k_online_backend/service/tools.class.php

<?php

if (!defined('IN_ONLINE')) {
    exit('Access Denied');
}

/**
 * Description of operation_log
 *
 * @author Administrator
 */
class tools {

    private static $_tools;

    public static function getInstance() {
        if (!self::$_tools) {
            $c = __CLASS__;
            self::$_tools = new $c;
        }
        return self::$_tools;
    }

    /*
     * update password when login success
    */
    public function updatePassword() {
        if ($_SESSION['ONLINE_USER']['is_demo'] == "t") {
            $str = "DEMO cannot update password.";
        } else {
            $opsw = common::check_input($_POST ['opsw']);
            $npsw = common::check_input($_POST ['npsw']);
            $username = _getLoginName();

            $msg = common::checkPasswordRule($username, $npsw);
            //为空代表验证通过
            if (empty($msg)) {
                $sql = "select ra_password as password from ra_online_user where lower(user_login) = '" . strtolower($username) . "'";
                $rs = common::excuteObjectSql($sql);
                $str = '';
                if (!empty($rs)) {
                    if ($rs['password'] == $opsw) {
                        $sql = "UPDATE ra_online_user SET ra_password = '" . $npsw . "', last_pwd_change = now() WHERE lower(user_login) = '" . strtolower($username) . "'";
                        $rls = common::excuteUpdateSql($sql);
                        if (!$rls) {
                            $str = "Password modification failed!";
                        } else {
                            $str = " Your password has been modified!";
                        }
                    } else {
                        $str = "Old password is incorrect!";
                    }
                } else {
                    $str = "Old password is incorrect!";
                }
            } else {
                $str = $msg;
            }
        }
        $returnData = array("msg" => $str);
        common::echo_json_encode(200, $returnData);
        exit();
    }

    public function markSystem(){
        $operate = utils::_get('operate');
        $operate = strtolower($operate);

        if ($operate == "mark_save") {
            $suggestion = utils::implode(",",$_POST['suggestion']); 
            $proposal = common::check_input($_POST['proposal']); 
            $expression = common::check_input($_POST['expression']);
            $complete_funtionality = common::check_input($_POST['Complete_funtionality']);
            $accurate_data = common::check_input($_POST['Accurate_data']);
            $clear_information = common::check_input($_POST['Clear_information']);
            $easy_to_use = common::check_input($_POST['Easy_to_use']);
            $system_Performance = common::check_input($_POST['System_Performance']);
            $username = common::check_input($_POST['username']);

            $user_type = _isApexLogin() ? "employee" : "customer";
            if(!isset($_SESSION['ONLINE_USER'])){
                $user_type = "other";
            }
            $loginName = _getLoginName();
            $loginEamil = _getLoginEamil();
            //如果在没有登录前，没有登录信息，指定用户-- 这里逻辑取消，没有登录相当于匿名用户的评价，无法获取用户名
            // if(!isset($_SESSION['ONLINE_USER'])){
            //     $user_type = "Customer";
            //     if(!empty($username)){
            //         $loginName = $username;
            //         $loginEamil = common::excuteOneSql("select email from public.ra_online_user u where lower(user_login) = '" . strtolower($username) . "'");
            //     }
            // }
            $sql = "INSERT INTO public.customer_service_user_mark(user_type, user_name, suggestion, proposal, expression, complete_funtionality, 
                    accurate_data, clear_information, easy_to_use, system_performance, 
                    created_time,email)
            VALUES ('$user_type', '$loginName', '$suggestion', '$proposal', '$expression', '$complete_funtionality', 
                    '$accurate_data', '$clear_information', '$easy_to_use', '$system_Performance', now(),'$loginEamil')";
            common::excuteUpdateSql($sql);

            $data = array("msg" =>"success");
            common::echo_json_encode(200,$data);
            exit();
        }
    }

}

?>