* blog:xiaoz.me */ //载入通用函数 require("./functions/helper.php"); define("API_URL","https://onenav.xiaoz.top"); class Api { protected $db; public function __construct($db){ $this->db = $db; //返回json类型 header('Content-Type:application/json; charset=utf-8'); } /** * name:创建分类目录 */ public function add_category($token,$name,$property = 0,$weight = 0,$description = '',$font_icon = '',$fid = 0){ $this->auth($token); //分类名称不允许为空 if( empty($name) ) { $this->err_msg(-2000,'分类名称不能为空!'); } $data = [ 'name' => htmlspecialchars($name,ENT_QUOTES), 'add_time' => time(), 'weight' => $weight, 'property' => $property, 'description' => htmlspecialchars($description,ENT_QUOTES), 'font_icon' => $font_icon, 'fid' => $fid ]; //插入分类目录 $this->db->insert("on_categorys",$data); //返回ID $id = $this->db->id(); //如果id为空(NULL),说明插入失败了,姑且认为是name重复导致 if( empty($id) ){ $this->err_msg(-1000,'Categorie already exist!'); } else{ //成功并返回json格式 $data = [ 'code' => 0, 'id' => intval($id) ]; exit(json_encode($data)); } } /** * 修改分类目录 * */ public function edit_category($token,$id,$name,$property = 0,$weight = 0,$description = '',$font_icon = '',$fid = 0){ $this->auth($token); $fid = intval($fid); //如果id为空 if( empty($id) ){ $this->err_msg(-1003,'The category ID cannot be empty!'); } //根据fid查询这个分类是否存在 $count = $this->db->count("on_categorys", [ "id" => $fid ]); //如果fid不是0,且查询结果小于1,则认为这个父级ID是不存在的,则不允许修改 if( !empty($fid) && ($count < 1) ) { $this->err_msg(-2000,'父级ID不存在!'); } //查询fid是否是二级分类的ID,如果是,则不允许修改 $category = $this->db->get("on_categorys","*",[ "id" => $fid ]); //如果查询到他的父ID不是0,则是一个二级分类 if( intval($category['fid']) !== 0 ) { $this->err_msg(-2000,'父分类不能是二级分类!'); } //如果分类名为空 elseif( empty($name ) ){ $this->err_msg(-1004,'The category name cannot be empty!'); } //更新数据库 else{ //根据分类ID查询改分类下面是否已经存在子分类,如果存在子分类了则不允许设置为子分类,实用情况:一级分类下存在二级分类,无法再将改一级分类修改为二级分类 $count = $this->db->count("on_categorys", [ "fid" => $id ]); //该分类下的子分类数量大于0,并且父级ID修改为其它分类 if( ( $count > 0 ) && ( $fid !== 0 ) ) { $this->err_msg(-2000,'修改失败,该分类下已存在子分类!'); } $data = [ 'name' => htmlspecialchars($name,ENT_QUOTES), 'up_time' => time(), 'weight' => $weight, 'property' => $property, 'description' => htmlspecialchars($description,ENT_QUOTES), 'font_icon' => $font_icon, 'fid' => $fid ]; $re = $this->db->update('on_categorys',$data,[ 'id' => $id]); //var_dump( $this->db->log() ); //获取影响行数 $row = $re->rowCount(); if($row) { $data = [ 'code' => 0, 'msg' => 'successful' ]; exit(json_encode($data)); } else{ $this->err_msg(-1005,'The category name already exists!'); } } } /** * 删除分类目录 */ public function del_category($token,$id) { //验证授权 $this->auth($token); //如果id为空 if( empty($id) ){ $this->err_msg(-1003,'The category ID cannot be empty!'); } //如果分类目录下存在数据 $count = $this->db->count("on_links", [ "fid" => $id ]); //如果分类目录下存在数据,则不允许删除 if($count > 0) { $this->err_msg(-1006,'The category is not empty and cannot be deleted!'); } else{ $data = $this->db->delete('on_categorys',[ 'id' => $id] ); //返回影响行数 $row = $data->rowCount(); if($row) { $data = [ 'code' => 0, 'msg' => 'successful' ]; exit(json_encode($data)); } else{ $this->err_msg(-1007,'The category delete failed!'); } } } /** * name:返回错误(json) * */ public function err_msg($code,$err_msg){ $data = [ 'code' => $code, 'err_msg' => $err_msg ]; //返回json类型 header('Content-Type:application/json; charset=utf-8'); exit(json_encode($data)); } /** * name:验证方法 */ protected function auth($token){ //计算正确的token:用户名 + TOKEN $SecretKey = @$this->db->get('on_options','*',[ 'key' => 'SecretKey' ])['value']; $token_yes = md5(USER.$SecretKey); //获取header中的X-token $xtoken = $_SERVER['HTTP_X_TOKEN']; if( $xtoken === $token_yes ) { return TRUE; } //如果token为空,则验证cookie if(empty($token)) { if( !$this->is_login() ) { $this->err_msg(-1002,'Authorization failure!'); } else if( $this->is_login() ){ return TRUE; } else{ $this->err_msg(-1002,'Cookie authorization failure!'); } } else if ( empty($SecretKey) ) { $this->err_msg(-2000,'请先生成SecretKey!'); } else if($token != $token_yes){ $this->err_msg(-1002,'Authorization failure!'); } else{ return TRUE; } } /** * name:添加链接 */ public function add_link($token,$fid,$title,$url,$description = '',$weight = 0,$property = 0,$url_standby = ''){ $this->auth($token); $fid = intval($fid); //检测链接是否合法 //$this->check_link($fid,$title,$url); $this->check_link([ 'fid' => $fid, 'title' => $title, 'url' => $url, 'url_standby' => $url_standby ]); //合并数据 $data = [ 'fid' => $fid, 'title' => htmlspecialchars($title,ENT_QUOTES), 'url' => $url, 'url_standby' => $url_standby, 'description' => htmlspecialchars($description,ENT_QUOTES), 'add_time' => time(), 'weight' => $weight, 'property' => $property ]; //插入数据库 $re = $this->db->insert('on_links',$data); //返回影响行数 $row = $re->rowCount(); //如果为真 if( $row ){ $id = $this->db->id(); $data = [ 'code' => 0, 'id' => $id ]; exit(json_encode($data)); } //如果插入失败 else{ $this->err_msg(-1011,'The URL already exists!'); } } /** * 批量修改链接分类 */ public function batch_modify_category($data) { $this->auth($token); //获取链接ID,是一个数组 $id = implode(',',$data['id']); //获取分类ID $fid = $data['fid']; //查询分类ID是否存在 $count = $this->db->count('on_categorys',[ 'id' => $fid]); //如果分类ID不存在 if( empty($fid) || empty($count) ) { $this->err_msg(-2000,'分类ID不存在!'); } else{ $sql = "UPDATE on_links SET fid='$fid' WHERE id IN ($id)"; $re = $this->db->query($sql); if( $re ) { $id = $this->db->id(); $data = [ 'code' => 0, 'msg' => "success" ]; exit(json_encode($data)); } else{ $this->err_msg(-2000,'更新失败!'); } } } /** * 批量修改链接属性为公有或私有 */ public function set_link_attribute($data) { $this->auth($token); //获取链接ID,是一个数组 $ids = implode(',',$data['ids']); $property = intval($data['property']); //拼接SQL文件 $sql = "UPDATE on_links SET property = $property WHERE id IN ($ids)"; $re = $this->db->query($sql); //返回影响行数 $row = $re->rowCount(); if ( $row > 0 ){ $this->return_json(200,"success"); } else{ $this->return_json(-2000,"failed"); } } /** * 批量导入链接 */ public function imp_link($token,$filename,$fid,$property = 0){ //过滤$filename $filename = str_replace('../','',$filename); $filename = str_replace('./','',$filename); $this->auth($token); //检查文件是否存在 if ( !file_exists($filename) ) { $this->err_msg(-1016,'File does not exist!'); } //解析HTML数据 $content = file_get_contents($filename); $pattern = "//i"; preg_match_all($pattern,$content,$arr); //失败次数 $fail = 0; //成功次数 $success = 0; //总数 $total = count($arr[0]); foreach( $arr[0] as $link ) { $pattern = "/http.*\"? ADD_DATE/i"; preg_match($pattern,$link,$urls); $url = str_replace('" ADD_DATE','',$urls[0]); $pattern = "/>.*<\/a>$/i"; preg_match($pattern,$link,$titles); $title = str_replace('>','',$titles[0]); $title = str_replace(' $fid, 'description' => '', 'add_time' => time(), 'weight' => 0, 'property' => $property ]; $data['title'] = $title; $data['url'] = $url; //插入数据库 $re = $this->db->insert('on_links',$data); //返回影响行数 $row = $re->rowCount(); //如果为真 if( $row ){ $id = $this->db->id(); $data = [ 'code' => 0, 'id' => $id ]; $success++; } //如果插入失败 else{ $fail++; } } //删除书签 unlink($filename); $data = [ 'code' => 0, 'msg' => '总数:'.$total.' 成功:'.$success.' 失败:'.$fail ]; exit(json_encode($data)); } /** * 批量导入链接并自动创建分类,这是新的导入接口 */ public function import_link($filename,$property = 0) { //过滤$filename $filename = str_replace('../','',$filename); $filename = str_replace('./','',$filename); $this->auth($token); //检查文件是否存在 if ( !file_exists($filename) ) { $this->err_msg(-1016,'File does not exist!'); } //解析HTML数据 $content = file_get_contents($filename); $HTMLs = explode("\n",$content);//分割文本 $data = []; //链接组 $categorys = []; //分类信息组 $categoryt = []; //分类信息表 // 遍历HTML foreach( $HTMLs as $HTMLh ){ //匹配分类名称 if( preg_match("/
(.*)<\/H3>/i",$HTMLh,$category) ){ //匹配到文件夹名时加入数组 array_push($categoryt,$category[1]); array_push($categorys,$category[1]); }elseif( preg_match('/<\/DL>

/i',$HTMLh) ){ //匹配到文件夹结束标记时删除一个 array_pop($categorys); }elseif( preg_match('/

(.+)<\/A>/i',$HTMLh,$urls) ){ $datat['category'] = $categorys[count($categorys) -1]; $datat['title'] = $urls[2]; $datat['url'] = $urls[1]; array_push($data,$datat); } } $categoryt = array_unique($categoryt); //追加一个默认分类,用来存储部分链接找不到分类的情况 array_push($categoryt,"默认分类"); //批量创建分类 $this->batch_create_category($categoryt); //查询所有分类 $categorys = $this->db->select("on_categorys",[ "name", "id", "fid" ]); // var_dump($categorys); // exit; //链接计数 $i = 0; //统计链接总数 $count = count($data); //批量导入链接 foreach ($data as $key => $value) { $category_name = trim($value['category']); //如果链接的分类是空的,则设置为默认分类 $category_name = empty( $category_name ) ? "默认分类" : $category_name; foreach ($categorys as $category) { if( trim( $category['name'] ) == $category_name ) { $fid = intval($category['id']); break; } } //合并数据 $link_data = [ 'fid' => $fid, 'title' => htmlspecialchars($value['title']), 'url' => htmlspecialchars($value['url'],ENT_QUOTES), 'add_time' => time(), 'weight' => 0, 'property' => $property ]; //插入数据库 $re = $this->db->insert('on_links',$link_data); //返回影响行数 $row = $re->rowCount(); if ($row) { $i++; } } //删除书签文件 unlink($filename); $this->return_json(200,"success",[ "count" => $count, "success" => $i, "failed" => $count - $i ]); } /** * 批量创建分类 * 接收一个一维数组 */ protected function batch_create_category($category_name) { $i = 0; foreach ($category_name as $key => $value) { $value = empty($value) ? "默认分类" : $value; $data = [ 'name' => trim($value), 'add_time' => time(), 'weight' => 0, 'property' => 1, 'description' => "书签导入时自动创建", 'fid' => 0 ]; try { //插入分类目录 $this->db->insert("on_categorys",$data); $i++; } catch (\Throwable $th) { continue; } } return $i; } /** * 书签上传 * type:上传类型,默认为上传书签,后续类型保留使用 */ public function upload($token,$type){ $this->auth($token); if ($_FILES["file"]["error"] > 0) { $this->err_msg(-1015,'File upload failed!'); } else { $filename = $_FILES["file"]["name"]; //获取文件后缀 $suffix = explode('.',$filename); $suffix = strtolower(end($suffix)); //临时文件位置 $temp = $_FILES["file"]["tmp_name"]; if( $suffix != 'html' ) { //删除临时文件 unlink($filename); $this->err_msg(-1014,'Unsupported file suffix name!'); } if( copy($temp,'data/'.$filename) ) { $data = [ 'code' => 0, 'file_name' => 'data/'.$filename ]; exit(json_encode($data)); } } } /** * 导出HTML链接进行备份 */ public function export_link(){ //鉴权 $this->auth($token); //查询所有分类 $categorys = $this->db->select("on_categorys","*"); //定义一个空数组用来存储查询后的数据 $data = []; //遍历分类 foreach ($categorys as $key => $category) { //查询该分类下的所有链接 $links = $this->db->select("on_links","*",[ "fid" => $category['id'] ]); // echo $category['name']; // var_dump($links); // exit; //组合为一个一维数组 $arr[$category['name']] = $links; // var_dump(); // exit; $data[$category['name']] = $arr[$category['name']]; //清除临时数据 unset($arr); } //返回数据 return $data; } /** * name:修改链接 */ public function edit_link($token,$id,$fid,$title,$url,$description = '',$weight = 0,$property = 0,$url_standby = ''){ $this->auth($token); $fid = intval($fid); //检测链接是否合法 //$this->check_link($fid,$title,$url); $this->check_link([ 'fid' => $fid, 'title' => htmlspecialchars($title,ENT_QUOTES), 'url' => $url, 'url_standby' => $url_standby ]); //查询ID是否存在 $count = $this->db->count('on_links',[ 'id' => $id]); //如果id不存在 if( (empty($id)) || ($count == false) ) { $this->err_msg(-1012,'link id not exists!'); } //合并数据 $data = [ 'fid' => $fid, 'title' => htmlspecialchars($title,ENT_QUOTES), 'url' => $url, 'url_standby' => $url_standby, 'description' => htmlspecialchars($description,ENT_QUOTES), 'up_time' => time(), 'weight' => $weight, 'property' => $property ]; //插入数据库 $re = $this->db->update('on_links',$data,[ 'id' => $id]); //返回影响行数 $row = $re->rowCount(); //如果为真 if( $row ){ $id = $this->db->id(); $data = [ 'code' => 0, 'msg' => 'successful' ]; exit(json_encode($data)); } //如果插入失败 else{ $this->err_msg(-1011,'The URL already exists!'); } } /** * 删除链接 */ public function del_link($token,$id){ //验证token是否合法 $this->auth($token); //查询ID是否存在 $count = $this->db->count('on_links',[ 'id' => $id]); //如果id不存在 if( (empty($id)) || ($count == false) ) { $this->err_msg(-1010,'link id not exists!'); } else{ $re = $this->db->delete('on_links',[ 'id' => $id] ); if($re) { $data = [ 'code' => 0, 'msg' => 'successful' ]; exit(json_encode($data)); } else{ $this->err_msg(-1010,'link id not exists!'); } } } /** * 验证链接合法性 * 接收一个数组作为参数 */ protected function check_link($data){ $fid = $data['fid']; $title = $data['title']; $url = $data['url']; $url_standby = @$data['url_standby']; //如果父及(分类)ID不存在 if( empty($fid )) { $this->err_msg(-1007,'The category id(fid) not exist!'); } //如果父及ID不存在数据库中 //验证分类目录是否存在 $count = $this->db->count("on_categorys", [ "id" => $fid ]); if ( empty($count) ){ $this->err_msg(-1007,'The category not exist!'); } //如果链接标题为空 if( empty($title) ){ $this->err_msg(-1008,'The title cannot be empty!'); } //链接不能为空 if( empty($url) ){ $this->err_msg(-1009,'URL cannot be empty!'); } //通过正则匹配链接是否合法,支持http/https/ftp/magnet:?|ed2k|tcp/udp/thunder/rtsp/rtmp/sftp $pattern = "/^(http:\/\/|https:\/\/|ftp:\/\/|ftps:\/\/|magnet:?|ed2k:\/\/|tcp:\/\/|udp:\/\/|thunder:\/\/|rtsp:\/\/|rtmp:\/\/|sftp:\/\/).+/"; // if( !filter_var($url, FILTER_VALIDATE_URL) ) { // $this->err_msg(-1010,'URL is not valid!'); // } if ( !preg_match($pattern,$url) ) { $this->err_msg(-1010,'URL is not valid!'); } //备用链接不合法 if ( ( !empty($url_standby) ) && ( !preg_match($pattern, $url_standby) ) ) { $this->err_msg(-1010,'URL is not valid!'); } return true; } /** * 查询分类目录 */ public function category_list($page,$limit){ $token = @$_POST['token']; $offset = ($page - 1) * $limit; /** * name:如果成功登录,则查询所有 * */ //如果使用cookie登录成功,或者token不为空,则使用token进行验证 if( $this->is_login() || ( !empty($token) && $this->auth($token) ) ){ $sql = "SELECT *,(SELECT name FROM on_categorys WHERE id = a.fid LIMIT 1) AS fname FROM on_categorys as a ORDER BY weight DESC,id DESC LIMIT {$limit} OFFSET {$offset}"; //统计总数 $count = $this->db->count('on_categorys','*'); } //如果存在token,则验证 else if( !empty($token) ) { $this->auth($token); //查询所有分类 $sql = "SELECT *,(SELECT name FROM on_categorys WHERE id = a.fid LIMIT 1) AS fname FROM on_categorys as a ORDER BY weight DESC,id DESC LIMIT {$limit} OFFSET {$offset}"; //统计总数 $count = $this->db->count('on_categorys','*'); } else{ $sql = "SELECT *,(SELECT name FROM on_categorys WHERE id = a.fid LIMIT 1) AS fname FROM on_categorys as a WHERE property = 0 ORDER BY weight DESC,id DESC LIMIT {$limit} OFFSET {$offset}"; //统计总数 $count = $this->db->count('on_categorys','*',[ "property" => 0 ]); } //原生查询 $datas = $this->db->query($sql)->fetchAll(); $datas = [ 'code' => 0, 'msg' => '', 'count' => $count, 'data' => $datas ]; exit(json_encode($datas)); } /** * 生成 */ public function create_sk() { //验证是否登录 $this->auth(''); $sk = md5(USER.USER.time()); $result = $this->set_option_bool('SecretKey',$sk); if( $result ){ $datas = [ 'code' => 0, 'data' => $sk ]; exit(json_encode($datas)); } else{ $this->err_msg(-2000,'SecretKey生成失败!'); } } /** * 查询链接 * 接收一个数组作为参数 */ public function link_list($data){ $limit = $data['limit']; $token = $data['token']; $offset = ($data['page'] - 1) * $data['limit']; //$fid = @$data['category_id']; $count = $this->db->count('on_links','*'); //如果成功登录,但token为空,获取所有 if( ($this->is_login()) && (empty($token)) ){ $sql = "SELECT *,(SELECT name FROM on_categorys WHERE id = on_links.fid) AS category_name FROM on_links ORDER BY weight DESC,id DESC LIMIT {$limit} OFFSET {$offset}"; } //如果token验证通过 elseif( (!empty($token)) && ($this->auth($token)) ) { $sql = "SELECT *,(SELECT name FROM on_categorys WHERE id = on_links.fid) AS category_name FROM on_links ORDER BY weight DESC,id DESC LIMIT {$limit} OFFSET {$offset}"; } //如果通过header传递的token验证成功,则获取所有 else if( $this->auth("") === TRUE ) { $sql = "SELECT *,(SELECT name FROM on_categorys WHERE id = on_links.fid) AS category_name FROM on_links ORDER BY weight DESC,id DESC LIMIT {$limit} OFFSET {$offset}"; } //如果即没有登录成功,又没有token,则默认为游客,游客查询链接属性为公有,分类为公有,不查询私有 else{ $c_sql = "SELECT COUNT(*) AS num FROM on_links WHERE property = 0 AND fid IN (SELECT id FROM on_categorys WHERE property = 0)"; $count = $this->db->query($c_sql)->fetchAll()[0]['num']; $count = intval($count); $sql = "SELECT *,(SELECT name FROM on_categorys WHERE id = on_links.fid) AS category_name FROM on_links WHERE property = 0 AND fid IN (SELECT id FROM on_categorys WHERE property = 0) ORDER BY weight DESC,id DESC LIMIT {$limit} OFFSET {$offset}"; } //原生查询 $datas = $this->db->query($sql)->fetchAll(); $datas = [ 'code' => 0, 'msg' => '', 'count' => $count, 'data' => $datas ]; exit(json_encode($datas)); } /** * 查询某个分类下面的链接 * 接收一个数组作为参数 */ public function q_category_link($data){ $limit = $data['limit']; $token = $data['token']; $offset = ($data['page'] - 1) * $data['limit']; $fid = @$data['category_id']; //$fid = @$data['category_id']; $count = $this->db->count('on_links','*',[ 'fid' => $fid ]); //如果FID是空的,则直接终止 if( empty($fid) ) { $datas = [ 'code' => -2000, 'msg' => '分类ID不能为空!', 'count' => 0, 'data' => [] ]; exit(json_encode($datas)); } //如果成功登录,但token为空 if( ($this->is_login()) && (empty($token)) ){ $sql = "SELECT *,(SELECT name FROM on_categorys WHERE id = on_links.fid) AS category_name FROM on_links WHERE fid = $fid ORDER BY weight DESC,id DESC LIMIT {$limit} OFFSET {$offset}"; } //通过header获取token成功 else if( $this->auth("") ) { $sql = "SELECT *,(SELECT name FROM on_categorys WHERE id = on_links.fid) AS category_name FROM on_links WHERE fid = $fid ORDER BY weight DESC,id DESC LIMIT {$limit} OFFSET {$offset}"; } //如果token验证通过 elseif( (!empty($token)) && ($this->auth($token)) ) { $sql = "SELECT *,(SELECT name FROM on_categorys WHERE id = on_links.fid) AS category_name FROM on_links WHERE fid = $fid ORDER BY weight DESC,id DESC LIMIT {$limit} OFFSET {$offset}"; } //如果即没有登录成功,又没有token,则默认为游客,游客查询链接属性为公有,分类为公有,不查询私有 else{ $c_sql = "SELECT COUNT(*) AS num FROM on_links WHERE property = 0 AND fid = $fid"; $count = $this->db->query($c_sql)->fetchAll()[0]['num']; $count = intval($count); $sql = "SELECT *,(SELECT name FROM on_categorys WHERE id = on_links.fid) AS category_name FROM on_links WHERE property = 0 AND fid = $fid ORDER BY weight DESC,id DESC LIMIT {$limit} OFFSET {$offset}"; } //原生查询 $datas = $this->db->query($sql)->fetchAll(); $datas = [ 'code' => 0, 'msg' => '', 'count' => $count, 'data' => $datas ]; exit(json_encode($datas)); } /** * 查询单个链接 * 此函数接收一个数组 */ public function get_a_link($data) { $id = $data['id']; $token = $data['token']; $link_info = $this->db->get("on_links","*",[ "id" => $id ]); //打印链接信息 //var_dump($link_info); //如果是公开链接,则直接返回 if ( $link_info['property'] == "0" ) { //链接是公开的,但是分类是私有的,则不显示 $category_property = $this->db->get("on_categorys","property",[ "id" => $link_info['fid'] ]); $category_property = intval($category_property); //分类属性为1,则说明是私有链接,则未认证用户不允许查询 if( $category_property === 1 ){ //进行认证 $this->auth($token); } $datas = [ 'code' => 0, 'data' => $link_info ]; } //如果是私有链接,并且认证通过 elseif( $link_info['property'] == "1" ) { if ( ( $this->auth($token) ) || ( $this->is_login() ) ) { $datas = [ 'code' => 0, 'data' => $link_info ]; } //exit(json_encode($datas)); } //如果是其它情况,则显示为空 else{ $datas = [ 'code' => 0, 'data' => [] ]; //exit(json_encode($datas)); } exit(json_encode($datas)); } /** * 查询单个分类信息 * 此函数接收一个数组 */ public function get_a_category($data) { $id = $data['id']; $token = $data['token']; $category_info = $this->db->get("on_categorys","*",[ "id" => $id ]); //var_dump($category_info); //如果是公开分类,则直接返回 if ( $category_info['property'] == "0" ) { $datas = [ 'code' => 0, 'data' => $category_info ]; } //如果是私有链接,并且认证通过 elseif( $category_info['property'] == "1" ) { if ( ( $this->auth($token) ) || ( $this->is_login() ) ) { $datas = [ 'code' => 0, 'data' => $category_info ]; } //exit(json_encode($datas)); } //如果是其它情况,则显示为空 else{ $datas = [ 'code' => 0, 'data' => [] ]; //exit(json_encode($datas)); } exit(json_encode($datas)); } /** * 验证是否登录 */ protected function is_login(){ $key = md5(USER.PASSWORD.'onenav'.$_SERVER['HTTP_USER_AGENT']); //获取session $session = $_COOKIE['key']; //如果已经成功登录 if($session == $key) { return true; } else{ return false; } } /** * 获取链接信息 */ public function get_link_info($token,$url){ $this->auth($token); //检查链接是否合法 $pattern = "/^(http:\/\/|https:\/\/).*/"; //链接不合法 if( empty($url) ) { $this->err_msg(-2000,'URL不能为空!'); } if( !preg_match($pattern,$url) ){ $this->err_msg(-1010,'只支持识别http/https协议的链接!'); } else if( !filter_var($url, FILTER_VALIDATE_URL) ) { $this->err_msg(-2000,'只支持识别http/https协议的链接!'); } //获取网站标题 $c = curl_init(); curl_setopt($c, CURLOPT_URL, $url); curl_setopt($c, CURLOPT_RETURNTRANSFER, 1); curl_setopt($c, CURLOPT_SSL_VERIFYPEER, false); curl_setopt($c, CURLOPT_SSL_VERIFYHOST, false); //设置超时时间 curl_setopt($c , CURLOPT_TIMEOUT, 10); $data = curl_exec($c); curl_close($c); $pos = strpos($data,'utf-8'); if($pos===false){$data = iconv("gbk","utf-8",$data);} preg_match("/(.*)<\/title>/i",$data, $title); $link['title'] = $title[1]; //获取网站描述 $tags = get_meta_tags($url); $link['description'] = $tags['description']; $data = [ 'code' => 0, 'data' => $link ]; exit(json_encode($data)); } /** * 自定义js */ public function add_js($token,$content){ $this->auth($token); //如果内容为空 // if( $content == '' ){ // $this->err_msg(-1013,'The content cannot be empty!'); // } //写入文件 try{ file_put_contents("data/extend.js",$content); $data = [ 'code' => 0, 'data' => 'success' ]; exit(json_encode($data)); } catch(Exception $e){ $this->err_msg(-2000,$e->getMessage()); } } /** * 获取IP */ //获取访客IP protected function getIP() { if (getenv('HTTP_CLIENT_IP')) { $ip = getenv('HTTP_CLIENT_IP'); } elseif (getenv('HTTP_X_FORWARDED_FOR')) { $ip = getenv('HTTP_X_FORWARDED_FOR'); } elseif (getenv('HTTP_X_FORWARDED')) { $ip = getenv('HTTP_X_FORWARDED'); } elseif (getenv('HTTP_FORWARDED_FOR')) { $ip = getenv('HTTP_FORWARDED_FOR'); } elseif (getenv('HTTP_FORWARDED')) { $ip = getenv('HTTP_FORWARDED'); } else { $ip = $_SERVER['REMOTE_ADDR']; } return $ip; } /** * name:检查弱密码 */ public function check_weak_password($token){ $this->auth($token); //如果用户名、密码为初始密码,则提示修改 if ( ( USER == 'xiaoz' ) && ( PASSWORD == 'xiaoz.me' ) ) { $this->err_msg(-1,'Weak password!'); } } /** * 获取SQL更新列表 * 循环读取db/sql/目录下的.sql文件 */ public function get_sql_update_list($data) { //鉴权 if( !$this->is_login() ) { $this->err_msg(-1002,'Authorization failure!'); } //待更新的数据库文件目录 $sql_dir = 'db/sql/'; //待更新的sql文件列表,默认为空 $sql_files_all = []; //打开一个目录,读取里面的文件列表 if (is_dir($sql_dir)){ if ($dh = opendir($sql_dir)){ while (($file = readdir($dh)) !== false){ //排除.和.. if ( ($file != ".") && ($file != "..") ) { array_push($sql_files_all,$file); } } //关闭句柄 closedir($dh); } } //判断数据库日志表是否存在 $sql = "SELECT count(*) AS num FROM sqlite_master WHERE type='table' AND name='on_db_logs'"; //查询结果 $q_result = $this->db->query($sql)->fetchAll(); //如果数量为0,则说明on_db_logs这个表不存在,需要提前导入 $num = intval($q_result[0]['num']); if ( $num === 0 ) { $data = [ "code" => 0, "data" => ['on_db_logs.sql'] ]; exit(json_encode($data)); }else{ //如果不为0,则需要查询数据库更新表里面的数据进行差集比对 $get_on_db_logs = $this->db->select("on_db_logs",[ "sql_name" ],[ "status" => "TRUE" ]); //声明一个空数组,存储已更新的数据库列表 $already_dbs = []; foreach ($get_on_db_logs as $value) { array_push($already_dbs,$value['sql_name']); } //array_diff() 函数返回两个数组的差集数组 $diff_result = array_diff($sql_files_all,$already_dbs); //去掉键 $diff_result = array_values($diff_result); sort($diff_result); $data = [ "code" => 0, "data" => $diff_result ]; exit(json_encode($data)); } } /** * 执行SQL更新语句,只执行单条更新 */ public function exe_sql($data) { //鉴权 if( !$this->is_login() ) { $this->err_msg(-1002,'Authorization failure!'); } //数据库sql目录 $sql_dir = 'db/sql/'; $name = $data['name']; //查询sql是否已经执行过 $count = $this->db->count("on_db_logs",[ "sql_name" => $name ]); if( $count >= 1 ) { $this->err_msg(-2000,$name."已经更新过!"); } $sql_name = $sql_dir.$name; //如果文件不存在,直接返回错误 if ( !file_exists($sql_name) ) { $this->err_msg(-2000,$name.'不存在!'); } //读取需要更新的SQL内容 try { //读取一个SQL文件,并将单个SQL文件拆分成单条SQL语句循环执行 switch ($name) { case '20220414.sql': $sql_content = explode("\n",file_get_contents($sql_name)); break; default: $sql_content = explode(';',file_get_contents($sql_name)); break; } //计算SQL总数 $num = count($sql_content) - 1; //初始数量设置为0 $init_num = 0; //遍历执行SQL语句 foreach ($sql_content as $sql) { //如果SQL为空,则跳过此次循环不执行 if( empty($sql) ) { continue; } $result = $this->db->query($sql); //只要单条SQL执行成功了就增加初始数量 if( $result ) { $init_num++; } } //无论最后结果如何,都将更新信息写入数据库 $insert_re = $this->db->insert("on_db_logs",[ "sql_name" => $name, "update_time" => time(), "status" => "TRUE" ]); if( $insert_re ) { $data = [ "code" => 0, "data" => $name."更新完成!总数${num},成功:${init_num}" ]; exit(json_encode($data)); } else { $this->err_msg(-2000,$name."更新失败,请人工检查!"); } } catch(Exception $e){ $this->err_msg(-2000,$e->getMessage()); } } /** * 保存主题参数 */ public function save_theme_config($data) { $this->auth($token); //获取主题名称 $name = $data['name']; //获取config参数,是一个对象 $config = $data['config']; //获取主题配置文件config.json if ( is_dir("templates/".$name) ) { $config_file = "templates/".$name."/config.json"; } else{ $config_file = "data/templates/".$name."/config.json"; } $config_content = json_encode($config,JSON_UNESCAPED_UNICODE|JSON_PRETTY_PRINT); //写入配置 try { $re = @file_put_contents($config_file,$config_content); $this->return_json(0,"success"); } catch (\Throwable $th) { $this->err_msg(-2000,"写入配置失败!"); } } /** * 删除主题 */ public function delete_theme($name) { //验证授权 $this->auth($token); //正则判断主题名称是否合法 $pattern = "/^[a-zA-Z0-9][a-zA-Z0-9-_]+[a-zA-Z0-9]$/"; if ( !preg_match($pattern,$name) ) { $this->return_json(-2000,'',"主题名称不合法!"); } //如果是默认主题,则不允许删除 if( ($name === 'default') || ($name === 'admin') ) { $this->return_json(-2000,'',"默认主题不允许删除!"); } //查询当前使用中的主题 $current_theme = $this->db->get('on_options','value',[ 'key' => "theme" ]); //如果是当前使用中的主题也不允许删除 if ( $current_theme == $name ) { $this->return_json(-2000,'',"使用中的主题不允许删除!"); } //删除主题 $this->deldir("templates/".$name); $this->deldir("data/templates/".$name); //判断主题文件夹是否还存在 if( is_dir("templates/".$name) || is_dir("data/templates/".$name) ) { $this->return_json(-2000,'',"删除失败,可能是权限不足!"); } else{ $this->return_json(200,'',"主题已删除!"); } } /** * 删除一个目录 */ protected function deldir($dir) { //先删除目录下的文件: $dh=opendir($dir); while ($file=readdir($dh)) { if($file!="." && $file!="..") { $fullpath=$dir."/".$file; if(!is_dir($fullpath)) { unlink($fullpath); } else { $this->deldir($fullpath); } } } closedir($dh); //删除当前文件夹: if(rmdir($dir)) { return true; } else { return false; } } /** * 获取主题参数 */ public function get_theme_config() { $template = $this->db->get("on_options","value",[ "key" => "theme" ]); //获取主题配置信息 //获取主题配置 if( file_exists("templates/".$template."/config.json") ) { $config_file = "templates/".$template."/config.json"; } else if( file_exists("data/templates/".$template."/config.json") ) { $config_file = "data/templates/".$template."/config.json"; } else if( file_exists("templates/".$template."/info.json") ) { $config_file = "templates/".$template."/info.json"; } else { $config_file = "data/templates/".$template."/info.json"; } //读取主题配置 $config_content = @file_get_contents($config_file); //如果是info.json,则特殊处理下 if ( strstr($config_file,"info.json") ) { $config_content = json_decode($config_content); $theme_config = $config_content->config; } else{ $theme_config = $config_content; $theme_config = json_decode($theme_config); } $this->return_json(200,$theme_config,""); } /** * 通用json消息返回 */ public function return_json($code,$data,$msg = "") { $return = [ "code" => intval($code), "data" => $data, "msg" => $msg ]; exit(json_encode($return)); } /** * 更新option */ public function set_option($key,$value = '') { $key = htmlspecialchars(trim($key)); //如果key是空的 if( empty($key) ) { $this->err_msg(-2000,'键不能为空!'); } //鉴权 if( !$this->is_login() ) { $this->err_msg(-1002,'Authorization failure!'); } $count = $this->db->count("on_options", [ "key" => $key ]); //如果数量是0,则插入,否则就是更新 if( $count === 0 ) { try { $this->db->insert("on_options",[ "key" => $key, "value" => $value ]); $data = [ "code" => 0, "data" => "设置成功!" ]; exit(json_encode($data)); } catch (\Throwable $th) { $this->err_msg(-2000,$th); } } //更新数据 else if( $count === 1 ) { try { $this->db->update("on_options",[ "value" => $value ],[ "key" => $key ]); $data = [ "code" => 0, "data" => "设置已更新!" ]; exit(json_encode($data)); } catch (\Throwable $th) { $this->err_msg(-2000,$th); } } } /** * 更新option,返回BOOL值 */ protected function set_option_bool($key,$value = '') { $key = htmlspecialchars(trim($key)); //如果key是空的 if( empty($key) ) { return FALSE; } $count = $this->db->count("on_options", [ "key" => $key ]); //如果数量是0,则插入,否则就是更新 if( $count === 0 ) { try { $this->db->insert("on_options",[ "key" => $key, "value" => $value ]); $data = [ "code" => 0, "data" => "设置成功!" ]; return TRUE; } catch (\Throwable $th) { return FALSE; } } //更新数据 else if( $count === 1 ) { try { $this->db->update("on_options",[ "value" => $value ],[ "key" => $key ]); $data = [ "code" => 0, "data" => "设置已更新!" ]; return TRUE; } catch (\Throwable $th) { return FALSE; } } } /** * 用户状态 */ public function check_login($token){ $re = $this->auth($token); if( $re ) { $this->return_json(200,"true","success"); } } /** * 验证订阅是否有效 */ public function check_subscribe() { //验证token是否合法 $this->auth($token); //获取订阅信息 //获取当前站点信息 $subscribe = $this->db->get('on_options','value',[ 'key' => "s_subscribe" ]); $domain = $_SERVER['HTTP_HOST']; $subscribe = unserialize($subscribe); //api请求地址 $api_url = API_URL."/v1/check_subscribe.php?order_id=".$subscribe['order_id']."&email=".$subscribe['email']."&domain=".$domain; try { #GET HTTPS $curl = curl_init($api_url); #设置useragent curl_setopt($curl, CURLOPT_USERAGENT, "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/102.0.5005.63 Safari/537.36"); curl_setopt($curl, CURLOPT_FAILONERROR, true); curl_setopt($curl, CURLOPT_FOLLOWLOCATION, true); curl_setopt($curl, CURLOPT_RETURNTRANSFER, true); curl_setopt($curl, CURLOPT_SSL_VERIFYPEER, false); curl_setopt($curl, CURLOPT_SSL_VERIFYHOST, false); #设置超时时间,最小为1s(可选) curl_setopt($curl , CURLOPT_TIMEOUT, 30); $html = curl_exec($curl); curl_close($curl); //解析json $data = json_decode($html); //var_dump($data->data->end_time); //echo strtotime($data->data->end_time); //var_dump($data->code); //如果状态码返回200,并且订阅没有到期 if( (intval($data->code) === 200) && ( $data->data->end_time > ( strtotime( date("Y-m-d",time()) ) )) ) { $this->return_json(200,$data->data,'success'); } else if( intval($data->code === -1000 ) ) { $this->return_json(-2000,'',$data->msg); } else{ $this->return_json(-2000,'',"请求接口失败,请重试!"); } } catch (\Throwable $th) { $this->return_json(-2000,'','网络请求失败,请重试!'); } } /** * 下载主题 */ public function down_theme($data) { //主题名称 $name = $data['name']; //key-value $key = $data['key']; $value = $data['value']; //拼接主题URL $url = API_URL."/v1/down_theme.php?name=${name}&key=${key}&value=${value}"; //验证token是否合法 $this->auth($token); //检查主题是否已经存在 if ( $data['type'] == 'download' ) { $theme1 = "templates/".$name; $theme2 = "data/templates/".$name; if( is_dir($theme1) || is_dir($theme2) ) { $this->return_json(-2000,'','主题已存在,无需重复下载!'); } } //如果返回404状态 $res = get_headers($url,1); if( strstr($res[0],'404') ) { $this->return_json(-2000,'','远程服务器上不存在此主题!'); } //判断主题目录是否存在,如果curl_host是alpine,则视为容器,容器则将主题目录设置为data/templates $curl_host = curl_version()['host']; if( strstr($curl_host,'alpine') ) { $theme_dir = "data/templates"; } else{ $theme_dir = "templates"; } //主题完整压缩包路径 $file_name = $theme_dir."/${name}.tar.gz"; if( !is_dir($theme_dir) ) { mkdir($theme_dir,0755); } //尝试下载主题 try { //下载主题,并设置超时时间为120s $content = $this->curl_get($url,120); //写入主题 $re = file_put_contents($theme_dir."/${name}.tar.gz",$content); //如果写入主题失败了,说明权限不粗糙 if( !$re ) { $this->return_json(-2000,'','主题写入失败,请检查目录权限!'); } else{ //解压文件 $phar = new PharData($file_name); //路径 要解压的文件 是否覆盖 $phar->extractTo($theme_dir."/${name}", null, true); //删除主题 unlink($file_name); $this->return_json(200,'','主题下载成功!'); } } catch (\Throwable $th) { $this->return_json(-2000,'','主题下载失败,请检查目录权限!'); } finally{ unlink($file_name); } } /** * 验证订阅是否存在 */ public function is_subscribe() { //获取订阅SESSION状态 session_start(); //获取session订阅状态 $is_subscribe = $_SESSION['subscribe']; //如果订阅是空的,则请求接口获取订阅状态 if ( !isset($is_subscribe) ) { //获取当前站点信息 $subscribe = $this->db->get('on_options','value',[ 'key' => "s_subscribe" ]); $domain = $_SERVER['HTTP_HOST']; $subscribe = unserialize($subscribe); //api请求地址 $api_url = API_URL."/v1/check_subscribe.php?order_id=".$subscribe['order_id']."&email=".$subscribe['email']."&domain=".$domain; try { #GET HTTPS $curl = curl_init($api_url); #设置useragent curl_setopt($curl, CURLOPT_USERAGENT, "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/102.0.5005.63 Safari/537.36"); curl_setopt($curl, CURLOPT_FAILONERROR, true); curl_setopt($curl, CURLOPT_FOLLOWLOCATION, true); curl_setopt($curl, CURLOPT_RETURNTRANSFER, true); curl_setopt($curl, CURLOPT_SSL_VERIFYPEER, false); curl_setopt($curl, CURLOPT_SSL_VERIFYHOST, false); #设置超时时间,最小为1s(可选) curl_setopt($curl , CURLOPT_TIMEOUT, 30); $html = curl_exec($curl); curl_close($curl); //解析json $data = json_decode($html); //var_dump($data->data->end_time); //echo strtotime($data->data->end_time); //var_dump($data->code); //如果状态码返回200,并且订阅没有到期 if( (intval($data->code) === 200) && ( $data->data->end_time > ( strtotime( date("Y-m-d",time()) ) )) ) { $_SESSION['subscribe'] = TRUE; return TRUE; } else if( intval($data->code === -1000 ) ) { $_SESSION['subscribe'] = FALSE; return FALSE; } else{ $_SESSION['subscribe'] = NULL; } } catch (\Throwable $th) { $_SESSION['subscribe'] = NULL; } } if( $is_subscribe == TRUE ) { return TRUE; } else{ return FALSE; } } /** * name:验证订阅,订阅不存在,则阻止 */ public function check_is_subscribe(){ $result = $this->is_subscribe(); if( $result === FALSE ) { $this->return_json(-2000,'','该功能需要订阅后才能使用!'); } else if( $result === TRUE ) { return TRUE; } else{ $this->return_json(-2000,'','该功能需要订阅后才能使用!'); } } /** * 无脑下载更新程序 */ public function down_updater() { $url = API_URL."/update.tar.gz"; // echo $url; // exit; try { //检查本地是否存在更新程序 $curl = curl_init($url); #设置useragent curl_setopt($curl, CURLOPT_USERAGENT, "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/102.0.5005.63 Safari/537.36"); curl_setopt($curl, CURLOPT_FAILONERROR, true); curl_setopt($curl, CURLOPT_FOLLOWLOCATION, true); curl_setopt($curl, CURLOPT_RETURNTRANSFER, true); curl_setopt($curl, CURLOPT_SSL_VERIFYPEER, false); curl_setopt($curl, CURLOPT_SSL_VERIFYHOST, false); #设置超时时间,最小为1s(可选) curl_setopt($curl , CURLOPT_TIMEOUT, 60); $html = curl_exec($curl); curl_close($curl); //var_dump($html); //return $html; //写入文件 file_put_contents("update.tar.gz",$html); //解压覆盖文件 //解压文件 $phar = new PharData('update.tar.gz'); //路径 要解压的文件 是否覆盖 $phar->extractTo('./', null, true); return TRUE; } catch (\Throwable $th) { $this->return_json(-2000,"","更新程序下载失败!"); } finally{ //再次判断更新程序是否存在 if( is_file("update.php") ) { //判断是否大约0 $file_size = filesize("update.php"); if( $file_size < 100 ) { $this->return_json(-2000,"","更新程序异常,请检查目录权限!"); } else{ return TRUE; } } else{ $this->return_json(-2000,"","更新程序下载失败,请检查目录权限!"); } } } /**更新升级程序 */ public function up_updater() { //如果不存在,则下载更新程序 if( !is_file("update.php") ) { if ( $this->down_updater() ) { $this->return_json(200,"","更新程序准备就绪!"); } } //如果存在更新程序,验证大小,大小不匹配时进行更新 if( is_file("update.tar.gz") ) { //获取header头 $header = get_headers(API_URL."/update.tar.gz",1); $lentgh = $header['Content-Length']; //获取文件大小 $file_size = filesize("update.tar.gz"); //如果本地文件大小和远程文件大小不一致,则下载更新 if ( $file_size != $lentgh ) { if ( $this->down_updater() ) { //更新完毕后提示 $this->return_json(200,"","更新程序更新完毕!"); } else{ $this->return_json(-2000,"","更新程序下载失败,请检查目录权限!"); } } else { $this->return_json(200,"","更新程序(压缩包)准备就绪!"); } } else if( is_file("update.php") ) { $this->return_json(200,"","更新程序(PHP)准备就绪!"); } else{ $this->return_json(200,"","更新程序(其它)准备就绪!"); } } /** * 校验更新程序 */ public function check_version($version) { //获取当前版本信息 $current_version = explode("-",file_get_contents("version.txt")); $current_version = str_replace("v","",$current_version[0]); //获取用户传递的版本 //$version = $_REQUEST['version']; if( $version == $current_version ) { $this->return_json(200,"","success"); } else{ $this->return_json(-2000,"","更新失败,版本校验不匹配,请检查目录权限!"); } } //curl get请求 protected function curl_get($url,$timeout = 10) { $curl = curl_init($url); #设置useragent curl_setopt($curl, CURLOPT_USERAGENT, "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/102.0.5005.63 Safari/537.36"); curl_setopt($curl, CURLOPT_FAILONERROR, true); curl_setopt($curl, CURLOPT_FOLLOWLOCATION, true); curl_setopt($curl, CURLOPT_RETURNTRANSFER, true); curl_setopt($curl, CURLOPT_SSL_VERIFYPEER, false); curl_setopt($curl, CURLOPT_SSL_VERIFYHOST, false); #设置超时时间,最小为1s(可选) curl_setopt($curl , CURLOPT_TIMEOUT, $timeout); $html = curl_exec($curl); curl_close($curl); return $html; } /** * name:数据库备份接口 */ public function backup_db(){ //验证请求 $this->auth($token); //验证订阅 $this->check_is_subscribe(); $backup_dir = 'data/backup/'; //判断目录是否存在,不存在则创建 if( !is_dir($backup_dir) ) { try { mkdir($backup_dir,0755); } catch (\Throwable $th) { $this->return_json(-2000,'','备份目录创建失败,请检查目录权限!'); } } //尝试拷贝数据库进行备份 try { //获取当前版本信息 $current_version = explode("-",file_get_contents("version.txt")); $current_version = str_replace("v","",$current_version[0]); $db_name = 'onenav_'.date("YmdHi",time()).'_'.$current_version.'.db3'; $backup_db_path = $backup_dir.$db_name; copy('data/onenav.db3',$backup_db_path); $this->return_json(200,$db_name,'success'); } catch (\Throwable $th) { $this->return_json(-2000,'','备份目录创建失败,请检查目录权限!'); } } /** * name:数据库备份列表 */ public function backup_db_list() { //验证请求 $this->auth($token); //验证订阅 $this->check_is_subscribe(); //备份目录 $backup_dir = 'data/backup/'; //遍历备份列表 $dbs = scandir($backup_dir); $newdbs = $dbs; //去除.和.. for ($i=0; $i < count($dbs); $i++) { if( ($dbs[$i] == '.') || ($dbs[$i] == '..') ) { unset($newdbs[$i]); } } //将删除后的数组重新赋值 $dbs = $newdbs; //获取备份列表个数 $num = count($dbs); //排序处理,按时间从大到小排序 rsort($dbs,2); //如果大于10个,则删减为10个 if( $num > 10 ) { for ($i=$num; $i > 10; $i--) { //物理删除数据库 unlink($backup_dir.$dbs[$i-1]); //删除数组最后一个元素 array_pop($dbs); } $count = 10; } else{ $count = $num; } //声明一个空数组 $data = []; //遍历数据库,获取时间,大小 foreach ($dbs as $key => $value) { $arr['id'] = $key; $arr['name'] = $value; $arr['mtime'] = date("Y-m-d H:i:s",filemtime($backup_dir.$value)); $arr['size'] = (filesize($backup_dir.$value) / 1024).'KB'; $data[$key] = $arr; } $datas = [ 'code' => 0, 'msg' => '', 'count' => $count, 'data' => $data ]; exit(json_encode($datas)); } /** * name:删除单个数据库备份 * @param $name:数据库名称 */ public function del_backup_db($name) { //验证请求 $this->auth($token); //验证订阅 $this->check_is_subscribe(); //使用正则表达式判断数据库名称是否合法 $pattern = '/^onenav_[0-9\-]+_[0-9.]+(db3)$/'; if( !preg_match_all($pattern,$name) ) { $this->return_json(-2000,'','数据库名称不合法!'); } //数据库目录 $backup_dir = 'data/backup/'; //删除数据库 try { unlink($backup_dir.$name); $this->return_json(200,'',"备份数据库已被删除!"); } catch (\Throwable $th) { $this->return_json(-2000,'',"删除失败,请检查目录权限!"); } } /** * name:恢复数据库备份 * @param $name:备份数据库名称 */ public function restore_db($name) { //验证请求 $this->auth($token); //验证订阅 $this->check_is_subscribe(); //使用正则表达式判断数据库名称是否合法 $pattern = '/^onenav_[0-9\-]+_[0-9.]+(db3)$/'; if( !preg_match_all($pattern,$name) ) { $this->return_json(-2000,'','数据库名称不合法!'); } //数据库目录 $backup_dir = 'data/backup/'; //恢复数据库 try { copy($backup_dir.$name,'data/onenav.db3'); $this->return_json(200,'','数据库已回滚为'.$name); } catch (\Throwable $th) { $this->return_json(-2000,'',"回滚失败,请检查目录权限!"); } } /** * name:获取OneNav信息 */ public function app_info($token) { //验证请求 $this->auth($token); //获取PHP版本 $data['php_version'] = PHP_VERSION; //获取OneNav版本 $data['onenav_version'] = file_get_contents("version.txt"); //获取分类数量 $data['cat_num'] = $this->db->count("on_categorys"); //获取链接数量 $data['link_num'] = $this->db->count("on_links"); //获取用户名 $data['username'] = USER; //返回JSON数据 $this->return_json(200,$data,"success"); } /** * name:下载数据库 */ public function down_db($name) { //验证请求 $this->auth($token); //使用正则表达式判断数据库名称是否合法 $pattern = '/^onenav_[0-9\-]+_[0-9.]+(db3)$/'; if( !preg_match_all($pattern,$name) ) { $this->return_json(-2000,'','数据库名称不合法!'); } //数据库目录 $backup_dir = 'data/backup/'; //拼接数据库路径 $full_path = $backup_dir.$name; if( !file_exists($full_path) ) { header('HTTP/1.1 404 NOT FOUND'); } else{ // 以只读和二进制模式打开文件 $file = fopen($full_path, "rb"); // 告诉浏览器这是一个文件流格式的文件 Header("Content-type: application/octet-stream"); // 请求范围的度量单位 Header("Accept-Ranges: bytes"); // Content-Length是指定包含于请求或响应中数据的字节长度 Header("Accept-Length: " . filesize($full_path)); // 用来告诉浏览器,文件是可以当做附件被下载,下载后的文件名称为$file_name该变量的值。 Header("Content-Disposition: attachment; filename=" . $name); // 读取文件内容并直接输出到浏览器 echo fread($file, filesize($full_path)); fclose($file); exit(); } } /** * name:创建分享 */ public function create_share($data) { //验证请求 $this->auth($token); //如果订阅不存在 if ( $this->is_subscribe() === FALSE ) { $this->return_json(-2000,'','此功能需要订阅后才能使用!'); } //设置默认数据 //随机8位分享ID $data['sid'] = GetRandStr(8); /** * 判断到期时间 */ //获取当前时间 $c_time = strtotime( $data['add_time'] ); $e_time = strtotime( $data['expire_time'] ); if( $c_time > $e_time ) { $this->return_json(-2000,'','到期日期不能小于当前日期!'); } /** * 判断密码 */ if( strlen($data['password']) > 16 ) { $this->return_json(-2000,'','密码长度不能超过16位!'); } $pattern = "/[A-Za-z0-9]{4,16}/"; //var_dump(preg_match($pattern,$data['password'])); if( !empty($data['password']) && !preg_match($pattern,$data['password']) ) { $this->return_json(-2000,'','密码只能由4-16位字母和数字组成!'); } //插入数据库 $result = $this->db->insert("on_shares",$data); if( $result ) { $this->return_json(200,'','success'); } else{ $this->return_json(-2000,'','写入数据库失败!'); } } /** * 分享列表 */ public function share_list($data){ //验证请求 $this->auth($token); $limit = $data['limit']; $offset = ($data['page'] - 1) * $data['limit']; //$fid = @$data['category_id']; $count = $this->db->count('on_shares','*'); $sql = "SELECT *,(SELECT name FROM on_categorys WHERE id = on_shares.cid) AS category_name FROM on_shares ORDER BY id DESC LIMIT {$limit} OFFSET {$offset}"; //原生查询 $datas = $this->db->query($sql)->fetchAll(); $datas = [ 'code' => 0, 'msg' => '', 'count' => $count, 'data' => $datas ]; exit(json_encode($datas)); } /** * name:根据分享的SID查询指定分类下的所有链接 */ public function get_sid_links($data) { //获得SID $sid = $data['sid']; //获得密码 $password = $data['password']; //判断SID是否合法 $pattern = "/[A-Za-z0-9]{8}$/"; if( (strlen($sid) !== 8) || !preg_match($pattern,$sid) ) { $this->return_json(-2000,'','SID不合法!'); } //根据SID查询得到分类ID $share_data = $this->db->get("on_shares","*",[ "sid" => $sid ]); //如果没有查询到数据 if( empty($share_data) ) { $this->return_json(-2000,'','SID不存在!'); } $cid = $share_data['cid']; //查询分类名称 $category_info = $this->db->get("on_categorys",["name"],[ "id" => $cid ]); $category_name = $category_info["name"]; //如果链接已经过期 $c_time = strtotime( date("Y-m-d H:i:s",time()) ); if ( $c_time > strtotime($share_data['expire_time']) ) { $this->return_json(-2000,'','链接已过期!'); } //如果分享密码不为空,则验证密码 if ( !empty($share_data['password']) && ( $share_data['password'] == $password) ) { //根据分类ID(cid)查询该分类下的所有链接 $results = $this->db->select("on_links","*",[ "fid" => $cid, "ORDER" => ["weight" => "DESC","id" => "DESC"] ]); $data = [ "category_name" => $category_name, "expire_time" => $share_data["expire_time"], "results" => $results ]; $this->return_json(200,$data,'success'); } else if ( empty($share_data['password']) ) { //根据分类ID(cid)查询该分类下的所有链接 $results = $this->db->select("on_links","*",[ "fid" => $cid, "ORDER" => ["weight" => "DESC","id" => "DESC"] ]); $data = [ "category_name" => $category_name, "expire_time" => $share_data["expire_time"], "results" => $results ]; $this->return_json(200,$data,'success'); } else{ $this->return_json(401,'','密码错误!'); } } /** * name:删除分享 */ public function del_share($data) { //验证请求 $this->auth($token); $id = $data['id']; //如果id为空 if( empty($id) ){ $this->return_json(-2000,$results,'ID不能为空!'); } $data = $this->db->delete('on_shares',[ 'id' => $id] ); if( $data ) { $this->return_json(200,'','success'); } else{ $this->return_json(-2000,'','删除失败!'); } } /** * name:获取站点信息,不需要授权 */ public function site_info() { //获取当前站点信息 $site = $this->db->get('on_options','value',[ 'key' => "s_site" ]); $site = unserialize($site); $this->return_json(200,$site,'success'); } }