function check_authority() { require GAME_ROOT . './include/modules/core/sys/config/server.config.php'; $_COOKIE = gstrfilter($_COOKIE); $cuser = $_COOKIE[$gtablepre . 'user']; $cpass = $_COOKIE[$gtablepre . 'pass']; require GAME_ROOT . './include/db_' . $database . '.class.php'; $db = new dbstuff(); $db->connect($dbhost, $dbuser, $dbpw, $dbname, $pconnect); unset($dbhost, $dbuser, $dbpw, $dbname, $pconnect); $result = $db->query("SELECT * FROM {$gtablepre}users WHERE username='******'"); if (!$db->num_rows($result)) { echo "<span><font color=\"red\">Cookie无效,请登录。</font></span><br>"; die; } $udata = $db->fetch_array($result); if ($udata['password'] != $cpass) { echo "<span><font color=\"red\">Cookie无效,请登录。</font></span><br>"; die; } elseif ($udata['groupid'] < 9 && $cuser !== $gamefounder) { echo "<span><font color=\"red\">要求至少9权限。</font></span><br>"; die; } unset($db); unset($cuser); unset($cpass); unset($udata); unset($result); }
public function update_user_credit($mobile, $credit) { //$mobile = '18782963909'; //$credit = 1; $db = new dbstuff(); $db->connect(UC_DBHOST, UC_DBUSER, UC_DBPW, UC_DBNAME, 0); $sql = "SELECT `uid` FROM " . DZ_DBTABLEPRE . "common_member WHERE `username`={$mobile}"; $result = $db->query($sql); if ($db->num_rows($result) == 0) { return false; } else { $row = $db->fetch_array($result); $uid = $row['uid']; $sql = "SELECT * FROM " . DZ_DBTABLEPRE . "common_member_count WHERE `uid`={$uid}"; $result = $db->query($sql); if ($db->num_rows($result) == 0) { return false; } else { $row = $db->fetch_array($result); if ($row['extcredits2'] < $credit) { return false; } else { //print_r($row);$row['extcredits2'] = 376; $new_credit = $row['extcredits2'] - $credit; $sql = 'UPDATE ' . DZ_DBTABLEPRE . "common_member_count SET extcredits2='{$new_credit}' WHERE uid='{$uid}'"; $re = $db->query($sql); if ($db->num_rows($re) == 0) { return false; } else { return true; } } } } }
function getImCount() { $db_uch = new dbstuff(); $db_uch->charset = dbcharset; $db_uch->connect(dbhost, dbuser, dbpw, dbname, pconnect); $result = $db_uch->result($db_uch->query("SELECT COUNT(*) FROM " . tname("spacefield") . " WHERE qq <> ''"), 0); return $result; }
public function UcenterLogin($data) { $db = new dbstuff(); $db->connect(UC_DBHOST, UC_DBUSER, UC_DBPW, UC_DBNAME, 0); list($uid, $username, $email) = uc_get_user($data['username']); if (is_null($uid)) { $_data['email'] = $data['email']; $_data['username'] = $data['username']; $_data['password'] = $data['password']; $_data['user_id'] = $data['user_id']; $uid = self::UcenterReg($_data); return self::UcenterLogin($data); } else { $ucsynlogin = uc_user_synlogin($uid); } //var_dump($uid); return $ucsynlogin; }
function loadmultiserver($type = '') { global $db, $dbcharset, $multiserver; $type = empty($type) && defined('CURSCRIPT') ? CURSCRIPT : $type; static $sdb = null; if($type && !empty($multiserver['enable'][$type])) { if(!is_a($sdb, 'dbstuff')) $sdb = new dbstuff(); if($sdb->link > 0) { return $sdb; } elseif($sdb->link === null && (!empty($multiserver['slave']['dbhost']) || !empty($multiserver[$type]['dbhost']))) { $setting = !empty($multiserver[$type]['host']) ? $multiserver[$type] : $multiserver['slave']; $sdb->connect($setting['dbhost'], $setting['dbuser'], $setting['dbpw'], $setting['dbname'], $setting['pconnect'], false, $dbcharset); if($sdb->link) { return $sdb; } else { $sdb->link = -32767; } } } return $db; }
{ api_msg('run_sql_error', $message . '<br /><br />' . $sql . '<br /> ' . mysql_error()); } } $db = new dbstuff(); $version = ''; if ($apptype == 'discuz') { //note discuz define('BACKUP_DIR', ROOT_PATH . 'forumdata/'); //note 數據庫備份文件放置路徑 $tablepre = $tablepre; //note 表前綴賦值,不同的產品請修改此表達式 if (empty($dbcharset)) { $dbcharset = in_array(strtolower($charset), array('gbk', 'big5', 'utf-8')) ? str_replace('-', '', $charset) : ''; } $db->connect($dbhost, $dbuser, $dbpw, $dbname, $dbcharset, $pconnect, $tablepre); define('IN_DISCUZ', true); include ROOT_PATH . 'discuz_version.php'; $version = DISCUZ_VERSION; } elseif ($apptype == 'uchome' || $apptype == 'supesite' || $apptype == 'brand' || $apptype == 'other') { //note uchome define('BACKUP_DIR', ROOT_PATH . './data/'); //note 數據庫備份文件放置路徑 $tablepre = $_SC['tablepre']; //note 表前綴賦值,不同的產品請修改此表達式 $dbcharset = $_SC['dbcharset']; $db->connect($_SC['dbhost'], $_SC['dbuser'], $_SC['dbpw'], $_SC['dbname'], $dbcharset, $_SC['pconnect'], $tablepre); } elseif ($apptype == 'ucenter') { //note ucenter define('BACKUP_DIR', ROOT_PATH . './data/backup/'); //note 數據庫備份文件放置路徑
} $keywords['general'] = $generalnew; $threadlist = array(); if ($relatedthreadlist) { foreach ($relatedthreadlist as $key => $relatedthread) { if ($relatedthread['insite'] == 1) { $threadlist['bbsthread'][] = $relatedthread; } elseif ($qihoo['relate']['webnum']) { if (empty($qihoo['relate']['banurl']) || !preg_match($qihoo['relate']['banurl'], $relatedthread['tid'])) { $threadlist['webthread'][] = $relatedthread; } } } $threadlist['bbsthread'] = $threadlist['bbsthread'] ? array_slice($threadlist['bbsthread'], 0, $qihoo['relate']['bbsnum']) : array(); $threadlist['webthread'] = $threadlist['webthread'] ? array_slice($threadlist['webthread'], 0, $qihoo['relate']['bbsnum'] - count($threadlist['bbsthread'])) : array(); $relatedthreadlist = array_merge($threadlist['bbsthread'], $threadlist['webthread']); } $keywords['general'] = $keywords['general'][0] ? implode("\t", $keywords['general']) : ''; $keywords['trade'] = $keywords['trade'][0] ? implode("\t", $keywords['trade']) : ''; $relatedthreads = $relatedthreadlist ? addslashes(serialize($relatedthreadlist)) : ''; $expiration = $nextuptime ? $nextuptime : $timestamp + 86400; require_once './include/db_' . $database . '.class.php'; $db = new dbstuff(); $db->connect($dbhost, $dbuser, $dbpw, $dbname, $pconnect); $db->select_db($dbname); unset($dbhost, $dbuser, $dbpw, $dbname, $pconnect); $db->query("REPLACE INTO {$tablepre}relatedthreads (tid, type, expiration, keywords, relatedthreads)\r\n\t\tVALUES ('{$tid}', 'general', '{$expiration}', '{$keywords['general']}', '{$relatedthreads}')", 'UNBUFFERED'); if ($relatedadstatus && $keywords['trade']) { $db->query("REPLACE INTO {$tablepre}relatedthreads (tid, type, expiration, keywords, relatedthreads)\r\n\t\t\tVALUES ('{$tid}', 'trade', '{$expiration}', '{$keywords['trade']}', '{$relatedthreads}')", 'UNBUFFERED'); } }
error_reporting(7); $mtime = explode(' ', microtime()); $starttime = $mtime[1] + $mtime[0]; $prev = $_SERVER['HTTP_REFERER']; $addtime = time(); $action = $_POST['action']; $act = $_GET['act']; $refer = $_POST['refer'] ? $_POST['refer'] : $_GET['refer']; //返回地址 $backto = $_POST['backto'] ? $_POST['backto'] : $_GET['backto']; //ajax 回调 $urlrefer = $_COOKIE["urlrefer"]; include ET_ROOT . "/include/db_mysql.class.php"; include ET_ROOT . '/config.inc.php'; $db = new dbstuff(); $db->connect($server, $db_username, $db_password, $db_name, $pconnect, true); @mysql_query("set names utf8"); include ET_ROOT . "/include/template.class.php"; include ET_ROOT . '/include/etfunctions.func.php'; include ET_ROOT . '/include/cache.inc.php'; $setok = trim($_COOKIE["setok"]); dsetcookie('setok', -1); if (!$API) { if (is_admin_path == "yes") { $options = array('template_dir' => '../admin/templates', 'cache_dir' => '../admin/templates/cache', 'auto_update' => true, 'cache_lifetime' => 0); } else { $options = array('template_dir' => './templates', 'cache_dir' => './templates/cache', 'auto_update' => true, 'cache_lifetime' => 0); } $template = Template::getInstance(); $template->setOptions($options); }
if (strpos($tablepre, '.') !== false) { show_msg('tablepre_invalid', $tablepre, 0); } if ($username && $password) { if (strlen($username) > 15 || preg_match("/^\$|^c:\\con\\con\$| |[,\"\\s\t\\<\\>&]|^游客|^Guest/is", $username)) { show_msg('admin_username_invalid', $username, 0); } } else { show_msg('admininfo_invalid', '', 0); } show_header(); $confstatus = config_edit(); if ($confstatus['status'] == 1) { //入库 $db = new dbstuff(); $db->connect($dbhost . ":" . $dbport, $dbuser, $dbpw, $dbname, DBCHARSET); $sqlfile = 'sql/data.sql'; $sql = file_get_contents($sqlfile); $sql = str_replace("\r\n", "\n", $sql); show_install(); runquery($sql); $sqlfile = 'sql/other.sql'; $sql = file_get_contents($sqlfile); $sql = str_replace("\r\n", "\n", $sql); runquery($sql); //系统设置中网站名称的修改 /** * 转码 */ if (strtoupper(DBCHARSET) == 'GBK') { $username = iconv('UTF-8', 'GBK', $username);
define('IN_DISCUZ', TRUE); define('ROOT_PATH', dirname(__FILE__) . '/../'); @(include_once ROOT_PATH . './config/config_global.php'); define('CHARSET', $_config['output']['charset']); define('DBCHARSET', $_config['db']['1']['dbcharset']); $lock_file = ROOT_PATH . './data/restore.lock'; if (file_exists($lock_file)) { show_msg('restored_error'); } require_once ROOT_PATH . './source/discuz_version.php'; $operation = trim(getgpc('operation', 'G')); $operation = $operation ? $operation : 'import'; $phpself = htmlspecialchars($_SERVER['SCRIPT_NAME'] ? $_SERVER['SCRIPT_NAME'] : $_SERVER['PHP_SELF']); $siteurl = htmlspecialchars('http://' . $_SERVER['HTTP_HOST'] . preg_replace("/\\/+(api)?\\/*\$/i", '', substr($phpself, 0, strrpos($phpself, '/'))) . '/'); $db = new dbstuff(); if (!@$db->connect($_config['db']['1']['dbhost'], $_config['db']['1']['dbuser'], $_config['db']['1']['dbpw'], $_config['db']['1']['dbname'], $_config['db']['1']['dbcharset'])) { show_msg('connect_error'); } if ($operation == 'import') { if (!submitcheck('importsubmit', 1)) { $exportlog = $exportsize = $exportziplog = array(); check_exportfile($exportlog, $exportziplog, $exportsize); if (empty($exportlog) && empty($exportziplog)) { show_msg('backup_file_unexist'); } show_importfile_list($exportlog, $exportziplog, $exportsize); } else { $readerror = 0; $datafile_vol1 = trim(getgpc('datafile_vol1')); if ($datafile_vol1) { $datafile = $datafile_vol1;
} define('DBCHARSET', $dbcharset); define('SiteUrl', $site_url); if ($version != '20130705') { @header("Content-type: text/html; charset=UTF-8"); echo "已经安装完成或版本错误,本程序只适用于“ShopNC 2.4”的系统。"; exit; } $db = new dbstuff(); if (strtoupper(DBCHARSET) == 'GBK') { $dbcharset = 'gbk'; } else { $dbcharset = 'utf8'; } $dbserver = $dbserver . ":" . $dbserver_port; $db->connect($dbserver, $dbuser, $dbpasswd, $dbname, $dbcharset); $tablepre = $db_pre; $current = $_GET['act']; if (is_file('../config.ini.php') && $current != '2') { @header("Content-type: text/html; charset=UTF-8"); echo "您已经安装过微商城模块。"; exit; } //新增表 function update_db() { if (strtoupper(DBCHARSET) == 'GBK') { $sqlfile = 'gbk.sql'; } else { $sqlfile = 'utf8.sql'; }
<?php error_reporting(0); ini_set("magic_quotes_runtime", 0); define('IN_VWS', TRUE); define('VWS_ROOT', substr(dirname(__FILE__), 0, -3)); function __autoload($className) { if (preg_match('#Core$#', $className) && file_exists($classPath = VWS_ROOT . "/core/{$className}.php")) { include_once $classPath; } } include_once VWS_ROOT . '/core/DBCore.php'; include_once VWS_ROOT . '/core/DictCore.php'; include_once 'config.inc.php'; $db = new dbstuff(); $db->connect($dbhost, $dbuser, $dbpassword, $dbname);
function init() { global $gtablepre, $tablepre, $wtablepre, $room_prefix, $moveut, $moveutmin; global ${$gtablepre . 'user'}, ${$gtablepre . 'pass'}, $___MOD_SRV; if (isset($_COOKIE)) { $_COOKIE = gstrfilter($_COOKIE); foreach ($_COOKIE as $key => $value) { if ($key == $gtablepre . 'user' || $key == $gtablepre . 'pass') { ${$key} = $value; } } } ob_clean(); ob_start(); global $db; if (!isset($db)) { global $dbhost, $dbuser, $dbpw, $dbname, $pconnect, $database; require GAME_ROOT . './include/db_' . $database . '.class.php'; $db = new \dbstuff(); $db->connect($dbhost, $dbuser, $dbpw, $dbname, $pconnect); //$db->select_db($dbname); unset($dbhost, $dbuser, $dbpw, $dbname, $pconnect); } global $___LOCAL_INPUT__VARS__INPUT_VAR_LIST; if (isset($___LOCAL_INPUT__VARS__INPUT_VAR_LIST[$gtablepre . 'user'])) { ${$gtablepre . 'user'} = $___LOCAL_INPUT__VARS__INPUT_VAR_LIST[$gtablepre . 'user']; } if (isset($___LOCAL_INPUT__VARS__INPUT_VAR_LIST[$gtablepre . 'pass'])) { ${$gtablepre . 'pass'} = $___LOCAL_INPUT__VARS__INPUT_VAR_LIST[$gtablepre . 'pass']; } if (isset($___LOCAL_INPUT__VARS__INPUT_VAR_LIST['___GAME_ROOMID'])) { $room_prefix = (string) $___LOCAL_INPUT__VARS__INPUT_VAR_LIST['___GAME_ROOMID']; } else { if (isset(${$gtablepre . 'user'})) { $result = $db->query("SELECT roomid FROM {$gtablepre}users where username='******'user'} . "'"); if ($db->num_rows($result)) { $zz = $db->fetch_array($result); $room_prefix = $zz['roomid']; } else { $room_prefix = ''; } } else { $room_prefix = ''; } } $room_status = 0; if ($room_prefix != '' && $room_prefix != 'n' && $room_prefix[0] != 's') { $room_prefix = ''; } else { if ($room_prefix != '' && $room_prefix[0] == 's') { $result = $db->query("SELECT status FROM {$gtablepre}rooms where roomid='" . substr($room_prefix, 1) . "'"); if ($db->num_rows($result)) { $zz = $db->fetch_array($result); $room_status = $zz['status']; if ($zz['status'] == 0) { $room_prefix = ''; } } else { $room_prefix = ''; } } } $tablepre = $gtablepre . $room_prefix; if ($room_prefix == '') { $wtablepre = $gtablepre; } else { $wtablepre = $gtablepre . $room_prefix[0]; } //自动初始化表 if ($room_prefix != '') { $result = $db->query("show tables like '{$wtablepre}winners';"); if (!$db->num_rows($result)) { //某个非主房间是第一次使用,则创建表并初始化 $db->query("create table if not exists {$wtablepre}winners like {$gtablepre}winners;"); } $result = $db->query("show tables like '{$tablepre}game';"); if (!$db->num_rows($result)) { //某个非主房间是第一次使用,则创建表并初始化 $db->query("create table if not exists {$tablepre}game like {$gtablepre}game;"); $result = $db->query("SELECT count(*) as cnt FROM {$tablepre}game"); if (!$db->num_rows($result)) { $cnt = 0; } else { $zz = $db->fetch_array($result); $cnt = $zz['cnt']; } if ($cnt == 0) { $db->query("insert into {$tablepre}game (gamenum) values (0);"); } $result = $db->query("SELECT count(*) as cnt FROM {$wtablepre}winners"); if (!$db->num_rows($result)) { $cnt = 0; } else { $zz = $db->fetch_array($result); $cnt = $zz['cnt']; } if ($cnt == 0) { $db->query("insert into {$wtablepre}winners (gid) values (0);"); } $sql = file_get_contents(GAME_ROOT . './gamedata/sql/reset.sql'); $sql = str_replace("\r", "\n", str_replace(' bra_', ' ' . $tablepre, $sql)); $db->queries($sql); $sql = file_get_contents(GAME_ROOT . './gamedata/sql/players.sql'); $sql = str_replace("\r", "\n", str_replace(' bra_', ' ' . $tablepre, $sql)); $db->queries($sql); } } //$errorinfo ? error_reporting(E_ALL) : error_reporting(0); date_default_timezone_set('Etc/GMT'); //$now = time() + $moveutmin*60; global $now; $now = time() + $moveut * 3600 + $moveutmin * 60; global $sec, $min, $hour, $day, $month, $year, $wday; list($sec, $min, $hour, $day, $month, $year, $wday) = explode(',', date("s,i,H,j,n,Y,w", $now)); //if($attackevasive) { // include_once GAME_ROOT.'./include/security.inc.php'; //} //COMBAT INFO INIT //已经一起做进数据库里了 //global $hdamage,$hplayer,$noisetime,$noisepls,$noiseid,$noiseid2,$noisemode; //include GAME_ROOT.'./gamedata/combatinfo.php'; //GAME INFO INIT global $now, $db, $tablepre; $result = $db->query("SELECT * FROM {$tablepre}game"); global $gameinfo; $gameinfo = $db->fetch_array($result); foreach ($gameinfo as $key => $value) { global ${$key}; ${$key} = $value; } if ($room_status == 2 && $gamestate == 0 && $room_prefix != '' && $room_prefix[0] == 's') { $db->query("UPDATE {$gtablepre}rooms SET status=1 WHERE roomid='" . substr($room_prefix, 1) . "'"); } $arealist = explode(',', $arealist); global $cuser, $cpass; $cuser = ${$gtablepre . 'user'}; $cpass = ${$gtablepre . 'pass'}; //这里实在没办法,一堆文件都直接引用mode和command这两个来自input的变量,但又不能让所有文件都依赖input…… 只能恶心一下了…… global $mode, $command, $___MOD_SRV; if ($___MOD_SRV) { global $___LOCAL_INPUT__VARS__mode, $___LOCAL_INPUT__VARS__command; global $___LOCAL_INPUT__VARS__INPUT_VAR_LIST; if (isset($___LOCAL_INPUT__VARS__INPUT_VAR_LIST['mode'])) { $mode = $___LOCAL_INPUT__VARS__INPUT_VAR_LIST['mode']; } else { $mode = $___LOCAL_INPUT__VARS__mode; } if (isset($___LOCAL_INPUT__VARS__INPUT_VAR_LIST['command'])) { $command = $___LOCAL_INPUT__VARS__INPUT_VAR_LIST['command']; } else { $command = $___LOCAL_INPUT__VARS__command; } } else { global $___LOCAL_INPUT__VARS__mode, $___LOCAL_INPUT__VARS__command; $mode = $___LOCAL_INPUT__VARS__mode; $command = $___LOCAL_INPUT__VARS__command; } }
<?php include_once './common.php'; include_once './class/db_mysql.class.php'; @(include_once './uc_client/client.php'); $devdb = new dbstuff(); $devdb->charset = 'utf8'; $devdb->connect('200.200.0.24', 'root', 'pr', 'sangfordedecmsv56utf', 0); $catemap = array('技术支持' => array('id' => '196', 'type' => 'rdp'), '预研技能' => array('id' => '195', 'type' => 'rdp'), '测试技能' => array('id' => '194', 'type' => 'rdp'), '编码技能' => array('id' => '193', 'type' => 'rdp'), '设计技能' => array('id' => '193', 'type' => 'rdp'), '项目管理' => array('id' => '191', 'type' => 'rdp'), '产品规划' => array('id' => '190', 'type' => 'rdp'), 'C/C++编程' => array('id' => '197', 'type' => 'devtech'), '工具使用' => array('id' => '202', 'type' => 'devtech'), 'Windows开发' => array('id' => '200', 'type' => 'devtech'), 'Linux内核驱动' => array('id' => '199', 'type' => 'devtech'), 'Linux开发' => array('id' => '198', 'type' => 'devtech'), '调试技术' => array('id' => '201', 'type' => 'devtech'), '数据库' => array('id' => '203', 'type' => 'devtech'), '算法设计' => array('id' => '204', 'type' => 'devtech'), '协议分析' => array('id' => '205', 'type' => 'devtech'), '网络编程' => array('id' => '206', 'type' => 'devtech'), '性能优化' => array('id' => '207', 'type' => 'devtech'), '手机开发' => array('id' => '208', 'type' => 'devtech'), 'AC' => array('id' => '52', 'type' => 'modules'), 'WOC' => array('id' => '58', 'type' => 'modules'), '其他' => array('id' => '52', 'type' => 'modules'), '知识管理' => array('id' => '191', 'type' => 'rdp'), '常用命令' => array('id' => '198', 'type' => 'devtech'), '应用识别' => array('id' => '52', 'type' => 'modules'), '版本经理' => array('id' => '191', 'type' => 'rdp'), '用户认证' => array('id' => '52', 'type' => 'modules'), '企业文化' => array('id' => '1', 'type' => 'news'), '研发规范' => array('id' => '192', 'type' => 'rdp'), '开发工具' => array('id' => '202', 'type' => 'devtech'), '开发流程' => array('id' => '192', 'type' => 'rdp'), '部门风采' => array('id' => '1', 'type' => 'news'), 'SSL' => array('id' => '56', 'type' => 'modules')); $reg_msg = array('-1' => '用户名非法', '-2' => '注册信息包括不允许的词', '-3' => '用户名已存在', '-4' => 'Email地址格式非法', '-5' => 'Email地址没有注册', '-6' => 'Email地址已被注册'); $cnt = 0; $sqlstr = 'SELECT * FROM dede_member'; $query = $devdb->query($sqlstr); while ($user = $devdb->fetch_array($query)) { //用户处理 echo '<br />处理用户:' . $user['userid'] . '...'; $newuid = uc_user_register($user['userid'], $user['pwd'], $user['email']); if ($newuid <= 0) { if ($newuid == -3) { echo '用户已存在,用户ID为:'; list($newuid, $username, $email) = uc_get_user($user['userid']); echo $newuid . ' 原用户ID为:' . $user['mid'] . '<br />'; } else { echo '<font color="red">注册用户失败:' . $reg_msg[$newuid] . ',跳过...</font><br />'; $sqlstr0 = "SELECT * FROM dede_archives WHERE mid='" . $user['mid'] . "'"; $query0 = $devdb->query($sqlstr0); while ($res0 = $devdb->fetch_array($query0)) { echo '其发表文章:' . $res0['title'] . '<br />'; } continue; } } else {
function query($sql, $type = '') { if (preg_match("/^\\s*[Ss][Ee][Ll][Ee][Cc][Tt]/", $sql)) { return $this->rdb->query($sql, $type); } if (!$this->writeable) { dbstuff::connect($this->dbhost, $this->dbuser, $this->dbpw, $this->dbname, $this->pconnect, $this->halt); $this->writeable = true; } return dbstuff::query($sql, $type); }
} $timestamp = time(); if ($timestamp - $get['time'] > 3600) { exit('Authracation has expiried'); } if (empty($get)) { exit('Invalid Request'); } $action = $get['action']; require_once 'uc_client/lib/xml.class.php'; $post = xml_unserialize(file_get_contents('php://input')); if (in_array($get['action'], array('test', 'deleteuser', 'renameuser', 'gettag', 'synlogin', 'synlogout', 'updatepw', 'updatebadwords', 'updatehosts', 'updateapps', 'updateclient', 'updatecredit', 'getcreditsettings', 'updatecreditsettings'))) { require_once 'include/db_mysql.class.php'; $db_uc = new dbstuff(); include "config.inc.php"; $db_uc->connect(UC_DBHOST, UC_DBUSER, UC_DBPW, UC_DBNAME, UC_DBCONNECT); if ($get[username]) { $db_uc->query("SET NAMES gbk"); $query = $db_uc->query("SELECT * FROM " . UC_DBTABLEPRE . "members WHERE `username`='{$get['username']}'"); while ($uc_rs = $db_uc->fetch_array($query)) { $uc_info[] = $uc_rs; } $get['salt'] = $uc_info[0]['salt']; $get['email'] = $uc_info[0]['email']; $get['oldpass'] = $uc_info[0]['password']; } $uc_note = new uc_note(); exit($uc_note->{$get}['action']($get, $post)); } else { exit(API_RETURN_FAILED); }
<?php /** * 第二步 */ define('IN_TP_COUPON', TRUE); include_once './global.php'; include_once './classes/db.class.php'; if (isPost()) { $conf = (include '../Conf/db_config.php'); $tablepre = $conf['DB_PREFIX']; $db = new dbstuff(); $db->connect($conf['DB_HOST'], $conf['DB_USER'], $conf['DB_PWD'], $conf['DB_NAME'], DBCHARSET); include $template->getfile('116to117_2'); } function add_db_tables() { global $tablepre, $db; $sql = "CREATE TABLE `" . $tablepre . "mall_promotion` (\r\n `id` mediumint(8) unsigned NOT NULL AUTO_INCREMENT,\r\n `cate_id` smallint(5) unsigned NOT NULL DEFAULT '0',\r\n `m_id` mediumint(8) unsigned NOT NULL DEFAULT '0',\r\n `m_name` varchar(200) NOT NULL,\r\n `title` varchar(200) NOT NULL,\r\n `gourl` varchar(150) NOT NULL DEFAULT '' COMMENT '购买跳转地址',\r\n `description` text NOT NULL,\r\n `logo` varchar(100) NOT NULL,\r\n `sort_order` smallint(5) unsigned NOT NULL DEFAULT '9999',\r\n `expiry` int(11) unsigned NOT NULL DEFAULT '0',\r\n `addtime` int(11) unsigned NOT NULL DEFAULT '0',\r\n PRIMARY KEY (`id`),\r\n KEY `c_id` (`cate_id`),\r\n KEY `m_id` (`m_id`)\r\n) ENGINE=MyISAM DEFAULT CHARSET=" . DBCHARSET; $db->query($sql); showjsmessage('创建数据表:' . $tablepre . 'mall_promotion ... 完成'); $sql = "CREATE TABLE `" . $tablepre . "zhekou_category` (\r\n `id` smallint(5) unsigned NOT NULL AUTO_INCREMENT,\r\n `name` varchar(100) NOT NULL,\r\n `sort_order` smallint(5) unsigned NOT NULL DEFAULT '1',\r\n PRIMARY KEY (`id`)\r\n) ENGINE=MyISAM DEFAULT CHARSET=" . DBCHARSET; $db->query($sql); showjsmessage('创建数据表:' . $tablepre . 'zhekou_category ... 完成'); $sql = "CREATE TABLE `" . $tablepre . "mall_zhekou` (\r\n `id` mediumint(8) unsigned NOT NULL AUTO_INCREMENT,\r\n `cate_id` smallint(5) unsigned NOT NULL DEFAULT '0',\r\n `m_id` mediumint(8) unsigned NOT NULL DEFAULT '0',\r\n `m_name` varchar(200) NOT NULL,\r\n `title` varchar(200) NOT NULL,\r\n `gourl` varchar(150) NOT NULL DEFAULT '' COMMENT '购买跳转地址',\r\n `description` text NOT NULL,\r\n `logo` varchar(100) NOT NULL,\r\n `sort_order` smallint(5) unsigned NOT NULL DEFAULT '9999',\r\n `price` float unsigned NOT NULL DEFAULT '0',\r\n `addtime` int(11) unsigned NOT NULL DEFAULT '0',\r\n `use_coupon` tinyint(1) unsigned NOT NULL DEFAULT '1',\r\n PRIMARY KEY (`id`),\r\n KEY `c_id` (`cate_id`),\r\n KEY `m_id` (`m_id`)\r\n) ENGINE=MyISAM DEFAULT CHARSET=" . DBCHARSET; $db->query($sql); showjsmessage('创建数据表:' . $tablepre . 'mall_zhekou ... 完成'); } function add_site_config() { global $tablepre, $db;
public function register() { $username = trim($_POST['username']); if (!$this->checkRight($username)) { exit("用户名不符合标准"); } if (UC_START && UC_START == 'on') { @(include_once dirname(__FILE__) . '/../../config.inc.php'); $uctable = explode('.', UC_DBTABLEPRE); $tablepre = substr($uctable[1], 0, -8); if (UC_KEY == "" || UC_API == "") { return "注册失败,请检查ucenter配置文件."; } include_once dirname(__FILE__) . '/../../uc_client/client.php'; $passwd = trim($_REQUEST['passwd']); $email = $_REQUEST['email']; $uid = uc_user_register($username, $passwd, $email); if ($uid <= 0) { if ($uid == -6) { $this->_tpl->assign('msg', '注册失败,email已注册'); } elseif ($uid == -5) { $this->_tpl->assign('msg', '注册失败,Email 不允许注册'); } elseif ($uid == -4) { $this->_tpl->assign('msg', '注册失败,Email 格式有误'); } elseif ($uid == -3) { $this->_tpl->assign('msg', '注册失败,用户名已经存在'); } elseif ($uid == -2) { $this->_tpl->assign('msg', '注册失败,包含不允许注册的词语'); } elseif ($uid == -1) { $this->_tpl->assign('msg', '注册失败,用户名不合法'); } return $this->fetch('msg.html'); } else { include_once dirname(__FILE__) . '/../../include/db_mysql.class.php'; $db = new dbstuff(); $conn = $db->connect(UC_DBHOST, UC_DBUSER, UC_DBPW); $password = md5($_REQUEST['passwd']); $sql = "INSERT INTO " . UC_DBNAME . "." . $tablepre . "common_member (`uid`,`email`,`username`,`password`)"; $sql .= " VALUES ('{$uid}','{$email}','{$username}','{$password}')"; @$db->query($sql); //at 管理员还是user if ($_REQUEST['at'] == 1) { needRole('admin'); return header("Location: /admin/index.php?c=user&a=pageUsers"); } $this->_tpl->assign('msg', '注册成功'); return $this->_tpl->fetch('msg.html'); } } $money = daocall('setting', 'get', array('reg_user_price')); $result = daocall('user', 'newUser', array($username, trim($_REQUEST['passwd']), $_REQUEST['email'], $_REQUEST['name'], $_REQUEST['ids'], 0, $money)); if ($result) { registerRole('user', $username); $external = $_REQUEST['external']; if ($external == '1') { $url = "?fc=user&fa=index"; } else { $url = "?c=user&a=index"; } header("Location: " . $url); die; } else { exit('注册失败'); } }
show_msg('admininfo_invalid', '', 0); } $uid = DZUCFULL ? 1 : $adminuser['uid']; $authkey = substr(md5($_SERVER['SERVER_ADDR'] . $_SERVER['HTTP_USER_AGENT'] . $dbhost . $dbuser . $dbpw . $dbname . $username . $password . $pconnect . substr($timestamp, 0, 6)), 8, 6) . random(10); $_config['db'][1]['dbhost'] = $dbhost; $_config['db'][1]['dbname'] = $dbname; $_config['db'][1]['dbpw'] = $dbpw; $_config['db'][1]['dbuser'] = $dbuser; $_config['db'][1]['tablepre'] = $tablepre; $_config['admincp']['founder'] = (string) $uid; $_config['security']['authkey'] = $authkey; $_config['cookie']['cookiepre'] = random(4) . '_'; $_config['memory']['prefix'] = random(6) . '_'; save_config_file(ROOT_PATH . CONFIG, $_config, $default_config); $db = new dbstuff(); $db->connect($dbhost, $dbuser, $dbpw, $dbname, DBCHARSET); if (!VIEW_OFF) { show_header(); show_install(); } if (DZUCFULL) { install_uc_server(); } $sql = file_get_contents($sqlfile); $sql = str_replace("\r\n", "\n", $sql); runquery($sql); runquery($extrasql); $sql = file_get_contents(ROOT_PATH . './install/data/install_data.sql'); $sql = str_replace("\r\n", "\n", $sql); runquery($sql); $onlineip = $_SERVER['REMOTE_ADDR'];
show_msg('数据表前缀为空,或者格式错误,请检查', $tablepre); } if ($admininfo['username'] && $admininfo['password'] && $admininfo['email'] && $admininfo['password'] == $admininfo['password2']) { if (StrLenW2($admininfo['username']) > 12 || StrLenW2($admininfo['username']) < 3 || !$admininfo['username']) { show_msg('非法用户名,用户名长度不应当超过 12 个英文字符,一般是中文,字母或者数字', $admininfo['username']); } elseif (!strstr($admininfo['email'], '@') || $admininfo['email'] != stripslashes($admininfo['email']) || $admininfo['email'] != htmlspecialchars($admininfo['email'])) { show_msg('Email 地址错误,此邮件地址已经被使用或者格式无效,请更换为其他地址', $admininfo['email']); } } else { show_msg('管理员信息不完整,请检查管理员账号,密码,邮箱', ''); } save_config_file($dbinfo, QCS_ROOT . './Conf/config.inc.php'); save_uc_config_file($dbinfo, QCS_ROOT . './Conf/uc_config.inc.php'); touch($lockfile); $db = new dbstuff(); $db->connect($dbinfo['dbhost'], $dbinfo['dbuser'], $dbinfo['dbpw'], $dbinfo['dbname'], 0, true); @mysql_query("set names utf8"); $tablepre = $dbinfo['tablepre']; $sql = file_get_contents(QCS_ROOT . './install/include/data.sql'); $sql = str_replace("\r\n", "\n", $sql); show_header(); show_install(); runquery($sql); $auth_code = generate_key(); $invitecode = uniqid() . rand(1000, 9999); $regtime = time(); $pwd = md5(strrev(md5($admininfo['password'])) . base64_encode($admininfo['password'])); $db->query("INSERT INTO {$tablepre}user (name,pwd,province,city,county,email,invitecode,invitecount,regtime) VALUES ('{$admininfo['username']}', '{$pwd}','{$admininfo['province']}','{$admininfo['city']}','{$admininfo['county']}','{$admininfo['email']}','{$invitecode}',5,'{$regtime}');"); $db->query("UPDATE {$tablepre}setting SET value = '{$auth_code}' WHERE name = 'auth_key'"); $db->query("UPDATE {$tablepre}setting SET value = '{$dbinfo['sitename']}' WHERE name = 'site_name'"); curl_post('http://www.quoracms.com/qcs/index.php?m=Index&a=addsite', "from=" . $default_appurl . "&type=install");
<input type="submit" name="submit" value="提交" tabindex="3" /> </div> </form> </div>'; specialdiv(); echo "<script>$('jsmenu').style.display='inline';</script>"; htmlfooter(); } } elseif($action == 'dz_rpthreads') {//批量修复主题 //初始化数据库连接帐号 define('IN_DISCUZ', TRUE); require_once TOOLS_ROOT."./config.inc.php"; require_once TOOLS_ROOT."./include/db_mysql.class.php"; $db = new dbstuff; $db->connect($dbhost, $dbuser, $dbpw, $dbname, $pconnect, true, $dbcharset); $dbuser = $dbpw = $dbname = $pconnect = NULL; if($db->version > '4.1') { $serverset = "character_set_connection=$dbcharset, character_set_results=$dbcharset, character_set_client=binary"; $serverset && $db->query("SET $serverset"); } if($rpthreadssubmit) { if(empty($start)) { $start = 0; } if($fids) { if(is_array($fids)) { $fidstr = implode(',', $fids); } else { $fidstr = $fids;
function db_init() { global $sqlfile, $db, $multitable, $step, $lockfile; if (!isset($_SESSION['dbinfo'])) { header("location: index.php?step=2"); } $dbname = $_SESSION['dbinfo']['dbname']; $dbinfo = $_SESSION['dbinfo']; $adminpwd = $_SESSION['adminpwd']; $adminemail = $_SESSION['founderemail']; $multitable = $_SESSION['multitable']; $config = "<?php \r\ndefine('SSO_MODE', '{$_SESSION['sso_mode']}');\r\n"; $config .= "define('MULTI_TABLE', '{$_SESSION['multitable']}');\r\n"; $config .= '$GLOBALS ["gDataBase"] ["db"] = array ( "dbname" => "' . $dbname . '", "type" => "mysql", "host" => "' . $dbinfo['dbhost'] . '", "port" => 3306, "user" => "' . $dbinfo['dbuser'] . '", "passwd" => "' . $dbinfo['dbpw'] . '", "charset"=> "utf8", ); ?>'; $fp = fopen(CONFIG, 'w'); fwrite($fp, $config); fclose($fp); $db = new dbstuff(); $db->connect($dbinfo['dbhost'], $dbinfo['dbuser'], $dbinfo['dbpw'], $dbname, 'UTF8'); $sql = file_get_contents($sqlfile); $sql = str_replace("\r\n", "\n", $sql); if (!VIEW_OFF) { show_install(); } runquery($sql); $user['user'] = $adminemail; $user['user_email'] = $adminemail; $user['user_question'] = ''; $user['user_answer'] = ''; $user['user_password'] = md5(md5($adminpwd) . $user['user']); $user['user_nickname'] = 'administrator'; $user['user_sex'] = 1; $user['user_reg_ip'] = '127.0.0.1'; createNewUser($user); VIEW_OFF && show_msg('initdbresult_succ'); $step++; if (!VIEW_OFF) { echo '<script type="text/javascript">document.getElementById("laststep").disabled=false;document.getElementById("laststep").value = \'' . lang('install_succeed') . '\';</script>' . "\r\n"; } }