求助！大伙帮我看看这个php代码有木马病毒吗，360检查这个文件是恶意文件，非常感谢！
class DealAction extends CommonAction{
public function online_index()
$now=get_gmtime();
if(trim($_REQUEST['name'])!='')
$map['name'] = array('like','%'.trim($_REQUEST['name']).'%');
if(intval($_REQUEST['time_status'])==1)
$map['_string'] = '(begin_time & '.get_gmtime().')';
if(intval($_REQUEST['time_status'])==2)
$map['_string'] = "(begin_time & '".get_gmtime()."') and ((end_time & '".get_gmtime()."') or (end_time = 0))";
if(intval($_REQUEST['time_status'])==3)
$map['_string'] = '(end_time & '.get_gmtime().') and (end_time && 0)';
if($_REQUEST['type']=='NULL'){
unset($_REQUEST['type']);
if($_REQUEST['type']!=NULL){
$map['type']=intval($_REQUEST['type']);
if(intval($_REQUEST['cate_id'])&0)
$map['cate_id'] = intval($_REQUEST['cate_id']);
if(intval($_REQUEST['user_id'])&0)
$map['user_id'] = intval($_REQUEST['user_id']);
$create_time_2=empty($_REQUEST['create_time_2'])?to_date($now,'Y-m-d'):strim($_REQUEST['create_time_2']);
$create_time_2=to_timespan($create_time_2)+24*3600;
if(trim($_REQUEST['create_time_1'])!='')
$map[DB_PREFIX.'deal.create_time'] = array('between',array(to_timespan($_REQUEST['create_time_1']),$create_time_2));
$map['is_effect'] = 1;
$map['is_delete'] = 0;
if (method_exists ( $this, '_filter' )) {
$this-&_filter ( $map );
$name=$this-&getActionName();
$model = D ($name);
if (! empty ( $model )) {
$this-&_list ( $model, $map );
$cate_list = M("DealCate")-&findAll();
$this-&assign("cate_list",$cate_list);
$this-&display ();
public function submit_index()
$now=get_gmtime();
if(trim($_REQUEST['name'])!='')
$map['name'] = array('like','%'.trim($_REQUEST['name']).'%');
if(intval($_REQUEST['cate_id'])&0)
$map['cate_id'] = intval($_REQUEST['cate_id']);
if(intval($_REQUEST['user_id'])&0)
$map['user_id'] = intval($_REQUEST['user_id']);
$create_time_2=empty($_REQUEST['create_time_2'])?to_date($now,'Y-m-d'):strim($_REQUEST['create_time_2']);
$create_time_2=to_timespan($create_time_2)+24*3600;
if(trim($_REQUEST['create_time_1'])!='')
$map[DB_PREFIX.'deal.create_time'] = array('between',array(to_timespan($_REQUEST['create_time_1']),$create_time_2));
if($_REQUEST['type']=='NULL'){
unset($_REQUEST['type']);
if($_REQUEST['type']!=NULL){
$map['type']=intval($_REQUEST['type']);
$map['is_effect'] = array("in",array(0,2));
$map['is_delete'] = 0;
if (method_exists ( $this, '_filter' )) {
$this-&_filter ( $map );
$name=$this-&getActionName();
$model = D ($name);
if (! empty ( $model )) {
$this-&_list ( $model, $map );
$cate_list = M("DealCate")-&findAll();
$this-&assign("cate_list",$cate_list);
$this-&display ();
public function delete_index()
if(trim($_REQUEST['name'])!='')
$map['name'] = array('like','%'.trim($_REQUEST['name']).'%');
if(intval($_REQUEST['cate_id'])&0)
$map['cate_id'] = intval($_REQUEST['cate_id']);
if(intval($_REQUEST['user_id'])&0)
$map['user_id'] = intval($_REQUEST['user_id']);
$map['is_delete'] = 1;
if (method_exists ( $this, '_filter' )) {
$this-&_filter ( $map );
$name=$this-&getActionName();
$model = D ($name);
if (! empty ( $model )) {
$this-&_list ( $model, $map );
$cate_list = M("DealCate")-&findAll();
$this-&assign("cate_list",$cate_list);
$this-&display ();
public function add()
$cate_list = M("DealCate")-&findAll();
$cate_list = D("DealCate")-&toNameFormatTree($cate_list);
$this-&assign("cate_list",$cate_list);
$region_lv2 = $GLOBALS['db']-&getAll("select * from ".DB_PREFIX."region_conf where region_level = 2 order by py asc"); &//二级地址
$this-&assign("region_lv2",$region_lv2);
//项目等级
$user_level = $GLOBALS['db']-&getAll("select * from ".DB_PREFIX."deal_level order by level ASC");
$this-&assign("user_level",$user_level);
$this-&assign("new_sort", M("Deal")-&max("sort")+1);
$this-&display();
public function add_investor(){
$cate_list = M("DealCate")-&findAll();
$cate_list = D("DealCate")-&toNameFormatTree($cate_list);
$this-&assign("cate_list",$cate_list);
$region_lv2 = $GLOBALS['db']-&getAll("select * from ".DB_PREFIX."region_conf where region_level = 2 order by py asc"); &//二级地址
$this-&assign("region_lv2",$region_lv2);
//项目等级
$user_level = $GLOBALS['db']-&getAll("select * from ".DB_PREFIX."deal_level order by level ASC");
$this-&assign("user_level",$user_level);
$this-&assign("new_sort", M("Deal")-&max("sort")+1);
$this-&assign('stock_num',0);
$this-&assign('unstock_num',0);
$this-&assign("history_num",0);
$plan_html=$this-&fetch("add_new_history");
$this-&assign('history_html',$plan_html);
$this-&assign('plan_num',0);
$this-&assign('plan_step_num',0);
$plan_html=$this-&fetch("add_new_plan");
$this-&assign('plan_html',$plan_html);
$this-&assign("action",'insert_investor');
$this-&assign('attach_num',1);
$attach_html=$this-&fetch("add_new_attachment");
$this-&assign('attach_html',$attach_html);
$this-&display("edit_investor");
public function add_investor_item(){
$return=array('status'=&1,'html'=&'');
$num=intval($_REQUEST['num']);
$html=strim($_REQUEST['html']);
if($html=='add_new_plan'){
$this-&assign('plan_num',$num);
}elseif($html='add_new_history'){
$this-&assign('history_num',$num);
$this-&assign('num',$num);
$return['html']=$this-&fetch($html);
ajax_return($return);
public function edit() {
$id = intval($_REQUEST ['id']);
$condition['id'] = $
$vo = M(MODULE_NAME)-&where($condition)-&find();
if($vo['user_id']==0)$vo['user_id'] &= '';
$vo['begin_time'] = $vo['begin_time']!=0?to_date($vo['begin_time']):'';
$vo['end_time'] = $vo['end_time']!=0?to_date($vo['end_time']):'';
$this-&assign ( 'vo', $vo );
$cate_list = M("DealCate")-&findAll();
$cate_list = D("DealCate")-&toNameFormatTree($cate_list);
$this-&assign("cate_list",$cate_list);
$region_pid = 0;
$region_lv2 = $GLOBALS['db']-&getAll("select * from ".DB_PREFIX."region_conf where region_level = 2 order by py asc"); &//二级地址
foreach($region_lv2 as $k=&$v)
if($v['name'] == $vo['province'])
$region_lv2[$k]['selected'] = 1;
$region_pid = $region_lv2[$k]['id'];
$this-&assign("region_lv2",$region_lv2);
if($region_pid&0)
$region_lv3 = $GLOBALS['db']-&getAll("select * from ".DB_PREFIX."region_conf where pid = ".$region_pid." order by py asc"); &//三级地址
foreach($region_lv3 as $k=&$v)
if($v['name'] == $vo['city'])
$region_lv3[$k]['selected'] = 1;
$this-&assign("region_lv3",$region_lv3);
$qa_list = M("DealFaq")-&where("deal_id=".$vo['id'])-&order("sort asc")-&findAll();
$this-&assign("faq_list",$qa_list);
$user_level = $GLOBALS['db']-&getAll("select * from ".DB_PREFIX."deal_level order by level ASC");
$this-&assign("user_level",$user_level);
$this-&display ();
public function edit_investor() {
$id = intval($_REQUEST ['id']);
$condition['id'] = $
$vo = M(MODULE_NAME)-&where($condition)-&find();
if($vo['user_id']==0)$vo['user_id'] &= '';
$vo['begin_time'] = $vo['begin_time']!=0?to_date($vo['begin_time']):'';
$vo['end_time'] = $vo['end_time']!=0?to_date($vo['end_time']):'';
$vo['pay_end_time'] = $vo['pay_end_time']!=0?to_date($vo['pay_end_time']):'';
$vo['business_create_time'] = $vo['business_create_time']!=0?to_date($vo['business_create_time']):'';
$vo['history']=unserialize($vo['history']);
$history_num=$vo['history']?count($vo['history']):0;
$this-&assign('history_num',$history_num);
$vo['plan']=unserialize($vo['plan']);
$plan_num=$vo['plan']?count($vo['plan']):0;
$this-&assign('plan_step_num',$plan_num);
$vo['attach']=unserialize($vo['attach']);
$attach_num=$vo['attach']?count($vo['attach']):0;
$this-&assign('attach_num',$attach_num);
$vo['stock']=unserialize($vo['stock']);
$stock_num=$vo['stock']?count($vo['stock']):0;
$this-&assign('stock_num',$stock_num);
$vo['unstock']=unserialize($vo['unstock']);
$unstock_num=$vo['unstock']?count($vo['unstock']):0;
$this-&assign('unstock_num',$unstock_num);
//企业资质材料信息
$vo['audit_data']=unserialize($vo['audit_data']);
$audit_data=$vo['audit_data'];
$this-&assign('audit_data',$audit_data);
$this-&assign ( 'vo', $vo );
$this-&assign("action",'update_investor');
$plan_html=$this-&fetch("add_new_history");
$this-&assign('history_html',$plan_html);
$this-&assign('plan_num',1);
$plan_html=$this-&fetch("add_new_plan");
$this-&assign('plan_html',$plan_html);
$cate_list = M("DealCate")-&findAll();
$cate_list = D("DealCate")-&toNameFormatTree($cate_list);
$this-&assign("cate_list",$cate_list);
$region_pid = 0;
$region_lv2 = $GLOBALS['db']-&getAll("select * from ".DB_PREFIX."region_conf where region_level = 2 order by py asc"); &//二级地址
foreach($region_lv2 as $k=&$v)
if($v['name'] == $vo['province'])
$region_lv2[$k]['selected'] = 1;
$region_pid = $region_lv2[$k]['id'];
$this-&assign("region_lv2",$region_lv2);
if($region_pid&0)
$region_lv3 = $GLOBALS['db']-&getAll("select * from ".DB_PREFIX."region_conf where pid = ".$region_pid." order by py asc"); &//三级地址
foreach($region_lv3 as $k=&$v)
if($v['name'] == $vo['city'])
$region_lv3[$k]['selected'] = 1;
$this-&assign("region_lv3",$region_lv3);
$qa_list = M("DealFaq")-&where("deal_id=".$vo['id'])-&order("sort asc")-&findAll();
$this-&assign("faq_list",$qa_list);
$user_level = $GLOBALS['db']-&getAll("select * from ".DB_PREFIX."deal_level order by level ASC");
$this-&assign("user_level",$user_level);
$this-&display ();
public function insert() {
B('FilterString');
$ajax = intval($_REQUEST['ajax']);
$data = M(MODULE_NAME)-&create ();
//开始验证有效性
$this-&assign("jumpUrl",u(MODULE_NAME."/add"));
if(!check_empty($data['name']))
$this-&error("请输入名称");
if(intval($data['cate_id'])==0)
$this-&error("请选择分类");
if(floatval($data['limit_price'])&=0){
$this-&error("目标金额要大于0");
$data['begin_time'] = trim($data['begin_time'])==''?0:to_timespan($data['begin_time']);
$data['end_time'] = trim($data['end_time'])==''?0:to_timespan($data['end_time']);
$data['create_time'] = get_gmtime();
$data['user_name'] = M("User")-&where("id=".intval($data['user_id']))-&getField("user_name");
if(!$data['user_name'] )$data['user_name'] ="";
if($data['vedio']!="")
require_once APP_ROOT_PATH."system/utils/vedio.php";
$vedio = fetch_vedio_url($data['vedio']);
if($vedio!="")
$data['source_vedio'] = &$
$this-&error("非法的视频地址");
// 更新数据
$log_info = $data['name'];
$list=M(MODULE_NAME)-&add($data);
if (false !== $list) {
//成功提示
if($data['is_effect']==1&&$data['user_id']&0)
$deal_count = M("Deal")-&where("user_id=".$data['user_id']." and is_effect = 1 and is_delete = 0")-&count();
M("User")-&where("id=".$data['user_id'])-&setField("build_count",$deal_count);
foreach($_REQUEST['question'] as $k=&$v)
if(trim($v)!=""||trim($_REQUEST['answer'][$k])!='')
$qa = array();
$qa['deal_id'] = $
$qa['question'] = trim($v);
$qa['answer'] = trim($_REQUEST['answer'][$k]);
$qa['sort'] = intval($k)+1;
M("DealFaq")-&add($qa);
syn_deal($list);
save_log($log_info.L("INSERT_SUCCESS"),1);
$this-&success(L("INSERT_SUCCESS"));
//错误提示
save_log($log_info.L("INSERT_FAILED"),0);
$this-&error(L("INSERT_FAILED"));
public function insert_investor(){
B('FilterString');
$ajax = intval($_REQUEST['ajax']);
$data = M(MODULE_NAME)-&create ();
//开始验证有效性
$this-&assign("jumpUrl",u(MODULE_NAME."/add_investor"));
if(!check_empty($data['name']))
$this-&error("请输入名称");
if(intval($data['cate_id'])==0)
$this-&error("请选择分类");
if(floatval($data['limit_price'])&=0){
$this-&error("目标金额要大于0");
$history_info=deal_investor_info($data['history'],'history');
if($history_info['status']){
$data['history']=serialize(array_filter($history_info['data']));
$this-&error($history_info['info']);
if($data['stock']){
$stock_info=deal_investor_info($data['stock'],'stock');
if($stock_info['status']){
$data['stock']=serialize(array_filter($stock_info['data']));
$this-&error($stock_info['info']);
$unstock_info=deal_investor_info($data['unstock'],'unstock');
if($unstock_info['status']){
$data['unstock']=serialize(array_filter($unstock_info['data']));
$this-&error($unstock_info['info']);
$plan_info=deal_investor_info($data['plan'],'plan');
if($plan_info['status']){
$data['plan']=serialize(array_filter($plan_info['data']));
$this-&error($plan_info['info']);
$attach_info=deal_investor_info($data['attach'],'attach');
if($attach_info['status']){
$data['attach']=serialize(array_filter($attach_info['data']));
$this-&error($attach_info['info']);
$data['audit_data']=serialize($data['audit_data']);
if($data['end_time']&$data['pay_end_time']){
$this-&error("支付结束时间要大于项目结束时间");
}elseif($data['begin_time']&$data['end_time']){
$this-&error("项目结束时间要大于项目开始时间");
$data['begin_time'] = trim($data['begin_time'])==''?0:to_timespan($data['begin_time']);
$data['end_time'] = trim($data['end_time'])==''?0:to_timespan($data['end_time']);
$data['pay_end_time'] = trim($data['pay_end_time'])==''?0:to_timespan($data['pay_end_time']);
$data['business_create_time'] = trim($data['business_create_time'])==''?0:to_timespan($data['business_create_time']);
$data['create_time'] = get_gmtime();
$data['user_name'] = M("User")-&where("id=".intval($data['user_id']))-&getField("user_name");
if(!$data['user_name'] )$data['user_name'] ="";
if($data['vedio']!="")
require_once APP_ROOT_PATH."system/utils/vedio.php";
$vedio = fetch_vedio_url($data['vedio']);
if($vedio!="")
$data['source_vedio'] = &$
$this-&error("非法的视频地址");
// 更新数据
$log_info = $data['name'];
$list=M(MODULE_NAME)-&add($data);
if (false !== $list) {
//成功提示
if($data['is_effect']==1&&$data['user_id']&0)
$deal_count = M("Deal")-&where("user_id=".$data['user_id']." and is_effect = 1 and is_delete = 0")-&count();
M("User")-&where("id=".$data['user_id'])-&setField("build_count",$deal_count);
foreach($_REQUEST['question'] as $k=&$v)
if(trim($v)!=""||trim($_REQUEST['answer'][$k])!='')
$qa = array();
$qa['deal_id'] = $
$qa['question'] = trim($v);
$qa['answer'] = trim($_REQUEST['answer'][$k]);
$qa['sort'] = intval($k)+1;
M("DealFaq")-&add($qa);
syn_deal($list);
save_log($log_info.L("INSERT_SUCCESS"),1);
$this-&success(L("INSERT_SUCCESS"));
//错误提示
save_log($log_info.L("INSERT_FAILED"),0);
$this-&error(L("INSERT_FAILED"));
public function update() {
B('FilterString');
$data = M(MODULE_NAME)-&create();
$this-&assign("jumpUrl",u(MODULE_NAME."/edit",array("id"=&$data['id'])));
$log_info = M(MODULE_NAME)-&where("id=".intval($data['id']))-&getField("name");
$this-&deal_update(intval($data['id']));
//开始验证有效性
if(!check_empty($data['name']))
$this-&error("请输入名称");
if(intval($data['cate_id'])==0)
$this-&error("请选择分类");
if(floatval($data['limit_price'])&=0){
$this-&error("目标金额要大于0");
$data['begin_time'] = trim($data['begin_time'])==''?0:to_timespan($data['begin_time']);
$data['end_time'] = trim($data['end_time'])==''?0:to_timespan($data['end_time']);
$data['create_time'] = get_gmtime();
$data['user_name'] = M("User")-&where("id=".intval($data['user_id']))-&getField("user_name");
if(!$data['user_name'] )$data['user_name'] ="";
if($data['vedio']!="")
require_once APP_ROOT_PATH."system/utils/vedio.php";
$vedio = fetch_vedio_url($data['vedio']);
if($vedio!="")
$data['source_vedio'] = &$
$this-&error("非法的视频地址");
$data['source_vedio'] = "";
$list=M(MODULE_NAME)-&save ($data);
if (false !== $list) {
if($data['is_effect']==1&&$data['user_id']&0)
$deal_count = M("Deal")-&where("user_id=".$data['user_id']." and is_effect = 1 and is_delete = 0")-&count();
M("User")-&where("id=".$data['user_id'])-&setField("build_count",$deal_count);
//成功提示
M("DealFaq")-&where("deal_id=".$data['id'])-&delete();
foreach($_REQUEST['question'] as $k=&$v)
if(trim($v)!=""||trim($_REQUEST['answer'][$k])!='')
$qa = array();
$qa['deal_id'] = $data['id'];
$qa['question'] = trim($v);
$qa['answer'] = trim($_REQUEST['answer'][$k]);
$qa['sort'] = intval($k)+1;
M("DealFaq")-&add($qa);
M("Deal")-&where("id=".$data['id'])-&setField("deal_extra_cache","");
M("DealLog")-&where("deal_id=".$data['id'])-&setField("deal_info_cache","");
M("DealComment")-&where("deal_id=".$data['id'])-&setField("deal_info_cache","");
syn_deal($data['id']);
syn_deal_status($data['id']);
save_log($log_info.L("UPDATE_SUCCESS"),1);
$this-&success(L("UPDATE_SUCCESS"));
//错误提示
save_log($log_info.L("UPDATE_FAILED"),0);
$this-&error(L("UPDATE_FAILED"),0,$log_info.L("UPDATE_FAILED"));
public function update_all(){
$re=$GLOBALS['db']-&getAll("select * from &".DB_PREFIX."deal where &is_effect = 1 and is_delete=0 ");
foreach($re as $k=&$v){
syn_deal($v['id']);
syn_deal_status($v['id']);
syn_user_level();
ajax_return(array('status'=&1));
public function update_investor() {
B('FilterString');
$data = M(MODULE_NAME)-&create();
$log_info = M(MODULE_NAME)-&where("id=".intval($data['id']))-&getField("name");
//开始验证有效性
$this-&assign("jumpUrl",u(MODULE_NAME."/edit_investor",array("id"=&$data['id'])));
if(!check_empty($data['name']))
$this-&error("请输入名称");
if(intval($data['cate_id'])==0)
$this-&error("请选择分类");
if(floatval($data['limit_price'])&=0){
$this-&error("目标金额要大于0");
$this-&deal_update(intval($data['id']));
& & $history_info=deal_investor_info($data['history'],'history');
if($history_info['status']){
$data['history']=serialize(array_filter($history_info['data']));
$this-&error($history_info['info']);
$stock_info=deal_investor_info($data['stock'],'stock');
if($stock_info['status']){
$data['stock']=serialize(array_filter($stock_info['data']));
$this-&error($stock_info['info']);
$unstock_info=deal_investor_info($data['unstock'],'unstock');
if($unstock_info['status']){
$data['unstock']=serialize(array_filter($unstock_info['data']));
$this-&error($unstock_info['info']);
$plan_info=deal_investor_info($data['plan'],'plan');
if($plan_info['status']){
$data['plan']=serialize(array_filter($plan_info['data']));
$this-&error($plan_info['info']);
$attach_info=deal_investor_info($data['attach'],'attach');
if($attach_info['status']){
$data['attach']=serialize(array_filter($attach_info['data']));
$this-&error($attach_info['info']);
//企业资质材料信息
$data['audit_data']=serialize($data['audit_data']);
if($data['end_time']&$data['pay_end_time']){
$this-&error("支付结束时间要大于项目结束时间");
}elseif($data['begin_time']&$data['end_time']){
$this-&error("项目结束时间要大于项目开始时间");
$data['begin_time'] = trim($data['begin_time'])==''?0:to_timespan($data['begin_time']);
$data['end_time'] = trim($data['end_time'])==''?0:to_timespan($data['end_time']);
$data['pay_end_time'] = trim($data['pay_end_time'])==''?0:to_timespan($data['pay_end_time']);
$data['business_create_time'] = trim($data['business_create_time'])==''?0:to_timespan($data['business_create_time']);
$data['create_time'] = get_gmtime();
$data['user_name'] = M("User")-&where("id=".intval($data['user_id']))-&getField("user_name");
if(!$data['user_name'] )$data['user_name'] ="";
if($data['vedio']!="")
require_once APP_ROOT_PATH."system/utils/vedio.php";
$vedio = fetch_vedio_url($data['vedio']);
if($vedio!="")
$data['source_vedio'] = &$
$this-&error("非法的视频地址");
$data['source_vedio'] = "";
$list=M(MODULE_NAME)-&save ($data);
if (false !== $list) {
if($data['is_effect']==1&&$data['user_id']&0)
$deal_count = M("Deal")-&where("user_id=".$data['user_id']." and is_effect = 1 and is_delete = 0")-&count();
M("User")-&where("id=".$data['user_id'])-&setField("build_count",$deal_count);
//成功提示
M("DealFaq")-&where("deal_id=".$data['id'])-&delete();
foreach($_REQUEST['question'] as $k=&$v)
if(trim($v)!=""||trim($_REQUEST['answer'][$k])!='')
$qa = array();
$qa['deal_id'] = $data['id'];
$qa['question'] = trim($v);
$qa['answer'] = trim($_REQUEST['answer'][$k]);
$qa['sort'] = intval($k)+1;
M("DealFaq")-&add($qa);
M("Deal")-&where("id=".$data['id'])-&setField("deal_extra_cache","");
M("DealLog")-&where("deal_id=".$data['id'])-&setField("deal_info_cache","");
M("DealComment")-&where("deal_id=".$data['id'])-&setField("deal_info_cache","");
//syn_deal($data['id']);
//syn_deal_status($data['id']);
save_log($log_info.L("UPDATE_SUCCESS"),1);
$this-&success(L("UPDATE_SUCCESS"));
//错误提示
save_log($log_info.L("UPDATE_FAILED"),0);
$this-&error(L("UPDATE_FAILED"),0,$log_info.L("UPDATE_FAILED"));
public function set_sort()
$id = intval($_REQUEST['id']);
$sort = intval($_REQUEST['sort']);
$log_info = M("Deal")-&where("id=".$id)-&getField("name");
if(!check_sort($sort))
$this-&error(l("SORT_FAILED"),1);
M("Deal")-&where("id=".$id)-&setField("sort",$sort);
save_log($log_info.l("SORT_SUCCESS"),1);
$this-&success(l("SORT_SUCCESS"),1);
public function delete() {
//彻底删除指定记录
$ajax = intval($_REQUEST['ajax']);
$id = $_REQUEST ['id'];
if (isset ( $id )) {
$condition = array ('id' =& array ('in', explode ( ',', $id ) ) );
$rel_data = M(MODULE_NAME)-&where($condition)-&findAll();
foreach($rel_data as $data)
$info[] = $data['name'];
if($info) $info = implode(",",$info);
$list = M(MODULE_NAME)-&where ( $condition )-&setField("is_delete",1);
if ($list!==false) {
foreach($rel_data as $data)
$deal_count = M("Deal")-&where("user_id=".$data['user_id']." and is_effect = 1 and is_delete = 0")-&count();
M("User")-&where("id=".$data['user_id'])-&setField("build_count",$deal_count);
save_log($info."成功移到回收站",1);
$this-&success ("成功移到回收站",$ajax);
save_log($info."移到回收站出错",0);
$this-&error ("移到回收站出错",$ajax);
$this-&error (l("INVALID_OPERATION"),$ajax);
public function restore() {
//彻底删除指定记录
$ajax = intval($_REQUEST['ajax']);
$id = $_REQUEST ['id'];
if (isset ( $id )) {
$condition = array ('id' =& array ('in', explode ( ',', $id ) ) );
$rel_data = M(MODULE_NAME)-&where($condition)-&findAll();
foreach($rel_data as $data)
$info[] = $data['name'];
if($info) $info = implode(",",$info);
$list = M(MODULE_NAME)-&where ( $condition )-&setField("is_delete",0);
if ($list!==false) {
save_log($info."恢复成功",1);
$this-&success ("恢复成功",$ajax);
save_log($info."恢复出错",0);
$this-&error ("恢复出错",$ajax);
$this-&error (l("INVALID_OPERATION"),$ajax);
public function foreverdelete() {
//彻底删除指定记录
$ajax = intval($_REQUEST['ajax']);
$id = $_REQUEST ['id'];
if (isset ( $id )) {
$condition = array ('id' =& array ('in', explode ( ',', $id ) ) );
$link_condition = array ('deal_id' =& array ('in', explode ( ',', $id ) ) );
$rel_data = M(MODULE_NAME)-&where($condition)-&findAll();
foreach($rel_data as $data)
$info[] = $data['name'];
if($info) $info = implode(",",$info);
$list = M(MODULE_NAME)-&where ( $condition )-&delete();
if ($list!==false) {
M("DealFaq")-&where($link_condition)-&delete();
M("DealComment")-&where($link_condition)-&delete();
M("DealFocusLog")-&where($link_condition)-&delete();
M("DealItem")-&where($link_condition)-&delete();
M("DealItemImage")-&where($link_condition)-&delete();
M("DealOrder")-&where($link_condition)-&delete();
M("DealPayLog")-&where($link_condition)-&delete();
M("DealSupportLog")-&where($link_condition)-&delete();
M("DealVisitLog")-&where($link_condition)-&delete();
M("DealLog")-&where($link_condition)-&delete();
M("UserDealNotify")-&where($link_condition)-&delete();
M("DealNotify")-&where($link_condition)-&delete();
save_log($info.l("FOREVER_DELETE_SUCCESS"),1);
$this-&success (l("FOREVER_DELETE_SUCCESS"),$ajax);
save_log($info.l("FOREVER_DELETE_FAILED"),0);
$this-&error (l("FOREVER_DELETE_FAILED"),$ajax);
$this-&error (l("INVALID_OPERATION"),$ajax);
public function add_faq()
$this-&display();
public function deal_item()
$deal_id = intval($_REQUEST['id']);
$deal_info = M("Deal")-&getById($deal_id);
$this-&assign("deal_info",$deal_info);
if($deal_info)
$map['deal_id'] = $deal_info['id'];
if (method_exists ( $this, '_filter' )) {
$this-&_filter ( $map );
$name=$this-&getActionName();
$model = D ("DealItem");
if (! empty ( $model )) {
$this-&_list ( $model, $map );
$this-&display();
public function add_deal_item()
$deal_id = intval($_REQUEST['id']);
$deal_info = M("Deal")-&getById($deal_id);
$this-&assign("deal_info",$deal_info);
$this-&display();
public function insert_deal_item() {
B('FilterString');
$ajax = intval($_REQUEST['ajax']);
$data = M("DealItem")-&create ();
//开始验证有效性
$this-&assign("jumpUrl",u(MODULE_NAME."/add_deal_item",array("id"=&$data['deal_id'])));
if(!check_empty($data['price']))
$this-&error("请输入价格");
// 更新数据
$list=M("DealItem")-&add($data);
$log_info = &"项目ID".$data['deal_id'].":".format_price($data['price']);
if (false !== $list) {
//成功提示
$imgs = $_REQUEST['image'];
foreach($imgs as $k=&$v)
if($v!='')
$img_data['deal_id'] = $data['deal_id'];
$img_data['deal_item_id'] = $
$img_data['image'] = $v;
M("DealItemImage")-&add($img_data);
M("Deal")-&where("id=".$data['deal_id'])-&setField("deal_extra_cache","");
save_log($log_info.L("INSERT_SUCCESS"),1);
syn_deal($data['deal_id']);
syn_deal_status($data['deal_id']);
$this-&success(L("INSERT_SUCCESS"));
//错误提示
save_log($log_info.L("INSERT_FAILED"),0);
$this-&error(L("INSERT_FAILED"));
public function edit_deal_item()
$id = intval($_REQUEST ['id']);
$condition['id'] = $
$vo = M("DealItem")-&where($condition)-&find();
$this-&assign ( 'vo', $vo );
//输出图片集
$img_list = M("DealItemImage")-&where("deal_item_id=".$vo['id'])-&findAll();
$imgs = array();
foreach($img_list as $k=&$v)
$imgs[$k] = $v['image'];&
$this-&assign("img_list",$imgs);
$this-&display();
public function update_deal_item() {
B('FilterString');
$ajax = intval($_REQUEST['ajax']);
$data = M("DealItem")-&create ();
//开始验证有效性
$this-&assign("jumpUrl",u(MODULE_NAME."/edit_deal_item",array("id"=&$data['id'])));
if(!check_empty($data['price']))
$this-&error("请输入价格");
// 更新数据
$this-&deal_update(intval($data['deal_id']));
$list=M("DealItem")-&save($data);
$log_info = &"项目ID".$data['deal_id'].":".format_price($data['price']);
if (false !== $list) {
if($data['virtual_person']&0){
//成功提示
//开始处理图片
M("DealItemImage")-&where("deal_item_id=".$data['id'])-&delete();
$imgs=array($_REQUEST['img0'],$_REQUEST['img1'],$_REQUEST['img2'],$_REQUEST['img3']);
//$imgs = $_REQUEST['image'];
foreach($imgs as $k=&$v)
if($v!='')
$img_data['deal_item_id'] = $data['id'];
$img_data['deal_id'] = $data['deal_id'];
$img_data['image'] = $v;
M("DealItemImage")-&add($img_data);
M("Deal")-&where("id=".$data['deal_id'])-&setField("deal_extra_cache","");
M("DealLog")-&where("deal_id=".$data['deal_id'])-&setField("deal_info_cache","");
//end 处理图片
save_log($log_info.L("UPDATE_SUCCESS"),1);
syn_deal($data['deal_id']);
syn_deal_status($data['deal_id']);
$this-&success(L("UPDATE_SUCCESS"));
//错误提示
save_log($log_info.L("UPDATE_FAILED"),0);
$this-&error(L("UPDATE_FAILED"));
public function del_deal_item()
$ajax = intval($_REQUEST['ajax']);
$id = $_REQUEST ['id'];
if (isset ( $id )) {
$condition = array ('id' =& array ('in', explode ( ',', $id ) ) );
$rel_data = M("DealItem")-&where($condition)-&findAll();
foreach($rel_data as $data)
$deal_id = $data['deal_id'];
$info[] = format_price($data['price']);
if($info) $info = implode(",",$info);
$info = "项目ID".$deal_id.":".$
$list = M("DealItem")-&where ( $condition )-&delete();
if ($list!==false) {
M("Deal")-&where("id=".$deal_id)-&setField("deal_extra_cache","");
syn_deal($deal_id);
save_log($info.l("FOREVER_DELETE_SUCCESS"),1);
$this-&success (l("FOREVER_DELETE_SUCCESS"),$ajax);
save_log($info.l("FOREVER_DELETE_FAILED"),0);
$this-&error (l("FOREVER_DELETE_FAILED"),$ajax);
$this-&error (l("INVALID_OPERATION"),$ajax);
//pay_log 放款日志
public function pay_log()
$deal_id = intval($_REQUEST['id']);
$deal_info = M("Deal")-&getById($deal_id);
//当项目佣金比例大于0时
if($deal_info['pay_radio']& 0)
$deal_info['commission'] = $deal_info['support_amount']*$deal_info['pay_radio'] + $deal_info['delivery_fee_amount'];
$deal_info['pay_amount'] =$deal_info['support_amount'] -$deal_info['commission'];
//当项目佣金比例等于0时
$deal_info['commission'] = $deal_info['support_amount']*app_conf("PAY_RADIO") + $deal_info['delivery_fee_amount'];
$deal_info['pay_amount'] =$deal_info['support_amount'] -$deal_info['commission'];
// $deal_info['commission'] = $deal_info['support_amount'] - $deal_info['pay_amount'] + $deal_info['delivery_fee_amount'];
$this-&assign("deal_info",$deal_info);
if($deal_info)
$map['deal_id'] = $deal_info['id'];
$model = D ("DealPayLog");
$paid_money = $model-&where($map)-&sum("money");
$remain_money = $deal_info['pay_amount'] - $paid_
$this-&assign("remain_money",$remain_money);
$this-&assign("paid_money",$paid_money);
if (! empty ( $model )) {
$this-&_list ( $model, $map );
$this-&display();
public function add_pay_log()
$deal_id = intval($_REQUEST['id']);
$deal_info = M("Deal")-&getById($deal_id);
$deal_info['commission'] = $deal_info['support_amount'] - $deal_info['pay_amount'] + $deal_info['delivery_fee_amount'];
$this-&assign("deal_info",$deal_info);
if($deal_info)
$map['deal_id'] = $deal_info['id'];
$model = D ("DealPayLog");
$paid_money = $model-&where($map)-&sum("money");
$remain_money = $deal_info['pay_amount'] - $paid_
$this-&assign("paid_money",$paid_money);
$this-&assign("remain_money",$remain_money);
$this-&display();
public function save_pay_log()
$deal_id = intval($_REQUEST['id']);
$deal_info = M("Deal")-&getById($deal_id);
if($deal_info)
$map['deal_id'] = $deal_info['id'];
$model = D ("DealPayLog");
$paid_money = $model-&where($map)-&sum("money");
$remain_money = $deal_info['pay_amount'] - $paid_
$money = doubleval($_REQUEST['money']);
$log_info = strim($_REQUEST['log_info']);
if($money&=0||$money&$remain_money)
$this-&error("金额出错");
if($deal_info['user_id']&0)
require_once APP_ROOT_PATH."system/libs/user.php";
if($log_info=="")$log_info = $deal_info['name']."项目筹款发放";
modify_account(array("money"=&$money),$deal_info['user_id'],$log_info);
$log['deal_id'] = $deal_info['id'];
$log['money'] = $
$log['create_time'] = get_gmtime();
$log['log_info'] = $log_
$model-&add($log);
save_log($log_info.$money,1);
send_pay_success($log_info);
$this-&success("筹款发放成功");
$this-&error("管理员创建项目，无需发放筹款");
$this-&error("项目不存在");
public function del_pay_log()
$ajax = intval($_REQUEST['ajax']);
$id = $_REQUEST ['id'];
if (isset ( $id )) {
$condition = array ('id' =& array ('in', explode ( ',', $id ) ) );
$rel_data = M("DealPayLog")-&where($condition)-&findAll();
foreach($rel_data as $data)
$deal_id = $data['deal_id'];
$info[] = format_price($data['money']);
if($info) $info = implode(",",$info);
$info = "项目ID".$deal_id.":".$
$list = M("DealPayLog")-&where ( $condition )-&delete();
if ($list!==false) {
save_log($info.l("FOREVER_DELETE_SUCCESS"),1);
$this-&success (l("FOREVER_DELETE_SUCCESS"),$ajax);
save_log($info.l("FOREVER_DELETE_FAILED"),0);
$this-&error (l("FOREVER_DELETE_FAILED"),$ajax);
$this-&error (l("INVALID_OPERATION"),$ajax);
//项目日志
public function deal_log()
$deal_id = intval($_REQUEST['id']);
$deal_info = M("Deal")-&getById($deal_id);
$this-&assign("deal_info",$deal_info);
if($deal_info)
$map['deal_id'] = $deal_info['id'];
$model = D ("DealLog");
if (! empty ( $model )) {
$this-&_list ( $model, $map );
$this-&display();
public function del_deal_log()
$ajax = intval($_REQUEST['ajax']);
$id = $_REQUEST ['id'];
if (isset ( $id )) {
$condition = array ('id' =& array ('in', explode ( ',', $id ) ) );
$condition_log = array ('log_id' =& array ('in', explode ( ',', $id ) ) );
$rel_data = M("DealLog")-&where($condition)-&findAll();
foreach($rel_data as $data)
$deal_id = $data['deal_id'];
$info[] = $data['id'];
if($info) $info = implode(",",$info);
$info = "项目ID".$deal_id."的日志:".$
$list = M("DealLog")-&where ( $condition )-&delete();
if ($list!==false) {
$GLOBALS['db']-&query("update ".DB_PREFIX."deal set log_count = log_count - ".intval($list)." where id = ".$deal_id);
M("DealComment")-&where($condition_log)-&delete();
save_log($info.l("FOREVER_DELETE_SUCCESS"),1);
$this-&success (l("FOREVER_DELETE_SUCCESS"),$ajax);
save_log($info.l("FOREVER_DELETE_FAILED"),0);
$this-&error (l("FOREVER_DELETE_FAILED"),$ajax);
$this-&error (l("INVALID_OPERATION"),$ajax);
public function batch_refund()
$page = intval($_REQUEST['page']);
$page=($page&=0)?1:$
$page_size = 100;
$deal_id = intval($_REQUEST['id']);
$limit = (($page-1)*$page_size).",".$page_
$deal_info = M("Deal")-&where("id=".$deal_id." and is_delete = 0 and is_effect = 1 and is_success = 0 and end_time &&0 and end_time &".get_gmtime())-&find();
if(!$deal_info)
$this-&error("该项目不能批量退款");
require_once APP_ROOT_PATH."system/libs/user.php";
$refund_order_list = M("DealOrder")-&where("deal_id=".$deal_id." and is_refund = 0 and order_status = 3")-&limit($limit)-&findAll();
foreach($refund_order_list as $k=&$v)
$GLOBALS['db']-&query("update ".DB_PREFIX."deal_order set is_refund = 1 where id = ".$v['id']);
if($GLOBALS['db']-&affected_rows()&0)
modify_account(array("money"=&$v['total_price']),$v['user_id'],$v['deal_name']."项目失败退款");
$remain = M("DealOrder")-&where("deal_id=".$deal_id." and is_refund = 0 and order_status = 3")-&count();
if($remain==0)
$jump_url = u("Deal/online_index");
$this-&assign("jumpUrl",$jump_url);
M("Deal")-&where("id=".$deal_info['id'])-&setField("deal_extra_cache","");
M("DealLog")-&where("deal_id=".$deal_info['id'])-&setField("deal_info_cache","");
$this-&success("批量退款成功");
$jump_url = u("Deal/batch_refund",array("id"=&$deal_id,"page"=&$page+1));
$this-&assign("jumpUrl",$jump_url);
$this-&success("批量退款中，请勿刷新页面，剩余".$remain."条订单未退款");
function deal_update($deal_id){
$deal=$GLOBALS['db']-&getRow("select * from &".DB_PREFIX."deal where id=$deal_id");
$now_time=get_gmtime();
if(($deal['begin_time']&$now_time||$deal['end_time']&$now_time)&&($deal['invote_money']&0||$deal['virtual_price']&0||$deal['support_amount']&0)){
// $this-&error("项目已经开始无法编辑");
太长了吧，都看不下去了
--- 共有 1 条评论 ---
求兄弟们帮帮忙，太感谢了，这个代码挺重要的，感激不尽~
看个毛。。。排版没有，颜色没有，还这么长
--- 共有 1 条评论 ---
实在不好意思哈~
建议用二分法缩小可疑代码的范围
--- 共有 1 条评论 ---
啊啊~~有毒啊，快逃~~~
--- 共有 1 条评论 ---
确定吗兄弟。。。
看起来就是Thinkphp的语法，
不过太长了，，头晕。
--- 共有 1 条评论 ---
不好意思哈。太长了
看了一半，看不下去了，头晕
--- 共有 1 条评论 ---
不过太长了
--- 共有 2 条评论 ---
我上传了文件的截屏图片，兄弟你按我看下是不是别人后改的啊 ，别的文件是首字母大写的，而且打开后文件上边有版权和作者信息，这个有病毒的就没有，我怕删了会影响程序，求帮助
sorry太长了
报告结果是什么
--- 共有 2 条评论 ---
我上传了文件的截屏图片，兄弟你按我看下是不是别人后改的啊 ，别的文件是首字母大写的，而且打开后文件上边有版权和作者信息，这个有病毒的就没有，我怕删了会影响程序，求帮助 。。。
qex.virus.gen 高危风险项
--- 共有 4 条评论 ---
我上传了文件的截屏图片，兄弟你按我看下是不是别人后改的啊 ，别的文件是首字母大写的，而且打开后文件上边有版权和作者信息，这个有病毒的就没有，我怕删了会影响程序，求帮助
: 我扯皮呢……你代码太长，没细看啊……
还是把病毒的代码删除就可以了
好吧，那这个文件是不是不能要了
$money = doubleval($_REQUEST['money']);
--- 共有 2 条评论 ---
我上传了文件的截屏图片，兄弟你按我看下是不是别人后改的啊 ，别的文件是首字母大写的，而且打开后文件上边有版权和作者信息，这个有病毒的就没有，我怕删了会影响程序，求帮助
兄弟 只是把这个删除就行了吗