风格修改 - 爱秀代码

免費論壇

繁體 | 簡體

Sclub交友聊天~加入聊天室當版主

(檢舉)

分享

游客

爱秀代码

游客仅可浏览部分版块
请登录解锁全部权限

注册

首页
/
风格修改

风格修改 1 主题 · 13 帖子

全部精华最新热门最多阅读

2018-8-30

置顶精华点评插件
效果：===》本论坛在用本插件修改于章鱼的楼中楼插件，在此感谢！ 1、升级数据库 CREATE TABLE `zy_postinner` ( `uid` INT( 8 ) NOT NULL , `name` CHAR( 15 ) CHARACTER SET utf8 COLLATE utf8_general_ci NOT NULL , `pid` INT( 15 ) NOT NULL , `ptid` INT( 15 ) NOT NULL , `msg` TEXT CHARACTER SET utf8 COLLATE utf8_general_ci NOT NULL , `time` INT( 10 ) NOT NULL ) ENGINE = MYISAM ; ALTER TABLE `cdb_posts` ADD `zy_postinner` INT( 5 ) NOT NULL ; 2、新建一个模版命名为aa_zyhome_postinner内容如下 {eval $zyhome=$_GET['zyhome'];}  {eval $zyshowpd=0;} {eval require_once './include/discuzcode.func.php';} {eval $zyact=$_GET['zyact'];}   {eval $q2 = $db->query("SELECT p.zy_postinner,p.authorid,t.subject,p.tid,p.fid FROM cdb_posts p LEFT JOIN cdb_threads t ON t.tid=p.tid WHERE p.pid = " . $_GET );} {eval $asdfgh = $db->fetch_array($q2);} {eval $q2=$db->fetch_array($db->query("SELECT * FROM zy_postinner WHERE pid=".$_GET ." and ptid=".$_GET ));}   {eval $q2=$db->query("UPDATE cdb_posts SET zy_postinner = " . ($asdfgh -1) . " WHERE pid = " . $_GET );}  {eval $q2=$db->query("DELETE FROM zy_postinner WHERE pid=".$_GET ." and ptid=".$_GET );}  {eval $zyact="get";}    {eval $msg=$_POST["msg"];} {eval $msgt = str_replace(Chr(10), "", $msg);} {eval $msgt = str_replace(" ", "", $msgt);}  不能只含有空格或回车 <div class="zypi_postbox_btn"><a href="javascript:void 0" onclick="zypi_togglebox(this)" id="gtrf_$pid" style="display:none;">我也说一句</a></div> {eval die;}  {eval $msg=str_replace(Chr(10), " ", $msg);}  你还没登录 {eval die;}  {eval $pid=$_POST["pid"];} {eval $toptid=$_POST["ptid"];} {eval $q2 = $db->query("SELECT ptid FROM zy_postinner ORDER BY ptid DESC LIMIT 1");} {eval $ptid = $db->fetch_array($q2);} {eval $q2 = $db->query("SELECT p.zy_postinner,p.authorid,t.subject,p.tid,p.fid FROM cdb_posts p LEFT JOIN cdb_threads t ON t.tid=p.tid WHERE p.pid = " . $pid);} {eval $asdfgh = $db->fetch_array($q2);}  {eval $q2=$db->query("SELECT uid,name FROM zy_postinner WHERE ptid = " . $toptid);} {eval $c=$db->fetch_array($q2);}  {eval $q2=$db->query("SELECT id FROM cdb_promptmsgs ORDER BY id DESC LIMIT 1");} {eval $a=$db->fetch_array($q2);} {eval $q2=$db->query("INSERT INTO cdb_promptmsgs VALUES(" . ($a +1) . ",6," . $c . ",0,1," . $GLOBALS . ",'<div class=\"f_thread\"><a href=\"space.php?uid=" . $discuz_uid . "\">" . $discuz_userss . "</a>回复了您在主题<a href=\"redirect.php?goto=findpost&ptid=" . $asdfgh . "&pid=" . $pid . "\">" . $asdfgh . "</a>中的点评</div>',0)");} {eval $q2=$db->query("SELECT number FROM cdb_prompt WHERE uid = " . $c . " AND typeid = 6");} {eval $a=$db->fetch_array($q2);}  {eval $q2=$db->query("UPDATE cdb_prompt SET number=" . ($a +1) . " WHERE uid = " . $c . " AND typeid = 6");}  {eval $q2=$db->query("INSERT INTO cdb_prompt VALUES(" . $c . ",6,1)");}  {eval $msg="回复 " . $c . " :" . $msg;}   {eval $q2 = $db->query("INSERT INTO zy_postinner VALUES('$discuz_uid','$discuz_userss','$pid','" . ($ptid +1) . "','$msg'," . $GLOBALS . ")");} {eval $q2=$db->query("UPDATE cdb_posts SET zy_postinner = " . ($asdfgh +1) . " WHERE pid = " . $pid);} {eval $q2=$db->query("UPDATE cdb_threads SET lastpost = " . $GLOBALS . " , lastposter = '" . $discuz_userss . "' WHERE tid = " . $asdfgh );} {eval $q2=$db->query("SELECT todayposts FROM cdb_forums WHERE fid=" . $asdfgh );} {eval $b=$db->fetch_array($q2);} {eval $q2=$db->query("UPDATE cdb_forums SET todayposts = " . $b . ",lastpost='" . $asdfgh . "\t" . $asdfgh . "\t" . $GLOBALS . "\t" . $discuz_userss . "' WHERE fid=" . $asdfgh );}  {eval $q2=$db->query("SELECT id,new FROM cdb_promptmsgs WHERE uid=" . $asdfgh . " AND typeid = 6 AND actor = '" . $pid . "\tpostinner'");} {eval $a=$db->fetch_array($q2);} {eval $newnotice=0;}  {eval $q2=$db->query("UPDATE cdb_promptmsgs SET dateline = " . $GLOBALS . ",new = 1 WHERE uid=" . $asdfgh . " AND typeid = 6 AND actor = '" . $pid . "\tpostinner'");}  {eval $newnotice=1;}   {eval $q2=$db->query("SELECT id FROM cdb_promptmsgs ORDER BY id DESC LIMIT 1");} {eval $a=$db->fetch_array($q2);} {eval $q2=$db->query("INSERT INTO cdb_promptmsgs VALUES(" . ($a +1) . ",6," . $asdfgh . ",0,1," . $GLOBALS . ",'<div class=\"f_thread\">您在主题<a href=\"redirect.php?goto=findpost&ptid=" . $asdfgh . "&pid=" . $pid . "\">" . $asdfgh . "</a>中的点评有了新回复</div>','" . $pid . "\tpostinner')");} {eval $newnotice=1;}   {eval $q2=$db->query("SELECT number FROM cdb_prompt WHERE uid = " . $asdfgh . " AND typeid = 6");} {eval $a=$db->fetch_array($q2);}  {eval $q2=$db->query("UPDATE cdb_prompt SET number=" . ($a +1) . " WHERE uid = " . $asdfgh . " AND typeid = 6");}  {eval $q2=$db->query("INSERT INTO cdb_prompt VALUES(" . $asdfgh . ",6,1)");}    {eval $zyact="get";}   {eval $pid=$_GET["pid"];} {eval $page=$_GET["page"];} {eval $upper=5*$page-5;} {eval $q2=$db->query("SELECT * FROM zy_postinner WHERE pid = $pid ORDER BY ptid DESC LIMIT $upper,5");} {eval $zyhomeshow=Array();} {eval $i=0;} {eval while ($asdfgh=$db->fetch_array($q2)) $zyhomeshow[$i++] = $asdfgh ; } {eval $q2 = $db->query("SELECT zy_postinner FROM cdb_posts WHERE pid = " . $pid);} {eval $asdfgh = $db->fetch_array($q2);}  <h3><span class="icon_ring vm"></span>点评</h3>  {eval $maxpage=ceil($asdfgh /5);}  <div id="zypostinner_" class="zypi_in" onmouseover="zypi_showover(this)" onmouseout="zypi_showout(this)" style="clear: left; padding: 0.5em 0;"> <div class="zypi_in1"><img src="uc_server/avatar.php?uid=&size=small" /></div> <div class="zypi_in2"> <p class="zypi_in2_in1"> <span style="float: left;"> <a href="space.php?uid="></a>    </span> <div style="margin-left: 100px;"> <em class="zypi_in2_in2"></em>    <span style="color: #999;">{eval $postime=dgmdate("$dateformat $timeformat", $thing + $timeoffset * 3600);}发表于  {eval $lastip = $db->fetch_array($db->query("SELECT * FROM cdb_members WHERE uid=".$thing ));}IP:$lastip </span>  <a onclick="zypi_delete($thing ,$pid);" style="cursor: pointer;color:#999;">删除</a>  </div> </p> </div> <div class="zypi_in3"></div> <div class="zypi_in4"><button class="hfta" onclick="zypi_reply(this)">回复</button></div> </div>  <div class="zypi_btmbar"> <div class="zypi_pages pages">   <a href="javascript:void 0" onclick="zypi_gotopage(this,1)">首页</a> <a href="javascript:void 0" onclick="zypi_gotopage(this,)">上一页</a>  {eval $i=0;} {eval while ($i<$maxpage) echo("<a href='javascript:void 0' " . (++$i==$page?"":"onclick='zypi_gotopage(this," . $i . ")'") . ">" . ($i==$page?"<b>" . $i . "</b>":$i) . "</a>") ; }  <a href="javascript:void 0" onclick="zypi_gotopage(this,)">下一页</a> <a href="javascript:void 0" onclick="zypi_gotopage(this,)">尾页</a>   </div> <div class="zypi_postbox_btn"><a href="javascript:void 0" onclick="zypi_togglebox(this)" id="gtrf_$pid" style="display:none;">我也说一句</a></div> </div> {eval die;}  {eval die;} {echo $GLOBALS ;}  3、再建立一个模版命名为postinner内容如下 var zhangyupostinner = ["#header", "<div id='zyco'></div>", ".zypi_postbox", "display", "none", "textarea", "class", "zypi_postbox_btn_hover", "class", "zypi_postbox_btn", "button", "click", "textarea", ".zypi_postbox", "display", "none", ".zypi_postbox_btn", "class", "zypi_postbox_btn_hover", "textarea", "button", "click", "textarea", "id", "zypostinner_", "", ".zypi_in2 .zypi_in2_in1 span a", "span:eq(0)", "回复: ", "span.zypi_ptid_hide", "a", "span", "", "", "不能发送空信息!", "id", "zypi_", "", "button,textarea", "disabled", ".zypi_ptid_hide", ".zypi_pages a b", "POST", "faq.php?zyhome=postinner&zyact=post&pid=", "&page=", ".zypi_show", ".zypi_postbox_btn", "class", "zypi_postbox_btn_hover", "button,textarea", "disabled", "", "span", "", "a", "button,textarea", "disabled", "网络错误!", "id", "zypi_", "", "faq.php?zyhome=postinner&zyact=get&pid=", "&page=", "disabled", "true", "网络错误!", ".zypi_in4", ".zypi_in4"]; $jq(document).ready(function() { $jq(zhangyupostinner[0]).after(zhangyupostinner[1]) }); function zypi_togglebox(obj) { var obj = $jq(obj); var pbox = obj.parent().parent().parent().parent().find(zhangyupostinner[2]); if (pbox.css(zhangyupostinner[3]) == zhangyupostinner[4]) { pbox.show().find(zhangyupostinner[5]).focus(); obj.parent().attr(zhangyupostinner[6], zhangyupostinner[7]) } else { pbox.hide(); obj.parent().attr(zhangyupostinner[8], zhangyupostinner[9]) }; pbox.find(zhangyupostinner[10]).unbind(zhangyupostinner[11]).click(function() { zypi_post($jq(this).parent().parent().find(zhangyupostinner[12])) }) }; function zypi_reply(obj) { obj = $jq(obj); var pbox = obj.parent().parent().parent().parent().find(zhangyupostinner[13]); if (pbox.css(zhangyupostinner[14]) == zhangyupostinner[15]) { pbox.show(); obj.parent().parent().parent().parent().find(zhangyupostinner[16]).attr(zhangyupostinner[17], zhangyupostinner[18]) }; pbox.find(zhangyupostinner[19]).focus(); pbox.find(zhangyupostinner[20]).unbind(zhangyupostinner[21]).click(function() { zypi_post($jq(this).parent().parent().find(zhangyupostinner[22])) }); var ptid = obj.parent().parent().attr(zhangyupostinner[23]).replace(zhangyupostinner[24], zhangyupostinner[25]); var pauthor = obj.parent().parent().find(zhangyupostinner[26]).html(); pbox.find(zhangyupostinner[27]).html(zhangyupostinner[28] + pauthor); pbox.find(zhangyupostinner[29]).html(ptid); pbox.find(zhangyupostinner[30]).show() }; function zypi_unreply(obj) { obj = $jq(obj).hide().parent().parent(); obj.find(zhangyupostinner[31]).html(zhangyupostinner[32]) }; function zypi_post(txtobj) { var txtobj = $jq(txtobj); if (txtobj.val() == zhangyupostinner[33]) { showDialog(zhangyupostinner[34]); return }; var txtpid = txtobj.parent().parent().parent().attr(zhangyupostinner[35]).replace(zhangyupostinner[36], zhangyupostinner[37]); $jq(txtobj).parent().parent().find(zhangyupostinner[38]).attr(zhangyupostinner[39], true); var ptid = txtobj.parent().parent().find(zhangyupostinner[40]).html(); var pgb = $jq(txtobj).parent().parent().parent().find(zhangyupostinner[41]); if (pgb.length > 0x0) { pgb = pgb.html() } else { pgb = 0x1 }; $jq.ajax({ type: zhangyupostinner[42], url: zhangyupostinner[43] + txtpid + zhangyupostinner[44] + pgb, data: { pid: txtpid, msg: txtobj.val(), ptid: ptid }, success: function(msg) { $jq(txtobj).parent().parent().parent().find(zhangyupostinner[45]).html(msg).find(zhangyupostinner[46]).attr(zhangyupostinner[47], zhangyupostinner[48]); $jq(txtobj).parent().parent().find(zhangyupostinner[49]).attr(zhangyupostinner[50], false); $jq(txtobj).val(zhangyupostinner[51]); $jq(".zypi_postbox.dialog").hide(); txtobj.parent().parent().find(zhangyupostinner[52]).html(zhangyupostinner[53]); txtobj.parent().parent().find(zhangyupostinner[54]).hide() }, error: function() { $jq(txtobj).parent().parent().find(zhangyupostinner[55]).attr(zhangyupostinner[56], false); showDialog(zhangyupostinner[57]) } }) }; function zypi_showall(obj) { zypi_gotopage(obj, 2) }; function zypi_gotopage(obj, page) { obj = $jq(obj); var pid = obj.parent().parent().parent().parent().attr(zhangyupostinner[58]).replace(zhangyupostinner[59], zhangyupostinner[60]); $jq.ajax({ url: zhangyupostinner[61] + pid + zhangyupostinner[62] + page, success: function(msg) { obj.parent().parent().parent().html(msg) }, error: function() { obj.attr(zhangyupostinner[63], zhangyupostinner[64]); showDialog(zhangyupostinner[65]) } }) }; function zypi_showover(obj) { $jq(obj).find(zhangyupostinner[66]).show() }; function zypi_showout(obj) { $jq(obj).find(zhangyupostinner[67]).hide() } function zypi_delete(ptid,pid) { $jq.ajax({ url:"faq.php?zyhome=postinner&zyact=delete&ptid="+ptid+"&pid="+pid+"&page=1", success: function(msg) { $jq("#zypi_"+pid+" .zypi_show").html(msg) }, error: function() { showDialog("删除失败") } }) }; 4、再建立一个模版命名为dp_move内容如下 var Dragging=function(validateHandler){ //参数为验证点击区域是否为可移动区域，如果是返回欲移动元素，负责返回null var draggingObj=null; //dragging Dialog var diffX=0; var diffY=0; function mouseHandler(e){ switch(e.type){ case 'mousedown': draggingObj=validateHandler(e);//验证是否为可点击移动区域 if(draggingObj!=null){ diffX=e.clientX-draggingObj.offsetLeft; diffY=e.clientY-draggingObj.offsetTop; } break; case 'mousemove': if(draggingObj){ draggingObj.style.left=(e.clientX-diffX)+'px'; draggingObj.style.top=(e.clientY-diffY)+'px'; } break; case 'mouseup': draggingObj =null; diffX=0; diffY=0; break; } }; return { enable:function(){ document.addEventListener('mousedown',mouseHandler); document.addEventListener('mousemove',mouseHandler); document.addEventListener('mouseup',mouseHandler); }, disable:function(){ document.removeEventListener('mousedown',mouseHandler); document.removeEventListener('mousemove',mouseHandler); document.removeEventListener('mouseup',mouseHandler); } } ｝ function getDraggingDialog(e){ var target=e.target; while(target && target.className.indexOf('dialog-title')==-1){ target=target.offsetParent; } if(target!=null){ return target.offsetParent; }else{ return null; } } Dragging(getDraggingDialog).enable(); 5、在css_common模版最下边加代码 /*~~~~~~~~~~~~~~~~~~~~点评~~~~~~~~~~~~~~~~~~~~~~~~~*/ .zypi .zypi_in { position: relative } .icon_ring:hover { border: 2px solid #e1f4dd; background: #f26c4f } .icon_ring { display: inline-block; overflow: hidden; margin-right: 5px; width: 8px; height: 8px; border: 2px solid #f26c4f; -webkit-border-radius: 10px; -moz-border-radius: 10px; border-radius: 10px; border-image: none; background: #fff4dd; box-shadow: 0 0 1px rgba(0,0,0,0.2) } .vm { vertical-align: middle } .bar_cm { height: 25px; background: #f2f2f2; line-height: 25px } .nxt { float: left; display: inline; padding: 0 20px 0 8px; height: 26px; border: 1px solid; border-color: #c2d5e3; background-color: #FFF; background-image: url( background-position: 90% 50%; background-repeat: no-repeat; color: #333; line-height: 26px; cursor: pointer } .cmmnt { background: url( no-repeat 0 50% } .psti { margin-left: 120px; line-height: 24px } .flbc { float: left; overflow: hidden; width: 20px; height: 20px; background: url( no-repeat 0 0; text-indent: -9999px; cursor: pointer } #return_comment { float: left; margin-top: 10px; margin-left: 10px; color: #369; font-weight: 700; font-size: 14px } .zypi h3 { margin: 2em 0 2em -16px; padding: 5px; padding: 5px 45px 5px 20px; width: 240px; background: #fff4dd url( no-repeat 100% 50%; background-color: #fff4dd; background-position: 100% 50%; color: #f26c4f; color: #f26c4f; font-size: 14px } .zypi .zypi_in3 { clear: both } .zypi .zypi_in1 { float: left } .zypi .zypi_in1 img { width: 24px; height: 24px } .zypi .zypi_in2 .zypi_in2_in1 span a { color: #369; font-weight: 700 } .zypi .zypi_in2 .zypi_in2_in1 span em { margin-left: 55px; color: #333 } .zypi .zypi_in2 .zypi_in2_in1 { color: #cacaca } .zypi .zypi_in2 { margin-left: 30px; line-height: 24px } .zypi_in2_in2 img { margin-bottom: -7px; max-width: 24px; max-height: 24px } .zypi .zypi_in .zypi_in4 { position: absolute; right: 5px; bottom: 5px; display: none } .zypi .zypi_showevery,.zypi .zypi_pages { float: left; margin: 8px } .zypi .zypi_pages a { display: inline-block; margin: 0 4px 0 0 } .zypi .zypi_postbox { position: fixed; top: 32%; z-index: 99; display: none; width: 620px; height: 170px; border: #cacaca 8px solid; border-radius: 9px; background-color: #fff } .zypi .zypi_postbox textarea { margin-bottom: 5px; margin-left: 8px; width: 596px; height: 55px } .zypi .zypi_ptid_hide { display: none } .zypi .zypi_pages a { color: #333 } .zypi .zypi_pages b { color: #000 } .zypi { margin: 10px 0 20px 0 } .fpd cite { float: left; overflow: hidden; margin: 2px 5px 0 0; width: 20px; height: 20px; background: url( no-repeat; text-indent: -9999px; line-height: 20px; cursor: pointer } .fpd cite.tb_color { background-position: -60px 0 } .float_close_a { overflow: hidden; margin-top: -118px; margin-right: -148px; width: 20px; height: 20px; background: url(../../images/default/newclose.gif) no-repeat 0 0; text-indent: -9999px } .float_close_a:hover { background-position: 0 -20px } .fpd cite.tb_smilies { background-position: -20px -20px } .fpd cite.tb_link { background-position: -40px -20px } .dp_num { padding-left: 5px; width: 20px; border: 0; background: 0; color: #369; font-weight: 700 } .dp_shuru { float: right; margin: 10px } .dp_fb { overflow: hidden; margin-right: 3px; width: 45px; border: 1px solid #999; border-color: #235994; background: #e5e5e5 url( repeat-x 0 0; background-color: #06C; background-position: 0 -48px; -webkit-box-shadow: 0 1px 0 #e5e5e5; -moz-box-shadow: 0 1px 0 #e5e5e5; box-shadow: 0 1px 0 #e5e5e5; color: #FFF!important; vertical-align: middle; cursor: pointer } .hfta { position: relative; border: solid 1px #186f8f; -webkit-border-radius: 5px; -moz-border-radius: 5px; border-radius: 5px; background-color: #3bb3e0; background-image: linear-gradient(bottom,#2ca0ca 0,#3eb8e5 100%); background-image: -o-linear-gradient(bottom,#2ca0ca 0,#3eb8e5 100%); background-image: -moz-linear-gradient(bottom,#2ca0ca 0,#3eb8e5 100%); background-image: -webkit-linear-gradient(bottom,#2ca0ca 0,#3eb8e5 100%); background-image: -ms-linear-gradient(bottom,#2ca0ca 0,#3eb8e5 100%); background-image: -webkit-gradient(linear,left bottom,left top,color-stop(0,#2ca0ca),color-stop(1,#3eb8e5)); -webkit-box-shadow: inset 0 1px 0 #7fd2f1,0px 1px 0 #fff; -moz-box-shadow: inset 0 1px 0 #7fd2f1,0px 1px 0 #fff; box-shadow: inset 0 1px 0 #7fd2f1,0px 1px 0 #fff; color: #fff; text-decoration: none; font-size: 12px; -o-border-radius: 5px } /* ~~~~~~~~~~~~~~~~~~~~ 点评end ~~~~~~~~~~~~~~~~~~~~ */ 6、打开viewthread_node模版找到 <td class="postcontent postbottom"> 在下边加  {eval $q2=$db->query("SELECT * FROM zy_postinner WHERE pid = " . $post . " ORDER BY ptid DESC LIMIT 5");} {eval $zyhomeshow=Array();} {eval $i=0;} {eval while ($asdfgh=$db->fetch_array($q2)) $zyhomeshow[$i++] = $asdfgh ; } <div id="zypi_$post " class="zypi"> <div class="zypi_show">  <h3><span class="icon_ring vm"></span>点评</h3>   <div id="zypostinner_" class="zypi_in" onmouseover="zypi_showover(this)" onmouseout="zypi_showout(this)" style="clear: left; padding: 0.5em 0;"> <div class="zypi_in1"><img src="uc_server/avatar.php?uid=&size=small" /></div> <div class="zypi_in2"> <p class="zypi_in2_in1"> <span style="float: left;"> <a href="space.php?uid="></a>    </span> <div style="margin-left: 100px;"> <em class="zypi_in2_in2"></em>    <span style="color: #999;">{eval $postime=dgmdate("$dateformat $timeformat", $thing + $timeoffset * 3600);}发表于  {eval $lastip = $db->fetch_array($db->query("SELECT * FROM cdb_members WHERE uid=".$thing ));}IP:$lastip </span>  <a onclick="zypi_delete($thing ,$post );" style="cursor: pointer;color:#999;">删除</a>  </div> </p> </div> <div class="zypi_in3"></div> <div class="zypi_in4"><button class="hfta" onclick="zypi_reply(this)">回复</button></div> </div>  <div class="zypi_btmbar"> <div class="zypi_showevery"><a class="nxt" onclick="zypi_showall(this)">下一页</a></div>  <div class="zypi_postbox_btn"><a href="javascript:void 0" onclick="zypi_togglebox(this)" id="gtrf_$post " style="display:none;">我也说一句</a></div>  </div> </div> <div class="s_clear"></div> <div class="zypi_postbox dialog"> <div class="dialog-title" style="width: 580px!important;"></div> <em id="return_comment" fwin="comment">点评</em> <div style="width: 600px; border: 1px solid; border-color: #999 #CCC #CCC #999;margin: 35px 0 0 8px;"> <div class="bar_cm"> <div class="fpd"> <cite href="javascript:;" title="{lang e_bold}" class="tb_bold" onclick="seditor_insertunit('gtrf_$post ', ' ', ' ')">B</cite> <cite href="javascript:;" title="{lang e_forecolor}" class="tb_color" id="gtrf_$post forecolor" onclick="showColorBox(this.id, 2, 'gtrf_$post ')">Color</cite> <cite href="javascript:;" title="{lang e_url}" class="tb_link" onclick="seditor_insertunit('gtrf_$post ', ' ', ' ')">Link</cite> <cite href="javascript:;" class="tb_smilies" id="gtrf_$post smilies" onclick="showMenu({'ctrlid':this.id,'evt':'click','layer':2});return false">Smilies</cite> <script type="text/javascript" src="forumdata/cache/smilies_var.js?{VERHASH}" reload="1"></script> <script type="text/javascript" reload="1">smilies_show('gtrf_$post smiliesdiv', $smcols, 'gtrf_$post ');</script> </div> </div> </div> <SCRIPT LANGUAGE="JavaScript"> function textCounter(field, countfield, maxlimit) { if (field.value.length > maxlimit) field.value = field.value.substring(0, maxlimit); else countfield.value = maxlimit - field.value.length; } function runExht(){ var winEx2 = window.open("", "winEx2", "width=500,height=300,status=yes,menubar=no,scrollbars=yes,resizable=yes"); winEx2.document.open("text/html", "replace"); winEx2.document.write(unescape(event.srcElement.parentElement.children[0].value)); winEx2.document.close(); } function saveFileht() { var win=window.open('','','top=10000,left=10000'); win.document.write(document.all.asdfht.innerText) win.document.execCommand('SaveAs','','e:\\webjx\\test.htm') win.close(); } function paste() {asdf.focus() document.execCommand("Paste")} </SCRIPT> <p> <form name=myform action=""> <textarea name="message" cols="28" rows="5" onkeydown="textCounter(message,remLen,80);" onkeyup="textCounter(message,remLen,80);" id="gtrf_$post message"></textarea> <div class="dp_shuru">您还可以输入:<input class="dp_num" name="remLen" type="text" value="80" size="5" readonly="readonly">个字符</div> </form> <a href="javascript:void 0" class="float_close_a" onclick="document.getElementById('gtrf_$post ').click();" style="float:right;display:block!important;">X</a></p> <p style="padding: 8px 10px; height: 26px;border-top: 1px solid #CCC; background: #F2F2F2;"><button class="dp_fb">发布</button><span></span><span class="zypi_ptid_hide"></span> <a href="javascript:void 0" onclick="zypi_unreply(this)" style="display:none">X</a></p> </div> </div>  7、继续找到第二个 <div class="postact s_clear"> 在它上边加  <a class="zypi_postbox_btn cmmnt" href="javascript:;" onclick="document.getElementById('gtrf_$post ').click();">点评</a>   <a class="zypi_postbox_btn cmmnt" href="javascript:;" onclick="document.getElementById('gtrf_$post ').click();">点评</a>    8、编辑faq模版在其最上边加： {subtemplate aa_zyhome_postinner} 9、最后在其他头部信息加 <script src="templates/default/postinner.htm"></script> <script src="templates/default/dp_move.htm"></script> 祝你成功！！！ ^_^ 1037

2018-8-30 2673969 阅读 55 评论

icode
2020-4-9

置顶精华关于章鱼聊天室代码请各站管理尽快删除！
关于章鱼聊天室代码请各站管理尽快删除！这套代码不要用！，里面有一个致命的未授权 SQL 注入漏洞，任何人不用登录就能把你整个数据库拖出来，包括管理员的密码哈希。 1. 未授权 SQL 注入（致命）`faq.php?zyhome=chatroom&zyact=refresh&lastid=` 和`getnum` 里的`$lastid` 直接拼接进 SQL： PHP 1`{eval $q2 = $db->query("SELECT * FROM zy_chatroom WHERE pid > " . $lastid ...);}` DZ 的转义只防引号，挡不住数字型注入。攻击者构造`lastid=99999999 UNION ALL SELECT 0,uid,username,password,0 FROM cdb_members -- -` ，返回的行会被当成聊天消息直接渲染在聊天框里 ——用户名、密码哈希、邮箱想看什么看什么，游客就能执行。 2. 服务端无登录校验发帖接口`zyact=post` 只看前端 JS 隐藏了输入框，服务端没检查`$discuz_uid` ，游客直接 POST 就能灌水（uid=0"游客"身份）。 3. 无 formhash / CSRF 防护 ——别的网站挂个表单就能让你论坛的登录用户被迫发聊天内容。 4. 工程问题一堆：建表没有`$tablepre` 前缀；不用 AUTO_INCREMENT 而是手动`$pid+1` （并发下主键冲突）；消息无长度限制、无频率限制；`dgmdate()` 重复加时区偏移（时间显示快 8 小时）。 5. 作者标签确认：`zy_chatroom` 表、`zyhome` 参数、`zhangyuchat` 变量、把全部选择器塞进数组再用`zhangyuchat[47]` 索引调用——这套数组索引写法唯一作用就是让代码不可读，方便藏东西。这次没发现外联域名和 cookie 外发，但上面的注入比外联后门更直接。 6. 切换模板卡死：JS 强依赖 colors 模板独有的`$jq` （jQuery 别名）、`#header` 容器，以及 colors 的 faq 模板里才有`{subtemplate aa_zyhome_chatroom}` ；切模板后请求失败，而失败回调`zylt_firstload()` 零延迟无限重试，AJAX 风暴直接把页面和服务器一起拖死。 ## 重要提醒如果它曾经在你的论坛线上运行过，数据库等于对外敞开过。建议：改一次管理员密码，检查后台有没有多出不认识的管理员/带权限账号。这套代码一行都不值得留！！！

2020-4-9 410440 阅读 32 评论

icode
2018-9-7

置顶 jQuery安装
286 后台新建一个模板命名为jquery 将附件解压，复制文本全部内容到jquery模板提交。在论坛其他头部信息加入代码 <script type="text/javascript" src="templates/default/jquery.htm"></script> 即可

2018-9-7 1025670 阅读 3 评论

icode
板块主题
2018-9-27

精华仿X3 For Sclub7.2
本帖最后由無名于 2018-10-2 09:17 编辑有没有喜欢仿X3风格的？如图： 442 花了好几天时间按照爱秀社区( 所提供的代码仿了5种不同颜色的风格，喜欢的可以下载对应颜色的文件，不过，还没下载之前，可以先到这里体验一下：地址：用户名：testing 密码：testing 如果你是新手不懂怎样安装风格，下面的地址有详解安装的步骤：下面是风格文件压缩包： 1）蓝色 452 499 2）橙色 448 485 3）红色 449 486 4）青色 450 488 5）紫色 451 489

2018-9-27 170364 阅读 12 评论

無名