EcShop充值卡功能插件(7)

項目跟目錄創建控制器文件  ktcard.php
用戶儲值卡管理
<?php

define('IN_ECS', true);

require(dirname(__FILE__) . '/includes/init.php');

$action  = isset($_REQUEST['act']) ? trim($_REQUEST['act']) : 'default';

// 不需要登錄的操作或自己驗證是否登錄（如ajax處理）的act
$not_login_arr = array('act_login','update_ktcard','next_ktcard');


$ui_arr = array('default');


if (empty($_SESSION['user_id']))
{
    if (!in_array($action, $not_login_arr))
    {
        if (in_array($action, $ui_arr))
        {
            if (!empty($_SERVER['QUERY_STRING']))
            {
                $back_act = 'ktcard.php?' . $_SERVER['QUERY_STRING'];
            }
            $action = 'default';
        }
        else
        {
            //未登錄提交數據。非正常途徑提交數據！
            die('已經記錄此非法操作IP');
        }
    }
}


if ($action == 'default')
{
   
    assign_template();
    $smarty->assign('page_title', '用戶儲值卡管理');   
    $smarty->assign('ur_here',    '儲值卡');
    $smarty->assign('helps',      get_shop_help());   
    $smarty->assign('act',    'act_login');   
    $smarty->assign('action',      $action);  
    $smarty->assign('back_act',      $back_act);       
   
    $smarty->display('ktcard.dwt');
   
}


if ($action == 'act_login') {

    $card_sn    = isset($_REQUEST['card_sn'])? trim($_REQUEST['card_sn']): '0';
 
    $card_pwd   = isset($_REQUEST['card_pwd'])? trim($_REQUEST['card_pwd']): '0';

        if ($card_sn != '0')

        {

               $sql = "SELECT * FROM " .$ecs->table('kt_bcards').