<?php
session_start();

//var_dump($_SESSION['username']);
if($_SESSION['username']==""){echo "<script language='javascript'>;alert('请登录账户后操作');location.href='login/login.php'</script>";}
else if($_SESSION['class']=="0"){echo "<script language='javascript'>;alert('请使用管理员身份登录');location.href='login/login.php'</script>";}
?>





<?php

include("db.php");
include("input_class.php");

$b=new input();
$username=$b->post('username');
$password=$b->post('password');
$confirm=$b->post('confirm');
//$chart=$b->post('com_charter');
$id=$b->post('company');		//post得到的是select发来的value值




$sql="SELECT company  from company WHERE id='{$id}' ";
$mysqli_result=$mysqli->query($sql);
//var_dump($mysqli_result);

/*通过id得到company字段*/
if($row=$mysqli_result->fetch_array()){
	$company=$row['company'];
}
//var_dump($company);
mysqli_free_result($mysqli_result);



$sql2="SELECT * from useradmin WHERE username='{$username}'";
$mysqli_result2=$mysqli->query($sql2);





/*定义一个随机字符串函数  用于加密*/
function getRandChar(){
	$len=rand(10,20);
   $str = null;
   $strPol = "ABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789abcdefghijklmnopqrstuvwxyz!@#$%^&*()_+-=[]{};':<>?/.,|";
   $max = strlen($strPol)-1;

   for($i=0;$i<$len;$i++){
    $str.=$strPol[rand(0,$max)];//rand($min,$max)生成介于min和max两个数之间的一个随机整数
   }

   return $str;
  }



/*判断两密码是否相同*/
if($password==$confirm){
	
	if($row2=$mysqli_result2->fetch_array()){
		echo "<script language='javascript'>;alert('用户名已存在');location.href='admin_add_user.php'</script>";
	}
	
	else{
		$seed1=getRandChar();
		$seed2=getRandChar();
		$password=hash("sha256",$seed1.$password.$seed2);				//加密算法
		$sql3="INSERT INTO useradmin (`username`,`seed1`,`password`,`seed2`,`company`) 
							values('{$username}','{$seed1}','{$password}','{$seed2}','{$company}')";
		$is=$mysqli->query($sql3);
			if($is){
				echo "<script language='javascript'>;alert('添加用户成功');location.href='admin.php'</script>";
			}
			else{
				echo "<script language='javascript'>;alert('添加用户出错\\n提示：输入用户名后回车确认');location.href='admin_add_user.php'</script>";
			}
	}
	
	
}
else{//如果不同
	echo "<script language='javascript'>;alert('两次密码不相同');location.href='admin_add_user.php'</script>";
}
mysqli_free_result($mysqli_result2);





















?>