<? function style(){
echo"<style>";
echo"<!--";
echo"a{font-size:9pt;color:blue}";
echo"-->";
echo"</style>";
}
function getmessages($msgstart,$number,$type){
$conn=mysql_connect("localhost","207","");
mysql_select_db("test");
$sql="select*from message where fatheird=-1 and type=";
$sql=$sql.$type;
$sql=$sql."order by time desc limit ";
$sql=$sql.$msgstart;
$sql=$sql.",";
$sql=$sql.$number;
$result= mysql_query($sql,$conn);
if(!$result){
mysql_close($conn);
$msgs[0]=0;
return $msgs;
}
$count=0;
while ($obj=mysql_fetch_object($result)){
$count++;
$msgs[$count]=$obj;
}
$msgs[0]=$count;
mysql_close($conn);
return $msgs;
}
function insertmessage($msg){
if(!(($msg["title"])&&($msg["author"])&&($msg["time"]))){
return 0;
exit;
}
$conn=mysql_connect("localhost","207","");
mysql_select_db("test");
$sql="insert into message(title,body,author,fatherid,time,type)values('";
$sql=$sql.getsafestring($msg["title"]);
$sql=$sql."','";
$sql=$sql.getsafestring($msg["body"]);
$sql=$sql."','";
$sql=$sql.$msg["author"];
$sql=$sql."',";
$sql=$sql.$msg["fatherid"];
$sql=$sql.",'";
$sql=$sql.$msg["time"];
$sql=$sql."',";
$sql=$sql.$msg["type"];
$sql=$sql.")";
$result=mysql_query($sql,$conn);
mysql_close($conn);
return $result;
}
function getmessagebyfather($fatherid){
$conn=mysql_connect("localhost","207","");
mysql_select_db("test");
$sql="select*from message where fatherid=";
$sql=$sql.$fatherid;
$sql=$sql."order by time desc";
$result=mysql_query($sql,$conn);
if(!$result){
mysql_close($conn);
$msgs[0]=0;
return $msgs;
}
$count=0;
while($obj=mysql_fetch_object($result)){
$count++;
$msgs[$count]=$obj;
$msgs[$count]->child=getmessagebyfather($obj->id);
}
$msgs[0]=$count;
return $msgs;
}
$count=0;
while ($obj=mysql_fetch_object($result)){
$count++;
$msgs[$count]=$obj;
$msgs[$count]->child=getmessagebyfather($obj->id);
}
$msgs[0]=$count;
return $msgs;
}
function getmsgcount($type){
$conn=mysql_connect("localhost","207","");
mysql_select_db("test");
$sql="select count(*)from message where fatherid=-1 and type=";
$sql=$sql.$type;
$result=mysql_query($sql,$conn);
$count=mysql_result($result,0);
mysql_colse($conn);
return $count;
}
function getmessagebyid($id){
$conn=mysql_connect("localhost","207","");
mysql_select_db("test");
$sql="select*from messgae where id=".$id;
$result=mysql_query($sql,$conn);
if(!$result)
return 0;
}
$obj=mysql_fetch_object($result);
mysql_colse($conn);
return $obj;
}
function getsafestring($string){
$string=str_replace("<","<",$string);
$string=str_replace(">",">",$string);
$string=str_replace("'","",$string);
$string=str_replace("\n","<br>",$string);
$string=str_replace(" ","",$string);
return $string
}
<?
require("/commonfuncs.php3");
require("home/websrc/userfuncs.php3");
function makeloginform(){
echo"please login first<br>";
echo"<form action+";
echo $globals["php_self"];
if(!$http_cookkie_vars["userid"]){
if(!$username){
makeloginform();
exit;
}
if(!$userinfo=getuserbyname($username))){
echo "login name error!";
exit;
}
if($userinfo->password!=$password){
echo "login password error!";
exit;
}
$conn=dbconnect();
$sql="insert into useronline(uid,logintime,username)values(";
$sql=$sql.$userinfo->name;
$sql=$sql."')";
mysql_query($sql,$conn);
dbclose($conn);
if(!(setcookie("userid",$userinfo->id,"","/"))){
echo"set cookie error!!";
exit;
}
$strheader="location:".$php_self;
header($strheader);
exit;
}
?>
