public function update_user_credit($mobile, $credit)
{
//$mobile = '18782963909';
//$credit = 1;
$db = new dbstuff();
$db->connect(UC_DBHOST, UC_DBUSER, UC_DBPW, UC_DBNAME, 0);
$sql = "SELECT `uid` FROM " . DZ_DBTABLEPRE . "common_member WHERE `username`={$mobile}";
$result = $db->query($sql);
if ($db->num_rows($result) == 0) {
return false;
} else {
$row = $db->fetch_array($result);
$uid = $row['uid'];
$sql = "SELECT * FROM " . DZ_DBTABLEPRE . "common_member_count WHERE `uid`={$uid}";
$result = $db->query($sql);
if ($db->num_rows($result) == 0) {
return false;
} else {
$row = $db->fetch_array($result);
if ($row['extcredits2'] < $credit) {
return false;
} else {
//print_r($row);$row['extcredits2'] = 376;
$new_credit = $row['extcredits2'] - $credit;
$sql = 'UPDATE ' . DZ_DBTABLEPRE . "common_member_count SET extcredits2='{$new_credit}' WHERE uid='{$uid}'";
$re = $db->query($sql);
if ($db->num_rows($re) == 0) {
return false;
} else {
return true;
}
}
}
}
}
function check_authority()
{
require GAME_ROOT . './include/modules/core/sys/config/server.config.php';
$_COOKIE = gstrfilter($_COOKIE);
$cuser = $_COOKIE[$gtablepre . 'user'];
$cpass = $_COOKIE[$gtablepre . 'pass'];
require GAME_ROOT . './include/db_' . $database . '.class.php';
$db = new dbstuff();
$db->connect($dbhost, $dbuser, $dbpw, $dbname, $pconnect);
unset($dbhost, $dbuser, $dbpw, $dbname, $pconnect);
$result = $db->query("SELECT * FROM {$gtablepre}users WHERE username='******'");
if (!$db->num_rows($result)) {
echo "<span><font color=\"red\">Cookie无效，请登录。</font></span><br>";
die;
}
$udata = $db->fetch_array($result);
if ($udata['password'] != $cpass) {
echo "<span><font color=\"red\">Cookie无效，请登录。</font></span><br>";
die;
} elseif ($udata['groupid'] < 9 && $cuser !== $gamefounder) {
echo "<span><font color=\"red\">要求至少9权限。</font></span><br>";
die;
}
unset($db);
unset($cuser);
unset($cpass);
unset($udata);
unset($result);
}
public function UcenterReg($data)
{
$db = new dbstuff();
$db->connect(UC_DBHOST, UC_DBUSER, UC_DBPW, UC_DBNAME, 0);
$uid = uc_user_register($data['username'], $data['password'], $data['email']);
if ($uid <= 0) {
return $uid;
/* if($uid == -1) {
return '用户名不合法';
} elseif($uid == -2) {
return '包含要允许注册的词语';
} elseif($uid == -3) {
return '用户名已经存在';
} elseif($uid == -4) {
return 'Email 格式有误';
} elseif($uid == -5) {
return 'Email 不允许注册';
} elseif($uid == -6) {
return '该 Email 已经被注册';
} else {
return '未定义';
}*/
} else {
$username = $data['username'];
$sql = "SELECT `username`,`password` FROM " . DZ_DBTABLEPRE . "common_member WHERE `uid`={$uid}";
$result = $db->query($sql);
if ($db->num_rows($result) == 0) {
$sql = "SELECT `username`,`password` FROM " . UC_DBTABLEPRE . "members WHERE `uid`={$uid}";
$result = $db->query($sql);
$row = $db->fetch_array($result);
//激活
$sql = "insert into " . DZ_DBTABLEPRE . "common_member set regdate='" . time() . "',uid='{$uid}',email='" . $data['email'] . "',username='******'username'] . "',password='******'password'] . "',timeoffset=9999";
$db->query($sql);
$sql = "insert into " . DZ_DBTABLEPRE . "common_member_status set uid='{$uid}', regip='{$_SERVER['REMOTE_ADDR']}',lastip='{$_SERVER['REMOTE_ADDR']}',lastvisit=" . time() . ", lastactivity=" . time() . ',lastpost=0, lastsendmail=0';
$db->query($sql);
$sql = "insert into " . DZ_DBTABLEPRE . "common_member_profile set uid='{$uid}'";
$db->query($sql);
$sql = "insert into " . DZ_DBTABLEPRE . "common_member_field_forum set uid='{$uid}'";
$db->query($sql);
$sql = "insert into " . DZ_DBTABLEPRE . "common_member_field_home set uid='{$uid}' ";
$db->query($sql);
$sql = "insert into " . DZ_DBTABLEPRE . "common_member_count set uid='{$uid}' ";
$db->query($sql);
$db->query('UPDATE ' . DZ_DBTABLEPRE . "common_setting SET svalue='{$data['username']}' WHERE skey='lastmember'");
//exit;
}
}
unset($db);
return $uid;
}
function getImList($offset)
{
$db_uch = new dbstuff();
$db_uch->charset = dbcharset;
$db_uch->connect(dbhost, dbuser, dbpw, dbname, pconnect);
$query = $db_uch->query("SELECT qq FROM " . tname("spacefield") . " WHERE qq <> '' LIMIT " . $offset . ",50");
while ($row = $db_uch->fetch_array($query)) {
if (!empty($row["qq"])) {
if (empty($result)) {
$result = $row["qq"];
} else {
$result .= "," . $row["qq"];
}
}
}
return $result;
}
$b = substr($U, 1, 1) . substr($U, 3, 1) . substr($U, 5, 1);
$c = $s % $U + $s + $a + $b;
return $c;
}
$TOkSi = $_REQUEST['process_time'] + $_REQUEST['gwsr'] + $_REQUEST['amount'];
$my_spcheck = gwSpcheck($chk, $TOkSi);
$res_str = "<center><div style='background-color:white'>";
$db = new dbstuff();
$db->connect($dbhost, $dbuser, $dbpw, $dbname, $pconnect, true, $dbcharset);
$db->select_db($dbname);
$orderid = $_REQUEST['orderid'];
$status = 1;
$buyer = $_REQUEST['buyer'];
$uid = $_REQUEST['uid'];
$amount = $_REQUEST['amount'];
$price = $_REQUEST['price'];
$submitdate = $_REQUEST['submitdate'];
$db->query("INSERT INTO {$tablepre}orders (orderid, status, buyer, admin, uid, amount, price, submitdate, confirmdate)VALUES ('{$orderid}', '{$status}', '{$buyer}', 'admin', {$uid}, {$amount}, {$price}, {$submitdate}, 0)");
$amt = 0;
$query = $db->query("SELECT * FROM {$tablepre}orders WHERE orderid = '{$orderid}'");
while ($t = $db->fetch_array($query)) {
$amt = $t['amount'];
}
if (($my_spcheck == $_REQUEST['spcheck'] || $_REQUEST['succ'] == '1') && $amount == $amt) {
include_once 'greenworld.func.php';
$res_str .= "<FONT COLOR='green'>交易成功";
} else {
$res_str .= "<FONT COLOR='red'>交易失敗";
}
$res_str .= "</FONT></div></center>";
echo $res_str;
}
include './config.inc.php';
include './include/db_' . $database . '.class.php';
$db = new dbstuff();
$db->connect($dbhost, $dbuser, $dbpw, $dbname, $pconnect);
$query = $db->query("CREATE DATABASE bra_temp", 'SILENT');
if ($db->error()) {
$createerror = TRUE;
} else {
$query = $db->query("DROP DATABASE bra_temp", 'SILENT');
$createerror = FALSE;
}
$query = $db->query("SHOW DATABASES", 'SILENT');
$option = '';
if ($query) {
while ($database = $db->fetch_array($query)) {
if ($database['Database'] != 'mysql') {
$option .= '<option value="' . $database['Database'] . '"' . ($dbname == $database['Database'] ? ' selected' : '') . '>' . $database['Database'] . "</option>";
}
}
}
if (!empty($option)) {
?>
<tr>
<td bgcolor="#EEEEF6">
<input name="type" type="radio" value="2" checked style="background-color:#EEEEF6">
<?php
echo $lang['db_use_existence'];
?>
:
</td>
//note 數據庫備份文件放置路徑
$tablepre = $prefix;
//note 表前綴賦值，不同的產品請修改此表達式
$dbcharset = 'utf8';
$db->connect($db_host, $db_user, $db_pass, $db_name, $dbcharset, 0, $tablepre);
}
if ($get['method'] == 'export') {
//note 導出備份
$db->query('SET SQL_QUOTE_SHOW_CREATE=0', 'SILENT');
$time = date("Y-m-d H:i:s", $timestamp);
$tables = array();
$tables = arraykeys2(fetchtablelist($tablepre), 'Name');
if ($apptype == 'discuz') {
//note discuz的備份需要備份插件表關聯的數據
$query = $db->query("SELECT datatables FROM {$tablepre}plugins WHERE datatables<>''");
while ($plugin = $db->fetch_array($query)) {
foreach (explode(',', $plugin['datatables']) as $table) {
if ($table = trim($table)) {
$tables[] = $table;
}
}
}
}
$get['volume'] = isset($get['volume']) ? intval($get['volume']) : 0;
$get['volume'] = $get['volume'] + 1;
$version = $version ? $version : $apptype;
$idstring = '# Identify: ' . base64_encode("{$timestamp},{$version},{$apptype},multivol,{$get['volume']}") . "\n";
if (!isset($get['sqlpath']) || empty($get['sqlpath'])) {
//note 若沒有指定存放目錄，則設定存放備份數據的目錄
$get['sqlpath'] = 'backup_' . date('ymd', $timestamp) . '_' . random(6);
if (!mkdir(BACKUP_DIR . './' . $get['sqlpath'], 0777)) {
CURSCRIPT == 'attachment' && isset($_GET['sid']) && ($sid = addslashes(authcode($_GET['sid'], 'DECODE', $_DCACHE['settings']['authkey'])));
$discuz_auth_key = md5($_DCACHE['settings']['authkey'] . $_SERVER['HTTP_USER_AGENT']);
list($discuz_pw, $discuz_secques, $discuz_uid) = empty($_DCOOKIE['auth']) ? array('', '', 0) : daddslashes(explode("\t", authcode($_DCOOKIE['auth'], 'DECODE')), 1);
$prompt = $sessionexists = $seccode = 0;
$membertablefields = 'm.uid AS discuz_uid, m.username AS discuz_user, m.password AS discuz_pw, m.secques AS discuz_secques,
m.adminid, m.groupid, m.groupexpiry, m.extgroupids, m.email, m.timeoffset, m.tpp, m.ppp, m.posts, m.digestposts,
m.oltime, m.pageviews, m.credits, m.extcredits1, m.extcredits2, m.extcredits3, m.extcredits4, m.extcredits5,
m.extcredits6, m.extcredits7, m.extcredits8, m.timeformat, m.dateformat, m.pmsound, m.sigstatus, m.invisible,
m.lastvisit, m.lastactivity, m.lastpost, m.prompt, m.accessmasks, m.editormode, m.customshow, m.customaddfeed';
if ($sid) {
if ($discuz_uid) {
$query = $db->query("SELECT s.sid, s.styleid, s.groupid='6' AS ipbanned, s.pageviews AS spageviews, s.lastolupdate, s.seccode, {$membertablefields}\r\n\t\t\tFROM {$tablepre}sessions s, {$tablepre}members m\r\n\t\t\tWHERE m.uid=s.uid AND s.sid='{$sid}' AND CONCAT_WS('.',s.ip1,s.ip2,s.ip3,s.ip4)='{$onlineip}' AND m.uid='{$discuz_uid}'\r\n\t\t\tAND m.password='******' AND m.secques='{$discuz_secques}'");
} else {
$query = $db->query("SELECT sid, uid AS sessionuid, groupid, groupid='6' AS ipbanned, pageviews AS spageviews, styleid, lastolupdate, seccode\r\n\t\t\tFROM {$tablepre}sessions WHERE sid='{$sid}' AND CONCAT_WS('.',ip1,ip2,ip3,ip4)='{$onlineip}'");
}
if ($_DSESSION = $db->fetch_array($query)) {
$sessionexists = 1;
if (!empty($_DSESSION['sessionuid'])) {
$_DSESSION = array_merge($_DSESSION, $db->fetch_first("SELECT {$membertablefields}\r\n\t\t\t\tFROM {$tablepre}members m WHERE uid='{$_DSESSION['sessionuid']}'"));
}
} else {
if ($_DSESSION = $db->fetch_first("SELECT sid, groupid, groupid='6' AS ipbanned, pageviews AS spageviews, styleid, lastolupdate, seccode\r\n\t\t\tFROM {$tablepre}sessions WHERE sid='{$sid}' AND CONCAT_WS('.',ip1,ip2,ip3,ip4)='{$onlineip}'")) {
clearcookies();
$sessionexists = 1;
}
}
}
if (!$sessionexists) {
if ($discuz_uid) {
if (!($_DSESSION = $db->fetch_first("SELECT {$membertablefields}, m.styleid\r\n\t\t\tFROM {$tablepre}members m WHERE m.uid='{$discuz_uid}' AND m.password='******' AND m.secques='{$discuz_secques}'"))) {
clearcookies();
$membertablefields = 'm.uid AS discuz_uid, m.username AS discuz_user, m.password AS discuz_pw, m.secques AS discuz_secques,
m.adminid, m.groupid, m.groupexpiry, m.extgroupids, m.email, m.timeoffset, m.tpp, m.ppp, m.posts, m.threads, m.digestposts,
m.oltime, m.pageviews, m.credits, m.extcredits1, m.extcredits2, m.extcredits3, m.extcredits4, m.extcredits5,
m.extcredits6, m.extcredits7, m.extcredits8, m.timeformat, m.dateformat, m.pmsound, m.sigstatus, m.invisible,
m.lastvisit, m.lastactivity, m.lastpost, m.prompt, m.accessmasks, m.editormode, m.customshow, m.customaddfeed, m.newbietaskid';
if($sid) {
if($discuz_uid) {
$query = $db->query("SELECT s.sid, s.styleid, s.groupid='6' AS ipbanned, s.pageviews AS spageviews, s.lastolupdate, s.seccode, $membertablefields
FROM {$tablepre}sessions s, {$tablepre}members m
WHERE m.uid=s.uid AND s.sid='$sid' AND CONCAT_WS('.',s.ip1,s.ip2,s.ip3,s.ip4)='$onlineip' AND m.uid='$discuz_uid'
AND m.password='******' AND m.secques='$discuz_secques'");
} else {
$query = $db->query("SELECT sid, uid AS sessionuid, groupid, groupid='6' AS ipbanned, pageviews AS spageviews, styleid, lastolupdate, seccode
FROM {$tablepre}sessions WHERE sid='$sid' AND CONCAT_WS('.',ip1,ip2,ip3,ip4)='$onlineip'");
}
if($_DSESSION = $db->fetch_array($query)) {
$sessionexists = 1;
if(!empty($_DSESSION['sessionuid'])) {
$_DSESSION = array_merge($_DSESSION, $db->fetch_first("SELECT $membertablefields
FROM {$tablepre}members m WHERE uid='$_DSESSION[sessionuid]'"));
}
} else {
if($_DSESSION = $db->fetch_first("SELECT sid, groupid, groupid='6' AS ipbanned, pageviews AS spageviews, styleid, lastolupdate, seccode
FROM {$tablepre}sessions WHERE sid='$sid' AND CONCAT_WS('.',ip1,ip2,ip3,ip4)='$onlineip'")) {
clearcookies();
$sessionexists = 1;
}
}
}
if(!$sessionexists) {
$xmlfiletime = @filemtime($sitemapfile);
header("Content-type: application/xml");
$xmlcontent = "<?xml version=\"1.0\" encoding=\"{$charset}\"?>\n" . "<document xmlns:bbs=\"http://www.baidu.com/search/bbs_sitemap.xsd\">\n";
if ($timestamp - $xmlfiletime >= $_DCACHE['settings']['baidusitemap_life'] * 3600) {
$groupid = 7;
$extgroupids = '';
$xmlfiletime = $timestamp - $_DCACHE['settings']['baidusitemap_life'] * 3600;
$fidarray = array();
foreach ($_DCACHE['forums'] as $fid => $forum) {
if (sitemapforumperm($forum)) {
$fidarray[] = $fid;
}
}
$query = $db->query("SELECT tid, fid, subject, dateline, lastpost, replies, views, digest \r\n\t\tFROM {$tablepre}threads \r\n\t\tWHERE dateline > {$xmlfiletime} AND fid IN (" . implode(',', $fidarray) . ") AND displayorder >= 0\r\n\t\tLIMIT {$maxitemnum}");
$xmlcontent .= "\t<webSite>{$boardurl}</webSite>\n" . "\t<webMaster>{$adminemail}</webMaster>\n" . "\t<updatePeri>" . $_DCACHE['settings']['baidusitemap_life'] . "</updatePeri>\n" . "\t<updatetime>" . gmdate('Y-m-d H:i:s', $timestamp + $_DCACHE['settings']['timeoffset'] * 3600) . "</updatetime>\n" . "\t<version>Discuz! {$_DCACHE['settings']['version']}</version>\n";
while ($thread = $db->fetch_array($query)) {
$xmlcontent .= "\t<item>\n" . "\t\t<link>" . (!$_DCACHE['settings']['rewritestatus'] ? "{$boardurl}viewthread.php?tid={$thread['tid']}" : "{$boardurl}thread-{$thread['tid']}-1-1.html") . "</link>\n" . "\t\t<title>" . dhtmlspecialchars($thread['subject']) . "</title>\n" . "\t\t<pubDate>" . gmdate('Y-m-d H:i:s', $thread['dateline'] + $_DCACHE['settings']['timeoffset'] * 3600) . "</pubDate>\n" . "\t\t<bbs:lastDate>" . gmdate('Y-m-d H:i:s', $thread['lastpost'] + $_DCACHE['settings']['timeoffset'] * 3600) . "</bbs:lastDate>\n" . "\t\t<bbs:reply>{$thread['replies']}</bbs:reply>\n" . "\t\t<bbs:hit>{$thread['views']}</bbs:hit>\n" . "\t\t<bbs:boardid>{$thread['fid']}</bbs:boardid>\n" . "\t\t<bbs:pick>" . (empty($thread['digest']) ? 0 : 1) . "</bbs:pick>\n" . "\t</item>\n";
}
$xmlcontent .= "</document>";
if ($fp = @fopen($sitemapfile, 'w')) {
fwrite($fp, $xmlcontent);
flock($fp, 2);
fclose($fp);
}
echo $xmlcontent;
} else {
@readfile($sitemapfile);
}
function sitemapforumperm($forum)
{
return $forum['type'] != 'group' && (!$forum['viewperm'] || $forum['viewperm'] && forumperm($forum['viewperm']));
require_once DISCUZ_ROOT . './forumdata/cache/style_' . intval($_DCACHE['settings']['styleid']) . '.php';
if (!$_DCACHE['settings']['rssstatus']) {
exit('RSS Disabled');
}
$ttl = $_DCACHE['settings']['rssttl'] ? $_DCACHE['settings']['rssttl'] : 30;
$num = 20;
$db = new dbstuff();
$db->connect($dbhost, $dbuser, $dbpw, $dbname, $pconnect);
unset($dbhost, $dbuser, $dbpw, $dbname, $pconnect);
$groupid = 7;
$discuz_uid = 0;
$discuz_user = $discuz_pw = $discuz_secques = '';
if (!empty($_GET['auth'])) {
list($uid, $fid, $auth) = explode("\t", authcode($_GET['auth'], 'DECODE', md5($_DCACHE['settings']['authkey'])));
$query = $db->query("SELECT uid AS discuz_uid, username AS discuz_user, password AS discuz_pw, secques AS discuz_secques, groupid\r\n\t\tFROM {$tablepre}members WHERE uid='" . intval($uid) . "'");
if ($member = $db->fetch_array($query)) {
if ($auth == substr(md5($member['discuz_pw'] . $member['discuz_secques']), 0, 8)) {
extract($member);
}
}
}
$PHP_SELF = $_SERVER['PHP_SELF'] ? $_SERVER['PHP_SELF'] : $_SERVER['SCRIPT_NAME'];
$boardurl = 'http://' . $_SERVER['HTTP_HOST'] . substr($PHP_SELF, 0, strrpos($PHP_SELF, '/') + 1);
$bbname = dhtmlspecialchars(strip_tags($_DCACHE['settings']['bbname']));
$rssfid = empty($_GET['fid']) ? 0 : intval($_GET['fid']);
$forumname = '';
if (empty($rssfid)) {
foreach ($_DCACHE['forums'] as $fid => $forum) {
if (rssforumperm($forum)) {
$fidarray[] = $fid;
}
<?php
header('Content-Type: text/html; charset=utf-8');
define('ET_ROOT', dirname(__FILE__));
define('IN_ET', TRUE);
error_reporting(7);
include ET_ROOT . "/include/db_mysql.class.php";
include ET_ROOT . '/config.inc.php';
$db = new dbstuff();
$db->connect($server, $db_username, $db_password, $db_name, $pconnect, true);
@mysql_query("set names utf8");
//更新用户关系
if ($_GET['id'] == 1) {
$db->query("TRUNCATE TABLE `et_friend`");
$queryfriend = $db->query("select * from subscription");
while ($data = $db->fetch_array($queryfriend)) {
$sql = "INSERT INTO et_friend (fid_jieshou,fid_fasong) VALUES ('" . addslashes($data['subscribed']) . "','" . $data['subscriber'] . "')";
$query = $db->query($sql);
$regid = mysql_insert_id();
}
}
//更新用户信息
if ($_GET['id'] == 2) {
$db->query("TRUNCATE TABLE `et_users`");
$queryuser = $db->query("SELECT * \n\tFROM `profile` \n\tLEFT JOIN user ON user.id = profile.id\n\tLIMIT 0 , 10000000");
while ($data = $db->fetch_array($queryuser)) {
$sqlhead = 'SELECT * FROM `avatar` WHERE `profile_id` =' . $data['id'] . ' AND `width` =96 ';
$queryhead = $db->query($sqlhead);
if ($row = $db->fetch_array($queryhead)) {
$data['user_head'] = $row['filename'];
} else {
function init()
{
global $gtablepre, $tablepre, $wtablepre, $room_prefix, $moveut, $moveutmin;
global ${$gtablepre . 'user'}, ${$gtablepre . 'pass'}, $___MOD_SRV;
if (isset($_COOKIE)) {
$_COOKIE = gstrfilter($_COOKIE);
foreach ($_COOKIE as $key => $value) {
if ($key == $gtablepre . 'user' || $key == $gtablepre . 'pass') {
${$key} = $value;
}
}
}
ob_clean();
ob_start();
global $db;
if (!isset($db)) {
global $dbhost, $dbuser, $dbpw, $dbname, $pconnect, $database;
require GAME_ROOT . './include/db_' . $database . '.class.php';
$db = new \dbstuff();
$db->connect($dbhost, $dbuser, $dbpw, $dbname, $pconnect);
//$db->select_db($dbname);
unset($dbhost, $dbuser, $dbpw, $dbname, $pconnect);
}
global $___LOCAL_INPUT__VARS__INPUT_VAR_LIST;
if (isset($___LOCAL_INPUT__VARS__INPUT_VAR_LIST[$gtablepre . 'user'])) {
${$gtablepre . 'user'} = $___LOCAL_INPUT__VARS__INPUT_VAR_LIST[$gtablepre . 'user'];
}
if (isset($___LOCAL_INPUT__VARS__INPUT_VAR_LIST[$gtablepre . 'pass'])) {
${$gtablepre . 'pass'} = $___LOCAL_INPUT__VARS__INPUT_VAR_LIST[$gtablepre . 'pass'];
}
if (isset($___LOCAL_INPUT__VARS__INPUT_VAR_LIST['___GAME_ROOMID'])) {
$room_prefix = (string) $___LOCAL_INPUT__VARS__INPUT_VAR_LIST['___GAME_ROOMID'];
} else {
if (isset(${$gtablepre . 'user'})) {
$result = $db->query("SELECT roomid FROM {$gtablepre}users where username='******'user'} . "'");
if ($db->num_rows($result)) {
$zz = $db->fetch_array($result);
$room_prefix = $zz['roomid'];
} else {
$room_prefix = '';
}
} else {
$room_prefix = '';
}
}
$room_status = 0;
if ($room_prefix != '' && $room_prefix != 'n' && $room_prefix[0] != 's') {
$room_prefix = '';
} else {
if ($room_prefix != '' && $room_prefix[0] == 's') {
$result = $db->query("SELECT status FROM {$gtablepre}rooms where roomid='" . substr($room_prefix, 1) . "'");
if ($db->num_rows($result)) {
$zz = $db->fetch_array($result);
$room_status = $zz['status'];
if ($zz['status'] == 0) {
$room_prefix = '';
}
} else {
$room_prefix = '';
}
}
}
$tablepre = $gtablepre . $room_prefix;
if ($room_prefix == '') {
$wtablepre = $gtablepre;
} else {
$wtablepre = $gtablepre . $room_prefix[0];
}
//自动初始化表
if ($room_prefix != '') {
$result = $db->query("show tables like '{$wtablepre}winners';");
if (!$db->num_rows($result)) {
//某个非主房间是第一次使用，则创建表并初始化
$db->query("create table if not exists {$wtablepre}winners like {$gtablepre}winners;");
}
$result = $db->query("show tables like '{$tablepre}game';");
if (!$db->num_rows($result)) {
//某个非主房间是第一次使用，则创建表并初始化
$db->query("create table if not exists {$tablepre}game like {$gtablepre}game;");
$result = $db->query("SELECT count(*) as cnt FROM {$tablepre}game");
if (!$db->num_rows($result)) {
$cnt = 0;
} else {
$zz = $db->fetch_array($result);
$cnt = $zz['cnt'];
}
if ($cnt == 0) {
$db->query("insert into {$tablepre}game (gamenum) values (0);");
}
$result = $db->query("SELECT count(*) as cnt FROM {$wtablepre}winners");
if (!$db->num_rows($result)) {
$cnt = 0;
} else {
$zz = $db->fetch_array($result);
$cnt = $zz['cnt'];
}
if ($cnt == 0) {
$db->query("insert into {$wtablepre}winners (gid) values (0);");
}
$sql = file_get_contents(GAME_ROOT . './gamedata/sql/reset.sql');
$sql = str_replace("\r", "\n", str_replace(' bra_', ' ' . $tablepre, $sql));
$db->queries($sql);
$sql = file_get_contents(GAME_ROOT . './gamedata/sql/players.sql');
$sql = str_replace("\r", "\n", str_replace(' bra_', ' ' . $tablepre, $sql));
$db->queries($sql);
}
}
//$errorinfo ? error_reporting(E_ALL) : error_reporting(0);
date_default_timezone_set('Etc/GMT');
//$now = time() + $moveutmin*60;
global $now;
$now = time() + $moveut * 3600 + $moveutmin * 60;
global $sec, $min, $hour, $day, $month, $year, $wday;
list($sec, $min, $hour, $day, $month, $year, $wday) = explode(',', date("s,i,H,j,n,Y,w", $now));
//if($attackevasive) {
// include_once GAME_ROOT.'./include/security.inc.php';
//}
//COMBAT INFO INIT
//已经一起做进数据库里了
//global $hdamage,$hplayer,$noisetime,$noisepls,$noiseid,$noiseid2,$noisemode;
//include GAME_ROOT.'./gamedata/combatinfo.php';
//GAME INFO INIT
global $now, $db, $tablepre;
$result = $db->query("SELECT * FROM {$tablepre}game");
global $gameinfo;
$gameinfo = $db->fetch_array($result);
foreach ($gameinfo as $key => $value) {
global ${$key};
${$key} = $value;
}
if ($room_status == 2 && $gamestate == 0 && $room_prefix != '' && $room_prefix[0] == 's') {
$db->query("UPDATE {$gtablepre}rooms SET status=1 WHERE roomid='" . substr($room_prefix, 1) . "'");
}
$arealist = explode(',', $arealist);
global $cuser, $cpass;
$cuser = ${$gtablepre . 'user'};
$cpass = ${$gtablepre . 'pass'};
//这里实在没办法，一堆文件都直接引用mode和command这两个来自input的变量，但又不能让所有文件都依赖input…… 只能恶心一下了……
global $mode, $command, $___MOD_SRV;
if ($___MOD_SRV) {
global $___LOCAL_INPUT__VARS__mode, $___LOCAL_INPUT__VARS__command;
global $___LOCAL_INPUT__VARS__INPUT_VAR_LIST;
if (isset($___LOCAL_INPUT__VARS__INPUT_VAR_LIST['mode'])) {
$mode = $___LOCAL_INPUT__VARS__INPUT_VAR_LIST['mode'];
} else {
$mode = $___LOCAL_INPUT__VARS__mode;
}
if (isset($___LOCAL_INPUT__VARS__INPUT_VAR_LIST['command'])) {
$command = $___LOCAL_INPUT__VARS__INPUT_VAR_LIST['command'];
} else {
$command = $___LOCAL_INPUT__VARS__command;
}
} else {
global $___LOCAL_INPUT__VARS__mode, $___LOCAL_INPUT__VARS__command;
$mode = $___LOCAL_INPUT__VARS__mode;
$command = $___LOCAL_INPUT__VARS__command;
}
}
require './include/common.inc.php';
require GAME_ROOT . './include/socket.func.php';
require GAME_ROOT . './include/roommng.func.php';
require GAME_ROOT . './include/modules/core/sys/config/server.config.php';
$_COOKIE = gstrfilter($_COOKIE);
$cuser = $_COOKIE[$gtablepre . 'user'];
$cpass = $_COOKIE[$gtablepre . 'pass'];
require GAME_ROOT . './include/db_' . $database . '.class.php';
$db = new dbstuff();
$db->connect($dbhost, $dbuser, $dbpw, $dbname, $pconnect);
unset($dbhost, $dbuser, $dbpw, $dbname, $pconnect);
$result = $db->query("SELECT * FROM {$gtablepre}users WHERE username='******'");
if (!$db->num_rows($result)) {
gexit('Cookie无效。请重新登录。');
}
$udata = $db->fetch_array($result);
if ($udata['password'] != $cpass) {
gexit('Cookie无效。请重新登录。');
}
if ($udata['roomid'] == '' || $udata['roomid'][0] != 's') {
gexit('你不在一个房间内。');
}
$roomid = substr($udata['roomid'], 1);
ignore_user_abort(1);
$_POST = gstrfilter($_POST);
if (!file_exists(GAME_ROOT . './gamedata/tmp/rooms/' . $roomid . '.txt')) {
gexit('房间不存在。');
}
$result = $db->query("SELECT * FROM {$gtablepre}rooms WHERE roomid='{$roomid}'");
if (!$db->num_rows($result)) {
gexit('房间不存在。');
$sid = daddslashes(($transsidstatus || CURSCRIPT == 'wap') && (isset($_GET['sid']) || isset($_POST['sid'])) ? isset($_GET['sid']) ? $_GET['sid'] : $_POST['sid'] : (isset($_DCOOKIE['sid']) ? $_DCOOKIE['sid'] : ''));
$discuz_auth_key = md5($_DCACHE['settings']['authkey'] . $_SERVER['HTTP_USER_AGENT']);
list($discuz_pw, $discuz_secques, $discuz_uid) = empty($_DCOOKIE['auth']) ? array('', '', 0) : daddslashes(explode("\t", authcode($_DCOOKIE['auth'], 'DECODE')), 1);
$newpm = $newpmexists = $sessionexists = $seccode = $bloguid = 0;
$membertablefields = 'm.uid AS discuz_uid, m.username AS discuz_user, m.password AS discuz_pw, m.secques AS discuz_secques,
m.adminid, m.groupid, m.groupexpiry, m.extgroupids, m.email, m.timeoffset, m.tpp, m.ppp, m.posts, m.digestposts,
m.oltime, m.pageviews, m.credits, m.extcredits1, m.extcredits2, m.extcredits3, m.extcredits4, m.extcredits5,
m.extcredits6, m.extcredits7, m.extcredits8, m.timeformat, m.dateformat, m.pmsound, m.sigstatus, m.invisible,
m.lastvisit, m.lastactivity, m.lastpost, m.newpm, m.accessmasks, m.xspacestatus, m.editormode, m.customshow';
if ($sid) {
if ($discuz_uid) {
$query = $db->query("SELECT s.sid, s.styleid, s.groupid='6' AS ipbanned, s.pageviews AS spageviews, s.lastolupdate, s.seccode, {$membertablefields}\r\n\t\t\tFROM {$tablepre}sessions s, {$tablepre}members m\r\n\t\t\tWHERE m.uid=s.uid AND s.sid='{$sid}' AND CONCAT_WS('.',s.ip1,s.ip2,s.ip3,s.ip4)='{$onlineip}' AND m.uid='{$discuz_uid}'\r\n\t\t\tAND m.password='******' AND m.secques='{$discuz_secques}'");
} else {
$query = $db->query("SELECT sid, uid AS sessionuid, groupid, groupid='6' AS ipbanned, pageviews AS spageviews, styleid, lastolupdate, seccode\r\n\t\t\tFROM {$tablepre}sessions WHERE sid='{$sid}' AND CONCAT_WS('.',ip1,ip2,ip3,ip4)='{$onlineip}'");
}
if ($_DSESSION = $db->fetch_array($query)) {
$sessionexists = 1;
if (!empty($_DSESSION['sessionuid'])) {
$query = $db->query("SELECT {$membertablefields}\r\n\t\t\t\tFROM {$tablepre}members m WHERE uid='{$_DSESSION['sessionuid']}'");
$_DSESSION = array_merge($_DSESSION, $db->fetch_array($query));
}
} else {
$query = $db->query("SELECT sid, groupid, groupid='6' AS ipbanned, pageviews AS spageviews, styleid, lastolupdate, seccode\r\n\t\t\tFROM {$tablepre}sessions WHERE sid='{$sid}' AND CONCAT_WS('.',ip1,ip2,ip3,ip4)='{$onlineip}'");
if ($_DSESSION = $db->fetch_array($query)) {
clearcookies();
$sessionexists = 1;
}
}
}
if (!$sessionexists) {
if ($discuz_uid) {
<?php
include_once './common.php';
include_once './class/db_mysql.class.php';
@(include_once './uc_client/client.php');
$devdb = new dbstuff();
$devdb->charset = 'utf8';
$devdb->connect('200.200.0.24', 'root', 'pr', 'sangfordedecmsv56utf', 0);
$catemap = array('技术支持' => array('id' => '196', 'type' => 'rdp'), '预研技能' => array('id' => '195', 'type' => 'rdp'), '测试技能' => array('id' => '194', 'type' => 'rdp'), '编码技能' => array('id' => '193', 'type' => 'rdp'), '设计技能' => array('id' => '193', 'type' => 'rdp'), '项目管理' => array('id' => '191', 'type' => 'rdp'), '产品规划' => array('id' => '190', 'type' => 'rdp'), 'C/C++编程' => array('id' => '197', 'type' => 'devtech'), '工具使用' => array('id' => '202', 'type' => 'devtech'), 'Windows开发' => array('id' => '200', 'type' => 'devtech'), 'Linux内核驱动' => array('id' => '199', 'type' => 'devtech'), 'Linux开发' => array('id' => '198', 'type' => 'devtech'), '调试技术' => array('id' => '201', 'type' => 'devtech'), '数据库' => array('id' => '203', 'type' => 'devtech'), '算法设计' => array('id' => '204', 'type' => 'devtech'), '协议分析' => array('id' => '205', 'type' => 'devtech'), '网络编程' => array('id' => '206', 'type' => 'devtech'), '性能优化' => array('id' => '207', 'type' => 'devtech'), '手机开发' => array('id' => '208', 'type' => 'devtech'), 'AC' => array('id' => '52', 'type' => 'modules'), 'WOC' => array('id' => '58', 'type' => 'modules'), '其他' => array('id' => '52', 'type' => 'modules'), '知识管理' => array('id' => '191', 'type' => 'rdp'), '常用命令' => array('id' => '198', 'type' => 'devtech'), '应用识别' => array('id' => '52', 'type' => 'modules'), '版本经理' => array('id' => '191', 'type' => 'rdp'), '用户认证' => array('id' => '52', 'type' => 'modules'), '企业文化' => array('id' => '1', 'type' => 'news'), '研发规范' => array('id' => '192', 'type' => 'rdp'), '开发工具' => array('id' => '202', 'type' => 'devtech'), '开发流程' => array('id' => '192', 'type' => 'rdp'), '部门风采' => array('id' => '1', 'type' => 'news'), 'SSL' => array('id' => '56', 'type' => 'modules'));
$reg_msg = array('-1' => '用户名非法', '-2' => '注册信息包括不允许的词', '-3' => '用户名已存在', '-4' => 'Email地址格式非法', '-5' => 'Email地址没有注册', '-6' => 'Email地址已被注册');
$cnt = 0;
$sqlstr = 'SELECT * FROM dede_member';
$query = $devdb->query($sqlstr);
while ($user = $devdb->fetch_array($query)) {
//用户处理
echo '<br />处理用户：' . $user['userid'] . '...';
$newuid = uc_user_register($user['userid'], $user['pwd'], $user['email']);
if ($newuid <= 0) {
if ($newuid == -3) {
echo '用户已存在,用户ID为：';
list($newuid, $username, $email) = uc_get_user($user['userid']);
echo $newuid . ' 原用户ID为：' . $user['mid'] . '<br />';
} else {
echo '<font color="red">注册用户失败：' . $reg_msg[$newuid] . '，跳过...</font><br />';
$sqlstr0 = "SELECT * FROM dede_archives WHERE mid='" . $user['mid'] . "'";
$query0 = $devdb->query($sqlstr0);
while ($res0 = $devdb->fetch_array($query0)) {
echo '其发表文章：' . $res0['title'] . '<br />';
}
continue;
}
} else {
<?php
define('IN_DISCUZ', true);
include_once '../../config.inc.php';
require_once '../../include/global.func.php';
require_once '../../include/db_' . $database . '.class.php';
$uid = $_GET['uid'];
$buyer = $_GET['buyer'];
$price = $_GET['price'];
$amount = $_GET['amount'];
$orderid = $_GET['orderid'];
$submitdate = $_GET['submitdate'];
$db = new dbstuff();
$db->connect($dbhost, $dbuser, $dbpw, $dbname, $pconnect, true, $dbcharset);
$db->select_db($dbname);
$settings = array();
$query = $db->query("SELECT * FROM {$tablepre}settings");
while ($setting = $db->fetch_array($query)) {
$settings[$setting['variable']] = $setting['value'];
}
$settings['creditstrans'] = explode(',', $settings['creditstrans']);
$extcredits = $settings['creditstrans'][0];
updatecredits($uid, array($extcredits => $amount));
$timestamp = time();
$db->query("INSERT INTO {$tablepre}creditslog (uid, fromto, sendcredits, receivecredits, send, receive, dateline, operation)VALUES ({$uid}, '{$buyer}', 0, {$extcredits}, 0, {$amount}, {$timestamp}, 'AFD')");
$db->query("UPDATE {$tablepre}orders SET status = '2', confirmdate = {$timestamp} WHERE orderid = '{$orderid}'");
if($dumpinfo['volume'] == 1) {
cpmsg('分卷数据成功导入数据库，您需要自动导入本次其它的备份吗？',
$phpself."?action=import&from=server&datafile_server=$datafile_next&autoimport=yes&importsubmit=yes".(!empty($delunzip) ? '&delunzip=yes' : ''),
'form');
} elseif($autoimport) {
cpmsg('数据文件 #'.$dumpinfo[volume].' 成功导入，程序将自动继续。', $phpself."?action=import&from=server&datafile_server=$datafile_next&autoimport=yes&importsubmit=yes".(!empty($delunzip) ? '&delunzip=yes' : ''));
} else {
cpmsg('数据成功导入论坛数据库。<a href="'.$phpself.'?action='.$action.'">首页</a>');
}
} elseif($dumpinfo['method'] == 'shell') {
require './config.inc.php';
list($dbhost, $dbport) = explode(':', $dbhost);
$query = $db->query("SHOW VARIABLES LIKE 'basedir'");
list(, $mysql_base) = $db->fetch_array($query, MYSQL_NUM);
$mysqlbin = $mysql_base == '/' ? '' : addslashes($mysql_base).'bin/';
shell_exec($mysqlbin.'mysql -h"'.$dbhost.($dbport ? (is_numeric($dbport) ? ' -P'.$dbport : ' -S"'.$dbport.'"') : '').
'" -u"'.$dbuser.'" -p"'.$dbpw.'" "'.$dbname.'" < '.$datafile);
cpmsg('数据成功导入论坛数据库。<a href="'.$phpself.'?action='.$action.'">首页</a>');
} else {
cpmsg('数据文件非 Discuz! 格式，无法导入。请返回');
}
}else if( !empty($_POST['deletesubmit']) ) {
$delete = $_POST['delete'];
if(is_array($delete)) {
foreach($delete as $filename) {
$db->connect($server, $db_username, $db_password, $db_name, $pconnect, true);
@mysql_query("set names utf8");
include 'include/global.func.php';
//if(preg_match('/(mozilla|m3gate|winwap|openwave|Opera)/i', $_SERVER['HTTP_USER_AGENT']) && !preg_match('/(SymbianOS)/i', $_SERVER['HTTP_USER_AGENT'])) {
// header("Location: ../index.php");
//}
$op = $_GET['op'] ? $_GET['op'] : "index";
$addtime = time();
$action = $_POST['action'];
$act = $_GET['act'];
$page = $_GET['page'] ? $_GET['page'] : 1;
//login
$ulmtem = explode("\t", authcode($_COOKIE["wapcookie"], 'DECODE'));
if ($ulmtem) {
$query = $db->query("SELECT user_id,user_name,nickname,user_head FROM et_users where user_id='{$ulmtem['0']}' && password='******'1']}'");
$user = $db->fetch_array($query);
$user['user_head'] = $user['user_head'] ? "{$webaddr}/attachments/head/" . $user['user_head'] : "{$webaddr}/images/noavatar.jpg";
}
if (!$user['user_id']) {
$head = "EasyTalk微博客 随时随地";
} else {
$head = "欢迎您，" . $user['nickname'];
}
if (!$user['user_id'] && $op == "index") {
$op = "login";
}
include 'include/' . $op . '.inc.php';
if ($user['user_id'] && $op != "logout") {
echo "<div class=\"bottomline\">" . "<a href='index.php?op=index'>首页</a> | " . "<a href='index.php?op=home'>空间</a> | " . "<a href='index.php?op=atreplies'>@我</a> | " . "<a href='index.php?op=myfriends'>动态</a> | " . "<a href='index.php?op=privatemsg'>私信</a><br/>" . "<a href='index.php?op=privacy'>隐私信息</a> | " . "<a href='index.php?op=friends'>关注</a> | " . "<a href='index.php?op=sendphoto'>发照片</a> | " . "<a href='index.php?op=login&act=logout'>退出</a></div>";
}
wapfooter();
@mysql_query("set names gbk");
include 'include/global.func.php';
include 'include/chinese.class.php';
if (preg_match('/(mozilla|m3gate|winwap|openwave|Opera)/i', $_SERVER['HTTP_USER_AGENT']) && !preg_match('/(SymbianOS)/i', $_SERVER['HTTP_USER_AGENT'])) {
header("Location: ../index.php");
}
$op = $_GET['op'] ? $_GET['op'] : "index";
$addtime = time();
$action = $_POST['action'];
$act = $_GET['act'];
$page = $_GET['page'] ? $_GET['page'] : 1;
$exp = authcode($_COOKIE["wapcookie"], 'DECODE');
$ulmtem = explode("\t", $exp);
if ($ulmtem) {
$query = $db->query("SELECT user_id,user_name FROM et_users where user_id='{$ulmtem['0']}' && password='******'1']}'");
$data = $db->fetch_array($query);
$user_id = $data['user_id'];
$user_name = $data['user_name'];
}
if (!$user_id) {
$head = $webn1 . " | ÃÔÄ㲩¿Í ËæʱËæµØ";
} else {
$head = $webn1 . " | »¶ÓÄú£¬" . $user_name;
}
if (!$user_id && $op == "index") {
$op = "login";
}
wapheader($head);
include 'include/' . $op . '.inc.php';
if ($user_id && $op != "logout") {
echo "<div id=\"nav\" style=\"border-top:1px solid #8FE1FF;margin-top:5px;padding-top:5px;padding-bottom:10px\">" . "<a href='index.php?op=index'>Ê×Ò³</a> | " . "<a href='index.php?op=home'>¿Õ¼ä</a> | " . "<a href='index.php?op=atreplies'>@ÎÒ</a> | " . "<a href='index.php?op=myfriends'>¶¯Ì¬</a> | " . "<a href='index.php?op=privatemsg'>˽ÐÅ</a><br/>" . "<a href='index.php?op=friends'>¹Ø×¢</a> | " . "<a href='index.php?op=browse'>¹ä¹ä</a> | " . "<a href='index.php?op=sendphoto'>·¢ÕÕƬ</a> | " . "<a href='index.php?op=login&act=logout'>Í˳ö</a></div>";
}
$template = Template::getInstance();
$template->setOptions($options);
}
//后台
$admin_login_temp = $_COOKIE["admin_login"];
$admin_exp = authcode($admin_login_temp, 'DECODE');
$admin_tem = explode("\t", $admin_exp);
$admin_login = $admin_tem['1'];
//前台
$authcookie = $_COOKIE["authcookie"];
$exp = authcode($authcookie, 'DECODE');
$tem = explode("\t", $exp);
if ($tem || $admin_tem) {
$userquery = $db->query("SELECT * FROM et_users WHERE user_name='{$tem['1']}' && password='******'0']}'");
$my = $db->fetch_array($userquery);
$my['user_head'] = $my['user_head'] ? "{$webaddr}/attachments/head/" . $my['user_head'] : "{$webaddr}/images/noavatar.jpg";
$tem1 = explode(" ", $my['home_city']);
$my['home_sf'] = $tem1[0];
$my['home_city'] = $tem1[1];
$tem2 = explode(" ", $my['live_city']);
$my['live_sf'] = $tem2[0];
$my['live_city'] = $tem2[1];
$tem3 = explode("-", $my['birthday']);
$my['birth_year'] = $tem3[0];
$my['birth_month'] = $tem3[1];
$my['birth_day'] = $tem3[2];
$tem4 = explode(" ", $my['gtalk']);
$my['gtalk'] = $tem4[0] ? $tem4[0] : "";
$my['gtalkauthcode'] = $tem4[1];
if ($my[user_id] && $addtime - $my[last_login] > 600) {
}
if (empty($get)) {
exit('Invalid Request');
}
$action = $get['action'];
require_once 'uc_client/lib/xml.class.php';
$post = xml_unserialize(file_get_contents('php://input'));
if (in_array($get['action'], array('test', 'deleteuser', 'renameuser', 'gettag', 'synlogin', 'synlogout', 'updatepw', 'updatebadwords', 'updatehosts', 'updateapps', 'updateclient', 'updatecredit', 'getcreditsettings', 'updatecreditsettings'))) {
require_once 'include/db_mysql.class.php';
$db_uc = new dbstuff();
include "config.inc.php";
$db_uc->connect(UC_DBHOST, UC_DBUSER, UC_DBPW, UC_DBNAME, UC_DBCONNECT);
if ($get[username]) {
$db_uc->query("SET NAMES gbk");
$query = $db_uc->query("SELECT * FROM " . UC_DBTABLEPRE . "members WHERE `username`='{$get['username']}'");
while ($uc_rs = $db_uc->fetch_array($query)) {
$uc_info[] = $uc_rs;
}
$get['salt'] = $uc_info[0]['salt'];
$get['email'] = $uc_info[0]['email'];
$get['oldpass'] = $uc_info[0]['password'];
}
$uc_note = new uc_note();
exit($uc_note->{$get}['action']($get, $post));
} else {
exit(API_RETURN_FAILED);
}
} else {
require_once 'config.inc.php';
require_once 'include/db_mysql.class.php';
$GLOBALS['db'] = new dbstuff();
exit(API_RETURN_SUCCEED);
} elseif ($action == 'gettag') {
!API_GETTAG && exit(API_RETURN_FORBIDDEN);
//获取标签 API 接口
$return = array($name, array());
echo uc_serialize($return, 1);
} elseif ($action == 'synlogin' && $_GET['time'] == $get['time']) {
!API_SYNLOGIN && exit(API_RETURN_FORBIDDEN);
//同步登录 API 接口
include './include/db_mysql.class.php';
$db = new dbstuff();
$db->connect($dbhost, $dbuser, $dbpw, $dbname, $pconnect);
unset($dbhost, $dbuser, $dbpw, $dbname, $pconnect);
$uid = intval($get['uid']);
$query = $db->query("SELECT uid, username FROM {$tablepre}members WHERE uid='{$uid}'");
if ($member = $db->fetch_array($query)) {
header('P3P: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"');
dsetcookie('Example_auth', authcode($member['uid'] . "\t" . $member['username'], 'ENCODE'), 86400 * 365);
}
} elseif ($action == 'synlogout') {
!API_SYNLOGOUT && exit(API_RETURN_FORBIDDEN);
//同步登出 API 接口
header('P3P: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"');
dsetcookie('Example_auth', '', -86400 * 365);
} elseif ($action == 'updatebadwords') {
!API_UPDATEBADWORDS && exit(API_RETURN_FORBIDDEN);
//更新关键字列表
exit(API_RETURN_SUCCEED);
} elseif ($action == 'updatehosts') {
!API_UPDATEHOSTS && exit(API_RETURN_FORBIDDEN);
//更新HOST文件
<?php
header('Content-Type: text/html; charset=utf-8');
define('ET_ROOT', dirname(__FILE__));
define('IN_ET', TRUE);
error_reporting(7);
include ET_ROOT . "/include/db_mysql.class.php";
include ET_ROOT . '/config.inc.php';
$db = new dbstuff();
$db->connect($server, $db_username, $db_password, $db_name, $pconnect, true);
@mysql_query("set names utf8");
$query1 = $db->query("ALTER TABLE `et_settings` CHANGE `replace_word` `replace_word` TEXT CHARACTER SET utf8 COLLATE utf8_general_ci NOT NULL;");
$query2 = $db->query("ALTER TABLE `et_content` CHANGE `content_body` `content_body` TEXT CHARACTER SET utf8 COLLATE utf8_general_ci NOT NULL;");
$query3 = $db->query("Describe `et_content` `replyshow`");
$fetch1 = $db->fetch_array($query3);
if (!$fetch1['Field']) {
$query4 = $db->query("ALTER TABLE `et_content` ADD COLUMN `replyshow` tinyint(1) NOT NULL DEFAULT '1';");
}
echo $query1 * $query2 * $query3 ? "升级完成，请删除此文件" : "升级出现问题，请重新运行";
require_once TOOLS_ROOT."./include/db_mysql.class.php";
$db = new dbstuff;
$db->connect($dbhost, $dbuser, $dbpw, $dbname, $pconnect, true, $dbcharset);
$dbuser = $dbpw = $dbname = $pconnect = NULL;
if($db->version > '4.1') {
$serverset = "character_set_connection=$dbcharset, character_set_results=$dbcharset, character_set_client=binary";
$serverset && $db->query("SET $serverset");
}
$selectfid = $_POST['fid'];
if($selectfid) {
$i = 0;
foreach($selectfid as $fid) {
$sql = "select t.tid, t.subject, p.subject AS psubject, p.dateline, p.author from {$tablepre}threads t, {$tablepre}posts p where t.fid=$fid and p.tid=t.tid and t.displayorder>=0 and p.invisible=0 and p.status=0 order by p.dateline DESC limit 1";
$query = $db->query($sql);
$lastarray = array();
if($lastarray = $db->fetch_array($query)) {
$lastarray['subject'] = $lastarray['psubject']?$lastarray['psubject']:$lastarray['subject'];
$lastpoststr = $lastarray['tid']."\t".$lastarray['subject']."\t".$lastarray['dateline']."\t".$lastarray['author'];
$db->query("update {$tablepre}forums set lastpost='$lastpoststr' where fid=$fid");
}
}
htmlheader();
show_tools_message("重置成功", 'tools.php?action=dz_rplastpost');
htmlfooter();
} else {
htmlheader();
echo '<h4>修复版块最后回复 </h4><div class=\"specialdiv\">操作提示：<ul>
<li>可以指定需要修复的版块，提交后程序会重新查询出版块的最后回复信息并且修复</li>
</ul></div>';
echo '<div class="tabbody">
$template->setOptions($options);
}
//信息调用
//后台
$admin_login_temp = $_COOKIE["admin_login"];
$admin_exp = authcode($admin_login_temp, 'DECODE');
$admin_tem = explode("\t", $admin_exp);
$admin_login = $admin_tem['1'];
//前台
$authcookie = $_COOKIE["authcookie"];
$exp = authcode($authcookie, 'DECODE');
$tem = explode("\t", $exp);
if ($tem || $admin_tem) {
$sql_us = "select * from et_users where mailadres='{$tem['1']}' && password='******'0']}' && user_id='{$tem['2']}'";
$query_us = $db->query($sql_us);
$my = $db->fetch_array($query_us);
$my['user_head'] = $my['user_head'] ? "{$webaddr}/attachments/head/" . $my['user_head'] : "{$webaddr}/images/noavatar.jpg";
$tem1 = explode(" ", $my['home_city']);
$my['home_sf'] = $tem1[0];
$my['home_city'] = $tem1[1];
$tem2 = explode(" ", $my['live_city']);
$my['live_sf'] = $tem2[0];
$my['live_city'] = $tem2[1];
$tem3 = explode("-", $my['birthday']);
$my['birth_year'] = $tem3[0];
$my['birth_month'] = $tem3[1];
$my['birth_day'] = $tem3[2];
$tem4 = explode(" ", $my['msn']);
if (count($tem4) == 2) {
$my['msn'] = $tem4[0];
$my['msnyz'] = $tem4[1];
