<?php
/**
 *      [Discuz!] (C)2001-2099 Comsenz Inc.
 *      This is NOT a freeware, use is subject to license terms
 *
 *      $Id: tools.php 2015-03-12 18:00:43Z Tuesday $
 */

/**
 * 默认密码: admin, 请不要手工编辑密码 [21232f297a57a5a743894a0e4a801fc3]。
 */
define('TPASSWORD', '21232f297a57a5a743894a0e4a801fc3'); // 密码解密md5一层

/*************************************以下部分为tools工具箱的核心代码，请不要随意修改 Tuesday **************************************/
define('PHPS_CHARSET', 'UTF-8');
error_reporting(0);
date_default_timezone_set('UTC');
define('TMAGIC_QUOTES_GPC', function_exists('get_magic_quotes_gpc') && get_magic_quotes_gpc());
define('TOOLS_ROOT', rtrim(dirname(__FILE__),'/\\').DIRECTORY_SEPARATOR);

$data = file_get_contents(TOOLS_ROOT.'source/discuz_version.php');
preg_match("/define\('DISCUZ_VERSION.*'([^\']*)'\)/isU", $data, $reg);
!$reg[1] && $reg[1] = 'X3.2';
define('DISCUZ_VERSION', $reg[1]);
define('DISCUZ_DOWN_VERSION', str_ireplace('x','',DISCUZ_VERSION));
define('TOOLS_DISCUZ_VERSION', 'Discuz! '.DISCUZ_VERSION);
define('TOOLS_VERSION', 'Tools '.DISCUZ_VERSION);

$tools_versions = TOOLS_VERSION;
$tools_discuz_version = TOOLS_DISCUZ_VERSION;

if(!TMAGIC_QUOTES_GPC) {
	$_GET = taddslashes($_GET);
	$_POST = taddslashes($_POST);
	$_COOKIE = taddslashes($_COOKIE);
}

if (isset($_GET['GLOBALS']) || isset($_POST['GLOBALS']) ||  isset($_COOKIE['GLOBALS']) || isset($_FILES['GLOBALS'])) {
	show_msg('您当前的访问请求当中含有非法字符，已经被系统拒绝');
}

if($_SERVER['REQUEST_METHOD'] == 'POST' && !empty($_POST)) {
	$_GET = array_merge($_GET, $_POST);
}

$actionarray = array('index', 'setadmin', 'closesite', 'closeplugin', 'repairdb', 'reinstall' , 'restoredb', 'updatecache', 'login', 'logout','editpass','serverinfo','happy');
$_GET['action'] = htmlspecialchars($_GET['action']);
$action = in_array($_GET['action'], $actionarray) ? $_GET['action'] : 'index';

$t = new T();
$t->init();
$config = $t->config;

!$config['charset'] && $config['charset'] = PHPS_CHARSET;
define('PHP_CHARSET',$config['charset']);
define('DBNAME', $config['db']['1']['dbname']);
header('Content-type: text/html; charset=utf-8');

if(!is_login()) {
	login_page();
	exit;
}

define('DB_PRE',$t->dbconfig['tablepre']);

# Tuesday 新增加功能.
switch($action){
    case 'serverinfo':
   	include_once(TOOLS_ROOT.'source/class/class_core.php');
	include_once(TOOLS_ROOT.'source/function/function_core.php');
    header('Content-type: text/html; charset=utf-8');
    
	$discuz = & discuz_core::instance();
	$discuz->init();
    $_axtime = microtime(true);
    set_time_limit(0);
    $fileint = $dirint = 0;
    function getBytes($folder = './'){
         global $fileint,$dirint;
         $totalSize=0;
         $handle = @opendir($folder) or die("Cannot open " . $folder);
         $dirint ++;
         while($file = readdir($handle)){
           if($file !== "." && $file !== ".."){
                if(is_dir($folder.$file.'/')){
                    $totalSize += getBytes($folder.$file.'/');
                }
                
                if(is_file($folder.$file)){
                    $totalSize += filesize($folder.$file);
                    $fileint ++;
                }
           }
         }
         closedir($handle);
         return $totalSize;
    }
    

        
    $formhash = thash();
    $filesize = fun_size(getBytes());
    
    $timezone = date_default_timezone_get();
    $datetime = date('Y-m-d H:i:s', time());
    $sapiname = php_sapi_name();
    $tools_discuz_version =TOOLS_DISCUZ_VERSION;
    $dbver = DB::fetch_first("SELECT VERSION() AS ver");
    !$dbver['ver'] && $dbver['ver'] = 'empty';
    $phpver = 'php/'. phpversion();
    
    if(strpos($sapiname,'apache') !== false)
    $sapiname = apache_get_version();
    
    if(is_file('./data/install.lock') && $t = filemtime('./data/install.lock')){
        $installtime = date('Y-m-d H:i:s',$t);
        $runtime = round((time() - $t) / (3600*24));
    }
    
    $databases = DBNAME;
    $sql = "SHOW TABLE STATUS FROM `{$databases}`";
    $query =  DB::query($sql);
    $indexcount = $tabcount = $tabsize = 0;
    while($row = DB::fetch($query)){
        $l = fun_size($row['Data_length']);
        $inl = fun_size($row['Index_length']);
        $dbsection .= "<option value=\"\">{$row['Name']} - [容量: $l; 索引容量:$inl] </option>";
        $tabsize += $row['Data_length'];
        $indexcount += $row['Index_length'];
        $tabcount += 1;
    }
    
       
    $allcount = fun_size($tabsize+$indexcount);
    $tabsize = fun_size($tabsize);
    $indexcount =fun_size($indexcount);
    
    $xtime = sprintf('%0.2f', (microtime(true) - $_axtime));
    
    // TODO: 首页显示层.
	show_header();
	print<<<END
    <style type="text/css">
    ul.info_list li{height: 24px; line-height: 24px;}
    h5{padding: 0;}
</style>
	<p>欢迎使用 Tools 之 Discuz! 急诊箱功能！我们致力于为您解决 Discuz! 站点的紧急故障，欢迎各位站长朋友们使用。</p>
	<h5>Discuz 版本:</h5>
	<ul>
		<li>{$tools_discuz_version}</li>
	</ul>
	<h5>服务器信息：</h5>
	<ul class="info_list">
		<li>服务器时间: {$datetime} ({$timezone})</li>
		<li>服务器API: $sapiname</li>
		<li>PHP版本号: $phpver</li>
		<li>Mysql版本号: MYSQL {$dbver['ver']}</li>
		<li>首次运行时间: {$installtime} 总共 {$runtime} 天</li>
	</ul>
    
    
    <h5>文件信息：</h5>
	<ul class="info_list">
		<li>站点目录总容量: $filesize</li>
		<li>站点文件数量: $fileint 个</li>
		<li>站点目录数量: $dirint 个</li>
	</ul>
    
    <h5>数据库信息：</h5>
	<ul class="info_list">
        <li>数据库名: $databases</li>
		<li>数据表总数: $tabcount</li>
		<li>数据表总容量: $tabsize</li>
		<li>数据表索引容量: $indexcount</li>
		<li>数据表实际占用容量: $allcount</li>
		<li>数据表详细情况列表:<select>
    $dbsection</select></li>
	</ul>
    <h5>性能相关</h5>
	<ul class="info_list">
		<li>运行时间: $xtime 秒 (小于2秒才算性价比))</li>
	</ul>
    
END;
	show_footer();
        
        break;
    case 'editpass':
        if($_POST['act'] == 'delepluges'){
            $pname = trim($_POST['pluname']);
            
            if(!$pname){
                show_msg('请输入插件名字或者插件ID'); 
            }
            
            $tem = explode(' ', $pname);
            $wherestr = '';
            if($tem[0]){
                $names = $tem[0];
                $wherestr .= "AND `name`='$names' ";
            }
            
            if($tem[1]){
                $names = $tem[1];
                $wherestr .= "AND `version`='$names'";
            }
            
            if(is_numeric($pname)){
                $pname += 0;
                $wherestr = "AND `pluginid`='$pname'";
            }
            
            if(strpos($pname, '/') === (strlen($pname)-1)){
                $names = $pname;
                $wherestr = "AND `directory`='$names'";
            }
            
            $t->connect_db();
            $sql = "SELECT * FROM ".DB_PRE."common_plugin WHERE 1 {$wherestr} LIMIT 1";
            $pludata = mysql_fetch_array(mysql_query($sql,$t->db), MYSQL_ASSOC);

            if(!$pludata){
                show_msg('未找到插件: '.htmlspecialchars($tem[0]).' 版本号:'.htmlspecialchars($tem[1]) );
            }
            
            $is_check = unserialize($pludata['modules']);
            if($is_check['system']){
                show_msg('系统插件, 请不要删除之!');
            }
            
            $pid = $pludata['pluginid']+0;
            $pludata['directory'] = strtr($pludata['directory'], array('.'=>''));
            $dirs = './source/plugin/'.$pludata['directory'];
            if(!is_dir($dirs)){
                show_msg('插件目录不存在:'.$dirs.' 请手工创建目录后, 再删除插件');
            }
            
            if(!$pludata['directory'] || strlen($pludata['directory']) <= 1){
                show_msg('检测到的插件目录非法');
            }
            
            function delTree($dir) {
                $dir = rtrim($dir,'/');
                $files = array_diff(scandir($dir), array('.','..')); 
                foreach ($files as $file) { 
                  (is_dir("$dir/$file")) ? delTree("$dir/$file") : unlink("$dir/$file"); 
                } 
                return @rmdir($dir); 
           }
           if($is_check['extra']['uninstallfile']){
             $filename = DISCUZ_ROOT.'./source/plugin/'.$pludata['directory'].$is_check['extra']['uninstallfile'];
             @include_once($filename);
           }
           
           if(!delTree($dirs))
               show_msg('插件目录无法删除:'.$dirs.' 请检查权限');
           if($pid){
                mysql_query("DELETE FROM ".DB_PRE."common_plugin WHERE pluginid='$pid'",$t->db);
                mysql_query("DELETE FROM ".DB_PRE."common_pluginvar WHERE pluginid='$pid'",$t->db);
           }

           if(true)
                show_msg(htmlspecialchars($pname).'插件 已经删除成功!');        
        }
        
        // TODO: 修改密码, 让用户管理这个平台更方便.
        if($_POST['oldpass'] && $_POST['newpass']){
            $oldpass = trim($_POST['oldpass']);
            $newpass = trim($_POST['newpass']);
            $thash = $_POST['formhash'];
            
            if($thash !== thash()){
               show_msg('你所请求的来路不正常, 请稍候重试!'); 
            }
            
            if($oldpass == $newpass){
                show_msg('不能设置相同于旧密码的新密码');
            }
            
            if(strlen($oldpass) <5 || strlen($oldpass) < 5){
                show_msg('不能设置小于5位的密码');
            }
            $oldpass = md5($oldpass);
            if( $oldpass !== TPASSWORD){
                show_msg('你的旧密码错误');
            }
            $newpass = md5($newpass);
            $isfw = 1;
        }
        
        #修改当前文件.以便让密码更新进去.
        if($isfw === 1){
            if(!is_writable(__FILE__)){
               show_msg('本文件禁止可写, 请设置可写权限!'); 
            }
            
            $fp = @fopen(__FILE__,'rb+');
            while(!feof($fp)){
                $t = fgets($fp);
                if($newpass && strpos($t,'TPASSWORD')!== false && strpos($t,$oldpass) !== false ){
                    $rept = strtr($t, array($oldpass=>$newpass));
                    $fell = ftell($fp);
                    if($rept !== $t){
                        fseek($fp,($fell-strlen($t)));
                        fwrite($fp,$rept);
                        $isuser = 1;
                    }
                    break;
                }
            }
            fclose($fp);
            
            if($isuser){
                $toolsmd5 = md5($newpass.thash());
                show_msg('密码修改成功,请牢记你的密码!');
            }else{
                show_msg('密码修改失败,请联系tools技术员!');
            }
        }
        break;
}

if($action == 'index') {
    // TODO: 首页
	show_header();
    $formhash = thash();
    
    $errmsg = ERROR_MSG;
    
	print<<<END
	<p>欢迎使用 Tools 之 Discuz! 急诊箱功能！我们致力于为您解决 Discuz! 站点的紧急故障，欢迎各位站长朋友们使用。</p>
	<h5>适用版本：</h5>
	<ul>
		<li>{$tools_discuz_version}</li>
	</ul>
    
    <h5>特别注意：</h5>
	<ul>
		<li style="color:red">{$errmsg}</li>
	</ul>
    
	<h5>主要功能：</h5>
	<ul>
		<li>多种模式在线安装Discuz!, 或者重装</li>
		<li>重置管理员账号：将把您指定的会员设置为管理员</li>
		<li>关闭功能：  一键关闭/打开 [站点|插件]的操作</li>
		<li>清理冗余数据：  清理所有未使用的附件</li>
		<li>修复数据库：    对所有数据表进行检查修复工作</li>
		<li>恢复数据库：    一次性导入论坛数据备份</li>
		<li>更新缓存：      一键更新论坛的数据缓存与模板缓存</li>
	</ul>
	<h5 style="color:red">Tools 登录密码:</h5>
	<p>
    <form method="post" action="./tools.php?action=editpass" enctype="application/x-www-form-urlencoded">
    <input type="hidden" name="formhash" value="{$formhash}">
     旧密码: <input name="oldpass" type="password">　<strong style="color:green">新密码</strong>: <input name="newpass" type="password">
    <input type="submit" style="cursor: pointer;" value="修 改" />
    </form>
    </p>
    <h5 style="color:red">强制删除插件:</h5>
	<p>
    <form method="post" action="./tools.php?action=editpass" enctype="application/x-www-form-urlencoded">
    <input type="hidden" name="formhash" value="{$formhash}">
    <input type="hidden" name="act" value="delepluges">
     插件:　<input name="pluname" type="text">
    <input type="submit" style="cursor: pointer;" value="确认删除" /><br />
     　　　(支持插件名, 插件id, 插件目录后面需要/)
    </form>
    </p>
END;
	show_footer();

}elseif($action == 'reinstall') {
    // TODO: 安装discuz x
    if(!$_POST)
	show_header();
    $downlink = 'http://download.comsenz.com/DiscuzX/'.DISCUZ_DOWN_VERSION.'/';
    $cachepath = './';
    # post 数据
    if($_POST){
        $chfile = $_POST['chfile'];
        define('YESINSTALL', 1);
        if(!$chfile)
           show_msg('请至少选择一项!', 'tools.php?action='.$action, 2000);  
        
        if(!in_array($chfile, array('two','clear'))){
            $link = $downlink.$chfile;
            set_time_limit(0);
            
            if(!YESINSTALL){
                $olddir = scandir('./');
                if(count($olddir) >= 20){
                    show_msg('根目录已经存在discuz文件, 请确认并且勾选强制覆盖文件, 重试一次!', 'tools.php?action='.$action, 2000);
                }
            }
            fun_reinstall('back','./');
            $fwint = file_put_contents($cachepath.$chfile, curl_getdata($link));
            $zip = new zip();
            $b = $zip->Extract($cachepath.$chfile,'./');
            $oldfile = sfopen(true);
            
            @unlink($cachepath.$chfile);
            if(count($oldfile[1]) > 1000){
                show_msg('全新安装过程即将开始....', 'install/', 2000);
            }
            show_msg('如果你需要全新安装程序, 请先清空目录!'.count($oldfile[1]), 'tools.php?action='.$action, 2000);  
        }else{
            fun_reinstall($_POST['chfile'],'./');
            if($_POST['chfile'] !== 'two'){
                show_msg('整个discuz目录已经备份完成', 'tools.php?action='.$action, 2000);  
            }
        }
        exit();
    }
    
    if(!$filelist = curl_getdata($downlink))
        echo '请确认你的网络是否通畅!';
    
    if($filelist){
        preg_match_all('#<a href="([^"]*).zip">([^"]*).zip</a>.*([0-9]*-[0-9]*-[0-9]* [0-9]*\:[0-9]*).*([0-9.]*)M#isU', $filelist, $regfile);
        if(!$regfile[1])
            preg_match_all('#<a href="([^"]*).zip">([^"]*).zip</a>#isU', $filelist, $regfile);
        
        foreach($regfile[1] AS $key => $val){
            if($regfile[4][$key])
                $regfile[4][$key] .= 'M';
            $val .= '.zip';
            $data .= '<p><input name="chfile" type="radio" value="'.$val.'" /> '.$val.'　　 '.$regfile[3][$key].'　　 '.$regfile[4][$key].'</p>';
        }
    }
    $root = TOOLS_ROOT;
		echo "<h3 style=\"color: green; font-weight: bolder; margin: 6px;  padding: 0;\">全新安装: ".TOOLS_DISCUZ_VERSION."</h3>";
		print<<<END
		<form action="?action={$action}" method="post">
    		<table id="setadmin">
    			<tr><td>{$data}
                <span style="color:red"> * 全新安装过程默认会将所有文件备份一次, 请等待完成!</span>
                </td></tr>
    		</table>
			<input type="submit" onclick="this.style.display='none'" name="setadminsubmit" value="提 &nbsp; 交">
		</form>
        <br />
        <h3 style="color: green; font-weight: bolder; margin: 6px;  padding: 0;">二次安装</h3>
        <form action="?action={$action}" method="post">
    		<table id="setadmin">
    			<tr><td> <input name="chfile" type="radio" value="two" />确认安装 (<span style="color:red">我已经知道二次重装的风险,并且明确此操作!</span>)</td></tr>
                <tr><td> <input name="chfile" type="radio" value="clear" />备份目录 (<span style="color:red">功能将整个discuz目录备份起来</span>)</td></tr>
    		</table>
			<input type="submit" onclick="this.style.display='none'" name="setadminsubmit" value="提 &nbsp; 交"> (非win系统 {$root} 目录需要可写)
		</form>
END;

if(!$_POST)
show_footer();
}elseif($action == 'setadmin') {
    // TODO: 找回管理员
	$t->connect_db();
	$founders = @explode(',',$t->config['admincp']['founder']);
	$foundernames = array();
	foreach($founders as $userid) {
		$sql = "SELECT username FROM ".DB_PRE."common_member WHERE `uid`='$userid'";
		$foundernames[] = mysql_result(mysql_query($sql, $t->db), 0);
	}
	$foundernames = implode($foundernames, ',');
	$sql = "SELECT username FROM ".DB_PRE."common_member WHERE `adminid`='1'";
	$query = mysql_query($sql, $t->db) or dir(mysql_error());
	$adminnames = array();
	while($row = mysql_fetch_row($query)) {
		$adminnames[] = $row[0];
	}
	$adminnames = implode($adminnames, ',');
	
	if(!empty($_POST['setadminsubmit'])) {
		if($_GET['username'] == NULL) {
			show_msg('请输入用户名', 'tools.php?action='.$action, 2000);
		}
		
		if($_GET['loginfield'] == 'username') {
			$_GET['username'] = addslashes($_GET['username']);
			$sql = "SELECT uid FROM ".DB_PRE."common_member WHERE `username`='".$_GET['username']."'";
			$uid = mysql_result(mysql_query($sql, $t->db), 0);
			$username = $_GET['username'];
		} elseif($_GET['loginfield'] == 'uid') {
			$_GET['username'] = addslashes($_GET['username']);
			$uid = 	$_GET['username'];
			$sql = "SELECT username FROM ".DB_PRE."common_member WHERE `uid`='".$_GET['username']."'";
			$username = mysql_result(mysql_query($sql, $t->db), 0);
		}
		
		if($uid && $username) {
			$sql = "UPDATE ".DB_PRE."common_member SET `groupid`='1', `adminid`='1' WHERE `uid`='$uid'";
			@mysql_query($sql, $t->db);
			if(!in_array($uid,$founders)) {
				$sql = "REPLACE INTO ".DB_PRE. "common_admincp_member (`uid`, `cpgroupid`, `customperm`) VALUES ('$uid', '0', '')";
				@mysql_query($sql, $t->db);
			}
		} else {
			show_msg('没有这个用户', 'tools.php?action='.$action, 2000);
		}
		
		$t->connect_db('ucdb');
		if($_GET['password'] != NULL) {
			$sql = "SELECT salt FROM ".$t->ucdbconfig['tablepre']."members WHERE `uid`='$uid'";
			$salt = mysql_result(mysql_query($sql, $t->db), 0);
			$newpassword = md5(md5(trim($_GET['password'])).$salt);
			$sql = "UPDATE ".$t->ucdbconfig['tablepre']."members SET `password`='$newpassword' WHERE `uid`='$uid'";
			mysql_query($sql, $t->db);
		}
		if($_GET['issecques'] == 1) {
			$sql = "UPDATE ".$t->ucdbconfig['tablepre']."members SET `secques`='' WHERE `uid`='$uid'";
			mysql_query($sql, $t->db);
		}
		$t->close_db();
		show_msg('管理员找回成功！', 'tools.php?action='.$action, 2000);
		
	} else {
		show_header();
		echo "<p>现有创始人：$foundernames</p>";
		echo "<p>现有管理员：$adminnames</p>";
		print<<<END
		<form action="?action={$action}" method="post">
		<h5>{$info}</h5>
		<table id="setadmin">
			<tr><th width="30%"><input class="radio" type="radio" name="loginfield" value="username" checked class="radio">用户名<input class="radio" type="radio" name="loginfield" value="uid" class="radio">UID</th><td width="70%"><input class="textinput" type="text" name="username" size="25" maxlength="40"></td></tr>
			<tr><th width="30%">请输入密码</th><td width="70%"><input class="textinput" type="text" name="password" size="25"></td></tr>
			<tr><th width="30%">是否清除安全提问</th><td width="70%">
			<input class="radio" type="radio" name="issecques" value="1">是&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
			<input class="radio" type="radio" name="issecques" value="0" class="radio" checked>否</td></tr>
		</table>
			<input type="submit" name="setadminsubmit" value="提 &nbsp; 交">
		</form>
END;
		print<<<END
		<br/>
		恢复步骤: 
		重置管理员<br/>
		<ul>
		<li>选择用户名或者UID。</li>
		<li>输入用户名或者UID。</li>
		<li>如果需要重置密码，输入密码。</li>
		<li>如果需要清除安全提问，请在是否清除安全提问处选择是。</li>
		</ul>
		<br/>
		重置创始人<br/>
		<ul>
		<li>重置用户为创始人。</li>
		<li>修改config_global.php 中 \$_config['admincp']['founder'] = '管理员的ID'，多个以半角逗号分割。</li>
		</ul>
END;
		show_footer();
	}

}elseif($action == 'closesite') {
    
    //一键开关站点*插件
	$t->connect_db();
    $sql = "SELECT `available` FROM ".DB_PRE.'common_plugin'." WHERE available='1' LIMIT 1";
    $is_available = mysql_result(mysql_query($sql, $t->db), 0);
    
   	$closeds = 'checked';
	$openeds = '';
    if($is_available){
       	$closeds = '';
		$openeds = 'checked';
    }
    
    $sql = "SELECT svalue FROM ".DB_PRE."common_setting WHERE skey='bbclosed'";
	$bbclosed = mysql_result( $q = mysql_query($sql, $t->db), 0);
        
    $closed = 'checked';
	$opened = '';
	if(empty($bbclosed)) {
		$closed = '';
		$opened = 'checked';
	}
    
	$sql = "SELECT svalue FROM ".DB_PRE."common_setting WHERE `skey`='closedreason'";
	$closedreason = mysql_result(mysql_query($sql, $t->db), 0);
	if(!empty($_POST['closesitesubmit'])) {
	   $close = $_POST['close']+0;
       $sql = "UPDATE ".DB_PRE."common_setting SET `svalue`='$close' WHERE `skey`='bbclosed'";
       mysql_query($sql, $t->db);
	   if($close == 1) {
		    $close = 'tools.php closed';
	   }else{
		    $close = '';
		}
        $sql = "UPDATE ".DB_PRE."common_setting SET `svalue`='$close' WHERE `skey`='closedreason'";
		mysql_query($sql, $t->db);
        // 插件判断.
        include_once(TOOLS_ROOT.'source/class/class_core.php');
    	include_once(TOOLS_ROOT.'source/function/function_core.php');
        header('Content-type: text/html; charset=utf-8');
    	$cachelist = array();
    	$discuz = & discuz_core::instance();
    	$discuz->cachelist = $cachelist;
    	$discuz->init_cron = false;
    	$discuz->init_setting = false;
    	$discuz->init_user = false;
    	$discuz->init_session = false;
    	$discuz->init_misc = false;
    	
    	$discuz->init();
    	require_once libfile('function/plugin');
    	require_once libfile('function/cache');
        include_once libfile('function/block');
        
        $available = $_POST['pclose']+0;
        
    	DB::query("UPDATE ".DB::table('common_plugin')." SET available='{$available}'");
    	updatecache(array('plugin', 'setting', 'styles'));
    	cleartemplatecache();
    	updatecache();
    	blockclass_cache();
    	//note 清除群组缓存
    	require_once libfile('function/group');
    	$groupindex['randgroupdata'] = $randgroupdata = grouplist('lastupdate', array('ff.membernum', 'ff.icon'), 80);
    	$groupindex['topgrouplist'] = $topgrouplist = grouplist('activity', array('f.commoncredits', 'ff.membernum', 'ff.icon'), 10);
    	$groupindex['updateline'] = TIMESTAMP;
    	$groupdata = DB::fetch_first("SELECT SUM(todayposts) AS todayposts, COUNT(fid) AS groupnum FROM ".DB::table('forum_forum')." WHERE status='3' AND type='sub'");
    	$groupindex['todayposts'] = $groupdata['todayposts'];
    	$groupindex['groupnum'] = $groupdata['groupnum'];
    	save_syscache('groupindex', $groupindex);
    	DB::query("TRUNCATE ".DB::table('forum_groupfield'));
    
    	$tpl = dir(DISCUZ_ROOT.'./data/template');
    	while($entry = $tpl->read()) {
    		if(preg_match("/\.tpl\.php$/", $entry)) {
    			@unlink(DISCUZ_ROOT.'./data/template/'.$entry);
    		}
    	}
    	$tpl->close();
        
		show_msg('功能操作成功', 'tools.php?action=closesite',2000);
	} else {
		show_header();
		print<<<END
        <form action="?action=closesite" method="post">
		<h4>关闭/打开站点</h4>
		<p>
		站点当前状态
		<input class="radio" type="radio" name="close" value="0" {$opened} class="radio">打开
		<input class="radio" type="radio" name="close" value="1" {$closed} class="radio">关闭
		</p>
        
        <h4>关闭/打开插件</h4>
		<p>
		所有插件状态: {$plustr}
		<input class="radio" type="radio" name="pclose" value="1" {$openeds} class="radio">打开
		<input class="radio" type="radio" name="pclose" value="0" {$closeds} class="radio">关闭
		</p>
        
		<p>
		<input type="submit" name="closesitesubmit" value="提 &nbsp; 交">
		</p>
		</form>
END;
		show_footer();
	}

}elseif($action == 'closeplugin') {
    // TODO: 清理冗余数据.
	include_once(TOOLS_ROOT.'source/class/class_core.php');
	include_once(TOOLS_ROOT.'source/function/function_core.php');
    header('Content-type: text/html; charset=utf-8');
	$discuz = & discuz_core::instance();
	$discuz->init();
    $type = $_GET['types']?$_GET['types']:'index';

    // index
    if($type === 'index'){
        $sql = $sql = "SELECT `aid`, `uid`, `dateline`, `filename`, `filesize`, `attachment`, `remote`, `isimage`, `width`, `thumb` 
    FROM ".DB::table('forum_attachment_unused')." ORDER BY aid DESC LIMIT 0, 200";
    
        $t = DB::fetch_all($sql);
        
        $aid_array = array();
        $data = '';
        foreach ($t AS $K=>$v){
            $v['filename'] = htmlspecialchars($v['filename']);
            $v['dateline'] = date('Y-m-d H:i:s',$v['dateline']);
            $v['filesize'] = sprintf('%0.2f',$v['filesize'] / 1024).'KB';
            
            if(!$_POST){
                $data .= "<tr>
                <td>{$v['aid']}</td>
                <td>{$v['filename']}</td>
                <td>{$v['uid']}</td>
                <td>{$v['dateline']}</td>
                <td>{$v['filesize']}</td>
                <tr>";
            }else{
                $path = './data/attachment/forum/';
                $file = $path.$v['attachment'];
                
                $ai = 1;
                if(is_file($file)){
                    $ai = intval(@unlink($file));
                    
                    $di = 0;
                    while(true){
                        $di++;
                        $file = dirname($file);
                        $filelist = @scandir($file);
                        if(count($filelist) <= 3){
                            if(is_file($file.'/index.html'))
                                @unlink($file.'/index.html');
                            rmdir($file);
                        }
                        if($di == 2)
                            break;
                    }
                }
                
                if($ai){
                    $aid_array[] = $v['aid'];
                }
            }
        }
        
        if(!$data){
            $data = "<tr>
                <td colspan=\"20\" style=\"text-align: center; color: #444;\">没有冗余信息</td>
                </tr>";
        }
        
        if($aid_array){
            $aidle = implode(',', $aid_array);
            DB::query("DELETE FROM ".DB::table('forum_attachment_unused')." WHERE aid IN ($aidle)");
            DB::query("DELETE FROM ".DB::table('forum_attachment')." WHERE aid IN ($aidle) AND tid='0'");
            show_msg('FROM 附件清理操作成功', 'tools.php?action=closeplugin',1000);
        }
    // tools.php?action=closeplugin&types=111
    show_header();
		print<<<END
        <form action="" method="post">
		<h4><a style="color:red" href="./tools.php?action=closeplugin">附件冗余</a> , <a href="./tools.php?action=closeplugin&types=depth">深度冗余</a> </h4>
		<div class=\"bm\">
				<table class=\"tb\">
					<tbody>
					<form name="cpform" method="post" autocomplete="on" action="tools.php?action=repairdb&type=repairtables" id="cpform">
					<tr>
						<th width="60">附件ID</th>
						<th width="200">文件名称</th>
						<th width="80">用户ID</th>
                        <th width="140">上传时间</th>
                        <th width="80">文件大小</th>
					</tr>
                    {$data}
                    </tbody>
            </table>
            * 默认每次清除50条.
            <p>
		<input type="submit" name="closesitesubmit" value=" 清 除 ">
		</p>
        </div>
		</form>
END;
    show_footer();
}else if($type === 'depth'){
    function db_get_tid($aid,$attachmentid){
        $attachmentid = intval($attachmentid);
        if($attachmentid <= 9){
            $sql = "SELECT * FROM ".DB::table('forum_attachment_'.$attachmentid)." WHERE `aid` = '{$aid}'";
        }else{
            $sql = "SELECT * FROM ".DB::table('forum_attachment')." WHERE `aid` = '{$aid}'";
        }
        
        $t = DB::fetch_first($sql);
        return $t;
    }
    
    $sql = DB::query("SELECT `aid`, `tid`, `pid`, `uid`, `tableid`, `downloads` FROM  ".DB::table('forum_attachment'));
    $path = strtr(getglobal('setting/attachdir'),array('/./'=>'/')).'forum/';
    $infolist = array();
    while($row = DB::fetch($sql)){
        $ada = db_get_tid($row['aid'],$row['tableid']);
        if($ada){
            $row = array_merge($row, $ada);
            $pathfile = $path.$row['attachment'];
            
            // 先装载
            $infolist['filelist'][$row['attachment']][$row['aid']] = array('f'=>0);
        }else{
            $infolist['deledb'][] = $row['aid'];
        }
        $infolist['deledb'][] = $row['aid'];        
    }
    
    
    $dirlist = @scandir($path);
    foreach($dirlist AS $val){
        if($val === '.' || $val === '..')
            continue;
        
        if(is_dir($path.$val.'/')){
           $dirlisttem = @scandir($path.$val.'/');
               foreach($dirlisttem AS $vals){
                    if($vals === '.' || $vals === '..')
                        continue;
                    if(is_dir($path.$val.'/'.$vals.'/')){
                       $dirlisttem_tem = @scandir($path.$val.'/'.$vals.'/');
                       
                       // 重点是这个循环
                       foreach($dirlisttem_tem AS $fileval){
                            if($fileval === '.' || $fileval === '..' || $fileval === 'index.html' || $fileval === 'index.htm')
                                 continue;
                            $checkname = $val.'/'.$vals.'/'.$fileval;
                            
                            if($infolist['filelist'][$checkname]){
                                foreach($infolist['filelist'][$checkname] AS $keyss => $valarr){
                                    $valarr['f'] = 1;
                                    $infolist['filelist'][$checkname][$keyss] = $valarr;
                                }
                            }else{
                                 $infolist['filelist'][$checkname][] = array('d'=>0);
                            }
                       }
                    }
                    
                }
        }
    }
    
    $data_file = $data_db = $data_notdb = '';
    if($infolist['filelist']){
        foreach($infolist['filelist'] AS $key => $val){
            $fname = $key;
            if(!$_POST){
                $aidlist = $dbcheck = '';
                foreach($val AS $k => $v){
                    if(isset($v['f'])){
                        if($v['f'] < 1)
                        $aidlist .= $k.',';
                    }
                    
                    if(isset($v['d'])){
                        $dbcheck = 1;
                    }
                }
                
                if($aidlist){
                    $aidlist = trim($aidlist,',');
                    $data_file .= "aid[$aidlist]: $fname <br />";
                }
                
                if($dbcheck){
                    $data_notdb .= "$fname DB记录不存在 <br />";
                }
                
            }else{
                $aidlist = $dbcheck = '';
                foreach($val AS $k => $v){
                    if(isset($v['f'])){
                        if($v['f'] < 1){
                            $k = intval($k);
                            // 删除db记录.
                            $sql = ("DELETE FROM  ".DB::table('forum_attachment')." WHERE aid = '$k'");
                            $one = DB::fetch_first($sql);
                            
                            $tableid = intval($one['tableid']);
                            
                            if($tableid <= 9)
                                DB::query("DELETE FROM  ".DB::table('forum_attachment_'.$tableid)." WHERE aid = '$k'");
                            
                            // 是否对0-9进行删除.
                            DB::query("DELETE FROM  ".DB::table('forum_attachment')." WHERE aid = '$k'");
                        }
                    }
                    
                    if(isset($v['d'])){
                        // 删除文件
                        $temname =  $path.$fname;
                        if(is_writable($temname)){
                            @unlink($temname);                     
                        }else{
                            show_msg('论坛附件清理删除文件失败, 请确认权限是否可写!');
                        }
                    }
                }
            }
            
            # 删除空目录.
            $di = 0;
            $file = $path.$fname;
            while(true){
                $di++;
                $file = dirname($file);
                $filelist = @scandir($file);
                if(count($filelist) <= 3){
                    if(is_file($file.'/index.html'))
                        @unlink($file.'/index.html');
                    @rmdir($file);
                }
                if($di == 2) // 2层目录.
                    break;
            }
        }
        
        if($_POST){
            show_msg('论坛附件清理删除全部完成, 现在返回!');
        }
    }
    
    !$data_notdb && $data_notdb = '无异常!';
    !$data_db && $data_db = '无异常!';
    !$data_file && $data_file = '无异常!';
       
    show_header();
		print<<<END
        <form action="" method="post">
		<h4><a href="./tools.php?action=closeplugin">附件冗余</a> , <a style="color:red" href="./tools.php?action=closeplugin&types=depth">深度冗余</a> </h4>
        附件目录: {$path}
		<div class=\"bm\">
				<table class=\"tb\">
					<tbody>
					<form name="cpform" method="post" autocomplete="on" action="tools.php?action=repairdb&type=repairtables" id="cpform">
                    <!--<tr>
                        <td  colspan="2"><h3>附件数据表不对应列表 (一般不会出现)</h3>
                            {$data_db}
                        </td>
                    </tr>-->
					<tr>
						<td style="width: 50%;">
                            <h3 style="color:#0080FF">文件不存在列表: </h3>
                            {$data_file}
                        </td>
                        <td>
                            <h3 style="color:#0080FF">数据表不存在列表: </h3>
                            {$data_notdb}
                        </td>
					</tr>
                    {$data}
                    </tbody>
            </table>
            <p><br>
            <input type="submit" name="closesitesubmit" value=" 全 部 清 理 ">
		</p>
        </div>
		</form>
END;
    show_footer();
}
    
	//show_msg($msg, 'tools.php?action=index',2000);
}elseif($action == 'repairdb') {
    // TODO: 修复数据库
	show_header();
	$t->connect_db();
	$typearray = array('index', 'repair', 'repairtables', 'allrepair', 'check', 'detail');
	$type = in_array($_GET['type'], $typearray) ? $_GET['type'] : 'index';
	set_time_limit(0);
	if($type == 'index') {
	print<<<END
	<div class=\"bm\">
		<table id="menu">
		<tr>
			<!--<td><a style="color: #0080FF;" href="?action=repairdb&type=allcheck">一键检查</a></td>-->
			<td><a style="color: #0080FF;" href="?action=repairdb&type=allrepair">一键修复</a></td>
			<td><a style="color: #0080FF;" href="?action=repairdb&type=detail">进入详细页面检查或修复</a></td>
		</tr>
		</table>
		说明 & 提示: 
		<ul>
			<!--<li>一键检查: 对数据库中所有表进行 CHECK TABLE 操作，列出损坏的数据表。</li>--!>
			<li>一键修复: 先执行 CHECK TABLE 操作，然后按照检查的结果对有错误的数据表执行REPAIR TABLE 操作。</li>
			<li>进入详细页面检查或修复: 列出详细表，对单表进行检查或修复。</li>
			<li><span style="color:red">提示1：数据表比较大的情况下，mysql可能会花费比较长的时间进行检查和修复操作。</span></li>
			<li><span style="color:red">提示2：REPAIR TABLE 操作不能修复所有情况，如果修复不了数据表，请登录服务器使用myisamchk进行数据表修复。</span></li>
		</ul>
	</div>
END;
	} elseif ($type == 'allrepair' || $type == 'allcheck' || $type == 'detail' || $type == 'check' || $type == 'repair' || $type == 'repairtables') {
		$sql = "SHOW TABLE STATUS";
		$tablelist = mysql_query($sql, $t->db);
		while($list = mysql_fetch_array($tablelist, MYSQL_ASSOC)) {
			if($type == 'allcheck' || $type == 'allrepair') {
				if($list['Engine'] != 'MEMORY' && $list['Engine'] != 'HEAP') {
					$sql = 'CHECK TABLE '.$list['Name'];
					$query = mysql_query($sql, $t->db);
					$checkresult = mysql_fetch_array($query, MYSQL_ASSOC);
					
					if( $checkresult['Msg_text'] != 'OK') {
						$tablelists[$list['Name']]['statu'] = $checkresult['Msg_text'];
						$tablelists[$list['Name']]['size'] = round(($list['Data_length'] + $list['Index_length'])/1024,2);
					}
				}
			} else {
				$tablelists[$list['Name']]['size'] = round(($list['Data_length'] + $list['Index_length'])/1024,2);
			}
		}
		if($type == 'allrepair') {
			foreach($tablelists as $table => $value) {
				$sql = "REPAIR TABLE `".$table."`";
				$query = mysql_query($sql, $t->db);
				$repairresult = mysql_fetch_array($query, MYSQL_ASSOC);
				$resulttable[$table]['statu'] = $repairresult['Msg_text'];
				$resulttable[$table]['size'] = '未检查';
			}
			$tablelists = $resulttable;
		}

		if($type == 'check') {
			$_GET['table'] = addslashes($_GET['table']);
			$sql = 'CHECK TABLE '.$_GET['table'];
			$query = mysql_query($sql, $t->db);
			$checkresult = mysql_fetch_array($query, MYSQL_ASSOC);
			$tablelists[$_GET['table']]['statu'] = $checkresult['Msg_text'];
		}
		if($type == 'repair') {
			$_GET['table'] = addslashes($_GET['table']);
			$sql = "REPAIR TABLE `".$_GET['table']."`";
			$query = mysql_query($sql, $t->db);
			$repairresult = mysql_fetch_array($query, MYSQL_ASSOC);
			echo '<div style="background:red">';
			show_msg_body('修复表单 '.$_GET['table'].' 结果：'.$repairresult['Msg_text'], "tools.php?action=$action&type=detail", 3000);
			echo '</div>';
		}
		if($type == 'repairtables') {
			if($_POST['optimizesubmit']){
				$repairtables = addslashes($_POST['repairtables']);
				foreach ($repairtables as $value) {
					$sql = "REPAIR TABLE `".$value."`";
					$query = mysql_query($sql, $t->db);
					$repairresult = mysql_fetch_array($query, MYSQL_ASSOC);
					echo '<div style="background:red">';
					show_msg_body('修复表单 '.$value.' 结果：'.$repairresult['Msg_text'], '', 3000);
					echo '</div>';
				}
				echo '<div style="background:red">';
				show_msg_body('复选修复表单完成', "tools.php?action=$action&type=detail", 3000);
				echo '</div>';
			}
		}
			echo '
			<script type="text/javascript">
				var BROWSER = {};
				var USERAGENT = navigator.userAgent.toLowerCase();
				browserVersion({\'ie\':\'msie\',\'firefox\':\'\',\'chrome\':\'\',\'opera\':\'\',\'safari\':\'\',\'mozilla\':\'\',\'webkit\':\'\',\'maxthon\':\'\',\'qq\':\'qqbrowser\'});
				function browserVersion(types) {
					var other = 1;
					for(i in types) {
						var v = types[i] ? types[i] : i;
						if(USERAGENT.indexOf(v) != -1) {
							var re = new RegExp(v + \'(\\/|\\s)([\\d\\.]+)\', \'ig\');
							var matches = re.exec(USERAGENT);
							var ver = matches != null ? matches[2] : 0;
							other = ver !== 0 && v != \'mozilla\' ? 0 : other;
						} else {
							var ver = 0;
						}
						eval(\'BROWSER.\' + i + \'= ver\');
						}
					BROWSER.other = other;
				}
				function jumpurl(url,nw) {
					if(BROWSER.ie) url += (url.indexOf(\'?\') != -1 ?  \'&\' : \'?\') + \'referer=\' + escape(location.href);
					if(nw == 1) {
						window.open(url);	
					} else {
						location.href = url;
					}
					return false;
				}
				</script>';
				echo '
				<script type="text/javascript">
				function checkAll(type, form, value, checkall, changestyle) {
					var checkall = checkall ? checkall : \'chkall\';
					for(var i = 0; i < form.elements.length; i++) {
						var e = form.elements[i];
						if(type == \'option\' && e.type == \'radio\' && e.value == value && e.disabled != true) {
							e.checked = true;
						} else if(type == \'value\' && e.type == \'checkbox\' && e.getAttribute(\'chkvalue\') == value) {
							e.checked = form.elements[checkall].checked;
							if(changestyle) {
								multiupdate(e);
							}
						} else if(type == \'prefix\' && e.name && e.name != checkall && (!value || (value && e.name.match(value)))) {
							e.checked = form.elements[checkall].checked;
							if(changestyle) {
								if(e.parentNode && e.parentNode.tagName.toLowerCase() == \'li\') {
									e.parentNode.className = e.checked ? \'checked\' : \'\';
								}
								if(e.parentNode.parentNode && e.parentNode.parentNode.tagName.toLowerCase() == \'div\') {
									e.parentNode.parentNode.className = e.checked ? \'item checked\' : \'item\';
								}
							}
						}
					}
				}
			</script>';
			print<<<END
			<div class=\"bm\">
				<table class=\"tb\">
					<tbody>
					<form name="cpform" method="post" autocomplete="on" action="tools.php?action=repairdb&type=repairtables" id="cpform">
					<tr>
						<th></th>
						<th width="350px">表名</th>
						<th width="80px">大小</th>
						<th></th>
						<th width="80px"></th>
					</tr>
END;
			foreach($tablelists as $name => $value) {
				if($value['size'] < 1024) {
					echo '<tr><th><input class="checkbox" type="checkbox" name="repairtables[]" value="'.$name.'"></th><th>'.$name.'</th><td style="text-align:right;color:#339900"">'.$value['size'] .'KB</td><td>';
				} elseif(1024 < $value['size'] && $value['size']< 1048576 ) {
					echo '<tr><th><input class="checkbox" type="checkbox" name="repairtables[]" value="'.$name.'"></th><th>'.$name.'</th><td style="text-align:right;color:#3333FF">'.round($value['size']/1024,1) .'MB</td><td>';
				} elseif(1048576 < $value['size']){
					echo '<tr><th><input class="checkbox" type="checkbox" name="repairtables[]" value="'.$name.'"></th><th>'.$name.'</th><td style="text-align:right;color:#FF0000"">'.round($value['size']/1048576,1) .'GB</td><td>';
				}

				if(!isset($value['statu'])) {
					echo "<button type=\"button\" class=\"pn vm\" onclick=\"jumpurl('tools.php?action=repairdb&type=check&table=".$name."')\"><strong>检查</button>";
				} elseif($value['statu']!='OK') {
					echo '<span class=\"red\">'.$value['statu'].'</span>';
				} else {
					echo $value['statu'];
				}

				echo '</td><td>';
				if($value['statu']!='OK' && $value['statu']!='Not Support CHECK') {
					echo "<button type=\"button\" class=\"pn vm\" onclick=\"jumpurl('tools.php?action=repairdb&type=repair&table=".$name."')\"><strong>修复</button></strong>";
				}
				echo '</td></tr>';
				}
				
			echo "<tr><th><input name=\"chkall\" id=\"chkall\" class=\"checkbox\" onclick=\"checkAll('prefix', this.form)\" type=\"checkbox\"></th><th><input type=\"submit\" class=\"btn\" id=\"submit_optimizesubmit\" name=\"optimizesubmit\" title=\"复选修复\" value=\"复选修复\"></th><td></td><td></td><td></td></form>";
			echo '</tbody></table></div>';
			if( count($tablelists) == 0) {
				echo '<div style="background:#00cc66;">没有需要修复的表</div>';
			}
	} elseif ($type == 'allrepair') {
		show_msg("操作成功", "tools.php?action=$action");
	}
	show_footer();
}elseif($action == 'happy'){
    // TODO: 幸福指数功能.
	include_once(TOOLS_ROOT.'source/class/class_core.php');
	include_once(TOOLS_ROOT.'source/function/function_core.php');
	include_once(TOOLS_ROOT.'source/function/function_forumlist.php');
    header('Content-type: text/html; charset=utf-8');
    
	$discuz = & discuz_core::instance();
	$discuz->init();
    
     foreach($_POST AS $key => $val){
            $_POST[$key] = trim($val);
     }
    
    
    if($_POST['pid']){
        $fid = intval($_POST['pid']);
        $thcount = intval($_POST['thcount']);
        $postscount = intval($_POST['postscount']);
        $tothcount = intval($_POST['tothcount']);
        $yesterdayposts = intval($_POST['yesterdayposts']);
        
        $data = '';
        if($_POST['thcount'] !== ''){
            $data .="threads='{$thcount}',";
        }
        
        if($_POST['postscount'] !== ''){
            $data .="posts='{$postscount}',";
        }
        
        if($_POST['tothcount'] !== ''){
            $data .="todayposts='$tothcount',";
        }
        
        if($_POST['yesterdayposts'] !== ''){
            $data .="yesterdayposts='$yesterdayposts',";
        }
        
        $data = trim($data,' ,');
        if($data){
            $from_list = DB::query("UPDATE ".DB_PRE."forum_forum SET $data WHERE `fid`='$fid' ");
            show_msg('版块数量设置成功!');
        }else{
            show_msg('你未输入任何修改项');
        }
    }
    
    // 主题.
    if($_POST['TID']){
        $tid = intval($_POST['TID']);
        $vcount = intval($_POST['views']);
        $replies = intval($_POST['replies']);
        
        $data = '';
        if($_POST['replies'] !== ''){
           $data .="replies='{$replies}',"; 
        }
        if($_POST['views'] !== ''){
            $data .="views='{$vcount}',";
        }
        
        $data = trim($data,' ,');
        if($data){
            $from_list = DB::query("UPDATE ".DB_PRE."forum_thread SET $data WHERE `tid`='$tid'");
            show_msg('主题查阅数量设置成功!');
        }else{
            show_msg('你未输入任何修改项');
        }
    }
    
    // 查询出所有记录.
    $query = DB::query("SELECT * FROM ".DB_PRE."forum_forum WHERE `type` = 'forum'");
    
    $jsonarr = array();
    while($row = DB::fetch($query)){
        $jsonarr[$row['fid']]['threads'] = $row['threads'];
        $jsonarr[$row['fid']]['posts'] = $row['posts']; 
        $jsonarr[$row['fid']]['todayposts'] = $row['todayposts']; 
        $jsonarr[$row['fid']]['yesterdayposts'] = $row['yesterdayposts']; 
    }
    
    $jsonarr= json_encode($jsonarr);
    show_header();
    echo '<style type="text/css">
    .cat_sel{ padding: 4px;vertical-align: middle;}
</style> ';
    
    echo "<script type=\"text/javascript\">
        var jsonarr = $jsonarr;
        function sel(pid){
           var obj = document.getElementById('thcount');
           obj.value=jsonarr[pid]['threads'];
           
           obj = document.getElementById('todayposts');
           obj.value=jsonarr[pid]['todayposts'];
           
           obj = document.getElementById('posts');
           obj.value=jsonarr[pid]['posts'];
           
           obj = document.getElementById('yesterdayposts');
           obj.value=jsonarr[pid]['yesterdayposts'];
        }
    </script>";
    
    echo '<table class="tb">
    <tr><td><h4>版本设置数量</h4></td></tr>
		<tr><td><form action="" method="post">';
    echo '<select class="cat_sel" id="cat_sel" onchange="sel(this.value)" name="pid">';
    $list = forumselect();
    
    // 转换编码.
    if (PHP_CHARSET !== 'utf-8'){
       $list = mb_convert_encoding($list,'utf-8',PHP_CHARSET);
    }
    
    echo $list;
    echo '</select>';
            
    echo ' 今日主题数: <input id="thcount" style="width:60px" name="thcount" /> 今日帖题: <input id="todayposts" style="width:60px" name="tothcount" />
    版块总帖数: <input id="posts" style="width:60px" name="postscount" /> 
    昨天帖数: <input id="yesterdayposts" style="width:60px" name="yesterdayposts" />
     <input type="submit" value=" 修 改 " />';
    
    echo '<div><br>* 昨天帖数 要等到明天才会显示<br />
    
    </div>';
    
    echo '</form></td></tr>';
    
    echo "<script type=\"text/javascript\">
        var obj = document.getElementById('cat_sel');
        sel(obj.value);
    </script>";
    
    echo '<tr><td><h4>主题设置数量</h4></td></tr>';
    
    echo '<tr><td><form action="" method="post">';            
    echo ' 主题TID: <input style="width:60px" name="TID" /> 查阅数量: <input style="width:60px" name="views" /> 回复数量: <input style="width:60px" name="replies" /> 
     <input type="submit" value=" 修 改 " />';
     echo '<div><br>　　　　 * 查阅数只能大于或者等于回复数量</div>';
    
    echo '</form></td></tr>';
    
    echo '</table>';
    
    show_footer();
    
    $info = DB::fetch_all("SHOW KEYS FROM `pre_forum_forum`");
    
    exit();
}elseif($action == 'restoredb') {
    // TODO: 导入恢复数据库
	$backfiledir = TOOLS_ROOT.'data/';
	$detailarray = array();
	$t->connect_db();

	if(!mysql_select_db($t->dbconfig['name'], $t->db)) {
		$dbname = $t->dbconfig['name'];
		mysql_query("CREATE DATABASE $dbname");
	}

	if(!$_GET['importbak'] && !$_GET['nextfile']) {
		$exportlog = array();
		$dir = dir($backfiledir);
		while($entry = $dir->read()) {
			$entry = $backfiledir."$entry";
			$num = 0;
			if(is_dir($entry) && preg_match("/backup\_/i", $entry)) {
				$bakdir = dir($entry);
				while($bakentry = $bakdir->read()) {
					$bakentry = "$entry/$bakentry";
					if(is_file($bakentry) && preg_match("/(.*)\-(\d)\.sql/i", $bakentry,$match)) {
						if($_GET['detail']) {
							$detailarray[] = $match['1'];
						}
						$num++;	
					}
					if(is_file($bakentry) && preg_match("/\-1\.sql/i", $bakentry)) {
						$fp = fopen($bakentry, 'rb');
						$bakidentify = explode(',', base64_decode(preg_replace("/^# Identify:\s*(\w+).*/s", "\\1", fgets($fp, 256))));
						fclose ($fp);
						
						if(preg_match("/\-1\.sql/i", $bakentry) || $bakidentify[3] == 'shell') {
							$identify['bakentry'] = $bakentry;
						}
					}
				}
				$detailarray = array_reverse(array_unique($detailarray));

				if($num != 0) {
					$exportlog[$entry] = array(	
								'dateline' => date('Y-m-d H:i:s',$bakidentify[0]),
								'version' => $bakidentify[1],
								'type' => $bakidentify[2],
								'method' => $bakidentify[3],
								'volume' => $num,
								'bakentry' => $identify['bakentry'],
								'filename' => str_replace($backfiledir.'/','',$entry));
				}
			}
		}
	}else{
	    $fpush = $_GET['fpush']+0;
        
   		//检测是否关闭站点
		$sql = "SELECT svalue FROM ".DB_PRE."common_setting WHERE skey='bbclosed'";
		$closed = mysql_result(mysql_query($sql, $t->db), 0);
		if(!$fpush && !$closed) {
			show_msg('恢复数据前，请先关闭站点!', 'tools.php?action=closesite', 3000);
		}
        
		$bakfile = $_GET['nextfile'] ? $_GET['nextfile'] : $_GET['importbak'];
		if(!file_exists($bakfile)) {
			if($_GET['nextfile']) {
				$tpl = dir(TOOLS_ROOT.'data/template');
				while($entry = $tpl->read()) {
					if(preg_match("/\.tpl\.php$/", $entry)) {
						@unlink(TOOLS_ROOT.'data/template/'.$entry);
					}
				}
				$tpl->close();
				show_msg('恢复备份成功，请查看论坛，如果数据不同步，请检查数据库前缀。正在更新缓存...', 'tools.php?action=updatecache',2000);
			}
			show_msg('备份文件不存在。');
		}
		if(!is_readable($bakfile)) {
			show_msg('备份文件不可读取。');
		} else {
			@$fp = fopen($bakfile, "rb");
			@flock($fp, 3);
			$sqldump = @fread($fp, filesize($bakfile));
			@fclose($fp);
		}
		@$bakidentify = explode(',', base64_decode(preg_replace("/^# Identify:\s*(\w+).*/s", "\\1", substr($sqldump, 0, 256))));
		if(!$fpush && $bakidentify[1] != DISCUZ_VERSION){
			show_msg('备份文件版本错误，不能恢复。');		
		}
        
		$vol = $bakidentify[4];
		$nextfile = taddslashes(str_replace("-$vol.sql","-".($vol+1).'.sql',$bakfile));
		$result = $t->db_runquery($sqldump);
		if($result) {
			show_msg('正在恢复分卷：'.$vol,"tools.php?action=$action&nextfile=$nextfile&fpush=".$fpush, 2000);	
		}
	}
	$t->close_db();
	show_header();
	print<<<END
	<div class="bm">
	<form action="tools.php?action={$action}" method="post">
	<table class="tdat"><tbody>
	<tr class=\'alt h\'><th>备份项目</th><th>版本</th><th>时间</th><th>类型</th><th>文件总数</th><th>导入</th></tr>
END;
	foreach( $exportlog  as $value) {
		echo '<tr><td>'.$value['filename'].'</td><td>'.$value['version'].'</td><td>'.$value['dateline'].'</td><td>'.$value['method'].'</td><td>'.$value['volume'].'</td><td><a href="tools.php?action='.$action.'&detail='.$value['filename'].'"><font color="blue">打开</font></a></td></tr>';
	}
	if (count($detailarray)>0) {
		foreach($detailarray as $k => $value) {
		    $k ++;
			echo '<tr><td colspan="5">['.$k.'] - '.$value.'</td><td><a onclick="jumpurl(this);" href="tools.php?action='.$action.'&importbak='.$value.'-1.sql"><font color="blue">导入</font></a></td></tr>';
		}
	}
    
    if(!$exportlog && !$detailarray){
        echo '<tr><td colspan="20" style="text-align: center; color:#444">./data/目录内未找到有效的备份目录文件</td></tr>';
    }
    
	echo '
    <tr><td colspan="20" style="color:blue"><br>当前程序版本号: '.TOOLS_DISCUZ_VERSION.' <input onclick="setfpush(this);" type="checkbox" value="1" name="fpush" /> <span style="color: red;">强制导入</span></td>
    </tbody></table></form></div>
<script type="text/javascript">
    var fpush = 0;
    function setfpush(obj){
        if(obj.checked){
            fpush = 1;
        }else{
            fpush = 0;
        }
    }
    function jumpurl(obj){
        obj.href = obj.href+"&fpush="+fpush;
    }
</script>';
	show_footer();

}elseif($action == 'updatecache'){
    //更新缓存
	include_once(TOOLS_ROOT.'source/class/class_core.php');
	include_once(TOOLS_ROOT.'source/function/function_core.php');
    header('Content-type: text/html; charset=utf-8');
	$cachelist = array();
	$discuz = & discuz_core::instance();
	$discuz->cachelist = $cachelist;
	$discuz->init_cron = false;
	$discuz->init_setting = false;
	$discuz->init_user = false;
	$discuz->init_session = false;
	$discuz->init_misc = false;
	
	$discuz->init();

	require_once libfile('function/cache');
	updatecache();
	include_once libfile('function/block');
	blockclass_cache();
	//note 清除群组缓存
	require_once libfile('function/group');
	$groupindex['randgroupdata'] = $randgroupdata = grouplist('lastupdate', array('ff.membernum', 'ff.icon'), 80);
	$groupindex['topgrouplist'] = $topgrouplist = grouplist('activity', array('f.commoncredits', 'ff.membernum', 'ff.icon'), 10);
	$groupindex['updateline'] = TIMESTAMP;
	$groupdata = DB::fetch_first("SELECT SUM(todayposts) AS todayposts, COUNT(fid) AS groupnum FROM ".DB::table('forum_forum')." WHERE status='3' AND type='sub'");
	$groupindex['todayposts'] = $groupdata['todayposts'];
	$groupindex['groupnum'] = $groupdata['groupnum'];
	save_syscache('groupindex', $groupindex);
	DB::query("TRUNCATE ".DB::table('forum_groupfield'));

	$tpl = dir(DISCUZ_ROOT.'./data/template');
	while($entry = $tpl->read()) {
		if(preg_match("/\.tpl\.php$/", $entry)) {
			@unlink(DISCUZ_ROOT.'./data/template/'.$entry);
		}
	}
	$tpl->close();
	show_msg('更新数据缓存模板缓存成功！', 'tools.php?action=index', 2000);

}elseif($action == 'logout') {
    // TODO: 退出系统.
	tsetcookie('toolsauth', '', -1);
	@header('Location:'.basename(__FILE__));
    exit();
}
 //大的分支 结束

/**********************************************************************************
 *
 *	tools.php 通用函数部分
 *
 *
 **********************************************************************************/
 
/*
	checkpassword 函数
	判断密码强度，大小写字母加数字，长度大于6位。
	return flase 或者 errormsg
 */
function checkpassword($password){
	return false;
}

//去掉slassh
function tstripslashes($string) {
	if(empty($string)) return $string;
	if(is_array($string)) {
		foreach($string as $key => $val) {
			$string[$key] = tstripslashes($val);
		}
	} else {
		$string = stripslashes($string);
	}
	return $string;
}

function thash() {
	return substr(md5(substr(time(), 0, -4).TOOLS_ROOT), 16);
}

function taddslashes($string, $force = 1) {
	if(is_array($string)) {
		foreach($string as $key => $val) {
			$string[$key] = taddslashes($val, $force);
		}
	} else {
		$string = addslashes($string);
	}
	return $string;
}

//显示
function show_msg($message, $url_forward='', $time = 2000, $noexit = 0) {
	show_header();
    !$url_forward && $url_forward = $_SERVER["HTTP_REFERER"];
	show_msg_body($message, $url_forward, $time, $noexit);
	show_footer();
	!$noexit && exit();
}

function show_msg_body($message, $url_forward='', $time = 1, $noexit = 0) {
	if($url_forward) {
		$url_forward = $_GET['from'] ? $url_forward.'&from='.rawurlencode($_GET['from']) : $url_forward;
		$message = "<a href=\"$url_forward\">$message (跳转中...)</a><script>setTimeout(\"window.location.href ='$url_forward';\", $time);</script>";
	}else{
		$message = "<a href=\"$url_forward\">$message </a>";
	}
	print<<<END
	<table>
	<tr><td>$message</td></tr>
	</table>
END;
}

function login_page() {
	show_header();
	$formhash = thash();
    $charset = PHPS_CHARSET;
    $error = ERROR_MSG;
	print<<<END
		<span>急诊箱登录</span>
		<form action="tools.php?action=login" method="post">
			<table class="specialtable">
			<tr>
				<td width="20%"><input class="textinput" type="password" name="toolpassword"></input></td>
				<td><input class="specialsubmit" type="submit" value=" 登 录 "></input>
                </td>
			</tr>
            <tr>
           
            <td colspan="2" style="color: #FF8040;">* tools 工具用于站点紧急维护 适用于 X3+ 系列 [{$charset}]<br />
            {$error}
            </td>
            <tr>
			</table>
			<input type="hidden" name="action" value="login">
			<input type="hidden" name="formhash" value="{$formhash}">
		</form>
END;
	show_footer();
}

function show_header() {
    // TODO: 头部导航开始
	$_GET['action'] = htmlspecialchars($_GET['action']);
	$nowarr = array($_GET['action'] => ' class="current"');
    
    $charset = PHP_CHARSET;
    
	print<<<END
	<!DOCTYPE html>
	<html xmlns="http://www.w3.org/1999/xhtml">
	<head>
	<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
	<title>Discuz! X3+ 急诊箱</title>
	<style type="text/css">
     input{vertical-align: middle;}
    a:visited,a:link{color: #575757;}
	* {font-size:12px; color: #575757; font-family: Verdana, Arial, Helvetica, sans-serif; line-height: 1.5em; word-break: break-all; }
	body { text-align:center; margin: 0; padding: 0; background: #F5FBFF; }
	.bodydiv { margin: 40px auto 0; width:1000px; text-align:left; border: solid #86B9D6; border-width: 5px 1px 1px; background: #FFF; }
	h1 { font-size: 18px; margin: 1px 0 0; line-height: 50px; height: 50px; background: #E8F7FC; color: #5086A5; padding-left: 10px; }
	#menu {width: 100%; margin: 10px auto; text-align: center; }
	#menu td { height: 30px; line-height: 30px; color: #999; border-bottom: 3px solid #EEE; }
	.current { font-weight: bold; color: #090 !important; border-bottom-color: #F90 !important; }
	input { border: 1px solid #B2C9D3; padding: 5px; background: #F5FCFF; }
	#footer { font-size: 10px; line-height: 40px; background: #E8F7FC; text-align: center; height: 38px; overflow: hidden; color: #5086A5; margin-top: 20px; }
	table {width:100%;font-size:12px;margin-top:5px;}
		table.specialtable,table.specialtable td {border:0;}
		td,th {padding:5px;text-align:left;}
		caption {font-weight:bold;padding:8px 0;color:#3544FF;text-align:left;}
		th {background:#E8F7FC;font-weight:600;}
		td.specialtd {text-align:left;}
	#setadmin {margin: 0px;}
	.textarea {height: 80px;width: 400px;padding: 3px;margin: 5px;}
	</style>
	</head>
	<body>
	<div class="bodydiv">
	<h1>Discuz! X3+ 急诊箱</h1><br/>
	<div style="width:90%;margin:0 auto;">
	<table id="menu">
	<tr>
	<td{$nowarr[index]}><a href="?action=index">首页</a></td>
    <td{$nowarr[serverinfo]}><a href="?action=serverinfo">系统信息</a></td>
    <td{$nowarr[happy]}><a href="?action=happy">幸福指数</a></td>
    <td{$nowarr[reinstall]}><a href="?action=reinstall">安装discuzx</a></td>
	<td{$nowarr[setadmin]}><a href="?action=setadmin">重置管理员帐号</a></td>
	<td{$nowarr[closesite]}><a href="?action=closesite">开启 & 关闭功能</a></td>
	<td{$nowarr[closeplugin]}><a href="?action=closeplugin">清理冗余信息</a></td>
	<td{$nowarr[repairdb]}><a href="?action=repairdb">修复数据库</a></td>
	<td{$nowarr[restoredb]}><a href="?action=restoredb">恢复数据库</a></td>
	<td{$nowarr[updatecache]}><a href="?action=updatecache">更新缓存</a></td>
	<td{$nowarr[logout]}><a href="?action=logout">退出</a></td>
	</tr>
	</table>
	<br>
END;
}

//页面顶部
function show_footer() {
	global $tools_versions;
	print<<<END
	</div>
	<div id="footer">Powered by {$tools_versions} &copy; Comsenz Inc. 2001-2015 <a href="http://www.comsenz.com" target="_blank">http://www.comsenz.com</a></div>
	</div>
	<br>
	</body>
	</html>
END;
}

//登录判断函数
function is_login() {
	$error = false;
	$errormsg = array();
    $tpassword = TPASSWORD;
    
	if(isset($_COOKIE['toolsauth'])) {
		if($_COOKIE['toolsauth'] === md5($tpassword.thash())) {
			return TRUE;
		}
	}
    
	if ($_GET['action'] === 'login') {
		$formhash = $_GET['formhash'];
        $_GET['toolpassword'] = md5($_GET['toolpassword']);
		if($formhash !== thash()) {
			show_msg('您的请求来路不正或者输入密码超时，请刷新页面后重新输入正确密码！');
		}
		$toolsmd5 = md5($tpassword.thash());
		if(md5($_GET['toolpassword'].thash()) == $toolsmd5) {
			tsetcookie('toolsauth', $toolsmd5, time()+3600);
			show_msg('登陆成功！', './tools.php?action=index', 2000);
		} else {
			show_msg( '您输入的密码不正确，请重新输入正确密码！', './tools.php', 2000);
		}
	} else {
		return FALSE;
	}
}

//登录成功设置cookie
function tsetcookie($var, $value = '', $life = 0, $prefix = '', $httponly = false, $cookiepath, $cookiedomain) {
	$var = (empty($prefix) ? '' : $prefix).$var;
	$_COOKIE[$var] = $value;
	
	if($value == '' || $life < 0) {
		$value = '';
		$life = -1;
	}
	$path = $httponly && PHP_VERSION < '5.2.0' ? $cookiepath.'; HttpOnly' : $cookiepath;
	$secure = $_SERVER['SERVER_PORT'] == 443 ? 1 : 0;

	if(PHP_VERSION < '5.2.0') {
		$r = setcookie($var, $value, $life);
	} else {
		$r = setcookie($var, $value, $life);
	}
}

/* 
	T 类 
	tools.php 主要类
*/
class T{
	var $dbconfig = null;
	var $ucdbconfig = null;
	var $db = null;
	var $ucdb = null;
	// 是否已经初始化
	var $initated = false;

	public function init() {
		if(!$this->initated) {
			$this->_init_config();
			$this->_init_db();
		}
		$this->initated = true;
	}

	public function db_runquery($sql) {
		$tablepre = $this->dbconfig['tablepre'];
		$dbcharset = $this->dbconfig['charset'];

		if(!isset($sql) || empty($sql)) return;

		$sql = str_replace("\r", "\n", str_replace(array(' {tablepre}', ' cdb_', ' `cdb_', ' pre_', ' `pre_'), array(' '.$tablepre, ' '.$tablepre, ' `'.$tablepre, ' '.$tablepre, ' `'.$tablepre), $sql));

		$ret = array();
		$num = 0;
		foreach(explode(";\n", trim($sql)) as $query) {
			$ret[$num] = '';
			$queries = explode("\n", trim($query));
			foreach($queries as $query) {
				$ret[$num] .= (isset($query[0]) && $query[0] == '#') || (isset($query[1]) && isset($query[1]) && $query[0].$query[1] == '--') ? '' : $query;
			}
			$num++;
		}
		unset($sql);
		$this->connect_db();
		foreach($ret as $query) {
			$query = trim($query);
			if($query) {
				if(substr($query, 0, 12) == 'CREATE TABLE') {
					$name = preg_replace("/CREATE TABLE ([a-z0-9_]+) .*/is", "\\1", $query);
					mysql_query($this->db_createtable($query, $dbcharset), $this->db);
				} else {
					mysql_query($query, $this->db);
				}
			}
		}
		return 1;
	}

	public function db_createtable($sql, $dbcharset) {
		$type = strtoupper(preg_replace("/^\s*CREATE TABLE\s+.+\s+\(.+?\).*(ENGINE|TYPE)\s*=\s*([a-z]+?).*$/isU", "\\2", $sql));
		$type = in_array($type, array('MYISAM', 'HEAP')) ? $type : 'MYISAM';
		return preg_replace("/^\s*(CREATE TABLE\s+.+\s+\(.+?\)).*$/isU", "\\1", $sql).(mysql_get_server_info() > '4.1' ? " ENGINE=$type DEFAULT CHARSET=$dbcharset" : " TYPE=$type");
	}
	
	public function connect_db($type = 'db') {
		if($type == 'db') {
			$dbhost = $this->dbconfig['host'];
			$dbuser = $this->dbconfig['user'];
			$dbpw = $this->dbconfig['pw'];
			$dbname = $this->dbconfig['name'];
			$dbcharset = $this->dbconfig['charset'];
		} else {
			$dbhost = $this->ucdbconfig['host'];
			$dbuser = $this->ucdbconfig['user'];
			$dbpw = $this->ucdbconfig['pw'];
			$dbname = $this->ucdbconfig['name'];
			$dbcharset = $this->ucdbconfig['charset'];
		}	
		if($dbhost && $dbuser && $dbpw && !$this->db = mysql_connect($dbhost, $dbuser, $dbpw, 1))
			show_msg('Discuz! X数据库连接出错，请检查config_global.php中数据库相关信息是否正确，与数据库服务器网络连接是否正常');
   
		$dbversion = mysql_get_server_info($this->db);
		if($dbversion > '4.1') {
			if($dbcharset) {
				mysql_query("SET character_set_connection=".$dbcharset.", character_set_results=".$dbcharset.", character_set_client=binary", $this->db);
			}
			if($dbversion > '5.0.1') {
				mysql_query("SET sql_mode=''", $this->db);
			}
		}
		@mysql_select_db($dbname, $this->db);
	}

	public function close_db() {
		mysql_close($this->db);
	}

	private function _init_config() {
		$error = false;
		$_config = array();
		
		@include TOOLS_ROOT.'config/config_global.php';
        $errormsg = '';
		if(empty($_config)) {
			//$error = true;
			$errormsg .= '没有找到 '.TOOLS_ROOT.'config/config_global.php 文件！';
		}
               
		$uc_config_file = TOOLS_ROOT.'config/config_ucenter.php';
		if(!@file_exists($uc_config_file)) {
			//$error = true;
			$errormsg .= '没有找到'.$uc_config_file.'文件!';
		}
        
		@include $uc_config_file;
		
        !$_GET['action'] && $_GET['action'] = 'index';
        
		if($error && !in_array($_GET['action'], array('index','reinstall','logout'))) {
			show_msg($errormsg);
		}
        
        if(!$errormsg)
            $errormsg = '根目录:'.TOOLS_ROOT;
        
        define('ERROR_MSG','* '.$errormsg);
		
		$this->config = & $_config;
		$this->config['dbcharset'] = $_config['db']['1']['dbcharset'];
		$this->config['charset'] = $_config['output']['charset'];
	}

	private function _init_db() {
		$this->dbconfig['host'] = $this->config['db']['1']['dbhost'];
		$this->dbconfig['user'] = $this->config['db']['1']['dbuser'];
		$this->dbconfig['pw'] = $this->config['db']['1']['dbpw'];
		$this->dbconfig['name'] = $this->config['db']['1']['dbname'];
		$this->dbconfig['charset'] = $this->config['db']['1']['dbcharset'];
		$this->dbconfig['tablepre'] = $this->config['db']['1']['tablepre'];

		$this->ucdbconfig['host'] = UC_DBHOST;
		$this->ucdbconfig['user'] = UC_DBUSER;
		$this->ucdbconfig['pw'] = UC_DBPW;
		$this->ucdbconfig['name'] = UC_DBNAME;
		$this->ucdbconfig['charset'] = UC_DBCHARSET;
		$this->ucdbconfig['tablepre'] = UC_DBTABLEPRE;
		
		$this->connect_db();
		$sql = "SHOW FULL PROCESSLIST";
		$query = mysql_query($sql, $this->db);
		$waiting = false;
		$waiting_msg = '';
		while($l = mysql_fetch_array($query, MYSQL_ASSOC)) {
			if($l['State'] == 'Checking table') {
				$this->close_db();
				$waiting = true;
				$waiting_msg = '正在检查表，请稍后...';
			} elseif($l['State'] == 'Repair by sorting') {
				$this->close_db();
				$waiting = true;
				$waiting_msg = '正在修复表，请稍后...';
			}
		}
		if($waiting) {
			show_msg($waiting_msg, 'tools.php?action=repairdb', 3000);
		}
	}
}

//T class 结束
/**
* End of the tools.php
*/

class zip{
 public $total_files = 0;
 public $total_folders = 0; 
 function Extract( $zn, $to, $index = Array(-1) ){
   $ok = 0; $zip = @fopen($zn,'rb');
   if(!$zip) return(-1);
   $cdir = $this->ReadCentralDir($zip,$zn);
   $pos_entry = $cdir['offset'];

   if(!is_array($index)){ $index = array($index);  }
   for($i=0; $index[$i];$i++){
   		if(intval($index[$i])!=$index[$i]||$index[$i]>$cdir['entries'])
		return(-1);
   }
   for ($i=0; $i<$cdir['entries']; $i++)
   {
     @fseek($zip, $pos_entry);
     $header = $this->ReadCentralFileHeaders($zip);
     $header['index'] = $i; $pos_entry = ftell($zip);
     @rewind($zip); fseek($zip, $header['offset']);
     if(in_array("-1",$index)||in_array($i,$index))
     	$stat[$header['filename']]=$this->ExtractFile($header, $to, $zip);
   }
   fclose($zip);
   return $stat;
 }

  function ReadFileHeader($zip){
    $binary_data = fread($zip, 30);
    $data = unpack('vchk/vid/vversion/vflag/vcompression/vmtime/vmdate/Vcrc/Vcompressed_size/Vsize/vfilename_len/vextra_len', $binary_data);

    $header['filename'] = fread($zip, $data['filename_len']);
    if ($data['extra_len'] != 0) {
      $header['extra'] = fread($zip, $data['extra_len']);
    } else { $header['extra'] = ''; }

    $header['compression'] = $data['compression'];$header['size'] = $data['size'];
    $header['compressed_size'] = $data['compressed_size'];
    $header['crc'] = $data['crc']; $header['flag'] = $data['flag'];
    $header['mdate'] = $data['mdate'];$header['mtime'] = $data['mtime'];

    if ($header['mdate'] && $header['mtime']){
     $hour=($header['mtime']&0xF800)>>11;$minute=($header['mtime']&0x07E0)>>5;
     $seconde=($header['mtime']&0x001F)*2;$year=(($header['mdate']&0xFE00)>>9)+1980;
     $month=($header['mdate']&0x01E0)>>5;$day=$header['mdate']&0x001F;
     $header['mtime'] = mktime($hour, $minute, $seconde, $month, $day, $year);
    }else{$header['mtime'] = time();}

    $header['stored_filename'] = $header['filename'];
    $header['status'] = "ok";
    return $header;
  }

 function ReadCentralFileHeaders($zip){
    $binary_data = fread($zip, 46);
    $header = unpack('vchkid/vid/vversion/vversion_extracted/vflag/vcompression/vmtime/vmdate/Vcrc/Vcompressed_size/Vsize/vfilename_len/vextra_len/vcomment_len/vdisk/vinternal/Vexternal/Voffset', $binary_data);

    if ($header['filename_len'] != 0)
      $header['filename'] = fread($zip,$header['filename_len']);
    else $header['filename'] = '';

    if ($header['extra_len'] != 0)
      $header['extra'] = fread($zip, $header['extra_len']);
    else $header['extra'] = '';

    if ($header['comment_len'] != 0)
      $header['comment'] = fread($zip, $header['comment_len']);
    else $header['comment'] = '';

    if ($header['mdate'] && $header['mtime'])
    {
      $hour = ($header['mtime'] & 0xF800) >> 11;
      $minute = ($header['mtime'] & 0x07E0) >> 5;
      $seconde = ($header['mtime'] & 0x001F)*2;
      $year = (($header['mdate'] & 0xFE00) >> 9) + 1980;
      $month = ($header['mdate'] & 0x01E0) >> 5;
      $day = $header['mdate'] & 0x001F;
      $header['mtime'] = mktime($hour, $minute, $seconde, $month, $day, $year);
    } else {
      $header['mtime'] = time();
    }
    $header['stored_filename'] = $header['filename'];
    $header['status'] = 'ok';
    if (substr($header['filename'], -1) == '/')
      $header['external'] = 0x41FF0010;
    return $header;
 }

 function ReadCentralDir($zip,$zip_name){
	$size = filesize($zip_name);

	if ($size < 277) $maximum_size = $size;
	else $maximum_size=277;
	
	@fseek($zip, $size-$maximum_size);
	$pos = ftell($zip); $bytes = 0x00000000;
	
	while ($pos < $size){
		$byte = @fread($zip, 1); $bytes=($bytes << 8) | ord($byte);
		if ($bytes == 0x504b0506 or $bytes == 0x2e706870504b0506){ $pos++;break;} $pos++;
	}
	
	$fdata=fread($zip,18);
	
	$data=@unpack('vdisk/vdisk_start/vdisk_entries/ventries/Vsize/Voffset/vcomment_size',$fdata);
	
	if ($data['comment_size'] != 0) $centd['comment'] = fread($zip, $data['comment_size']);
	else $centd['comment'] = ''; $centd['entries'] = $data['entries'];
	$centd['disk_entries'] = $data['disk_entries'];
	$centd['offset'] = $data['offset'];$centd['disk_start'] = $data['disk_start'];
	$centd['size'] = $data['size'];  $centd['disk'] = $data['disk'];
	return $centd;
  }

 function ExtractFile($header,$to,$zip){
	$header = $this->readfileheader($zip);
	if(substr($to,-1)!="/") $to.="/";
	if($to=='./') $to = '';
    $header['filename'] = ltrim(strtr('./'.$header['filename'],array('./upload/'=>'./')),'./');
	$pth = explode("/",$to.$header['filename']);
	$mydir = './';

    if('./utility/' === './'.$pth[0].'/' || './readme/' === './'.$pth[0].'/')
            return true;
    
	for($i=0;$i<count($pth)-1;$i++){
		if(!$pth[$i]) continue;
		$mydir .= $pth[$i]."/";
		if((!is_dir($mydir) && @mkdir($mydir,0777)) || (($mydir==$to.$header['filename'] || ($mydir==$to && $this->total_folders==0)) && is_dir($mydir)) ){
			@chmod($mydir,0777);
			$this->total_folders ++;
		}
	}
    
	if(strrchr($header['filename'],'/')=='/') return;	
	if (!($header['external']==0x41FF0010)&&!($header['external']==16)){
		if ($header['compression']==0){
            if($to.$header['filename'])
			$fp = @sfopen($to.$header['filename'], 'wb');
			if(!$fp) return(-1);
			$size = $header['compressed_size'];
			while ($size != 0){
				$read_size = ($size < 2048 ? $size : 2048);
				$buffer = fread($zip, $read_size);
				$binary_data = pack('a'.$read_size, $buffer);
				@fwrite($fp, $binary_data, $read_size);
				$size -= $read_size;
			}
			fclose($fp);
			touch($to.$header['filename'], $header['mtime']);
		}else{
			$fp = @fopen($to.$header['filename'].'.gz','wb');
			if(!$fp) return(-1);
			$binary_data = pack('va1a1Va1a1', 0x8b1f, Chr($header['compression']),
			Chr(0x00), time(), Chr(0x00), Chr(3));
			fwrite($fp, $binary_data, 10);
			$size = $header['compressed_size'];
			while ($size != 0){
				$read_size = ($size < 1024 ? $size : 1024);
				$buffer = fread($zip, $read_size);
				$binary_data = pack('a'.$read_size, $buffer);
				@fwrite($fp, $binary_data, $read_size);
				$size -= $read_size;
			}
		
			$binary_data = pack('VV', $header['crc'], $header['size']);
			fwrite($fp, $binary_data,8); fclose($fp);
            
			$fp = @sfopen($to.$header['filename'],'wb');
			if(!$fp) return(-1);
            $gzp = @gzopen($to.$header['filename'].'.gz','rb');
			if(!$gzp) return(-2);
			$size = $header['size'];
            
			while ($size != 0){
				$read_size = ($size < 2048 ? $size : 2048);
				$buffer = gzread($gzp, $read_size);
				$binary_data = pack('a'.$read_size, $buffer);
				@fwrite($fp, $binary_data, $read_size);
				$size -= $read_size;
			}
			fclose($fp); gzclose($gzp);
		
			touch($to.$header['filename'], $header['mtime']);
			@unlink($to.$header['filename'].'.gz');
		}
	}
    
	$this->total_files ++;
	return true;
 }
}

function sfopen($path, $type='wb'){
    global $gzp;
    static $oldfile = array();    
    if($path === true)
        return $oldfile;
    if(is_file($path) && !YESINSTALL){
        if(is_file($path.'.gz')){
            @gzclose($gzp);
            if(!@unlink($path.'.gz'))
            if(!@unlink($path.'.gz'))
            if(!@unlink($path.'.gz'))
            if(!@unlink($path.'.gz'))
            if(!@unlink($path.'.gz'))
                exit('unlink err:'. $path.'.gz');
        }
        $oldfile[0][] = $path;
        return false;
    }
    
    $oldfile[1][] = $path;
    return @fopen($path,$type);
}

function curl_getdata($url) {
    if(!function_exists('curl_init')){
        $opts = array(
             'http'=>array(
             'method'=>"GET",
             'timeout'=>600,
             )
        );    
     $context = stream_context_create($opts);
     $html =file_get_contents($url, false, $context); 
     return $html;
    }
	$curl = curl_init();
	curl_setopt( $curl, CURLOPT_URL, $url ); // 要访问的地址
	curl_setopt( $curl, CURLOPT_USERAGENT, "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; .NET CLR 1.1.4322)"); // 模拟用户使用的浏览器
	curl_setopt( $curl, CURLOPT_FOLLOWLOCATION, 3); // 使用自动跳转
	curl_setopt( $curl, CURLOPT_REFERER, 'http://www.discuz.net/forum-2-1.html'); // 自动设置Referer
	curl_setopt( $curl, CURLOPT_HTTPGET, 1 ); // 发送一个常规的Post请求
	curl_setopt( $curl, CURLOPT_TIMEOUT, 600); // 设置超时限制防止死循环
	curl_setopt( $curl, CURLOPT_HEADER, 0 ); // 显示返回的Header区域内容
	curl_setopt( $curl, CURLOPT_RETURNTRANSFER, 1 ); // 获取的信息以文件流的形式返回
	$tmpInfo = curl_exec( $curl ); // 执行操作
	curl_close( $curl ); // 关闭CURL会话
	return $tmpInfo; // 返回数据
}

function fun_reinstall($type,$path = false){
        $action = $_GET['action'];
        if($type === 'two'){
            if(is_file('./data/install.lock'))
            @unlink('./data/install.lock');
            if(is_file('./data/sendmail.lock'))
            @unlink('./data/sendmail.lock');
            if(is_dir('./install/')){
                show_msg('二次安装过程即将开始....', 'install/', 2000);
            }
            show_msg('找不到所需要的安装目录install, 程序无法安装', 'tools.php?action='.$action, 2000); 
        }else{
            static $back_dirs = '';
            if(!$back_dirs)
                $back_dirs = './backs_'.date('Y-m-d_His').'/';
           
           $back_dir .= $back_dirs.ltrim($path,'./');
           if(!is_dir($back_dir)){
                mkdir($back_dir);
           }
           
           $list = scandir($path);
           $i = 0;
           foreach($list AS $val){
                if($val == '.' || $val == '..' || $val === basename(__FILE__) || strpos($val,'backs_') !== false)
                    continue;
                
                if(is_dir($path.$val.'/')){
                    fun_reinstall($type, $path.$val.'/');
                }else{
                    if(!copy($path.$val, $back_dir.$val))
                    if(!copy($path.$val, $back_dir.$val))
                    if(!copy($path.$val, $back_dir.$val))
                    if(!copy($path.$val, $back_dir.$val))
                    if(!copy($path.$val, $back_dir.$val))
                        $sss = 111;
                    $i++;
                    @unlink($path.$val);
                }
           }
           
           if($path !== './'){
                @rmdir($path);
           }else{
                if($i===0){
                    if(@rmdir($back_dir) === false)
                    if(@rmdir($back_dir) === false)
                    if(@rmdir($back_dir) === false)
                    if(@rmdir($back_dir) === false)
                    if(@rmdir($back_dir) === false)
                        $s = 0;
                }
           }
        }
        
    }

// TODO: 函数开始

function fun_char($data){
    global $is_utf8;
    if(!$is_utf8){
        return mb_convert_encoding($data,HTML_CHARSET,THIS_CHARSET);
    }else{
        return $data;
    }
}

function fun_size($size) { 
    $units = array(' BYT', ' KB', ' MB', ' GB', ' TB'); 
    for ($i = 0; $size >= 1024 && $i < 4; $i++) $size /= 1024; 
    return round($size, 2).$units[$i]; 
}