//读取物流方式信息
    $get_delivery_id = 'select `id` from ' . $db->table('payment') . ' where `plugins`=\'' . $plugin . '\'';
    $delivery_id = $db->fetchOne($get_delivery_id);
    if ($delivery_id) {
        if ($db->autoDelete('payment', '`id`=' . $delivery_id)) {
            show_system_message('卸载支付插件成功');
        } else {
            show_system_message('系统繁忙，请稍后再试');
        }
    } else {
        show_system_message('插件已删除或不存在');
    }
    exit;
}
if ('edit' == $act) {
    $payment_id = intval(getGET('payment_id'));
    if ($payment_id <= 0) {
        show_system_message('参数错误');
    }
    $get_payment_plugins = 'select * from ' . $db->table('payment') . ' where `id`=' . $payment_id;
    $payment_plugins = $db->fetchRow($get_payment_plugins);
    if ($payment_plugins['configure']) {
        $payment_plugins['configure'] = unserialize($payment_plugins['configure']);
    }
    $plugin_path = ROOT_PATH . 'plugins/payment/';
    include $plugin_path . $payment_plugins['plugins'] . '.class.php';
    $payment_plugins['configures'] = $plugins[0]['configure'];
    assign('payment_plugins', $payment_plugins);
}
if ('view' == $act) {
    $plugin_path = ROOT_PATH . 'plugins/payment/';

            break;
        default:
            break;
    }
    //    $response['sql'] = $get_product_list;
    $product_list = $db->fetchAll($get_product_list);
    assign('product_list', $product_list);
    $response['content'] = $smarty->fetch('product-list-item.phtml');
    $response['error'] = 0;
    echo json_encode($response);
    exit;
}
if ($id < 0) {
    redirect('index.php');
}
$state = getGET('state');
$state_list = 'sale_amount|price|discount|star|add_time';
$state = check_action($state_list, $state);
if ('' == $state) {
    $state = 'price';
}
$filter = array();
$filter['id'] = $id;
$get_category_path = 'select `path` from ' . $db->table('category') . ' where `id`=' . $id;
$path = $db->fetchOne($get_category_path);
$get_category_ids = 'select `id` from ' . $db->table('category') . ' where `path` like \'' . $path . '%\' and `id` not in (' . $path . '0)';
$category_ids = $db->fetchAll($get_category_ids);
$category_ids_tmp = array();
$category_ids_str = '';
if ($category_ids) {
    foreach ($category_ids as $key => $val) {

        show_system_message('参数错误');
    } else {
        $recharge_sn = $db->escape($recharge_sn);
    }
    $get_recharge = 'select * from ' . $db->table('recharge') . ' where `recharge_sn`=\'' . $recharge_sn . '\'';
    $recharge = $db->fetchRow($get_recharge);
    assign('recharge', $recharge);
}
if ('view' == $act) {
    $page = getGET('page');
    $count = getGET('count');
    $account = getGET('account');
    $begin_time = getGET('begin_time');
    $end_time = getGET('end_time');
    $status = getGET('status');
    $recharge_sn = getGET('recharge_sn');
    $where = ' where 1 ';
    if ($status != '' and $status >= 0) {
        $where .= ' and `status`=' . intval($status);
    } else {
        $status = -1;
    }
    if ($account != '') {
        $account = $db->escape($account);
        $where .= ' and `account`=\'' . $account . '\' ';
    }
    if ($begin_time != '') {
        $begin_time = strtotime($begin_time . ' 00:00:00');
        if ($begin_time) {
            $where .= ' and `recharge_sn`>=\'R' . intval($begin_time) . '000\'';
        }

         default:
             $and_where .= '';
             break;
     }
     assign('status', $status);
     assign('order_status', $status_str[$status - 1]);
 }
 $order_sn = trim(getGET('order_sn'));
 if ($order_sn) {
     $order_sn = $db->escape($order_sn);
     $and_where .= ' and order_sn like \'%' . $order_sn . '%\'';
 }
 assign('order_sn', $order_sn);
 //分页参数
 $page = intval(getGET('page'));
 $count = intval(getGET('count'));
 //获取总数
 $get_total = 'select count(*) from ' . $db->table('order_content') . ' as a';
 $get_total .= ' where a.business_account = \'' . $_SESSION['business_account'] . '\'';
 $get_total .= $and_where;
 $total = $db->fetchOne($get_total);
 $count = $count <= 0 ? 10 : $count;
 $total_page = ceil($total / $count);
 $page = $page > $total_page ? $total : $page;
 $page = $page <= 0 ? 1 : $page;
 $offset = ($page - 1) * $count;
 $get_content_list = 'select a.*, p.img from ' . $db->table('order_content') . ' as a';
 $get_content_list .= ' left join ' . $db->table('product') . ' as p on a.product_sn = p.product_sn';
 $get_content_list .= ' where a.business_account = \'' . $_SESSION['business_account'] . '\'';
 $get_content_list .= $and_where;
 $get_content_list .= ' order by id desc';

     $where .= ' and `recharge_sn`=\'' . $recharge_sn . '\'';
     $param_list .= '&recharge_sn=' . $recharge_sn;
 }
 $begin_time = trim(getGET('begin_time'));
 if ($begin_time != '' && ($begin_time = strtotime($begin_time . ' 00:00:00'))) {
     $where .= ' and `add_time`>=' . $begin_time;
     $param_list .= '&begin_time=' . date('Y-m-d', $begin_time);
 }
 $end_time = trim(getGET('end_time'));
 if ($end_time != '' && ($end_time = strtotime($end_time . ' 23:59:59'))) {
     $where .= ' and `add_time`<=' . $end_time;
     $param_list .= '&end_time=' . date('Y-m-d', $end_time);
 }
 $get_count = 'select count(*) from ' . $db->table('recharge') . ' where `account`=\'' . $_SESSION['account'] . '\' ' . $where . ' order by `add_time` DESC';
 //分页
 $page = intval(getGET('page'));
 if ($page == 0) {
     $page = 1;
 }
 $step = 20;
 //每页显示20条记录
 $limit = ($page - 1) * $step;
 $limit = ' limit ' . $limit . ',' . $step;
 $total_count = intval($db->fetchOne($get_count));
 $total_page = intval($total_count / $step);
 if ($total_count % $step) {
     $total_page++;
 }
 assign('total_page', $total_page);
 assign('total_count', $total_count);
 assign('page', $page);

    $get_business = 'select * from ' . $db->table('business');
    $get_business .= ' where business_account = \'' . $business_account . '\' and status = 1 limit 1';
    $business = $db->fetchRow($get_business);
    if (empty($business)) {
        show_system_message('商户不存在', array());
        exit;
    }
    assign('business_account', $business_account);
}
//认证信息驳回
if ('auth_reject' == $act) {
    if (!check_purview('pur_business_exam', $_SESSION['purview'])) {
        show_system_message('权限不足', array());
        exit;
    }
    $business_account = trim(getGET('account'));
    if ('' == $business_account) {
        show_system_message('参数错误', array());
        exit;
    }
    $business_account = $db->escape($business_account);
    $get_business = 'select * from ' . $db->table('business');
    $get_business .= ' where business_account = \'' . $business_account . '\' and status = 2 limit 1';
    $business = $db->fetchRow($get_business);
    if (empty($business)) {
        show_system_message('商户不存在', array());
        exit;
    }
    assign('business_account', $business_account);
}
$template .= $act . '.phtml';

<?php

/**
 * Created by PhpStorm.
 * User: apple
 * Date: 15/8/20
 * Time: 下午2:08
 */
include 'library/init.inc.php';
$sn = trim(getGET('sn'));
if ($sn == '') {
    header('Location: index.php');
    exit;
}
$get_order_info = 'select * from ' . $db->table('order') . ' where `order_sn`=\'' . $sn . '\'';
$order_info = $db->fetchRow($get_order_info);
$order_info['add_time'] = date('Y-m-d H:i:s', $order_info['add_time']);
$order_info['show_status'] = $lang['order']['status_' . $order_info['status']];
assign('order', $order_info);
$smarty->display('response.phtml');

    $price_list = $db->fetchAll($get_price_list);
    $price_list_json = array();
    if ($price_list) {
        foreach ($price_list as $index => $price) {
            $price_list_json[$price['level_id']] = $price;
        }
    }
    assign('price_list', $price_list_json);
    assign('price_list_json', json_encode($price_list_json));
    assign('product_sn', $product_sn);
}
if ('view' == $act) {
    $page = getGET('page');
    $count = getGET('count');
    $status = getGET('status');
    $product_sn = getGET('product_sn');
    $where = ' where 1 ';
    if ($status != '' and $status >= 0) {
        $where .= ' and `status`=' . intval($status);
    } else {
        $status = -1;
    }
    if ($product_sn != '') {
        $product_sn = $db->escape($product_sn);
        $where .= ' and `product_sn`=\'' . $product_sn . '\'';
    }
    $get_total = 'select count(*) from ' . $db->table('product') . $where;
    $total = $db->fetchOne($get_total);
    $count_expected = array(10, 25, 50, 100);
    $page = intval($page);
    $count = intval($count);

    $plugin_path = ROOT_PATH . 'plugins/express/';
    include $plugin_path . $plugin;
    $delivery_data = $plugins[0];
    $delivery_data['status'] = 1;
    $delivery_data['business_account'] = $_SESSION['business_account'];
    if ($db->autoInsert('delivery', array($delivery_data))) {
        $delivery_id = $db->get_last_id();
        $links = array(array('alt' => '设置配送区域', 'link' => 'express.php?act=delivery_area_set&delivery_id=' . $delivery_id));
        show_system_message('插件安装成功，请设置配送区域', $links);
    } else {
        show_system_message('系统繁忙，请稍后再试');
    }
    exit;
}
if ('uninstall' == $act) {
    $plugin = getGET('plugin');
    if ($plugin == '') {
        show_system_message('参数错误');
    }
    $plugin = $db->escape($plugin);
    //读取物流方式信息
    $get_delivery_id = 'select `id` from ' . $db->table('delivery') . ' where `plugins`=\'' . $plugin . '\' and `business_account`=\'' . $_SESSION['business_account'] . '\'';
    $delivery_id = $db->fetchOne($get_delivery_id);
    if ($delivery_id) {
        if ($db->autoDelete('delivery', '`id`=' . $delivery_id)) {
            //获取区域信息
            $get_area_id = 'select `id` from ' . $db->table('delivery_area') . ' where `delivery_id`=' . $delivery_id;
            $area_ids = $db->fetchAll($get_area_id);
            $area_str = '';
            foreach ($area_ids as $area) {
                $area_str .= $area['id'] . ',';

<?php

/**
 * PC端首页
 * @author winsen
 * @version 1.0.0
 */
include 'library/init.inc.php';
$action = 'info|password|super_password';
$act = check_action($action, getGET('act'), 'info');
if ('super_password' == $act) {
    assign('sub_title', '超级密码修改');
}
if ('password' == $act) {
    assign('sub_title', '密码修改');
}
if ('info' == $act) {
    assign('sub_title', '信息修改');
}
assign('act', $act);
$smarty->display('profile.phtml');

        case 'new':
            $get_product_list .= ' order by p.`add_time` DESC';
            break;
        default:
            break;
    }
    $product_list = $db->fetchAll($get_product_list);
    assign('product_list', $product_list);
    $response['content'] = $smarty->fetch('search-product-item.phtml');
    $response['error'] = 0;
    echo json_encode($response);
    exit;
}
$keyword = getGET('keyword');
$keyword = $db->escape($keyword);
$mode = getGET('mode');
$mode_list = 'shop|product';
$mode = check_action($mode_list, $mode);
if ($mode == '') {
    $mode = 'product';
}
if ($mode == 'product') {
    $now = time();
    $get_product_list = 'select p.`id`,p.`name`,if(p.`promote_end`>' . $now . ',p.`promote_price`,p.`price`) as `price`,p.`img`,p.`product_sn`,(select `account` from ' . $db->table('collection') . ' where `account`=\'' . $_SESSION['account'] . '\' and `product_sn`=p.`product_sn`) as collection from ' . $db->table('product') . ' as p where p.`status`=4 and p.`name` like \'%' . $keyword . '%\'';
    $product_list = $db->fetchAll($get_product_list);
    assign('product_list', $product_list);
    assign('keyword', $keyword);
    $filter = array();
    $filter['keyword'] = $keyword;
    //获取其他筛选条件
    $where = '`name` like \'%' . $keyword . '%\'';

    //输出
    $filename = date('YmdHis') . '奖金列表';
    header('Content-Type: application/vnd.ms-excel');
    header('Content-Disposition: attachment;filename="' . $filename . '.xls"');
    header('Cache-Control: max-age=0');
    $objWriter = PHPExcel_IOFactory::createWriter($excel, 'Excel5');
    $objWriter->save('php://output');
    exit;
}
if ('view' == $act) {
    $page = getGET('page');
    $count = getGET('count');
    $account = getGET('account');
    $type = intval(getGET('type'));
    $begin_time = getGET('begin_time');
    $end_time = getGET('end_time');
    $where = ' where 1 ';
    if ($type > 0) {
        $where .= ' and `type`=' . $type;
    }
    if ($account != '') {
        $account = $db->escape($account);
        $where .= ' and `account`=\'' . $account . '\' ';
    }
    if ($begin_time != '') {
        $begin_time = strtotime($begin_time . ' 00:00:00');
        if ($begin_time) {
            $where .= ' and `add_time`>=' . intval($begin_time);
        }
    }
    if ($end_time != '') {

<?php

/**
 * 首页
 * Created by PhpStorm.
 * User: apple
 * Date: 15/8/14
 * Time: 下午10:11
 */
include 'library/init.inc.php';
$operation = 'wechat|alipay|bank|cancel';
$opera = check_action($operation, getPOST('opera'));
$action = 'add|list';
$act = check_action($action, getGET('act'), 'add');
$template = 'recharge.phtml';
if ('cancel' == $opera) {
    $response = array('error' => 0, 'msg' => '');
    $withdraw_sn = getPOST('withdraw_sn');
    if ($withdraw_sn == '') {
        $response['msg'] = '000:参数错误';
    } else {
        $withdraw_sn = $db->escape($withdraw_sn);
    }
    if ($response['msg'] == '') {
        $db->begin();
        $check_withdraw = 'select * from ' . $db->table('recharge') . ' where `account`=\'' . $_SESSION['account'] . '\' and ' . ' `recharge_sn`=\'' . $withdraw_sn . '\' and `status`=1 for update;';
        if ($withdraw = $db->fetchRow($check_withdraw)) {
            $db->autoDelete('recharge', '`recharge_sn`=\'' . $withdraw_sn . '\'');
            $response['error'] = 0;
            $response['msg'] = '取消申请成功';
        } else {

            }
            break;
        default:
    }
}
if ('view' == $act) {
    if (!check_purview('pur_sysconf_view', $_SESSION['purview'])) {
        show_system_message('权限不足', array());
        exit;
    }
    $getSysconf = 'select `key`,`name`,`type`,`value`, `remark`, `group` from `' . DB_PREFIX . 'sysconf` where `group`=\'config\' order by `group` asc';
    $sysconf = $db->fetchAll($getSysconf);
    assign('sysconf', $sysconf);
}
if ('edit' == $act) {
    if (!check_purview('pur_sysconf_edit', $_SESSION['purview'])) {
        show_system_message('权限不足', array());
        exit;
    }
    $key = getGET('key');
    if ('' == $key) {
        show_system_message('参数错误', array());
    } else {
        $getSysconf = 'select `key`,`name`,`type`,`value` from `' . DB_PREFIX . 'sysconf`';
        $getSysconf .= ' where `key`=\'' . $key . '\'';
        assign('conf', $db->fetchRow($getSysconf));
    }
}
assign('act', $act);
$template .= $act . '.phtml';
$smarty->display($template);

        show_system_message('参数错误');
    } else {
        $withdraw_sn = $db->escape($withdraw_sn);
    }
    $get_withdraw = 'select * from ' . $db->table('withdraw') . ' where `withdraw_sn`=\'' . $withdraw_sn . '\'';
    $withdraw = $db->fetchRow($get_withdraw);
    assign('withdraw', $withdraw);
}
if ('view' == $act) {
    $page = getGET('page');
    $count = getGET('count');
    $account = getGET('account');
    $begin_time = getGET('begin_time');
    $end_time = getGET('end_time');
    $status = getGET('status');
    $apply_sn = getGET('withdraw_sn');
    $where = ' where 1 ';
    if ($status != '' and $status >= 0) {
        $where .= ' and `status`=' . intval($status);
    } else {
        $status = -1;
    }
    if ($account != '') {
        $account = $db->escape($account);
        $where .= ' and `account`=\'' . $account . '\' ';
    }
    if ($begin_time != '') {
        $begin_time = strtotime($begin_time . ' 00:00:00');
        if ($begin_time) {
            $where .= ' and `add_time`>=' . intval($begin_time);
        }

    exit;
}
if ('edit' == $act) {
    $account = trim(getGET('account'));
    if ($account == '') {
        show_system_message('参数错误');
    }
    $account = $db->escape($account);
    $get_user_info = 'select * from ' . $db->table('member') . ' where `account`=\'' . $account . '\'';
    $user_info = $db->fetchRow($get_user_info);
    assign('member_info', $user_info);
}
if ('view' == $act) {
    $page = getGET('page');
    $count = getGET('count');
    $account = getGET('account');
    $where = ' where 1 ';
    if ($account != '') {
        $account = $db->escape($account);
        $where .= ' and `account`=\'' . $account . '\' ';
    }
    $get_total = 'select count(*) from ' . $db->table('user') . $where;
    $total = $db->fetchOne($get_total);
    $count_expected = array(10, 25, 50, 100);
    $page = intval($page);
    $count = intval($count);
    if (!in_array($count, $count_expected)) {
        $count = 10;
    }
    $total_page = ceil($total / $count);
    $page = $page > $total_page ? $total_page : $page;

<?php

/**
 * Created by PhpStorm.
 * User: apple
 * Date: 15/9/16
 * Time: 下午2:04
 */
include 'library/init.inc.php';
$code = getGET('code');
$log->record_array($_GET);
if ($code != '') {
    $code = $db->escape($code);
    $url = $db->fetchOne('select `url` from ' . $db->table('short_link') . ' where `hash`=\'' . $code . '\'');
    $log->record($url . ',' . $_SERVER['REQUEST_URI']);
    $url = 'http://' . $_SERVER['HTTP_HOST'] . preg_replace('/d\\/[a-zA-Z].*$/', $url, $_SERVER['REQUEST_URI']);
    $log->record('target url:' . $url);
    if (is_weixin() && $_SESSION['openid'] == '') {
        $oathor_url = 'https://open.weixin.qq.com/connect/oauth2/authorize?appid=%s&redirect_uri=%s&response_type=code&scope=snsapi_userinfo&state=2048#wechat_redirect';
        $url = sprintf($oathor_url, $config['appid'], urlencode($url));
        redirect($url);
    } else {
        redirect($url);
    }
    exit;
}
$opera = getPOST('opera');
if ($opera == 'get_url') {
    $response = array('error' => 1, 'msg' => '');
    if (true || !check_cross_domain()) {
        $url = getPOST('url');

    if ($content) {
        show_system_message('当前帖子下有回复，不能删除', array());
        exit;
    }
    $delete_section = 'delete from `' . DB_PREFIX . 'forum` where `id`=' . $id . ' limit 1';
    if ($db->delete($delete_section)) {
        show_system_message('删除帖子成功', array());
        exit;
    } else {
        show_system_message('系统繁忙，请稍后再试', array());
        exit;
    }
}
if ('top' == $act) {
    if (!check_purview('pur_forum_edit', $_SESSION['purview'])) {
        show_system_message('权限不足', array());
        exit;
    }
    $id = getGET('id');
    $id = intval($id);
    $delete_section = 'update `' . DB_PREFIX . 'forum` set `is_top`=abs(1-`is_top`) where `id`=' . $id . ' limit 1';
    if ($db->update($delete_section)) {
        show_system_message('修改帖子成功', array());
        exit;
    } else {
        show_system_message('系统繁忙，请稍后再试', array());
        exit;
    }
}
$template .= $act . '.phtml';
$smarty->display($template);

<?php

/**
 * Created by PhpStorm.
 * User: apple
 * Date: 15/10/22
 * Time: 下午3:07
 */
include 'library/init.inc.php';
$business_account = getGET('business_account');
if ($business_account == '') {
    redirect('index.php');
    exit;
}
$business_account = $db->escape($business_account);
$get_business_info = 'select * from ' . $db->table('business') . ' where `business_account`=\'' . $business_account . '\'';
$business_info = $db->fetchRow($get_business_info);
assign('business_info', $business_info);
$smarty->display('map.phtml');

    }
    $delete_member = 'update ' . $db->table('member') . ' set status = 1  where account = \'' . $account . '\' limit 1';
    if ($db->update($delete_member)) {
        show_system_message('会员' . $account . '已撤销拉黑', array());
        exit;
    } else {
        show_system_message('系统繁忙，请稍后重试', array());
        exit;
    }
}
if ('network' == $act) {
    if (!check_purview('pur_member_network', $_SESSION['purview'])) {
        show_system_message('权限不足', array());
        exit;
    }
    $account = trim(getGET('account'));
    if ('' == $account) {
        show_system_message('参数错误', array());
        exit;
    }
    $account = $db->escape($account);
    $get_member = 'select * from ' . $db->table('member') . ' where account = \'' . $account . '\' limit 1';
    $member = $db->fetchRow($get_member);
    if (empty($member)) {
        show_system_message('会员不存在', array());
        exit;
    }
    if ($member['parent_id'] != 0) {
        $get_parent = 'select * from ' . $db->table('member') . ' where id = \'' . $member['parent_id'] . '\' limit 1';
        $parent = $db->fetchRow($get_parent);
        if ($parent['parent_id'] != 0) {