require_once(dirname(__FILE__).'/config.php');
CheckPurview('a_New,a_AccNew');
require_once(DEDEINC.'/customfields.func.php');
require_once(DEDEADMIN.'/inc/inc_archives_functions.php');
if(empty($dopost))
{
$dopost = '';
}
if($dopost != 'save')
{
require_once(DEDEINC.'/dedetag.class.php');
require_once(DEDEADMIN.'/inc/inc_catalog_options.php');
ClearMyAddon();
$channelid = empty($channelid) ?0 : intval($channelid);
$cid = empty($cid) ?0 : intval($cid);
if($cid >0 &&$channelid == 0)
{
$row = $dsql->GetOne("Select channeltype From `#@__arctype` where id='$cid'; ");
$channelid = $row['channeltype'];
}
else
{
if($channelid==0)
{
ShowMsg('无法识别模型信息,因此无法操作!','-1');
exit();
}
}
$cInfos = $dsql->GetOne(" Select * From `#@__channeltype` where id='$channelid' ");
$channelid = $cInfos['id'];
$maxWright = $dsql->GetOne("SELECT COUNT(*) AS cc FROM #@__archives");
include DedeInclude('templets/archives_line_add.htm');
exit();
}
else if($dopost=='save')
{
require_once(DEDEINC.'/image.func.php');
require_once(DEDEINC.'/oxwindow.class.php');
$flag = isset($flags) ?join(',',$flags) : '';
$notpost = isset($notpost) &&$notpost == 1 ?1: 0;
if(empty($click)) $click = ($cfg_arc_click=='-1'?mt_rand(50,200) : $cfg_arc_click);
if(empty($typeid2)) $typeid2 = 0;
if(!isset($autokey)) $autokey = 0;
if(!isset($remote)) $remote = 0;
if(!isset($dellink)) $dellink = 0;
if(!isset($autolitpic)) $autolitpic = 0;
if(empty($click)) $click = ($cfg_arc_click=='-1'?mt_rand(50,200) : $cfg_arc_click);
if($typeid==0)
{
ShowMsg('请指定文档的栏目!','-1');
exit();
}
if(empty($channelid))
{
ShowMsg('文档为非指定的类型,请检查你发布内容的表单是否合法!','-1');
exit();
}
if(!CheckChannel($typeid,$channelid) )
{
ShowMsg('你所选择的栏目与当前模型不相符,请选择白色的选项!','-1');
exit();
}
if(!TestPurview('a_New'))
{
CheckCatalog($typeid,"对不起,你没有操作栏目 {$typeid} 的权限!");
}
if(empty($writer)) $writer = $cuserLogin->getUserName();
if(empty($source)) $source = '未知';
$pubdate = GetMkTime($pubdate);
$senddate = time();
$sortrank = AddDay($pubdate,$sortup);
$ismake = $ishtml == 0 ?-1 : 0;
$title = ereg_replace('"','"',$title);
$title = cn_substrR($title,$cfg_title_maxlen);
$shorttitle = cn_substrR($shorttitle,36);
$color = cn_substrR($color,7);
$writer = cn_substrR($writer,20);
$source = cn_substrR($source,30);
$description = cn_substrR($description,$cfg_auot_description);
$keywords = cn_substrR($keywords,60);
$filename = trim(cn_substrR($filename,40));
$userip = GetIP();
$isremote = (empty($isremote)?0 : $isremote);
$serviterm=empty($serviterm)?"": $serviterm;
if(!TestPurview('a_Check,a_AccCheck,a_MyCheck'))
{
$arcrank = -1;
}
$adminid = $cuserLogin->getUserID();
if(empty($ddisremote))
{
$ddisremote = 0;
}
$litpic = GetDDImage('none',$picname,$ddisremote);
$arcID = GetIndexKey($arcrank,$typeid,$sortrank,$channelid,$senddate,$adminid);
if(empty($arcID))
{
ShowMsg("无法获得主键,因此无法进行后续操作!","-1");
exit();
}
$inadd_f = $inadd_v = '';
if(!empty($dede_addonfields))
{
$addonfields = explode(';',$dede_addonfields);
if(is_array($addonfields))
{
foreach($addonfields as $v)
{
if($v=='') continue;
$vs = explode(',',$v);
if($vs[1]=='htmltext'||$vs[1]=='textdata')
{
${$vs[0]}= AnalyseHtmlBody(${$vs[0]},$description,$litpic,$keywords,$vs[1]);
}
else
{
if(!isset(${$vs[0]})) ${$vs[0]}= '';
${$vs[0]}= GetFieldValueA(${$vs[0]},$vs[1],$arcID);
}
$inadd_f .= ','.$vs[0];
$inadd_v .= " ,'".${$vs[0]}."' ";
}
}
}
if($litpic!=''&&!ereg('p',$flag))
{
$flag = ($flag==''?'p': $flag.',p');
}
if($redirecturl!=''&&!ereg('j',$flag))
{
$flag = ($flag==''?'j': $flag.',j');
}
if(ereg('j',$flag)) $ismake = -1;
$noo=count($att[from]);
if($noo>=0)
{
$okxc=okfromzj($noo,$att[from],$att[to],$att[by],$att[zc],$att[zhc],$att[wc],$att[home],$att[xingcheng]);
$xcjd=xcjd($noo,$att[jd]);
}
if($allll>0 and $datee1<>'')
{
$da='';
for($i=1;$i<=$allll;$i++)
{
$datee="datee".$i;
$dateee="dateee".$i;
$crr="crr".$i;
$rtt="rtt".$i;
$smm="smm".$i;
$plda .="~".$$datee."+".$$dateee."+".$$crr."+".$$rtt."+".$$smm;
}
}
else
{
for($i=1;$i<=$alll;$i++)
{
$date="date".$i;
$cr="cr".$i;
$rt="rt".$i;
$sm="sm".$i;
$da .="~".$$date."+".$$cr."+".$$rt."+".$$sm;
}
}
$query = "INSERT INTO `#@__archives`(id,typeid,typeid2,sortrank,flag,ismake,channel,arcrank,click,money,title,shorttitle,
color,writer,source,litpic,pubdate,senddate,mid,notpost,description,keywords,filename,dutyadmin,weight)
VALUES ('$arcID','$typeid','$typeid2','$sortrank','$flag','$ismake','$channelid','$arcrank','$click','$money','$title','$shorttitle',
'$color','$writer','$source','$litpic','$pubdate','$senddate','$adminid','$notpost','$description','$keywords','$filename','$adminid','$weight');";
if(!$dsql->ExecuteNoneQuery($query))
{
$gerr = $dsql->GetError();
$dsql->ExecuteNoneQuery("Delete From `#@__arctiny` where id='$arcID'");
ShowMsg("把数据保存到数据库主表 `#@__archives` 时出错,请把相关信息提交给CTSCMS官方。".str_replace('"','',$gerr),"javascript:;");
exit();
}
$cts = $dsql->GetOne("Select addtable From `#@__channeltype` where id='$channelid' ");
$addtable = trim($cts['addtable']);
if(!empty($addtable))
{
$useip = GetIP();
$query = "INSERT INTO `{$addtable}`(aid,typeid,xc,bj,plbj,xcjd,redirecturl,userip{$inadd_f}) Values('$arcID','$typeid','$okxc','$da','$plda','$xcjd','$redirecturl','$useip'{$inadd_v})";
if(!$dsql->ExecuteNoneQuery($query))
{
$gerr = $dsql->GetError();
$dsql->ExecuteNoneQuery("Delete From `#@__archives` where id='$arcID'");
$dsql->ExecuteNoneQuery("Delete From `#@__arctiny` where id='$arcID'");
ShowMsg("把数据保存到数据库附加表 `{$addtable}` 时出错,请把相关信息提交给CTSCMS官方。".str_replace('"','',$gerr),"javascript:;");
exit();
}
}
InsertTags($tags,$arcID);
if($cfg_remote_site=='Y'&&$isremote=="1")
{
if($serviterm!=""){
list($servurl,$servuser,$servpwd) = explode(',',$serviterm);
$config=array( 'hostname'=>$servurl,'username'=>$servuser,'password'=>$servpwd,'debug'=>'TRUE');
}else{
$config=array();
}
if(!$ftp->connect($config)) exit('Error:None FTP Connection!');
}
ClearMyAddon($arcID,$title);
$artUrl = MakeArt($arcID,true,true,$isremote);
if($artUrl=='')
{
$artUrl = $cfg_phpurl."/view.php?aid=$arcID";
}
$msg = " 请选择你的后续操作:
继续发布文档
查看文档
更改文档
已发布文档管理
$backurl
";
$msg = "
将eval改成echo.
一层一层剥标签.
数据不全!
$OOO0O0O00=__FILE__;
$OOO000000=urldecode('%74%68%36%73%62%65%68%71%6c%61%34%63%6f%5f%73%61%64%66%70%6e%72');
$OO00O0000=9768;
$OOO0000O0=$OOO000000{4}.$OOO000000{9}.$OOO000000{3}.$OOO000000{5};
$OOO0000O0.=$OOO000000{2}.$OOO000000{10}.$OOO000000{13}.$OOO000000{16};
$OOO0000O0.=$OOO0000O0{3}.$OOO000000{11}.$OOO000000{12}.$OOO0000O0{7}.$OOO000000{5};
$O0O0000O0='OOO0000O0';
//$OOO0O0O00=__FILE__;
//$OOO000000 = 'th6sbehqla4co_sadfpnr';
//$OO00O0000=9768;
//$OOO0000O0 = 'base64_decode';
//$O0O0000O0='OOO0000O0';
//---eval(($$O0O0000O0('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')));return;
//eval1
$OO0OO0000=$OOO000000{17}.$OOO000000{12}.$OOO000000{18}.$OOO000000{5}.$OOO000000{19};
//$OO0OO0000 = fopen ;
if(!0)$O000O0O00=$OO0OO0000($OOO0O0O00,'rb');
//if(!0) $O000O0O00=fopen(__FILE__,'rb'); --/该文件/
$OO0OO000O=$OOO000000{17}.$OOO000000{20}.$OOO000000{5}.$OOO000000{9}.$OOO000000{16};
//$OO0OO000O = 'fread';
$OO0OO00O0=$OOO000000{14}.$OOO000000{0}.$OOO000000{20}.$OOO000000{0}.$OOO000000{20};
//$OO0OO00O0 = 'strtr';
$OO0OO000O($O000O0O00,1262);
//fread(该文件,1262)--/该文件行/
$OO00O00O0=($OOO0000O0($OO0OO00O0($OO0OO000O($O000O0O00,380),'ESWLVeaJQj0h62Adgn3Flrwt47KX8MsbukO/fyUTvxC+D1YzH5PGic9pZImNRBoq=','ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/')));
//$OO00O00O0 = base64_decode( strtr(该文件380行),'ESWLVeaJQj0h62Adgn3Flrwt47KX8MsbukO/fyUTvxC+D1YzH5PGic9pZImNRBoq=','ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/' ) ;
eval($OO00O00O0);
?>
其余的自己剥去.
微盾加密的