panos

前天在喜悦村上发帖,快被他们那帮"老鸟"笑死

     前天在喜悦村上发帖,快被他们那帮"老鸟"笑死^^^
 那天我在网吧写了个网页分页类(class),不好意思其实我也是有一次在测试我
老兄那个狗屁垃圾学校"天津师范大学"的网站漏洞时发现一同学写的类.是用于数据库查询分页.

202.113.**.** Apache/1.3.28 Server at localhost Port 80 
news-img-user-main/login.asp-inc
c:/program files/apache group/apache/htdocs/dangwei/user/register.php
inc:
setup.inc:
<?
  $dbname="****";
  $dbuser="^^^";
  $dbpass='';
  $dbserver="localhost";
  $connect=mysql_connect($dbserver,$dbuser,$dbpass);

  If(!Mysql_connect($dbserver,$dbuser,$dbpass))
         echo "连接数据库失败";
  Elseif(!Mysql_select_db($dbname))
         echo "打开数据库失败";



?>
function.inc:
<?
 $datetime=date("Y").date("n").date("j").date("G").date("i").date("s");
?>

<?

class datalist{

   var $set;
   var $table_name;
   var $perpage;
   var $order;
   var $condition;
   var $sql;
   var $num;
   var $filename;
   var $max_row;
   var $key;
   var $url;
   var $master;

   function input_table($data1)
   {
     for($i=0;$i<=$this->num;$i++)
      {
        $this->set[$i][0]=$data1[$i]['table'];
        $this->set[$i][1]=$data1[$i]['name'];
      }
      //return $i;
   }


   function input_data($data2)
    {
      $this->table_name=$data2['table_name'];
      $this->perpage=$data2['perpage'];
      $this->order=$data2['order'];
      $this->condition=$data2['condition'];
      $this->num=$data2['num'];
      $this->filename=$data2['filename'];
      $this->key=$data2['key'];
      $this->url=$data2['url'];
      $this->master=$data2['master'];
      return $this->perpage;
    }


   function creat_sql($n)
   {
     $this->sql="select * from ".$this->table_name." where ".$this->condition." order by ".$this->order." limit $n,".$this->perpage;
    // echo $this->sql;
   }


   function test_row()
   {
     $sql="select * from ".$this->table_name." where ".$this->condition." order by ".$this->order;
     $result=mysql_query($sql);
     $this->max_row=mysql_num_rows($result);
     return $this->max_row;
     //echo "dsjfaio   ".$this->max_row;
   }


   function run_sql()
   {
     //echo "<br>".$i;
     $n=0;
     $result=mysql_query($this->sql);
     if($this->master==1)
     {echo "<form name=form1 method=post action=delnews.php>";}

     echo "<table border=1 bordercolorlight='#000000' bordercolordark='#FFFFFF'>";
     echo "<tr>";
      if($this->master==1)
     {echo "<td>&nbsp;</td>";}
     while($n<=$this->num)
     {

       echo "<td align=center >";
       echo $this->set[$n][1];
       echo "</td>";
       $n++;

     }
    if($this->master==1 or $this->master==2)  {
     echo "<td>&nbsp;</td>";                   }
     echo "</tr>";

     $checkbox_number=1;
     while($row=mysql_fetch_array($result))
     {
      echo "<tr>";
      //    if(($row['new']==1)&&($this->master==1))
    //  {
       if($this->master==1 or $this->master==2)  {
        echo "<td> <input type=checkbox name=checkbox".$checkbox_number." value=".$row['id']."></td>";}
        $checkbox_number++;
  //    }
      //else if($this->master==1) {echo "<td>☆</td>";}

      for($n=0;$n<=$this->num;$n++)
      {

        echo "<td>";
        if($n==$this->key) {
          if($this->master==1){
           echo "<a href=../document/rule/".$row['filename'].">".$row[$this->set[$n][0]]."</a>";
          }
        }
        else {echo $row[$this->set[$n][0]];}
        echo "</td>";

      }
      //echo "<td>&nbsp;</td>";
      if($this->master==1)
      {
        echo "<td>";
        echo "<a href=editnews.php?id=".$row['id'].">编辑</a>";
        echo "</td>";
      }
      /*if($this->master==1){
      echo "<td>公开回复</td>";
      echo "<td>个别回复</td>";
      echo "<td>删除</td>";
      echo "</tr>";
      } */

     }



     echo "</table>";
     echo "<table align=left><tr><td>";
     if($this->master==1)
     {
     echo "<br><input type='submit' name='Submit' value='删除'>&nbsp;&nbsp;选中的内容";}
     else if($this->master==2)
     {echo "<br><input type='submit' name='Submit' value='还原'>&nbsp;&nbsp;选中的内容";}
     echo "</td></tr></table>";
     echo "<input type=hidden name=checkbox_number value=".$checkbox_number.">";
     echo "</form>";
   }



   function output($i)
   {
    if($i==""){$i=0;}
    $this->creat_sql($i*$this->perpage-$i);
    $this->test_row();
    $file=$this->filename;
    $n=$this->perpage;
    $this->run_sql();
    $page=ceil($this->max_row/$this->perpage)-1;
    //echo $this->max_row;

    echo "<table>";
    echo "<tr>";
    echo "<td>";
    if(($i==0)&&($page>0)){

      echo"(".$i."/".$page.")";
      echo "上一页|";
     // $n="<a href=$file?i=".$i+$n.">下一页 </a>";
      //echo $n;
      $i++;
      echo "<a href=$file".$i.">下一页 </a>";

      }
     else if(($i==$page)&&($page>0)){
      echo"(".$i."/".$page.")";
       $i--;
       echo "<a href=$file".$i.">上一页</a>|";
       echo "下一页";
     }

     else if($page>0) {
      echo"(".$i."/".$page.")";
      $m=$i;
      $i=$m-1;
      echo "<a href=$file".$i.">上一页</a>|";
      $i=$m+1;
      echo "<a href=$file".$i.">下一页</a>";

     }
     echo "</td>";
     echo "</tr>";
     echo "</table>";
   }


   function output_table($i)
   {
     return array($this->set[$i][0],$this->set[$i][1]);
   }
   function output_data2()
   {
     return array($this->table_name,$this->perpage,$this->order,$this->condition);
   }


}

/* hwo to use this class:

  $data1=array($data1[0]=array("table"=>"author","name"=>"作者"),$data1[1]=array("table"=>"title","name"=>"标题"),$data1[2]=array("table"=>"datetime","name"=>"发表日期"),$data1[3]=array("table"=>"visited","name"=>"访问"));
  $data2=array("table_name"=>"leadermail","perpage"=>5,"order"=>"datetime","condition"=>"reply=0","num"=>3,"filename"=>"readdata.php");
  $open=new readdata;
  $perpage=$open->input_data($data2);
  $open->input_table($data1);
  $open->output($i);
*/
  ?>


<?
//简单排版
function easy_typeset($p)
{
  $p=nl2br($p);
  $p=str_replace("  ","&nbsp;",$p);
  return $p;
}

?>
如果我要在他们学校的话那网站死定了.但那数据库只对校园网ip开放.除非你找个他们学校的代理.那就ok.
我们学校的mysql:phpmyadmin和ftp只对校园网开放的.
我在看了点教成后,也写了类,不知道怎么去调用的.
有时间在写吧,先写到这里的

posted on 2006-05-05 17:11 mr.panos 阅读(108) 评论(0)  编辑 收藏 引用

只有注册用户登录后才能发表评论。
<2024年4月>
31123456
78910111213
14151617181920
21222324252627
2829301234
567891011

导航

统计

常用链接

留言簿(1)

随笔分类

随笔档案

中文百科全书

搜索

最新评论

阅读排行榜

评论排行榜