易优cms二次模版验证问题答案忘记了, 二次模版验证问题修改不了该改哪块代码

wdzsjl 1个月前 (10-10) 阅读数 13 #数据库

不用着急,为大伙整了个易优修改重置后台密码小工具
方便大家忘记后台登陆密码时,快速重置

将下面的文件保存php文件,上传到网站根目录,浏览器访问 http://你的网址/XX.php ,按照操作执行就可以。

修改完之后,请立即删除该文件,免得被其他人修改。

<!DOCTYPE html> <html> <head>     <meta http-equiv="content-type" content="text/html; charset=UTF-8">     <title>密码修改工具 - 易优CMS</title> </head>  <body> <?php     error_reporting(E_ALL & ~E_NOTICE);     header('Content-Type: text/html; charset=UTF-8');     // 数据绝对路径     defined('DATA_PATH') or define('DATA_PATH', __DIR__ . '/data/');     // 运行缓存     defined('RUNTIME_PATH') or define('RUNTIME_PATH', DATA_PATH . 'runtime/');     // 安装程序定义     defined('DEFAULT_INSTALL_DATE') or define('DEFAULT_INSTALL_DATE',1525756440);     // 序列号     defined('DEFAULT_SERIALNUMBER') or define('DEFAULT_SERIALNUMBER','20180508131400oCWIoa');     // 定义应用目录     defined('APP_PATH') or define('APP_PATH', __DIR__ . '/application/');     defined('EXT') or define('EXT', '.php');     defined('DS') or define('DS', DIRECTORY_SEPARATOR);     defined('THINK_PATH') or define('THINK_PATH', __DIR__ . DS);     defined('CACHE_PATH') or define('CACHE_PATH', RUNTIME_PATH . 'cache' . DS);     defined('ROOT_PATH') or define('ROOT_PATH', dirname(realpath(APP_PATH)) . DS);     // 插件目录     defined('WEAPP_DIR_NAME') or define('WEAPP_DIR_NAME', 'weapp');     defined('WEAPP_PATH') or define('WEAPP_PATH', ROOT_PATH . WEAPP_DIR_NAME . DS);      $version = getCmsVersion(); // 系统版本号     $database = include_once "application/database.php";     $dbHost = trim($database['hostname']);     $dbport = $database['hostport'] ? $database['hostport'] : '3306';     $dbName = trim($database['database']);     $dbUser = trim($database['username']);     $dbPwd = trim($database['password']);     $dbPrefix = empty($database['prefix']) ? 'ey_' : trim($database['prefix']);     $charset = trim($database['charset']);      $conn = @mysqli_connect($dbHost, $dbUser, $dbPwd,$dbName,$dbport);     if (mysqli_connect_error()){         $msg = "连接数据库失败!".mysqli_connect_error($conn);         tips($msg);     }     mysqli_set_charset($conn, $charset);      if ($_SERVER['REQUEST_METHOD'] == 'POST') {          $type = $_POST['type'];         if (1 == $type) { // 修改后台登录密码             $user_name = $_POST['user_name'];             $password = $_POST['password'];             if (empty($password)) {                 tips("新密码不能为空!");             }              $config = include_once "application/config.php";             $auth_code = $config['AUTH_CODE'];             $sql = "SELECT value FROM `{$dbPrefix}config` WHERE name = 'system_auth_code' AND inc_type='system' ORDER BY id ASC LIMIT 1";             $ret = mysqli_query($conn,$sql);             while($row = mysqli_fetch_array($ret))             {                 if (!empty($row['value'])) {                     $auth_code = $row['value'];                 }             }              if (version_compare($version,'v1.5.7','<')) {                 $password = md5($auth_code.$password);             } else {                 $entry = pwd_encry_type('bcrypt');                 if ('bcrypt' == $entry) {                     $main_lang = 'cn';                     $sql = "SELECT mark FROM `{$dbPrefix}language` ORDER BY id ASC LIMIT 1";                     $ret = mysqli_query($conn,$sql);                     while($row = mysqli_fetch_array($ret))                     {                         if (!empty($row['mark'])) {                             $main_lang = $row['mark'];                         }                     }                      $crypt_auth_code = '';                     $sql = "SELECT value FROM `{$dbPrefix}config` WHERE name = 'system_crypt_auth_code' AND inc_type='system' AND lang='{$main_lang}' LIMIT 1";                     $ret = mysqli_query($conn,$sql);                     while($row = mysqli_fetch_array($ret))                     {                         if (!empty($row['value'])) {                             $crypt_auth_code = $row['value'];                         }                     }                     if (!empty($crypt_auth_code)) {                         $password = crypt($password, $crypt_auth_code);                     } else {                         $password = md5($auth_code.$password);                     }                 } else {                     $password = md5($auth_code.$password);                 }             }              $sql = "UPDATE `{$dbPrefix}admin` SET `password`='{$password}' WHERE `user_name`='{$user_name}'";             $ret = mysqli_query($conn,$sql);             if ($ret) {                 $msg = "修改成功";             } else {                 $msg = "修改失败,请官方客服!";             }              tips($msg);         }         else if (2 == $type) // 修改插件安装密码         {             $password = $_POST['password'];             if (empty($password)) {                 tips("新密码不能为空!");             }              $config = include_once "application/config.php";             $auth_code = $config['AUTH_CODE'];             $sql = "SELECT value FROM `{$dbPrefix}config` WHERE name='system_auth_code' AND inc_type='system' ORDER BY id ASC LIMIT 1";             $ret = mysqli_query($conn,$sql);             while($row = mysqli_fetch_array($ret))             {                 if (!empty($row['value'])) {                     $auth_code = $row['value'];                 }             }             $password = md5($auth_code.$password);              $t = time();             $sql = "UPDATE `{$dbPrefix}config` SET `value`='{$password}', `update_time`='{$t}' WHERE `name`='weapp_installpwd' AND `inc_type`='weapp'";             $ret = mysqli_query($conn,$sql);             if ($ret) {                 delFile('./data/runtime/cache', true);                 $msg = "修改成功";             } else {                 $msg = "修改失败,请官方客服!";             }              tips($msg);         }         else if (3 == $type) // 修改插件问题与答案         {             $ask = $_POST['ask'];             if (empty($ask)) {                 tips("新问题不能为空!");             }              $answer = $_POST['answer'];             if (empty($answer)) {                 tips("新答案不能为空!");             }              $config = include_once "application/config.php";             $auth_code = $config['AUTH_CODE'];             $sql = "SELECT value FROM `{$dbPrefix}config` WHERE name='system_auth_code' AND inc_type='system' ORDER BY id ASC LIMIT 1";             $ret = mysqli_query($conn,$sql);             while($row = mysqli_fetch_array($ret))             {                 if (!empty($row['value'])) {                     $auth_code = $row['value'];                 }             }             $answer = md5($auth_code.$answer);              $t = time();             $sql = "UPDATE `{$dbPrefix}setting` SET `value`='{$ask}', `update_time`='{$t}' WHERE `name`='weapp_install_ask' AND `inc_type`='weapp'";             $sql2 = "UPDATE `{$dbPrefix}setting` SET `value`='{$answer}', `update_time`='{$t}' WHERE `name`='weapp_install_answer' AND `inc_type`='weapp'";             if (@mysqli_query($conn,$sql) && @mysqli_query($conn,$sql2)) {                 delFile('./data/runtime/cache', true);                 $msg = "修改成功";             } else {                 $msg = "修改失败,请官方客服!";             }              tips($msg);         }         else if (4 == $type) // 修改二次安全验证的答案         {             $answer = trim($_POST['answer']);             if (empty($answer)) {                 tips("新答案不能为空!");             }              $config = include_once "application/config.php";             $auth_code = $config['AUTH_CODE'];             $sql = "SELECT value FROM `{$dbPrefix}config` WHERE name='system_auth_code' AND inc_type='system' ORDER BY id ASC LIMIT 1";             $ret = mysqli_query($conn,$sql);             while($row = mysqli_fetch_array($ret))             {                 if (!empty($row['value'])) {                     $auth_code = $row['value'];                 }             }              $entry = pwd_encry_type('bcrypt');             if ('bcrypt' == $entry) {                 $crypt_auth_code = '';                 $sql = "SELECT value FROM `{$dbPrefix}config` WHERE name = 'system_crypt_auth_code' AND inc_type='system' ORDER BY id ASC LIMIT 1";                 $ret = mysqli_query($conn,$sql);                 while($row = mysqli_fetch_array($ret))                 {                     if (!empty($row['value'])) {                         $crypt_auth_code = $row['value'];                     }                 }                 if (!empty($crypt_auth_code)) {                     $answer = crypt($answer, $crypt_auth_code);                 } else {                     $answer = md5($auth_code.$answer);                 }             } else {                 $answer = md5($auth_code.$answer);             }              $t = time();             $sql1 = "UPDATE `{$dbPrefix}setting` SET `value`='{$answer}', `update_time`='{$t}' WHERE `name`='security_answer' AND `inc_type`='security'";             if (@mysqli_query($conn,$sql1)) {                 delFile('./data/runtime/cache', true);                 $msg = "修改成功";             } else {                 $msg = "修改失败,请官方客服!";             }              tips($msg);         }         else if (5 == $type) // 修改后台登录锁定时间         {             $web_login_errexpire = intval($_POST['web_login_errexpire']);             $t = time();             $sql1 = "UPDATE `{$dbPrefix}config` SET `value`='{$web_login_errexpire}', `update_time`='{$t}' WHERE `name`='web_login_errexpire' AND `inc_type`='web'";             if (@mysqli_query($conn,$sql1)) {                 delFile('./data/runtime/cache', true);                 $msg = "修改成功";             } else {                 $msg = "修改失败,请官方客服!";             }              tips($msg);         }         else if (6 == $type) // 解除后台强制扫码登录         {             $data = [];             $sql = "SELECT data FROM `{$dbPrefix}weapp` WHERE code = 'EyouGzhLogin' LIMIT 1";             $ret = mysqli_query($conn,$sql);             while($row = mysqli_fetch_array($ret))             {                 if (!empty($row['data'])) {                     $data = unserialize($row['data']);                 }                 break;             }             $data['gzh']['force'] = 0;             $serdata = serialize($data);             $sql1 = "UPDATE `{$dbPrefix}weapp` SET `data`='{$serdata}' WHERE `code`='EyouGzhLogin'";             if (@mysqli_query($conn,$sql1)) {                 delFile('./data/runtime/cache', true);                 $msg = "解除成功";             } else {                 $msg = "解除失败,请官方客服!";             }              tips($msg);         }      } else {         /*管理员列表*/         $sql = "SELECT * FROM `{$dbPrefix}admin`";         $ret = mysqli_query($conn,$sql);         $select_html = "";         while($row = mysqli_fetch_array($ret))         {             $select_html .= "<option value='{$row['user_name']}'>{$row['user_name']}</option>";         }         /*end*/          /*插件问题列表*/         $weapp_askanswer_list = [];         $sql = "SELECT value FROM `{$dbPrefix}setting` WHERE name='weapp_askanswer_list' AND inc_type='weapp' ORDER BY id ASC LIMIT 1";         $ret = mysqli_query($conn,$sql);         while($row = mysqli_fetch_array($ret))         {             if (!empty($row['value'])) {                 $weapp_askanswer_list = json_decode($row['value'], true);             }         }         $ask_select_html = "";         foreach ($weapp_askanswer_list as $key => $value) {             $ask_select_html .= "<option value='{$key}'>{$value}</option>";         }         /*end*/          /*二次安全验证的问题名称*/         $security_ask = '';         $sql = "SELECT value FROM `{$dbPrefix}setting` WHERE name = 'security_ask' AND inc_type='security' ORDER BY id ASC LIMIT 1";         $ret = mysqli_query($conn,$sql);         while($row = mysqli_fetch_array($ret))         {             if (!empty($row['value'])) {                 $security_ask = $row['value'];             }         }         /*end*/     }     mysqli_close($conn);      function tips($msg)     {         die('<script type="text/javascript">alert("'.$msg.'");window.location.href = "setpwd.php";</script>');     }      /**      * 获取CMS的版本号      * @return [type] [description]      */     function getCmsVersion()     {         $version = 'v1.0.0';         $version_txt_path = './data/conf/version.txt';         if(file_exists($version_txt_path)) {             $fp = fopen($version_txt_path, 'r');             $content = fread($fp, filesize($version_txt_path));             fclose($fp);             $version = $content ? $content : $version;         }         return $version;     }      /**      * 获取密码加密方式      * @param  string $encry_pwd       * @return [type]            [description]      */     function pwd_encry_type($encry_pwd = '') {         $entry = 'md5';         if (32 != strlen($encry_pwd)) {             if (defined('CRYPT_BLOWFISH') && CRYPT_BLOWFISH == 1) {                 $entry = 'bcrypt';             }         }          return $entry;     }      /**      * 递归删除文件夹      *      * @param string $path 目录路径      * @param boolean $delDir 是否删除空目录      * @return boolean      */     function delFile($path, $delDir = FALSE) {         if(!is_dir($path))             return FALSE;                $handle = @opendir($path);         if ($handle) {             while (false !== ( $item = readdir($handle) )) {                 if ($item != "." && $item != "..")                     is_dir("$path/$item") ? delFile("$path/$item", $delDir) : @unlink("$path/$item");             }             closedir($handle);             if ($delDir) {                 return @rmdir($path);             }         }else {             if (file_exists($path)) {                 return @unlink($path);             } else {                 return FALSE;             }         }     } ?> <style type="text/css"> *, ::after, ::before {     box-sizing: border-box; } .logo {     width: 100%;     text-align: center;     margin: 30px 0 10px 0; } .logo img {     text-align: center; } .info {     margin: 0 20px;     padding: 10px 20px;     font-size: 14px;     margin-top: 15px;     background: #f7f7f7;     text-align: center; } .border {     width: 100%;     clear: both;     border-bottom: 1px dashed #dedede; } .box {     width: 400px;     margin: 40px auto; } .name {     font-size: 24px;     text-align: center;     margin-bottom: 20px; } .fexl {     display: flex;     align-items: center;     margin-bottom: 20px; } .fexl .title {     width: 75px;     text-align: right;     margin-right: 10px;     font-size: 15px;     color: #666; } .fexl .select {     width: 308px;     display: inline-block;     position: relative;     vertical-align: middle;     padding: 0;     overflow: hidden;     cursor: pointer;     color: #555;     background-color: #fff;     border: 1px solid #DCDFE6;     text-shadow: none;     border-radius: 4px;     transition: box-shadow 0.25s ease;     z-index: 2; } .fexl .select select {     padding: 8px 10px;     font-size: 15px;     color: #606266;     width: 100%;     border: none;     background: transparent;     background-image: none;     -webkit-appearance: none;     -moz-appearance: none;     cursor: pointer; } .fexl .input input {     width: 308px;     height: 35px;     display: inline-block;     position: relative;     vertical-align: middle;     padding: 0 10px;     overflow: hidden;     font-size: 15px;     color: #555;     background-color: #fff;     border: 1px solid #DCDFE6;     text-shadow: none;     border-radius: 4px;     transition: box-shadow 0.25s ease;     z-index: 2; } .fexl .input .time {     width: 292px;  } .submit {     margin-top: 30px; } .submit input {     display: block;     color: #fff;     text-align: center;     margin: 0 auto;     padding: 5px 10px;     font-size: 16px;     background: #ff6700;     border: 1px solid #ff6700;     border-radius: 4px;     outline: 0;     cursor: pointer; } .kefu {     position: fixed;     right: 10px;     bottom: 120px;     z-index: 100;     width: 150px;     height: 205px;     background: #fff; } .kefu .wenben {     padding: 0 16px; } .kefu .wenben p {     margin: 0 ;     text-align: center;     color: #cd8941; } </style> <div class="logo">     <img src="https://www.eyoucms.com/uploads/allimg/20220117/5-22011F92315649.png"> </div>  <br/> <div class="info">     <font style="color: red; font-size: 14px;">注意:修改完之后,建议删掉该文件,免得被其他人修改入侵!</font> </div> <div class="box"> <div class="name">后台登录密码重置</div> <form action="setpwd.php" method="post">     <div class="fexl">         <div class="title">用户名:</div>         <div class="select">             <select name="user_name">                 <?php echo $select_html;?>             </select>         </div>     </div>     <div class="fexl">         <div class="title">新密码:</div>         <div class="input">             <input type="password" name="password" value="">         </div>     </div>     <input type="hidden" name="type" value="1">     <div class="submit">         <input type="submit" name="submit" value="确认修改">     </div>      </form> </div> <?php if (version_compare($version,'v1.4.7','<')) { ?>     <?php if (version_compare($version,'v1.4.2','>')) { ?>     <div class="border"></div>     <div class="box">     <div class="name">插件问题与答案重置</div>     <form action="setpwd.php" method="post">         <div class="fexl">             <div class="title">新问题:</div>             <div class="select">                 <select name="ask">                     <?php echo $ask_select_html;?>                 </select>             </div>         </div>         <div class="fexl">             <div class="title">新答案:</div>             <div class="input">                 <input type="text" name="answer" value="">             </div>         </div>         <input type="hidden" name="type" value="3">         <div class="submit">             <input type="submit" name="submit" value="确认修改">         </div>     </form>     </div>     <?php } else { ?>     <div class="border"></div>     <div class="box">     <div class="name">插件安装密码重置</div>     <form action="setpwd.php" method="post">         <div class="fexl">             <div class="title">新密码:</div>             <div class="input">                 <input type="password" name="password" value="">             </div>         </div>         <input type="hidden" name="type" value="2">         <div class="submit">             <input type="submit" name="submit" value="确认修改">         </div>     </form>     </div>     <?php } ?> <?php } else if (version_compare($version,'v1.5.6','>')) { ?>     <div class="border"></div>     <div class="box">     <div class="name">密保问题重置</div>     <form action="setpwd.php" method="post">         <div class="fexl">             <div class="title">问题名称:</div>             <div class="input">                 <?php echo $security_ask;?>             </div>         </div>         <div class="fexl">             <div class="title">新的答案:</div>             <div class="input">                 <input type="text" name="answer" value="">             </div>         </div>         <input type="hidden" name="type" value="4">         <div class="submit">             <input type="submit" name="submit" value="确认修改">         </div>     </form>     </div> <?php } ?>  <?php if (version_compare($version,'v1.5.6','>')) { ?>     <div class="border"></div>     <div class="box">     <div class="name">后台登录锁定</div>     <form action="setpwd.php" method="post">         <div class="fexl">             <div class="title">锁定时间:</div>             <div class="input">                 <input class="time" type="text" name="web_login_errexpire" value="" onkeyup="this.value=this.value.replace(/[^\d]/g,'');" onpaste="this.value=this.value.replace(/[^\d]/g,'')">&nbsp;<span style="color: #666;">秒</span>             </div>         </div>         <input type="hidden" name="type" value="5">         <div class="submit">             <input type="submit" name="submit" value="确认修改">         </div>     </form>     </div> <?php } ?>  <?php if (is_dir('./weapp/EyouGzhLogin/')) { ?>     <div class="border"></div>     <div class="box">     <div class="name">解除后台强制扫码登录</div>     <form action="setpwd.php" method="post">         <input type="hidden" name="type" value="6">         <div class="submit">             <input type="submit" name="submit" value="确认解除">         </div>     </form>     </div> <?php } ?> <div class="kefu">     <img src="https://www.eyoucms.com/skin/images/eywx.jpg" style="width: 150px;">     <div class="wenben">         <p>扫码加微信客服</p>         <p>进微信交流群</p>     </div> </div> </body> </html>

 

wx.jpg ywfw.jpg
热门