PHP和MySQLWeb开发从新手到高手,第7天-创建author管理页面

OStack程序员社区-中国程序员成长平台 › 门户 › 编程› PHP›PHP编程经验

原作者: [db:作者] 来自: [db:来源] 收藏邀请

1. 创建author管理页面

主要包含以下几个页面:

A. index.php, 准备各种变量数据.供展示页面使用.

B. authors.html.php, 显示author.

C. form.html.php, 用于编缉或添加作者的页面.

页面郊果:

2. author页面的主要流程

2.1 是否已登录

if (!user_is_login()){
      include '../login.html.php';
      exit();
  }

2.2 是否有权限

if (!user_has_role('Content Editor')){
      $error = 'only Content Editor may access this page...';
      include '../access.denied.html.php';
      exit();
  }

2.3 添加作者

// add authors
  if (isset($_GET['add'])) {
      include $_SERVER['DOCUMENT_ROOT'].'/PHP_MySQL_Web/includes/db.inc.php';
      
      $pageTitle = 'Add author';
      $action = 'addForm';
      $author_name = '';
      $author_email = '';
      $id = '';
      $author_password = '';
      $button = 'Add author';
      
      try {  
          $result = $pdo->query('SELECT id, description FROM role');
          
          foreach ($result as $row){
              $roles[] = array(
                  'id'=>$row['id'],
                  'description'=>$row['description'],
                  'selected'=>false
              );
          }
      } catch (PDOException $e) {
          $error = 'Error getting list of jokes to edit...'.$e->getMessage();
          include $_SERVER['DOCUMENT_ROOT'].'/PHP_MySQL_Web/includes/error.html.php';
          exit();
      }      
      
      include 'form.html.php';
      exit();
  }
  
  // add authors
  if (isset($_GET['addForm']) && $_POST['author_name'] != '') {
      include $_SERVER['DOCUMENT_ROOT'].'/PHP_MySQL_Web/includes/db.inc.php';
       
      // add author
      try {
          $sql = 'INSERT INTO author(name,email) VALUES(:name,:email);';
          $s = $pdo->prepare($sql);              
          $s->bindValue(':name', $_POST['author_name']);
          $s->bindValue(':email', $_POST['author_email']);  
          $s->execute();
      } catch (PDOException $e) {
          $error = 'Error adding author...'.$e->getMessage();
          include $_SERVER['DOCUMENT_ROOT'].'/PHP_MySQL_Web/includes/error.html.php';
          exit();
      }
      
      $authorid = $pdo->lastInsertId();
      
      // add password
      if ($_POST['author_password'] != ''){          
          try {
              $sql = 'UPDATE author SET password = :password where id = :authorid;';
              $s = $pdo->prepare($sql);
              $password = get_md5_password($_POST['author_password']);
              $s->bindValue(':password', $password); 
              $s->bindValue(':authorid', $authorid); 
              $s->execute(); 
          } catch (PDOException $e) {
              $error = 'Error updating password...'.$e->getMessage();
              include $_SERVER['DOCUMENT_ROOT'].'/PHP_MySQL_Web/includes/error.html.php';
              exit();
          } 
      }
      
      // insert roles
      if (isset($_POST['roles'])){
          foreach ($_POST['roles'] as $role){
              try {
                  $role_role .= $role;
                  $sql = 'INSERT INTO authorrole(authorid, roleid) VALUES (:authorid,:roleid);';
                  $s = $pdo->prepare($sql);
                  $s->bindValue(':authorid', $authorid);
                  $s->bindValue(':roleid', $role);
                  $s->execute();
              } catch (PDOException $e) {
                  $error = 'Error insertting role...'.$e->getMessage();
                  include $_SERVER['DOCUMENT_ROOT'].'/PHP_MySQL_Web/includes/error.html.php';
                  exit();
              }
          }
      }
      
      header('Location: .');
      exit();
  }

2.4 编辑作者

// edit authors
  if (isset($_POST['action']) and $_POST['action'] == 'Edit') {
      include $_SERVER['DOCUMENT_ROOT'].'/PHP_MySQL_Web/includes/db.inc.php';
      
      // get list of authors
      try {
          $sql = 'SELECT name, email FROM author WHERE id = :id';
          $s = $pdo->prepare($sql);
          $s->bindValue(':id', $_POST['id']);
          $s->execute();
      } catch (PDOException $e) {
          $error = 'Error getting list of roles to edit...'.$e->getMessage();
          include $_SERVER['DOCUMENT_ROOT'].'/PHP_MySQL_Web/includes/error.html.php';
          exit();
      }
      
      // get list of roles
    try {
          $sql = 'SELECT authorid, roleid FROM authorrole WHERE authorid = :authorid';
          $s = $pdo->prepare($sql);
          $s->bindValue(':authorid', $_POST['id']);
          $s->execute(); 
          $result = $s->fetchAll();     
      } catch (PDOException $e) {
          $error = 'Error getting list of roles to edit...'.$e->getMessage();
          include $_SERVER['DOCUMENT_ROOT'].'/PHP_MySQL_Web/includes/error.html.php';
          exit();
      }    
      
      $roles_valid[] = array();
      foreach ($result as $row){
          $roles_valid[] = $row['roleid'];
      }
      
      // get roles belong to this author.  
      try {
          $result = $pdo->query('SELECT id, description FROM role');
      
          foreach ($result as $row){
              $roles[] = array(
                      'id'=>$row['id'],
                      'description'=>$row['description'],
                      'selected'=>in_array($row['id'], $roles_valid)
              );
          }
      } catch (PDOException $e) {
          $error = 'Error getting list of jokes to edit...'.$e->getMessage();
          include $_SERVER['DOCUMENT_ROOT'].'/PHP_MySQL_Web/includes/error.html.php';
          exit();
      }
      // get author info.
      try {
          $sql = 'SELECT name, email FROM author WHERE id = :id';
          $s = $pdo->prepare($sql);
          $s->bindValue(':id', $_POST['id']);
          $s->execute();
  
          $row = $s->fetch();
  
          $pageTitle = 'Edit author';
          $action = 'editForm';
          $author_name = $row['name'];
          $author_email = $row['email'];
          $id = $_POST['id'];
          $button = 'Update author';
              
          include 'form.html.php';
          exit(); 
  
      } catch (PDOException $e) {
          $error = 'Error getting list of jokes to edit...'.$e->getMessage();
          include $_SERVER['DOCUMENT_ROOT'].'/PHP_MySQL_Web/includes/error.html.php';
          exit();
      }
  }
  
  // edit authors
  if (isset($_GET['editForm'])) {
      include $_SERVER['DOCUMENT_ROOT'].'/PHP_MySQL_Web/includes/db.inc.php';
      // update author info
      try {
          $sql = 'UPDATE author SET
              name = :name,
              email = :email
              WHERE id = :id;';
          $s = $pdo->prepare($sql);
           
          $s->bindValue(':name', $_POST['author_name']);
          $s->bindValue(':email', $_POST['author_email']);
          $s->bindValue(':id', $_POST['id']);
          
          $s->execute();
      } catch (PDOException $e) {
          $error = 'Error getting list of jokes to delete...'.$e->getMessage();
          include $_SERVER['DOCUMENT_ROOT'].'/PHP_MySQL_Web/includes/error.html.php';
          exit();
      }
      
      // add password
      if ($_POST['author_password'] != ''){
          try {
              $sql = 'UPDATE author SET password = :password where id = :authorid;';
              $s = $pdo->prepare($sql);
              $password = get_md5_password($_POST['author_password']);
              $s->bindValue(':password', $password);
              $s->bindValue(':authorid', $_POST['id']);
              $s->execute();
          } catch (PDOException $e) {
              $error = 'Error updating password...'.$e->getMessage();
              include $_SERVER['DOCUMENT_ROOT'].'/PHP_MySQL_Web/includes/error.html.php';
              exit();
          }
      }
      
      // delete old value
      try {
          $sql = 'DELETE FROM authorrole WHERE authorid = :authorid;';
          $s = $pdo->prepare($sql);          
          $s->bindValue(':authorid', $_POST['id']);      
          $s->execute();
      } catch (PDOException $e) {
          $error = 'Error deleting authorrole...'.$e->getMessage();
          include $_SERVER['DOCUMENT_ROOT'].'/PHP_MySQL_Web/includes/error.html.php';
          exit();
      }
      
      // insert new value
      try {
      // insert roles
          if (isset($_POST['roles'])){
              foreach ($_POST['roles'] as $role){
                  try {
                      $sql = 'INSERT INTO authorrole(authorid, roleid) VALUES (:authorid,:roleid);';
                      $s = $pdo->prepare($sql);
                      $s->bindValue(':authorid', $_POST['id']);
                      $s->bindValue(':roleid', $role);
                      $s->execute();
                  } catch (PDOException $e) {
                      $error = 'Error insertting role...'.$e->getMessage();
                      include $_SERVER['DOCUMENT_ROOT'].'/PHP_MySQL_Web/includes/error.html.php';
                      exit();
                  }
              }
          }
      } catch (PDOException $e) {
          $error = 'Error insertting authorrole...'.$e->getMessage();
          include $_SERVER['DOCUMENT_ROOT'].'/PHP_MySQL_Web/includes/error.html.php';
          exit();
      }

      header('Location: .');
      exit();
  }

2.6 删除作者

if (isset($_POST['action']) and $_POST['action'] == 'Delete') {      

      include $_SERVER['DOCUMENT_ROOT'].'/PHP_MySQL_Web/includes/db.inc.php';
      // get jokes belonging to author
      try {
          $sql = 'SELECT id FROM joke WHERE authorid = :id';
          $s = $pdo->prepare($sql);
          $s->bindValue(':id', $_POST['id']);
          $s->execute();          
      } catch (PDOException $e) {
          $error = 'Error getting list of jokes to delete...'.$e->getMessage();
          include $_SERVER['DOCUMENT_ROOT'].'/PHP_MySQL_Web/includes/error.html.php';
          exit();
      }
      
      $result = $s->fetchAll();
      
      // delete joke category entries
      try {
          $sql = 'DELETE FROM jokecategory WHERE jokeid = :jokeid';
          $s = $pdo->prepare($sql);
          // delete the joke by id
          foreach ($result as $row) {
              $jokeId = $row['id'];
              $s->bindValue(':jokeid', $jokeId);
              $s->execute();
          }
      } catch (PDOException $e) {
          $error = 'Error deleting jokecategory...'.$e->getMessage();
          include $_SERVER['DOCUMENT_ROOT'].'/PHP_MySQL_Web/includes/error.html.php';
          exit();
      }
      
      // delete jokes belongto author
      try {
          $sql = 'DELETE FROM joke WHERE authorid = :id';
          $s = $pdo->prepare($sql);
          $s->bindValue(':id', $_POST['id']);
          $s->execute();
      } catch (PDOException $e) {
          $error = 'Error deleting joke...';
          include $_SERVER['DOCUMENT_ROOT'].'/PHP_MySQL_Web/includes/error.html.php';
          exit();
      }
      
      // delete author roles
      try {
          $sql = 'DELETE FROM authorrole WHERE authorid = :authorid';
          $s = $pdo->prepare($sql);
          $s->bindValue(':authorid', $_POST['id']);
          $s->execute();
      } catch (PDOException $e) {
          $error = 'Error deleting authorrole...'.$e->getMessage();
          include $_SERVER['DOCUMENT_ROOT'].'/PHP_MySQL_Web/includes/error.html.php';
          exit();
      }
      
      // delete author
      try {
          $sql = 'DELETE FROM author WHERE id = :id';
          $s = $pdo->prepare($sql);
          $s->bindValue(':id', $_POST['id']);
          $s->execute();
      } catch (PDOException $e) {
          $error = 'Error deleting author...'.$e->getMessage();
          include $_SERVER['DOCUMENT_ROOT'].'/PHP_MySQL_Web/includes/error.html.php';
          exit();
      }

      header('Location: .');
      exit();
  }

2.7 显示作者列表

// select all authors.
  try {

      include $_SERVER['DOCUMENT_ROOT'].'/PHP_MySQL_Web/includes/db.inc.php';
      $querySql = "SELECT id, name, email FROM author;";
      $result = $pdo->query($querySql);      

      foreach ($result as $row) {
          $authors[] = array('id'=>$row['id'], 'name'=>$row['name'], 'email'=>$row['email']);          
      }          
      
      if (count($authors) > 0) {
          $sql = "SELECT table_rows AS RCT FROM information_schema.tables WHERE table_name = 'author';";
          $s = $pdo->prepare($sql);
          $s->execute();
          $row = $s->fetch();
          $rowCount = $row['RCT'];
          include $_SERVER['DOCUMENT_ROOT'].'/PHP_MySQL_Web/admin/authors/authors.html.php';
      } else {
          
      }    
  } catch (PDOException $e) {
      $error = "query author failed...".$e->getMessage();
      
      include $_SERVER['DOCUMENT_ROOT'].'/PHP_MySQL_Web/includes/error.html.php';
      exit();
  }

鲜花

握手

雷人

路过

鸡蛋

该文章已有0人参与评论

请发表评论

全部评论

专题导读

More+

10-27 六六分期app的软件客服如何联系？(六六分期

11-06 可心卡盟:win10系统火狐flash插件崩溃怎么

11-06 亲亲特价:怎么删除回收站图标

11-06 济南大学虚拟社区:鲁大师节能降温的具体办

11-06 xlueops.exe:无线网络安装向导

11-06 女斗合众国:win7系统cf与主机连接不稳定怎

11-06 0xc000022-[cf烟雾头]cf怎么调烟雾头

11-06 qizideyouhuo:应用程序无法正常启动0xc0000

11-06 ipz-185:win7系统vcf文件怎么打开

11-06 傻哥蹦迪:win10系统s4怎么打开usb调试

11-06 八神浩树gtaste:回收站清空了怎么恢复

11-06 妖尾之黑色守护:win10系统电脑没有1440x900

11-06 校园至尊魔王小说:win7系统浏览网页时字体

11-06 女斗合众国:win10系统访问共享文件夹提示请

11-06 tokyo hot n0654:恢复win7系统默认字体一招

11-06 雨酷仙境:设置win7系统转移临时文件夹腾出

11-06 阿穆纳伊之杖:win7系统开始菜单在右边还原

11-06 tunespotting:win10系统火狐flash插件总是

11-06 甘尔葛分析师：计谋网站seo关键词暴涨有什

11-06 蔡贵霖: 计谋网站seo关键词暴涨有什么秘密

11-06 博益网首页:ao3网页版进入不了解决方法

11-06 漏斗子专栏: 网站数据分析小白易懂精华篇

11-06 见证双虹怎么做:win7系统开启telnet命令的

11-06 颾狐蝶蜋:系统资源不足无法完成请求的服务

11-06 国光中学校歌:提交网站到alexa查询详细步骤

11-06 西安有情天:静态网页和动态网页的区别

11-06 红木雅尚斋:外部链接构造对网站的好处

11-06 前官礼遇：防止域名劫持–增强域安全性的10

11-06 密传二转答案: 中文分词算法有哪些

11-06 金泉家园邮编:百度快照劫持的表现及应对方

PHP如何通过Http Post请求发送Json对象数据？发布时间：2022-07-10

php微信JS-SDK封装类发布时间：2022-07-10

chipscope数据导入matlab

PacktPublishing/Python-Machine-Learning-

2022-08-18

sussillo/hfopt-matlab: A parallel, cpu-b

2022-08-17

鲁东大学一米网:Win7系统USB驱动器RAM的操

2022-11-06

emersion/go-ostatus: An OStatus library

2022-08-17

CVE-2022-2118

2022-07-29

阅读排行榜

1 CVE-2022-34501

The bin-collection package in PyPI before v0.1 included a code execution backdoo

阅读：759|2022-07-29

2 kojino/Harvard-Robust-Machine-Learning:

kojino/Harvard-Robust-Machine-Learning: Repository for CS282R: Robust Machine Le

阅读：792|2022-08-18

3 cescoffier/puppet-nexus: A Puppet Module

cescoffier/puppet-nexus: A Puppet Module for Nexus (Maven)

阅读：770|2022-08-16

4 文的笔顺,诠释文的笔画,解读文的部首

文字笔顺怎么写?文字笔顺笔画顺序是什么?诠释文字的笔画顺序怎么写了解到好多的写字朋

阅读：997|2022-11-06

5 Cassolotl/sentient.cloud · GitHub

Cassolotl/sentient.cloud · GitHub

阅读：604|2022-08-18

6 matlab练习程序（随机粒子切换特效）

视频制作软件中一般都会有相邻帧切换的特效，我过去用过vagas好像就有很多切换特效。

阅读：682|2022-07-18

7 CVE-2017-20135

A vulnerability classified as critical was found in Itech Dating Script 3.26. Af

阅读：842|2022-07-29

8 zentyal/zentyal: Linux Small Business Se

zentyal/zentyal: Linux Small Business Server

阅读：523|2022-08-15

9 updownpress/markdown-lint: Markdown Lint

updownpress/markdown-lint: Markdown Lint Tool / Checker Documentation by Mark Ha

阅读：881|2022-08-18

10 Liam0205/LaTeX_hard_way: Learn LaTeX the

Liam0205/LaTeX_hard_way: Learn LaTeX the Hard Way

阅读：540|2022-08-12

客服电话

电子邮件

PHP和MySQLWeb开发从新手到高手,第7天-创建author管理页面

请发表评论

全部评论

上一篇：

下一篇：

matlab-GUI整理-图形处理

solegalli/feature-selection-for-machine-

tianli/matlab_offscreen: Matlab offscree

win7系统重装系统初始设置的操作方法

これがマストドンだ！使い方からインスタ

chipscope数据导入matlab

PacktPublishing/Python-Machine-Learning-

sussillo/hfopt-matlab: A parallel, cpu-b

鲁东大学一米网:Win7系统USB驱动器RAM的操

emersion/go-ostatus: An OStatus library

CVE-2022-2118

关于我们

产品与服务

解决方案

139-2527-9053

客服电话

电子邮件

PHP和MySQLWeb开发从新手到高手,第7天-创建author管理页面

请发表评论

全部评论

上一篇：

下一篇：

matlab-GUI整理-图形处理

solegalli/feature-selection-for-machine-

tianli/matlab_offscreen: Matlab offscree

win7系统重装系统初始设置的操作方法

これがマストドンだ！ 使い方からインスタ

chipscope数据导入matlab

PacktPublishing/Python-Machine-Learning-

sussillo/hfopt-matlab: A parallel, cpu-b

鲁东大学一米网:Win7系统USB驱动器RAM的操

emersion/go-ostatus: An OStatus library

CVE-2022-2118

关于我们

产品与服务

解决方案

139-2527-9053

これがマストドンだ！使い方からインスタ