/api.php? op,api.php

/**

* index.php API 入口

*

* @copyright(C) 2005-2010 PHPCMS

* @licensehttp://www.phpcms.cn/license/

* @lastmodify2010-7-26

*/

define('PHPCMS_PATH', dirname(__FILE__).DIRECTORY_SEPARATOR);

include PHPCMS_PATH.'phpcms/base.php';

$param = pc_base::load_sys_class('param');

$_userid = param::get_cookie('_userid');

if($_userid) {

$member_db = pc_base::load_model('member_model');

$_userid = intval($_userid);

$memberinfo = $member_db->get_one(array('userid'=>$_userid),'islock');

if($memberinfo['islock']) exit('

Bad Request!

');

}

$op = isset($_GET['op']) && trim($_GET['op']) ? trim($_GET['op']) : exit('Operation can not be empty');

if (isset($_GET['callback']) && !preg_match('/^[a-zA-Z_][a-zA-Z0-9_]+$/', $_GET['callback'])) unset($_GET['callback']);

if (!preg_match('/([^a-z_]+)/i',$op) && file_exists(PHPCMS_PATH.'api/'.$op.'.php')) {

include PHPCMS_PATH.'api/'.$op.'.php';

} else {

exit('API handler does not exist');

}

?>

一键复制

编辑

Web IDE

原始数据

按行查看

历史