论坛免激活代码

1. <?php
   
2. 
   
3. define('UC_VERSION', '1.0.0');
   
4. 
   
5. define('API_DELETEUSER', 1);
   
6. define('API_RENAMEUSER', 1);
   
7. define('API_GETTAG', 1);
   
8. define('API_SYNLOGIN', 1);
   
9. define('API_SYNLOGOUT', 1);
   
10. define('API_UPDATEPW', 1);
    
11. define('API_UPDATEBADWORDS', 1);
    
12. define('API_UPDATEHOSTS', 1);
    
13. define('API_UPDATEAPPS', 1);
    
14. define('API_UPDATECLIENT', 1);
    
15. define('API_UPDATECREDIT', 1);
    
16. define('API_GETCREDITSETTINGS', 1);
    
17. define('API_UPDATECREDITSETTINGS', 1);
    
18. 
    
19. define('API_RETURN_SUCCEED', '1');
    
20. define('API_RETURN_FAILED', '-1');
    
21. define('API_RETURN_FORBIDDEN', '-2');
    
22. 
    
23. error_reporting(7);
    
24. set_magic_quotes_runtime(0);
    
25. 
    
26. define('MAGIC_QUOTES_GPC', get_magic_quotes_gpc());
    
27. 
    
28. define('IN_DISCUZ', TRUE);
    
29. define('DISCUZ_ROOT', substr(dirname(__FILE__), 0, -3));
    
30. define('UC_CLIENT_ROOT', DISCUZ_ROOT.'./uc_client/');
    
31. 
    
32. $_DCACHE = array();
    
33. 
    
34. require_once DISCUZ_ROOT.'./config.inc.php';
    
35. 
    
36. $code = $_GET['code'];
    
37. parse_str(authcode($code, 'DECODE', UC_KEY), $get);
    
38. if(MAGIC_QUOTES_GPC) {
    
39.         $get = dstripslashes($get);
    
40. }
    
41. 
    
42. if(time() - $get['time'] > 3600) {
    
43.         exit('Authracation has expiried');
    
44. }
    
45. if(empty($get)) {
    
46.         exit('Invalid Request');
    
47. }
    
48. $action = $get['action'];
    
49. $timestamp = time();
    
50. 
    
51. if($action == 'test') {
    
52.         exit(API_RETURN_SUCCEED);
    
53. 
    
54. } elseif($action == 'deleteuser') {
    
55. 
    
56.         !API_DELETEUSER && exit(API_RETURN_FORBIDDEN);
    
57. 
    
58.         require_once DISCUZ_ROOT.'./include/db_'.$database.'.class.php';
    
59. 
    
60.         $db = new dbstuff;
    
61.         $db->connect($dbhost, $dbuser, $dbpw, $dbname, $pconnect, true, $dbcharset);
    
62.         unset($dbhost, $dbuser, $dbpw, $dbname, $pconnect);
    
63. 
    
64.         $uids = $get['ids'];
    
65.         $threads = array();
    
66. 
    
67.         $query = $db->query("SELECT f.fid, t.tid FROM {$tablepre}threads t LEFT JOIN {$tablepre}forums f ON t.fid=f.fid WHERE t.authorid IN ($uids) ORDER BY f.fid");
    
68.         while($thread = $db->fetch_array($query)) {
    
69.                 $threads[$thread['fid']] .= ($threads[$thread['fid']] ? ',' : '').$thread['tid'];
    
70.         }
    
71. 
    
72.         if($threads) {
    
73.                 require_once DISCUZ_ROOT.'./forumdata/cache/cache_settings.php';
    
74.                 foreach($threads as $fid => $tids) {
    
75.                         $query = $db->query("SELECT attachment, thumb, remote FROM {$tablepre}attachments WHERE tid IN ($tids)");
    
76.                         while($attach = $db->fetch_array($query)) {
    
77.                                 @unlink($_DCACHE['settings']['attachdir'].'/'.$attach['attachment']);
    
78.                                 $attach['thumb'] && @unlink($_DCACHE['settings']['attachdir'].'/'.$attach['attachment'].'.thumb.jpg');
    
79.                         }
    
80. 
    
81.                         foreach(array('threads', 'threadsmod', 'relatedthreads', 'posts', 'polls', 'polloptions', 'trades', 'activities', 'activityapplies', 'debates', 'debateposts', 'attachments', 'favorites', 'mythreads', 'myposts', 'subscriptions', 'typeoptionvars', 'forumrecommend') as $value) {
    
82.                                 $db->query("DELETE FROM {$tablepre}$value WHERE tid IN ($tids)", 'UNBUFFERED');
    
83.                         }
    
84. 
    
85.                         require_once DISCUZ_ROOT.'./include/post.func.php';
    
86.                         updateforumcount($fid);
    
87.                 }
    
88.                 if($globalstick && $stickmodify) {
    
89.                         require_once DISCUZ_ROOT.'./include/cache.func.php';
    
90.                         updatecache('globalstick');
    
91.                 }
    
92.         }
    
93. 
    
94.         $query = $db->query("DELETE FROM {$tablepre}members WHERE uid IN ($uids)");
    
95.         $db->query("DELETE FROM {$tablepre}access WHERE uid IN ($uids)", 'UNBUFFERED');
    
96.         $db->query("DELETE FROM {$tablepre}memberfields WHERE uid IN ($uids)", 'UNBUFFERED');
    
97.         $db->query("DELETE FROM {$tablepre}favorites WHERE uid IN ($uids)", 'UNBUFFERED');
    
98.         $db->query("DELETE FROM {$tablepre}moderators WHERE uid IN ($uids)", 'UNBUFFERED');
    
99.         $db->query("DELETE FROM {$tablepre}subscriptions WHERE uid IN ($uids)", 'UNBUFFERED');
    
100. 
     
101.         $query = $db->query("SELECT uid, attachment, thumb, remote FROM {$tablepre}attachments WHERE uid IN ($uids)");
     
102.         while($attach = $db->fetch_array($query)) {
     
103.                 @unlink($_DCACHE['settings']['attachdir'].'/'.$attach['attachment']);
     
104.                 $attach['thumb'] && @unlink($_DCACHE['settings']['attachdir'].'/'.$attach['attachment'].'.thumb.jpg');
     
105.         }
     
106.         $db->query("DELETE FROM {$tablepre}attachments WHERE uid IN ($uids)");
     
107. 
     
108.         $db->query("DELETE FROM {$tablepre}posts WHERE authorid IN ($uids)");
     
109.         $db->query("DELETE FROM {$tablepre}trades WHERE sellerid IN ($uids)");
     
110. 
     
111.         exit(API_RETURN_SUCCEED);
     
112. 
     
113. } elseif($action == 'renameuser') {
     
114. 
     
115.         !API_RENAMEUSER && exit(API_RETURN_FORBIDDEN);
     
116. 
     
117.         require_once DISCUZ_ROOT.'./include/db_'.$database.'.class.php';
     
118. 
     
119.         $db = new dbstuff;
     
120.         $db->connect($dbhost, $dbuser, $dbpw, $dbname, $pconnect, true, $dbcharset);
     
121.         unset($dbhost, $dbuser, $dbpw, $dbname, $pconnect);
     
122. 
     
123.         $uid = $get['uid'];
     
124.         $usernameold = $get['oldusername'];
     
125.         $usernamenew = $get['newusername'];
     
126. 
     
127.         $db->query("UPDATE {$tablepre}announcements SET author='$usernamenew' WHERE author='$usernameold'");
     
128.         $db->query("UPDATE {$tablepre}banned SET admin='$usernamenew' WHERE admin='$usernameold'");
     
129.         $db->query("UPDATE {$tablepre}forums SET lastpost=REPLACE(lastpost, '\t$usernameold', '\t$usernamenew')");
     
130.         $db->query("UPDATE {$tablepre}members SET username='$usernamenew' WHERE uid='$uid'");
     
131.         $db->query("UPDATE {$tablepre}pms SET msgfrom='$usernamenew' WHERE msgfromid='$uid'");
     
132.         $db->query("UPDATE {$tablepre}posts SET author='$usernamenew' WHERE authorid='$uid'");
     
133.         $db->query("UPDATE {$tablepre}threads SET author='$usernamenew' WHERE authorid='$uid'");
     
134.         $db->query("UPDATE {$tablepre}threads SET lastposter='$usernamenew' WHERE lastposter='$usernameold'");
     
135.         $db->query("UPDATE {$tablepre}threadsmod SET username='$usernamenew' WHERE uid='$uid'");
     
136.         exit(API_RETURN_SUCCEED);
     
137. 
     
138. } elseif($action == 'gettag') {
     
139. 
     
140.         !API_GETTAG && exit(API_RETURN_FORBIDDEN);
     
141. 
     
142.         require_once DISCUZ_ROOT.'./include/db_'.$database.'.class.php';
     
143. 
     
144.         $db = new dbstuff;
     
145.         $db->connect($dbhost, $dbuser, $dbpw, $dbname, $pconnect, true, $dbcharset);
     
146.         unset($dbhost, $dbuser, $dbpw, $dbname, $pconnect);
     
147. 
     
148.         $name = trim($get['id']);
     
149.         if(empty($name) || !preg_match('/^([\x7f-\xff_-]|\w|\s)+$/', $name) || strlen($name) > 20) {
     
150.                 exit(API_RETURN_FAILED);
     
151.         }
     
152. 
     
153.         require_once DISCUZ_ROOT.'./include/misc.func.php';
     
154. 
     
155.         $tag = $db->fetch_first("SELECT * FROM {$tablepre}tags WHERE tagname='$name'");
     
156.         if($tag['closed']) {
     
157.                 exit(API_RETURN_FAILED);
     
158.         }
     
159. 
     
160.         $tpp = 10;
     
161.         $PHP_SELF = $_SERVER['PHP_SELF'] ? $_SERVER['PHP_SELF'] : $_SERVER['SCRIPT_NAME'];
     
162.         $boardurl = 'http://'.$_SERVER['HTTP_HOST'].preg_replace("/\/+(api)?\/*$/i", '', substr($PHP_SELF, 0, strrpos($PHP_SELF, '/'))).'/';
     
163.         $query = $db->query("SELECT t.* FROM {$tablepre}threadtags tt LEFT JOIN {$tablepre}threads t ON t.tid=tt.tid AND t.displayorder>='0' WHERE tt.tagname='$name' ORDER BY tt.tid DESC LIMIT $tpp");
     
164.         $threadlist = array();
     
165.         while($tagthread = $db->fetch_array($query)) {
     
166.                 if($tagthread['tid']) {
     
167.                         $threadlist[] = array(
     
168.                                 'subject' => $tagthread['subject'],
     
169.                                 'uid' => $tagthread['authorid'],
     
170.                                 'username' => $tagthread['author'],
     
171.                                 'dateline' => $tagthread['dateline'],
     
172.                                 'url' => $boardurl.'viewthread.php?tid='.$tagthread['tid'],
     
173.                         );
     
174.                 }
     
175.         }
     
176. 
     
177.         $return = array($name, $threadlist);
     
178.         echo uc_serialize($return, 1);
     
179. 
     
180. } elseif($action == 'synlogin') {
     
181. 
     
182. $member = array();
     
183. $member[uid] = $uid;
     
184. $member[username] = $get['username'];
     
185. $member[email] = empty($get['email'])?'your@email.com':$get['email'];                                                               
     
186. $member[password] = md5(time().rand(100000, 999999));
     
187. $member[secques] = '';
     
188. $db->query("INSERT INTO {$tablepre}members (uid,username,email,password,groupid,regip,regdate,timeoffset) VALUES ('{$member[uid]}','{$member[username]}','{$member[email]}','{$member[password]}',10,'', '$timestamp',9999)");
     
189. dsetcookie('sid', '', -86400 * 365);
     
190. dsetcookie('cookietime', $cookietime, 31536000);
     
191. dsetcookie('auth', authcode("$member[password]\t$member[secques]\t$member[uid]", 'ENCODE', $discuz_auth_key), $cookietime);
     
192. 
     
193.         !API_SYNLOGIN && exit(API_RETURN_FORBIDDEN);
     
194. 
     
195.         require_once DISCUZ_ROOT.'./include/db_'.$database.'.class.php';
     
196.         require_once DISCUZ_ROOT.'./forumdata/cache/cache_settings.php';
     
197. 
     
198.         $db = new dbstuff;
     
199.         $db->connect($dbhost, $dbuser, $dbpw, $dbname, $pconnect, true, $dbcharset);
     
200.         unset($dbhost, $dbuser, $dbpw, $dbname, $pconnect);
     
201.         $cookietime = 2592000;
     
202.         $discuz_auth_key = md5($_DCACHE['settings']['authkey'].$_SERVER['HTTP_USER_AGENT']);
     
203.         header('P3P: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"');
     
204.         $uid = intval($get['uid']);
     
205.         $query = $db->query("SELECT username, uid, password, secques FROM {$tablepre}members WHERE uid='$uid'");
     
206.         if($member = $db->fetch_array($query)) {
     
207.                 dsetcookie('sid', '', -86400 * 365);
     
208.                 dsetcookie('cookietime', $cookietime, 31536000);
     
209.                 dsetcookie('auth', authcode("$member[password]\t$member[secques]\t$member[uid]", 'ENCODE', $discuz_auth_key), $cookietime);
     
210.         } else {
     
211.                 dsetcookie('cookietime', $cookietime, 31536000);
     
212.                 dsetcookie('loginuser', $get['username'], $cookietime);
     
213.                 dsetcookie('activationauth', authcode($get['username'], 'ENCODE', $discuz_auth_key), $cookietime);
     
214.         }
     
215. 
     
216. } elseif($action == 'synlogout') {
     
217. 
     
218.         !API_SYNLOGOUT && exit(API_RETURN_FORBIDDEN);
     
219. 
     
220.         header('P3P: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"');
     
221.         dsetcookie('auth', '', -86400 * 365);
     
222.         dsetcookie('sid', '', -86400 * 365);
     
223.         dsetcookie('loginuser', '', -86400 * 365);
     
224.         dsetcookie('activationauth', '', -86400 * 365);
     
225. 
     
226. } elseif($action == 'updatepw') {
     
227. 
     
228.         !API_UPDATEPW && exit(API_RETURN_FORBIDDEN);
     
229. 
     
230.         require_once DISCUZ_ROOT.'./include/db_'.$database.'.class.php';
     
231.         $db = new dbstuff;
     
232.         $db->connect($dbhost, $dbuser, $dbpw, $dbname, $pconnect, true, $dbcharset);
     
233.         unset($dbhost, $dbuser, $dbpw, $dbname, $pconnect);
     
234.        
     
235.         $username = $get['username'];
     
236.         $password = $get['password'];
     
237.         $newpw = md5(time().rand(100000, 999999));
     
238.         $db->query("UPDATE {$tablepre}members SET password='$newpw' WHERE username='$username'");
     
239.         exit(API_RETURN_SUCCEED);
     
240. 
     
241. } elseif($action == 'updatebadwords') {
     
242. 
     
243.         !API_UPDATEBADWORDS && exit(API_RETURN_FORBIDDEN);
     
244. 
     
245.         $post = uc_unserialize(uc_post_contents());
     
246.         $cachefile = DISCUZ_ROOT.'./uc_client/data/cache/badwords.php';
     
247.         $fp = fopen($cachefile, 'w');
     
248.         $s = "<?php\r\n";
     
249.         $s .= '$_CACHE[\'badwords\'] = '.var_export($post, TRUE).";\r\n";
     
250.         fwrite($fp, $s);
     
251.         fclose($fp);
     
252.         exit(API_RETURN_SUCCEED);
     
253. 
     
254. } elseif($action == 'updatehosts') {
     
255. 
     
256.         !API_UPDATEHOSTS && exit(API_RETURN_FORBIDDEN);
     
257. 
     
258.         $post = uc_unserialize(uc_post_contents());
     
259.         $cachefile = DISCUZ_ROOT.'./uc_client/data/cache/hosts.php';
     
260.         $fp = fopen($cachefile, 'w');
     
261.         $s = "<?php\r\n";
     
262.         $s .= '$_CACHE[\'hosts\'] = '.var_export($post, TRUE).";\r\n";
     
263.         fwrite($fp, $s);
     
264.         fclose($fp);
     
265.         exit(API_RETURN_SUCCEED);
     
266. 
     
267. } elseif($action == 'updateapps') {
     
268. 
     
269.         !API_UPDATEAPPS && exit(API_RETURN_FORBIDDEN);
     
270. 
     
271.         $post = uc_unserialize(uc_post_contents());
     
272.         $UC_API = $post['UC_API'];
     
273.         unset($post['UC_API']);
     
274. 
     
275.         $cachefile = DISCUZ_ROOT.'./uc_client/data/cache/apps.php';
     
276.         $fp = fopen($cachefile, 'w');
     
277.         $s = "<?php\r\n";
     
278.         $s .= '$_CACHE[\'apps\'] = '.var_export($post, TRUE).";\r\n";
     
279.         fwrite($fp, $s);
     
280.         fclose($fp);
     
281. 
     
282.         if(is_writeable(DISCUZ_ROOT.'./config.inc.php')) {
     
283.                 $configfile = trim(file_get_contents(DISCUZ_ROOT.'./config.inc.php'));
     
284.                 $configfile = substr($configfile, -2) == '?>' ? substr($configfile, 0, -2) : $configfile;
     
285.                 $configfile = preg_replace("/define\('UC_API',\s*'.*?'\);/i", "define('UC_API', '$UC_API');", $configfile);
     
286.                 if($fp = @fopen(DISCUZ_ROOT.'./config.inc.php', 'w')) {
     
287.                         @fwrite($fp, trim($configfile));
     
288.                         @fclose($fp);
     
289.                 }
     
290.         }
     
291. 
     
292.         exit(API_RETURN_SUCCEED);
     
293. 
     
294. } elseif($action == 'updateclient') {
     
295. 
     
296.         !API_UPDATECLIENT && exit(API_RETURN_FORBIDDEN);
     
297.        
     
298.         $post = uc_unserialize(uc_post_contents());
     
299.         $cachefile = DISCUZ_ROOT.'./uc_client/data/cache/settings.php';
     
300.         $fp = fopen($cachefile, 'w');
     
301.         $s = "<?php\r\n";
     
302.         $s .= '$_CACHE[\'settings\'] = '.var_export($post, TRUE).";\r\n";
     
303.         fwrite($fp, $s);
     
304.         fclose($fp);
     
305.         exit(API_RETURN_SUCCEED);
     
306. 
     
307. 
     
308. } elseif($action == 'updatecredit') {
     
309. 
     
310.         !UPDATECREDIT && exit(API_RETURN_FORBIDDEN);
     
311. 
     
312.         require_once DISCUZ_ROOT.'./include/db_'.$database.'.class.php';
     
313.         require_once DISCUZ_ROOT.'./forumdata/cache/cache_settings.php';
     
314. 
     
315.         $db = new dbstuff;
     
316.         $db->connect($dbhost, $dbuser, $dbpw, $dbname, $pconnect, true, $dbcharset);
     
317.         unset($dbhost, $dbuser, $dbpw, $dbname, $pconnect);
     
318. 
     
319.         $credit = intval($get['credit']);
     
320.         $amount = intval($get['amount']);
     
321.         $uid = intval($get['uid']);
     
322. 
     
323.         $db->query("UPDATE {$tablepre}members SET extcredits$credit=extcredits$credit+'$amount' WHERE uid='$uid'");
     
324. 
     
325.         $discuz_user = $db->result_first("SELECT username FROM {$tablepre}members WHERE uid='$uid'");
     
326. 
     
327.         $db->query("INSERT INTO {$tablepre}creditslog (uid, fromto, sendcredits, receivecredits, send, receive, dateline, operation)
     
328.                         VALUES ('$uid', '$discuz_user', '0', '$credit', '0', '$amount', '$timestamp', 'EXC')");
     
329.         exit(API_RETURN_SUCCEED);
     
330. 
     
331. } elseif($action == 'getcreditsettings') {
     
332. 
     
333.         !API_GETCREDITSETTINGS && exit(API_RETURN_FORBIDDEN);
     
334. 
     
335.         require_once DISCUZ_ROOT.'./forumdata/cache/cache_settings.php';
     
336. 
     
337.         $credits = array();
     
338.         foreach($_DCACHE['settings']['extcredits'] as $id => $extcredits) {
     
339.                 $credits[$id] = array($extcredits['title'], $extcredits['unit']);
     
340.         }
     
341.         echo uc_serialize($credits);
     
342. 
     
343. } elseif($action == 'updatecreditsettings') {
     
344. 
     
345.         !API_UPDATECREDITSETTINGS && exit(API_RETURN_FORBIDDEN);
     
346. 
     
347.         $outextcredits = array();
     
348.        
     
349.         foreach($get['credit'] as $appid => $credititems) {
     
350.                 if($appid == UC_APPID) {
     
351.                         foreach($credititems as $value) {
     
352.                                 $outextcredits[] = array(
     
353.                                         'appiddesc' => $value['appiddesc'],
     
354.                                         'creditdesc' => $value['creditdesc'],
     
355.                                         'creditsrc' => $value['creditsrc'],
     
356.                                         'title' => $value['title'],
     
357.                                         'unit' => $value['unit'],
     
358.                                         'ratio' => $value['ratio']
     
359.                                 );
     
360.                         }
     
361.                 }
     
362.         }
     
363. 
     
364.         require_once DISCUZ_ROOT.'./include/db_'.$database.'.class.php';
     
365.         require_once DISCUZ_ROOT.'./forumdata/cache/cache_settings.php';
     
366.         require_once DISCUZ_ROOT.'./include/cache.func.php';
     
367. 
     
368.         $db = new dbstuff;
     
369.         $db->connect($dbhost, $dbuser, $dbpw, $dbname, $pconnect, true, $dbcharset);
     
370.         unset($dbhost, $dbuser, $dbpw, $dbname, $pconnect);
     
371. 
     
372.         $db->query("REPLACE INTO {$tablepre}settings (variable, value) VALUES ('outextcredits', '".addslashes(serialize($outextcredits))."');", 'UNBUFFERED');
     
373. 
     
374.         $tmp = array();
     
375.         foreach($outextcredits as $value) {
     
376.                 $key = $value['appiddesc'].'|'.$value['creditdesc'];
     
377.                 if(!isset($tmp[$key])) {
     
378.                         $tmp[$key] = array('title' => $value['title'], 'unit' => $value['unit']);
     
379.                 }
     
380.                 $tmp[$key]['creditsrc'][$value['creditsrc']] = $value['ratio'];
     
381.         }
     
382.         $_DCACHE['settings']['outextcredits'] = $tmp;
     
383.        
     
384.         updatesettings();
     
385. 
     
386.         exit(API_RETURN_SUCCEED);
     
387. 
     
388. } else {
     
389. 
     
390.         exit(API_RETURN_FAILED);
     
391. 
     
392. }
     
393. 
     
394. function authcode($string, $operation = 'DECODE', $key = '', $expiry = 0) {
     
395. 
     
396.         $ckey_length = 4;
     
397. 
     
398.         $key = md5($key ? $key : UC_KEY);
     
399.         $keya = md5(substr($key, 0, 16));
     
400.         $keyb = md5(substr($key, 16, 16));
     
401.         $keyc = $ckey_length ? ($operation == 'DECODE' ? substr($string, 0, $ckey_length): substr(md5(microtime()), -$ckey_length)) : '';
     
402. 
     
403.         $cryptkey = $keya.md5($keya.$keyc);
     
404.         $key_length = strlen($cryptkey);
     
405. 
     
406.         $string = $operation == 'DECODE' ? base64_decode(substr($string, $ckey_length)) : sprintf('%010d', $expiry ? $expiry + time() : 0).substr(md5($string.$keyb), 0, 16).$string;
     
407.         $string_length = strlen($string);
     
408. 
     
409.         $result = '';
     
410.         $box = range(0, 255);
     
411. 
     
412.         $rndkey = array();
     
413.         for($i = 0; $i <= 255; $i++) {
     
414.                 $rndkey[$i] = ord($cryptkey[$i % $key_length]);
     
415.         }
     
416. 
     
417.         for($j = $i = 0; $i < 256; $i++) {
     
418.                 $j = ($j + $box[$i] + $rndkey[$i]) % 256;
     
419.                 $tmp = $box[$i];
     
420.                 $box[$i] = $box[$j];
     
421.                 $box[$j] = $tmp;
     
422.         }
     
423. 
     
424.         for($a = $j = $i = 0; $i < $string_length; $i++) {
     
425.                 $a = ($a + 1) % 256;
     
426.                 $j = ($j + $box[$a]) % 256;
     
427.                 $tmp = $box[$a];
     
428.                 $box[$a] = $box[$j];
     
429.                 $box[$j] = $tmp;
     
430.                 $result .= chr(ord($string[$i]) ^ ($box[($box[$a] + $box[$j]) % 256]));
     
431.         }
     
432. 
     
433.         if($operation == 'DECODE') {
     
434.                 if((substr($result, 0, 10) == 0 || substr($result, 0, 10) - time() > 0) && substr($result, 10, 16) == substr(md5(substr($result, 26).$keyb), 0, 16)) {
     
435.                         return substr($result, 26);
     
436.                 } else {
     
437.                         return '';
     
438.                 }
     
439.         } else {
     
440.                 return $keyc.str_replace('=', '', base64_encode($result));
     
441.         }
     
442. 
     
443. }
     
444. 
     
445. function dsetcookie($var, $value, $life = 0, $prefix = 1) {
     
446.         global $cookiepre, $cookiedomain, $cookiepath, $timestamp, $_SERVER;
     
447.         setcookie(($prefix ? $cookiepre : '').$var, $value,
     
448.                 $life ? $timestamp + $life : 0, $cookiepath,
     
449.                 $cookiedomain, $_SERVER['SERVER_PORT'] == 443 ? 1 : 0);
     
450. }
     
451. 
     
452. function dstripslashes($string) {
     
453.         if(is_array($string)) {
     
454.                 foreach($string as $key => $val) {
     
455.                         $string[$key] = dstripslashes($val);
     
456.                 }
     
457.         } else {
     
458.                 $string = stripslashes($string);
     
459.         }
     
460.         return $string;
     
461. }
     
462. 
     
463. function uc_serialize($arr, $htmlon = 0) {
     
464.         include_once UC_CLIENT_ROOT.'./lib/xml.class.php';
     
465.         return xml_serialize($arr, $htmlon);
     
466. }
     
467. 
     
468. function uc_unserialize($s) {
     
469.         include_once UC_CLIENT_ROOT.'./lib/xml.class.php';
     
470.         return xml_unserialize($s);
     
471. }
     
472. 
     
473. function uc_post_contents() {
     
474.         return file_get_contents('php://input');
     
475. }

复制代码

占坑。。。。。。