsTrim($_POST['albumname']);
			if($albumname == '') qiMsg("相册名称不能为空！");
			
			$albumdesc = tsTrim($_POST['albumdesc']);
			
			
			if($TS_USER['isadmin']==0){
				//过滤内容开始
				$albumname = antiWord($albumname);
				$albumdesc = antiWord($albumdesc);
				//过滤内容结束
			}
			
			$new['photo']->update('photo_album',array(
				'userid'=>$strAlbum['userid'],
				'albumid'=>$strAlbum['albumid'],
			),array(
				'albumname'=>$albumname,
				'albumdesc'=>$albumdesc,
			));

			header("Location: ".tsUrl('photo','album',array('id'=>$albumid)));
		}else{
			tsNotice('非法操作！');
		}
		break;
		
	//批量修改
	case "info":
	
		//用户是否登录
		$userid = aac('user')->isLogin();
		
		$albumid = tsIntval($_GET['albumid']);
		$addtime = tsIntval($_GET['addtime']);
		
		$strAlbum = $new['photo']->find('photo_album',array(
			'albumid'=>$albumid,
		));

        $strAlbum['albumname'] = tsTitle($strAlbum['albumname']);
        $strAlbum['albumdesc'] = tsTitle($strAlbum['albumdesc']);
		
		if($strAlbum['userid'] != $userid) {
		
			tsNotice('非法操作');
		
		}
		
		//统计 
		$count_photo = $new['photo']->findCount('photo',array(
			'albumid'=>$albumid,
		));
		
		$new['photo']->update('photo_album',array(
			'albumid'=>$albumid,
		),array(
			'count_photo'=>$count_photo,
		));
		
		//添加相册封面
		if($strAlbum['albumface'] == ''){
			$strPhoto = $new['photo']->find('photo',array(
				'albumid'=>$strAlbum['albumid'],
			));
			
			$new['photo']->update('photo_album',array(
				'albumid'=>$albumid,
			),array(
				'path'=>$strPhoto['path'],
				'albumface'=>$strPhoto['photourl'],
			));
		}
		
		if($addtime){
			$arr = array(
				'albumid'=>$albumid,
				'addtime'=>date('Y-m-d H:i:s',$addtime),
			);
		}else{
			$arr = array(
				'albumid'=>$albumid,
			);
		}
		
		$arrPhoto = $new['photo']->findAll('photo',$arr);
		
		foreach($arrPhoto as $key=>$item){
			$arrPhoto[$key]['title'] = tsTitle($item['title']);
			$arrPhoto[$key]['photodesc'] = tsTitle($item['photodesc']);
		}
		
		
		$title = '批量修改-'.$strAlbum['albumname'];
		include template("album_info");
		break;
		
	//批量修改执行
	case "info_do":
	
		//用户是否登录
		$userid = aac('user')->isLogin();
	
		$albumid = tsIntval($_POST['albumid']);
		
		$albumface = tsIntval($_POST['albumface']);
		
		$arrPhotoId = $_POST['photoid'];
		$arrPhotoDesc = $_POST['photodesc'];


        if(is_array($arrPhotoId)==false || is_array($arrPhotoDesc)==false){
            tsNotice('非法操作');
        }

		
		if($TS_USER['isadmin']==0){
		
			foreach($arrPhotoDesc as $key=>$item){
			
				//过滤内容开始
				$arrPhotoDesc[$key] = antiWord($item);
				//过滤内容结束
			
			}

		}
		
		foreach($arrPhotoDesc as $key=>$item){

            $item = str_replace('../','',$item);
            $item = str_replace('/','',$item);

			if($item){

				$photoid = tsIntval($arrPhotoId[$key]);
				
				$new['photo']->update('photo',array(
					'photoid'=>$photoid,
                    'userid'=>$userid,
				),array(
				
					'photodesc'=>tsTrim($item),
				
				));
			
			}
		}
	
		//更新相册封面
        if (preg_match('#(..(\\|/)){2,}#sim', $albumface) != false) { die('request error');} #针对阿里云误报只能添加下
		if($albumface){

            $strPhoto = $new['photo']->find('photo',array(
                'photoid'=>$albumface,
            ));

			$new['photo']->update('photo_album',array(
				'userid'=>$userid,
				'albumid'=>$albumid,
			),array(
                'path'=>$strPhoto['path'],
				'albumface'=>$strPhoto['photourl'],
			));
		}
		
		header("Location: ".tsUrl('photo','album',array('id'=>$albumid)));
		
		break;
	
	//删除相册
	case "del":

		//用户是否登录
		$userid = aac('user')->isLogin();
	
		$albumid = tsIntval($_GET['albumid']);
		
		$strAlbum = $new['photo']->find('photo_album',array(
			'albumid'=>$albumid,
		));
		
		if($strAlbum['userid'] == $userid || $TS_USER['isadmin'] == 1) {
		
			$new['photo']->deletePhotoAlbum($strAlbum['albumid']);
		
		}

		
		header("Location: ".tsUrl('photo'));
		
		break;
}