You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
216 lines
9.4 KiB
216 lines
9.4 KiB
<?php |
|
/** |
|
* User: hewro |
|
* Date: 2018/7/17 |
|
* Time: 20:43 |
|
* 一些ajax请求，能够有效的提升用户体验 |
|
*/ |
|
if ($_SERVER["REQUEST_METHOD"] == "POST"){ |
|
if(@$_POST['action'] == 'send_talk'){//从微信公众号发送说说说 |
|
//获取必要的参数 |
|
if (!empty($_POST['content']) && !empty($_POST['time_code']) && !empty($_POST['cid']) && !empty($_POST['token'])){ |
|
$cid = $_POST['cid']; |
|
$content=$_POST['content']; //发送的内容 |
|
$time_code= $_POST['time_code'];//用来检验是否是博客主人 |
|
$token= $_POST['token'];//用来检验是否是博客主人 |
|
$msg_type = $_POST['msg_type']; |
|
$options = mget(); |
|
|
|
//身份验证 |
|
if ($time_code == md5($options->time_code)){//验证成功 |
|
|
|
if ($msg_type == "image"){//上传图片 |
|
$mediaId = $_POST['mediaId']; |
|
//这里的content是url地址 |
|
$url = Utils::uploadPic($options->rootUrl,$mediaId,$content,"web",".jpg"); |
|
//$url = ""; |
|
$content = '<img src="'.$url.'"/>'; |
|
}else if ($msg_type == "location"){ |
|
$mediaId = $_POST['mediaId']; |
|
//这里的content是url地址 |
|
$url = Utils::uploadPic($options->rootUrl,$mediaId,$content,"web",".jpg"); |
|
$content = '<img src="'.$url.'"/>'; |
|
} |
|
|
|
//向数据库添加说说记录 |
|
$db = Typecho_Db::get(); |
|
//先找到作者信息 |
|
$getAdminSql = $db->select()->from('table.users') |
|
->limit(1); |
|
$user = $db->fetchRow($getAdminSql); |
|
|
|
$insert = $db->insert('table.comments') |
|
->rows(array("cid" => $cid,"created" => time(),"author" => $user['screenName'],"authorId" => |
|
$user['uid'],"ownerId" => $user['uid'],"text"=> $content,"url" => $user['url'],"mail" => |
|
$user['mail'],"agent"=>"weChat")); |
|
//将构建好的sql执行, 如果你的主键id是自增型的还会返回insert id |
|
$insertId = $db->query($insert); |
|
//修改评论数目+1 |
|
$row = $db->fetchRow($db->select('commentsNum')->from('table.contents')->where('cid = ?',$cid)); |
|
$db->query($db->update('table.contents')->rows(array('commentsNum' => (int) $row['commentsNum'] + 1))->where('cid = ?', $cid)); |
|
echo "1"; |
|
}else{ |
|
//echo $time_code . "|" . md5($options->time_code); |
|
echo "-3";//身份验证失败 |
|
} |
|
|
|
}else{ |
|
echo "-2";//信息缺失 |
|
} |
|
die(); |
|
} |
|
else if(@$_POST['action'] == 'upload_img'){ |
|
$options = mget(); |
|
$data = $_POST['file']; |
|
$suffix = $_POST['suffix']; |
|
$base64_string= explode(',', $data); //截取data:image/png;base64, 这个逗号后的字符 |
|
$data= base64_decode($base64_string[1]); |
|
echo Utils::uploadPic($options->rootUrl,uniqid(),$data,"local",$suffix); |
|
die(); |
|
} |
|
}else if ($_SERVER["REQUEST_METHOD"] == "GET"){ |
|
if(@$_GET['action'] == 'ajax_avatar_get') { |
|
$email = strtolower( $_GET['email']); |
|
echo Utils::getAvator($email,65); |
|
die(); |
|
}elseif(@$_GET['action'] == 'send_talk'){ |
|
echo "非法get请求"; |
|
die(); |
|
}else if (@$_GET['action'] == 'star_talk'){ |
|
if (!empty($_GET['coid'])){ |
|
$coid = $_GET['coid']; |
|
$db = Typecho_Db::get(); |
|
|
|
$stars = Typecho_Cookie::get('extend_say_stars'); |
|
if(empty($stars)){ |
|
$stars = array(); |
|
}else{ |
|
$stars = explode(',', $stars); |
|
} |
|
$row = $db->fetchRow($db->select('stars')->from('table.comments')->where('coid = ?',$coid)); |
|
|
|
if(!in_array($coid,$stars)){//如果cookie不存在才会加1 |
|
$db->query($db->update('table.comments')->rows(array('stars' => (int) $row['stars'] + 1))->where('coid = ?', $coid)); |
|
array_push($stars, $coid); |
|
$stars = implode(',', $stars); |
|
Typecho_Cookie::set('extend_say_stars', $stars); //记录查看cookie |
|
echo 1;//点赞成功 |
|
}else{ |
|
echo 2;//已经点赞过了 |
|
} |
|
}else{ |
|
echo -1;//信息缺失 |
|
} |
|
|
|
die(); |
|
} |
|
else if(@$_GET['action'] == 'open_world'){ |
|
if (!empty($_GET['password'])){ |
|
$password = $_GET['password']; |
|
$options = mget(); |
|
if ($password == $options->open_new_world){ |
|
echo 1;//密码正确 |
|
Typecho_Cookie::set('open_new_world', $password); //保存密码的cookie，以便后面可以直接访问 |
|
}else{ |
|
echo -1;//密码错误 |
|
} |
|
}else{ |
|
echo -2;//信息不完成 |
|
} |
|
|
|
die(); |
|
|
|
} |
|
else if (@$_GET['action'] == 'back_up' || @$_GET['action'] == 'un_back_up' || @$_GET['action'] == 'recover_back_up'){//备份管理 |
|
|
|
$action = $_GET['action']; |
|
$db = Typecho_Db::get(); |
|
|
|
$themeName = $db->fetchRow($db->select()->from ('table.options')->where ('name = ?', 'theme')); |
|
$handsomeThemeName = "theme:".$themeName['value']; |
|
$handsomeThemeBackupName = "theme:HandsomePro-X-Backup"; |
|
|
|
|
|
if ($action == "back_up"){//备份数据 |
|
$handsomeInfo=$db->fetchRow($db->select()->from ('table.options')->where ('name = ?', $handsomeThemeName)); |
|
$handsomeValue = $handsomeInfo['value'];//最新的主题数据 |
|
|
|
if($db->fetchRow($db->select()->from ('table.options')->where ('name = ?', $handsomeThemeBackupName))) {//如果有了，直接更新 |
|
$update = $db->update('table.options')->rows(array('value' => $handsomeValue))->where('name = ?', $handsomeThemeBackupName); |
|
$updateRows = $db->query($update); |
|
echo 1; |
|
}else{//没有的话，直接插入数据 |
|
$insert = $db->insert('table.options') |
|
->rows(array('name' => $handsomeThemeBackupName,'user' => '0','value' => $handsomeValue)); |
|
$db->query($insert); |
|
echo 2; |
|
} |
|
}else if ($action == "un_back_up"){//删除备份 |
|
$db = Typecho_Db::get(); |
|
if($db->fetchRow($db->select()->from ('table.options')->where ('name = ?', $handsomeThemeBackupName))){ |
|
$delete = $db->delete('table.options')->where ('name = ?', $handsomeThemeBackupName); |
|
$deletedRows = $db->query($delete); |
|
echo 1; |
|
}else{ |
|
echo -1;//备份不存在 |
|
} |
|
}else if ($action == "recover_back_up"){//恢复备份 |
|
$db = Typecho_Db::get(); |
|
if($db->fetchRow($db->select()->from ('table.options')->where ('name = ?', $handsomeThemeBackupName))){ |
|
$themeInfo = $db->fetchRow($db->select()->from ('table.options')->where ('name = ?', |
|
$handsomeThemeBackupName)); |
|
$themeValue = $themeInfo['value']; |
|
$update = $db->update('table.options')->rows(array('value'=>$themeValue))->where('name = ?', $handsomeThemeName); |
|
$updateRows= $db->query($update); |
|
echo 1; |
|
}else{ |
|
echo -1;//没有备份数据 |
|
} |
|
} |
|
die();//只显示ajax请求内容，禁止显示博客内容 |
|
}else if (@$_GET['action'] == "ajax_search"){ |
|
$content = @$_GET['content']; |
|
$OnlyTitle = @$_GET['onlytitle'];//只查询标题字段 |
|
if (trim($content)!=""){ |
|
$db = Typecho_Db::get(); |
|
$searchQuery = '%' . str_replace(' ', '%', $content) . '%'; |
|
$sql = $db->select()->from('table.contents') |
|
->join('table.relationships','table.relationships.cid = table.contents.cid','right')->join('table.metas','table.relationships.mid = table.metas.mid','right')->where('table.metas.type=?','category') |
|
->where("table.contents.password IS NULL OR table.contents.password = ''") |
|
->where('table.contents.title LIKE ? OR table.contents.text LIKE ?', $searchQuery, $searchQuery) |
|
->where('table.contents.type = ?', 'post') |
|
->limit(10); |
|
$result = $db->fetchAll($sql);//查看评论中是否有该游客的信息 |
|
if (count($result) == 0){ |
|
$result = array(); |
|
$res = new stdClass(); |
|
$res->title = "暂无可提供的搜索结果"; |
|
$res->click = "0"; |
|
$result[0] = $res; |
|
} |
|
echo json_encode($result); |
|
}else{ |
|
echo json_decode(""); |
|
} |
|
die(); |
|
} |
|
else {//无需action标识，全站加密 |
|
$options = mget(); |
|
//如果路径包含后台管理路径，则不加密 |
|
$password = Typecho_Cookie::get('open_new_world'); |
|
$cookie = false;//true为可以直接进入 |
|
if (!empty($password) && $password == trim($options->open_new_world)){ |
|
$cookie = true; |
|
} |
|
if (!$cookie && trim($options->open_new_world) != "" && !strpos($_SERVER["SCRIPT_NAME"], |
|
__TYPECHO_ADMIN_DIR__)){ |
|
require_once('Lock.php'); |
|
die(); |
|
}else{ |
|
// echo "nonono"; |
|
// die(); |
|
return; |
|
} |
|
} |
|
} |
|
|
|
|