common.php

<?php
define('SAESPOT_VER', '1.6');
define('ROOT', dirname(__FILE__));

if (!defined('IN_SAESPOT')) {
    include_once(ROOT . '/error/403.php');
    exit;
};

// 获得IP地址
/*
if (getenv('HTTP_CLIENT_IP') && strcasecmp(getenv('HTTP_CLIENT_IP'), 'unknown')) {
    $onlineip = getenv('HTTP_CLIENT_IP');
}
if (getenv('REMOTE_ADDR') && strcasecmp(getenv('REMOTE_ADDR'), 'unknown')) {
    $onlineip = getenv('REMOTE_ADDR');
}
if (isset($_SERVER['REMOTE_ADDR']) && strcasecmp($_SERVER['REMOTE_ADDR'], 'unknown')) {
    $onlineip = $_SERVER['REMOTE_ADDR'];
}
*/
if (getenv('HTTP_X_FORWARDED_FOR') && strcasecmp(getenv('HTTP_X_FORWARDED_FOR'), 'unknown')) {
    if (preg_match('/(\d{1,3}\.){3}\d{1,3}/', getenv('HTTP_X_FORWARDED_FOR'), $matches)) {
        $onlineip = $matches[0];
    } else {
        $error_code = 4036;
        include_once(ROOT . '/error/403.php');
        exit;
    }
}

$mtime = explode(' ', microtime());
$starttime = $mtime[1] + $mtime[0];
$timestamp = time();
$php_self = addslashes(htmlspecialchars($_SERVER['PHP_SELF'] ? $_SERVER['PHP_SELF'] : $_SERVER['SCRIPT_NAME']));
$url_path = substr($php_self, 1,-4);

include_once (ROOT . '/libs/mysql.class.php');
// 初始化从数据类，若要写、删除数据则需要定义主数据类
$DBS = new DB_MySQL;
$DBS->connect($servername, $dbport, BCS_AK, BCS_SK, $dbname);

// 去除转义字符
function stripslashes_array(&$array) {
	if (is_array($array)) {
		foreach ($array as $k => $v) {
			$array[$k] = stripslashes_array($v);
		}
	} elseif (is_string($array)) {
		$array = stripslashes($array);
	}
	return $array;
}

@set_magic_quotes_runtime(0);
// 判断 magic_quotes_gpc 状态
if (@get_magic_quotes_gpc()) {
    $_GET = stripslashes_array($_GET);
    $_POST = stripslashes_array($_POST);
    $_COOKIE = stripslashes_array($_COOKIE);
}

// 获取当前用户
$cur_user = null;
$cur_uid = $_COOKIE['cur_uid'];
$cur_uname = $_COOKIE['cur_uname'];
$cur_ucode = $_COOKIE['cur_ucode'];


if($cur_uname && $cur_uid && $cur_ucode){
    $u_key = 'u_'.$cur_uid;
    // 尝试从缓存里取出
    $mc_user = $MMC->get($u_key);
    if($mc_user){
        $mc_ucode = md5($mc_user['id'].$mc_user['password'].$mc_user['regtime'].$mc_user['lastposttime'].$mc_user['lastreplytime']);
        if($cur_uname == $mc_user['name'] && $cur_ucode == $mc_ucode){
            $cur_user = $mc_user;
            unset($mc_user);
        }
    }else{
        // 从数据库里读取
        $db_user = $DBS->fetch_one_array("SELECT * FROM yunbbs_users WHERE id='".$cur_uid."' LIMIT 1");
        if($db_user){
            $db_ucode = md5($db_user['id'].$db_user['password'].$db_user['regtime'].$db_user['lastposttime'].$db_user['lastreplytime']);
            if($cur_uname == $db_user['name'] && $cur_ucode == $db_ucode){
                //设置缓存和cookie
                $MMC->set($u_key, $db_user, 0, 600);
                setcookie('cur_uid', $cur_uid, $timestamp+ 86400 * 365, '/');
                setcookie('cur_uname', $cur_uname, $timestamp+86400 * 365, '/');
                setcookie('cur_ucode', $cur_ucode, $timestamp+86400 * 365, '/');
                $cur_user = $db_user;
                unset($db_user);
            }
        }
    }
}

include_once (ROOT . '/model.php');

// 获得散列
function formhash() {
	global $cur_ucode, $options;
	return substr(md5($options['site_create'].$cur_ucode.'yoursecretwords'), 8, 8);
}

$formhash = formhash();

// 只允许注册用户访问
if($options['authorized'] && (!$cur_user || $cur_user['flag']<5)){
    if( !in_array($url_path, array('login','logout','sigin','forgot','qqlogin','qqcallback','qqsetname','wblogin','wbcallback','wbsetname'))){
        header('Location: /login');
        exit('authorized only');
    }
}

// 网站暂时关闭
if($options['close'] && (!$cur_user || $cur_user['flag']<99)){
    if( !in_array($url_path, array('login','forgot'))){
        header('Location: /login');
        exit('site close');
    }
}


$user_agent = strtolower($_SERVER['HTTP_USER_AGENT']);
if ($user_agent) {
    $is_spider = preg_match('/(bot|crawl|spider|slurp|sohu-search|lycos|robozilla|google)/i', $user_agent);
    $is_mobie = preg_match('/(Mobile|iPod|iPhone|Android|Nokia|Opera Mini|BlackBerry|webOS|UCWEB|Blazer|PSP)/i', $user_agent);

    if ($is_mobie) {
        // 设置模板前缀
        $viewat = $_COOKIE['vtpl'];
        if ($viewat=='desktop') {
            $tpl = '';
        } else {
            $tpl = 'ios_';
        }
    } else {
        $tpl = '';
    }
} else {
    $error_code = 4001;
    include_once(ROOT . '/error/400.php');
    exit;
}

//设置基本环境变量
/*
$cur_user
$is_spider
$is_mobie
$options
*/

// 一些常用的函数
// 显示时间格式化
function showtime($db_time){
    $diftime = time() - $db_time;
    if($diftime < 31536000){
        // 小于1年如下显示
        if($diftime>=86400){
            return round($diftime/86400,1).'天前';
        }elseif($diftime>=3600){
            return round($diftime/3600,1).'小时前';
        }elseif($diftime>=60){
            return round($diftime/60,1).'分钟前';
        }else{
            return ($diftime+1).'秒钟前';
        }
    }else{
        // 大于一年
        return gmdate("Y-m-d H:i:s", $db_time);
    }
}

// 格式化帖子、回复内容
function set_content($text,$spider='0'){
    global $options;
    // images
    $img_re = '/(http[s]?:\/\/?('.$options['safe_imgdomain'].').+\.(jpg|jpe|jpeg|gif|png))/';
    if(preg_match($img_re, $text)){
        $text = preg_replace($img_re, '<a href="\1" target="_blank"><img src="\1" alt="" /></a>', $text);
    }
    // 腾讯微博图片
    if(strpos($text, 'qpic.cn')){
        // http://t1.qpic.cn/mblogpic/4c7dfb4b2d3c665c4fa4/
        // http://t1.qpic.cn/mblogpic/4c7dfb4b2d3c665c4fa4/160
        // http://t1.qpic.cn/mblogpic/4c7dfb4b2d3c665c4fa4/460
        // http://t1.qpic.cn/mblogpic/4c7dfb4b2d3c665c4fa4/2000
        // 还有很多尺寸，如 220 500 等，但普通用户一般获取不到，不再识别。
        $qq_img_re = '/(http:\/\/t(0|1|2|3|4)\.qpic\.cn\/mblogpic\/[a-z0-9]{20})\/?(160|460|2000)?/';
        $text = preg_replace($qq_img_re, '<a href="\1/2000" target="_blank"><img src="\1/460" alt="" /></a>', $text);
    }
    // 新浪微博图片
    if(strpos($text, 'sinaimg.cn')){
        // http://ww4.sinaimg.cn/thumbnail/a74ecc4cjw1dzj789ylioj.jpg
        // http://ww4.sinaimg.cn/bmiddle/a74ecc4cjw1dzj789ylioj.jpg
        // http://ww4.sinaimg.cn/large/a74ecc4cjw1dzj789ylioj.jpg
        $sina_img_re = '/(http:\/\/ww(1|2|3|4)\.sinaimg\.cn)\/(thumbnail|bmiddle|large)\/([a-z0-9]{22}\.jpg)/';
        $text = preg_replace($sina_img_re, '<a href="\1/large/\4" target="_blank"><img src="\1/bmiddle/\4" alt="" /></a>', $text);
    }
    // 各大网站的视频地址格式经常变，能识别一些，不能识别了再改。
    // youku
	if(strpos($text, 'player.youku.com')){
	    $text = preg_replace('/http:\/\/player\.youku\.com\/player\.php\/sid\/([a-zA-Z0-9=]+)\/v\.swf/', '<embed src="http://player.youku.com/player.php/sid/\1/v.swf" quality="high" width="590" height="492" align="middle" allowScriptAccess="sameDomain" type="application/x-shockwave-flash"></embed>', $text);
	}
    if(strpos($text, 'v.youku.com')){
        $text = preg_replace('/http:\/\/v\.youku\.com\/v_show\/id_([a-zA-Z0-9=]+)(\/|\.html?)?/', '<embed src="http://player.youku.com/player.php/sid/\1/v.swf" quality="high" width="590" height="492" align="middle" allowScriptAccess="sameDomain" type="application/x-shockwave-flash"></embed>', $text);
    }
    // tudou
    if(strpos($text, 'www.tudou.com')){
        if(strpos($text, 'programs/view')){
            $text = preg_replace('/http:\/\/www\.tudou\.com\/(programs\/view|listplay)\/([a-zA-Z0-9=_-]+)(\/|\.html?)?/', '<embed src="http://www.tudou.com/v/\2/" quality="high" width="638" height="420" align="middle" allowScriptAccess="sameDomain" type="application/x-shockwave-flash"></embed>', $text);
        }elseif(strpos($text, 'albumplay')){
            $text = preg_replace('/http:\/\/www\.tudou\.com\/albumplay\/([a-zA-Z0-9=_-]+)\/([a-zA-Z0-9=_-]+)(\/|\.html?)?/', '<embed src="http://www.tudou.com/a/\1/" quality="high" width="638" height="420" align="middle" allowScriptAccess="sameDomain" type="application/x-shockwave-flash"></embed>', $text);
        }else{
            $text = preg_replace('/http:\/\/www\.tudou\.com\/(programs\/view|listplay)\/([a-zA-Z0-9=_-]+)(\/|\.html?)?/', '<embed src="http://www.tudou.com/l/\2/" quality="high" width="638" height="420" align="middle" allowScriptAccess="sameDomain" type="application/x-shockwave-flash"></embed>', $text);
        }
    }
    // qq
    if(strpos($text, 'v.qq.com')){
        if(strpos($text, 'vid=')){
            $text = preg_replace('/http:\/\/v\.qq\.com\/(.+)vid=([a-zA-Z0-9]{8,})/', '<embed src="http://static.video.qq.com/TPout.swf?vid=\2&auto=0" allowFullScreen="true" quality="high" width="590" height="492" align="middle" allowScriptAccess="always" type="application/x-shockwave-flash"></embed>', $text);
        }else{
            $text = preg_replace('/http:\/\/v\.qq\.com\/(.+)\/([a-zA-Z0-9]{8,})\.(html?)/', '<embed src="http://static.video.qq.com/TPout.swf?vid=\2&auto=0" allowFullScreen="true" quality="high" width="590" height="492" align="middle" allowScriptAccess="always" type="application/x-shockwave-flash"></embed>', $text);
        }
    }
    // gist
    if(strpos($text, 'gist.github.com')){
        $text = preg_replace('/(https?:\/\/gist\.github\.com\/([a-zA-Z0-9-]+\/)?[\d]+)/', '<script src="\1.js"></script>', $text);
    }
    // mentions
    if(strpos(' '.$text, '@')){
        $text = preg_replace('/\B\@([a-zA-Z0-9\x80-\xff]{4,20})/', '@<a href="'.$options['base_url'].'/member-\1.html">\1</a>', $text);
    }
    // url
    if(strpos(' '.$text, 'http')){
        $text = ' ' . $text;
        $text = preg_replace(
        	'`([^"=\'>])((http|https|ftp)://[^\s<]+[^\s<\.)])`i',
        	'$1<a href="$2" target="_blank" rel="nofollow">$2</a>',
        	$text
        );
        $text = substr($text, 1);
    }

    $text = str_replace("\r\n", '<br/>', $text);

    return $text;
}

// 匹配文本里呼叫某人，为了保险，使用时常在其前后加空格，如 @admin 吧
function find_mentions($text, $filter_name=''){
    // 正则跟用户注册、登录保持一致
    preg_match_all('/\B\@([a-zA-Z0-9\x80-\xff]{4,20})/' ,$text, $out, PREG_PATTERN_ORDER);
    $new_arr = array_unique($out[1]);
    if($filter_name && in_array($filter_name, $new_arr)){
        foreach($new_arr as $k=>$v){
            if($v == $filter_name){
                unset($new_arr[$k]);
                break;
            }
        }
    }
    return $new_arr;
}

//转换字符
function char_cv($string) {
	$string = htmlspecialchars(addslashes($string));
	return $string;
}

// 过滤掉一些非法字符
function filter_chr($string){
    $string = str_replace("<", "", $string);
    $string = str_replace(">", "", $string);
    return $string;
}

//判断是否为邮件地址
function isemail($email) {
	return strlen($email) > 6 && preg_match("/^[\w\-\.]+@[\w\-\.]+(\.\w+)+$/", $email);
}

function curl_file_get_contents($url){
    $ch = curl_init();
    curl_setopt($ch, CURLOPT_URL, $url);
    curl_setopt($ch, CURLOPT_HEADER, 0);
    curl_setopt($ch, CURLOPT_TIMEOUT, 5);
    curl_setopt($ch, CURLOPT_USERAGENT, _USERAGENT_);
    curl_setopt($ch, CURLOPT_AUTOREFERER, TRUE);
    curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
    curl_setopt($ch, CURLOPT_FOLLOWLOCATION, TRUE);
    $data = curl_exec($ch);
    curl_close($ch);
    return $data;
}

?>