global.php 3.8 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125
  1. <?php
  2. //decode by http://dezend.qiling.org QQ 2859470
  3. function maddslashes($string, $force = 0)
  4. {
  5. !defined('MAGIC_QUOTES_GPC') && define('MAGIC_QUOTES_GPC', get_magic_quotes_gpc());
  6. if (!MAGIC_QUOTES_GPC || $force) {
  7. if (is_array($string)) {
  8. foreach ($string as $key => $val) {
  9. $string[$key] = maddslashes($val, $force);
  10. }
  11. } else {
  12. $string = addslashes($string);
  13. }
  14. }
  15. return $string;
  16. }
  17. if (!defined('IN_MYMPS')) {
  18. exit('FORBIDDEN');
  19. }
  20. error_reporting(32767 ^ 8);
  21. @header('Content-Type: text/html; charset=utf-8');
  22. @set_magic_quotes_runtime(0);
  23. define('MAGIC_QUOTES_GPC', get_magic_quotes_gpc());
  24. require_once dirname(__FILE__) . '/global.inc.php';
  25. require MYMPS_DATA . '/config.inc.php';
  26. if (function_exists('date_default_timezone_set')) {
  27. date_default_timezone_set('Hongkong');
  28. }
  29. $mtime = explode(' ', microtime());
  30. $mymps_starttime = $mtime[1] + $mtime[0];
  31. $timestamp = time();
  32. @ini_set('memory_limit', '640M');
  33. @ini_set('session.cache_expire', 180);
  34. @ini_set('session.use_trans_sid', 0);
  35. @ini_set('session.use_cookies', 1);
  36. @ini_set('session.auto_start', 0);
  37. @ini_set('display_errors', 1);
  38. if (!function_exists('file_put_contents')) {
  39. function file_put_contents($file, $data, $flags = '')
  40. {
  41. $contents = is_array($data) ? implode('', $data) : $data;
  42. if ($flags == 'FILE_APPEND') {
  43. $mode = 'ab+';
  44. } else {
  45. $mode = 'wb';
  46. }
  47. if (($fp = @fopen($file, $mode)) === false) {
  48. return false;
  49. } else {
  50. $bytes = fwrite($fp, $contents);
  51. fclose($fp);
  52. return $bytes;
  53. }
  54. }
  55. define('FILE_APPEND', 'FILE_APPEND');
  56. }
  57. if (PHP_VERSION < '4.1.0') {
  58. $_GET =& $HTTP_GET_VARS;
  59. $_POST =& $HTTP_POST_VARS;
  60. $_COOKIE =& $HTTP_COOKIE_VARS;
  61. $_SERVER =& $HTTP_SERVER_VARS;
  62. $_ENV =& $HTTP_ENV_VARS;
  63. $_FILES =& $HTTP_POST_FILES;
  64. unset($HTTP_GET_VARS);
  65. unset($HTTP_POST_VARS);
  66. unset($HTTP_COOKIE_VARS);
  67. unset($HTTP_ENV_VARS);
  68. unset($HTTP_POST_FILES);
  69. unset($HTTP_SERVER_VARS);
  70. }
  71. require_once MYMPS_INC . '/common.fun.php';
  72. require_once MYMPS_INC . '/template.fun.php';
  73. require_once MYMPS_INC . '/custom.fun.php';
  74. require_once MYMPS_INC . '/cache.fun.php';
  75. require_once MYMPS_INC . '/class.fun.php';
  76. if (!defined('IN_MANAGE')) {
  77. foreach (array('_COOKIE', '_POST', '_GET') as $_request) {
  78. foreach (${$_request} as $_key => $_value) {
  79. $_key[0] != '_' && (${$_key} = mhtmlspecialchars(maddslashes($_value)));
  80. }
  81. }
  82. } else {
  83. foreach (array('_COOKIE', '_POST', '_GET') as $_request) {
  84. foreach (${$_request} as $_key => $_value) {
  85. $_key[0] != '_' && (${$_key} = maddslashes($_value));
  86. }
  87. }
  88. }
  89. require_once MYMPS_ROOT . '/version.php';
  90. if (__FILE__ == '') {
  91. exit('Fatal error code: 0');
  92. }
  93. if (DIRECTORY_SEPARATOR == '\\') {
  94. @ini_set('include_path', '.;' . ROOT_PATH);
  95. } else {
  96. @ini_set('include_path', '.:' . ROOT_PATH);
  97. }
  98. if (defined('DEBUG_MODE') == false) {
  99. define('DEBUG_MODE', 0);
  100. }
  101. if (isset($_REQUEST['GLOBALS']) || isset($_FILES['GLOBALS'])) {
  102. exit('Request tainting attempted.');
  103. }
  104. if (is_array($_FILES)) {
  105. foreach ($_FILES as $_name => $_value) {
  106. ${$_name} = $_value['tmp_name'];
  107. $_fp = @fopen(${$_name}, 'r');
  108. $_fstr = @fread($_fp, filesize(${$_name}));
  109. @fclose($_fp);
  110. if ($_fstr != '' && @ereg('<(\\?|%)', $_fstr)) {
  111. exit;
  112. }
  113. }
  114. }
  115. $php_self = isset($_SERVER['PHP_SELF']) ? $_SERVER['PHP_SELF'] : $_SERVER['SCRIPT_NAME'];
  116. if ('/' == substr($php_self, -1)) {
  117. $php_self .= 'index.php';
  118. }
  119. @session_save_path(CURSCRIPT == 'wap' ? MYMPS_ROOT . '/m/sessions' : MYMPS_DATA . '/sessions');
  120. $ifmobile = mgetcookie('ifmobile');
  121. if (!$ifmobile) {
  122. $ifmobile = !pcclient();
  123. msetcookie('ifmobile', $ifmobile);
  124. }