userlogined || exit("-1"); $_var_0 = SafeRequest("name", "post"); $_var_1 = SafeRequest("chunk", "post"); $_var_2 = SafeRequest("chunks", "post"); if (!empty($_FILES)) { $_var_3 = pathinfo($_var_0 ?: $_FILES["file"]["name"]); if (in_array(strtolower($_var_3["extension"]), array("apk", "ipa", "mobileconfig"))) { creatdir(IN_TMP_PATH); $_var_0 = $_var_0 ?: md5($this->userid . "-" . time() . $_var_3["extension"]) . "." . $_var_3["extension"]; $_var_4 = IN_TMP_PATH . $_var_0; if ($_var_2) { if ($_var_1 != $_var_2) { $_var_5 = file_get_contents($_FILES["file"]["tmp_name"]); file_put_contents($_var_4, $_var_5, FILE_APPEND); } if ($_var_1 == 0) { file_put_contents("/tmp/" . $_var_0 . ".json", "[\n" . json_encode($_FILES["file"]), FILE_APPEND); } else { file_put_contents("/tmp/" . $_var_0 . ".json", ",\n" . json_encode($_FILES["file"]), FILE_APPEND); if ($_var_1 + 1 == $_var_2) { file_put_contents("/tmp/" . $_var_0 . ".json", "\n]", FILE_APPEND); $_var_6 = file_get_contents("/tmp/" . $_var_0 . ".json"); $_var_6 = json_decode($_var_6, true); foreach ($_var_6 as $_var_7) { @unlink($_var_7["tmp_name"]); } } } } else { @move_uploaded_file($_FILES["file"]["tmp_name"], $_var_4); } exit("{\"key\":\"" . $_var_0 . "\"}"); } } exit("{\"key\":\"\"}"); } function avatar() { if (!empty($_FILES)) { $_var_8 = pathinfo($_FILES["avatar"]["name"]); if (in_array(strtolower($_var_8["extension"]), array("jpg", "jpeg", "gif", "png"))) { $_var_9 = $_POST["type"]; $_var_10 = SafeSql($_POST["upw"]); $_var_11 = intval($_POST["uid"]); if (!db("user")->where("in_userid", $_var_11)->where("in_userpassword", $_var_10)->count()) { exit("-2"); } if ($_var_9 == "avatar") { $_var_12 = IN_ATTACHMENT_PATH . "avatar/" . $_var_11; @move_uploaded_file($_FILES["avatar"]["tmp_name"], $_var_12 . ".jpg"); } else { if (in_array($_var_9, array("prev", "after", "hand"))) { $_var_13 = IN_TMP_PATH; if (!is_dir($_var_13)) { @mkdir($_var_13, 0777, true); } @move_uploaded_file($_FILES["avatar"]["tmp_name"], $_var_13 . $_var_11 . "-" . $_var_9 . ".jpg"); } } echo "1"; } else { echo "-1"; } } } function mobileconfig() { $this->userlogined || reJSON(-1); $_var_14 = SafeRequest("apkName", "post"); $_var_15 = SafeRequest("downLink", "post"); $_var_16 = SafeRequest("remote", "post"); if ($_var_15) { $_var_17 = $this->user["in_userid"] . "-" . time(); } else { $_var_17 = SafeRequest("time", "post"); } preg_match("/^(\\d+\\-\\d+)\$/", $_var_17) || reJSON(-2); $_var_18 = IN_TMP_PATH . $_var_14; if ($_var_16 && $_var_15) { $_var_19 = getremoteurl($_var_14, $_var_16); @saveRemoteFile($_var_19, IN_TMP_PATH, $_var_14); } is_file($_var_18) || reJSON(-2); $_var_20 = intval(filesize($_var_18)); $_var_21 = explode("-", $_var_17); $_var_22 = md5($_var_21[0] . "-" . $_var_21[1] . "-" . rand(2, pow(2, 24))) . ".png"; is_file(IN_ATTACHMENT_PATH . $_var_14) && reJSON(-2); IN_VERIFY > 0 && $this->user["in_verify"] != 1 && reJSON(-3); $_var_20 + $this->user["in_spaceuse"] > get_user_in_spacetotal($this->user) && reJSON(-4); $_var_23 = file_get_contents($_var_18); $_var_24 = IN_ATTACHMENT_PATH . $_var_14; rename($_var_18, $_var_24); $_var_25 = preg_match_all("/PayloadIdentifier<\\/key>([\\s\\S]+?)([\\s\\S]+?)<\\/string>/", $_var_23, $_var_26) ? SafeSql(isset($_var_26[2][1]) ? $_var_26[2][1] : $_var_26[2][0]) : "*"; $_var_27 = preg_match("/Label<\\/key>([\\s\\S]+?)([\\s\\S]+?)<\\/string>/", $_var_23, $_var_26) ? SafeSql(detect_encoding($_var_26[2])) : NULL; if (!$_var_27) { $_var_27 = preg_match("/PayloadDisplayName<\\/key>([\\s\\S]+?)([\\s\\S]+?)<\\/string>/", $_var_23, $_var_26) ? SafeSql(detect_encoding($_var_26[2])) : "*"; } $_var_28 = preg_match("/Icon<\\/key>([\\s\\S]+?)([\\s\\S]+?)<\\/data>/", $_var_23, $_var_26) ? $_var_26[2] : NULL; $_var_29 = IN_IMAGES_PATH . "app"; $_var_30 = date("Y") . "/" . date("m") . "/" . date("d"); creatdir($_var_29 . "/" . $_var_30); $_var_31 = $_var_29 . "/" . $_var_30 . "/" . $_var_22; file_put_contents($_var_31, base64_decode($_var_28)); $_var_28 = $_var_30 . "/" . $_var_22; $_var_32 = getDeduct($_var_20); $_var_33 = $_var_14; $_var_34 = "8.0"; $_var_35 = "1.0.0"; $_var_36 = "1"; $_var_37 = $_var_38 = "*"; $_var_39 = 1; $_var_40 = ""; $_var_41 = "iOS"; $_var_42 = array("in_name" => $_var_27, "in_type" => $_var_39, "in_size" => $_var_20, "in_form" => $_var_41, "in_mnvs" => $_var_34, "in_bid" => $_var_25, "in_bsvs" => $_var_35, "in_bvs" => $_var_36, "in_nick" => $_var_37, "in_team" => $_var_38, "in_udids" => $_var_40, "in_icon" => $_var_28, "in_deduct" => $_var_32, "in_app" => $_var_14, "in_originalName" => $_var_33, "in_updatetime" => time(), "in_applock" => check_diswords($_var_27) ? -1 : 0, "remote" => $_var_16); $_var_43 = db("appid")->where("in_uid", $this->user["in_userid"])->where("in_form", $_var_41)->where("in_bid", $_var_25)->where("in_name", $_var_27)->find(); if ($_var_43) { $_var_44 = $_var_43["in_id"]; @unlink(IN_IMAGES_PATH . "app/" . $_var_43["in_icon"]); db("appid")->where("in_id", $_var_44)->update($_var_42); db("app")->where(array("in_appid" => $_var_44))->update(array("in_release" => 0)); } else { $_var_42 = array_merge($_var_42, array("in_uid" => $this->user["in_userid"], "in_uname" => $this->user["in_username"], "in_downloads" => "0", "in_link" => creatLink(), "in_addtime" => time())); $_var_44 = db("appid")->insertGetId($_var_42); } $_var_45 = db("appid")->where("in_id", $_var_44)->find(); $_var_45["in_appid"] = $_var_45["in_id"]; unset($_var_45["in_id"]); $_var_45["in_addtime"] = time(); db("app")->strict(false)->insert($_var_45); db("user")->where("in_userid", $this->user["in_userid"])->inc("in_spaceuse", $_var_20)->update(); reJSON(array("id" => bees_encrypt($_var_44)), 1); } function upicon() { $_var_46 = intval($_POST["aid"]); $_var_47 = intval($_POST["uid"]); $_var_48 = SafeSql($_POST["upw"]); $_var_49 = db("app")->where("in_id", $_var_46)->find(); $_var_49 || exit("-1"); $_var_50 = db("user")->where("in_userid", $_var_47)->where("in_userpassword", $_var_48)->value("in_userid"); $_var_49["in_uid"] == $_var_50 || exit("-2"); if (!empty($_FILES)) { $_var_51 = stristr($_var_49["in_icon"], "/") ? substr(strrchr($_var_49["in_icon"], "/"), 1) : $_var_49["in_icon"]; $_var_52 = pathinfo($_FILES["icon"]["name"]); if (in_array(strtolower($_var_52["extension"]), array("jpg", "jpeg", "gif", "png"))) { $_var_53 = IN_ATTACHMENT_PATH . $_var_51; @move_uploaded_file($_FILES["icon"]["tmp_name"], $_var_53); db("app")->where("in_id", $_var_46)->update(array("in_icon" => $_var_51)); echo "1"; } else { echo "-3"; } } } function uplog() { $this->userlogined || exit("-1"); Chk_authkey(); $_var_54 = SafeRequest("time", "post"); if (!empty($_FILES)) { $_var_55 = $_FILES["app"]["name"]; $_var_56 = pathinfo($_var_55); $_var_57 = strtolower($_var_56["extension"]); if (in_array($_var_57, array("ipa", "apk", "mobileconfig"))) { preg_match("/^(\\d+\\-\\d+)\$/", $_var_54) || exit("-1"); $_var_58 = IN_TMP_PATH . $_var_54 . "/"; if (!is_dir($_var_58)) { @mkdir($_var_58, 0777, true); } $_var_59 = $_var_58 . "app." . $_var_57; @move_uploaded_file($_FILES["app"]["tmp_name"], $_var_59); echo "{'extension':'" . $_var_57 . "','time':'" . $_var_54 . "','filename':'" . $_var_55 . "'}"; } else { echo "-1"; } } } function kindeditor() { if (!empty($_FILES)) { $_var_60 = pathinfo($_FILES["imgFile"]["name"]); if (in_array(strtolower($_var_60["extension"]), array("jpg", "jpeg", "gif", "png"))) { $_var_61 = SafeRequest("dir", "get"); $_var_62 = "data/attachment/" . $_var_61 . "/" . date("Y-m-d") . "/"; $_var_63 = uniqid() . $_FILES["imgFile"]["name"]; creatdir(IN_ROOT . $_var_62); @move_uploaded_file($_FILES["imgFile"]["tmp_name"], IN_ROOT . $_var_62 . $_var_63); exit(json_encode(array("error" => 0, "url" => $_var_62 . $_var_63))); } else { echo "-1"; } } } function saveinfo() { $this->userlogined || reJSON("请重新登录!", 404); Chk_authkey(); $_var_64 = SafeRequest("apkName", "post"); $_var_65 = SafeRequest("originalName", "post"); $_var_66 = SafeRequest("icon", "post"); $_var_67 = SafeRequest("ext", "post"); $_var_68 = SafeRequest("appName", "post"); $_var_69 = SafeRequest("version", "post"); $_var_70 = SafeRequest("packageName", "post"); $_var_71 = SafeRequest("versionCode", "post"); $_var_72 = SafeRequest("downLink", "post"); $_var_73 = SafeRequest("fileSize", "post"); $_var_74 = SafeRequest("minSdkVersion", "post"); $_var_75 = SafeRequest("remote", "post") ?: 0; $_var_76 = bees_decrypt(SafeRequest("iLocalId", "post")); $_var_77 = $_var_67 == "apk" ? "Android" : "iOS"; $_var_78 = SafeRequest("in_sign_type"); $_var_79 = SafeRequest("api_aid"); $_var_80 = ""; $_var_81 = ""; if (preg_match("/^(data:\\s*image\\/(\\w+);base64,)/", $_var_66, $_var_82)) { $_var_83 = str_replace($_var_82[1], "", $_var_66); $_var_83 = base64_decode($_var_83); $_var_84 = $_var_82[2]; if (in_array(strtolower($_var_84), array("pjpeg", "jpeg", "jpg", "gif", "bmp", "png"))) { $_var_80 = md5($this->user["in_userid"] . "-" . time() . "-" . rand(2, pow(2, 24))) . ".png"; $_var_85 = IN_IMAGES_PATH . "app"; $_var_86 = date("Y") . "/" . date("m") . "/" . date("d"); creatdir($_var_85 . "/" . $_var_86); $_var_87 = $_var_85 . "/" . $_var_86 . "/" . $_var_80; $_var_81 = $_var_86 . "/" . $_var_80; file_put_contents($_var_87, $_var_83); } } if ($_var_67 == "ipa") { $_var_88 = @implode(",", SafeRequest("teamId", "post")); $_var_89 = SafeRequest("teamName", "post"); $_var_90 = SafeRequest("teamType", "post"); $_var_91 = @implode(",", SafeRequest("udids", "post")); } else { $_var_88 = $_var_89 = $_var_91 = ""; $_var_90 = 0; } IN_VERIFY > 0 && $this->user["in_verify"] != 1 && reJSON("你需要先进行实名认证!", 404); $_var_73 + $this->user["in_spaceuse"] > get_user_in_spacetotal($this->user) && reJSON("应用空间容量不足,请开通或升级会员!", 404); $_var_92 = getDeduct($_var_73, $_var_75); if ($_var_76) { db("appid")->where("in_id", $_var_76)->value("in_uid") == $this->user["in_userid"] || reJSON("您不能更新别人的应用!", 404); db("appid")->where("in_id", $_var_76)->value("in_bid") == $_var_70 && db("appid")->where("in_id", $_var_76)->value("in_name") == $_var_68 || reJSON("不是同一个应用无法更新!", 404); } if ($_var_76) { $_var_93 = db("appid")->where("in_id", $_var_76)->find(); @unlink(IN_IMAGES_PATH . "app/" . $_var_93["in_icon"]); db("appid")->where("in_id", $_var_76)->update(array("in_name" => $_var_68, "in_icon" => $_var_81, "in_form" => $_var_77, "in_bid" => $_var_70, "in_mnvs" => $_var_74 ?: "8.0", "in_bsvs" => $_var_69 ?: "1.0", "in_bvs" => $_var_71 ?: "1", "in_deduct" => $_var_92, "in_type" => $_var_90, "in_team" => $_var_89, "in_app" => $_var_64, "in_originalName" => $_var_65, "in_sign_type" => $_var_78, "in_size" => $_var_73, "in_updatetime" => time(), "remote" => $_var_75, "in_applock" => check_diswords($_var_68) ? -1 : 0)); db("app")->where("in_appid", $_var_76)->update(array("in_release" => 0)); } else { $_var_94 = creatLink($_var_76); $_var_76 = db("appid")->insertGetId(array("in_uid" => $this->user["in_userid"], "in_uname" => $this->user["in_username"], "in_name" => $_var_68, "in_icon" => $_var_81, "in_form" => $_var_77, "in_bid" => $_var_70, "in_mnvs" => $_var_74 ?: "8.0", "in_bsvs" => $_var_69 ?: "1.0", "in_bvs" => $_var_71 ?: "1", "in_type" => $_var_90, "in_nick" => $_var_88, "in_team" => $_var_89, "in_udids" => $_var_91, "in_app" => $_var_64, "in_originalName" => $_var_65, "in_sign_type" => $_var_78, "in_downloads" => 0, "in_deduct" => $_var_92, "in_size" => $_var_73, "in_link" => $_var_94, "in_addtime" => time(), "in_updatetime" => time(), "remote" => $_var_75, "in_applock" => check_diswords($_var_68) ? -1 : 0)); if (!$_var_76) { reJSON("上传文件失败,请稍后重试", 404); } } db("app")->strict(false)->insert(array("in_uid" => $this->user["in_userid"], "in_uname" => $this->user["in_username"], "in_name" => $_var_68, "in_appid" => $_var_76, "in_form" => $_var_77, "in_bid" => $_var_70, "in_mnvs" => $_var_74 ?: "8.0", "in_bsvs" => $_var_69 ?: "1.0", "in_bvs" => $_var_71 ?: "1", "in_type" => $_var_90, "in_nick" => $_var_88, "in_team" => $_var_89, "in_udids" => $_var_91, "in_app" => $_var_64, "in_originalName" => $_var_65, "in_sign_type" => $_var_78, "in_deduct" => $_var_92, "in_size" => $_var_73, "in_addtime" => time(), "remote" => $_var_75, "in_applock" => check_diswords($_var_68) ? -1 : 0)); db("user")->where("in_userid", $this->user["in_userid"])->inc("in_spaceuse", $_var_73)->update(); if (!$_var_75) { @rename(IN_TMP_PATH . $_var_64, IN_ATTACHMENT_PATH . $_var_64); } if ($_var_79) { $_var_95 = db("sign")->where("in_aid", $_var_76); if ($_var_95->count()) { $_var_95->update(array("api_aid" => $_var_79)); } else { db("sign")->insert(array("in_aid" => $_var_76, "api_aid" => $_var_79, "in_aname" => $_var_68, "in_uid" => $this->user["in_userid"])); } } //默认开启 /* $_var_17 = db("appid")->where("in_id", $_var_76)->update(["in_super" => 1]); if ($_var_17) { $_var_18 = db("appid")->where("in_id", $_var_76)->find(); $_var_19 = IN_ATTACHMENT_PATH . $_var_18["in_app"]; if (!is_file($_var_19)) { $_var_17 = saveRemoteFile(getapp($_var_76, 1), IN_ATTACHMENT_PATH, $_var_18["in_app"]); } }*/ // var_dump($_var_76);die; reJSON(array("id" => bees_encrypt($_var_76)), 1); } }