config.php 3.1 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109
  1. <?php
  2. error_reporting(0);
  3. session_start();
  4. date_default_timezone_set('PRC');
  5. header("Content-type: text/html; charset=utf-8");
  6. $gmcode='1';
  7. $accdbname="account";
  8. $quarr = array (
  9. "10001" => array (
  10. "manageurl"=>"http://127.0.0.1:88/",//请以/结尾
  11. "gid"=>10000,
  12. "host"=>"127.0.0.1",
  13. "dbname"=>"ckwy_fy_S350002",
  14. //"user"=>"root",
  15. //"pwd"=>"123456",
  16. "zoneid"=>1,
  17. "name"=>"1区",
  18. //"manageuser"=>"shushen66",
  19. //"managepwd"=>"1692045",
  20. "hidde"=>false
  21. ),
  22. "10002" => array (
  23. "manageurl"=>"http://127.0.0.1:88/",//请以/结尾
  24. "gid"=>10000,
  25. "host"=>"127.0.0.1",
  26. "dbname"=>"ckwy_fy_S350003",
  27. "zoneid"=>2,
  28. "name"=>"2区",
  29. "hidde"=>false
  30. ),
  31. );
  32. if(isset($_POST['key'])){
  33. $api_sige=md5('603984007'.date('Y-m-d H'));
  34. if($_POST['key']==$api_sige){
  35. $return[]=array(
  36. 'server_id'=>10001,
  37. 'server_host'=>'101.34.86.67',
  38. 'server_name'=>'天龙1-10区'
  39. );
  40. $return[]=array(
  41. 'server_id'=>10011,
  42. 'server_host'=>'101.34.86.67',
  43. 'server_name'=>'天龙11-20区'
  44. );
  45. $return[]=array(
  46. 'server_id'=>10021,
  47. 'server_host'=>'101.34.86.67',
  48. 'server_name'=>'天龙21-22区'
  49. );
  50. $return[]=array(
  51. 'server_id'=>10023,
  52. 'server_host'=>'101.34.86.67',
  53. 'server_name'=>'天龙23-24区'
  54. );
  55. $return[]=array(
  56. 'server_id'=>10025,
  57. 'server_host'=>'101.34.86.67',
  58. 'server_name'=>'天龙25区'
  59. );
  60. $return[]=array(
  61. 'server_id'=>10026,
  62. 'server_host'=>'101.34.86.67',
  63. 'server_name'=>'天龙26区'
  64. );
  65. exit(json_encode($return));
  66. }
  67. }
  68. $getfilter="'|(and|or)\\b.+?(>|<|=|in|like)|\\/\\*.+?\\*\\/|<\\s*script\\b|\\bEXEC\\b|UNION.+?SELECT|UPDATE.+?SET|INSERT\\s+INTO.+?VALUES|(SELECT|DELETE).+?FROM|(CREATE|ALTER|DROP|TRUNCATE)\\s+(TABLE|DATABASE)";
  69. $postfilter="\\b(and|or)\\b.{1,6}?(=|>|<|\\bin\\b|\\blike\\b)|\\/\\*.+?\\*\\/|<\\s*script\\b|\\bEXEC\\b|UNION.+?SELECT|UPDATE.+?SET|INSERT\\s+INTO.+?VALUES|(SELECT|DELETE).+?FROM|(CREATE|ALTER|DROP|TRUNCATE)\\s+(TABLE|DATABASE)";
  70. $cookiefilter="\\b(and|or)\\b.{1,6}?(=|>|<|\\bin\\b|\\blike\\b)|\\/\\*.+?\\*\\/|<\\s*script\\b|\\bEXEC\\b|UNION.+?SELECT|UPDATE.+?SET|INSERT\\s+INTO.+?VALUES|(SELECT|DELETE).+?FROM|(CREATE|ALTER|DROP|TRUNCATE)\\s+(TABLE|DATABASE)";
  71. function StopAttack($StrFiltKey,$StrFiltValue,$ArrFiltReq){
  72. if(is_array($StrFiltValue)){
  73. $StrFiltValue=implode($StrFiltValue);
  74. }
  75. if (preg_match("/".$ArrFiltReq."/is",$StrFiltValue)==1){
  76. print "非法操作!";
  77. exit();
  78. }
  79. }
  80. foreach($_GET as $key=>$value){
  81. StopAttack($key,$value,$getfilter);
  82. }
  83. foreach($_POST as $key=>$value){
  84. StopAttack($key,$value,$postfilter);
  85. }
  86. foreach($_COOKIE as $key=>$value){
  87. StopAttack($key,$value,$cookiefilter);
  88. }
  89. function poststr($str){
  90. if(isset($_POST[$str])){
  91. return $_POST[$str];
  92. }
  93. die("您提交的参数非法!");
  94. }
  95. function get($url,$postdata){
  96. $ch = curl_init();
  97. curl_setopt($ch, CURLOPT_URL, $url.'?'.http_build_query($postdata));
  98. curl_setopt($ch, CURLOPT_HEADER, 0);
  99. curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
  100. curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, FALSE);
  101. curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, FALSE);
  102. curl_setopt($ch, CURLOPT_TIMEOUT, 10);
  103. $output = curl_exec($ch);
  104. $errorCode = curl_errno($ch);
  105. return $output;
  106. }
  107. ?>