php friend_friend.php

session_start();

//定义个常量，用来授权调用includes里面的文件

define('IN_TG',true);

define('IN_JS',"message");

//定义个常量，用来指定本页的内容

define('SCRIPT','friend');

//引入公共文件

require dirname(__FILE__).'/includes/common.inc.php';

//判断是否登录了

if(empty($_COOKIE['username'])){

_alert_close('请先登录');

}

//添加好友

if(isset($_GET['action']))

{

if ($_GET['action'] == 'add') {

_check_code($_POST['code'],$_SESSION['code']);

include ROOT_PATH.'includes/check.func.php';

//验证uniqid

$sql = "SELECT tg_uniqid FROM tg_user WHERE tg_username='{$_SESSION['username']}' LIMIT 1";

if (!!$_rows = _fetch_array($sql))

{

_uniqid($_rows['tg_uniqid'],$_COOKIE['uniqid']);

}

$_clean = array();

$_clean['touser'] = $_POST['fromuser'];

$_clean['fromuser'] = $_SESSION['username'];

$_clean['content'] = _check_content($_POST['content']);

$_clean = _mysql_string($_clean);

//不能添加自己

if ($_clean['touser'] == $_clean['fromuser']) {

_alert_close('请不要添加自己！');

}

//数据库验证好友是否已经添加

if (!!$_rows = _fetch_array("SELECT tg_id FROM tg_friend WHERE (tg_touser='{$_clean['touser']}' AND tg_fromuser='{$_clean['fromuser']}')

OR

(tg_touser='{$_clean['fromuser']}' AND tg_fromuser='{$_clean['touser']}')

LIMIT

1

")) {

_alert_close('你们已经是好友了！或者是未验证的好友！无需添加！');

} else {

//添加好友信息

_query("INSERT INTO tg_friend (

tg_touser,

tg_fromuser,

tg_content,

tg_date

)

VALUES (

'{$_clean['touser']}',

'{$_clean['fromuser']}',

'{$_clean['content']}',

NOW()

)

");

if (_affected_rows() == 1) {

_close();

//_session_destroy();

_alert_close('好友添加成功！请等待验证！');

} else {

_close();

//_session_destroy();

_alert_back('好友添加失败！');

}

}

}

}

//获取数据

if (isset($_GET['id'])) {

$sql="SELECT tg_username FROM tg_user WHERE tg_id='{$_GET['id']}' LIMIT 1 ";

if (!!$_rows = _fetch_array($sql))

{

$_html = array();

$_html['touser'] = $_rows['tg_username'];

$_html = _html($_html);

} else {

_alert_close('不存在此用户！');

}

} else {

_alert_close('非法操作！');

}

?>

require ROOT_PATH . 'includes/title.inc.php';

?>

添加好友

我非常想和你交朋友！

验 证 码：