Explorar el Código

将delete_confession接口从admin接口中独立

UnknownO hace 3 años
padre
commit
6945100486
Se han modificado 3 ficheros con 36 adiciones y 46 borrados
  1. 13 44
      api/admin.php
  2. 22 0
      api/delete_confession.php
  3. 1 2
      pages/admin/confession.php

+ 13 - 44
api/admin.php

@@ -3,48 +3,17 @@ header('content-type:application/json');
 session_start();
 include('../config.php');
 include('../includes/function.php');
-switch ($_POST['mode']) {
-    case "login":
-        $timestamp = $_POST['timestamp'];
-        if ($_SESSION['vcode'] != md5($_POST['vcode'] . $VERIFICATION_KEY) && $IMAGE_VERIFICATION) {
-            exit('{"code":-1,"msg":"抱歉,人机验证失败","result":""}');
-        }
-        if ($timestamp - time() > 60 || time() - $timestamp > 60) {
-            exit('{"code":-2,"msg":"请求失败!请检查您的系统时间!"}');
-        }
-        if ($_POST['username'] == $ADMIN_USER && $_POST['password'] == $ADMIN_PASS) {
-            setcookie("loveway_token", md5($ADMIN_USER . $ADMIN_PASS . 'KAGAMINE WORLD!' . date('Y-m-d', time())), time() + 3600, '/');
-            exit('{"code":1,"msg":"登录成功!"}');
-        } else {
-            exit('{"code":-1,"msg":"登录失败!用户名或密码错误!"}');
-        }
-    case "updateConfig":
-        if ($_COOKIE['loveway_token'] == md5($ADMIN_USER . $ADMIN_PASS . 'KAGAMINE WORLD!' . date('Y-m-d', time()))) {
-            $pdo = pdoConnect();
-            $stmt = $pdo->prepare("UPDATE `loveway_config` SET `value`=? WHERE (`name`= ? )");
-            $stmt->bindValue(1, $_POST['value']);
-            $stmt->bindValue(2, $_POST['name']);
-            if ($stmt->execute()) {
-                exit('{"code":1,"msg":"操作成功!"}');
-            } else {
-                exit('{"code":-3,"msg":"操作失败![UPDATE DATABASE]失败!"}');
-            }
-        } else {
-            exit('{"code":-2,"msg":"校验登录token失败!"}');
-        }
-    case "delete":
-        if ($_COOKIE['loveway_token'] == md5($ADMIN_USER . $ADMIN_PASS . 'KAGAMINE WORLD!' . date('Y-m-d', time()))) {
-            $pdo = pdoConnect();
-            $stmt = $pdo->prepare("DELETE FROM `loveway_data` WHERE `id` = ? ");
-            $stmt->bindValue(1, $_POST['id']);
-            if ($stmt->execute()) {
-                exit('{"code":1,"msg":"删除成功!"}');
-            } else {
-                exit('{"code":-3,"msg":"操作失败![DELETE DATABASE]失败!"}');
-            }
-        } else {
-            exit('{"code":-2,"msg":"校验登录token失败!"}');
-        }
-    default:
-        exit('{"code":-5,"msg":"缺失参数!"}');
+
+$timestamp = $_POST['timestamp'];
+if ($_SESSION['vcode'] != md5($_POST['vcode'] . $VERIFICATION_KEY) && $IMAGE_VERIFICATION) {
+    exit('{"code":-1,"msg":"抱歉,人机验证失败","result":""}');
+}
+if ($timestamp - time() > 60 || time() - $timestamp > 60) {
+    exit('{"code":-2,"msg":"请求失败!请检查您的系统时间!"}');
+}
+if ($_POST['username'] == $ADMIN_USER && $_POST['password'] == $ADMIN_PASS) {
+    setcookie("loveway_token", md5($ADMIN_USER . $ADMIN_PASS . 'KAGAMINE WORLD!' . date('Y-m-d', time())), time() + 3600, '/');
+    exit('{"code":1,"msg":"登录成功!"}');
+} else {
+    exit('{"code":-1,"msg":"登录失败!用户名或密码错误!"}');
 }

+ 22 - 0
api/delete_confession.php

@@ -0,0 +1,22 @@
+<?php
+header('content-type:application/json');
+session_start();
+include('../config.php');
+include('../includes/function.php');
+
+if ($_COOKIE['loveway_token'] != md5($ADMIN_USER . $ADMIN_PASS . 'KAGAMINE WORLD!' . date('Y-m-d', time()))) {
+    exit('{"code":-1,"msg":"鉴权失败!"}');
+}
+
+if ($ADMIN_PASS == "kagamine1234") {
+    exit('{"code":-2,"msg":"弱密码禁止操作!请修改密码后登录!"}');
+}
+
+$pdo = pdoConnect();
+$stmt = $pdo->prepare("DELETE FROM `loveway_data` WHERE `id` = ? ");
+$stmt->bindValue(1, $_POST['id']);
+if ($stmt->execute()) {
+    exit('{"code":1,"msg":"删除成功!"}');
+} else {
+    exit('{"code":-3,"msg":"操作失败![DELETE DATABASE]失败!"}');
+}

+ 1 - 2
pages/admin/confession.php

@@ -71,8 +71,7 @@ if ($templateMode) {
 
 <script>
     function deleteF(id) {
-        requestApi("admin", {
-            mode: "delete",
+        requestApi("delete_confession", {
             id: id
         }, false, true, true, "")
     }