Nteam官网程序全解版移除后门授权.zip

<?php $notLogin = true; include('../Common/Core_brain.php'); $act=isset($_GET['act'])?daddslashes($_GET['act']):null; @header('Content-Type: application/json; charset=UTF-8'); switch($act){ case 'login': $adminUser = addslashes($_POST['adminUser']); $adminPwd = md5($_POST['adminPwd']); if (conf('Vaptcha_Open') == 1) { $token = $_POST['token']; } if ($adminUser=='' || $adminPwd=='') { exit('{"code":0,"msg":"请确保每项都不为空"}'); } if (conf('Vaptcha_Open') == 1 && $token=='') { exit('{"code":0,"msg":"请先完成人机验证"}'); }else{ $adminData = $Admin->getAdmin($adminUser); if(empty($adminData))exit('{"code":0,"msg":"管理员不存在"}'); if($adminPwd != $adminData['adminPwd'])exit('{"code":0,"msg":"密码错误"}'); $Admin->loginAdmin($adminUser); $_SESSION['adminUser'] = $adminUser; $_SESSION['adminQq'] = $adminData['adminQq']; $ip = $Gets->ip(); $city = $Gets->get_city($ip); $DB->query("insert into `nteam_log` (`adminUser`,`type`,`data`,`ip`,`city`) values ('" . $_SESSION['adminUser'] . "','登录后台中心', NOW(), '".$ip."', '".$city."')"); exit('{"code":1,"msg":"登录成功，请稍后..."}'); } break; case 'admininfo': if(!$isLogin)exit('{"code":0,"msg":"未登录"}'); $id = $adminData['id']; if (conf('Vaptcha_Open') == 1) { $token = $_POST['token']; } $adminUser = $adminData['adminUser']; $adminQq = addslashes($_POST['adminQq']); if (conf('Vaptcha_Open') == 1 && $token=='') { exit('{"code":0,"msg":"请先完成人机验证"}'); }else{ $adminData = $Admin->getAdmin($adminUser); $AdminData = $Admin->getAdminName($adminUser); if ($adminQq == $adminData['adminQq']) { exit('{"code":0,"msg":"未修改数据，无需保存！"}'); } $sql = "UPDATE `nteam_admin` SET `adminUser` = '$adminUser',`adminQq` = '$adminQq' WHERE `id` = '$id'"; if(!empty($_POST['adminPwd'])){ $adminPwd = md5($_POST['adminPwd']); if($adminPwd == $adminData['adminPwd'])exit('{"code":0,"msg":"与原密码相同！"}'); $sql = "UPDATE `nteam_admin` SET `adminPwd` = '$adminPwd',`adminUser` = '$adminUser',`adminQq` = '$adminQq' WHERE `id` = '$id'"; } $admininfo = $DB->exec($sql); if(!$admininfo)exit('{"code":0,"msg":"修改失败，未知错误。"}'); if(!empty($_POST['adminPwd'])){$DB->query("insert into `nteam_log` (`adminUser`,`type`,`data`,`ip`,`city`) values ('" . $_SESSION['adminUser'] . "','修改账号信息', NOW(), '".$ip."', '".$city."')");unset($_SESSION['adminUser']);} $DB->query("insert into `nteam_log` (`adminUser`,`type`,`data`,`ip`,`city`) values ('" . $_SESSION['adminUser'] . "','修改账号信息', NOW(), '".$ip."', '".$city."')"); if(!empty($_POST['adminPwd'])){ exit('{"code":2,"msg":"修改成功"}'); }else{ exit('{"code":1,"msg":"修改成功"}'); } } break; case 'setProject': $type=addslashes($_GET['type']); $id=intval($_GET['id']); $status=intval($_GET['status']); $num=intval($_GET['num']); if ($type == 'Status') { $sql = "UPDATE nteam_project_list SET status='$status' WHERE id='$id'"; $DB->query("insert into `nteam_log` (`adminUser`,`type`,`data`,`ip`,`city`) values ('" . $_SESSION['adminUser'] . "','修改了项目ID为".$id."的网站状态', NOW(), '".$ip."', '".$city."')"); if($DB->exec($sql)!==false)exit('{"code":0,"msg":"修改网站状态成功！"}'); else exit('{"code":-1,"msg":"修改网站状态失败['.$DB->error().']"}'); }elseif ($type == 'Show') { $sql = "UPDATE nteam_project_list SET is_show='$num' WHERE id='$id'"; $DB->query("insert into `nteam_log` (`adminUser`,`type`,`data`,`ip`,`city`) values ('" . $_SESSION['adminUser'] . "','修改了项目ID为".$id."的显示状态', NOW(), '".$ip."', '".$city."')"); if($DB->exec($sql)!==false)exit('{"code":0,"msg":"修改成功！"}'); else exit('{"code":-1,"msg":"修改网站状态失败['.$DB->error().']"}'); }elseif ($type == 'Audit_status') { $sql = "UPDATE nteam_project_list SET Audit_status='$status' WHERE id='$id'"; $DB->query("insert into `nteam_log` (`adminUser`,`type`,`data`,`ip`,`city`) values ('" . $_SESSION['adminUser'] . "','修改了项目ID为".$id."的审核状态', NOW(), '".$ip."', '".$city."')"); if($DB->exec($sql)!==false)exit('{"code":0,"msg":"修改审核状态成功！"}'); else exit('{"code":-1,"msg":"修改网站状态失败['.$DB->error().']"}'); }elseif ($type == 'Del') { $id=intval($_POST['id']); $rows=$DB->getRow("select * from nteam_project_list where id='$id' limit 1"); if(!$rows)exit('{"code":-1,"msg":"项目不存在"}'); $sql="DELETE FROM nteam_project_list WHERE id='$id'"; if(!$DB->exec($sql)){exit('{"code":-1,"msg":"删除项目失败！"}');}else{ $DB->query("insert into `nteam_log` (`adminUser`,`type`,`data`,`ip`,`city`) values ('" . $_SESSION['adminUser'] . "','删除了ID为".$id."的项目', NOW(), '".$ip."', '".$city."')"); exit('{"code":0,"msg":"删除项目成功！"}');} }elseif ($type == 'Add') { $name=$_POST['name']; $url=$_POST['url']; $img=$_POST['img']; $sketch=$_POST['sketch']; $descriptison=$_POST['descriptison']; $type=$_POST['type']; $is_show=$_POST['is_show']; $Audit_status=$_POST['Audit_status']; $status=$_POST['status']; if($adminData['adminRank']==2){ if ($name==NULL || $url==NULL || $img==NULL || $sketch==NULL || $descriptison==NULL || $type==NULL || $is_show==NULL || $status==NULL) { exit('{"code":-1,"msg":"保存错误,请确保每项都不为空!"}'); } $sds=$DB->exec("INSERT INTO `nteam_project_list` (`name`, `url`, `img`, `sketch`, `descriptison`, `type`, `intime`, `status`, `Audit_status`, `is_show`) VALUES ('{$name}', '{$url}', '{$img}', '{$sketch}', '{$descriptison}', '{$type}', '{$date}', '{$status}', '0', '{$is_show}')"); $id=$DB->lastInsertId(); if($sds){ $DB->query("insert into `nteam_log` (`adminUser`,`type`,`data`,`ip`,`city`) values ('" . $_SESSION['adminUser'] . "','申请了名为".$name."的项目', NOW(), '".$ip."', '".$city."')"); exit('{"code":0,"msg":"添加项目成功！"}'); }else{ exit('{"code":-1,"msg":"添加项目失败！"}'); } }elseif ($adminData['adminRank']==1) { if ($name==NULL || $url==NULL || $img==NULL || $sketch==NULL || $descriptison==NULL || $type==NULL || $is_show==NULL || $Audit_status==NULL || $status==NULL) { exit('{"code":-1,"msg":"保存错误,请确保每项都不为空!"}'); } $sds=$DB->exec("INSERT INTO `nteam_project_list` (`name`, `url`, `img`, `sketch`, `descriptison`, `type`, `intime`, `status`, `Audit_status`, `is_show`) VALUES ('{$name}', '{$url}', '{$img}', '{$sketch}', '{$descriptison}', '{$type}', '{$date}', '{$status}', '{$Audit_status}', '{$is_show}')"); $id=$DB->lastInsertId(); if($sds){