-
Notifications
You must be signed in to change notification settings - Fork 5
/
Copy pathjavascript.php
167 lines (127 loc) · 5.9 KB
/
javascript.php
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
<?php
error_reporting(E_ALL^E_NOTICE);
@header("Content-Type: text/html; charset=gbk");
__FILE__ == '' && die('Fatal error code: 0');
define("IN_MYMPS",true);
define('MAGIC_QUOTES_GPC', get_magic_quotes_gpc());
define('MYMPS_ROOT',dirname(__FILE__));
define('MYMPS_ROOT',MYMPS_ROOT);
define('MYMPS_DATA',MYMPS_ROOT.'/data');
define('MYMPS_INC',MYMPS_ROOT.'/include');
if(function_exists('date_default_timezone_set')) date_default_timezone_set('Hongkong');
@set_magic_quotes_runtime(0);
if (defined('DEBUG_MODE') == false){
define('DEBUG_MODE', 0);
}
if(PHP_VERSION < '4.1.0') {
$_GET = &$HTTP_GET_VARS;
$_SERVER = &$HTTP_SERVER_VARS;
unset($HTTP_GET_VARS,$HTTP_SERVER_VARS);
}
if (isset($_REQUEST['GLOBALS']) OR isset($_FILES['GLOBALS'])) {
exit('Request tainting attempted.');
}
require_once MYMPS_DATA."/config.php";
require_once MYMPS_ROOT."/include/common.fun.php";
require_once MYMPS_ROOT."/include/class.fun.php";
require_once MYMPS_ROOT."/include/custom.fun.php";
$part = isset($_GET['part']) ? mhtmlspecialchars($_GET['part']) : 'jswizard';
$flag = isset($_GET['flag']) ? mhtmlspecialchars($_GET['flag']) : '';
$id = isset($_GET['id']) ? intval($_GET['id']) : '';
$inajax = isset($_GET['inajax']) ? intval($_GET['inajax']) : '';
$getvalue = isset($_GET['value']) ? mhtmlspecialchars($_GET['value']) : '';
$timestamp = time();
$cityid = isset($_GET['cityid']) ? intval($_GET['cityid']) : '';
$customtype = isset($customtype) ? mhtmlspecialchars($_GET['customtype']) : 'info';
if(empty($part) || !in_array($part,array('advertisement','information','news','member','jswizard','iflogin','chk_remember','chk_authcode','chk_answer','chk_remail'))){
$part = 'advertisement';
}
if($part == 'chk_answer'){
$data = NULL;
@require_once MYMPS_ROOT."/include/cache.fun.php";
$result = read_static_cache('checkanswer');
if(is_array($result)){
if(empty($getvalue) || empty($id)){
exit('请输入验证问题！');
}elseif($result[$id]['answer'] != $getvalue){
exit('验证答案不正确！');
}else{
exit('success');
}
}
$result = $getvalue = $whenpost = $data = NULL;
}elseif($part == 'chk_authcode'){
@session_save_path(MYMPS_ROOT.'/data/sessions');
exit(mymps_chk_randcode($getvalue) ? 'success' : '验证码输入不正确');
$getvalue='';
}elseif($part == 'chk_remember'){
require_once MYMPS_DATA."/config.db.php";
@header("Content-type: text/html; charset=".$charset);
require_once MYMPS_INC."/db.class.php";
if(empty($getvalue)){
echo "用户名不符合规范！";
} else {
if(PASSPORT_TYPE == 'phpwind'){
include MYMPS_ROOT.'/pw_client/uc_client.php';
exit(uc_user_get($getvalue) ? "很遗憾！该用户名已被注册！" : "success");
} elseif(PASSPORT_TYPE == 'ucenter'){
include MYMPS_ROOT.'/uc_client/client.php';
exit(uc_get_user($getvalue) ? "很遗憾！该用户名已被注册！" : "success");
} else {
$check = CheckUserID($getvalue,"用户名");
if(strstr($getvalue,'admin') || strstr($getvalue,'管理员')){
exit("该用户名已被保护，请换一个用户名！");
}
if(strlen($getvalue) < 5 || strlen($getvalue) > 20){
exit("很抱歉，用户名必须控制在 5 - 20 个字符以内！");
}
if($check == 'ok'){
exit((!$re = $db->getOne("SELECT * FROM {$db_mymps}member WHERE userid LIKE '$getvalue'")) ? "success" : "很抱歉！该用户名已经被注册！");
}else{
exit($check);
}
}
}
$getvalue = NULL;
}elseif($part == 'chk_remail'){
$mod = isset($_GET['mod']) ? intval($_GET['mod']) : 0;
require_once MYMPS_DATA."/config.db.php";
@header("Content-type: text/html; charset=".$charset);
require_once MYMPS_INC."/db.class.php";
if($db->getOne("SELECT id FROM {$db_mymps}member WHERE email = '$getvalue' AND status=1")){
echo empty($mod) ? '很抱歉！该电子邮箱地址已经被注册！' : 'success';
} else {
echo $mod == 1 ? '该电子邮箱帐号不存在，无法发送邮件！' : 'success';
}
}elseif($part == 'advertisement') {
empty($id) && exit(html2js('Invalid Id'));
require_once MYMPS_ROOT."/data/config.db.php";
require_once MYMPS_ROOT."/include/db.class.php";
if($code = $db -> getOne("SELECT code FROM `{$db_mymps}advertisement` WHERE available > '0' AND starttime<='".$timestamp."' AND type = 'normalad' AND advid = '$id'")) echo html2js($code);
} elseif($part == 'iflogin'){
require_once MYMPS_DATA."/config.db.php";
require_once MYMPS_INC."/db.class.php";
require_once MYMPS_INC."/member.class.php";
require_once MYMPS_INC."/cache.fun.php";
$data = read_static_cache('qqlogin');
$echo = $data['open'] == 1 ? '<ul><a href="'.$mymps_global[SiteUrl].'/include/qqlogin/qq_login.php" title="用QQ帐号登录"><img align="absmiddle" src="'.$mymps_global['SiteUrl'].'/include/qqlogin/qq_login.gif"></a></ul> <ul class="line"><u></u></ul>' : '';
$data = NULL;
$echo .= '<ul><a href="'.$mymps_global['SiteUrl'].'/'.$mymps_global['cfg_member_logfile'].'?cityid='.$cityid.'" >登录</a></ul><ul class="line"><u></u></ul><ul><a href="'.$mymps_global[SiteUrl].'/'.$mymps_global['cfg_member_logfile'].'?mod=register&cityid='.$cityid.'" >注册</a></ul>';
echo html2js($member_log->chk_in() ? '欢迎回来，'.$s_uid.' ！ <a href="'.$mymps_global['SiteUrl'].'/member/index.php">用户中心</a> <a href="'.$mymps_global[SiteUrl].'/'.$mymps_global['cfg_member_logfile'].'?mod=out&url='.$url.'" >退出</a> ' : $echo);
} elseif(in_array($part,array('information','news','member'))) {
empty($id) && exit(html2js('Invalid Id'));
require_once MYMPS_ROOT."/data/config.db.php";
require_once MYMPS_ROOT."/include/db.class.php";
$db->query("UPDATE `{$db_mymps}".$part."` SET hit = hit+1 WHERE id = '$id'");
$hit = $db->getOne("SELECT hit FROM `{$db_mymps}".$part."` WHERE id = '$id'");
echo html2js($hit);
unset($hit);
} elseif($part == 'jswizard') {
require_once MYMPS_ROOT."/data/config.db.php";
require_once MYMPS_ROOT."/include/db.class.php";
echo custom($flag,'js');
} else{
exit(html2js('Access Denied!'));
}
unset($part,$flag,$cachefile,$nocache,$jsrefdomains,$allowflag,$jswizard_lists,$datalist,$writedata,$inajax,$timestamp);
?>