php ajax仿dedecms 验证新闻是否存在

<script language="网页特效">
function startrequestusingpost() {
         if(checktitle()==false)
         {
               return;
         }
           var title = document.getelementbyid("title").value;
           createxmlhttprequest();
           xmlhttp.open("post","checkntype",true);
           xmlhttp.onreadystatechange = processresponse;
           xmlhttp.setrequestheader("content-type","application/x-www-form-urlencoded");
           xmlhttp.send("title=" + title);
      }
     
      function processresponse() {
           if(xmlhttp.readystate == 4) {
                if(xmlhttp.status == 200) {
                    var result = xmlhttp.responsetext;
              if(result==1){
                document.getelementbyid("message").style.display="inline";
                document.getelementbyid("btnadd").disabled="disabled";
                }else
                {
                  document.getelementbyid("message").style.display="none";
                 document.getelementbyid("btnadd").disabled="";
                 }
                }
           }
      }
      function checktitle()
      {
       var title=document.getelementbyid("title").value;
          if(title=="")
          {
           document.getelementbyid("lbltitle").style.display="inline";
            return false;
          }else
          {
          document.getelementbyid("lbltitle").style.display="none";
           return true;
       }
      }

</script>

session_start();

/* get post */  
 if (!function_exists("getpost")){function getpost(){if(count($_post)){foreach($_post as $key => $value){global ${$key};${$key}=$value;}}}}

/* get get */  
 if (!function_exists("getget")){function getget(){if(count($_get)){foreach($_get as $key => $value){global ${$key};$$key=($value);}}}}

/* sql escape string */
if (!function_exists("escapeit")){
function escapeit($text){ 
 if (get_magic_quotes_gpc()) $text=strips教程lashes($text);
 if (!is_numeric($text)) $text=mysql教程_real_escape_string($text);
 return $text;
}}
 
getpost(); //获取post过来的数据

$rs = $db->query("select * from `backend_user` where binary `login` = '".escapeit($login)."' and binary `password` = '".md5($password)."'");

if (mysql_num_rows($rs) > 0) {
 $row = $db->fetch_array($rs);
 $_session["smartinfo_sysid"] = $row["user_id"];
 $_session["smartinfo_syslogin"] = $row["login"];
 $db->query("update `backend_user` set `last_logon` = '".date("y-m-d h:i:s")."' where `id` = '".$row["id"]."'");
 header("location: index2.php");
} else {
 header("location: index.php?status=fail");
}

<table width="100%" height="100%" cellpadding="0" cellspacing="0"><tr><td>
  <table width="350" align="center" cellpadding="0" cellspacing="0">
      <tr>
        <td align="center" class="heading"><div style="font-size:12px;" align="left">control panel</div></td>
      </tr>
  </table>
  <table width="350" align="center" cellpadding="0" cellspacing="0" class="tableborder">
  <form action="login.php" method="post" name="login" id="login" onsubmit="return checkvalid(this);">
   
    <tr>
      <td align="center"><img src="images/logo.jpg" width="198" height="61"></td>
      </tr>
    <tr>
      <td class="c1" align="right" style="height:10px"></td>
    </tr>
    <tr><td><table width="85%" align="center" cellpadding="0" cellspacing="0">
 <tr>
      <td style="font-size:12px"><b>login id:</b></td>
      <td align="right"><input name="login" type="text" style="width:220px" ></td>
    </tr>
    <tr>
      <td style="font-size:12px"><b>password:</b></td>
      <td align="right"><input name="password" type="password" style="width:220px" size="2" maxlength="15"></td>
    </tr>
    <tr>
  <td></td>
      <td align="right" valign="top"><input type="submit" name="submit" id="submit" value="login" class="button"></td>
    </tr>
 </table></td></tr>
 <tr>
   <td class="c1" align="right" style="height:10px"></td>
 </tr>
  </form>
</table>
</td></tr></table>

$disonline = true;
//新登陆时显示最近内容的条数(默认为30条)
$leastnum = 30;
//默认的房间名(默认是每天换一个文件)，如果去掉d，则是每月换一个文件
$room = date("y-m-d");
//房间保存路径,必须以/结尾
$roomdir = "rooms/";
//编码方式
$charset = "utf-8";
//客户端最大显示内容条数(建议不要太大)
$maxdisplay = 300;

//语言
$lang = array(
//聊天室描述
"description"=>"欢迎来到迷你ajax聊天室。最新版本 1.2。下载请到<a href='http://111cn.net' target=_blank>www.111cn.net</a>",
//聊天室标题
"title"=>"mini ajax chatroom by longbill",
//第一个到聊天室的欢迎
"firstone"=>"<span style='color:#16a5e9;'>welcome to longbill's mini ajax chatroom!</span>",
//当信息有禁止内容时显示
"ban"=>"i am a pig!",
//关键字
"keywords"=>"聊天室,迷你,小型,ajax,chat,chatroom,longbill,111cn.net,php,网页特效",
//发言提示
"hereyourwords" => "在这里发言!"
);

error_reporting(e_all ^ e_notice ^ e_warning);
header("content-type:text/html; charset=utf-8");

$get_past_sec = 3; //如果发现丢话，可以适当调大这个值
$touchs = 10; //检查在线人数的时间间隔

if (!function_exists("file_get_contents"))
{
 function file_get_contents($path)
 {
  if (!file_exists($path)) return false;
  $fp=@fopen($path,"r");
  $all=fread($fp,filesize($path));
  fclose($fp);
  return $all;
 }
}

if (!function_exists("file_put_contents"))
{
 function file_put_contents($path,$val)
 {
  $fp=@fopen($path,"w");
  fputs($fp,$val);
  fclose($fp);
  return true;
 }
}

$title = $lang["title"];
$earlier = 10;
$description = $lang["description"];
$origroom = $room;
$least = ($_get["dis"])?intval($_get["dis"]):$leastnum;
$touchme = $_post['touchme'];
if (!is_dir($roomdir)) @mkdir($roomdir) or die("error when creating folder $roomdir");
$room = $_get['room'];
if (!$room) $room = $_post["room"];
$room = checkfilename($room);
if (!$room) $room = $origroom;
$filename = $roomdir.$room.".dat.php";
$datafile = $roomdir.$room.".php";
if (!file_exists($filename)) @file_put_contents($filename,'<?php die();?>'." ".time()."|".$lang["firstone"]." ");
if (!file_exists($datafile)) @file_put_contents($datafile,'<?php die();?>'." ");
$action = $_post["action"];

function checkfilename($file)
{
 if (!$file) return "";
 $file = trim($file);
 $a = substr($file,-1);
 $file = eregi_replace("^[.\/]*","",$file);
 $file = eregi_replace("[.\/]*$","",$file);
 $arr = array("../","./","/","\","..\",".\");
 $file = str_replace($arr,"",$file);
 return $file;
}

<?php
// 说明：获取无参数url

function curpageurl()
{
    $pageurl = 'http';

    if ($_server["https教程"] == "on")
    {
        $pageurl .= "s";
    }
    $pageurl .= "://";

    if ($_server["server_port"] != "80")
    {
        $pageurl .= $_server["server_name"].":" . $_server["server_port"] . $_server['php_self'];
    }
    else
    {
        $pageurl .= $_server["server_name"] . $_server['php_self'];
    }
    return $pageurl;
}
?>

<?php
// 说明：获取完整url

function curpageurl()
{
    $pageurl = 'http';

    if ($_server["https"] == "on")
    {
        $pageurl .= "s";
    }
    $pageurl .= "://";

    if ($_server["server_port"] != "80")
    {
        $pageurl .= $_server["server_name"] . ":" . $_server["server_port"] . $_server["request_uri"];
    }
    else
    {
        $pageurl .= $_server["server_name"] . $_server["request_uri"];
    }
    return $pageurl;
}
?>

function generate_password( $length = 8 ) {
    // 密码字符集，可任意添加你需要的字符
    $chars = 'abcdefghijklmnopqrstuvwxyzabcdefghijklmnopqrstuvwxyz0123456789!@#$%^&*()-_ []{}<>~`+=,.;:/?|';

    $password = '';
    for ( $i = 0; $i < $length; $i++ )
    {
        // 这里提供两种字符获取方式
        // 第一种是使用 substr 截取$chars中的任意一位字符；
        // 第二种是取字符数组 $chars 的任意元素
        // $password .= substr($chars, mt_rand(0, strlen($chars) - 1), 1);
        $password .= $chars[ mt_rand(0, strlen($chars) - 1) ];
    }

    return $password;
}

function create_password($pw_length = 8)
{
    $randpwd = '';
    for ($i = 0; $i < $pw_length; $i++)
    {
        $randpwd .= chr(mt_rand(33, 126));
    }
    return $randpwd;
}

// 调用该函数，传递长度参数$pw_length = 6
echo create_password(6);

<?php
function getmicrotime()
{
    list($usec, $sec) = explode(" ",microtime());
    return ((float)$usec + (float)$sec);
}
 
// 记录开始时间
$time_start = getmicrotime();
   
// 这里放要执行的php代码，如:
// echo create_password(6);
 
// 记录结束时间
$time_end = getmicrotime();
$time = $time_end - $time_start;

 // 输出运行总时间
echo "执行时间 $time seconds";
?>