distribution/source/index/sign_put.php

<?php

// by 请勿倒卖,已申请软著,否则追究法律责任
namespace app\index;

use app\aliyunoss\Aliyunoss;
use app\qiniuoss\Qiniuoss;
class sign_put extends Base
{
	function initialize()
	{
		parent::initialize();
		error_reporting(0);
		header("Expires: Mon, 26 Jul 1997 05:00:00 GMT");
		header("Cache-Control: no-cache, must-revalidate");
		header("Pragma: no-cache");
		header("Content-type: text/html;charset=" . IN_CHARSET);
		header("Access-Control-Allow-Origin: " . (isset($_SERVER["HTTP_ORIGIN"]) ? $_SERVER["HTTP_ORIGIN"] : NULL));
		header("Access-Control-Allow-Credentials: true");
	}
	function index()
	{
		exit("Access denied");
	}
	function api()
	{
		$_var_0 = SafeRequest("status", "get");
		$_var_1 = SafeRequest("site", "get");
		$_var_2 = intval(SafeRequest("id", "get"));
		$_var_3 = db("sign")->where("in_site", $_var_1)->where("in_aid", $_var_2)->value("in_id");
		if ($_var_0 < 2) {
			$_var_4 = SafeRequest("ssl", "get");
			$_var_5 = SafeRequest("path", "get");
			$_var_6 = SafeRequest("ipa", "get");
			$_var_7 = SafeRequest("replace", "get");
			$_var_8 = SafeRequest("charset", "get");
			$_var_9 = SafeRequest("name", "get");
			$_var_10 = SafeRequest("cert", "get");
			$_var_11 = array("in_aid" => $_var_2, "in_aname" => @convert_utf8($_var_9, $_var_8), "in_replace" => $_var_7, "in_ssl" => $_var_4, "in_site" => $_var_1, "in_path" => $_var_5, "in_ipa" => $_var_6, "in_status" => 1, "in_cert" => $_var_10, "in_time" => time());
			if ($_var_3) {
				db("sign")->where(array("in_id" => $_var_3))->update($_var_11);
			} else {
				db("sign")->insert($_var_11);
			}
			echo "1";
		} else {
			if ($_var_3) {
				db("sign")->where(array("in_id" => $_var_3))->update(array("in_status" => 2, "in_time" => time()));
				echo "1";
			}
		}
	}
	function cert()
	{
		$_var_12 = NULL;
		$_var_13 = db("cert")->select();
		foreach ($_var_13 as $_var_14) {
			$_var_12 .= "<option value=\"" . $_var_14["in_dir"] . "\" id=\"cert_" . $_var_14["in_dir"] . "\">" . $_var_14["in_name"] . "</option>";
		}
		echo $_var_12 ? $_var_12 : "<option value=\"\">No business certificate</option>";
	}
	function oauth()
	{
		$_var_15 = SafeRequest("secret", "get");
		$_var_15 and $_var_15 == IN_SECRET or exit("Access denied");
		$_var_16 = is_ssl() ? "https://" : "http://";
		$_var_17 = $_var_16 . $_SERVER["HTTP_HOST"] . IN_PATH;
		$_var_18 = db("sign")->where("in_status=1 and in_time>0")->order("in_time desc")->select();
		foreach ($_var_18 as $_var_19) {
			db("sign")->where("in_id", $_var_19["in_id"])->update(array("in_time" => 0));
			$_var_20 = db("secret")->where("in_site", str_replace("www.", "", $_var_19["in_site"]))->value("in_md5");
			$_var_20 = $_var_20 ? $_var_20 : $_var_15;
			$_var_21 = "download.php?id=" . $_var_19["in_aid"] . "&ssl=" . $_var_19["in_ssl"] . "&site=" . $_var_19["in_site"] . "&path=" . $_var_19["in_path"] . "&ipa=" . $_var_19["in_ipa"] . "&cert=" . $_var_19["in_cert"] . "&replace=" . $_var_19["in_replace"] . "&pw=" . $_var_20 . "&api=" . $_var_17;
			echo "<tr><td><iframe width=\"100%\" height=\"50\" allowtransparency=\"true\" scrolling=\"no\" border=\"0\" frameborder=\"0\" src=\"" . $_var_21 . "\"></iframe></td></tr>";
		}
	}
	function state()
	{
		$_var_22 = intval(SafeRequest("id", "get"));
		$_var_23 = SafeRequest("step", "get");
		$_var_24 = intval(SafeRequest("percent", "get"));
		$_var_25 = SafeRequest("pw", "get");
		$_var_25 and $_var_25 == IN_SECRET or exit("Access denied");
		$_var_26 = db("appid")->where("in_id", $_var_22)->find();
		if (!$_var_26) {
			exit;
		}
		if (!db("signlog")->where(array("in_aid" => $_var_22))->count()) {
			db("signlog")->insert(array("in_aid" => $_var_22, "in_step" => $_var_23, "in_percent" => $_var_24));
		} else {
			db("signlog")->where(array("in_aid" => $_var_22))->update(array("in_step" => $_var_23, "in_percent" => $_var_24));
		}
	}
	function upload()
	{
		if (!empty($_FILES)) {
			$_var_27 = intval($_POST["id"]);
			$_var_28 = $_POST["pw"];
			$_var_28 and $_var_28 == IN_SECRET or exit("Access denied");
			$_var_29 = db("appid")->where("in_id", $_var_27)->find();
			$_var_30 = IN_ATTACHMENT_PATH . $_var_29["in_app"];
			$_var_31 = db("signlog")->where("in_aid", $_var_27)->value("in_cert");
			$_var_32 = $_FILES["ipa"]["tmp_name"];
			if (IN_REMOTE && (IN_MANDATORY_REMOTE || $_var_29["remote"])) {
				$_var_33 = IN_REMOTE == 1 ? new Qiniuoss() : new Aliyunoss();
				$_var_34 = $_var_33->upload($_var_29["in_app"], $_var_32);
			} else {
				$_var_34 = move_uploaded_file($_var_32, $_var_30);
			}
			db("signlog")->where(array("in_aid" => $_var_27))->update(array("in_status" => 2, "in_addtime" => date("Y-m-d H:i:s")));
			db("appid")->where(array("in_id" => $_var_27))->update(array("in_type" => 1, "in_team" => $_var_31, "in_updatetime" => time()));
			$_var_35 = $_var_29 = db("app")->where("in_appid", $_var_27)->order("in_id desc")->value("in_id");
			db("app")->where(array("in_id" => $_var_35))->update(array("in_type" => 1, "in_team" => $_var_31, "in_desc" => "在线企业签名", "in_addtime" => time()));
			echo "[" . $_var_27 . "]" . $_SERVER["HTTP_HOST"];
		}
	}
}