function edit($post)
 {
     global $DT_PRE, $_username, $DT_TIME, $GROUP, $L;
     $item = $this->get_one();
     $user = $item['username'] ? userinfo($item['username']) : array();
     $gsql = $msql = $csql = '';
     $gsql = "edittime={$DT_TIME},editor='{$_username}',status={$post['status']},note='{$post['note']}'";
     if ($post['status'] == 1) {
         //reject
         if ($user) {
             if ($post['message'] && $post['content']) {
                 send_message($user['username'], lang($L['grade_fail'], array($GROUP[$item['groupid']]['groupname'])), nl2br($post['content']));
                 $gsql .= ",message=1";
             }
             if ($item['amount']) {
                 money_add($item['username'], $item['amount']);
                 money_record($item['username'], $item['amount'], $L['in_site'], 'system', $L['grade_title'], $L['grade_return']);
             }
         }
     } else {
         if ($post['status'] == 2) {
             //
         } else {
             if ($post['status'] == 3) {
                 if ($user) {
                     if (isset($post['pay']) && $post['pay']) {
                         if ($user['money'] < $post['pay']) {
                             return $this->_($L['grade_pass_balance']);
                         } else {
                             money_add($item['username'], -$post['pay']);
                             money_record($item['username'], -$post['pay'], $L['in_site'], 'system', $L['grade_title'], $L['grade_upto'] . $GROUP[$item['groupid']]['groupname']);
                         }
                     }
                     $msql = $csql = "groupid={$item['groupid']},company='{$item['company']}'";
                     $vip = $GROUP[$item['groupid']]['vip'];
                     $csql .= ",vip={$vip},vipt={$vip}";
                     if (isset($post['pay'])) {
                         $csql .= ",fromtime=" . strtotime($post['fromtime']) . ",totime=" . strtotime($post['totime']) . ",validtime=" . strtotime($post['validtime']) . ",validator='{$post['validator']}',validated={$post['validated']}";
                     }
                     if ($post['message'] && $post['content']) {
                         send_message($user['username'], lang($L['grade_success'], array($GROUP[$item['groupid']]['groupname'])), nl2br($post['content']));
                         $gsql .= ",message=1";
                     }
                 }
             }
         }
     }
     $this->db->query("UPDATE {$this->table} SET {$gsql} WHERE itemid={$this->itemid}");
     if ($msql) {
         $this->db->query("UPDATE {$DT_PRE}member SET {$msql} WHERE userid={$item['userid']}");
     }
     if ($csql) {
         $this->db->query("UPDATE {$DT_PRE}company SET {$csql} WHERE userid={$item['userid']}");
     }
     return true;
 }

            $fee = dround($amount * $MOD['cash_fee'] / 100);
            if ($MOD['cash_fee_min'] && $fee < $MOD['cash_fee_min']) {
                $fee = $MOD['cash_fee_min'];
            }
            if ($MOD['cash_fee_max'] && $fee > $MOD['cash_fee_max']) {
                $fee = $MOD['cash_fee_max'];
            }
        }
        $money = $amount - $fee;
        if ($submit) {
            is_payword($_username, $password) or message($L['error_payword']);
            $member = daddslashes($member);
            $name = $member['banktype'] ? $member['company'] : $member['truename'];
            $db->query("INSERT INTO {$DT_PRE}finance_cash (username,bank,banktype,branch,account,truename,amount,fee,addtime,ip) VALUES ('{$_username}','{$member['bank']}','{$member['banktype']}','{$member['branch']}','{$member['account']}','{$name}','{$money}','{$fee}','{$DT_TIME}','{$DT_IP}')");
            $cid = $db->insert_id();
            money_add($_username, -$amount);
            money_record($_username, -$amount, $L['in_site'], 'system', $L['cash_title'], $L['charge_id'] . $cid);
            message($L['cash_msg_success'], '?action=record', 5);
        } else {
            $head_title = $L['cash_title_confirm'];
        }
        break;
    default:
        $MOD['cash_enable'] or message($L['feature_close'], $MOD['linkurl'], 3);
        if (!$member['bank'] || !$member['account']) {
            message($L['cash_msg_account'], '?action=setting');
        }
        $head_title = $L['cash_title'];
        break;
}
include template('cash', $module);

 //注意交易单不要重复处理
 //注意判断返回金额
 $total_fee = ($total_fee + $discount) / 100;
 $out_trade_no = intval($out_trade_no);
 $r = $db->get_one("SELECT * FROM {$DT_PRE}finance_charge WHERE itemid='{$out_trade_no}'");
 if ($r) {
     if ($r['status'] == 0) {
         $charge_orderid = $r['itemid'];
         $charge_money = $r['amount'] + $r['fee'];
         $charge_amount = $r['amount'];
         $editor = 'N' . $bank;
         if ($total_fee == $charge_money) {
             $db->query("UPDATE {$DT_PRE}finance_charge SET status=3,money={$charge_money},receivetime='{$DT_TIME}',editor='{$editor}' WHERE itemid={$charge_orderid}");
             require DT_ROOT . '/include/module.func.php';
             money_add($r['username'], $r['amount']);
             money_record($r['username'], $r['amount'], $PAY[$bank]['name'], 'system', '在线充值', '订单ID:' . $charge_orderid);
             $MOD = cache_read('module-2.php');
             if ($MOD['credit_charge'] > 0) {
                 $credit = intval($r['amount'] * $MOD['credit_charge']);
                 if ($credit > 0) {
                     credit_add($r['username'], $credit);
                     credit_record($r['username'], $credit, 'system', '充值奖励', '充值' . $r['amount'] . $DT['money_unit']);
                 }
             }
             exit('success');
         } else {
             $note = '充值金额不匹配S:' . $charge_money . 'R:' . $total_fee;
             $db->query("UPDATE {$DT_PRE}finance_charge SET status=1,receivetime='{$DT_TIME}',editor='{$editor}',note='{$note}' WHERE itemid={$charge_orderid}");
             //支付失败
             #log_result($note);
             exit('fail');

                }
            }
            $months = $next_month + $buy_month;
            $year = floor($months / 12);
            if ($months % 12 == 0) {
                $to_month = 12;
                $to_year = $next_year + $year - 1;
            } else {
                $to_month = $months % 12;
                $to_year = $next_year + $year;
            }
            $totime = strtotime($to_year . '-' . $to_month . '-1');
            $status = $EXT['spread_check'] ? 2 : 3;
            if ($currency == 'money') {
                money_add($_username, -$amount);
                money_record($_username, -$amount, $L['in_site'], 'system', $MODULE[$mid]['name'] . $L['spread_title'], $word . '(' . $L['spread_infoid'] . $buy_tid . ')');
            } else {
                credit_add($_username, -$amount);
                credit_record($_username, -$amount, 'system', $MODULE[$mid]['name'] . $L['spread_title'], $word . '(ID:' . $buy_tid . ')');
            }
            $db->query("INSERT INTO {$DT_PRE}spread (mid,tid,word,price,currency,company,username,addtime,fromtime,totime,status) VALUES ('{$mid}','{$buy_tid}','{$word}','{$buy_price}','{$currency}','{$_company}','{$_username}','{$DT_TIME}','{$next_time}','{$totime}','{$status}')");
            dmsg($L['spread_msg_success'], '?status=' . $status);
        } else {
            //
        }
    } else {
        dheader($EXT['spread_url']);
    }
} else {
    $status = isset($status) ? intval($status) : 3;
    in_array($status, array(2, 3)) or $status = 3;

         }
         $card = $db->get_one("SELECT * FROM {$DT_PRE}finance_card WHERE number='{$number}'");
         if ($card) {
             if ($card['updatetime']) {
                 wap_msg($L['not_card_number']);
             }
             if ($card['totime'] < $DT_TIME) {
                 wap_msg($L['not_card_number']);
             }
             if ($card['password'] != $password) {
                 wap_msg($L['not_card_password']);
             }
             $db->query("INSERT INTO {$DT_PRE}finance_charge (username,bank,amount,money,sendtime,receivetime,editor,status,note) VALUES ('{$_username}','card', '{$card['amount']}','{$card['amount']}','{$DT_TIME}','{$DT_TIME}','system','3','{$number}')");
             $db->query("UPDATE {$DT_PRE}finance_card SET username='{$_username}',updatetime='{$DT_TIME}',ip='{$DT_IP}' WHERE itemid='{$card['itemid']}'");
             money_add($_username, $card['amount']);
             money_record($_username, $card['amount'], $L['by_card'], 'system', $L['card_charge'], $number . '(WAP)');
             $_money = $_money + $card['amount'];
             wap_msg($L['charge_success'], $forward);
         } else {
             wap_msg($L['not_card_number']);
         }
     } else {
         $head_title = $L['card_charge'] . $DT['seo_delimiter'] . $head_title;
         include template('charge', $TP);
     }
     break;
 case 'message_send':
     if (!$_userid) {
         wap_msg($L['please_login'], 'index.php?moduleid=' . $moduleid . '&amp;action=login');
     }
     if ($submit) {

        $buyer_name = htmlspecialchars($user['truename']);
        $buyer_phone = htmlspecialchars($user['telephone']);
        $buyer_receive = '';
    }
    $buyer_mobile = htmlspecialchars($add['mobile']);
    is_mobile($buyer_mobile) or message($L['msg_type_mobile']);
    $number = intval($number);
    if ($number < 1) {
        $number = 1;
    }
    $amount = $number * $item['price'];
    if ($amount > $_money) {
        message($L['need_charge'], 'charge.php?action=pay&amount=' . ($amount - $_money));
    }
    money_add($_username, -$amount);
    money_record($_username, -$amount, $L['in_site'], 'system', $L['group_order_credit'], 'ID(' . $itemid . ')');
    $note = htmlspecialchars($note);
    $title = addslashes($item['title']);
    $password = strtolower(random(6));
    $db->query("INSERT INTO {$DT_PRE}group_order (gid,buyer,seller,title,thumb,price,number,amount,logistic,addtime,updatetime,note,password, buyer_postcode,buyer_address,buyer_name,buyer_phone,buyer_mobile,buyer_receive) VALUES ('{$itemid}','{$_username}','{$item['username']}','{$title}','{$item['thumb']}','{$item['price']}','{$number}','{$amount}','{$item['logistic']}','{$DT_TIME}','{$DT_TIME}','{$note}','{$password}','{$buyer_postcode}','{$buyer_address}','{$buyer_name}','{$buyer_phone}','{$buyer_mobile}','{$buyer_receive}')");
    //send sms
    if ($DT['sms'] && !$item['logistic']) {
        $oid = $db->insert_id();
        $message = lang('sms->ord_group', array($item['title'], $oid, $password));
        $message = strip_sms($message);
        send_sms($buyer_mobile, $message);
    }
    //send sms
    $db->query("UPDATE {$DT_PRE}group SET orders=orders+1,sales=sales+{$number} WHERE itemid={$itemid}");
    message($L['msg_buy_success'], $MODULE[2]['linkurl'] . 'group.php?action=order', 3);
} else {

             $chart_data .= ';' . $num;
             $T4 += $num;
         }
         $title = $year . '年会员充值统计报表';
     }
     include tpl('charge_stats', $module);
     break;
 case 'check':
     $itemid or msg('请选择记录');
     $itemid = implode(',', $itemid);
     $result = $db->query("SELECT * FROM {$table} WHERE itemid IN ({$itemid}) AND status<2");
     $i = 0;
     while ($r = $db->fetch_array($result)) {
         $money = $r['amount'] + $r['fee'];
         money_add($r['username'], $r['amount']);
         money_record($r['username'], $r['amount'], $PAY[$r['bank']]['name'], $_username, '在线充值', '人工');
         $db->query("UPDATE {$table} SET money='{$money}',status=4,editor='{$_username}',receivetime={$DT_TIME} WHERE itemid={$r['itemid']}");
         $i++;
     }
     dmsg('审核成功' . $i . '条记录', $forward);
     break;
 case 'recycle':
     $itemid or msg('请选择记录');
     $itemid = implode(',', $itemid);
     $db->query("UPDATE {$table} SET status=2,editor='{$_username}',receivetime={$DT_TIME} WHERE itemid IN ({$itemid}) AND status=0");
     dmsg('作废成功' . $db->affected_rows() . '条记录', $forward);
     break;
 case 'delete':
     $itemid or msg('请选择记录');
     $itemid = implode(',', $itemid);
     $db->query("DELETE FROM {$table} WHERE itemid IN ({$itemid}) AND status=0");

     }
     $head_title = $L['credit_exchange_title'];
     break;
 case 'buy':
     if ($MOD['credit_buy'] && $MOD['credit_price']) {
         $C = explode('|', trim($MOD['credit_buy']));
         $P = explode('|', trim($MOD['credit_price']));
         if ($submit) {
             is_payword($_username, $password) or message($L['error_payword']);
             array_key_exists($type, $C) or message($L['credit_msg_buy_amount']);
             $amount = $P[$type];
             $credit = $C[$type];
             if ($amount > 0) {
                 $_money >= $amount or message($L['money_not_enough'], 'charge.php?action=pay&reason=credit&amount=' . ($amount - $_money));
                 money_add($_username, -$amount);
                 money_record($_username, -$amount, $L['in_site'], 'system', $L['buy'] . $DT['credit_name'], $credit . $DT['credit_unit']);
                 if ($credit > 0) {
                     credit_add($_username, $credit);
                     credit_record($_username, $credit, 'system', $L['buy'] . $DT['credit_name'], $amount . $DT['money_unit']);
                 }
             }
             dmsg($L['credit_msg_buy_success'], $forward ? $forward : '?action=index');
         } else {
             $select = isset($C[$sum]) ? $sum : 0;
         }
     } else {
         message($L['feature_close'], '?action=index');
     }
     $head_title = $L['credit_buy_title'];
     break;
 case 'invite':

                     money_add($_username, -$amount);
                     money_record($_username, -$amount, $L['in_site'], 'system', $L['grade_title'], $GROUP[$groupid]['groupname']);
                 } else {
                     $amount = 0;
                 }
             } else {
                 $promo_amount = $fee;
                 $amount = 0;
             }
         }
         $db->query("UPDATE {$DT_PRE}finance_promo SET username='{$_username}',ip='{$DT_IP}'," . ($p['reuse'] ? "updatetime=updatetime+1" : "updatetime='{$DT_TIME}'") . " WHERE number='{$promo_code}'");
     } else {
         if ($_money > $fee) {
             $amount = $fee;
             money_add($_username, -$amount);
             money_record($_username, -$amount, $L['in_site'], 'system', $L['grade_title'], $GROUP[$groupid]['groupname']);
         }
     }
 }
 $company = htmlspecialchars(trim($company));
 $truename = htmlspecialchars(trim($truename));
 $telephone = htmlspecialchars(trim($telephone));
 $mobile = htmlspecialchars(trim($mobile));
 $email = htmlspecialchars(trim($email));
 $msn = htmlspecialchars(trim($msn));
 $qq = htmlspecialchars(trim($qq));
 $ali = htmlspecialchars(trim($ali));
 $skype = htmlspecialchars(trim($skype));
 $content = htmlspecialchars(trim($content));
 $db->query("INSERT INTO {$DT_PRE}upgrade (userid,username,groupid,company,truename,telephone,mobile,email,msn,qq,ali,skype,content,addtime,ip,amount,promo_code,promo_type,promo_amount,status) VALUES ('{$_userid}','{$_username}', '{$groupid}','{$company}','{$truename}','{$telephone}','{$mobile}','{$email}','{$msn}','{$qq}','{$ali}','{$skype}','{$content}', '{$DT_TIME}', '{$DT_IP}','{$amount}','{$promo_code}','{$promo_type}','{$promo_amount}','2')");
 message($L['grade_msg_success'], DT_PATH, 5);

 //批量付款
 if ($submit) {
     $itemid && is_array($itemid) or message($L['trade_msg_muti_choose']);
     is_payword($_username, $password) or message($L['error_payword']);
     $itemids = implode(',', $itemid);
     $condition = "buyer='{$_username}' AND status=1 AND itemid IN ({$itemids})";
     $result = $db->query("SELECT * FROM {$table} WHERE {$condition} ORDER BY itemid DESC LIMIT 50");
     while ($td = $db->fetch_array($result)) {
         $itemid = $td['itemid'];
         $money = $td['amount'] + $td['fee'];
         if ($_money < $money) {
             break;
         }
         $seller = userinfo($td['seller']);
         money_add($_username, -$money);
         money_record($_username, -$money, $L['in_site'], 'system', $L['trade_pay_order_title'], $L['trade_order_id'] . ':' . $itemid);
         $db->query("UPDATE {$table} SET status=2,updatetime={$DT_TIME} WHERE itemid={$itemid}");
         $_money = $_money - $money;
         $touser = $td['seller'];
         $title = lang($L['trade_message_t2'], array($itemid));
         $url = $memberurl . 'trade.php?itemid=' . $itemid;
         $content = lang($L['trade_message_c2'], array($myurl, $_username, $timenow, $url));
         $content = ob_template('messager', 'mail');
         send_message($touser, $title, $content);
         //send sms
         if ($DT['sms'] && $_sms && $touser && isset($sendsms)) {
             $touser = userinfo($touser);
             if ($touser['mobile']) {
                 $message = lang('sms->ord_pay', array($itemid, $money));
                 $message = strip_sms($message);
                 $word = word_count($message);

     }
     $vip['username'] = trim($vip['username']);
     $money = dround($money);
     $credit = intval($credit);
     $sms = intval($sms);
     $usernames = explode("\n", trim($vip['username']));
     foreach ($usernames as $username) {
         $username = trim($username);
         if (!$username) {
             continue;
         }
         $vip['username'] = $username;
         $do->vip_edit($vip);
         if ($money) {
             money_add($username, $money);
             money_record($username, $money, '站内', $_username, $reason, $GROUP[$vip['groupid']]['groupname']);
         }
         if ($credit) {
             credit_add($username, $credit);
             credit_record($username, $credit, $_username, $reason, $GROUP[$vip['groupid']]['groupname']);
         }
         if ($sms) {
             sms_add($username, $sms);
             sms_record($username, $sms, $_username, $reason, $GROUP[$vip['groupid']]['groupname']);
         }
     }
     dmsg('添加成功', $this_forward);
 } else {
     isset($username) or $username = '';
     if (isset($userid)) {
         if ($userid) {

<?php

defined('IN_DESTOON') or exit('Access Denied');
login();
require DT_ROOT . '/module/' . $module . '/common.inc.php';
require DT_ROOT . '/include/post.func.php';
require MD_ROOT . '/member.class.php';
$do = new member();
$do->userid = $_userid;
$user = $do->get_one();
if (!$MG['vip'] || !$MG['fee'] || $user['totime'] < $DT_TIME) {
    dheader($MOD['linkurl']);
}
if ($submit) {
    is_payword($_username, $password) or message($L['error_payword']);
    $year = intval($year);
    in_array($year, array(1, 2, 3)) or $year = 1;
    $fee = dround($MG['fee'] * $year);
    $fee > 0 or message($L['renew_msg_fee']);
    $fee <= $_money or message($L['money_not_enough'], $MOD['linkurl'] . 'charge.php?action=pay&amount=' . ($fee - $_money));
    $totime = $user['totime'] + 365 * 86400 * $year;
    money_add($_username, -$fee);
    money_record($_username, -$fee, $L['in_site'], 'system', $L['renew_title'], lang($L['renew_record'], array($year, timetodate($totime, 3))));
    $db->query("UPDATE {$DT_PRE}company SET totime={$totime} WHERE userid={$_userid}");
    dmsg($L['renew_msg_success'], $MOD['linkurl']);
} else {
    $head_title = $L['renew_title'];
    $havedays = ceil(($user['totime'] - $DT_TIME) / 86400);
    $todate = timetodate($user['totime'], 3);
    include template('renew', $module);
}

            credit_record($username, $fee_back, 'system', $L['pay_record_back'], $note);
        }
        dheader($forward);
    } else {
        dheader($MOD['linkurl'] . 'credit.php?action=buy');
    }
}
$discount = $MG['discount'] > 0 && $MG['discount'] < 100 ? $MG['discount'] : 100;
$discount = dround($discount / 100);
if ($submit) {
    is_payword($_username, $password) or message($L['error_payword']);
    $fee = dround($fee * $discount);
    $fee > 0 or message($L['pay_msg_fee']);
    $fee <= $_money or dheader($MOD['linkurl'] . 'charge.php?action=pay&amount=' . ($fee - $_money));
    $db->query("INSERT INTO {$DT_PRE}finance_pay (moduleid,itemid,username,fee,currency,paytime,ip,title) VALUES ('{$mid}','{$itemid}','{$_username}','{$fee}','{$currency}','{$DT_TIME}','{$DT_IP}','" . addslashes($title) . "')");
    money_add($_username, -$fee);
    money_record($_username, -$fee, $L['in_site'], 'system', $L['pay_record_view'], $note);
    if ($username && $fee_back) {
        money_add($username, $fee_back);
        money_record($username, $fee_back, $L['in_site'], 'system', $L['pay_record_back'], $note);
    }
    dheader($forward);
} else {
    $head_title = $L['pay_title'];
    $amount = 100;
    $member_fee = dround($fee * $discount);
    if ($member_fee > $_money) {
        $amount = dround($member_fee - $_money);
    }
    include template('pay', $module);
}

     include tpl('cash_stats', $module);
     break;
 case 'edit':
     if ($item['status'] > 0) {
         msg('此申请已受理');
     }
     if ($submit) {
         isset($status) or msg('请指定受理结果');
         $money = $item['amount'] + $item['fee'];
         if ($status == 3) {
             //
         } else {
             if ($status == 2 || $status == 1) {
                 $note or msg('请填写原因备注');
                 money_add($item['username'], $money);
                 money_record($item['username'], $money, '站内', 'system', '提现失败', '流水号:' . $itemid);
             } else {
                 msg();
             }
         }
         $db->query("UPDATE {$table} SET status={$status},editor='{$_username}',edittime={$DT_TIME},note='{$note}' WHERE itemid={$itemid}");
         dmsg('受理成功', $forward);
     } else {
         include tpl('cash_edit', $module);
     }
     break;
 case 'show':
     if ($item['status'] == 0) {
         msg('申请尚未受理');
     }
     include tpl('cash_show', $module);

         msg('此交易无需受理');
     }
     if ($submit) {
         isset($status) or msg('请指定受理结果');
         $content or msg('请填写操作理由');
         if ($status == 6) {
             //已退款，买家胜 退款
             $db->query("UPDATE {$DT_PRE}member SET money=money+{$item['money']},locking=locking-{$item['money']} WHERE username='{$item['buyer']}'");
             $msg = '受理成功，交易状态已经改变为 已退款给买家';
         } else {
             if ($status == 7) {
                 //已退款，卖家胜 付款
                 $db->query("UPDATE {$DT_PRE}member SET locking=locking-{$item['money']} WHERE username='{$item['buyer']}'");
                 money_record($item['buyer'], -$item['money'], '站内', 'system', '订单货到付款', '订单号:' . $itemid);
                 money_add($item['seller'], $item['money']);
                 money_record($item['seller'], $item['money'], '站内', 'system', '订单货到付款', '订单号:' . $itemid);
                 $msg = '受理成功，交易状态已经改变为 已付款给卖家';
             } else {
                 msg();
             }
         }
         $db->query("UPDATE {$table} SET status={$status},editor='{$_username}',updatetime={$DT_TIME},refund_reason='{$content}' WHERE itemid={$itemid}");
         msg($msg, $forward, 5);
     } else {
         include tpl('order_refund', $module);
     }
     break;
 case 'show':
     $cm = $db->get_one("SELECT * FROM {$DT_PRE}mall_comment WHERE itemid={$itemid}");
     include tpl('order_show', $module);
     break;

             $r = $db->get_one("SELECT userid FROM {$DT_PRE}member WHERE mobile='{$mobile}' AND vmobile=1 AND userid<>{$_userid}");
             if ($r) {
                 message($L['validate_mobile_exist']);
             }
             if ($fee && $_sms < 1) {
                 $fee <= $_money or message($L['money_not_enough'], $MOD['linkurl'] . 'charge.php?action=pay');
                 is_payword($_username, $password) or dalert($L['error_payword']);
             }
             $auth = random(6, '0123456789');
             $content = lang('sms->sms_code', array($auth, $MOD['auth_days'])) . $DT['sms_sign'];
             $sms_code = send_sms($mobile, $content);
             if (strpos($sms_code, $DT['sms_ok']) !== false) {
                 if ($fee) {
                     if ($_sms < 1) {
                         money_add($_username, -$fee);
                         money_record($_username, -$fee, $L['in_site'], 'system', $L['validate_mobile_record'], $mobile);
                     } else {
                         sms_add($_username, -1);
                         sms_record($_username, -1, $_username, $L['validate_mobile_record'], $mobile);
                     }
                 }
                 $db->query("UPDATE {$DT_PRE}member SET auth='{$auth}',authvalue='{$mobile}',authtime='{$DT_TIME}' WHERE username='{$username}'");
                 dheader('?code=1&action=' . $action);
             } else {
                 message($L['send_mobile_fail']);
             }
         }
         include template('validate', $module);
     }
     break;
 case 'truename':

         if (!$username) {
             continue;
         }
         $r = $db->get_one("SELECT username,money FROM {$DT_PRE}member WHERE username='{$username}'");
         if (!$r) {
             $error .= '<br/>会员[' . $username . ']不存在';
             continue;
         }
         if (!$type && $r['money'] < abs($amount)) {
             $error .= '<br/>会员[' . $username . ']余额不足，当前余额为:' . $r['money'];
             continue;
         }
         $reason or $reason = '现金';
         $note or $note = '手工';
         money_add($username, $amount);
         money_record($username, $amount, $bank, $_username, $reason, $note);
         $success++;
     }
     if ($error) {
         message('操作成功 ' . $success . ' 位会员，发生以下错误：' . $error);
     }
     dmsg('操作成功', '?moduleid=' . $moduleid . '&file=' . $file);
 } else {
     if (isset($userid)) {
         if ($userid) {
             $userids = is_array($userid) ? implode(',', $userid) : $userid;
             $result = $db->query("SELECT username FROM {$DT_PRE}member WHERE userid IN ({$userids})");
             while ($r = $db->fetch_array($result)) {
                 $username .= $r['username'] . "\n";
             }
         }

 function add($member)
 {
     global $DT, $DT_TIME, $DT_IP, $MOD, $L;
     if (!$this->is_member($member)) {
         return false;
     }
     $member = $this->set_member($member);
     $member['linkurl'] = userurl($member['username']);
     $member['password'] = $member['payword'] = md5(md5($member['password']));
     $member['sound'] = 1;
     $member_fields = array('username', 'company', 'passport', 'password', 'payword', 'email', 'sound', 'gender', 'truename', 'mobile', 'msn', 'qq', 'ali', 'skype', 'department', 'career', 'groupid', 'regid', 'areaid', 'edittime', 'inviter');
     $company_fields = array('username', 'groupid', 'company', 'type', 'catid', 'catids', 'areaid', 'mode', 'capital', 'regunit', 'size', 'regyear', 'sell', 'buy', 'business', 'telephone', 'fax', 'mail', 'address', 'postcode', 'homepage', 'introduce', 'thumb', 'keyword', 'linkurl');
     $member_sqlk = $member_sqlv = $company_sqlk = $company_sqlv = '';
     foreach ($member as $k => $v) {
         if (in_array($k, $member_fields)) {
             $member_sqlk .= ',' . $k;
             $member_sqlv .= ",'{$v}'";
         }
         if (in_array($k, $company_fields)) {
             $company_sqlk .= ',' . $k;
             $company_sqlv .= ",'{$v}'";
         }
     }
     $member_sqlk = substr($member_sqlk, 1);
     $member_sqlv = substr($member_sqlv, 1);
     $company_sqlk = substr($company_sqlk, 1);
     $company_sqlv = substr($company_sqlv, 1);
     $this->db->query("INSERT INTO {$this->table_member} ({$member_sqlk},regip,regtime,loginip,logintime)  VALUES ({$member_sqlv},'{$DT_IP}','{$DT_TIME}','{$DT_IP}','{$DT_TIME}')");
     $this->userid = $this->db->insert_id();
     if (!$this->userid) {
         return 0;
     }
     $member['userid'] = $this->userid;
     $this->username = $member['username'];
     $this->db->query("INSERT INTO {$this->table_company} (userid, {$company_sqlk}) VALUES ('{$this->userid}', {$company_sqlv})");
     $content_table = content_table(4, $this->userid, is_file(DT_CACHE . '/4.part'), $this->table_company_data);
     $this->db->query("INSERT INTO {$content_table} (userid, content) VALUES ('{$this->userid}', '{$member['content']}')");
     if ($MOD['credit_register'] > 0) {
         credit_add($this->username, $MOD['credit_register']);
         credit_record($this->username, $MOD['credit_register'], 'system', $L['member_record_reg'], $DT_IP);
     }
     if ($MOD['money_register'] > 0) {
         money_add($this->username, $MOD['money_register']);
         money_record($this->username, $MOD['money_register'], $L['in_site'], 'system', $L['member_record_reg'], $DT_IP);
     }
     if ($MOD['sms_register'] > 0) {
         sms_add($this->username, $MOD['sms_register']);
         sms_record($this->username, $MOD['sms_register'], 'system', $L['member_record_reg'], $DT_IP);
     }
     return $this->userid;
 }

 $ad['fromtime'] = strtotime($post['fromtime']);
 $ad['totime'] = strtotime($post['fromtime']) + 86400 * 30 * $month;
 $ad['pid'] = $pid;
 $ad['typeid'] = $typeid;
 $ad['amount'] = $amount;
 $ad['currency'] = $currency;
 $ad['title'] = $post['fromtime'] . '(' . $_username . ')';
 $ad['introduce'] = timetodate($DT_TIME, 5) . ' ' . $L['ad_buy_paid'] . $amount . $unit;
 $ad['note'] = $post['note'] . ' - ' . $L['ad_buy_note'] . '(' . $DT_IP . ')';
 $ad['status'] = 2;
 $ad['username'] = $_username;
 $ad = dhtmlspecialchars($ad);
 if ($amount) {
     if ($currency == 'money') {
         money_add($_username, -$amount);
         money_record($_username, -$amount, $L['in_site'], 'system', $L['pay_in_site'], $p['name'] . $L['ad_buy_title'] . $month . $L['month']);
     } else {
         credit_add($_username, -$amount);
         credit_record($_username, -$amount, 'system', $p['name'] . $L['ad_buy_title'], $month . $L['month']);
     }
 }
 $sqlk = $sqlv = '';
 foreach ($ad as $k => $v) {
     $sqlk .= ',' . $k;
     $sqlv .= ",'{$v}'";
 }
 $sqlk = substr($sqlk, 1);
 $sqlv = substr($sqlv, 1);
 $db->query("INSERT INTO {$DT_PRE}ad ({$sqlk}) VALUES ({$sqlv})");
 $db->query("UPDATE {$DT_PRE}ad_place SET ads=ads+1 WHERE pid={$pid}");
 message($L['ad_buy_success'], '?status=2');

         }
         $title = $year . '年会员提现统计报表';
     }
     include tpl('cash_stats', $module);
     break;
 case 'edit':
     if ($item['status'] > 0) {
         msg('此申请已受理');
     }
     if ($submit) {
         isset($status) or msg('请指定受理结果');
         $money = $item['amount'] + $item['fee'];
         if ($status == 3) {
             money_lock($member['username'], -$money);
             money_record($member['username'], -$item['amount'], $item['bank'], $_username, '提现成功');
             money_record($member['username'], -$item['fee'], $item['bank'], $_username, '提现手续费');
         } else {
             if ($status == 2 || $status == 1) {
                 $note or msg('请填写原因备注');
                 money_lock($member['username'], -$money);
                 money_add($member['username'], $money);
             } else {
                 msg();
             }
         }
         $db->query("UPDATE {$table} SET status={$status},editor='{$_username}',edittime={$DT_TIME},note='{$note}' WHERE itemid={$itemid}");
         dmsg('受理成功', $forward);
     } else {
         include tpl('cash_edit', $module);
     }
     break;