PageRenderTime 54ms CodeModel.GetById 24ms RepoModel.GetById 0ms app.codeStats 1ms

/develop/include/script.php

https://github.com/jinbo51/DiscuzX
PHP | 264 lines | 235 code | 9 blank | 20 comment | 70 complexity | 42f82ee1f384a28ed8289d16d0369379 MD5 | raw file
Possible License(s): BSD-3-Clause 
    

  1. <?php
    2. 

  2. /**
    3. 

  3.  *      [Discuz!] (C)2001-2099 Comsenz Inc.
    4. 

  4.  *      This is NOT a freeware, use is subject to license terms
    5. 

  5.  *
    6. 

  6.  *      $Id: script.php 30659 2012-06-11 02:10:10Z zhengqingpeng $
    7. 

  7.  */
    8. 

  8. 

  9. if(!defined('IN_DISCUZ')) {
    10. 

  10. 	exit('Access Denied');
    11. 

  11. }
    12. 

  12. $scripttype = array('navigation', 'secqaa');
    13. 

  13. if(!defined('DISCUZ_VERSION')) {
    14. 

  14. 	require_once DISCUZ_ROOT.'./source/discuz_version.php';
    15. 

  15. }
    16. 

  16. $version = floatval(substr(DISCUZ_VERSION, 1));
    17. 

  17. if($version > 2.5) {
    18. 

  18. 	$scripttype = array_merge($scripttype, array('seccode', 'magic', 'cron', 'adv', 'task'));
    19. 

  19. } elseif($version > 2) {
    20. 

  20. 	$scripttype = array_merge($scripttype, array('seccode'));
    21. 

  21. }
    22. 

  22. $basetype = array('general', 'special', 'mobile');
    23. 

  23. $type = in_array($_GET['type'], array_merge($scripttype, $basetype, array('system'))) ? $_GET['type'] : '';
    24. 

  24. $filename = dhtmlspecialchars(preg_replace("/[^\[A-Za-z0-9_\.\]]/", '', $_GET['filename']));
    25. 

  25. if(!submitcheck('pluginsubmit')) {
    26. 

  26. 	$scripts = array();
    27. 

  27. 	$scriptList = false;
    28. 

  28. 	if($type && $filename && (in_array($type, $basetype) && $plugin['modules'][$type] || $plugin['modules'][$type][$filename])) {
    29. 

  29. 		if(in_array($type, $basetype)) {
    30. 

  30. 			$module = $plugin['modules'][$type];
    31. 

  31. 			require_once DISCUZ_ROOT.'develop/include/hooklist.php';
    32. 

  32. 			$hooklist = $type == 'mobile' ? $mobilehook : $generalhook;
    33. 

  33. 		} else {
    34. 

  34. 			
    35. 

  35. 			$module = $plugin['modules'][$type][$filename];
    36. 

  36. 			if($type == 'cron') {
    37. 

  37. 				$days = array(-1,0,1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31);
    38. 

  38. 				$week = array('0'=>'星期日', '1'=>'星期一', '2'=>'星期二', '3'=>'星期三', '4'=>'星期四', '5'=>'星期五', '6'=>'星期六');
    39. 

  39. 				$module['weekday'] = isset($module['weekday']) ? $module['weekday'] : '-1';
    40. 

  40. 				$module['day'] = isset($module['day']) ? $module['day'] : '-1';
    41. 

  41. 				$module['hour'] = isset($module['hour']) ? $module['hour'] : '-1';
    42. 

  42. 			} elseif($type == 'navigation') {
    43. 

  43. 				$allowgroup = array('0' => '普通用户', '1' => '管理员', '2' => '超级版主', '3' => '版主');
    44. 

  44. 			}
    45. 

  45. 		}
    46. 

  46. 	} elseif($type == 'system' && in_array($filename, array('install', 'uninstall', 'upgrade'))) {
    47. 

  47. 		$extra = $plugin['modules']['extra'];
    48. 

  48. 	} else {
    49. 

  49. 		$scriptList = true;
    50. 

  50. 		$scripts = $plugin['modules'];
    51. 

  51. 	}
    52. 

  52. 	$navtypes = array(
    53. 

  53. 			'g1' => array(
    54. 

  54. 					'1' => array('h' => '1100100', 'e' => 'inc', 'value' => '1', 'desc' => $devlang['plugins_edit_modules_type_1']),
    55. 

  55. 					'5' => array('h' => '1111', 'e' => 'inc', 'value' => '5', 'desc' => $devlang['plugins_edit_modules_type_5']),
    56. 

  56. 					'27' => array('h' => '1100100', 'e' => 'inc', 'value' => '27', 'desc' => $devlang['plugins_edit_modules_type_27']),
    57. 

  57. 					'23' => array('h' => '1100100', 'e' => 'inc', 'value' => '23', 'desc' => $devlang['plugins_edit_modules_type_23']),
    58. 

  58. 					'25' => array('h' => '1100110', 'e' => 'inc', 'value' => '25', 'desc' => $devlang['plugins_edit_modules_type_25']),
    59. 

  59. 					'24' => array('h' => '1100111', 'e' => 'inc', 'value' => '24', 'desc' => $devlang['plugins_edit_modules_type_24'])
    60. 

  60. 			),
    61. 

  61. 			'g3' => array(
    62. 

  62. 					'7' => array('h' => '1111', 'e' => 'inc', 'value' => '7', 'desc' => $devlang['plugins_edit_modules_type_7']),
    63. 

  63. 					'17' => array('h' => '1111', 'e' => 'inc', 'value' => '17', 'desc' => $devlang['plugins_edit_modules_type_17']),
    64. 

  64. 					'19' => array('h' => '1111', 'e' => 'inc', 'value' => '19', 'desc' => $devlang['plugins_edit_modules_type_19']),
    65. 

  65. 					'14' => array('h' => '1001', 'e' => 'inc', 'value' => '14', 'desc' => $devlang['plugins_edit_modules_type_14']),
    66. 

  66. 					'26' => array('h' => '1111', 'e' => 'inc', 'value' => '26', 'desc' => $devlang['plugins_edit_modules_type_26']),
    67. 

  67. 					'21' => array('h' => '1111', 'e' => 'inc', 'value' => '21', 'desc' => $devlang['plugins_edit_modules_type_21']),
    68. 

  68. 					'15' => array('h' => '1001', 'e' => 'inc', 'value' => '15', 'desc' => $devlang['plugins_edit_modules_type_15']),
    69. 

  69. 					'16' => array('h' => '1001', 'e' => 'inc', 'value' => '16', 'desc' => $devlang['plugins_edit_modules_type_16']),
    70. 

  70. 					'3' => array('h' => '1001', 'e' => 'inc', 'value' => '3', 'desc' => $devlang['plugins_edit_modules_type_3'])
    71. 

  71. 			)
    72. 

  72. 	);
    73. 

  73. } else {
    74. 

  74. 	require_once libfile('function/admincp');
    75. 

  75. 	require_once libfile('function/plugin');
    76. 

  76. 	$_GET['description'] = dhtmlspecialchars($_GET['description']);
    77. 

  77. 	if(submitcheck('addhook')) {
    78. 

  78. 		
    79. 

  79. 		require_once DISCUZ_ROOT.'develop/include/hooklist.php';
    80. 

  80. 		$sort = dhtmlspecialchars(preg_replace("/[^\[A-Za-z0-9_\]]/", '', $_GET['sort']));
    81. 

  81. 		$page = dhtmlspecialchars(preg_replace("/[^\[A-Za-z0-9_\.\]]/", '', $_GET['page']));
    82. 

  82. 		$hooklist = $type == 'mobile' ? $mobilehook : $generalhook;
    83. 

  83. 		if(in_array($type, $basetype)) {
    84. 

  84. 			//初始化钩子
    85. 

  85. 			$plugin['modules'][$type]['hooks'] = array();
    86. 

  86. 			foreach($_GET['hooks'] as $skey => $value) {
    87. 

  87. 				$sorts = $hooklist[$skey];
    88. 

  88. 				if($sorts) {
    89. 

  89. 					foreach($value as $fkey => $hval) {
    90. 

  90. 						if($sorts[$fkey]) {
    91. 

  91. 							foreach($hval as $hook) {
    92. 

  92. 								$key = $hook;
    93. 

  93. 								if(stripos($hook, '_output') && substr($hook, stripos($hook, '_output')) == '_output') {
    94. 

  94. 									$key = substr($key, 0, stripos($hook, '_output'));
    95. 

  95. 								}
    96. 

  96. 								//判断是否有选择主方法，如果没有抛弃output的钩子
    97. 

  97. 								if(isset($sorts[$fkey][$key]) && isset($_GET['hooks'][$skey][$fkey][$key])) {
    98. 

  98. 									$plugin['modules'][$type]['hooks'][$skey][$fkey][$hook] = $hook;
    99. 

  99. 								}
    100. 

  100. 							}
    101. 

  101. 						}
    102. 

  102. 					}
    103. 

  103. 				}
    104. 

  104. 			}
    105. 

  105. 			//添加钩子
    106. 

  106. 			if(isset($hooklist[$sort])) {
    107. 

  107. 				$sorts = $hooklist[$sort];
    108. 

  108. 				if($sorts && $sorts[$page]) {
    109. 

  109. 					foreach($_GET['newhook'] as $hook) {
    110. 

  110. 						$key = $hook;
    111. 

  111. 						if(stripos($hook, '_output') && substr($hook, stripos($hook, '_output')) == '_output') {
    112. 

  112. 							$key = substr($key, 0, stripos($hook, '_output'));
    113. 

  113. 						}
    114. 

  114. 						//判断是否有选择主方法，如果没有抛弃output的钩子
    115. 

  115. 						if(isset($sorts[$page][$key]) && isset($_GET['newhook'][$key])) {
    116. 

  116. 							$plugin['modules'][$type]['hooks'][$sort][$page][$hook] = $hook;
    117. 

  117. 						}
    118. 

  118. 					}
    119. 

  119. 				}
    120. 

  120. 			}
    121. 

  121. 			//写入插件信息
    122. 

  122. 			C::t('common_plugin')->update($pluginid, array('modules' => serialize($plugin['modules'])));
    123. 

  123. 			
    124. 

  124. 		}
    125. 

  125. 		devmessage('嵌入点添加成功，继续下一步。', "develop.php?mod=plugins&action=$action&operation=$operation&pluginid=$pluginid&filename=$filename&type=$type", 'succeed');
    126. 

  126. 	} elseif(submitcheck('editcron')) {
    127. 

  127. 		//过滤分钟数据
    128. 

  128. 		$minutes = explode(',', $_GET['newminute']);
    129. 

  129. 		foreach($minutes as $minute) {
    130. 

  130. 			$minute = intval($minute);
    131. 

  131. 			if($minute < 0 || 59 < $minute) {
    132. 

  132. 				continue;
    133. 

  133. 			}
    134. 

  134. 			$newminute[$minute] = $minute;
    135. 

  135. 		}
    136. 

  136. 		$plugin['modules'][$type][$filename]['weekday'] = $_GET['newweekday'] < -1 || 6 < $_GET['newweekday'] ? -1 : intval($_GET['newweekday']);
    137. 

  137. 		$plugin['modules'][$type][$filename]['day'] = $_GET['newday'] < -1 || 31 < $_GET['newday'] ? -1 : intval($_GET['newday']);
    138. 

  138. 		$plugin['modules'][$type][$filename]['hour'] = $_GET['newhour'] < -1 || 23 < $_GET['newhour'] ? -1 : intval($_GET['newhour']);
    139. 

  139. 		$plugin['modules'][$type][$filename]['minute'] = $newminute ? implode(',', $newminute) : '';
    140. 

  140. 		$plugin['modules'][$type][$filename]['description'] = $_GET['description'];
    141. 

  141. 		//写入插件信息
    142. 

  142. 		C::t('common_plugin')->update($pluginid, array('modules' => serialize($plugin['modules'])));
    143. 

  143. 		devmessage('计划任务设置完成', "develop.php?mod=plugins&action=$action&operation=$operation&pluginid=$pluginid", 'succeed');
    144. 

  144. 	} elseif(submitcheck('editadv')) {
    145. 

  145. 		$plugin['modules'][$type][$filename]['description'] = $_GET['description'];
    146. 

  146. 		//写入插件信息
    147. 

  147. 		C::t('common_plugin')->update($pluginid, array('modules' => serialize($plugin['modules'])));
    148. 

  148. 		devmessage('脚本编辑完成', "develop.php?mod=plugins&action=$action&operation=$operation&pluginid=$pluginid", 'succeed');
    149. 

  149. 	} elseif(submitcheck('editnav')) {
    150. 

  150. 		
    151. 

  151. 		if(!ispluginkey($_GET['name'])) {
    152. 

  152. 			devmessage($devlang['plugins_edit_modules_name_invalid'], '', 'error');
    153. 

  153. 		} elseif($_GET['name'] != $filename && isset($plugin['modules'][$type][$_GET['name']])) {
    154. 

  154. 			devmessage($devlang['plugins_script_'.$type].$devlang['plugins_script_repeat'], '', 'error');
    155. 

  155. 		}
    156. 

  156. 		
    157. 

  157. 		$plugin['modules'][$type][$filename] = array(
    158. 

  158. 				'name' => $_GET['name'],
    159. 

  159. 				'menu' => trim($_GET['menu']),
    160. 

  160. 				'url' => trim($_GET['url']),
    161. 

  161. 				'type' => intval($_GET['newtype']),
    162. 

  162. 				'adminid' => $_GET['adminid'] >= 0 && $_GET['adminid'] <= 3 ? intval($_GET['adminid']) : 1,
    163. 

  163. 				'displayorder' => intval($_GET['order']),
    164. 

  164. 				'navtitle' => $_GET['navtitle'],
    165. 

  165. 				'navicon' => $_GET['navicon'],
    166. 

  166. 				'navsubname' => $_GET['navsubname'],
    167. 

  167. 				'navsuburl' => $_GET['navsuburl'],
    168. 

  168. 				'description' => trim($_GET['menu'])
    169. 

  169. 			);
    170. 

  170. 		//写入插件信息
    171. 

  171. 		C::t('common_plugin')->update($pluginid, array('modules' => serialize($plugin['modules'])));
    172. 

  172. 		devmessage('脚本编辑完成', "develop.php?mod=plugins&action=$action&operation=$operation&pluginid=$pluginid", 'succeed');
    173. 

  173. 	} elseif(submitcheck('editsystem')) {
    174. 

  174. 		if(in_array($filename, array('install', 'uninstall', 'upgrade'))) {
    175. 

  175. 			$plugin['modules']['extra'][$filename] = $_GET[$filename];
    176. 

  176. 			//添加表时同时增加删除表SQL
    177. 

  177. 			if($filename == 'install' && empty($plugin['modules']['extra']['uninstall'])) {
    178. 

  178. 				preg_match_all("/CREATE\s+TABLE.+?pre\_(.+?)\s*\((.+?)\)\s*(ENGINE|TYPE)\s*\=/is", $_GET[$filename], $matches);
    179. 

  179. 				if($matches[1]) {
    180. 

  180. 					$uninstall = '';
    181. 

  181. 					foreach($matches[1] as $table) {
    182. 

  182. 						$uninstall .= "DROP TABLE IF EXISTS pre_$table;\n";
    183. 

  183. 					}
    184. 

  184. 					$plugin['modules']['extra']['uninstall'] = $uninstall;
    185. 

  185. 				}
    186. 

  186. 			}
    187. 

  187. 			//写入插件信息
    188. 

  188. 			C::t('common_plugin')->update($pluginid, array('modules' => serialize($plugin['modules'])));
    189. 

  189. 		}
    190. 

  190. 		devmessage('脚本编辑完成', "develop.php?mod=plugins&action=$action&operation=$operation&pluginid=$pluginid", 'succeed');
    191. 

  191. 	} else {
    192. 

  192. 		
    193. 

  193. 		$modules = array();
    194. 

  194. 		//整理新的脚本名称
    195. 

  195. 		foreach($_POST['script'] as $key => $scripts) {
    196. 

  196. 			if($key === 'extra' || $key === 'system') {
    197. 

  197. 				continue;
    198. 

  198. 			}
    199. 

  199. 			if(in_array($key, array('general', 'special', 'mobile'))) {
    200. 

  200. 				if(empty($scripts)) {
    201. 

  201. 					unset($plugin['modules'][$key]);
    202. 

  202. 					continue;
    203. 

  203. 				} elseif(!empty($scripts)) {
    204. 

  204. 					if(!ispluginkey($scripts)) {
    205. 

  205. 						devmessage($devlang['plugins_edit_modules_name_invalid'], '', 'error');
    206. 

  206. 					}
    207. 

  207. 					$plugin['modules'][$key]['name'] = $scripts;
    208. 

  208. 					$plugin['modules'][$key]['displayorder'] = 0;
    209. 

  209. 

  210. 					$plugin['modules'][$key]['menu'] = '';
    211. 

  211. 					$plugin['modules'][$key]['url'] = '';
    212. 

  212. 					$plugin['modules'][$key]['type'] = $key == 'general' ? 11 : ($key == 'special' ? 12 : 28);
    213. 

  213. 					$plugin['modules'][$key]['adminid'] = 1;
    214. 

  214. 					$plugin['modules'][$key]['navtitle'] = '';
    215. 

  215. 					$plugin['modules'][$key]['navicon'] = '';
    216. 

  216. 					$plugin['modules'][$key]['navsubname'] = '';
    217. 

  217. 					$plugin['modules'][$key]['navsuburl'] = '';
    218. 

  218. 				}
    219. 

  219. 			} elseif(in_array($key, $scripttype)) {
    220. 

  220. 				$existscripts = array();
    221. 

  221. 				foreach($scripts as $scrkey => $scriptname) {
    222. 

  222. 					if(isset($_POST['delete'][$key][$scriptname])) {
    223. 

  223. 						unset($plugin['modules'][$key][$scriptname]);
    224. 

  224. 						continue;
    225. 

  225. 					} elseif(!empty($scriptname)) {
    226. 

  226. 						if(!ispluginkey($scriptname)) {
    227. 

  227. 							devmessage($devlang['plugins_edit_modules_name_invalid'], '', 'error');
    228. 

  228. 						} elseif(@in_array($scriptname, $existscripts)) {
    229. 

  229. 							devmessage($devlang['plugins_script_'.$key].$devlang['plugins_script_repeat'], '', 'error');
    230. 

  230. 						}
    231. 

  231. 						$init = isset($plugin['modules'][$key][$scriptname]) ? false : true;
    232. 

  232. 						//更名
    233. 

  233. 						if($scrkey != $scriptname && !is_numeric($scrkey)) {
    234. 

  234. 							$plugin['modules'][$key][$scriptname] = $plugin['modules'][$key][$scrkey];
    235. 

  235. 							unset($plugin['modules'][$key][$scrkey]);
    236. 

  236. 						}
    237. 

  237. 						$plugin['modules'][$key][$scriptname]['name'] = $scriptname;
    238. 

  238. 						$plugin['modules'][$key][$scriptname]['displayorder'] = 0;
    239. 

  239. 						if($key == 'navigation' && $init) {
    240. 

  240. 							$plugin['modules'][$key][$scriptname]['menu'] = '';
    241. 

  241. 							$plugin['modules'][$key][$scriptname]['url'] = '';
    242. 

  242. 							$plugin['modules'][$key][$scriptname]['type'] = 1;
    243. 

  243. 							$plugin['modules'][$key][$scriptname]['adminid'] = 0;
    244. 

  244. 							$plugin['modules'][$key][$scriptname]['navtitle'] = '';
    245. 

  245. 							$plugin['modules'][$key][$scriptname]['navicon'] = '';
    246. 

  246. 							$plugin['modules'][$key][$scriptname]['navsubname'] = '';
    247. 

  247. 							$plugin['modules'][$key][$scriptname]['navsuburl'] = '';
    248. 

  248. 						}
    249. 

  249. 						$existscripts[$scriptname] = $scriptname;
    250. 

  250. 						
    251. 

  251. 					}
    252. 

  252. 				}
    253. 

  253. 			}
    254. 

  254. 		}
    255. 

  255. 		C::t('common_plugin')->update($pluginid, array('modules' => serialize($plugin['modules'])));
    256. 

  256. 		if($action == 'edit') {
    257. 

  257. 			devmessage('脚本添加成功', "develop.php?mod=plugins&action=$action&operation=script&pluginid=$pluginid", 'succeed');
    258. 

  258. 		} else {
    259. 

  259. 			dheader("location:develop.php?mod=plugins&action=$action&operation=setting&pluginid=$pluginid");
    260. 

  260. 			//devmessage('脚本添加成功', "develop.php?mod=plugins&action=$action&operation=setting&pluginid=$pluginid", 'succeed');
    261. 

  261. 		}
    262. 

  262. 	}
    263. 

  263. }
    264. 

  264. ?>
    265.