代码审计 去掉验证码这个功能phpif !definedIN_CRONLITE die;headerContent-Type texthtml; charset=UTF-8;$addsalt=md5mt_rand0999time;$_SESSIONaddsalt=$addsalt;$x = new libhieroglyphy;$addsalt_js = $x-hieroglyphyString$
<?php
if (!defined('IN_CRONLITE')) die();
@header('Content-Type: text/html; charset=UTF-8');
$addsalt=md5(mt_rand(0,999).time());
$_SESSION['addsalt']=$addsalt;
$x = new \lib\hieroglyphy();
$addsalt_js = $x->hieroglyphyString($addsalt);
list($background_image, $background_css) = \lib\Template::getBackground();
?>
<p><!doctype html></p>
<html lang="zh">
<head>
<meta charset="UTF-8">
<meta name="viewport" content="width=device-width, initial-scale=1,user-scalable=no;"/>
<title>注册账号 - <?= $conf['sitename']; ?></title>
<meta name="keywords" content="<?= $conf['keywords'] ?>">
<meta name="description" content="<?= $conf['description'] ?>">
<link rel="shortcut icon" href="<?= $conf['default_ico_url'] ?>">
<link href="<?= $cdnpublic?>twitter-bootstrap/3.3.7/css/bootstrap.min.css" rel="stylesheet"/>
<link rel="stylesheet" type="text/css" href="<?= $cdnserver; ?>assets/store/css/foxui.css">
<link rel="stylesheet" type="text/css" href="<?= $cdnserver; ?>assets/store/css/style.css">
<link rel="stylesheet" type="text/css" href="<?= $cdnserver; ?>assets/store/css/iconfont.css">
<link href="<?= $cdnpublic?>font-awesome/4.7.0/css/font-awesome.min.css" rel="stylesheet"/>
<link rel="stylesheet" href="<?= $cdnserver?>assets/simple/css/main.css">
<link rel="stylesheet" href="<?= $cdnserver?>assets/css/common.css">
<!--[if lt IE 9]>
<script src="<?= $cdnpublic?>html5shiv/3.7.3/html5shiv.min.js"></script>
<script src="<?= $cdnpublic?>respond.js/1.4.2/respond.min.js"></script>
<![endif]-->
</head>
<?= str_replace('body','html',$background_css)?>
<style>
body {
width: 100%;
max-width: 650px;
margin: auto;
background: #f3f3f3;
line-height: 24px;
font: 14px Helvetica Neue,Helvetica,PingFang SC,Tahoma,Arial,sans-serif;
}
.label{
color: unset;
line-height: 1.8;
}
.account-main{
height: 100% !important;
}
a {
text-decoration:none;
}
a:hover{
text-decoration:none;
}
.fui-modal{z-index: 20;}
</style>
<body>
<div id="body">
<div class="fui-page-group statusbar" style="max-width: 650px;left: auto;">
<form id="form1">
<div class="fui-modal popup-modal in">
<div class="account-layer login" style="max-height:unset;margin:-13rem 0 0 -7.75rem;">
<div class="account-main">
<div class="account-back"><i class="icon icon-back"></i></div>
<div class="account-title">注 册 账 号</div>
<div class="form-group">
<div class="input-group">
<div class="input-group-addon">
<span class="fa fa-user"></span>
</div>
<input type="text" name="user" value="" class="form-control" required="required" placeholder="输入登录用户名"/>
</div>
</div>
<pre><code> <div class="form-group">
<div class="input-group">
<div class="input-group-addon">
<span class="fa fa-lock"></span>
</div>
<input type="text" name="pwd" class="form-control" required="required" placeholder="输入6位以上密码"/>
</div>
</div>
<div class="form-group">
<div class="input-group">
<div class="input-group-addon">
<span class="fa fa-qq"></span>
</div>
<input type="text" name="qq" class="form-control" required="required" placeholder="输入QQ号,用于找回密码"/>
</div>
</div>
</div>
<div class="account-btn" id="submit_reg">注册</div>
<div style="text-align:center">
<i class="fa fa-user"></i>&nbsp;已有账号?<a href="login.php">点此登录</a>
</div>
<div style="text-align: center;margin-bottom: 5px;color:#999;margin-top: 15px;">
<?php if($conf['login_qq']==1){?>
<hr style="border-top: 1px solid rgba(0,0,0,.1);"> <div style="color:#999;position: relative;top: -12px;width: 100px;background-color: white;margin: auto"> 第三方登录</div>
<div onclick="javascript:connect('qq')" style=" width: 42px;height:42px; border: 1px solid rgba(213, 213, 213, 1); border-radius: 21px; margin: 15px auto ; margin-top: 10px; background-image: url(../assets/img/logo2.png);background-size: 100%">
<?php } ?>
</div>
<div style="text-align:center;"><a href="javascript:goback();" class="">返回</a></div>
<br/>
</div>
</div>
</div>
</form>
</div>
<div class="fui-navbar" style="z-index: 100000;max-width: 650px;">
<a href="../" class="nav-item "> <span class="icon icon-home"></span> <span class="label">首页</span> </a>
<a href="../?mod=query" class="nav-item "> <span class="icon icon-dingdan1"></span> <span class="label">订单</span> </a>
<a href="../?mod=cart" class="nav-item " <?php if($conf['shoppingcart']==0){?>style="display:none"<?php }?>> <span class="icon icon-cart2"></span> <span class="label">购物车</span> </a>
<a href="http://kf.kashoule.com/index/index/home?visiter_id=&visiter_name=&avatar=&business_id=2&groupid=0&special=2&theme=ef10c3" class="nav-item "> <span class=" icon icon-service1"></span> <span class="label">客服</span> </a>
<a href="./" class="nav-item active"> <span class="icon icon-person2"></span> <span class="label">会员中心</span> </a>
</div>
</code></pre>
</div>
<script src="<?= $cdnpublic?>jquery/1.12.4/jquery.min.js"></script>
<script src="<?= $cdnpublic?>layer/2.3/layer.js"></script>
<script src="../assets/js/reguser.js?ver=<?= VERSION ?>"></script>
<script>
function goback()
{
document.referrer === '' ?window.location.href = '/' :window.history.go(-1);
}
var hashsalt=<?= $addsalt_js?>;
</script>
</body>
</html
原文地址: https://www.cveoy.top/t/topic/cHLo 著作权归作者所有。请勿转载和采集!