safeCheck = FALSE;
$dsql->SetLongLink();
$cfg_admin_skin = 1; // 后台管理风格
if(file_exists(DEDEDATA.'/admin/skin.txt'))
{
$skin = file_get_contents(DEDEDATA.'/admin/skin.txt');
$cfg_admin_skin = !in_array($skin, array(1,2,3,4))? 1 : $skin;
}
$_csrf_name = '_csrf_name_'.substr(md5(md5($cfg_cookie_encode)),0,8);
$_csrf_hash = GetCookie($_csrf_name);
if ( empty($_csrf_hash) )
{
$_csrf_hash = md5(uniqid(mt_rand(), TRUE));
if (strtoupper($_SERVER['REQUEST_METHOD']) !== 'POST')
{
PutCookie($_csrf_name, $_csrf_hash, 7200, '/');
}
}
$_csrf = array(
'name' =>'_dede'.$_csrf_name,
'hash' => $_csrf_hash,
);
//获得当前脚本名称，如果你的系统被禁用了$_SERVER变量，请自行更改这个选项
$dedeNowurl = $s_scriptName = '';
$isUrlOpen = @ini_get('allow_url_fopen');
$dedeNowurl = GetCurUrl();
$dedeNowurls = explode('?', $dedeNowurl);
$s_scriptName = $dedeNowurls[0];
$cfg_remote_site = empty($cfg_remote_site)? 'N' : $cfg_remote_site;
//检验用户登录状态
$cuserLogin = new userLogin();
if($cuserLogin->getUserID()==-1)
{
if ( preg_match("#PHP (.*) Development Server#",$_SERVER['SERVER_SOFTWARE']) )
{
$dirname = dirname($_SERVER['SCRIPT_NAME']);
header("location:{$dirname}/login.php?gotopage=".urlencode($dedeNowurl));
} else {
header("location:login.php?gotopage=".urlencode($dedeNowurl));
}
exit();
}
function csrf_check()
{
global $token;
if(!isset($token) || strcasecmp($token, $_SESSION['token']) !== 0){
echo 'DedeCMS:CSRF Token Check Failed!';
exit;
}
}
function XSSClean($val)
{
if (is_array($val))
{
foreach ($val as $key => $v) {
if(in_array($key,array('tags','body','dede_fields','dede_addonfields','dopost','introduce'))) continue;
$val[$key] = XSSClean($val[$key]);
}
return $val;
}
return RemoveXss($val);
}
if($cfg_dede_log=='Y')
{
$s_nologfile = '_main|_list';
$s_needlogfile = 'sys_|file_';
$s_method = isset($_SERVER['REQUEST_METHOD']) ? $_SERVER['REQUEST_METHOD'] : '';
$s_query = isset($dedeNowurls[1]) ? $dedeNowurls[1] : '';
$s_scriptNames = explode('/', $s_scriptName);
$s_scriptNames = $s_scriptNames[count($s_scriptNames)-1];
$s_userip = GetIP();
if( $s_method=='POST' || (!preg_match("#".$s_nologfile."#i", $s_scriptNames) && $s_query!='') || preg_match("#".$s_needlogfile."#i",$s_scriptNames) )
{
$inquery = "INSERT INTO `#@__log`(adminid,filename,method,query,cip,dtime)
VALUES ('".$cuserLogin->getUserID()."','{$s_scriptNames}','{$s_method}','".addslashes($s_query)."','{$s_userip}','".time()."');";
$dsql->ExecuteNoneQuery($inquery);
}
}
//启用远程站点则创建FTP类
if($cfg_remote_site=='Y')
{
require_once(DEDEINC.'/ftp.class.php');
if(file_exists(DEDEDATA."/cache/inc_remote_config.php"))
{
require_once DEDEDATA."/cache/inc_remote_config.php";
}
if(empty($remoteuploads)) $remoteuploads = 0;
if(empty($remoteupUrl)) $remoteupUrl = '';
$config = array(
'hostname' => $GLOBALS['cfg_ftp_host'],
'username' => $GLOBALS['cfg_ftp_user'],
'password' => $GLOBALS['cfg_ftp_pwd'],
'debug' => 'TRUE'
);
$ftp = new FTP($config);
//初始化FTP配置
if($remoteuploads==1){
$ftpconfig = array(
'hostname'=>$rmhost,
'port'=>$rmport,
'username'=>$rmname,
'password'=>$rmpwd
);
}
}
//管理缓存、管理员频道缓存
$cache1 = DEDEDATA.'/cache/inc_catalog_base.inc';
if(!file_exists($cache1)) UpDateCatCache();
$cacheFile = DEDEDATA.'/cache/admincat_'.$cuserLogin->userID.'.inc';
if(file_exists($cacheFile)) require_once($cacheFile);
//更新服务器
require_once (DEDEDATA.'/admin/config_update.php');
if(strlen($cfg_cookie_encode)<=10)
{
$chars='abcdefghigklmnopqrstuvwxwyABCDEFGHIGKLMNOPQRSTUVWXWY0123456789';
$hash='';
$length = rand(28,32);
$max = strlen($chars) - 1;
for($i = 0; $i < $length; $i++) {
$hash .= $chars[mt_rand(0, $max)];
}
$dsql->ExecuteNoneQuery("UPDATE `#@__sysconfig` SET `value`='{$hash}' WHERE varname='cfg_cookie_encode' ");
$configfile = DEDEDATA.'/config.cache.inc.php';
if(!is_writeable($configfile))
{
echo "配置文件'{$configfile}'不支持写入，无法修改系统配置参数！";
exit();
}
$fp = fopen($configfile,'w');
flock($fp,3);
fwrite($fp,"<"."?php\r\n");
$dsql->SetQuery("SELECT `varname`,`type`,`value`,`groupid` FROM `#@__sysconfig` ORDER BY aid ASC ");
$dsql->Execute();
while($row = $dsql->GetArray())
{
if($row['type']=='number')
{
if($row['value']=='') $row['value'] = 0;
fwrite($fp,"\${$row['varname']} = ".$row['value'].";\r\n");
}
else
{
fwrite($fp,"\${$row['varname']} = '".str_replace("'",'',$row['value'])."';\r\n");
}
}
fwrite($fp,"?".">");
fclose($fp);
}
/**
* 更新栏目缓存
*
* @access public
* @return void
*/
function UpDateCatCache()
{
global $dsql, $cfg_multi_site, $cache1, $cacheFile, $cuserLogin;
$cache2 = DEDEDATA.'/cache/channelsonlist.inc';
$cache3 = DEDEDATA.'/cache/channeltoplist.inc';
$dsql->SetQuery("SELECT id,reid,channeltype,issend,typename FROM `#@__arctype`");
$dsql->Execute();
$fp1 = fopen($cache1,'w');
$phph = '?';
$fp1Header = "<{$phph}php\r\nglobal \$cfg_Cs;\r\n\$cfg_Cs=array();\r\n";
fwrite($fp1,$fp1Header);
while($row=$dsql->GetObject())
{
// 将typename缓存起来
$row->typename = base64_encode($row->typename);
fwrite($fp1,"\$cfg_Cs[{$row->id}]=array({$row->reid},{$row->channeltype},{$row->issend},'{$row->typename}');\r\n");
}
fwrite($fp1, "{$phph}>");
fclose($fp1);
$cuserLogin->ReWriteAdminChannel();
@unlink($cache2);
@unlink($cache3);
}
// 清空选项缓存
function ClearOptCache()
{
$tplCache = DEDEDATA.'/tplcache/';
$fileArray = glob($tplCache."inc_option_*.inc");
if (count($fileArray) > 1)
{
foreach ($fileArray as $key => $value)
{
if (file_exists($value)) unlink($value);
else continue;
}
return TRUE;
}
return FALSE;
}
/**
* 更新会员模型缓存
*
* @access public
* @return void
*/
function UpDateMemberModCache()
{
global $dsql;
$cachefile = DEDEDATA.'/cache/member_model.inc';
$dsql->SetQuery("SELECT * FROM `#@__member_model` WHERE state='1'");
$dsql->Execute();
$fp1 = fopen($cachefile,'w');
$phph = '?';
$fp1Header = "<{$phph}php\r\nglobal \$_MemberMod;\r\n\$_MemberMod=array();\r\n";
fwrite($fp1,$fp1Header);
while($row=$dsql->GetObject())
{
fwrite($fp1,"\$_MemberMod[{$row->id}]=array('{$row->name}','{$row->table}');\r\n");
}
fwrite($fp1,"{$phph}>");
fclose($fp1);
}
/**
* 引入模板文件
*
* @access public
* @param string $filename 文件名称
* @param bool $isabs 是否为管理目录
* @return string
*/
function DedeInclude($filename, $isabs=FALSE)
{
return $isabs ? $filename : DEDEADMIN.'/'.$filename;
}
/**
* 获取当前用户的ftp站点
*
* @access public
* @param string $current 当前站点
* @param string $formname 表单名称
* @return string
*/
function GetFtp($current='', $formname='')
{
global $dsql;
$formname = empty($formname)? 'serviterm' : $formname;
$cuserLogin = new userLogin();
$row=$dsql->GetOne("SELECT servinfo FROM `#@__multiserv_config`");
$row['servinfo']=trim($row['servinfo']);
if(!empty($row['servinfo'])){
$servinfos = explode("\n", $row['servinfo']);
$select="";
echo '";
}
}
helper('cache');
/**
* 根据用户mid获取用户名称
*
* @access public
* @param int $mid 用户ID
* @return string
*/
if(!function_exists('GetMemberName')){
function GetMemberName($mid=0)
{
global $dsql;
$rs = GetCache('memberlogin', $mid);
if( empty($rs) )
{
$rs = $dsql->GetOne("SELECT * FROM `#@__member` WHERE mid='{$mid}' ");
SetCache('memberlogin', $mid, $rs, 1800);
}
return $rs['uname'];
}
}