Recherche sur les portes dérobées des chevaux de Troie PHP
七字铺
七字铺 2021-03-26 09:34:51
0
3
920

Je n'en sais pas assez, j'ai donc obtenu un code source, mais j'ai découvert qu'il existe une porte dérobée Webshell. Quant à ce code, je n'arrive pas à l'identifier. Quelqu'un pourrait-il me donner des conseils ?

0 && @$val['ifshownav'])) { $nouveau canal[]=$val; $compte++; } si($count==$num) { Renvoie $newchannel ; } } Renvoie $newchannel ; } } foreach($channel as $val) { if($fid==$val['fid']) { if($shownav==0 || ($shownav>0 && $val['ifshownav'])) { si($kind==0) { $nouveau canal[]=$val; $compte++; $newchannel[count($newchannel)-1]['key']=$count; }elseif($val['ckind']==$kind) { $nouveau canal[]=$val; $compte++; $newchannel[count($newchannel)-1]['key']=$count; } } } si($count==$num) { casser; } } $fidarray=@cnav(cid,1); foreach($newchannel as $key=>$val) { $newchannel[$key]['onstyle']=''; foreach($fidarray as $fidkey=>$fidval) { if($val['cid']==$fidval['cid']) { $newchannel[$key]['onstyle']='on'; casser; } } } Renvoie $newchannel ; } function b($cid='',$return=false,$linktag=' > ',$homepage=SystemDir) { Retour cnav($cid,$return,$linktag,$homepage) ; } fonction i($kind='',$cid=0) { si($cid===0) { if(!défini('cid')) {Return false;} $cid=cid; } $channel=getchannelcache($cid); si(!$canal) { Renvoie faux ; } si (vide ($ genre)) { Renvoyer $channel ; }elseif($kind=='name' && isset($channel['cname'])) { Renvoie $channel['cname'] ; }elseif($kind=='topfid') { $breadcrumb=b($channel['cid'],1); if(isset($breadcrumb[0]['cid'])) { Renvoie $breadcrumb[0]['cid'] ; } }elseif($kind=='url') { Renvoie u($channel['cid']); }elseif($kind=='domain') { Renvoyez @$channel['csetting']['channel_domain'] ; }autre { if(isset($channel[$kind])) { Renvoie $channel[$kind] ; } } Renvoie faux ; } fonction uri ($uri) { $uri=ltrim($uri,'/'); si (UrlRewrite) { Renvoie SystemDir.$uri ; }autre { Renvoie SystemDir.IndexFile.'/'.$uri ; } } fonction f($fichier) { require(SystemRoot.TemplateDir.DIRECTORY_SEPARATOR.$file); } fonction t($file='',$echo=1) { si($echo==1) { echo(SystemDir.TemplateDir.'/'.$file); } Renvoie SystemDir.TemplateDir.'/'.$file ; } liste de fonctions ($where ='') { if(isset($where['page']) && !is_numeric($where['page'])) { if(isset($_GET[$where['page']]) && $_GET[$where['page']]>0) { $where['page']=intval($_GET[$where['page']]); }autre { $where['page']=1; } } $nullarticle=array('list'=>array(),'pagecount'=>0,'pagesize'=>1,'page'=>1,); if(!isset($where['cid']) && !défini('cid') && !isset($where['tablename']) && !isset($where['cids'])) {Return $nullarticle ;} if(!isset($where['tablename']) && !isset($where['cid']) && !isset($where['cids']) && défini('cid')) {$where[' cid']=cid;} if(!isset($where['cid'])) {$where['cid']=0;} if(is_numeric($where['cid'])) {$where['cid']=intval($where['cid']);} if(SiteCache && isset($where['cache']) && $where['cache']>0) { $cachewhere=$où; $cachehash=md5(json_encode($where)); $res =cacheget($cachehash,$where['cache'],'alist'); if ($res) {return json_decode($res,1);} } $sql=''; if($where['cid']!==0) { $thischannelcache=getchannelcache($where['cid']); if(!$thischannelcache) {Return $nullarticle;} $where['cid']=$thischannelcache['cid']; } if(!isset($where['tablename'])) {$where['tablename']='';} if(!isset($where['all']) || $where['all']==1) { if(!isset($where['cids'])) {$where['cids']='';} $clistsetting=alist_getson($where['cid'],$where['tablename'],$where['cids']); if(!isset($clistsetting['sql'])) {Return $nullarticle;}$where['cidsql']=$clistsetting['sql']; $where['tablename']=$clistsetting['tablename']; $defaultsetting=getchannelcache($clistsetting['default']); if(!isset($where['pageurl']) && !isset($clistsetting['pageurl'])) { unset($defaultsetting['csetting']['channel_pageurl']); } }autre { if(!isset($where['cidsql'])) { $where['cidsql']=" et (cid='".$where['cid']."')"; } if($where['cid']) { $defaultsetting=getchannelcache($where['cid']); if(empty($where['tablename']) && isset($defaultsetting['csetting']['articletable'])) { $where['tablename']=$defaultsetting['csetting']['articletable']; } } } $sql.=$where['cidsql']; if(!isset($where['pagesize'])) { if(isset($defaultsetting['csetting']['temppage_size']) && !empty($defaultsetting['csetting']['temppage_size'])) { $where['pagesize']=$defaultsetting['csetting']['temppage_size']; } } if(!isset($where['order'])) { if(isset($defaultsetting['csetting']['temppage_order']) && !empty($defaultsetting['csetting']['temppage_order'])) { $where['order']=$defaultsetting['csetting']['temppage_order']; } } isset($where['addslashes']) ? $ifaddslashes=$where['addslashes']:$ifaddslashes=1; isset($where['tablename']) ? $where['tablename']=$where['tablename']:die('no tablename'); isset($where['pagesize']) ? $where['pagesize']=intval($where['pagesize']):$where['pagesize']=9; isset($where['order']) ? $where['order']='order by '.$where['order']:$where['order']='order by id desc'; isset($where['start']) ? $where['start']=intval($where['start']):$where['start']=0; isset($where['colonne']) ? $where['colonne']=$where['colonne']:$where['colonne']='*'; isset($where['rowidstyle']) && !isset($where['rowidname']) ? $where['rowidname']='id' :''; isset($where['linktime']) ? 1==1 : $where['linktime']='posttime' ; isset($where['link']) ? 1==1 : $where['link']='' ; isset($where['domain']) ? 1==1 : $where['domain']='' ; if(trim($where['column'])<>'*') {$where['column'].=',cid';}if(isset($where['where'])) { if(is_array($where['where'])) { foreach($where['where'] as $key=>$val) { $key=addslashes_str($key,$ifaddslashes); if(is_array($val) && count($val)>0) { $sql.=" et ("; foreach($val as $value) { $sql.=$key."='".addslashes_str($value,$ifaddslashes)."' ou "; } $sql=substr($sql,0,strlen($sql)-4); $sql.=")"; }autre { $sql.=" et ".$key."='".addslashes_str($val,$ifaddslashes)."'"; } } }autre { $sql.=" et ".$where['where']; } } if(isset($where['inwhere'])) { foreach($where['inwhere'] as $key=>$val) { if(!is_array($val)) { $val=tableau(); $val[]=$where['inwhere'][$key]; } $key=addslashes_str($key,$ifaddslashes); foreach($val as $val1) { if(is_numeric($val1) && $val1>0) { $sql.=" et (".$key."='[".$val1."]' ou ".$key." comme '%,".$val1.",%' ou ".$key. " comme '[".$val1.",%' ou ".$key." comme '%,".$val1."]')"; }autre { unset ($where['inwhere'][$key]); } } } } if(isset($where['nulle part'])) { foreach($where['nowhere'] as $key=>$val) { $key=addslashes_str($key,$ifaddslashes); if(is_array($val) && count($val)>0) { foreach($val as $value) { $sql.=" et ".$key."<>'".addslashes_str($value,$ifaddslashes).'''; } }autre { $sql.=" et ".$key."<>'".addslashes_str($val,$ifaddslashes)."'"; } } } if(isset($where['other']) && !empty($where['other'])) { $sql.=" et ".$where['other']; } if(isset($where['keyword']) && !empty($where['keyword'])) { if(!isset($where['searchcolumn'])) {$where['searchcolumn']='title';} if(!is_array($where['searchcolumn'])) {$where['searchcolumn']=explode(',',$where['searchcolumn']);} if(!is_array($where['keyword'])) {$where['keyword']=explode('|',$where['keyword']);} $sql.=" et ("; foreach($where['searchcolumn'] as $key=>$searchcolumn) { foreach($where['keyword'] as $keywordkey=>$keywordval) { if($key==0 && $keywordkey==0) { $sql.="$searchcolumn like '%".addslashes_str($keywordval,$ifaddslashes)."%'"; }autre { $sql.=" ou $searchcolumn comme '%".addslashes_str($keywordval,$ifaddslashes)."%'"; } } } $sql.=" )"; } si(!empty($sql)) { $sql='where '.ltrim($sql,'and '); } if(isset($where['page'])) { $where['page']=intval($where['page']); $where['pagecount'] = $GLOBALS['db'] -> fetchcount("SELECT count(id) FROM ".$where['tablename']." $sql"); $where['articlecount']=$where['pagecount']; $where['start']=($where['page']-1)*$where['pagesize']; if($where['articlecount']%$where['pagesize']==0) { $where['pages']=($where['articlecount']/$where['pagesize']); }autre { $where['pages']=intval($where['articlecount']/$where['pagesize'])+1; } if(isset($defaultsetting['csetting']['channel_pageurl']) && !empty($defaultsetting['csetting']['channel_pageurl']) && !isset($where['pageurl'])) { $allpageurl=explode(';',$defaultsetting['csetting']['channel_pageurl']); si (UrlRewrite) { $where['pageurl']=$allpageurl[0]; }autre { $where['pageurl']=SystemDir.IndexFile.$allpageurl[0]; } } } if(!isset($where['sql'])) { $where['sql_id']='SELECT id FROM '.$where['tablename'].' '.$sql.' '.$where['commande'].' limite '.$where['start'].','.$where['pagesize']; $idquery =$GLOBALS['db'] -> requête($where['sql_id']); $ids = $GLOBALS['db'] -> récupérer ($idquery); $sql='id in('; if(count($ids)>0) { foreach($ids as $key=>$val) { $sql.=$val[0].','; } }autre { $sql.='0,'; } $sql=rtrim($sql,','); $sql.=')'; $where['sql']='SELECT '.$where['column'].' FROM '.$where['tablename'].' où '.$sql.' '.$where['commande']; } $query = $GLOBALS['db'] -> requête($where['sql']); $articles = $GLOBALS['db'] -> récupérer ($ requête); $je=0 ; foreach ($articles en $valeur) { $i++; $value['clé']=$i; if(isset($where['stepstyle'])) { foreach($where['stepstyle'] as $key=>$val) {if($i%$key==0) {$value['stepstyle']=$where['stepstyle'][$key] ;}} if(!isset($value['stepstyle'])) {$value['stepstyle']='';} }if(isset($where['rowstyle'])) { foreach($where['rowstyle'] as $key=>$val) {if($i==$key) {$value['rowstyle']=$where['rowstyle'][$key];} } if(!isset($value['rowstyle'])) {$value['rowstyle']='';} } if(isset($where['rowidstyle'])) { foreach($where['rowidstyle'] as $key=>$val) { if($value[$where['rowidname']]==$key) { $value['rowidstyle']=$val; } } if(!isset($value['rowidstyle'])) {$value['rowidstyle']='';} } if(!isset($value[$where['linktime']])) {$value[$where['linktime']]=0;} $value['link']=aurl($value,$where['link'],$value[$where['linktime']],$where['domain']); $where['list'][]=$value; } if(!isset($where['list'])) {$where['list']=array();} if(SiteCache && isset($where['cache']) && $where['cache']>0) { cacheset($cachehash,json_encode($where),$where['cache'],'alist'); } Renvoie $où ; } fonction getkinds($cid,$fid) { $fid=intval($fid); $kindsarray=array($fid); if(is_numeric($cid)) { $thichannelcache=getchannelcache($cid); $defaultsetting=$thichannelcache['csetting']; if(isset($defaultsetting['articletable']) && !empty($defaultsetting['articletable'])) { $kindtable=$defaultsetting['articletable']; }else {Retour $kindsarray;} }autre { $kindtable=$cid; } $query = $GLOBALS['db'] -> query("SELECT id FROM $kindtable where fid='$fid';"); $link = $GLOBALS['db'] -> récupérer ($ requête); foreach ($lien en $valeur) { $thisallkinds=getkinds($kindtable,$value['id']); foreach ($thisallkinds as $thisvalue) { $kindsarray[]=$thisvalue; } } Renvoie $kindsarray ; } function alist_getson($cid,$tablename,$cids,$first=1) { if($cid==0 && empty($tablename)) { $tablename=ArticleTable; } $tableau=tableau(); $array['list']=array(); $channels=getchannelscache(); si($premier) { if(!is_array($cids)) {$cids=explode(';',$cids);} $thischannel=getchannelcache($cid); if($thischannel && @$thischannel['ckind']==2 && (in_array($cid,$cids) || empty($cids[0]))) { if(isset($thischannel['csetting']['articletable']) && !empty($thischannel['csetting']['articletable']) && empty($tablename)) { $tablename=$thischannel['csetting']['articletable']; }if($tablename==$thischannel['csetting']['articletable']) { $array['list'][]=$thischannel; if(isset($thischannel['csetting']['channel_pageurl']) && !empty($thischannel['csetting']['channel_pageurl'])) { $array['pageurl']=$thischannel['csetting']['channel_pageurl']; } } } $array['tablename']=$tablename; } foreach($channels as $key=>$val) { if($val['fid']==$cid) { $thischannel=getchannelcache($val['cid']); if(empty($tablename)) { if($thischannel['ckind']==2 && isset($thischannel['csetting']['articletable']) && (in_array($val['cid'],$cids) || empty($cids[ 0]))) { $array['list'][]=$val; $tablename=$thischannel['csetting']['articletable']; $array['tablename']=$tablename; } }autre { if($thischannel['ckind']==2 && isset($thischannel['csetting']['articletable']) && $thischannel['csetting']['articletable']==$tablename && (in_array($ val['cid'],$cids) || vide($cids[0]))) { $array['list'][]=$val; } } $sonarray=alist_getson($val['cid'],$tablename,$cids,0); foreach($sonarray['list'] as $key1=>$val1) { $array['list'][]=$val1; } } } si($premier) { $cids=tableau(); $sql=''; foreach($array['list'] as $key=>$val) { si($clé==0) { $sql.=" et (cid='".$val['cid']."'"; }elseif($key==(count($array['list'])-1)) { $sql.=" ou cid='".$val['cid']."'"; }autre { $sql.=" ou cid='".$val['cid']."'"; } } if(count($array['list'])>0) {$array['sql']=$sql.')';} if(isset($array['list'][0])) { $array['default']=$array['list'][0]['cid']; }autre { $array['par défaut']=0; } Renvoie $array ; }autre { Renvoie $array ; } } function aurl($value,$rowurl,$rowurltime,$domain='') { $thissetting=getchannelcache($value['cid']); si(vide($domaine)) { if(isset($thissetting['csetting']['channel_domain']) && !empty($thissetting['csetting']['channel_domain'])) { $domains=explode(';',$thissetting['csetting']['channel_domain']); $domain=$domaines[0]; foreach($domaines as $key) { if($key==server_name()) { $domaine=null ; casser; } } } } si(vide($rowurl)) { if(empty($thissetting['csetting']['channel_articleurl'])) { Retour ''; } $rowurl=$thissetting['csetting']['channel_articleurl']; }if(!empty($where['domain'])) { $domains=explode(';',$where['domain']); $where['domain']=$domains[0]; foreach($domains en $domain) { if($domain==server_name()) { $where['domain']=null; casser; } } } unset ($ ce paramètre ); $rowurls=exploser(';',$rowurl); $rowurl=$rowurls[0]; preg_match_all("/{(.*)}|[(.*)]|((.*))/isU",$rowurl,$match); if(count($match[0])>0) { foreach($match[0] as $key=>$val) { if($rowurltime>0 && ($val=='(y)' || $val=='(m)' || $val=='(d)')) { isset($value['y']) ? 1==1 : $value['y']=date('Y',$rowurltime); isset($value['m']) ? 1==1 : $value['m']=date('m',$rowurltime); isset($value['d']) ? 1==1 : $value['d']=date('d',$rowurltime); } if(isset($value[$match[1][$key]])) { if(is_numeric($value[$match[1][$key]])) {$rowurl=str_replace($val,$value[$match[1][$key]],$rowurl);}else {$ rowurl=str_replace($val,urlencode($value[$match[1][$key]]),$rowurl);} } if(isset($value[$match[2][$key]])) { if(is_numeric($value[$match[2][$key]])) {$rowurl=str_replace($val,$value[$match[2][$key]],$rowurl); }else {$rowurl=str_replace($val,urlencode($value[$match[2][$key]]),$rowurl); } } if(isset($value[$match[3][$key]])) { if(is_numeric($value[$match[3][$key]])) {$rowurl=str_replace($val,$value[$match[3][$key]],$rowurl); }else {$rowurl=str_replace($val,urlencode($value[$match[3][$key]]),$rowurl); } } } } if(!empty($domain)) { $domain='//'.$domain.server_port(); } si (UrlRewrite) { $rowurl=$domaine.$rowurl; }autre { $rowurl=$domain.SystemDir.IndexFile.$rowurl; } Renvoie $rowurl ; } function all_list($where=array(),$pagesize=10,$cid='') { if(!isset($where['cache'])) {$where['cache']=3600;} $cachehash=md5(json_encode($where).$pagesize.json_encode($cid)); $res =cacheget($cachehash,$where['cache'],'alist'); if ($res) {return json_decode($res,1);} si(vide($cid)) { $cid=tableau(); $allchannels=getchannelscache(); foreach($allchannels as $channel) { if($channel['ckind']==2) { $cid[]=$canal['cid']; } } }elseif(is_numeric($cid)) { $cid=tableau($cid); } $articles=tableau(); foreach($cid as $thiscid) { $where['cid']=$thiscid; $where['pagesize']=$pagesize; $where['tous']=0; $thisarticles=alist($where); foreach ($thisarticles['list'] as $thisarticle) { $articles[]=$cetarticle; } } $posttime=array(); foreach ($articles as $article) { $posttime[] = $article['posttime'] ; }$orderarticles=array_multisort($posttime, SORT_DESC, $articles); $returnarticles=array(); $je=0 ; foreach($articles as $key=>$val) { $i++; $val['clé']=$i; $returnarticles[]=$val; si($key==($pagesize-1)) { casser; } } if(SiteCache && $where['cache']>0) { cacheset($cachehash,json_encode($returnarticles),$where['cache'],'alist'); } Retour $returnarticles ; } function ainsert($article,$setting='') { if(!is_array($article)) {Return false ;} if(empty($setting)) {$setting=array();} if(!isset($setting['cid']) && !isset($article['cid'])) { if(défini('cid')) { $setting['cid']=cid; }autre { Renvoie « réglage sans cid » ; } } if(!isset($setting['addslashes'])) {$setting['addslashes']=1;} if(!isset($setting['default'])) {$setting['default']=1;} if(!isset($setting['check'])) {$setting['check']=1;} if(!isset($setting['cid'])) {$setting['cid']=$article['cid'];} if(isset($article['cid'])) {unset($article['cid']);} $channel = getchannelcache($setting['cid']); if(!$channel) {Return 'channel not exist';} $setting['cid']=$channel['cid']; $csetting=$canal['csetting']; if(!isset($setting['tablename']) || empty($setting['tablename'])) {$setting['tablename']=$csetting['articletable'];} si(count($article)==0) { Renvoie 'où les colonnes de l'article ' ; } foreach($article as $key=>$val) { $article[$key]=addslashes_str($article[$key],$setting['addslashes']); } if($setting['check']) { $columns = $GLOBALS['db'] -> all("select mname,mkind,ifonly,strdefault,msetting from ".tableex('moudle')." where cid=".$setting['cid']." order by morder asc;"); foreach($columns as $thiscolumn) { $key=$thiscolumn['mname']; if(!isset($article[$key]) && $setting['default']) { $article[$key]=$thiscolumn['strdefault']; if($thiscolumn['mkind']==9) { if($thiscolumn['strdefault']=='now') { $article[$key]=heure(); }autre{ $thiscolumn['strdefault']=@strtotime($thiscolumn['strdefault']); if($thiscolumn['strdefault']) { $article[$key]=$thiscolumn['strdefault']; }autre { $article[$clé]=0 ; } } } }if(isset($article[$key])) { $thismsetting=json_decode($thiscolumn['msetting'],1); $thismsetting['ifonly']=$thiscolumn['ifonly']; $thismsetting['tablename']=$setting['tablename']; $thismoudlevalue=$article[$key]; if($thismsetting['filterhtml']==1) { require_once(SystemRoot.AdminDir.'/input/kses.php'); $thismoudlevalue= kses($thismoudlevalue); }elseif($thismsetting['filterhtml']==2) { $thismoudlevalue=htmlspecialchars($thismoudlevalue); } $acheck=acheck($key,$thismoudlevalue,$setting['cid'],$thismsetting); if($acheck==='error') {Return $key.' erreur';} if($acheck==='short') {Return $key.' court';} if($acheck==='long') {Return $key.' long';} if($acheck==='exist') {Return $key.' exister';} $article[$key]=$thismodulevalue; } } } $article['cid']=$setting['cid']; if(!isset($article['posttime'])) {$article['posttime']=time();} if(!isset($article['adminuid'])) {$article['adminuid']=0;} $result = $GLOBALS['db'] -> insert($setting['tablename'],$article); if($result) {Return $result;}else {Return false;} } fonction aedit($article,$setting='') { if(!isset($article['id']) || !is_numeric($article['id']) || $article['id']<1) { Renvoie « erreur d'identifiant » ; } $id=$article['id']; unset($article['id']); if(!is_array($article)) {Return false ;} if(empty($setting)) {$setting=array();} if(!isset($setting['cid']) && !isset($article['cid'])) { if(défini('cid')) { $setting['cid']=cid; }autre { Renvoie « réglage sans cid » ; } } if(!isset($setting['addslashes'])) {$setting['addslashes']=1;} if(!isset($setting['check'])) {$setting['check']=1;} if(!isset($setting['cid'])) {$setting['cid']=$article['cid'];} if(isset($article['cid'])) {unset($article['cid']);} $channel = getchannelcache($setting['cid']); if(!$channel) {Return 'channel not exist';} $setting['cid']=$channel['cid']; $csetting=$canal['csetting']; if(!isset($setting['tablename']) || empty($setting['tablename'])) {$setting['tablename']=$csetting['articletable'];} si(count($article)==0) { Renvoie 'où les colonnes de l'article ' ; } foreach($article as $key=>$val) { $article[$key]=addslashes_str($article[$key],$setting['addslashes']); }if($setting['check']) { $columns = $GLOBALS['db'] -> all("select mname,ifonly,strdefault,msetting from ".tableex('moudle')." where cid=".$setting['cid']." order by morder asc;"); foreach($columns as $thiscolumn) { $key=$thiscolumn['mname']; if(isset($article[$key])) { $thismsetting=json_decode($thiscolumn['msetting'],1); $thismsetting['ifonly']=$thiscolumn['ifonly']; $thismsetting['tablename']=$setting['tablename']; $thismoudlevalue=$article[$key]; if($thismsetting['filterhtml']==1) { require_once(SystemRoot.AdminDir.'/input/kses.php'); $thismoudlevalue= kses($thismoudlevalue); }elseif($thismsetting['filterhtml']==2) { $thismoudlevalue=htmlspecialchars($thismoudlevalue); } $acheck=acheck($key,$thismoudlevalue,$setting['cid'],$thismsetting,$id); if($acheck==='error') {Return $key.' erreur';} if($acheck==='short') {Return $key.' court';} if($acheck==='long') {Return $key.' long';} if($acheck==='exist') {Return $key.' exister';} $article[$key]=$thismodulevalue; } } } $result = $GLOBALS['db'] -> update($setting['tablename'],"id='$id'",$article); if($result) {Return true;}else {Return false;} } function adel($cid,$id,$tablename='') { if(empty($cid) && empty($tablename)) { if(défini('cid')) { $cid=cid; }autre { Renvoie « pas de cid » ; } } if(empty($id)) {Return 'no id';}else {$id=intval($id);} if(empty($tablename)) { $channel = getchannelcache($cid); if(!$channel) {Return 'channel not exist';} $cid=$canal['cid']; $csetting=$canal['csetting']; $tablename=$csetting['articletable']; } $query = $GLOBALS['db'] -> query("supprimer de `$tablename` WHERE id='$id'"); si ($ requête) { Renvoie vrai ; }autre { Renvoie faux ; } } function acheck($mname,$value,$cid='',$thismsetting='',$id=0) { si($cid=='') { if(défini('cid')) { $cid=cid; }autre { Renvoie « pas de cid » ; } }if($thismsetting=='') { $column = $GLOBALS['db'] -> one("select mname,ifonly,msetting from ".tableex('moudle')." where cid='".$cid."' and mname='".$mname."' limit 1;"); $thismsetting=json_decode($column['msetting'],1); $thismsetting['ifonly']=$column['ifonly']; } if(isset($thismsetting['regular']) && strlen($thismsetting['regular'])>3 && !empty($value)) { if(!preg_match($thismsetting['regular'],$value)){ Renvoie 'erreur' ; } } if(isset($thismsetting['lenmin']) && is_numeric($thismsetting['lenmin']) && $thismsetting['lenmin']>0) { if(strlen($value)<$thismsetting['lenmin']) { Renvoie 'court' ; } } if(isset($thismsetting['lenmax']) && is_numeric($thismsetting['lenmax']) && $thismsetting['lenmax']>0) { if(strlen($value)>$thismsetting['lenmax']) { Retour 'long' ; } } if($thismsetting['ifonly']==1) { if(!isset($thismsetting['tablename'])) { $channel = getchannelcache($cid); $thismsetting['tablename']=$channel['csetting']['articletable']; } si($id>0) { $pagecount = $GLOBALS['db'] -> fetchcount("SELECT id FROM ".$thismsetting['tablename']." where $mname='$value' et cid='".$cid."' et id<>'$id' limit 1;") ; }autre { $pagecount = $GLOBALS['db'] -> fetchcount("SELECT id FROM ".$thismsetting['tablename']." where $mname='$value' and cid='".$cid."' limit 1;"); } si($pagecount) { Renvoie 'exister' ; } } Renvoie vrai ; } function addslashes_str($val,$addslashes) { if($ajoute des barres obliques) { Renvoie dbstr($val); }autre { Renvoie $val ; } } fonction pagelist($alist,$url='',$returnarray=0) { if(!isset($alist['pagecount']) || !isset($alist['page'])) { Renvoie faux ; } $recordcount=$alist['pagecount']; $pagesize=$aliste['pagesize']; $curpage=$alist['page']; $pages=isset($alist['showpages']) ? $alist['showpages'] :3 ; if(empty($url) && isset($alist['pageurl']) && !empty($alist['pageurl'])) { $url=$aliste['pageurl']; if(isset($alist['cid'])) { $url=str_replace('(cid)',$alist['cid'],$url); } }autre { si (UrlRewrite) { $url=$_SERVER['REQUEST_URI']; }autre { $url=$_SERVER['SCRIPT_NAME'].$_SERVER['REQUEST_URI']; } if(stripos($url,'page=')===false) { if(stripos($url,'?')===false) { $url=$url."?page=(page)"; }autre { $url=$url."&page=(page)"; } } $url = preg_replace("/page=([0-9]+)/is", "page=(page)", $url); } si($pagesize<1) { $pagesize=1 ; } $pagesarray=tableau(); $totalpage = max(ceil($recordcount/$pagesize),1); if($curpage<0 || $curpage>$totalpage) $curpage=1; $outhtml = "" ; $pageno = $curpage ; if($pageno<0 || $pageno>$totalpage) $pageno=1; si($pageno==1) { $pagesarray[]=array('url'=>str_replace('(page)','1',$url),'title'=>'<<','class'=>'disabled '); }autre { $pagesarray[]=array('url'=>str_replace('(page)','1',$url),'title'=>'<<','class'=>'' ); } si($pages>$totalpage){ $page de démarrage=1 ; $endpage=min($startpage+$pages,$totalpage); }autre{ $startpage=max($totalpage-$pages,1); $startpage=min($startpage,$curpage); $endpage=min($startpage+$pages,$totalpage); } si($pageno>1){ $pagesarray[]=array('url'=>str_replace('(page)',$pageno-1,$url),'title'=>'<','class'=>'') ; }autre{ $pagesarray[]=array('url'=>str_replace('(page)',1,$url),'title'=>'<','class'=>'disabled'); } pour($i=$startpage;$i<=$endpage;$i++) { si($curpage==$i){ $pagesarray[]=array('url'=>str_replace('(page)',$i,$url),'title'=>$i,'class'=>'on'); }autre{ $pagesarray[]=array('url'=>str_replace('(page)',$i,$url),'title'=>$i,'class'=>''); } } si($pageno<$totalpage){ $pagesarray[]=array('url'=>str_replace('(page)',$pageno+1,$url),'title'=>'>','class'=>'') ; }autre{ $pagesarray[]=array('url'=>str_replace('(page)',$totalpage,$url),'title'=>'>','class'=>'disabled'); } si($pageno==$totalpage) { $pagesarray[]=array('url'=>str_replace('(page)',$totalpage,$url),'title'=>'>>','class'=>'disabled' ); }autre { $pagesarray[]=array('url'=>str_replace('(page)',$totalpage,$url),'title'=>'>>','class'=>'') ; } si($returnarray) { Renvoie $pagesarray ; }autre { $outhtml=''; foreach($pagesarray as $val) { if(!empty($val['class'])) { $val['class']=' class="'.$val['class'].'"'; } $outhtml.=''.$val['title'] .'≪/a>≪/li>'; } } echo $outhtml ; } fonction nav ($where = 0) { $channelarray=tableau(); if(!is_array($where)) { $thiscid=$où; $where=tableau(); $where['cid']=$thiscid; } if(!isset($where['cid'])) { $where['cid']=0; } $cid=$où['cid']; if(!isset($where['oncid'])) { if(défini('cid')) { $where['oncid']=cid; }autre { $where['oncid']=0; } //取出on的所有id } if(!isset($where['onstyle'])) { $where['onstyle']=' class="on"'; } if(!isset($where['bro'])) {$where['bro']=1;} if(!isset($where['papa'])) {$where['papa']=1;} if($where['cid']==0) { if(!isset($where['page d'accueil'])) { $where['homepage']['name']='首页'; $where['homepage']['url']=gethomeeurl(); $where['homepage']['target']=''; }autre { if(is_array($where['page d'accueil'])) { if(!isset($where['homepage']['name'])) { $where['homepage']['name']='首页'; } if(!isset($where['homepage']['url'])) { $where['homepage']['url']=gethomeurl(); } if(!isset($where['homepage']['target'])) { $where['homepage']['target']=''; } } } if(is_array($where['page d'accueil'])) { $channelarray[]=array('cid'=>'0','fid'=>'0','name'=>$where['homepage']['name'],'url'= >$where['homepage']['url'],'target'=>$where['homepage']['target']); } } $allchannels=getchannelscache(); $canaux=tableau(); foreach($allchannels as $val) { if($val['ifshownav']==1) { $canaux[]=$val; } } $compte=0 ; $mafid=0; $papayé=0 ; foreach($channels as $channel) { if(is_numeric($cid)) { if($channel['cid']==$cid) { $myfid=$channel['fid']; if($cid>0 && $where['papa']==1) { $channelarray['papa']=$myfid;//显示父栏目 $papaid=$mafid; } } if($channel['fid']==$cid) { $compte=1 ; $channelarray[]=$canal ; } }elseif(is_array($cid)) { if(in_array($channel['cid'],$cid)) { $compte=1 ; $channelarray[]=$canal ; } } }if($count>0 && is_numeric($cid) && $cid>0 && $where['papa']==1) { $channelarray['papa']=$cid; } si($count==0) { $noonpapaid=$mafid; }autre { $midipapayé=false ; } if(isset($channelarray['papa']) && $channelarray['papa']>0) { foreach($channels as $channel) { if($channel['cid']==$channelarray['papa']) { $channelarray['papa']=$canal; } } }autre { unset ($channelarray['papa']); } if(isset($where['bro']) && $where['bro']==1 && $count==0 && is_numeric($cid)) { //显示兄弟栏目 if(isset($myfid) && $myfid>0) { foreach($channels as $key=>$channel) { if($channel['fid']==$myfid) {$channelarray[]=$channel;} } }elseif(isset($myfid) && $myfid==0) { foreach($channels as $key=>$channel) { if($channel['cid']==$cid) {$channelarray[]=$channel;} } } } $onarray=tableau(); if(défini('cid')) { $thiscid=cid; while(1<2) { $ifin=faux; foreach($channels as $channel) { if($channel['cid']==$thiscid && $channel['cid']!=$noonpapaid) { $onarray[]=$channel['cid']; $thiscid=$canal['fid']; $ifin=vrai ; casser; } } if($ifin===false || $thiscid==0) { casser; } } } $returnarray=tableau(); $returnstr=''; if(!isset($where['html'])) { $where['html']='{name}'; } if(isset($GLOBALS['nav'][$cid])) { if(is_array($GLOBALS['nav'][$cid])) { $channelarray=$GLOBALS['nav'][$cid]; }elseif(function_exists($GLOBALS['nav'][$cid])){ $channelarray=$GLOBALS['nav'][$cid]($cid); } } foreach($channelarray as $key=>$channel) { $thisstr=$where['html']; if(!isset($channel['onstyle']) || empty($channel['onstyle'])) { if(in_array($channel['cid'],$onarray)) { $channel['onstyle']=$where['onstyle']; }autre { $channel['onstyle']=''; } } if(défini('cid') && cid==0 && $channel['cid']==0) {//page d'accueil $channel['onstyle']=$where['onstyle']; } $returnarray[]=$canal ; if(!isset($where['returnarray']) || $where['returnarray']==0) { $thisstr=str_replace('{url}',@$channel['url'],$thisstr); $thisstr=str_replace('{target}',@$channel['target'],$thisstr); $thisstr=str_replace('{name}',@$channel['name'],$thisstr); $thisstr=str_replace('{onstyle}',@$channel['onstyle'],$thisstr); $returnstr.=$thisstr."rn"; } } if(!isset($where['returnarray']) || $where['returnarray']==0) { Renvoie $returnstr ; }autre{ Renvoie $returnarray ; } } function cnav($cid='',$returnarray=false,$linktag=' > ',$homepage=SystemDir) { si(vide($cid)) { si(défini('cid')){ $cid=cid; }autre { $cid=0; } } $channels=getchannelscache(); $fil d'Ariane=''; $breadcrumbarray=tableau(); tandis que (1<2) { $thischannel=false; foreach($channels as $channel) { if($channel['cid']==$cid) { $thischannel=$channel; } } si($thischannel==false) { si($fil d'Ariane=='') { $breadcrumb='首页'; }autre { $breadcrumb='首页'.$linktag.$breadcrumb; } si($returnarray) { Renvoie array_reverse ($breadcrumbarray); }autre { Renvoie $fil d'Ariane ; } }autre { si($fil d'Ariane=='') { $breadcrumb=''.$thischannel['name'].''; }autre { $breadcrumb=''.$thischannel['name'].''.$linktag.$breadcrumb; } $breadcrumbarray[]=$thischannel; $cid=$thischannel['fid']; } } } fonction getallchannelscache() { if(isset($GLOBALS['allchannelcache'])) { Renvoie $GLOBALS['allchannelcache'] ; } $channelcachekeyname='allchannelscache'; $channelcache=cacheget($channelcachekeyname,604800,'channel'); si($channelcache) { $channels=json_decode($channelcache,1); }autre { $channelslist=$GLOBALS['db']->all("SELECT cid,fid,ifshownav,cname,ckind,cvalue,newwindow,csetting FROM ".tableex('channel')." where ckind<>'4 ' trier par corder asc"); si($channelslist) { $canaux=tableau(); foreach ($channelslist as $val) { unset ($ ce canal ); $thischannel=array(); $thischannel['cid']=$val['cid']; $thischannel['fid']=$val['fid']; $thischannel['ckind']=$val['ckind']; $thischannel['ifshownav']=$val['ifshownav']; $thischannel['name']=$val['cname']; if($val['newwindow']==1) { $thischannel['target']=' target="_blank" '; }autre { $thischannel['target']=''; } $thischannel['url']=getchannelurl($val); if(empty($thischannel['url'])) { $thischannel['url']='#'; $thischannel['target']=''; }$channels[]=$thischannel; } cacheset ($channelcachekeyname,json_encode($channels),604800,'channel'); }autre { Renvoie un tableau(); } } $GLOBALS['allchannelscache']=$canaux; Renvoie $channels ; } fonction getchannelscache() { if(isset($GLOBALS['channelscache'])) { Renvoie $GLOBALS['channelscache'] ; } $channelcachekeyname='channelscache'; $channelcache=cacheget($channelcachekeyname,604800,'channel'); si($channelcache) { $channels=json_decode($channelcache,1); }autre { $channelslist=$GLOBALS['db']->all("SELECT cid,fid,ifshownav,cname,ckind,cvalue,newwindow,csetting FROM ".tableex('channel')." where ckind<>'4 ' et ifshow=1 order by corder asc"); si($channelslist) { $canaux=tableau(); foreach ($channelslist as $val) { unset ($ ce canal ); $thischannel=array(); $thischannel['cid']=$val['cid']; $thischannel['fid']=$val['fid']; $thischannel['ckind']=$val['ckind']; $thischannel['ifshownav']=$val['ifshownav']; $thischannel['name']=$val['cname']; if($val['newwindow']==1) { $thischannel['target']=' target="_blank" '; }autre { $thischannel['target']=''; } $thischannel['url']=getchannelurl($val); if(empty($thischannel['url'])) { $thischannel['url']='#'; $thischannel['target']=''; } $channels[]=$thischannel; } cacheset ($channelcachekeyname,json_encode($channels),604800,'channel'); }autre { Renvoie un tableau(); } } $GLOBALS['channelscache']=$canaux; Renvoie $channels ; } fonction getchannelcache ($ cid) { if(isset($GLOBALS['channelcache'][$cid])) { Renvoie $GLOBALS['channelcache'][$cid] ; } $channelcachekeyname='channelcache_'.$cid; $channelcache=cacheget($channelcachekeyname,604800,'channel'); si($channelcache) { $channelcache=json_decode($channelcache,1); }autre { if(is_numeric($cid)) { $channelcache=$GLOBALS['db']->one("SELECT * FROM ".tableex('channel')." where cid='$cid' limit 1"); }autre { $channelcache=$GLOBALS['db']->one("SELECT * FROM ".tableex('channel')." where cname='$cid' limit 1"); } si($channelcache) { $channelcache['csetting']=json_decode($channelcache['csetting'],1); cacheset ($channelcachekeyname,json_encode($channelcache),604800,'channel'); }autre { Renvoie faux ; } } $GLOBALS['channelcache'][$cid]=$channelcache; Renvoie $channelcache ; }fonction getchannelurl ($ cid) { if(!is_array($cid)) { $cid=getchannelcache($cid); if(!$cid) {Return false ;} $csetting=$cid['csetting']; }autre { $csetting=json_decode($cid['csetting'],1); } $canal=$cid; if($channel['ckind']==3 || $channel['ckind']==4 || $channel['ckind']==5) { Renvoie $channel['cvalue'] ; }elseif($channel['ckind']==1 || $channel['ckind']==2) { if(isset($csetting['template']) && empty($csetting['template'])) { Retour ''; } } if(!isset($csetting['channel_url'])) {Retour '';} $channelurls=explode(';',$csetting['channel_url']); $channelurl=str_replace("(cid)",$cid['cid'],$channelurls[0]); si(vide($channelurl)) { Retour ''; } if(!isset($csetting['channel_domain']) || empty($csetting['channel_domain'])) { $csetting['channel_domain']=SystemDomain; } if(isset($csetting['channel_domain']) && $csetting['channel_domain']<>'') { $channel_domains=explode(';',$csetting['channel_domain']); $csetting['channel_domain']=$channel_domains[0]; foreach($channel_domains as $channel_domain) { if(stripos($channel_domain,'*')===false) { $csetting['channel_domain']=$channel_domain; casser; } } foreach ($channel_domains as $channel_domain) { if(server_name()==$channel_domain) { $csetting['channel_domain']=''; casser; } } } si (UrlRewrite) { if(empty($csetting['channel_domain'])) { $thisurl=$channelurl; }autre { $thisurl='//'.$csetting['channel_domain'].server_port().$channelurl; } }autre { if(empty($csetting['channel_domain'])) { $thisurl=SystemDir.IndexFile.$channelurl; }autre { $thisurl='//'.$csetting['channel_domain'].server_port().SystemDir.IndexFile.$channelurl; } } Renvoie $thisurl ; } fonction gethomeurl() { if(isset($GLOBALS['homeurl'])) { Renvoie $GLOBALS['homeurl'] ; } si(!UrlRewrite) { $indexfile=FichierIndex ; }autre { $fichierindex=''; } $domains=explose(';',SystemDomain); foreach($domains en $domain) { $domain=trim($domaine); if($domain==server_name()) { $GLOBALS['homeurl']=SystemDir.$indexfile; Renvoie $GLOBALS['homeurl'] ; } } if(SystemDomain=='') {$GLOBALS['homeurl']=SystemDir.$indexfile;Return&
七字铺
七字铺

répondre à tous (2)
欧阳

Ce fichier est composé de toutes les méthodes et vous devez utiliser une base de données. Qu'en penses-tu?

Ensuite, vous ne pouvez essayer qu'une seule méthode à la fois. Vous importez la base de données et voyez si une base de données est injectée.

  • répondre Bon, j'en suis encore au niveau entrée, merci pour vos conseils.
    七字铺 auteur 2021-03-28 14:20:30
七字铺

Le message ne peut pas être réédité. Le code étant trop long, il semble qu'il ne soit pas entièrement affiché. Ici, j'utilise le disque réseau pour télécharger le fichier

Télécharger : https://wwa.lanzous.com/. iTtK9nbjdja Mot de passe : f2p0

    Derniers téléchargements
    Plus>
    effets Web
    Code source du site Web
    Matériel du site Web
    Modèle frontal
    À propos de nous Clause de non-responsabilité Sitemap
    Site Web PHP chinois:Formation PHP en ligne sur le bien-être public,Aidez les apprenants PHP à grandir rapidement!