distribution/source/pack/upload/index.php

<?php


namespace app\upload;

use app\index\Base;
class index extends Base
{
	function index()
	{
		$this->userlogined || exit("-1");
		$_var_0 = SafeRequest("name", "post");
		$_var_1 = SafeRequest("chunk", "post");
		$_var_2 = SafeRequest("chunks", "post");
		if (!empty($_FILES)) {
			$_var_3 = pathinfo($_var_0 ?: $_FILES["file"]["name"]);
			if (in_array(strtolower($_var_3["extension"]), array("apk", "ipa", "mobileconfig"))) {
				creatdir(IN_TMP_PATH);
				$_var_0 = $_var_0 ?: md5($this->userid . "-" . time() . $_var_3["extension"]) . "." . $_var_3["extension"];
				$_var_4 = IN_TMP_PATH . $_var_0;
				if ($_var_2) {
					if ($_var_1 != $_var_2) {
						$_var_5 = file_get_contents($_FILES["file"]["tmp_name"]);
						file_put_contents($_var_4, $_var_5, FILE_APPEND);
					}
					if ($_var_1 == 0) {
						file_put_contents("/tmp/" . $_var_0 . ".json", "[\n" . json_encode($_FILES["file"]), FILE_APPEND);
					} else {
						file_put_contents("/tmp/" . $_var_0 . ".json", ",\n" . json_encode($_FILES["file"]), FILE_APPEND);
						if ($_var_1 + 1 == $_var_2) {
							file_put_contents("/tmp/" . $_var_0 . ".json", "\n]", FILE_APPEND);
							$_var_6 = file_get_contents("/tmp/" . $_var_0 . ".json");
							$_var_6 = json_decode($_var_6, true);
							foreach ($_var_6 as $_var_7) {
								@unlink($_var_7["tmp_name"]);
							}
						}
					}
				} else {
					@move_uploaded_file($_FILES["file"]["tmp_name"], $_var_4);
				}
				exit("{\"key\":\"" . $_var_0 . "\"}");
			}
		}
		exit("{\"key\":\"\"}");
	}
	function avatar()
	{
		if (!empty($_FILES)) {
			$_var_8 = pathinfo($_FILES["avatar"]["name"]);
			if (in_array(strtolower($_var_8["extension"]), array("jpg", "jpeg", "gif", "png"))) {
				$_var_9 = $_POST["type"];
				$_var_10 = SafeSql($_POST["upw"]);
				$_var_11 = intval($_POST["uid"]);
				if (!db("user")->where("in_userid", $_var_11)->where("in_userpassword", $_var_10)->count()) {
					exit("-2");
				}
				if ($_var_9 == "avatar") {
					$_var_12 = IN_ATTACHMENT_PATH . "avatar/" . $_var_11;
					@move_uploaded_file($_FILES["avatar"]["tmp_name"], $_var_12 . ".jpg");
				} else {
					if (in_array($_var_9, array("prev", "after", "hand"))) {
						$_var_13 = IN_TMP_PATH;
						if (!is_dir($_var_13)) {
							@mkdir($_var_13, 0777, true);
						}
						@move_uploaded_file($_FILES["avatar"]["tmp_name"], $_var_13 . $_var_11 . "-" . $_var_9 . ".jpg");
					}
				}
				echo "1";
			} else {
				echo "-1";
			}
		}
	}
	function mobileconfig()
	{
		$this->userlogined || reJSON(-1);
		$_var_14 = SafeRequest("apkName", "post");
		$_var_15 = SafeRequest("downLink", "post");
		$_var_16 = SafeRequest("remote", "post");
		if ($_var_15) {
			$_var_17 = $this->user["in_userid"] . "-" . time();
		} else {
			$_var_17 = SafeRequest("time", "post");
		}
		preg_match("/^(\\d+\\-\\d+)\$/", $_var_17) || reJSON(-2);
		$_var_18 = IN_TMP_PATH . $_var_14;
		if ($_var_16 && $_var_15) {
			$_var_19 = getremoteurl($_var_14, $_var_16);
			@saveRemoteFile($_var_19, IN_TMP_PATH, $_var_14);
		}
		is_file($_var_18) || reJSON(-2);
		$_var_20 = intval(filesize($_var_18));
		$_var_21 = explode("-", $_var_17);
		$_var_22 = md5($_var_21[0] . "-" . $_var_21[1] . "-" . rand(2, pow(2, 24))) . ".png";
		is_file(IN_ATTACHMENT_PATH . $_var_14) && reJSON(-2);
		IN_VERIFY > 0 && $this->user["in_verify"] != 1 && reJSON(-3);
		$_var_20 + $this->user["in_spaceuse"] > get_user_in_spacetotal($this->user) && reJSON(-4);
		$_var_23 = file_get_contents($_var_18);
		$_var_24 = IN_ATTACHMENT_PATH . $_var_14;
		rename($_var_18, $_var_24);
		$_var_25 = preg_match_all("/<key>PayloadIdentifier<\\/key>([\\s\\S]+?)<string>([\\s\\S]+?)<\\/string>/", $_var_23, $_var_26) ? SafeSql(isset($_var_26[2][1]) ? $_var_26[2][1] : $_var_26[2][0]) : "*";
		$_var_27 = preg_match("/<key>Label<\\/key>([\\s\\S]+?)<string>([\\s\\S]+?)<\\/string>/", $_var_23, $_var_26) ? SafeSql(detect_encoding($_var_26[2])) : NULL;
		if (!$_var_27) {
			$_var_27 = preg_match("/<key>PayloadDisplayName<\\/key>([\\s\\S]+?)<string>([\\s\\S]+?)<\\/string>/", $_var_23, $_var_26) ? SafeSql(detect_encoding($_var_26[2])) : "*";
		}
		$_var_28 = preg_match("/<key>Icon<\\/key>([\\s\\S]+?)<data>([\\s\\S]+?)<\\/data>/", $_var_23, $_var_26) ? $_var_26[2] : NULL;
		$_var_29 = IN_IMAGES_PATH . "app";
		$_var_30 = date("Y") . "/" . date("m") . "/" . date("d");
		creatdir($_var_29 . "/" . $_var_30);
		$_var_31 = $_var_29 . "/" . $_var_30 . "/" . $_var_22;
		file_put_contents($_var_31, base64_decode($_var_28));
		$_var_28 = $_var_30 . "/" . $_var_22;
		$_var_32 = getDeduct($_var_20);
		$_var_33 = $_var_14;
		$_var_34 = "8.0";
		$_var_35 = "1.0.0";
		$_var_36 = "1";
		$_var_37 = $_var_38 = "*";
		$_var_39 = 1;
		$_var_40 = "";
		$_var_41 = "iOS";
		$_var_42 = array("in_name" => $_var_27, "in_type" => $_var_39, "in_size" => $_var_20, "in_form" => $_var_41, "in_mnvs" => $_var_34, "in_bid" => $_var_25, "in_bsvs" => $_var_35, "in_bvs" => $_var_36, "in_nick" => $_var_37, "in_team" => $_var_38, "in_udids" => $_var_40, "in_icon" => $_var_28, "in_deduct" => $_var_32, "in_app" => $_var_14, "in_originalName" => $_var_33, "in_updatetime" => time(), "in_applock" => check_diswords($_var_27) ? -1 : 0, "remote" => $_var_16);
		$_var_43 = db("appid")->where("in_uid", $this->user["in_userid"])->where("in_form", $_var_41)->where("in_bid", $_var_25)->where("in_name", $_var_27)->find();
		if ($_var_43) {
			$_var_44 = $_var_43["in_id"];
			@unlink(IN_IMAGES_PATH . "app/" . $_var_43["in_icon"]);
			db("appid")->where("in_id", $_var_44)->update($_var_42);
			db("app")->where(array("in_appid" => $_var_44))->update(array("in_release" => 0));
		} else {
			$_var_42 = array_merge($_var_42, array("in_uid" => $this->user["in_userid"], "in_uname" => $this->user["in_username"], "in_downloads" => "0", "in_link" => creatLink(), "in_addtime" => time()));
			$_var_44 = db("appid")->insertGetId($_var_42);
		}
		$_var_45 = db("appid")->where("in_id", $_var_44)->find();
		$_var_45["in_appid"] = $_var_45["in_id"];
		unset($_var_45["in_id"]);
		$_var_45["in_addtime"] = time();
		db("app")->strict(false)->insert($_var_45);
		db("user")->where("in_userid", $this->user["in_userid"])->inc("in_spaceuse", $_var_20)->update();
		reJSON(array("id" => bees_encrypt($_var_44)), 1);
	}
	function upicon()
	{
		$_var_46 = intval($_POST["aid"]);
		$_var_47 = intval($_POST["uid"]);
		$_var_48 = SafeSql($_POST["upw"]);
		$_var_49 = db("app")->where("in_id", $_var_46)->find();
		$_var_49 || exit("-1");
		$_var_50 = db("user")->where("in_userid", $_var_47)->where("in_userpassword", $_var_48)->value("in_userid");
		$_var_49["in_uid"] == $_var_50 || exit("-2");
		if (!empty($_FILES)) {
			$_var_51 = stristr($_var_49["in_icon"], "/") ? substr(strrchr($_var_49["in_icon"], "/"), 1) : $_var_49["in_icon"];
			$_var_52 = pathinfo($_FILES["icon"]["name"]);
			if (in_array(strtolower($_var_52["extension"]), array("jpg", "jpeg", "gif", "png"))) {
				$_var_53 = IN_ATTACHMENT_PATH . $_var_51;
				@move_uploaded_file($_FILES["icon"]["tmp_name"], $_var_53);
				db("app")->where("in_id", $_var_46)->update(array("in_icon" => $_var_51));
				echo "1";
			} else {
				echo "-3";
			}
		}
	}
	function uplog()
	{
		$this->userlogined || exit("-1");
		Chk_authkey();
		$_var_54 = SafeRequest("time", "post");
		if (!empty($_FILES)) {
			$_var_55 = $_FILES["app"]["name"];
			$_var_56 = pathinfo($_var_55);
			$_var_57 = strtolower($_var_56["extension"]);
			if (in_array($_var_57, array("ipa", "apk", "mobileconfig"))) {
				preg_match("/^(\\d+\\-\\d+)\$/", $_var_54) || exit("-1");
				$_var_58 = IN_TMP_PATH . $_var_54 . "/";
				if (!is_dir($_var_58)) {
					@mkdir($_var_58, 0777, true);
				}
				$_var_59 = $_var_58 . "app." . $_var_57;
				@move_uploaded_file($_FILES["app"]["tmp_name"], $_var_59);
				echo "{'extension':'" . $_var_57 . "','time':'" . $_var_54 . "','filename':'" . $_var_55 . "'}";
			} else {
				echo "-1";
			}
		}
	}
	function kindeditor()
	{
		if (!empty($_FILES)) {
			$_var_60 = pathinfo($_FILES["imgFile"]["name"]);
			if (in_array(strtolower($_var_60["extension"]), array("jpg", "jpeg", "gif", "png"))) {
				$_var_61 = SafeRequest("dir", "get");
				$_var_62 = "data/attachment/" . $_var_61 . "/" . date("Y-m-d") . "/";
				$_var_63 = uniqid() . $_FILES["imgFile"]["name"];
				creatdir(IN_ROOT . $_var_62);
				@move_uploaded_file($_FILES["imgFile"]["tmp_name"], IN_ROOT . $_var_62 . $_var_63);
				exit(json_encode(array("error" => 0, "url" => $_var_62 . $_var_63)));
			} else {
				echo "-1";
			}
		}
	}
	function saveinfo()
	{
		$this->userlogined || reJSON("请重新登录！", 404);
		Chk_authkey();
		$_var_64 = SafeRequest("apkName", "post");
		$_var_65 = SafeRequest("originalName", "post");
		$_var_66 = SafeRequest("icon", "post");
		$_var_67 = SafeRequest("ext", "post");
		$_var_68 = SafeRequest("appName", "post");
		$_var_69 = SafeRequest("version", "post");
		$_var_70 = SafeRequest("packageName", "post");
		$_var_71 = SafeRequest("versionCode", "post");
		$_var_72 = SafeRequest("downLink", "post");
		$_var_73 = SafeRequest("fileSize", "post");
		$_var_74 = SafeRequest("minSdkVersion", "post");
		$_var_75 = SafeRequest("remote", "post") ?: 0;
		$_var_76 = bees_decrypt(SafeRequest("iLocalId", "post"));
		$_var_77 = $_var_67 == "apk" ? "Android" : "iOS";
		$_var_78 = SafeRequest("in_sign_type");
		$_var_79 = SafeRequest("api_aid");
		$_var_80 = "";
		$_var_81 = "";
	
		if (preg_match("/^(data:\\s*image\\/(\\w+);base64,)/", $_var_66, $_var_82)) {
			$_var_83 = str_replace($_var_82[1], "", $_var_66);
			$_var_83 = base64_decode($_var_83);
			$_var_84 = $_var_82[2];
			if (in_array(strtolower($_var_84), array("pjpeg", "jpeg", "jpg", "gif", "bmp", "png"))) {
				$_var_80 = md5($this->user["in_userid"] . "-" . time() . "-" . rand(2, pow(2, 24))) . ".png";
				$_var_85 = IN_IMAGES_PATH . "app";
				$_var_86 = date("Y") . "/" . date("m") . "/" . date("d");
				creatdir($_var_85 . "/" . $_var_86);
				$_var_87 = $_var_85 . "/" . $_var_86 . "/" . $_var_80;
				$_var_81 = $_var_86 . "/" . $_var_80;
				file_put_contents($_var_87, $_var_83);
			}
		}
		if ($_var_67 == "ipa") {
			$_var_88 = @implode(",", SafeRequest("teamId", "post"));
			$_var_89 = SafeRequest("teamName", "post");
			$_var_90 = SafeRequest("teamType", "post");
			$_var_91 = @implode(",", SafeRequest("udids", "post"));
		} else {
			$_var_88 = $_var_89 = $_var_91 = "";
			$_var_90 = 0;
		}
		IN_VERIFY > 0 && $this->user["in_verify"] != 1 && reJSON("你需要先进行实名认证！", 404);
		$_var_73 + $this->user["in_spaceuse"] > get_user_in_spacetotal($this->user) && reJSON("应用空间容量不足，请开通或升级会员!", 404);
		$_var_92 = getDeduct($_var_73, $_var_75);
		if ($_var_76) {
			db("appid")->where("in_id", $_var_76)->value("in_uid") == $this->user["in_userid"] || reJSON("您不能更新别人的应用！", 404);
			db("appid")->where("in_id", $_var_76)->value("in_bid") == $_var_70 && db("appid")->where("in_id", $_var_76)->value("in_name") == $_var_68 || reJSON("不是同一个应用无法更新！", 404);
		}
		if ($_var_76) {
			$_var_93 = db("appid")->where("in_id", $_var_76)->find();
			@unlink(IN_IMAGES_PATH . "app/" . $_var_93["in_icon"]);
			db("appid")->where("in_id", $_var_76)->update(array("in_name" => $_var_68, "in_icon" => $_var_81, "in_form" => $_var_77, "in_bid" => $_var_70, "in_mnvs" => $_var_74 ?: "8.0", "in_bsvs" => $_var_69 ?: "1.0", "in_bvs" => $_var_71 ?: "1", "in_deduct" => $_var_92, "in_type" => $_var_90, "in_team" => $_var_89, "in_app" => $_var_64, "in_originalName" => $_var_65, "in_sign_type" => $_var_78, "in_size" => $_var_73, "in_updatetime" => time(), "remote" => $_var_75, "in_applock" => check_diswords($_var_68) ? -1 : 0));
			db("app")->where("in_appid", $_var_76)->update(array("in_release" => 0));
		} else {
			$_var_94 = creatLink($_var_76);
			$_var_76 = db("appid")->insertGetId(array("in_uid" => $this->user["in_userid"], "in_uname" => $this->user["in_username"], "in_name" => $_var_68, "in_icon" => $_var_81, "in_form" => $_var_77, "in_bid" => $_var_70, "in_mnvs" => $_var_74 ?: "8.0", "in_bsvs" => $_var_69 ?: "1.0", "in_bvs" => $_var_71 ?: "1", "in_type" => $_var_90, "in_nick" => $_var_88, "in_team" => $_var_89, "in_udids" => $_var_91, "in_app" => $_var_64, "in_originalName" => $_var_65, "in_sign_type" => $_var_78, "in_downloads" => 0, "in_deduct" => $_var_92, "in_size" => $_var_73, "in_link" => $_var_94, "in_addtime" => time(), "in_updatetime" => time(), "remote" => $_var_75, "in_applock" => check_diswords($_var_68) ? -1 : 0));
			if (!$_var_76) {
				reJSON("上传文件失败,请稍后重试", 404);
			}
		}
		db("app")->strict(false)->insert(array("in_uid" => $this->user["in_userid"], "in_uname" => $this->user["in_username"], "in_name" => $_var_68, "in_appid" => $_var_76, "in_form" => $_var_77, "in_bid" => $_var_70, "in_mnvs" => $_var_74 ?: "8.0", "in_bsvs" => $_var_69 ?: "1.0", "in_bvs" => $_var_71 ?: "1", "in_type" => $_var_90, "in_nick" => $_var_88, "in_team" => $_var_89, "in_udids" => $_var_91, "in_app" => $_var_64, "in_originalName" => $_var_65, "in_sign_type" => $_var_78, "in_deduct" => $_var_92, "in_size" => $_var_73, "in_addtime" => time(), "remote" => $_var_75, "in_applock" => check_diswords($_var_68) ? -1 : 0));
		db("user")->where("in_userid", $this->user["in_userid"])->inc("in_spaceuse", $_var_73)->update();
		if (!$_var_75) {
			@rename(IN_TMP_PATH . $_var_64, IN_ATTACHMENT_PATH . $_var_64);
		}
		if ($_var_79) {
			$_var_95 = db("sign")->where("in_aid", $_var_76);
			if ($_var_95->count()) {
				$_var_95->update(array("api_aid" => $_var_79));
			} else {
				db("sign")->insert(array("in_aid" => $_var_76, "api_aid" => $_var_79, "in_aname" => $_var_68, "in_uid" => $this->user["in_userid"]));
			}
		}
		//默认开启
		/*	$_var_17 = db("appid")->where("in_id", $_var_76)->update(["in_super" => 1]);
			if ($_var_17) {
				$_var_18 = db("appid")->where("in_id", $_var_76)->find();
				$_var_19 = IN_ATTACHMENT_PATH . $_var_18["in_app"];
				if (!is_file($_var_19)) {
					$_var_17 = saveRemoteFile(getapp($_var_76, 1), IN_ATTACHMENT_PATH, $_var_18["in_app"]);
				}
			}*/
		//	var_dump($_var_76);die;
		reJSON(array("id" => bees_encrypt($_var_76)), 1);
	}
}