退款&罰款 FOR 買賣帖

[貝斯特]

HACK:退款&罰款 FOR 買賣帖
Hack來源：http://phpbbs.cn18.net
作者:cnteacher
修改:liuqiang
功能:

如果賣帖者詐騙錢財，管理員只需點擊[退款&罰款]，即可自動退還買帖者所交款項，扣除賣帖者所得款項，并對賣帖者處以10倍于該帖歷史最高售價的罰款；

如果賣帖者主動退款，賣帖者只需點擊[退款&罰款]，即可自動退還買帖者所交款項，扣除自己所得款項，并免去懲罰！

對詐騙錢財者的懲罰是非常無情的，現金不足扣存款，直至扣完全部現金和存款！

前提當然是要先安裝好買賣文章的Hack。

安裝:非常簡單，只需添加3處內容

10.23 19:30更新:

if (!isadmin || $discuz_user != $postuser) showmessage('對不起，您無此權限！');

改為:

if (!isadmin && $discuz_user != $postuser) showmessage('對不起，您無此權限！');

第一步、修改postpay.php
在文件結尾，?> 符號之前添加下面的代碼。

if ($action =="refund"){ 
        $query = $db->query("SELECT author FROM $table_posts where pid='$pid'"); 
        $post=$db->fetch_array($query); 
        $postuser = $post['author']; 
        if (!isadmin && $discuz_user != $postuser) showmessage('對不起，您無此權限！'); 
        $query = $db->query("SELECT COUNT(*) as paycount,SUM(money) as allmoney FROM $hacktable_postpay where tid='$tid'and pid='$pid' and sellcount='$sellcount'"); 
        $pay = $db->fetch_array($query); 
        if ($pay['paycount']<1){ 
                showmessage('沒有找到該貼的購買記錄！請返回。'); 
        } 
        if ($isadmin){ 
        $query = $db->query("SELECT MAX(money) as maxvalue FROM $hacktable_postpay where tid='$tid'and pid='$pid' and sellcount='$sellcount'"); 
        $postpay = $db->fetch_array($query); 
        $maxvalue = $postpay['maxvalue']; 
        $reward = 10*$maxvalue;//10為懲罰的倍數 
        } 
        if (submitcheck($refundsubmit)){ 
                $password = md5($password); 
                $query = $db->query("SELECT * FROM $table_members where username='$discuz_user'"); 
                $member = $db->fetch_array($query); 
                if ($password != $member['password']) showmessage('密碼錯誤，您不能進行此操作，請返回重試！'); 
                $result = $db->query("SELECT * FROM $hacktable_postpay where tid='$tid'and pid='$pid' and sellcount='$sellcount'"); 
                $nums=mysql_num_rows($result); 
                for($i = 0; $i < $nums; $i++) { 
                    $payid = mysql_result($result,$i,'id'); 
                    $payuser = mysql_result($result,$i,'username'); 
                    $paymoney = mysql_result($result,$i,'money'); 
                            $query = $db->query("UPDATE $table_members SET  money=money+$paymoney WHERE username='$payuser'"); 
                            $query = $db->query("UPDATE $hacktable_postpay SET  money=0 WHERE id='$payid'"); 
                } 
                $allmoney = $pay['allmoney']; 
                if ($postuser){ 
                        $result = $db->query("SELECT * FROM $table_members where username='$postuser'"); 
                        $money = mysql_result($result,0,'money'); 
                        $bank = mysql_result($result,0,'bank'); 
                        if ($money < $allmoney){ 
                                if (($money+$bank) <$allmoney){ 
                                        $query = $db->query("UPDATE $table_members SET  money=0 WHERE username='$postuser'"); 
                                        $query = $db->query("UPDATE $table_members SET  bank=0 WHERE username='$postuser'"); 
                                } else { 
                                        $newbank = $money+$bank-$allmoney; 
                                        $query = $db->query("UPDATE $table_members SET  money=0 WHERE username='$postuser'"); 
                                        $query = $db->query("UPDATE $table_members SET  bank=$newbank username='$postuser'"); 
                                }                 
                        } else { 
                                $query = $db->query("UPDATE $table_members SET  money=money-$allmoney WHERE username='$postuser'"); 
                        } 
                } 
                if ($isadmin){ 
                        $result = $db->query("SELECT * FROM $table_members where username='$postuser'"); 
                        $money = mysql_result($result,0,'money'); 
                        $bank = mysql_result($result,0,'bank'); 
                        if ($money < $reward){ 
                                if (($money+$bank) <$reward){ 
                                        $query = $db->query("UPDATE $table_members SET  money=0 WHERE username='$postuser'"); 
                                        $query = $db->query("UPDATE $table_members SET  bank=0 WHERE username='$postuser'"); 
                                } else { 
                                        $newbank = $money+$bank-$reward; 
                                        $query = $db->query("UPDATE $table_members SET  money=0 WHERE username='$postuser'"); 
                                        $query = $db->query("UPDATE $table_members SET  bank=$newbank username='$postuser'"); 
                                }                 
                        } else { 
                                $query = $db->query("UPDATE $table_members SET  money=money-$reward WHERE username='$postuser'"); 
                        } 
                } 
                showmessage('退款&罰款成功！',"viewthread.php?tid=$tid&page=$page&pid=$pid#pid$pid"); 
        } else { 
                include template('postpay_submit'); 
        } 
}

第二步、修改postpay_submit模板
在文件結尾，{template footer}之前添加下面的代碼。

<!--{if $action=='refund'}-->
<form method="post" action="postpay.php">
<input type="hidden" name="action" value="refund">
<input type="hidden" name="pid" value="$pid">
<input type="hidden" name="sid" value="$sid">
<input type="hidden" name="tid" value="$tid">
<input type="hidden" name="sellcount" value="$sellcount">
<table cellspacing="0" cellpadding="0" border="0" width="400" align="center">
<tr><td bgcolor="{BORDERCOLOR}">
<table border="0" cellspacing="{BORDERWIDTH}" cellpadding="{TABLESPACE}" width="100%">
<tr class="header">
<td colspan="2">退款確認</td>
</tr>
<tr>
<td bgcolor="{ALTBG1}" width="21%">{lang username}:</td>
<td bgcolor="{ALTBG2}">$discuz_userss  <span class="smalltxt">[<a href="logging.php?action=logout">{lang member_logout}</a>]</span></td>
</tr>
<tr>
<td bgcolor="{ALTBG1}" width="21%">退款總額 :</td>
<td bgcolor="{ALTBG2}">$pay[allmoney]金幣</td>
</tr>
<!--{if $isadmin}-->
<tr>
<td bgcolor="{ALTBG1}" width="21%">罰款總額 :</td>
<td bgcolor="{ALTBG2}">10*$maxvalue = $reward 金幣(懲罰用戶$postuser)</td>
</tr>
<!--{/if}-->
<tr>
<td bgcolor="{ALTBG1}" width="21%">確認退款 :</td>
<td bgcolor="{ALTBG2}"><input type="password" name="password" size="25" tabindex="2">請輸入用戶密碼</td>
</tr>
</table>
</td></tr></table><br>
<center><input type="submit" name="refundsubmit" value="{lang submit}"></center>
</form>
<!--{/if}-->

第三步、修改 include/discuzcode.php
搜索

)</span><br>".str_pad('',35,'*')."<br>";

在前面加入

&nbsp;[<a href="postpay.php?action=refund&tid=$tid&pid=$post[pid]&sellcount=$post_sellcount\" title=\"退還全部所得款項\" target=_blank>退款&罰款</a>]