<?php
\nclass mysql {
\nprivate $db_host; \/\/\u6570\u636e\u5e93\u4e3b\u673a
\nprivate $db_user; \/\/\u6570\u636e\u5e93\u7528\u6237\u540d
\nprivate $db_pwd; \/\/\u6570\u636e\u5e93\u7528\u6237\u540d\u5bc6\u7801
\nprivate $db_database; \/\/\u6570\u636e\u5e93\u540d
\nprivate $conn; \/\/\u6570\u636e\u5e93\u8fde\u63a5\u6807\u8bc6;
\nprivate $result; \/\/\u6267\u884cquery\u547d\u4ee4\u7684\u7ed3\u679c\u8d44\u6e90\u6807\u8bc6
\nprivate $sql; \/\/sql\u6267\u884c\u8bed\u53e5
\nprivate $row; \/\/\u8fd4\u56de\u7684\u6761\u76ee\u6570
\nprivate $coding; \/\/\u6570\u636e\u5e93\u7f16\u7801\uff0cGBK,UTF8,gb2312
\nprivate $bulletin = true; \/\/\u662f\u5426\u5f00\u542f\u9519\u8bef\u8bb0\u5f55
\nprivate $show_error = false; \/\/\u6d4b\u8bd5\u9636\u6bb5\uff0c\u663e\u793a\u6240\u6709\u9519\u8bef,\u5177\u6709\u5b89\u5168\u9690\u60a3,\u9ed8\u8ba4\u5173\u95ed
\nprivate $is_error = false; \/\/\u53d1\u73b0\u9519\u8bef\u662f\u5426\u7acb\u5373\u7ec8\u6b62,\u9ed8\u8ba4true,\u5efa\u8bae\u4e0d\u542f\u7528\uff0c\u56e0\u4e3a\u5f53\u6709\u95ee\u9898\u65f6\u7528\u6237\u4ec0\u4e48\u4e5f\u770b\u4e0d\u5230\u662f\u5f88\u82e6\u607c\u7684<\/p>\n
\/*\u6784\u9020\u51fd\u6570*\/
\npublic function __construct($db_host, $db_user, $db_pwd, $db_database, $conn, $coding) {
\n$this->db_host = $db_host;
\n$this->db_user = $db_user;
\n$this->db_pwd = $db_pwd;
\n$this->db_database = $db_database;
\n$this->conn = $conn;
\n$this->coding = $coding;
\n$this->connect();
\n}<\/p>\n
\/*\u6570\u636e\u5e93\u8fde\u63a5*\/
\npublic function connect() {
\nif ($this->conn == “pconn”) {
\n\/\/\u6c38\u4e45\u94fe\u63a5
\n$this->conn = mysql_pconnect($this->db_host, $this->db_user, $this->db_pwd);
\n} else {
\n\/\/\u5373\u4f7f\u94fe\u63a5
\n$this->conn = mysql_connect($this->db_host, $this->db_user, $this->db_pwd);
\n}<\/p>\n
if (!mysql_select_db($this->db_database, $this->conn)) {
\nif ($this->show_error) {
\n$this->show_error(“\u6570\u636e\u5e93\u4e0d\u53ef\u7528\uff1a”, $this->db_database);
\n}
\n}
\nmysql_query(“SET NAMES $this->coding”);
\n}<\/p>\n
\/*\u6570\u636e\u5e93\u6267\u884c\u8bed\u53e5\uff0c\u53ef\u6267\u884c\u67e5\u8be2\u6dfb\u52a0\u4fee\u6539\u5220\u9664\u7b49\u4efb\u4f55sql\u8bed\u53e5*\/
\npublic function query($sql) {
\nif ($sql == “”) {
\n$this->show_error(“SQL\u8bed\u53e5\u9519\u8bef\uff1a”, “SQL\u67e5\u8be2\u8bed\u53e5\u4e3a\u7a7a”);
\n}
\n$this->sql = $sql;<\/p>\n
$result = mysql_query($this->sql, $this->conn);<\/p>\n
if (!$result) {
\n\/\/\u8c03\u8bd5\u4e2d\u4f7f\u7528\uff0csql\u8bed\u53e5\u51fa\u9519\u65f6\u4f1a\u81ea\u52a8\u6253\u5370\u51fa\u6765
\nif ($this->show_error) {
\n$this->show_error(“\u9519\u8befSQL\u8bed\u53e5\uff1a”, $this->sql);
\n}
\n} else {
\n$this->result = $result;
\n}
\nreturn $this->result;
\n}<\/p>\n
\/*\u521b\u5efa\u6dfb\u52a0\u65b0\u7684\u6570\u636e\u5e93*\/
\npublic function create_database($database_name) {
\n$database = $database_name;
\n$sqlDatabase = ‘create database ‘ . $database;
\n$this->query($sqlDatabase);
\n}<\/p>\n
\/*\u67e5\u8be2\u670d\u52a1\u5668\u6240\u6709\u6570\u636e\u5e93*\/
\n\/\/\u5c06\u7cfb\u7edf\u6570\u636e\u5e93\u4e0e\u7528\u6237\u6570\u636e\u5e93\u5206\u5f00\uff0c\u66f4\u76f4\u89c2\u7684\u663e\u793a\uff1f
\npublic function show_databases() {
\n$this->query(“show databases”);
\necho “\u73b0\u6709\u6570\u636e\u5e93\uff1a” . $amount = $this->db_num_rows($rs);
\necho “<br \/>”;
\n$i = 1;
\nwhile ($row = $this->fetch_array($rs)) {
\necho “$i $row[Database]”;
\necho “<br \/>”;
\n$i++;
\n}
\n}<\/p>\n
\/\/\u4ee5\u6570\u7ec4\u5f62\u5f0f\u8fd4\u56de\u4e3b\u673a\u4e2d\u6240\u6709\u6570\u636e\u5e93\u540d
\npublic function databases() {
\n$rsPtr = mysql_list_dbs($this->conn);
\n$i = 0;
\n$cnt = mysql_num_rows($rsPtr);
\nwhile ($i < $cnt) {
\n$rs[] = mysql_db_name($rsPtr, $i);
\n$i++;
\n}
\nreturn $rs;
\n}<\/p>\n
\/*\u67e5\u8be2\u6570\u636e\u5e93\u4e0b\u6240\u6709\u7684\u8868*\/
\npublic function show_tables($database_name) {
\n$this->query(“show tables”);
\necho “\u73b0\u6709\u6570\u636e\u5e93\uff1a” . $amount = $this->db_num_rows($rs);
\necho “<br \/>”;
\n$i = 1;
\nwhile ($row = $this->fetch_array($rs)) {
\n$columnName = “Tables_in_” . $database_name;
\necho “$i $row[$columnName]”;
\necho “<br \/>”;
\n$i++;
\n}
\n}<\/p>\n
\/*
\nmysql_fetch_row() array $row[0],$row[1],$row[2]
\nmysql_fetch_array() array $row[0] \u6216 $row[id]
\nmysql_fetch_assoc() array \u7528$row->content \u5b57\u6bb5\u5927\u5c0f\u5199\u654f\u611f
\nmysql_fetch_object() object \u7528$row[id],$row[content] \u5b57\u6bb5\u5927\u5c0f\u5199\u654f\u611f
\n*\/<\/p>\n
\/*\u53d6\u5f97\u7ed3\u679c\u6570\u636e*\/
\npublic function mysql_result_li() {
\nreturn mysql_result($str);
\n}<\/p>\n
\/*\u53d6\u5f97\u8bb0\u5f55\u96c6,\u83b7\u53d6\u6570\u7ec4-\u7d22\u5f15\u548c\u5173\u8054,\u4f7f\u7528$row[‘content’] *\/
\npublic function fetch_array($resultt=””) {
\nif($resultt<>””){
\nreturn mysql_fetch_array($resultt);
\n}else{
\nreturn mysql_fetch_array($this->result);
\n}
\n}<\/p>\n
\/\/\u83b7\u53d6\u5173\u8054\u6570\u7ec4,\u4f7f\u7528$row[‘\u5b57\u6bb5\u540d’]
\npublic function fetch_assoc() {
\nreturn mysql_fetch_assoc($this->result);
\n}<\/p>\n
\/\/\u83b7\u53d6\u6570\u5b57\u7d22\u5f15\u6570\u7ec4,\u4f7f\u7528$row[0],$row[1],$row[2]
\npublic function fetch_row() {
\nreturn mysql_fetch_row($this->result);
\n}<\/p>\n
\/\/\u83b7\u53d6\u5bf9\u8c61\u6570\u7ec4,\u4f7f\u7528$row->content
\npublic function fetch_Object() {
\nreturn mysql_fetch_object($this->result);
\n}<\/p>\n
\/\/\u7b80\u5316\u67e5\u8be2select
\npublic function findall($table) {
\n$this->query(“SELECT * FROM $table”);
\n}<\/p>\n
\/\/\u7b80\u5316\u67e5\u8be2select
\npublic function select($table, $columnName = “*”, $condition = ”, $debug = ”) {
\n$condition = $condition ? ‘ Where ‘ . $condition : NULL;
\nif ($debug) {
\necho “SELECT $columnName FROM $table $condition”;
\n} else {
\n$this->query(“SELECT $columnName FROM $table $condition”);
\n}
\n}<\/p>\n
\/\/\u7b80\u5316\u5220\u9664del
\npublic function delete($table, $condition, $url = ”) {
\nif ($this->query(“DELETE FROM $table WHERE $condition”)) {
\nif (!empty ($url))
\n$this->Get_admin_msg($url, ‘\u5220\u9664\u6210\u529f\uff01’);
\n}
\n}<\/p>\n
\/\/\u7b80\u5316\u63d2\u5165insert
\npublic function insert($table, $columnName, $value, $url = ”) {
\nif ($this->query(“INSERT INTO $table ($columnName) VALUES ($value)”)) {
\nif (!empty ($url))
\n$this->Get_admin_msg($url, ‘\u6dfb\u52a0\u6210\u529f\uff01’);
\n}
\n}<\/p>\n
\/\/\u7b80\u5316\u4fee\u6539update
\npublic function update($table, $mod_content, $condition, $url = ”) {
\n\/\/echo “UPDATE $table SET $mod_content WHERE $condition”; exit();
\nif ($this->query(“UPDATE $table SET $mod_content WHERE $condition”)) {
\nif (!empty ($url))
\n$this->Get_admin_msg($url);
\n}
\n}<\/p>\n
\/*\u53d6\u5f97\u4e0a\u4e00\u6b65 INSERT \u64cd\u4f5c\u4ea7\u751f\u7684 ID*\/
\npublic function insert_id() {
\nreturn mysql_insert_id();
\n}<\/p>\n
\/\/\u6307\u5411\u786e\u5b9a\u7684\u4e00\u6761\u6570\u636e\u8bb0\u5f55
\npublic function db_data_seek($id) {
\nif ($id > 0) {
\n$id = $id -1;
\n}
\nif (!@ mysql_data_seek($this->result, $id)) {
\n$this->show_error(“SQL\u8bed\u53e5\u6709\u8bef\uff1a”, “\u6307\u5b9a\u7684\u6570\u636e\u4e3a\u7a7a”);
\n}
\nreturn $this->result;
\n}<\/p>\n
\/\/ \u6839\u636eselect\u67e5\u8be2\u7ed3\u679c\u8ba1\u7b97\u7ed3\u679c\u96c6\u6761\u6570
\npublic function db_num_rows() {
\nif ($this->result == null) {
\nif ($this->show_error) {
\n$this->show_error(“SQL\u8bed\u53e5\u9519\u8bef”, “\u6682\u65f6\u4e3a\u7a7a\uff0c\u6ca1\u6709\u4efb\u4f55\u5185\u5bb9\uff01”);
\n}
\n} else {
\nreturn mysql_num_rows($this->result);
\n}
\n}<\/p>\n
\/\/ \u6839\u636einsert,update,delete\u6267\u884c\u7ed3\u679c\u53d6\u5f97\u5f71\u54cd\u884c\u6570
\npublic function db_affected_rows() {
\nreturn mysql_affected_rows();
\n}<\/p>\n
\/\/\u8f93\u51fa\u663e\u793asql\u8bed\u53e5
\npublic function show_error($message = “”, $sql = “”) {
\nif (!$sql) {
\necho “<font color=’red’>” . $message . “<\/font>”;
\necho “<br \/>”;
\n} else {
\necho “<fieldset>”;
\necho “<legend>\u9519\u8bef\u4fe1\u606f\u63d0\u793a:<\/legend><br \/>”;
\necho “<div style=’font-size:14px; clear:both; font-family:Verdana, Arial, Helvetica, sans-serif;’>”;
\necho “<div style=’height:20px; background:#000000; border:1px #000000 solid’>”;
\necho “<font color=’white’>\u9519\u8bef\u53f7\uff1a12142<\/font>”;
\necho “<\/div><br \/>”;
\necho “\u9519\u8bef\u539f\u56e0\uff1a” . mysql_error() . “<br \/><br \/>”;
\necho “<div style=’height:20px; background:#FF0000; border:1px #FF0000 solid’>”;
\necho “<font color=’white’>” . $message . “<\/font>”;
\necho “<\/div>”;
\necho “<font color=’red’><pre>” . $sql . “<\/pre><\/font>”;
\n$ip = $this->getip();
\nif ($this->bulletin) {
\n$time = date(“Y-m-d H:i:s”);
\n$message = $message . “\\r\\n$this->sql” . “\\r\\n\u5ba2\u6237IP:$ip” . “\\r\\n\u65f6\u95f4 :$time” . “\\r\\n\\r\\n”;<\/p>\n
$server_date = date(“Y-m-d”);
\n$filename = $server_date . “.txt”;
\n$file_path = “error\/” . $filename;
\n$error_content = $message;
\n\/\/$error_content=”\u9519\u8bef\u7684\u6570\u636e\u5e93\uff0c\u4e0d\u53ef\u4ee5\u94fe\u63a5”;
\n$file = “error”; \/\/\u8bbe\u7f6e\u6587\u4ef6\u4fdd\u5b58\u76ee\u5f55<\/p>\n
\/\/\u5efa\u7acb\u6587\u4ef6\u5939
\nif (!file_exists($file)) {
\nif (!mkdir($file, 0777)) {
\n\/\/\u9ed8\u8ba4\u7684 mode \u662f 0777\uff0c\u610f\u5473\u7740\u6700\u5927\u53ef\u80fd\u7684\u8bbf\u95ee\u6743
\ndie(“upload files directory does not exist and creation failed”);
\n}
\n}<\/p>\n
\/\/\u5efa\u7acbtxt\u65e5\u671f\u6587\u4ef6
\nif (!file_exists($file_path)) {<\/p>\n
\/\/echo “\u5efa\u7acb\u65e5\u671f\u6587\u4ef6”;
\nfopen($file_path, “w+”);<\/p>\n
\/\/\u9996\u5148\u8981\u786e\u5b9a\u6587\u4ef6\u5b58\u5728\u5e76\u4e14\u53ef\u5199
\nif (is_writable($file_path)) {
\n\/\/\u4f7f\u7528\u6dfb\u52a0\u6a21\u5f0f\u6253\u5f00$filename\uff0c\u6587\u4ef6\u6307\u9488\u5c06\u4f1a\u5728\u6587\u4ef6\u7684\u5f00\u5934
\nif (!$handle = fopen($file_path, ‘a’)) {
\necho “\u4e0d\u80fd\u6253\u5f00\u6587\u4ef6 $filename”;
\nexit;
\n}<\/p>\n
\/\/\u5c06$somecontent\u5199\u5165\u5230\u6211\u4eec\u6253\u5f00\u7684\u6587\u4ef6\u4e2d\u3002
\nif (!fwrite($handle, $error_content)) {
\necho “\u4e0d\u80fd\u5199\u5165\u5230\u6587\u4ef6 $filename”;
\nexit;
\n}<\/p>\n
\/\/echo “\u6587\u4ef6 $filename \u5199\u5165\u6210\u529f”;<\/p>\n
echo “\u2014\u2014\u9519\u8bef\u8bb0\u5f55\u88ab\u4fdd\u5b58!”;<\/p>\n
\/\/\u5173\u95ed\u6587\u4ef6
\nfclose($handle);
\n} else {
\necho “\u6587\u4ef6 $filename \u4e0d\u53ef\u5199”;
\n}<\/p>\n
} else {
\n\/\/\u9996\u5148\u8981\u786e\u5b9a\u6587\u4ef6\u5b58\u5728\u5e76\u4e14\u53ef\u5199
\nif (is_writable($file_path)) {
\n\/\/\u4f7f\u7528\u6dfb\u52a0\u6a21\u5f0f\u6253\u5f00$filename\uff0c\u6587\u4ef6\u6307\u9488\u5c06\u4f1a\u5728\u6587\u4ef6\u7684\u5f00\u5934
\nif (!$handle = fopen($file_path, ‘a’)) {
\necho “\u4e0d\u80fd\u6253\u5f00\u6587\u4ef6 $filename”;
\nexit;
\n}<\/p>\n
\/\/\u5c06$somecontent\u5199\u5165\u5230\u6211\u4eec\u6253\u5f00\u7684\u6587\u4ef6\u4e2d\u3002
\nif (!fwrite($handle, $error_content)) {
\necho “\u4e0d\u80fd\u5199\u5165\u5230\u6587\u4ef6 $filename”;
\nexit;
\n}<\/p>\n
\/\/echo “\u6587\u4ef6 $filename \u5199\u5165\u6210\u529f”;
\necho “\u2014\u2014\u9519\u8bef\u8bb0\u5f55\u88ab\u4fdd\u5b58!”;<\/p>\n
\/\/\u5173\u95ed\u6587\u4ef6
\nfclose($handle);
\n} else {
\necho “\u6587\u4ef6 $filename \u4e0d\u53ef\u5199”;
\n}
\n}<\/p>\n
}
\necho “<br \/>”;
\nif ($this->is_error) {
\nexit;
\n}
\n}
\necho “<\/div>”;
\necho “<\/fieldset>”;<\/p>\n
echo “<br \/>”;
\n}<\/p>\n
\/\/\u91ca\u653e\u7ed3\u679c\u96c6
\npublic function free() {
\n@ mysql_free_result($this->result);
\n}<\/p>\n
\/\/\u6570\u636e\u5e93\u9009\u62e9
\npublic function select_db($db_database) {
\nreturn mysql_select_db($db_database);
\n}<\/p>\n
\/\/\u67e5\u8be2\u5b57\u6bb5\u6570\u91cf
\npublic function num_fields($table_name) {
\n\/\/return mysql_num_fields($this->result);
\n$this->query(“select * from $table_name”);
\necho “<br \/>”;
\necho “\u5b57\u6bb5\u6570\uff1a” . $total = mysql_num_fields($this->result);
\necho “<pre>”;
\nfor ($i = 0; $i < $total; $i++) {
\nprint_r(mysql_fetch_field($this->result, $i));
\n}
\necho “<\/pre>”;
\necho “<br \/>”;
\n}<\/p>\n
\/\/\u53d6\u5f97 MySQL \u670d\u52a1\u5668\u4fe1\u606f
\npublic function mysql_server($num = ”) {
\nswitch ($num) {
\ncase 1 :
\nreturn mysql_get_server_info(); \/\/MySQL \u670d\u52a1\u5668\u4fe1\u606f
\nbreak;<\/p>\n
case 2 :
\nreturn mysql_get_host_info(); \/\/\u53d6\u5f97 MySQL \u4e3b\u673a\u4fe1\u606f
\nbreak;<\/p>\n
case 3 :
\nreturn mysql_get_client_info(); \/\/\u53d6\u5f97 MySQL \u5ba2\u6237\u7aef\u4fe1\u606f
\nbreak;<\/p>\n
case 4 :
\nreturn mysql_get_proto_info(); \/\/\u53d6\u5f97 MySQL \u534f\u8bae\u4fe1\u606f
\nbreak;<\/p>\n
default :
\nreturn mysql_get_client_info(); \/\/\u9ed8\u8ba4\u53d6\u5f97mysql\u7248\u672c\u4fe1\u606f
\n}
\n}<\/p>\n
\/\/\u6790\u6784\u51fd\u6570\uff0c\u81ea\u52a8\u5173\u95ed\u6570\u636e\u5e93,\u5783\u573e\u56de\u6536\u673a\u5236
\npublic function __destruct() {
\nif (!empty ($this->result)) {
\n$this->free();
\n}
\nmysql_close($this->conn);
\n} \/\/function __destruct();<\/p>\n
\/*\u83b7\u5f97\u5ba2\u6237\u7aef\u771f\u5b9e\u7684IP\u5730\u5740*\/
\nfunction getip() {
\nif (getenv(“HTTP_CLIENT_IP”) && strcasecmp(getenv(“HTTP_CLIENT_IP”), “unknown”)) {
\n$ip = getenv(“HTTP_CLIENT_IP”);
\n} else
\nif (getenv(“HTTP_X_FORWARDED_FOR”) && strcasecmp(getenv(“HTTP_X_FORWARDED_FOR”), “unknown”)) {
\n$ip = getenv(“HTTP_X_FORWARDED_FOR”);
\n} else
\nif (getenv(“REMOTE_ADDR”) && strcasecmp(getenv(“REMOTE_ADDR”), “unknown”)) {
\n$ip = getenv(“REMOTE_ADDR”);
\n} else
\nif (isset ($_SERVER[‘REMOTE_ADDR’]) && $_SERVER[‘REMOTE_ADDR’] && strcasecmp($_SERVER[‘REMOTE_ADDR’], “unknown”)) {
\n$ip = $_SERVER[‘REMOTE_ADDR’];
\n} else {
\n$ip = “unknown”;
\n}
\nreturn ($ip);
\n}
\nfunction inject_check($sql_str) { \/\/\u9632\u6b62\u6ce8\u5165
\n$check = eregi(‘select|insert|update|delete|\\’|\\\/\\*|\\*|\\.\\.\\\/|\\.\\\/|union|into|load_file|outfile’, $sql_str);
\nif ($check) {
\necho “\u8f93\u5165\u975e\u6cd5\u6ce8\u5165\u5185\u5bb9\uff01”;
\nexit ();
\n} else {
\nreturn $sql_str;
\n}
\n}
\nfunction checkurl() { \/\/\u68c0\u67e5\u6765\u8def
\nif (preg_replace(“\/https?:\\\/\\\/([^\\:\\\/]+).*\/i”, “\\\\1”, $_SERVER[‘HTTP_REFERER’]) !== preg_replace(“\/([^\\:]+).*\/”, “\\\\1”, $_SERVER[‘HTTP_HOST’])) {
\nheader(“Location: http:\/\/www.dareng.com”);
\nexit();
\n}
\n}<\/p>\n
}
\n?><\/p>\n
<\/p>\n
<\/p>\n
<\/p>\n
<\/p>\n
<\/p>\n","protected":false},"excerpt":{"rendered":"