v2.5.1

2022-02-17 17:46:22 +01:00 · 2022-02-17 17:46:22 +01:00 · 4ffba77452
parent 3fbb69957d
commit 4ffba77452
5 changed files with 27 additions and 26 deletions
--- a/README.md
+++ b/README.md
@ -106,6 +106,7 @@ $HTTP["url"] =~ "^/(i|public)/" {
 * 2022-2-13 v2.5.1
 - 异步执行鉴黄
 - 取消检测imagick扩展
+- 修复一处暴露路径bug
 - 修复可能导致检测弹窗弹出失败

 * 2022-2-7 v2.5.0
--- a/admin/admin.inc.php
+++ b/admin/admin.inc.php
@ -23,7 +23,7 @@ if (!is_who_login('admin')) {
 }

 // 修改config配置
-if (isset($_POST['form'])) {
+if (isset($_POST['update'])) {
    $postArr = $_POST;
    $new_config = array_replace($config, $postArr);
    $config_file = APP_ROOT . '/config/config.php';
@ -208,7 +208,7 @@ if (isset($_GET['reimg'])) {
                        </div>
                    </div>
                    <div class="form-group">
-                        <input type="hidden" class="form-control" name="form" value="<?php echo date("Y-m-d H:i:s"); ?>" placeholder="隐藏的保存">
+                        <input type="hidden" class="form-control" name="update" value="<?php echo date("Y-m-d H:i:s"); ?>" placeholder="隐藏的保存">
                    </div>
                    <button type="submit" class="btn btn-primary">保存</button>
                </form>
@ -375,7 +375,7 @@ if (isset($_GET['reimg'])) {
                        <input type="range" class="form-control" name="compress_ratio" value="<?php echo $config['compress_ratio']; ?>" min="1" max="100" step="1" onchange="document.getElementById('compress_ratio').innerHTML=value">
                    </div>
                    <div class="form-group">
-                        <input type="hidden" class="form-control" name="form" value="<?php echo date("Y-m-d H:i:s"); ?>" placeholder="隐藏的保存">
+                        <input type="hidden" class="form-control" name="update" value="<?php echo date("Y-m-d H:i:s"); ?>" placeholder="隐藏的保存">
                    </div>
                    <button type="submit" class="btn btn-primary">保存</button>
                </form>
@ -405,7 +405,7 @@ if (isset($_GET['reimg'])) {
                        <textarea class="form-control" rows="5" name="ad_bot_info"><?php echo $config['ad_bot_info']; ?></textarea>
                    </div>
                    <div class="form-group">
-                        <input type="hidden" class="form-control" name="form" value="<?php echo date("Y-m-d H:i:s"); ?>" placeholder="隐藏的保存">
+                        <input type="hidden" class="form-control" name="update" value="<?php echo date("Y-m-d H:i:s"); ?>" placeholder="隐藏的保存">
                    </div>
                    <button type="submit" class="btn btn-primary">保存</button>
                </form>
@ -459,7 +459,7 @@ if (isset($_GET['reimg'])) {
                    <div class="form-group">
                        <label for="TinyPng" data-toggle="tooltip" title="申请网址"><a href="https://tinypng.com/developers" target="_blank">TinyPng Key &nbsp;</a></label>
                        <input type="text" class="form-control input-sm" id="TinyPng" name="TinyPng_key" value="<?php echo $config['TinyPng_key']; ?>" placeholder="填入压缩图片Key" data-toggle="tooltip" title="开启后会受服务器到https://tinypng.com 速度影响,国内不建议开启!" onkeyup="this.value=this.value.replace(/\s/g,'')">
-                        <input type="hidden" class="form-control" name="form" value="<?php echo date("Y-m-d H:i:s"); ?>" placeholder="隐藏的保存">
+                        <input type="hidden" class="form-control" name="update" value="<?php echo date("Y-m-d H:i:s"); ?>" placeholder="隐藏的保存">
                    </div>
                    <div class="form-group">
                        <label for="moderatecontent_key" data-toggle="tooltip" title="申请网址"><a href="https://client.moderatecontent.com" target="_blank">Moderate Key</a></label>
@ -469,7 +469,7 @@ if (isset($_GET['reimg'])) {
                        <label for="nsfwjs_url" data-toggle="tooltip" title="nsfwjs github"><a href="https://github.com/infinitered/nsfwjs" target="_blank">nsfwjs url &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</a></label>
                        <input type="url" class="form-control input-sm" name="nsfwjs_url" id="nsfwjs_url" value="<?php echo $config['nsfwjs_url']; ?>" placeholder="http://ip:3307/nsfw?url=" data-toggle="tooltip" title="自行搭建nsfwjs服务的网站地址" onkeyup="this.value=this.value.replace(/\s/g,'')">
                    </div>
-                    <input type="hidden" class="form-control" name="form" value="<?php echo date("Y-m-d H:i:s"); ?>" placeholder="隐藏的保存">
+                    <input type="hidden" class="form-control" name="update" value="<?php echo date("Y-m-d H:i:s"); ?>" placeholder="隐藏的保存">
                    <button type="submit" class="btn btn-mini btn-primary">保存</button>
                </form>
                <b data-toggle="tooltip" title="新Token需按要求填入/config/api_key.php才生效">生成新的API upload Token</b>
@ -546,7 +546,7 @@ if (isset($_GET['reimg'])) {
                        </div>
                    </div>
                    <div class="form-group">
-                        <input type="hidden" class="form-control" name="form" value="<?php echo date("Y-m-d H:i:s"); ?>" placeholder="隐藏的保存">
+                        <input type="hidden" class="form-control" name="update" value="<?php echo date("Y-m-d H:i:s"); ?>" placeholder="隐藏的保存">
                    </div>
                    <button type="submit" class="btn btn-primary">保存</button>
                </form>
@ -726,7 +726,7 @@ if (isset($_GET['reimg'])) {
                        <input type="range" class="form-control" name="listNumber" value="<?php echo $config['listNumber']; ?>" min="10" max="100" step="10" onchange="document.getElementById('listNumber').innerHTML=value" data-toggle="tooltip" title="可在网址后填写参数实时更改预览数量 如: https://png.cm/application/list.php?num=3">
                    </div>
                    <div class="form-group">
-                        <input type="hidden" class="form-control" name="form" value="<?php echo date("Y-m-d H:i:s"); ?>" placeholder="隐藏的保存">
+                        <input type="hidden" class="form-control" name="update" value="<?php echo date("Y-m-d H:i:s"); ?>" placeholder="隐藏的保存">
                    </div>
                    <button type="submit" class="btn btn-primary">保存</button>
                </form>
@ -746,7 +746,7 @@ if (isset($_GET['reimg'])) {
                        </div>
                    </div>
                    <div class="form-group">
-                        <input type="hidden" class="form-control" name="form" value="<?php echo date("Y-m-d H:i:s"); ?>" placeholder="隐藏的保存">
+                        <input type="hidden" class="form-control" name="update" value="<?php echo date("Y-m-d H:i:s"); ?>" placeholder="隐藏的保存">
                    </div>
                    <button type="submit" class="btn btn btn-primary">更改管理 账号/密码</button>
                    <div class="alert alert-primary with-icon col-xs-8" style="margin-top: 5px;">
--- a/application/footer.php
+++ b/application/footer.php
@ -1,4 +1,6 @@
-<?php if ($config['ad_bot']) echo $config['ad_bot_info']; // 底部广告 
+<?php
+defined('APP_ROOT') ?: exit; // 禁止访问
+if ($config['ad_bot']) echo $config['ad_bot_info']; // 底部广告 
 ?>
 <footer class="text-muted small col-md-12" style="text-align: center;">
  <hr>
--- a/application/header.php
+++ b/application/header.php
@ -1,6 +1,4 @@
-<?php
-require_once __DIR__ . '/function.php';
-?>
+<?php require_once __DIR__ . '/function.php'; ?>
 <!DOCTYPE html>
 <html lang="zh-cn">

--- a/config/config.php
+++ b/config/config.php
@ -41,7 +41,7 @@ $config=Array
 	'imgRatio_preserve_headers'=>1,
 	'static_cdn'=>0,
 	'theme'=>'default',
-	'static_cdn_url'=>'https://cdn.jsdelivr.net/gh/icret/EasyImages2.0@2.5.0',
+	'static_cdn_url'=>'https://cdn.jsdelivr.net/gh/icret/EasyImages2.0@2.5.1',
 	'TinyPng_key'=>'',
 	'checkImg'=>0,
 	'checkImg_value'=>50,
@ -82,5 +82,5 @@ var _hmt = _hmt || [];
 	'check_ip_model'=>0,
 	'check_ip_list'=>'',
 	'version'=>'2.5.1',
-	'form'=>'2022-02-17 23:53:12'
+	'update'=>'2022-02-18 00:23:07'
 	);