PHP+MYSQL自用文件分享系统V1.0

<?php include "./inc/conn.php"; foreach ($pubs as $ti=>$val) $$ti = $val; //调用 $pagesize=10; $maxp = 20; $title = "无名查询系统后台管理"; $b = array(); $b[$dbbiao]["name"]= "查询列表"; $b[$dbbiao]["id"] = "id"; //ID唯一自增字段 $b[$dbbiao]["duan"]= "filedoma,filename,filesize,filepath,fileipip,chacheck,timeupup"; $b[$dbbiao]["bgai"]= "filedoma,filemimi,filesize,filepath,fileipip,timeupup"; //不改 $b[$dbbiao]["sox"] = "filedoma,filename"; $biao = (isset($_GET['biao']))?addslashes($_GET['biao']):$dbbiao; $acts = (isset($_GET['Act']))?addslashes($_GET['Act']):""; if($acts != ""){ $idas = $b[$dbbiao]["id"]; $bgai = $b[$dbbiao]["bgai"]; $biao = (isset($_POST['biao']))?addslashes($_POST['biao']):$dbbiao; $search = (isset($_POST["rame"]))?addslashes($_POST["rame"]):''; $sort = (isset($_POST['sort']))?addslashes($_POST['sort']):$idas; $order = (isset($_POST['orda']))?addslashes($_POST['orda']):"desc"; $duan = (isset($_POST['duan']))?addslashes($_POST['duan']):"All"; $ider = (isset($_POST['id']))?addslashes($_POST['id']):""; if(!stristr("--","-$acts-")){ //不需要密码操作判断 $pasword = (isset($_COOKIE["limi"]))?addslashes($_COOKIE["limi"]):''; if("^$search^" == "^$pasx^"){ setcookie('limi',md5("^$domas@$pasx@$domas^"),time()+60*60*24*1,"/"); exit("鉴权成功:可以继续输入查询了!"); }elseif(md5("^$domas@$pasx@$domas^") != $pasword){ exit("请先登录(搜索框输入密码后搜索)!"); }elseif("^$search^" == "^logout^"){ setcookie('limi',md5("^$domas@$ttam@$domas^"),-time()+60*60*24*1,"/"); exit("退出成功!"); }elseif("^$search^" == "^^"){ //exit("请输入关键词!"); }else{ } } switch ($acts) { case "more": //详情 if(!is_numeric($ider)) exit("ID无效"); $conn = cenn(); $infe=""; $jjj=0; $sqlc = "select * from `{$biao}` Where `$idas`={$ider} LIMIT 1"; $resu = mysqli_query($conn, $sqlc); while($info = mysqli_fetch_assoc($resu)){ $infe = $info;} if($infe=="") exit("读取ID{$id}信息失败"); echo "<!--tips--><table cellspacing=\"0\" class=\"taba\">"; $jjj=0; foreach($infe as $ti=>$zi){ $mu = $ti; $jjj++; $ii = $infe[$idas]; $ix = $infe[$idas]."_".$jjj; echo "<tr><td>$mu</td><td>{$tp[$mu]}</td><td align=\"left\" id=\"a{$ix}_2\">$zi</td><td>"; if(!stristr(",$idas,$bgai,",",{$ti},")){ echo "<a href='#' onclick='adit(\"{$ix}\")' id=\"a{$ix}_5\"><b>修改</b></a>"; } echo "</td><td id=\"add{$ix}\" style=\"display:none;\">\r\n"; if(!stristr(",$idas,$bgai,",",{$ti},")){ echo "<table cellspacing=\"0\" class=\"table\"> \r\n"; echo "<tr><td class=\"r\" id=\"a{$ix}_3\">输入{$mu}</td>"; echo "<td class=\"l tttt\" id=\"a{$ix}_4\"><input name=\"nval\" type=\"text\" class=\"txtr\" id=\"nval{$ix}\" value=\"{$zi}\" placeholder=\"请输入{$mu}\" />"; echo "<input name=\"oval\" id=\"oval{$ix}\" type=\"hidden\" value=\"{$zi}\" />"; echo "<input name=\"duan\" id=\"duan{$ix}\" type=\"hidden\" value=\"{$ti}\" />"; echo "<input name=\"idid\" id=\"idid{$ix}\" type=\"hidden\" value=\"{$ii}\" />"; echo "<input name=\"S\" type=\"submit\" value=\"提交\" onclick=\"duan('dgai','$ix')\"></td>"; echo "</tr></table>\r\n"; } echo "</td></tr>\r\n"; $ix++; } echo "</table>"; break; case "dgai": //修改内容 $po = $_POST; foreach($po as $ti=>$val){ if(stristr("@$ti","@idid")) $idid = addslashes($val); //id if(stristr("@$ti","@duan")) $duan = addslashes($val); //字段 if(stristr("@$ti","@oval")) $oval = addslashes($val); //旧内容 if(stristr("@$ti","@nval")) $nval = addslashes($val); //新内容内容 } if($oval == $nval){exit("未修改，两次值未变化! ");} if(stristr(",$idas,$bgai,",",{$duan},")){ exit("该字段不可修改!");} $sqlc = "UPDATE `$biao` SET `$duan`='{$nval}' WHERE `$idas`={$idid}"; $conn = cenn(); $resu = mysqli_query($conn, $sqlc); if (!$resu){ echo "更新失败：".mysqli_error($conn); }else{ echo "更新字段{$duan}成功!"; } break; case "down": webdown($file,$mima="88888888"); break; case "sare": //分享 if(!is_numeric($ider)) exit("ID无效"); $conn = cenn(); $infe=""; $jjj=0; $sqlc = "select * from `{$biao}` Where `$idas`={$ider} LIMIT 1"; $resu = mysqli_query($conn, $sqlc); while($info = mysqli_fetch_assoc($resu)){ $infe = $info;} if($infe=="") exit("读取{$idas}:{$id}信息失败"); echo "<h3>分享内容(未伪静态)</h3>"; echo "<textarea>下载网址:{$ihosts}?cx={$infe["filedoma"]}\r\n提取文件名:{$infe["filedoma"]}\r\n提取密码:{$infe["filemama"]}</textarea>"; echo "<h3>分享内容(已伪静态)</h3>"; echo "<textarea>下载网址:{$ihosts}{$infe["filedoma"]}\r\n提取文件名:{$infe["filedoma"]}\r\n提取密码:{$infe["filemama"]}</textarea>"; echo "<h3>伪静态设置(Nginx)</h3>"; echo "<textarea>$iwei</textarea>"; break; case "dels": //删除+删文件 if(!is_numeric($ider)) exit("ID无效"); $conn = cenn(); $infe=""; $jjj=0; $sqlc = "select * from `{$biao}` Where `$idas`={$ider} LIMIT 1"; $resu = mysqli_query($conn, $sqlc); while($info = mysqli_fetch_assoc($resu)){ $infe = $info;} if($infe=="") exit("删除失败：ID{$id}信息不存在!"); if(file_exists($info["filepath"])){ @unlink($info["filepath"]); echo "@"; } $sqlc = "DELETE FROM `{$biao}` WHERE `$idas`={$ider}"; $resu = mysqli_query($conn, $sqlc); if (!$resu){ echo "删除出错：".mysqli_error($conn); }else{ echo "单删{$ider}成功!"; } break; case "ztai": //修改状态 $idesc = "修改{$ider}状态"; webtable("$idesc"); break; case "cha": $iduan = $b[$biao]["duan"]; $sox = $b[$biao]["sox"]; $duanx=explode(",", $iduan); $duans = "`$idas`, `".join("`,`",$duanx)."`"; $soxs=explode(",", $sox); if (!stristr("-desc-asc-","-$order-")) $order = "DESC"; if (!stristr(",$iduan,","-$sort-")) $sort=$soxs[0]; $conn = cenn(); $sql = "SELECT $duans FROM `{$biao}` "; $tips = "字段[{$duan}]"; $sqlw = "WHERE `{$duan}` LIKE '%$search%' "; $sql .= "$sqlw ORDER BY $sort $order "; $sqc = "SELECT COUNT(*) AS count FROM {$biao} $sqlw "; $result = $conn->query($sqc); $row = $result->fetch_assoc(); $count = $row["count"]; if($count<1) exit("查 表[$biao] => $tips => 关键词[$search]无结果"); $pagecount = ceil($count / $pagesize); $page = 1; if (isset($_POST["page"])) { $page = $_POST["page"];} if ($page < 1) { $page = 1;} if ($page > $maxp) { exit("[Most <b>$maxp</b> Page]");} if ($page > $pagecount) { $page = $pagecount;} if ($pagecount > $maxp) { $pagecount = $maxp;} $start = ($page - 1) * $pagesize; $end = $start + $pagesize; $sql .= " LIMIT $start, $pagesize"; $result = $conn->query($sql); if (!$result) exit("连接失败信息:".mysqli_error($conn)); echo "<table cellspacing=\"0\">"; $guanli = ""; foreach ($result as $i=>$row) { $liid = $row[$idas]; //得有ID字段 echo "\r\n<!--".$row["filepath"]."-->\r\n"; $row["guanli"] = "<a href='#' onclick=\"more($liid,'more');\">改</a>&nbsp;"; $row["guanli"] .= "<a href='#' onclick=\"more($liid,'dels');\">删</a>&nbsp;"; $row["guanli"] .= "<a href='#' onclick=\"more($liid,'sare');\">下</a>"; //$row["chacheck"] .= "&nbsp;<a href='#' onclick=\"more($liid,'ztai');\">改</a>"; if(file_exists($row["filepath"])){$row["filepath"]="OK"; }else{$row["filepath"]="不存在";} if(!$isti){ echo "<tr class='tt'>\r\n<th>".join("</th>\r\n<th>",array_keys($row))."</th>\r\n</tr>\r\n"; $isti="Y"; } echo "<tr>\r\n<td>".join("</td>\r\n<td>",$row)."</td>\r\n</tr>\r\n"; } echo "</table>"; echo "<p>结果 $count, 页数 $pagecount \r\n &nbsp;&nbsp;&nbsp;&nbsp;"; if ($page > 1) { echo "<a href='#' onclick=\"show(1,'');\">首页</a> ";} for ($i = 1; $i <= $pagecount; $i++) { if($i == $page){ echo "$i ";}else{ echo "<a href='#' onclick=\"show($i,'');\">$i</a> ";} } if ($page < $pagecount) { echo "<a href='#' onclick=\"show($pagecount,'');\">尾页</a> ";} if($count> $maxp*$pagesize) echo "结果{$count}较多:推荐优化输入!"; echo "</p>"; $conn->close(); break; default: echo "[{$acts}]你想干嘛呢?"; } exit(); } ?> <!DOCTYPE html> <html> <head> <meta charset="UTF-8"> <title><?php echo $title; ?></title> <meta name="viewport" content="width=device-width,minimum-scale=1