common.inc.php

来自「STCMS音乐系统 系统功能： 1、随意的添加导航栏目的频道」· PHP 代码 · 共 102 行

<?php
///////////////////////////////////////////////
// Author:daong | E-mail: [e-mail]
// Copyright &copy Http://stcms.vicp.net
// $Id: 09-03-23 final version $
///////////////////////////////////////////////
@session_start();
@error_reporting(E_ALL ^E_NOTICE);
unset($_REQUEST, $HTTP_ENV_VARS, $HTTP_POST_VARS, $HTTP_GET_VARS, $HTTP_POST_FILES, $HTTP_COOKIE_VARS);
set_magic_quotes_runtime(0);
define("STCMS_ROOT",str_replace("\\","/",dirname(__FILE__))."/");
define("STCMS_VERSION","1.0");
define("NOW",date("Y-m-d h:i:s"));
require(STCMS_ROOT."include/common.func.php");
if(function_exists("date_default_timezone_set"))
{
	date_default_timezone_set("Etc/GMT-8");
}
$search_arr = array(
	"/ union /i",
	"/ select /i",
	"/ update /i",
	"/ outfile /i",
	"/ or /i",
	"/ delete /i",
	"/ insert /i"
);
$replace_arr = array(
	"&nbsp;union&nbsp;",
	"&nbsp;select&nbsp;",
	"&nbsp;update&nbsp;",
	"&nbsp;outfile&nbsp;",
	"&nbsp;or&nbsp;",
	"&nbsp;delete&nbsp;",
	"&nbsp;insert&nbsp;"
);
$_POST = stripSql($_POST,$search_arr,$replace_arr);
$_GET = stripSql($_GET,$search_arr,$replace_arr);
$_COOKIE = stripSql($_COOKIE,$search_arr,$replace_arr);
unset($search_arr, $replace_arr);
if(!get_magic_quotes_gpc())
{
	$_POST = addslash($_POST);
	$_GET = addslash($_GET);
}
@extract($_POST, EXTR_SKIP);
@extract($_GET, EXTR_SKIP);
unset($_POST, $_GET);
if($_COOKIE['VISITER'])
{
	setcookie("VISITER",$_COOKIE['VISITER']+1,time()+6*60);
}
else
{
	setcookie("VISITER",1);
}
$STCMS['CLIENT_IP'] = getIp();
$STCMS['PHP_SELF'] = isset($_SERVER['PHP_SELF']) ? $_SERVER['PHP_SELF'] : (isset($_SERVER['SCRIPT_NAME']) ? $_SERVER['SCRIPT_NAME'] : $_SERVER['ORIG_PATH_INFO']);
$STCMS['DOMAIN'] = $_SERVER['SERVER_NAME'];
$STCMS['QUERY_STRING'] = $_SERVER['QUERY_STRING'];
$STCMS['URI'] = $STCMS['PHP_SELF'].($STCMS['QUERY_STRING'] ? "?".$STCMS['QUERY_STRING'] : "");
$STCMS['URL'] = "http://".$STCMS['DOMAIN'].$STCMS['PHP_SELF'].$STCMS['QUERY_STRING'];
require(STCMS_ROOT."config.inc.php");
define('INCLUDE_PATH',checkPath(STCMS_ROOT."include/"));
define('UPLOAD_PATH',checkPath($CONFIG['uploadPath']));
define('WEB_URL',checkPath($CONFIG['webUrl']));
define('TPL_PATH',checkPath(STCMS_ROOT."template/".$CONFIG['template']));
define('CPL_PATH',checkPath(STCMS_ROOT."template/template_c"));
define('CSS_PATH',checkPath(WEB_URL."template/".$CONFIG['template']."/css"));
define('JS_PATH',checkPath(WEB_URL."js"));
$TPL = array(
	'css' => array(
		CSS_PATH."style.css",
	),
	'js' => array(
		JS_PATH."jquery.js",
		JS_PATH."jquery.form.js",
		JS_PATH."common.js",
		JS_PATH."player.js",
		JS_PATH."lrc.js",
	),
);
require(INCLUDE_PATH."mysql.class.php");
$mysql = new mysql();
$webMenu = $mysql->select("channel","*",array('display'=>1),"`order` ASC");
require(INCLUDE_PATH."smarty.class.php");
$smarty = new Smarty();
$smarty->assign("tpl",$TPL);
$smarty->assign("config",$CONFIG);
$smarty->assign("webMenu",$webMenu);
$smarty->assign("member",$_SESSION['member']);
if($CONFIG['webSwitch'] == "OFF")
{
	msg($CONFIG['webCloseMsg']);exit;
}
if($CONFIG['enableIpForbid'])
{
	$ips = $mysql->select("forbidip","*",array('ip'=>$STCMS['CLIENT_IP']));
	if($ips)
	{
		$mysql->update("forbidip",array('lasttime'=>NOW,'times'=>$ips[0]['times']+1),array('ip'=>$ips[0]['ip']));
		msg('浣犵殑ip宸茬粡琚