function birthday_comment()
{
    ?>
          
          <div class="mdl-card mdl-shadow--4dp mdl-cell mdl-cell--12-col">
            <style>
              .demo-blog--blogpost .demo-blog__posts > .mdl-card .mdl-card__media 
              {
                /*background-image: url('images/road_big.jpg');*/
                height: 100px;
              }
            </style>
              
            <div class="mdl-card__media mdl-color-text--grey-50">
                <h3><?php 
    echo "Wish your Friend";
    ?>
</h3>
            </div>

            <div class="mdl-color-text--primary-contrast mdl-card__supporting-text comments">
              <?php 
    // including the birthday_wish forum
    if (islogin()) {
        $comment = $_POST['comment'];
        if (isset($comment) && !empty($comment)) {
            $comobj = new birthday();
            $comobj->get_comment($uid, $comment);
            $comobj->check_exist();
            $comobj->add_comment();
        }
    }
    include 'core.php';
    include 'birthday_wish.form.php';
    // including the comments
    include 'birthday_wish.func.php';
    include 'dbms/dbms_imp.php';
    $today = date('Y-m-d');
    $resultc = $connection->query("SELECT * FROM `bd_comments` WHERE `date`='{$today}' ORDER BY `bcid` DESC");
    if (!$resultc) {
        echo "Comment loading failed" . mysqli_error($connection) . "<br/> Report it to Developers";
    }
    while ($rows = $resultc->fetch_array()) {
        $comm = new birthday($rows[0]);
        birthday_wish($comm);
    }
    mysqli_close($connection);
    ?>
            </div>
          </div>
<?php 
}

function DelMsg_all($mid)
{
    global $empire, $dbtbpre;
    $user = islogin();
    $count = count($mid);
    if (!$count) {
        printerror("EmptyDelMsg", "", 1);
    }
    for ($i = 0; $i < $count; $i++) {
        $add .= "mid='" . intval($mid[$i]) . "' or ";
    }
    $add = substr($add, 0, strlen($add) - 4);
    $sql = $empire->query("delete from {$dbtbpre}enewsqmsg where (" . $add . ") and to_username='{$user['username']}'");
    if ($sql) {
        $num = $empire->gettotal("select count(*) as total from {$dbtbpre}enewsqmsg where to_username='{$user['username']}' and haveread=0 limit 1");
        if (!$num) {
            $newhavemsg = eReturnSetHavemsg($user['havemsg'], 0);
            $newhavemsg = $newhavemsg == 2 || $newhavemsg == 3 ? 2 : 0;
            $empire->query("update " . eReturnMemberTable() . " set " . egetmf('havemsg') . "='{$newhavemsg}' where " . egetmf('userid') . "='{$user['userid']}'");
        }
        printerror("DelMsgSuccess", "../member/msg/", 1);
    } else {
        printerror("DbError", "", 1);
    }
}

 public function run(&$params)
 {
     //
     //判断当前访问的url在不在这个数组中,如果在就直接访问
     $accessarr = array('Login/login', 'Login/logout');
     $requestURL = CONTROLLER_NAME . '/' . ACTION_NAME;
     if (in_array($requestURL, $accessarr)) {
         return;
     }
     //判断用户是否登录,如果未登录直接重定向到登录页面
     if (!islogin()) {
         $loginService = D('Login', 'Service');
         $loginService->autoLogin();
         redirect(U('Login/login'), 1, '请登陆!');
         exit;
     }
     //判断是否是超级管理员
     if (isSuperUser()) {
         return;
     }
     //最后在判断是否有访问某个控制器里方法的权限;
     $arr = userUrl();
     $arr = array_column($arr, 'url');
     if (!in_array($requestURL, $arr)) {
         echo "没有该权限";
         exit;
     }
 }

function AddGbook($add)
{
    global $empire, $dbtbpre, $level_r, $public_r;
    //验证IP
    eCheckAccessDoIp('gbook');
    CheckCanPostUrl();
    //验证来源
    $bid = (int) getcvar('gbookbid');
    if (empty($bid)) {
        $bid = intval($add[bid]);
    }
    $name = RepPostStr(trim($add[name]));
    $email = RepPostStr($add[email]);
    $call = RepPostStr($add[call]);
    $lytext = RepPostStr($add[lytext]);
    if (empty($bid) || empty($name) || empty($email) || !trim($lytext)) {
        printerror("EmptyGbookname", "history.go(-1)", 1);
    }
    if (!chemail($email)) {
        printerror("EmailFail", "history.go(-1)", 1);
    }
    //验证码
    $keyvname = 'checkgbookkey';
    if ($public_r['gbkey_ok']) {
        ecmsCheckShowKey($keyvname, $add['key'], 1);
    }
    $lasttime = getcvar('lastgbooktime');
    if ($lasttime) {
        if (time() - $lasttime < $public_r['regbooktime']) {
            printerror("GbOutTime", "", 1);
        }
    }
    //版面是否存在
    $br = $empire->fetch1("select bid,checked,groupid from {$dbtbpre}enewsgbookclass where bid='{$bid}';");
    if (empty($br[bid])) {
        printerror("EmptyGbook", "history.go(-1)", 1);
    }
    //权限
    if ($br['groupid']) {
        $user = islogin();
        if ($level_r[$br[groupid]][level] > $level_r[$user[groupid]][level]) {
            printerror("HaveNotEnLevel", "history.go(-1)", 1);
        }
    }
    $lytime = date("Y-m-d H:i:s");
    $ip = egetip();
    $userid = (int) getcvar('mluserid');
    $username = RepPostVar(getcvar('mlusername'));
    $sql = $empire->query("insert into {$dbtbpre}enewsgbook(name,email,`call`,lytime,lytext,retext,bid,ip,checked,userid,username) values('{$name}','{$email}','{$call}','{$lytime}','{$lytext}','','{$bid}','{$ip}','{$br['checked']}','{$userid}','{$username}');");
    ecmsEmptyShowKey($keyvname);
    //清空验证码
    if ($sql) {
        esetcookie("lastgbooktime", time(), time() + 3600 * 24);
        //设置最后发表时间
        $reurl = DoingReturnUrl("../tool/gbook/?bid={$bid}", $add['ecmsfrom']);
        printerror("AddGbookSuccess", $reurl, 1);
    } else {
        printerror("DbError", "history.go(-1)", 1);
    }
}

 public function updateUser()
 {
     $user_id = session('user_id');
     if (!islogin()) {
         $this->error('您还未登录', U('User/login'));
     }
     //显示当前个人信息
     $user = M('InfoUser');
     $temp = $user->where("user_id = '{$user_id}'")->getField('user_email,user_phone,user_address,user_name');
     $userdata = current($temp);
     $this->assign("userdata", $userdata);
     if (IS_POST) {
         $data['user_id'] = session('user_id');
         $data['user_phone'] = I('user_phone');
         $data['user_address'] = I('user_address');
         $data['user_email'] = I('user_email');
         $user = new InfoUserModel();
         $result = $user->updateUserInfo($data);
         if ($result) {
             $this->success("修改成功");
         } else {
             $this->error($user->getError());
         }
     } else {
         $this->display();
     }
 }

function getProjectList()
{
    if (islogin()) {
        return getProjectListFromDB($_SESSION['ID']);
    } else {
        echo "Please login first!";
    }
}

 public function index()
 {
     if (islogin() && $_SESSION["user_level"] == 2) {
         $this->display();
     } else {
         $this->redirect('Home/User/login');
     }
 }

function MemberConnect_DelBind($id)
{
    global $empire, $dbtbpre, $public_r;
    $user_r = islogin();
    //是否登陆
    $id = (int) $id;
    $sql = $empire->query("delete from {$dbtbpre}enewsmember_connect where id='{$id}' and userid='{$user_r['userid']}';");
    if ($sql) {
        printerror2("已解除绑定", "../memberconnect/ListBind.php");
    } else {
        printerror("DbError", "history.go(-1)", 1);
    }
}

function DoSetSpace($add)
{
    global $empire, $dbtbpre;
    $user_r = islogin();
    //是否登陆
    $spacename = RepPostStr($add['spacename']);
    $spacegg = RepPostStr($add['spacegg']);
    $sql = $empire->query("update {$dbtbpre}enewsmemberadd set spacename='{$spacename}',spacegg='{$spacegg}' where userid='{$user_r['userid']}' limit 1");
    if ($sql) {
        printerror('SetSpaceSuccess', 'SetSpace.php', 1);
    } else {
        printerror('DbError', '', 1);
    }
}

function ShowPayfs($payfsid, $r, $price)
{
    global $empire, $public_r, $dbtbpre, $totalr, $shoppr;
    $payfsid = (int) $payfsid;
    $add = $empire->fetch1("select payid,payname,payurl,paysay,userpay,userfen from {$dbtbpre}enewsshoppayfs where payid='{$payfsid}' and isclose=0");
    if (empty($add[payid])) {
        printerror('请选择支付方式', '', 1, 0, 1);
    }
    //总金额
    $buyallmoney = $totalr['totalmoney'] + $price - $totalr['pretotal'];
    if ($add[userfen] && $r[fp]) {
        printerror("FenNotFp", "history.go(-1)", 1);
    }
    //发票
    if ($r[fp]) {
        $fptotal = ($totalr['totalmoney'] - $totalr['pretotal']) * ($shoppr[fpnum] / 100);
        $afp = "+发票费(" . $fptotal . ")";
        $buyallmoney += $fptotal;
    }
    $buyallfen = $totalr['totalfen'] + $price;
    $returntotal = "采购总额(" . $totalr['totalmoney'] . ")+配送费(" . $price . ")" . $afp . "-优惠(" . $totalr['pretotal'] . ")=总额(<b>" . $buyallmoney . " 元</b>)";
    $mytotal = "结算总金额为:<b><font color=red>" . $buyallmoney . " 元</font></b> 全部";
    //是否登陆
    if ($add[userfen] || $add[userpay]) {
        if (!getcvar('mluserid')) {
            printerror("NotLoginTobuy", "history.go(-1)", 1);
        }
        $user = islogin();
        //点数购买
        if ($add[userfen]) {
            if ($buyallfen > $user[userfen]) {
                printerror("NotEnoughFenBuy", "history.go(-1)", 1);
            }
            $returntotal = "采购总点数(" . $totalr['totalfen'] . ")+配送点数费(" . $price . ")=总点数(<b>" . $buyallfen . " 点</b>)";
            $mytotal = "结算总点数为:<b><font color=red>" . $buyallfen . " 点</font></b> 全部";
        } else {
            if ($buyallmoney > $user[money]) {
                printerror("NotEnoughMoneyBuy", "history.go(-1)", 1);
            }
        }
    }
    echo "<table width='100%' border=0 align=center cellpadding=3 cellspacing=1><tr><td>" . $add[payname] . "</td></tr></table>";
    $return[0] = $returntotal;
    $return[1] = $mytotal;
    return $return;
}

 public function index()
 {
     islogin();
     $this->assign('searchurl', U('Search/index'));
     $model = new \Home\Model\MovieModel();
     $account = M('account');
     $user_id = getUserId();
     //var_dump($user_id);
     $join = ['left join schedule on schedule.schedule_id=account.schedule_id', 'left join movie on movie.movie_id=schedule.movie_id'];
     $userinfo = $model->select('user', 'user_id=' . $user_id);
     $where = 'account.user_id=' . $user_id;
     $filed = 'account_id,user_id,buy_time,schedule.schedule_id,name,schedule.movie_id,date,price';
     $records = $account->join($join)->where($where)->field($filed)->select();
     //var_dump($userinfo);
     $this->assign('records', $records);
     $this->assign('userinfo', $userinfo[0]);
     $this->display();
 }

function EditInfo($post)
{
    global $empire, $dbtbpre, $public_r;
    $user_r = islogin();
    //是否登陆
    $userid = $user_r[userid];
    $username = $user_r[username];
    $dousername = $username;
    $rnd = $user_r[rnd];
    $groupid = $user_r[groupid];
    if (!$userid || !$username) {
        printerror("NotEmpty", "history.go(-1)", 1);
    }
    //验证附加表必填项
    $addr = $empire->fetch1("select * from {$dbtbpre}enewsmemberadd where userid='{$userid}'");
    $user_r = $empire->fetch1("select " . eReturnSelectMemberF('groupid') . " from " . eReturnMemberTable() . " where " . egetmf('userid') . "='{$userid}'");
    $fid = GetMemberFormId($user_r['groupid']);
    if (empty($addr[userid])) {
        $mr['add_filepass'] = $userid;
        $member_r = ReturnDoMemberF($fid, $post, $mr, 0, $dousername);
    } else {
        $addr['add_filepass'] = $userid;
        $member_r = ReturnDoMemberF($fid, $post, $addr, 1, $dousername);
    }
    //附加表
    if (empty($addr[userid])) {
        //IP
        $regip = egetip();
        $regipport = egetipport();
        $lasttime = time();
        $sql = $empire->query("insert into {$dbtbpre}enewsmemberadd(userid,regip,lasttime,lastip,loginnum,regipport,lastipport" . $member_r[0] . ") values('{$userid}','{$regip}','{$lasttime}','{$regip}',1,'{$regipport}','{$regipport}'" . $member_r[1] . ");");
    } else {
        $sql = $empire->query("update {$dbtbpre}enewsmemberadd set userid='{$userid}'" . $member_r[0] . " where userid='{$userid}'");
    }
    //更新附件
    UpdateTheFileEditOther(6, $userid, 'member');
    if ($sql) {
        printerror("EditInfoSuccess", "../member/EditInfo/", 1);
    } else {
        printerror("DbError", "history.go(-1)", 1);
    }
}

 public function index()
 {
     islogin();
     $id = I('get.schedule_id');
     $allcss = ['ticket'];
     $model = new \Home\Model\MovieModel();
     $join = [' movie on movie.movie_id=schedule.movie_id '];
     $seat = $model->select('account', ' schedule_id=' . $id);
     $movieInfo = $model->select('schedule', ' schedule_id=' . $id, '', $join);
     //var_dump($movieInfo);
     //var_dump($seat);
     $this->assign('movieInfo', $movieInfo[0]);
     $this->assign('schedule_id', $id);
     $this->assign('seat', $seat);
     $this->assign('movieurl', U('Movie/index'));
     $this->assign('searchurl', U('Search/index'));
     $this->assign('allcss', $allcss);
     $this->assign('buy', U('buy'));
     $this->assign('user', U('user/index'));
     $this->display();
 }

function DelMemberGbook_All($add)
{
    global $empire, $dbtbpre;
    $user_r = islogin();
    //ÊÇ·ñµÇ½
    $gid = $add['gid'];
    $count = count($gid);
    if (empty($count)) {
        printerror("NotDelMemberGbookid", "history.go(-1)", 1);
    }
    for ($i = 0; $i < $count; $i++) {
        $addsql .= "gid='" . intval($gid[$i]) . "' or ";
    }
    $addsql = substr($addsql, 0, strlen($addsql) - 4);
    $sql = $empire->query("delete from {$dbtbpre}enewsmembergbook where (" . $addsql . ") and userid='{$user_r['userid']}'");
    if ($sql) {
        printerror("DelMemberGbookSuccess", $_SERVER['HTTP_REFERER'], 1);
    } else {
        printerror("DbError", "history.go(-1)", 1);
    }
}

            }
        }
    }
    return FALSE;
}
if ($_POST['login'] && $_POST['passwd'] && $_POST['submit']) {
    $login = $_POST['login'];
    $passwd = $_POST['passwd'];
    $submit = $_POST['submit'];
    if ($submit === "OK") {
        if (!file_exists("../private/passwd")) {
            mkdir("../private", 0755);
            $chain = $chain . serialize("{") . serialize("login") . serialize($login) . serialize("passwd") . serialize(hash("whirlpool", $passwd)) . serialize("}") . "\n";
            file_put_contents("../private/passwd", $chain);
        } else {
            $chain = file_get_contents("../private/passwd");
            if (!islogin($login, $chain)) {
                $chain = $chain . serialize("{") . serialize("login") . serialize($login) . serialize("passwd") . serialize(hash("whirlpool", $passwd)) . serialize("}");
                file_put_contents("../private/passwd", $chain . "\n");
            } else {
                echo "ERROR" . "\n";
                exit;
            }
        }
        echo $submit . "\n";
    } else {
        echo "ERROR" . "\n";
    }
} else {
    echo "ERROR" . "\n";
}

<?php 
// including the header of the document
require 'header.php';
// including the blog layout
?>
<div>
    <div class="demo-blog demo-blog--blogpost mdl-layout mdl-js-layout has-drawer is-upgraded">
      <main class="mdl-layout__content">
        <!--<div class="demo-back">
          <a class="mdl-button mdl-js-button mdl-js-ripple-effect mdl-button--icon" href="index.html" title="go back" role="button">
            <i class="material-icons" role="presentation">arrow_back</i>
          </a>
        </div>-->
        <div class="demo-blog__posts mdl-grid">    
          <?php 
if (islogin()) {
    include 'display/functions/amazing.func.php';
    amazing($heading = 'Already loged in', $content = 'It seems You are already loged in.<br/>No need to login Again. :)', $link = '#');
} else {
    //login forum
    include 'display/functions/login.func.php';
    login($message = '');
}
?>
          <!--navigation panel for large database-->
        </div>
    <?php 
require 'footer.php';
?>
      </main>
      <!--<div class="mdl-layout__obfuscator"></div>-->

function loginout1($userid, $username, $rnd)
{
    global $empire, $public_r, $equiturl;
    //是否登陆
    $user_r = islogin();
    if ($equiturl) {
        Header("Location:{$equiturl}");
        exit;
    }
    EmptyEcmsCookie();
    $dopr = 1;
    if ($_GET['prtype']) {
        $dopr = 9;
    }
    $gotourl = "../../";
    if (strstr($_SERVER['HTTP_REFERER'], "e/member/iframe")) {
        $gotourl = $public_r['newsurl'] . "e/member/iframe/";
    }
    $gotourl = DoingReturnUrl($gotourl, $_GET['ecmsfrom']);
    printerror("ExitSuccess", $gotourl, $dopr);
}

<?php

require "../lib/lib_teamcalendar.php";
if (!islogin()) {
    header("Location: ../index.php");
}
$pdo = pdoconnect();
$stmt = $pdo->prepare("DELETE FROM `request` WHERE `requestid` = :requestid");
$stmt->bindParam(':requestid', $_REQUEST['requestid']);
$stmt->execute();

<?php

require 'class/connect.php';
require 'class/db_sql.php';
require 'class/functions.php';
require LoadLang('f.php');
$phome = $_GET['phome'];
if (empty($phome)) {
    $phome = $_POST['phome'];
}
//怫
if ($phome == "login" || $phome == "ChangeLanguage") {
} else {
    $lur = islogin();
    $loginin = $lur['username'];
    $rnd = $lur['rnd'];
}
if ($phome == "SetDb" || $phome == "DoRep" || $phome == "DoOpi" || $phome == "DoDrop" || $phome == "DropDb" || $phome == "CreateDb" || $phome == "EmptyTable" || $phome == "DoSave" || $phome == "DoDelSave" || $phome == "DelBakpath" || $phome == "DelZip" || $phome == "DoExecSql" || $phome == "DoTranExecSql" || $phome == "RepPathFiletext" || $phome == 'ReplaceTable') {
    include "class/combakfun.php";
}
if ($phome == "SetDb" || $phome == "login" || $phome == "exit" || $phome == "ChangeLanguage") {
} else {
    $link = db_connect();
    $empire = new mysqlquery();
}
if ($phome == "SetDb") {
    Ebak_SetDb($_POST);
} elseif ($phome == "DoRep") {
    $tablename = $_POST['tablename'];
    $mydbname = $_POST['mydbname'];
    Ebak_Rep($tablename, $mydbname);

function ShopDdToPay($ddid)
{
    global $empire, $dbtbpre;
    $ddid = (int) $ddid;
    if (!$ddid) {
        printerror("NotShopDdId", "history.go(-1)", 1);
    }
    //是否登陆
    $user_r = islogin();
    $r = $empire->fetch1("select ddid,payfsid,haveprice from {$dbtbpre}enewsshopdd where ddid='{$ddid}' and userid='{$user_r['userid']}' limit 1");
    if (!$r['ddid']) {
        printerror("NotShopDdId", "history.go(-1)", 1);
    }
    if ($r['haveprice']) {
        printerror("ShopDdIdHavePrice", "history.go(-1)", 1);
    }
    if (empty($r['payfsid'])) {
        printerror("NotPayfsid", "history.go(-1)", 1);
    }
    //支付方式
    $payr = $empire->fetch1("select payid,payurl from {$dbtbpre}enewsshoppayfs where payid='{$r['payfsid']}'");
    if (!$payr['payid'] || !$payr['payurl']) {
        printerror("NotPayfsid", "history.go(-1)", 1);
    }
    $location = $payr['payurl'];
    esetcookie("paymoneyddid", $ddid, 0);
    Header("Refresh:0; URL={$location}");
}