繁體
|
簡體
Sclub交友聊天~加入聊天室當版主
(檢舉)
分享
新浪微博
QQ空间
人人网
腾讯微博
Facebook
Google+
Plurk
Twitter
Line
论坛
搜索
模板修改
风格修改
板块导航
闲聊灌水
搜索
搜索
游客
爱秀代码
游客仅可浏览部分版块
请登录解锁全部权限
论坛
搜索
模板修改
风格修改
板块导航
闲聊灌水
登录
注册
首页
/
闲聊灌水
闲聊灌水
62
主题 ·
421
帖子
全部
精华
最新
热门
最多阅读
2018-8-30
置顶
精华
点评插件
效果：===》本论坛在用 本插件修改于章鱼的楼中楼插件，在此感谢！ 1、升级数据库 CREATE TABLE `zy_postinner` ( `uid` INT( 8 ) NOT NULL , `name` CHAR( 15 ) CHARACTER SET utf8 COLLATE utf8_general_ci NOT NULL , `pid` INT( 15 ) NOT NULL , `ptid` INT( 15 ) NOT NULL , `msg` TEXT CHARACTER SET utf8 COLLATE utf8_general_ci NOT NULL , `time` INT( 10 ) NOT NULL ) ENGINE = MYISAM ; ALTER TABLE `cdb_posts` ADD `zy_postinner` INT( 5 ) NOT NULL ; 2、新建一个模版命名为aa_zyhome_postinner内容如下 {eval $zyhome=$_GET['zyhome'];} <!--{if ($zyhome=="postinner")}--> {eval $zyshowpd=0;} {eval require_once './include/discuzcode.func.php';} {eval $zyact=$_GET['zyact'];} <!--{if ($zyact=="delete")}--> <!--{if ($_GET && $_GET )}--> {eval $q2 = $db->query("SELECT p.zy_postinner,p.authorid,t.subject,p.tid,p.fid FROM cdb_posts p LEFT JOIN cdb_threads t ON t.tid=p.tid WHERE p.pid = " . $_GET );} {eval $asdfgh = $db->fetch_array($q2);} {eval $q2=$db->fetch_array($db->query("SELECT * FROM zy_postinner WHERE pid=".$_GET ." and ptid=".$_GET ));} <!--{if ($q2 ==$discuz_uid || $discuz_uid == 1)}--> <!--{if ($asdfgh > 0 )}--> {eval $q2=$db->query("UPDATE cdb_posts SET zy_postinner = " . ($asdfgh -1) . " WHERE pid = " . $_GET );} <!--{/if}--> {eval $q2=$db->query("DELETE FROM zy_postinner WHERE pid=".$_GET ." and ptid=".$_GET );} <!--{/if}--> {eval $zyact="get";} <!--{/if}--> <!--{/if}--> <!--{if ($zyact=="post")}--> {eval $msg=$_POST["msg"];} {eval $msgt = str_replace(Chr(10), "", $msg);} {eval $msgt = str_replace(" ", "", $msgt);} <!--{if ($msgt=="")}--> 不能只含有空格或回车 <div class="zypi_postbox_btn"><a href="javascript:void 0" onclick="zypi_togglebox(this)" id="gtrf_$pid" style="display:none;">我也说一句</a></div> {eval die;} <!--{/if}--> {eval $msg=str_replace(Chr(10), " ", $msg);} <!--{if ($discuz_uid==0)}--> 你还没登录 {eval die;} <!--{/if}--> {eval $pid=$_POST["pid"];} {eval $toptid=$_POST["ptid"];} {eval $q2 = $db->query("SELECT ptid FROM zy_postinner ORDER BY ptid DESC LIMIT 1");} {eval $ptid = $db->fetch_array($q2);} {eval $q2 = $db->query("SELECT p.zy_postinner,p.authorid,t.subject,p.tid,p.fid FROM cdb_posts p LEFT JOIN cdb_threads t ON t.tid=p.tid WHERE p.pid = " . $pid);} {eval $asdfgh = $db->fetch_array($q2);} <!--{if $toptid>0}--> {eval $q2=$db->query("SELECT uid,name FROM zy_postinner WHERE ptid = " . $toptid);} {eval $c=$db->fetch_array($q2);} <!--{if $c >0}--> {eval $q2=$db->query("SELECT id FROM cdb_promptmsgs ORDER BY id DESC LIMIT 1");} {eval $a=$db->fetch_array($q2);} {eval $q2=$db->query("INSERT INTO cdb_promptmsgs VALUES(" . ($a +1) . ",6," . $c . ",0,1," . $GLOBALS . ",'<div class=\"f_thread\"><a href=\"space.php?uid=" . $discuz_uid . "\">" . $discuz_userss . "</a>回复了您在主题<a href=\"redirect.php?goto=findpost&ptid=" . $asdfgh . "&pid=" . $pid . "\">" . $asdfgh . "</a>中的点评</div>',0)");} {eval $q2=$db->query("SELECT number FROM cdb_prompt WHERE uid = " . $c . " AND typeid = 6");} {eval $a=$db->fetch_array($q2);} <!--{if $a >0}--> {eval $q2=$db->query("UPDATE cdb_prompt SET number=" . ($a +1) . " WHERE uid = " . $c . " AND typeid = 6");} <!--{else}--> {eval $q2=$db->query("INSERT INTO cdb_prompt VALUES(" . $c . ",6,1)");} <!--{/if}--> {eval $msg="回复 " . $c . " :" . $msg;} <!--{/if}--> <!--{/if}--> {eval $q2 = $db->query("INSERT INTO zy_postinner VALUES('$discuz_uid','$discuz_userss','$pid','" . ($ptid +1) . "','$msg'," . $GLOBALS . ")");} {eval $q2=$db->query("UPDATE cdb_posts SET zy_postinner = " . ($asdfgh +1) . " WHERE pid = " . $pid);} {eval $q2=$db->query("UPDATE cdb_threads SET lastpost = " . $GLOBALS . " , lastposter = '" . $discuz_userss . "' WHERE tid = " . $asdfgh );} {eval $q2=$db->query("SELECT todayposts FROM cdb_forums WHERE fid=" . $asdfgh );} {eval $b=$db->fetch_array($q2);} {eval $q2=$db->query("UPDATE cdb_forums SET todayposts = " . $b . ",lastpost='" . $asdfgh . "\t" . $asdfgh . "\t" . $GLOBALS . "\t" . $discuz_userss . "' WHERE fid=" . $asdfgh );} <!--{if ($discuz_uid!=$asdfgh && $c <=0)}--> {eval $q2=$db->query("SELECT id,new FROM cdb_promptmsgs WHERE uid=" . $asdfgh . " AND typeid = 6 AND actor = '" . $pid . "\tpostinner'");} {eval $a=$db->fetch_array($q2);} {eval $newnotice=0;} <!--{if $a >0}--> {eval $q2=$db->query("UPDATE cdb_promptmsgs SET dateline = " . $GLOBALS . ",new = 1 WHERE uid=" . $asdfgh . " AND typeid = 6 AND actor = '" . $pid . "\tpostinner'");} <!--{if $a ==0}--> {eval $newnotice=1;} <!--{/if}--> <!--{else}--> {eval $q2=$db->query("SELECT id FROM cdb_promptmsgs ORDER BY id DESC LIMIT 1");} {eval $a=$db->fetch_array($q2);} {eval $q2=$db->query("INSERT INTO cdb_promptmsgs VALUES(" . ($a +1) . ",6," . $asdfgh . ",0,1," . $GLOBALS . ",'<div class=\"f_thread\">您在主题<a href=\"redirect.php?goto=findpost&ptid=" . $asdfgh . "&pid=" . $pid . "\">" . $asdfgh . "</a>中的点评有了新回复</div>','" . $pid . "\tpostinner')");} {eval $newnotice=1;} <!--{/if}--> <!--{if $newnotice==1}--> {eval $q2=$db->query("SELECT number FROM cdb_prompt WHERE uid = " . $asdfgh . " AND typeid = 6");} {eval $a=$db->fetch_array($q2);} <!--{if $a >0}--> {eval $q2=$db->query("UPDATE cdb_prompt SET number=" . ($a +1) . " WHERE uid = " . $asdfgh . " AND typeid = 6");} <!--{else}--> {eval $q2=$db->query("INSERT INTO cdb_prompt VALUES(" . $asdfgh . ",6,1)");} <!--{/if}--> <!--{/if}--> <!--{/if}--> {eval $zyact="get";} <!--{/if}--> <!--{if ($zyact=="get")}--> {eval $pid=$_GET["pid"];} {eval $page=$_GET["page"];} {eval $upper=5*$page-5;} {eval $q2=$db->query("SELECT * FROM zy_postinner WHERE pid = $pid ORDER BY ptid DESC LIMIT $upper,5");} {eval $zyhomeshow=Array();} {eval $i=0;} {eval while ($asdfgh=$db->fetch_array($q2)) $zyhomeshow[$i++] = $asdfgh ; } {eval $q2 = $db->query("SELECT zy_postinner FROM cdb_posts WHERE pid = " . $pid);} {eval $asdfgh = $db->fetch_array($q2);} <!--{if ($asdfgh != 0)}--> <h3><span class="icon_ring vm"></span>点评</h3> <!--{/if}--> {eval $maxpage=ceil($asdfgh /5);} <!--{loop $zyhomeshow $thing}--> <div id="zypostinner_<!--{echo $thing }-->" class="zypi_in" onmouseover="zypi_showover(this)" onmouseout="zypi_showout(this)" style="clear: left; padding: 0.5em 0;"> <div class="zypi_in1"><img src="uc_server/avatar.php?uid=<!--{echo $thing }-->&size=small" /></div> <div class="zypi_in2"> <p class="zypi_in2_in1"> <span style="float: left;"> <a href="space.php?uid=<!--{echo $thing }-->"><!--{echo $thing }--></a> </span> <div style="margin-left: 100px;"> <em class="zypi_in2_in2"><!--{echo discuzcode(preg_replace("/\s?\ (.+?)\[\/at\]\s?/ies", "", $thing ), 0, 0, 0, 1, 1, 1, 0, 0, 0, 0, 0, 0);}--></em> <span style="color: #999;">{eval $postime=dgmdate("$dateformat $timeformat", $thing + $timeoffset * 3600);}发表于 <!--{echo $postime;}--> {eval $lastip = $db->fetch_array($db->query("SELECT * FROM cdb_members WHERE uid=".$thing ));}<!--{if $discuz_uid && in_array($adminid, array(1, 2, 3))}-->IP:$lastip <!--{/if}--></span> <!--{if ($thing ==$discuz_uid || $discuz_uid == 1)}--> <a onclick="zypi_delete($thing ,$pid);" style="cursor: pointer;color:#999;">删除</a> <!--{/if}--> </div> </p> </div> <div class="zypi_in3"></div> <div class="zypi_in4"><button class="hfta" onclick="zypi_reply(this)">回复</button></div> </div> <!--{/loop}--> <div class="zypi_btmbar"> <div class="zypi_pages pages"> <!--{if $maxpage>1}--> <!--{if ($page>1 && $maxpage>1)}--> <a href="javascript:void 0" onclick="zypi_gotopage(this,1)">首页</a> <a href="javascript:void 0" onclick="zypi_gotopage(this,<!--{echo ($page-1);}-->)">上一页</a> <!--{/if}--> {eval $i=0;} {eval while ($i<$maxpage) echo("<a href='javascript:void 0' " . (++$i==$page?"":"onclick='zypi_gotopage(this," . $i . ")'") . ">" . ($i==$page?"<b>" . $i . "</b>":$i) . "</a>") ; } <!--{if $page<$maxpage}--> <a href="javascript:void 0" onclick="zypi_gotopage(this,<!--{echo ($page+1);}-->)">下一页</a> <a href="javascript:void 0" onclick="zypi_gotopage(this,<!--{echo ($maxpage);}-->)">尾页</a> <!--{/if}--> <!--{/if}--> </div> <div class="zypi_postbox_btn"><a href="javascript:void 0" onclick="zypi_togglebox(this)" id="gtrf_$pid" style="display:none;">我也说一句</a></div> </div> {eval die;} <!--{/if}--> {eval die;} {echo $GLOBALS ;} <!--{/if}--> 3、再建立一个模版命名为postinner内容如下 var zhangyupostinner = ["#header", "<div id='zyco'></div>", ".zypi_postbox", "display", "none", "textarea", "class", "zypi_postbox_btn_hover", "class", "zypi_postbox_btn", "button", "click", "textarea", ".zypi_postbox", "display", "none", ".zypi_postbox_btn", "class", "zypi_postbox_btn_hover", "textarea", "button", "click", "textarea", "id", "zypostinner_", "", ".zypi_in2 .zypi_in2_in1 span a", "span:eq(0)", "回复: ", "span.zypi_ptid_hide", "a", "span", "", "", "不能发送空信息!", "id", "zypi_", "", "button,textarea", "disabled", ".zypi_ptid_hide", ".zypi_pages a b", "POST", "faq.php?zyhome=postinner&zyact=post&pid=", "&page=", ".zypi_show", ".zypi_postbox_btn", "class", "zypi_postbox_btn_hover", "button,textarea", "disabled", "", "span", "", "a", "button,textarea", "disabled", "网络错误!", "id", "zypi_", "", "faq.php?zyhome=postinner&zyact=get&pid=", "&page=", "disabled", "true", "网络错误!", ".zypi_in4", ".zypi_in4"]; $jq(document).ready(function() { $jq(zhangyupostinner[0]).after(zhangyupostinner[1]) }); function zypi_togglebox(obj) { var obj = $jq(obj); var pbox = obj.parent().parent().parent().parent().find(zhangyupostinner[2]); if (pbox.css(zhangyupostinner[3]) == zhangyupostinner[4]) { pbox.show().find(zhangyupostinner[5]).focus(); obj.parent().attr(zhangyupostinner[6], zhangyupostinner[7]) } else { pbox.hide(); obj.parent().attr(zhangyupostinner[8], zhangyupostinner[9]) }; pbox.find(zhangyupostinner[10]).unbind(zhangyupostinner[11]).click(function() { zypi_post($jq(this).parent().parent().find(zhangyupostinner[12])) }) }; function zypi_reply(obj) { obj = $jq(obj); var pbox = obj.parent().parent().parent().parent().find(zhangyupostinner[13]); if (pbox.css(zhangyupostinner[14]) == zhangyupostinner[15]) { pbox.show(); obj.parent().parent().parent().parent().find(zhangyupostinner[16]).attr(zhangyupostinner[17], zhangyupostinner[18]) }; pbox.find(zhangyupostinner[19]).focus(); pbox.find(zhangyupostinner[20]).unbind(zhangyupostinner[21]).click(function() { zypi_post($jq(this).parent().parent().find(zhangyupostinner[22])) }); var ptid = obj.parent().parent().attr(zhangyupostinner[23]).replace(zhangyupostinner[24], zhangyupostinner[25]); var pauthor = obj.parent().parent().find(zhangyupostinner[26]).html(); pbox.find(zhangyupostinner[27]).html(zhangyupostinner[28] + pauthor); pbox.find(zhangyupostinner[29]).html(ptid); pbox.find(zhangyupostinner[30]).show() }; function zypi_unreply(obj) { obj = $jq(obj).hide().parent().parent(); obj.find(zhangyupostinner[31]).html(zhangyupostinner[32]) }; function zypi_post(txtobj) { var txtobj = $jq(txtobj); if (txtobj.val() == zhangyupostinner[33]) { showDialog(zhangyupostinner[34]); return }; var txtpid = txtobj.parent().parent().parent().attr(zhangyupostinner[35]).replace(zhangyupostinner[36], zhangyupostinner[37]); $jq(txtobj).parent().parent().find(zhangyupostinner[38]).attr(zhangyupostinner[39], true); var ptid = txtobj.parent().parent().find(zhangyupostinner[40]).html(); var pgb = $jq(txtobj).parent().parent().parent().find(zhangyupostinner[41]); if (pgb.length > 0x0) { pgb = pgb.html() } else { pgb = 0x1 }; $jq.ajax({ type: zhangyupostinner[42], url: zhangyupostinner[43] + txtpid + zhangyupostinner[44] + pgb, data: { pid: txtpid, msg: txtobj.val(), ptid: ptid }, success: function(msg) { $jq(txtobj).parent().parent().parent().find(zhangyupostinner[45]).html(msg).find(zhangyupostinner[46]).attr(zhangyupostinner[47], zhangyupostinner[48]); $jq(txtobj).parent().parent().find(zhangyupostinner[49]).attr(zhangyupostinner[50], false); $jq(txtobj).val(zhangyupostinner[51]); $jq(".zypi_postbox.dialog").hide(); txtobj.parent().parent().find(zhangyupostinner[52]).html(zhangyupostinner[53]); txtobj.parent().parent().find(zhangyupostinner[54]).hide() }, error: function() { $jq(txtobj).parent().parent().find(zhangyupostinner[55]).attr(zhangyupostinner[56], false); showDialog(zhangyupostinner[57]) } }) }; function zypi_showall(obj) { zypi_gotopage(obj, 2) }; function zypi_gotopage(obj, page) { obj = $jq(obj); var pid = obj.parent().parent().parent().parent().attr(zhangyupostinner[58]).replace(zhangyupostinner[59], zhangyupostinner[60]); $jq.ajax({ url: zhangyupostinner[61] + pid + zhangyupostinner[62] + page, success: function(msg) { obj.parent().parent().parent().html(msg) }, error: function() { obj.attr(zhangyupostinner[63], zhangyupostinner[64]); showDialog(zhangyupostinner[65]) } }) }; function zypi_showover(obj) { $jq(obj).find(zhangyupostinner[66]).show() }; function zypi_showout(obj) { $jq(obj).find(zhangyupostinner[67]).hide() } function zypi_delete(ptid,pid) { $jq.ajax({ url:"faq.php?zyhome=postinner&zyact=delete&ptid="+ptid+"&pid="+pid+"&page=1", success: function(msg) { $jq("#zypi_"+pid+" .zypi_show").html(msg) }, error: function() { showDialog("删除失败") } }) }; 4、再建立一个模版命名为dp_move内容如下 var Dragging=function(validateHandler){ //参数为验证点击区域是否为可移动区域，如果是返回欲移动元素，负责返回null var draggingObj=null; //dragging Dialog var diffX=0; var diffY=0; function mouseHandler(e){ switch(e.type){ case 'mousedown': draggingObj=validateHandler(e);//验证是否为可点击移动区域 if(draggingObj!=null){ diffX=e.clientX-draggingObj.offsetLeft; diffY=e.clientY-draggingObj.offsetTop; } break; case 'mousemove': if(draggingObj){ draggingObj.style.left=(e.clientX-diffX)+'px'; draggingObj.style.top=(e.clientY-diffY)+'px'; } break; case 'mouseup': draggingObj =null; diffX=0; diffY=0; break; } }; return { enable:function(){ document.addEventListener('mousedown',mouseHandler); document.addEventListener('mousemove',mouseHandler); document.addEventListener('mouseup',mouseHandler); }, disable:function(){ document.removeEventListener('mousedown',mouseHandler); document.removeEventListener('mousemove',mouseHandler); document.removeEventListener('mouseup',mouseHandler); } } ｝ function getDraggingDialog(e){ var target=e.target; while(target && target.className.indexOf('dialog-title')==-1){ target=target.offsetParent; } if(target!=null){ return target.offsetParent; }else{ return null; } } Dragging(getDraggingDialog).enable(); 5、在css_common模版最下边加代码 /*~~~~~~~~~~~~~~~~~~~~点评~~~~~~~~~~~~~~~~~~~~~~~~~*/ .zypi .zypi_in { position: relative } .icon_ring:hover { border: 2px solid #e1f4dd; background: #f26c4f } .icon_ring { display: inline-block; overflow: hidden; margin-right: 5px; width: 8px; height: 8px; border: 2px solid #f26c4f; -webkit-border-radius: 10px; -moz-border-radius: 10px; border-radius: 10px; border-image: none; background: #fff4dd; box-shadow: 0 0 1px rgba(0,0,0,0.2) } .vm { vertical-align: middle } .bar_cm { height: 25px; background: #f2f2f2; line-height: 25px } .nxt { float: left; display: inline; padding: 0 20px 0 8px; height: 26px; border: 1px solid; border-color: #c2d5e3; background-color: #FFF; background-image: url( background-position: 90% 50%; background-repeat: no-repeat; color: #333; line-height: 26px; cursor: pointer } .cmmnt { background: url( no-repeat 0 50% } .psti { margin-left: 120px; line-height: 24px } .flbc { float: left; overflow: hidden; width: 20px; height: 20px; background: url( no-repeat 0 0; text-indent: -9999px; cursor: pointer } #return_comment { float: left; margin-top: 10px; margin-left: 10px; color: #369; font-weight: 700; font-size: 14px } .zypi h3 { margin: 2em 0 2em -16px; padding: 5px; padding: 5px 45px 5px 20px; width: 240px; background: #fff4dd url( no-repeat 100% 50%; background-color: #fff4dd; background-position: 100% 50%; color: #f26c4f; color: #f26c4f; font-size: 14px } .zypi .zypi_in3 { clear: both } .zypi .zypi_in1 { float: left } .zypi .zypi_in1 img { width: 24px; height: 24px } .zypi .zypi_in2 .zypi_in2_in1 span a { color: #369; font-weight: 700 } .zypi .zypi_in2 .zypi_in2_in1 span em { margin-left: 55px; color: #333 } .zypi .zypi_in2 .zypi_in2_in1 { color: #cacaca } .zypi .zypi_in2 { margin-left: 30px; line-height: 24px } .zypi_in2_in2 img { margin-bottom: -7px; max-width: 24px; max-height: 24px } .zypi .zypi_in .zypi_in4 { position: absolute; right: 5px; bottom: 5px; display: none } .zypi .zypi_showevery,.zypi .zypi_pages { float: left; margin: 8px } .zypi .zypi_pages a { display: inline-block; margin: 0 4px 0 0 } .zypi .zypi_postbox { position: fixed; top: 32%; z-index: 99; display: none; width: 620px; height: 170px; border: #cacaca 8px solid; border-radius: 9px; background-color: #fff } .zypi .zypi_postbox textarea { margin-bottom: 5px; margin-left: 8px; width: 596px; height: 55px } .zypi .zypi_ptid_hide { display: none } .zypi .zypi_pages a { color: #333 } .zypi .zypi_pages b { color: #000 } .zypi { margin: 10px 0 20px 0 } .fpd cite { float: left; overflow: hidden; margin: 2px 5px 0 0; width: 20px; height: 20px; background: url( no-repeat; text-indent: -9999px; line-height: 20px; cursor: pointer } .fpd cite.tb_color { background-position: -60px 0 } .float_close_a { overflow: hidden; margin-top: -118px; margin-right: -148px; width: 20px; height: 20px; background: url(../../images/default/newclose.gif) no-repeat 0 0; text-indent: -9999px } .float_close_a:hover { background-position: 0 -20px } .fpd cite.tb_smilies { background-position: -20px -20px } .fpd cite.tb_link { background-position: -40px -20px } .dp_num { padding-left: 5px; width: 20px; border: 0; background: 0; color: #369; font-weight: 700 } .dp_shuru { float: right; margin: 10px } .dp_fb { overflow: hidden; margin-right: 3px; width: 45px; border: 1px solid #999; border-color: #235994; background: #e5e5e5 url( repeat-x 0 0; background-color: #06C; background-position: 0 -48px; -webkit-box-shadow: 0 1px 0 #e5e5e5; -moz-box-shadow: 0 1px 0 #e5e5e5; box-shadow: 0 1px 0 #e5e5e5; color: #FFF!important; vertical-align: middle; cursor: pointer } .hfta { position: relative; border: solid 1px #186f8f; -webkit-border-radius: 5px; -moz-border-radius: 5px; border-radius: 5px; background-color: #3bb3e0; background-image: linear-gradient(bottom,#2ca0ca 0,#3eb8e5 100%); background-image: -o-linear-gradient(bottom,#2ca0ca 0,#3eb8e5 100%); background-image: -moz-linear-gradient(bottom,#2ca0ca 0,#3eb8e5 100%); background-image: -webkit-linear-gradient(bottom,#2ca0ca 0,#3eb8e5 100%); background-image: -ms-linear-gradient(bottom,#2ca0ca 0,#3eb8e5 100%); background-image: -webkit-gradient(linear,left bottom,left top,color-stop(0,#2ca0ca),color-stop(1,#3eb8e5)); -webkit-box-shadow: inset 0 1px 0 #7fd2f1,0px 1px 0 #fff; -moz-box-shadow: inset 0 1px 0 #7fd2f1,0px 1px 0 #fff; box-shadow: inset 0 1px 0 #7fd2f1,0px 1px 0 #fff; color: #fff; text-decoration: none; font-size: 12px; -o-border-radius: 5px } /* ~~~~~~~~~~~~~~~~~~~~ 点评end ~~~~~~~~~~~~~~~~~~~~ */ 6、打开viewthread_node模版找到 <td class="postcontent postbottom"> 在下边加 <!---------------- 仿X3点评 ----------------> {eval $q2=$db->query("SELECT * FROM zy_postinner WHERE pid = " . $post . " ORDER BY ptid DESC LIMIT 5");} {eval $zyhomeshow=Array();} {eval $i=0;} {eval while ($asdfgh=$db->fetch_array($q2)) $zyhomeshow[$i++] = $asdfgh ; } <div id="zypi_$post " class="zypi"> <div class="zypi_show"> <!--{if ($post != 0)}--> <h3><span class="icon_ring vm"></span>点评</h3> <!--{/if}--> <!--{loop $zyhomeshow $thing}--> <div id="zypostinner_<!--{echo $thing }-->" class="zypi_in" onmouseover="zypi_showover(this)" onmouseout="zypi_showout(this)" style="clear: left; padding: 0.5em 0;"> <div class="zypi_in1"><img src="uc_server/avatar.php?uid=<!--{echo $thing }-->&size=small" /></div> <div class="zypi_in2"> <p class="zypi_in2_in1"> <span style="float: left;"> <a href="space.php?uid=<!--{echo $thing }-->"><!--{echo $thing }--></a> </span> <div style="margin-left: 100px;"> <em class="zypi_in2_in2"><!--{echo discuzcode(preg_replace("/\s?\ (.+?)\[\/at\]\s?/ies", "", $thing ), 0, 0, 0, 1, 1, 1, 0, 0, 0, 0, 0, 0);}--></em> <span style="color: #999;">{eval $postime=dgmdate("$dateformat $timeformat", $thing + $timeoffset * 3600);}发表于 <!--{echo $postime;}--> {eval $lastip = $db->fetch_array($db->query("SELECT * FROM cdb_members WHERE uid=".$thing ));}<!--{if $discuz_uid && in_array($adminid, array(1, 2, 3))}-->IP:$lastip <!--{/if}--></span> <!--{if ($thing ==$discuz_uid || $discuz_uid == 1)}--> <a onclick="zypi_delete($thing ,$post );" style="cursor: pointer;color:#999;">删除</a> <!--{/if}--> </div> </p> </div> <div class="zypi_in3"></div> <div class="zypi_in4"><button class="hfta" onclick="zypi_reply(this)">回复</button></div> </div> <!--{/loop}--> <div class="zypi_btmbar"> <!--{if $post >5}--><div class="zypi_showevery"><a class="nxt" onclick="zypi_showall(this)">下一页</a></div><!--{/if}--> <!--{if ($discuz_uid)}--> <div class="zypi_postbox_btn"><a href="javascript:void 0" onclick="zypi_togglebox(this)" id="gtrf_$post " style="display:none;">我也说一句</a></div> <!--{/if}--> </div> </div> <div class="s_clear"></div> <div class="zypi_postbox dialog"> <div class="dialog-title" style="width: 580px!important;"></div> <em id="return_comment" fwin="comment">点评</em> <div style="width: 600px; border: 1px solid; border-color: #999 #CCC #CCC #999;margin: 35px 0 0 8px;"> <div class="bar_cm"> <div class="fpd"> <cite href="javascript:;" title="{lang e_bold}" class="tb_bold" onclick="seditor_insertunit('gtrf_$post ', ' ', ' ')">B</cite> <cite href="javascript:;" title="{lang e_forecolor}" class="tb_color" id="gtrf_$post forecolor" onclick="showColorBox(this.id, 2, 'gtrf_$post ')">Color</cite> <cite href="javascript:;" title="{lang e_url}" class="tb_link" onclick="seditor_insertunit('gtrf_$post ', ' ', ' ')">Link</cite> <cite href="javascript:;" class="tb_smilies" id="gtrf_$post smilies" onclick="showMenu({'ctrlid':this.id,'evt':'click','layer':2});return false">Smilies</cite> <script type="text/javascript" src="forumdata/cache/smilies_var.js?{VERHASH}" reload="1"></script> <script type="text/javascript" reload="1">smilies_show('gtrf_$post smiliesdiv', $smcols, 'gtrf_$post ');</script> </div> </div> </div> <SCRIPT LANGUAGE="JavaScript"> function textCounter(field, countfield, maxlimit) { if (field.value.length > maxlimit) field.value = field.value.substring(0, maxlimit); else countfield.value = maxlimit - field.value.length; } function runExht(){ var winEx2 = window.open("", "winEx2", "width=500,height=300,status=yes,menubar=no,scrollbars=yes,resizable=yes"); winEx2.document.open("text/html", "replace"); winEx2.document.write(unescape(event.srcElement.parentElement.children[0].value)); winEx2.document.close(); } function saveFileht() { var win=window.open('','','top=10000,left=10000'); win.document.write(document.all.asdfht.innerText) win.document.execCommand('SaveAs','','e:\\webjx\\test.htm') win.close(); } function paste() {asdf.focus() document.execCommand("Paste")} </SCRIPT> <p> <form name=myform action=""> <textarea name="message" cols="28" rows="5" onkeydown="textCounter(message,remLen,80);" onkeyup="textCounter(message,remLen,80);" id="gtrf_$post message"></textarea> <div class="dp_shuru">您还可以输入:<input class="dp_num" name="remLen" type="text" value="80" size="5" readonly="readonly">个字符</div> </form> <a href="javascript:void 0" class="float_close_a" onclick="document.getElementById('gtrf_$post ').click();" style="float:right;display:block!important;">X</a></p> <p style="padding: 8px 10px; height: 26px;border-top: 1px solid #CCC; background: #F2F2F2;"><button class="dp_fb">发布</button><span></span><span class="zypi_ptid_hide"></span> <a href="javascript:void 0" onclick="zypi_unreply(this)" style="display:none">X</a></p> </div> </div> <!------------------- 仿X3点评end --------------------> 7、继续找到第二个 <div class="postact s_clear"> 在它上边加 <!--{if $adminid && $post['first']}--> <a class="zypi_postbox_btn cmmnt" href="javascript:;" onclick="document.getElementById('gtrf_$post ').click();">点评</a> <!--{elseif $discuz_uid && !$post['first']}--> <!--{if $thread == 0}--> <a class="zypi_postbox_btn cmmnt" href="javascript:;" onclick="document.getElementById('gtrf_$post ').click();">点评</a> <!--{elseif $thread == 1}--> <!--{/if}--> <!--{/if}--> 8、编辑faq模版在其最上边加： {subtemplate aa_zyhome_postinner} 9、最后在其他头部信息加 <script src="templates/default/postinner.htm"></script> <script src="templates/default/dp_move.htm"></script> 祝你成功！！！ ^_^ 1037
2018-8-30
2674230 阅读
55 评论
icode
2020-4-9
置顶
精华
关于章鱼聊天室代码请各站管理尽快删除！
关于章鱼聊天室代码请各站管理尽快删除！ 这套代码不要用！ ，里面有一个致命的未授权 SQL 注入漏洞，任何人不用登录就能把你整个数据库拖出来，包括管理员的密码哈希。 1. 未授权 SQL 注入（致命）`faq.php?zyhome=chatroom&zyact=refresh&lastid=` 和`getnum` 里的`$lastid` 直接拼接进 SQL： PHP 1`{eval $q2 = $db->query("SELECT * FROM zy_chatroom WHERE pid > " . $lastid ...);}` DZ 的转义只防引号，挡不住数字型注入。攻击者构造`lastid=99999999 UNION ALL SELECT 0,uid,username,password,0 FROM cdb_members -- -` ，返回的行会被 当成聊天消息直接渲染在聊天框里 ——用户名、密码哈希、邮箱想看什么看什么，游客就能执行。 2. 服务端无登录校验 发帖接口`zyact=post` 只看前端 JS 隐藏了输入框，服务端没检查`$discuz_uid` ，游客直接 POST 就能灌水（uid=0"游客"身份）。 3. 无 formhash / CSRF 防护 ——别的网站挂个表单就能让你论坛的登录用户被迫发聊天内容。 4. 工程问题一堆 ：建表没有`$tablepre` 前缀；不用 AUTO_INCREMENT 而是手动`$pid+1` （并发下主键冲突）；消息无长度限制、无频率限制；`dgmdate()` 重复加时区偏移（时间显示快 8 小时）。 5. 作者标签确认 ：`zy_chatroom` 表、`zyhome` 参数、`zhangyuchat` 变量、把全部选择器塞进数组再用`zhangyuchat[47]` 索引调用——这套数组索引写法唯一作用就是让代码不可读，方便藏东西。这次没发现外联域名和 cookie 外发，但上面的注入比外联后门更直接。 6. 切换模板卡死 ：JS 强依赖 colors 模板独有的`$jq` （jQuery 别名）、`#header` 容器，以及 colors 的 faq 模板里才有`{subtemplate aa_zyhome_chatroom}` ；切模板后请求失败，而失败回调`zylt_firstload()` 零延迟无限重试 ，AJAX 风暴直接把页面和服务器一起拖死。 ## 重要提醒 如果它曾经在你的论坛线上运行过，数据库等于对外敞开过 。建议：改一次管理员密码，检查后台有没有多出不认识的管理员/带权限账号。 这套代码一行都不值得留！！！
2020-4-9
410484 阅读
32 评论
icode
2018-9-7
置顶
jQuery安装
286 后台新建一个模板命名为jquery 将附件解压，复制文本全部内容到jquery模板提交。 在论坛其他头部信息加入代码 <script type="text/javascript" src="templates/default/jquery.htm"></script> 即可
2018-9-7
1025793 阅读
3 评论
icode
板块主题
2024-4-5
老古董计算机仿mac换新颜
1、使用Ventoy安装系统，绕过不支持TMP2.0无法安装Windows11。 2、安装主题破解工具UltraUXThemePatcher_4.4.1 3、安装macOSX Win11主题及系统图标 4、安装MyDockFinder1.9.9.7 最终效果： 984 985 986
2024-4-5
110124 阅读
0 评论
icode
2018-9-24
祝大家中秋节快乐，回帖奖励100威望。
回复此贴有一定概率的奖励威望哦
2018-9-24
236343 阅读
41 评论
icode
2020-4-9
征集个人名片进入爱秀新名人堂
感谢朋友们一如既往的支持！现征集个人名片进入新爱秀名人堂，跟帖发布可以充分代表自己的个人名片，签名或靓图。整体进入爱秀新名人堂。 效果预览
2020-4-9
109513 阅读
3 评论
icode
2018-8-30
申请友情链接专用帖
目前仅接受文字友链 申请格式： 论坛名称：XXX 论坛网址：XXX
2018-8-30
100621 阅读
7 评论
icode
2021-6-12
测试一下发帖自动生成推荐帖子
这里是帖子正文
2021-6-12
76299 阅读
0 评论
icode
2021-6-12
测试帖子推荐
这是帖子正文
2021-6-12
77922 阅读
0 评论
icode
2018-9-26
征集发帖际遇语句
征集有趣健康的发帖际遇语句 比如： 发帖时在路边被老奶奶碰瓷，花掉 金钱 在社区闲逛的 瞥见了一抹金光，一个健步冲上去踩住，待路人走过若无其事地捡起了 金钱 等等。。。
2018-9-26
123831 阅读
11 评论
icode
2018-9-25
测试发帖艾特按钮
無名 麻城生活网 波斯佳人 老闆 Yenifer
2018-9-25
179083 阅读
24 评论
icode
2020-3-20
测试幻彩文字
人生就像一杯茶，不会苦一辈子，但总会苦一阵子，没有开始的苦，就没有后来的甜。苦苦甜甜就像一部交响曲，汇成我们的一生。拒绝“苦”就等于关上了“甜”的门，须知，攀登得越高，走过的荆棘就越多。既如此，与其忧伤地接受，不如快乐地迎接。两种姿态，两种人生，自己的人生自己做主。 人生就像一杯茶，不会苦一辈子，但总会苦一阵子，没有开始的苦，就没有后来的甜。苦苦甜甜就像一部交响曲，汇成我们的一生。拒绝“苦”就等于关上了“甜”的门，须知，攀登得越高，走过的荆棘就越多。既如此，与其忧伤地接受，不如快乐地迎接。两种姿态，两种人生，自己的人生自己做主。
2020-3-20
109575 阅读
3 评论
icode
2020-7-29
仿火狼首页N格更新
见首页，过几天放出 1、最新图片去掉标题。 2、主题选项卡自动轮播。 3、一些细节的更新。
2020-7-29
57598 阅读
2 评论
icode
2020-5-5
贵站小黑屋代码？
能否告诉我下？我站的违规内容只有AD，还没有贵站的理由……帮一下呗~
2020-5-5
78413 阅读
0 评论
东窗凝月
2020-4-14
测试
:)
2020-4-14
26402 阅读
2 评论
icode
2020-4-15
测试匿名发帖随机更换头像
刷新页面随机更换头像
2020-4-15
19013 阅读
3 评论
匿名
上一页
1
2
3
…
5
下一页
/ 5 页
首页
板块
登录
新浪微博
QQ空间
人人网
腾讯微博
Facebook
Google+
Plurk
Twitter
Line