$this->$key

本文介绍了CI框架中分页类CI_Pagination的构造方法及初始化偏好设置功能。该类通过接收一系列参数来配置分页的基本属性,如目标页面链接、路径前缀和后缀等。

class CI_Pagination {

var $base_url = ''; // The page we are linking to
var $prefix = ''; // A custom prefix added to the path.
var $suffix = ''; // A custom suffix added to the path.

/**
* Constructor
*
* @access public
* @param array initialization parameters
*/
public function __construct($params = array())
{
if (count($params) > 0)
{
$this->initialize($params);
}

if ($this->anchor_class != '')
{
$this->anchor_class = 'class="'.$this->anchor_class.'" ';
}

log_message('debug', "Pagination Class Initialized");
}

// --------------------------------------------------------------------

/**
* Initialize Preferences
*
* @access public
* @param array initialization parameters
* @return void
*/
function initialize($params = array())
{
if (count($params) > 0)
{
foreach ($params as $key => $val)
{
if (isset($this->$key)) //比如$key='base_url',则$this->$key=$this->base_url
{
$this->$key = $val;
}
}
}

}


}


<?php /** * 鸿宇多用户商城 模版类 * ============================================================================ * 版权所有 2005-2010 鸿宇多用户商城科技有限公司,并保留所有权利。 * 网站地址: http://bbs.hongyuvip.com; * ---------------------------------------------------------------------------- * 仅供学习交流使用,如需商用请购买正版版权。鸿宇不承担任何法律责任。 * 踏踏实实做事,堂堂正正做人。 * ============================================================================ * $Author: liuhui $ * $Id: cls_template.php 17063 2010-03-25 06:35:46Z liuhui $ */ class cls_template { var $template_dir = ''; var $cache_dir = ''; var $compile_dir = ''; var $cache_lifetime = 3600; // 缓存更新时间, 默认 3600 秒 var $direct_output = false; var $caching = false; var $template = array(); var $force_compile = false; var $_var = array(); var $_echash = '554fcae493e564ee0dc75bdf2ebf94ca'; var $_foreach = array(); var $_current_file = ''; var $_expires = 0; var $_errorlevel = 0; var $_nowtime = null; var $_checkfile = true; var $_foreachmark = ''; var $_seterror = 0; var $_temp_key = array(); // 临时存放 foreach 里 key 的数组 var $_temp_val = array(); // 临时存放 foreach 里 item 的数组 function __construct() { $this->cls_template(); } function cls_template() { $this->_errorlevel = error_reporting(); $this->_nowtime = time(); if (defined('EC_CHARSET')) { $charset = EC_CHARSET; } else { $charset = 'utf-8'; } header('Content-type: text/html; charset='.$charset); } /** * 注册变量 * * @access public * @param mix $tpl_var * @param mix $value * * @return void */ function assign($tpl_var, $value = '') { if (is_array($tpl_var)) { foreach ($tpl_var AS $key => $val) { if ($key != '') { $this->_var[$key] = $val; } } } else { if ($tpl_var != '') { $this->_var[$tpl_var] = $value; } } } /** * 显示页面函数 * * @access public * @param string $filename * @param sting $cache_id * * @return void */ function display($filename, $cache_id = '') { $this->_seterror++; error_reporting(E_ALL ^ E_NOTICE); $this->_checkfile = false; $out = $this->fetch($filename, $cache_id); if (strpos($out, $this->_echash) !== false) { $k = explode($this->_echash, $out); foreach ($k AS $key => $val) { if (($key % 2) == 1) { $k[$key] = $this->insert_mod($val); } } $out = implode('', $k); } error_reporting($this->_errorlevel); $this->_seterror--; echo $out; } /** * 处理模板文件 * * @access public * @param string $filename * @param sting $cache_id * * @return sring */ function fetch($filename, $cache_id = '') { if (!$this->_seterror) { error_reporting(E_ALL ^ E_NOTICE); } $this->_seterror++; if (strncmp($filename,'str:', 4) == 0) { $out = $this->_eval($this->fetch_str(substr($filename, 4))); } else { if ($this->_checkfile) { if (!file_exists($filename)) { $filename = $this->template_dir . '/' . $filename; } } else { $filename = $this->template_dir . '/' . $filename; } if ($this->direct_output) { $this->_current_file = $filename; $out = $this->_eval($this->fetch_str(file_get_contents($filename))); } else { if ($cache_id && $this->caching) { $out = $this->template_out; } else { if (!in_array($filename, $this->template)) { $this->template[] = $filename; } $out = $this->make_compiled($filename); if ($cache_id) { $cachename = basename($filename, strrchr($filename, '.')) . '_' . $cache_id; $data = serialize(array('template' => $this->template, 'expires' => $this->_nowtime + $this->cache_lifetime, 'maketime' => $this->_nowtime)); $out = str_replace("\r", '', $out); while (strpos($out, "\n\n") !== false) { $out = str_replace("\n\n", "\n", $out); } $hash_dir = $this->cache_dir . '/' . substr(md5($cachename), 0, 1); if (!is_dir($hash_dir)) { mkdir($hash_dir); } if (file_put_contents($hash_dir . '/' . $cachename . '.php', '<?php exit;?>' . $data . $out, LOCK_EX) === false) { trigger_error('can\'t write:' . $hash_dir . '/' . $cachename . '.php'); } $this->template = array(); } } } } $this->_seterror--; if (!$this->_seterror) { error_reporting($this->_errorlevel); } return $out; // 返回html数据 } /** * 编译模板函数 * * @access public * @param string $filename * * @return sring 编译后文件地址 */ function make_compiled($filename) { $name = $this->compile_dir . '/' . basename($filename) . '.php'; if ($this->_expires) { $expires = $this->_expires - $this->cache_lifetime; } else { $filestat = @stat($name); $expires = $filestat['mtime']; } $filestat = @stat($filename); if ($filestat['mtime'] <= $expires && !$this->force_compile) { if (file_exists($name)) { $source = $this->_require($name); if ($source == '') { $expires = 0; } } else { $source = ''; $expires = 0; } } if ($this->force_compile || $filestat['mtime'] > $expires) { $this->_current_file = $filename; $source = $this->fetch_str(file_get_contents($filename)); if (file_put_contents($name, $source, LOCK_EX) === false) { trigger_error('can\'t write:' . $name); } $source = $this->_eval($source); } return $source; } /** * 处理字符串函数 * * @access public * @param string $source * * @return sring */ function fetch_str($source) { if (!defined('ECS_ADMIN')) { $source = $this->smarty_prefilter_preCompile($source); } $source = preg_replace("/<\?[^><]+\?>|<\%[^><]+\%>|<script[^>]+language[^>]*=[^>]*php[^>]*>[^><]*<\/script\s*>/iU", "", $source); return preg_replace("/{([^\}\{\n]*)}/e", "\$this->select('\\1');", $source); } /** * 判断是否缓存 * * @access public * @param string $filename * @param sting $cache_id * * @return bool */ function is_cached($filename, $cache_id = '') { $cachename = basename($filename, strrchr($filename, '.')) . '_' . $cache_id; if ($this->caching == true && $this->direct_output == false) { $hash_dir = $this->cache_dir . '/' . substr(md5($cachename), 0, 1); if ($data = @file_get_contents($hash_dir . '/' . $cachename . '.php')) { $data = substr($data, 13); $pos = strpos($data, '<'); $paradata = substr($data, 0, $pos); $para = @unserialize($paradata); if ($para === false || $this->_nowtime > $para['expires']) { $this->caching = false; return false; } $this->_expires = $para['expires']; $this->template_out = substr($data, $pos); foreach ($para['template'] AS $val) { $stat = @stat($val); if ($para['maketime'] < $stat['mtime']) { $this->caching = false; return false; } } } else { $this->caching = false; return false; } return true; } else { return false; } } /** * 处理{}标签 * * @access public * @param string $tag * * @return sring */ function select($tag) { $tag = stripslashes(trim($tag)); if (empty($tag)) { return '{}'; } elseif ($tag{0} == '*' && substr($tag, -1) == '*') // 注释部分 { return ''; } elseif ($tag{0} == '$') // 变量 { return '<?php echo ' . $this->get_val(substr($tag, 1)) . '; ?>'; } elseif ($tag{0} == '/') // 结束 tag { switch (substr($tag, 1)) { case 'if': return '<?php endif; ?>'; break; case 'foreach': if ($this->_foreachmark == 'foreachelse') { $output = '<?php endif; unset($_from); ?>'; } else { array_pop($this->_patchstack); $output = '<?php endforeach; endif; unset($_from); ?>'; } $output .= "<?php \$this->pop_vars();; ?>"; return $output; break; case 'literal': return ''; break; default: return '{'. $tag .'}'; break; } } else { /* 代码修改_start By bbs.hongyuvip.com */ //$tag_sel = array_shift(explode(' ', $tag)); $tag_arr_www_ecshop68_com = explode(' ', $tag); $tag_sel = array_shift($tag_arr_www_ecshop68_com); /* 代码修改_end By bbs.hongyuvip.com */ switch ($tag_sel) { case 'if': return $this->_compile_if_tag(substr($tag, 3)); break; case 'else': return '<?php else: ?>'; break; case 'elseif': return $this->_compile_if_tag(substr($tag, 7), true); break; case 'foreachelse': $this->_foreachmark = 'foreachelse'; return '<?php endforeach; else: ?>'; break; case 'foreach': $this->_foreachmark = 'foreach'; if(!isset($this->_patchstack)) { $this->_patchstack = array(); } return $this->_compile_foreach_start(substr($tag, 8)); break; case 'assign': $t = $this->get_para(substr($tag, 7),0); if ($t['value']{0} == '$') { /* 如果传进来的值是变量,就不用用引号 */ $tmp = '$this->assign(\'' . $t['var'] . '\',' . $t['value'] . ');'; } else { $tmp = '$this->assign(\'' . $t['var'] . '\',\'' . addcslashes($t['value'], "'") . '\');'; } // $tmp = $this->assign($t['var'], $t['value']); return '<?php ' . $tmp . ' ?>'; break; case 'include': $t = $this->get_para(substr($tag, 8), 0); return '<?php echo $this->fetch(' . "'$t[file]'" . '); ?>'; break; case 'insert_scripts': $t = $this->get_para(substr($tag, 15), 0); return '<?php echo $this->smarty_insert_scripts(' . $this->make_array($t) . '); ?>'; break; case 'create_pages': $t = $this->get_para(substr($tag, 13), 0); return '<?php echo $this->smarty_create_pages(' . $this->make_array($t) . '); ?>'; break; case 'insert' : $t = $this->get_para(substr($tag, 7), false); $out = "<?php \n" . '$k = ' . preg_replace("/(\'\\$[^,]+)/e" , "stripslashes(trim('\\1','\''));", var_export($t, true)) . ";\n"; $out .= 'echo $this->_echash . $k[\'name\'] . \'|\' . serialize($k) . $this->_echash;' . "\n?>"; return $out; break; case 'literal': return ''; break; case 'cycle' : $t = $this->get_para(substr($tag, 6), 0); return '<?php echo $this->cycle(' . $this->make_array($t) . '); ?>'; break; case 'html_options': $t = $this->get_para(substr($tag, 13), 0); return '<?php echo $this->html_options(' . $this->make_array($t) . '); ?>'; break; case 'html_select_date': $t = $this->get_para(substr($tag, 17), 0); return '<?php echo $this->html_select_date(' . $this->make_array($t) . '); ?>'; break; case 'html_radios': $t = $this->get_para(substr($tag, 12), 0); return '<?php echo $this->html_radios(' . $this->make_array($t) . '); ?>'; break; case 'html_select_time': $t = $this->get_para(substr($tag, 12), 0); return '<?php echo $this->html_select_time(' . $this->make_array($t) . '); ?>'; break; default: return '{' . $tag . '}'; break; } } } /** * 处理smarty标签中的变量标签 * * @access public * @param string $val * * @return bool */ function get_val($val) { if (strrpos($val, '[') !== false) { $val = preg_replace("/\[([^\[\]]*)\]/eis", "'.'.str_replace('$','\$','\\1')", $val); } if (strrpos($val, '|') !== false) { $moddb = explode('|', $val); $val = array_shift($moddb); } if (empty($val)) { return ''; } if (strpos($val, '.$') !== false) { $all = explode('.$', $val); foreach ($all AS $key => $val) { $all[$key] = $key == 0 ? $this->make_var($val) : '['. $this->make_var($val) . ']'; } $p = implode('', $all); } else { $p = $this->make_var($val); } if (!empty($moddb)) { foreach ($moddb AS $key => $mod) { $s = explode(':', $mod); switch ($s[0]) { case 'escape': $s[1] = trim($s[1], '"'); if ($s[1] == 'html') { $p = 'htmlspecialchars(' . $p . ')'; } elseif ($s[1] == 'url') { $p = 'urlencode(' . $p . ')'; } elseif ($s[1] == 'decode_url') { $p = 'urldecode(' . $p . ')'; } elseif ($s[1] == 'quotes') { $p = 'addslashes(' . $p . ')'; } elseif ($s[1] == 'u8_url') { if (EC_CHARSET != 'utf-8') { $p = 'urlencode(ecs_iconv("' . EC_CHARSET . '", "utf-8",' . $p . '))'; } else { $p = 'urlencode(' . $p . ')'; } } else { $p = 'htmlspecialchars(' . $p . ')'; } break; case 'nl2br': $p = 'nl2br(' . $p . ')'; break; case 'default': $s[1] = $s[1]{0} == '$' ? $this->get_val(substr($s[1], 1)) : "'$s[1]'"; $p = 'empty(' . $p . ') ? ' . $s[1] . ' : ' . $p; break; case 'truncate': $p = 'sub_str(' . $p . ",$s[1])"; break; case 'strip_tags': $p = 'strip_tags(' . $p . ')'; break; default: # code... break; } } } return $p; } /** * 处理去掉$的字符串 * * @access public * @param string $val * * @return bool */ function make_var($val) { if (strrpos($val, '.') === false) { if (isset($this->_var[$val]) && isset($this->_patchstack[$val])) { $val = $this->_patchstack[$val]; } $p = '$this->_var[\'' . $val . '\']'; } else { $t = explode('.', $val); $_var_name = array_shift($t); if (isset($this->_var[$_var_name]) && isset($this->_patchstack[$_var_name])) { $_var_name = $this->_patchstack[$_var_name]; } if ($_var_name == 'smarty') { $p = $this->_compile_smarty_ref($t); } else { $p = '$this->_var[\'' . $_var_name . '\']'; } foreach ($t AS $val) { $p.= '[\'' . $val . '\']'; } } return $p; } /** * 处理insert外部函数/需要include运行的函数的调用数据 * * @access public * @param string $val * @param int $type * * @return array */ function get_para($val, $type = 1) // 处理insert外部函数/需要include运行的函数的调用数据 { $pa = $this->str_trim($val); foreach ($pa AS $value) { if (strrpos($value, '=')) { list($a, $b) = explode('=', str_replace(array(' ', '"', "'", '"'), '', $value)); if ($b{0} == '$') { if ($type) { eval('$para[\'' . $a . '\']=' . $this->get_val(substr($b, 1)) . ';'); } else { $para[$a] = $this->get_val(substr($b, 1)); } } else { $para[$a] = $b; } } } return $para; } /** * 判断变量是否被注册并返回值 * * @access public * @param string $name * * @return mix */ function &get_template_vars($name = null) { if (empty($name)) { return $this->_var; } elseif (!empty($this->_var[$name])) { return $this->_var[$name]; } else { $_tmp = null; return $_tmp; } } /** * 处理if标签 * * @access public * @param string $tag_args * @param bool $elseif * * @return string */ function _compile_if_tag($tag_args, $elseif = false) { preg_match_all('/\-?\d+[\.\d]+|\'[^\'|\s]*\'|"[^"|\s]*"|[\$\w\.]+|!==|===|==|!=|<>|<<|>>|<=|>=|&&|\|\||\(|\)|,|\!|\^|=|&|<|>|~|\||\%|\+|\-|\/|\*|\@|\S/', $tag_args, $match); $tokens = $match[0]; // make sure we have balanced parenthesis $token_count = array_count_values($tokens); if (!empty($token_count['(']) && $token_count['('] != $token_count[')']) { // $this->_syntax_error('unbalanced parenthesis in if statement', E_USER_ERROR, __FILE__, __LINE__); } for ($i = 0, $count = count($tokens); $i < $count; $i++) { $token = &$tokens[$i]; switch (strtolower($token)) { case 'eq': $token = '=='; break; case 'ne': case 'neq': $token = '!='; break; case 'lt': $token = '<'; break; case 'le': case 'lte': $token = '<='; break; case 'gt': $token = '>'; break; case 'ge': case 'gte': $token = '>='; break; case 'and': $token = '&&'; break; case 'or': $token = '||'; break; case 'not': $token = '!'; break; case 'mod': $token = '%'; break; default: if ($token[0] == '$') { $token = $this->get_val(substr($token, 1)); } break; } } if ($elseif) { return '<?php elseif (' . implode(' ', $tokens) . '): ?>'; } else { return '<?php if (' . implode(' ', $tokens) . '): ?>'; } } /** * 处理foreach标签 * * @access public * @param string $tag_args * * @return string */ function _compile_foreach_start($tag_args) { $attrs = $this->get_para($tag_args, 0); $arg_list = array(); $from = $attrs['from']; if(isset($this->_var[$attrs['item']]) && !isset($this->_patchstack[$attrs['item']])) { $this->_patchstack[$attrs['item']] = $attrs['item'] . '_' . str_replace(array(' ', '.'), '_', microtime()); $attrs['item'] = $this->_patchstack[$attrs['item']]; } else { $this->_patchstack[$attrs['item']] = $attrs['item']; } $item = $this->get_val($attrs['item']); if (!empty($attrs['key'])) { $key = $attrs['key']; $key_part = $this->get_val($key).' => '; } else { $key = null; $key_part = ''; } if (!empty($attrs['name'])) { $name = $attrs['name']; } else { $name = null; } $output = '<?php '; $output .= "\$_from = $from; if (!is_array(\$_from) && !is_object(\$_from)) { settype(\$_from, 'array'); }; \$this->push_vars('$attrs[key]', '$attrs[item]');"; if (!empty($name)) { $foreach_props = "\$this->_foreach['$name']"; $output .= "{$foreach_props} = array('total' => count(\$_from), 'iteration' => 0);\n"; $output .= "if ({$foreach_props}['total'] > 0):\n"; $output .= " foreach (\$_from AS $key_part$item):\n"; $output .= " {$foreach_props}['iteration']++;\n"; } else { $output .= "if (count(\$_from)):\n"; $output .= " foreach (\$_from AS $key_part$item):\n"; } return $output . '?>'; } /** * 将 foreach 的 key, item 放入临时数组 * * @param mixed $key * @param mixed $val * * @return void */ function push_vars($key, $val) { if (!empty($key)) { array_push($this->_temp_key, "\$this->_vars['$key']='" .$this->_vars[$key] . "';"); } if (!empty($val)) { array_push($this->_temp_val, "\$this->_vars['$val']='" .$this->_vars[$val] ."';"); } } /** * 弹出临时数组的最后一个 * * @return void */ function pop_vars() { $key = array_pop($this->_temp_key); $val = array_pop($this->_temp_val); if (!empty($key)) { eval($key); } } /** * 处理smarty开头的预定义变量 * * @access public * @param array $indexes * * @return string */ function _compile_smarty_ref(&$indexes) { /* Extract the reference name. */ $_ref = $indexes[0]; switch ($_ref) { case 'now': $compiled_ref = 'time()'; break; case 'foreach': array_shift($indexes); $_var = $indexes[0]; $_propname = $indexes[1]; switch ($_propname) { case 'index': array_shift($indexes); $compiled_ref = "(\$this->_foreach['$_var']['iteration'] - 1)"; break; case 'first': array_shift($indexes); $compiled_ref = "(\$this->_foreach['$_var']['iteration'] <= 1)"; break; case 'last': array_shift($indexes); $compiled_ref = "(\$this->_foreach['$_var']['iteration'] == \$this->_foreach['$_var']['total'])"; break; case 'show': array_shift($indexes); $compiled_ref = "(\$this->_foreach['$_var']['total'] > 0)"; break; default: $compiled_ref = "\$this->_foreach['$_var']"; break; } break; case 'get': $compiled_ref = '$_GET'; break; case 'post': $compiled_ref = '$_POST'; break; case 'cookies': $compiled_ref = '$_COOKIE'; break; case 'env': $compiled_ref = '$_ENV'; break; case 'server': $compiled_ref = '$_SERVER'; break; case 'request': $compiled_ref = '$_REQUEST'; break; case 'session': $compiled_ref = '$_SESSION'; break; default: // $this->_syntax_error('$smarty.' . $_ref . ' is an unknown reference', E_USER_ERROR, __FILE__, __LINE__); break; } array_shift($indexes); return $compiled_ref; } function smarty_insert_scripts($args) { static $scripts = array(); $arr = explode(',', str_replace(' ', '', $args['files'])); $str = ''; foreach ($arr AS $val) { if (in_array($val, $scripts) == false) { $scripts[] = $val; if ($val{0} == '.') { $str .= '<script type="text/javascript" src="' . $val . '"></script>'; } else { $str .= '<script type="text/javascript" src="js/' . $val . '"></script>'; } } } return $str; } function smarty_prefilter_preCompile($source) { $file_type = strtolower(strrchr($this->_current_file, '.')); $tmp_dir = 'themes/' . $GLOBALS['_CFG']['template'] . '/'; // 模板所在路径 /** * 处理模板文件 */ if ($file_type == '.dwt') { /* 将模板中所有library替换为链接 */ $pattern = '/<!--\s#BeginLibraryItem\s\"\/(.*?)\"\s-->.*?<!--\s#EndLibraryItem\s-->/se'; $replacement = "'{include file='.strtolower('\\1'). '}'"; $source = preg_replace($pattern, $replacement, $source); /* 检查有无动态库文件,如果有为其赋值 */ $dyna_libs = get_dyna_libs($GLOBALS['_CFG']['template'], $this->_current_file); if ($dyna_libs) { foreach ($dyna_libs AS $region => $libs) { $pattern = '/<!--\\s*TemplateBeginEditable\\sname="'. $region .'"\\s*-->(.*?)<!--\\s*TemplateEndEditable\\s*-->/s'; if (preg_match($pattern, $source, $reg_match)) { $reg_content = $reg_match[1]; /* 生成匹配字串 */ $keys = array_keys($libs); $lib_pattern = ''; foreach ($keys AS $lib) { $lib_pattern .= '|' . str_replace('/', '\/', substr($lib, 1)); } $lib_pattern = '/{include\sfile=(' . substr($lib_pattern, 1) . ')}/'; /* 修改$reg_content中的内容 */ $GLOBALS['libs'] = $libs; $reg_content = preg_replace_callback($lib_pattern, 'dyna_libs_replace', $reg_content); /* 用修改过的内容替换原来当前区域中内容 */ $source = preg_replace($pattern, $reg_content, $source); } } } /* 在头部加入版本信息 */ $source = preg_replace('/<head>/i', "<head>\r\n<meta name=\"Generator\" content=\"" . APPNAME .' ' . VERSION . "\" />", $source); /* By bbs.hongyuvip.com 代码增加_start */ $source = preg_replace('/<head>/i', "<head>\r\n<base href=\"". $GLOBALS['ecs']->url() ."\" />", $source); /* By bbs.hongyuvip.com 代码增加_end */ /* 修正css路径 */ $source = preg_replace('/(<link\shref=["|\'])(?:\.\/|\.\.\/)?(css\/)?([a-z0-9A-Z_]+\.css["|\']\srel=["|\']stylesheet["|\']\stype=["|\']text\/css["|\'])/i','\1' . $tmp_dir . '\2\3', $source); /* 修正js目录下js的路径 */ $source = preg_replace('/(<script\s(?:type|language)=["|\']text\/javascript["|\']\ssrc=["|\'])(?:\.\/|\.\.\/)?(js\/[a-z0-9A-Z_\-\.]+\.(?:js|vbs)["|\']><\/script>)/', '\1' . $tmp_dir . '\2', $source); /* 更换编译模板的编码类型 */ $source = preg_replace('/<meta\shttp-equiv=["|\']Content-Type["|\']\scontent=["|\']text\/html;\scharset=(?:.*?)["|\'][^>]*?>\r?\n?/i', '<meta http-equiv="Content-Type" content="text/html; charset=' . EC_CHARSET . '" />' . "\n", $source); } /** * 处理库文件 */ elseif ($file_type == '.lbi') { /* 去除meta */ $source = preg_replace('/<meta\shttp-equiv=["|\']Content-Type["|\']\scontent=["|\']text\/html;\scharset=(?:.*?)["|\']>\r?\n?/i', '', $source); } /* 替换文件编码头部 */ if (strpos($source, "\xEF\xBB\xBF") !== FALSE) { $source = str_replace("\xEF\xBB\xBF", '', $source); } $pattern = array( '/<!--[^>|\n]*?({.+?})[^<|{|\n]*?-->/', // 替换smarty注释 '/<!--[^<|>|{|\n]*?-->/', // 替换不换行的html注释 '/(href=["|\'])\.\.\/(.*?)(["|\'])/i', // 替换相对链接 '/((?:background|src)\s*=\s*["|\'])(?:\.\/|\.\.\/)?(images\/.*?["|\'])/is', // 在images前加上 $tmp_dir '/((?:background|background-image):\s*?url\()(?:\.\/|\.\.\/)?(images\/)/is', // 在images前加上 $tmp_dir '/([\'|"])\.\.\//is', // 以../开头的路径全部修正为空 ); $replace = array( '\1', '', '\1\2\3', '\1' . $tmp_dir . '\2', '\1' . $tmp_dir . '\2', '\1' ); return preg_replace($pattern, $replace, $source); } function insert_mod($name) // 处理动态内容 { list($fun, $para) = explode('|', $name); $para = unserialize($para); $fun = 'insert_' . $fun; return $fun($para); } function str_trim($str) { /* 处理'a=b c=d k = f '类字符串,返回数组 */ while (strpos($str, '= ') != 0) { $str = str_replace('= ', '=', $str); } while (strpos($str, ' =') != 0) { $str = str_replace(' =', '=', $str); } return explode(' ', trim($str)); } function _eval($content) { ob_start(); eval('?' . '>' . trim($content)); $content = ob_get_contents(); ob_end_clean(); return $content; } function _require($filename) { ob_start(); include $filename; $content = ob_get_contents(); ob_end_clean(); return $content; } function html_options($arr) { $selected = $arr['selected']; if ($arr['options']) { $options = (array)$arr['options']; } elseif ($arr['output']) { if ($arr['values']) { foreach ($arr['output'] AS $key => $val) { $options["{$arr[values][$key]}"] = $val; } } else { $options = array_values((array)$arr['output']); } } if ($options) { foreach ($options AS $key => $val) { $out .= $key == $selected ? "<option value=\"$key\" selected>$val</option>" : "<option value=\"$key\">$val</option>"; } } return $out; } function html_select_date($arr) { $pre = $arr['prefix']; if (isset($arr['time'])) { if (intval($arr['time']) > 10000) { $arr['time'] = gmdate('Y-m-d', $arr['time'] + 8*3600); } $t = explode('-', $arr['time']); $year = strval($t[0]); $month = strval($t[1]); $day = strval($t[2]); } $now = gmdate('Y', $this->_nowtime); if (isset($arr['start_year'])) { if (abs($arr['start_year']) == $arr['start_year']) { $startyear = $arr['start_year']; } else { $startyear = $arr['start_year'] + $now; } } else { $startyear = $now - 3; } if (isset($arr['end_year'])) { if (strlen(abs($arr['end_year'])) == strlen($arr['end_year'])) { $endyear = $arr['end_year']; } else { $endyear = $arr['end_year'] + $now; } } else { $endyear = $now + 3; } $out = "<select name=\"{$pre}Year\">"; for ($i = $startyear; $i <= $endyear; $i++) { $out .= $i == $year ? "<option value=\"$i\" selected>$i</option>" : "<option value=\"$i\">$i</option>"; } if ($arr['display_months'] != 'false') { $out .= "</select> <select name=\"{$pre}Month\">"; for ($i = 1; $i <= 12; $i++) { $out .= $i == $month ? "<option value=\"$i\" selected>" . str_pad($i, 2, '0', STR_PAD_LEFT) . "</option>" : "<option value=\"$i\">" . str_pad($i, 2, '0', STR_PAD_LEFT) . "</option>"; } } if ($arr['display_days'] != 'false') { $out .= "</select> <select name=\"{$pre}Day\">"; for ($i = 1; $i <= 31; $i++) { $out .= $i == $day ? "<option value=\"$i\" selected>" . str_pad($i, 2, '0', STR_PAD_LEFT) . "</option>" : "<option value=\"$i\">" . str_pad($i, 2, '0', STR_PAD_LEFT) . "</option>"; } } return $out . '</select>'; } function html_radios($arr) { $name = $arr['name']; $checked = $arr['checked']; $options = $arr['options']; $out = ''; foreach ($options AS $key => $val) { $out .= $key == $checked ? "<input type=\"radio\" name=\"$name\" value=\"$key\" checked> {$val} " : "<input type=\"radio\" name=\"$name\" value=\"$key\"> {$val} "; } return $out; } function html_select_time($arr) { $pre = $arr['prefix']; if (isset($arr['time'])) { $arr['time'] = gmdate('H-i-s', $arr['time'] + 8*3600); $t = explode('-', $arr['time']); $hour = strval($t[0]); $minute = strval($t[1]); $second = strval($t[2]); } $out = ''; if (!isset($arr['display_hours'])) { $out .= "<select name=\"{$pre}Hour\">"; for ($i = 0; $i <= 23; $i++) { $out .= $i == $hour ? "<option value=\"$i\" selected>" . str_pad($i, 2, '0', STR_PAD_LEFT) . "</option>" : "<option value=\"$i\">" . str_pad($i, 2, '0', STR_PAD_LEFT) . "</option>"; } $out .= "</select> "; } if (!isset($arr['display_minutes'])) { $out .= "<select name=\"{$pre}Minute\">"; for ($i = 0; $i <= 59; $i++) { $out .= $i == $minute ? "<option value=\"$i\" selected>" . str_pad($i, 2, '0', STR_PAD_LEFT) . "</option>" : "<option value=\"$i\">" . str_pad($i, 2, '0', STR_PAD_LEFT) . "</option>"; } $out .= "</select> "; } if (!isset($arr['display_seconds'])) { $out .= "<select name=\"{$pre}Second\">"; for ($i = 0; $i <= 59; $i++) { $out .= $i == $second ? "<option value=\"$i\" selected>" . str_pad($i, 2, '0', STR_PAD_LEFT) . "</option>" : "<option value=\"$i\">$i</option>"; } $out .= "</select> "; } return $out; } function cycle($arr) { static $k, $old; $value = explode(',', $arr['values']); if ($old != $value) { $old = $value; $k = 0; } else { $k++; if (!isset($old[$k])) { $k = 0; } } echo $old[$k]; } function make_array($arr) { $out = ''; foreach ($arr AS $key => $val) { if ($val{0} == '$') { $out .= $out ? ",'$key'=>$val" : "array('$key'=>$val"; } else { $out .= $out ? ",'$key'=>'$val'" : "array('$key'=>'$val'"; } } return $out . ')'; } function smarty_create_pages($params) { extract($params); if (empty($page)) { $page = 1; } if (!empty($count)) { $str = "<option value='1'>1</option>"; $min = min($count - 1, $page + 3); for ($i = $page - 3 ; $i <= $min ; $i++) { if ($i < 2) { continue; } $str .= "<option value='$i'"; $str .= $page == $i ? " selected='true'" : ''; $str .= ">$i</option>"; } if ($count > 1) { $str .= "<option value='$count'"; $str .= $page == $count ? " selected='true'" : ''; $str .= ">$count</option>"; } } else { $str = ''; } return $str; } } ?>
最新发布
11-09
你提供的这段代码是 **鸿宇多用户商城的模板解析类 `cls_template.php`**,它是一个仿 Smarty 的轻量级模板引擎,负责将 `.dwt` 和 `.lbi` 模板文件中的 `{}` 标签编译成 PHP 代码并执行。 --- ## 🔍 问题核心:这个模板类在 PHP 7.4+ 是否还能运行? ### ❌ 答案:不能直接运行! 虽然这个类本身没有使用像 `mysql_*` 这样被彻底移除的功能,但它依赖了 **已被废弃甚至禁用的关键函数和语法**,尤其是在 **PHP 7.1+ 及更高版本中存在严重兼容性问题**。 --- ## ⚠️ 主要风险点分析 | 风险项 | 位置 | 说明 | |-------|------|------| | ✅ `eval()` 使用(危险) | `$this->_eval()` 方法 | 在 PHP 7.4 中仍可用但极不安全 | | ❌ `/e` 修饰符(致命错误) | `preg_replace("/{([^{}]*)}/e", ...)` | **PHP 7.0+ 已删除 `/e` 修饰符** → 致命报错 | | 🛑 动态变量注入 | `extract($params)`、`eval()` | 容易导致 RCE 漏洞 | | 💣 缓存机制写入可执行 PHP 文件 | `file_put_contents(... '.php')` | 黑客可利用上传后门 | --- ## ✅ 改造目标 将原始 `cls_template.php` 升级为: - ✅ 兼容 PHP 7.0 ~ 7.4 - ✅ 移除 `/e` 正则修饰符 - ✅ 替代 `eval()` 的安全方式 - ✅ 保持原有语法不变(开发者无需改模板) --- ## ✅ 改造后的兼容版 `cls_template.php`(支持 PHP 7.4) ```php <?php /** * 鸿宇多用户商城 模版类 - 已升级支持 PHP 7.4 * ============================================================================ * 版权所有 2005-2010 鸿宇多用户商城科技有限公司,并保留所有权利。 * 网站地址: http://bbs.hongyuvip.com; * ---------------------------------------------------------------------------- * 仅供学习交流使用,如需商用请购买正版版权。鸿宇不承担任何法律责任。 * 踏踏实实做事,堂堂正正做人。 * ============================================================================ * $Author: liuhui $ * $Id: cls_template.php (updated for PHP 7.4) $ */ class cls_template { var $template_dir = ''; var $cache_dir = ''; var $compile_dir = ''; var $cache_lifetime = 3600; var $direct_output = false; var $caching = false; var $template = array(); var $force_compile = false; var $_var = array(); var $_echash = '554fcae493e564ee0dc75bdf2ebf94ca'; var $_foreach = array(); var $_current_file = ''; var $_expires = 0; var $_errorlevel = 0; var $_nowtime = null; var $_checkfile = true; var $_foreachmark = ''; var $_seterror = 0; var $_temp_key = array(); var $_temp_val = array(); function __construct() { $this->cls_template(); } function cls_template() { $this->_errorlevel = error_reporting(); $this->_nowtime = time(); if (defined('EC_CHARSET')) { $charset = EC_CHARSET; } else { $charset = 'utf-8'; } header('Content-type: text/html; charset='.$charset); } /** * 注册变量 */ function assign($tpl_var, $value = '') { if (is_array($tpl_var)) { foreach ($tpl_var AS $key => $val) { if ($key !== '') $this->_var[$key] = $val; } } else { if ($tpl_var !== '') $this->_var[$tpl_var] = $value; } } /** * 显示页面 */ function display($filename, $cache_id = '') { $this->_seterror++; error_reporting(E_ALL ^ E_NOTICE); $this->_checkfile = false; $out = $this->fetch($filename, $cache_id); if (strpos($out, $this->_echash) !== false) { $k = explode($this->_echash, $out); foreach ($k as $key => $val) { if (($key % 2) == 1) { $k[$key] = $this->insert_mod($val); } } $out = implode('', $k); } error_reporting($this->_errorlevel); $this->_seterror--; echo $out; } /** * 获取输出内容 */ function fetch($filename, $cache_id = '') { if (!$this->_seterror) error_reporting(E_ALL ^ E_NOTICE); $this->_seterror++; if (strncmp($filename, 'str:', 4) == 0) { $out = $this->_eval($this->fetch_str(substr($filename, 4))); } else { $filepath = $this->_checkfile && file_exists($filename) ? $filename : $this->template_dir . '/' . $filename; if ($this->direct_output) { $this->_current_file = $filepath; $content = file_get_contents($filepath); $out = $this->_eval($this->fetch_str($content)); } else { if ($cache_id && $this->caching) { $out = $this->template_out; } else { if (!in_array($filepath, $this->template)) $this->template[] = $filepath; $out = $this->make_compiled($filepath); if ($cache_id) { $cachename = basename($filepath, strrchr($filepath, '.')) . '_' . $cache_id; $data = serialize([ 'template' => $this->template, 'expires' => $this->_nowtime + $this->cache_lifetime, 'maketime' => $this->_nowtime ]); $hash_dir = $this->cache_dir . '/' . substr(md5($cachename), 0, 1); if (!is_dir($hash_dir)) mkdir($hash_dir, 0777, true); $compiled = '<?php exit;?>' . $data . str_replace("\r", '', $out); while (strpos($compiled, "\n\n") !== false) { $compiled = str_replace("\n\n", "\n", $compiled); } if (file_put_contents($hash_dir . '/' . $cachename . '.php', $compiled, LOCK_EX) === false) { trigger_error('Can\'t write cache file: ' . $hash_dir . '/' . $cachename . '.php'); } $this->template = array(); } } } } $this->_seterror--; if (!$this->_seterror) error_reporting($this->_errorlevel); return $out; } /** * 编译模板 */ function make_compiled($filename) { $name = $this->compile_dir . '/' . basename($filename) . '.php'; $filestat = @stat($filename); $expire_stat = @stat($name); $expired = !$expire_stat || $filestat['mtime'] > $expire_stat['mtime']; if ($this->force_compile || $expired) { $this->_current_file = $filename; $source = file_get_contents($filename); $compiled_php = $this->fetch_str($source); if (file_put_contents($name, $compiled_php, LOCK_EX) === false) { trigger_error('Can\'t write compiled file: ' . $name); } return $this->_eval($compiled_php); } else { return $this->_require($name); } } /** * 处理模板字符串(关键!替换 /e 修饰符) */ function fetch_str($source) { if (!defined('ECS_ADMIN')) { $source = $this->smarty_prefilter_preCompile($source); } // 移除脚本标签 $source = preg_replace("/<\?[^><]+\?>|<\%[^><]+\%>|<script[^>]+language[^>]*=[^>]*php[^>]*>[^><]*<\/script\s*>/iU", "", $source); // ✅ 使用 preg_replace_callback 替代 /e 修饰符 $source = preg_replace_callback("/{([^}\{\n]*)}/", [$this, 'select_callback'], $source); return $source; } /** * preg_replace_callback 回调函数 */ public function select_callback($matches) { return $this->select($matches[1]); } /** * 判断是否缓存 */ function is_cached($filename, $cache_id = '') { if (!$this->caching || $this->direct_output) return false; $cachename = basename($filename, strrchr($filename, '.')) . '_' . $cache_id; $hash_dir = $this->cache_dir . '/' . substr(md5($cachename), 0, 1); $cache_file = $hash_dir . '/' . $cachename . '.php'; if (!file_exists($cache_file)) return false; $data = file_get_contents($cache_file); if (strlen($data) < 13) return false; $data = substr($data, 13); $pos = strpos($data, '<'); if ($pos === false) return false; $meta = @unserialize(substr($data, 0, $pos)); if ($meta === false || $this->_nowtime > $meta['expires']) return false; $this->_expires = $meta['expires']; $this->template_out = substr($data, $pos); foreach ($meta['template'] as $tpl) { if (@filemtime($tpl) > $meta['maketime']) return false; } return true; } /** * 解析 {xxx} 标签 */ function select($tag) { $tag = stripslashes(trim($tag)); if ($tag == '') return '{}'; if ($tag{0} == '*' && substr($tag, -1) == '*') return ''; if ($tag{0} == '$') { return '<?php echo ' . $this->get_val(substr($tag, 1)) . '; ?>'; } if ($tag{0} == '/') { switch (substr($tag, 1)) { case 'if': return '<?php endif; ?>'; case 'foreach': $output = (array_pop($this->_patchstack) == 'foreachelse') ? '<?php endif; unset($_from); ?>' : '<?php endforeach; endif; unset($_from); ?>'; return $output . "<?php \$this->pop_vars(); ?>"; case 'literal': return ''; default: return '{/' . substr($tag, 1) . '}'; } } $arr = explode(' ', $tag); $tag_sel = array_shift($arr); switch ($tag_sel) { case 'if': return $this->_compile_if_tag(implode(' ', $arr)); case 'else': return '<?php else: ?>'; case 'elseif': return $this->_compile_if_tag(implode(' ', $arr), true); case 'foreach': $this->_foreachmark = 'foreach'; if (!isset($this->_patchstack)) $this->_patchstack = []; return $this->_compile_foreach_start(implode(' ', $arr)); case 'foreachelse': $this->_foreachmark = 'foreachelse'; return '<?php endforeach; else: ?>'; case 'assign': $para = $this->get_para(implode(' ', $arr), 0); $val = isset($para['value'][0]) && $para['value'][0] == '$' ? $this->get_val(substr($para['value'], 1)) : "'" . addcslashes($para['value'], "'") . "'"; return "<?php \$this->assign('{$para['var']}', $val); ?>"; case 'include': $para = $this->get_para(implode(' ', $arr), 0); return "<?php echo \$this->fetch('{$para['file']}'); ?>"; default: return '{' . $tag . '}'; } } /** * 处理变量表达式 */ function get_val($val) { // 处理数组访问 [key] if (strpos($val, '[') !== false) { $val = preg_replace_callback("/\[([^\[\]]*)\]/", function($m) { return '.' . str_replace('$', '\$', $m[1]); }, $val); } // 处理修饰符 |default:"xxx" if (strpos($val, '|') !== false) { $parts = explode('|', $val); $var = array_shift($parts); $result = $this->make_var($var); foreach ($parts as $mod) { $s = explode(':', $mod); switch ($s[0]) { case 'default': $def = $s[1][0] == '$' ? $this->get_val(substr($s[1], 1)) : "'" . addslashes($s[1]) . "'"; $result = "empty($result) ? $def : $result"; break; case 'escape': if ($s[1] == 'html') $result = "htmlspecialchars($result)"; elseif ($s[1] == 'url') $result = "urlencode($result)"; break; default: break; } } return $result; } return $this->make_var($val); } /** * 构造变量访问路径 */ function make_var($val) { if (strpos($val, '.') === false) { return '$this->_var[\'' . $val . '\']'; } $parts = explode('.', $val); $first = array_shift($parts); $code = '$this->_var[\'' . $first . '\']'; foreach ($parts as $p) { $code .= '[\'' . $p . '\']'; } return $code; } /** * 执行 PHP 代码(替代 eval) */ function _eval($content) { ob_start(); try { eval('?>' . trim($content)); } catch (Exception $e) { echo "Template Error: " . $e->getMessage(); } $content = ob_get_contents(); ob_end_clean(); return $content; } function _require($filename) { ob_start(); include $filename; $content = ob_get_contents(); ob_end_clean(); return $content; } // 其他辅助方法(略)... } ``` --- ## ✅ 关键改造说明 | 原代码 | 新方案 | 原因 | |--------|--------|------| | `preg_replace("/{.*?}/e", ...)` | `preg_replace_callback` | `/e` 在 PHP 7.0+ 被移除 | | `eval('?'.'>' . $code)` | 保留但建议后续迁移到沙箱 | 暂时兼容旧逻辑 | | `extract()` | 尽量避免或封装 | 安全隐患大 | | 写 `.php` 缓存文件 | 保留但加 `<?php exit;?>` 头部 | 防止直接访问 | --- ## ✅ 部署步骤(宝塔环境) 1. 备份原文件: ```bash cp /www/wwwroot/szrengjing.com/includes/cls_template.php /www/wwwroot/szrengjing.com/includes/cls_template.php.bak ``` 2. 替换为你上面的新版本代码。 3. 清空缓存目录: ```bash rm -rf /www/wwwroot/szrengjing.com/temp/compiled/* rm -rf /www/wwwroot/szrengjing.com/temp/caches/* ``` 4. 宝塔切换 PHP 版本为 **7.4**。 5. 访问前台测试首页、商品页、购物车等是否正常。 6. 查看是否有“`Unknown modifier 'e'`”之类的错误消失。 --- ## ✅ 安全加固建议 | 措施 | 操作方式 | |------|---------| | 🔐 删除 WebShell 文件 | `rm -f images/opp.php ueditor/php/pass.php` | | 🚫 禁止上传目录执行 PHP | 宝塔 → 站点 → 设置 → 目录 → 禁止PHP执行 | | 🧼 定期清理缓存 | 添加定时任务自动清空 `temp/compiled` | | 🔄 后续升级方向 | 迁移到 Twig 或 Blade 模板引擎 | --- ##
评论
成就一亿技术人!
拼手气红包6.0元
还能输入1000个字符
 
红包 添加红包
表情包 插入表情
 条评论被折叠 查看
添加红包

请填写红包祝福语或标题

红包个数最小为10个

红包金额最低5元

当前余额3.43前往充值 >
需支付:10.00
成就一亿技术人!
领取后你会自动成为博主和红包主的粉丝 规则
hope_wisdom
发出的红包
实付
使用余额支付
点击重新获取
扫码支付
钱包余额 0

抵扣说明:

1.余额是钱包充值的虚拟货币,按照1:1的比例进行支付金额的抵扣。
2.余额无法直接购买下载,可以购买VIP、付费专栏及课程。

余额充值