代码拉取完成，页面将自动刷新
123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216
<?php
/* ！！！警告：：本文件已经调整为APPID选择模式，与其他控制不同~~~ ！！！！
即本程序中，login_users数据库注册的任意用户均可登录，登录时需选择APPID，使用pdo
注意：本处用户登录后返回的APPID将是登录用户所处的APPID！ */
$_login_comment_str_ = "";
if (!isset($login_mode)) // 如果USER 表示仅用于普通的用户登录，否则 表示进入后台权限管理模式
$login_mode = "USER";
$appids = array("datamanage"=>"系统管理","lmxcc"=>"CC系统","FSlmx"=>"FS控制台");
function DB_init($DB='shoudian'){
global $pdo;
// if ($_SERVER['SERVER_ADDR']=='::1')
try { $pdo = new PDO("mysql:host=localhost;dbname=$DB","limx","limaoxiang");} catch (PDOException $e) { die('localhost 无法连接！');}
// else{
// try {
// $pdo = new PDO("mysql:host=182.106.129.234;dbname=$DB","limx","limaoxiang");
// } catch (PDOException $e) {
// echo '69数据库 连接错误： ' . $e->getMessage();
// echo ' (' . $pdo->errorCode() . ' ) '. $pdo->errorInfo();
// }
// }
$pdo->query("set names UTF8");
return $pdo;
}
function get_proxy_ip()
{
$arr_ip_header = array(
'HTTP_CDN_SRC_IP',
'HTTP_PROXY_CLIENT_IP',
'HTTP_WL_PROXY_CLIENT_IP',
'HTTP_CLIENT_IP',
'HTTP_X_FORWARDED_FOR',
'REMOTE_ADDR',
);
$client_ip = 'unknown';
foreach ($arr_ip_header as $key)
{
if (!empty($_SERVER[$key]) && strtolower($_SERVER[$key]) != 'unknown')
{
$client_ip = $_SERVER[$key];
break;
}
}
return $client_ip;
}
function checkip(){
global $limitIPs; //$limitIPS 是黑名单IP数组，由被拒绝使用的ip组成！如果需要禁止某些ip使用系统，仅需要将之记录在这个数组中即可
if (empty($limitIPs))
return;
$ip = get_proxy_ip();
define("USERLOGIN_IP", $ip);
if (!in_array($ip, $limitIPs))
die("$ip 不允许未注册的IP地址登录使用！");
}
function showlogin($label='登录系统前，请输入用户信息：',$mode='onlyuser'){
global $_login_comment_str_,$appids,$login_mode;
if ($_login_comment_str_) $label = $_login_comment_str_;
if ($login_mode == 'USER'){
$label .= "<input name='APPID' value='".APPID."' type='hidden'>";
}else{
$label .= "<select name='APPID'>";
foreach ($appids as $k=>$v)
$label .= "<option value='$k' ".($k==APPID?"selected":"").">$v</option>";
$label .= "</select>";
}
if (!headers_sent()){
header("Content-type: text/html; charset=utf-8");
echo <<<HTML
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml"><head>
<meta http-equiv="Content-Type content=text/html;charset=utf-8"/><link rel="stylesheet" href="css/login.css">
<link rel="stylesheet" type="text/css" href="css/main.css"/><script type="text/javascript" src="css/jquery.js"></script></head><body>
HTML;
}
$footdiv = '<div><button type="submit" class="btn" id="ulogin" onclick="this.value=\'请等待！... ... ...\';this.submit();">登陆</button></div>
<div class="sercopy smallgray smallsize-font" style=" text-align:right;">*忘记密码，请联系管理员 </div></form></div><div class="footer">©2019-2020 LMXCC @<a href="main.php" target="_blank">FSlmx</a> <a href="user_manage.php" target="_blank" class="smallsize-font">登录管理</a></div> ';
if ($mode=='onlyuser')
die('<div class="pubbox" style="margin-top:100pt;">
<div class="formbox"><form method="post" id="form1" name="form1"><div class="sercopy" style="color:#ff4f4f;">'.$label.'</div><div class="textbg"><input id="username" name="username" type="text" value="请输入用户名" onfocus="if (this.value ==\'请输入用户名\'){this.value =\'\';}" onblur="if (this.value ==\'\'){this.value=\'请输入用户名\';}"></div><div class="passwordbg"><input id="psd" name="psd" type="text" value="用户密码" onfocus="psw(this)" onblur="txt(this)"><script type="text/javascript">
function psw(el) {if (el.value == \'用户密码\') { el.value = \'\'; el.type = \'password\'; }} function txt(el) {if (!el.value) { el.type = \'text\'; el.value = \'用户密码\'; }} </script></div>'.$footdiv.'</div>
</div></div></body></html>');
else{
if (empty($_GET['domainid']))
$domain = '<div class="domainbg"><input id="domain" name="domainid" type="text" value="请输入域ID" onfocus="if (this.value ==\'请输入域ID\'){this.value =\'\';}" onblur="if (this.value ==\'\'){this.value=\'请输入域ID\';}"></div>';
else
$domain = "";
die('<div class="main"><div class="topbg"><div class="logo"><img src="css/logo.png"></div></div><div class="pubbox"><div style="padding: 30px 10px 40px 68px;"><form method="post" id="form1" name="form1"><div class="sercopy" style="color:#ff4f4f;">'.$label.'</div>'.$domain.'<div class="textbg"><input id="username" name="username" type="text" value="请输入用户名" onfocus="if (this.value ==\'请输入用户名\'){this.value =\'\';}" onblur="if (this.value ==\'\'){this.value=\'请输入用户名\';}"></div>
<div class="passwordbg"><input id="psd" name="psd" type="text" value="用户密码" onfocus="psw(this)" onblur="txt(this)"><script type="text/javascript">
function psw(el) {if (el.value == \'用户密码\') { el.value = \'\'; el.type = \'password\'; }} function txt(el) {if (!el.value) { el.type = \'text\'; el.value = \'用户密码\'; }} </script></div>'.$footdiv.'</div></div></body></html>');
}
}
function login($m='domain'){
global $pdo,$_login_comment_str_,$login_mode;
if (!defined('USERLOGIN_IP'))
define("USERLOGIN_IP", get_proxy_ip());
$user = @$_POST['username'];
if (empty($user))
return false;
$pwd = @$_POST['psd'];
$APPID = @$_POST['APPID'];
if (empty($_POST['domainid']))
$area = @$_GET['domainid'];
else{
$area = $_POST['domainid'];
if ($area == '请输入域ID')
$area = '';
}
$mode = @$_POST['mode'];
if (empty($pdo))
$pdo = DB_init();
$user = trim($user);
if (!isset($_SESSION['oauth_failure_count']))
$_SESSION['oauth_failure_count'] = 0;
elseif ($_SESSION['oauth_failure_count'] > 5){
$_login_comment_str_ = "错误登录超过5次，已禁止登录！";
return false;
}
$log = $pdo->prepare("select count(*) from login_log where `APPID`=? and `IP`=? and `last_time`>'".date("Y-m-d H:i:s",time()-86400)."' and result = 0");
$log->execute(array($APPID,USERLOGIN_IP));
if ($log->fetchColumn()>5){
$_SESSION['oauth_failure_count'] = 99;
$_login_comment_str_ = "本IP错误登录超过5次，已禁止登录！";
return false;
}else
if ($m=='domain' && $login_mode=='USER' && empty($area)){
$_login_comment_str_ = "没有提交域信息！";
return false;
}elseif ($m=='domain')
$area1 = " and `area` = ? ";
else
$area1 = "";
if (empty($mode))
$mode1 = "";
else
$mode1 = " and `mode` = ? ";
$url = "$_SERVER[PHP_SELF]";
if (isset($_SERVER['HTTPS']) && $_SERVER['HTTPS'] !='off')
$host = "https://$_SERVER[SERVER_ADDR]:$_SERVER[SERVER_PORT]";
else
$host = "http://$_SERVER[SERVER_ADDR]:$_SERVER[SERVER_PORT]";
if (is_numeric($user)){
$result = $pdo->prepare("select `umin`,`umax`,`id` from login_users where (`user` is NULL or `user` ='') and binary `app` = ? and `enabled`=1 and binary `pwd`=? $area1 $mode1");
$datas = array($APPID,$pwd);
if (isset($_POST['domainid']))
array_push($datas,$area);
if ($mode)
array_push($datas,$mode);
$rows = $result->execute($datas);
if (!$rows) die($pdo->error);
$rows = $result->fetchAll();
foreach ($rows as $row) {
if ($row['umin']!='' && $user< $row['umin'])
continue;
if ($row['umax']!='' && $user>$row['umax'])
continue;
$log = $pdo->prepare("insert into login_log (`IP`,`name`,`pwd`,`APPID`,`url`,`result`,`host`) values(?,?,?,?,?,?,?)");
$log->execute(array(USERLOGIN_IP,$user,'***',$APPID,$url,1,$host));
// file_put_contents(USERLOGIN_LOG, date("Y-m-d H:i:s")." ".USERLOGIN_IP." ".APPID." ".$url." $user $pwd $area $mode -- SUCC \n",FILE_APPEND);
$_SESSION['APPID'] = $APPID;
$_SESSION['user_is_ADMIN'] = 0;
$_SESSION['user_id'] = $row['id'];
$_SESSION['oauth_failure_count'] = 0;
$_SESSION['domainid'] = $area;
return true;
}
$log = $pdo->prepare("insert into login_log (`IP`,`name`,`pwd`,`APPID`,`url`,`result`,`host`) values(?,?,?,?,?,?,?)");
$log->execute(array(USERLOGIN_IP,$user,$pwd,APPID,$url,0,$host));
// file_put_contents(USERLOGIN_LOG, date("Y-m-d H:i:s")." ".USERLOGIN_IP." ".APPID." ".$url." $user $pwd $area $mode -- FAIL \n",FILE_APPEND);
$_SESSION['oauth_failure_count'] ++;
$_login_comment_str_ = "信息错误，请重新输入！";
return false;
}else{
$result = $pdo->prepare("select `isadm`,`id` from login_users where binary `app` = '".$APPID."' and `enabled`=1 and binary `user`=? and binary `pwd` = ? $area1 $mode1");
$datas = array($user,$pwd);
if (isset($_POST['domainid']))
array_push($datas,$area);
if ($mode)
array_push($datas,$mode);
$rows = $result->execute($datas);
if (!$rows) die(implode(" ", $pdo->errorInfo()));
$row = $result->fetch();
if ($row){
$_SESSION['APPID'] = $APPID;
$_SESSION['user_is_ADMIN'] = $row[0];
$_SESSION['user_id'] = $row[1];
$_SESSION['oauth_failure_count'] = 0;
$_SESSION['domainid'] = $area;
$log = $pdo->prepare("insert into login_log (`IP`,`name`,`pwd`,`APPID`,`url`,`result`,`host`) values(?,?,?,?,?,?,?)");
$log->execute(array(USERLOGIN_IP,$user,'***',$APPID,$url,1,$host));
return true;
}
$log = $pdo->prepare("insert into login_log (`IP`,`name`,`pwd`,`APPID`,`url`,`result`,`host`) values(?,?,?,?,?,?,?)");
$log->execute(array(USERLOGIN_IP,$user,$pwd,$APPID,$url,0,$host));
// file_put_contents(USERLOGIN_LOG, date("Y-m-d H:i:s")." ".USERLOGIN_IP." ".APPID." ".$url." $user $pwd $area $mode -- FAIL \n",FILE_APPEND);
$_SESSION['oauth_failure_count']++;
$_login_comment_str_ = "信息错误，请重新输入！";
return false;
}
}
function is_adm(){
if (isset($_SESSION['user_is_ADMIN']))
return $_SESSION['user_is_ADMIN'];
else
return false;
}
function change_gbk($a){
foreach ($a as $k=>$v){
$a[$k] = iconv('utf-8','gbk',$v);
}
return $a;
}
举报
请认真填写举报原因，尽可能描述详细。
请选择举报类型
误判申诉
此处可能存在不合适展示的内容，页面不予展示。您可通过相关编辑功能自查并修改。
如您确认内容无涉及 不当用语 / 纯广告导流 / 暴力 / 低俗色情 / 侵权 / 盗版 / 虚假 / 无价值内容或违法国家有关法律法规的内容，可点击提交进行申诉，我们将尽快为您处理。
马建仓 AI 助手
尝试更多
代码解读
代码找茬
代码优化