ソースを参照

优化

tags/6.1.8
xushubieli 3年前
コミット
7bf3374fe5
4個のファイルの変更17行の追加34行の削除
  1. +1
    -2
      src/admin/sys_safetest.php
  2. +4
    -20
      src/admin/templets/sys_safetest.htm
  3. +11
    -11
      src/system/customfields.func.php
  4. +1
    -1
      src/system/helpers/channelunit.helper.php

+ 1
- 2
src/admin/sys_safetest.php ファイルの表示

@@ -25,8 +25,7 @@ foreach ($filelist as $key => $ff) {
}
$alter = "";
if (count($offFiles) == 0) {
$alter = '
<div class="alert alert-danger maintable mb-2" style="margin:0 auto;">无法同官方网站文件服务器通信,校验时候无法保证本地文件是否同官方服务器文件是否一致</div>';
$alter = '<div class="alert alert-danger maintable" style="margin:12px auto">无法同官方网站文件服务器通信,校验时候无法保证本地文件是否同官方服务器文件是否一致</div>';
}
function TestOneFile($f)
{


+ 4
- 20
src/admin/templets/sys_safetest.htm ファイルの表示

@@ -7,11 +7,6 @@
<link rel="stylesheet" href="../static/web/font/css/font-awesome.min.css">
<link rel="stylesheet" href="../static/web/css/admin.css">
<link rel="stylesheet" href="css/indexbody.css">
<style>
td {
padding-left: 8px;
}
</style>
<script language="javascript" src="../static/web/js/jquery.min.js"></script>
<script language='javascript' src='js/main.js'></script>
<script language="javascript" src="../static/web/js/webajax.js"></script>
@@ -57,14 +52,11 @@
<?php echo $alter; ?>
<table width="98%" border="0" cellpadding="1" cellspacing="1" align="center" class="table maintable mt-3">
<tr>
<td width="100%" height="26" colspan="2" bgcolor="#EDF9D5" background="../static/web/img/tbg.gif" style="padding-left:10px">
木马自检程序
</td>
<td width="100%" height="26" colspan="2" bgcolor="#EDF9D5" background="../static/web/img/tbg.gif" style="padding-left:10px">木马自检程序</td>
</tr>
<tr>
<td height="73" colspan="2" bgcolor="#ffffff">
安全建议:
<br>
安全建议:<br>
1、有条件的用户把data、system、theme修改为不可对外访问,static、a目录设置为不允许执行脚本,其它目录禁止写入,系统将更安全;<br>
2、本检测程以开发模式为标准,如果您的网站目录包含其它系统,此检测程序可能会产生错误判断;<br>
3、检测程序会跳过对模板缓存目录的检测,为了安全起见,检测完成后建议清空模板缓存
@@ -72,27 +64,19 @@
</tr>
<tr>
<td height="50" colspan="2" bgcolor="#ffffff">
<p>文件类型:
<input name="filetype" type="text" id="filetype" value="php|inc" style="width:420px">
&nbsp;要检查的文件类型</p>
<p>代码特征:
<input name="info" type="text" id="info" value="eval|cmd|system|exec|_GET|_POST|_REQUEST|base64_decode" style="width:420px">
&nbsp;特征代码</p>
<p>文件类型:<input name="filetype" type="text" id="filetype" value="php|inc" style="width:420px">&nbsp;要检查的文件类型</p>
<p>代码特征:<input name="info" type="text" id="info" value="eval|cmd|system|exec|_GET|_POST|_REQUEST|base64_decode" style="width:420px">&nbsp;特征代码</p>
</td>
</tr>
<tr>
<td height="50" colspan="2" bgcolor="#ffffff">
<button type="button" name="bt1" class="btn btn-success" onclick="LoadCtTest();">开始检测</button>
&nbsp;
<button type="button" name="bt2" class="btn btn-success" onclick="LoadCtClear();">清空模板缓存</button>
</td>
</tr>
<tr>
<td height="30" colspan="2" bgcolor="#f8f8f8">检测结果:结果仅供参考,请务必查看源码后才删除非法文件</td>
</tr>
<tr>
<td height="300" colspan="2" id="messagetd" valign="top" bgcolor="#ffffff"></td>
</tr>
</table>
</body>
</html>

+ 11
- 11
src/system/customfields.func.php ファイルの表示

@@ -105,21 +105,21 @@ function GetFormItem($ctag, $admintype = 'admin')
$innertext = "<input name=\"$fieldname\" value=\"$nowtime\" type=\"text\" id=\"$fieldname\" style=\"width:300px\" class=\"intxt datepicker\"/>";
} else if ($fieldType == 'img' || $fieldType == 'imgfile') {
if ($admintype == 'diy') {
$innertext = "<input type='file' name='$fieldname' id='$fieldname' style='width:300px' />";
$innertext = "<input type='file' name='$fieldname' id='$fieldname' style='width:260px' />";
} else {
$innertext = "<input type='text' name='$fieldname' id='$fieldname' style='width:300px' class='text' /> <input name='".$fieldname."_bt' type='button' class='inputbut' value='浏览' onClick=\"SelectImage('form1.$fieldname','big')\" />";
$innertext = "<input type='text' name='$fieldname' id='$fieldname' style='width:260px' class='text' /> <input name='".$fieldname."_bt' type='button' class='inputbut' value='浏览' onClick=\"SelectImage('form1.$fieldname','big')\" />";
}
} else if ($fieldType == 'media') {
if ($admintype == 'diy') {
$innertext = "<input type='hidden' name='$fieldname' id='$fieldname' value='' />不支持的类型";
} else {
$innertext = "<input type='text' name='$fieldname' id='$fieldname' style='width:300px' class='text' /> <input name='".$fieldname."_bt' type='button' class='inputbut' value='浏览' onClick=\"SelectMedia('form1.$fieldname')\" />";
$innertext = "<input type='text' name='$fieldname' id='$fieldname' style='width:260px' class='text' /> <input name='".$fieldname."_bt' type='button' class='inputbut' value='浏览' onClick=\"SelectMedia('form1.$fieldname')\" />";
}
} else if ($fieldType == 'addon') {
if ($admintype == 'diy') {
$innertext = "<input type='file' name='$fieldname' id='$fieldname' style='width:300px' />";
$innertext = "<input type='file' name='$fieldname' id='$fieldname' style='width:260px' />";
} else {
$innertext = "<input type='text' name='$fieldname' id='$fieldname' style='width:300px' class='text' /> <input name='".$fieldname."_bt' type='button' class='inputbut' value='浏览' onClick=\"SelectSoft('form1.$fieldname')\" />";
$innertext = "<input type='text' name='$fieldname' id='$fieldname' style='width:260px' class='text' /> <input name='".$fieldname."_bt' type='button' class='inputbut' value='浏览' onClick=\"SelectSoft('form1.$fieldname')\" />";
}
} else if ($fieldType == 'int' || $fieldType == 'float') {
$dfvalue = ($ctag->GetAtt('default') != '' ? $ctag->GetAtt('default') : '0');
@@ -145,7 +145,7 @@ if(typeof SelectArcList === "undefined") {
EOT;
} else {
$dfvalue = ($ctag->GetAtt('default') != '' ? $ctag->GetAtt('default') : '');
$innertext = "<input type='text' name='$fieldname' id='$fieldname' style='width:300px' class='intxt' value='$dfvalue' />
$innertext = "<input type='text' name='$fieldname' id='$fieldname' style='width:260px' class='intxt' value='$dfvalue' />
";
}
$formitem = str_replace("~name~", $ctag->GetAtt('itemname'), $formitem);
@@ -416,13 +416,13 @@ function GetFormItemValue($ctag, $fvalue, $admintype = 'admin', $fieldname = '')
$ntag = $ndtp->GetTag("img");
$fvalue = trim($ntag->GetInnerText());
}
$innertext = "<input type='text' name='$fieldname' value='$fvalue' id='$fieldname' style='width:300px' class='intxt' /> <input name='".$fieldname."_bt' class='inputbut' type='button' value='浏览' onClick=\"SelectImage('form1.$fieldname','big')\" />";
$innertext = "<input type='text' name='$fieldname' value='$fvalue' id='$fieldname' style='width:260px' class='intxt' /> <input name='".$fieldname."_bt' class='inputbut' type='button' value='浏览' onClick=\"SelectImage('form1.$fieldname','big')\" />";
} else if ($ftype == "imgfile") {
$innertext = "<input type='text' name='$fieldname' value='$fvalue' id='$fieldname' style='width:300px' class='intxt' /> <input name='".$fieldname."_bt' class='inputbut' type='button' value='浏览' onClick=\"SelectImage('form1.$fieldname','big')\" />";
$innertext = "<input type='text' name='$fieldname' value='$fvalue' id='$fieldname' style='width:260px' class='intxt' /> <input name='".$fieldname."_bt' class='inputbut' type='button' value='浏览' onClick=\"SelectImage('form1.$fieldname','big')\" />";
} else if ($ftype == "media") {
$innertext = "<input type='text' name='$fieldname' value='$fvalue' id='$fieldname' style='width:300px' class='intxt' /> <input name='".$fieldname."_bt' class='inputbut' type='button' value='浏览' onClick=\"SelectMedia('form1.$fieldname')\" />";
$innertext = "<input type='text' name='$fieldname' value='$fvalue' id='$fieldname' style='width:260px' class='intxt' /> <input name='".$fieldname."_bt' class='inputbut' type='button' value='浏览' onClick=\"SelectMedia('form1.$fieldname')\" />";
} else if ($ftype == "addon") {
$innertext = "<input type='text' name='$fieldname' id='$fieldname' value='$fvalue' style='width:300px' class='intxt' /> <input name='".$fieldname."_bt' class='inputbut' type='button' value='浏览' onClick=\"SelectSoft('form1.$fieldname')\" />";
$innertext = "<input type='text' name='$fieldname' id='$fieldname' value='$fvalue' style='width:260px' class='intxt' /> <input name='".$fieldname."_bt' class='inputbut' type='button' value='浏览' onClick=\"SelectSoft('form1.$fieldname')\" />";
} else if ($ftype == "int" || $ftype == "float") {
$innertext = "<input type='text' name='$fieldname' id='$fieldname' style='width:100px' class='intxt' value='$fvalue' /> (填写数值)";
} else if ($ftype == "relation") {
@@ -444,7 +444,7 @@ if(typeof SelectArcList === "undefined") {
</script>
EOT;
} else {
$innertext = "<input type='text' name='$fieldname' id='$fieldname' style='width:300px' class='intxt' value='$fvalue' />";
$innertext = "<input type='text' name='$fieldname' id='$fieldname' style='width:260px' class='intxt' value='$fvalue' />";
}
$formitem = str_replace('~name~', $ctag->GetAtt('itemname'), $formitem);
$formitem = str_replace('~form~', $innertext, $formitem);


+ 1
- 1
src/system/helpers/channelunit.helper.php ファイルの表示

@@ -483,7 +483,7 @@ function MakeOneTag(&$dtp, &$refObj, $parfield = 'Y')
if (PHP_SAPI === 'cli') {
echo '标签:'.$tagname.'载入花费时间:'.$queryTime."\r\n";
} else {
echo '<div style="color: #856404;background-color: #fff3cd;border-color: #ffeeba;position: relative;padding: .75rem 1.25rem;margin-bottom: 1rem;border: 1px solid transparent;border-radius: .25rem;" class="alert alert-warning" role="alert">标签:'.$tagname.'载入花费时间:'.$queryTime."</div>\r\n";
echo '<div style="color: #856404;background-color: #fff3cd;border-color: #ffeeba;position: relative;padding: .75rem 1.25rem;margin-bottom: 1rem;border: 1px solid transparent;border-radius: .25rem;" class="alert alert-warning mb-0" role="alert">标签:'.$tagname.'载入花费时间:'.$queryTime."</div>\r\n";
}
}


読み込み中…
キャンセル
保存