<div><input name="alias" id="alias" /></div>
<div style="margin-top:3px;">
文章访问密码：<input type="text" value="" name="password" id="password" style="width:80px;" />
<span id="post_options">
<input type="checkbox" value="y" name="top" id="top" />
<label for="top">首页置顶</label>
<input type="checkbox" value="y" name="sortop" id="sortop" />
<label for="sortop">分类置顶</label>
<input type="checkbox" value="y" name="allow_remark" id="allow_remark" checked="checked" />
<label for="allow_remark">允许评论</label>
</span>
</div>
</div>
<div id="post_button">
<input name="token" id="token" value="<?php
echo LoginAuth::genToken();
?>
" type="hidden" />
<input type="hidden" name="ishide" id="ishide" value="">
<input type="submit" value="发布文章" onclick="return checkform();" class="button" />
<input type="hidden" name="author" id="author" value=<?php
echo UID;
?>
/>
<input type="button" name="savedf" id="savedf" value="保存草稿" onclick="autosave(2);" class="button" />
</div>
</div>
</form>
<div class=line></div>
<script>
loadEditor('content');
function login($username, $password)
{
$username = addslashes($username);
$password = addslashes($password);
// 检查用户权限
if (true !== LoginAuth::checkUser($username, $password, '', 'n')) {
error_message(403, '用户名密码错误');
return false;
}
// 返回用户信息
return LoginAuth::getUserDataByLogin($username);
}
array_push($custom_topimgs, substr($topimg_path, 3));
Option::updateOption('topimg', substr($topimg_path, 3));
Option::updateOption('custom_topimgs', serialize($custom_topimgs));
$CACHE->updateCache('options');
emDirect("./template.php?action=custom-top&activated=1");
}
//安装模板
if ($action == 'install') {
include View::getView('header');
require_once View::getView('template_install');
include View::getView('footer');
View::output();
}
//上传zip模板
if ($action == 'upload_zip') {
LoginAuth::checkToken();
$zipfile = isset($_FILES['tplzip']) ? $_FILES['tplzip'] : '';
if ($zipfile['error'] == 4) {
emDirect("./template.php?action=install&error_d=1");
}
if (!$zipfile || $zipfile['error'] >= 1 || empty($zipfile['tmp_name'])) {
emMsg('模板上传失败');
}
if (getFileSuffix($zipfile['name']) != 'zip') {
emDirect("./template.php?action=install&error_a=1");
}
$ret = emUnZip($zipfile['tmp_name'], '../content/templates/', 'tpl');
switch ($ret) {
case 0:
emDirect("./template.php?activate_install=1#tpllib");
break;
define('OFFICIAL_SERVICE_HOST', 'http://www.emlog.net/');
//官方服务域名
$sta_cache = $CACHE->readCache('sta');
$user_cache = $CACHE->readCache('user');
$action = isset($_GET['action']) ? addslashes($_GET['action']) : '';
//登录验证
if ($action == 'login') {
$username = isset($_POST['user']) ? addslashes(trim($_POST['user'])) : '';
$password = isset($_POST['pw']) ? addslashes(trim($_POST['pw'])) : '';
$ispersis = isset($_POST['ispersis']) ? intval($_POST['ispersis']) : false;
$img_code = Option::get('login_code') == 'y' && isset($_POST['imgcode']) ? addslashes(trim(strtoupper($_POST['imgcode']))) : '';
$loginAuthRet = LoginAuth::checkUser($username, $password, $img_code);
if ($loginAuthRet === true) {
LoginAuth::setAuthCookie($username, $ispersis);
emDirect("./");
} else {
LoginAuth::loginPage($loginAuthRet);
}
}
//退出
if ($action == 'logout') {
setcookie(AUTH_COOKIE_NAME, ' ', time() - 31536000, '/');
emDirect("../");
}
if (ISLOGIN === false) {
LoginAuth::loginPage();
}
$request_uri = strtolower(substr(basename($_SERVER['SCRIPT_NAME']), 0, -4));
if (ROLE == ROLE_WRITER && !in_array($request_uri, array('write_log', 'admin_log', 'attachment', 'blogger', 'comment', 'index', 'save_log'))) {
emMsg('权限不足！', './');
}
<?php
/**
* 全局项加载
* @copyright (c) Emlog All Rights Reserved
*/
error_reporting(7);
ob_start();
header('Content-Type: text/html; charset=UTF-8');
define('EMLOG_ROOT', dirname(__FILE__));
require_once EMLOG_ROOT . '/config.php';
require_once EMLOG_ROOT . '/include/lib/function.base.php';
doStripslashes();
$CACHE = Cache::getInstance();
$userData = array();
define('ISLOGIN', LoginAuth::isLogin());
//用户组:admin管理员, writer联合撰写人, visitor访客
define('ROLE_ADMIN', 'admin');
define('ROLE_WRITER', 'writer');
define('ROLE_VISITOR', 'visitor');
//用户角色
define('ROLE', ISLOGIN === true ? $userData['role'] : ROLE_VISITOR);
//用户ID
define('UID', ISLOGIN === true ? $userData['uid'] : '');
//站点固定地址
define('BLOG_URL', Option::get('blogurl'));
//模板库地址
define('TPLS_URL', BLOG_URL . 'content/templates/');
//模板库路径
define('TPLS_PATH', EMLOG_ROOT . '/content/templates/');
//解决前台多域名ajax跨域
<?php
require_once "../../includes/engine.php";
templates::display('header');
if (isset($_POST['MYSQL'])) {
$login = $_POST['MYSQL'];
$username = dbSanitize($login['username']);
$pass = dbSanitize($login['password']);
$accepted = LoginAuth::loginUser($username, $pass);
if ($accepted) {
$feedback = "<div class='alert alert-success'> Logged In Successfully! </div>";
header("refresh:3;url=/");
} else {
if (!LoginAuth::checkUsername($username)) {
$feedback = "<div class='alert alert-danger'> Login Failed, wrong <strong><u> username </u></strong> please try again </div>";
} else {
$feedback = "<div class='alert alert-danger'> Login Failed, wrong <strong><u> password </u></strong> please try again </div>";
}
}
$localvars->set('feedback', $feedback);
}
?>
<div class="row">
<div class="col-xs-12 col-sm-offset-2 col-sm-8">
<h2> Login </h2>
</div>
<div class="col-xs-12 col-sm-offset-2 col-sm-8 register well">
{local var="feedback"}
<form action=<?php
<?php
require_once "../../includes/engine.php";
// Just save the session info
if (LoginAuth::checkAuthorization()) {
ProgressLog::saveSession();
}
header("refresh:5;url=/?sessionSaved");
templates::display('header');
?>
<div class="row">
<div class="col-xs-12 col-sm-offset-2 col-sm-8 well text-center">
<h2> Logging Out</h2><br>
<i class="fa fa-spinner fa-spin fa-5x"></i><br><br>
<p> Saving your information into the system so that your information and progress remains intact while finishing the course modules. </p>
</div>
</div>
<?php
templates::display('footer');
<?php
require_once "../../includes/engine.php";
if (!isset($_GET['MYSQL']['username'])) {
header('Location:/');
}
$username = $_GET['MYSQL']['username'];
$userExsists = array(LoginAuth::checkUsername($username));
header('Content-Type: application/json');
print json_encode($userExsists);
<?php
$localvars = localvars::getInstance();
$authorized = LoginAuth::checkAuthorization();
if (!$authorized) {
$loginHTML = "<div class='login'>";
$loginHTML .= "<a href='/registration' class='btn btn-primary'> Register For Account </a>";
$loginHTML .= "<a href='/login' class='btn btn-primary'> Login </a>";
$loginHTML .= "</div>";
} else {
$loginHTML = "<div class='login'>";
$loginHTML .= "<a href='/login/logout' class='btn btn-primary logout'> Logout </a>";
$loginHTML .= "</div>";
}
$localvars->set('login', $loginHTML);
exit;
} else {
if (isset($_POST['RK_Remove'])) {
echo Film_Model::RK_Remove($_POST['filmid'], $_POST['type']);
exit;
} else {
if (isset($_POST['RK_Error'])) {
echo Film_Model::Fav_Error($_POST['epid']);
exit;
} else {
if (isset($_POST['RK_Support'])) {
echo Support_Model::AddLog($_POST['type'], $_POST['text']);
exit;
} else {
if (isset($_POST['RK_Edituser'])) {
echo LoginAuth::Edituser($_POST['fullname'], $_POST['facebookid'], $_POST['captcha']);
exit;
} else {
if (isset($_POST['RK_Download'])) {
echo GetLink::buil_down($_POST['epid']);
exit;
}
}
}
}
}
}
}
}
}
}
emDirect("./?action=tw");
}
if ($action == 'login') {
Option::get('login_code') == 'y' ? $ckcode = "<span>验证码</span>\n <div class=\"val\"><img src=\"../include/lib/checkcode.php\" /><br />\n\t<input name=\"imgcode\" id=\"imgcode\" type=\"text\" />\n </div>" : ($ckcode = '');
include View::getView('header');
include View::getView('login');
include View::getView('footer');
View::output();
}
if ($action == 'auth') {
session_start();
$username = addslashes(trim($_POST['user']));
$password = addslashes(trim($_POST['pw']));
$img_code = Option::get('login_code') == 'y' && isset($_POST['imgcode']) ? addslashes(trim(strtoupper($_POST['imgcode']))) : '';
$ispersis = true;
if (LoginAuth::checkUser($username, $password, $img_code) === true) {
loginAuth::setAuthCookie($username, $ispersis);
emDirect('?tem=' . time());
} else {
emDirect("?action=login");
}
}
if ($action == 'logout') {
setcookie(AUTH_COOKIE_NAME, ' ', time() - 31536000, '/');
emDirect('?tem=' . time());
}
function mMsg($msg, $url)
{
include View::getView('header');
include View::getView('msg');
include View::getView('footer');
<div class="middle_right" style="width:35%">
<label class="tit">Recuperar</label>
<div class="stat" style="color:#414141">
Porfavor ingrese su Email correcto para que pueda recuperar su cuenta.</div>
</div>
</div>
</div>
<?php
} elseif ($userid) {
$user = MySql::dbselect('username,email,lastlogin,lastreg,facebookid,fullname,ugroup,fav_feature,fav_playlist', 'user', "id = '{$userid}'");
$fullname = $user[0][5];
$username = $user[0][0];
$email = $user[0][1];
$lastlogin = GetDateT($user[0][2]);
$lastreg = GetDateT($user[0][3]);
$ugroup = LoginAuth::GroupUser($user[0][6]);
$facebookurl = $user[0][4];
if (!$image) {
$image = TEMPLATE_URL . 'images/noavatar.jpg';
}
?>
<div class="p-profile-cover">
<!-- <a href="javascript:void(0)" class="change-cover">Thay đổi ảnh bìa</a>-->
</div>
<div class="p-profile clearfix" id="edit_user">
<div class="basic-info">
<img src="<?php
echo $image;
?>
" alt=""/>
<div class="profile-name">
/**
* @des 前台微语界面输出发布微语框
* @param null
* @return string
*/
function showTwiter()
{
if (!isUserLogin()) {
return '';
}
//尚未登录直接返回
//默认采用后台上传的头像图片 后台未上传图片或被删除 使用gravatar头像
global $CACHE;
$Usr = $CACHE->readCache('user');
$Gravatar = BLOG_URL . $Usr[1]['avatar'];
if (!$Usr[1]['avatar']) {
$Gravatar = J_getGravatar($Usr[1]['mail'], 100);
}
$Token = LoginAuth::genToken();
$BLOG_URL = BLOG_URL;
$gav = '<div class="addTwiterContainer"><div class="addTwiterAvatar"><img src="' . $Gravatar . '" title="' . $Usr[1]['name'] . '"></div>';
$addView = <<<STR
\t<div class="addTwiterContent">
\t\t<form method="post" action="{$BLOG_URL}admin/twitter.php?action=post" class="addTwiterForm">
\t\t\t<input name="token" id="token" value="{$Token}" type="hidden" />
\t\t\t<p class="addTwiterInput"><textarea id="addTwiter" title="来点碎碎念吧~" placeholder="来点碎碎念吧~" name="t"></textarea></p>
\t\t\t<p class="AddTwiterSubmit"><button type="submit" name="submit" class="sub_btn addTwiterBtn"><i class="fa fa-check-circle-o"></i> 发布微语</button><span class="addTwiterInfo">Ctrl+Enter快速提交</span></p>
\t\t</form>
\t</div>
\t</div>
STR;
return $gav . $addView;
}
$errors['password'] = "******";
}
if (count($password) >= 8) {
$errors['passwordLength'] = "password is not long enough";
}
if (!$validate->emailAddr($email)) {
$errors['email'] = "email is not valid";
}
if (LoginAuth::checkEmail($email)) {
$errors['email'] = "user email is already in the system, please try logging in";
}
if (LoginAuth::checkUsername($username)) {
$errors['username'] = "******";
}
if (is_empty($errors)) {
$test = LoginAuth::registerUser($username, $password, $email);
$succString = "<div class='alert alert-success'> <strong> {$username} Congrats </strong>, you have been registered. </div>";
$localvars->set('feedback', $succString);
header("refresh:3;url=/login");
} else {
$errorString = "<div class='alert alert-danger'><ul><li>" . implode("</li><li>", $errors) . "</li></ul></div>";
$localvars->set('feedback', $errorString);
}
}
?>
<div class="col-xs-12 col-sm-offset-2 col-sm-8">
<h2> Register </h2>
</div>
<div class="col-xs-12 col-sm-offset-2 col-sm-8 register well">
<?php
require_once "../../includes/engine.php";
templates::display('header');
if (LoginAuth::checkAuthorization()) {
ProgressLog::saveSession();
LoginAuth::logout();
header("refresh:3;url=/?loggedOut=true");
} else {
header("refresh:3;url=/?loggedOut=false");
}
?>
<div class="row">
<div class="col-xs-12 col-sm-offset-2 col-sm-8 well text-center">
<h2> Logging Out</h2><br>
<i class="fa fa-spinner fa-spin fa-5x"></i><br><br>
<p> Please wait while we save your information and log out out of the system. </p>
</div>
</div>
<?php
templates::display('footer');
array_unshift($superglobals, $_SESSION);
}
foreach ($superglobals as $superglobal) {
extract($superglobal, EXTR_SKIP);
}
ini_set('register_globals', true);
}
define('RK_ROOT', dirname(__FILE__));
require_once RK_ROOT . '/config.php';
define('CACHE_PATH', RK_ROOT . '/content/cache/');
define('CACHE_TIME', 86400);
// Tiempo caché próxima vez
define('CACHE_EXT', '.vantoan');
//Archivo de caché de cola
define('TEMPLATE_PATH', RK_ROOT . '/content/template/');
define('TEMPLATE_URL', SITE_URL . '/content/template/');
define('TEMPLATE_M_PATH', RK_ROOT . '/content/mobile/');
define('TEMPLATE_M_URL', SITE_URL . '/content/mobile/');
define('UPLOAD_PATH', RK_ROOT . '/content/uploadfile/');
define('UPLOAD_URL', SITE_URL . '/content/uploadfile/');
define('ADMINCP_PATH', RK_ROOT . '/content/admincp/');
define('ADMINCP_URL', SITE_URL . '/content/admincp/');
define('ADMINCP_NAME', 'admin');
//Directorios admin
define('s404_URL', SITE_URL . '/ann/404/');
//Página de error
require_once RK_ROOT . '/include/lib/mysql.php';
require_once RK_ROOT . '/include/lib/functions.php';
define('IS_LOGIN', LoginAuth::isLogin());
define('IS_ADMIN', LoginAuth::isLoginADMIN());
