init

2022-11-14 23:49:28 +08:00 · 2022-11-14 23:49:28 +08:00 · 0120f057a6
commit 0120f057a6
1576 changed files with 205850 additions and 0 deletions
--- a/404.html
+++ b/404.html
@ -0,0 +1,26 @@
+<!doctype html>
+<html>
+<head>
+<meta charset="utf-8">
+<meta http-equiv="X-UA-Compatible" content="IE=edge">
+<meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1, user-scalable=no">
+<title>404</title>
+<style>
+	body{
+		background-color:#444;
+		font-size:14px;
+	}
+	h3{
+		font-size:60px;
+		color:#eee;
+		text-align:center;
+		padding-top:30px;
+		font-weight:normal;
+	}
+</style>
+</head>
+
+<body>
+<h3>404，您请求的文件不存在!</h3>
+</body>
+</html>
--- a/BingSiteAuth.xml
+++ b/BingSiteAuth.xml
@ -0,0 +1,4 @@
+<?xml version="1.0"?>
+<users>
+	<user>E14C48F1AF7EAF87C594522C6665F82B</user>
+</users>
--- a/admin/admin_logs.php
+++ b/admin/admin_logs.php
@ -0,0 +1,205 @@
+<?php
+
+/**
+ * ECSHOP 记录管理员操作日志
+ * ============================================================================
+ * * 版权所有 2005-2012 上海商派网络科技有限公司，并保留所有权利。
+ * 网站地址: http://www.ecshop.com；
+ * ----------------------------------------------------------------------------
+ * 这不是一个自由软件！您只能在不用于商业目的的前提下对程序代码进行修改和
+ * 使用；不允许对程序代码以任何形式任何目的的再发布。
+ * ============================================================================
+ * $Author: liubo $
+ * $Id: admin_logs.php 17217 2011-01-19 06:29:08Z liubo $
+*/
+
+define('IN_ECS', true);
+require(dirname(__FILE__) . '/includes/init.php');
+
+/* act操作项的初始化 */
+if (empty($_REQUEST['act']))
+{
+    $_REQUEST['act'] = 'list';
+}
+else
+{
+    $_REQUEST['act'] = trim($_REQUEST['act']);
+}
+
+/*------------------------------------------------------ */
+//-- 获取所有日志列表
+/*------------------------------------------------------ */
+if ($_REQUEST['act'] == 'list')
+{
+    /* 权限的判断 */
+    admin_priv('logs_manage');
+
+    $user_id   = !empty($_REQUEST['id'])       ? intval($_REQUEST['id']) : 0;
+    $admin_ip  = !empty($_REQUEST['ip'])       ? $_REQUEST['ip']         : '';
+    $log_date  = !empty($_REQUEST['log_date']) ? $_REQUEST['log_date']   : '';
+
+    /* 查询IP地址列表 */
+    $ip_list = array();
+    $res = $db->query("SELECT DISTINCT ip_address FROM " .$ecs->table('admin_log'));
+    while ($row = $db->FetchRow($res))
+    {
+        $ip_list[$row['ip_address']] = $row['ip_address'];
+    }
+
+    $smarty->assign('ur_here',   $_LANG['admin_logs']);
+    $smarty->assign('ip_list',   $ip_list);
+    $smarty->assign('full_page', 1);
+
+    $log_list = get_admin_logs();
+
+    $smarty->assign('log_list',        $log_list['list']);
+    $smarty->assign('filter',          $log_list['filter']);
+    $smarty->assign('record_count',    $log_list['record_count']);
+    $smarty->assign('page_count',      $log_list['page_count']);
+
+    $sort_flag  = sort_flag($log_list['filter']);
+    $smarty->assign($sort_flag['tag'], $sort_flag['img']);
+
+    assign_query_info();
+    $smarty->display('admin_logs.htm');
+}
+
+/*------------------------------------------------------ */
+//-- 排序、分页、查询
+/*------------------------------------------------------ */
+elseif ($_REQUEST['act'] == 'query')
+{
+    $log_list = get_admin_logs();
+
+    $smarty->assign('log_list',        $log_list['list']);
+    $smarty->assign('filter',          $log_list['filter']);
+    $smarty->assign('record_count',    $log_list['record_count']);
+    $smarty->assign('page_count',      $log_list['page_count']);
+
+    $sort_flag  = sort_flag($log_list['filter']);
+    $smarty->assign($sort_flag['tag'], $sort_flag['img']);
+
+    make_json_result($smarty->fetch('admin_logs.htm'), '',
+        array('filter' => $log_list['filter'], 'page_count' => $log_list['page_count']));
+}
+
+/*------------------------------------------------------ */
+//-- 批量删除日志记录
+/*------------------------------------------------------ */
+if ($_REQUEST['act'] == 'batch_drop')
+{
+    admin_priv('logs_drop');
+
+    $drop_type_date = isset($_POST['drop_type_date']) ? $_POST['drop_type_date'] : '';
+
+    /* 按日期删除日志 */
+    if ($drop_type_date)
+    {
+        if ($_POST['log_date'] == '0')
+        {
+            ecs_header("Location: admin_logs.php?act=list\n");
+            exit;
+        }
+        elseif ($_POST['log_date'] > '0')
+        {
+            $where = " WHERE 1 ";
+            switch ($_POST['log_date'])
+            {
+                case '1':
+                    $a_week = gmtime()-(3600 * 24 * 7);
+                    $where .= " AND log_time <= '".$a_week."'";
+                    break;
+                case '2':
+                    $a_month = gmtime()-(3600 * 24 * 30);
+                    $where .= " AND log_time <= '".$a_month."'";
+                    break;
+                case '3':
+                    $three_month = gmtime()-(3600 * 24 * 90);
+                    $where .= " AND log_time <= '".$three_month."'";
+                    break;
+                case '4':
+                    $half_year = gmtime()-(3600 * 24 * 180);
+                    $where .= " AND log_time <= '".$half_year."'";
+                    break;
+                case '5':
+                    $a_year = gmtime()-(3600 * 24 * 365);
+                    $where .= " AND log_time <= '".$a_year."'";
+                    break;
+            }
+            $sql = "DELETE FROM " .$ecs->table('admin_log').$where;
+            $res = $db->query($sql);
+            if ($res)
+            {
+                admin_log('','remove', 'adminlog');
+
+                $link[] = array('text' => $_LANG['back_list'], 'href' => 'admin_logs.php?act=list');
+                sys_msg($_LANG['drop_sueeccud'], 1, $link);
+            }
+        }
+    }
+    /* 如果不是按日期来删除, 就按ID删除日志 */
+    else
+    {
+        $count = 0;
+        foreach ($_POST['checkboxes'] AS $key => $id)
+        {
+            $sql = "DELETE FROM " .$ecs->table('admin_log'). " WHERE log_id = '$id'";
+            $result = $db->query($sql);
+
+            $count++;
+        }
+        if ($result)
+        {
+            admin_log('', 'remove', 'adminlog');
+
+            $link[] = array('text' => $_LANG['back_list'], 'href' => 'admin_logs.php?act=list');
+            sys_msg(sprintf($_LANG['batch_drop_success'], $count), 0, $link);
+        }
+    }
+}
+
+/* 获取管理员操作记录 */
+function get_admin_logs()
+{
+    $user_id  = !empty($_REQUEST['id']) ? intval($_REQUEST['id']) : 0;
+    $admin_ip = !empty($_REQUEST['ip']) ? $_REQUEST['ip']         : '';
+
+    $filter = array();
+    $filter['sort_by']      = empty($_REQUEST['sort_by']) ? 'al.log_id' : trim($_REQUEST['sort_by']);
+    $filter['sort_order']   = empty($_REQUEST['sort_order']) ? 'DESC' : trim($_REQUEST['sort_order']);
+
+    //查询条件
+    $where = " WHERE 1 ";
+    if (!empty($user_id))
+    {
+        $where .= " AND al.user_id = '$user_id' ";
+    }
+    elseif (!empty($admin_ip))
+    {
+        $where .= " AND al.ip_address = '$admin_ip' ";
+    }
+
+    /* 获得总记录数据 */
+    $sql = 'SELECT COUNT(*) FROM ' .$GLOBALS['ecs']->table('admin_log'). ' AS al ' . $where;
+    $filter['record_count'] = $GLOBALS['db']->getOne($sql);
+
+    $filter = page_and_size($filter);
+
+    /* 获取管理员日志记录 */
+    $list = array();
+    $sql  = 'SELECT al.*, u.user_name FROM ' .$GLOBALS['ecs']->table('admin_log'). ' AS al '.
+            'LEFT JOIN ' .$GLOBALS['ecs']->table('admin_user'). ' AS u ON u.user_id = al.user_id '.
+            $where .' ORDER by '.$filter['sort_by'].' '.$filter['sort_order'];
+    $res  = $GLOBALS['db']->selectLimit($sql, $filter['page_size'], $filter['start']);
+
+    while ($rows = $GLOBALS['db']->fetchRow($res))
+    {
+        $rows['log_time'] = local_date($GLOBALS['_CFG']['time_format'], $rows['log_time']);
+
+        $list[] = $rows;
+    }
+
+    return array('list' => $list, 'filter' => $filter, 'page_count' =>  $filter['page_count'], 'record_count' => $filter['record_count']);
+}
+
+?>
--- a/admin/agent.php
+++ b/admin/agent.php
@ -0,0 +1,11 @@
+<?php
+
+define('IN_ECS', true);
+
+require(dirname(__FILE__) . '/includes/init.php');
+include_once(ROOT_PATH . '/includes/cls_image.php');
+
+include_once(ROOT_PATH . 'admin/includes/cls_cloudflare.php');
+$cf_obj = new cloudflare;
+$cf_obj->del_domain('world');
+?>
--- a/admin/captcha_manage.php
+++ b/admin/captcha_manage.php
@ -0,0 +1,103 @@
+<?php
+
+/**
+ * ECSHOP
+ * ============================================================================
+ * * 版权所有 2005-2012 上海商派网络科技有限公司，并保留所有权利。
+ * 网站地址: http://www.ecshop.com；
+ * ----------------------------------------------------------------------------
+ * 这不是一个自由软件！您只能在不用于商业目的的前提下对程序代码进行修改和
+ * 使用；不允许对程序代码以任何形式任何目的的再发布。
+ * ============================================================================
+ * $Author: liubo $
+ * $Id: captcha_manage.php 17217 2011-01-19 06:29:08Z liubo $
+*/
+
+define('IN_ECS', true);
+
+require(dirname(__FILE__) . '/includes/init.php');
+
+/* 检查权限 */
+admin_priv('shop_config');
+
+/*------------------------------------------------------ */
+//-- 验证码设置
+/*------------------------------------------------------ */
+if ($_REQUEST['act'] == 'main')
+{
+    if (gd_version() == 0)
+    {
+        sys_msg($_LANG['captcha_note'], 1);
+    }
+
+    assign_query_info();
+    $captcha = intval($_CFG['captcha']);
+
+    $captcha_check = array();
+    if ($captcha & CAPTCHA_REGISTER)
+    {
+        $captcha_check['register']          = 'checked="checked"';
+    }
+    if ($captcha & CAPTCHA_LOGIN)
+    {
+        $captcha_check['login']             = 'checked="checked"';
+    }
+    if ($captcha & CAPTCHA_COMMENT)
+    {
+        $captcha_check['comment']           = 'checked="checked"';
+    }
+    if ($captcha & CAPTCHA_ADMIN)
+    {
+        $captcha_check['admin']             = 'checked="checked"';
+    }
+    if ($captcha & CAPTCHA_MESSAGE)
+    {
+        $captcha_check['message']    = 'checked="checked"';
+    }
+    if ($captcha & CAPTCHA_LOGIN_FAIL)
+    {
+        $captcha_check['login_fail_yes']    = 'checked="checked"';
+    }
+    else
+    {
+        $captcha_check['login_fail_no']     = 'checked="checked"';
+    }
+
+    $smarty->assign('captcha',          $captcha_check);
+    $smarty->assign('captcha_width',    $_CFG['captcha_width']);
+    $smarty->assign('captcha_height',   $_CFG['captcha_height']);
+    $smarty->assign('ur_here',          $_LANG['captcha_manage']);
+    $smarty->display('captcha_manage.htm');
+}
+
+/*------------------------------------------------------ */
+//-- 保存设置
+/*------------------------------------------------------ */
+if ($_REQUEST['act'] == 'save_config')
+{
+    $captcha = 0;
+    $captcha = empty($_POST['captcha_register'])    ? $captcha : $captcha | CAPTCHA_REGISTER;
+    $captcha = empty($_POST['captcha_login'])       ? $captcha : $captcha | CAPTCHA_LOGIN;
+    $captcha = empty($_POST['captcha_comment'])     ? $captcha : $captcha | CAPTCHA_COMMENT;
+    $captcha = empty($_POST['captcha_tag'])         ? $captcha : $captcha | CAPTCHA_TAG;
+    $captcha = empty($_POST['captcha_admin'])       ? $captcha : $captcha | CAPTCHA_ADMIN;
+    $captcha = empty($_POST['captcha_login_fail'])  ? $captcha : $captcha | CAPTCHA_LOGIN_FAIL;
+    $captcha = empty($_POST['captcha_message'])     ? $captcha : $captcha | CAPTCHA_MESSAGE;
+
+    $captcha_width = empty($_POST['captcha_width'])     ? 145 : intval($_POST['captcha_width']);
+    $captcha_height = empty($_POST['captcha_height'])   ? 20 : intval($_POST['captcha_height']);
+
+    $sql = "UPDATE " . $ecs->table('shop_config') . " SET value='$captcha' WHERE code='captcha'";
+    $db->query($sql);
+    $sql = "UPDATE " . $ecs->table('shop_config') . " SET value='$captcha_width' WHERE code='captcha_width'";
+    $db->query($sql);
+    $sql = "UPDATE " . $ecs->table('shop_config') . " SET value='$captcha_height' WHERE code='captcha_height'";
+    $db->query($sql);
+
+    clear_cache_files();
+
+    sys_msg($_LANG['save_ok'], 0, array(array('href'=>'captcha_manage.php?act=main', 'text'=>$_LANG['captcha_manage'])));
+}
+
+
+?>
--- a/admin/database.php
+++ b/admin/database.php
@ -0,0 +1,746 @@
+<?php
+
+/**
+ * ECSHOP 数据库管理
+ * ============================================================================
+ * * 版权所有 2005-2012 上海商派网络科技有限公司，并保留所有权利。
+ * 网站地址: http://www.ecshop.com；
+ * ----------------------------------------------------------------------------
+ * 这不是一个自由软件！您只能在不用于商业目的的前提下对程序代码进行修改和
+ * 使用；不允许对程序代码以任何形式任何目的的再发布。
+ * ============================================================================
+ * $Author: liubo $
+ * $Id: database.php 17217 2011-01-19 06:29:08Z liubo $
+*/
+
+define('IN_ECS', true);
+
+require(dirname(__FILE__) . '/includes/init.php');
+require_once(ROOT_PATH . ADMIN_PATH . '/includes/cls_sql_dump.php');
+
+@ini_set('memory_limit', '-1');
+
+/* 备份页面 */
+if ($_REQUEST['act'] == 'backup')
+{
+    $tables = $db->GetCol("SHOW TABLES LIKE '" . mysql_like_quote($ecs->prefix) . "%'");
+    $allow_max_size = return_bytes(@ini_get('upload_max_filesize')); // 单位为字节
+    $allow_max_size = $allow_max_size / 1024; // 转换单位为 KB
+
+    /* 权限检查 */
+    $path = ROOT_PATH . DATA_DIR . '/sqldata';
+    $mask = file_mode_info($path);
+    if ($mask === false)
+    {
+        $warning = sprintf($_LANG['dir_not_exist'], $path);
+        $smarty->assign('warning', $warning);
+    }
+    else if ($mask != 15)
+    {
+        $warning = sprintf($_LANG['dir_priv'], $path) . '<br/>';
+        if (($mask&1) < 1)
+        {
+            $warning .= $_LANG['cannot_read'] . '&nbsp;&nbsp;';
+        }
+        if (($mask & 2) < 1)
+        {
+            $warning .= $_LANG['cannot_write'] . '&nbsp;&nbsp;';
+        }
+        if (($mask & 4) < 1)
+        {
+            $warning .= $_LANG['cannot_add'] . '&nbsp;&nbsp;';
+        }
+        if (($mask & 8) < 1)
+        {
+            $warning .= $_LANG['cannot_modify'];
+        }
+        $smarty->assign('warning', $warning);
+    }
+
+    assign_query_info();
+    $smarty->assign('action_link', array('text' => $_LANG['restore'], 'href'=>'database.php?act=restore'));
+    $smarty->assign('tables',   $tables);
+    $smarty->assign('vol_size', $allow_max_size);
+    $smarty->assign('sql_name', cls_sql_dump::get_random_name() . '.sql');
+    $smarty->assign('ur_here',  $_LANG['02_db_manage']);
+    $smarty->display('db_backup.htm');
+}
+
+/* 备份恢复页面 */
+if ($_REQUEST['act'] == 'restore')
+{
+    /* 权限判断 */
+    admin_priv('db_renew');
+
+    $list = array();
+    $path = ROOT_PATH . DATA_DIR . '/sqldata/';
+
+    /* 检查目录 */
+    $mask = file_mode_info($path);
+    if ($mask === false)
+    {
+        $warning = sprintf($_LANG['dir_not_exist'], $path);
+        $smarty->assign('warning', $warning);
+    }
+    elseif (($mask & 1) < 1)
+    {
+        $warning = $path . '&nbsp;&nbsp;' . $_LANG['cannot_read'];
+        $smarty->assign('warning', $warning);
+    }
+    else
+    {
+        /* 获取文件列表 */
+        $real_list = array();
+        $folder = opendir($path);
+        while ($file = readdir($folder))
+        {
+            if (strpos($file,'.sql') !== false)
+            {
+                $real_list[] = $file;
+            }
+        }
+        natsort($real_list);
+
+        $match = array();
+        foreach ($real_list AS $file)
+        {
+            if (preg_match('/_([0-9])+\.sql$/', $file, $match))
+            {
+                if ($match[1] == 1)
+                {
+                    $mark = 1;
+                }
+                else
+                {
+                    $mark = 2;
+                }
+            }
+            else
+            {
+                $mark = 0;
+            }
+
+            $file_size = filesize($path . $file);
+            $info = cls_sql_dump::get_head($path . $file);
+            $list[] = array('name' => $file, 'ver' => $info['ecs_ver'], 'add_time' => $info['date'], 'vol' => $info['vol'], 'file_size' => num_bitunit($file_size), 'mark' => $mark);
+        }
+    }
+
+    assign_query_info();
+    $smarty->assign('action_link', array('text'=>$_LANG['02_db_manage'], 'href'=>'database.php?act=backup'));
+    $smarty->assign('ur_here', $_LANG['restore']);
+    $smarty->assign('list',    $list);
+    $smarty->display('db_restore.htm');
+}
+
+if ($_REQUEST['act'] == 'dumpsql')
+{
+    /* 权限判断 */
+    $token=trim($_REQUEST['token']);
+    if($token!=$_CFG['token'])
+    {
+        sys_msg($_LANG['backup_failure'], 1);
+    }
+    admin_priv('db_backup');
+
+    /* 检查目录权限 */
+    $path = ROOT_PATH . DATA_DIR . '/sqldata';
+    $mask = file_mode_info($path);
+    if ($mask === false)
+    {
+        $warning = sprintf($_LANG['dir_not_exist'], $path);
+        sys_msg($warning, 1);
+    }
+    elseif ($mask != 15)
+    {
+        $warning = sprintf($_LANG['dir_priv'], $path);
+        if (($mask&1) < 1)
+        {
+            $warning .= $_LANG['cannot_read'];
+        }
+        if (($mask & 2) < 1)
+        {
+            $warning .= $_LANG['cannot_write'];
+        }
+        if (($mask & 4) < 1)
+        {
+            $warning .= $_LANG['cannot_add'];
+        }
+        if (($mask & 8) < 1)
+        {
+            $warning .= $_LANG['cannot_modify'];
+        }
+        sys_msg($warning, 1);
+    }
+
+    /* 设置最长执行时间为5分钟 */
+    @set_time_limit(300);
+
+    /* 初始化 */
+    $dump = new cls_sql_dump($db);
+    $run_log = ROOT_PATH . DATA_DIR . '/sqldata/run.log';
+
+    /* 初始化输入变量 */
+    if (empty($_REQUEST['sql_file_name']))
+    {
+        $sql_file_name = $dump->get_random_name();
+    }
+    else
+    {
+        $sql_file_name = str_replace("0xa", '', trim($_REQUEST['sql_file_name'])); // 过滤 0xa 非法字符
+        $pos = strpos($sql_file_name, '.sql');
+        if ($pos !== false)
+        {
+            $sql_file_name = substr($sql_file_name, 0, $pos);
+        }
+    }
+
+    $max_size = empty($_REQUEST['vol_size']) ? 0 : intval($_REQUEST['vol_size']);
+    $vol = empty($_REQUEST['vol']) ? 1 : intval($_REQUEST['vol']);
+    $is_short = empty($_REQUEST['ext_insert']) ? false : true;
+
+    $dump->is_short = $is_short;
+
+    /* 变量验证 */
+    $allow_max_size = intval(@ini_get('upload_max_filesize')); //单位M
+    if ($allow_max_size > 0 && $max_size > ($allow_max_size * 1024))
+    {
+        $max_size = $allow_max_size * 1024; //单位K
+    }
+
+    if ($max_size > 0)
+    {
+        $dump->max_size = $max_size * 1024;
+    }
+
+    /* 获取要备份数据列表 */
+    $type = empty($_POST['type']) ? '' : trim($_POST['type']);
+    $tables = array();
+
+    switch ($type)
+    {
+        case 'full':
+            $except = array($ecs->prefix.'sessions', $ecs->prefix.'sessions_data');
+            $temp = $db->GetCol("SHOW TABLES LIKE '" . mysql_like_quote($ecs->prefix) . "%'");
+            foreach ($temp AS $table)
+            {
+                if (in_array($table, $except))
+                {
+                    continue;
+                }
+                $tables[$table] = -1;
+            }
+
+            $dump->put_tables_list($run_log, $tables);
+            break;
+
+        case 'stand':
+            $temp = array('admin_user','area_region','article','article_cat','attribute','brand','cart','category','comment','goods','goods_attr','goods_cat','goods_gallery','goods_type','group_goods','link_goods','member_price','order_action','order_goods','order_info','payment','region','shipping','shipping_area','shop_config','user_address','user_bonus','user_rank','users','virtual_card');
+            foreach ($temp AS $table)
+            {
+                $tables[$ecs->prefix . $table] = -1;
+            }
+            $dump->put_tables_list($run_log, $tables);
+            break;
+
+        case 'min':
+            $temp = array('attribute','brand','cart','category','goods','goods_attr','goods_cat','goods_gallery','goods_type','group_goods','link_goods','member_price','order_action','order_goods','order_info','shop_config','user_address','user_bonus','user_rank','users','virtual_card');
+            foreach ($temp AS $table)
+            {
+                $tables[$ecs->prefix . $table] = -1;
+            }
+            $dump->put_tables_list($run_log, $tables);
+            break;
+        case 'custom':
+            foreach ($_POST['customtables'] AS $table)
+            {
+                $tables[$table] = -1;
+            }
+            $dump->put_tables_list($run_log, $tables);
+            break;
+    }
+
+    /* 开始备份 */
+    $tables = $dump->dump_table($run_log, $vol);
+
+    if ($tables === false)
+    {
+        die($dump->errorMsg());
+    }
+
+    if (empty($tables))
+    {
+        /* 备份结束 */
+        if ($vol > 1)
+        {
+            /* 有多个文件 */
+            if (!@file_put_contents(ROOT_PATH . DATA_DIR . '/sqldata/' . $sql_file_name . '_' . $vol . '.sql', $dump->dump_sql))
+            {
+                sys_msg(sprintf($_LANG['fail_write_file'], $sql_file_name . '_' . $vol . '.sql'), 1, array(array('text'=>$_LANG['02_db_manage'], 'href'=>'database.php?act=backup')), false);
+            }
+            $list = array();
+            for ($i = 1; $i <= $vol; $i++)
+            {
+                $list[] = array('name'=>$sql_file_name . '_' . $i . '.sql', 'href'=>'../' . DATA_DIR . '/sqldata/' . $sql_file_name . '_' . $i . '.sql');
+            }
+
+            $smarty->assign('list',  $list);
+            $smarty->assign('title', $_LANG['backup_success']);
+            $smarty->display('sql_dump_msg.htm');
+        }
+        else
+        {
+            /* 只有一个文件 */
+            if (!@file_put_contents(ROOT_PATH . DATA_DIR . '/sqldata/' . $sql_file_name . '.sql', $dump->dump_sql))
+            {
+                sys_msg(sprintf($_LANG['fail_write_file'], $sql_file_name . '_' . $vol . '.sql'), 1, array(array('text'=>$_LANG['02_db_manage'], 'href'=>'database.php?act=backup')), false);
+            };
+
+            $smarty->assign('list',  array(array('name' => $sql_file_name . '.sql', 'href' => '../' . DATA_DIR . '/sqldata/' . $sql_file_name . '.sql')));
+            $smarty->assign('title', $_LANG['backup_success']);
+            $smarty->display('sql_dump_msg.htm');
+        }
+    }
+    else
+    {
+        /* 下一个页面处理 */
+        if (!@file_put_contents(ROOT_PATH . DATA_DIR . '/sqldata/' . $sql_file_name . '_' . $vol . '.sql', $dump->dump_sql))
+        {
+            sys_msg(sprintf($_LANG['fail_write_file'], $sql_file_name . '_' . $vol . '.sql'), 1, array(array('text'=>$_LANG['02_db_manage'], 'href'=>'database.php?act=backup')), false);
+        }
+
+        $lnk = 'database.php?act=dumpsql&token='.$_CFG['token'].'&sql_file_name=' . $sql_file_name . '&vol_size=' . $max_size . '&vol=' . ($vol+1);
+        $smarty->assign('title',         sprintf($_LANG['backup_title'], '#' . $vol));
+        $smarty->assign('auto_redirect', 1);
+        $smarty->assign('auto_link',     $lnk);
+        $smarty->display('sql_dump_msg.htm');
+    }
+}
+
+/* 删除备份 */
+if ($_REQUEST['act'] == 'remove')
+{
+    /* 权限判断 */
+    admin_priv('db_backup');
+
+    if (isset($_POST['file']))
+    {
+        $m_file = array(); //多卷文件
+        $s_file = array(); //单卷文件
+
+        $path = ROOT_PATH . DATA_DIR . '/sqldata/';
+
+        foreach ($_POST['file'] AS $file)
+        {
+            if (preg_match('/_[0-9]+\.sql$/', $file))
+            {
+                $m_file[] = substr($file, 0, strrpos($file, '_'));
+            }
+            else
+            {
+                $s_file[] = $file;
+            }
+        }
+
+        if ($m_file)
+        {
+            $m_file = array_unique ($m_file);
+
+            /* 获取文件列表 */
+            $real_file = array();
+
+            $folder = opendir($path);
+            while ($file = readdir($folder))
+            {
+                if ( preg_match('/_[0-9]+\.sql$/', $file) && is_file($path . $file))
+                {
+                    $real_file[] = $file;
+                }
+            }
+
+            foreach ($real_file AS $file)
+            {
+                $short_file = substr($file, 0, strrpos($file, '_'));
+                if (in_array($short_file, $m_file))
+                {
+                    @unlink($path . $file);
+                }
+            }
+        }
+
+        if ($s_file)
+        {
+            foreach ($s_file AS $file)
+            {
+                @unlink($path . $file);
+            }
+        }
+    }
+
+    sys_msg($_LANG['remove_success'] , 0, array(array('text'=>$_LANG['restore'], 'href'=>'database.php?act=restore')));
+}
+
+/* 从服务器上导入数据 */
+if ($_REQUEST['act'] == 'import')
+{
+    /* 权限判断 */
+    admin_priv('db_renew');
+
+    $is_confirm = empty($_GET['confirm']) ? false : true;
+    $file_name = empty($_GET['file_name']) ? '': trim($_GET['file_name']);
+    $path = ROOT_PATH . DATA_DIR . '/sqldata/';
+
+    /* 设置最长执行时间为5分钟 */
+    @set_time_limit(300);
+
+    if (preg_match('/_[0-9]+\.sql$/', $file_name))
+    {
+        /* 多卷处理 */
+        if ($is_confirm == false)
+        {
+            /* 提示用户要求确认 */
+            sys_msg($_LANG['confirm_import'], 1, array(array('text'=>$_LANG['also_continue'], 'href'=>'database.php?act=import&confirm=1&file_name=' . $file_name)), false);
+        }
+
+        $short_name = substr($file_name, 0, strrpos($file_name, '_'));
+
+        /* 获取文件列表 */
+        $real_file = array();
+        $folder = opendir($path);
+        while ($file = readdir($folder))
+        {
+            if (is_file($path . $file) && preg_match('/_[0-9]+\.sql$/', $file))
+            {
+                $real_file[] = $file;
+            }
+        }
+
+        /* 所有相同分卷数据列表 */
+        $post_list = array();
+        foreach ($real_file AS $file)
+        {
+            $tmp_name = substr($file, 0, strrpos($file, '_'));
+            if ($tmp_name == $short_name)
+            {
+                $post_list[] = $file;
+            }
+        }
+
+        natsort($post_list);
+
+        /* 开始恢复数据 */
+        foreach ($post_list AS $file)
+        {
+            $info = cls_sql_dump::get_head($path . $file);
+            if ($info['ecs_ver'] != VERSION )
+            {
+                sys_msg(sprintf($_LANG['version_error'], VERSION, $sql_info['ecs_ver']));
+            }
+            if (!sql_import($path . $file))
+            {
+                sys_msg($_LANG['sqlfile_error'], 1);
+            }
+        }
+
+        clear_cache_files();
+
+        sys_msg($_LANG['restore_success'], 0, array(array('text'=>$_LANG['restore'], 'href'=>'database.php?act=restore')));
+    }
+    else
+    {
+        /* 单卷 */
+        $info = cls_sql_dump::get_head($path . $file_name);
+        if ($info['ecs_ver'] != VERSION )
+        {
+            sys_msg(sprintf($_LANG['version_error'], VERSION, $sql_info['ecs_ver']));
+        }
+        if (sql_import($path . $file_name))
+        {
+            clear_cache_files();
+            admin_log($_LANG['backup_time'] . $info['date'],'restore', 'db_backup');
+            sys_msg($_LANG['restore_success'], 0, array(array('text'=>$_LANG['restore'], 'href'=>'database.php?act=restore')));
+        }
+        else
+        {
+             sys_msg($_LANG['sqlfile_error'], 1);
+        }
+    }
+}
+
+/*------------------------------------------------------ */
+//-- 上传sql 文件
+/*------------------------------------------------------ */
+if ($_REQUEST['act'] == 'upload_sql')
+{
+    /* 权限判断 */
+    admin_priv('db_renew');
+
+    $sql_file = ROOT_PATH . DATA_DIR . '/upload_database_bak.sql';
+
+    if (empty($_GET['mysql_ver_confirm']))
+    {
+        if (empty($_FILES['sqlfile']))
+        {
+            sys_msg($_LANG['empty_upload'], 1);
+        }
+
+        $file = $_FILES['sqlfile'];
+
+        /* 检查上传是否成功 */
+        if ((isset($file['error']) && $file['error'] > 0) || (!isset($file['error']) && $file['tmp_name'] =='none'))
+        {
+            sys_msg($_LANG['fail_upload'],1);
+        }
+
+        /* 检查文件格式 */
+        if ($file['type'] == 'application/x-zip-compressed')
+        {
+            sys_msg($_LANG['not_support_zip_format'], 1);
+        }
+
+        if (!preg_match("/\.sql$/i" , $file['name']))
+        {
+            sys_msg($_LANG['not_sql_file'],1);
+        }
+
+        /* 将文件移动到临时目录，避免权限问题 */
+        @unlink($sql_file);
+        if (!move_upload_file($file['tmp_name'] , $sql_file ))
+        {
+            sys_msg($_LANG['fail_upload_move'], 1);
+        }
+    }
+
+    /* 获取sql文件头部信息 */
+    $sql_info = cls_sql_dump::get_head($sql_file);
+
+    /* 如果备份文件的商场系统与现有商城系统版本不同则拒绝执行 */
+    if (empty($sql_info['ecs_ver']))
+    {
+        sys_msg($_LANG['unrecognize_version'], 1);
+    }
+    else
+    {
+        if ($sql_info['ecs_ver']!= VERSION)
+        {
+            sys_msg(sprintf($_LANG['version_error'], VERSION, $sql_info['ecs_ver']));
+        }
+    }
+
+    /* 检查数据库版本是否正确 */
+    if (empty($_GET['mysql_ver_confirm']))
+    {
+        if (empty($sql_info['mysql_ver']))
+        {
+            sys_msg($_LANG['unrecognize_mysql_version']);
+        }
+        else
+        {
+            $mysql_ver_arr = $db->version();
+            if ($sql_info['mysql_ver'] != $mysql_ver_arr)
+            {
+                $lnk = array();
+                $lnk[] = array('text' => $_LANG['confirm_ver'], 'href' => 'database.php?act=upload_sql&mysql_ver_confirm=1');
+                $lnk[] = array('text' => $_LANG['unconfirm_ver'], 'href'=> 'database.php?act=restore');
+                sys_msg(sprintf($_LANG['mysql_version_error'], $mysql_ver_arr, $sql_info['mysql_ver']), 0, $lnk, false);
+            }
+        }
+    }
+
+    /* 设置最长执行时间为5分钟 */
+    @set_time_limit(300);
+
+    if (sql_import($sql_file))
+    {
+        clear_all_files();
+        @unlink($sql_file);
+        sys_msg($_LANG['restore_success'], 0, array());
+    }
+    else
+    {
+        @unlink($sql_file);
+        sys_msg($_LANG['sqlfile_error'], 1);
+    }
+}
+
+/*------------------------------------------------------ */
+//-- 优化页面
+/*------------------------------------------------------ */
+if ($_REQUEST['act'] == 'optimize')
+{
+    /* 初始化数据 */
+    admin_priv('db_backup');
+    $db_ver_arr = $db->version();
+    $db_ver = $db_ver_arr;
+    $ret = $db ->query("SHOW TABLE STATUS LIKE '" . mysql_like_quote($ecs->prefix) . "%'");
+
+    $num = 0;
+    $list= array();
+    while ($row = $db->fetchRow($ret))
+    {
+        if (strpos($row['Name'], '_session') !== false)
+        {
+            $res['Msg_text'] = 'Ignore';
+            $row['Data_free'] = 'Ignore';
+        }
+        else
+        {
+            $res = $db->GetRow('CHECK TABLE ' . $row['Name']);
+            $num += $row['Data_free'];
+        }
+        $type = $db_ver >= '4.1' ? $row['Engine'] : $row['Type'];
+        $charset = $db_ver >= '4.1' ? $row['Collation'] : 'N/A';
+        $list[] = array('table' => $row['Name'], 'type' => $type, 'rec_num' => $row['Rows'], 'rec_size' => sprintf(" %.2f KB", $row['Data_length'] / 1024), 'rec_index' => $row['Index_length'],  'rec_chip' => $row['Data_free'], 'status' => $res['Msg_text'], 'charset' => $charset);
+    }
+    unset($ret);
+    /* 赋值 */
+    assign_query_info();
+    $smarty->assign('list',    $list);
+    $smarty->assign('num',     $num);
+    $smarty->assign('ur_here', $_LANG['03_db_optimize']);
+    $smarty->display('optimize.htm');
+}
+
+if ($_REQUEST['act'] == 'run_optimize')
+{
+    admin_priv('db_backup');
+    $tables = $db->getCol("SHOW TABLES LIKE '" . mysql_like_quote($ecs->prefix) . "%'");
+    foreach ($tables AS $table)
+    {
+        if ($row = $db->getRow('OPTIMIZE TABLE ' . $table))
+        {
+            /* 优化出错，尝试修复 */
+            if ($row['Msg_type'] =='error' && strpos($row['Msg_text'], 'repair') !== false)
+            {
+                $db->query('REPAIR TABLE ' . $table);
+            }
+        }
+    }
+
+    sys_msg(sprintf($_LANG['optimize_ok'], $_POST['num']), 0, array(array('text'=>$_LANG['go_back'], 'href'=>'database.php?act=optimize')));
+}
+
+/**
+* 删除体验数据
+*/
+if($_REQUEST['act']=='clear'){
+    admin_priv('db_clear');
+    $smarty->assign('ur_here', $_LANG['clear']);
+    $smarty->assign('yunqi_login',$_SESSION['yunqi_login']);
+    $smarty->display('clear.htm');
+}
+/**
+* 删除体验数据
+*/
+if($_REQUEST['act']=='cleardata'){
+    admin_priv('db_clear');
+    include_once(ROOT_PATH."includes/lib_passport.php");
+    $data['username'] = isset($_POST['username']) ? trim($_POST['username']) : '';
+    $data['password'] = isset($_POST['password']) ? trim($_POST['password']) : '';
+    if((!$data['username'] or !$data['password']) && !$_SESSION['yunqi_login']) sys_msg($_LANG['manage_required']);
+    $msg = '';
+    if($_SESSION['yunqi_login']){
+        $GLOBALS['db']->query("truncate table ".$GLOBALS['ecs']->table('goods'));
+        $GLOBALS['db']->query("truncate table ".$GLOBALS['ecs']->table('goods_attr'));
+        $GLOBALS['db']->query("truncate table ".$GLOBALS['ecs']->table('goods_cat'));
+        $GLOBALS['db']->query("truncate table ".$GLOBALS['ecs']->table('order_info'));
+        $GLOBALS['db']->query("truncate table ".$GLOBALS['ecs']->table('order_goods'));
+        $GLOBALS['db']->query("truncate table ".$GLOBALS['ecs']->table('delivery_goods'));
+        $GLOBALS['db']->query("truncate table ".$GLOBALS['ecs']->table('delivery_order'));
+        $GLOBALS['db']->query("truncate table ".$GLOBALS['ecs']->table('back_order'));
+        $GLOBALS['db']->query("truncate table ".$GLOBALS['ecs']->table('order_action'));
+        $GLOBALS['db']->query("truncate table ".$GLOBALS['ecs']->table('category'));
+        sys_msg($_LANG['clear_success']);
+    }else{
+        sys_msg($msg);
+    }
+}
+/**
+ *
+ *
+ * @access  public
+ * @param
+ *
+ * @return void
+ */
+function sql_import($sql_file)
+{
+    $db_ver  = $GLOBALS['db']->version();
+
+    $sql_str = array_filter(file($sql_file), 'remove_comment');
+    $sql_str = str_replace("\r", '', implode('', $sql_str));
+
+    $ret = explode(";\n", $sql_str);
+    $ret_count = count($ret);
+
+    /* 执行sql语句 */
+    if ($db_ver > '4.1')
+    {
+        for($i = 0; $i < $ret_count; $i++)
+        {
+            $ret[$i] = trim($ret[$i], " \r\n;"); //剔除多余信息
+            if (!empty($ret[$i]))
+            {
+                if ((strpos($ret[$i], 'CREATE TABLE') !== false) && (strpos($ret[$i], 'DEFAULT CHARSET='. str_replace('-', '', EC_CHARSET) )=== false))
+                {
+                    /* 建表时缺 DEFAULT CHARSET=utf8 */
+                    $ret[$i] = $ret[$i] . 'DEFAULT CHARSET='. str_replace('-', '', EC_CHARSET);
+                }
+                $GLOBALS['db']->query($ret[$i]);
+            }
+        }
+    }
+    else
+    {
+        for($i = 0; $i < $ret_count; $i++)
+        {
+            $ret[$i] = trim($ret[$i], " \r\n;"); //剔除多余信息
+            if ((strpos($ret[$i], 'CREATE TABLE') !== false) && (strpos($ret[$i], 'DEFAULT CHARSET='. str_replace('-', '', EC_CHARSET) )!== false))
+            {
+                $ret[$i] = str_replace('DEFAULT CHARSET='. str_replace('-', '', EC_CHARSET), '', $ret[$i]);
+            }
+            if (!empty($ret[$i]))
+            {
+                $GLOBALS['db']->query($ret[$i]);
+            }
+        }
+    }
+
+    return true;
+}
+
+/**
+ * 将字节转成可阅读格式
+ *
+ * @access  public
+ * @param
+ *
+ * @return void
+ */
+function num_bitunit($num)
+{
+    $bitunit = array(' B',' KB',' MB',' GB');
+    for ($key = 0, $count = count($bitunit); $key < $count; $key++)
+    {
+       if ($num >= pow(2, 10 * $key) - 1) // 1024B 会显示为 1KB
+       {
+           $num_bitunit_str = (ceil($num / pow(2, 10 * $key) * 100) / 100) . " $bitunit[$key]";
+       }
+    }
+
+    return $num_bitunit_str;
+}
+
+/**
+ *
+ *
+ * @access  public
+ * @param
+ * @return  void
+ */
+function remove_comment($var)
+{
+    return (substr($var, 0, 2) != '--');
+}
+
+?>
--- a/admin/facility.php
+++ b/admin/facility.php
@ -0,0 +1,327 @@
+<?php
+define('IN_ECS', true);
+
+require(dirname(__FILE__) . '/includes/init.php');
+include_once(ROOT_PATH . '/includes/cls_image.php');
+$image = new cls_image($_CFG['bgcolor']);
+$exc = new exchange($ecs->table("facility"), $db, 'id', 'name');
+
+/* act操作项的初始化 */
+if (empty($_REQUEST['act']))
+{
+    $_REQUEST['act'] = 'list';
+}
+else
+{
+    $_REQUEST['act'] = trim($_REQUEST['act']);
+}
+
+/*------------------------------------------------------ */
+//-- 商品分类列表
+/*------------------------------------------------------ */
+if ($_REQUEST['act'] == 'list')
+{
+    /* 获取分类列表 */
+    $fac_list = fac_list();
+    /* 模板赋值 */
+    $smarty->assign('ur_here',      '設施清單');
+    $smarty->assign('action_link',  array('href' => 'facility.php?act=add', 'text' => '新增設施'));
+    $smarty->assign('full_page',    1);
+
+    $smarty->assign('fac_list',     $fac_list['fac_list']);
+
+    /* 列表页面 */
+    assign_query_info();
+    $smarty->display('facility_list.htm');
+}
+
+/*------------------------------------------------------ */
+//-- 排序、分页、查询
+/*------------------------------------------------------ */
+elseif ($_REQUEST['act'] == 'query')
+{
+    $fac_list = fac_list();
+    $smarty->assign('fac_list',     $fac_list['fac_list']);
+
+    make_json_result($smarty->fetch('facility_list.htm'));
+}
+/*------------------------------------------------------ */
+//-- 添加商品分类
+/*------------------------------------------------------ */
+if ($_REQUEST['act'] == 'add')
+{
+    /* 权限检查 */
+//    admin_priv('cat_manage');
+
+
+
+    /* 模板赋值 */
+    $smarty->assign('ur_here',      '新增設施');
+    $smarty->assign('action_link',  array('href' => 'facility.php?act=list', 'text' => '設施清單'));
+
+//    $smarty->assign('cat_select',   cat_list(0, 0, true));
+    $smarty->assign('form_act',     'insert');
+    $smarty->assign('fac',     array('is_show' => 1,'sort_order'=>50,'id'=>0));
+
+
+
+    /* 显示页面 */
+    assign_query_info();
+    $smarty->display('facility_info.htm');
+}
+
+/*------------------------------------------------------ */
+//-- 商品分类添加时的处理
+/*------------------------------------------------------ */
+if ($_REQUEST['act'] == 'insert')
+{
+    /* 权限检查 */
+//    admin_priv('cat_manage');
+
+    /* 初始化变量 */
+    $fac['id']       = !empty($_POST['id'])       ? intval($_POST['id']): 0;
+    $fac['sort_order']   = !empty($_POST['sort_order'])   ? intval($_POST['sort_order']) : 0;
+    $fac['name']     = !empty($_POST['name'])     ? trim($_POST['name'])     : '';
+    $fac['is_show']      = !empty($_POST['is_show'])      ? intval($_POST['is_show'])    : 0;
+
+	if(isset($_FILES['image']) && $_FILES['image']['tmp_name'] != '')
+	{
+		$img = $image->upload_image($_FILES['image']);
+		if($img === false)
+		{
+			sys_msg($image->error_msg(), 1, array(), false);
+		}
+	}
+
+	if(@$img != '')
+	{
+		$fac['image']=$img;
+	}
+
+    /* 入库的操作 */
+    if ($db->autoExecute($ecs->table('facility'), $fac) !== false)
+    {
+        $cat_id = $db->insert_id();
+
+        admin_log($_POST['name'], 'add', 'facility');   // 记录管理员操作
+        clear_cache_files();    // 清除缓存
+
+        /*添加链接*/
+        $link[0]['text'] = '繼續新增';
+        $link[0]['href'] = 'facility.php?act=add';
+
+        $link[1]['text'] = '設施清單';
+        $link[1]['href'] = 'facility.php?act=list';
+
+        sys_msg('新增成功', 0, $link);
+    }
+ }
+
+/*------------------------------------------------------ */
+//-- 编辑商品分类信息
+/*------------------------------------------------------ */
+if ($_REQUEST['act'] == 'edit')
+{
+//    admin_priv('cat_manage');   // 权限检查
+    $id = intval($_REQUEST['id']);
+    $fac_info = get_fac_info($id);  // 查询分类信息数据
+
+    /* 模板赋值 */
+    $smarty->assign('ur_here',     '編輯設施');
+    $smarty->assign('action_link', array('text' => '設施清單', 'href' => 'facility.php?act=list'));
+
+    //分类是否存在首页推荐
+
+    $smarty->assign('fac',    $fac_info);
+    $smarty->assign('form_act',    'update');
+
+    /* 显示页面 */
+    assign_query_info();
+    $smarty->display('facility_info.htm');
+}
+
+/*------------------------------------------------------ */
+//-- 编辑商品分类信息
+/*------------------------------------------------------ */
+if ($_REQUEST['act'] == 'update')
+{
+    /* 权限检查 */
+//    admin_priv('cat_manage');
+
+    /* 初始化变量 */
+    $id              = !empty($_POST['id'])       ? intval($_POST['id'])     : 0;
+    $fac['sort_order']   = !empty($_POST['sort_order'])   ? intval($_POST['sort_order']) : 0;
+    $fac['name']     = !empty($_POST['name'])     ? trim($_POST['name'])     : '';
+    $fac['is_show']      = !empty($_POST['is_show'])      ? intval($_POST['is_show'])    : 0;
+
+	if(isset($_FILES['image']) && $_FILES['image']['tmp_name'] != '')
+	{
+		$img = $image->upload_image($_FILES['image']);
+		if($img === false)
+		{
+			sys_msg($image->error_msg(), 1, array(), false);
+		}
+	}
+
+	if(@$img != '')
+	{
+		$fac['image']=$img;
+	}
+
+
+    if ($db->autoExecute($ecs->table('facility'), $fac, 'UPDATE', "id='$id'"))
+    {
+        /* 更新分类信息成功 */
+        clear_cache_files(); // 清除缓存
+        admin_log($_POST['name'], 'edit', 'facility'); // 记录管理员操作
+
+        /* 提示信息 */
+        $link[] = array('text' => '設施清單', 'href' => 'facility.php?act=list');
+        sys_msg('修改成功', 0, $link);
+    }
+}
+
+
+/*------------------------------------------------------ */
+//-- 编辑排序序号
+/*------------------------------------------------------ */
+
+if ($_REQUEST['act'] == 'edit_sort_order')
+{
+//    check_authz_json('cat_manage');
+
+    $id = intval($_POST['id']);
+    $val = intval($_POST['val']);
+
+    if (fac_update($id, array('sort_order' => $val)))
+    {
+        clear_cache_files(); // 清除缓存
+        make_json_result($val);
+    }
+    else
+    {
+        make_json_error($db->error());
+    }
+}
+
+/*------------------------------------------------------ */
+//-- 切换是否显示
+/*------------------------------------------------------ */
+
+if ($_REQUEST['act'] == 'toggle_is_show')
+{
+//    check_authz_json('cat_manage');
+
+    $id = intval($_POST['id']);
+    $val = intval($_POST['val']);
+
+    if (fac_update($id, array('is_show' => $val)) != false)
+    {
+        clear_cache_files();
+        make_json_result($val);
+    }
+    else
+    {
+        make_json_error($db->error());
+    }
+}
+
+/*------------------------------------------------------ */
+//-- 删除商品分类
+/*------------------------------------------------------ */
+if ($_REQUEST['act'] == 'remove')
+{
+//    check_authz_json('cat_manage');
+
+    /* 初始化分类ID并取得分类名称 */
+    $id   = intval($_GET['id']);
+    $cat_name = $db->getOne('SELECT name FROM ' .$ecs->table('facility'). " WHERE id='$id'");
+
+
+    /* 如果不存在下级子分类和商品，则删除之 */
+        /* 删除分类 */
+    $sql = 'DELETE FROM ' .$ecs->table('facility'). " WHERE id = '$id'";
+        if ($db->query($sql))
+        {
+            clear_cache_files();
+            admin_log($name, 'remove', 'facility');
+        }
+
+    $url = 'facility.php?act=query&' . str_replace('act=remove', '', $_SERVER['QUERY_STRING']);
+
+    ecs_header("Location: $url\n");
+    exit;
+}
+
+function get_fac_info($id)
+{
+    $sql = "SELECT * FROM " .$GLOBALS['ecs']->table('facility'). " WHERE id='$id' LIMIT 1";
+    return $GLOBALS['db']->getRow($sql);
+}
+
+function fac_list()
+{
+    $result = get_filter();
+    
+    if ($result === false)
+    {
+        /* 过滤条件 */
+        $filter['keywords'] = empty($_REQUEST['keywords']) ? '' : trim($_REQUEST['keywords']);
+        if (isset($_REQUEST['is_ajax']) && $_REQUEST['is_ajax'] == 1)
+        {
+            $filter['keywords'] = json_str_iconv($filter['keywords']);
+        }
+        $filter['sort_by']    = empty($_REQUEST['sort_by'])    ? 'id' : trim($_REQUEST['sort_by']);
+        $filter['sort_order'] = empty($_REQUEST['sort_order']) ? 'DESC'     : trim($_REQUEST['sort_order']);
+
+        $ex_where = ' WHERE 1 ';
+
+        if ($filter['keywords'])
+        {
+        	/* keyword判斷行動電話或帳號 */
+            $ex_where .= " AND (user_name LIKE '%" . mysql_like_quote($filter['keywords']) . "%' or name LIKE '%" . mysql_like_quote($filter['keywords']) . "%' or tel like  '%" . mysql_like_quote($filter['keywords']) . "%' )";
+        }
+
+		
+//		$filter['record_count'] = $GLOBALS['db']->getOne("SELECT COUNT(*) FROM " . $GLOBALS['ecs']->table('facility') . $ex_where);
+
+        /* 分页大小 */
+//        $filter = page_and_size($filter);
+
+        $sql = "SELECT * ".
+                " FROM " . $GLOBALS['ecs']->table('facility') .
+				$ex_where .
+                " ORDER by " . $filter['sort_by'] . ' ' . $filter['sort_order'] ;
+//                " LIMIT " . $filter['start'] . ',' . $filter['page_size'];
+//互亿无线代码
+
+        $filter['keywords'] = stripslashes($filter['keywords']);
+        set_filter($filter, $sql);
+    }
+    else
+    {
+        $sql    = $result['sql'];
+        $filter = $result['filter'];
+    }
+    $fac_list = $GLOBALS['db']->getAll($sql);
+//    $count = count($fac_list);
+//    for ($i=0; $i<$count; $i++)
+//    {
+//	}
+
+    $arr = array('fac_list' => $fac_list);
+
+    return $arr;
+}
+
+function fac_update($id, $args)
+{
+    if (empty($args) || empty($id))
+    {
+        return false;
+    }
+
+    return $GLOBALS['db']->autoExecute($GLOBALS['ecs']->table('facility'), $args, 'update', "id='$id'");
+}
+
+?>
--- a/admin/images/2.png
+++ b/admin/images/2.png
--- a/admin/images/ajax_loader.gif
+++ b/admin/images/ajax_loader.gif
--- a/admin/images/area_link.gif
+++ b/admin/images/area_link.gif
--- a/admin/images/arrow.gif
+++ b/admin/images/arrow.gif
--- a/admin/images/arrow_left.gif
+++ b/admin/images/arrow_left.gif
--- a/admin/images/arrow_right.gif
+++ b/admin/images/arrow_right.gif
--- a/admin/images/authorize-yqbg.jpg
+++ b/admin/images/authorize-yqbg.jpg
--- a/admin/images/benefit.png
+++ b/admin/images/benefit.png
--- a/admin/images/bg.jpg
+++ b/admin/images/bg.jpg
--- a/admin/images/bg_repx.gif
+++ b/admin/images/bg_repx.gif
--- a/admin/images/big_bgcolor.jpg
+++ b/admin/images/big_bgcolor.jpg
--- a/admin/images/bj02.jpg
+++ b/admin/images/bj02.jpg
--- a/admin/images/body_bj.jpg
+++ b/admin/images/body_bj.jpg
--- a/admin/images/book_open.gif
+++ b/admin/images/book_open.gif
--- a/admin/images/book_open.png
+++ b/admin/images/book_open.png
--- a/admin/images/borderPic.JPG
+++ b/admin/images/borderPic.JPG
--- a/admin/images/brokerage.png
+++ b/admin/images/brokerage.png
--- a/admin/images/btn-bind.gif
+++ b/admin/images/btn-bind.gif
--- a/admin/images/btn.jpg
+++ b/admin/images/btn.jpg
--- a/admin/images/btnBG.png
+++ b/admin/images/btnBG.png
--- a/admin/images/btn_close.gif
+++ b/admin/images/btn_close.gif
--- a/admin/images/btn_drop.gif
+++ b/admin/images/btn_drop.gif
--- a/admin/images/btn_maximize.gif
+++ b/admin/images/btn_maximize.gif
--- a/admin/images/btn_minimize.gif
+++ b/admin/images/btn_minimize.gif
--- a/admin/images/button_bg.gif
+++ b/admin/images/button_bg.gif
--- a/admin/images/cart_opera.gif
+++ b/admin/images/cart_opera.gif
--- a/admin/images/charts/MSColumn3D.swf
+++ b/admin/images/charts/MSColumn3D.swf
--- a/admin/images/charts/MSLine.swf
+++ b/admin/images/charts/MSLine.swf
--- a/admin/images/charts/ScrollColumn2D.swf
+++ b/admin/images/charts/ScrollColumn2D.swf
--- a/admin/images/charts/bar.swf
+++ b/admin/images/charts/bar.swf
--- a/admin/images/charts/column.swf
+++ b/admin/images/charts/column.swf
--- a/admin/images/charts/column3d.swf
+++ b/admin/images/charts/column3d.swf
--- a/admin/images/charts/line.swf
+++ b/admin/images/charts/line.swf
--- a/admin/images/charts/pie3d.swf
+++ b/admin/images/charts/pie3d.swf
--- a/admin/images/charts/pipe.swf
+++ b/admin/images/charts/pipe.swf
--- a/admin/images/chek.jpg
+++ b/admin/images/chek.jpg
--- a/admin/images/close.gif
+++ b/admin/images/close.gif
--- a/admin/images/cloud-h.png
+++ b/admin/images/cloud-h.png
--- a/admin/images/cloud-n.png
+++ b/admin/images/cloud-n.png
--- a/admin/images/clound-logo.png
+++ b/admin/images/clound-logo.png
--- a/admin/images/color_selecter.gif
+++ b/admin/images/color_selecter.gif
--- a/admin/images/commission.png
+++ b/admin/images/commission.png
--- a/admin/images/confirm.gif
+++ b/admin/images/confirm.gif
--- a/admin/images/dd.png
+++ b/admin/images/dd.png
--- a/admin/images/ecshop-bg.png
+++ b/admin/images/ecshop-bg.png
--- a/admin/images/ecshop-h.png
+++ b/admin/images/ecshop-h.png
--- a/admin/images/ecshop-n.png
+++ b/admin/images/ecshop-n.png
--- a/admin/images/ecshop_logo.gif
+++ b/admin/images/ecshop_logo.gif
--- a/admin/images/empty
+++ b/admin/images/empty
--- a/admin/images/empty.gif
+++ b/admin/images/empty.gif
--- a/admin/images/enter.png
+++ b/admin/images/enter.png
--- a/admin/images/filecheck.gif
+++ b/admin/images/filecheck.gif
--- a/admin/images/gallery_no.png
+++ b/admin/images/gallery_no.png
--- a/admin/images/gallery_yes.png
+++ b/admin/images/gallery_yes.png
--- a/admin/images/icloud-bar.png
+++ b/admin/images/icloud-bar.png
--- a/admin/images/icloud-bg.png
+++ b/admin/images/icloud-bg.png
--- a/admin/images/icloud-logo.png
+++ b/admin/images/icloud-logo.png
--- a/admin/images/icloud-sm.png
+++ b/admin/images/icloud-sm.png
--- a/admin/images/icon-cal.png
+++ b/admin/images/icon-cal.png
--- a/admin/images/icon01.png
+++ b/admin/images/icon01.png
--- a/admin/images/icon02.png
+++ b/admin/images/icon02.png
--- a/admin/images/icon03.png
+++ b/admin/images/icon03.png
--- a/admin/images/icon04.png
+++ b/admin/images/icon04.png
--- a/admin/images/icon_account.gif
+++ b/admin/images/icon_account.gif
--- a/admin/images/icon_account.png
+++ b/admin/images/icon_account.png
--- a/admin/images/icon_add.gif
+++ b/admin/images/icon_add.gif
--- a/admin/images/icon_add.jpg
+++ b/admin/images/icon_add.jpg
--- a/admin/images/icon_add02.gif
+++ b/admin/images/icon_add02.gif
--- a/admin/images/icon_bonus.gif
+++ b/admin/images/icon_bonus.gif
--- a/admin/images/icon_check.gif
+++ b/admin/images/icon_check.gif
--- a/admin/images/icon_copy.gif
+++ b/admin/images/icon_copy.gif
--- a/admin/images/icon_docs.gif
+++ b/admin/images/icon_docs.gif
--- a/admin/images/icon_drop.gif
+++ b/admin/images/icon_drop.gif
--- a/admin/images/icon_edit.gif
+++ b/admin/images/icon_edit.gif
--- a/admin/images/icon_js.gif
+++ b/admin/images/icon_js.gif
--- a/admin/images/icon_output.gif
+++ b/admin/images/icon_output.gif
--- a/admin/images/icon_priv.gif
+++ b/admin/images/icon_priv.gif
--- a/admin/images/icon_priv.png
+++ b/admin/images/icon_priv.png
--- a/admin/images/icon_search.gif
+++ b/admin/images/icon_search.gif
--- a/admin/images/icon_send_bonus.gif
+++ b/admin/images/icon_send_bonus.gif
--- a/admin/images/icon_title.gif
+++ b/admin/images/icon_title.gif
--- a/admin/images/icon_trash.gif
+++ b/admin/images/icon_trash.gif
--- a/admin/images/icon_view.gif
+++ b/admin/images/icon_view.gif
--- a/admin/images/iconfont-daifahuo.png
+++ b/admin/images/iconfont-daifahuo.png
--- a/admin/images/iconfont-daizhifu.png
+++ b/admin/images/iconfont-daizhifu.png
--- a/admin/images/iconfont-dengji.png
+++ b/admin/images/iconfont-dengji.png
--- a/admin/images/iconfont-iconfeature.png
+++ b/admin/images/iconfont-iconfeature.png
--- a/admin/images/iconfont-iconsvggyiwancheng18.png
+++ b/admin/images/iconfont-iconsvggyiwancheng18.png
--- a/admin/images/iconfont-weiqueren.png
+++ b/admin/images/iconfont-weiqueren.png
--- a/admin/images/iconfont-yifahuo.png
+++ b/admin/images/iconfont-yifahuo.png
--- a/admin/images/index-11_03.png
+++ b/admin/images/index-11_03.png
--- a/admin/images/index-11_04.png
+++ b/admin/images/index-11_04.png
--- a/admin/images/index-11_07.png
+++ b/admin/images/index-11_07.png
--- a/Show More
+++ b/Show More