This repository has been archived by the owner on Jan 25, 2022. It is now read-only.
-
Notifications
You must be signed in to change notification settings - Fork 0
/
index.php
174 lines (158 loc) · 6.03 KB
/
index.php
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
<?php
//本文件大部分还是遵循原脚本，不过为了支持head.php的调用，增加了一个变量$url。具体用法请查看文件head.php
$t1 = microtime(true);
require_once 'app/class/app.php';
require_once 'app/class/page.php';
//此处可以选择性地引入waf.php，具体引入方式还没有得到试验(include/require)
$db = new DbHelpClass();
$p = isset($_GET['p']) ? intval($_GET['p']) : 1;
$act = isset($_GET['act']) ? $_GET['act'] : '';
$s = isset($_GET['s']) ? htmlspecialchars($_GET['s']) : '';
$id = isset($_GET['id']) ? intval($_GET['id']) : 0;
$tid = isset($_GET['tid']) ? $_GET['tid'] : '';
$tid = $tid===''?'':intval($tid);
$file = self();
$per_page = $set['page'];
$start = $per_page * ($p - 1);
//url获取
$uri = $_SERVER['REQUEST_URI'];
$protocol = ((!empty($_SERVER['HTTPS']) && $_SERVER['HTTPS'] != 'off') || $_SERVER['SERVER_PORT'] == 443) ?
"https://": "http://";
$url = $protocol . $_SERVER['HTTP_HOST'] . $_SERVER['REQUEST_URI'];
//正常脚本
if($widget=="1") $wid = $db->getdata("select * from `Wid` order by ord");
switch ($act) {
case 'login':
$tit = '登陆';
$ls = isset($_GET['l']) ? $_GET['l'] : '';
if($ls==$set['lstr']){
$tpl = 'login.php';
}else{
header('Location:' . $file);
}
break;
case 'logout':
unset($_SESSION[KEY.'admin']);
session_destroy();
header('Location:' . $file);
break;
case 'dologin':
$ps = isset($_POST['pass']) ? $_POST['pass'] : '';
$ls = isset($_POST['l']) ? $_POST['l'] : '';
login($file,$ps,$ls);
break;
case 'archives':
$tit = '归档';
$where = $admin?'':'where hide=0';
$archives = $db->getdata("select * from `Log` {$where} order by atime desc", array());
$tpl = 'archive.php';
break;
case 'wid':
chkadm();
$tit = '边栏设置';
$tpl = 'widget.php';
break;
case 'add':
chkadm();
$tit = '发布';
$tpl = 'post.php';
break;
case 'edit':
chkadm();
$rs = $db->getdata("select * from `Log` where id=:id", array(
'id' => $id
));
$vv = $rs[0];
$tit = '编辑';
$tpl = 'post.php';
break;
case 'set':
chkadm();
$tit = '设置';
$tpl = 'setting.php';
break;
case 'pl':
$rs = $db->getdata("select * from `Log` where id=:id", array(
'id' => $id
));
$v = $rs[0];
if(empty($v)){@header("http/1.1 404 not found");@header("status: 404 not found");exit('404 not found');}
if($v['hide']=="1" && $admin==0){@header("http/1.1 404 not found");@header("status: 404 not found");exit('404 not found');}
$title = $v['title'] == '' ? mb_substr(strip_tags($v['sum']) , 0, 15, 'utf-8') : $v['title'];
$sum = str_replace('"','',strip_tags($v['sum']));
$list = $db->getdata("select * from `Pl` where cid=:id", array(
'id' => $id
));
$tit = strip_tags($title);
$key = $v['key'];
$des = str_replace("\n","",$sum);
$tpl = 'view.php';
pv($id);
break;
case 'plist':
$where = $admin==1?'':'where hide=0';
$count = $db->total('`Pl`',$where);
$list = $db->getdata("select * from `Pl` $where order by id desc limit $start,$per_page", array());
if ($rewrite == 1) {
$page_config['base_url'] = "comment-"; //当前的url，如果有参数需要拼接一下url
$page_config['suffix'] = ".html"; //当前的url，如果有参数需要拼接一下url
} else {
$page_config['base_url'] = $file . "?act=plist&p="; //当前的url，如果有参数需要拼接一下url
}
$page_config['total_rows'] = $count; //传递总数
$page_config['per_page'] = $per_page; //传递每页的数量
$page_config['cur_page'] = $p; //传递当前页码
$pageStr = new Page($page_config);
$pagelist = $pageStr->create_links(); //创建新页码
$tit = '评论列表';
$key = $webkey.',评论,博客评论,评论列表';
if($p>1) $tit .= '_第'.$p.'页_';
$tpl = 'plist.php';
break;
case 'target':
$tpl = 'target.php';
break;
default:
$key = $webkey;
if (empty($s)) {
if($tid===''){
$where = $admin?'':'where hide=0';
$_s = '';
$tit = '首页';
}else{
$where = $admin?'where tid='.$tid:'where hide=0 and tid='.$tid;
$_s = 'tid=' . $tid . '&';
$tit = $class[$tid];
}
$count = $db->total('`Log`',$where);
$list = $db->getdata("select * from `Log` $where order by ist desc,atime desc limit $start,$per_page", array());
} else {
$where = $admin?'':'and hide=0';
$_s = 's=' . $s . '&';
$count = $db->total('`Log`', "where (title like '%$s%' or content like '%$s%') $where");
$list = $db->getdata("select * from `Log` where (title like :s or content like :s) $where order by ist desc,atime desc limit $start,$per_page", array(
"s" => $s
));
$key = $key.',搜索结果';
$tit = '搜索结果-'.$s;
}
if ($rewrite == 1 && empty($s)) {
if($tid===''){
$page_config['base_url'] = 'index-'; //当前的url，如果有参数需要拼接一下url
}
else{
$page_config['base_url'] = "list-". $tid . '-'; //当前的url，如果有参数需要拼接一下url
}
$page_config['suffix'] = '.html'; //当前的url，如果有参数需要拼接一下url
} else {
$page_config['base_url'] = $file . "?{$_s}p="; //当前的url，如果有参数需要拼接一下url
}
$page_config['total_rows'] = $count; //传递总数
$page_config['per_page'] = $per_page; //传递每页的数量
$page_config['cur_page'] = $p; //传递当前页码
$pageStr = new Page($page_config);
$pagelist = $pageStr->create_links(); //创建新页码
if($p>1) $tit .= '_第'.$p.'页_';
$tpl = 'index.php';
}
include 'assets/'. TEMPLATE .'/'. $tpl;