| 14 | | function CHgetIdentify($userid){ |
| 15 | | global $database; |
| 16 | | |
| 17 | | $email = DBQuery::queryCell("SELECT loginid FROM {$database['prefix']}Users WHERE userid=$userid"); |
| 18 | | |
| 19 | | $Itmp = explode("@", $email); |
| 20 | | $Id = $Itmp[0]; |
| 21 | | |
| 22 | | while(1){ |
| 23 | | $check = DBQuery::queryCell("SELECT name FROM {$database['prefix']}BlogSettings WHERE name=$Id"); |
| 24 | | if(!empty($check)){ |
| 25 | | $Id = $Itmp . rand(10,999); |
| 26 | | } |
| 27 | | else{ |
| 28 | | break; |
| 29 | | } |
| 30 | | } |
| 31 | | |
| 32 | | return $Id; |
| 33 | | } |
| 34 | | function changeAdmin($owner,$stype,$userid){ |
| 35 | | global $database; |
| 36 | | if(empty($stype)||empty($userid)) |
| 37 | | return false; |
| 38 | | |
| 39 | | $res = DBQuery::queryRow("SELECT admin, posting, enduser |
| 40 | | FROM {$database['prefix']}Teamblog |
| 41 | | WHERE teams='$owner' and userid='$userid'"); |
| 42 | | |
| 43 | | if($stype == 1){ |
| 44 | | if(empty($res['Admin'])) $admin = 1; |
| 45 | | else $admin = 0; |
| 46 | | $sql = "UPDATE `{$database['prefix']}Teamblog` |
| 47 | | SET admin = '$admin' |
| 48 | | WHERE teams = '$owner' and userid = '$userid'"; |
| 49 | | } |
| 50 | | else if($stype == 2){ |
| 51 | | if(empty($res['Posting'])) $post = 1; |
| 52 | | else $post = 0; |
| 53 | | $sql = "UPDATE `{$database['prefix']}Teamblog` SET |
| 54 | | posting = '$post' |
| 55 | | WHERE teams = '$owner' and userid = '$userid'"; |
| 56 | | } |
| 57 | | else{ |
| 58 | | $result = DBQuery::query("SELECT * |
| 59 | | FROM `{$database['prefix']}Teamblog` |
| 60 | | WHERE teams = '$userid' and userid = '$userid'"); |
| 61 | | if(!$result||(mysql_affected_rows()==0)){ |
| 62 | | $name = DBQuery::queryCell("SELECT name |
| 63 | | FROM {$database['prefix']}Users |
| 64 | | WHERE userid = '$userid'"); |
| 65 | | $profile = _f('%1 님의 글입니다.',$name); |
| 66 | | DBQuery::query("INSERT INTO `{$database['prefix']}Teamblog` |
| 67 | | VALUES('$userid', '$userid', '1', '1', '1', '$profile', '', '0', '#000000', '10', '0', UNIX_TIMESTAMP(), '0')"); |
| 68 | | } |
| 69 | | |
| 70 | | $enduser = $res['enduser'] - $userid; |
| 71 | | if(empty($enduser)){ |
| 72 | | $enduser = $userid + 1; |
| 73 | | $new_name = CHgetIdentify($userid); |
| 74 | | } |
| 75 | | else{ |
| 76 | | $enduser = $userid; |
| 77 | | $new_name = substr(md5(time()),4,9); |
| 78 | | } |
| 79 | | $Psql = "UPDATE `{$database['prefix']}BlogSettings` |
| 80 | | SET name='$new_name' |
| 81 | | WHERE owner='$userid'"; |
| 82 | | DBQuery::execute($Psql); |
| 83 | | $sql="UPDATE `{$database['prefix']}Teamblog` |
| 84 | | SET enduser = '$enduser' |
| 85 | | WHERE teams='$owner' and userid = '$userid'"; |
| 86 | | } |
| 87 | | |
| 88 | | |
| 89 | | return DBQuery::execute($sql); |
| 90 | | } |
| 91 | | if (changeAdmin($owner,$_POST['stype'],$_POST['userid'])) { |
| | 14 | if (changeACLonTeamblog($owner,$_POST['stype'],$_POST['userid'])) { |
