
ctrl+b
ctrl+c
ctrl+x
ctrl+v
ctrl+y
ctrl+z
ctrl+i
ctrl+u
ctrl+a
shift+enter
alt+z

ctrl+b

ctrl+c

ctrl+x

ctrl+v

ctrl+y

ctrl+z

ctrl+i

ctrl+u

ctrl+a

shift+enter

alt+z

" + lang.captionName + "
" + lang.titleName + "	" + lang.titleName + "
" + lang.titleName + "	" + lang.cellsName + "

	Ip
	dip->address($t['ip']); ?>
-

dip->address($t['ip']); ?>

'; - - - - - foreach ($this->site_info as $siteid => $site) { - - // 站点URL - if ($site['SITE_REWRITE']) { - - $value = $urlrule[intval($site['SITE_REWRITE'])]['value']; - if ($value) { - $code[] = array( - 'name' => '站点[' . $siteid . '] 站点URL规则', - 'preg' => '开始', - 'rule' => '' - ); - - if ($value['share_search_page']) { - list($preg, $rname) = $this->_rule_preg_value($value['share_search_page']); - $write = 'search/index/rewrite/$'.$rname['{param}']; - $code[] = array( - 'name' => '内容模型搜索', - 'preg' => $preg, - 'rule' => $write - ); - } - - if ($value['tags']) { - list($preg, $rname) = $this->_rule_preg_value($value['tags']); - $write = 'tag/index/name/$'.$rname['{tag}']; - $code[] = array( - 'name' => 'tag关键词库', - 'preg' => $preg, - 'rule' => $write - ); - } - $code[] = array( - 'name' => '站点[' . $siteid . '] 站点URL规则', - 'preg' => '结束', - 'rule' => '' - ); - } - } - - - // 栏目 - $category = $this->get_cache('category-'.$siteid); - if ($category) { - foreach ($category as $t) { - $dir = ''; - $value = $urlrule[intval($t['setting']['urlrule'])]['value']; - if ($t['tid'] != 2 && $value && !$t['setting']['html']) { - $code[] = array( - 'name' => '站点['.$siteid.'] 栏目['.$t['name'].' '.$t['dirname'].']', - 'preg' => '开始', - 'rule' => '' - ); - if ($value['list_page']) { - // 模型栏目列表(分页) - $rule = str_replace('{modname}', $dir, $value['list_page']); - list($preg, $rname) = $this->_rule_preg_value($rule); - if (isset($rname['{dirname}'])) { - // 目录格式 - $write = 'category/index/dir/$'.$rname['{dirname}'].'/page/$'.$rname['{page}']; - } elseif (isset($rname['{pdirname}'])) { - // 层次目录格式 - $write = 'category/index/dir/$'.$rname['{pdirname}'].'/page/$'.$rname['{page}']; - } else { - // id模式 - $write = 'category/index/id/$'.$rname['{id}'].'/page/$'.$rname['{page}']; - } - $code[] = array( - 'name' => '栏目列表(分页)', - 'preg' => $preg, - 'rule' => $write - ); - } - if ($value['list']) { - // 模型栏目列表 - $rule = str_replace('{modname}', $dir, $value['list']); - list($preg, $rname) = $this->_rule_preg_value($rule); - if (isset($rname['{dirname}'])) { - // 目录格式 - $write = 'category/index/dir/$'.$rname['{dirname}']; - } elseif (isset($rname['{pdirname}'])) { - // 层次目录格式 - $write = 'category/index/dir/$'.$rname['{pdirname}']; - } else { - // id模式 - $write = 'category/index/id/$'.$rname['{id}']; - } - $code[] = array( - 'name' => '栏目列表', - 'preg' => $preg, - 'rule' => $write - ); - } - if ($value['show_page']) { - // 模型内容页(分页) - $rule = str_replace('{modname}', $dir, $value['show_page']); - list($preg, $rname) = $this->_rule_preg_value($rule); - $write = 'show/index/id/$'.$rname['{id}'].'/page/$'.$rname['{page}']; - $code[] = array( - 'name' => '内容页(分页)', - 'preg' => $preg, - 'rule' => $write - ); - } - if ($value['show']) { - // 模型内容页 - $rule = str_replace('{modname}', $dir, $value['show']); - list($preg, $rname) = $this->_rule_preg_value($rule); - $write = 'show/index/id/$'.$rname['{id}']; - $code[] = array( - 'name' => '内容页', - 'preg' => $preg, - 'rule' => $write - ); - } - - $code[] = array( - 'name' => '站点['.$siteid.'] 栏目['.$t['name'].' '.$t['dirname'].']', - 'preg' => '结束', - 'rule' => '' - ); - } - } - } - - $code[] = array( - 'name' => '站点['.$siteid.'] 栏目', - 'preg' => '全部结束', - 'rule' => '' - ); - - } - - if (!$code) { - exit('没有设置伪静态'); - } - - $html = ''; - foreach ($code as $t) { - if ($t['rule']) { - $html.= ' // '.$t['name'].PHP_EOL; - $html.= ' "'.$t['preg'].'"'.$this->_space($t['preg']).'=> "'.$t['rule'].'",'.PHP_EOL; - } else { - $html.= PHP_EOL.' /*-------------------'.$t['name'].' '.$t['preg'].'-----------------*/ '.PHP_EOL.PHP_EOL; - } - } - - echo ''; - exit; - - } - - // 正则解析 - private function _rule_preg_value($rule) { - - $rule = trim(trim($rule, '/')); - - if (preg_match_all('/\{(.*)\}/U', $rule, $match)) { - - $value = array(); - foreach ($match[0] as $k => $v) { - $value[$v] = ($k + 1); - } - - $preg = preg_replace( - array( - '#\{id\}#U', - '#\{uid\}#U', - '#\{mid\}#U', - '#\{fid\}#U', - '#\{page\}#U', - - '#\{pdirname\}#Ui', - '#\{dirname\}#Ui', - '#\{modname\}#Ui', - '#\{name\}#Ui', - - '#\{tag\}#U', - '#\{param\}#U', - - '#\{y\}#U', - '#\{m\}#U', - '#\{d\}#U', - - '#\{.+}#U', - '#/#' - ), - array( - '(\d+)', - '(\d+)', - '(\d+)', - '(\w+)', - '(\d+)', - - '([\w\/]+)', - '([a-z0-9]+)', - '([a-z]+)', - '([a-z]+)', - - '(.+)', - '(.+)', - - '(\d+)', - '(\d+)', - '(\d+)', - - '(.+)', - '\/' - ), - $rule - ); - - // 替换特殊的结果 - $preg = str_replace( - array('(.+))}-'), - array('(.+)-'), - $preg - ); - - return array($preg, $value); - } - - return array($rule, array()); - } - - // 将规则生成至文件 - private function _to_file($path, $data, $note) { - - $file = WEBPATH.'config/rewrite.php'; - - $string = ' $val) { - if (strpos($key, '(.+)') === 0) { - $end[$key] = $val; - } else { - $string.= '$route[\''.$key.'\']'.$this->_space($key).'= \''.$val.'\'; // '.$this->_get_name($val).' 对应规则：'.$note[$key].PHP_EOL; - } - } - if ($end) { - $string.= PHP_EOL.PHP_EOL.PHP_EOL; - foreach ($end as $key => $val) { - $string.= '$route[\''.$key.'\']'.$this->_space($key).'= \''.$val.'\'; // '.$this->_get_name($val).' 对应规则：'.$note[$key].PHP_EOL; - } - } - } - - file_put_contents($file, $string); - } - - // 获取页面名称 - private function _get_name($rule) { - if (strpos($rule, 'show/index') !== FALSE) { - return '【内容页】'; - } elseif (strpos($rule, 'category/index') !== FALSE) { - return '【栏目页】'; - } elseif (strpos($rule, 'search/index') !== FALSE) { - return '【搜索页】'; - } elseif (strpos($rule, 'tag/index') !== FALSE) { - return '【标签页】'; - } - } - - /** - * 补空格 - * - * @param string $name 变量名称 - * @return string - */ - private function _space($name) { - $len = strlen($name) + 2; - $cha = 60 - $len; - $str = ''; - for ($i = 0; $i < $cha; $i ++) $str .= ' '; - return $str; - } -} \ No newline at end of file diff --git a/finecms/finecms/dayrui/controllers/admin/Saler.php b/finecms/finecms/dayrui/controllers/admin/Saler.php deleted file mode 100644 index 23e6b69..0000000 --- a/finecms/finecms/dayrui/controllers/admin/Saler.php +++ /dev/null @@ -1,968 +0,0 @@ -template->assign('menu', $this->get_menu_v3(array( - fc_lang('添加') => array('admin/saler/add_js', 'plus') - ))); - } - - /** - * 首页 - */ - public function index() { - - // 重置页数和统计 - IS_POST && $_GET['page'] = $_GET['total'] = 0; - - // 根据参数筛选结果 - $param = $this->input->get(NULL, TRUE); - unset($param['s'], $param['c'], $param['m'], $param['d'], $param['page']); - - // 数据库中分页查询 - list($data, $param) = $this->saler_model->limit_page($param, max((int)$_GET['page'], 1), (int)$_GET['total']); - - $field = $this->get_cache('member', 'field'); - $field = array( - 'username' => array('fieldname' => 'username','name' => fc_lang('会员名称')), - 'name' => array('fieldname' => 'name','name' => fc_lang('姓名')), - 'email' => array('fieldname' => 'email','name' => fc_lang('会员邮箱')), - 'phone' => array('fieldname' => 'phone','name' => fc_lang('手机号码')), - ) + ($field ? $field : array()); - - // 存储当前页URL - $this->_set_back_url('member/index', $param); - foreach ($data as $k => $v) { - $sum['allknot'] += $v['allknot']; - $sum['allbucket'] += $v['allbucket']; - $sum['allbottleNum'] += $v['allbottleNum']; - $sum['alldrinkNum'] += $v['alldrinkNum']; - } - $this->template->assign('sum',$sum); - $this->template->assign(array( - 'list' => $data, - 'field' => $field, - 'param' => $param, - 'pages' => $this->get_pagination(dr_url('saler/index', $param), $param['total']), - )); - $this->template->display('saler_index.html'); - } - - //销售导出 - public function saler_exp() - { - // 重置页数和统计 - IS_POST && $_GET['page'] = $_GET['total'] = 0; - - // 根据参数筛选结果 - $param = $this->input->get(NULL, TRUE); - unset($param['s'], $param['c'], $param['m'], $param['d'], $param['page']); - - list($data,$param) = $this->saler_model->limit_page($param,1,100); - $exp = array(); - foreach ($data as $k => $v) { - $exp[$k]['name'] = $v['name']; - $exp[$k]['carNo'] = $v['carNo']; - $exp[$k]['phone'] = $v['phone']; - $exp[$k]['typename'] = $v['typename']; - $exp[$k]['allknot'] = $v['allknot']; - $exp[$k]['allbucket'] = $v['allbucket']; - $exp[$k]['allbottleNum'] = $v['allbottleNum']; - $exp[$k]['alldrinkNum'] = $v['alldrinkNum']; - } - - $date = date('Y-m-d'); - $filename = $date.'销售信息.xls'; - header('content-type:application/vnd.ms-excel;charset=UTF-8'); - header('content-disposition:attachment;filename='.$filename); - header('Content-Transfer-Encoding: binary'); - header('Pragma:no-cache'); - header('Expires:0'); - header("Pragma: public"); - header("Cache-Control:must-revalidate, post-check=0, pre-check=0"); - header("Content-Type:application/force-download"); - header("Content-Type:application/octet-stream"); - header("Content-Type:application/download"); - - $title = array( - '姓名', - '车牌号', - '电话', - '公司', - '结款', - '桶装水', - '饮料', - '瓶装水', - ); - echo iconv('utf-8', 'gbk', implode("\t", $title)) . "\n"; - foreach ($exp as $key => $value) { - echo iconv('utf-8', 'gbk', implode("\t", $value)) . "\n"; - } - return false; - } - - /** - * 添加 - */ - public function add() { - - if (IS_POST) { - - $data = $this->input->post( 'data' ); - $info = $this->input->post( 'info' ); - - // 单个添加 - $uid = $this->saler_model->addSaler( [ - 'name' => $data['name'], - 'carNo' => $data['carNo'], - 'phone' => $data['phone'], - 'type' => $data['type'], - 'remark' => $info?:'', - ] ); - - exit( dr_json( 1, fc_lang( '操作成功，正在刷新...' ) ) ); - - } - - - $this->template->display('saler_add.html'); - } - - - - - /** - * 修改 - */ - public function edit() { - - $salerId = (int)$this->input->get('salerId'); - $page = (int)$this->input->get('page'); - $data = $this->saler_model->get_saler($salerId); - !$data && $this->admin_msg(fc_lang('对不起，数据被删除或者查询不存在')); - - $field = array(); - - if (IS_POST) { - $edit = $this->input->post('member'); - $page = (int)$this->input->post('page'); - $post = $this->validate_filter($field, $data); - if (isset($post['error'])) { - $error = $post['msg']; - } else { - $update = array( - 'name' => $edit['name'], - 'phone' => $edit['phone'], - 'carNo' => $edit['carNo'], - 'type' => $edit['type'], - ); - - - $this->db->where('id', $salerId)->update('saler', $update); - - $this->admin_msg(fc_lang('操作成功，正在刷新...'), dr_url('saler/index', array( 'page' => $page)), 1); - } - $this->admin_msg($error, dr_url('saler/index', array( 'page' => $page))); - } - - $this->template->assign(array( - 'data' => $data, - 'page' => $page, - 'myfield' => $this->field_input($field, $data, TRUE), - )); - $this->template->display('saler_edit.html'); - } - - - public function fuel() { - $search = []; - $salerId = $_GET['salerId']; - $time = isset($_POST['data']['time']) && $_POST['data']['time'] ? (int)$_POST['data']['time'] : (int)$this->input->get('time'); - if($time) { - $search['start'] = date('Y-m-d',$_POST['data']['time']); - $search['end'] = date('Y-m-d',$_POST['data']['time1'] ); - $time1 = strtotime($search['end']); - } - $time = $time ? $time : SYS_TIME; - if(!$time1) { - $time1 = $time; - } - // 重置页数和统计 - IS_POST && $_GET['page'] = $_GET['total'] = 0; - - // 根据参数筛选结果 - $param = $this->input->get(NULL, TRUE); - unset($param['s'], $param['c'], $param['m'], $param['d'], $param['page']); - - // 数据库中分页查询 - list($data, $param) = $this->saler_model->get_saler_fuel($salerId, max((int)$_GET['page'], 1), (int)$_GET['total'], $search); - - $field = $this->get_cache('member', 'field'); - $field = array( - 'username' => array('fieldname' => 'username','name' => fc_lang('会员名称')), - 'name' => array('fieldname' => 'name','name' => fc_lang('姓名')), - 'email' => array('fieldname' => 'email','name' => fc_lang('会员邮箱')), - 'phone' => array('fieldname' => 'phone','name' => fc_lang('手机号码')), - ) + ($field ? $field : array()); - // 存储当前页URL - $url = 'admin/saler/fueladd/salerId/'.$salerId; - $this->template->assign('menubill', $this->get_menu_v3(array( - fc_lang('返回') => array('admin/saler/index', 'reply'), - fc_lang('添加') => array($url, 'plus') - - ))); - $salerInfo = $this->saler_model->get_saler($salerId); - $this->template->assign('salerId',$salerId); - $this->template->assign('salerInfo',$salerInfo); - $this->template->assign(array( - 'time' => $time, - 'time1' => $time1, - 'list' => $data, - 'field' => $field, - 'param' => $param, - 'pages' => $this->get_pagination(dr_qxurl('saler/fuel/salerId/'.$salerId, $param), $param['total']), - )); - $this->template->display('salerfuel_index.html'); - } - - public function fueladd() { - $salerId = $_GET['salerId']; - if (IS_POST) { - - $data = $this->input->post( 'data' ); - $info = $this->input->post( 'info' ); - $id = $data['salerId']; - // 单个添加 - $uid = $this->saler_model->addSalerFuel( [ - 'salerId' => $data['salerId'], - 'rise' => $data['rise'], - 'money' => $data['money'], - 'date' => date('Y-m-d',$data['time']) - ] ); - - $this->admin_msg( - fc_lang('操作成功，正在刷新...'), - $this->_get_back_url('saler/fuel', array('salerId' =>$id)), - 1, - 1 - ); - } - - $this->template->assign('menubill', $this->get_menu_v3(array( - fc_lang('返回') => array($url, 'reply'), - ))); - $data = $this->saler_model->get_saler($salerId); - $this->template->assign('salerId', $salerId); - $this->template->assign('data', $data); - $this->template->assign('time', time()); - $this->template->display('salerfuel_add.html'); - } - - public function fueledit() { - $salerId = (int)$this->input->get('salerId'); - $salerInfo = $this->saler_model->get_saler($salerId); - $fuelId = (int)$this->input->get('fuelId'); - $data = $this->saler_model->get_fuel_detail($fuelId); - !$data && $this->admin_msg(fc_lang('对不起，数据被删除或者查询不存在')); - - $field = array(); - - if (IS_POST) { - $edit = $this->input->post('data'); - if (isset($post['error'])) { - $error = $post['msg']; - } else { - $update = array( - 'rise' => $edit['rise'], - 'money' => $edit['money'], - 'date' => date('Y-m-d',$edit['time']), - 'remark' => $edit['remark'], - ); - - $this->db->where('id', $fuelId)->update('saler_fuel', $update); - - $this->admin_msg(fc_lang('操作成功，正在刷新...'), dr_url('saler/fuel', array('salerId' => $salerId, 'page' => $page)), 1); - } - } - - $this->template->assign(array( - 'data' => $data, - 'time' => strtotime($data['date']), - 'salerInfo' => $salerInfo, - 'page' => $page, - 'myfield' => $this->field_input($field, $data, TRUE), - )); - $this->template->display('salerfuel_add.html'); - } - /** - * 首页 - */ - public function bill() { - - // 重置页数和统计 - IS_POST && $_GET['page'] = $_GET['total'] = 0; - $time = isset($_POST['data']['time']) && $_POST['data']['time'] ? (int)$_POST['data']['time'] : (int)$this->input->get('time'); - if($time) { - $search['start'] = date('Y-m-d',$_POST['data']['time']); - $search['end'] = date('Y-m-d',$_POST['data']['time1'] ); - $time1 = strtotime($search['end']); - } - $page = $_GET['page']?:1; - $time = $time ? $time : SYS_TIME; - if(!$time1) { - $time1 = $time; - } - // 根据参数筛选结果 - $param = $this->input->get(NULL, TRUE); - unset($param['s'], $param['c'], $param['m'], $param['d'], $param['page']); - - $salerId = $_GET['salerId']; - // 数据库中分页查询 - list($data, $param) = $this->saler_model->bill_limit_page($salerId, max((int)$_GET['page'], 1), (int)$_GET['total'], $search); - - - - - - $field = $this->get_cache('member', 'field'); - $field = array( - 'username' => array('fieldname' => 'username','name' => fc_lang('会员名称')), - 'name' => array('fieldname' => 'name','name' => fc_lang('姓名')), - 'email' => array('fieldname' => 'email','name' => fc_lang('会员邮箱')), - 'phone' => array('fieldname' => 'phone','name' => fc_lang('手机号码')), - '' - ) + ($field ? $field : array()); - $url = "admin/saler/billadd/salerId/{$salerId}"; - $this->template->assign('salerId',$salerId); - // 存储当前页URL - $this->_set_back_url('saler/bill/billId/'.$salerId, $param); - $this->template->assign('menubill', $this->get_menu_v3(array( - fc_lang('返回') => array('admin/saler/index', 'reply'), - fc_lang('添加') => array($url, 'plus') - - ))); - foreach ($data as $k => $v) { - $sum['bucketNum'] += $v['bucketNum']; - $sum['backNumTotal'] += $v['backNumTotal']; - $sum['bottleNum'] += $v['bottleNum']; - $sum['drinkNum'] += $v['drinkNum']; - $sum['bucketleft'] += $v['bucketNum'] - $v['bucketTotal']; - $sum['bottleleft'] += $v['bottleNum'] - $v['bottleTotal']; - $sum['drinkleft'] += $v['drinkNum'] - $v['drinkTotal']; - $sum['knotTotal'] += $v['knotTotal']; - } - $this->template->assign(array( - 'time' => $time, - 'time1' => $time1, - 'list' => $data, - 'field' => $field, - 'sum' => $sum, - 'param' => $param, - 'page' => $page, - 'pages' => $this->get_pagination(dr_qxurl('saler/bill/salerId/'.$salerId, $param), $param['total']), - )); - $this->template->display('salerbill_index.html'); - } - - /** - * 添加 - */ - public function billadd() { - $id = $_GET['salerId']; - if (IS_POST) { - - $data = $this->input->post( 'data' ); - $info = $this->input->post( 'info' ); - // 单个添加 - $uid = $this->saler_model->addSalerBill( [ - 'salerId' => $data['salerId'], - 'salerName' => $data['salerName'], - 'bucketNum' => $data['bucketNum'], - 'bottleNum' => $data['bottleNum'], - 'drinkNum' => $data['drinkNum'], - 'checker' => $data['checker'], - 'saleTime' => $data['saleTime']?:date('Y-m-d'), - 'remark' => $info?:'', - ] ); - - $this->admin_msg( - fc_lang('操作成功，正在刷新...'), - $this->_get_back_url('saler/bill', array('salerId' =>$id)), - 1, - 1 - ); - } - $url = 'admin/saler/bill/salerId/'.$id; - $this->template->assign('menubill', $this->get_menu_v3(array( - fc_lang('返回') => array($url, 'reply') - ))); - $data = $this->saler_model->get_saler(); - $this->template->assign('salerId', $id); - $this->template->assign('time', time()); - $this->template->display('salerbill_add.html'); - } - - /** - * 修改 - */ - public function billedit() { - - $billId = (int)$this->input->get('billId'); - $salerId = (int)$this->input->get('salerId'); - $page = (int)$this->input->get('page'); - $billInfo = $this->saler_model->get_sumdetail($billId); - $data = $this->saler_model->get_saler_bill($billId); - - !$data && $this->admin_msg(fc_lang('对不起，数据被删除或者查询不存在')); - - $field = array(); - - if (IS_POST) { - $edit = $this->input->post('data'); - $update = array( - 'salerName' => $edit['salerName'], - 'bucketNum' => $edit['bucketNum'], - 'bottleNum' => $edit['bottleNum'], - 'drinkNum' => $edit['drinkNum'], - 'checker' => $edit['checker'], - 'saleTime' => date('Y-m-d',$edit['time']), - 'remark' => $edit['remark'], - ); - $this->db->where('id', $billId)->update('saler_bill', $update); - $this->admin_msg( - fc_lang('操作成功，正在刷新...'), - $this->_get_back_url('saler/bill', array('salerId' =>$salerId)), - 1, - 1 - ); - - } - $url = 'admin/saler/billdetailadd/billId/'.$billId; - // 存储当前页URL - $this->template->assign('menubill', $this->get_menu_v3(array( - fc_lang('返回') => array('admin/saler/bill/salerId/'.$salerId.'/page/'.$page, 'reply'), - - ))); - $this->template->assign(array( - 'time' => strtotime($data['saleTime']) , - 'data' => $data, - 'backNumTotal' => $billInfo['backNumTotal'], - 'myfield' => $this->field_input($field, $data, TRUE), - )); - $this->template->display('salerbill_add.html'); - } - - /** - * 首页 - */ - public function billdetail() { - - - $billId = $_GET['billId']; - $salerId = $_GET['salerId']; - $page = $_GET['page']; - - // 重置页数和统计 - IS_POST && $_GET['page'] = $_GET['total'] = 0; - - // 根据参数筛选结果 - $param = $this->input->get(NULL, TRUE); - unset($param['s'], $param['c'], $param['m'], $param['d'], $param['page']); - - // 数据库中分页查询 - $data = $this->saler_model->get_bill_detail($billId); - - $url = 'admin/saler/billdetailadd/billId/'.$billId; - // 存储当前页URL - $this->template->assign('menubill', $this->get_menu_v3(array( - fc_lang('返回') => array('admin/saler/bill/salerId/'.$salerId.'/page/'.$page, 'reply'), - fc_lang('添加') => array($url.'_js', 'plus') - - ))); - foreach ($data as $k => $v) { - $sum['bucketNum'] += $v['bucketNum']; - $sum['bottleNum'] += $v['bottleNum']; - $sum['drinkNum'] += $v['drinkNum']; - $sum['backBucketNum'] += $v['backBucketNum']; - $sum['knot'] += $v['knot']; - $sum['debt'] += $v['debt']; - $sum['debtBucket'] += $v['debtBucket']; - $sum['depositBucket'] += $v['depositBucket']; - } - - $this->template->assign(array( - 'salerId' => $salerId, - 'billId' => $billId, - 'list' => $data, - 'sum' => $sum, - 'param' => $param, - 'pages' => $this->get_pagination(dr_url('member/index', $param), $param['total']), - )); - $this->template->display('billdetail_index.html'); - } - - //明细导出 - public function billdetail_exp() { - $billId = $_GET['billId']; - $salerId = $_GET['salerId']; - - // 重置页数和统计 - IS_POST && $_GET['page'] = $_GET['total'] = 0; - - // 根据参数筛选结果 - $param = $this->input->get(NULL, TRUE); - unset($param['s'], $param['c'], $param['m'], $param['d'], $param['page']); - - // 数据库中分页查询 - $data = $this->saler_model->get_bill_detail($billId); - $exp = array(); - foreach ($data as $k => $v) { - $exp[$k]['cname'] = $v['cname']; - $exp[$k]['bucketNum'] = $v['bucketNum']; - $exp[$k]['bottleNum'] = $v['bottleNum']; - $exp[$k]['drinkNum'] = $v['drinkNum']; - $exp[$k]['price'] = $v['price']; - $exp[$k]['backBucketNum'] = $v['backBucketNum']; - $exp[$k]['knot'] = $v['knot']; - $exp[$k]['debt'] = $v['debt']; - $exp[$k]['debtBucket'] = $v['debtBucket']; - $exp[$k]['depositBucket'] = $v['depositBucket']; - $exp[$k]['saleTime'] = $v['saleTime']; - $exp[$k]['remark'] = $v['remark']; - } - $date = date('Y-m-d'); - $filename = $date.'订单明细.xls'; - header('content-type:application/vnd.ms-excel;charset=UTF-8'); - header('content-disposition:attachment;filename='.$filename); - header('Content-Transfer-Encoding: binary'); - header('Pragma:no-cache'); - header('Expires:0'); - header("Pragma: public"); - header("Cache-Control:must-revalidate, post-check=0, pre-check=0"); - header("Content-Type:application/force-download"); - header("Content-Type:application/octet-stream"); - header("Content-Type:application/download"); - - $title = array( - '客户姓名', - '桶装水', - '瓶装水', - '饮料', - '价格', - '回桶', - '结款', - '欠款', - '欠桶', - '押桶', - '时间', - '备注' - ); - echo iconv('utf-8', 'gbk', implode("\t", $title)) . "\n"; - foreach ($exp as $key => $value) { - echo iconv('utf-8', 'gbk', implode("\t", $value)) . "\n"; - } - return false; - } - - - - - public function billdetailadd() { - $id = $_GET['billId']; - - - if (IS_POST) { - - $data = $this->input->post( 'data' ); - $info = $this->input->post( 'info' ); - $customerId = $this->customer_model->get_customer_name($data['cname']); - // 单个添加 - $uid = $this->saler_model->addBillDetail( [ - 'billId' => $data['billId'], - 'customerId' => $customerId, - 'priceId' => $data['priceId'], - 'bucketNum' => $data['bucketNum'], - 'bottleNum' => $data['bottleNum'], - 'drinkNum' => $data['drinkNum'], - 'backBucketNum' => $data['backBucketNum'], - 'knot' => $data['knot'], - 'debt' => $data['debt'], - 'depositBucket' => $data['depositBucket'], - 'debtBucket' => $data['debtBucket'], - 'remark' => $info?:'', - ] ); - - exit( dr_json( 1, fc_lang( '操作成功，正在刷新...' ) ) ); -// $this->admin_msg( -// fc_lang('操作成功，正在刷新...'), -// $this->_get_back_url('saler/bill', array('id' =>$id)), -// 1, -// 1 -// ); - } - $url = 'admin/saler/billdetail/billId/'.$id; - $this->template->assign('menubill', $this->get_menu_v3(array( - fc_lang('返回') => array($url, 'reply') - ))); - $customer = $this->customer_model->get_all_customer(); - $this->template->assign('customer',$customer); - $data = $this->saler_model->get_saler(); - $this->template->assign('billId', $id); - $this->template->assign('time', time()); - $this->template->display('billdetail_add.html'); - } - - public function detaildel() { - $detailId = $_GET['detailId']; - $billId = $_GET['billId']; - $salerId = $_GET['salerId']; - $id = $this->saler_model->delBillDetail($detailId); - $this->admin_msg( - fc_lang('操作成功，正在刷新...'), - $this->_get_back_url('saler/billdetail', array('billId' =>$billId,'salerId'=>$salerId)), - 1, - 1 - ); - - - } - - - public function billdetailedit() { - $detailId = $_GET['detailId']; - $data = $this->saler_model->get_bill_detail_info($detailId); - $customerId = $data['customerId']; - $priceInfo = $this->customer_model->get_customer_price($customerId); - if (IS_POST) { - - $data = $this->input->post( 'data' ); - $info = $this->input->post( 'info' ); - $customerId = $this->customer_model->get_customer_name($data['cname']); - // 单个添加 - $uid = $this->saler_model->editBillDetail($detailId,$customerId, [ - 'customerId' => $customerId, - 'priceId' => $data['priceId'], - 'bucketNum' => $data['bucketNum'], - 'bottleNum' => $data['bottleNum'], - 'backBucketNum' => $data['backBucketNum'], - 'knot' => $data['knot'], - 'debt' => $data['debt'], - 'depositBucket' => $data['depositBucket'], - 'debtBucket' => $data['debtBucket'], - 'remark' => $info?:'', - ] ); - - exit( dr_json( 1, fc_lang( '操作成功，正在刷新...' ) ) ); -// $this->admin_msg( -// fc_lang('操作成功，正在刷新...'), -// $this->_get_back_url('saler/bill', array('id' =>$id)), -// 1, -// 1 -// ); - } - $url = 'admin/saler/billdetail/billId/'.$id; - $this->template->assign('menubill', $this->get_menu_v3(array( - fc_lang('返回') => array($url, 'reply') - ))); - $customer = $this->customer_model->get_all_customer(); - $this->template->assign('customer',$customer); - $this->template->assign('data',$data); - $this->template->assign('priceInfo',$priceInfo); - $data = $this->saler_model->get_saler(); - $this->template->assign('billId', $id); - $this->template->assign('time', time()); - $this->template->display('billdetail_add.html'); - } - - //欠款列表 - public function debtlist() { - $salerId = $_GET['salerId']; - list($data, $param) = $this->saler_model->getdebtlist($salerId); - $this->template->assign('menubill', $this->get_menu_v3(array( - fc_lang('返回') => array('admin/saler/index', 'reply') - ))); - $this->template->assign(array( - 'list' => $data, - 'salerId' => $salerId, - 'field' => $field, - 'param' => $param, - )); - $this->template->display('saler_debtlist.html'); - - } - - //欠款导出 - public function debtlist_exp() { - $salerId = $_GET['salerId']; - list($data, $param) = $this->saler_model->getdebtlist($salerId); - $exp = array(); - foreach ($data as $k => $v) { - $exp[$k]['cname'] = $v['cname']; - $exp[$k]['phone'] = $v['phone']; - $exp[$k]['debtMoney'] = $v['debtMoney']; - } - $date = date('Y-m-d'); - $filename = $date.'欠款统计.xls'; - header('content-type:application/vnd.ms-excel;charset=UTF-8'); - header('content-disposition:attachment;filename='.$filename); - header('Content-Transfer-Encoding: binary'); - header('Pragma:no-cache'); - header('Expires:0'); - header("Pragma: public"); - header("Cache-Control:must-revalidate, post-check=0, pre-check=0"); - header("Content-Type:application/force-download"); - header("Content-Type:application/octet-stream"); - header("Content-Type:application/download"); - - $title = array( - '姓名', - '电话', - '欠款', - ); - echo iconv('utf-8', 'gbk', implode("\t", $title)) . "\n"; - foreach ($exp as $key => $value) { - echo iconv('utf-8', 'gbk', implode("\t", $value)) . "\n"; - } - return false; - } - - //陈列 - public function displayadd(){ - $salerId = $_GET['salerId']; - if (IS_POST) { - $data = $this->input->post( 'data' ); - $info = $this->input->post( 'info' ); - $customerId = $this->customer_model->get_customer_name($data['cname']); - // 单个添加 - $uid = $this->saler_model->adddisplayDetail( [ - 'salerId' => $salerId, - 'customerId' => $customerId, - 'bucketNum' => $data['bucketNum'], - 'bottleNum' => $data['bottleNum'], - 'drinkNum' => $data['drinkNum'], - 'created' => date('Y-m-d H:i:s',$data['time']), - 'remark' => $info?:'', - ] ); - - exit( dr_json( 1, fc_lang( '操作成功，正在刷新...' ) ) ); -// $this->admin_msg( -// fc_lang('操作成功，正在刷新...'), -// $this->_get_back_url('saler/bill', array('id' =>$id)), -// 1, -// 1 -// ); - } - $url = 'admin/saler/displaywater/salerId/'.$salerId; - $this->template->assign('menubill', $this->get_menu_v3(array( - fc_lang('返回') => array($url, 'reply') - ))); - $customer = $this->customer_model->get_all_customer(); - $this->template->assign('customer',$customer); - $saler = $this->saler_model->get_saler($salerId); - $this->template->assign('saler',$saler); - $this->template->assign('time', time()); - $this->template->display('display_add.html'); - } - - //陈列 - public function displayedit(){ - $id = $_GET['id']; - $data = $this->saler_model->get_display_info($id); - if (IS_POST) { - $data = $this->input->post( 'data' ); - $info = $this->input->post( 'info' ); - $customerId = $this->customer_model->get_customer_name($data['cname']); - // 单个添加 - $uid = $this->saler_model->editdisplayDetail($id, [ - 'customerId' => $customerId, - 'bucketNum' => $data['bucketNum'], - 'bottleNum' => $data['bottleNum'], - 'drinkNum' => $data['drinkNum'], - 'created' => date('Y-m-d H:i:s',$data['time']), - 'remark' => $info?:'', - ] ); - - exit( dr_json( 1, fc_lang( '操作成功，正在刷新...' ) ) ); -// $this->admin_msg( -// fc_lang('操作成功，正在刷新...'), -// $this->_get_back_url('saler/bill', array('id' =>$id)), -// 1, -// 1 -// ); - } - $url = 'admin/saler/displaywater/salerId/'.$salerId; - $this->template->assign('menubill', $this->get_menu_v3(array( - fc_lang('返回') => array($url, 'reply') - ))); - $customer = $this->customer_model->get_all_customer(); - $this->template->assign('customer',$customer); - $saler = $this->saler_model->get_saler($salerId); - $this->template->assign('saler',$saler); - $this->template->assign('data',$data); - $this->template->assign('time', time()); - $this->template->display('display_add.html'); - } - - public function displaydel() { - $id = $_GET['id']; - $salerId = $_GET['salerId']; - $this->saler_model->deldisplay($id); - $this->admin_msg( - fc_lang('操作成功，正在刷新...'), - $this->_get_back_url('saler/displaywater', array('salerId'=>$salerId)), - 1, - 1 - ); - } - - - public function displaywater() { - $salerId = $_GET['salerId']; - $data = $this->saler_model->getdisplaylist($salerId); - $saler = $this->saler_model->get_saler($salerId); - - $url = 'admin/saler/displayadd/salerId/'.$salerId; - $this->template->assign('menubill', $this->get_menu_v3(array( - fc_lang('返回') => array('admin/saler/index', 'reply'), - fc_lang('添加') => array($url.'_js', 'plus') - ))); - $this->template->assign(array( - 'list' => $data, - 'salerId' => $salerId, - 'saler' => $saler, - 'param' => $param, - )); - $this->template->display('display_index.html'); - } - - //陈列导出 - public function display_exp() { - $salerId = $_GET['salerId']; - $data = $this->saler_model->getdisplaylist($salerId); - $saler = $this->saler_model->get_saler($salerId); - $exp = array(); - foreach ($data as $k => $v) { - $exp[$k]['name'] = $saler['name']; - $exp[$k]['cname'] = $v['cname']; - $exp[$k]['bucketNum'] = $v['bucketNum']; - $exp[$k]['bottleNum'] = $v['bottleNum']; - $exp[$k]['drinkNum'] = $v['drinkNum']; - $exp[$k]['created'] = $v['created']; - $exp[$k]['remark'] = $v['remark']; - } - $date = date('Y-m-d'); - $filename = $date.'陈列统计.xls'; - header('content-type:application/vnd.ms-excel;charset=UTF-8'); - header('content-disposition:attachment;filename='.$filename); - header('Content-Transfer-Encoding: binary'); - header('Pragma:no-cache'); - header('Expires:0'); - header("Pragma: public"); - header("Cache-Control:must-revalidate, post-check=0, pre-check=0"); - header("Content-Type:application/force-download"); - header("Content-Type:application/octet-stream"); - header("Content-Type:application/download"); - - $title = array( - '销售人员', - '客户名', - '桶装水', - '瓶装水', - '饮料', - '时间', - '备注', - ); - echo iconv('utf-8', 'gbk', implode("\t", $title)) . "\n"; - foreach ($exp as $key => $value) { - echo iconv('utf-8', 'gbk', implode("\t", $value)) . "\n"; - } - return false; - } - - public function exportFuel() { - $salerId = $_GET['salerId']; - $date = date('Y-m-d'); - $filename = $date.'加油信息.xls'; - header('content-type:application/vnd.ms-excel;charset=UTF-8'); - header('content-disposition:attachment;filename='.$filename); - header('Content-Transfer-Encoding: binary'); - header('Pragma:no-cache'); - header('Expires:0'); - header("Pragma: public"); - header("Cache-Control:must-revalidate, post-check=0, pre-check=0"); - header("Content-Type:application/force-download"); - header("Content-Type:application/octet-stream"); - header("Content-Type:application/download"); - - $title = array( - '销售人员', - '车牌号', - '加油量', - '金额', - '时间', - '备注', - - ); - echo iconv('utf-8', 'gbk', implode("\t", $title)) . "\n"; - - $list = $this->saler_model->get_fuel_exp($salerId); - foreach ($list as $key => $value) { - echo iconv('utf-8', 'gbk', implode("\t", $value)) . "\n"; - } - return false; - } - - public function exportBill() { - $salerId = $_GET['salerId']; - $date = date('Y-m-d'); - $filename = $date.'销售账单.xls'; - header('content-type:application/vnd.ms-excel;charset=UTF-8'); - header('content-disposition:attachment;filename='.$filename); - header('Content-Transfer-Encoding: binary'); - header('Pragma:no-cache'); - header('Expires:0'); - header("Pragma: public"); - header("Cache-Control:must-revalidate, post-check=0, pre-check=0"); - header("Content-Type:application/force-download"); - header("Content-Type:application/octet-stream"); - header("Content-Type:application/download"); - - $title = array( - '销售人员', - '桶装水', - '回桶', - '瓶装水', - '饮料', - '检核人', - '剩余桶装水', - '剩余瓶装水', - '剩余饮料', - '回款', - '时间', - '备注' - ); - echo iconv('utf-8', 'gbk', implode("\t", $title)) . "\n"; - $list = $this->saler_model->get_saler_bill_exp($salerId); - foreach ($list as $key => $value) { - echo iconv('utf-8', 'gbk', implode("\t", $value)) . "\n"; - } - return false; - } - - -} \ No newline at end of file diff --git a/finecms/finecms/dayrui/controllers/admin/Site.php b/finecms/finecms/dayrui/controllers/admin/Site.php deleted file mode 100644 index 15a1f35..0000000 --- a/finecms/finecms/dayrui/controllers/admin/Site.php +++ /dev/null @@ -1,279 +0,0 @@ -template->assign(array( - 'menu' => $this->get_menu_v3(array( - fc_lang('网站管理') => array('admin/site/index', 'globe'), - fc_lang('添加') => array('admin/site/add_js', 'plus'), - )) - )); - - $this->load->model('site_model'); - $this->load->library('dconfig'); - } - - /** - * 切换 - */ - public function select() { - - $id = (int)$this->input->post('id'); - if (!isset($this->site_info[$id])) { - exit(dr_json(0, fc_lang('域名配置文件中站点(#%s)不存在', $id))); - } - - $this->session->set_userdata('siteid', $id); // 保存Session - exit(dr_json(1, fc_lang('成功切换到站点[%s]，正在刷新页面...', $this->site_info[$id]['SITE_NAME']), $id)); - } - - /** - * 管理 - */ - public function index() { - - if (IS_POST) { - $ids = $this->input->post('ids'); - if (!$ids) { - exit(dr_json(0, fc_lang('您还没有选择呢'))); - } - $_data = $this->input->post('data', true); - foreach ($ids as $id) { - if ($this->db->where('id<>', (int)$id)->where('domain', $_data[$id]['domain'])->count_all_results('site')) { - exit(dr_json(0, fc_lang('域名【%s】已经被使用了', $_data[$id]['domain']))); - } - $this->db->where('id', (int)$id)->update('site', $_data[$id]); - } - $this->site_model->cache(); - $this->system_log('修改网站站点【#'.@implode(',', $ids).'】'); // 记录日志 - exit(dr_json(1, fc_lang('操作成功'))); - } - - $this->template->assign('list', $this->site_model->get_site_data()); - $this->template->display('site_index.html'); - } - - /** - * 添加 - */ - public function add() { - - if (IS_POST) { - $this->load->library('dconfig'); - $data = $this->input->post('data', TRUE); - $domain = require WEBPATH.'config/domain.php'; - if (!$data['name']) { - exit(dr_json(0, fc_lang('网站名字不存在'), 'name')); - } elseif (!preg_match('/[\w-_\.]+\.[\w-_\.]+/i', $data['domain'])) { - exit(dr_json(0, fc_lang('域名不规范'), 'domain')); - } elseif (in_array($data['domain'], $domain)) { - exit(dr_json(0, fc_lang('%s已经存在', $data['domain']), 'domain')); - } elseif ($this->db->where('domain', $data['domain'])->count_all_results('site')) { - exit(dr_json(0, fc_lang('域名【%s】已经被使用了', $data['domain']), 'domain')); - } - // 初始化网站配置 - $cfg['SITE_NAME'] = $data['name']; - $cfg['SITE_DOMAIN'] = $data['domain']; - $cfg['SITE_DOMAINS'] = ''; - $cfg['SITE_TIMEZONE'] = '8'; - $cfg['SITE_LANGUAGE'] = 'zh-cn'; - $cfg['SITE_TIME_FORMAT'] = 'Y-m-d H:i'; - // 入库 - $data['setting'] = $cfg; - $id = $this->site_model->add_site($data); - if (!$id) { - exit(dr_json(0, dr_fc_lang('数据异常，入库失败'))); - } - - // 保存域名 - $domain[$data['domain']] = $id; - $size = $this->dconfig->file(WEBPATH.'config/site/'.$id.'.php')->note('站点配置文件')->space(32)->to_require_one($this->site_model->config, $cfg); - if (!$size) { - exit(dr_json(0, fc_lang('网站域名文件创建失败，请检查config目录权限'))); - } - $size = $this->dconfig->file(WEBPATH.'config/domain.php')->note('站点域名文件')->space(32)->to_require_one($domain); - if (!$size) { - exit(dr_json(0, fc_lang('站点配置文件创建失败，请检查config目录权限'))); - } - $this->site_model->cache(); - $this->system_log('添加网站站点【#'.$id.'】'.$data['name']); // 记录日志 - exit(dr_json(1, fc_lang('操作成功'))); - } else { - $this->template->display('site_add.html'); - } - } - - /** - * 站点配置 - */ - public function config() { - - $id = isset($_GET['id']) ? max((int)$_GET['id'], 1) : SITE_ID; - $data = $this->site_model->get_site_info($id); - if (!$data) { - $this->admin_msg(fc_lang('域名配置文件中站点(#%s)不存在', $id)); - } - - $result = ''; - - if (IS_POST) { - $cfg = $this->input->post('data', true); - $cfg['SITE_DOMAIN'] = $this->input->post('domain', true); - // 查询非当前站点绑定的域名 - $as = array(); - $all = $this->db->where('id<>', $id)->get('site')->result_array(); - if ($all) { - foreach ($all as $b) { - $set = dr_string2array($b['setting']); - $as[] = $b['domain']; - if ($set['SITE_MOBILE']) { - $as[] = $set['SITE_MOBILE']; - } - if ($set['SITE_DOMAINS']) { - $_arr = @explode(',', $set['SITE_DOMAINS']); - if ($_arr) { - foreach ($_arr as $_a) { - if ($_a) { - $as[] = $_a; - } - } - } - } - } - } - // 判断域名是否可用 - if (in_array($cfg['SITE_DOMAIN'], $as)) { - $result = fc_lang('域名【%s】已经被使用了', $cfg['SITE_DOMAIN']); - } else { - $cfg['SITE_DOMAINS'] = str_replace(PHP_EOL, ',', $cfg['SITE_DOMAINS']); - // 多域名验证 - if ($cfg['SITE_DOMAINS']) { - $arr = @explode(',', $cfg['SITE_DOMAINS']); - if ($arr) { - foreach ($arr as $a) { - if (in_array($a, $as) - || $a == $cfg['SITE_DOMAIN'] - || $a == $cfg['SITE_MOBILE']) { - $result = fc_lang('域名【%s】已经被使用了', $a); - break; - } - } - } - } - if (!$result) { - $cfg['SITE_IMAGE_CONTENT'] = $cfg['SITE_IMAGE_WATERMARK'] ? $cfg['SITE_IMAGE_CONTENT'] : 0; - $data = array( - 'name' => $cfg['SITE_NAME'], - 'domain' => $cfg['SITE_DOMAIN'], - 'setting' => $cfg - ); - $this->site_model->edit_site($id, $data); - $domain = require WEBPATH.'config/domain.php'; - $domain[$cfg['SITE_DOMAIN']] = $id; - if ($cfg['SITE_MOBILE']) { - $domain[$cfg['SITE_MOBILE']] = $id; - } - $this->dconfig->file(WEBPATH.'config/site/'.$id.'.php')->note('站点配置文件')->space(32)->to_require_one($this->site_model->config, $cfg); - $this->dconfig->file(WEBPATH.'config/domain.php')->note('站点域名文件')->space(32)->to_require_one($domain); - $result = 1; - } - } - $data = $cfg; - $this->site_model->cache(); - // 删除站点首页缓存 - $this->load->helper('file'); - delete_files(WEBPATH.'cache/index/'); - $this->system_log('配置网站站点【#'.$id.'】'.$data['name']); // 记录日志 - } - - $this->load->helper('directory'); - $files = directory_map(WEBPATH.'statics/watermark/', 1); - $opacity = array(); - foreach ($files as $t) { - if (substr($t, -3) == 'ttf') { - $font[] = $t; - } else { - $opacity[] = $t; - } - } - - $template_path = dr_dir_map(TPLPATH.'pc/', 1); - - - $this->template->assign(array( - 'id' => $id, - 'ip' => $this->_get_server_ip(), - 'data' => $data, - 'page' => max((int)$this->input->post('page'), 0), - 'lang' => dr_dir_map(FCPATH.'dayrui/language/', 1), - 'theme' => dr_get_theme(), - 'result' => $result, - 'is_theme' => strpos($data['SITE_THEME'], 'http://') === 0 ? 1 : 0, - 'wm_opacity' => $opacity, - 'wm_font_path' => $font, - 'template_path' => $template_path, - 'wm_vrt_alignment' => array('top', 'middle', 'bottom'), - 'wm_hor_alignment' => array('left', 'center', 'right'), - )); - $this->template->display('site_config.html'); - } - - /** - * 删除 - */ - public function del() { - $id = (int)$this->input->get('id'); - if (!$this->site_info[$id]) { - $this->admin_msg(fc_lang('站点不存在，请尝试更新一次缓存')); - } - if ($id == 1) { - $this->admin_msg(fc_lang('主站点不能删除')); - } - // 卸载模型 - $module = $this->db->get('module')->result_array(); - if ($module) { - $this->load->model('module_model'); - foreach ($module as $t) { - $this->module_model->uninstall($t['dirname'], $id); - } - } - // 删除表 - $this->db->query('DROP TABLE IF EXISTS `'.$this->db->dbprefix($id.'_form').'`'); - $this->db->query('DROP TABLE IF EXISTS `'.$this->db->dbprefix($id.'_block').'`'); - $this->db->query('DROP TABLE IF EXISTS `'.$this->db->dbprefix($id.'_tag').'`'); - $this->db->query('DROP TABLE IF EXISTS `'.$this->db->dbprefix($id.'_index').'`'); - $this->db->query('DROP TABLE IF EXISTS `'.$this->db->dbprefix($id.'_category').'`'); - // 删除站点 - $this->db->delete('site', 'id='.$id); - // 删除字段 - $this->db->where('relatedid', $id)->where('relatedname', 'category')->delete('field'); - // 删除该站配置 - unlink(WEBPATH.'config/site/'.$id.'.php'); - // 删除该站附件 - $this->load->model('attachment_model'); - $this->attachment_model->delete_for_site($id); - $this->system_log('删除网站站点【#'.$id.'】'); // 记录日志 - $this->admin_msg(fc_lang('操作成功，正在刷新...'), dr_url('site/index'), 1); - } - - /** - * 缓存 - */ - public function cache() { - $this->site_model->cache(); - (int)$_GET['admin'] or $this->admin_msg(fc_lang('操作成功，正在刷新...'), isset($_SERVER['HTTP_REFERER']) ? $_SERVER['HTTP_REFERER'] : '', 1); - } -} \ No newline at end of file diff --git a/finecms/finecms/dayrui/controllers/admin/System.php b/finecms/finecms/dayrui/controllers/admin/System.php deleted file mode 100644 index 429f87b..0000000 --- a/finecms/finecms/dayrui/controllers/admin/System.php +++ /dev/null @@ -1,173 +0,0 @@ -load->library('dconfig'); - $post = $this->input->post('data', true); - $save = array( - 'SYS_DEBUG', - 'SYS_AUTO_CACHE', - 'SYS_CAT_MODULE', - 'SYS_HTTPS', - 'SYS_LOG', - 'SITE_ADMIN_CODE', - 'SITE_ADMIN_PAGESIZE', - 'SYS_EMAIL', - 'SYS_KEY', - ); - foreach ($save as $key) { - if ($key == 'SYS_KEY') { - $value = $post[$key] == '***' ? $data[$key] : $post[$key]; - } else { - $value = isset($post[$key]) ? $post[$key] : 0; - $value === 'TRUE' && $value = 1; - } - $data[$key] = $value; - } - - $this->dconfig->file(WEBPATH.'config/system.php')->note('系统配置文件')->space(32)->to_require($data); - - $this->system_log('修改系统配置'); // 记录日志 - $this->admin_msg(fc_lang('操作成功，正在刷新...'), dr_url('system/'.$this->router->method), 1); - } - - - $this->template->assign(array( - 'page' => 0, - 'data' => $data, - 'menu' => $this->get_menu_v3(array( - fc_lang('系统配置') => array('admin/system/config', 'cog'), - )) - )); - $this->template->display('system_index.html'); - } - - /** - * 系统操作日志 - */ - public function index() { - - $time = isset($_POST['data']['time']) && $_POST['data']['time'] ? (int)$_POST['data']['time'] : (int)$this->input->get('time'); - $time = $time ? $time : SYS_TIME; - $file = WEBPATH.'cache/optionlog/'.date('Ym', $time).'/'.date('d', $time).'.log'; - - $list = array(); - $data = @explode(PHP_EOL, file_get_contents($file)); - $data = @array_reverse($data); - - $page = IS_POST ? 1 : max(1, (int)$this->input->get('page')); - $total = count($data); - $limit = ($page - 1) * SITE_ADMIN_PAGESIZE; - - $i = $j = 0; - - foreach ($data as $v) { - if ($v && $i >= $limit && $j < SITE_ADMIN_PAGESIZE) { - $list[] = $v; - $j ++; - } - $i ++; - } - - $this->load->library('dip'); - $this->template->assign(array( - 'menu' => $this->get_menu_v3(array( - fc_lang('操作日志') => array('admin/system/index', 'calendar'), - )) - )); - - $this->template->assign(array( - 'time' => $time, - 'list' => $list, - 'total' => $total, - 'pages' => $this->get_pagination(dr_url('system/index', array('time' => $time)), $total) - )); - $this->template->display('system_oplog.html'); - } - - /** - * debug - */ - public function debug() { - - $time = isset($_POST['data']['time']) && $_POST['data']['time'] ? (int)$_POST['data']['time'] : (int)$this->input->get('time'); - $time = $time ? $time : SYS_TIME; - $total = 0; - $file = WEBPATH.'cache/errorlog/log-'.date('Y-m-d', $time).'.php'; - if (is_file($file)) { - - - $log = trim(str_replace("", '', file_get_contents($file)), PHP_EOL); - - $data = @explode(PHP_EOL, str_replace(chr(10), PHP_EOL, $log)); - - $data && $data = @array_reverse($data); - - $page = IS_POST ? 1 : max(1, (int)$this->input->get('page')); - $total = count($data); - $limit = ($page - 1) * SITE_ADMIN_PAGESIZE; - - $i = $j = 0; - - foreach ($data as $t) { - if ($t && $i >= $limit && $j < SITE_ADMIN_PAGESIZE) { - $v = @explode(' --> ', $t); - $time2 = $v ? @explode(' - ', $v[0]) : array(1=>''); - $list[] = array( - 'time' => $time2[1], - 'error' => $v[1], - ); - $j ++; - } - $i ++; - } - - } - - $this->template->assign(array( - 'menu' => $this->get_menu_v3(array( - fc_lang('错误日志') => array('admin/system/debug', 'bug'), - )) - )); - $this->template->assign(array( - 'time' => $time, - 'list' => $list, - 'total' => $total, - 'pages' => $this->get_pagination(dr_url('system/debug', array('time' => $time)), $total) - )); - $this->template->display('system_debug.html'); - } - - /** - * 生成安全码 - */ - public function syskey() { - echo 'CI3'.strtoupper(substr((md5(SYS_TIME)), rand(0, 10), 13));exit; - } - - /** - * 生成来路随机字符 - */ - public function referer() { - $s = strtoupper(base64_encode(md5(SYS_TIME).md5(rand(0, 2015).md5(rand(0, 2015)))).md5(rand(0, 2009))); - echo str_replace('=', '', substr($s, 0, 64));exit; - } - - -} \ No newline at end of file diff --git a/finecms/finecms/dayrui/controllers/admin/Tag.php b/finecms/finecms/dayrui/controllers/admin/Tag.php deleted file mode 100644 index 9532665..0000000 --- a/finecms/finecms/dayrui/controllers/admin/Tag.php +++ /dev/null @@ -1,190 +0,0 @@ -load->model('tag_model'); - $this->pid = intval($_GET['pid']); - $this->mydb = $this->db; // 数据库 - $this->tfield = '`displayorder`'; // 时间字段用于搜索和排序 - $this->mytable = SITE_ID.'_tag'; - $this->mywhere = 'pid='.$this->pid; - $this->post_param = array('pid' => $this->pid); - $this->myfield = array( - 'name' => array( - 'ismain' => 1, - 'name' => fc_lang('名称'), - 'fieldname' => 'name', - 'fieldtype' => 'Text', - 'setting' => array( - 'option' => array( - 'width' => 200, - ), - 'is_right' => 2, - ) - ), - 'displayorder' => array( - 'name' => fc_lang('权重值'), - 'ismain' => 1, - 'fieldtype' => 'Text', - 'fieldname' => 'displayorder', - 'setting' => array( - 'option' => array( - 'width' => 200, - 'value' => 0 - ), - 'validate' => array( - 'tips' => fc_lang('权重值越高排列越靠前'), - ) - ) - ), - 'content' => array( - 'ismain' => 1, - 'name' => fc_lang('描述'), - 'fieldname' => 'content', - 'fieldtype' => 'Ueditor', - 'setting' => array( - 'option' => array( - 'mode' => 1, - 'height' => 300, - 'width' => '100%' - ), - ) - ), - ); - $field['name'] = $this->myfield['name']; - $field['content'] = $this->myfield['content']; - //$this->myfield = dr_array22array($this->myfield, $this->get_cache('tag-'.SITE_ID.'-field')); - $this->template->assign(array( - 'pid' => $this->pid, - 'field' => $field, - 'menu' => $this->get_menu_v3(array( - fc_lang('关键词库') => array('admin/tag/index', 'tag'), - fc_lang('添加') => array('admin/tag/add', 'plus'), - fc_lang('批量添加') => array('admin/tag/all_add', 'plus-square-o'), - fc_lang('更新缓存') => array(APP_DIR.'/admin/tag/cache', 'refresh'), - //'自定义字段' => array('admin/field/index/rname/tag/rid/'.SITE_ID, 'plus-square'), - )), - )); - } - - /** - * 管理 - */ - public function index() { - - if (IS_POST && $this->input->post('action') == 'del') { - $ids = $this->input->post('ids', TRUE); - if (!$ids) { - exit(dr_json(0, fc_lang('您还没有选择呢'))); - } - $this->db->where_in('id', $ids)->delete($this->mytable); - $this->db->where_in('pid', $ids)->delete($this->mytable); - exit(dr_json(1, fc_lang('操作成功，正在刷新...'))); - } - - $this->_index(); - $this->template->display('tag_list.html'); - } - - - public function add() { - - $this->_add(); - $this->template->display('tag_post.html'); - } - - public function edit() { - - - $this->_edit(); - $this->template->assign(array( - 'pid' => $this->pid, - )); - $this->template->display('tag_post.html'); - } - - // 后台批量添加内容 - public function all_add() { - - if (IS_POST) { - $rt = $this->tag_model->save_all_data($this->pid, $_POST['all']); - $this->admin_msg($rt, dr_url($this->router->class.'/index', $this->post_param), 1); - } - - $this->template->display('tag_all.html'); - } - - // 重写:获取数据 - public function _get_data($id) { - $data = $this->mydb->where($this->myid, intval($id))->get($this->mytable)->row_array(); - $this->pid = $data['pid']; - $this->post_param = array('pid' => $data['pid']); - return $data; - } - - // 插入数据 - public function _insert_data($data) { - - - $data['pid'] = (int)$this->pid; - $data['name'] = dr_safe_replace($_POST['data']['name']); - $data['code'] = dr_safe_replace($_POST['data']['code']); - $data['hits'] = intval($_POST['data']['hits']); - - if ($this->tag_model->check_code(0, $data['code'])) { - $this->admin_msg(fc_lang('别名已经存在')); - } elseif ($this->tag_model->check_name(0, $data['name'])) { - $this->admin_msg(fc_lang('关键词名称已经存在')); - } - - $data['childids'] = ''; - $data['pcode'] = ''; - $data['url'] = ''; - $data['total'] = 0; - - $this->mydb->insert($this->mytable, $data); - - return $this->mydb->insert_id(); - } - - // 重写:更新数据 - public function _update_data($id, $data, $_data) { - - $data['hits'] = intval($_POST['data']['hits']); - $data['name'] = dr_safe_replace($_POST['data']['name']); - $data['code'] = dr_safe_replace($_POST['data']['code']); - - if ($this->tag_model->check_code($id, $data['code'])) { - $this->admin_msg(fc_lang('别名已经存在')); - } elseif ($this->tag_model->check_name($id, $data['name'])) { - $this->admin_msg(fc_lang('关键词名称已经存在')); - } - - $this->mydb->where($this->myid, $id)->update($this->mytable, $data); - } - - - - /** - * 缓存 - */ - public function cache() { - $this->tag_model->cache(isset($_GET['site']) && $_GET['site'] ? (int)$_GET['site'] : SITE_ID); - (int)$_GET['admin'] or $this->admin_msg(fc_lang('操作成功，正在刷新...'), isset($_SERVER['HTTP_REFERER']) ? $_SERVER['HTTP_REFERER'] : '', 1); - } - -} \ No newline at end of file diff --git a/finecms/finecms/dayrui/controllers/admin/Upgrade.php b/finecms/finecms/dayrui/controllers/admin/Upgrade.php deleted file mode 100644 index 24f3bbe..0000000 --- a/finecms/finecms/dayrui/controllers/admin/Upgrade.php +++ /dev/null @@ -1,55 +0,0 @@ -template->assign(array( - 'menu' => $this->get_menu_v3(array( - fc_lang('程序升级') => array('admin/upgrade/index', 'refresh'), - )), - )); - $this->template->display('upgrande.html'); - } - - - // 版本列表 - public function vlist() { - - $data = dr_catcher_data('http://www.finecms.net/version.php'); - - if (!$data) { - exit('

暂时无法获取到服务器端版本信息

'); - } - - if (strlen($data) > 20) { - exit('

返回数据不规范，请联系官方！

'); - } - - $fwq = (string)(date('Y.m.d', strtotime($data))); - $azb = (string)(DR_UPDATE); - if ($fwq != $azb) { - $data.= '，'.'有新版本可更新'; - - } - - - echo('

本网站程序更新时间为： '.DR_UPDATE.'

'); - - exit('

服务器程序更新时间为： '.$data.'

'); - - - } - - -} \ No newline at end of file diff --git a/finecms/finecms/dayrui/controllers/admin/Urlrule.php b/finecms/finecms/dayrui/controllers/admin/Urlrule.php deleted file mode 100644 index 4d767d2..0000000 --- a/finecms/finecms/dayrui/controllers/admin/Urlrule.php +++ /dev/null @@ -1,147 +0,0 @@ -type = array( - 3 => fc_lang('栏目'), - 4 => fc_lang('站点'), - ); - $this->template->assign('type', $this->type); - $this->template->assign('menu', $this->get_menu_v3(array( - fc_lang('URL规则') => array('admin/urlrule/index', 'magnet'), - fc_lang('添加') => array('admin/urlrule/add', 'plus'), - fc_lang('伪静态规则') => array('admin/route/index', 'safari'), - ))); - } - - /** - * 管理 - */ - public function index() { - - if (IS_POST) { - $ids = $this->input->post('ids', TRUE); - if (!$ids) { - exit(dr_json(0, fc_lang('您还没有选择呢'))); - } - if (!$this->is_auth('admin/urlrule/del')) { - exit(dr_json(0, fc_lang('您无权限操作'))); - } - $this->db->where_in('id', $ids)->delete('urlrule'); - $this->cache(1); - $this->system_log('删除URL规则【#'.@implode(',', $ids).'】'); // 记录日志 - exit(dr_json(1, fc_lang('操作成功，正在刷新...'))); - } - - $this->template->assign(array( - 'list' => $this->db->get('urlrule')->result_array(), - 'color' => array( - 0 => 'default', - 1 => 'info', - 2 => 'success', - 3 => 'warning', - 4 => 'danger', - 5 => '', - 6 => 'primary', - ), - )); - $this->template->display('urlrule_index.html'); - } - - /** - * 复制 - */ - public function copy() { - - $id = (int)$this->input->get('id'); - $data = $this->db - ->where('id', $id) - ->limit(1) - ->get('urlrule') - ->row_array(); - if ($data) { - $this->db->insert('urlrule', array( - 'type' => $data['type'], - 'name' => $data['name'].'_copy', - 'value' => $data['value'], - )); - $this->cache(1); - $this->system_log('复制URL规则【#'.$id.'】'); // 记录日志 - } - - exit(dr_json(1, fc_lang('操作成功，正在刷新...'))); - } - - /** - * 添加 - */ - public function add() { - - if (IS_POST) { - $this->db->insert('urlrule', array( - 'type' => $this->input->post('type'), - 'name' => $this->input->post('name'), - 'value' => dr_array2string($this->input->post('data')), - )); - $this->system_log('添加URL规则【#'.$this->db->insert_id().'】'.$this->input->post('name')); // 记录日志 - $this->cache(1); - $this->admin_msg(fc_lang('操作成功，正在刷新...'), dr_url('urlrule/index'), 1); - } - - $this->template->display('urlrule_add.html'); - } - - /** - * 修改 - */ - public function edit() { - - $id = (int)$this->input->get('id'); - $data = $this->db - ->where('id', $id) - ->limit(1) - ->get('urlrule') - ->row_array(); - if (!$data) { - $this->admin_msg(fc_lang('对不起，数据被删除或者查询不存在')); - } - - if (IS_POST) { - $this->db->where('id', $id)->update('urlrule', array( - 'name' => $this->input->post('name'), - 'value' => dr_array2string($this->input->post('data')), - )); - $this->cache(1); - $this->system_log('修改URL规则【#'.$id.'】'.$this->input->post('name')); // 记录 - $this->admin_msg(fc_lang('操作成功，正在刷新...'), dr_url('urlrule/index'), 1); - } - - $data['value'] = dr_string2array($data['value']); - $this->template->assign(array( - 'data' => $data, - )); - $this->template->display('urlrule_add.html'); - } - - /** - * 缓存 - */ - public function cache($update = 0) { - $this->system_model->urlrule(); - ((int)$_GET['admin'] || $update) or $this->admin_msg(fc_lang('操作成功，正在刷新...'), isset($_SERVER['HTTP_REFERER']) ? $_SERVER['HTTP_REFERER'] : '', 1); - } -} \ No newline at end of file diff --git a/finecms/finecms/dayrui/controllers/admin/Weixin.php b/finecms/finecms/dayrui/controllers/admin/Weixin.php deleted file mode 100644 index 15a2560..0000000 --- a/finecms/finecms/dayrui/controllers/admin/Weixin.php +++ /dev/null @@ -1,211 +0,0 @@ -load->model('weixin_model'); - $this->template->assign(array( - 'menu' => $this->get_menu_v3(array( - fc_lang('微信配置') => array('admin/weixin/index', 'weixin'), - fc_lang('更新缓存') => array('admin/weixin/cache', 'refresh'), - )), - )); - } - - /** - * 公众号配置 - */ - public function index() { - - - $page = (int)$this->input->get('page'); - $field = array( - 'qrcode' => array( - 'ismain' => 1, - 'fieldtype' => 'File', - 'fieldname' => 'qrcode', - 'setting' => array( - 'option' => array( - 'ext' => 'jpg', - 'size' => 99999, - ) - ) - ), - ); - $data = $this->weixin_model->config('config'); - - if (IS_POST) { - $update = $this->input->post('data'); - $this->validate_filter($field); - $this->weixin_model->config('config', $update); - $this->attachment_handle($this->uid, $this->weixin_model->prefix.'-0', $field, $data); - $this->cache(1); - $this->system_log('微信:修改公众号配置'); // 记录日志 - $this->admin_msg(fc_lang('操作成功，正在刷新...'), dr_url($this->router->class.'/'.$this->router->method, array('page' => (int)$this->input->post('page'))), 1); - } - - $this->template->assign(array( - 'page' => $page, - 'data' => $data, - 'field' => $field, - )); - $this->template->display('weixin_index.html'); - } - - // 回复设置 - public function reply() { - - $page = (int)$this->input->get('page'); - $data = $this->weixin_model->config('reply'); - - if (IS_POST) { - $update = $this->input->post('data'); - if ($update['hello'] && !$this->db->where('id', $update['hello'])->count_all_results($this->weixin_model->prefix.'_keyword')) { - $this->admin_msg('关键字ID('.$update['hello'].')不存在,请确保它存在于关键字库中'); - } - if ($update['reply'] && !$this->db->where('id', $update['reply'])->count_all_results($this->weixin_model->prefix.'_keyword')) { - $this->admin_msg('关键字ID('.$update['reply'].')不存在,请确保它存在于关键字库中'); - } - $this->weixin_model->config('reply', $update); - $this->cache(1); - $this->system_log('微信:修改公众号配置'); // 记录日志 - $this->admin_msg(fc_lang('操作成功，正在刷新...'), dr_url($this->router->class.'/'.$this->router->method, array('page' => (int)$this->input->post('page'))), 1); - } - - $this->template->assign(array( - 'page' => $page, - 'data' => $data, - 'menu' => $this->get_menu_v3(array( - fc_lang('系统回复设置') => array('admin/weixin/reply', 'cog'), - fc_lang('更新缓存') => array('admin/weixin/cache', 'refresh'), - )), - )); - $this->template->display('weixin_reply.html'); - } - - // 加载表情 - public function emoji() { - - $this->template->assign(array( - 'callback' => $_GET['callback'] - )); - $this->template->display('weixin_emoji.html'); - } - - // 上传文件upload - public function ajaxload() { - - $path = SYS_UPLOAD_PATH.'/weixin/'.date('Ym', SYS_TIME).'/'; - if (!is_dir($path)) { - dr_mkdirs($path); - } - - $this->load->library('upload', array( - 'max_size' => 102400, - 'overwrite' => FALSE, - 'file_name' => substr(md5(time()), rand(0, 20), 10), - 'upload_path' => $path, - 'allowed_types' => $this->input->get('ext'), - 'file_ext_tolower' => TRUE, - )); - if ($this->upload->do_upload('download')) { - $info = $this->upload->data(); - $this->load->model('attachment_model'); - $this->attachment_model->siteid = SITE_ID; - $result = $this->attachment_model->upload($this->uid, $info); - if (!is_array($result)) { - exit('0,'.$result); - } - list($id, $file, $_ext) = $result; - echo json_encode(array( - 'status'=>1, - 'info'=>'上传成功', - 'data'=> '', - 'id'=> $id, - 'path'=> $file, - 'file'=> $file, - 'url'=> $file, - ));exit; - } else { - echo json_encode(array('status'=>0, 'info'=>$this->upload->display_errors('', ''), 'data'=> ''));exit; - } - - } - - // 推送新闻 - public function ts() { - - $mid = $this->input->get('mid'); - $ids = $this->input->get('ids'); - $ok = (int)$this->input->get('ok'); - $sb = (int)$this->input->get('sb'); - $value = (int)$this->input->get('value'); - if (!$ids) { - $this->admin_msg(fc_lang('您还没有选择呢')); - } - - $url = dr_url('weixin/ts', array('mid'=>$mid, 'value'=>$value, 'ids' => $ids)); - - $page = (int)$this->input->get('page'); - if (!$page) { - $this->admin_msg(fc_lang('正在开始推送到微信端...'), $url.'&page=1', 2); - } - - $data = $this->db->where_in('id', $ids)->get(SITE_ID.'_'.$mid)->result_array(); - if (!$data) { - $this->admin_msg(fc_lang('没有可用内容')); - } - - // 全部粉丝 - $psize = 10; // 每次发送n个粉丝 - $allUser = $this->db->limit($psize, $psize * ($page - 1))->get($this->weixin_model->prefix.'_follow')->result_array(); - if (!$allUser) { - // 发送完毕 - $this->admin_msg(fc_lang('发送完毕，成功('.$ok.')，失败('.$sb.')'), '', 1); - } - - $articles = array(); - foreach ( $data as $vo ) { - // 文章内容 - $art ['title'] = $vo ['title']; - $art ['description'] = $vo ['description']; - $art ['url'] = $vo ['url']; - // 获取封面图片URL - $art ['picurl'] = dr_get_file( $vo ['thumb'] ); - $articles [] = $art; - } - - // 群发 - foreach ( $allUser as $k => $v ) { - $k = $v['openid']; - $param = array(); - $param ['news'] ['articles'] = $articles; - $result = $this->weixin_model->_replyData($k, $param, 'news'); - if ($result ['status'] == 1) { - $ok ++; - } else { - $sb ++; - } - } - - $this->admin_msg(fc_lang('正在开始推送到微信端('.$page.')...'), $url.'&page='.($page+1).'&ok='.$ok.'&sb='.$sb, 2); - - } - - /** - * 缓存 - */ - public function cache($update = 0) { - - $this->weixin_model->cache(isset($_GET['site']) && $_GET['site'] ? (int)$_GET['site'] : SITE_ID); - - ((int)$_GET['admin'] || $update) or $this->admin_msg(fc_lang('操作成功，正在刷新...'), isset($_SERVER['HTTP_REFERER']) ? $_SERVER['HTTP_REFERER'] : '', 1); - } -} \ No newline at end of file diff --git a/finecms/finecms/dayrui/controllers/admin/Wmenu.php b/finecms/finecms/dayrui/controllers/admin/Wmenu.php deleted file mode 100644 index bbf0518..0000000 --- a/finecms/finecms/dayrui/controllers/admin/Wmenu.php +++ /dev/null @@ -1,187 +0,0 @@ -load->model('weixin_model'); - $this->mydb = $this->db; // 数据库 - $this->tfield = 'displayorder'; // 时间字段用于搜索和排序 - $this->mytable = $this->weixin_model->prefix . '_menu'; - - $this->template->assign(array( - 'menu' => $this->get_menu_v3(array( - '菜单管理' => array('admin/wmenu/index', 'table'), - '添加' => array('admin/wmenu/add', 'plus'), - '同步到微信服务器' => array('admin/wmenu/syc', 'refresh'), - )), - 'type' => array( - 'url' => 'URL链接', - 'member' => '登录授权', - ), - )); - } - - - // 同步到微信 - public function syc() { - - $data = $this->db->where('pid', 0)->order_by('displayorder asc')->get($this->mytable)->result_array(); - if ($data) { - $json = array(); - foreach ($data as $i => $t) { - $list = $this->db->where('pid', (int)$t['id'])->order_by('displayorder asc')->get($this->mytable)->result_array(); - if ($list) { - $val = array(); - foreach ($list as $c) { - $val[] = $this->_get_menu_data($c); - } - $json[] = array( - 'name' => $t['name'], - 'sub_button' => $val - ); - } else { - $json[] = $this->_get_menu_data($t); - } - } - - $url = 'https://api.weixin.qq.com/cgi-bin/menu/create?access_token=' . dr_get_access_token (); - $res = dr_weixin_post( $url, dr_weixin_en_json(array('button'=>$json))); - if (isset ( $res ['errcode'] ) && $res ['errcode'] != 0) { - $this->admin_msg(dr_error_msg ( $res, '' ) ); - }else{ - $this->admin_msg('同步成功，需要24小时微信客户端才会展现出来。', '', 1); - } - } else { - $this->admin_msg('你还没有创建菜单呢！'); - } - } - - // 获取同步规则值 - private function _get_menu_data($data) { - - // 按应用来判断类别 - if ($data['type'] == 'url') { - // 地址模式 - return array( - 'type' => 'view', - 'name' => $data['name'], - 'url' => $data['value'], - ); - } elseif ($data['type'] == 'member') { - // 授权模式 - return array( - 'type' => 'view', - 'name' => $data['name'], - 'url' => SITE_URL.'index.php?c=weixin&m=sync&url='.urlencode($data['value']), - ); - } - - } - - /** - * 菜单管理 - */ - public function index() { - - if (IS_POST) { - $ids = $this->input->post('ids', TRUE); - if (!$ids) { - exit(dr_json(0, fc_lang('您还没有选择呢'))); - } - // 可以不用判断权限 - if ($this->input->post('action') == 'order') { - $post = $this->input->post('data'); - foreach ($ids as $id) { - $this->db->where('id', (int)$id)->update($this->mytable, array('displayorder' => (int)$post[$id]['displayorder'])); - } - exit(dr_json(1, fc_lang('操作成功，正在刷新...'))); - } else { - foreach ($ids as $id) { - $this->db->where('id', (int)$id)->delete($this->mytable); - $this->db->where('pid', (int)$id)->delete($this->mytable); - } - exit(dr_json(1, fc_lang('操作成功，正在刷新...'))); - } - } - - $data = $this->db->where('pid', 0)->order_by('displayorder asc')->get($this->mytable)->result_array(); - if ($data) { - foreach ($data as $i => $t) { - $data[$i]['data'] = $this->db - ->where('pid', (int)$t['id']) - ->order_by('displayorder asc') - ->get($this->mytable) - ->result_array(); - } - } - $this->template->assign(array( - 'list' => $data, - )); - $this->template->display('wmenu_index.html'); - } - - public function add() { - - $pid = (int)$this->input->get('pid'); - - if (IS_POST) { - $data = $this->input->post('data'); - $value = $this->input->post('value'); - if (!$data['name']) { - $this->admin_msg('名称不能为空！'); - } - $data['displayorder'] = 0; - $data['value'] = isset($value[$data['type']]) ? $value[$data['type']] : ''; - $this->db->insert($this->mytable, $data); - $this->admin_msg(fc_lang('操作成功，正在刷新...'), dr_url($this->router->class.'/index'), 1); - } else { - $data['type'] = 'url'; - } - - $this->template->assign(array( - 'pid' => $pid, - 'top' => $this->db->where('pid', 0)->order_by('displayorder asc')->get($this->mytable)->result_array(), - 'data' => $data, - )); - $this->template->display('wmenu_add.html'); - } - - public function edit() { - - $id = (int)$this->input->get('id'); - $data = $this->db->where('id', $id)->get($this->mytable)->row_array(); - - if (IS_POST) { - $post = $this->input->post('data'); - if (!$post['name']) { - $this->admin_msg('名称不能为空！'); - } - $value = $this->input->post('value'); - $post['value'] = isset($value[$post['type']]) ? $value[$post['type']] : ''; - $this->db->where('id', $id)->update($this->mytable, $post); - $this->admin_msg(fc_lang('操作成功，正在刷新...'), dr_url($this->router->class.'/index'), 1); - } - - $this->template->assign(array( - 'pid' => $data['pid'], - 'top' => $this->db->where('pid', 0)->order_by('displayorder asc')->get($this->mytable)->result_array(), - 'data' => $data, - )); - $this->template->display('wmenu_add.html'); - } - - -} \ No newline at end of file diff --git a/finecms/finecms/dayrui/controllers/admin/Wuser.php b/finecms/finecms/dayrui/controllers/admin/Wuser.php deleted file mode 100644 index bff2354..0000000 --- a/finecms/finecms/dayrui/controllers/admin/Wuser.php +++ /dev/null @@ -1,196 +0,0 @@ -load->model('weixin_model'); - $this->mydb = $this->db; // 数据库 - $this->tfield = 'subscribe_time'; - $this->mytable = $this->weixin_model->prefix.'_user'; - $this->myfield = $field = array( - 'uid' => array( - 'name' => 'Uid', - 'ismain' => 1, - 'fieldname' => 'uid', - ), - 'username' => array( - 'name' => '会员账号', - 'ismain' => 1, - 'fieldname' => 'username', - ), - ); - $this->template->assign(array( - 'field' => $field, - 'menu' => $this->get_menu_v3(array( - '粉丝管理' => array('admin/wuser/index', 'user'), - '与微信公众平台同步' => array('admin/wuser/syc', 'refresh'), - )), - )); - } - - /** - * 微信粉丝管理 - */ - public function index() { - - if (IS_POST && $_POST['data']['field'] == 'nickname') { - $key = $_POST['data']['keyword']; - $key2 = str_replace ( '\u', '\\\\\\\\u', trim ( dr_deal_emoji ($key, 0 ), '"' ) ); - - // 搜索用户表 - $this->mywhere = "(nickname LIKE '%$key%' OR nickname LIKE '%$key2%')"; - } elseif (IS_POST && $this->input->post('action') == 'order') { - $ids = $this->input->post('ids', TRUE); - if (!$ids) { - exit(dr_json(0, fc_lang('您还没有选择呢'))); - } - $gid = (int)$this->input->post('gid'); - $url = 'https://api.weixin.qq.com/cgi-bin/groups/members/update?access_token=' . dr_get_access_token (); - foreach ($ids as $id) { - $param = array(); - $param ['openid'] = $id; - $param ['to_groupid'] = $gid; - $param = JSON ( $param ); - dr_post_data( $url, $param ); - } - $this->db->where_in('openid', $ids)->update($this->weixin_model->prefix.'_user', array('groupid' => $gid)); - exit(dr_json(1, fc_lang('更改分组成功'))); - } elseif (IS_POST && $this->input->post('action') == 'del') { - $ids = $this->input->post('ids', TRUE); - if (!$ids) { - exit(dr_json(0, fc_lang('您还没有选择呢'))); - } - $this->db->where_in('openid', $ids)->delete($this->weixin_model->prefix.'_user'); - $this->db->where_in('openid', $ids)->delete($this->weixin_model->prefix.'_follow'); - exit(dr_json(1, fc_lang('成功删除粉丝'))); - } - - // 数据库中分页查询 - list($data, $total, $param) = $this->limit_page(); - $param['total'] = $total; - $this->template->assign(array( - 'list' => $data, - 'total' => $total, - 'pages' => $this->get_pagination(dr_url(APP_DIR.'/'.$this->router->class.'/'.$this->router->method, $param), $total), - 'param' => $param, - )); - - $this->template->display('wuser_index.html'); - } - - public function syc() { - - $action = $this->input->get('action'); - if (!$action) { - $url = 'https://api.weixin.qq.com/cgi-bin/user/get?access_token='.dr_get_access_token().'&next_openid='.$this->input->get('next_openid'); - $data = @json_decode(@wx_get_https_json_data ($url), true); - if (!isset($data['count']) || $data['count'] == 0) { - // 拉取完毕全部设置为0状态 - $this->db->update($this->weixin_model->prefix.'_follow', array( - 'status' => 0, - )); - $this->admin_msg('同步用户数据中，请勿关闭', dr_url('wuser/syc', array('action'=>'user')),1,0); - } - - // 查询并入库 - $res = $this->db->where_in('openid', $data ['data'] ['openid'])->get($this->weixin_model->prefix.'_follow')->result_array(); - - if (count($res) != $data ['count']) { - // 更新的数量不一致，可能有增加的用户openid - $openids = array(); - if ($res) { - foreach ($res as $t) { - $openids[] = $t['openid']; - } - } - $diff = array_diff ( $data ['data'] ['openid'], $openids ); - if (! empty ( $diff )) { - foreach ( $diff as $id ) { - $save =array(); - $save ['openid'] = $id; - $save ['uid'] = 0; - $save ['status'] = 0; - $this->db->insert($this->weixin_model->prefix.'_follow', $save); - } - } - } - $this->admin_msg ( '同步用户OpenID中，请勿关闭', dr_url('wuser/syc', array('next_openid' => $data ['next_openid'])), 1, 0); - } elseif ($action == 'user') { - // 开始更新会员资料 - $list = $this->db->where('status', 0)->limit(50)->get($this->weixin_model->prefix.'_follow')->result_array(); - if (empty ( $list )) { - $this->admin_msg('同步用户完成', dr_url('wuser/index'),1,0); - exit (); - } - $param = $openids = $uids = array(); - foreach ( $list as $vo ) { - $param ['user_list'] [] = array ( - 'openid' => $vo ['openid'], - 'lang' => 'zh-CN' - ); - $openids[] = $vo ['openid']; - $uids [$vo ['openid']] = $vo ['uid']; - } - $url = 'https://api.weixin.qq.com/cgi-bin/user/info/batchget?access_token=' . dr_get_access_token (); - $data = dr_post_data ( $url, $param ); - if (isset($data['errcode']) && $data['errcode'] != 0) { - $this->admin_msg(dr_error_msg($data)); - } - $update = array(); - foreach ($data['user_info_list'] as $u ) { - if ($u['subscribe'] == 0) { - continue; - } - $uid = intval($uids[$u['openid']]); - if ($uid == 0) { - // 新增加的用户 - $rs = $this->weixin_model->add_user($u); - } else { - // 更新的用户 - $rs = $this->weixin_model->edit_user($uid, array( - 'groupid' => (int)$u['groupid'], - 'openid' => $u['openid'], - 'nickname' => $u['nickname'], - 'sex' => $u['sex'], - 'city' => $u['city'], - 'country' => $u['country'], - 'province' => $u['province'], - 'language' => $u['language'], - 'headimgurl' => $u['headimgurl'], - 'subscribe_time' => $u['subscribe_time'], - )); - } - // 更新关注表状态 - $this->db->where('openid', $u['openid'])->update($this->weixin_model->prefix.'_follow', array( - 'status' => 1, - 'uid' => $rs, - )); - $update[] = $u['openid']; - } - // 判断没获取到的 - foreach ($list as $t) { - if (!in_array($t['openid'], $update)) { - $this->db->where('openid', $t['openid'])->update($this->weixin_model->prefix.'_follow', array( - 'status' => 1, - 'uid' => 0, - )); - } - } - $this->admin_msg ( '同步用中，请勿关闭', dr_url('wuser/syc', array('action' =>'user')), 1, 0); - } - - } -} \ No newline at end of file diff --git a/finecms/finecms/dayrui/controllers/member/Account.php b/finecms/finecms/dayrui/controllers/member/Account.php deleted file mode 100644 index 3d9005f..0000000 --- a/finecms/finecms/dayrui/controllers/member/Account.php +++ /dev/null @@ -1,252 +0,0 @@ -input->get('id')); - if ($this->get_cache('member', 'setting', 'regoauth')) { - $this->msg(fc_lang('您的账号不支持解除绑定')); - } elseif (!$this->member['username'] && !$this->member['password']) { - $this->msg(fc_lang('操作成功，正在刷新...')); - } - - $this->db->where('uid', $this->uid)->where('oauth', $id)->delete('member_oauth'); - - // 解绑积分处理 - !$this->db - ->where('uid', $this->uid) - ->where('type', 0) - ->where('mark', 'jie_'.$id) - ->count_all_results('member_scorelog') && $this->member_model->update_score(0, $this->uid, (int)$this->member_rule['jie_experience'], 'jie_'.$id, 'OAuth账号解绑'); - - // 解绑虚拟币处理 - !$this->db - ->where('uid', $this->uid) - ->where('type', 1) - ->where('mark', 'jie_'.id) - ->count_all_results('member_scorelog') && $this->member_model->update_score(1, $this->uid, (int)$this->member_rule['jie_score'], 'jie_'.$id, 'OAuth账号解绑'); - - $this->msg(fc_lang('操作成功，正在刷新...'), dr_member_url('account/oauth'), 1, 3); - } - - /** - * OAuth绑定 - */ - public function bang() { - - $appid = dr_safe_replace($this->input->get('id')); - $oauth = require WEBPATH.'config/oauth.php'; - $config = $oauth[$appid]; - !$config && $this->msg(fc_lang('OAuth错误: 缺少OAuth参数')); - - $config['url'] = SITE_URL.'index.php?s=member&c=account&m=bang&id='.$appid; // 回调地址设置 - $this->load->library('OAuth2'); - - // OAuth - $code = $this->input->get('code', TRUE); - $oauth = $this->oauth2->provider($appid, $config); - - if (!$code) { // 登录授权页 - try { - $oauth->authorize(); - } catch (OAuth2_Exception $e) { - $this->msg(fc_lang('OAuth授权错误').' - '.$e); - } - } else { // 回调返回数据 - try { - $user = $oauth->get_user_info($oauth->access($code)); - if (is_array($user) && $user['oid']) { - if ($uid = $this->member_model->OAuth_bang($appid, $user)) { - $this->msg(fc_lang('抱歉！该授权已经被绑定过了，看看Ta是谁？', dr_space_url($uid))); - } else { - // 绑定积分处理 - !$this->db - ->where('uid', $this->uid) - ->where('type', 0) - ->where('mark', 'bang_'.$appid) - ->count_all_results('member_scorelog') && $this->member_model->update_score(0, $this->uid, (int)$this->member_rule['bang_experience'], 'bang_'.$appid, 'OAuth账号绑定'); - - // 绑定虚拟币处理 - !$this->db - ->where('uid', $this->uid) - ->where('type', 1) - ->where('mark', 'bang_'.$appid) - ->count_all_results('member_scorelog') && $this->member_model->update_score(1, $this->uid, (int)$this->member_rule['bang_score'], 'bang_'.$appid, 'OAuth账号绑定'); - $this->msg(fc_lang('绑定成功'), dr_member_url('account/oauth'), 1, 3); - } - } else { - $this->msg(fc_lang('OAuth回调错误: 获取用户信息失败')); - } - } catch (OAuth2_Exception $e) { - $this->msg(fc_lang('OAuth回调错误: 获取用户信息失败').' - '.$e); - } - } - } - - - /** - * OAuth - */ - public function oauth() { - $this->template->assign(array( - 'list' => $this->member['oauth'], - )); - $this->template->display('account_oauth.html'); - } - - /** - * 修改密码 - */ - public function password() { - - $error = 0; - - if (IS_POST) { - - $password = dr_safe_replace($this->input->post('password')); - $password1 = dr_safe_replace($this->input->post('password1')); - $password2 = dr_safe_replace($this->input->post('password2')); - - if (!$password1 || $password1 != $password2) { - $error = fc_lang('两次密码输入不一致'); - } elseif ($password == $password2) { - $error = fc_lang('不能与原密码相同'); - } elseif (md5(md5($password).$this->member['salt'].md5($password)) != $this->member['password']) { - $error = fc_lang('当前密码不正确'); - } else { - if (defined('UCSSO_API')) { - $rt = ucsso_edit_password($this->uid, $password1); - // 修改失败 - if (!$rt['code']) { - $this->admin_msg(fc_lang($rt['msg'])); - } - } elseif ($this->get_cache('MEMBER', 'setting', 'ucenter')) { - $ucresult = uc_user_edit($this->member['username'], $password, $password1, $this->member['email']); - $ucresult == -1 && $error = fc_lang('旧密码不正确'); - } - } - - if ($error === 0) { - $this->db->where('uid', $this->uid)->update('member', array( - 'password' => md5(md5($password1).$this->member['salt'].md5($password1)) - )); - $this->member_msg(fc_lang('密码修改成功'), dr_member_url('account/password'), 1); - } - - } - - $this->template->assign(array( - 'result_error' => $error - )); - $this->template->display('password.html'); - } - - /** - * 密码校验 - */ - public function cpassword() { - $password = dr_safe_replace($this->input->post('password')); - echo md5(md5($password).$this->member['salt'].md5($password)) == $this->member['password'] ? '' : fc_lang('旧密码不正确'); - } - - /** - * 上传头像 - */ - public function avatar() { - $this->template->display('avatar.html'); - } - - /** - * 上传头像处理 - * 传入头像压缩包，解压到指定文件夹后删除非图片文件 - */ - public function upload() { - - // 创建图片存储文件夹 - $dir = dr_upload_temp_path().'member/'.$this->uid.'/'; - @dr_dir_delete($dir); - !is_dir($dir) && dr_mkdirs($dir); - - if ($_POST['tx']) { - $file = str_replace(' ', '+', $_POST['tx']); - if (preg_match('/^(data:\s*image\/(\w+);base64,)/', $file, $result)){ - $new_file = $dir.'0x0.'.$result[2]; - if (!in_array(strtolower($result[2]), array('jpg', 'jpeg', 'png', 'gif'))) { - exit(dr_json(0, '目录权限不足')); - } - if (!@file_put_contents($new_file, base64_decode(str_replace($result[1], '', $file)))) { - exit(dr_json(0, '目录权限不足')); - } else { - list($width, $height, $type, $attr) = getimagesize($new_file); - if (!$type) { - @unlink($new_file); - exit(function_exists('iconv') ? iconv('UTF-8', 'GBK', '图片字符串不规范') : 'error3'); - } - $this->load->library('image_lib'); - $config['create_thumb'] = TRUE; - $config['thumb_marker'] = ''; - $config['maintain_ratio'] = FALSE; - $config['source_image'] = $new_file; - foreach (array(30, 45, 90, 180) as $a) { - $config['width'] = $config['height'] = $a; - $config['new_image'] = $dir.$a.'x'.$a.'.'.$result[2]; - $this->image_lib->initialize($config); - if (!$this->image_lib->resize()) { - exit(dr_json(0, '上传错误：'.$this->image_lib->display_errors())); - break; - } - } - - // ok - $my = SYS_UPLOAD_PATH.'/member/'.$this->uid.'/'; - @dr_dir_delete($my); - !is_dir($my) && dr_mkdirs($my); - - $c = 0; - if ($fp = @opendir($dir)) { - while (FALSE !== ($file = readdir($fp))) { - $ext = substr(strrchr($file, '.'), 1); - if (in_array(strtolower($ext), array('jpg', 'jpeg', 'png', 'gif'))) { - if (copy($dir.$file, $my.$file)) { - $c++; - } - } - } - closedir($fp); - } - if (!$c) { - exit(dr_json(0, fc_lang('未找到目录中的图片'))); - } - } - } else { - exit(dr_json(0, '图片字符串不规范')); - } - } else { - exit(dr_json(0, '图片不存在')); - } - -// 上传图片到服务器 - if (defined('UCSSO_API')) { - $rt = ucsso_avatar($this->uid, file_get_contents($dir.'90x90.jpg')); - !$rt['code'] && $this->_json(0, fc_lang('通信失败：%s', $rt['msg'])); - } - - - exit('1'); - } - -} \ No newline at end of file diff --git a/finecms/finecms/dayrui/controllers/member/Api.php b/finecms/finecms/dayrui/controllers/member/Api.php deleted file mode 100644 index 8d5c419..0000000 --- a/finecms/finecms/dayrui/controllers/member/Api.php +++ /dev/null @@ -1,858 +0,0 @@ -template->admin(); - - // 登陆判断 - !$this->uid && $this->admin_msg(fc_lang('会话超时，请重新登录')); - - // 参数判断 - $dirname = dr_safe_replace($this->input->get('module')); - !$dirname && $this->admin_msg(fc_lang('模型module参数不存在')); - - // 站点选择 - $site = (int)$_GET['site']; - $site = $site ? $site : SITE_ID; - - // 模型缓存判断 - $module = $this->get_cache('module', $dirname); - !$module && $this->admin_msg(fc_lang('此模型（%s）缓存不存在', $dirname)); - - $db = $this->db; - $field = $module['field']; - $category = $this->get_cache('category-'.$site); - - $field['id'] = array( - 'name' => 'Id', - 'ismain' => 1, - 'fieldtype' => 'Text', - 'fieldname' => 'id', - ); - - if ($this->member['adminid']) { - $field['author'] = array( - 'name' => fc_lang('录入作者'), - 'ismain' => 1, - 'fieldtype' => 'Text', - 'fieldname' => 'author', - ); - } else { - $db->where('uid', $this->uid); - } - - if (IS_POST) { - $data = $this->input->post('data'); - $catid = (int)$this->input->post('catid'); - $catid && $db->where_in('catid', $category[$catid]['catids']); - if (isset($data['keyword']) && $data['keyword'] - && $data['field'] && isset($field[$data['field']])) { - $data['keyword'] = dr_safe_replace(urldecode($data['keyword'])); - if ($data['field'] == 'id') { - // id搜索 - $id = array(); - $ids = explode(',', $data['keyword']); - foreach ($ids as $i) { - $id[] = (int)$i; - } - $db->where_in('id', $id); - } elseif ($field[$data['field']]['fieldtype'] == 'Linkage' - && $field[$data['field']]['setting']['option']['linkage']) { - // 联动菜单搜索 - if (is_numeric($data['keyword'])) { - // 联动菜单id查询 - $link = dr_linkage($field[$data['field']]['setting']['option']['linkage'], (int)$data['keyword'], 0, 'childids'); - $link && $db->where($data['field'].' IN ('.$link.')'); - } else { - // 联动菜单名称查询 - $id = (int)$this->get_cache('linkid-'.SITE_ID, $field[$data['field']]['setting']['option']['linkage']); - $id && $db->where($data['field'].' IN (select id from `'.$db->dbprefix('linkage_data_'.$id).'` where `name` like "%'.$data['keyword'].'%")'); - } - } else { - // 其他模糊搜索 - $db->like($data['field'], urldecode($data['keyword'])); - } - } - } - - // 搜索结果显示条数 - $limit = (int)$_GET['limit']; - $limit = $limit ? $limit : 50; - - sort($field); - $list = $db->limit($limit) ->order_by('updatetime DESC')->select('id,title,updatetime,url')->get($site.'_'.$dirname)->result_array(); - - // 栏目选择 - $tree = array(); - $select = ''; - - $this->template->assign(array( - 'list' => $list, - 'param' => $data, - 'field' => $field, - 'select' => $select, - )); - $this->template->display('related.html', 'admin'); - } - - - /** - * 站点间的同步登录 - */ - public function synlogin() { - $this->api_synlogin(); - } - - /** - * 站点间的同步退出 - */ - public function synlogout() { - $this->api_synlogout(); - } - - /** - * 自定义信息JS调用 - */ - public function template() { - $this->api_template(); - } - - - /** - * 联动栏目分类调用 - */ - public function category() { - - $pid = (int)$this->input->get('parent_id'); - $json = array(); - $category = $this->get_cache('category-'.SITE_ID); - - foreach ($category as $k => $v) { - if ($v['pid'] == $pid) { - if (!$v['child'] && !$v['permission'][$this->markrule]['add']) { - continue; - } - $json[] = array( - 'region_id' => $v['id'], - 'region_name' => $v['name'], - 'region_child' => $v['child'] - ); - } - } - - echo json_encode($json); - } - - /** - * 联动菜单调用 - */ - public function linkage() { - - $pid = (int)$this->input->get('parent_id'); - $json = array(); - $code = $this->input->get('code', true); - $linkage = $this->get_cache('linkage-'.SITE_ID.'-'.$code); - - foreach ($linkage as $v) { - $v['pid'] == $pid && $json[] = array('region_id' => $v['ii'], 'region_name' => $v['name']); - } - - echo json_encode($json); - } - - /** - * Ajax调用字段属性表单 - * - * @return void - */ - public function field() { - - $id = (int)$this->input->post('id'); - $type = dr_safe_replace($this->input->post('type', true)); - - $this->load->model('field_model'); - $this->relatedid = $this->input->post('relatedid'); - $this->relatedname = $this->input->post('relatedname'); - - $data = $this->field_model->get($id); - $fields = $this->field_model->get_data(); - $related = $this->input->post('relatedname'); - if ($data) { - $value = dr_string2array($data['setting']); - $value = $value['option']; - } else { - $value = array(); - } - - $this->load->library('Dfield', array($this->input->post('module'))); - - define('TEXT_UNIQUE', $related == 'module' ? 1 : 0); - $return = $this->dfield->option($type, $value, $fields); - - if ($return !== 0) { - echo $return; - } - } - - /** - * 百度地图调用 - * - * @return void - */ - public function baidumap() { - - $list = $this->input->get('city', true) ? explode(',', urldecode($this->input->get('city', true))) : NULL; - $city = isset($list[0]) ? $list[0] : ''; - $value = $this->input->get('value', true); - $value = strlen($value) > 10 ? $value : ''; - - $this->template->assign(array( - 'city' => $city, - 'value' => $value, - 'list' => $list, - 'name' => $this->input->get('name', tru), - 'level' => (int)$this->input->get('level'), - 'width' => $this->input->get('width', tru), - 'height' => $this->input->get('height', tru) - 30, - )); - $this->template->display('baidumap.html', 'admin'); - - } - - /** - * 文件上传 - * - * @return void - */ - public function upload() { - - $site = (int)$this->input->get('siteid'); - $site = $site ? $site : SITE_ID; - $code = str_replace(' ', '+', $this->input->get('code')); - list($size, $ext, $path) = explode('|', dr_authcode($code, 'DECODE')); - - $uid = $this->uid; - // 附件上传时采用后台登陆会员 - $this->session->userdata('member_auth_uid') && $uid = $this->member_model->member_uid(1); - - $this->load->model('attachment_model'); - - $this->template->assign(array( - 'ext' => str_replace(',', '|', $ext), - 'code' => $code, - 'page' => 0, - 'size' => (int)$size * 1024, - 'name' => $this->input->get('name'), - 'types' => '*.'.str_replace(',', ';*.', $ext), - 'siteid' => $site, - 'fileid' => $this->input->get('filename'), - 'fcount' => (int)$this->input->get('count'), - 'session' => dr_authcode($uid, 'ENCODE'), - 'is_admin' => 0, - )); - $this->template->display('upload.html', 'admin'); - } - - /** - * fex文件上传 - * - * @return void - */ - public function fex_upload() { - - $site = (int)$this->input->get('siteid'); - $site = $site ? $site : SITE_ID; - $code = str_replace(' ', '+', $this->input->get('code')); - list($size, $ext, $path) = explode('|', dr_authcode($code, 'DECODE')); - - $uid = $this->uid; - // 附件上传时采用后台登陆会员 - $this->session->userdata('member_auth_uid') && $uid = $this->member_model->member_uid(1); - - $this->load->model('attachment_model'); - - $this->template->assign(array( - 'ext' => str_replace('|', ',', $ext), - 'code' => $code, - 'name' => $this->input->get('name'), - 'types' => '*.'.str_replace(',', ';*.', $ext), - 'size' => (int)$size * 1024, - 'name' => $this->input->get('name'), - 'siteid' => $site, - 'fileid' => $this->input->get('filename'), - 'fcount' => (int)$this->input->get('count'), - 'post_url' => '/index.php?s=member&c=api&m=fex_ajax_upload&code='.$code, - )); - $this->template->display('upload_fex.html', 'admin'); - } - - - // ajax 图片上传 - public function ajax_upload() { - - // 游客不允许上传 - !$this->member && exit(json_encode(array('code'=>0, 'msg'=>fc_lang('抱歉！游客不允许上传附件'), 'url'=> '', 'id'=>''))); - - - $ext = 'jpg,jpeg,gif,png'; - $site = (int)$this->input->get('siteid'); - $site = $site ? $site : SITE_ID; - $code = str_replace(' ', '+', $this->input->get('code')); - list($size, $path) = explode('|', dr_authcode($code, 'DECODE')); - - $path = SYS_UPLOAD_PATH.'/'.date('Ym', SYS_TIME).'/'; - !is_dir($path) && dr_mkdirs($path); - - $this->load->library('upload', array( - 'max_size' => (int)$size * 1024, - 'overwrite' => FALSE, - 'file_name' => substr(md5(time()), rand(0, 20), 10), - 'upload_path' => $path, - 'allowed_types' => str_replace(',', '|', $ext), - 'file_ext_tolower' => TRUE, - )); - - if ($this->upload->do_upload(isset($_GET['fname']) ? $_GET['fname'] : 'Filedata')) { - $info = $this->upload->data(); - $this->load->model('attachment_model'); - $this->attachment_model->siteid = $site; - $result = $this->attachment_model->upload($this->uid, $info); - !is_array($result) && exit('0,'.$result); - list($id, $file, $_ext) = $result; - echo json_encode(array('code'=>1, 'msg'=>'', 'name' => dr_strcut($info['filename'], 15).'.'.$_ext, 'id'=>$id, 'url' => dr_get_file($id)));exit; - } else { - echo json_encode(array('code'=>0, 'msg'=>$this->upload->display_errors('', ''), 'url'=> '', 'id'=>''));exit; - } - - } - - // 文件下载并上传 - public function down_file() { - - $p = array(); - $url = explode('&', $this->input->post('url')); - - foreach ($url as $t) { - $item = explode('=', $t); - $p[$item[0]] = $item[1]; - } - - !$this->uid && exit(dr_json(0, fc_lang('游客不允许上传附件'))); - - list($size, $ext) = explode('|', dr_authcode($p['code'], 'DECODE')); - $path = SYS_UPLOAD_PATH.'/'.date('Ym', SYS_TIME).'/'; - !is_dir($path) && dr_mkdirs($path); - - $furl = $this->input->post('file'); - $file = dr_catcher_data($furl); - !$file && exit(dr_json(0, '获取远程文件失败')); - - $fileext = strtolower(trim(substr(strrchr($furl, '.'), 1, 10))); //扩展名 - $exts = (array)explode(',', $ext); - !in_array($fileext, $exts) && exit(dr_json(0, '远程文件扩展名（'.$fileext.'）不允许')); - $fileext == 'php' && exit(dr_json(0, '远程文件扩展名（'.$fileext.'）不允许')); - - $filename = substr(md5(time()), 0, 7).rand(100, 999); - if (@file_put_contents($path.$filename.'.'.$fileext, $file)) { - $info = array( - 'file_ext' => '.'.$fileext, - 'full_path' => $path.$filename.'.'.$fileext, - 'file_size' => filesize($path.$filename.'.'.$fileext)/1024, - 'client_name' => '', - ); - $this->load->model('attachment_model'); - $this->attachment_model->siteid = $p['siteid'] ? $p['siteid'] : SITE_ID; - $result = $this->attachment_model->upload($this->uid, $info); - if (is_array($result)) { - list($id) = $result; - echo json_encode(array('status'=>1, 'id'=>$id, 'name' => dr_strcut($filename, 10).'.'.$fileext));exit; - } else { - @unlink($info['full_path']); - exit(dr_json(0, $result)); - } - } else { - exit(dr_json(0, '文件移动失败，目录无权限（'.$path.'）')); - } - } - - /** - * 文件上传处理 - * - * @return void - */ - public function swfupload() { - - $uid = (int)dr_authcode(str_replace(' ', '+', $this->input->post('session')), 'DECODE'); - !$uid && exit('0,'.fc_lang('游客不允许上传附件')); - - if (IS_POST) { - $code = str_replace(' ', '+', $this->input->post('code')); - list($size, $ext) = explode('|', dr_authcode($code, 'DECODE')); - $path = SYS_UPLOAD_PATH.'/'.date('Ym', SYS_TIME).'/'; - !is_dir($path) && dr_mkdirs($path); - $this->load->library('upload', array( - 'max_size' => (int)$size * 1024, - 'overwrite' => FALSE, - 'file_name' => substr(md5(time()), rand(0, 20), 10), - 'upload_path' => $path, - 'allowed_types' => str_replace(',', '|', $ext), - 'file_ext_tolower' => TRUE, - )); - if ($this->upload->do_upload('Filedata')) { - $info = $this->upload->data(); - $site = (int)$this->input->post('siteid'); - $this->load->model('attachment_model'); - $this->attachment_model->siteid = $site ? $site : SITE_ID; - $result = $this->attachment_model->upload($uid, $info); - !is_array($result) && exit('0,'.$result); - list($id, $file, $_ext) = $result; - $icon = is_file(WEBPATH.'statics/admin/images/ext/'.$_ext.'.gif') ? THEME_PATH.'admin/images/ext/'.$_ext.'.gif' : THEME_PATH.'admin/images/ext/blank.gif'; - //唯一ID,文件全路径,图标,文件名称,文件大小,扩展名 - exit($id.','.dr_file($file).','.$icon.','.str_replace(array('|', '.'.$_ext), '', $info['client_name']).','.dr_format_file_size($info['file_size'] * 1024).','.$_ext); - } else { - exit('0,'.$this->upload->display_errors('', '')); - } - } - } - - /** - * 新ajax文件上传处理 - * - * @return void - */ - public function new_ajax_upload() { - - // 游客不允许上传，未获取到会员信息时提示游客无法上传 - !$this->member && exit(json_encode(array('code'=>0, 'msg'=>fc_lang('抱歉！游客不允许上传附件')))); - - $code = str_replace(' ', '+', $this->input->get('code')); - list($size, $ext, $path) = explode('|', dr_authcode($code, 'DECODE')); - - $path = SYS_UPLOAD_PATH.'/'.date('Ym', SYS_TIME).'/'; - !is_dir($path) && dr_mkdirs($path); - - $this->load->library('upload', array( - 'max_size' => (int)$size * 1024, - 'overwrite' => FALSE, - 'file_name' => substr(md5(time()), rand(0, 20), 10), - 'upload_path' => $path, - 'allowed_types' => str_replace(',', '|', $ext), - 'file_ext_tolower' => TRUE, - )); - - if ($this->upload->do_upload('file')) { - $info = $this->upload->data(); - $site = (int)$this->input->get('siteid'); - $site = $site ? $site : SITE_ID; - $this->load->model('attachment_model'); - $this->attachment_model->siteid = $site; - $result = $this->attachment_model->upload($this->uid, $info); - !is_array($result) && exit('0,'.$result); - list($id, $file, $_ext) = $result; - $icon = is_file(WEBPATH.'statics/admin/images/ext/'.$_ext.'.gif') ? THEME_PATH.'admin/images/ext/'.$_ext.'.gif' : THEME_PATH.'admin/images/ext/blank.gif'; - echo json_encode(array('code'=>1, 'icon'=>$icon, 'id'=>$id, 'size'=>dr_format_file_size($info['file_size'] * 1024), 'name'=>str_replace(array('|', '.'.$_ext), '', $info['client_name'])));exit; - } else { - echo json_encode(array('code'=>0, 'msg'=> $this->upload->client_name.' : '.$this->upload->display_errors('', '')));exit; - } - } - - /** - * 删除附件 - */ - public function swfdelete() { - - if (!$this->uid) { - return NULL; - } - - $id = (int)$this->input->post('id'); - $site = (int)$this->input->get('siteid'); - $this->load->model('attachment_model'); - $this->attachment_model->siteid = $site ? $site : SITE_ID; - - // 删除未使用 - $data = $this->db->where('id', $id)->where('uid', $this->uid)->get('attachment')->row_array(); - if ($data) { - // 删除附件 - $this->db->delete('attachment', 'id='.$id); - $this->attachment_model->_delete_attachment($data); - } - } - - /** - * 网站附件浏览 - */ - public function myattach() { - - !$this->member['adminid'] && exit(fc_lang('只有管理组才能附件浏览')); - - $this->load->helper('directory'); - $this->input->get('dir').PHP_EOL; - $dir = trim(trim(str_replace('.', '', $this->input->get('dir')), '/'), DIRECTORY_SEPARATOR); - $root = SYS_ATTACHMENT_DIR ? (WEBPATH.trim(SYS_ATTACHMENT_DIR, '/').'/') : WEBPATH; - $root = SYS_ATTACHMENT_DIR == '/' ? WEBPATH : $root; - $path = $dir ? $root.$dir.'/' : $root; - $list = array(); - $data = directory_map($path, 1); - $fext = $this->input->get('ext'); - $exts = explode('|', $fext); - $fcount = max(1, (int)$this->input->get('fcount')); - $furl = '/index.php?s=member&c=api&m=myattach&ext='.$fext.'&fcount='.$fcount; - - if ($data) { - foreach ($data as $t) { - if (is_dir($path.'/'.$t)) { - $name = trim($t, DIRECTORY_SEPARATOR); - $list[] = array( - 'type' => 'dir', - 'name' => $name, - 'icon' => THEME_PATH.'admin/images/ext/dir.gif', - 'file' => $furl.'&dir='.str_replace($root, '', $path.$name), - ); - } else { - $ext = trim(strrchr($t, '.'), '.'); - if ($ext != 'php' && in_array($ext, $exts)) { - $list[] = array( - 'type' => 'file', - 'name' => $t, - 'size' => dr_format_file_size(@filesize($path.$t)), - 'file' => SITE_URL.str_replace(WEBPATH, '', $path).$t, - 'icon' => is_file(WEBPATH.'statics/admin/images/ext/'.$ext.'.gif') ? THEME_PATH.'admin/images/ext/'.$ext.'.gif' : THEME_PATH.'admin/images/ext/blank.gif', - ); - } - } - } - } - - $this->template->assign(array( - 'list' => $list, - 'path' => str_replace(WEBPATH, '/', $path), - 'purl' => $furl.'&dir='.dirname(str_replace($root, '/', $path)), - 'parent' => $dir, - 'fcount' => $fcount, - )); - $this->template->display('myattach.html', 'admin'); - } - - // 输入上传信息 - public function upload_input() { - $this->template->assign(array( - 'file' => dr_safe_replace($_GET['file']), - 'title' => dr_safe_replace($_GET['title']), - )); - $this->template->display('upload_input.html', 'admin'); - } - - - - /** - * 汉字转换拼音 - */ - public function pinyin() { - - $name = $this->input->get('name', TRUE); - !$name && exit(''); - - $this->load->library('pinyin'); - $py = $this->pinyin->result($name); - if (strlen($py) > 12) { - exit($this->pinyin->result($name, 0)); - } - exit($py); - } - - /** - * 标题检查 - */ - public function checktitle() { - - $id = (int)$this->input->get('id'); - $title = $this->input->get('title', TRUE); - $module = $this->input->get('module'); - - (!$title || !$module) && exit(''); - - $num = $this->db->where('id<>', $id)->where('title', $title)->count_all_results(SITE_ID.'_'.$module); - $num ? exit(fc_lang(''.fc_lang('重复').'')) : exit(''); - } - - /** - * 提取关键字 - */ - public function getkeywords() { - - $kw = $this->input->get('kw', TRUE); - $kw = dr_safe_replace($kw ? $kw : $this->input->get('title')); - // 返回数据 - - - $rt = ''; - - //tag数据 - $tags = $this->dcache->get('tags-'.SITE_ID); - if ($tags) { - foreach ($tags as $t) { - // 找到了 - if (strpos($kw, $t['name']) !== false) { - $rt.= ','.$t['tags']; - } - } - } - - if ($rt) { - exit(trim($rt, ',')) ; - } - - $return = array(); - //tag数据 - $tags = $this->dcache->get('tag-'.SITE_ID); - if ($tags) { - foreach ($tags as $t) { - strpos($kw, $t) !== false && $return[] = $t; - } - } - - if (!$return) { - exit; - } - - echo @implode(',', $return);exit; - } - - /** - * 文件信息 - */ - public function fileinfo() { - - $this->load->helper('system'); - $key = dr_safe_replace($this->input->get('name')); - $info = dr_file_info($key); - $file = $info['attachment'] ? dr_get_file($info['attachment']) : $key; - if (in_array($info['fileext'], array('jpg', 'jpeg', 'gif', 'png'))) { - echo '

'; - echo '

'.fc_lang('查看原图').'

'; - } else { - echo '

'.($info['filename'] ? $info['filename'] : $file).'

'; - } - } - - /** - * 下载文件 - */ - public function file() { - - $id = (int)$this->input->get('id'); - $info = get_attachment($id); - $this->template->admin(); - - !$info && $this->admin_msg(fc_lang('附件不存在或者已经被删除')); - - - $file = $info['attachment']; - $this->db->where('id', $id)->set('download', 'download+1', FALSE)->update('attachment'); - - if (strpos($file, ':/')) { - //远程文件 - header("Location: $file"); - } else { - //本地文件 - $file = SYS_UPLOAD_PATH.'/'.str_replace('..', '', $file); - $file = str_replace('member/uploadfile/member/uploadfile', 'member/uploadfile', $file); - $name = urlencode(($info['filename'] ? $info['filename'] : $info['filemd5']).'.'.$info['fileext']); - $this->load->helper('download'); - force_download($name, file_get_contents($file)); - } - } - - - /** - * OAuth2授权登录 - */ - public function oauth() { - - $this->uid && $this->member_msg(fc_lang('请退出后再登录'), $_SERVER['HTTP_REFERER']); - - $appid = $this->input->get('id'); - $oauth = require WEBPATH.'config/oauth.php'; - $config = $oauth[$appid]; - !$config && $this->member_msg(fc_lang('OAuth错误: 缺少OAuth参数')); - - $code = $this->input->get('code', TRUE); - $MEMBER = $this->get_cache('member'); - - if (IS_POST) { - $user = dr_string2array(dr_authcode($this->input->post('code'), 'DECODE')); - !$user && $this->member_msg(fc_lang('数据已过期，请重新登录')); - // - $data = $this->input->post('data'); - $type = $this->input->post('type'); - $error1 = $error2 = ''; - - if ($type == 1) { - // 登录 - $rt = $this->member_model->login($data['username'], $data['password'], 36000); - if (strlen($rt) > 3) { - // 登录成功 - !$this->uid && $this->member_msg(fc_lang('绑定失败，请重新登录')); - // 绑定到此账号 - $user['uid'] = $this->uid; - $this->db->insert('member_oauth', $user); - $this->hooks->call_hook('member_login', $data); // 登录成功挂钩点 - $this->member_msg(dr_weixin_emoji($user['nickname']).'，'.fc_lang('登录成功').$rt, dr_member_url('home/index'), 1, 1); - } elseif ($rt == -1) { - $error1 = fc_lang('会员不存在'); - } elseif ($rt == -2) { - $error1 = fc_lang('密码不正确'); - } elseif ($rt == -3) { - $error1 = fc_lang('Ucenter注册失败'); - } elseif ($rt == -4) { - $error1 = fc_lang('Ucenter：会员名称不合法'); - } - } else { - // 注册 - $id = $this->member_model->register($data); - if ($id > 0) { - // 注册成功 - $data['uid'] = $this->uid; - $this->hooks->call_hook('member_register_after', $data); // 注册之后挂钩点 - // 注册后的登录 - $rt = $this->member_model->login($id, $data['password'], 86400, 0, 1); - strlen($rt) > 3 && $this->hooks->call_hook('member_login', $data); // 登录成功挂钩点 - // 绑定到此账号 - $user['uid'] = $id; - $this->db->insert('member_oauth', $user); - $this->member_msg(dr_weixin_emoji($user['nickname']).'，'.fc_lang('登录成功').$rt, dr_member_url('home/index'), 1, 1); - } elseif ($id == -1) { - $error = array('name' => 'username', 'msg' => fc_lang('该会员【%s】已经被注册', $data['username'])); - } elseif ($id == -2) { - $error = array('name' => 'email', 'msg' => fc_lang('邮箱格式不正确')); - } elseif ($id == -3) { - $error = array('name' => 'email', 'msg' => fc_lang('该邮箱【%s】已经被注册', $data['email'])); - } elseif ($id == -4) { - $error = array('name' => 'username', 'msg' => fc_lang('同一IP在限制时间内注册过多')); - } elseif ($id == -5) { - $error = array('name' => 'username', 'msg' => fc_lang('Ucenter：会员名称不合法')); - } elseif ($id == -6) { - $error = array('name' => 'username', 'msg' => fc_lang('Ucenter：包含不允许注册的词语')); - } elseif ($id == -7) { - $error = array('name' => 'username', 'msg' => fc_lang('Ucenter：Email格式有误')); - } elseif ($id == -8) { - $error = array('name' => 'username', 'msg' => fc_lang('Ucenter：Email不允许注册')); - } elseif ($id == -9) { - $error = array('name' => 'username', 'msg' => fc_lang('Ucenter：Email已经被注册')); - } elseif ($id == -10) { - $error = array('name' => 'phone', 'msg' => fc_lang('手机号码必须是11位的整数')); - } elseif ($id == -11) { - $error = array('name' => 'phone', 'msg' => fc_lang('该手机号码已经注册')); - } - $error2 = $error['msg']; - } - - $this->template->assign(array( - 'type' => $type, - 'code' => dr_authcode(dr_array2string($user), 'ENCODE'), - 'oauth' => $user, - 'error_1' => $error1, - 'error_2' => $error2, - 'regfield' => $MEMBER['setting']['regfield'], - )); - $this->template->display('oauth.html'); - exit; - } - - $config['url'] = SITE_URL.'index.php?s=member&c=api&m=oauth&id='.$appid; // 回调地址设置 - $this->load->library('OAuth2'); - - // OAuth - $oauth = $this->oauth2->provider($appid, $config); - - if (!$code) { - // 登录授权页 - try { - $oauth->authorize(); - } catch (OAuth2_Exception $e) { - $this->member_msg(fc_lang('OAuth授权错误').' _ '.$e); - } - } else { - // 回调返回数据 - try { - $user = $oauth->get_user_info($oauth->access($code)); - if (is_array($user) && $user['oid']) { - !$user['nickname'] && $user['nickname'] = substr($user['oid'], 0, 10); - $code = $this->member_model->OAuth_login($appid, $user); - if ($code == 'bang') { - // 绑定账号 - $this->template->assign(array( - 'type' => 1, - 'code' => dr_authcode(dr_array2string($user), 'ENCODE'), - 'oauth' => $user, - 'regfield' => $MEMBER['setting']['regfield'], - )); - $this->template->display('oauth.html'); - } else { - // 直接注册 - $this->member_msg(dr_weixin_emoji($user['nickname']).'，'.fc_lang('登录成功').$code, dr_member_url('home/index'), 1, 3); - } - } else { - $this->member_msg(fc_lang('OAuth回调错误: 获取用户信息失败')); - } - } catch (OAuth2_Exception $e) { - $this->member_msg(fc_lang('OAuth回调错误: 获取用户信息失败').' - '.$e); - } - } - } - - /** - * 更新模型浏览数 - */ - public function hits() { - - $id = (int)$this->input->get('id'); - $mid = (int)$this->input->get('mid'); - $mod = $this->get_cache('space-model', $mid); - if (!$mod) { - $data = $this->callback_json(array('html' => 0)); - echo dr_safe_replace(dr_safe_replace($this->input->get('callback', TRUE))).'('.$data.')';exit; - } - - $table = $this->db->dbprefix('space_'.$mod['table']); - $name = $table.'-space-hits-'.$id; - $hits = (int)$this->get_cache_data($name); - if (!$hits) { - $data = $this->db->where('id', $id)->select('hits')->get($table)->row_array(); - $hits = (int)$data['hits']; - } - - $hits++; - $this->set_cache_data($name, $hits, SYS_CACHE_SPACE); - $this->db->where('id', $id)->update($table, array('hits' => $hits)); - - $data = $this->callback_json(array('html' => $hits)); - echo dr_safe_replace(dr_safe_replace($this->input->get('callback', TRUE))).'('.$data.')';exit; - } - - -} \ No newline at end of file diff --git a/finecms/finecms/dayrui/controllers/member/Home.php b/finecms/finecms/dayrui/controllers/member/Home.php deleted file mode 100644 index 6d15499..0000000 --- a/finecms/finecms/dayrui/controllers/member/Home.php +++ /dev/null @@ -1,97 +0,0 @@ -get_cache('member'); - $error = NULL; - $field = array( - 'name' => array( - 'name' => fc_lang('姓名'), - 'ismain' => 0, - 'ismember' => 1, - 'fieldname' => 'name', - 'fieldtype' => 'Text', - 'setting' => array( - 'option' => array( - 'width' => 200, - ), - 'validate' => array( - 'xss' => 1, - 'required' => 0, - ) - ) - ), - 'phone' => array( - 'name' => fc_lang('手机号码'), - 'ismain' => 0, - 'ismember' => 1, - 'fieldname' => 'phone', - 'fieldtype' => 'Text', - 'setting' => array( - 'option' => array( - 'width' => 200, - ), - 'validate' => array( - 'xss' => 1, - 'required' => 0, - ) - ) - ), - ); - - - - - // 可用字段 - if ($MEMBER['field']) { - foreach ($MEMBER['field'] as $t) { - $field[] = $t; - } - } - - if (IS_POST) { - - $data = $this->validate_filter($field, $this->member); - - if (isset($data['error'])) { - $error = $data; - (IS_AJAX || IS_API_AUTH) && exit(dr_json(0, $error['msg'], $error['error'])); - $data = $this->input->post('data', TRUE); - } else { - $this->member_model->edit($data[0], $data[1]); - $this->attachment_handle($this->uid, $this->db->dbprefix('member') . '-' . $this->uid, $field, $this->member); - - $this->member_msg(fc_lang('操作成功，正在刷新...'), dr_member_url('home/index'), 1); - } - - } else { - $data = $this->member; - } - - $this->template->assign(array( - 'data' => $data, - 'field' => $field, - 'myfield' => $this->field_input($field, $data, FALSE, 'uid'), - 'result_error' => $error - )); - $this->template->display('index.html'); - - } - - - - -} \ No newline at end of file diff --git a/finecms/finecms/dayrui/controllers/member/Login.php b/finecms/finecms/dayrui/controllers/member/Login.php deleted file mode 100644 index 981c4ca..0000000 --- a/finecms/finecms/dayrui/controllers/member/Login.php +++ /dev/null @@ -1,205 +0,0 @@ -get_cache('member'); - - if (IS_POST) { - $data = $this->input->post('data', TRUE); - $back_url = dr_member_url('home/index'); - if ($MEMBER['setting']['logincode'] && !$this->check_captcha('code')) { - $error = fc_lang('验证码不正确'); - } elseif (!$data['password'] || !$data['username']) { - $error = fc_lang('输入不完整'); - } else { - $code = $this->member_model->login($data['username'], $data['password'], $data['auto'] ? 864000000 : $MEMBER['setting']['loginexpire']); - if (strlen($code) > 3) { - // 登录成功 - $data['uid'] = $this->uid; - $success = $code; - } elseif ($code == -1) { - $error = fc_lang('会员不存在'); - } elseif ($code == -2) { - $error = fc_lang('密码不正确'); - } elseif ($code == -3) { - $error = fc_lang('注册失败'); - } elseif ($code == -4) { - $error = fc_lang('会员名称不合法'); - } elseif ($code == -5) { - $error = fc_lang('uid同步失败'); - } elseif ($code == -404) { - $error = fc_lang('服务端网络连接失败'); - } else { - $error = fc_lang('登录失败'.$code); - } - } - if (IS_AJAX) { - $error && exit(dr_json(0, $error)); - $success && exit(json_encode(array( - 'status' => 1, - 'backurl' => $back_url, - 'isdebug' => $_GET['debug'], - 'syncurl' => dr_member_sync_url($success)))); - } - $success && $this->member_msg(fc_lang('登录成功').$success, $back_url, 1, $_GET['debug'] ? 99999 : 3); - exit('error'); - } else { - $back_url = $this->input->get('back') ? $this->input->get('back') : (isset($_SERVER['HTTP_REFERER']) ? (strpos($_SERVER['HTTP_REFERER'], 'login') !== false ? '' : $_SERVER['HTTP_REFERER']) : ''); - } - - $this->template->assign(array( - 'data' => $data, - 'code' => $MEMBER['setting']['logincode'], - 'back_url' => $back_url, - 'meta_title' => fc_lang('会员登录'), - 'result_error' => $error, - )); - $this->template->display('login.html'); - } - - /** - * 找回密码 - */ - public function find() { - - $step = max(1, (int)$this->input->get('step')); - $error = ''; - - if (IS_POST) { - switch ($step) { - case 1: - !$this->check_captcha('code') && $this->member_msg(fc_lang('验证码不正确')); - if ($uid = get_cookie('find')) { - $this->member_msg( - fc_lang('验证码发送成功，请注意查收'), - dr_member_url('login/find', array('step' => 2, 'uid' => $uid)), - 1 - ); - } else { - $name = $this->input->post('name', TRUE); - $name = in_array($name, array('email', 'phone')) ? $name : 'email'; - $value = $this->input->post('value', TRUE); - $data = $this->db - ->select('uid,username,randcode') - ->where($name, $value) - ->limit(1) - ->get('member') - ->row_array(); - if ($data) { - $randcode = dr_randcode(); - if ($name == 'email') { - $this->load->helper('email'); - $code = @file_get_contents(WEBPATH.'cache/email/find_password.html'); - !$this->sendmail($value, fc_lang('找回密码通知'), fc_lang($code, $data['username'], $randcode, $this->input->ip_address())) && $this->member_msg(fc_lang('邮件发送失败，请联系管理员检查邮件日志')); - set_cookie('find', $data['uid'], 300); - $this->db->where('uid', $data['uid'])->update('member', array('randcode' => $randcode)); - $this->member_msg(fc_lang('验证码发送成功，请注意查收'), dr_member_url('login/find', array('step' => 2, 'uid' => $data['uid'])), 1); - } else { - $result = $this->member_model->sendsms($value, fc_lang('尊敬的用户，您的本次验证码是：%s', $randcode)); - if ($result['status']) { - // 发送成功 - set_cookie('find', $data['uid'], 300); - $this->db->where('uid', (int)$data['uid'])->update('member', array('randcode' => $randcode)); - $this->member_msg(fc_lang('验证码发送成功，请注意查收'), dr_member_url('login/find', array('step' => 2, 'uid' => $data['uid'])), 1); - } else { - // 发送失败 - $this->member_msg($result['msg']); - } - } - } else { - $error = $name == 'phone' ? fc_lang('该手机号码尚未注册') : fc_lang('该邮箱尚未注册'); - } - } - break; - - case 2: - - !$this->check_captcha('code2') && $this->member_msg(fc_lang('验证码不正确')); - - $uid = (int)$this->input->get('uid'); - $code = (int)$this->input->post('code'); - - (!$uid || !$code) && $this->member_msg(fc_lang('输入不完整')); - - $data = $this->db - ->where('uid', $uid) - ->where('randcode', $code) - ->select('salt,uid,username,email') - ->limit(1) - ->get('member') - ->row_array(); - if (!$data) { - $this->db->where('uid', $uid)->update('member', array('randcode' => '')); - $this->member_msg(fc_lang('验证码不正确，请重新发送验证码'), dr_member_url('login/find')); - } - - $password1 = $this->input->post('password'); - $password2 = $this->input->post('password2'); - if ($password1 != $password2) { - $error = fc_lang('两次密码输入不一致'); - } elseif (!$password1) { - $error = fc_lang('密码不能为空'); - } else { - if (defined('UCSSO_API')) { - $rt = ucsso_edit_password($data['uid'], $password1); - // 修改失败 - if (!$rt['code']) { - $this->admin_msg(fc_lang($rt['msg'])); - } - } - // 修改密码 - $this->db->where('uid', $data['uid'])->update('member', array( - 'randcode' => 0, - 'password' => md5(md5($password1).$data['salt'].md5($password1)) - )); - $this->get_cache('MEMBER', 'setting', 'ucenter') && uc_user_edit($data['username'], '', $password1, '', 1); - $this->hooks->call_hook('member_edit_password', array('member' => $data, 'password' => $password1)); - $this->member_msg(fc_lang('密码修改成功'), dr_member_url('login/index'), 1); - } - break; - } - } - - $this->template->assign(array( - 'step' => $step, - 'error' => $error, - 'action' => 'find', - 'mobile' => $this->get_cache('member', 'setting','ismobile'), - 'meta_title' => fc_lang('找回密码通知'), - 'result_error' => $error, - )); - $this->template->display('find.html'); - } - - - /** - * 退出 - */ - public function out() { - if (IS_AJAX) { - exit(json_encode(array( - 'backurl' => SITE_URL, - 'syncurl' => dr_member_sync_url($this->member_model->logout())))); - } else { - $this->template->assign('member', ''); - $this->member_msg(fc_lang('您已经成功退出了').$this->member_model->logout(), SITE_URL, 1, 3); - } - } - -} \ No newline at end of file diff --git a/finecms/finecms/dayrui/controllers/member/Register.php b/finecms/finecms/dayrui/controllers/member/Register.php deleted file mode 100644 index f4611a8..0000000 --- a/finecms/finecms/dayrui/controllers/member/Register.php +++ /dev/null @@ -1,99 +0,0 @@ -get_cache('MEMBER'); - - - - // 判断是否开启注册 - if (!$MEMBER['setting']['register']) { - $this->member_msg(fc_lang('站点已经关闭了会员注册')); - } - - if (IS_POST) { - $data = $this->input->post('data', TRUE); - $back_url = dr_member_url('home/index'); - if ($MEMBER['setting']['regcode'] && !$this->check_captcha('code')) { - $error = array('name' => 'code', 'msg' => fc_lang('验证码不正确')); - } elseif ($result = $this->is_username($data['username'])) { - $error = array('name' => 'username', 'msg' => $result); - } elseif (!$data['password']) { - $error = array('name' => 'password', 'msg' => fc_lang('密码不能为空')); - } elseif ($data['password'] !== $data['password2']) { - $error = array('name' => 'password2', 'msg' => fc_lang('两次密码输入不一致')); - } elseif ($result = $this->is_email($data['email'])) { - $error = array('name' => 'email', 'msg' => $result); - } else { - $id = $this->member_model->register($data, 0); - if ($id > 0) { - // 注册成功 - $data['uid'] = $id; - $this->hooks->call_hook('member_register_after', $data); // 注册之后挂钩点 - // 注册后的登录 - $code = $this->member_model->login($id, $data['password'], $data['auto'] ? 8640000 : $MEMBER['setting']['loginexpire'], 0, 1); - - } elseif ($id == -1) { - $error = array('name' => 'username', 'msg' => fc_lang('该会员【%s】已经被注册', $data['username'])); - } elseif ($id == -2) { - $error = array('name' => 'email', 'msg' => fc_lang('邮箱格式不正确')); - } elseif ($id == -3) { - $error = array('name' => 'email', 'msg' => fc_lang('该邮箱【%s】已经被注册', $data['email'])); - } elseif ($id == -4) { - $error = array('name' => 'username', 'msg' => fc_lang('同一IP在限制时间内注册过多')); - } elseif ($id == -5) { - $error = array('name' => 'username', 'msg' => fc_lang('UCSSO：会员名称不合法')); - } elseif ($id == -6) { - $error = array('name' => 'username', 'msg' => fc_lang('UCSSO：包含不允许注册的词语')); - } elseif ($id == -7) { - $error = array('name' => 'username', 'msg' => fc_lang('UCSSO：Email格式有误')); - } elseif ($id == -8) { - $error = array('name' => 'username', 'msg' => fc_lang('UCSSO：Email不允许注册')); - } elseif ($id == -9) { - $error = array('name' => 'username', 'msg' => fc_lang('UCSSO：Email已经被注册')); - } elseif ($id == -10) { - $error = array('name' => 'phone', 'msg' => fc_lang('手机号码必须是11位的整数')); - } elseif ($id == -11) { - $error = array('name' => 'phone', 'msg' => fc_lang('该手机号码已经注册')); - } else { - $error = array('name' => 'username', 'msg' => fc_lang('注册失败')); - } - } - if (IS_AJAX) { - $error && exit(dr_json(0, $error['msg'])); - $id > 0 && exit(json_encode(array( - 'status' => 1, - 'backurl' => $back_url, - 'syncurl' => dr_member_sync_url($code)))); - } - $code && $this->member_msg(fc_lang('注册成功').$code, $back_url, 1, 3); - exit; - } else { - $data = array(); - } - - $this->template->assign(array( - 'data' => $data, - 'code' => $MEMBER['setting']['regcode'], - 'back_url' => $back_url, - 'meta_title' => fc_lang('会员注册'), - )); - $this->template->display('register.html'); - } -} \ No newline at end of file diff --git a/finecms/finecms/dayrui/core/M_Controller.php b/finecms/finecms/dayrui/core/M_Controller.php deleted file mode 100644 index ae79ea8..0000000 --- a/finecms/finecms/dayrui/core/M_Controller.php +++ /dev/null @@ -1,2351 +0,0 @@ -replace_lang = 1; - $this->load->database(); - $this->load->library('user_agent'); - - define('IS_AJAX', $this->input->is_ajax_request()); - define('IS_POST', $_SERVER['REQUEST_METHOD'] == 'POST' && count($_POST) ? TRUE : FALSE); - define('SYS_TIME', $_SERVER['REQUEST_TIME'] ? $_SERVER['REQUEST_TIME'] : time()); - define('SITE_PATH', '/'); - define('THEME_PATH', '/statics/'); - - // 全局化站点变量 - $config1 = require WEBPATH.'config/system.php'; // 加载网站系统配置文件 - !$config1['SYS_THUMB_DIR'] && $config1['SYS_THUMB_DIR'] = 'uploadfile/thumb'; - - // https模式 - if (isset($config1['SYS_HTTPS'])) { - define('SYS_HTTPS', intval($config1['SYS_HTTPS'])); - } else { - define('SYS_HTTPS', 0); - } - - $this->load->library('session'); - $domain = require WEBPATH.'config/domain.php'; // 加载站点域名配置文件 - $sitecfg = directory_map(WEBPATH.'config/site/'); // 加载全部站点的配置文件 - foreach ($sitecfg as $file) { - $id = (int)basename($file); - if (is_file(WEBPATH.'config/site/'.$file)) { - $this->site_info[$id] = require WEBPATH.'config/site/'.$file; - $this->site_info[$id]['SITE_ID'] = (int) $id; - $this->site_info[$id]['SITE_PC'] = $this->site_info[$id]['SITE_URL'] = dr_http_prefix(($this->site_info[$id]['SITE_DOMAIN'] ? $this->site_info[$id]['SITE_DOMAIN'] : DOMAIN_NAME).SITE_PATH); - $this->site_info[$id]['SITE_MURL'] = dr_http_prefix(($this->site_info[$id]['SITE_MOBILE'] ? $this->site_info[$id]['SITE_MOBILE'] : DOMAIN_NAME).SITE_PATH); - $this->site[$id] = $this->db; // 站点数据库对象 - } - } - unset($sitecfg); - - // 分析站点信息 - $siteid = (IS_ADMIN || $this->router->method == 'html') && $this->session->userdata('siteid') ? (int)$this->session->userdata('siteid') : 0; - if ($siteid && isset($this->site_info[$siteid])) { - // && isset($domain[DOMAIN_NAME]) - // 通过session来获取siteid - define('SITE_ID', $siteid); - } elseif (isset($domain[DOMAIN_NAME]) && isset($this->site_info[$domain[DOMAIN_NAME]])) { - // 通过域名来获取siteid - $siteid = (int)$domain[DOMAIN_NAME]; - $orthers = @explode(',', $this->site_info[$siteid]['SITE_DOMAINS']); - $this->site_info[$siteid]['SITE_M_URL'] = $this->site_info[$siteid]['SITE_PC'] = $this->site_info[$siteid]['SITE_URL']; // PC端为主域名 - $uri = isset($_SERVER['HTTP_X_REWRITE_URL']) && trim($_SERVER['REQUEST_URI'], '/') == SELF ? trim($_SERVER['HTTP_X_REWRITE_URL'], '/') : ($_SERVER['REQUEST_URI'] ? trim($_SERVER['REQUEST_URI'], '/') : ''); - if ($orthers && DOMAIN_NAME != $this->site_info[$siteid]['SITE_DOMAIN'] && in_array(DOMAIN_NAME, $orthers)) { - // 判断当前域名为“其他域名” - // 301 转向开启 - defined('SITE_URL_301') && SITE_URL_301 && redirect(dr_http_prefix($this->site_info[$siteid]['SITE_DOMAIN'].'/'.$uri), '', '301'); - $this->site_info[$siteid]['SITE_PC'] = $this->site_info[$siteid]['SITE_URL'] = dr_http_prefix(DOMAIN_NAME.'/'); - - } elseif (isset($this->site_info[$siteid]['SITE_MOBILE']) && $this->site_info[$siteid]['SITE_MOBILE']) { - // 当前网站存在移动端域名时 - if (DOMAIN_NAME == $this->site_info[$siteid]['SITE_MOBILE']) { - // 当此域名是移动端域名时重新赋值给主站URL - $this->site_info[$siteid]['SITE_URL'] = dr_http_prefix(DOMAIN_NAME.'/'); - $this->site_info[$siteid]['SITE_MOBILE'] = TRUE; - } elseif ($this->_is_mobile() - && $this->site_info[$siteid]['SITE_MOBILE_OPEN'] - && $this->site_info[$siteid]['SITE_MOBILE'] - && DOMAIN_NAME == $this->site_info[$siteid]['SITE_DOMAIN'] - && !IS_ADMIN) { - // 当网站开启强制定向时，并且存在移动端域名、URL是主站的域名、非后台 - redirect(dr_http_prefix($this->site_info[$siteid]['SITE_MOBILE'].'/'.$uri), '', '301'); - exit; - } - } elseif ($this->agent->is_mobile() && $this->site_info[$siteid]['SITE_MOBILE_OPEN']) { - // 识别移动端 - $this->site_info[$siteid]['SITE_MOBILE'] = TRUE; - } - define('SITE_ID', $siteid); - } else { - // 识别移动端 - if ($this->agent->is_mobile() && $this->site_info[1]['SITE_MOBILE_OPEN']) { - $this->site_info[1]['SITE_PC'] = $this->site_info[1]['SITE_URL']; - $this->site_info[1]['SITE_MOBILE'] = TRUE; - } - // 默认站点id - define('SITE_ID', 1); - } - - $config3 = array(); - $this->site_info[SITE_ID] && $config3 = array_merge($config1, $this->site_info[SITE_ID]); - - define('ADMIN_URL', dr_http_prefix(DOMAIN_NAME.'/')); - - // 默认文件上传目录 - $config3['SYS_UPLOAD_DIR'] = 'uploadfile'; - $config3['SYS_UPLOAD_PATH'] = WEBPATH.$config3['SYS_UPLOAD_DIR']; - $config3['SYS_ATTACHMENT_URL'] = $config3['SITE_URL'].$config3['SYS_UPLOAD_DIR']; - $config3['SYS_ATTACHMENT_URL'] = trim($config3['SYS_ATTACHMENT_URL'], '/').'/'; - $config3['UEDITOR_IMG_ID'] = md5($config3['SYS_ATTACHMENT_URL']); // 编辑器附件ID - - - // 将配置文件数组转换为常量 - foreach ($config3 as $var => $value) { - if ($var == 'SITE_MOBILE' && $value === TRUE && IS_ADMIN) { - $value = ''; - } elseif (($var == 'SITE_THEME' && $value =='SITE_THEME') - || ($var == 'SITE_TEMPLATE' && $value =='SITE_TEMPLATE')) { - $value = 'default'; - } elseif (strpos($value, 'SYS_CACHE') === 0) { - $value = (int)$value; - } - !defined($var) && define($var, $value); // 定义站点常量 - } - unset($config3, $config2, $config1); - - - // 定义模板目录 - define('TPLPATH', WEBPATH.'templates/'); - - // 定义pc端域名 - !defined('SITE_PC') && define('SITE_PC', SITE_URL); - - // 判断手机端与PC端模板 - $this->mobile = SITE_MOBILE === TRUE ? 1 : 0; - - // 是否移动端 - define('IS_MOBILE', $this->mobile); - - // 显示错误提示 - SYS_DEBUG && error_reporting(E_ALL ^ E_NOTICE); - - $this->config->set_item('language', SITE_LANGUAGE); // 网站语言 - date_default_timezone_set('Etc/GMT'.(SITE_TIMEZONE > 0 ? '-' : '+').abs(SITE_TIMEZONE)); // 设置时区 - - $this->load->model('system_model'); - - $this->load->model('member_model'); // 加载会员模型 - - $this->load->model('saler_model'); - - $this->load->model('customer_model'); - - $MEMBER = $this->get_cache('member'); - - if ($MEMBER['setting']['ucsso'] && is_file(WEBPATH.'api/ucsso/config.php')) { - include WEBPATH.'api/ucsso/client.php'; - } - - // 获取当前的登录记录 - $this->uid or $this->uid = (int)$this->member_model->member_uid(); - $this->member = $this->member_model->get_member($this->uid); - - // 验证账号cookie的有效性 - if (!$this->member_model->check_member_login()) { - $this->uid = 0; - $this->member = array(); - } - - // 会员不存在时，uid设置为0 - !$this->member && $this->uid = 0; - - // 全部模型 - $this->module = $this->get_cache('module'); - - define('MEMBER_URL', SITE_URL.'index.php?s=member'); - define('MEMBER_PATH', '/'); - - // 网站风格地址 - !defined('HOME_THEME_PATH') && define('HOME_THEME_PATH', strpos(SITE_THEME, 'http') === 0 ? trim(SITE_THEME, '/').'/' : THEME_PATH.SITE_THEME.'/'); - - $this->load->library('template'); - $this->template->mobile = $this->mobile; - - // 当网站处于关闭状态时，非管理员无法访问 - defined('SITE_CLOSE') && SITE_CLOSE && !IS_ADMIN - && !$this->member['adminid'] - && $this->router->class != 'api' - && !($this->router->class == 'home' && $this->router->method == 'captcha') - && $this->msg(SITE_CLOSE_MSG); - unset($url, $theme, $template); - - if (defined('IS_MEMBER') && IS_MEMBER) { - // 会员部分 - $this->load->helper(array('system', 'url')); - $uri = trim(str_replace('member/', '/', str_replace('/member/', '/', $this->duri->uri(NULL, TRUE))), '/'); - - - $this->template->assign(array( - 'uid' => $this->uid, - 'regverify' => $MEMBER['setting']['regverify'], - )); - - // 登录判断 - if (!defined('DR_UEDITOR') - && !defined('DR_PAY_ID') - && !defined('DISCUZ_ROOT') - && !in_array($this->router->class, array('register', 'login', 'api', 'sns'))) { - $url = dr_member_url('login/index', array('backurl' => urlencode(dr_now_url()))); - // 没有登录时 - !$this->member && $this->member_msg(fc_lang('会话超时，请重新登录').$this->member_model->logout(), $url); - } - - if (defined('DR_UEDITOR') && is_dir(WEBPATH.'api/'.DR_UEDITOR)) { - require WEBPATH.'api/'.DR_UEDITOR.'/php/controller.php'; - exit; - } - - } elseif (IS_ADMIN) { - - $this->load->helper(array('system', 'url')); - $uri = $this->duri->uri(); - $this->admin = $this->is_admin_login(); - - // 权限判断 - !$this->is_auth($uri) - && (IS_AJAX ? exit(fc_lang('您无权限操作(%s)', $uri)) : $this->admin_msg(fc_lang('您无权限操作(%s)', $uri))); - - $this->template->assign('admin', $this->admin); - - // 后台性能分析 - SYS_DEBUG && !IS_AJAX && IS_PC && $this->router->class != 'api' && $this->output->enable_profiler(TRUE); - - } - - // 销毁变量 - unset($MOD, $MEMBER); - - $this->template->ci = $this; - $this->template->assign(array( - 'get' => $this->input->get(NULL, TRUE), - 'member' => $this->member, - 'site_info' => $this->site_info, - 'is_mobile' => $this->template->mobile, - )); - - - $this->hooks->call_hook('finecms-init'); // 挂钩点 - } - - - - protected function _is_mobile() { - - if (isset ($_SERVER['HTTP_X_WAP_PROFILE'])) { - // 如果有HTTP_X_WAP_PROFILE则一定是移动设备 - return true; - } elseif (isset ($_SERVER['HTTP_USER_AGENT'])) { - // 判断手机发送的客户端标志,兼容性有待提高 - $clientkeywords = array( - 'nokia', - 'sony', - 'ericsson', - 'mot', - 'samsung', - 'htc', - 'sgh', - 'lg', - 'sharp', - 'sie-', - 'philips', - 'panasonic', - 'alcatel', - 'lenovo', - 'iphone', - 'ipod', - 'blackberry', - 'meizu', - 'android', - 'netfront', - 'symbian', - 'ucweb', - 'windowsce', - 'palm', - 'operamini', - 'operamobi', - 'openwave', - 'nexusone', - 'cldc', - 'midp', - 'wap', - 'mobile' - ); - // 从HTTP_USER_AGENT中查找手机浏览器的关键字 - if (preg_match("/(" . implode('|', $clientkeywords) . ")/i", strtolower($_SERVER['HTTP_USER_AGENT']))){ - return true; - } - } - // 协议法，因为有可能不准确，放到最后判断 - if (isset ($_SERVER['HTTP_ACCEPT'])) { - // 如果只支持wml并且不支持html那一定是移动设备 - // 如果支持wml和html但是wml在html之前则是移动设备 - if ((strpos($_SERVER['HTTP_ACCEPT'], 'vnd.wap.wml') !== false) && (strpos($_SERVER['HTTP_ACCEPT'], 'text/html') === false || (strpos($_SERVER['HTTP_ACCEPT'], 'vnd.wap.wml') < strpos($_SERVER['HTTP_ACCEPT'], 'text/html')))) - { - return true; - } - } - return false; - } - - public function clear_cache($name) { - - if (!$name) { - return; - } - - $name = strtolower($name); - - // 模型缓存时，清除所有相关文件 - if ($name == 'module') { - $data = $this->get_cache('module'); - if ($data) { - foreach ($data as $site => $t) { - if ($t) { - foreach ($t as $m) { - $tname = 'module-'.$site.'-'.$m; - SYS_MEMCACHE && $this->cache->memcached->is_supported() && $this->cache->memcached->delete(SYS_KEY.$tname); - } - } - } - } - } - - // 删除文件缓存 - $this->cache->file->delete($name); - - return; - } - - - public function get_cache() { - - $param = func_get_args(); - if (!$param) { - return NULL; - } - - // 取第一个参数作为缓存变量名称 - $data = $model = NULL; - $name = strtolower(array_shift($param)); - /* - isset($param[0]) - && strpos($param[0], '_model') !== false - && is_file(FCPATH.'dayrui/models/'.ucfirst($param[0]).'.php') && $model = strtolower(array_shift($param)); - */ - - if (!$data) { - $var = 'cache-'.$name; - if (isset($this->$var) && $this->$var) { - // 读取全局变量 - $data = $this->$var; - } else { - // 读取本地文件缓存数据 - $data = $this->$var = $this->dcache->get($name); - } - } - - if (!$param) { - return $data; - } - - $var = ''; - foreach ($param as $v) { - $var.= '[\''.dr_safe_replace($v).'\']'; - } - - $return = NULL; - @eval('$return = $data'.$var.';'); - - return $return; - } - - - public function get_cache_data($name) { - - if (!$name) { - return NULL; - } elseif (defined('SYS_AUTO_CACHE') && !SYS_AUTO_CACHE) { - // 禁用缓存 - return NULL; - } - - - return defined('SYS_MEMCACHE') && SYS_MEMCACHE && $this->cache->memcached->is_supported() ? $this->cache->memcached->get(SYS_KEY.$name) : @$this->cache->file->get($name); - } - - - public function set_cache_data($name, $data, $ttl = 10) { - - if (defined('SYS_AUTO_CACHE') && !SYS_AUTO_CACHE) { - // 禁用缓存 - return $data; - } - - $ttl = (int)$ttl; - - if (!$name || !$ttl) { - return $data; - } - - defined('SYS_MEMCACHE') && SYS_MEMCACHE && $this->cache->memcached->is_supported() ? $this->cache->memcached->save(SYS_KEY.$name, $data, $ttl) : $this->cache->file->save($name, $data, $ttl); - - return $data; - } - - - - public function is_auth($uri) { - - return TRUE; - } - - // 获取表字段结构 - public function get_table_field($table) { - - $field = $this->get_cache_data('field-'.$table); - if (!$field) { - $this->load->model('system_model'); - $tableinfo = $this->system_model->cache(); // 表结构缓存 - $field = $tableinfo[$table]['field']; - $this->set_cache_data('field-'.$table, $field, 3600); - } - - return $field; - } - - // 获取自定义控制器 - public function get_sysc($id) { - return $this->db->where('id', $id)->limit(1)->get('controller')->row_array(); - } - - // 服务器ip地址 - protected function _get_server_ip() { - - if (isset($_SERVER['SERVER_ADDR']) - && $_SERVER['SERVER_ADDR'] - && $_SERVER['SERVER_ADDR'] != '127.0.0.1') { - return $_SERVER['SERVER_ADDR']; - } - - return gethostbyname($_SERVER['HTTP_HOST']); - } - - /** - * 后台操作界面中的顶部导航菜单 - * - * @param array $menu - * @return string - */ - protected function get_menu_v3($menu) { - - if (!$menu) { - return NULL; - } - - $_i = 1; - $_cur = ''; // 表示当前菜单 - $_uri = $this->duri->uri(1); // 当前uri - $_name = ''; // 表示当前菜单名称 - $_link = ''; - $_first = ''; // 第一个菜单的名称 - $_quick = array(); // 作为快捷菜单 - foreach ($menu as $name => $t) { - $uri = $t[0]; - $uri = trim($uri, '/'); // 格式菜单uri - if (!$name || !$uri) { - continue; - } - // 获取URL - if (substr($uri, (int)strpos($uri, '_js')) == '_js') { - $uri = substr($uri, 0, -3); - $url = dr_dialog_url($this->duri->uri2url($uri), 'add'); - } elseif (strpos($uri, 'javascript') === 0) { - $url = $uri; - } elseif (strpos($uri, SELF) !== FALSE) { - $url = $uri; - } else { - $url = $this->duri->uri2url($uri); - } - // 验证URI权限 - if (!$this->is_auth($uri)) { - continue; - } - // 判断选中的当前菜单 - if ($_i > 1 && $this->get_menu_calss($menu, $uri, $_uri)) { - $_cur = $name; - $class = ' class="blue"'; - } elseif ($_i == 1) { - $class = ' class="{MARK}"'; - } else { - $class = ''; - } - $_first = $_i == 1 ? $name : $_first; - // 快捷菜单 - $_quick[] = array( - 'url' => $url, - 'name' => $name, - 'icon' => '', - ); - // 生成链接 - $_link.= '

'.($t[1] ? ' ' : '').$name.'

'; - $_i ++; - } - - // 修改菜单时 - if (!$_cur && $this->router->method == 'edit') { - $_link.= '

'.fc_lang('修改').' '; - $_cur = fc_lang('修改'); - } - - if (!$_cur) { - $_link = str_replace('{MARK}', 'blue', $_link); - !$_name && $_name = $_first; - } else { - $_name = $_cur; - } - - return array( - 'name' => $_name, - 'link' => $_link, - 'quick' => $_quick, - ); - } - - /** - * 后台操作界面中的顶部导航菜单 - * - * @param array $menu - * @return string - */ - protected function get_menu($menu) { - - if (!$menu) { - return NULL; - } - - $_i = 0; - $_str = ''; - $_uri = $this->duri->uri(1); // 当前uri - $_mark = TRUE; - - foreach ($menu as $name => $t) { - if (is_array($t)) { - $uri = $t[0]; - $name = ' '.$name; - } else { - $uri = $t; - } - $uri = trim($uri, '/'); - if (!$name || !$uri) { - continue; - } - $class = ''; - if (strpos($uri, '_js') !== FALSE) { - $uri = substr($uri, 0, -3); - $url = dr_dialog_url($this->duri->uri2url($uri), 'add'); - } elseif (strpos($uri, 'javascript') === 0) { - $url = $uri; - } else { - $url = $this->duri->uri2url($uri); - $class = ' class="onloading '.(!$_i ? '{FIR}' : '').'"'; - } - if (!$this->is_auth($uri)) { - continue; - } - $mark = $_i == 0 ? '{MARK}' : ''; - // 判断选中 - if ($this->get_menu_calss($menu, $uri, $_uri)) { - $_mark = FALSE; - $class = ' class="onloading on"'; - } - $class = strpos($url, 'target') ? '' : $class; - $_str.= ''.$name.'|'; - $_i ++; - } - - if ($_mark && $this->router->method == 'edit') { - $_str.= ''.fc_lang('修改').'|'; - $_mark = FALSE; - } - - $_str = $_mark ? str_replace('{FIR}', 'on', $_str) : $_str; - - return $_mark ? str_replace('{MARK}', ' class="on"', $_str) : str_replace('{MARK}', '', $_str); - } - - private function get_menu_calss($menu, $uri, $_uri) { - - if ($uri == $_uri) { - return TRUE; - } - - if (!in_array($_uri, $menu)) { - if (@strpos($_uri, $uri) === FALSE) { - return FALSE; - } - $uri_arr = explode('/', $_uri); - $uri_arr = array_slice($uri_arr, 0, -2); - $__uri = implode('/', $uri_arr); - if (in_array($__uri, $menu) && $__uri == $uri) { - return TRUE; - } - if ($this->get_menu_calss($menu, $uri, $__uri)) { - return TRUE; - } - if (strpos($__uri, $uri) === 0) { - return TRUE; - } - } - - } - - /** - * 用于后台的分页 - */ - protected function get_pagination($url, $total) { - - $this->load->library('pagination'); - - $config['base_url'] = $url; - $config['per_page'] = SITE_ADMIN_PAGESIZE; - $config['next_link'] = fc_lang('下一页'); - $config['prev_link'] = fc_lang('上一页'); - $config['last_link'] = fc_lang('最后一页'); - $config['first_link'] = fc_lang('第一页'); - $config['total_rows'] = $total; - $config['cur_tag_open'] = ''; - $config['cur_tag_close'] = ''; - $config['use_page_numbers'] = TRUE; - $config['query_string_segment'] = 'page'; - - $this->pagination->initialize($config); - - - return $this->pagination->create_links(); - } - - /** - * 会员中心分页 - */ - public function get_member_pagination($url, $total) { - - $this->load->library('pagination'); - - $config = array(); - is_file(FCPATH.'module/member/config/pagination.php') ? include FCPATH.'module/member/config/pagination.php' : include WEBPATH.'config/pagination.php'; - - $page = $config['pagination']; - $page['base_url'] = $url; - $page['per_page'] = $this->pagesize; - $page['total_rows'] = $total; - $page['use_page_numbers'] = TRUE; - $page['query_string_segment'] = 'page'; - - $this->pagination->initialize($page); - - return $this->pagination->create_links(); - } - - /** - * 后台登录判断，返回当前登录用户信息 - * - * @return void - */ - protected function is_admin_login() { - - if (IS_ADMIN && ($this->router->class == 'login' || $this->router->method == 'login')) { - return FALSE; - } - - $uid = (int) $this->session->userdata('uid'); - $admin = (int) $this->session->userdata('admin'); - if ($this->uid == FALSE - || $uid != $this->uid - || $admin != $uid) { - if (IS_AJAX) { - exit(fc_lang('登录超时')); - } elseif (IS_ADMIN) { - redirect(ADMIN_URL.dr_url('login/index', array('backurl' => urlencode(dr_now_url()))), 'refresh'); - } - return FALSE; - } - - $data = $this->member_model->get_admin_member($this->uid, 1); - if (!is_array($data)) { - if (IS_ADMIN) { - if ($data == 0) { - IS_AJAX ? exit(dr_json(0, fc_lang('会员不存在'))) : $this->admin_msg(fc_lang('会员不存在')); - } elseif ($data == -3) { - IS_AJAX ? exit(dr_json(0, fc_lang('您无权限登录管理平台'))) : $this->admin_msg(fc_lang('您无权限登录管理平台')); - } elseif ($data == -4) { - IS_AJAX ? exit(dr_json(0, fc_lang('您无权限登录该站点'))) : $this->admin_msg(fc_lang('您无权限登录该站点')); - } - } else { - return $data; - } - } - - return $data; - } - - // 返回json格式 - public function callback_json($data) { - - // 自定义返回名称 - $return = $this->input->get('return', true); - if (isset($data['error']) && !isset($data['msg'])) { - $data['msg'] = $data['error']; - unset($data['error']); - } - - if ($return) { - $temp = $data; - $data = array(); - foreach ($temp as $i => $t) { - $data[$i.'_'.$return] = $t; - } - } - - return json_encode($data); - } - - /** - * 后台提示消息显示 - * - * @param string $msg 提示信息 - * @param string $url 转向地址 - * @param int $mark 标示符号1：成功；0：失败；2：等待 - * @param int $time 等待时间 - * @return void - */ - public function admin_msg($msg, $url = '', $mark = 0, $time = 1) { - - IS_AJAX && exit(dr_json(($mark ? 1 : 0), $msg, $url)); - $this->template->assign(array( - 'msg' => $msg, - 'url' => $this->security->xss_clean($url), - 'time' => $time, - 'mark' => $mark, - 'cache_url' => IS_ADMIN && IS_PC ? $this->_cache_url() : array(), - )); - $this->template->display('msg.html', 'admin'); - exit; - } - - /** - * 会员提示消息显示 - * - * @param string $msg 提示信息 - * @param string $url 转向地址 - * @param int $mark 标示符号1：成功；0：失败；2：等待 - * @param int $time 等待时间 - * @param bool $ajax 是否ajax提交显示 - * @return void - */ - public function member_msg($msg, $url = '', $mark = 0, $time = 1, $ajax = FALSE) { - - // 当指定为ajax提交或者系统提交状态为ajax则返回json数据 - if ($ajax || IS_AJAX) { - exit(dr_json(($mark ? 1 : 0), $msg, $url)); - } else { - $this->template->assign(array( - 'msg' => $msg, - 'url' => $this->security->xss_clean($url), - 'time' => $time, - 'mark' => $mark, - 'meta_name' => fc_lang('提示信息') - )); - IS_MEMBER ? $this->template->display('msg.html', 'member') : $this->template->display('msg.html'); - } - exit; - } - - /** - * 前端提示消息显示 - * - * @param string $msg 提示信息 - * @param string $url 转向地址 - * @param int $mark 标示符号1：成功；0：失败；2：等待 - * @param int $time 等待时间 - * @return void - */ - public function msg($msg, $url = '', $mark = 0, $time = 1) { - - IS_AJAX && exit(dr_json(($mark ? 1 : 0), $msg, $url)); - $this->template->assign(array( - 'msg' => $msg, - 'url' => $this->security->xss_clean($url), - 'time' => $time, - 'mark' => $mark - )); - $this->template->display('msg.html', '/'); - - exit; - } - - /** - * 迷你提示消息显示 - * - * @param string $msg 提示信息 - * @param string $url 转向地址 - * @param int $mark 标示符号1：成功；0：失败；2：等待 - * @param int $time 等待时间 - * @return void - */ - public function mini_msg($msg, $url = '', $mark = 0, $time = 1) { - $this->template->assign(array( - 'msg' => $msg, - 'url' => $this->security->xss_clean($url), - 'time' => $time, - 'mark' => $mark - )); - $this->template->display('mini_msg.html', 'admin'); - exit; - } - - /** - * 付款提示消息显示 - * - * @param string $msg 提示信息 - * @param string $url 转向地址 - * @param intval $mark 标示符号1：成功；0：失败；2：等待 - * @return void - */ - protected function pay_msg($msg, $url = '', $mark = 0) { - $this->template->assign(array( - 'url' => $this->security->xss_clean($url), - 'msg' => $msg, - 'mark' => $mark, - )); - $this->template->display('pay_msg.html'); - exit; - } - - /** - * 验证码验证 - * - * @param string $id 验证码表单的name - * @return bool - */ - protected function check_captcha($id) { - - if (isset($_POST['geetest_challenge']) - && isset($_POST['geetest_validate'])) { - require FCPATH.'dayrui/libraries/Geetestlib.php'; - $GtSdk = new GeetestLib(); - if ($this->session->userdata('gtserver') == 1) { - $result = $GtSdk->validate( - $_POST['geetest_challenge'], - $_POST['geetest_validate'], - $_POST['geetest_seccode'] - ); - if ($result == TRUE) { - return TURE; - } else if ($result == FALSE) { - return FALSE; - } else { - return FALSE; - } - }else{ - if ($GtSdk->get_answer($_POST['geetest_validate'])) { - return TURE; - }else{ - return FALSE; - } - } - } else { - $data = $this->input->post($id); - $data = $data ? $data : $this->input->get($id); - if (!$data) { - return FALSE; - } - $code = $this->session->userdata('captcha'); - if (strtolower($data) == $code) { - $this->session->unset_userdata('captcha'); - return TRUE; - } - } - - return FALSE; - } - - /** - * 验证码 - */ - public function captcha() { - $this->load->library('captcha'); - $this->captcha->width = $this->input->get('width') ? $this->input->get('width') : 80; - $this->captcha->height = $this->input->get('height') ? $this->input->get('height') : 30; - $this->session->unset_userdata('captcha'); - $this->session->set_userdata('captcha', $this->captcha->get_code()); - $this->captcha->doimage(); - } - - /** - * 获取系统运行信息 - * - * @return string - */ - public function get_system_run_info() { - return dr_lang( - '页面执行时间%s秒，共%s个查询语句，消耗内存%s', - $this->benchmark->elapsed_time('total_execution_time_start', 'total_execution_time_end'), - count($this->db->queries), - str_replace(' ', '', dr_format_file_size(memory_get_usage() / 4)) - ); - } - - /** - * 表单提交数据验证和过滤 - * - * @param array $_field 字段 - * @param array $_data 修改前的数据 - * @return array - */ - protected function validate_filter($_field, $_data = array()) { - - if (!$_field) { - return; - } - - $this->_data = $_data; - $this->syn_content = $this->post = $this->data = array(); - $this->load->library('Dfield'); - $this->load->library('Dfilter'); - $this->load->library('Dvalidate'); - - foreach ($_field as $field) { - // 前端字段筛选 - if (!IS_ADMIN && !$field['ismember']) { - continue; - } - // 验证字段对象的有效性 - $obj = $this->dfield->get($field['fieldtype']); - if (!$obj) { - continue; - } - $name = $field['fieldname']; - $validate = $field['setting']['validate']; - // 禁止修改字段筛选 - if (IS_MEMBER && $validate['isedit'] && isset($_data[$name]) && $_data[$name]) { - $this->post[$name] = $_data[$name]; - $obj->insert_value($field); // 获取入库值 - continue; - } - // 编辑器默认关闭xss - $validate['xss'] = !isset($validate['xss']) && $field['fieldtype'] == 'Ueditor' ? 1 : $validate['xss']; - // 从表单获取值 - $this->post[$name] = $value = $this->input->post("data[$name]", $validate['xss'] ? FALSE : TRUE); - // 验证必填字段 - if ($field['fieldtype'] != 'Group' - && isset($validate['required']) - && $validate['required']) { - // 验证值为空 - if ($value == '') { - return array('error' => $name, 'msg' => fc_lang('%s不能为空！', $field['name'])); - } - // 当类别为联动时判定0值 - if ($field['fieldtype'] == 'Linkage' && !$value) { - return array('error' => $name, 'msg' => fc_lang('%s不能为空！', $field['name'])); - } - // 正则验证 - if (isset($validate['pattern']) - && $validate['pattern'] - && !preg_match($validate['pattern'], $value)) { - return array('error' => $name, 'msg' => $field['name'].'：'.($validate['errortips'] ? $validate['errortips'] : fc_lang('格式不正确'))); - } - } - // 函数/方法校验 - if (isset($validate['check']) && $validate['check']) { - if (strpos($validate['check'], '_') === 0) { - // 方法格式：_方法名称[:现存数据字段,参数2...] - list($method, $_param) = explode(':', str_replace('::', ':', $validate['check'])); - $method = substr($method, 1); - if (method_exists($this->dvalidate, $method)) { - $param['value'] = $value; - if ('check_member' == $method && $value == 'guest') { - // 游客不验证 - } else { - if ($_param && $_value = explode(',', $_param)) { - foreach ($_value as $t) { - $param[$t] = isset($_POST['data'][$t]) ? $this->input->post("data[$t]") : $t; - } - } - if (call_user_func_array(array($this->dvalidate, $method), $param)) { - return array('error' => $name, 'msg' => $field['name'].'：'.fc_lang('格式校验不正确')); - } - } - } else { - log_message('error', "校验方法 $method 不存在！"); - } - } else { - // 函数格式：函数名称[:现存数据字段,参数2...] - list($func, $_param) = explode(':', str_replace('::', ':', $validate['check'])); - if (function_exists($func)) { - $param['value'] = $value; - if ($_param && $_value = explode(',', $_param)) { - foreach ($_value as $t) { - $param[$t] = isset($_POST['data'][$t]) ? $this->input->post("data[$t]") : $t; - } - } - if (call_user_func_array($func, $param)) { - return array('error' => $name, 'msg' => $field['name'].'：'.fc_lang('格式校验不正确')); - } - } else { - log_message('error', "校验函数 $func 不存在！"); - } - } - } - // 过滤函数 - if (isset($validate['filter']) && $validate['filter']) { - if (strpos($validate['filter'], '_') === 0) { - // 方法格式：_方法名称[:现存数据字段,参数2...] - list($method, $_param) = explode(':', str_replace('::', ':', $validate['filter'])); - $method = substr($method, 1); - if (method_exists($this->dfilter, $method)) { - $param['value'] = $value; - if ($_param && $_value = explode(',', $_param)) { - foreach ($_value as $t) { - $param[$t] = isset($_POST['data'][$t]) ? $this->input->post("data[$t]") : $t; - } - } - // 开始过滤 - $this->post[$name] = call_user_func_array(array($this->dfilter, $method), $param); - } else { - log_message('error', "过滤方法 $method 不存在！"); - } - } else { - // 函数格式：函数名称[:现存数据字段,参数2...] - list($func, $_param) = explode(':', str_replace('::', ':', $validate['filter'])); - if (function_exists($func)) { - $param['value'] = $value; - if ($_param && $_value = explode(',', $_param)) { - foreach ($_value as $t) { - $param[$t] = isset($_POST['data'][$t]) ? $this->input->post("data[$t]") : $t; - } - } - // 开始过滤 - $this->post[$name] = call_user_func_array($func, $param); - } else { - log_message('error', "过滤函数 $func 不存在！"); - } - } - } - // 判断表字段值的唯一性 - if ($field['ismain'] - && isset($field['setting']['option']['unique']) - && $field['setting']['option']['unique']) { - if ($this->db->where('id<>', (int)$_data['id'])->where($name, $this->post[$name])->count_all_results(SITE_ID.'_'.$this->mid)) { - return array('error' => $name, 'msg' => fc_lang('%s已经存在', $field['name'])); - } - } - $obj->insert_value($field); // 获取入库值 - if ($field['fieldtype'] == 'Baidumap') { - $this->data[$field['ismain']][$name.'_lng'] = (double)$this->data[$field['ismain']][$name.'_lng']; - $this->data[$field['ismain']][$name.'_lat'] = (double)$this->data[$field['ismain']][$name.'_lat']; - } else { - if (strpos($field['setting']['option']['fieldtype'], 'INT') !== FALSE) { - $this->data[$field['ismain']][$name] = (int)$this->data[$field['ismain']][$name]; - } elseif ($field['setting']['option']['fieldtype'] == 'DECIMAL' - || $field['setting']['option']['fieldtype'] == 'FLOAT') { - $this->data[$field['ismain']][$name] = (double)$this->data[$field['ismain']][$name]; - } - } - } - //echo '

'; print_r($this->data);exit;
-        unset($this->post, $this->_data);
-        return $this->data;
-    }
-
-    /**
-     * 表单提交数据后执行的方法
-     *
-     * @param	intval	$id		主键id
-     * @param	array	$_field	字段
-     * @param	array	$_data	修改后的数据
-     * @return  array
-     */
-    protected function validate_table($id, $_field, $_data = array()) {
-
-        if (!$_field) {
-            return;
-        }
-
-        $this->data = $_data;
-        $this->load->library('Dfield', array(APP_DIR));
-        foreach ($_field as $field) {
-            // 验证字段对象的有效性
-            $obj = $this->dfield->get($field['fieldtype']);
-            if (!$obj) {
-                continue;
-            }
-            // 执行脚本
-            $obj->insert_last_value($id, $_data[$field['ismain']][$field['fieldname']], $field);
-        }
-    }
-
-    /**
-     * 附件处理
-     *
-     * @param	intval	$uid		会员uid
-     * @param	array	$field		表字段
-     * @param	string	$related	使用源的标识（表名-ID1-ID2...）
-     * @param	array	$_data		原数据
-     * @param	bool	$update		是否更新原附件
-     * @return	NULL
-     */
-    public function attachment_handle($uid, $related, $field, $_data = NULL, $update = TRUE) {
-
-        if (!$field) {
-            return NULL;
-        }
-
-        // 当前POST的数据
-        $attach = array();
-        $attach_id = array();
-        $this->load->model('attachment_model');
-        $this->load->library('Dfield', array(APP_DIR));
-
-        // 查询使用的附件
-        foreach ($field as $f) {
-            // 加载字段处理对象
-            $obj = $this->dfield->get($f['fieldtype']);
-            if (!$obj) {
-                continue;
-            }
-            $files = $obj->get_attach_id($this->data[$f['ismain']][$f['fieldname']]);
-            $files && $attach_id = $attach_id ? array_merge($attach_id, $files) : $files;
-        }
-
-        // 筛选删除的附件
-        foreach ($field as $f) {
-            // 加载字段处理对象
-            $obj = $this->dfield->get($f['fieldtype']);
-            if (!$obj) {
-                continue;
-            }
-            // 通过附件处理方法获得增加和删除的附件
-            list($add_id, $del_id) = $obj->attach($this->data[$f['ismain']][$f['fieldname']], $_data[$f['fieldname']]);
-            // 百度编辑器时暂时不同步删除附件，可能会出现误删除情况
-            $f['fieldtype'] == 'Ueditor' && $del_id = array();
-            // 删除附件
-            if ($del_id) {
-                foreach ($del_id as $id) {
-                    if ($id && $update && !in_array($id, $attach_id)) {
-                        $fj = get_attachment($id);
-                        $log = dr_now_url().'  --->>>  删除附件('.$id.'#'.$related.'#'.$f['fieldname'].')：'.$fj['attachment'];
-                        $this->system_log($log, 1); // 强制写入后台日志
-                        $this->attachment_model->delete_for_handle($uid, $related, $id);
-                    }
-                }
-            }
-            // 无新增附件时跳过
-            if (!$add_id) {
-                continue;
-            }
-            $attach = $attach ? array_merge($attach, $add_id) : $add_id;
-        }
-
-        $attach = $attach ? array_merge($attach, $attach_id) : $attach_id;
-        if (count($attach) == 0) {
-            return NULL;
-        }
-
-        // 更新至已用附件表
-        $this->attachment_model->replace_attach($uid, $related, array_unique($attach));
-
-        unset($this->data);
-
-        return NULL;
-    }
-
-
-    /**
-     * 附件归属替换
-     *
-     * @param	intval	$uid		会员uid
-     * @param	intval	$id			使用源id
-     * @param	string	$related	使用源表名称
-     * @return	NULL
-     */
-    protected function attachment_replace($uid, $id, $related) {
-
-        if (!$uid || !$id || !$related) {
-            return NULL;
-        }
-
-        $data = $this->db->where('related', $related.'_verify-'.$id)->select('id,tableid')->get('attachment')->result_array();
-        if (!$data) {
-            return NULL;
-        }
-
-        foreach ($data as $t) {
-            $this->db->where('id', $t['id'])->update('attachment', array('related' => $related.'-'.$id));
-            $this->db->where('id', $t['id'])->update('attachment_'.(int)$t['tableid'], array('related' => $related.'-'.$id));
-        }
-
-        return NULL;
-    }
-
-    /**
-     * 判断站点表是否重复
-     *
-     * @param	string	$tablename
-     * @return	bool
-     */
-    public function site_table_exitis($tablename) {
-
-        $num = $this->db->where('dirname', $tablename)->count_all_results('module');
-        if ($num) {
-            return TRUE;
-        }
-
-        // 库中筛选
-        $table = $this->system_model->cache();
-        if (isset($table[$this->db->dbprefix($tablename)])) {
-            return TRUE;
-        }
-
-        return FALSE;
-    }
-
-    /**
-     * 字段输出表单（新版本格式）
-     *
-     * @param	array	$field	字段数组
-     * @param	array	$data	表单值
-     * @param	bool	$cat	是否显示栏目附加字段
-     * @param	string	$id		id字符串
-     * @param	string	$html   html布局格式
-     * @param	bool	$is_diy	是否仅输出自定义输出字段
-     * @return	string
-     */
-    public function new_field_input($field, $data = NULL, $cat = FALSE, $id = 'id', $html = '', $is_diy = 0) {
-
-        if (!$field) {
-            return '';
-        }
-
-        $id = $id ? $id : 'id';
-        $mymerge = $merge = $group = $diyfield = array();
-        $myfield = $mygroup = $mark = '';
-
-
-        // 分组字段筛选
-        foreach ($field as $t) {
-            if ($t['fieldtype'] == 'Group'
-                && preg_match_all('/\{(.+)\}/U', $t['setting']['option']['value'], $value)) {
-                foreach ($value[1] as $v) {
-                    $group[$v] = $t['fieldname'];
-                }
-            }
-        }
-
-        // 字段合并分组筛选
-        foreach ($field as $t) {
-            if ($t['fieldtype'] == 'Merge'
-                && preg_match_all('/\{(.+)\}/U', $t['setting']['option']['value'], $value)) {
-                foreach ($value[1] as $v) {
-                    $merge[$v] = $t['fieldname'];
-                }
-            }
-        }
-
-        // 字段类
-        $this->load->library('dfield', array(APP_DIR));
-        $pchtml = $this->get_cache('member', 'setting', 'field');
-        $mbhtml = $this->get_cache('member', 'setting', 'mbfield');
-        if (!IS_ADMIN) {
-            if ($this->mobile && $mbhtml) {
-                // 移动端格式
-                A_Field::set_input_format($mbhtml);
-                unset($mbhtml);
-            } elseif ($pchtml) {
-                // Pc端格式
-                A_Field::set_input_format($pchtml);
-                unset($pchtml);
-            }
-        }
-
-        // 主字段
-        foreach ($field as $t) {
-            if (!IS_ADMIN && !$t['ismember']) {
-                continue;
-            } elseif (IS_ADMIN && $this->member['adminid'] > 1
-                && @in_array($this->member['adminid'], $t['setting']['show_admin'])) {
-                continue;
-            }
-            $obj = $this->dfield->get($t['fieldtype']);
-            $html && $obj->set_input_format($html);
-            // 判断自定义输出字段
-            if (!$is_diy && $t['setting']['is_right'] == 2) {
-                $diyfield[$t['fieldname']] = $t;
-                continue;
-            }
-            if (is_object($obj)) {
-                // 百度地图特殊字段
-                $obj->remove_div = 0;
-                $value = $t['fieldtype'] == 'Baidumap' ? ($data[$t['fieldname'].'_lng'] && $data[$t['fieldname'].'_lat'] ? $data[$t['fieldname'].'_lng'].','.$data[$t['fieldname'].'_lat'] : $data[$t['fieldname']]) : $data[$t['fieldname']];
-
-                if (isset($group[$t['fieldname']])) {
-                    // 属于分组字段,重新获取字段表单
-                    $obj->remove_div = 1;
-                    $mygroup[$t['fieldname']] = $obj->input($t['name'], $t['fieldname'], $t['setting'], $value, isset($data[$id]) ? $data[$id] : 0);
-                } elseif (isset($merge[$t['fieldname']])) {
-                    // 属于合并字段
-                    $input = $obj->input($t['name'], $t['fieldname'], $t['setting'], $value, isset($data[$id]) ? $data[$id] : 0);
-                    $mymerge[$t['fieldname']] = $input;
-                } elseif ($t['fieldtype'] == 'Merge') {
-                    $myfield.= '{merge_'.$t['fieldname'].'}';
-                } else {
-                    $input = $obj->input($t['name'], $t['fieldname'], $t['setting'], $value, isset($data[$id]) ? $data[$id] : 0);
-                    $myfield.= $input;
-                }
-            }
-        }
-
-        if ($merge) {
-            $html = '
-
-

字段	说明
{$'.$data['return'].'.'.$t['name'].'}	'.$t['note'].'

字段	说明
{$'.$data['return'].'.'.$t['name'].'}	'.$t['note'].'

调用方式	说明
{$ci->get_cache(\'page-'.SITE_ID.'\', \'data\', \''.$data['module'].'\', '.(int)$data['id'].', \''.$t['name'].'\')}	'.$t['note'].'

字段	说明
{$'.$data['return'].'.'.$t['name'].'}	'.$t['note'].'

字段	说明
{$'.$data['return'].'.'.$t['name'].'}	'.$t['note'].'

字段	说明
{$'.$data['return'].'.'.$t['name'].'}	'.$t['note'].'

调用方式	说明
{$ci->get_cache(\'module-'.SITE_ID.'-'.APP_DIR.'\', \'category\', '.(int)$data['id'].', \''.$t['name'].'\')}	'.$t['note'].'

字段	说明
{$'.$data['return'].'.'.$t['name'].'}	'.$t['note'].'

字段	说明
{$'.$data['return'].'.'.$t['name'].'}	'.$t['note'].'

	{fc_lang('会员账号')}	{fc_lang('管理名称')}	{fc_lang('操作')}
	{dr_keyword_highlight($t.username, $param.keyword)}	{$t.realname}	- {fc_lang('修改')} - {if $t.uid>1} {fc_lang('删除')}{/if} -
	- - - -

diff --git a/finecms/finecms/dayrui/templates/online.html b/finecms/finecms/dayrui/templates/online.html deleted file mode 100644 index d11fbd2..0000000 --- a/finecms/finecms/dayrui/templates/online.html +++ /dev/null @@ -1,15 +0,0 @@ -{template header.html} - -

- 正在努力访问云端服务器 ... -

-{template footer.html} \ No newline at end of file diff --git a/finecms/finecms/dayrui/templates/php7cms.html b/finecms/finecms/dayrui/templates/php7cms.html deleted file mode 100644 index dcb513d..0000000 --- a/finecms/finecms/dayrui/templates/php7cms.html +++ /dev/null @@ -1,72 +0,0 @@ -{template nheader.html} - - -

- - - -

- -

- FineCMS升级为PHP7CMS免费版，享受PHP7最快的运行环境！ -

- -

{if version_compare(PHP_VERSION, '7.1.0') >= 0} - 当前PHP版本满足PHP7CMS免费版的运行环境 - {else} - 当前PHP版本无法满足PHP7CMS免费版的运行环境，要求PHP版本在7.1以上 - {/if} -

- -

- 升级方法 -

- -
-

1、下载PHP7CMS免费版源码（http://www.php7cms.com/free/）。

2、安装PHP7CMS免费版程序，并卸载默认的全部模块

3、将FineCMS目录下的/config/database.php复制到PHP7CMS免费版的cache/config/database.php中（注意路径）

4、运行数据转换脚本：http://PHP7CMS网站/admin.php?c=finecms

5、按照脚本提示步骤进行下一步操作

- - -

- -{template nfooter.html} \ No newline at end of file diff --git a/finecms/finecms/dayrui/templates/related.html b/finecms/finecms/dayrui/templates/related.html deleted file mode 100644 index 7451a5b..0000000 --- a/finecms/finecms/dayrui/templates/related.html +++ /dev/null @@ -1,62 +0,0 @@ - - - - -admin - - - - - - - - - - - - - - - - -

- -

- - - - - - - - - - - {loop $list $t} - - - - - - - {/loop} - -

	Id	{fc_lang('主题')}	{fc_lang('更新时间')}
	{$t.id}	{dr_keyword_highlight(dr_strcut(dr_clearhtml($t.title), 60), $param.keyword)}	{dr_date($t.updatetime, NULL, 'red')}

- - -

\ No newline at end of file diff --git a/finecms/finecms/dayrui/templates/route_index.html b/finecms/finecms/dayrui/templates/route_index.html deleted file mode 100644 index 35cdaaa..0000000 --- a/finecms/finecms/dayrui/templates/route_index.html +++ /dev/null @@ -1,94 +0,0 @@ -{template nheader.html} - - -

- - - -

- -

- {fc_lang('
当前服务器是：%s
%s
', $name, '')} -

- {$name} -

{$note}

- {if $code} -

{$code} - {/if} -

伪静态规则配置文件：/config/rewrite.php

以下是通过当前系统的URL规则生成的对应伪静态解析规则, 可供开发者参考, 把以下规则放到配置文件中时需要注意规则是否冲突和规则是否重复问题

- {fc_lang('生成伪静态')} - {fc_lang('环境检测')} -

- -

-{template nfooter.html} \ No newline at end of file diff --git a/finecms/finecms/dayrui/templates/saler_add.html b/finecms/finecms/dayrui/templates/saler_add.html deleted file mode 100644 index 20cf580..0000000 --- a/finecms/finecms/dayrui/templates/saler_add.html +++ /dev/null @@ -1,63 +0,0 @@ - - \ No newline at end of file diff --git a/finecms/finecms/dayrui/templates/saler_debtlist.html b/finecms/finecms/dayrui/templates/saler_debtlist.html deleted file mode 100644 index fadebf3..0000000 --- a/finecms/finecms/dayrui/templates/saler_debtlist.html +++ /dev/null @@ -1,63 +0,0 @@ -{template nheader.html} -{php $_pages=$pages;} -

- - - -

- - - - -

- -

- - - - - - - - - - - - - - {loop $list $t} - - - - - - - - - {/loop} - - - - - - - - - - -

{fc_lang('姓名')}	{fc_lang('电话')}	{fc_lang('欠款')}
{dr_keyword_highlight($t.cname, $param.keyword)}	{dr_keyword_highlight($t.phone, $param.keyword)}	{dr_keyword_highlight($t.debtMoney, $param.keyword)}

- -

{fc_lang('共%s条', $param['total'])}{$_pages}

- -{template nfooter.html} \ No newline at end of file diff --git a/finecms/finecms/dayrui/templates/saler_edit.html b/finecms/finecms/dayrui/templates/saler_edit.html deleted file mode 100644 index 5b4589e..0000000 --- a/finecms/finecms/dayrui/templates/saler_edit.html +++ /dev/null @@ -1,101 +0,0 @@ -{template nheader.html} - - -

- -

- - - -

- -

- {fc_lang('基本资料')} -

- - -

- {fc_lang('姓名')}： -

- - -

- {fc_lang('手机')}： -

- - -

- {fc_lang('车牌号')}： -

- - -

- -

- {fc_lang('所属公司')}： -

- - - - -

- -

- - - - - - -

- -

- -{template nfooter.html} \ No newline at end of file diff --git a/finecms/finecms/dayrui/templates/saler_index.html b/finecms/finecms/dayrui/templates/saler_index.html deleted file mode 100644 index 9a7e7cf..0000000 --- a/finecms/finecms/dayrui/templates/saler_index.html +++ /dev/null @@ -1,91 +0,0 @@ -{template nheader.html} -{php $_pages=$pages;} -

- - - -

- -

- - - - - - - - - - - - - - - - - - - - {loop $list $t} - - - - - - - - - - - - - {/loop} - - - - - - - - - - - - - -

{fc_lang('姓名')}	{fc_lang('车牌号')}	{fc_lang('电话')}	{fc_lang('公司')}	{fc_lang('结款')}	{fc_lang('桶装水')}	{fc_lang('饮料')}	{fc_lang('瓶装水')}	{fc_lang('操作')}
{dr_keyword_highlight($t.name, $param.keyword)}	{dr_keyword_highlight($t.carNo, $param.keyword)}	{dr_keyword_highlight($t.phone, $param.keyword)}	{dr_keyword_highlight($t.typename, $param.keyword)}	{dr_keyword_highlight($t.allknot, $param.keyword)}	{dr_keyword_highlight($t.allbucket, $param.keyword)}	{dr_keyword_highlight($t.allbottleNum, $param.keyword)}	{dr_keyword_highlight($t.alldrinkNum, $param.keyword)}	- {fc_lang('详情')} - {fc_lang('加油信息')} - {fc_lang('修改')} - {fc_lang('客户')} - {fc_lang('欠款')} - {fc_lang('陈列')} -
当日合计				{$sum['allknot']}	{$sum['allbucket']}	{$sum['allbottleNum']}	{$sum['alldrinkNum']}

{fc_lang('共%s条', $param['total'])}{$_pages}

- -{template nfooter.html} \ No newline at end of file diff --git a/finecms/finecms/dayrui/templates/salerbill_add.html b/finecms/finecms/dayrui/templates/salerbill_add.html deleted file mode 100644 index c967e24..0000000 --- a/finecms/finecms/dayrui/templates/salerbill_add.html +++ /dev/null @@ -1,132 +0,0 @@ -{template nheader.html} - - -

- -

- - - -

- -

- {fc_lang('基本资料')} -

- - -

- {fc_lang('姓名')}： -

- - -

- {fc_lang('桶装水')}： -

- - -

- {fc_lang('回桶')}： -

- - -

- {fc_lang('饮料')}： -

- - -

- {fc_lang('瓶装水')}： -

- - -

- {fc_lang('检核人')}： -

- - -

- {fc_lang('时间')}： -

- {dr_field_input('time', 'Date', array('option'=>array('format'=>'Y-m-d','width'=>120)), (int)$time)} -

- -

- {fc_lang('备注')}： -

- - -

- - - - - - -

- -

- - -

- -{template nfooter.html} \ No newline at end of file diff --git a/finecms/finecms/dayrui/templates/salerbill_index.html b/finecms/finecms/dayrui/templates/salerbill_index.html deleted file mode 100644 index 3c27c35..0000000 --- a/finecms/finecms/dayrui/templates/salerbill_index.html +++ /dev/null @@ -1,104 +0,0 @@ -{template nheader.html} -{php $_pages=$pages;} -

- - - -

- -

- - - - - - - - - - - - - - - - - - - - - - - {loop $list $t} - - - - - - - - - - - - - - - - - {/loop} - - - - - - - - - - - - - - - -

{fc_lang('销售人员')}	{fc_lang('桶装水')}	{fc_lang('回桶')}	{fc_lang('瓶装水')}	{fc_lang('饮料')}	{fc_lang('检核人')}	{fc_lang('剩余桶装水')}	{fc_lang('剩余瓶装水')}	{fc_lang('剩余饮料')}	{fc_lang('回款')}	{fc_lang('时间')}	{fc_lang('备注')}	{fc_lang('操作')}
{dr_keyword_highlight($t.salerName, $param.keyword)}	{dr_keyword_highlight($t.bucketNum, $param.keyword)}	{dr_keyword_highlight($t.backNumTotal, $param.keyword)}	{dr_keyword_highlight($t.bottleNum, $param.keyword)}	{dr_keyword_highlight($t.drinkNum, $param.keyword)}	{dr_keyword_highlight($t.checker, $param.keyword)}	{dr_keyword_highlight($t.bucketNum - $t.bucketTotal, $param.keyword)}	{dr_keyword_highlight($t.bottleNum - $t.bottleTotal, $param.keyword)}	{dr_keyword_highlight($t.drinkNum - $t.drinkTotal, $param.keyword)}	{dr_keyword_highlight($t.knotTotal, $param.keyword)}	{dr_keyword_highlight($t.saleTime, $param.keyword)}	{dr_keyword_highlight($t.remark, $param.keyword)}	- {if $this->ci->is_auth('member/admin/home/edit')} {fc_lang('详情')}{/if} - {if $this->ci->is_auth('member/admin/home/edit')} {fc_lang('修改')}{/if} -
合计	{$sum['bucketNum']}	{$sum['backNumTotal']}	{$sum['bottleNum']}	{$sum['drinkNum']}		{$sum['bucketleft']}	{$sum['bottleleft']}	{$sum['drinkleft']}	{$sum['knotTotal']}

{fc_lang('共%s条', $param['total'])}{$_pages}

- -{template nfooter.html} \ No newline at end of file diff --git a/finecms/finecms/dayrui/templates/salerfuel_add.html b/finecms/finecms/dayrui/templates/salerfuel_add.html deleted file mode 100644 index fb73c00..0000000 --- a/finecms/finecms/dayrui/templates/salerfuel_add.html +++ /dev/null @@ -1,117 +0,0 @@ -{template nheader.html} - - -

- -

- - - -

- -

- {fc_lang('基本资料')} -

- - -

- {fc_lang('姓名')}： -

- - -

- {fc_lang('车牌号')}： -

- - -

- {fc_lang('加油量')}： -

- - -

- {fc_lang('金额')}： -

- - -

- -

- {fc_lang('时间')}： -

- {dr_field_input('time', 'Date', array('option'=>array('format'=>'Y-m-d','width'=>120)), (int)$time)} -

- -

- {fc_lang('备注')}： -

- - -

- - - - - - -

- -

- - -

- -{template nfooter.html} \ No newline at end of file diff --git a/finecms/finecms/dayrui/templates/salerfuel_index.html b/finecms/finecms/dayrui/templates/salerfuel_index.html deleted file mode 100644 index a38fd76..0000000 --- a/finecms/finecms/dayrui/templates/salerfuel_index.html +++ /dev/null @@ -1,78 +0,0 @@ -{template nheader.html} -{php $_pages=$pages;} -

- - - -

- -

- - - - - - - - - - - - - - - - - {loop $list $t} - - - - - - - - - - - {/loop} - - -

{fc_lang('销售人员')}	{fc_lang('车牌号')}	{fc_lang('加油量')}	{fc_lang('金额')}	{fc_lang('时间')}	{fc_lang('备注')}	{fc_lang('操作')}
{dr_keyword_highlight($salerInfo.name, $param.keyword)}	{dr_keyword_highlight($salerInfo.carNo, $param.keyword)}	{dr_keyword_highlight($t.rise, $param.keyword)}	{dr_keyword_highlight($t.money, $param.keyword)}	{dr_keyword_highlight($t.date, $param.keyword)}	{dr_keyword_highlight($t.remark, $param.keyword)}	- {if $this->ci->is_auth('member/admin/home/edit')} {fc_lang('修改')}{/if} -

{fc_lang('共%s条', $param['total'])}{$_pages}

- -{template nfooter.html} \ No newline at end of file diff --git a/finecms/finecms/dayrui/templates/setting_index.html b/finecms/finecms/dayrui/templates/setting_index.html deleted file mode 100644 index 24ed453..0000000 --- a/finecms/finecms/dayrui/templates/setting_index.html +++ /dev/null @@ -1,165 +0,0 @@ -{template nheader.html} - - -

- -

- - - -

- -

- {fc_lang('基本设置')} -
- UCSSO -

- -

- UCSSO： -

- {fc_lang('开启')} - {fc_lang('关闭')} -

- 网站通信地址： -

- -

- 其他通信地址： -

{loop $synurl $url}
-					{if $url != trim(SITE_URL, '/')}{$url}{PHP_EOL}{/if}
-					{/loop}

- 多站点或者绑定域名时，将这些URL复制到UCSSO中的“网站其他地址”中 - -

- 通信配置代码： -

- - 通信配置代码复制到这里 - -

- -

- - - -

- - -

- {fc_lang('会员注册')}： -

- - -

- -

- {fc_lang('会员名规则（正则）')}： -

- - -

- {fc_lang('不允许注册的会员名')}： -

- - {fc_lang('多个会员名以分号“,”分隔')} -

- -

- - - - -

- -

-{template footer.html} \ No newline at end of file diff --git a/finecms/finecms/dayrui/templates/setting_oauth.html b/finecms/finecms/dayrui/templates/setting_oauth.html deleted file mode 100644 index a9770d5..0000000 --- a/finecms/finecms/dayrui/templates/setting_oauth.html +++ /dev/null @@ -1,85 +0,0 @@ -{template nheader.html} - -

- - - -

- {fc_lang('修改配置时要保存之后才会生效；鼠标移至图标处可实现排序')} -

- - - - - - - - - - - {loop $oauth $id $name} - {php $t=$data[$id];$i=$id;} - - - - - - - {/loop} - -

OAuth	App Id	App Key	{fc_lang('可用')}
{$name}

- -

-{template nfooter.html} \ No newline at end of file diff --git a/finecms/finecms/dayrui/templates/site_add.html b/finecms/finecms/dayrui/templates/site_add.html deleted file mode 100644 index 774cc33..0000000 --- a/finecms/finecms/dayrui/templates/site_add.html +++ /dev/null @@ -1,50 +0,0 @@ - -

- - - - - - - - - - - - - - -

* {fc_lang('网站名称')}：	- - {fc_lang('例如：FineCMS官方站')} -
* {fc_lang('网站域名')}：	- - {fc_lang('格式：test.dayrui.com')} -
{fc_lang('将域名绑定至根目录')}：	- {WEBPATH} -

\ No newline at end of file diff --git a/finecms/finecms/dayrui/templates/site_config.html b/finecms/finecms/dayrui/templates/site_config.html deleted file mode 100644 index 66d9ed2..0000000 --- a/finecms/finecms/dayrui/templates/site_config.html +++ /dev/null @@ -1,476 +0,0 @@ -{template nheader.html} - - - - -

- - - -

- {fc_lang('站点是系统的核心部分，各个站点数据独立，可以设置站点分库管理')} -

- -

- - -

- {fc_lang('网站状态')}： -

- {fc_lang('开启')} - {fc_lang('关闭')} -

- {fc_lang('当关闭网站时，除管理员之外的用户将无法访问（静态页面除外）')} -

- {fc_lang('关闭理由')}： -

- - -

- {fc_lang('网站名称')}： -

- - {fc_lang('例如：FineCMS官方站')} -

- {fc_lang('时间格式')}： -

- - {fc_lang('网站时间显示格式与date函数一致，默认Y-m-d H:i:s')} -

- {fc_lang('网站语言')}： -

- - {fc_lang('网站核心目录及各个模型或应用目录：/language/语言名称/')} -

- {fc_lang('风格模式')}： -

- {fc_lang('远程地址')} - {fc_lang('本站资源')} -

- {fc_lang('可以将js,css,图片存储在远程地址或者本地statics目录之中')} -

- -

- {fc_lang('模板目录')}： -

- - {fc_lang('位于网站主站根目录下：/templates/pc或mobile/目录名称/')} -

- {fc_lang('网站时区')}： -

- - {fc_lang('例如中国地区选择“GMT +08:00”表示东八区')} -

- -

- {fc_lang('网站域名')}： -

- - {fc_lang('例如：www.finecms.net')} -

- {fc_lang('其他域名')}： -

- - {fc_lang('当前站点支持绑定多个域名，它们将会301到主域名，域名之间以回车符分隔（请勿与其他站点的域名重复）')} -

- -

- {fc_lang('URL唯一')}： -

- - {fc_lang('启用将会使全站URL保持唯一，非当前URL自动301定向')} -

- {fc_lang('URL规则')}： -

- - - - {fc_lang('[URL规则管理]')} -

- -

- {fc_lang('自动识别')}： -

- - {fc_lang('开启后将自动识别移动端并强制定向到此域名')} -

- {fc_lang('移动端域名')}： -

- - {if $data['SITE_MOBILE'] == $data['SITE_DOMAIN']} - 此域名不能与站点域名相同 - {else} - {fc_lang('格式：test.finecms.net')} - {/if} -

- {fc_lang('移动端模板路径')}： -

{fc_lang('/templates/mobile/'.SITE_TEMPLATE.'/，如果不存在时自动加载电脑端模板')}

- {fc_lang('SEO连接符')}： -

- - {fc_lang('默认为"_"，如：文章标题[连接符]栏目名称[连接符]模型名称')} -

- {fc_lang('SEO标题')}： -

- - -

- {fc_lang('SEO关键字')}： -

- - -

- {fc_lang('SEO描述信息')}： -

- - -

- -

- {fc_lang('保持原始的纵横比例')}： -

- - {fc_lang('指定是否在缩放或使用硬值的时候使图像保持原始的纵横比例')} -

- {fc_lang('图片水印总开关')}： -

- {fc_lang('开启')} - {fc_lang('关闭')} -

- -

- {fc_lang('远程附件水印')}： -

- - {fc_lang('打开远程附件水印会降低服务器性能，建议远程附件不加水印')} -

- {fc_lang('文章内容图片水印')}： -

- - {fc_lang('开启后文章编辑器内容中上传的图片将会采用动态水印模式')} -

- {fc_lang('对齐方式')}： -

- - -

- {fc_lang('偏移量设置')}： -

- - - {fc_lang('这里可以设置水印图片/文字的偏移量来校正图片水印位置')} -

- {fc_lang('水印方式')}： -

- {fc_lang('图片水印')} - {fc_lang('文字水印')} -

- - - - - - - -

- -

- -{template nfooter.html} \ No newline at end of file diff --git a/finecms/finecms/dayrui/templates/site_index.html b/finecms/finecms/dayrui/templates/site_index.html deleted file mode 100644 index bb7741f..0000000 --- a/finecms/finecms/dayrui/templates/site_index.html +++ /dev/null @@ -1,80 +0,0 @@ -{template nheader.html} -

- - - -

- {fc_lang('站点是系统的核心部分，各个站点数据独立，可以设置站点分库管理')} -

- - - - - - - - - - - - - - - {loop $list $sid $t} - {if $admin.adminid == 1 || ($admin.adminid > 1 && @in_array($sid, $admin.role.site))} - - - - - - - - - {/if} - {/loop} - - - - - -

	{fc_lang('状态')}	Site	{fc_lang('网站名称')}	{fc_lang('网站域名')}	{fc_lang('操作')}
		{$sid}			- {fc_lang('访问')}{if $this->ci->is_auth('site/config')} {fc_lang('配置')}{/if} - {if $this->ci->is_auth('site/del') && $sid > 1} {fc_lang('删除')}{/if} - -
	- {if $this->ci->is_auth('site/edit')} {fc_lang('修改')}{/if} -

- -{template nfooter.html} \ No newline at end of file diff --git a/finecms/finecms/dayrui/templates/system_debug.html b/finecms/finecms/dayrui/templates/system_debug.html deleted file mode 100644 index 54ee1bf..0000000 --- a/finecms/finecms/dayrui/templates/system_debug.html +++ /dev/null @@ -1,65 +0,0 @@ -{template nheader.html} -

- - - -

- - -

- -

- - - - - - - - - {loop $list $id $t} - - - - - {/loop} - -

{fc_lang('发生时间')}
{$t['time']}	{$t['error']}

{fc_lang('共%s条', $total)}{$pages}

-{template nfooter.html} \ No newline at end of file diff --git a/finecms/finecms/dayrui/templates/system_index.html b/finecms/finecms/dayrui/templates/system_index.html deleted file mode 100644 index f66d945..0000000 --- a/finecms/finecms/dayrui/templates/system_index.html +++ /dev/null @@ -1,160 +0,0 @@ -{template nheader.html} - -

- - - -

- -

- {fc_lang('调试器')}： -

- - {fc_lang('用于后台查看程序和SQL执行详情')} -

- -

- {fc_lang('HTTPS模式')}： -

- - {fc_lang('开启前需要保证服务器已经支持https协议，并且能够正常访问本网站')} -

- -

- {fc_lang('系统缓存')}： -

- - {fc_lang('关闭缓存将会大大降低系统运行效率')} -

- -

- {fc_lang('栏目模型唯一')}： -

- - {fc_lang('开启之后，创建栏目选择的模型必须和上下级栏目保持一致')} -

- {fc_lang('后台操作日志')}： -

- - {fc_lang('多用户操作后台建议打开日志功能')} -

- {fc_lang('后台登录验证码')}： -

- - -

- {fc_lang('后台数据分页条数')}： -

- - {fc_lang('例如文章每页显示的数量控制')} -

- {fc_lang('系统邮箱')}： -

- - {fc_lang('用于接收系统发送的通知信息的可用邮箱')} -

- - - -

- {fc_lang('安全密钥')}： -

- - - {fc_lang('密钥建议定期更换')} -

- - - -

- -

- -{template nfooter.html} \ No newline at end of file diff --git a/finecms/finecms/dayrui/templates/system_oplog.html b/finecms/finecms/dayrui/templates/system_oplog.html deleted file mode 100644 index 51af90a..0000000 --- a/finecms/finecms/dayrui/templates/system_oplog.html +++ /dev/null @@ -1,75 +0,0 @@ -{template nheader.html} -

- - - -

- - -

- -

- - - - - - - - - - - {loop $list $id $t} - {php $t=dr_string2array($t);} - - - - - - - {/loop} - - - - -

{fc_lang('操作时间')}	Ip	{fc_lang('操作人')}
{dr_date($t['time'], null, 'red')}	{$ci->dip->address($t.ip)}	{$t['username']}	{$t['action']}
-

{fc_lang('共%s条', $total)}{$pages}

-{template nfooter.html} \ No newline at end of file diff --git a/finecms/finecms/dayrui/templates/tag_all.html b/finecms/finecms/dayrui/templates/tag_all.html deleted file mode 100644 index 8f7951b..0000000 --- a/finecms/finecms/dayrui/templates/tag_all.html +++ /dev/null @@ -1,79 +0,0 @@ -{template nheader.html} - -

- - - -

- -

- {if $pid}{fc_lang('子词')}{else}{fc_lang('父词')}{/if} -

- - -

- -

- {fc_lang('批量')} -

- - - {fc_lang('换行分隔多条数据')} -

- -

- - - -

- -

- - -{template "nfooter.html"} \ No newline at end of file diff --git a/finecms/finecms/dayrui/templates/tag_list.html b/finecms/finecms/dayrui/templates/tag_list.html deleted file mode 100644 index 6327593..0000000 --- a/finecms/finecms/dayrui/templates/tag_list.html +++ /dev/null @@ -1,116 +0,0 @@ -{template nheader.html} - - -

- - - -

- - -

- -

- - - -

- - - - - - - - - - - - - {loop $list $t} - - - - - - - - {/loop} - - - - - -

- -	{fc_lang('名称')}	{fc_lang('别名')}	{fc_lang('点击量')}	{fc_lang('操作')}
	{$t.name}	{$t.code}	{$t.hits}	- {if !$pid} - {fc_lang('子词管理（%s）', $t.total)} - {/if} - {fc_lang('修改')} - - {fc_lang('访问')} - -
	- - -

- -

{fc_lang('共%s条', $total)}{$pages}

-{template nfooter.html} \ No newline at end of file diff --git a/finecms/finecms/dayrui/templates/tag_post.html b/finecms/finecms/dayrui/templates/tag_post.html deleted file mode 100644 index a3dc66a..0000000 --- a/finecms/finecms/dayrui/templates/tag_post.html +++ /dev/null @@ -1,92 +0,0 @@ -{template nheader.html} - -

- - - -

- -

- {if $pid}{fc_lang('子词')}{else}{fc_lang('父词')}{/if} -

- - -

- -

- {fc_lang('名称')}： -

- - {fc_lang('它的描述名称')} -

- {fc_lang('别名')}： -

- - {fc_lang('别名只能由字母或者字母+数字组成')} -

- {fc_lang('点击量')}： -

- -

- - {$myfield} -

- - - -

- -

- - -{template "nfooter.html"} \ No newline at end of file diff --git a/finecms/finecms/dayrui/templates/upgrande.html b/finecms/finecms/dayrui/templates/upgrande.html deleted file mode 100644 index f747932..0000000 --- a/finecms/finecms/dayrui/templates/upgrande.html +++ /dev/null @@ -1,75 +0,0 @@ -{template nheader.html} - - -

- - - -

- -

- {$note} -

- -

FineCMS v{DR_VERSION} Bulid {str_replace('.','', DR_UPDATE)}

- -

版本检测中...

- -

- 升级方法 -

- -
-

下载最新版源码，覆盖config/version.php和finecms目录下的全部文件即可完成升级。

解压覆盖到网站目录中，更新后台缓存，查看版本号和更新时间，如果是最新版本号和最新的更新时间，表示升级成功！

- - -

- -{template nfooter.html} \ No newline at end of file diff --git a/finecms/finecms/dayrui/templates/upload.html b/finecms/finecms/dayrui/templates/upload.html deleted file mode 100644 index cdf965f..0000000 --- a/finecms/finecms/dayrui/templates/upload.html +++ /dev/null @@ -1,205 +0,0 @@ - - - - - admin - - - - - - - - - - - - - - - - {if $is_admin} - - {/if} - - -

{fc_lang('上传文件')}
{fc_lang('手动输入')}

- -

{fc_lang('最多上传 %s 个文件,单文件最大 %s MB', $fcount, $size/1024)}

{fc_lang('文件格式：%s', str_replace('|', '、', $ext))}

- {fc_lang('文件列表')} -

- -

- - {if $member.adminid} - - {/if} - {if $notused} - - {/if} -

- - - -

- - - diff --git a/finecms/finecms/dayrui/templates/upload_input.html b/finecms/finecms/dayrui/templates/upload_input.html deleted file mode 100644 index 0b359d5..0000000 --- a/finecms/finecms/dayrui/templates/upload_input.html +++ /dev/null @@ -1,17 +0,0 @@ -

- - - - - - - - - - -

* {fc_lang('标题')}：	- -
* {fc_lang('地址')}：	- -

diff --git a/finecms/finecms/dayrui/templates/urlrule_add.html b/finecms/finecms/dayrui/templates/urlrule_add.html deleted file mode 100644 index 90a028d..0000000 --- a/finecms/finecms/dayrui/templates/urlrule_add.html +++ /dev/null @@ -1,157 +0,0 @@ -{template nheader.html} - -

- - - -

- {fc_lang('通过URL规则可以对URL地址进行个性化设置！')} -

- {fc_lang('URL规则')} -

- {fc_lang('类型')}： -

- {loop $type $i $n} - {$n} - {/loop} -

- {fc_lang('名称')}： -

- - {fc_lang('给它一个描述名称')} -

- - - -

- {fc_lang('列表(或单页)')}： -

- {dr_field_input('share_list', 'Text', array('option' => array('width' => '100%')), $data['value']['share_list'])} - - {fc_lang('栏目封面地址: index.php?c=category&id=ID')} -

- {fc_lang('列表(或单页)分页')}： -

- {dr_field_input('share_list_page', 'Text', array('option' => array('width' => '100%')), $data['value']['share_list_page'])} - - {fc_lang('栏目列表地址: index.php?c=category&id=ID&page=分页号')} -

- {fc_lang('内容规则')}： -

- {dr_field_input('share_show', 'Text', array('option' => array('width' => '100%')), $data['value']['share_show'])} - - {fc_lang('模型内容地址: index.php?c=show&id=ID')} -

- {fc_lang('内容分页')}： -

- {dr_field_input('share_show_page', 'Text', array('option' => array('width' => '100%')), $data['value']['share_show_page'])} - - {fc_lang('模型内容分页地址: index.php?c=show&id=ID&page=分页号')} -

- - -

- {fc_lang('内容模型搜索页')}： -

- {dr_field_input('share_search_page', 'Text', array('option' => array('width' => '100%')), $data['value']['share_search_page'])} - - {fc_lang('内容模型搜索分页地址: index.php?c=search&各种参数字符串')} -

- - -

- {fc_lang('关键词库')}： -

- {dr_field_input('tags', 'Text', array('option' => array('width' => '100%')), $data['value']['tags'])} - - {fc_lang('关键词库地址: index.php?c=tag&name=tag名称 ({tag}表示tag名称,不可缺少)')} -

- -

- {fc_lang('连接符号')}： -

- {dr_field_input('catjoin', 'Text', array('option' => array('width' => '100%')), $data['value']['catjoin'] ? $data['value']['catjoin'] : '/')} - {fc_lang('针对{pdirname}的连接符号，默认为"/"，如：china[连接符号]news')} -

- - -

- -

- -{template nfooter.html} \ No newline at end of file diff --git a/finecms/finecms/dayrui/templates/urlrule_index.html b/finecms/finecms/dayrui/templates/urlrule_index.html deleted file mode 100644 index b20cba6..0000000 --- a/finecms/finecms/dayrui/templates/urlrule_index.html +++ /dev/null @@ -1,98 +0,0 @@ -{template nheader.html} - - -

- - - -

- {fc_lang('通过URL规则可以对URL地址进行个性化设置！')} -

- -

- - - - - - - - - - - - - {loop $list $t} - - - - - - - {/loop} - - - - - -

	{fc_lang('名称')}	{fc_lang('类型')}	{fc_lang('操作')}
	{if $this->ci->is_auth('admin/urlrule/edit')}{$t.name}{else}{$t.name}{/if}	{$type[$t['type']]}	- {if $this->ci->is_auth('admin/urlrule/edit')} {fc_lang('修改')}{/if} - {if $this->ci->is_auth('admin/urlrule/edit')} 复制{/if} -
	- {if $this->ci->is_auth('admin/urlrule/del')} - - {/if} -

- -

-{template nfooter.html} \ No newline at end of file diff --git a/finecms/finecms/dayrui/templates/weixin_index.html b/finecms/finecms/dayrui/templates/weixin_index.html deleted file mode 100644 index 0cac7c8..0000000 --- a/finecms/finecms/dayrui/templates/weixin_index.html +++ /dev/null @@ -1,130 +0,0 @@ -{template nheader.html} - - -

- - - -

- -

- 公众号 -

- -

- URL： -

{SITE_URL}index.php?c=weixin

- -

- AppId： -

- - 请填写微信公众平台后台的AppId -

- AppSecret： -

- - 请填写微信公众平台后台的AppSecret, 只有填写这两项才能管理自定义菜单 -

- Token： -

- - -

- 关联会员模式： -

- {fc_lang('自动注册')} - {fc_lang('绑定会员')} -

- 自动注册模式是用户关注时自动创建一个会员号 -

- - -

- -

- -{template nfooter.html} \ No newline at end of file diff --git a/finecms/finecms/dayrui/templates/wmenu_add.html b/finecms/finecms/dayrui/templates/wmenu_add.html deleted file mode 100644 index df65ed5..0000000 --- a/finecms/finecms/dayrui/templates/wmenu_add.html +++ /dev/null @@ -1,137 +0,0 @@ -{template nheader.html} - - - -

- - - -

- -

- 自定义菜单 -

- -

- 顶级菜单： -

- - - -

- 菜单名称： -

- - - -

- 动作事件： -

- {loop $type $i $name} - {$name} - {/loop} -

- - -

- 链接地址： -

- - -

填写以http开头的完整的网站地址

- 链接地址： -

- - -

输入一个登录授权后的跳转URL，例如会员中心：{MEMBER_URL}

- - - -

- -

-{template nfooter.html} \ No newline at end of file diff --git a/finecms/finecms/dayrui/templates/wmenu_index.html b/finecms/finecms/dayrui/templates/wmenu_index.html deleted file mode 100644 index a01cf41..0000000 --- a/finecms/finecms/dayrui/templates/wmenu_index.html +++ /dev/null @@ -1,105 +0,0 @@ -{template nheader.html} - - -

- - - -

- - -

- -
- - 自定义菜单最多包括3个一级菜单，每个一级菜单最多包含5个二级菜单，菜单最多4个汉字，多出来的部分将会以“...”代替。 - -
- -

- - - -

- - - - - - - - - - - - - {loop $list $c} - - - - - - - - {loop $c.data $t} - - - - - - - - {/loop} - {/loop} - - - - - -

{fc_lang('排序')}	菜单名称		{if $this->ci->is_auth('admin/wmenu/add')}{/if}
-	{$c.name}	{if !$c.data}{$type[$c.type]}{/if}	- 修改菜单 - 添加下级 -
-	├─ {$t.name}	{$type[$t.type]}	- 修改菜单 -
- {if $this->ci->is_auth('admin/wmenu/del')}{/if} - {if $this->ci->is_auth('admin/wmenu/edit')} {fc_lang('排序按从小到大排列，最大支持99')} {/if} -

{fc_lang('共%s条', $total)}{$pages}

-{template nfooter.html} \ No newline at end of file diff --git a/finecms/finecms/dayrui/templates/wuser_index.html b/finecms/finecms/dayrui/templates/wuser_index.html deleted file mode 100644 index 1b6c829..0000000 --- a/finecms/finecms/dayrui/templates/wuser_index.html +++ /dev/null @@ -1,104 +0,0 @@ -{template nheader.html} - - -

- - - -

- -

- - - -

- - - - - - - - - - - - - {loop $list $t} - - - - - - - - {/loop} - - - - - -

	头像	昵称	绑定会员	关注/取消时间
		{dr_deal_emoji($t.nickname)}	{if $t.uid} {$t.username} {else} 未绑定 {/if}	{dr_date($t.subscribe_time)}
	- - -

{fc_lang('共%s条', $total)}{$pages}

-{template nfooter.html} \ No newline at end of file diff --git a/finecms/finecms/system/.htaccess b/finecms/finecms/system/.htaccess deleted file mode 100644 index 97c65d2..0000000 --- a/finecms/finecms/system/.htaccess +++ /dev/null @@ -1,6 +0,0 @@ - - Require all denied - - - Deny from all - \ No newline at end of file diff --git a/finecms/finecms/system/core/Benchmark.php b/finecms/finecms/system/core/Benchmark.php deleted file mode 100644 index b3ac79c..0000000 --- a/finecms/finecms/system/core/Benchmark.php +++ /dev/null @@ -1,133 +0,0 @@ -marker[$name] = microtime(TRUE); - } - - // -------------------------------------------------------------------- - - /** - * Elapsed time - * - * Calculates the time difference between two marked points. - * - * If the first parameter is empty this function instead returns the - * {elapsed_time} pseudo-variable. This permits the full system - * execution time to be shown in a template. The output class will - * swap the real value for this variable. - * - * @param string $point1 A particular marked point - * @param string $point2 A particular marked point - * @param int $decimals Number of decimal places - * - * @return string Calculated elapsed time on success, - * an '{elapsed_string}' if $point1 is empty - * or an empty string if $point1 is not found. - */ - public function elapsed_time($point1 = '', $point2 = '', $decimals = 4) - { - if ($point1 === '') - { - return '{elapsed_time}'; - } - - if ( ! isset($this->marker[$point1])) - { - return ''; - } - - if ( ! isset($this->marker[$point2])) - { - $this->marker[$point2] = microtime(TRUE); - } - - return number_format($this->marker[$point2] - $this->marker[$point1], $decimals); - } - - // -------------------------------------------------------------------- - - /** - * Memory Usage - * - * Simply returns the {memory_usage} marker. - * - * This permits it to be put it anywhere in a template - * without the memory being calculated until the end. - * The output class will swap the real value for this variable. - * - * @return string '{memory_usage}' - */ - public function memory_usage() - { - return '{memory_usage}'; - } - -} diff --git a/finecms/finecms/system/core/CodeIgniter.php b/finecms/finecms/system/core/CodeIgniter.php deleted file mode 100644 index 823e034..0000000 --- a/finecms/finecms/system/core/CodeIgniter.php +++ /dev/null @@ -1,559 +0,0 @@ - '_ENV', 'G' => '_GET', 'P' => '_POST', 'C' => '_COOKIE', 'S' => '_SERVER') as $key => $superglobal) - { - if (strpos($_registered, $key) === FALSE) - { - continue; - } - - foreach (array_keys($$superglobal) as $var) - { - if (isset($GLOBALS[$var]) && ! in_array($var, $_protected, TRUE)) - { - $GLOBALS[$var] = NULL; - } - } - } - } -} - - -/* - * ------------------------------------------------------ - * Define a custom error handler so we can log PHP errors - * ------------------------------------------------------ - */ - set_error_handler('_error_handler'); - set_exception_handler('_exception_handler'); - register_shutdown_function('_shutdown_handler'); - -/* - * ------------------------------------------------------ - * Set the subclass_prefix - * ------------------------------------------------------ - * - * Normally the "subclass_prefix" is set in the config file. - * The subclass prefix allows CI to know if a core class is - * being extended via a library in the local application - * "libraries" folder. Since CI allows config items to be - * overridden via data set in the main index.php file, - * before proceeding we need to know if a subclass_prefix - * override exists. If so, we will set this value now, - * before any classes are loaded - * Note: Since the config file data is cached it doesn't - * hurt to load it here. - */ - if ( ! empty($assign_to_config['subclass_prefix'])) - { - get_config(array('subclass_prefix' => $assign_to_config['subclass_prefix'])); - } - -/* - * ------------------------------------------------------ - * Should we use a Composer autoloader? - * ------------------------------------------------------ - */ - if ($composer_autoload = config_item('composer_autoload')) - { - if ($composer_autoload === TRUE) - { - file_exists(APPPATH.'vendor/autoload.php') - ? require_once(APPPATH.'vendor/autoload.php') - : log_message('error', '$config[\'composer_autoload\'] is set to TRUE but '.APPPATH.'vendor/autoload.php was not found.'); - } - elseif (file_exists($composer_autoload)) - { - require_once($composer_autoload); - } - else - { - log_message('error', 'Could not find the specified $config[\'composer_autoload\'] path: '.$composer_autoload); - } - } - -/* - * ------------------------------------------------------ - * Start the timer... tick tock tick tock... - * ------------------------------------------------------ - */ - $BM =& load_class('Benchmark', 'core'); - $BM->mark('total_execution_time_start'); - $BM->mark('loading_time:_base_classes_start'); - -/* - * ------------------------------------------------------ - * Instantiate the hooks class - * ------------------------------------------------------ - */ - $EXT =& load_class('Hooks', 'core'); - -/* - * ------------------------------------------------------ - * Is there a "pre_system" hook? - * ------------------------------------------------------ - */ - $EXT->call_hook('pre_system'); - -/* - * ------------------------------------------------------ - * Instantiate the config class - * ------------------------------------------------------ - * - * Note: It is important that Config is loaded first as - * most other classes depend on it either directly or by - * depending on another class that uses it. - * - */ - $CFG =& load_class('Config', 'core'); - - // Do we have any manually set config items in the index.php file? - if (isset($assign_to_config) && is_array($assign_to_config)) - { - foreach ($assign_to_config as $key => $value) - { - $CFG->set_item($key, $value); - } - } - -/* - * ------------------------------------------------------ - * Important charset-related stuff - * ------------------------------------------------------ - * - * Configure mbstring and/or iconv if they are enabled - * and set MB_ENABLED and ICONV_ENABLED constants, so - * that we don't repeatedly do extension_loaded() or - * function_exists() calls. - * - * Note: UTF-8 class depends on this. It used to be done - * in it's constructor, but it's _not_ class-specific. - * - */ - $charset = strtoupper(config_item('charset')); - ini_set('default_charset', $charset); - - if (extension_loaded('mbstring')) - { - define('MB_ENABLED', TRUE); - // mbstring.internal_encoding is deprecated starting with PHP 5.6 - // and it's usage triggers E_DEPRECATED messages. - @ini_set('mbstring.internal_encoding', $charset); - // This is required for mb_convert_encoding() to strip invalid characters. - // That's utilized by CI_Utf8, but it's also done for consistency with iconv. - mb_substitute_character('none'); - } - else - { - define('MB_ENABLED', FALSE); - } - - // There's an ICONV_IMPL constant, but the PHP manual says that using - // iconv's predefined constants is "strongly discouraged". - if (extension_loaded('iconv')) - { - define('ICONV_ENABLED', TRUE); - // iconv.internal_encoding is deprecated starting with PHP 5.6 - // and it's usage triggers E_DEPRECATED messages. - @ini_set('iconv.internal_encoding', $charset); - } - else - { - define('ICONV_ENABLED', FALSE); - } - - if (is_php('5.6')) - { - ini_set('php.internal_encoding', $charset); - } - -/* - * ------------------------------------------------------ - * Load compatibility features - * ------------------------------------------------------ - */ - - require_once(BASEPATH.'core/compat/mbstring.php'); - require_once(BASEPATH.'core/compat/hash.php'); - require_once(BASEPATH.'core/compat/password.php'); - require_once(BASEPATH.'core/compat/standard.php'); - -/* - * ------------------------------------------------------ - * Instantiate the UTF-8 class - * ------------------------------------------------------ - */ - $UNI =& load_class('Utf8', 'core'); - -/* - * ------------------------------------------------------ - * Instantiate the URI class - * ------------------------------------------------------ - */ - $URI =& load_class('URI', 'core'); - -/* - * ------------------------------------------------------ - * Instantiate the routing class and set the routing - * ------------------------------------------------------ - */ - $RTR =& load_class('Router', 'core', isset($routing) ? $routing : NULL); - -/* - * ------------------------------------------------------ - * Instantiate the output class - * ------------------------------------------------------ - */ - $OUT =& load_class('Output', 'core'); - -/* - * ------------------------------------------------------ - * Is there a valid cache file? If so, we're done... - * ------------------------------------------------------ - */ - if ($EXT->call_hook('cache_override') === FALSE && $OUT->_display_cache($CFG, $URI) === TRUE) - { - exit; - } - -/* - * ----------------------------------------------------- - * Load the security class for xss and csrf support - * ----------------------------------------------------- - */ - $SEC =& load_class('Security', 'core'); - -/* - * ------------------------------------------------------ - * Load the Input class and sanitize globals - * ------------------------------------------------------ - */ - $IN =& load_class('Input', 'core'); - -/* - * ------------------------------------------------------ - * Load the Language class - * ------------------------------------------------------ - */ - $LANG =& load_class('Lang', 'core'); - -/* - * ------------------------------------------------------ - * Load the app controller and local controller - * ------------------------------------------------------ - * - */ - // Load the base controller class - require_once BASEPATH.'core/Controller.php'; - - /** - * Reference to the CI_Controller method. - * - * Returns current CI instance object - * - * @return CI_Controller - */ - function &get_instance() - { - return CI_Controller::get_instance(); - } - - if (file_exists(APPPATH.'core/'.$CFG->config['subclass_prefix'].'Controller.php')) - { - require_once APPPATH.'core/'.$CFG->config['subclass_prefix'].'Controller.php'; - } - - // Set a mark point for benchmarking - $BM->mark('loading_time:_base_classes_end'); - -/* - * ------------------------------------------------------ - * Sanity checks - * ------------------------------------------------------ - * - * The Router class has already validated the request, - * leaving us with 3 options here: - * - * 1) an empty class name, if we reached the default - * controller, but it didn't exist; - * 2) a query string which doesn't go through a - * file_exists() check - * 3) a regular request for a non-existing page - * - * We handle all of these as a 404 error. - * - * Furthermore, none of the methods in the app controller - * or the loader class can be called via the URI, nor can - * controller methods that begin with an underscore. - */ - - $e404 = FALSE; - $class = ucfirst($RTR->class); - $method = $RTR->method; - - if (empty($class) OR ! file_exists(APPPATH.'controllers/'.$RTR->directory.$class.'.php')) - { - $e404 = TRUE; - } - else - { - require_once(APPPATH.'controllers/'.$RTR->directory.$class.'.php'); - - if ( ! class_exists($class, FALSE) OR $method[0] === '_' OR method_exists('CI_Controller', $method)) - { - $e404 = TRUE; - } - elseif (method_exists($class, '_remap')) - { - $params = array($method, array_slice($URI->rsegments, 2)); - $method = '_remap'; - } - elseif ( ! method_exists($class, $method)) - { - $e404 = TRUE; - } - /** - * DO NOT CHANGE THIS, NOTHING ELSE WORKS! - * - * - method_exists() returns true for non-public methods, which passes the previous elseif - * - is_callable() returns false for PHP 4-style constructors, even if there's a __construct() - * - method_exists($class, '__construct') won't work because CI_Controller::__construct() is inherited - * - People will only complain if this doesn't work, even though it is documented that it shouldn't. - * - * ReflectionMethod::isConstructor() is the ONLY reliable check, - * knowing which method will be executed as a constructor. - */ - elseif ( ! is_callable(array($class, $method))) - { - $reflection = new ReflectionMethod($class, $method); - if ( ! $reflection->isPublic() OR $reflection->isConstructor()) - { - $e404 = TRUE; - } - } - } - - if ($e404) - { - if ( ! empty($RTR->routes['404_override'])) - { - if (sscanf($RTR->routes['404_override'], '%[^/]/%s', $error_class, $error_method) !== 2) - { - $error_method = 'index'; - } - - $error_class = ucfirst($error_class); - - if ( ! class_exists($error_class, FALSE)) - { - if (file_exists(APPPATH.'controllers/'.$RTR->directory.$error_class.'.php')) - { - require_once(APPPATH.'controllers/'.$RTR->directory.$error_class.'.php'); - $e404 = ! class_exists($error_class, FALSE); - } - // Were we in a directory? If so, check for a global override - elseif ( ! empty($RTR->directory) && file_exists(APPPATH.'controllers/'.$error_class.'.php')) - { - require_once(APPPATH.'controllers/'.$error_class.'.php'); - if (($e404 = ! class_exists($error_class, FALSE)) === FALSE) - { - $RTR->directory = ''; - } - } - } - else - { - $e404 = FALSE; - } - } - - // Did we reset the $e404 flag? If so, set the rsegments, starting from index 1 - if ( ! $e404) - { - $class = $error_class; - $method = $error_method; - - $URI->rsegments = array( - 1 => $class, - 2 => $method - ); - } - else - { - show_404($RTR->directory.$class.'/'.$method); - } - } - - if ($method !== '_remap') - { - $params = array_slice($URI->rsegments, 2); - } - -/* - * ------------------------------------------------------ - * Is there a "pre_controller" hook? - * ------------------------------------------------------ - */ - $EXT->call_hook('pre_controller'); - -/* - * ------------------------------------------------------ - * Instantiate the requested controller - * ------------------------------------------------------ - */ - // Mark a start point so we can benchmark the controller - $BM->mark('controller_execution_time_( '.$class.' / '.$method.' )_start'); - - $CI = new $class(); - -/* - * ------------------------------------------------------ - * Is there a "post_controller_constructor" hook? - * ------------------------------------------------------ - */ - $EXT->call_hook('post_controller_constructor'); - -/* - * ------------------------------------------------------ - * Call the requested method - * ------------------------------------------------------ - */ - call_user_func_array(array(&$CI, $method), $params); - - // Mark a benchmark end point - $BM->mark('controller_execution_time_( '.$class.' / '.$method.' )_end'); - -/* - * ------------------------------------------------------ - * Is there a "post_controller" hook? - * ------------------------------------------------------ - */ - $EXT->call_hook('post_controller'); - -/* - * ------------------------------------------------------ - * Send the final rendered output to the browser - * ------------------------------------------------------ - */ - if ($EXT->call_hook('display_override') === FALSE) - { - $OUT->_display(); - } - -/* - * ------------------------------------------------------ - * Is there a "post_system" hook? - * ------------------------------------------------------ - */ - $EXT->call_hook('post_system'); diff --git a/finecms/finecms/system/core/Common.php b/finecms/finecms/system/core/Common.php deleted file mode 100644 index d6a1fdb..0000000 --- a/finecms/finecms/system/core/Common.php +++ /dev/null @@ -1,849 +0,0 @@ -='); - } - - return $_is_php[$version]; - } -} - -// ------------------------------------------------------------------------ - -if ( ! function_exists('is_really_writable')) -{ - /** - * Tests for file writability - * - * is_writable() returns TRUE on Windows servers when you really can't write to - * the file, based on the read-only attribute. is_writable() is also unreliable - * on Unix servers if safe_mode is on. - * - * @link https://bugs.php.net/bug.php?id=54709 - * @param string - * @return bool - */ - function is_really_writable($file) - { - // If we're on a Unix server with safe_mode off we call is_writable - if (DIRECTORY_SEPARATOR === '/' && (is_php('5.4') OR ! ini_get('safe_mode'))) - { - return is_writable($file); - } - - /* For Windows servers and safe_mode "on" installations we'll actually - * write a file then read it. Bah... - */ - if (is_dir($file)) - { - $file = rtrim($file, '/').'/'.md5(mt_rand()); - if (($fp = @fopen($file, 'ab')) === FALSE) - { - return FALSE; - } - - fclose($fp); - @chmod($file, 0777); - @unlink($file); - return TRUE; - } - elseif ( ! is_file($file) OR ($fp = @fopen($file, 'ab')) === FALSE) - { - return FALSE; - } - - fclose($fp); - return TRUE; - } -} - -// ------------------------------------------------------------------------ - -if ( ! function_exists('load_class')) -{ - /** - * Class registry - * - * This function acts as a singleton. If the requested class does not - * exist it is instantiated and set to a static variable. If it has - * previously been instantiated the variable is returned. - * - * @param string the class name being requested - * @param string the directory where the class should be found - * @param mixed an optional argument to pass to the class constructor - * @return object - */ - function &load_class($class, $directory = 'libraries', $param = NULL) - { - static $_classes = array(); - - // Does the class exist? If so, we're done... - if (isset($_classes[$class])) - { - return $_classes[$class]; - } - - $name = FALSE; - - // Look for the class first in the local application/libraries folder - // then in the native system/libraries folder - foreach (array(APPPATH, BASEPATH) as $path) - { - if (file_exists($path.$directory.'/'.$class.'.php')) - { - $name = 'CI_'.$class; - - if (class_exists($name, FALSE) === FALSE) - { - require_once($path.$directory.'/'.$class.'.php'); - } - - break; - } - } - - // Is the request a class extension? If so we load it too - if (file_exists(APPPATH.$directory.'/'.config_item('subclass_prefix').$class.'.php')) - { - $name = config_item('subclass_prefix').$class; - - if (class_exists($name, FALSE) === FALSE) - { - require_once(APPPATH.$directory.'/'.$name.'.php'); - } - } - - // Did we find the class? - if ($name === FALSE) - { - // Note: We use exit() rather than show_error() in order to avoid a - // self-referencing loop with the Exceptions class - set_status_header(503); - echo 'Unable to locate the specified class: '.$class.'.php'; - exit(5); // EXIT_UNK_CLASS - } - - // Keep track of what we just loaded - is_loaded($class); - - $_classes[$class] = isset($param) - ? new $name($param) - : new $name(); - return $_classes[$class]; - } -} - -// -------------------------------------------------------------------- - -if ( ! function_exists('is_loaded')) -{ - /** - * Keeps track of which libraries have been loaded. This function is - * called by the load_class() function above - * - * @param string - * @return array - */ - function &is_loaded($class = '') - { - static $_is_loaded = array(); - - if ($class !== '') - { - $_is_loaded[strtolower($class)] = $class; - } - - return $_is_loaded; - } -} - -// ------------------------------------------------------------------------ - -if ( ! function_exists('get_config')) -{ - /** - * Loads the main config.php file - * - * This function lets us grab the config file even if the Config class - * hasn't been instantiated yet - * - * @param array - * @return array - */ - function &get_config(Array $replace = array()) - { - static $config; - - if (empty($config)) - { - $file_path = APPPATH.'config/config.php'; - $found = FALSE; - if (file_exists($file_path)) - { - $found = TRUE; - require($file_path); - } - - // Is the config file in the environment folder? - if (file_exists($file_path = APPPATH.'config/'.ENVIRONMENT.'/config.php')) - { - require($file_path); - } - elseif ( ! $found) - { - set_status_header(503); - echo 'The configuration file does not exist.'; - exit(3); // EXIT_CONFIG - } - - // Does the $config array exist in the file? - if ( ! isset($config) OR ! is_array($config)) - { - set_status_header(503); - echo 'Your config file does not appear to be formatted correctly.'; - exit(3); // EXIT_CONFIG - } - } - - // Are any values being dynamically added or replaced? - foreach ($replace as $key => $val) - { - $config[$key] = $val; - } - - return $config; - } -} - -// ------------------------------------------------------------------------ - -if ( ! function_exists('config_item')) -{ - /** - * Returns the specified config item - * - * @param string - * @return mixed - */ - function config_item($item) - { - static $_config; - - if (empty($_config)) - { - // references cannot be directly assigned to static variables, so we use an array - $_config[0] =& get_config(); - } - - return isset($_config[0][$item]) ? $_config[0][$item] : NULL; - } -} - -// ------------------------------------------------------------------------ - -if ( ! function_exists('get_mimes')) -{ - /** - * Returns the MIME types array from config/mimes.php - * - * @return array - */ - function &get_mimes() - { - static $_mimes; - - if (empty($_mimes)) - { - $_mimes = file_exists(APPPATH.'config/mimes.php') - ? include(APPPATH.'config/mimes.php') - : array(); - - if (file_exists(APPPATH.'config/'.ENVIRONMENT.'/mimes.php')) - { - $_mimes = array_merge($_mimes, include(APPPATH.'config/'.ENVIRONMENT.'/mimes.php')); - } - } - - return $_mimes; - } -} - -// ------------------------------------------------------------------------ - -if ( ! function_exists('is_https')) -{ - /** - * Is HTTPS? - * - * Determines if the application is accessed via an encrypted - * (HTTPS) connection. - * - * @return bool - */ - function is_https() - { - if ( ! empty($_SERVER['HTTPS']) && strtolower($_SERVER['HTTPS']) !== 'off') - { - return TRUE; - } - elseif (isset($_SERVER['HTTP_X_FORWARDED_PROTO']) && strtolower($_SERVER['HTTP_X_FORWARDED_PROTO']) === 'https') - { - return TRUE; - } - elseif ( ! empty($_SERVER['HTTP_FRONT_END_HTTPS']) && strtolower($_SERVER['HTTP_FRONT_END_HTTPS']) !== 'off') - { - return TRUE; - } - - return FALSE; - } -} - -// ------------------------------------------------------------------------ - -if ( ! function_exists('is_cli')) -{ - - /** - * Is CLI? - * - * Test to see if a request was made from the command line. - * - * @return bool - */ - function is_cli() - { - return (PHP_SAPI === 'cli' OR defined('STDIN')); - } -} - -// ------------------------------------------------------------------------ - -if ( ! function_exists('show_error')) -{ - /** - * Error Handler - * - * This function lets us invoke the exception class and - * display errors using the standard error template located - * in application/views/errors/error_general.php - * This function will send the error page directly to the - * browser and exit. - * - * @param string - * @param int - * @param string - * @return void - */ - function show_error($message, $status_code = 500, $heading = 'An Error Was Encountered') - { - $status_code = abs($status_code); - if ($status_code < 100) - { - $exit_status = $status_code + 9; // 9 is EXIT__AUTO_MIN - $status_code = 500; - } - else - { - $exit_status = 1; // EXIT_ERROR - } - - $_error =& load_class('Exceptions', 'core'); - echo $_error->show_error($heading, $message, 'error_general', $status_code); - exit($exit_status); - } -} - -// ------------------------------------------------------------------------ - -if ( ! function_exists('show_404')) -{ - /** - * 404 Page Handler - * - * This function is similar to the show_error() function above - * However, instead of the standard error template it displays - * 404 errors. - * - * @param string - * @param bool - * @return void - */ - function show_404($page = '', $log_error = TRUE) - { - $_error =& load_class('Exceptions', 'core'); - $_error->show_404($page, $log_error); - exit(4); // EXIT_UNKNOWN_FILE - } -} - -// ------------------------------------------------------------------------ - -if ( ! function_exists('log_message')) -{ - /** - * Error Logging Interface - * - * We use this as a simple mechanism to access the logging - * class and send messages to be logged. - * - * @param string the error level: 'error', 'debug' or 'info' - * @param string the error message - * @return void - */ - function log_message($level, $message) - { - static $_log; - - if ($_log === NULL) - { - // references cannot be directly assigned to static variables, so we use an array - $_log[0] =& load_class('Log', 'core'); - } - - $_log[0]->write_log($level, $message); - } -} - -// ------------------------------------------------------------------------ - -if ( ! function_exists('set_status_header')) -{ - /** - * Set HTTP Status Header - * - * @param int the status code - * @param string - * @return void - */ - function set_status_header($code = 200, $text = '') - { - if (is_cli()) - { - return; - } - - if (empty($code) OR ! is_numeric($code)) - { - show_error('Status codes must be numeric', 500); - } - - if (empty($text)) - { - is_int($code) OR $code = (int) $code; - $stati = array( - 100 => 'Continue', - 101 => 'Switching Protocols', - - 200 => 'OK', - 201 => 'Created', - 202 => 'Accepted', - 203 => 'Non-Authoritative Information', - 204 => 'No Content', - 205 => 'Reset Content', - 206 => 'Partial Content', - - 300 => 'Multiple Choices', - 301 => 'Moved Permanently', - 302 => 'Found', - 303 => 'See Other', - 304 => 'Not Modified', - 305 => 'Use Proxy', - 307 => 'Temporary Redirect', - - 400 => 'Bad Request', - 401 => 'Unauthorized', - 402 => 'Payment Required', - 403 => 'Forbidden', - 404 => 'Not Found', - 405 => 'Method Not Allowed', - 406 => 'Not Acceptable', - 407 => 'Proxy Authentication Required', - 408 => 'Request Timeout', - 409 => 'Conflict', - 410 => 'Gone', - 411 => 'Length Required', - 412 => 'Precondition Failed', - 413 => 'Request Entity Too Large', - 414 => 'Request-URI Too Long', - 415 => 'Unsupported Media Type', - 416 => 'Requested Range Not Satisfiable', - 417 => 'Expectation Failed', - 422 => 'Unprocessable Entity', - 426 => 'Upgrade Required', - 428 => 'Precondition Required', - 429 => 'Too Many Requests', - 431 => 'Request Header Fields Too Large', - - 500 => 'Internal Server Error', - 501 => 'Not Implemented', - 502 => 'Bad Gateway', - 503 => 'Service Unavailable', - 504 => 'Gateway Timeout', - 505 => 'HTTP Version Not Supported', - 511 => 'Network Authentication Required', - ); - - if (isset($stati[$code])) - { - $text = $stati[$code]; - } - else - { - show_error('No status text available. Please check your status code number or supply your own message text.', 500); - } - } - - if (strpos(PHP_SAPI, 'cgi') === 0) - { - header('Status: '.$code.' '.$text, TRUE); - return; - } - - $server_protocol = (isset($_SERVER['SERVER_PROTOCOL']) && in_array($_SERVER['SERVER_PROTOCOL'], array('HTTP/1.0', 'HTTP/1.1', 'HTTP/2'), TRUE)) - ? $_SERVER['SERVER_PROTOCOL'] : 'HTTP/1.1'; - header($server_protocol.' '.$code.' '.$text, TRUE, $code); - } -} - -// -------------------------------------------------------------------- - -if ( ! function_exists('_error_handler')) -{ - /** - * Error Handler - * - * This is the custom error handler that is declared at the (relative) - * top of CodeIgniter.php. The main reason we use this is to permit - * PHP errors to be logged in our own log files since the user may - * not have access to server logs. Since this function effectively - * intercepts PHP errors, however, we also need to display errors - * based on the current error_reporting level. - * We do that with the use of a PHP error template. - * - * @param int $severity - * @param string $message - * @param string $filepath - * @param int $line - * @return void - */ - function _error_handler($severity, $message, $filepath, $line) - { - $is_error = (((E_ERROR | E_PARSE | E_COMPILE_ERROR | E_CORE_ERROR | E_USER_ERROR) & $severity) === $severity); - - // When an error occurred, set the status header to '500 Internal Server Error' - // to indicate to the client something went wrong. - // This can't be done within the $_error->show_php_error method because - // it is only called when the display_errors flag is set (which isn't usually - // the case in a production environment) or when errors are ignored because - // they are above the error_reporting threshold. - if ($is_error) - { - set_status_header(500); - } - - // Should we ignore the error? We'll get the current error_reporting - // level and add its bits with the severity bits to find out. - if (($severity & error_reporting()) !== $severity) - { - return; - } - - $_error =& load_class('Exceptions', 'core'); - $_error->log_exception($severity, $message, $filepath, $line); - - // Should we display the error? - if (str_ireplace(array('off', 'none', 'no', 'false', 'null'), '', ini_get('display_errors'))) - { - $_error->show_php_error($severity, $message, $filepath, $line); - } - - // If the error is fatal, the execution of the script should be stopped because - // errors can't be recovered from. Halting the script conforms with PHP's - // default error handling. See http://www.php.net/manual/en/errorfunc.constants.php - if ($is_error) - { - exit(1); // EXIT_ERROR - } - } -} - -// ------------------------------------------------------------------------ - -if ( ! function_exists('_exception_handler')) -{ - /** - * Exception Handler - * - * Sends uncaught exceptions to the logger and displays them - * only if display_errors is On so that they don't show up in - * production environments. - * - * @param Exception $exception - * @return void - */ - function _exception_handler($exception) - { - $_error =& load_class('Exceptions', 'core'); - $_error->log_exception('error', 'Exception: '.$exception->getMessage(), $exception->getFile(), $exception->getLine()); - - is_cli() OR set_status_header(500); - // Should we display the error? - if (str_ireplace(array('off', 'none', 'no', 'false', 'null'), '', ini_get('display_errors'))) - { - $_error->show_exception($exception); - } - - exit(1); // EXIT_ERROR - } -} - -// ------------------------------------------------------------------------ - -if ( ! function_exists('_shutdown_handler')) -{ - /** - * Shutdown Handler - * - * This is the shutdown handler that is declared at the top - * of CodeIgniter.php. The main reason we use this is to simulate - * a complete custom exception handler. - * - * E_STRICT is purposively neglected because such events may have - * been caught. Duplication or none? None is preferred for now. - * - * @link http://insomanic.me.uk/post/229851073/php-trick-catching-fatal-errors-e-error-with-a - * @return void - */ - function _shutdown_handler() - { - $last_error = error_get_last(); - if (isset($last_error) && - ($last_error['type'] & (E_ERROR | E_PARSE | E_CORE_ERROR | E_CORE_WARNING | E_COMPILE_ERROR | E_COMPILE_WARNING))) - { - _error_handler($last_error['type'], $last_error['message'], $last_error['file'], $last_error['line']); - } - } -} - -// -------------------------------------------------------------------- - -if ( ! function_exists('remove_invisible_characters')) -{ - /** - * Remove Invisible Characters - * - * This prevents sandwiching null characters - * between ascii characters, like Java\0script. - * - * @param string - * @param bool - * @return string - */ - function remove_invisible_characters($str, $url_encoded = TRUE) - { - $non_displayables = array(); - - // every control character except newline (dec 10), - // carriage return (dec 13) and horizontal tab (dec 09) - if ($url_encoded) - { - $non_displayables[] = '/%0[0-8bcef]/i'; // url encoded 00-08, 11, 12, 14, 15 - $non_displayables[] = '/%1[0-9a-f]/i'; // url encoded 16-31 - $non_displayables[] = '/%7f/i'; // url encoded 127 - } - - $non_displayables[] = '/[\x00-\x08\x0B\x0C\x0E-\x1F\x7F]+/S'; // 00-08, 11, 12, 14-31, 127 - - do - { - $str = preg_replace($non_displayables, '', $str, -1, $count); - } - while ($count); - - return $str; - } -} - -// ------------------------------------------------------------------------ - -if ( ! function_exists('html_escape')) -{ - /** - * Returns HTML escaped variable. - * - * @param mixed $var The input string or array of strings to be escaped. - * @param bool $double_encode $double_encode set to FALSE prevents escaping twice. - * @return mixed The escaped string or array of strings as a result. - */ - function html_escape($var, $double_encode = TRUE) - { - if (empty($var)) - { - return $var; - } - - if (is_array($var)) - { - foreach (array_keys($var) as $key) - { - $var[$key] = html_escape($var[$key], $double_encode); - } - - return $var; - } - - return htmlspecialchars($var, ENT_QUOTES, config_item('charset'), $double_encode); - } -} - -// ------------------------------------------------------------------------ - -if ( ! function_exists('_stringify_attributes')) -{ - /** - * Stringify attributes for use in HTML tags. - * - * Helper function used to convert a string, array, or object - * of attributes to a string. - * - * @param mixed string, array, object - * @param bool - * @return string - */ - function _stringify_attributes($attributes, $js = FALSE) - { - $atts = NULL; - - if (empty($attributes)) - { - return $atts; - } - - if (is_string($attributes)) - { - return ' '.$attributes; - } - - $attributes = (array) $attributes; - - foreach ($attributes as $key => $val) - { - $atts .= ($js) ? $key.'='.$val.',' : ' '.$key.'="'.$val.'"'; - } - - return rtrim($atts, ','); - } -} - -// ------------------------------------------------------------------------ - -if ( ! function_exists('function_usable')) -{ - /** - * Function usable - * - * Executes a function_exists() check, and if the Suhosin PHP - * extension is loaded - checks whether the function that is - * checked might be disabled in there as well. - * - * This is useful as function_exists() will return FALSE for - * functions disabled via the *disable_functions* php.ini - * setting, but not for *suhosin.executor.func.blacklist* and - * *suhosin.executor.disable_eval*. These settings will just - * terminate script execution if a disabled function is executed. - * - * The above described behavior turned out to be a bug in Suhosin, - * but even though a fix was committed for 0.9.34 on 2012-02-12, - * that version is yet to be released. This function will therefore - * be just temporary, but would probably be kept for a few years. - * - * @link http://www.hardened-php.net/suhosin/ - * @param string $function_name Function to check for - * @return bool TRUE if the function exists and is safe to call, - * FALSE otherwise. - */ - function function_usable($function_name) - { - static $_suhosin_func_blacklist; - - if (function_exists($function_name)) - { - if ( ! isset($_suhosin_func_blacklist)) - { - $_suhosin_func_blacklist = extension_loaded('suhosin') - ? explode(',', trim(ini_get('suhosin.executor.func.blacklist'))) - : array(); - } - - return ! in_array($function_name, $_suhosin_func_blacklist, TRUE); - } - - return FALSE; - } -} diff --git a/finecms/finecms/system/core/Config.php b/finecms/finecms/system/core/Config.php deleted file mode 100644 index cda6224..0000000 --- a/finecms/finecms/system/core/Config.php +++ /dev/null @@ -1,379 +0,0 @@ -config =& get_config(); - - // Set the base_url automatically if none was provided - if (empty($this->config['base_url'])) - { - if (isset($_SERVER['SERVER_ADDR'])) - { - if (strpos($_SERVER['SERVER_ADDR'], ':') !== FALSE) - { - $server_addr = '['.$_SERVER['SERVER_ADDR'].']'; - } - else - { - $server_addr = $_SERVER['SERVER_ADDR']; - } - - $base_url = (is_https() ? 'https' : 'http').'://'.$server_addr - .substr($_SERVER['SCRIPT_NAME'], 0, strpos($_SERVER['SCRIPT_NAME'], basename($_SERVER['SCRIPT_FILENAME']))); - } - else - { - $base_url = 'http://localhost/'; - } - - $this->set_item('base_url', $base_url); - } - - log_message('info', 'Config Class Initialized'); - } - - // -------------------------------------------------------------------- - - /** - * Load Config File - * - * @param string $file Configuration file name - * @param bool $use_sections Whether configuration values should be loaded into their own section - * @param bool $fail_gracefully Whether to just return FALSE or display an error message - * @return bool TRUE if the file was loaded correctly or FALSE on failure - */ - public function load($file = '', $use_sections = FALSE, $fail_gracefully = FALSE) - { - $file = ($file === '') ? 'config' : str_replace('.php', '', $file); - $loaded = FALSE; - - foreach ($this->_config_paths as $path) - { - foreach (array($file, ENVIRONMENT.DIRECTORY_SEPARATOR.$file) as $location) - { - $file_path = $path.'config/'.$location.'.php'; - if (in_array($file_path, $this->is_loaded, TRUE)) - { - return TRUE; - } - - if ( ! file_exists($file_path)) - { - continue; - } - - include($file_path); - - if ( ! isset($config) OR ! is_array($config)) - { - if ($fail_gracefully === TRUE) - { - return FALSE; - } - - show_error('Your '.$file_path.' file does not appear to contain a valid configuration array.'); - } - - if ($use_sections === TRUE) - { - $this->config[$file] = isset($this->config[$file]) - ? array_merge($this->config[$file], $config) - : $config; - } - else - { - $this->config = array_merge($this->config, $config); - } - - $this->is_loaded[] = $file_path; - $config = NULL; - $loaded = TRUE; - log_message('debug', 'Config file loaded: '.$file_path); - } - } - - if ($loaded === TRUE) - { - return TRUE; - } - elseif ($fail_gracefully === TRUE) - { - return FALSE; - } - - show_error('The configuration file '.$file.'.php does not exist.'); - } - - // -------------------------------------------------------------------- - - /** - * Fetch a config file item - * - * @param string $item Config item name - * @param string $index Index name - * @return string|null The configuration item or NULL if the item doesn't exist - */ - public function item($item, $index = '') - { - if ($index == '') - { - return isset($this->config[$item]) ? $this->config[$item] : NULL; - } - - return isset($this->config[$index], $this->config[$index][$item]) ? $this->config[$index][$item] : NULL; - } - - // -------------------------------------------------------------------- - - /** - * Fetch a config file item with slash appended (if not empty) - * - * @param string $item Config item name - * @return string|null The configuration item or NULL if the item doesn't exist - */ - public function slash_item($item) - { - if ( ! isset($this->config[$item])) - { - return NULL; - } - elseif (trim($this->config[$item]) === '') - { - return ''; - } - - return rtrim($this->config[$item], '/').'/'; - } - - // -------------------------------------------------------------------- - - /** - * Site URL - * - * Returns base_url . index_page [. uri_string] - * - * @uses CI_Config::_uri_string() - * - * @param string|string[] $uri URI string or an array of segments - * @param string $protocol - * @return string - */ - public function site_url($uri = '', $protocol = NULL) - { - $base_url = $this->slash_item('base_url'); - - if (isset($protocol)) - { - // For protocol-relative links - if ($protocol === '') - { - $base_url = substr($base_url, strpos($base_url, '//')); - } - else - { - $base_url = $protocol.substr($base_url, strpos($base_url, '://')); - } - } - - if (empty($uri)) - { - return $base_url.$this->item('index_page'); - } - - $uri = $this->_uri_string($uri); - - if ($this->item('enable_query_strings') === FALSE) - { - $suffix = isset($this->config['url_suffix']) ? $this->config['url_suffix'] : ''; - - if ($suffix !== '') - { - if (($offset = strpos($uri, '?')) !== FALSE) - { - $uri = substr($uri, 0, $offset).$suffix.substr($uri, $offset); - } - else - { - $uri .= $suffix; - } - } - - return $base_url.$this->slash_item('index_page').$uri; - } - elseif (strpos($uri, '?') === FALSE) - { - $uri = '?'.$uri; - } - - return $base_url.$this->item('index_page').$uri; - } - - // ------------------------------------------------------------- - - /** - * Base URL - * - * Returns base_url [. uri_string] - * - * @uses CI_Config::_uri_string() - * - * @param string|string[] $uri URI string or an array of segments - * @param string $protocol - * @return string - */ - public function base_url($uri = '', $protocol = NULL) - { - $base_url = $this->slash_item('base_url'); - - if (isset($protocol)) - { - // For protocol-relative links - if ($protocol === '') - { - $base_url = substr($base_url, strpos($base_url, '//')); - } - else - { - $base_url = $protocol.substr($base_url, strpos($base_url, '://')); - } - } - - return $base_url.$this->_uri_string($uri); - } - - // ------------------------------------------------------------- - - /** - * Build URI string - * - * @used-by CI_Config::site_url() - * @used-by CI_Config::base_url() - * - * @param string|string[] $uri URI string or an array of segments - * @return string - */ - protected function _uri_string($uri) - { - if ($this->item('enable_query_strings') === FALSE) - { - is_array($uri) && $uri = implode('/', $uri); - return ltrim($uri, '/'); - } - elseif (is_array($uri)) - { - return http_build_query($uri); - } - - return $uri; - } - - // -------------------------------------------------------------------- - - /** - * System URL - * - * @deprecated 3.0.0 Encourages insecure practices - * @return string - */ - public function system_url() - { - $x = explode('/', preg_replace('|/*(.+?)/*$|', '\\1', BASEPATH)); - return $this->slash_item('base_url').end($x).'/'; - } - - // -------------------------------------------------------------------- - - /** - * Set a config file item - * - * @param string $item Config item key - * @param string $value Config item value - * @return void - */ - public function set_item($item, $value) - { - $this->config[$item] = $value; - } - -} diff --git a/finecms/finecms/system/core/Controller.php b/finecms/finecms/system/core/Controller.php deleted file mode 100644 index 59a9167..0000000 --- a/finecms/finecms/system/core/Controller.php +++ /dev/null @@ -1,96 +0,0 @@ - $class) - { - $this->$var =& load_class($class); - } - - $this->load =& load_class('Loader', 'core'); - $this->load->initialize(); - log_message('info', 'Controller Class Initialized'); - } - - // -------------------------------------------------------------------- - - /** - * Get the CI singleton - * - * @static - * @return object - */ - public static function &get_instance() - { - return self::$instance; - } - -} diff --git a/finecms/finecms/system/core/Exceptions.php b/finecms/finecms/system/core/Exceptions.php deleted file mode 100644 index 5269096..0000000 --- a/finecms/finecms/system/core/Exceptions.php +++ /dev/null @@ -1,274 +0,0 @@ - 'Error', - E_WARNING => 'Warning', - E_PARSE => 'Parsing Error', - E_NOTICE => 'Notice', - E_CORE_ERROR => 'Core Error', - E_CORE_WARNING => 'Core Warning', - E_COMPILE_ERROR => 'Compile Error', - E_COMPILE_WARNING => 'Compile Warning', - E_USER_ERROR => 'User Error', - E_USER_WARNING => 'User Warning', - E_USER_NOTICE => 'User Notice', - E_STRICT => 'Runtime Notice' - ); - - /** - * Class constructor - * - * @return void - */ - public function __construct() - { - $this->ob_level = ob_get_level(); - // Note: Do not log messages from this constructor. - } - - // -------------------------------------------------------------------- - - /** - * Exception Logger - * - * Logs PHP generated error messages - * - * @param int $severity Log level - * @param string $message Error message - * @param string $filepath File path - * @param int $line Line number - * @return void - */ - public function log_exception($severity, $message, $filepath, $line) - { - $severity = isset($this->levels[$severity]) ? $this->levels[$severity] : $severity; - log_message('error', 'Severity: '.$severity.' --> '.$message.' '.$filepath.' '.$line); - } - - // -------------------------------------------------------------------- - - /** - * 404 Error Handler - * - * @uses CI_Exceptions::show_error() - * - * @param string $page Page URI - * @param bool $log_error Whether to log the error - * @return void - */ - public function show_404($page = '', $log_error = TRUE) - { - if (is_cli()) - { - $heading = 'Not Found'; - $message = 'The controller/method pair you requested was not found.'; - } - else - { - $heading = '404 Page Not Found'; - $message = 'The page you requested was not found.'; - } - - // By default we log this, but allow a dev to skip it - if ($log_error) - { - log_message('error', $heading.': '.$page); - } - - echo $this->show_error($heading, $message, 'error_404', 404); - exit(4); // EXIT_UNKNOWN_FILE - } - - // -------------------------------------------------------------------- - - /** - * General Error Page - * - * Takes an error message as input (either as a string or an array) - * and displays it using the specified template. - * - * @param string $heading Page heading - * @param string|string[] $message Error message - * @param string $template Template name - * @param int $status_code (default: 500) - * - * @return string Error page output - */ - public function show_error($heading, $message, $template = 'error_general', $status_code = 500) - { - $templates_path = config_item('error_views_path'); - if (empty($templates_path)) - { - $templates_path = VIEWPATH.'errors'.DIRECTORY_SEPARATOR; - } - - if (is_cli()) - { - $message = "\t".(is_array($message) ? implode("\n\t", $message) : $message); - $template = 'cli'.DIRECTORY_SEPARATOR.$template; - } - else - { - set_status_header($status_code); - $message = '

'.(is_array($message) ? implode('

', $message) : $message).'

'; - $template = 'html'.DIRECTORY_SEPARATOR.$template; - } - - if (ob_get_level() > $this->ob_level + 1) - { - ob_end_flush(); - } - ob_start(); - include($templates_path.$template.'.php'); - $buffer = ob_get_contents(); - ob_end_clean(); - return $buffer; - } - - // -------------------------------------------------------------------- - - public function show_exception($exception) - { - $templates_path = config_item('error_views_path'); - if (empty($templates_path)) - { - $templates_path = VIEWPATH.'errors'.DIRECTORY_SEPARATOR; - } - - $message = $exception->getMessage(); - if (empty($message)) - { - $message = '(null)'; - } - - if (is_cli()) - { - $templates_path .= 'cli'.DIRECTORY_SEPARATOR; - } - else - { - $templates_path .= 'html'.DIRECTORY_SEPARATOR; - } - - if (ob_get_level() > $this->ob_level + 1) - { - ob_end_flush(); - } - - ob_start(); - include($templates_path.'error_exception.php'); - $buffer = ob_get_contents(); - ob_end_clean(); - echo $buffer; - } - - // -------------------------------------------------------------------- - - /** - * Native PHP error handler - * - * @param int $severity Error level - * @param string $message Error message - * @param string $filepath File path - * @param int $line Line number - * @return void - */ - public function show_php_error($severity, $message, $filepath, $line) - { - $templates_path = config_item('error_views_path'); - if (empty($templates_path)) - { - $templates_path = VIEWPATH.'errors'.DIRECTORY_SEPARATOR; - } - - $severity = isset($this->levels[$severity]) ? $this->levels[$severity] : $severity; - - // For safety reasons we don't show the full file path in non-CLI requests - if ( ! is_cli()) - { - $filepath = str_replace('\\', '/', $filepath); - if (FALSE !== strpos($filepath, '/')) - { - $x = explode('/', $filepath); - $filepath = $x[count($x)-2].'/'.end($x); - } - - $template = 'html'.DIRECTORY_SEPARATOR.'error_php'; - } - else - { - $template = 'cli'.DIRECTORY_SEPARATOR.'error_php'; - } - - if (ob_get_level() > $this->ob_level + 1) - { - ob_end_flush(); - } - ob_start(); - include($templates_path.$template.'.php'); - $buffer = ob_get_contents(); - ob_end_clean(); - echo $buffer; - } - -} diff --git a/finecms/finecms/system/core/Hooks.php b/finecms/finecms/system/core/Hooks.php deleted file mode 100644 index f2d6f21..0000000 --- a/finecms/finecms/system/core/Hooks.php +++ /dev/null @@ -1,266 +0,0 @@ -item('enable_hooks') === FALSE) - { - return; - } - - // Grab the "hooks" definition file. - if (file_exists(APPPATH.'config/hooks.php')) - { - include(APPPATH.'config/hooks.php'); - } - - if (file_exists(APPPATH.'config/'.ENVIRONMENT.'/hooks.php')) - { - include(APPPATH.'config/'.ENVIRONMENT.'/hooks.php'); - } - - // If there are no hooks, we're done. - if ( ! isset($hook) OR ! is_array($hook)) - { - return; - } - - $this->hooks =& $hook; - $this->enabled = TRUE; - } - - // -------------------------------------------------------------------- - - /** - * Call Hook - * - * Calls a particular hook. Called by CodeIgniter.php. - * - * @uses CI_Hooks::_run_hook() - * - * @param string $which Hook name - * @return bool TRUE on success or FALSE on failure - */ - public function call_hook($which = '') - { - if ( ! $this->enabled OR ! isset($this->hooks[$which])) - { - return FALSE; - } - - if (is_array($this->hooks[$which]) && ! isset($this->hooks[$which]['function'])) - { - foreach ($this->hooks[$which] as $val) - { - $this->_run_hook($val); - } - } - else - { - $this->_run_hook($this->hooks[$which]); - } - - return TRUE; - } - - // -------------------------------------------------------------------- - - /** - * Run Hook - * - * Runs a particular hook - * - * @param array $data Hook details - * @return bool TRUE on success or FALSE on failure - */ - protected function _run_hook($data) - { - // Closures/lambda functions and array($object, 'method') callables - if (is_callable($data)) - { - is_array($data) - ? $data[0]->{$data[1]}() - : $data(); - - return TRUE; - } - elseif ( ! is_array($data)) - { - return FALSE; - } - - // ----------------------------------- - // Safety - Prevents run-away loops - // ----------------------------------- - - // If the script being called happens to have the same - // hook call within it a loop can happen - if ($this->_in_progress === TRUE) - { - return; - } - - // ----------------------------------- - // Set file path - // ----------------------------------- - - if ( ! isset($data['filepath'], $data['filename'])) - { - return FALSE; - } - - $filepath = APPPATH.$data['filepath'].'/'.$data['filename']; - - if ( ! file_exists($filepath)) - { - return FALSE; - } - - // Determine and class and/or function names - $class = empty($data['class']) ? FALSE : $data['class']; - $function = empty($data['function']) ? FALSE : $data['function']; - $params = isset($data['params']) ? $data['params'] : ''; - - if (empty($function)) - { - return FALSE; - } - - // Set the _in_progress flag - $this->_in_progress = TRUE; - - // Call the requested class and/or function - if ($class !== FALSE) - { - // The object is stored? - if (isset($this->_objects[$class])) - { - if (method_exists($this->_objects[$class], $function)) - { - $this->_objects[$class]->$function($params); - } - else - { - return $this->_in_progress = FALSE; - } - } - else - { - class_exists($class, FALSE) OR require_once($filepath); - - if ( ! class_exists($class, FALSE) OR ! method_exists($class, $function)) - { - return $this->_in_progress = FALSE; - } - - // Store the object and execute the method - $this->_objects[$class] = new $class(); - $this->_objects[$class]->$function($params); - } - } - else - { - function_exists($function) OR require_once($filepath); - - if ( ! function_exists($function)) - { - return $this->_in_progress = FALSE; - } - - $function($params); - } - - $this->_in_progress = FALSE; - return TRUE; - } - -} diff --git a/finecms/finecms/system/core/Input.php b/finecms/finecms/system/core/Input.php deleted file mode 100644 index af4f87c..0000000 --- a/finecms/finecms/system/core/Input.php +++ /dev/null @@ -1,895 +0,0 @@ -_allow_get_array = (config_item('allow_get_array') === TRUE); - $this->_enable_xss = (config_item('global_xss_filtering') === TRUE); - $this->_enable_csrf = (config_item('csrf_protection') === TRUE); - $this->_standardize_newlines = (bool) config_item('standardize_newlines'); - - $this->security =& load_class('Security', 'core'); - - // Do we need the UTF-8 class? - if (UTF8_ENABLED === TRUE) - { - $this->uni =& load_class('Utf8', 'core'); - } - - // Sanitize global arrays - $this->_sanitize_globals(); - - // CSRF Protection check - if ($this->_enable_csrf === TRUE && ! is_cli()) - { - $this->security->csrf_verify(); - } - - log_message('info', 'Input Class Initialized'); - } - - // -------------------------------------------------------------------- - - /** - * Fetch from array - * - * Internal method used to retrieve values from global arrays. - * - * @param array &$array $_GET, $_POST, $_COOKIE, $_SERVER, etc. - * @param mixed $index Index for item to be fetched from $array - * @param bool $xss_clean Whether to apply XSS filtering - * @return mixed - */ - protected function _fetch_from_array(&$array, $index = NULL, $xss_clean = NULL) - { - is_bool($xss_clean) OR $xss_clean = $this->_enable_xss; - - // If $index is NULL, it means that the whole $array is requested - isset($index) OR $index = array_keys($array); - - // allow fetching multiple keys at once - if (is_array($index)) - { - $output = array(); - foreach ($index as $key) - { - $output[$key] = $this->_fetch_from_array($array, $key, $xss_clean); - } - - return $output; - } - - if (isset($array[$index])) - { - $value = $array[$index]; - } - elseif (($count = preg_match_all('/(?:^[^\[]+)|\[[^]]*\]/', $index, $matches)) > 1) // Does the index contain array notation - { - $value = $array; - for ($i = 0; $i < $count; $i++) - { - $key = trim($matches[0][$i], '[]'); - if ($key === '') // Empty notation will return the value as array - { - break; - } - - if (isset($value[$key])) - { - $value = $value[$key]; - } - else - { - return NULL; - } - } - } - else - { - return NULL; - } - - return ($xss_clean === TRUE) - ? $this->security->xss_clean($value) - : $value; - } - - // -------------------------------------------------------------------- - - /** - * Fetch an item from the GET array - * - * @param mixed $index Index for item to be fetched from $_GET - * @param bool $xss_clean Whether to apply XSS filtering - * @return mixed - */ - public function get($index = NULL, $xss_clean = NULL) - { - return $this->_fetch_from_array($_GET, $index, $xss_clean); - } - - // -------------------------------------------------------------------- - - /** - * Fetch an item from the POST array - * - * @param mixed $index Index for item to be fetched from $_POST - * @param bool $xss_clean Whether to apply XSS filtering - * @return mixed - */ - public function post($index = NULL, $xss_clean = NULL) - { - return $this->_fetch_from_array($_POST, $index, $xss_clean); - } - - // -------------------------------------------------------------------- - - /** - * Fetch an item from POST data with fallback to GET - * - * @param string $index Index for item to be fetched from $_POST or $_GET - * @param bool $xss_clean Whether to apply XSS filtering - * @return mixed - */ - public function post_get($index, $xss_clean = NULL) - { - return isset($_POST[$index]) - ? $this->post($index, $xss_clean) - : $this->get($index, $xss_clean); - } - - // -------------------------------------------------------------------- - - /** - * Fetch an item from GET data with fallback to POST - * - * @param string $index Index for item to be fetched from $_GET or $_POST - * @param bool $xss_clean Whether to apply XSS filtering - * @return mixed - */ - public function get_post($index, $xss_clean = NULL) - { - return isset($_GET[$index]) - ? $this->get($index, $xss_clean) - : $this->post($index, $xss_clean); - } - - // -------------------------------------------------------------------- - - /** - * Fetch an item from the COOKIE array - * - * @param mixed $index Index for item to be fetched from $_COOKIE - * @param bool $xss_clean Whether to apply XSS filtering - * @return mixed - */ - public function cookie($index = NULL, $xss_clean = NULL) - { - return $this->_fetch_from_array($_COOKIE, $index, $xss_clean); - } - - // -------------------------------------------------------------------- - - /** - * Fetch an item from the SERVER array - * - * @param mixed $index Index for item to be fetched from $_SERVER - * @param bool $xss_clean Whether to apply XSS filtering - * @return mixed - */ - public function server($index, $xss_clean = NULL) - { - return $this->_fetch_from_array($_SERVER, $index, $xss_clean); - } - - // ------------------------------------------------------------------------ - - /** - * Fetch an item from the php://input stream - * - * Useful when you need to access PUT, DELETE or PATCH request data. - * - * @param string $index Index for item to be fetched - * @param bool $xss_clean Whether to apply XSS filtering - * @return mixed - */ - public function input_stream($index = NULL, $xss_clean = NULL) - { - // Prior to PHP 5.6, the input stream can only be read once, - // so we'll need to check if we have already done that first. - if ( ! is_array($this->_input_stream)) - { - // $this->raw_input_stream will trigger __get(). - parse_str($this->raw_input_stream, $this->_input_stream); - is_array($this->_input_stream) OR $this->_input_stream = array(); - } - - return $this->_fetch_from_array($this->_input_stream, $index, $xss_clean); - } - - // ------------------------------------------------------------------------ - - /** - * Set cookie - * - * Accepts an arbitrary number of parameters (up to 7) or an associative - * array in the first parameter containing all the values. - * - * @param string|mixed[] $name Cookie name or an array containing parameters - * @param string $value Cookie value - * @param int $expire Cookie expiration time in seconds - * @param string $domain Cookie domain (e.g.: '.yourdomain.com') - * @param string $path Cookie path (default: '/') - * @param string $prefix Cookie name prefix - * @param bool $secure Whether to only transfer cookies via SSL - * @param bool $httponly Whether to only makes the cookie accessible via HTTP (no javascript) - * @return void - */ - public function set_cookie($name, $value = '', $expire = '', $domain = '', $path = '/', $prefix = '', $secure = NULL, $httponly = NULL) - { - if (is_array($name)) - { - // always leave 'name' in last place, as the loop will break otherwise, due to $$item - foreach (array('value', 'expire', 'domain', 'path', 'prefix', 'secure', 'httponly', 'name') as $item) - { - if (isset($name[$item])) - { - $$item = $name[$item]; - } - } - } - - if ($prefix === '' && config_item('cookie_prefix') !== '') - { - $prefix = config_item('cookie_prefix'); - } - - if ($domain == '' && config_item('cookie_domain') != '') - { - $domain = config_item('cookie_domain'); - } - - if ($path === '/' && config_item('cookie_path') !== '/') - { - $path = config_item('cookie_path'); - } - - $secure = ($secure === NULL && config_item('cookie_secure') !== NULL) - ? (bool) config_item('cookie_secure') - : (bool) $secure; - - $httponly = ($httponly === NULL && config_item('cookie_httponly') !== NULL) - ? (bool) config_item('cookie_httponly') - : (bool) $httponly; - - if ( ! is_numeric($expire)) - { - $expire = time() - 86500; - } - else - { - $expire = ($expire > 0) ? time() + $expire : 0; - } - - setcookie($prefix.$name, $value, $expire, $path, $domain, $secure, $httponly); - } - - // -------------------------------------------------------------------- - - /** - * Fetch the IP Address - * - * Determines and validates the visitor's IP address. - * - * @return string IP address - */ - public function ip_address() - { - if ($this->ip_address !== FALSE) - { - return $this->ip_address; - } - - $proxy_ips = config_item('proxy_ips'); - if ( ! empty($proxy_ips) && ! is_array($proxy_ips)) - { - $proxy_ips = explode(',', str_replace(' ', '', $proxy_ips)); - } - - $this->ip_address = $this->server('REMOTE_ADDR'); - - if ($proxy_ips) - { - foreach (array('HTTP_X_FORWARDED_FOR', 'HTTP_CLIENT_IP', 'HTTP_X_CLIENT_IP', 'HTTP_X_CLUSTER_CLIENT_IP') as $header) - { - if (($spoof = $this->server($header)) !== NULL) - { - // Some proxies typically list the whole chain of IP - // addresses through which the client has reached us. - // e.g. client_ip, proxy_ip1, proxy_ip2, etc. - sscanf($spoof, '%[^,]', $spoof); - - if ( ! $this->valid_ip($spoof)) - { - $spoof = NULL; - } - else - { - break; - } - } - } - - if ($spoof) - { - for ($i = 0, $c = count($proxy_ips); $i < $c; $i++) - { - // Check if we have an IP address or a subnet - if (strpos($proxy_ips[$i], '/') === FALSE) - { - // An IP address (and not a subnet) is specified. - // We can compare right away. - if ($proxy_ips[$i] === $this->ip_address) - { - $this->ip_address = $spoof; - break; - } - - continue; - } - - // We have a subnet ... now the heavy lifting begins - isset($separator) OR $separator = $this->valid_ip($this->ip_address, 'ipv6') ? ':' : '.'; - - // If the proxy entry doesn't match the IP protocol - skip it - if (strpos($proxy_ips[$i], $separator) === FALSE) - { - continue; - } - - // Convert the REMOTE_ADDR IP address to binary, if needed - if ( ! isset($ip, $sprintf)) - { - if ($separator === ':') - { - // Make sure we're have the "full" IPv6 format - $ip = explode(':', - str_replace('::', - str_repeat(':', 9 - substr_count($this->ip_address, ':')), - $this->ip_address - ) - ); - - for ($j = 0; $j < 8; $j++) - { - $ip[$j] = intval($ip[$j], 16); - } - - $sprintf = '%016b%016b%016b%016b%016b%016b%016b%016b'; - } - else - { - $ip = explode('.', $this->ip_address); - $sprintf = '%08b%08b%08b%08b'; - } - - $ip = vsprintf($sprintf, $ip); - } - - // Split the netmask length off the network address - sscanf($proxy_ips[$i], '%[^/]/%d', $netaddr, $masklen); - - // Again, an IPv6 address is most likely in a compressed form - if ($separator === ':') - { - $netaddr = explode(':', str_replace('::', str_repeat(':', 9 - substr_count($netaddr, ':')), $netaddr)); - for ($j = 0; $j < 8; $j++) - { - $netaddr[$j] = intval($netaddr[$j], 16); - } - } - else - { - $netaddr = explode('.', $netaddr); - } - - // Convert to binary and finally compare - if (strncmp($ip, vsprintf($sprintf, $netaddr), $masklen) === 0) - { - $this->ip_address = $spoof; - break; - } - } - } - } - - if ( ! $this->valid_ip($this->ip_address)) - { - return $this->ip_address = '0.0.0.0'; - } - - return $this->ip_address; - } - - // -------------------------------------------------------------------- - - /** - * Validate IP Address - * - * @param string $ip IP address - * @param string $which IP protocol: 'ipv4' or 'ipv6' - * @return bool - */ - public function valid_ip($ip, $which = '') - { - switch (strtolower($which)) - { - case 'ipv4': - $which = FILTER_FLAG_IPV4; - break; - case 'ipv6': - $which = FILTER_FLAG_IPV6; - break; - default: - $which = NULL; - break; - } - - return (bool) filter_var($ip, FILTER_VALIDATE_IP, $which); - } - - // -------------------------------------------------------------------- - - /** - * Fetch User Agent string - * - * @return string|null User Agent string or NULL if it doesn't exist - */ - public function user_agent($xss_clean = NULL) - { - return $this->_fetch_from_array($_SERVER, 'HTTP_USER_AGENT', $xss_clean); - } - - // -------------------------------------------------------------------- - - /** - * Sanitize Globals - * - * Internal method serving for the following purposes: - * - * - Unsets $_GET data, if query strings are not enabled - * - Cleans POST, COOKIE and SERVER data - * - Standardizes newline characters to PHP_EOL - * - * @return void - */ - protected function _sanitize_globals() - { - // Is $_GET data allowed? If not we'll set the $_GET to an empty array - if ($this->_allow_get_array === FALSE) - { - $_GET = array(); - } - elseif (is_array($_GET)) - { - foreach ($_GET as $key => $val) - { - $_GET[$this->_clean_input_keys($key)] = $this->_clean_input_data($val); - } - } - - // Clean $_POST Data - if (is_array($_POST)) - { - foreach ($_POST as $key => $val) - { - $_POST[$this->_clean_input_keys($key)] = $this->_clean_input_data($val); - } - } - - // Clean $_COOKIE Data - if (is_array($_COOKIE)) - { - // Also get rid of specially treated cookies that might be set by a server - // or silly application, that are of no use to a CI application anyway - // but that when present will trip our 'Disallowed Key Characters' alarm - // http://www.ietf.org/rfc/rfc2109.txt - // note that the key names below are single quoted strings, and are not PHP variables - unset( - $_COOKIE['$Version'], - $_COOKIE['$Path'], - $_COOKIE['$Domain'] - ); - - foreach ($_COOKIE as $key => $val) - { - if (($cookie_key = $this->_clean_input_keys($key)) !== FALSE) - { - $_COOKIE[$cookie_key] = $this->_clean_input_data($val); - } - else - { - unset($_COOKIE[$key]); - } - } - } - - // Sanitize PHP_SELF - $_SERVER['PHP_SELF'] = strip_tags($_SERVER['PHP_SELF']); - - log_message('debug', 'Global POST, GET and COOKIE data sanitized'); - } - - // -------------------------------------------------------------------- - - /** - * Clean Input Data - * - * Internal method that aids in escaping data and - * standardizing newline characters to PHP_EOL. - * - * @param string|string[] $str Input string(s) - * @return string - */ - protected function _clean_input_data($str) - { - if (is_array($str)) - { - $new_array = array(); - foreach (array_keys($str) as $key) - { - $new_array[$this->_clean_input_keys($key)] = $this->_clean_input_data($str[$key]); - } - return $new_array; - } - - /* We strip slashes if magic quotes is on to keep things consistent - - NOTE: In PHP 5.4 get_magic_quotes_gpc() will always return 0 and - it will probably not exist in future versions at all. - */ - if ( ! is_php('5.4') && get_magic_quotes_gpc()) - { - $str = stripslashes($str); - } - - // Clean UTF-8 if supported - if (UTF8_ENABLED === TRUE) - { - $str = $this->uni->clean_string($str); - } - - // Remove control characters - $str = remove_invisible_characters($str, FALSE); - - // Standardize newlines if needed - if ($this->_standardize_newlines === TRUE) - { - return preg_replace('/(?:\r\n|[\r\n])/', PHP_EOL, $str); - } - - return $str; - } - - // -------------------------------------------------------------------- - - /** - * Clean Keys - * - * Internal method that helps to prevent malicious users - * from trying to exploit keys we make sure that keys are - * only named with alpha-numeric text and a few other items. - * - * @param string $str Input string - * @param bool $fatal Whether to terminate script exection - * or to return FALSE if an invalid - * key is encountered - * @return string|bool - */ - protected function _clean_input_keys($str, $fatal = TRUE) - { - if ( ! preg_match('/^[a-z0-9:_\/|-]+$/i', $str)) - { - if ($fatal === TRUE) - { - return FALSE; - } - else - { - set_status_header(503); - echo 'Disallowed Key Characters.'; - exit(7); // EXIT_USER_INPUT - } - } - - // Clean UTF-8 if supported - if (UTF8_ENABLED === TRUE) - { - return $this->uni->clean_string($str); - } - - return $str; - } - - // -------------------------------------------------------------------- - - /** - * Request Headers - * - * @param bool $xss_clean Whether to apply XSS filtering - * @return array - */ - public function request_headers($xss_clean = FALSE) - { - // If header is already defined, return it immediately - if ( ! empty($this->headers)) - { - return $this->_fetch_from_array($this->headers, NULL, $xss_clean); - } - - // In Apache, you can simply call apache_request_headers() - if (function_exists('apache_request_headers')) - { - $this->headers = apache_request_headers(); - } - else - { - isset($_SERVER['CONTENT_TYPE']) && $this->headers['Content-Type'] = $_SERVER['CONTENT_TYPE']; - - foreach ($_SERVER as $key => $val) - { - if (sscanf($key, 'HTTP_%s', $header) === 1) - { - // take SOME_HEADER and turn it into Some-Header - $header = str_replace('_', ' ', strtolower($header)); - $header = str_replace(' ', '-', ucwords($header)); - - $this->headers[$header] = $_SERVER[$key]; - } - } - } - - return $this->_fetch_from_array($this->headers, NULL, $xss_clean); - } - - // -------------------------------------------------------------------- - - /** - * Get Request Header - * - * Returns the value of a single member of the headers class member - * - * @param string $index Header name - * @param bool $xss_clean Whether to apply XSS filtering - * @return string|null The requested header on success or NULL on failure - */ - public function get_request_header($index, $xss_clean = FALSE) - { - static $headers; - - if ( ! isset($headers)) - { - empty($this->headers) && $this->request_headers(); - foreach ($this->headers as $key => $value) - { - $headers[strtolower($key)] = $value; - } - } - - $index = strtolower($index); - - if ( ! isset($headers[$index])) - { - return NULL; - } - - return ($xss_clean === TRUE) - ? $this->security->xss_clean($headers[$index]) - : $headers[$index]; - } - - // -------------------------------------------------------------------- - - /** - * Is AJAX request? - * - * Test to see if a request contains the HTTP_X_REQUESTED_WITH header. - * - * @return bool - */ - public function is_ajax_request() - { - return ( ! empty($_SERVER['HTTP_X_REQUESTED_WITH']) && strtolower($_SERVER['HTTP_X_REQUESTED_WITH']) === 'xmlhttprequest'); - } - - // -------------------------------------------------------------------- - - /** - * Is CLI request? - * - * Test to see if a request was made from the command line. - * - * @deprecated 3.0.0 Use is_cli() instead - * @return bool - */ - public function is_cli_request() - { - return is_cli(); - } - - // -------------------------------------------------------------------- - - /** - * Get Request Method - * - * Return the request method - * - * @param bool $upper Whether to return in upper or lower case - * (default: FALSE) - * @return string - */ - public function method($upper = FALSE) - { - return ($upper) - ? strtoupper($this->server('REQUEST_METHOD')) - : strtolower($this->server('REQUEST_METHOD')); - } - - // ------------------------------------------------------------------------ - - /** - * Magic __get() - * - * Allows read access to protected properties - * - * @param string $name - * @return mixed - */ - public function __get($name) - { - if ($name === 'raw_input_stream') - { - isset($this->_raw_input_stream) OR $this->_raw_input_stream = file_get_contents('php://input'); - return $this->_raw_input_stream; - } - elseif ($name === 'ip_address') - { - return $this->ip_address; - } - } - -} diff --git a/finecms/finecms/system/core/Lang.php b/finecms/finecms/system/core/Lang.php deleted file mode 100644 index 569b023..0000000 --- a/finecms/finecms/system/core/Lang.php +++ /dev/null @@ -1,203 +0,0 @@ -load($value, $idiom, $return, $add_suffix, $alt_path); - } - - return; - } - - $langfile = str_replace('.php', '', $langfile); - - if ($add_suffix === TRUE) - { - $langfile = preg_replace('/_lang$/', '', $langfile).'_lang'; - } - - $langfile .= '.php'; - - if (empty($idiom) OR ! preg_match('/^[a-z_-]+$/i', $idiom)) - { - $config =& get_config(); - $idiom = empty($config['language']) ? 'english' : $config['language']; - } - - if ($return === FALSE && isset($this->is_loaded[$langfile]) && $this->is_loaded[$langfile] === $idiom) - { - return; - } - - // Load the base file, so any others found can override it - $basepath = BASEPATH.'language/'.$idiom.'/'.$langfile; - if (($found = file_exists($basepath)) === TRUE) - { - include($basepath); - } - - // Do we have an alternative path to look in? - if ($alt_path !== '') - { - $alt_path .= 'language/'.$idiom.'/'.$langfile; - if (file_exists($alt_path)) - { - include($alt_path); - $found = TRUE; - } - } - else - { - foreach (get_instance()->load->get_package_paths(TRUE) as $package_path) - { - $package_path .= 'language/'.$idiom.'/'.$langfile; - if ($basepath !== $package_path && file_exists($package_path)) - { - include($package_path); - $found = TRUE; - break; - } - } - } - - if ($found !== TRUE) - { - show_error('Unable to load the requested language file: language/'.$idiom.'/'.$langfile); - } - - if ( ! isset($lang) OR ! is_array($lang)) - { - log_message('error', 'Language file contains no data: language/'.$idiom.'/'.$langfile); - - if ($return === TRUE) - { - return array(); - } - return; - } - - if ($return === TRUE) - { - return $lang; - } - - $this->is_loaded[$langfile] = $idiom; - $this->language = array_merge($this->language, $lang); - - log_message('info', 'Language file loaded: language/'.$idiom.'/'.$langfile); - return TRUE; - } - - // -------------------------------------------------------------------- - - /** - * Language line - * - * Fetches a single line of text from the language array - * - * @param string $line Language line key - * @param bool $log_errors Whether to log an error message if the line is not found - * @return string Translation - */ - public function line($line, $log_errors = TRUE) - { - $value = isset($this->language[$line]) ? $this->language[$line] : FALSE; - - // Because killer robots like unicorns! - if ($value === FALSE && $log_errors === TRUE) - { - log_message('error', 'Could not find the language line "'.$line.'"'); - } - - return $value; - } - -} diff --git a/finecms/finecms/system/core/Loader.php b/finecms/finecms/system/core/Loader.php deleted file mode 100644 index 5ed6adb..0000000 --- a/finecms/finecms/system/core/Loader.php +++ /dev/null @@ -1,1411 +0,0 @@ - TRUE); - - /** - * List of paths to load libraries from - * - * @var array - */ - protected $_ci_library_paths = array(APPPATH, BASEPATH); - - /** - * List of paths to load models from - * - * @var array - */ - protected $_ci_model_paths = array(APPPATH); - - /** - * List of paths to load helpers from - * - * @var array - */ - protected $_ci_helper_paths = array(APPPATH, BASEPATH); - - /** - * List of cached variables - * - * @var array - */ - protected $_ci_cached_vars = array(); - - /** - * List of loaded classes - * - * @var array - */ - protected $_ci_classes = array(); - - /** - * List of loaded models - * - * @var array - */ - protected $_ci_models = array(); - - /** - * List of loaded helpers - * - * @var array - */ - protected $_ci_helpers = array(); - - /** - * List of class name mappings - * - * @var array - */ - protected $_ci_varmap = array( - 'unit_test' => 'unit', - 'user_agent' => 'agent' - ); - - // -------------------------------------------------------------------- - - /** - * Class constructor - * - * Sets component load paths, gets the initial output buffering level. - * - * @return void - */ - public function __construct() - { - $this->_ci_ob_level = ob_get_level(); - $this->_ci_classes =& is_loaded(); - - log_message('info', 'Loader Class Initialized'); - } - - // -------------------------------------------------------------------- - - /** - * Initializer - * - * @todo Figure out a way to move this to the constructor - * without breaking *package_path*() methods. - * @uses CI_Loader::_ci_autoloader() - * @used-by CI_Controller::__construct() - * @return void - */ - public function initialize() - { - $this->_ci_autoloader(); - } - - // -------------------------------------------------------------------- - - /** - * Is Loaded - * - * A utility method to test if a class is in the self::$_ci_classes array. - * - * @used-by Mainly used by Form Helper function _get_validation_object(). - * - * @param string $class Class name to check for - * @return string|bool Class object name if loaded or FALSE - */ - public function is_loaded($class) - { - return array_search(ucfirst($class), $this->_ci_classes, TRUE); - } - - // -------------------------------------------------------------------- - - /** - * Library Loader - * - * Loads and instantiates libraries. - * Designed to be called from application controllers. - * - * @param string $library Library name - * @param array $params Optional parameters to pass to the library class constructor - * @param string $object_name An optional object name to assign to - * @return object - */ - public function library($library, $params = NULL, $object_name = NULL) - { - if (empty($library)) - { - return $this; - } - elseif (is_array($library)) - { - foreach ($library as $key => $value) - { - if (is_int($key)) - { - $this->library($value, $params); - } - else - { - $this->library($key, $params, $value); - } - } - - return $this; - } - - if ($params !== NULL && ! is_array($params)) - { - $params = NULL; - } - - $this->_ci_load_library($library, $params, $object_name); - return $this; - } - - // -------------------------------------------------------------------- - - /** - * Model Loader - * - * Loads and instantiates models. - * - * @param string $model Model name - * @param string $name An optional object name to assign to - * @param bool $db_conn An optional database connection configuration to initialize - * @return object - */ - public function model($model, $name = '', $db_conn = FALSE) - { - if (empty($model)) - { - return $this; - } - elseif (is_array($model)) - { - foreach ($model as $key => $value) - { - is_int($key) ? $this->model($value, '', $db_conn) : $this->model($key, $value, $db_conn); - } - - return $this; - } - - $path = ''; - - // Is the model in a sub-folder? If so, parse out the filename and path. - if (($last_slash = strrpos($model, '/')) !== FALSE) - { - // The path is in front of the last slash - $path = substr($model, 0, ++$last_slash); - - // And the model name behind it - $model = substr($model, $last_slash); - } - - if (empty($name)) - { - $name = $model; - } - - if (in_array($name, $this->_ci_models, TRUE)) - { - return $this; - } - - $CI =& get_instance(); - if (isset($CI->$name)) - { - throw new RuntimeException('The model name you are loading is the name of a resource that is already being used: '.$name); - } - - if ($db_conn !== FALSE && ! class_exists('CI_DB', FALSE)) - { - if ($db_conn === TRUE) - { - $db_conn = ''; - } - - $this->database($db_conn, FALSE, TRUE); - } - - // Note: All of the code under this condition used to be just: - // - // load_class('Model', 'core'); - // - // However, load_class() instantiates classes - // to cache them for later use and that prevents - // MY_Model from being an abstract class and is - // sub-optimal otherwise anyway. - if ( ! class_exists('CI_Model', FALSE)) - { - $app_path = APPPATH.'core'.DIRECTORY_SEPARATOR; - if (file_exists($app_path.'Model.php')) - { - require_once($app_path.'Model.php'); - if ( ! class_exists('CI_Model', FALSE)) - { - throw new RuntimeException($app_path."Model.php exists, but doesn't declare class CI_Model"); - } - } - elseif ( ! class_exists('CI_Model', FALSE)) - { - require_once(BASEPATH.'core'.DIRECTORY_SEPARATOR.'Model.php'); - } - - $class = config_item('subclass_prefix').'Model'; - if (file_exists($app_path.$class.'.php')) - { - require_once($app_path.$class.'.php'); - if ( ! class_exists($class, FALSE)) - { - throw new RuntimeException($app_path.$class.".php exists, but doesn't declare class ".$class); - } - } - } - - $model = ucfirst($model); - if ( ! class_exists($model, FALSE)) - { - foreach ($this->_ci_model_paths as $mod_path) - { - if ( ! file_exists($mod_path.'models/'.$path.$model.'.php')) - { - continue; - } - - require_once($mod_path.'models/'.$path.$model.'.php'); - if ( ! class_exists($model, FALSE)) - { - throw new RuntimeException($mod_path."models/".$path.$model.".php exists, but doesn't declare class ".$model); - } - - break; - } - - if ( ! class_exists($model, FALSE)) - { - throw new RuntimeException('Unable to locate the model you have specified: '.$model); - } - } - elseif ( ! is_subclass_of($model, 'CI_Model')) - { - throw new RuntimeException("Class ".$model." already exists and doesn't extend CI_Model"); - } - - $this->_ci_models[] = $name; - $CI->$name = new $model(); - return $this; - } - - // -------------------------------------------------------------------- - - /** - * Database Loader - * - * @param mixed $params Database configuration options - * @param bool $return Whether to return the database object - * @param bool $query_builder Whether to enable Query Builder - * (overrides the configuration setting) - * - * @return object|bool Database object if $return is set to TRUE, - * FALSE on failure, CI_Loader instance in any other case - */ - public function database($params = '', $return = FALSE, $query_builder = NULL) - { - // Grab the super object - $CI =& get_instance(); - - // Do we even need to load the database class? - if ($return === FALSE && $query_builder === NULL && isset($CI->db) && is_object($CI->db) && ! empty($CI->db->conn_id)) - { - return FALSE; - } - - require_once(BASEPATH.'database/DB.php'); - - if ($return === TRUE) - { - return DB($params, $query_builder); - } - - // Initialize the db variable. Needed to prevent - // reference errors with some configurations - $CI->db = ''; - - // Load the DB class - $CI->db =& DB($params, $query_builder); - return $this; - } - - // -------------------------------------------------------------------- - - /** - * Load the Database Utilities Class - * - * @param object $db Database object - * @param bool $return Whether to return the DB Utilities class object or not - * @return object - */ - public function dbutil($db = NULL, $return = FALSE) - { - $CI =& get_instance(); - - if ( ! is_object($db) OR ! ($db instanceof CI_DB)) - { - class_exists('CI_DB', FALSE) OR $this->database(); - $db =& $CI->db; - } - - require_once(BASEPATH.'database/DB_utility.php'); - require_once(BASEPATH.'database/drivers/'.$db->dbdriver.'/'.$db->dbdriver.'_utility.php'); - $class = 'CI_DB_'.$db->dbdriver.'_utility'; - - if ($return === TRUE) - { - return new $class($db); - } - - $CI->dbutil = new $class($db); - return $this; - } - - // -------------------------------------------------------------------- - - /** - * Load the Database Forge Class - * - * @param object $db Database object - * @param bool $return Whether to return the DB Forge class object or not - * @return object - */ - public function dbforge($db = NULL, $return = FALSE) - { - $CI =& get_instance(); - if ( ! is_object($db) OR ! ($db instanceof CI_DB)) - { - class_exists('CI_DB', FALSE) OR $this->database(); - $db =& $CI->db; - } - - require_once(BASEPATH.'database/DB_forge.php'); - require_once(BASEPATH.'database/drivers/'.$db->dbdriver.'/'.$db->dbdriver.'_forge.php'); - - if ( ! empty($db->subdriver)) - { - $driver_path = BASEPATH.'database/drivers/'.$db->dbdriver.'/subdrivers/'.$db->dbdriver.'_'.$db->subdriver.'_forge.php'; - if (file_exists($driver_path)) - { - require_once($driver_path); - $class = 'CI_DB_'.$db->dbdriver.'_'.$db->subdriver.'_forge'; - } - } - else - { - $class = 'CI_DB_'.$db->dbdriver.'_forge'; - } - - if ($return === TRUE) - { - return new $class($db); - } - - $CI->dbforge = new $class($db); - return $this; - } - - // -------------------------------------------------------------------- - - /** - * View Loader - * - * Loads "view" files. - * - * @param string $view View name - * @param array $vars An associative array of data - * to be extracted for use in the view - * @param bool $return Whether to return the view output - * or leave it to the Output class - * @return object|string - */ - public function view($view, $vars = array(), $return = FALSE) - { - return $this->_ci_load(array('_ci_view' => $view, '_ci_vars' => $this->_ci_prepare_view_vars($vars), '_ci_return' => $return)); - } - - // -------------------------------------------------------------------- - - /** - * Generic File Loader - * - * @param string $path File path - * @param bool $return Whether to return the file output - * @return object|string - */ - public function file($path, $return = FALSE) - { - return $this->_ci_load(array('_ci_path' => $path, '_ci_return' => $return)); - } - - // -------------------------------------------------------------------- - - /** - * Set Variables - * - * Once variables are set they become available within - * the controller class and its "view" files. - * - * @param array|object|string $vars - * An associative array or object containing values - * to be set, or a value's name if string - * @param string $val Value to set, only used if $vars is a string - * @return object - */ - public function vars($vars, $val = '') - { - $vars = is_string($vars) - ? array($vars => $val) - : $this->_ci_prepare_view_vars($vars); - - foreach ($vars as $key => $val) - { - $this->_ci_cached_vars[$key] = $val; - } - - return $this; - } - - // -------------------------------------------------------------------- - - /** - * Clear Cached Variables - * - * Clears the cached variables. - * - * @return CI_Loader - */ - public function clear_vars() - { - $this->_ci_cached_vars = array(); - return $this; - } - - // -------------------------------------------------------------------- - - /** - * Get Variable - * - * Check if a variable is set and retrieve it. - * - * @param string $key Variable name - * @return mixed The variable or NULL if not found - */ - public function get_var($key) - { - return isset($this->_ci_cached_vars[$key]) ? $this->_ci_cached_vars[$key] : NULL; - } - - // -------------------------------------------------------------------- - - /** - * Get Variables - * - * Retrieves all loaded variables. - * - * @return array - */ - public function get_vars() - { - return $this->_ci_cached_vars; - } - - // -------------------------------------------------------------------- - - /** - * Helper Loader - * - * @param string|string[] $helpers Helper name(s) - * @return object - */ - public function helper($helpers = array()) - { - is_array($helpers) OR $helpers = array($helpers); - foreach ($helpers as &$helper) - { - $filename = basename($helper); - $filepath = ($filename === $helper) ? '' : substr($helper, 0, strlen($helper) - strlen($filename)); - $filename = strtolower(preg_replace('#(_helper)?(\.php)?$#i', '', $filename)).'_helper'; - $helper = $filepath.$filename; - - if (isset($this->_ci_helpers[$helper])) - { - continue; - } - - // Is this a helper extension request? - $ext_helper = config_item('subclass_prefix').$filename; - $ext_loaded = FALSE; - foreach ($this->_ci_helper_paths as $path) - { - if (file_exists($path.'helpers/'.$ext_helper.'.php')) - { - include_once($path.'helpers/'.$ext_helper.'.php'); - $ext_loaded = TRUE; - } - } - - // If we have loaded extensions - check if the base one is here - if ($ext_loaded === TRUE) - { - $base_helper = BASEPATH.'helpers/'.$helper.'.php'; - if ( ! file_exists($base_helper)) - { - show_error('Unable to load the requested file: helpers/'.$helper.'.php'); - } - - include_once($base_helper); - $this->_ci_helpers[$helper] = TRUE; - log_message('info', 'Helper loaded: '.$helper); - continue; - } - - // No extensions found ... try loading regular helpers and/or overrides - foreach ($this->_ci_helper_paths as $path) - { - if (file_exists($path.'helpers/'.$helper.'.php')) - { - include_once($path.'helpers/'.$helper.'.php'); - - $this->_ci_helpers[$helper] = TRUE; - log_message('info', 'Helper loaded: '.$helper); - break; - } - } - - // unable to load the helper - if ( ! isset($this->_ci_helpers[$helper])) - { - show_error('Unable to load the requested file: helpers/'.$helper.'.php'); - } - } - - return $this; - } - - // -------------------------------------------------------------------- - - /** - * Load Helpers - * - * An alias for the helper() method in case the developer has - * written the plural form of it. - * - * @uses CI_Loader::helper() - * @param string|string[] $helpers Helper name(s) - * @return object - */ - public function helpers($helpers = array()) - { - return $this->helper($helpers); - } - - // -------------------------------------------------------------------- - - /** - * Language Loader - * - * Loads language files. - * - * @param string|string[] $files List of language file names to load - * @param string Language name - * @return object - */ - public function language($files, $lang = '') - { - get_instance()->lang->load($files, $lang); - return $this; - } - - // -------------------------------------------------------------------- - - /** - * Config Loader - * - * Loads a config file (an alias for CI_Config::load()). - * - * @uses CI_Config::load() - * @param string $file Configuration file name - * @param bool $use_sections Whether configuration values should be loaded into their own section - * @param bool $fail_gracefully Whether to just return FALSE or display an error message - * @return bool TRUE if the file was loaded correctly or FALSE on failure - */ - public function config($file, $use_sections = FALSE, $fail_gracefully = FALSE) - { - return get_instance()->config->load($file, $use_sections, $fail_gracefully); - } - - // -------------------------------------------------------------------- - - /** - * Driver Loader - * - * Loads a driver library. - * - * @param string|string[] $library Driver name(s) - * @param array $params Optional parameters to pass to the driver - * @param string $object_name An optional object name to assign to - * - * @return object|bool Object or FALSE on failure if $library is a string - * and $object_name is set. CI_Loader instance otherwise. - */ - public function driver($library, $params = NULL, $object_name = NULL) - { - if (is_array($library)) - { - foreach ($library as $key => $value) - { - if (is_int($key)) - { - $this->driver($value, $params); - } - else - { - $this->driver($key, $params, $value); - } - } - - return $this; - } - elseif (empty($library)) - { - return FALSE; - } - - if ( ! class_exists('CI_Driver_Library', FALSE)) - { - // We aren't instantiating an object here, just making the base class available - require BASEPATH.'libraries/Driver.php'; - } - - // We can save the loader some time since Drivers will *always* be in a subfolder, - // and typically identically named to the library - if ( ! strpos($library, '/')) - { - $library = ucfirst($library).'/'.$library; - } - - return $this->library($library, $params, $object_name); - } - - // -------------------------------------------------------------------- - - /** - * Add Package Path - * - * Prepends a parent path to the library, model, helper and config - * path arrays. - * - * @see CI_Loader::$_ci_library_paths - * @see CI_Loader::$_ci_model_paths - * @see CI_Loader::$_ci_helper_paths - * @see CI_Config::$_config_paths - * - * @param string $path Path to add - * @param bool $view_cascade (default: TRUE) - * @return object - */ - public function add_package_path($path, $view_cascade = TRUE) - { - $path = rtrim($path, '/').'/'; - - array_unshift($this->_ci_library_paths, $path); - array_unshift($this->_ci_model_paths, $path); - array_unshift($this->_ci_helper_paths, $path); - - $this->_ci_view_paths = array($path.'views/' => $view_cascade) + $this->_ci_view_paths; - - // Add config file path - $config =& $this->_ci_get_component('config'); - $config->_config_paths[] = $path; - - return $this; - } - - // -------------------------------------------------------------------- - - /** - * Get Package Paths - * - * Return a list of all package paths. - * - * @param bool $include_base Whether to include BASEPATH (default: FALSE) - * @return array - */ - public function get_package_paths($include_base = FALSE) - { - return ($include_base === TRUE) ? $this->_ci_library_paths : $this->_ci_model_paths; - } - - // -------------------------------------------------------------------- - - /** - * Remove Package Path - * - * Remove a path from the library, model, helper and/or config - * path arrays if it exists. If no path is provided, the most recently - * added path will be removed removed. - * - * @param string $path Path to remove - * @return object - */ - public function remove_package_path($path = '') - { - $config =& $this->_ci_get_component('config'); - - if ($path === '') - { - array_shift($this->_ci_library_paths); - array_shift($this->_ci_model_paths); - array_shift($this->_ci_helper_paths); - array_shift($this->_ci_view_paths); - array_pop($config->_config_paths); - } - else - { - $path = rtrim($path, '/').'/'; - foreach (array('_ci_library_paths', '_ci_model_paths', '_ci_helper_paths') as $var) - { - if (($key = array_search($path, $this->{$var})) !== FALSE) - { - unset($this->{$var}[$key]); - } - } - - if (isset($this->_ci_view_paths[$path.'views/'])) - { - unset($this->_ci_view_paths[$path.'views/']); - } - - if (($key = array_search($path, $config->_config_paths)) !== FALSE) - { - unset($config->_config_paths[$key]); - } - } - - // make sure the application default paths are still in the array - $this->_ci_library_paths = array_unique(array_merge($this->_ci_library_paths, array(APPPATH, BASEPATH))); - $this->_ci_helper_paths = array_unique(array_merge($this->_ci_helper_paths, array(APPPATH, BASEPATH))); - $this->_ci_model_paths = array_unique(array_merge($this->_ci_model_paths, array(APPPATH))); - $this->_ci_view_paths = array_merge($this->_ci_view_paths, array(APPPATH.'views/' => TRUE)); - $config->_config_paths = array_unique(array_merge($config->_config_paths, array(APPPATH))); - - return $this; - } - - // -------------------------------------------------------------------- - - /** - * Internal CI Data Loader - * - * Used to load views and files. - * - * Variables are prefixed with _ci_ to avoid symbol collision with - * variables made available to view files. - * - * @used-by CI_Loader::view() - * @used-by CI_Loader::file() - * @param array $_ci_data Data to load - * @return object - */ - protected function _ci_load($_ci_data) - { - // Set the default data variables - foreach (array('_ci_view', '_ci_vars', '_ci_path', '_ci_return') as $_ci_val) - { - $$_ci_val = isset($_ci_data[$_ci_val]) ? $_ci_data[$_ci_val] : FALSE; - } - - $file_exists = FALSE; - - // Set the path to the requested file - if (is_string($_ci_path) && $_ci_path !== '') - { - $_ci_x = explode('/', $_ci_path); - $_ci_file = end($_ci_x); - } - else - { - $_ci_ext = pathinfo($_ci_view, PATHINFO_EXTENSION); - $_ci_file = ($_ci_ext === '') ? $_ci_view.'.php' : $_ci_view; - - foreach ($this->_ci_view_paths as $_ci_view_file => $cascade) - { - if (file_exists($_ci_view_file.$_ci_file)) - { - $_ci_path = $_ci_view_file.$_ci_file; - $file_exists = TRUE; - break; - } - - if ( ! $cascade) - { - break; - } - } - } - - if ( ! $file_exists && ! file_exists($_ci_path)) - { - show_error('Unable to load the requested file: '.$_ci_file); - } - - // This allows anything loaded using $this->load (views, files, etc.) - // to become accessible from within the Controller and Model functions. - $_ci_CI =& get_instance(); - foreach (get_object_vars($_ci_CI) as $_ci_key => $_ci_var) - { - if ( ! isset($this->$_ci_key)) - { - $this->$_ci_key =& $_ci_CI->$_ci_key; - } - } - - /* - * Extract and cache variables - * - * You can either set variables using the dedicated $this->load->vars() - * function or via the second parameter of this function. We'll merge - * the two types and cache them so that views that are embedded within - * other views can have access to these variables. - */ - empty($_ci_vars) OR $this->_ci_cached_vars = array_merge($this->_ci_cached_vars, $_ci_vars); - extract($this->_ci_cached_vars); - - /* - * Buffer the output - * - * We buffer the output for two reasons: - * 1. Speed. You get a significant speed boost. - * 2. So that the final rendered template can be post-processed by - * the output class. Why do we need post processing? For one thing, - * in order to show the elapsed page load time. Unless we can - * intercept the content right before it's sent to the browser and - * then stop the timer it won't be accurate. - */ - ob_start(); - - // If the PHP installation does not support short tags we'll - // do a little string replacement, changing the short tags - // to standard PHP echo statements. - if ( ! is_php('5.4') && ! ini_get('short_open_tag') && config_item('rewrite_short_tags') === TRUE) - { - echo eval('?>'.preg_replace('/;*\s*\?>/', '; ?>', str_replace(' $this->_ci_ob_level + 1) - { - ob_end_flush(); - } - else - { - $_ci_CI->output->append_output(ob_get_contents()); - @ob_end_clean(); - } - - return $this; - } - - // -------------------------------------------------------------------- - - /** - * Internal CI Library Loader - * - * @used-by CI_Loader::library() - * @uses CI_Loader::_ci_init_library() - * - * @param string $class Class name to load - * @param mixed $params Optional parameters to pass to the class constructor - * @param string $object_name Optional object name to assign to - * @return void - */ - protected function _ci_load_library($class, $params = NULL, $object_name = NULL) - { - // Get the class name, and while we're at it trim any slashes. - // The directory path can be included as part of the class name, - // but we don't want a leading slash - $class = str_replace('.php', '', trim($class, '/')); - - // Was the path included with the class name? - // We look for a slash to determine this - if (($last_slash = strrpos($class, '/')) !== FALSE) - { - // Extract the path - $subdir = substr($class, 0, ++$last_slash); - - // Get the filename from the path - $class = substr($class, $last_slash); - } - else - { - $subdir = ''; - } - - $class = ucfirst($class); - - // Is this a stock library? There are a few special conditions if so ... - if (file_exists(BASEPATH.'libraries/'.$subdir.$class.'.php')) - { - return $this->_ci_load_stock_library($class, $subdir, $params, $object_name); - } - - // Let's search for the requested library file and load it. - foreach ($this->_ci_library_paths as $path) - { - // BASEPATH has already been checked for - if ($path === BASEPATH) - { - continue; - } - - $filepath = $path.'libraries/'.$subdir.$class.'.php'; - - // Safety: Was the class already loaded by a previous call? - if (class_exists($class, FALSE)) - { - // Before we deem this to be a duplicate request, let's see - // if a custom object name is being supplied. If so, we'll - // return a new instance of the object - if ($object_name !== NULL) - { - $CI =& get_instance(); - if ( ! isset($CI->$object_name)) - { - return $this->_ci_init_library($class, '', $params, $object_name); - } - } - - log_message('debug', $class.' class already loaded. Second attempt ignored.'); - return; - } - // Does the file exist? No? Bummer... - elseif ( ! file_exists($filepath)) - { - continue; - } - - include_once($filepath); - return $this->_ci_init_library($class, '', $params, $object_name); - } - - // One last attempt. Maybe the library is in a subdirectory, but it wasn't specified? - if ($subdir === '') - { - return $this->_ci_load_library($class.'/'.$class, $params, $object_name); - } - - // If we got this far we were unable to find the requested class. - log_message('error', 'Unable to load the requested class: '.$class); - show_error('Unable to load the requested class: '.$class); - } - - // -------------------------------------------------------------------- - - /** - * Internal CI Stock Library Loader - * - * @used-by CI_Loader::_ci_load_library() - * @uses CI_Loader::_ci_init_library() - * - * @param string $library_name Library name to load - * @param string $file_path Path to the library filename, relative to libraries/ - * @param mixed $params Optional parameters to pass to the class constructor - * @param string $object_name Optional object name to assign to - * @return void - */ - protected function _ci_load_stock_library($library_name, $file_path, $params, $object_name) - { - $prefix = 'CI_'; - - if (class_exists($prefix.$library_name, FALSE)) - { - if (class_exists(config_item('subclass_prefix').$library_name, FALSE)) - { - $prefix = config_item('subclass_prefix'); - } - - // Before we deem this to be a duplicate request, let's see - // if a custom object name is being supplied. If so, we'll - // return a new instance of the object - if ($object_name !== NULL) - { - $CI =& get_instance(); - if ( ! isset($CI->$object_name)) - { - return $this->_ci_init_library($library_name, $prefix, $params, $object_name); - } - } - - log_message('debug', $library_name.' class already loaded. Second attempt ignored.'); - return; - } - - $paths = $this->_ci_library_paths; - array_pop($paths); // BASEPATH - array_pop($paths); // APPPATH (needs to be the first path checked) - array_unshift($paths, APPPATH); - - foreach ($paths as $path) - { - if (file_exists($path = $path.'libraries/'.$file_path.$library_name.'.php')) - { - // Override - include_once($path); - if (class_exists($prefix.$library_name, FALSE)) - { - return $this->_ci_init_library($library_name, $prefix, $params, $object_name); - } - else - { - log_message('debug', $path.' exists, but does not declare '.$prefix.$library_name); - } - } - } - - include_once(BASEPATH.'libraries/'.$file_path.$library_name.'.php'); - - // Check for extensions - $subclass = config_item('subclass_prefix').$library_name; - foreach ($paths as $path) - { - if (file_exists($path = $path.'libraries/'.$file_path.$subclass.'.php')) - { - include_once($path); - if (class_exists($subclass, FALSE)) - { - $prefix = config_item('subclass_prefix'); - break; - } - else - { - log_message('debug', $path.' exists, but does not declare '.$subclass); - } - } - } - - return $this->_ci_init_library($library_name, $prefix, $params, $object_name); - } - - // -------------------------------------------------------------------- - - /** - * Internal CI Library Instantiator - * - * @used-by CI_Loader::_ci_load_stock_library() - * @used-by CI_Loader::_ci_load_library() - * - * @param string $class Class name - * @param string $prefix Class name prefix - * @param array|null|bool $config Optional configuration to pass to the class constructor: - * FALSE to skip; - * NULL to search in config paths; - * array containing configuration data - * @param string $object_name Optional object name to assign to - * @return void - */ - protected function _ci_init_library($class, $prefix, $config = FALSE, $object_name = NULL) - { - // Is there an associated config file for this class? Note: these should always be lowercase - if ($config === NULL) - { - // Fetch the config paths containing any package paths - $config_component = $this->_ci_get_component('config'); - - if (is_array($config_component->_config_paths)) - { - $found = FALSE; - foreach ($config_component->_config_paths as $path) - { - // We test for both uppercase and lowercase, for servers that - // are case-sensitive with regard to file names. Load global first, - // override with environment next - if (file_exists($path.'config/'.strtolower($class).'.php')) - { - include($path.'config/'.strtolower($class).'.php'); - $found = TRUE; - } - elseif (file_exists($path.'config/'.ucfirst(strtolower($class)).'.php')) - { - include($path.'config/'.ucfirst(strtolower($class)).'.php'); - $found = TRUE; - } - - if (file_exists($path.'config/'.ENVIRONMENT.'/'.strtolower($class).'.php')) - { - include($path.'config/'.ENVIRONMENT.'/'.strtolower($class).'.php'); - $found = TRUE; - } - elseif (file_exists($path.'config/'.ENVIRONMENT.'/'.ucfirst(strtolower($class)).'.php')) - { - include($path.'config/'.ENVIRONMENT.'/'.ucfirst(strtolower($class)).'.php'); - $found = TRUE; - } - - // Break on the first found configuration, thus package - // files are not overridden by default paths - if ($found === TRUE) - { - break; - } - } - } - } - - $class_name = $prefix.$class; - - // Is the class name valid? - if ( ! class_exists($class_name, FALSE)) - { - log_message('error', 'Non-existent class: '.$class_name); - show_error('Non-existent class: '.$class_name); - } - - // Set the variable name we will assign the class to - // Was a custom class name supplied? If so we'll use it - if (empty($object_name)) - { - $object_name = strtolower($class); - if (isset($this->_ci_varmap[$object_name])) - { - $object_name = $this->_ci_varmap[$object_name]; - } - } - - // Don't overwrite existing properties - $CI =& get_instance(); - if (isset($CI->$object_name)) - { - if ($CI->$object_name instanceof $class_name) - { - log_message('debug', $class_name." has already been instantiated as '".$object_name."'. Second attempt aborted."); - return; - } - - show_error("Resource '".$object_name."' already exists and is not a ".$class_name." instance."); - } - - // Save the class name and object name - $this->_ci_classes[$object_name] = $class; - - // Instantiate the class - $CI->$object_name = isset($config) - ? new $class_name($config) - : new $class_name(); - } - - // -------------------------------------------------------------------- - - /** - * CI Autoloader - * - * Loads component listed in the config/autoload.php file. - * - * @used-by CI_Loader::initialize() - * @return void - */ - protected function _ci_autoloader() - { - if (file_exists(APPPATH.'config/autoload.php')) - { - include(APPPATH.'config/autoload.php'); - } - - if (file_exists(APPPATH.'config/'.ENVIRONMENT.'/autoload.php')) - { - include(APPPATH.'config/'.ENVIRONMENT.'/autoload.php'); - } - - if ( ! isset($autoload)) - { - return; - } - - // Autoload packages - if (isset($autoload['packages'])) - { - foreach ($autoload['packages'] as $package_path) - { - $this->add_package_path($package_path); - } - } - - // Load any custom config file - if (count($autoload['config']) > 0) - { - foreach ($autoload['config'] as $val) - { - $this->config($val); - } - } - - // Autoload helpers and languages - foreach (array('helper', 'language') as $type) - { - if (isset($autoload[$type]) && count($autoload[$type]) > 0) - { - $this->$type($autoload[$type]); - } - } - - // Autoload drivers - if (isset($autoload['drivers'])) - { - $this->driver($autoload['drivers']); - } - - // Load libraries - if (isset($autoload['libraries']) && count($autoload['libraries']) > 0) - { - // Load the database driver. - if (in_array('database', $autoload['libraries'])) - { - $this->database(); - $autoload['libraries'] = array_diff($autoload['libraries'], array('database')); - } - - // Load all other libraries - $this->library($autoload['libraries']); - } - - // Autoload models - if (isset($autoload['model'])) - { - $this->model($autoload['model']); - } - } - - // -------------------------------------------------------------------- - - /** - * Prepare variables for _ci_vars, to be later extract()-ed inside views - * - * Converts objects to associative arrays and filters-out internal - * variable names (i.e. keys prefixed with '_ci_'). - * - * @param mixed $vars - * @return array - */ - protected function _ci_prepare_view_vars($vars) - { - if ( ! is_array($vars)) - { - $vars = is_object($vars) - ? get_object_vars($vars) - : array(); - } - - foreach (array_keys($vars) as $key) - { - if (strncmp($key, '_ci_', 4) === 0) - { - unset($vars[$key]); - } - } - - return $vars; - } - - // -------------------------------------------------------------------- - - /** - * CI Component getter - * - * Get a reference to a specific library or model. - * - * @param string $component Component name - * @return bool - */ - protected function &_ci_get_component($component) - { - $CI =& get_instance(); - return $CI->$component; - } -} diff --git a/finecms/finecms/system/core/Log.php b/finecms/finecms/system/core/Log.php deleted file mode 100644 index d443aed..0000000 --- a/finecms/finecms/system/core/Log.php +++ /dev/null @@ -1,296 +0,0 @@ - 1, 'DEBUG' => 2, 'INFO' => 3, 'ALL' => 4); - - /** - * mbstring.func_overload flag - * - * @var bool - */ - protected static $func_overload; - - // -------------------------------------------------------------------- - - /** - * Class constructor - * - * @return void - */ - public function __construct() - { - $config =& get_config(); - - isset(self::$func_overload) OR self::$func_overload = (extension_loaded('mbstring') && ini_get('mbstring.func_overload')); - - $this->_log_path = ($config['log_path'] !== '') ? $config['log_path'] : APPPATH.'logs/'; - $this->_file_ext = (isset($config['log_file_extension']) && $config['log_file_extension'] !== '') - ? ltrim($config['log_file_extension'], '.') : 'php'; - - file_exists($this->_log_path) OR mkdir($this->_log_path, 0755, TRUE); - - if ( ! is_dir($this->_log_path) OR ! is_really_writable($this->_log_path)) - { - $this->_enabled = FALSE; - } - - if (is_numeric($config['log_threshold'])) - { - $this->_threshold = (int) $config['log_threshold']; - } - elseif (is_array($config['log_threshold'])) - { - $this->_threshold = 0; - $this->_threshold_array = array_flip($config['log_threshold']); - } - - if ( ! empty($config['log_date_format'])) - { - $this->_date_fmt = $config['log_date_format']; - } - - if ( ! empty($config['log_file_permissions']) && is_int($config['log_file_permissions'])) - { - $this->_file_permissions = $config['log_file_permissions']; - } - } - - // -------------------------------------------------------------------- - - /** - * Write Log File - * - * Generally this function will be called using the global log_message() function - * - * @param string $level The error level: 'error', 'debug' or 'info' - * @param string $msg The error message - * @return bool - */ - public function write_log($level, $msg) - { - if ($this->_enabled === FALSE) - { - return FALSE; - } - - $level = strtoupper($level); - - if (( ! isset($this->_levels[$level]) OR ($this->_levels[$level] > $this->_threshold)) - && ! isset($this->_threshold_array[$this->_levels[$level]])) - { - return FALSE; - } - - $filepath = $this->_log_path.'log-'.date('Y-m-d').'.'.$this->_file_ext; - $message = ''; - - if ( ! file_exists($filepath)) - { - $newfile = TRUE; - // Only add protection to php files - if ($this->_file_ext === 'php') - { - $message .= "\n\n"; - } - } - - if ( ! $fp = @fopen($filepath, 'ab')) - { - return FALSE; - } - - flock($fp, LOCK_EX); - - // Instantiating DateTime with microseconds appended to initial date is needed for proper support of this format - if (strpos($this->_date_fmt, 'u') !== FALSE) - { - $microtime_full = microtime(TRUE); - $microtime_short = sprintf("%06d", ($microtime_full - floor($microtime_full)) * 1000000); - $date = new DateTime(date('Y-m-d H:i:s.'.$microtime_short, $microtime_full)); - $date = $date->format($this->_date_fmt); - } - else - { - $date = date($this->_date_fmt); - } - - $message .= $this->_format_line($level, $date, $msg); - - for ($written = 0, $length = self::strlen($message); $written < $length; $written += $result) - { - if (($result = fwrite($fp, self::substr($message, $written))) === FALSE) - { - break; - } - } - - flock($fp, LOCK_UN); - fclose($fp); - - if (isset($newfile) && $newfile === TRUE) - { - chmod($filepath, $this->_file_permissions); - } - - return is_int($result); - } - - // -------------------------------------------------------------------- - - /** - * Format the log line. - * - * This is for extensibility of log formatting - * If you want to change the log format, extend the CI_Log class and override this method - * - * @param string $level The error level - * @param string $date Formatted date string - * @param string $message The log message - * @return string Formatted log line with a new line character '\n' at the end - */ - protected function _format_line($level, $date, $message) - { - return $level.' - '.$date.' --> '.$message."\n"; - } - - // -------------------------------------------------------------------- - - /** - * Byte-safe strlen() - * - * @param string $str - * @return int - */ - protected static function strlen($str) - { - return (self::$func_overload) - ? mb_strlen($str, '8bit') - : strlen($str); - } - - // -------------------------------------------------------------------- - - /** - * Byte-safe substr() - * - * @param string $str - * @param int $start - * @param int $length - * @return string - */ - protected static function substr($str, $start, $length = NULL) - { - if (self::$func_overload) - { - // mb_substr($str, $start, null, '8bit') returns an empty - // string on PHP 5.3 - isset($length) OR $length = ($start >= 0 ? self::strlen($str) - $start : -$start); - return mb_substr($str, $start, $length, '8bit'); - } - - return isset($length) - ? substr($str, $start, $length) - : substr($str, $start); - } -} diff --git a/finecms/finecms/system/core/Model.php b/finecms/finecms/system/core/Model.php deleted file mode 100644 index c809e7b..0000000 --- a/finecms/finecms/system/core/Model.php +++ /dev/null @@ -1,80 +0,0 @@ -$key; - } - -} diff --git a/finecms/finecms/system/core/Output.php b/finecms/finecms/system/core/Output.php deleted file mode 100644 index a3155fe..0000000 --- a/finecms/finecms/system/core/Output.php +++ /dev/null @@ -1,842 +0,0 @@ -_zlib_oc = (bool) ini_get('zlib.output_compression'); - $this->_compress_output = ( - $this->_zlib_oc === FALSE - && config_item('compress_output') === TRUE - && extension_loaded('zlib') - ); - - isset(self::$func_overload) OR self::$func_overload = (extension_loaded('mbstring') && ini_get('mbstring.func_overload')); - - // Get mime types for later - $this->mimes =& get_mimes(); - - log_message('info', 'Output Class Initialized'); - } - - // -------------------------------------------------------------------- - - /** - * Get Output - * - * Returns the current output string. - * - * @return string - */ - public function get_output() - { - return $this->final_output; - } - - // -------------------------------------------------------------------- - - /** - * Set Output - * - * Sets the output string. - * - * @param string $output Output data - * @return CI_Output - */ - public function set_output($output) - { - $this->final_output = $output; - return $this; - } - - // -------------------------------------------------------------------- - - /** - * Append Output - * - * Appends data onto the output string. - * - * @param string $output Data to append - * @return CI_Output - */ - public function append_output($output) - { - $this->final_output .= $output; - return $this; - } - - // -------------------------------------------------------------------- - - /** - * Set Header - * - * Lets you set a server header which will be sent with the final output. - * - * Note: If a file is cached, headers will not be sent. - * @todo We need to figure out how to permit headers to be cached. - * - * @param string $header Header - * @param bool $replace Whether to replace the old header value, if already set - * @return CI_Output - */ - public function set_header($header, $replace = TRUE) - { - // If zlib.output_compression is enabled it will compress the output, - // but it will not modify the content-length header to compensate for - // the reduction, causing the browser to hang waiting for more data. - // We'll just skip content-length in those cases. - if ($this->_zlib_oc && strncasecmp($header, 'content-length', 14) === 0) - { - return $this; - } - - $this->headers[] = array($header, $replace); - return $this; - } - - // -------------------------------------------------------------------- - - /** - * Set Content-Type Header - * - * @param string $mime_type Extension of the file we're outputting - * @param string $charset Character set (default: NULL) - * @return CI_Output - */ - public function set_content_type($mime_type, $charset = NULL) - { - if (strpos($mime_type, '/') === FALSE) - { - $extension = ltrim($mime_type, '.'); - - // Is this extension supported? - if (isset($this->mimes[$extension])) - { - $mime_type =& $this->mimes[$extension]; - - if (is_array($mime_type)) - { - $mime_type = current($mime_type); - } - } - } - - $this->mime_type = $mime_type; - - if (empty($charset)) - { - $charset = config_item('charset'); - } - - $header = 'Content-Type: '.$mime_type - .(empty($charset) ? '' : '; charset='.$charset); - - $this->headers[] = array($header, TRUE); - return $this; - } - - // -------------------------------------------------------------------- - - /** - * Get Current Content-Type Header - * - * @return string 'text/html', if not already set - */ - public function get_content_type() - { - for ($i = 0, $c = count($this->headers); $i < $c; $i++) - { - if (sscanf($this->headers[$i][0], 'Content-Type: %[^;]', $content_type) === 1) - { - return $content_type; - } - } - - return 'text/html'; - } - - // -------------------------------------------------------------------- - - /** - * Get Header - * - * @param string $header - * @return string - */ - public function get_header($header) - { - // Combine headers already sent with our batched headers - $headers = array_merge( - // We only need [x][0] from our multi-dimensional array - array_map('array_shift', $this->headers), - headers_list() - ); - - if (empty($headers) OR empty($header)) - { - return NULL; - } - - // Count backwards, in order to get the last matching header - for ($c = count($headers) - 1; $c > -1; $c--) - { - if (strncasecmp($header, $headers[$c], $l = self::strlen($header)) === 0) - { - return trim(self::substr($headers[$c], $l+1)); - } - } - - return NULL; - } - - // -------------------------------------------------------------------- - - /** - * Set HTTP Status Header - * - * As of version 1.7.2, this is an alias for common function - * set_status_header(). - * - * @param int $code Status code (default: 200) - * @param string $text Optional message - * @return CI_Output - */ - public function set_status_header($code = 200, $text = '') - { - set_status_header($code, $text); - return $this; - } - - // -------------------------------------------------------------------- - - /** - * Enable/disable Profiler - * - * @param bool $val TRUE to enable or FALSE to disable - * @return CI_Output - */ - public function enable_profiler($val = TRUE) - { - $this->enable_profiler = is_bool($val) ? $val : TRUE; - return $this; - } - - // -------------------------------------------------------------------- - - /** - * Set Profiler Sections - * - * Allows override of default/config settings for - * Profiler section display. - * - * @param array $sections Profiler sections - * @return CI_Output - */ - public function set_profiler_sections($sections) - { - if (isset($sections['query_toggle_count'])) - { - $this->_profiler_sections['query_toggle_count'] = (int) $sections['query_toggle_count']; - unset($sections['query_toggle_count']); - } - - foreach ($sections as $section => $enable) - { - $this->_profiler_sections[$section] = ($enable !== FALSE); - } - - return $this; - } - - // -------------------------------------------------------------------- - - /** - * Set Cache - * - * @param int $time Cache expiration time in minutes - * @return CI_Output - */ - public function cache($time) - { - $this->cache_expiration = is_numeric($time) ? $time : 0; - return $this; - } - - // -------------------------------------------------------------------- - - /** - * Display Output - * - * Processes and sends finalized output data to the browser along - * with any server headers and profile data. It also stops benchmark - * timers so the page rendering speed and memory usage can be shown. - * - * Note: All "view" data is automatically put into $this->final_output - * by controller class. - * - * @uses CI_Output::$final_output - * @param string $output Output data override - * @return void - */ - public function _display($output = '') - { - // Note: We use load_class() because we can't use $CI =& get_instance() - // since this function is sometimes called by the caching mechanism, - // which happens before the CI super object is available. - $BM =& load_class('Benchmark', 'core'); - $CFG =& load_class('Config', 'core'); - - // Grab the super object if we can. - if (class_exists('CI_Controller', FALSE)) - { - $CI =& get_instance(); - } - - // -------------------------------------------------------------------- - - // Set the output data - if ($output === '') - { - $output =& $this->final_output; - } - - // -------------------------------------------------------------------- - - // Do we need to write a cache file? Only if the controller does not have its - // own _output() method and we are not dealing with a cache file, which we - // can determine by the existence of the $CI object above - if ($this->cache_expiration > 0 && isset($CI) && ! method_exists($CI, '_output')) - { - $this->_write_cache($output); - } - - // -------------------------------------------------------------------- - - // Parse out the elapsed time and memory usage, - // then swap the pseudo-variables with the data - - $elapsed = $BM->elapsed_time('total_execution_time_start', 'total_execution_time_end'); - - if ($this->parse_exec_vars === TRUE) - { - $memory = round(memory_get_usage() / 1024 / 1024, 2).'MB'; - $output = str_replace(array('{elapsed_time}', '{memory_usage}'), array($elapsed, $memory), $output); - } - - // -------------------------------------------------------------------- - - // Is compression requested? - if (isset($CI) // This means that we're not serving a cache file, if we were, it would already be compressed - && $this->_compress_output === TRUE - && isset($_SERVER['HTTP_ACCEPT_ENCODING']) && strpos($_SERVER['HTTP_ACCEPT_ENCODING'], 'gzip') !== FALSE) - { - ob_start('ob_gzhandler'); - } - - // -------------------------------------------------------------------- - - // Are there any server headers to send? - if (count($this->headers) > 0) - { - foreach ($this->headers as $header) - { - @header($header[0], $header[1]); - } - } - - // -------------------------------------------------------------------- - - // Does the $CI object exist? - // If not we know we are dealing with a cache file so we'll - // simply echo out the data and exit. - if ( ! isset($CI)) - { - if ($this->_compress_output === TRUE) - { - if (isset($_SERVER['HTTP_ACCEPT_ENCODING']) && strpos($_SERVER['HTTP_ACCEPT_ENCODING'], 'gzip') !== FALSE) - { - header('Content-Encoding: gzip'); - header('Content-Length: '.self::strlen($output)); - } - else - { - // User agent doesn't support gzip compression, - // so we'll have to decompress our cache - $output = gzinflate(self::substr($output, 10, -8)); - } - } - - echo $output; - log_message('info', 'Final output sent to browser'); - log_message('debug', 'Total execution time: '.$elapsed); - return; - } - - // -------------------------------------------------------------------- - - // Do we need to generate profile data? - // If so, load the Profile class and run it. - if ($this->enable_profiler === TRUE) - { - $CI->load->library('profiler'); - if ( ! empty($this->_profiler_sections)) - { - $CI->profiler->set_sections($this->_profiler_sections); - } - - // If the output data contains closing and tags - // we will remove them and add them back after we insert the profile data - $output = preg_replace('|.*?|is', '', $output, -1, $count).$CI->profiler->run(); - if ($count > 0) - { - $output .= ''; - } - } - - // Does the controller contain a function named _output()? - // If so send the output there. Otherwise, echo it. - if (method_exists($CI, '_output')) - { - $CI->_output($output); - } - else - { - echo $output; // Send it to the browser! - } - - log_message('info', 'Final output sent to browser'); - log_message('debug', 'Total execution time: '.$elapsed); - } - - // -------------------------------------------------------------------- - - /** - * Write Cache - * - * @param string $output Output data to cache - * @return void - */ - public function _write_cache($output) - { - $CI =& get_instance(); - $path = $CI->config->item('cache_path'); - $cache_path = ($path === '') ? APPPATH.'cache/' : $path; - - if ( ! is_dir($cache_path) OR ! is_really_writable($cache_path)) - { - log_message('error', 'Unable to write cache file: '.$cache_path); - return; - } - - $uri = $CI->config->item('base_url') - .$CI->config->item('index_page') - .$CI->uri->uri_string(); - - if (($cache_query_string = $CI->config->item('cache_query_string')) && ! empty($_SERVER['QUERY_STRING'])) - { - if (is_array($cache_query_string)) - { - $uri .= '?'.http_build_query(array_intersect_key($_GET, array_flip($cache_query_string))); - } - else - { - $uri .= '?'.$_SERVER['QUERY_STRING']; - } - } - - $cache_path .= md5($uri); - - if ( ! $fp = @fopen($cache_path, 'w+b')) - { - log_message('error', 'Unable to write cache file: '.$cache_path); - return; - } - - if ( ! flock($fp, LOCK_EX)) - { - log_message('error', 'Unable to secure a file lock for file at: '.$cache_path); - fclose($fp); - return; - } - - // If output compression is enabled, compress the cache - // itself, so that we don't have to do that each time - // we're serving it - if ($this->_compress_output === TRUE) - { - $output = gzencode($output); - - if ($this->get_header('content-type') === NULL) - { - $this->set_content_type($this->mime_type); - } - } - - $expire = time() + ($this->cache_expiration * 60); - - // Put together our serialized info. - $cache_info = serialize(array( - 'expire' => $expire, - 'headers' => $this->headers - )); - - $output = $cache_info.'ENDCI--->'.$output; - - for ($written = 0, $length = self::strlen($output); $written < $length; $written += $result) - { - if (($result = fwrite($fp, self::substr($output, $written))) === FALSE) - { - break; - } - } - - flock($fp, LOCK_UN); - fclose($fp); - - if ( ! is_int($result)) - { - @unlink($cache_path); - log_message('error', 'Unable to write the complete cache content at: '.$cache_path); - return; - } - - chmod($cache_path, 0640); - log_message('debug', 'Cache file written: '.$cache_path); - - // Send HTTP cache-control headers to browser to match file cache settings. - $this->set_cache_header($_SERVER['REQUEST_TIME'], $expire); - } - - // -------------------------------------------------------------------- - - /** - * Update/serve cached output - * - * @uses CI_Config - * @uses CI_URI - * - * @param object &$CFG CI_Config class instance - * @param object &$URI CI_URI class instance - * @return bool TRUE on success or FALSE on failure - */ - public function _display_cache(&$CFG, &$URI) - { - $cache_path = ($CFG->item('cache_path') === '') ? APPPATH.'cache/' : $CFG->item('cache_path'); - - // Build the file path. The file name is an MD5 hash of the full URI - $uri = $CFG->item('base_url').$CFG->item('index_page').$URI->uri_string; - - if (($cache_query_string = $CFG->item('cache_query_string')) && ! empty($_SERVER['QUERY_STRING'])) - { - if (is_array($cache_query_string)) - { - $uri .= '?'.http_build_query(array_intersect_key($_GET, array_flip($cache_query_string))); - } - else - { - $uri .= '?'.$_SERVER['QUERY_STRING']; - } - } - - $filepath = $cache_path.md5($uri); - - if ( ! file_exists($filepath) OR ! $fp = @fopen($filepath, 'rb')) - { - return FALSE; - } - - flock($fp, LOCK_SH); - - $cache = (filesize($filepath) > 0) ? fread($fp, filesize($filepath)) : ''; - - flock($fp, LOCK_UN); - fclose($fp); - - // Look for embedded serialized file info. - if ( ! preg_match('/^(.*)ENDCI--->/', $cache, $match)) - { - return FALSE; - } - - $cache_info = unserialize($match[1]); - $expire = $cache_info['expire']; - - $last_modified = filemtime($filepath); - - // Has the file expired? - if ($_SERVER['REQUEST_TIME'] >= $expire && is_really_writable($cache_path)) - { - // If so we'll delete it. - @unlink($filepath); - log_message('debug', 'Cache file has expired. File deleted.'); - return FALSE; - } - - // Send the HTTP cache control headers - $this->set_cache_header($last_modified, $expire); - - // Add headers from cache file. - foreach ($cache_info['headers'] as $header) - { - $this->set_header($header[0], $header[1]); - } - - // Display the cache - $this->_display(self::substr($cache, self::strlen($match[0]))); - log_message('debug', 'Cache file is current. Sending it to browser.'); - return TRUE; - } - - // -------------------------------------------------------------------- - - /** - * Delete cache - * - * @param string $uri URI string - * @return bool - */ - public function delete_cache($uri = '') - { - $CI =& get_instance(); - $cache_path = $CI->config->item('cache_path'); - if ($cache_path === '') - { - $cache_path = APPPATH.'cache/'; - } - - if ( ! is_dir($cache_path)) - { - log_message('error', 'Unable to find cache path: '.$cache_path); - return FALSE; - } - - if (empty($uri)) - { - $uri = $CI->uri->uri_string(); - - if (($cache_query_string = $CI->config->item('cache_query_string')) && ! empty($_SERVER['QUERY_STRING'])) - { - if (is_array($cache_query_string)) - { - $uri .= '?'.http_build_query(array_intersect_key($_GET, array_flip($cache_query_string))); - } - else - { - $uri .= '?'.$_SERVER['QUERY_STRING']; - } - } - } - - $cache_path .= md5($CI->config->item('base_url').$CI->config->item('index_page').ltrim($uri, '/')); - - if ( ! @unlink($cache_path)) - { - log_message('error', 'Unable to delete cache file for '.$uri); - return FALSE; - } - - return TRUE; - } - - // -------------------------------------------------------------------- - - /** - * Set Cache Header - * - * Set the HTTP headers to match the server-side file cache settings - * in order to reduce bandwidth. - * - * @param int $last_modified Timestamp of when the page was last modified - * @param int $expiration Timestamp of when should the requested page expire from cache - * @return void - */ - public function set_cache_header($last_modified, $expiration) - { - $max_age = $expiration - $_SERVER['REQUEST_TIME']; - - if (isset($_SERVER['HTTP_IF_MODIFIED_SINCE']) && $last_modified <= strtotime($_SERVER['HTTP_IF_MODIFIED_SINCE'])) - { - $this->set_status_header(304); - exit; - } - - header('Pragma: public'); - header('Cache-Control: max-age='.$max_age.', public'); - header('Expires: '.gmdate('D, d M Y H:i:s', $expiration).' GMT'); - header('Last-modified: '.gmdate('D, d M Y H:i:s', $last_modified).' GMT'); - } - - // -------------------------------------------------------------------- - - /** - * Byte-safe strlen() - * - * @param string $str - * @return int - */ - protected static function strlen($str) - { - return (self::$func_overload) - ? mb_strlen($str, '8bit') - : strlen($str); - } - - // -------------------------------------------------------------------- - - /** - * Byte-safe substr() - * - * @param string $str - * @param int $start - * @param int $length - * @return string - */ - protected static function substr($str, $start, $length = NULL) - { - if (self::$func_overload) - { - // mb_substr($str, $start, null, '8bit') returns an empty - // string on PHP 5.3 - isset($length) OR $length = ($start >= 0 ? self::strlen($str) - $start : -$start); - return mb_substr($str, $start, $length, '8bit'); - } - - return isset($length) - ? substr($str, $start, $length) - : substr($str, $start); - } -} diff --git a/finecms/finecms/system/core/Router.php b/finecms/finecms/system/core/Router.php deleted file mode 100644 index 1abe4c4..0000000 --- a/finecms/finecms/system/core/Router.php +++ /dev/null @@ -1,515 +0,0 @@ -config =& load_class('Config', 'core'); - $this->uri =& load_class('URI', 'core'); - - $this->enable_query_strings = ( ! is_cli() && $this->config->item('enable_query_strings') === TRUE); - - // If a directory override is configured, it has to be set before any dynamic routing logic - is_array($routing) && isset($routing['directory']) && $this->set_directory($routing['directory']); - $this->_set_routing(); - - // Set any routing overrides that may exist in the main index file - if (is_array($routing)) - { - empty($routing['controller']) OR $this->set_class($routing['controller']); - empty($routing['function']) OR $this->set_method($routing['function']); - } - - log_message('info', 'Router Class Initialized'); - } - - // -------------------------------------------------------------------- - - /** - * Set route mapping - * - * Determines what should be served based on the URI request, - * as well as any "routes" that have been set in the routing config file. - * - * @return void - */ - protected function _set_routing() - { - // Load the routes.php file. It would be great if we could - // skip this for enable_query_strings = TRUE, but then - // default_controller would be empty ... - if (file_exists(APPPATH.'config/routes.php')) - { - include(APPPATH.'config/routes.php'); - } - - if (file_exists(APPPATH.'config/'.ENVIRONMENT.'/routes.php')) - { - include(APPPATH.'config/'.ENVIRONMENT.'/routes.php'); - } - - // Validate & get reserved routes - if (isset($route) && is_array($route)) - { - isset($route['default_controller']) && $this->default_controller = $route['default_controller']; - isset($route['translate_uri_dashes']) && $this->translate_uri_dashes = $route['translate_uri_dashes']; - unset($route['default_controller'], $route['translate_uri_dashes']); - $this->routes = $route; - } - - // Are query strings enabled in the config file? Normally CI doesn't utilize query strings - // since URI segments are more search-engine friendly, but they can optionally be used. - // If this feature is enabled, we will gather the directory/class/method a little differently - if ($this->enable_query_strings) - { - // If the directory is set at this time, it means an override exists, so skip the checks - if ( ! isset($this->directory)) - { - $_d = $this->config->item('directory_trigger'); - $_d = isset($_GET[$_d]) ? trim($_GET[$_d], " \t\n\r\0\x0B/") : ''; - - if ($_d !== '') - { - $this->uri->filter_uri($_d); - $this->set_directory($_d); - } - } - - $_c = trim($this->config->item('controller_trigger')); - if ( ! empty($_GET[$_c])) - { - $this->uri->filter_uri($_GET[$_c]); - $this->set_class($_GET[$_c]); - - $_f = trim($this->config->item('function_trigger')); - if ( ! empty($_GET[$_f])) - { - $this->uri->filter_uri($_GET[$_f]); - $this->set_method($_GET[$_f]); - } - - $this->uri->rsegments = array( - 1 => $this->class, - 2 => $this->method - ); - } - else - { - $this->_set_default_controller(); - } - - // Routing rules don't apply to query strings and we don't need to detect - // directories, so we're done here - return; - } - - // Is there anything to parse? - if ($this->uri->uri_string !== '') - { - $this->_parse_routes(); - } - else - { - $this->_set_default_controller(); - } - } - - // -------------------------------------------------------------------- - - /** - * Set request route - * - * Takes an array of URI segments as input and sets the class/method - * to be called. - * - * @used-by CI_Router::_parse_routes() - * @param array $segments URI segments - * @return void - */ - protected function _set_request($segments = array()) - { - $segments = $this->_validate_request($segments); - // If we don't have any segments left - try the default controller; - // WARNING: Directories get shifted out of the segments array! - if (empty($segments)) - { - $this->_set_default_controller(); - return; - } - - if ($this->translate_uri_dashes === TRUE) - { - $segments[0] = str_replace('-', '_', $segments[0]); - if (isset($segments[1])) - { - $segments[1] = str_replace('-', '_', $segments[1]); - } - } - - $this->set_class($segments[0]); - if (isset($segments[1])) - { - $this->set_method($segments[1]); - } - else - { - $segments[1] = 'index'; - } - - array_unshift($segments, NULL); - unset($segments[0]); - $this->uri->rsegments = $segments; - } - - // -------------------------------------------------------------------- - - /** - * Set default controller - * - * @return void - */ - protected function _set_default_controller() - { - if (empty($this->default_controller)) - { - show_error('Unable to determine what should be displayed. A default route has not been specified in the routing file.'); - } - - // Is the method being specified? - if (sscanf($this->default_controller, '%[^/]/%s', $class, $method) !== 2) - { - $method = 'index'; - } - - if ( ! file_exists(APPPATH.'controllers/'.$this->directory.ucfirst($class).'.php')) - { - // This will trigger 404 later - return; - } - - $this->set_class($class); - $this->set_method($method); - - // Assign routed segments, index starting from 1 - $this->uri->rsegments = array( - 1 => $class, - 2 => $method - ); - - log_message('debug', 'No URI present. Default controller set.'); - } - - // -------------------------------------------------------------------- - - /** - * Validate request - * - * Attempts validate the URI request and determine the controller path. - * - * @used-by CI_Router::_set_request() - * @param array $segments URI segments - * @return mixed URI segments - */ - protected function _validate_request($segments) - { - $c = count($segments); - $directory_override = isset($this->directory); - - // Loop through our segments and return as soon as a controller - // is found or when such a directory doesn't exist - while ($c-- > 0) - { - $test = $this->directory - .ucfirst($this->translate_uri_dashes === TRUE ? str_replace('-', '_', $segments[0]) : $segments[0]); - - if ( ! file_exists(APPPATH.'controllers/'.$test.'.php') - && $directory_override === FALSE - && is_dir(APPPATH.'controllers/'.$this->directory.$segments[0]) - ) - { - $this->set_directory(array_shift($segments), TRUE); - continue; - } - - return $segments; - } - - // This means that all segments were actually directories - return $segments; - } - - // -------------------------------------------------------------------- - - /** - * Parse Routes - * - * Matches any routes that may exist in the config/routes.php file - * against the URI to determine if the class/method need to be remapped. - * - * @return void - */ - protected function _parse_routes() - { - // Turn the segment array into a URI string - $uri = implode('/', $this->uri->segments); - - // Get HTTP verb - $http_verb = isset($_SERVER['REQUEST_METHOD']) ? strtolower($_SERVER['REQUEST_METHOD']) : 'cli'; - - // Loop through the route array looking for wildcards - foreach ($this->routes as $key => $val) - { - // Check if route format is using HTTP verbs - if (is_array($val)) - { - $val = array_change_key_case($val, CASE_LOWER); - if (isset($val[$http_verb])) - { - $val = $val[$http_verb]; - } - else - { - continue; - } - } - - // Convert wildcards to RegEx - $key = str_replace(array(':any', ':num'), array('[^/]+', '[0-9]+'), $key); - - // Does the RegEx match? - if (preg_match('#^'.$key.'$#', $uri, $matches)) - { - // Are we using callbacks to process back-references? - if ( ! is_string($val) && is_callable($val)) - { - // Remove the original string from the matches array. - array_shift($matches); - - // Execute the callback using the values in matches as its parameters. - $val = call_user_func_array($val, $matches); - } - // Are we using the default routing method for back-references? - elseif (strpos($val, '$') !== FALSE && strpos($key, '(') !== FALSE) - { - $val = preg_replace('#^'.$key.'$#', $val, $uri); - } - - $this->_set_request(explode('/', $val)); - return; - } - } - - // If we got this far it means we didn't encounter a - // matching route so we'll set the site default route - $this->_set_request(array_values($this->uri->segments)); - } - - // -------------------------------------------------------------------- - - /** - * Set class name - * - * @param string $class Class name - * @return void - */ - public function set_class($class) - { - $this->class = str_replace(array('/', '.'), '', $class); - } - - // -------------------------------------------------------------------- - - /** - * Fetch the current class - * - * @deprecated 3.0.0 Read the 'class' property instead - * @return string - */ - public function fetch_class() - { - return $this->class; - } - - // -------------------------------------------------------------------- - - /** - * Set method name - * - * @param string $method Method name - * @return void - */ - public function set_method($method) - { - $this->method = $method; - } - - // -------------------------------------------------------------------- - - /** - * Fetch the current method - * - * @deprecated 3.0.0 Read the 'method' property instead - * @return string - */ - public function fetch_method() - { - return $this->method; - } - - // -------------------------------------------------------------------- - - /** - * Set directory name - * - * @param string $dir Directory name - * @param bool $append Whether we're appending rather than setting the full value - * @return void - */ - public function set_directory($dir, $append = FALSE) - { - if ($append !== TRUE OR empty($this->directory)) - { - $this->directory = str_replace('.', '', trim($dir, '/')).'/'; - } - else - { - $this->directory .= str_replace('.', '', trim($dir, '/')).'/'; - } - } - - // -------------------------------------------------------------------- - - /** - * Fetch directory - * - * Feches the sub-directory (if any) that contains the requested - * controller class. - * - * @deprecated 3.0.0 Read the 'directory' property instead - * @return string - */ - public function fetch_directory() - { - return $this->directory; - } - -} diff --git a/finecms/finecms/system/core/Security.php b/finecms/finecms/system/core/Security.php deleted file mode 100644 index 082ffa9..0000000 --- a/finecms/finecms/system/core/Security.php +++ /dev/null @@ -1,1080 +0,0 @@ -', '<', '>', - "'", '"', '&', '$', '#', - '{', '}', '[', ']', '=', - ';', '?', '%20', '%22', - '%3c', // < - '%253c', // < - '%3e', // > - '%0e', // > - '%28', // ( - '%29', // ) - '%2528', // ( - '%26', // & - '%24', // $ - '%3f', // ? - '%3b', // ; - '%3d' // = - ); - - /** - * Character set - * - * Will be overridden by the constructor. - * - * @var string - */ - public $charset = 'UTF-8'; - - /** - * XSS Hash - * - * Random Hash for protecting URLs. - * - * @var string - */ - protected $_xss_hash; - - /** - * CSRF Hash - * - * Random hash for Cross Site Request Forgery protection cookie - * - * @var string - */ - protected $_csrf_hash; - - /** - * CSRF Expire time - * - * Expiration time for Cross Site Request Forgery protection cookie. - * Defaults to two hours (in seconds). - * - * @var int - */ - protected $_csrf_expire = 7200; - - /** - * CSRF Token name - * - * Token name for Cross Site Request Forgery protection cookie. - * - * @var string - */ - protected $_csrf_token_name = 'ci_csrf_token'; - - /** - * CSRF Cookie name - * - * Cookie name for Cross Site Request Forgery protection cookie. - * - * @var string - */ - protected $_csrf_cookie_name = 'ci_csrf_token'; - - /** - * List of never allowed strings - * - * @var array - */ - protected $_never_allowed_str = array( - 'document.cookie' => '[removed]', - 'document.write' => '[removed]', - '.parentNode' => '[removed]', - '.innerHTML' => '[removed]', - '-moz-binding' => '[removed]', - '' => '-->', - ' '<![CDATA[', - '' => '<comment>', - '<%' => '<%' - ); - - /** - * List of never allowed regex replacements - * - * @var array - */ - protected $_never_allowed_regex = array( - 'javascript\s*:', - '(document|(document\.)?window)\.(location|on\w*)', - 'expression\s*(\(|&\#40;)', // CSS and IE - 'vbscript\s*:', // IE, surprise! - 'wscript\s*:', // IE - 'jscript\s*:', // IE - 'vbs\s*:', // IE - 'Redirect\s+30\d', - "([\"'])?data\s*:[^\\1]*?base64[^\\1]*?,[^\\1]*?\\1?" - ); - - /** - * Class constructor - * - * @return void - */ - public function __construct() - { - // Is CSRF protection enabled? - if (config_item('csrf_protection')) - { - // CSRF config - foreach (array('csrf_expire', 'csrf_token_name', 'csrf_cookie_name') as $key) - { - if (NULL !== ($val = config_item($key))) - { - $this->{'_'.$key} = $val; - } - } - - // Append application specific cookie prefix - if ($cookie_prefix = config_item('cookie_prefix')) - { - $this->_csrf_cookie_name = $cookie_prefix.$this->_csrf_cookie_name; - } - - // Set the CSRF hash - $this->_csrf_set_hash(); - } - - $this->charset = strtoupper(config_item('charset')); - - log_message('info', 'Security Class Initialized'); - } - - // -------------------------------------------------------------------- - - /** - * CSRF Verify - * - * @return CI_Security - */ - public function csrf_verify() - { - // If it's not a POST request we will set the CSRF cookie - if (strtoupper($_SERVER['REQUEST_METHOD']) !== 'POST') - { - return $this->csrf_set_cookie(); - } - - // Check if URI has been whitelisted from CSRF checks - if ($exclude_uris = config_item('csrf_exclude_uris')) - { - $uri = load_class('URI', 'core'); - foreach ($exclude_uris as $excluded) - { - if (preg_match('#^'.$excluded.'$#i'.(UTF8_ENABLED ? 'u' : ''), $uri->uri_string())) - { - return $this; - } - } - } - - // Check CSRF token validity, but don't error on mismatch just yet - we'll want to regenerate - $valid = isset($_POST[$this->_csrf_token_name], $_COOKIE[$this->_csrf_cookie_name]) - && hash_equals($_POST[$this->_csrf_token_name], $_COOKIE[$this->_csrf_cookie_name]); - - // We kill this since we're done and we don't want to pollute the _POST array - unset($_POST[$this->_csrf_token_name]); - - // Regenerate on every submission? - if (config_item('csrf_regenerate')) - { - // Nothing should last forever - unset($_COOKIE[$this->_csrf_cookie_name]); - $this->_csrf_hash = NULL; - } - - $this->_csrf_set_hash(); - $this->csrf_set_cookie(); - - if ($valid !== TRUE) - { - $this->csrf_show_error(); - } - - log_message('info', 'CSRF token verified'); - return $this; - } - - // -------------------------------------------------------------------- - - /** - * CSRF Set Cookie - * - * @codeCoverageIgnore - * @return CI_Security - */ - public function csrf_set_cookie() - { - $expire = time() + $this->_csrf_expire; - $secure_cookie = (bool) config_item('cookie_secure'); - - if ($secure_cookie && ! is_https()) - { - return FALSE; - } - - setcookie( - $this->_csrf_cookie_name, - $this->_csrf_hash, - $expire, - config_item('cookie_path'), - config_item('cookie_domain'), - $secure_cookie, - config_item('cookie_httponly') - ); - log_message('info', 'CSRF cookie sent'); - - return $this; - } - - // -------------------------------------------------------------------- - - /** - * Show CSRF Error - * - * @return void - */ - public function csrf_show_error() - { - show_error('The action you have requested is not allowed.', 403); - } - - // -------------------------------------------------------------------- - - /** - * Get CSRF Hash - * - * @see CI_Security::$_csrf_hash - * @return string CSRF hash - */ - public function get_csrf_hash() - { - return $this->_csrf_hash; - } - - // -------------------------------------------------------------------- - - /** - * Get CSRF Token Name - * - * @see CI_Security::$_csrf_token_name - * @return string CSRF token name - */ - public function get_csrf_token_name() - { - return $this->_csrf_token_name; - } - - // -------------------------------------------------------------------- - - /** - * XSS Clean - * - * Sanitizes data so that Cross Site Scripting Hacks can be - * prevented. This method does a fair amount of work but - * it is extremely thorough, designed to prevent even the - * most obscure XSS attempts. Nothing is ever 100% foolproof, - * of course, but I haven't been able to get anything passed - * the filter. - * - * Note: Should only be used to deal with data upon submission. - * It's not something that should be used for general - * runtime processing. - * - * @link http://channel.bitflux.ch/wiki/XSS_Prevention - * Based in part on some code and ideas from Bitflux. - * - * @link http://ha.ckers.org/xss.html - * To help develop this script I used this great list of - * vulnerabilities along with a few other hacks I've - * harvested from examining vulnerabilities in other programs. - * - * @param string|string[] $str Input data - * @param bool $is_image Whether the input is an image - * @return string - */ - public function xss_clean($str, $is_image = FALSE) - { - // Is the string an array? - if (is_array($str)) - { - foreach ($str as $key => &$value) - { - $str[$key] = $this->xss_clean($value); - } - - return $str; - } - - // Remove Invisible Characters - $str = remove_invisible_characters($str); - - /* - * URL Decode - * - * Just in case stuff like this is submitted: - * - * Google - * - * Note: Use rawurldecode() so it does not remove plus signs - */ - if (stripos($str, '%') !== false) - { - do - { - $oldstr = $str; - $str = rawurldecode($str); - $str = preg_replace_callback('#%(?:\s*[0-9a-f]){2,}#i', array($this, '_urldecodespaces'), $str); - } - while ($oldstr !== $str); - unset($oldstr); - } - - /* - * Convert character entities to ASCII - * - * This permits our tests below to work reliably. - * We only convert entities that are within tags since - * these are the ones that will pose security problems. - */ - $str = preg_replace_callback("/[^a-z0-9>]+[a-z0-9]+=([\'\"]).*?\\1/si", array($this, '_convert_attribute'), $str); - $str = preg_replace_callback('/<\w+.*/si', array($this, '_decode_entity'), $str); - - // Remove Invisible Characters Again! - $str = remove_invisible_characters($str); - - /* - * Convert all tabs to spaces - * - * This prevents strings like this: ja vascript - * NOTE: we deal with spaces between characters later. - * NOTE: preg_replace was found to be amazingly slow here on - * large blocks of data, so we use str_replace. - */ - $str = str_replace("\t", ' ', $str); - - // Capture converted string for later comparison - $converted_string = $str; - - // Remove Strings that are never allowed - $str = $this->_do_never_allowed($str); - - /* - * Makes PHP tags safe - * - * Note: XML tags are inadvertently replaced too: - * - * '), array('<?', '?>'), $str); - } - - /* - * Compact any exploded words - * - * This corrects words like: j a v a s c r i p t - * These words are compacted back to their correct state. - */ - $words = array( - 'javascript', 'expression', 'vbscript', 'jscript', 'wscript', - 'vbs', 'script', 'base64', 'applet', 'alert', 'document', - 'write', 'cookie', 'window', 'confirm', 'prompt', 'eval' - ); - - foreach ($words as $word) - { - $word = implode('\s*', str_split($word)).'\s*'; - - // We only want to do this when it is followed by a non-word character - // That way valid stuff like "dealer to" does not become "dealerto" - $str = preg_replace_callback('#('.substr($word, 0, -3).')(\W)#is', array($this, '_compact_exploded_words'), $str); - } - - /* - * Remove disallowed Javascript in links or img tags - * We used to do some version comparisons and use of stripos(), - * but it is dog slow compared to these simplified non-capturing - * preg_match(), especially if the pattern exists in the string - * - * Note: It was reported that not only space characters, but all in - * the following pattern can be parsed as separators between a tag name - * and its attributes: [\d\s"\'`;,\/\=\(\x00\x0B\x09\x0C] - * ... however, remove_invisible_characters() above already strips the - * hex-encoded ones, so we'll skip them below. - */ - do - { - $original = $str; - - if (preg_match('/]+([^>]*?)(?:>|$)#si', array($this, '_js_link_removal'), $str); - } - - if (preg_match('/]*?)(?:\s?/?>|$)#si', array($this, '_js_img_removal'), $str); - } - - if (preg_match('/script|xss/i', $str)) - { - $str = preg_replace('##si', '[removed]', $str); - } - } - while ($original !== $str); - unset($original); - - /* - * Sanitize naughty HTML elements - * - * If a tag containing any of the words in the list - * below is found, the tag gets converted to entities. - * - * So this: - * Becomes: <blink> - */ - $pattern = '#' - .'<((?/*\s*)((?[a-z0-9]+)(?=[^a-z0-9]|$)|.+)' // tag start and name, followed by a non-tag character - .'[^\s\042\047a-z0-9>/=]*' // a valid attribute character immediately after the tag would count as a separator - // optional attributes - .'(?(?:[\s\042\047/=]*' // non-attribute characters, excluding > (tag close) for obvious reasons - .'[^\s\042\047>/=]+' // attribute characters - // optional attribute-value - .'(?:\s*=' // attribute-value separator - .'(?:[^\s\042\047=><`]+|\s*\042[^\042]*\042|\s*\047[^\047]*\047|\s*(?U:[^\s\042\047=><`]*))' // single, double or non-quoted value - .')?' // end optional attribute-value group - .')*)' // end optional attributes group - .'[^>]*)(?\>)?#isS'; - - // Note: It would be nice to optimize this for speed, BUT - // only matching the naughty elements here results in - // false positives and in turn - vulnerabilities! - do - { - $old_str = $str; - $str = preg_replace_callback($pattern, array($this, '_sanitize_naughty_html'), $str); - } - while ($old_str !== $str); - unset($old_str); - - /* - * Sanitize naughty scripting elements - * - * Similar to above, only instead of looking for - * tags it looks for PHP and JavaScript commands - * that are disallowed. Rather than removing the - * code, it simply converts the parenthesis to entities - * rendering the code un-executable. - * - * For example: eval('some code') - * Becomes: eval('some code') - */ - $str = preg_replace( - '#(alert|prompt|confirm|cmd|passthru|eval|exec|expression|system|fopen|fsockopen|file|file_get_contents|readfile|unlink)(\s*)$(.*?)$#si', - '\\1\\2(\\3)', - $str - ); - - // Final clean up - // This adds a bit of extra precaution in case - // something got through the above filters - $str = $this->_do_never_allowed($str); - - /* - * Images are Handled in a Special Way - * - Essentially, we want to know that after all of the character - * conversion is done whether any unwanted, likely XSS, code was found. - * If not, we return TRUE, as the image is clean. - * However, if the string post-conversion does not matched the - * string post-removal of XSS, then it fails, as there was unwanted XSS - * code found and removed/changed during processing. - */ - if ($is_image === TRUE) - { - return ($str === $converted_string); - } - - return $str; - } - - // -------------------------------------------------------------------- - - /** - * XSS Hash - * - * Generates the XSS hash if needed and returns it. - * - * @see CI_Security::$_xss_hash - * @return string XSS hash - */ - public function xss_hash() - { - if ($this->_xss_hash === NULL) - { - $rand = $this->get_random_bytes(16); - $this->_xss_hash = ($rand === FALSE) - ? md5(uniqid(mt_rand(), TRUE)) - : bin2hex($rand); - } - - return $this->_xss_hash; - } - - // -------------------------------------------------------------------- - - /** - * Get random bytes - * - * @param int $length Output length - * @return string - */ - public function get_random_bytes($length) - { - if (empty($length) OR ! ctype_digit((string) $length)) - { - return FALSE; - } - - if (function_exists('random_bytes')) - { - try - { - // The cast is required to avoid TypeError - return random_bytes((int) $length); - } - catch (Exception $e) - { - // If random_bytes() can't do the job, we can't either ... - // There's no point in using fallbacks. - log_message('error', $e->getMessage()); - return FALSE; - } - } - - // Unfortunately, none of the following PRNGs is guaranteed to exist ... - if (defined('MCRYPT_DEV_URANDOM') && ($output = mcrypt_create_iv($length, MCRYPT_DEV_URANDOM)) !== FALSE) - { - return $output; - } - - - if (is_readable('/dev/urandom') && ($fp = fopen('/dev/urandom', 'rb')) !== FALSE) - { - // Try not to waste entropy ... - is_php('5.4') && stream_set_chunk_size($fp, $length); - $output = fread($fp, $length); - fclose($fp); - if ($output !== FALSE) - { - return $output; - } - } - - if (function_exists('openssl_random_pseudo_bytes')) - { - return openssl_random_pseudo_bytes($length); - } - - return FALSE; - } - - // -------------------------------------------------------------------- - - /** - * HTML Entities Decode - * - * A replacement for html_entity_decode() - * - * The reason we are not using html_entity_decode() by itself is because - * while it is not technically correct to leave out the semicolon - * at the end of an entity most browsers will still interpret the entity - * correctly. html_entity_decode() does not convert entities without - * semicolons, so we are left with our own little solution here. Bummer. - * - * @link http://php.net/html-entity-decode - * - * @param string $str Input - * @param string $charset Character set - * @return string - */ - public function entity_decode($str, $charset = NULL) - { - if (strpos($str, '&') === FALSE) - { - return $str; - } - - static $_entities; - - isset($charset) OR $charset = $this->charset; - $flag = is_php('5.4') - ? ENT_COMPAT | ENT_HTML5 - : ENT_COMPAT; - - if ( ! isset($_entities)) - { - $_entities = array_map('strtolower', get_html_translation_table(HTML_ENTITIES, $flag, $charset)); - - // If we're not on PHP 5.4+, add the possibly dangerous HTML 5 - // entities to the array manually - if ($flag === ENT_COMPAT) - { - $_entities[':'] = ':'; - $_entities['('] = '('; - $_entities[')'] = ')'; - $_entities["\n"] = ' '; - $_entities["\t"] = ' '; - } - } - - do - { - $str_compare = $str; - - // Decode standard entities, avoiding false positives - if (preg_match_all('/&[a-z]{2,}(?![a-z;])/i', $str, $matches)) - { - $replace = array(); - $matches = array_unique(array_map('strtolower', $matches[0])); - foreach ($matches as &$match) - { - if (($char = array_search($match.';', $_entities, TRUE)) !== FALSE) - { - $replace[$match] = $char; - } - } - - $str = str_replace(array_keys($replace), array_values($replace), $str); - } - - // Decode numeric & UTF16 two byte entities - $str = html_entity_decode( - preg_replace('/(&#(?:x0*[0-9a-f]{2,5}(?![0-9a-f;])|(?:0*\d{2,4}(?![0-9;]))))/iS', '$1;', $str), - $flag, - $charset - ); - - if ($flag === ENT_COMPAT) - { - $str = str_replace(array_values($_entities), array_keys($_entities), $str); - } - } - while ($str_compare !== $str); - return $str; - } - - // -------------------------------------------------------------------- - - /** - * Sanitize Filename - * - * @param string $str Input file name - * @param bool $relative_path Whether to preserve paths - * @return string - */ - public function sanitize_filename($str, $relative_path = FALSE) - { - $bad = $this->filename_bad_chars; - - if ( ! $relative_path) - { - $bad[] = './'; - $bad[] = '/'; - } - - $str = remove_invisible_characters($str, FALSE); - - do - { - $old = $str; - $str = str_replace($bad, '', $str); - } - while ($old !== $str); - - return stripslashes($str); - } - - // ---------------------------------------------------------------- - - /** - * Strip Image Tags - * - * @param string $str - * @return string - */ - public function strip_image_tags($str) - { - return preg_replace( - array( - '##i', - '#`]+)).*?\>#i' - ), - '\\2', - $str - ); - } - - // ---------------------------------------------------------------- - - /** - * URL-decode taking spaces into account - * - * @see https://github.com/bcit-ci/CodeIgniter/issues/4877 - * @param array $matches - * @return string - */ - protected function _urldecodespaces($matches) - { - $input = $matches[0]; - $nospaces = preg_replace('#\s+#', '', $input); - return ($nospaces === $input) - ? $input - : rawurldecode($nospaces); - } - - // ---------------------------------------------------------------- - - /** - * Compact Exploded Words - * - * Callback method for xss_clean() to remove whitespace from - * things like 'j a v a s c r i p t'. - * - * @used-by CI_Security::xss_clean() - * @param array $matches - * @return string - */ - protected function _compact_exploded_words($matches) - { - return preg_replace('/\s+/s', '', $matches[1]).$matches[2]; - } - - // -------------------------------------------------------------------- - - /** - * Sanitize Naughty HTML - * - * Callback method for xss_clean() to remove naughty HTML elements. - * - * @used-by CI_Security::xss_clean() - * @param array $matches - * @return string - */ - protected function _sanitize_naughty_html($matches) - { - static $naughty_tags = array( - 'alert', 'area', 'prompt', 'confirm', 'applet', 'audio', 'basefont', 'base', 'behavior', 'bgsound', - 'blink', 'body', 'embed', 'expression', 'form', 'frameset', 'frame', 'head', 'html', 'ilayer', - 'iframe', 'input', 'button', 'select', 'isindex', 'layer', 'link', 'meta', 'keygen', 'object', - 'plaintext', 'style', 'script', 'textarea', 'title', 'math', 'video', 'svg', 'xml', 'xss' - ); - - static $evil_attributes = array( - 'on\w+', 'style', 'xmlns', 'formaction', 'form', 'xlink:href', 'FSCommand', 'seekSegmentTime' - ); - - // First, escape unclosed tags - if (empty($matches['closeTag'])) - { - return '<'.$matches[1]; - } - // Is the element that we caught naughty? If so, escape it - elseif (in_array(strtolower($matches['tagName']), $naughty_tags, TRUE)) - { - return '<'.$matches[1].'>'; - } - // For other tags, see if their attributes are "evil" and strip those - elseif (isset($matches['attributes'])) - { - // We'll store the already fitlered attributes here - $attributes = array(); - - // Attribute-catching pattern - $attributes_pattern = '#' - .'(?[^\s\042\047>/=]+)' // attribute characters - // optional attribute-value - .'(?:\s*=(?[^\s\042\047=><`]+|\s*\042[^\042]*\042|\s*\047[^\047]*\047|\s*(?U:[^\s\042\047=><`]*)))' // attribute-value separator - .'#i'; - - // Blacklist pattern for evil attribute names - $is_evil_pattern = '#^('.implode('|', $evil_attributes).')$#i'; - - // Each iteration filters a single attribute - do - { - // Strip any non-alpha characters that may precede an attribute. - // Browsers often parse these incorrectly and that has been a - // of numerous XSS issues we've had. - $matches['attributes'] = preg_replace('#^[^a-z]+#i', '', $matches['attributes']); - - if ( ! preg_match($attributes_pattern, $matches['attributes'], $attribute, PREG_OFFSET_CAPTURE)) - { - // No (valid) attribute found? Discard everything else inside the tag - break; - } - - if ( - // Is it indeed an "evil" attribute? - preg_match($is_evil_pattern, $attribute['name'][0]) - // Or does it have an equals sign, but no value and not quoted? Strip that too! - OR (trim($attribute['value'][0]) === '') - ) - { - $attributes[] = 'xss=removed'; - } - else - { - $attributes[] = $attribute[0][0]; - } - - $matches['attributes'] = substr($matches['attributes'], $attribute[0][1] + strlen($attribute[0][0])); - } - while ($matches['attributes'] !== ''); - - $attributes = empty($attributes) - ? '' - : ' '.implode(' ', $attributes); - return '<'.$matches['slash'].$matches['tagName'].$attributes.'>'; - } - - return $matches[0]; - } - - // -------------------------------------------------------------------- - - /** - * JS Link Removal - * - * Callback method for xss_clean() to sanitize links. - * - * This limits the PCRE backtracks, making it more performance friendly - * and prevents PREG_BACKTRACK_LIMIT_ERROR from being triggered in - * PHP 5.2+ on link-heavy strings. - * - * @used-by CI_Security::xss_clean() - * @param array $match - * @return string - */ - protected function _js_link_removal($match) - { - return str_replace( - $match[1], - preg_replace( - '#href=.*?(?:(?:alert|prompt|confirm)(?:\(|&\#40;)|javascript:|livescript:|mocha:|charset=|window\.|document\.|\.cookie|_filter_attributes($match[1]) - ), - $match[0] - ); - } - - // -------------------------------------------------------------------- - - /** - * JS Image Removal - * - * Callback method for xss_clean() to sanitize image tags. - * - * This limits the PCRE backtracks, making it more performance friendly - * and prevents PREG_BACKTRACK_LIMIT_ERROR from being triggered in - * PHP 5.2+ on image tag heavy strings. - * - * @used-by CI_Security::xss_clean() - * @param array $match - * @return string - */ - protected function _js_img_removal($match) - { - return str_replace( - $match[1], - preg_replace( - '#src=.*?(?:(?:alert|prompt|confirm|eval)(?:\(|&\#40;)|javascript:|livescript:|mocha:|charset=|window\.|document\.|\.cookie|_filter_attributes($match[1]) - ), - $match[0] - ); - } - - // -------------------------------------------------------------------- - - /** - * Attribute Conversion - * - * @used-by CI_Security::xss_clean() - * @param array $match - * @return string - */ - protected function _convert_attribute($match) - { - return str_replace(array('>', '<', '\\'), array('>', '<', '\\\\'), $match[0]); - } - - // -------------------------------------------------------------------- - - /** - * Filter Attributes - * - * Filters tag attributes for consistency and safety. - * - * @used-by CI_Security::_js_img_removal() - * @used-by CI_Security::_js_link_removal() - * @param string $str - * @return string - */ - protected function _filter_attributes($str) - { - $out = ''; - if (preg_match_all('#\s*[a-z\-]+\s*=\s*(\042|\047)([^\\1]*?)\\1#is', $str, $matches)) - { - foreach ($matches[0] as $match) - { - $out .= preg_replace('#/\*.*?\*/#s', '', $match); - } - } - - return $out; - } - - // -------------------------------------------------------------------- - - /** - * HTML Entity Decode Callback - * - * @used-by CI_Security::xss_clean() - * @param array $match - * @return string - */ - protected function _decode_entity($match) - { - // Protect GET variables in URLs - // 901119URL5918AMP18930PROTECT8198 - $match = preg_replace('|\&([a-z\_0-9\-]+)\=([a-z\_0-9\-/]+)|i', $this->xss_hash().'\\1=\\2', $match[0]); - - // Decode, then un-protect URL GET vars - return str_replace( - $this->xss_hash(), - '&', - $this->entity_decode($match, $this->charset) - ); - } - - // -------------------------------------------------------------------- - - /** - * Do Never Allowed - * - * @used-by CI_Security::xss_clean() - * @param string - * @return string - */ - protected function _do_never_allowed($str) - { - $str = str_replace(array_keys($this->_never_allowed_str), $this->_never_allowed_str, $str); - - foreach ($this->_never_allowed_regex as $regex) - { - $str = preg_replace('#'.$regex.'#is', '[removed]', $str); - } - - return $str; - } - - // -------------------------------------------------------------------- - - /** - * Set CSRF Hash and Cookie - * - * @return string - */ - protected function _csrf_set_hash() - { - if ($this->_csrf_hash === NULL) - { - // If the cookie exists we will use its value. - // We don't necessarily want to regenerate it with - // each page load since a page could contain embedded - // sub-pages causing this feature to fail - if (isset($_COOKIE[$this->_csrf_cookie_name]) && is_string($_COOKIE[$this->_csrf_cookie_name]) - && preg_match('#^[0-9a-f]{32}$#iS', $_COOKIE[$this->_csrf_cookie_name]) === 1) - { - return $this->_csrf_hash = $_COOKIE[$this->_csrf_cookie_name]; - } - - $rand = $this->get_random_bytes(16); - $this->_csrf_hash = ($rand === FALSE) - ? md5(uniqid(mt_rand(), TRUE)) - : bin2hex($rand); - } - - return $this->_csrf_hash; - } - -} diff --git a/finecms/finecms/system/core/URI.php b/finecms/finecms/system/core/URI.php deleted file mode 100644 index 3ccdfa7..0000000 --- a/finecms/finecms/system/core/URI.php +++ /dev/null @@ -1,643 +0,0 @@ -config =& load_class('Config', 'core'); - - // If query strings are enabled, we don't need to parse any segments. - // However, they don't make sense under CLI. - if (is_cli() OR $this->config->item('enable_query_strings') !== TRUE) - { - $this->_permitted_uri_chars = $this->config->item('permitted_uri_chars'); - - // If it's a CLI request, ignore the configuration - if (is_cli()) - { - $uri = $this->_parse_argv(); - } - else - { - $protocol = $this->config->item('uri_protocol'); - empty($protocol) && $protocol = 'REQUEST_URI'; - - switch ($protocol) - { - case 'AUTO': // For BC purposes only - case 'REQUEST_URI': - $uri = $this->_parse_request_uri(); - break; - case 'QUERY_STRING': - $uri = $this->_parse_query_string(); - break; - case 'PATH_INFO': - default: - $uri = isset($_SERVER[$protocol]) - ? $_SERVER[$protocol] - : $this->_parse_request_uri(); - break; - } - } - - $this->_set_uri_string($uri); - } - - log_message('info', 'URI Class Initialized'); - } - - // -------------------------------------------------------------------- - - /** - * Set URI String - * - * @param string $str - * @return void - */ - protected function _set_uri_string($str) - { - // Filter out control characters and trim slashes - $this->uri_string = trim(remove_invisible_characters($str, FALSE), '/'); - - if ($this->uri_string !== '') - { - // Remove the URL suffix, if present - if (($suffix = (string) $this->config->item('url_suffix')) !== '') - { - $slen = strlen($suffix); - - if (substr($this->uri_string, -$slen) === $suffix) - { - $this->uri_string = substr($this->uri_string, 0, -$slen); - } - } - - $this->segments[0] = NULL; - // Populate the segments array - foreach (explode('/', trim($this->uri_string, '/')) as $val) - { - $val = trim($val); - // Filter segments for security - $this->filter_uri($val); - - if ($val !== '') - { - $this->segments[] = $val; - } - } - - unset($this->segments[0]); - } - } - - // -------------------------------------------------------------------- - - /** - * Parse REQUEST_URI - * - * Will parse REQUEST_URI and automatically detect the URI from it, - * while fixing the query string if necessary. - * - * @return string - */ - protected function _parse_request_uri() - { - if ( ! isset($_SERVER['REQUEST_URI'], $_SERVER['SCRIPT_NAME'])) - { - return ''; - } - - // parse_url() returns false if no host is present, but the path or query string - // contains a colon followed by a number - $uri = parse_url('http://dummy'.$_SERVER['REQUEST_URI']); - $query = isset($uri['query']) ? $uri['query'] : ''; - $uri = isset($uri['path']) ? $uri['path'] : ''; - - if (isset($_SERVER['SCRIPT_NAME'][0])) - { - if (strpos($uri, $_SERVER['SCRIPT_NAME']) === 0) - { - $uri = (string) substr($uri, strlen($_SERVER['SCRIPT_NAME'])); - } - elseif (strpos($uri, dirname($_SERVER['SCRIPT_NAME'])) === 0) - { - $uri = (string) substr($uri, strlen(dirname($_SERVER['SCRIPT_NAME']))); - } - } - - // This section ensures that even on servers that require the URI to be in the query string (Nginx) a correct - // URI is found, and also fixes the QUERY_STRING server var and $_GET array. - if (trim($uri, '/') === '' && strncmp($query, '/', 1) === 0) - { - $query = explode('?', $query, 2); - $uri = $query[0]; - $_SERVER['QUERY_STRING'] = isset($query[1]) ? $query[1] : ''; - } - else - { - $_SERVER['QUERY_STRING'] = $query; - } - - parse_str($_SERVER['QUERY_STRING'], $_GET); - - if ($uri === '/' OR $uri === '') - { - return '/'; - } - - // Do some final cleaning of the URI and return it - return $this->_remove_relative_directory($uri); - } - - // -------------------------------------------------------------------- - - /** - * Parse QUERY_STRING - * - * Will parse QUERY_STRING and automatically detect the URI from it. - * - * @return string - */ - protected function _parse_query_string() - { - $uri = isset($_SERVER['QUERY_STRING']) ? $_SERVER['QUERY_STRING'] : @getenv('QUERY_STRING'); - - if (trim($uri, '/') === '') - { - return ''; - } - elseif (strncmp($uri, '/', 1) === 0) - { - $uri = explode('?', $uri, 2); - $_SERVER['QUERY_STRING'] = isset($uri[1]) ? $uri[1] : ''; - $uri = $uri[0]; - } - - parse_str($_SERVER['QUERY_STRING'], $_GET); - - return $this->_remove_relative_directory($uri); - } - - // -------------------------------------------------------------------- - - /** - * Parse CLI arguments - * - * Take each command line argument and assume it is a URI segment. - * - * @return string - */ - protected function _parse_argv() - { - $args = array_slice($_SERVER['argv'], 1); - return $args ? implode('/', $args) : ''; - } - - // -------------------------------------------------------------------- - - /** - * Remove relative directory (../) and multi slashes (///) - * - * Do some final cleaning of the URI and return it, currently only used in self::_parse_request_uri() - * - * @param string $uri - * @return string - */ - protected function _remove_relative_directory($uri) - { - $uris = array(); - $tok = strtok($uri, '/'); - while ($tok !== FALSE) - { - if (( ! empty($tok) OR $tok === '0') && $tok !== '..') - { - $uris[] = $tok; - } - $tok = strtok('/'); - } - - return implode('/', $uris); - } - - // -------------------------------------------------------------------- - - /** - * Filter URI - * - * Filters segments for malicious characters. - * - * @param string $str - * @return void - */ - public function filter_uri(&$str) - { - if ( ! empty($str) && ! empty($this->_permitted_uri_chars) && ! preg_match('/^['.$this->_permitted_uri_chars.']+$/i'.(UTF8_ENABLED ? 'u' : ''), $str)) - { - show_error('The URI you submitted has disallowed characters.', 400); - } - } - - // -------------------------------------------------------------------- - - /** - * Fetch URI Segment - * - * @see CI_URI::$segments - * @param int $n Index - * @param mixed $no_result What to return if the segment index is not found - * @return mixed - */ - public function segment($n, $no_result = NULL) - { - return isset($this->segments[$n]) ? $this->segments[$n] : $no_result; - } - - // -------------------------------------------------------------------- - - /** - * Fetch URI "routed" Segment - * - * Returns the re-routed URI segment (assuming routing rules are used) - * based on the index provided. If there is no routing, will return - * the same result as CI_URI::segment(). - * - * @see CI_URI::$rsegments - * @see CI_URI::segment() - * @param int $n Index - * @param mixed $no_result What to return if the segment index is not found - * @return mixed - */ - public function rsegment($n, $no_result = NULL) - { - return isset($this->rsegments[$n]) ? $this->rsegments[$n] : $no_result; - } - - // -------------------------------------------------------------------- - - /** - * URI to assoc - * - * Generates an associative array of URI data starting at the supplied - * segment index. For example, if this is your URI: - * - * example.com/user/search/name/joe/location/UK/gender/male - * - * You can use this method to generate an array with this prototype: - * - * array ( - * name => joe - * location => UK - * gender => male - * ) - * - * @param int $n Index (default: 3) - * @param array $default Default values - * @return array - */ - public function uri_to_assoc($n = 3, $default = array()) - { - return $this->_uri_to_assoc($n, $default, 'segment'); - } - - // -------------------------------------------------------------------- - - /** - * Routed URI to assoc - * - * Identical to CI_URI::uri_to_assoc(), only it uses the re-routed - * segment array. - * - * @see CI_URI::uri_to_assoc() - * @param int $n Index (default: 3) - * @param array $default Default values - * @return array - */ - public function ruri_to_assoc($n = 3, $default = array()) - { - return $this->_uri_to_assoc($n, $default, 'rsegment'); - } - - // -------------------------------------------------------------------- - - /** - * Internal URI-to-assoc - * - * Generates a key/value pair from the URI string or re-routed URI string. - * - * @used-by CI_URI::uri_to_assoc() - * @used-by CI_URI::ruri_to_assoc() - * @param int $n Index (default: 3) - * @param array $default Default values - * @param string $which Array name ('segment' or 'rsegment') - * @return array - */ - protected function _uri_to_assoc($n = 3, $default = array(), $which = 'segment') - { - if ( ! is_numeric($n)) - { - return $default; - } - - if (isset($this->keyval[$which], $this->keyval[$which][$n])) - { - return $this->keyval[$which][$n]; - } - - $total_segments = "total_{$which}s"; - $segment_array = "{$which}_array"; - - if ($this->$total_segments() < $n) - { - return (count($default) === 0) - ? array() - : array_fill_keys($default, NULL); - } - - $segments = array_slice($this->$segment_array(), ($n - 1)); - $i = 0; - $lastval = ''; - $retval = array(); - foreach ($segments as $seg) - { - if ($i % 2) - { - $retval[$lastval] = $seg; - } - else - { - $retval[$seg] = NULL; - $lastval = $seg; - } - - $i++; - } - - if (count($default) > 0) - { - foreach ($default as $val) - { - if ( ! array_key_exists($val, $retval)) - { - $retval[$val] = NULL; - } - } - } - - // Cache the array for reuse - isset($this->keyval[$which]) OR $this->keyval[$which] = array(); - $this->keyval[$which][$n] = $retval; - return $retval; - } - - // -------------------------------------------------------------------- - - /** - * Assoc to URI - * - * Generates a URI string from an associative array. - * - * @param array $array Input array of key/value pairs - * @return string URI string - */ - public function assoc_to_uri($array) - { - $temp = array(); - foreach ((array) $array as $key => $val) - { - $temp[] = $key; - $temp[] = $val; - } - - return implode('/', $temp); - } - - // -------------------------------------------------------------------- - - /** - * Slash segment - * - * Fetches an URI segment with a slash. - * - * @param int $n Index - * @param string $where Where to add the slash ('trailing' or 'leading') - * @return string - */ - public function slash_segment($n, $where = 'trailing') - { - return $this->_slash_segment($n, $where, 'segment'); - } - - // -------------------------------------------------------------------- - - /** - * Slash routed segment - * - * Fetches an URI routed segment with a slash. - * - * @param int $n Index - * @param string $where Where to add the slash ('trailing' or 'leading') - * @return string - */ - public function slash_rsegment($n, $where = 'trailing') - { - return $this->_slash_segment($n, $where, 'rsegment'); - } - - // -------------------------------------------------------------------- - - /** - * Internal Slash segment - * - * Fetches an URI Segment and adds a slash to it. - * - * @used-by CI_URI::slash_segment() - * @used-by CI_URI::slash_rsegment() - * - * @param int $n Index - * @param string $where Where to add the slash ('trailing' or 'leading') - * @param string $which Array name ('segment' or 'rsegment') - * @return string - */ - protected function _slash_segment($n, $where = 'trailing', $which = 'segment') - { - $leading = $trailing = '/'; - - if ($where === 'trailing') - { - $leading = ''; - } - elseif ($where === 'leading') - { - $trailing = ''; - } - - return $leading.$this->$which($n).$trailing; - } - - // -------------------------------------------------------------------- - - /** - * Segment Array - * - * @return array CI_URI::$segments - */ - public function segment_array() - { - return $this->segments; - } - - // -------------------------------------------------------------------- - - /** - * Routed Segment Array - * - * @return array CI_URI::$rsegments - */ - public function rsegment_array() - { - return $this->rsegments; - } - - // -------------------------------------------------------------------- - - /** - * Total number of segments - * - * @return int - */ - public function total_segments() - { - return count($this->segments); - } - - // -------------------------------------------------------------------- - - /** - * Total number of routed segments - * - * @return int - */ - public function total_rsegments() - { - return count($this->rsegments); - } - - // -------------------------------------------------------------------- - - /** - * Fetch URI string - * - * @return string CI_URI::$uri_string - */ - public function uri_string() - { - return $this->uri_string; - } - - // -------------------------------------------------------------------- - - /** - * Fetch Re-routed URI string - * - * @return string - */ - public function ruri_string() - { - return ltrim(load_class('Router', 'core')->directory, '/').implode('/', $this->rsegments); - } - -} diff --git a/finecms/finecms/system/core/Utf8.php b/finecms/finecms/system/core/Utf8.php deleted file mode 100644 index dfbbfff..0000000 --- a/finecms/finecms/system/core/Utf8.php +++ /dev/null @@ -1,164 +0,0 @@ -is_ascii($str) === FALSE) - { - if (MB_ENABLED) - { - $str = mb_convert_encoding($str, 'UTF-8', 'UTF-8'); - } - elseif (ICONV_ENABLED) - { - $str = @iconv('UTF-8', 'UTF-8//IGNORE', $str); - } - } - - return $str; - } - - // -------------------------------------------------------------------- - - /** - * Remove ASCII control characters - * - * Removes all ASCII control characters except horizontal tabs, - * line feeds, and carriage returns, as all others can cause - * problems in XML. - * - * @param string $str String to clean - * @return string - */ - public function safe_ascii_for_xml($str) - { - return remove_invisible_characters($str, FALSE); - } - - // -------------------------------------------------------------------- - - /** - * Convert to UTF-8 - * - * Attempts to convert a string to UTF-8. - * - * @param string $str Input string - * @param string $encoding Input encoding - * @return string $str encoded in UTF-8 or FALSE on failure - */ - public function convert_to_utf8($str, $encoding) - { - if (MB_ENABLED) - { - return mb_convert_encoding($str, 'UTF-8', $encoding); - } - elseif (ICONV_ENABLED) - { - return @iconv($encoding, 'UTF-8', $str); - } - - return FALSE; - } - - // -------------------------------------------------------------------- - - /** - * Is ASCII? - * - * Tests if a string is standard 7-bit ASCII or not. - * - * @param string $str String to check - * @return bool - */ - public function is_ascii($str) - { - return (preg_match('/[^\x00-\x7F]/S', $str) === 0); - } - -} diff --git a/finecms/finecms/system/core/compat/hash.php b/finecms/finecms/system/core/compat/hash.php deleted file mode 100644 index c65203a..0000000 --- a/finecms/finecms/system/core/compat/hash.php +++ /dev/null @@ -1,254 +0,0 @@ - 32, - 'haval128,3' => 128, - 'haval160,3' => 128, - 'haval192,3' => 128, - 'haval224,3' => 128, - 'haval256,3' => 128, - 'haval128,4' => 128, - 'haval160,4' => 128, - 'haval192,4' => 128, - 'haval224,4' => 128, - 'haval256,4' => 128, - 'haval128,5' => 128, - 'haval160,5' => 128, - 'haval192,5' => 128, - 'haval224,5' => 128, - 'haval256,5' => 128, - 'md2' => 16, - 'md4' => 64, - 'md5' => 64, - 'ripemd128' => 64, - 'ripemd160' => 64, - 'ripemd256' => 64, - 'ripemd320' => 64, - 'salsa10' => 64, - 'salsa20' => 64, - 'sha1' => 64, - 'sha224' => 64, - 'sha256' => 64, - 'sha384' => 128, - 'sha512' => 128, - 'snefru' => 32, - 'snefru256' => 32, - 'tiger128,3' => 64, - 'tiger160,3' => 64, - 'tiger192,3' => 64, - 'tiger128,4' => 64, - 'tiger160,4' => 64, - 'tiger192,4' => 64, - 'whirlpool' => 64 - ); - - if (isset($block_sizes[$algo], $password[$block_sizes[$algo]])) - { - $password = hash($algo, $password, TRUE); - } - - $hash = ''; - // Note: Blocks are NOT 0-indexed - for ($bc = (int) ceil($length / $hash_length), $bi = 1; $bi <= $bc; $bi++) - { - $key = $derived_key = hash_hmac($algo, $salt.pack('N', $bi), $password, TRUE); - for ($i = 1; $i < $iterations; $i++) - { - $derived_key ^= $key = hash_hmac($algo, $key, $password, TRUE); - } - - $hash .= $derived_key; - } - - // This is not RFC-compatible, but we're aiming for natural PHP compatibility - if ( ! $raw_output) - { - $hash = bin2hex($hash); - } - - return defined('MB_OVERLOAD_STRING') - ? mb_substr($hash, 0, $length, '8bit') - : substr($hash, 0, $length); - } -} diff --git a/finecms/finecms/system/core/compat/index.html b/finecms/finecms/system/core/compat/index.html deleted file mode 100644 index b702fbc..0000000 --- a/finecms/finecms/system/core/compat/index.html +++ /dev/null @@ -1,11 +0,0 @@ - - - - 403 Forbidden - - - -