Skip to content

Commit f311863

Browse files
icreticret
committed
2.7.7 dev
1 parent 95a6caf commit f311863

File tree

9 files changed

+54
-21
lines changed

9 files changed

+54
-21
lines changed

‎admin/admin.inc.php

+14-10
Original file line numberDiff line numberDiff line change
@@ -566,18 +566,22 @@
566566
</div>
567567
<div class="tab-pane fade" id="Content6">
568568
<div class="col-md-12">
569-
<div class="col-md-5">
569+
<div class="col-md-4">
570570
<h5 class="header-dividing">上传日志 <small>需要开启上传日志</small></h5>
571571
<form class="form-inline" action="../application/viewlog.php" method="post" target="_blank">
572572
<div class="form-group">
573-
<label for="logDate" class="text-primary">选择月份: </label>
573+
<label for="logDate" class="text-primary">月份: </label>
574574
<input type="text" class="form-control logDate" id="logDate" name="logDate" value="<?php echo date('Y-m'); ?>" required="required" readonly>
575-
<input type="hidden" class="form-control" name="pass" value="<?php echo md5($config['password'] . date('YMDH')); ?>" placeholder="日志访问秘钥">
575+
<input type="hidden" class="form-control" name="pass" value="<?php echo md5($config['password'] . date('ymdh')); ?>" placeholder="日志访问秘钥">
576576
</div>
577-
<button type="submit" class="btn btn-primary">查看日志</button>
577+
<button type="submit" class="btn btn-primary">查看</button>
578578
</form>
579579
</div>
580-
<div class="form-group col-md-3">
580+
<div class="col-md-2">
581+
<h5 class="header-dividing">登录日志 <small>仅显示当月</small></h5>
582+
<button type="button" class="btn btn-primary" data-toggle="modal" data-title="登录日志 - 仅显示当月" data-icon="book" data-moveable="true" data-width="60%" data-type="ajax" data-url="../application/viewlog.php?login_log&pass=<?php echo md5($config['password'] . date('ymdh')); ?>">查看</button>
583+
</div>
584+
<div class="col-md-3">
581585
<h5 class="header-dividing" data-toggle="tooltip" title="仅限存储分类路径为 Y/m/d/ 格式<br/>且每天需要访问一次后台才执行<br/>先重命名要删除文件夹作为备份<br/>超过定时日期的2倍后再彻底删除重命名的文件夹<br/>超过定时日期前和开启分离的文件夹不删除">定时删除 <small>数值为<code>0</code>时关闭</small></h5>
582586
<form action="<?php echo $_SERVER['SCRIPT_NAME']; ?>" method="post">
583587
<div class="input-group">
@@ -588,8 +592,8 @@
588592
<input type="hidden" class="form-control" name="update" value="<?php echo date("Y-m-d H:i:s"); ?>" placeholder="隐藏的保存">
589593
</form>
590594
</div>
591-
<div class="col-md-4">
592-
<h5 class="header-dividing">清理缓存 <small>已缓存: <?php echo getFileNumber(APP_ROOT . $config['path'] . 'cache/') . '文件 | 占用' . getDistUsed(getDirectorySize(APP_ROOT . $config['path'] . 'cache/')); ?></small></h5>
595+
<div class="col-md-3">
596+
<h5 class="header-dividing">清理缓存 <small>已缓存: <?php echo getFileNumber(APP_ROOT . $config['path'] . 'cache/') . '个 | 占用 ' . getDistUsed(getDirectorySize(APP_ROOT . $config['path'] . 'cache/')); ?></small></h5>
593597
<form action="<?php echo $_SERVER['SCRIPT_NAME']; ?>" method="post">
594598
<button type="submit" class="btn btn-success" name="delDir" value="cache/" onClick="return confirm('确认要清理缓存？\n* 删除文件夹后将无法恢复! ');"><i class="icon icon-trash"> 清理缓存</i></button>
595599
</form>
@@ -1131,7 +1135,7 @@
11311135
<li>直接输入账号和密码即可完成修改</li>
11321136
<li>更改后会立即生效并重新登录,请务必牢记账号和密码! </li>
11331137
<li>如果忘记账号可以打开-><code>/config/config.php</code>文件->找到<code data-toggle="tooltip" title="'user'=><strong>admin</strong>'">user</code>对应的键值->填入</li>
1134-
<li>如果忘记密码请将密码->转换成MD5小写-><a href="<?php echo $config['domain'] . '/application/reset_password.php'; ?>" target="_blank" class="text-purple">转换网址</a>->打开<code>/config/config.php</code>文件->找到<code data-toggle="tooltip" title="'password'=>'<strong>e6e0612609</strong>'">password</code>对应的键值->填入</li>
1138+
<li>如果忘记密码请将密码->转换成SHA256-><a href="<?php echo $config['domain'] . '/application/reset_password.php'; ?>" target="_blank" class="text-purple">转换网址</a>->打开<code>/config/config.php</code>文件->找到<code data-toggle="tooltip" title="'password'=>'<strong>e6e0612609</strong>'">password</code>对应的键值->填入</li>
11351139
</ul>
11361140
</div>
11371141
</div>
@@ -1569,7 +1573,7 @@ function getWord() {
15691573
width: 0.1
15701574
},
15711575
{
1572-
label: '密码(md5)',
1576+
label: '密码 (SHA256)',
15731577
name: 'password',
15741578
html: true,
15751579
width: 0.2
@@ -1638,7 +1642,7 @@ function getWord() {
16381642

16391643
/** 引入设置页面检测文件 */
16401644
<?php if ($config['checkEnv']) require_once APP_ROOT . '/application/check_admin.inc.php'; ?>
1641-
1645+
16421646
// 更改网页标题
16431647
document.title = "图床设置 - <?php echo $config['title']; ?>"
16441648
</script>

‎admin/index.php

+3-2
Original file line numberDiff line numberDiff line change
@@ -90,6 +90,9 @@
9090
</script>';
9191
header("refresh:2;");
9292
}
93+
94+
// 登录日志
95+
write_login_log($_POST['user'], $_POST['password'], $login["messege"]);
9396
}
9497
?>
9598
<link href="<?php static_cdn(); ?>/public/static/login.css" rel="stylesheet">
@@ -160,8 +163,6 @@
160163
</form>
161164
<script src="<?php static_cdn(); ?>/public/static/crypto/SHA256.js"></script>
162165
<script>
163-
console.log(SHA256('admin@123'));
164-
165166
function md5_post() {
166167
var password = document.getElementById('password');
167168
var md5pwd = document.getElementById('md5_password');

‎admin/version.php

+1-1
Original file line numberDiff line numberDiff line change
@@ -1 +1 @@
1-
2.7.6
1+
2.7.7

‎application/check_admin.inc.php

+1-1
Original file line numberDiff line numberDiff line change
@@ -151,4 +151,4 @@
151151
time:7000
152152
}).show();
153153
';
154-
}
154+
}

‎application/function.php

+14
Original file line numberDiff line numberDiff line change
@@ -1695,3 +1695,17 @@ function auto_delete()
16951695
}
16961696
return false;
16971697
}
1698+
1699+
function write_login_log($user, $password, $messege)
1700+
{
1701+
$log_path = APP_ROOT . '/admin/logs/login/';
1702+
$log_file = $log_path . date('/Y-m-') . 'logs.php';
1703+
1704+
/** 创建日志文件夹及文件 */
1705+
if (!is_dir($log_path)) mkdir($log_path, 0755, true);
1706+
if (!is_file($log_file)) file_put_contents($log_file, '<?php /** 登录日志 */ exit; ?>' . PHP_EOL, FILE_APPEND | LOCK_EX);
1707+
1708+
/** 写入日志 */
1709+
$log = '时间: ' . date('Y-m-d H:i:s') . ' IP: ' . real_ip() . ' 账号: ' . $user . ' 密码: ' . $password . ' 消息: ' . $messege;
1710+
file_put_contents($log_file, $log . PHP_EOL, FILE_APPEND | LOCK_EX);
1711+
}

‎application/viewlog.php

+15-5
Original file line numberDiff line numberDiff line change
@@ -7,13 +7,23 @@
77
require_once __DIR__ . '/function.php';
88

99
// 非管理员不可访问!
10-
if (!is_who_login('admin')) {
11-
exit;
12-
}
13-
10+
if (!is_who_login('admin')) exit('Permission denied');
1411
// 禁止直接访问
15-
if (empty($_POST['pass']) || $_POST['pass'] !== md5($config['password'] . date('YMDH'))) exit('Permission denied!');
12+
if (empty($_REQUEST['pass']) || $_REQUEST['pass'] !== md5($config['password'] . date('ymdh'))) exit('Authentication error!');
13+
14+
// 登录日志
15+
if (isset($_GET['login_log'])) {
16+
$file = APP_ROOT . '/admin/logs/login/' . date('/Y-m-') . 'logs.php';
17+
echo '<pre class="pre-scrollable" style="background-color: rgba(0, 0, 0, 0);border-color:rgba(0, 0, 0, 0);">';
18+
if (is_file($file)) {
19+
echo file_get_contents($file);
20+
} else {
21+
echo '并未生成登录日志,请检查文件权限!';
22+
}
23+
exit('</pre>');
24+
}
1625

26+
// 上传日志
1727
require_once APP_ROOT . '/application/header.php';
1828

1929
if (isset($_POST['logDate'])) {

0 commit comments

Comments
 (0)