├── .gitattributes
├── .gitignore
├── Dockerfile
├── LICENSE
├── README.MD
├── VAuditDemo_Debug
    ├── about.inc
    ├── admin
    │   ├── captcha.php
    │   ├── delCom.php
    │   ├── delUser.php
    │   ├── index.php
    │   ├── logCheck.php
    │   ├── login.php
    │   ├── manage.php
    │   ├── manageAdmin.php
    │   ├── manageCom.php
    │   ├── manageUser.php
    │   └── ping.php
    ├── css
    │   ├── bootstrap.css
    │   ├── bootstrap.min.css
    │   ├── bootswatch.less
    │   ├── bootswatch.min.css
    │   └── variables.less
    ├── footer.php
    ├── header.php
    ├── images
    │   └── default.jpg
    ├── index.php
    ├── install
    │   ├── install.php
    │   └── install.sql
    ├── js
    │   ├── bootstrap.min.js
    │   ├── bootswatch.js
    │   ├── bsa.js
    │   └── check.js
    ├── message.php
    ├── messageDetail.php
    ├── messageSub.php
    ├── search.php
    ├── sys
    │   ├── config.php
    │   └── lib.php
    ├── uploads
    │   └── .gitkeep
    └── user
    │   ├── avatar.php
    │   ├── edit.php
    │   ├── logCheck.php
    │   ├── login.php
    │   ├── logout.php
    │   ├── reg.php
    │   ├── regCheck.php
    │   ├── updateAvatar.php
    │   ├── updateName.php
    │   ├── updatePass.php
    │   └── user.php
├── VAuditDemo_Release
    ├── about.inc
    ├── admin
    │   ├── captcha.php
    │   ├── delAdmin.php
    │   ├── delCom.php
    │   ├── delUser.php
    │   ├── index.php
    │   ├── logCheck.php
    │   ├── login.php
    │   ├── manage.php
    │   ├── manageAdmin.php
    │   ├── manageCom.php
    │   ├── manageUser.php
    │   ├── php_errors.log
    │   └── ping.php
    ├── css
    │   ├── bootstrap.css
    │   ├── bootstrap.min.css
    │   ├── bootswatch.less
    │   ├── bootswatch.min.css
    │   └── variables.less
    ├── footer.php
    ├── header.php
    ├── images
    │   └── default.jpg
    ├── index.php
    ├── install
    │   ├── install.php
    │   └── install.sql
    ├── js
    │   ├── bootstrap.min.js
    │   ├── bootswatch.js
    │   ├── bsa.js
    │   └── check.js
    ├── message.php
    ├── messageDetail.php
    ├── messageSub.php
    ├── search.php
    ├── strtotime.php
    ├── sys
    │   ├── config.php
    │   ├── install.lock
    │   └── lib.php
    └── user
    │   ├── avatar.php
    │   ├── edit.php
    │   ├── logCheck.php
    │   ├── login.php
    │   ├── logout.php
    │   ├── reg.php
    │   ├── regCheck.php
    │   ├── updateAvatar.php
    │   ├── updateName.php
    │   ├── updatePass.php
    │   └── user.php
├── docker-compose.yml
└── files
    ├── docker-php-entrypoint
    ├── nginx.conf
    └── vhost.nginx.conf


/.gitattributes:
--------------------------------------------------------------------------------
 1 | # Auto detect text files and perform LF normalization
 2 | * text=auto
 3 | 
 4 | # Custom for Visual Studio
 5 | *.cs     diff=csharp
 6 | 
 7 | # Standard to msysgit
 8 | *.doc	 diff=astextplain
 9 | *.DOC	 diff=astextplain
10 | *.docx diff=astextplain
11 | *.DOCX diff=astextplain
12 | *.dot  diff=astextplain
13 | *.DOT  diff=astextplain
14 | *.pdf  diff=astextplain
15 | *.PDF	 diff=astextplain
16 | *.rtf	 diff=astextplain
17 | *.RTF	 diff=astextplain
18 | 


--------------------------------------------------------------------------------
/.gitignore:
--------------------------------------------------------------------------------
1 | .DS_Store


--------------------------------------------------------------------------------
/Dockerfile:
--------------------------------------------------------------------------------
 1 | FROM php:5.6-fpm-alpine
 2 | 
 3 | MAINTAINER Virink <virink@outlook.com>
 4 | LABEL CHALLENGE="VAuditDemo Debug"
 5 | 
 6 | ADD VAuditDemo_Debug /var/www/html
 7 | ADD files /tmp/
 8 | 
 9 | RUN sed -i 's/dl-cdn.alpinelinux.org/mirrors.tuna.tsinghua.edu.cn/g' /etc/apk/repositories \
10 |     && apk add --update --no-cache libpng-dev nginx mysql mysql-client \
11 |     # php mysql ext
12 |     && docker-php-source extract \
13 |     && docker-php-ext-install mysql gd \
14 |     && docker-php-source delete \
15 |     # mysql
16 |     && mysql_install_db --user=mysql --datadir=/var/lib/mysql \
17 |     && sh -c 'mysqld_safe &' \
18 |     && sleep 5s \
19 |     && mysqladmin -uroot password 'root' \
20 |     # && mysql -e "source /tmp/db.sql;" -uroot -pqwertyuiop \
21 |     && mkdir /run/nginx \
22 |     # docker-php-entrypoint
23 |     && mv /tmp/docker-php-entrypoint /usr/local/bin/docker-php-entrypoint \
24 |     && chmod +x /usr/local/bin/docker-php-entrypoint \
25 |     # nginx config
26 |     && mv /tmp/nginx.conf /etc/nginx/nginx.conf \
27 |     && mv /tmp/vhost.nginx.conf /etc/nginx/conf.d/default.conf \
28 |     # 
29 |     && chmod -R -w /var/www/html \
30 |     && chmod -R 777 /var/www/html/uploads \
31 |     && chmod -R +w /var/www/html/sys \
32 |     && chown -R www-data:www-data /var/www/html \
33 |     # clear
34 |     && rm -rf /tmp/* \
35 |     && rm -rf /etc/apk
36 | 
37 | EXPOSE 80
38 | 
39 | VOLUME ["/var/log/nginx"]
40 | 
41 | CMD ["/bin/sh", "-c", "docker-php-entrypoint"]


--------------------------------------------------------------------------------
/README.MD:
--------------------------------------------------------------------------------
 1 | # VAuditDemo
 2 | 
 3 | 本程序是**一个简单的Web漏洞演练平台**，
 4 | 
 5 | 用於錄製演示講解PHP基本漏洞的視頻《[PHP代码审计实战-愛春秋](http://www.ichunqiu.com/course/54473 "PHP代码审计实战-愛春秋")》
 6 | 
 7 | ## 安装说明
 8 | 
 9 | 1. 先创建数据库`vauditdemo`
10 | 2. 放在网站根目录
11 | 
12 | ## 漏洞類型
13 | 
14 | - 安裝問題
15 | - 命令注入
16 | - SQL數字型注入
17 | - XSS後臺敏感操作
18 | - 文件包含
19 | - 任意文件讀取
20 | - 越權操作
21 | - 密碼爆破-繞過驗證碼
22 | - 截斷導致二次注入
23 | 
24 | 
25 | ## 版權 
26 | 
27 | [GPLv3](LICENSE)
28 | 
29 | 該程序基於**ZVulDrill**修改，借鑒了前端框架等。
30 | 
31 | 其他PHP代碼構造的漏洞純屬本人自行編寫。
32 | 
33 | ## 作者 Virink
34 | 
35 | **Blog :** [Virink's Blog](https://www.virzz.com "Virink's Blog")
36 | 
37 | **Telegram :** [@virink](https://telegram.me/virink)
38 | 
39 | **Twitter :** [@virinkz](https://twitter.com/virinkz)
40 | 


--------------------------------------------------------------------------------
/VAuditDemo_Debug/about.inc:
--------------------------------------------------------------------------------
 1 |     <div class="span2">
 2 |     </div>
 3 |     <div class="span10">
 4 |         <div id="content">
 5 | 			<div class="page-header">
 6 |                 <h4>关于 VAuditDemo</h4>
 7 |                 <hr>
 8 | 				<p>
 9 |                     <b>[测试环境]</b>
10 |                     <br />
11 | 					<ul>
12 |                         <li><?=strtr(explode(" ",$_SERVER["SERVER_SOFTWARE"])[0],"/"," ")?></li>
13 | 						<li>PHP <?=PHP_VERSION?></li>
14 | 					</ul>
15 |                     <b>[php配置文件中]</b>
16 |                     <br />
17 | 					<ul>
18 |                         <li>allow_url_include = <?=ini_get('allow_url_include')?'On':'Off'?></li>
19 |                         <li>allow_url_fopen = <?=ini_get('allow_url_fopen')?'On':'Off'?></li>
20 |                         <li>magic_quotes_gpc = <?=ini_get('magic_quotes_gpc')?'On':'Off'?></li>
21 | 					</ul>
22 |                 </p>
23 |                 <hr>
24 |                 <p>
25 |                     <b>[联系]</b>
26 |                     <br />
27 |                     Telegram: <a href="https://telegram.me/virink">@virink</a>
28 |                     <br />
29 |                     Email: virink@outlook.com
30 |                     <br />
31 | 					欢迎一起交流学习
32 |                 </p>    
33 |             </div>
34 |         </div>
35 |     </div>
36 | 


--------------------------------------------------------------------------------
/VAuditDemo_Debug/admin/captcha.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | session_start();
 3 | $rand = '';
 4 | for($i=0; $i<4; $i++){
 5 | 	$rand.= dechex(rand(1,15));
 6 | }
 7 | $_SESSION['captcha']=$rand;
 8 | $im = imagecreatetruecolor(100,30);
 9 | $bg=imagecolorallocate($im,0,0,0);
10 | $te=imagecolorallocate($im,255,255,255);
11 | imagestring($im,rand(5,6),rand(25,30),5,$rand,$te);
12 | header("Content-type:image/jpeg");
13 | imagejpeg($im);
14 | ?> 


--------------------------------------------------------------------------------
/VAuditDemo_Debug/admin/delCom.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | include_once('../sys/config.php');
 3 | 
 4 | if (isset($_SESSION['admin']) && !empty($_GET['id'])) {
 5 | 
 6 | 	$clean_id = clean_input($_GET['id']);
 7 | 	$query = "DELETE FROM comment WHERE comment_id = '$clean_id' LIMIT 1";
 8 | 	mysql_query($query, $conn) or die('Error');
 9 | 	mysql_close($conn);
10 | 	header('Location: manageCom.php');
11 | }
12 | else {
13 | 	not_find($_SERVER['PHP_SELF']);
14 | }	
15 | ?>


--------------------------------------------------------------------------------
/VAuditDemo_Debug/admin/delUser.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | include_once('../sys/config.php');
 3 | 
 4 | if (isset($_SESSION['admin']) && !empty($_GET['id'])) {
 5 | 
 6 | 	$clean_id = clean_input($_GET['id']);
 7 | 	$query = "DELETE FROM users WHERE user_id = '$clean_id' LIMIT 1";
 8 | 	mysql_query($query, $conn) or die('Error');
 9 | 	mysql_close($conn);
10 | 	header('Location: manageUser.php');
11 | }
12 | else {
13 | 	not_find($_SERVER['PHP_SELF']);
14 | }	
15 | ?>


--------------------------------------------------------------------------------
/VAuditDemo_Debug/admin/index.php:
--------------------------------------------------------------------------------
1 | <?php
2 | session_start();
3 | if(isset($_SESSION['admin']))
4 | 	header('Location: manage.php');
5 | else
6 | 	header('Location: login.php');
7 | ?>


--------------------------------------------------------------------------------
/VAuditDemo_Debug/admin/logCheck.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | include_once('../sys/config.php');
 3 | 
 4 | if (isset($_POST['submit']) && !empty($_POST['user']) && !empty($_POST['pass'])) {
 5 | 	include_once('../header.php');
 6 | 
 7 | 	if(@$_POST['captcha'] !== $_SESSION['captcha']){
 8 | 		header('Location: login.php');
 9 | 		exit;
10 | 	}
11 | 
12 | 	$name = $_POST['user'];
13 | 	$pass = $_POST['pass'];
14 | 
15 |     $query = "SELECT * FROM admin WHERE admin_name = '$name' AND admin_pass = SHA('$pass')";
16 |     $data = mysql_query($query, $conn) or die('Error!!');
17 | 
18 |     if (mysql_num_rows($data) == 1) {
19 | 		$_SESSION['admin'] = $name;
20 |         header('Location: manage.php');
21 |         }
22 | 	else {
23 | 		$_SESSION['error_info'] = '用户名或密码错误';
24 | 		header('Location: login.php');
25 | 	}
26 | 	mysql_close($conn);
27 | }
28 | else {
29 | 	not_find($_SERVER['PHP_SELF']);
30 | }
31 | ?>
32 | 


--------------------------------------------------------------------------------
/VAuditDemo_Debug/admin/login.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | include_once('../sys/config.php');
 3 | include_once('../header.php');
 4 | 
 5 | if(isset($_SESSION['error_info']) && $_SESSION['error_info'] != '') {
 6 | 	echo $_SESSION['error_info'];
 7 | 	$_SESSION['error_info'] = '';
 8 | }
 9 | ?>
10 | <form class="bs-example form-horizontal" action="logCheck.php" method="post" name="log">
11 | 	<legend>登录</legend>
12 |     <div class="form-group">
13 |         <label for="inputEmail" class="col-lg-2 control-label">用户名：</label>
14 |         <div class="col-lg-3">
15 |             <input type="text" name="user" class="form-control" id="inputEmail">
16 |         </div>
17 | 	</div>
18 | 	<div class="form-group">
19 | 		<label for="inputEmail" class="col-lg-2 control-label">密码：</label>
20 |         <div class="col-lg-3">
21 | 			<input type="password" name="pass" class="form-control" id="inputEmail" onblur="check()">
22 |         </div>
23 |     </div>	
24 | 	<div class="form-group">
25 | 		<label for="inputEmail" class="col-lg-2 control-label">驗證碼</label>
26 |         <div class="col-lg-3">
27 | 			<input type="text" name="captcha" class="form-control" id="inputEmail" onblur="check()">
28 |         </div>
29 | 		<div><img src="captcha.php"></div>
30 |     </div>	
31 | 	<div class="form-group">
32 | 		<label for="inputEmail" class="col-lg-2 control-label"></label>
33 |         <div class="col-lg-3">
34 | 			<input type="submit" name="submit" class="btn btn-primary" value="登录"/>
35 |         </div>
36 |     </div>				  
37 | </form>
38 | <?php
39 | require_once('../footer.php');
40 | ?>
41 | 


--------------------------------------------------------------------------------
/VAuditDemo_Debug/admin/manage.php:
--------------------------------------------------------------------------------
 1 | <?php 
 2 | include_once($_SERVER["DOCUMENT_ROOT"].'/sys/config.php');
 3 | 
 4 | if (isset($_SESSION['admin'])) {
 5 | 	include_once($_SERVER["DOCUMENT_ROOT"].'/header.php');
 6 | ?>
 7 | 	<table class="items table">
 8 | 	<thead>
 9 | 	<tr>
10 | 	<th id="yw0_c0">管理</th>
11 | 	<th id="yw0_c1">入口</th>
12 | 	</thead>
13 | 	<tbody>
14 | 		<tr class="odd">
15 | 			<td>管理員</td>
16 | 			<td><a href="manageAdmin.php">进入</a></td>
17 | 		</tr>
18 | 		<tr class="odd">
19 | 			<td>用户</td>
20 | 			<td><a href="manageUser.php">进入</a></td>
21 | 		</tr>
22 | 		<tr class="odd">
23 | 			<td>评论</td>
24 | 			<td><a href="manageCom.php">进入</a></td>
25 | 		</tr>
26 | 		<tr class="odd">
27 | 			<td>Ping</td>
28 | 			<td><a href="ping.php">进入</a></td>
29 | 		</tr>
30 | 	</tbody>
31 | 	</table>
32 | 	<?php
33 | 	require_once($_SERVER["DOCUMENT_ROOT"].'/footer.php');
34 | }
35 | else {
36 | 	not_find($_SERVER['PHP_SELF']);
37 | }
38 | ?>
39 | 


--------------------------------------------------------------------------------
/VAuditDemo_Debug/admin/manageAdmin.php:
--------------------------------------------------------------------------------
 1 | <?php 
 2 | include_once('../sys/config.php');
 3 | 
 4 | if (isset($_SESSION['admin'])) {
 5 | 	include_once('../header.php');
 6 | 
 7 | 	if(isset($_POST['username']) && isset($_POST['password'])){
 8 | 		$clean_name = clean_input($_POST['username']);
 9 | 		$clean_pass = clean_input($_POST['password']);
10 | 		$query = "SELECT * FROM admin WHERE admin_name = '$clean_name'";
11 | 	    $data = mysql_query($query, $conn);
12 | 		if (mysql_num_rows($data) == 1) {
13 | 			$_SESSION['error_info'] = '用户名已存在';
14 | 			header('Location: manageUser.php');
15 | 			exit;
16 | 		} else {
17 | 			$query = "INSERT INTO admin(admin_name,admin_pass) VALUES ('$clean_name',SHA('$clean_pass'))";
18 | 			mysql_query($query, $conn) or die("Error!!");
19 | 		}
20 | 	}
21 | 
22 | 	$query = "SELECT * FROM admin ORDER BY admin_id";
23 | 	$data = mysql_query($query, $conn) or die('Error');
24 | 	mysql_close($conn);
25 | ?>
26 | <table class="items table">
27 | 	<thead>
28 | 	<tr>
29 | 		<th id="yw0_c0">Name</th>
30 | 		<th id="yw0_c4">Manege</th>
31 | 	</thead>
32 | 	<tbody>
33 | <?php while ($admin = mysql_fetch_array($data)) {
34 | 	$html_user_name = htmlspecialchars($admin['admin_name']);
35 | ?>
36 | 	<tr class="odd">
37 | 		<td><?php echo $html_user_name;?></td>
38 | 		<td><a href="delUser.php?id=<?php echo $admin['user_id'];?>">删除</a></td>
39 | 	</tr>
40 | <?php } ?>
41 | </tbody>
42 | </table>
43 | 
44 | <form class="bs-example form-horizontal" action="manageAdmin.php" method="post" name="log">
45 | 	<legend>添加管理員</legend>
46 |     <div class="form-group">
47 |         <label for="inputEmail" class="col-lg-2 control-label">用户名：</label>
48 |         <div class="col-lg-3">
49 |             <input type="text" name="username" class="form-control" id="inputEmail">
50 |         </div>
51 | 	</div>
52 | 	<div class="form-group">
53 | 		<label for="inputEmail" class="col-lg-2 control-label">密码：</label>
54 |         <div class="col-lg-3">
55 | 			<input type="password" name="password" class="form-control" id="inputEmail" onblur="check()">
56 |         </div>
57 | 		<div><input type="submit" name="submit" class="btn btn-primary" value="添加"/></div>
58 |     </div>				  
59 | </form>
60 | 
61 | <a href="manage.php">返回</a>
62 | <?php 
63 | require_once('../footer.php');
64 | }
65 | else {
66 | 	not_find($_SERVER['PHP_SELF']);
67 | }
68 |  ?>


--------------------------------------------------------------------------------
/VAuditDemo_Debug/admin/manageCom.php:
--------------------------------------------------------------------------------
 1 | <?php 
 2 | include_once('../sys/config.php');
 3 | 
 4 | if (isset($_SESSION['admin'])) {
 5 | 	include_once('../header.php');
 6 | 	$query = "SELECT * FROM comment ORDER BY comment_id";
 7 | 	$data = mysql_query($query, $conn) or die('Error');
 8 | 	mysql_close($conn);
 9 | ?>
10 | <table class="items table">
11 | <thead>
12 | <tr>
13 | <th id="yw0_c0">留言</th>
14 | <th id="yw0_c0">用户</th>
15 | <th id="yw0_c4">管理</th>
16 | </thead>
17 | <tbody>
18 | <?php 
19 | 	//打印数据
20 | 	while ($com = mysql_fetch_array($data)) {
21 | 		$html_comment_text = htmlspecialchars($com['comment_text']);
22 | 		$html_user_name = htmlspecialchars($com['user_name']);
23 | ?>
24 | 	<tr class="odd">
25 | 		<td><?php echo $html_comment_text;?></td>
26 | 		<td><?php echo $html_user_name;?></td>
27 | 		<td><a href="delCom.php?id=<?php echo $com['comment_id'];?>">删除</a></td>
28 | 	</tr>
29 | <?php } 
30 | ?>
31 | </tbody>
32 | </table>
33 | <a href="manage.php">返回</a>
34 | <?php 
35 | require_once('../footer.php');
36 | }
37 | else {
38 | 	not_find($_SERVER['PHP_SELF']);
39 | }
40 |  ?>


--------------------------------------------------------------------------------
/VAuditDemo_Debug/admin/manageUser.php:
--------------------------------------------------------------------------------
 1 | <?php 
 2 | include_once('../sys/config.php');
 3 | 
 4 | if (isset($_SESSION['admin'])) {
 5 | 	include_once('../header.php');
 6 | 
 7 | 	$query = "SELECT * FROM users ORDER BY user_id";
 8 | 	$data = mysql_query($query, $conn) or die('Error');
 9 | 	mysql_close($conn);
10 | ?>
11 | <table class="items table">
12 | 	<thead>
13 | 	<tr>
14 | 		<th id="yw0_c0">Id</th>
15 | 		<th id="yw0_c4">Name</th>
16 | 		<th id="yw0_c4">Ip</th>
17 | 		<th id="yw0_c4">Manege</th>
18 | 	</thead>
19 | 	<tbody>
20 | <?php while ($users = mysql_fetch_array($data)) {
21 | 	$html_user_name = htmlspecialchars($users['user_name']);
22 | ?>
23 | 	<tr class="odd">
24 | 		<td><?php echo $users['user_id'];?></a></td>
25 | 		<td><?php echo $html_user_name;?></td>
26 | 		<td><?php echo $users['login_ip'];?></td>
27 | 		<td><a href="delUser.php?id=<?php echo $users['user_id'];?>">删除</a></td>
28 | 	</tr>
29 | <?php } ?>
30 | </tbody>
31 | </table>
32 | 
33 | <a href="manage.php">返回</a>
34 | <?php 
35 | require_once('../footer.php');
36 | }
37 | else {
38 | 	not_find($_SERVER['PHP_SELF']);
39 | }
40 |  ?>


--------------------------------------------------------------------------------
/VAuditDemo_Debug/admin/ping.php:
--------------------------------------------------------------------------------
 1 | <?php 
 2 | include_once('../sys/config.php');
 3 | 
 4 | if (isset($_SESSION['admin'])) {
 5 | 	include_once('../header.php');
 6 | 
 7 | 	
 8 | ?>
 9 | <div class="span10">
10 | 	<div id="content">
11 | 		<div class="page-header">
12 | 			<h4>Ping</h4>
13 | 			<hr>
14 | 			<form name="ping" action="" method="post">
15 | 				<input type="text" name="target" size="30" class="form-control">
16 | 				<input type="submit" value="Ping" name="submit" class="btn btn-primary">
17 | 			</form>
18 | 			<?php
19 | 			if( isset( $_POST[ 'submit' ] ) ) {
20 | 				$target = $_POST[ 'target' ];
21 | 
22 | 				if (stristr(php_uname('s'), 'Windows NT')) { 
23 | 					$cmd = 'ping ' . $target;
24 | 				} else { 
25 | 					$cmd = 'ping -c 3 ' . $target;
26 | 				}
27 | 				$res = shell_exec( $cmd );
28 | 				echo "<br /><pre>$cmd\r\n".iconv('GB2312', 'UTF-8',$res)."</pre>";
29 | 			}
30 | 			?>
31 | 		</div>
32 | 	</div>
33 | </div>
34 | 
35 | 
36 | <a href="manage.php">返回</a>
37 | 	<?php 
38 | 	require_once('../footer.php');
39 | 	}
40 | else {
41 | 	not_find($_SERVER['PHP_SELF']);
42 | }
43 |  ?>
44 | 


--------------------------------------------------------------------------------
/VAuditDemo_Debug/css/bootswatch.less:
--------------------------------------------------------------------------------
 1 | // Custom 3.1.0
 2 | // Bootswatch
 3 | // -----------------------------------------------------
 4 | 
 5 | 
 6 | // Navbar =====================================================================
 7 | 
 8 | // Buttons ====================================================================
 9 | 
10 | // Typography =================================================================
11 | 
12 | // Tables =====================================================================
13 | 
14 | // Forms ======================================================================
15 | 
16 | // Navs =======================================================================
17 | 
18 | // Indicators =================================================================
19 | 
20 | // Progress bars ==============================================================
21 | 
22 | // Containers =================================================================
23 | 


--------------------------------------------------------------------------------
/VAuditDemo_Debug/css/bootswatch.min.css:
--------------------------------------------------------------------------------
 1 | body{padding-top:50px}
 2 | #banner{border-bottom:none}
 3 | .page-header h1{font-size:4em}
 4 | .bs-docs-section{margin-top:8em}
 5 | footer{margin:5em 0}footer li{float:left;margin-right:1.5em;margin-bottom:1.5em}
 6 | footer p{clear:left;margin-bottom:0}
 7 | .splash{padding:4em 0 2em;background-color:#1c2533;background:-webkit-linear-gradient(70deg, #080f1f 30%, #2b4b5a 87%, #435e67 100%);background:-o-linear-gradient(70deg, #080f1f 30%, #2b4b5a 87%, #435e67 100%);background:-ms-linear-gradient(70deg, #080f1f 30%, #2b4b5a 87%, #435e67 100%);background:-moz-linear-gradient(70deg, #080f1f 30%, #2b4b5a 87%, #435e67 100%);background:linear-gradient(20deg, #080f1f 30%, #2b4b5a 87%, #435e67 100%);background-attachment:fixed;color:#fff;text-align:center}.splash .alert{margin:4em 0 2em}
 8 | .splash h1{font-size:4em}
 9 | .splash #social{margin:2em 0 4em}
10 | .splash .bsa{max-width:350px;margin:0 auto;background:none}.splash .bsa .one .bsa_it_ad{border:1px solid #3e4653 !important;border-color:rgba(255,255,255,0.2) !important}
11 | .splash .bsa a{color:#fff}
12 | .section-tout{padding:4em 0 3em;border-top:1px solid rgba(255,255,255,0.1);border-bottom:1px solid rgba(0,0,0,0.1);background-color:#eaf1f1}.section-tout .fa{margin-right:.5em}
13 | .section-tout p{margin-bottom:3em}
14 | .section-preview{padding:4em 0 4em}.section-preview .preview{margin-bottom:4em;background-color:#eaf1f1;border:1px solid rgba(0,0,0,0.1);border-radius:6px}.section-preview .preview .image{padding:5px}.section-preview .preview .image img{border:1px solid rgba(0,0,0,0.1)}
15 | .section-preview .preview .options{text-align:center;padding:0 2em 2em}.section-preview .preview .options p{margin-bottom:2em}
16 | .section-preview .dropdown-menu{text-align:left}
17 | .section-preview .lead{margin-bottom:2em}
18 | @media (max-width:767px){.section-preview .image img{width:100%}}
19 | .bsa{padding:0}.bsa .one .bsa_it_ad{border:none !important;background-color:transparent !important}.bsa .one .bsa_it_ad .bsa_it_t,.bsa .one .bsa_it_ad .bsa_it_d{color:inherit !important}
20 | .bsa .one .bsa_it_ad .bsa_it_i{margin-bottom:0 !important}
21 | .bsa .one .bsa_it_p{display:none}
22 | 


--------------------------------------------------------------------------------
/VAuditDemo_Debug/css/variables.less:
--------------------------------------------------------------------------------
  1 | // Custom 3.1.0
  2 | // Variables
  3 | // --------------------------------------------------
  4 | 
  5 | 
  6 | //== Colors
  7 | //
  8 | //## Gray and brand colors for use across Bootstrap.
  9 | 
 10 | @gray-darker:            lighten(#000, 13.5%); // #222
 11 | @gray-dark:              lighten(#000, 20%);   // #333
 12 | @gray:                   lighten(#000, 33.5%); // #555
 13 | @gray-light:             lighten(#000, 60%);   // #999
 14 | @gray-lighter:           lighten(#000, 93.5%); // #eee
 15 | 
 16 | @brand-primary:         #428bca;
 17 | @brand-success:         #5cb85c;
 18 | @brand-info:            #5bc0de;
 19 | @brand-warning:         #f0ad4e;
 20 | @brand-danger:          #d9534f;
 21 | 
 22 | 
 23 | //== Scaffolding
 24 | //
 25 | // ## Settings for some of the most global styles.
 26 | 
 27 | //** Background color for `<body>`.
 28 | @body-bg:               #fff;
 29 | //** Global text color on `<body>`.
 30 | @text-color:            @gray-dark;
 31 | 
 32 | //** Global textual link color.
 33 | @link-color:            @brand-primary;
 34 | //** Link hover color set via `darken()` function.
 35 | @link-hover-color:      darken(@link-color, 15%);
 36 | 
 37 | 
 38 | //== Typography
 39 | //
 40 | //## Font, line-height, and color for body text, headings, and more.
 41 | 
 42 | @font-family-sans-serif:  "Helvetica Neue", Helvetica, Arial, sans-serif;
 43 | @font-family-serif:       Georgia, "Times New Roman", Times, serif;
 44 | //** Default monospace fonts for `<code>`, `<kbd>`, and `<pre>`.
 45 | @font-family-monospace:   Menlo, Monaco, Consolas, "Courier New", monospace;
 46 | @font-family-base:        @font-family-sans-serif;
 47 | 
 48 | @font-size-base:          14px;
 49 | @font-size-large:         ceil((@font-size-base * 1.25)); // ~18px
 50 | @font-size-small:         ceil((@font-size-base * 0.85)); // ~12px
 51 | 
 52 | @font-size-h1:            floor((@font-size-base * 2.6)); // ~36px
 53 | @font-size-h2:            floor((@font-size-base * 2.15)); // ~30px
 54 | @font-size-h3:            ceil((@font-size-base * 1.7)); // ~24px
 55 | @font-size-h4:            ceil((@font-size-base * 1.25)); // ~18px
 56 | @font-size-h5:            @font-size-base;
 57 | @font-size-h6:            ceil((@font-size-base * 0.85)); // ~12px
 58 | 
 59 | //** Unit-less `line-height` for use in components like buttons.
 60 | @line-height-base:        1.428571429; // 20/14
 61 | //** Computed "line-height" (`font-size` * `line-height`) for use with `margin`, `padding`, etc.
 62 | @line-height-computed:    floor((@font-size-base * @line-height-base)); // ~20px
 63 | 
 64 | //** By default, this inherits from the `<body>`.
 65 | @headings-font-family:    inherit;
 66 | @headings-font-weight:    500;
 67 | @headings-line-height:    1.1;
 68 | @headings-color:          inherit;
 69 | 
 70 | 
 71 | //-- Iconography
 72 | //
 73 | //## Specify custom locations of the include Glyphicons icon font. Useful for those including Bootstrap via Bower.
 74 | 
 75 | @icon-font-path:          "../fonts/";
 76 | @icon-font-name:          "glyphicons-halflings-regular";
 77 | @icon-font-svg-id:				"glyphicons_halflingsregular";
 78 | 
 79 | //== Components
 80 | //
 81 | //## Define common padding and border radius sizes and more. Values based on 14px text and 1.428 line-height (~20px to start).
 82 | 
 83 | @padding-base-vertical:     6px;
 84 | @padding-base-horizontal:   12px;
 85 | 
 86 | @padding-large-vertical:    10px;
 87 | @padding-large-horizontal:  16px;
 88 | 
 89 | @padding-small-vertical:    5px;
 90 | @padding-small-horizontal:  10px;
 91 | 
 92 | @padding-xs-vertical:       1px;
 93 | @padding-xs-horizontal:     5px;
 94 | 
 95 | @line-height-large:         1.33;
 96 | @line-height-small:         1.5;
 97 | 
 98 | @border-radius-base:        4px;
 99 | @border-radius-large:       6px;
100 | @border-radius-small:       3px;
101 | 
102 | //** Global color for active items (e.g., navs or dropdowns).
103 | @component-active-color:    #fff;
104 | //** Global background color for active items (e.g., navs or dropdowns).
105 | @component-active-bg:       @brand-primary;
106 | 
107 | //** Width of the `border` for generating carets that indicator dropdowns.
108 | @caret-width-base:          4px;
109 | //** Carets increase slightly in size for larger components.
110 | @caret-width-large:         5px;
111 | 
112 | 
113 | //== Tables
114 | //
115 | //## Customizes the `.table` component with basic values, each used across all table variations.
116 | 
117 | //** Padding for `<th>`s and `<td>`s.
118 | @table-cell-padding:            8px;
119 | //** Padding for cells in `.table-condensed`.
120 | @table-condensed-cell-padding:  5px;
121 | 
122 | //** Default background color used for all tables.
123 | @table-bg:                      transparent;
124 | //** Background color used for `.table-striped`.
125 | @table-bg-accent:               #f9f9f9;
126 | //** Background color used for `.table-hover`.
127 | @table-bg-hover:                #f5f5f5;
128 | @table-bg-active:               @table-bg-hover;
129 | 
130 | //** Border color for table and cell borders.
131 | @table-border-color:            #ddd;
132 | 
133 | 
134 | //== Buttons
135 | //
136 | //## For each of Bootstrap's buttons, define text, background and border color.
137 | 
138 | @btn-font-weight:                normal;
139 | 
140 | @btn-default-color:              #333;
141 | @btn-default-bg:                 #fff;
142 | @btn-default-border:             #ccc;
143 | 
144 | @btn-primary-color:              #fff;
145 | @btn-primary-bg:                 @brand-primary;
146 | @btn-primary-border:             darken(@btn-primary-bg, 5%);
147 | 
148 | @btn-success-color:              #fff;
149 | @btn-success-bg:                 @brand-success;
150 | @btn-success-border:             darken(@btn-success-bg, 5%);
151 | 
152 | @btn-info-color:                 #fff;
153 | @btn-info-bg:                    @brand-info;
154 | @btn-info-border:                darken(@btn-info-bg, 5%);
155 | 
156 | @btn-warning-color:              #fff;
157 | @btn-warning-bg:                 @brand-warning;
158 | @btn-warning-border:             darken(@btn-warning-bg, 5%);
159 | 
160 | @btn-danger-color:               #fff;
161 | @btn-danger-bg:                  @brand-danger;
162 | @btn-danger-border:              darken(@btn-danger-bg, 5%);
163 | 
164 | @btn-link-disabled-color:        @gray-light;
165 | 
166 | 
167 | //== Forms
168 | //
169 | //##
170 | 
171 | //** `<input>` background color
172 | @input-bg:                       #fff;
173 | //** `<input disabled>` background color
174 | @input-bg-disabled:              @gray-lighter;
175 | 
176 | //** Text color for `<input>`s
177 | @input-color:                    @gray;
178 | //** `<input>` border color
179 | @input-border:                   #ccc;
180 | //** `<input>` border radius
181 | @input-border-radius:            @border-radius-base;
182 | //** Border color for inputs on focus
183 | @input-border-focus:             #66afe9;
184 | 
185 | //** Placeholder text color
186 | @input-color-placeholder:        @gray-light;
187 | 
188 | //** Default `.form-control` height
189 | @input-height-base:              (@line-height-computed + (@padding-base-vertical * 2) + 2);
190 | //** Large `.form-control` height
191 | @input-height-large:             (ceil(@font-size-large * @line-height-large) + (@padding-large-vertical * 2) + 2);
192 | //** Small `.form-control` height
193 | @input-height-small:             (floor(@font-size-small * @line-height-small) + (@padding-small-vertical * 2) + 2);
194 | 
195 | @legend-color:                   @gray-dark;
196 | @legend-border-color:            #e5e5e5;
197 | 
198 | //** Background color for textual input addons
199 | @input-group-addon-bg:           @gray-lighter;
200 | //** Border color for textual input addons
201 | @input-group-addon-border-color: @input-border;
202 | 
203 | 
204 | //== Dropdowns
205 | //
206 | //## Dropdown menu container and contents.
207 | 
208 | //** Background for the dropdown menu.
209 | @dropdown-bg:                    #fff;
210 | //** Dropdown menu `border-color`.
211 | @dropdown-border:                rgba(0,0,0,.15);
212 | //** Dropdown menu `border-color` **for IE8**.
213 | @dropdown-fallback-border:       #ccc;
214 | //** Divider color for between dropdown items.
215 | @dropdown-divider-bg:            #e5e5e5;
216 | 
217 | //** Dropdown link text color.
218 | @dropdown-link-color:            @gray-dark;
219 | //** Hover color for dropdown links.
220 | @dropdown-link-hover-color:      darken(@gray-dark, 5%);
221 | //** Hover background for dropdown links.
222 | @dropdown-link-hover-bg:         #f5f5f5;
223 | 
224 | //** Active dropdown menu item text color.
225 | @dropdown-link-active-color:     @component-active-color;
226 | //** Active dropdown menu item background color.
227 | @dropdown-link-active-bg:        @component-active-bg;
228 | 
229 | //** Disabled dropdown menu item background color.
230 | @dropdown-link-disabled-color:   @gray-light;
231 | 
232 | //** Text color for headers within dropdown menus.
233 | @dropdown-header-color:          @gray-light;
234 | 
235 | // Note: Deprecated @dropdown-caret-color as of v3.1.0
236 | @dropdown-caret-color:           #000;
237 | 
238 | 
239 | //-- Z-index master list
240 | //
241 | // Warning: Avoid customizing these values. They're used for a bird's eye view
242 | // of components dependent on the z-axis and are designed to all work together.
243 | //
244 | // Note: These variables are not generated into the Customizer.
245 | 
246 | @zindex-navbar:            1000;
247 | @zindex-dropdown:          1000;
248 | @zindex-popover:           1010;
249 | @zindex-tooltip:           1030;
250 | @zindex-navbar-fixed:      1030;
251 | @zindex-modal-background:  1040;
252 | @zindex-modal:             1050;
253 | 
254 | 
255 | //== Media queries breakpoints
256 | //
257 | //## Define the breakpoints at which your layout will change, adapting to different screen sizes.
258 | 
259 | // Extra small screen / phone
260 | // Note: Deprecated @screen-xs and @screen-phone as of v3.0.1
261 | @screen-xs:                  480px;
262 | @screen-xs-min:              @screen-xs;
263 | @screen-phone:               @screen-xs-min;
264 | 
265 | // Small screen / tablet
266 | // Note: Deprecated @screen-sm and @screen-tablet as of v3.0.1
267 | @screen-sm:                  768px;
268 | @screen-sm-min:              @screen-sm;
269 | @screen-tablet:              @screen-sm-min;
270 | 
271 | // Medium screen / desktop
272 | // Note: Deprecated @screen-md and @screen-desktop as of v3.0.1
273 | @screen-md:                  992px;
274 | @screen-md-min:              @screen-md;
275 | @screen-desktop:             @screen-md-min;
276 | 
277 | // Large screen / wide desktop
278 | // Note: Deprecated @screen-lg and @screen-lg-desktop as of v3.0.1
279 | @screen-lg:                  1200px;
280 | @screen-lg-min:              @screen-lg;
281 | @screen-lg-desktop:          @screen-lg-min;
282 | 
283 | // So media queries don't overlap when required, provide a maximum
284 | @screen-xs-max:              (@screen-sm-min - 1);
285 | @screen-sm-max:              (@screen-md-min - 1);
286 | @screen-md-max:              (@screen-lg-min - 1);
287 | 
288 | 
289 | //== Grid system
290 | //
291 | //## Define your custom responsive grid.
292 | 
293 | //** Number of columns in the grid.
294 | @grid-columns:              12;
295 | //** Padding between columns. Gets divided in half for the left and right.
296 | @grid-gutter-width:         30px;
297 | // Navbar collapse
298 | //** Point at which the navbar becomes uncollapsed.
299 | @grid-float-breakpoint:     @screen-sm-min;
300 | //** Point at which the navbar begins collapsing.
301 | @grid-float-breakpoint-max: (@grid-float-breakpoint - 1);
302 | 
303 | 
304 | //== Navbar
305 | //
306 | //##
307 | 
308 | // Basics of a navbar
309 | @navbar-height:                    50px;
310 | @navbar-margin-bottom:             @line-height-computed;
311 | @navbar-border-radius:             @border-radius-base;
312 | @navbar-padding-horizontal:        floor((@grid-gutter-width / 2));
313 | @navbar-padding-vertical:          ((@navbar-height - @line-height-computed) / 2);
314 | @navbar-collapse-max-height:       340px;
315 | 
316 | @navbar-default-color:             #777;
317 | @navbar-default-bg:                #f8f8f8;
318 | @navbar-default-border:            darken(@navbar-default-bg, 6.5%);
319 | 
320 | // Navbar links
321 | @navbar-default-link-color:                #777;
322 | @navbar-default-link-hover-color:          #333;
323 | @navbar-default-link-hover-bg:             transparent;
324 | @navbar-default-link-active-color:         #555;
325 | @navbar-default-link-active-bg:            darken(@navbar-default-bg, 6.5%);
326 | @navbar-default-link-disabled-color:       #ccc;
327 | @navbar-default-link-disabled-bg:          transparent;
328 | 
329 | // Navbar brand label
330 | @navbar-default-brand-color:               @navbar-default-link-color;
331 | @navbar-default-brand-hover-color:         darken(@navbar-default-brand-color, 10%);
332 | @navbar-default-brand-hover-bg:            transparent;
333 | 
334 | // Navbar toggle
335 | @navbar-default-toggle-hover-bg:           #ddd;
336 | @navbar-default-toggle-icon-bar-bg:        #888;
337 | @navbar-default-toggle-border-color:       #ddd;
338 | 
339 | 
340 | // Inverted navbar
341 | // Reset inverted navbar basics
342 | @navbar-inverse-color:                      @gray-light;
343 | @navbar-inverse-bg:                         #222;
344 | @navbar-inverse-border:                     darken(@navbar-inverse-bg, 10%);
345 | 
346 | // Inverted navbar links
347 | @navbar-inverse-link-color:                 @gray-light;
348 | @navbar-inverse-link-hover-color:           #fff;
349 | @navbar-inverse-link-hover-bg:              transparent;
350 | @navbar-inverse-link-active-color:          @navbar-inverse-link-hover-color;
351 | @navbar-inverse-link-active-bg:             darken(@navbar-inverse-bg, 10%);
352 | @navbar-inverse-link-disabled-color:        #444;
353 | @navbar-inverse-link-disabled-bg:           transparent;
354 | 
355 | // Inverted navbar brand label
356 | @navbar-inverse-brand-color:                @navbar-inverse-link-color;
357 | @navbar-inverse-brand-hover-color:          #fff;
358 | @navbar-inverse-brand-hover-bg:             transparent;
359 | 
360 | // Inverted navbar toggle
361 | @navbar-inverse-toggle-hover-bg:            #333;
362 | @navbar-inverse-toggle-icon-bar-bg:         #fff;
363 | @navbar-inverse-toggle-border-color:        #333;
364 | 
365 | 
366 | //== Navs
367 | //
368 | //##
369 | 
370 | //=== Shared nav styles
371 | @nav-link-padding:                          10px 15px;
372 | @nav-link-hover-bg:                         @gray-lighter;
373 | 
374 | @nav-disabled-link-color:                   @gray-light;
375 | @nav-disabled-link-hover-color:             @gray-light;
376 | 
377 | @nav-open-link-hover-color:                 #fff;
378 | 
379 | //== Tabs
380 | @nav-tabs-border-color:                     #ddd;
381 | 
382 | @nav-tabs-link-hover-border-color:          @gray-lighter;
383 | 
384 | @nav-tabs-active-link-hover-bg:             @body-bg;
385 | @nav-tabs-active-link-hover-color:          @gray;
386 | @nav-tabs-active-link-hover-border-color:   #ddd;
387 | 
388 | @nav-tabs-justified-link-border-color:            #ddd;
389 | @nav-tabs-justified-active-link-border-color:     @body-bg;
390 | 
391 | //== Pills
392 | @nav-pills-border-radius:                   @border-radius-base;
393 | @nav-pills-active-link-hover-bg:            @component-active-bg;
394 | @nav-pills-active-link-hover-color:         @component-active-color;
395 | 
396 | 
397 | //== Pagination
398 | //
399 | //##
400 | 
401 | @pagination-color:                     @link-color;
402 | @pagination-bg:                        #fff;
403 | @pagination-border:                    #ddd;
404 | 
405 | @pagination-hover-color:               @link-hover-color;
406 | @pagination-hover-bg:                  @gray-lighter;
407 | @pagination-hover-border:              #ddd;
408 | 
409 | @pagination-active-color:              #fff;
410 | @pagination-active-bg:                 @brand-primary;
411 | @pagination-active-border:             @brand-primary;
412 | 
413 | @pagination-disabled-color:            @gray-light;
414 | @pagination-disabled-bg:               #fff;
415 | @pagination-disabled-border:           #ddd;
416 | 
417 | 
418 | //== Pager
419 | //
420 | //##
421 | 
422 | @pager-bg:                             @pagination-bg;
423 | @pager-border:                         @pagination-border;
424 | @pager-border-radius:                  15px;
425 | 
426 | @pager-hover-bg:                       @pagination-hover-bg;
427 | 
428 | @pager-active-bg:                      @pagination-active-bg;
429 | @pager-active-color:                   @pagination-active-color;
430 | 
431 | @pager-disabled-color:                 @pagination-disabled-color;
432 | 
433 | 
434 | //== Jumbotron
435 | //
436 | //##
437 | 
438 | @jumbotron-padding:              30px;
439 | @jumbotron-color:                inherit;
440 | @jumbotron-bg:                   @gray-lighter;
441 | @jumbotron-heading-color:        inherit;
442 | @jumbotron-font-size:            ceil((@font-size-base * 1.5));
443 | 
444 | 
445 | //== Form states and alerts
446 | //
447 | //## Define colors for form feedback states and, by default, alerts.
448 | 
449 | @state-success-text:             #3c763d;
450 | @state-success-bg:               #dff0d8;
451 | @state-success-border:           darken(spin(@state-success-bg, -10), 5%);
452 | 
453 | @state-info-text:                #31708f;
454 | @state-info-bg:                  #d9edf7;
455 | @state-info-border:              darken(spin(@state-info-bg, -10), 7%);
456 | 
457 | @state-warning-text:             #8a6d3b;
458 | @state-warning-bg:               #fcf8e3;
459 | @state-warning-border:           darken(spin(@state-warning-bg, -10), 5%);
460 | 
461 | @state-danger-text:              #a94442;
462 | @state-danger-bg:                #f2dede;
463 | @state-danger-border:            darken(spin(@state-danger-bg, -10), 5%);
464 | 
465 | 
466 | //== Tooltips
467 | //
468 | //##
469 | 
470 | //** Tooltip max width
471 | @tooltip-max-width:           200px;
472 | //** Tooltip text color
473 | @tooltip-color:               #fff;
474 | //** Tooltip background color
475 | @tooltip-bg:                  #000;
476 | @tooltip-opacity:             .9;
477 | 
478 | //** Tooltip arrow width
479 | @tooltip-arrow-width:         5px;
480 | //** Tooltip arrow color
481 | @tooltip-arrow-color:         @tooltip-bg;
482 | 
483 | 
484 | //== Popovers
485 | //
486 | //##
487 | 
488 | //** Popover body background color
489 | @popover-bg:                          #fff;
490 | //** Popover maximum width
491 | @popover-max-width:                   276px;
492 | //** Popover border color
493 | @popover-border-color:                rgba(0,0,0,.2);
494 | //** Popover fallback border color
495 | @popover-fallback-border-color:       #ccc;
496 | 
497 | //** Popover title background color
498 | @popover-title-bg:                    darken(@popover-bg, 3%);
499 | 
500 | //** Popover arrow width
501 | @popover-arrow-width:                 10px;
502 | //** Popover arrow color
503 | @popover-arrow-color:                 #fff;
504 | 
505 | //** Popover outer arrow width
506 | @popover-arrow-outer-width:           (@popover-arrow-width + 1);
507 | //** Popover outer arrow color
508 | @popover-arrow-outer-color:           rgba(0,0,0,.25);
509 | //** Popover outer arrow fallback color
510 | @popover-arrow-outer-fallback-color:  #999;
511 | 
512 | 
513 | //== Labels
514 | //
515 | //##
516 | 
517 | //** Default label background color
518 | @label-default-bg:            @gray-light;
519 | //** Primary label background color
520 | @label-primary-bg:            @brand-primary;
521 | //** Success label background color
522 | @label-success-bg:            @brand-success;
523 | //** Info label background color
524 | @label-info-bg:               @brand-info;
525 | //** Warning label background color
526 | @label-warning-bg:            @brand-warning;
527 | //** Danger label background color
528 | @label-danger-bg:             @brand-danger;
529 | 
530 | //** Default label text color
531 | @label-color:                 #fff;
532 | //** Default text color of a linked label
533 | @label-link-hover-color:      #fff;
534 | 
535 | 
536 | //== Modals
537 | //
538 | //##
539 | 
540 | //** Padding applied to the modal body
541 | @modal-inner-padding:         20px;
542 | 
543 | //** Padding applied to the modal title
544 | @modal-title-padding:         15px;
545 | //** Modal title line-height
546 | @modal-title-line-height:     @line-height-base;
547 | 
548 | //** Background color of modal content area
549 | @modal-content-bg:                             #fff;
550 | //** Modal content border color
551 | @modal-content-border-color:                   rgba(0,0,0,.2);
552 | //** Modal content border color **for IE8**
553 | @modal-content-fallback-border-color:          #999;
554 | 
555 | //** Modal backdrop background color
556 | @modal-backdrop-bg:           #000;
557 | //** Modal backdrop opacity
558 | @modal-backdrop-opacity:      .5;
559 | //** Modal header border color
560 | @modal-header-border-color:   #e5e5e5;
561 | //** Modal footer border color
562 | @modal-footer-border-color:   @modal-header-border-color;
563 | 
564 | @modal-lg:                    900px;
565 | @modal-md:                    600px;
566 | @modal-sm:                    300px;
567 | 
568 | 
569 | //== Alerts
570 | //
571 | //## Define alert colors, border radius, and padding.
572 | 
573 | @alert-padding:               15px;
574 | @alert-border-radius:         @border-radius-base;
575 | @alert-link-font-weight:      bold;
576 | 
577 | @alert-success-bg:            @state-success-bg;
578 | @alert-success-text:          @state-success-text;
579 | @alert-success-border:        @state-success-border;
580 | 
581 | @alert-info-bg:               @state-info-bg;
582 | @alert-info-text:             @state-info-text;
583 | @alert-info-border:           @state-info-border;
584 | 
585 | @alert-warning-bg:            @state-warning-bg;
586 | @alert-warning-text:          @state-warning-text;
587 | @alert-warning-border:        @state-warning-border;
588 | 
589 | @alert-danger-bg:             @state-danger-bg;
590 | @alert-danger-text:           @state-danger-text;
591 | @alert-danger-border:         @state-danger-border;
592 | 
593 | 
594 | //== Progress bars
595 | //
596 | //##
597 | 
598 | //** Background color of the whole progress component
599 | @progress-bg:                 #f5f5f5;
600 | //** Progress bar text color
601 | @progress-bar-color:          #fff;
602 | 
603 | //** Default progress bar color
604 | @progress-bar-bg:             @brand-primary;
605 | //** Success progress bar color
606 | @progress-bar-success-bg:     @brand-success;
607 | //** Warning progress bar color
608 | @progress-bar-warning-bg:     @brand-warning;
609 | //** Danger progress bar color
610 | @progress-bar-danger-bg:      @brand-danger;
611 | //** Info progress bar color
612 | @progress-bar-info-bg:        @brand-info;
613 | 
614 | 
615 | //== List group
616 | //
617 | //##
618 | 
619 | //** Background color on `.list-group-item`
620 | @list-group-bg:                 #fff;
621 | //** `.list-group-item` border color
622 | @list-group-border:             #ddd;
623 | //** List group border radius
624 | @list-group-border-radius:      @border-radius-base;
625 | 
626 | //** Background color of single list elements on hover
627 | @list-group-hover-bg:           #f5f5f5;
628 | //** Text color of active list elements
629 | @list-group-active-color:       @component-active-color;
630 | //** Background color of active list elements
631 | @list-group-active-bg:          @component-active-bg;
632 | //** Border color of active list elements
633 | @list-group-active-border:      @list-group-active-bg;
634 | @list-group-active-text-color:  lighten(@list-group-active-bg, 40%);
635 | 
636 | @list-group-link-color:         #555;
637 | @list-group-link-heading-color: #333;
638 | 
639 | 
640 | //== Panels
641 | //
642 | //##
643 | 
644 | @panel-bg:                    #fff;
645 | @panel-body-padding:          15px;
646 | @panel-border-radius:         @border-radius-base;
647 | 
648 | //** Border color for elements within panels
649 | @panel-inner-border:          #ddd;
650 | @panel-footer-bg:             #f5f5f5;
651 | 
652 | @panel-default-text:          @gray-dark;
653 | @panel-default-border:        #ddd;
654 | @panel-default-heading-bg:    #f5f5f5;
655 | 
656 | @panel-primary-text:          #fff;
657 | @panel-primary-border:        @brand-primary;
658 | @panel-primary-heading-bg:    @brand-primary;
659 | 
660 | @panel-success-text:          @state-success-text;
661 | @panel-success-border:        @state-success-border;
662 | @panel-success-heading-bg:    @state-success-bg;
663 | 
664 | @panel-info-text:             @state-info-text;
665 | @panel-info-border:           @state-info-border;
666 | @panel-info-heading-bg:       @state-info-bg;
667 | 
668 | @panel-warning-text:          @state-warning-text;
669 | @panel-warning-border:        @state-warning-border;
670 | @panel-warning-heading-bg:    @state-warning-bg;
671 | 
672 | @panel-danger-text:           @state-danger-text;
673 | @panel-danger-border:         @state-danger-border;
674 | @panel-danger-heading-bg:     @state-danger-bg;
675 | 
676 | 
677 | //== Thumbnails
678 | //
679 | //##
680 | 
681 | //** Padding around the thumbnail image
682 | @thumbnail-padding:           4px;
683 | //** Thumbnail background color
684 | @thumbnail-bg:                @body-bg;
685 | //** Thumbnail border color
686 | @thumbnail-border:            #ddd;
687 | //** Thumbnail border radius
688 | @thumbnail-border-radius:     @border-radius-base;
689 | 
690 | //** Custom text color for thumbnail captions
691 | @thumbnail-caption-color:     @text-color;
692 | //** Padding around the thumbnail caption
693 | @thumbnail-caption-padding:   9px;
694 | 
695 | 
696 | //== Wells
697 | //
698 | //##
699 | 
700 | @well-bg:                     #f5f5f5;
701 | @well-border:                 darken(@well-bg, 7%);
702 | 
703 | 
704 | //== Badges
705 | //
706 | //##
707 | 
708 | @badge-color:                 #fff;
709 | //** Linked badge text color on hover
710 | @badge-link-hover-color:      #fff;
711 | @badge-bg:                    @gray-light;
712 | 
713 | //** Badge text color in active nav link
714 | @badge-active-color:          @link-color;
715 | //** Badge background color in active nav link
716 | @badge-active-bg:             #fff;
717 | 
718 | @badge-font-weight:           bold;
719 | @badge-line-height:           1;
720 | @badge-border-radius:         10px;
721 | 
722 | 
723 | //== Breadcrumbs
724 | //
725 | //##
726 | 
727 | @breadcrumb-padding-vertical:   8px;
728 | @breadcrumb-padding-horizontal: 15px;
729 | //** Breadcrumb background color
730 | @breadcrumb-bg:                 #f5f5f5;
731 | //** Breadcrumb text color
732 | @breadcrumb-color:              #ccc;
733 | //** Text color of current page in the breadcrumb
734 | @breadcrumb-active-color:       @gray-light;
735 | //** Textual separator for between breadcrumb elements
736 | @breadcrumb-separator:          "/";
737 | 
738 | 
739 | //== Carousel
740 | //
741 | //##
742 | 
743 | @carousel-text-shadow:                        0 1px 2px rgba(0,0,0,.6);
744 | 
745 | @carousel-control-color:                      #fff;
746 | @carousel-control-width:                      15%;
747 | @carousel-control-opacity:                    .5;
748 | @carousel-control-font-size:                  20px;
749 | 
750 | @carousel-indicator-active-bg:                #fff;
751 | @carousel-indicator-border-color:             #fff;
752 | 
753 | @carousel-caption-color:                      #fff;
754 | 
755 | 
756 | //== Close
757 | //
758 | //##
759 | 
760 | @close-font-weight:           bold;
761 | @close-color:                 #000;
762 | @close-text-shadow:           0 1px 0 #fff;
763 | 
764 | 
765 | //== Code
766 | //
767 | //##
768 | 
769 | @code-color:                  #c7254e;
770 | @code-bg:                     #f9f2f4;
771 | 
772 | @kbd-color:                   #fff;
773 | @kbd-bg:                      #333;
774 | 
775 | @pre-bg:                      #f5f5f5;
776 | @pre-color:                   @gray-dark;
777 | @pre-border-color:            #ccc;
778 | @pre-scrollable-max-height:   340px;
779 | 
780 | 
781 | //== Type
782 | //
783 | //##
784 | 
785 | //** Text muted color
786 | @text-muted:                  @gray-light;
787 | //** Abbreviations and acronyms border color
788 | @abbr-border-color:           @gray-light;
789 | //** Headings small color
790 | @headings-small-color:        @gray-light;
791 | //** Blockquote small color
792 | @blockquote-small-color:      @gray-light;
793 | //** Blockquote border color
794 | @blockquote-border-color:     @gray-lighter;
795 | //** Page header border color
796 | @page-header-border-color:    @gray-lighter;
797 | 
798 | 
799 | //== Miscellaneous
800 | //
801 | //##
802 | 
803 | //** Horizontal line color.
804 | @hr-border:                   @gray-lighter;
805 | 
806 | //** Horizontal offset for forms and lists.
807 | @component-offset-horizontal: 180px;
808 | 
809 | 
810 | //== Container sizes
811 | //
812 | //## Define the maximum width of `.container` for different screen sizes.
813 | 
814 | // Small screen / tablet
815 | @container-tablet:             ((720px + @grid-gutter-width));
816 | //** For `@screen-sm-min` and up.
817 | @container-sm:                 @container-tablet;
818 | 
819 | // Medium screen / desktop
820 | @container-desktop:            ((940px + @grid-gutter-width));
821 | //** For `@screen-md-min` and up.
822 | @container-md:                 @container-desktop;
823 | 
824 | // Large screen / wide desktop
825 | @container-large-desktop:      ((1140px + @grid-gutter-width));
826 | //** For `@screen-lg-min` and up.
827 | @container-lg:                 @container-large-desktop;
828 | 


--------------------------------------------------------------------------------
/VAuditDemo_Debug/footer.php:
--------------------------------------------------------------------------------
1 |         <hr>
2 | 	   <div id="footer" class="pull-right">Copyright &copy; 2016 <a href="https://www.virzz.com/" target="_blank">Virink</a></div> 
3 |     </div>
4 |     <script src="https://code.jquery.com/jquery-1.10.2.min.js"></script>
5 |     <script src="/js/bootstrap.min.js"></script>
6 |     <script src="/js/bootswatch.js"></script>
7 |   </body>
8 | </html>
9 | 


--------------------------------------------------------------------------------
/VAuditDemo_Debug/header.php:
--------------------------------------------------------------------------------
 1 | <!DOCTYPE html>
 2 | <html lang="en">
 3 |   <head>
 4 |     <title>VAuditDemo</title>
 5 |     <meta name="viewport" content="width=device-width, initial-scale=1.0">
 6 |     <meta charset="utf-8">
 7 |     <link rel="stylesheet" href="/css/bootstrap.css" media="screen">
 8 |     <link rel="stylesheet" href="/css/bootswatch.min.css">
 9 |     <!-- HTML5 shim and Respond.js IE8 support of HTML5 elements and media queries -->
10 |     <!--[if lt IE 9]>
11 |       <script src="../bower_components/html5shiv/dist/html5shiv.js"></script>
12 |       <script src="../bower_components/respond/dest/respond.min.js"></script>
13 |     <![endif]-->
14 |   </head>
15 |   <body>
16 |     <script src="/js/bsa.js"></script>
17 | 
18 |     <div class="navbar navbar-default navbar-fixed-top">
19 |       <div class="container">
20 |         <div class="navbar-header">
21 |           <a href="/" class="navbar-brand">VAuditDemo</a>
22 |         </div>
23 |         <div class="navbar-collapse collapse" id="navbar-main">
24 |           <ul class="nav navbar-nav">
25 |             <li>
26 |               <a href="/message.php">留言</a>
27 |             </li>
28 |             <li>
29 |               <a href="/index.php?module=about">關於<span></a>
30 |             </li>
31 |           </ul>
32 |           <form class="navbar-form navbar-left" action="/search.php" method="get">
33 |             <input type="text" name="search" class="form-control col-lg-8" placeholder="搜索留言">
34 |           </form>
35 |           <ul class="nav navbar-nav navbar-right">
36 |       <?php if ( isset( $_SESSION['username'] ) ) {?>
37 |             <li><a href="/user/user.php"><?php echo $_SESSION['username'];?></a></li>
38 |             <li><a href="/user/logout.php">退出</a></li>
39 |       <?php } else if ( isset( $_SESSION['admin'] ) ) {?>
40 |         <li><a href="/admin/manage.php"><?php echo $_SESSION['admin'];?></a></li>
41 |             <li><a href="/user/logout.php">退出</a></li>
42 |       <?php } else {?>
43 |       <li><a href="/user/login.php">登录</a></li>
44 |             <li><a href="/user/reg.php">注册</a></li>
45 |       <?php }?>
46 |           </ul>
47 | 
48 |         </div>
49 |       </div>
50 |     </div>
51 | 
52 | <br />
53 |     <div class="container">
54 | 


--------------------------------------------------------------------------------
/VAuditDemo_Debug/images/default.jpg:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/virink/VAuditDemo/33dc98de2e9e505b86cf324b50fd484cfb9832c8/VAuditDemo_Debug/images/default.jpg


--------------------------------------------------------------------------------
/VAuditDemo_Debug/index.php:
--------------------------------------------------------------------------------
 1 | <?php 
 2 | require_once('sys/config.php');
 3 | require_once('header.php');
 4 | ?>
 5 | <div class="row">
 6 | 	<?php
 7 | 	/* Include */
 8 | 	if (isset($_GET['module'])){
 9 | 		include($_GET['module'].'.inc');
10 | 	}else{
11 | 	?>
12 | 	<div class="jumbotron" style="text-align: center;">
13 | 		<h1><b>VAuditDemo</b></h1>
14 | 		<p>一个简单的Web漏洞演练平台</p><br />
15 | 	</div>
16 | 	<div class="col-lg-12">
17 | 		<h2>用於演示講解PHP基本漏洞</h2>
18 | 		<p></p>
19 | 	</div>
20 | 	<?php
21 | 	}
22 | 	?>
23 | </div>
24 | 		
25 | <?php
26 | require_once('footer.php');
27 | ?>
28 | 


--------------------------------------------------------------------------------
/VAuditDemo_Debug/install/install.php:
--------------------------------------------------------------------------------
  1 | <?php
  2 | 
  3 | if ( file_exists($_SERVER["DOCUMENT_ROOT"].'/sys/install.lock') ) {
  4 | 	header( "Location: ../index.php" );
  5 | }
  6 | require_once '../header.php';
  7 | 
  8 | function check_writeable( $file ) {
  9 | 	if ( file_exists( $file ) ) {
 10 | 		if ( is_dir( $file ) ) {
 11 | 			$dir = $file;
 12 | 			if ( $fp = @fopen( "$dir/test.txt", 'w' ) ) {
 13 | 				@fclose( $fp );
 14 | 				@unlink( "$dir/test.txt" );
 15 | 				$writeable = 1;
 16 | 			}
 17 | 			else {
 18 | 				$writeable = 0;
 19 | 			}
 20 | 		}
 21 | 		else {
 22 | 			if ( $fp = @fopen( $file, 'a+' ) ) {
 23 | 				@fclose( $fp );
 24 | 				$writeable = 1;
 25 | 			}
 26 | 			else {
 27 | 				$writeable = 0;
 28 | 			}
 29 | 		}
 30 | 	}
 31 | 	else {
 32 | 		$writeable = 2;
 33 | 	}
 34 | 	return $writeable;
 35 | }
 36 | 
 37 | $sys_info['mysql_ver']     = extension_loaded( 'mysql' ) ? 'OK' : 'NO';
 38 | $sys_info['zlib']          = function_exists( 'gzclose' ) ? 'OK' : 'NO';
 39 | $sys_info['gd']            = extension_loaded( "gd" ) ? 'OK' : 'NO';
 40 | $sys_info['socket']        = function_exists( 'fsockopen' ) ? 'OK' : 'NO';
 41 | $sys_info['curl_init']        = function_exists( 'curl_init' ) ? 'OK' : 'NO';
 42 | 
 43 | echo '<div id="ourhp_er">';
 44 | echo '<h1>系統環境</h1>';
 45 | echo '<p>服務器操作系統:&nbsp;....................................................................&nbsp;'.PHP_OS.'</p>';
 46 | echo '<p>Web 服務器:&nbsp;....................................................&nbsp;'.$_SERVER['SERVER_SOFTWARE'].'</p>';
 47 | echo '<p>PHP 版本:&nbsp;....................................................................&nbsp;'.PHP_VERSION.'</p>';
 48 | echo '<p>MySQL 版本:&nbsp;....................................................................&nbsp;'.$sys_info['mysql_ver'].'</p>';
 49 | echo '<p>Zlib 支持:&nbsp;....................................................................&nbsp;'.$sys_info['zlib'].'</p>';
 50 | echo '<p>GD2 支持:&nbsp;....................................................................&nbsp;'.$sys_info['gd'].'</p>';
 51 | echo '<p>Socket 支持:&nbsp;....................................................................&nbsp;'.$sys_info['socket'].'</p>';
 52 | echo '<p>curl 支持:&nbsp;....................................................................&nbsp;'.$sys_info['curl_init'].'</p>';
 53 | echo '<h1>目錄權限</h1>';
 54 | 
 55 | /* 检查目录 */
 56 | $check_dirs = array (
 57 | 	'../sys',
 58 | 	'../uploads'
 59 | );
 60 | 
 61 | $i = 0;
 62 | foreach ( $check_dirs as $dir ) {
 63 | 	$full_dir = $dir;
 64 | 	$check_writeable = check_writeable( $full_dir );
 65 | 	if ( $check_writeable == '1' ) {
 66 | 		echo "<p>".$check_dirs[$i]."&nbsp;...................................................................&nbsp;<font color='#00CC33'>可寫</font></p>";
 67 | 	}
 68 | 	elseif ( $check_writeable == '0' ) {
 69 | 		echo "<p>".$check_dirs[$i]."&nbsp;...................................................................&nbsp;<font color='#ff0000'>不可寫</font></p>";
 70 | 		$no_write = true;
 71 | 	}
 72 | 	elseif ( $check_writeable == '2' ) {
 73 | 		echo "<p>".$check_dirs[$i]."&nbsp;...................................................................&nbsp;<b>不存在</b></p>";
 74 | 		$no_write = true;
 75 | 	}
 76 | 	$i = $i + 1;
 77 | }
 78 | 
 79 | if ( $sys_info['gd'] == 'NO' || $sys_info['curl_init'] == 'NO' ) {
 80 | 	exit( '組建不支持，無法安裝使用！' );
 81 | }else if ( $check_writeable == '0' || $check_writeable == '2' ) {
 82 | 	exit( '關鍵目錄不可寫，無法安裝使用！' );
 83 | }
 84 | 
 85 | if ( $_POST ) {
 86 | 
 87 | 	if ( $_POST["dbhost"] == "" ) {
 88 | 		exit( '数据库连接地址不能为空' );
 89 | 	}elseif ( $_POST["dbuser"] == "" ) {
 90 | 		exit( '数据库数据库登录名' );
 91 | 	}elseif ( $_POST["dbname"] == "" ) {
 92 | 		exit( '请先创建数据库名称' );
 93 | 	}
 94 | 
 95 | 	$dbhost = $_POST["dbhost"];
 96 | 	$dbuser = $_POST["dbuser"];
 97 | 	$dbpass = $_POST["dbpass"];
 98 | 	$dbname = $_POST["dbname"];
 99 | 
100 | 	$con = mysql_connect( $dbhost, $dbuser, $dbpass );
101 | 	if ( !$con ) {
102 | 		die( '数据库链接出错，请检查账号密码及地址是否正确: ' . mysql_error() );
103 | 	}
104 | 
105 | 	$result = mysql_query('show databases;') or die ( mysql_error() );;
106 | 	While($row = mysql_fetch_assoc($result)){       
107 | 		$data[] = $row['Database'];
108 | 	}
109 | 	unset($result, $row);
110 | 	if (in_array(strtolower($dbname), $data)){
111 | 		mysql_close();
112 | 		echo "<script>if(!alert('數據庫已存在')){window.history.back(-1);}</script>";
113 | 		exit();
114 | 	}
115 | 
116 | 	mysql_query( "CREATE DATABASE $dbname", $con ) or die ( mysql_error() );
117 | 
118 | 	$str_tmp="<?php\r\n";
119 | 	$str_end="?>";
120 | 	$str_tmp.="\r\n";
121 | 	$str_tmp.="error_reporting(0);\r\n";
122 | 	$str_tmp.="\r\n";
123 | 	$str_tmp.="if (!file_exists(\$_SERVER[\"DOCUMENT_ROOT\"].'/sys/install.lock')){\r\n\theader(\"Location: /install/install.php\");\r\nexit;\r\n}\r\n";
124 | 	$str_tmp.="\r\n";
125 | 	$str_tmp.="include_once('../sys/lib.php');\r\n";
126 | 	$str_tmp.="\r\n";
127 | 	$str_tmp.="\$host=\"$dbhost\"; \r\n";
128 | 	$str_tmp.="\$username=\"$dbuser\"; \r\n";
129 | 	$str_tmp.="\$password=\"$dbpass\"; \r\n";
130 | 	$str_tmp.="\$database=\"$dbname\"; \r\n";
131 | 	$str_tmp.="\r\n";
132 | 	$str_tmp.="\$conn = mysql_connect(\$host,\$username,\$password);\r\n";
133 | 	$str_tmp.="mysql_query('set names utf8',\$conn);\r\n";
134 | 	$str_tmp.="mysql_select_db(\$database, \$conn) or die(mysql_error());\r\n";
135 | 	$str_tmp.="if (!\$conn)\r\n";
136 | 	$str_tmp.="{\r\n";
137 | 	$str_tmp.="\tdie('Could not connect: ' . mysql_error());\r\n";
138 | 	$str_tmp.="\texit;\r\n";
139 | 	$str_tmp.="}\r\n";
140 | 	$str_tmp.="\r\n";
141 | 	$str_tmp.="session_start();\r\n";
142 | 	$str_tmp.="\r\n";
143 | 	$str_tmp.=$str_end;
144 | 
145 | 	$fp=fopen( "../sys/config.php", "w" );
146 | 	fwrite( $fp, $str_tmp );
147 | 	fclose( $fp );
148 | 
149 | 	//创建表
150 | 	mysql_select_db( $dbname, $con );
151 | 	mysql_query( "set names 'utf8'", $con );
152 | 	//导入数据库
153 | 	$sql=file_get_contents( "install.sql" );
154 | 	$a=explode( ";", $sql );
155 | 	foreach ( $a as $b ) {
156 | 		mysql_query( $b.";" );
157 | 	}
158 | 	mysql_close( $con );
159 | 	file_put_contents($_SERVER["DOCUMENT_ROOT"].'/sys/install.lock', 'virink');
160 | 	echo "<script>if(!alert('安裝成功')){window.location.href='../index.php';}</script>";
161 | 	exit;
162 | }else {
163 | 	echo "<form id='form1' name='form1' method='post' action=''>";
164 | 	echo "<table width='100%' border='0' align='center' cellpadding='10' id='table'>";
165 | 	echo "<tr>";
166 | 	echo "<td colspan='2'><h1></h1></td>";
167 | 	echo "</tr>";
168 | 	echo "<tr>";
169 | 	echo "<td><div align='right'>數據庫连接地址：</div></td>";
170 | 	echo "<td><input name='dbhost' type='text' id='input' value='localhost'/> *</td>";
171 | 	echo "</tr>";
172 | 	echo "<tr>";
173 | 	echo "<td><div align='right'>數據庫登錄名：</div></td>";
174 | 	echo "<td><input name='dbuser' type='text' id='input' value='root'/> *</td>";
175 | 	echo "</tr>";
176 | 	echo "<tr>";
177 | 	echo "<td><div align='right'>數據庫登錄密碼：</div></td>";
178 | 	echo "<td><input name='dbpass' type='password' id='input' value='root'/> *</td>";
179 | 	echo "</tr>";
180 | 	echo "<tr>";
181 | 	echo "<td><div align='right'>創建數據庫名稱：</div></td>";
182 | 	echo "<td><input name='dbname' type='text' id='input' value='vauditdemo'/> *</td> ";
183 | 	echo "</tr>";
184 | 	echo "<tr>";
185 | 	echo "<td></td>";
186 | 	echo "<td><input type='submit' class='btn' name='Submit' value='安裝' /></td>";
187 | 	echo "</tr>";
188 | 	echo "</table>";
189 | 	echo "</form>";
190 | }
191 | ?>
192 | 
193 | 
194 | <?php
195 | require_once '../footer.php';
196 | ?>
197 | 


--------------------------------------------------------------------------------
/VAuditDemo_Debug/install/install.sql:
--------------------------------------------------------------------------------
 1 | # Host: localhost  (Version: 5.5.40)
 2 | # Date: 2016-07-06 02:06:51
 3 | # Generator: MySQL-Front 5.3  (Build 4.214)
 4 | 
 5 | /*!40101 SET NAMES utf-8 */;
 6 | 
 7 | #
 8 | # Structure for table "admin"
 9 | #
10 | 
11 | DROP TABLE IF EXISTS `admin`;
12 | CREATE TABLE `admin` (
13 |   `admin_id` int(10) unsigned NOT NULL AUTO_INCREMENT,
14 |   `admin_name` varchar(200) NOT NULL DEFAULT '',
15 |   `admin_pass` varchar(200) NOT NULL DEFAULT '',
16 |   PRIMARY KEY (`admin_id`)
17 | ) ENGINE=MyISAM AUTO_INCREMENT=3 DEFAULT CHARSET=utf8;
18 | 
19 | #
20 | # Data for table "admin"
21 | #
22 | 
23 | /*!40000 ALTER TABLE `admin` DISABLE KEYS */;
24 | INSERT INTO `admin` VALUES (1,'admin','d033e22ae348aeb5660fc2140aec35850c4da997');
25 | /*!40000 ALTER TABLE `admin` ENABLE KEYS */;
26 | 
27 | #
28 | # Structure for table "comment"
29 | #
30 | 
31 | DROP TABLE IF EXISTS `comment`;
32 | CREATE TABLE `comment` (
33 |   `comment_id` int(10) unsigned NOT NULL AUTO_INCREMENT,
34 |   `user_name` varchar(16) NOT NULL,
35 |   `comment_text` varchar(255) NOT NULL DEFAULT '',
36 |   `pub_date` date NOT NULL,
37 |   PRIMARY KEY (`comment_id`)
38 | ) ENGINE=MyISAM AUTO_INCREMENT=7 DEFAULT CHARSET=utf8;
39 | 
40 | #
41 | # Data for table "comment"
42 | #
43 | 
44 | /*!40000 ALTER TABLE `comment` DISABLE KEYS */;
45 | /*!40000 ALTER TABLE `comment` ENABLE KEYS */;
46 | 
47 | #
48 | # Structure for table "users"
49 | #
50 | 
51 | DROP TABLE IF EXISTS `users`;
52 | CREATE TABLE `users` (
53 |   `user_id` int(10) unsigned NOT NULL AUTO_INCREMENT,
54 |   `user_name` varchar(16) NOT NULL DEFAULT '',
55 |   `user_pass` varchar(255) NOT NULL DEFAULT '',
56 |   `user_avatar` varchar(255) NOT NULL DEFAULT '',
57 |   `user_bio` varchar(255) NOT NULL DEFAULT '',
58 |   `join_date` date NOT NULL,
59 |   `login_ip` varchar(255) DEFAULT NULL,
60 |   PRIMARY KEY (`user_id`)
61 | ) ENGINE=MyISAM AUTO_INCREMENT=8 DEFAULT CHARSET=utf8;
62 | 
63 | #
64 | # Data for table "users"
65 | #
66 | 
67 | /*!40000 ALTER TABLE `users` DISABLE KEYS */;
68 | /*!40000 ALTER TABLE `users` ENABLE KEYS */;
69 | 


--------------------------------------------------------------------------------
/VAuditDemo_Debug/js/bootstrap.min.js:
--------------------------------------------------------------------------------
1 | /*!
2 |  * Bootstrap v3.1.0 (http://getbootstrap.com)
3 |  * Copyright 2011-2014 Twitter, Inc.
4 |  * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE)
5 |  */
6 | if("undefined"==typeof jQuery)throw new Error("Bootstrap requires jQuery");+function(a){"use strict";function b(){var a=document.createElement("bootstrap"),b={WebkitTransition:"webkitTransitionEnd",MozTransition:"transitionend",OTransition:"oTransitionEnd otransitionend",transition:"transitionend"};for(var c in b)if(void 0!==a.style[c])return{end:b[c]};return!1}a.fn.emulateTransitionEnd=function(b){var c=!1,d=this;a(this).one(a.support.transition.end,function(){c=!0});var e=function(){c||a(d).trigger(a.support.transition.end)};return setTimeout(e,b),this},a(function(){a.support.transition=b()})}(jQuery),+function(a){"use strict";var b='[data-dismiss="alert"]',c=function(c){a(c).on("click",b,this.close)};c.prototype.close=function(b){function c(){f.trigger("closed.bs.alert").remove()}var d=a(this),e=d.attr("data-target");e||(e=d.attr("href"),e=e&&e.replace(/.*(?=#[^\s]*$)/,""));var f=a(e);b&&b.preventDefault(),f.length||(f=d.hasClass("alert")?d:d.parent()),f.trigger(b=a.Event("close.bs.alert")),b.isDefaultPrevented()||(f.removeClass("in"),a.support.transition&&f.hasClass("fade")?f.one(a.support.transition.end,c).emulateTransitionEnd(150):c())};var d=a.fn.alert;a.fn.alert=function(b){return this.each(function(){var d=a(this),e=d.data("bs.alert");e||d.data("bs.alert",e=new c(this)),"string"==typeof b&&e[b].call(d)})},a.fn.alert.Constructor=c,a.fn.alert.noConflict=function(){return a.fn.alert=d,this},a(document).on("click.bs.alert.data-api",b,c.prototype.close)}(jQuery),+function(a){"use strict";var b=function(c,d){this.$element=a(c),this.options=a.extend({},b.DEFAULTS,d),this.isLoading=!1};b.DEFAULTS={loadingText:"loading..."},b.prototype.setState=function(b){var c="disabled",d=this.$element,e=d.is("input")?"val":"html",f=d.data();b+="Text",f.resetText||d.data("resetText",d[e]()),d[e](f[b]||this.options[b]),setTimeout(a.proxy(function(){"loadingText"==b?(this.isLoading=!0,d.addClass(c).attr(c,c)):this.isLoading&&(this.isLoading=!1,d.removeClass(c).removeAttr(c))},this),0)},b.prototype.toggle=function(){var a=!0,b=this.$element.closest('[data-toggle="buttons"]');if(b.length){var c=this.$element.find("input");"radio"==c.prop("type")&&(c.prop("checked")&&this.$element.hasClass("active")?a=!1:b.find(".active").removeClass("active")),a&&c.prop("checked",!this.$element.hasClass("active")).trigger("change")}a&&this.$element.toggleClass("active")};var c=a.fn.button;a.fn.button=function(c){return this.each(function(){var d=a(this),e=d.data("bs.button"),f="object"==typeof c&&c;e||d.data("bs.button",e=new b(this,f)),"toggle"==c?e.toggle():c&&e.setState(c)})},a.fn.button.Constructor=b,a.fn.button.noConflict=function(){return a.fn.button=c,this},a(document).on("click.bs.button.data-api","[data-toggle^=button]",function(b){var c=a(b.target);c.hasClass("btn")||(c=c.closest(".btn")),c.button("toggle"),b.preventDefault()})}(jQuery),+function(a){"use strict";var b=function(b,c){this.$element=a(b),this.$indicators=this.$element.find(".carousel-indicators"),this.options=c,this.paused=this.sliding=this.interval=this.$active=this.$items=null,"hover"==this.options.pause&&this.$element.on("mouseenter",a.proxy(this.pause,this)).on("mouseleave",a.proxy(this.cycle,this))};b.DEFAULTS={interval:5e3,pause:"hover",wrap:!0},b.prototype.cycle=function(b){return b||(this.paused=!1),this.interval&&clearInterval(this.interval),this.options.interval&&!this.paused&&(this.interval=setInterval(a.proxy(this.next,this),this.options.interval)),this},b.prototype.getActiveIndex=function(){return this.$active=this.$element.find(".item.active"),this.$items=this.$active.parent().children(),this.$items.index(this.$active)},b.prototype.to=function(b){var c=this,d=this.getActiveIndex();return b>this.$items.length-1||0>b?void 0:this.sliding?this.$element.one("slid.bs.carousel",function(){c.to(b)}):d==b?this.pause().cycle():this.slide(b>d?"next":"prev",a(this.$items[b]))},b.prototype.pause=function(b){return b||(this.paused=!0),this.$element.find(".next, .prev").length&&a.support.transition&&(this.$element.trigger(a.support.transition.end),this.cycle(!0)),this.interval=clearInterval(this.interval),this},b.prototype.next=function(){return this.sliding?void 0:this.slide("next")},b.prototype.prev=function(){return this.sliding?void 0:this.slide("prev")},b.prototype.slide=function(b,c){var d=this.$element.find(".item.active"),e=c||d[b](),f=this.interval,g="next"==b?"left":"right",h="next"==b?"first":"last",i=this;if(!e.length){if(!this.options.wrap)return;e=this.$element.find(".item")[h]()}if(e.hasClass("active"))return this.sliding=!1;var j=a.Event("slide.bs.carousel",{relatedTarget:e[0],direction:g});return this.$element.trigger(j),j.isDefaultPrevented()?void 0:(this.sliding=!0,f&&this.pause(),this.$indicators.length&&(this.$indicators.find(".active").removeClass("active"),this.$element.one("slid.bs.carousel",function(){var b=a(i.$indicators.children()[i.getActiveIndex()]);b&&b.addClass("active")})),a.support.transition&&this.$element.hasClass("slide")?(e.addClass(b),e[0].offsetWidth,d.addClass(g),e.addClass(g),d.one(a.support.transition.end,function(){e.removeClass([b,g].join(" ")).addClass("active"),d.removeClass(["active",g].join(" ")),i.sliding=!1,setTimeout(function(){i.$element.trigger("slid.bs.carousel")},0)}).emulateTransitionEnd(1e3*d.css("transition-duration").slice(0,-1))):(d.removeClass("active"),e.addClass("active"),this.sliding=!1,this.$element.trigger("slid.bs.carousel")),f&&this.cycle(),this)};var c=a.fn.carousel;a.fn.carousel=function(c){return this.each(function(){var d=a(this),e=d.data("bs.carousel"),f=a.extend({},b.DEFAULTS,d.data(),"object"==typeof c&&c),g="string"==typeof c?c:f.slide;e||d.data("bs.carousel",e=new b(this,f)),"number"==typeof c?e.to(c):g?e[g]():f.interval&&e.pause().cycle()})},a.fn.carousel.Constructor=b,a.fn.carousel.noConflict=function(){return a.fn.carousel=c,this},a(document).on("click.bs.carousel.data-api","[data-slide], [data-slide-to]",function(b){var c,d=a(this),e=a(d.attr("data-target")||(c=d.attr("href"))&&c.replace(/.*(?=#[^\s]+$)/,"")),f=a.extend({},e.data(),d.data()),g=d.attr("data-slide-to");g&&(f.interval=!1),e.carousel(f),(g=d.attr("data-slide-to"))&&e.data("bs.carousel").to(g),b.preventDefault()}),a(window).on("load",function(){a('[data-ride="carousel"]').each(function(){var b=a(this);b.carousel(b.data())})})}(jQuery),+function(a){"use strict";var b=function(c,d){this.$element=a(c),this.options=a.extend({},b.DEFAULTS,d),this.transitioning=null,this.options.parent&&(this.$parent=a(this.options.parent)),this.options.toggle&&this.toggle()};b.DEFAULTS={toggle:!0},b.prototype.dimension=function(){var a=this.$element.hasClass("width");return a?"width":"height"},b.prototype.show=function(){if(!this.transitioning&&!this.$element.hasClass("in")){var b=a.Event("show.bs.collapse");if(this.$element.trigger(b),!b.isDefaultPrevented()){var c=this.$parent&&this.$parent.find("> .panel > .in");if(c&&c.length){var d=c.data("bs.collapse");if(d&&d.transitioning)return;c.collapse("hide"),d||c.data("bs.collapse",null)}var e=this.dimension();this.$element.removeClass("collapse").addClass("collapsing")[e](0),this.transitioning=1;var f=function(){this.$element.removeClass("collapsing").addClass("collapse in")[e]("auto"),this.transitioning=0,this.$element.trigger("shown.bs.collapse")};if(!a.support.transition)return f.call(this);var g=a.camelCase(["scroll",e].join("-"));this.$element.one(a.support.transition.end,a.proxy(f,this)).emulateTransitionEnd(350)[e](this.$element[0][g])}}},b.prototype.hide=function(){if(!this.transitioning&&this.$element.hasClass("in")){var b=a.Event("hide.bs.collapse");if(this.$element.trigger(b),!b.isDefaultPrevented()){var c=this.dimension();this.$element[c](this.$element[c]())[0].offsetHeight,this.$element.addClass("collapsing").removeClass("collapse").removeClass("in"),this.transitioning=1;var d=function(){this.transitioning=0,this.$element.trigger("hidden.bs.collapse").removeClass("collapsing").addClass("collapse")};return a.support.transition?void this.$element[c](0).one(a.support.transition.end,a.proxy(d,this)).emulateTransitionEnd(350):d.call(this)}}},b.prototype.toggle=function(){this[this.$element.hasClass("in")?"hide":"show"]()};var c=a.fn.collapse;a.fn.collapse=function(c){return this.each(function(){var d=a(this),e=d.data("bs.collapse"),f=a.extend({},b.DEFAULTS,d.data(),"object"==typeof c&&c);!e&&f.toggle&&"show"==c&&(c=!c),e||d.data("bs.collapse",e=new b(this,f)),"string"==typeof c&&e[c]()})},a.fn.collapse.Constructor=b,a.fn.collapse.noConflict=function(){return a.fn.collapse=c,this},a(document).on("click.bs.collapse.data-api","[data-toggle=collapse]",function(b){var c,d=a(this),e=d.attr("data-target")||b.preventDefault()||(c=d.attr("href"))&&c.replace(/.*(?=#[^\s]+$)/,""),f=a(e),g=f.data("bs.collapse"),h=g?"toggle":d.data(),i=d.attr("data-parent"),j=i&&a(i);g&&g.transitioning||(j&&j.find('[data-toggle=collapse][data-parent="'+i+'"]').not(d).addClass("collapsed"),d[f.hasClass("in")?"addClass":"removeClass"]("collapsed")),f.collapse(h)})}(jQuery),+function(a){"use strict";function b(b){a(d).remove(),a(e).each(function(){var d=c(a(this)),e={relatedTarget:this};d.hasClass("open")&&(d.trigger(b=a.Event("hide.bs.dropdown",e)),b.isDefaultPrevented()||d.removeClass("open").trigger("hidden.bs.dropdown",e))})}function c(b){var c=b.attr("data-target");c||(c=b.attr("href"),c=c&&/#[A-Za-z]/.test(c)&&c.replace(/.*(?=#[^\s]*$)/,""));var d=c&&a(c);return d&&d.length?d:b.parent()}var d=".dropdown-backdrop",e="[data-toggle=dropdown]",f=function(b){a(b).on("click.bs.dropdown",this.toggle)};f.prototype.toggle=function(d){var e=a(this);if(!e.is(".disabled, :disabled")){var f=c(e),g=f.hasClass("open");if(b(),!g){"ontouchstart"in document.documentElement&&!f.closest(".navbar-nav").length&&a('<div class="dropdown-backdrop"/>').insertAfter(a(this)).on("click",b);var h={relatedTarget:this};if(f.trigger(d=a.Event("show.bs.dropdown",h)),d.isDefaultPrevented())return;f.toggleClass("open").trigger("shown.bs.dropdown",h),e.focus()}return!1}},f.prototype.keydown=function(b){if(/(38|40|27)/.test(b.keyCode)){var d=a(this);if(b.preventDefault(),b.stopPropagation(),!d.is(".disabled, :disabled")){var f=c(d),g=f.hasClass("open");if(!g||g&&27==b.keyCode)return 27==b.which&&f.find(e).focus(),d.click();var h=" li:not(.divider):visible a",i=f.find("[role=menu]"+h+", [role=listbox]"+h);if(i.length){var j=i.index(i.filter(":focus"));38==b.keyCode&&j>0&&j--,40==b.keyCode&&j<i.length-1&&j++,~j||(j=0),i.eq(j).focus()}}}};var g=a.fn.dropdown;a.fn.dropdown=function(b){return this.each(function(){var c=a(this),d=c.data("bs.dropdown");d||c.data("bs.dropdown",d=new f(this)),"string"==typeof b&&d[b].call(c)})},a.fn.dropdown.Constructor=f,a.fn.dropdown.noConflict=function(){return a.fn.dropdown=g,this},a(document).on("click.bs.dropdown.data-api",b).on("click.bs.dropdown.data-api",".dropdown form",function(a){a.stopPropagation()}).on("click.bs.dropdown.data-api",e,f.prototype.toggle).on("keydown.bs.dropdown.data-api",e+", [role=menu], [role=listbox]",f.prototype.keydown)}(jQuery),+function(a){"use strict";var b=function(b,c){this.options=c,this.$element=a(b),this.$backdrop=this.isShown=null,this.options.remote&&this.$element.find(".modal-content").load(this.options.remote,a.proxy(function(){this.$element.trigger("loaded.bs.modal")},this))};b.DEFAULTS={backdrop:!0,keyboard:!0,show:!0},b.prototype.toggle=function(a){return this[this.isShown?"hide":"show"](a)},b.prototype.show=function(b){var c=this,d=a.Event("show.bs.modal",{relatedTarget:b});this.$element.trigger(d),this.isShown||d.isDefaultPrevented()||(this.isShown=!0,this.escape(),this.$element.on("click.dismiss.bs.modal",'[data-dismiss="modal"]',a.proxy(this.hide,this)),this.backdrop(function(){var d=a.support.transition&&c.$element.hasClass("fade");c.$element.parent().length||c.$element.appendTo(document.body),c.$element.show().scrollTop(0),d&&c.$element[0].offsetWidth,c.$element.addClass("in").attr("aria-hidden",!1),c.enforceFocus();var e=a.Event("shown.bs.modal",{relatedTarget:b});d?c.$element.find(".modal-dialog").one(a.support.transition.end,function(){c.$element.focus().trigger(e)}).emulateTransitionEnd(300):c.$element.focus().trigger(e)}))},b.prototype.hide=function(b){b&&b.preventDefault(),b=a.Event("hide.bs.modal"),this.$element.trigger(b),this.isShown&&!b.isDefaultPrevented()&&(this.isShown=!1,this.escape(),a(document).off("focusin.bs.modal"),this.$element.removeClass("in").attr("aria-hidden",!0).off("click.dismiss.bs.modal"),a.support.transition&&this.$element.hasClass("fade")?this.$element.one(a.support.transition.end,a.proxy(this.hideModal,this)).emulateTransitionEnd(300):this.hideModal())},b.prototype.enforceFocus=function(){a(document).off("focusin.bs.modal").on("focusin.bs.modal",a.proxy(function(a){this.$element[0]===a.target||this.$element.has(a.target).length||this.$element.focus()},this))},b.prototype.escape=function(){this.isShown&&this.options.keyboard?this.$element.on("keyup.dismiss.bs.modal",a.proxy(function(a){27==a.which&&this.hide()},this)):this.isShown||this.$element.off("keyup.dismiss.bs.modal")},b.prototype.hideModal=function(){var a=this;this.$element.hide(),this.backdrop(function(){a.removeBackdrop(),a.$element.trigger("hidden.bs.modal")})},b.prototype.removeBackdrop=function(){this.$backdrop&&this.$backdrop.remove(),this.$backdrop=null},b.prototype.backdrop=function(b){var c=this.$element.hasClass("fade")?"fade":"";if(this.isShown&&this.options.backdrop){var d=a.support.transition&&c;if(this.$backdrop=a('<div class="modal-backdrop '+c+'" />').appendTo(document.body),this.$element.on("click.dismiss.bs.modal",a.proxy(function(a){a.target===a.currentTarget&&("static"==this.options.backdrop?this.$element[0].focus.call(this.$element[0]):this.hide.call(this))},this)),d&&this.$backdrop[0].offsetWidth,this.$backdrop.addClass("in"),!b)return;d?this.$backdrop.one(a.support.transition.end,b).emulateTransitionEnd(150):b()}else!this.isShown&&this.$backdrop?(this.$backdrop.removeClass("in"),a.support.transition&&this.$element.hasClass("fade")?this.$backdrop.one(a.support.transition.end,b).emulateTransitionEnd(150):b()):b&&b()};var c=a.fn.modal;a.fn.modal=function(c,d){return this.each(function(){var e=a(this),f=e.data("bs.modal"),g=a.extend({},b.DEFAULTS,e.data(),"object"==typeof c&&c);f||e.data("bs.modal",f=new b(this,g)),"string"==typeof c?f[c](d):g.show&&f.show(d)})},a.fn.modal.Constructor=b,a.fn.modal.noConflict=function(){return a.fn.modal=c,this},a(document).on("click.bs.modal.data-api",'[data-toggle="modal"]',function(b){var c=a(this),d=c.attr("href"),e=a(c.attr("data-target")||d&&d.replace(/.*(?=#[^\s]+$)/,"")),f=e.data("bs.modal")?"toggle":a.extend({remote:!/#/.test(d)&&d},e.data(),c.data());c.is("a")&&b.preventDefault(),e.modal(f,this).one("hide",function(){c.is(":visible")&&c.focus()})}),a(document).on("show.bs.modal",".modal",function(){a(document.body).addClass("modal-open")}).on("hidden.bs.modal",".modal",function(){a(document.body).removeClass("modal-open")})}(jQuery),+function(a){"use strict";var b=function(a,b){this.type=this.options=this.enabled=this.timeout=this.hoverState=this.$element=null,this.init("tooltip",a,b)};b.DEFAULTS={animation:!0,placement:"top",selector:!1,template:'<div class="tooltip"><div class="tooltip-arrow"></div><div class="tooltip-inner"></div></div>',trigger:"hover focus",title:"",delay:0,html:!1,container:!1},b.prototype.init=function(b,c,d){this.enabled=!0,this.type=b,this.$element=a(c),this.options=this.getOptions(d);for(var e=this.options.trigger.split(" "),f=e.length;f--;){var g=e[f];if("click"==g)this.$element.on("click."+this.type,this.options.selector,a.proxy(this.toggle,this));else if("manual"!=g){var h="hover"==g?"mouseenter":"focusin",i="hover"==g?"mouseleave":"focusout";this.$element.on(h+"."+this.type,this.options.selector,a.proxy(this.enter,this)),this.$element.on(i+"."+this.type,this.options.selector,a.proxy(this.leave,this))}}this.options.selector?this._options=a.extend({},this.options,{trigger:"manual",selector:""}):this.fixTitle()},b.prototype.getDefaults=function(){return b.DEFAULTS},b.prototype.getOptions=function(b){return b=a.extend({},this.getDefaults(),this.$element.data(),b),b.delay&&"number"==typeof b.delay&&(b.delay={show:b.delay,hide:b.delay}),b},b.prototype.getDelegateOptions=function(){var b={},c=this.getDefaults();return this._options&&a.each(this._options,function(a,d){c[a]!=d&&(b[a]=d)}),b},b.prototype.enter=function(b){var c=b instanceof this.constructor?b:a(b.currentTarget)[this.type](this.getDelegateOptions()).data("bs."+this.type);return clearTimeout(c.timeout),c.hoverState="in",c.options.delay&&c.options.delay.show?void(c.timeout=setTimeout(function(){"in"==c.hoverState&&c.show()},c.options.delay.show)):c.show()},b.prototype.leave=function(b){var c=b instanceof this.constructor?b:a(b.currentTarget)[this.type](this.getDelegateOptions()).data("bs."+this.type);return clearTimeout(c.timeout),c.hoverState="out",c.options.delay&&c.options.delay.hide?void(c.timeout=setTimeout(function(){"out"==c.hoverState&&c.hide()},c.options.delay.hide)):c.hide()},b.prototype.show=function(){var b=a.Event("show.bs."+this.type);if(this.hasContent()&&this.enabled){if(this.$element.trigger(b),b.isDefaultPrevented())return;var c=this,d=this.tip();this.setContent(),this.options.animation&&d.addClass("fade");var e="function"==typeof this.options.placement?this.options.placement.call(this,d[0],this.$element[0]):this.options.placement,f=/\s?auto?\s?/i,g=f.test(e);g&&(e=e.replace(f,"")||"top"),d.detach().css({top:0,left:0,display:"block"}).addClass(e),this.options.container?d.appendTo(this.options.container):d.insertAfter(this.$element);var h=this.getPosition(),i=d[0].offsetWidth,j=d[0].offsetHeight;if(g){var k=this.$element.parent(),l=e,m=document.documentElement.scrollTop||document.body.scrollTop,n="body"==this.options.container?window.innerWidth:k.outerWidth(),o="body"==this.options.container?window.innerHeight:k.outerHeight(),p="body"==this.options.container?0:k.offset().left;e="bottom"==e&&h.top+h.height+j-m>o?"top":"top"==e&&h.top-m-j<0?"bottom":"right"==e&&h.right+i>n?"left":"left"==e&&h.left-i<p?"right":e,d.removeClass(l).addClass(e)}var q=this.getCalculatedOffset(e,h,i,j);this.applyPlacement(q,e),this.hoverState=null;var r=function(){c.$element.trigger("shown.bs."+c.type)};a.support.transition&&this.$tip.hasClass("fade")?d.one(a.support.transition.end,r).emulateTransitionEnd(150):r()}},b.prototype.applyPlacement=function(b,c){var d,e=this.tip(),f=e[0].offsetWidth,g=e[0].offsetHeight,h=parseInt(e.css("margin-top"),10),i=parseInt(e.css("margin-left"),10);isNaN(h)&&(h=0),isNaN(i)&&(i=0),b.top=b.top+h,b.left=b.left+i,a.offset.setOffset(e[0],a.extend({using:function(a){e.css({top:Math.round(a.top),left:Math.round(a.left)})}},b),0),e.addClass("in");var j=e[0].offsetWidth,k=e[0].offsetHeight;if("top"==c&&k!=g&&(d=!0,b.top=b.top+g-k),/bottom|top/.test(c)){var l=0;b.left<0&&(l=-2*b.left,b.left=0,e.offset(b),j=e[0].offsetWidth,k=e[0].offsetHeight),this.replaceArrow(l-f+j,j,"left")}else this.replaceArrow(k-g,k,"top");d&&e.offset(b)},b.prototype.replaceArrow=function(a,b,c){this.arrow().css(c,a?50*(1-a/b)+"%":"")},b.prototype.setContent=function(){var a=this.tip(),b=this.getTitle();a.find(".tooltip-inner")[this.options.html?"html":"text"](b),a.removeClass("fade in top bottom left right")},b.prototype.hide=function(){function b(){"in"!=c.hoverState&&d.detach(),c.$element.trigger("hidden.bs."+c.type)}var c=this,d=this.tip(),e=a.Event("hide.bs."+this.type);return this.$element.trigger(e),e.isDefaultPrevented()?void 0:(d.removeClass("in"),a.support.transition&&this.$tip.hasClass("fade")?d.one(a.support.transition.end,b).emulateTransitionEnd(150):b(),this.hoverState=null,this)},b.prototype.fixTitle=function(){var a=this.$element;(a.attr("title")||"string"!=typeof a.attr("data-original-title"))&&a.attr("data-original-title",a.attr("title")||"").attr("title","")},b.prototype.hasContent=function(){return this.getTitle()},b.prototype.getPosition=function(){var b=this.$element[0];return a.extend({},"function"==typeof b.getBoundingClientRect?b.getBoundingClientRect():{width:b.offsetWidth,height:b.offsetHeight},this.$element.offset())},b.prototype.getCalculatedOffset=function(a,b,c,d){return"bottom"==a?{top:b.top+b.height,left:b.left+b.width/2-c/2}:"top"==a?{top:b.top-d,left:b.left+b.width/2-c/2}:"left"==a?{top:b.top+b.height/2-d/2,left:b.left-c}:{top:b.top+b.height/2-d/2,left:b.left+b.width}},b.prototype.getTitle=function(){var a,b=this.$element,c=this.options;return a=b.attr("data-original-title")||("function"==typeof c.title?c.title.call(b[0]):c.title)},b.prototype.tip=function(){return this.$tip=this.$tip||a(this.options.template)},b.prototype.arrow=function(){return this.$arrow=this.$arrow||this.tip().find(".tooltip-arrow")},b.prototype.validate=function(){this.$element[0].parentNode||(this.hide(),this.$element=null,this.options=null)},b.prototype.enable=function(){this.enabled=!0},b.prototype.disable=function(){this.enabled=!1},b.prototype.toggleEnabled=function(){this.enabled=!this.enabled},b.prototype.toggle=function(b){var c=b?a(b.currentTarget)[this.type](this.getDelegateOptions()).data("bs."+this.type):this;c.tip().hasClass("in")?c.leave(c):c.enter(c)},b.prototype.destroy=function(){clearTimeout(this.timeout),this.hide().$element.off("."+this.type).removeData("bs."+this.type)};var c=a.fn.tooltip;a.fn.tooltip=function(c){return this.each(function(){var d=a(this),e=d.data("bs.tooltip"),f="object"==typeof c&&c;(e||"destroy"!=c)&&(e||d.data("bs.tooltip",e=new b(this,f)),"string"==typeof c&&e[c]())})},a.fn.tooltip.Constructor=b,a.fn.tooltip.noConflict=function(){return a.fn.tooltip=c,this}}(jQuery),+function(a){"use strict";var b=function(a,b){this.init("popover",a,b)};if(!a.fn.tooltip)throw new Error("Popover requires tooltip.js");b.DEFAULTS=a.extend({},a.fn.tooltip.Constructor.DEFAULTS,{placement:"right",trigger:"click",content:"",template:'<div class="popover"><div class="arrow"></div><h3 class="popover-title"></h3><div class="popover-content"></div></div>'}),b.prototype=a.extend({},a.fn.tooltip.Constructor.prototype),b.prototype.constructor=b,b.prototype.getDefaults=function(){return b.DEFAULTS},b.prototype.setContent=function(){var a=this.tip(),b=this.getTitle(),c=this.getContent();a.find(".popover-title")[this.options.html?"html":"text"](b),a.find(".popover-content")[this.options.html?"string"==typeof c?"html":"append":"text"](c),a.removeClass("fade top bottom left right in"),a.find(".popover-title").html()||a.find(".popover-title").hide()},b.prototype.hasContent=function(){return this.getTitle()||this.getContent()},b.prototype.getContent=function(){var a=this.$element,b=this.options;return a.attr("data-content")||("function"==typeof b.content?b.content.call(a[0]):b.content)},b.prototype.arrow=function(){return this.$arrow=this.$arrow||this.tip().find(".arrow")},b.prototype.tip=function(){return this.$tip||(this.$tip=a(this.options.template)),this.$tip};var c=a.fn.popover;a.fn.popover=function(c){return this.each(function(){var d=a(this),e=d.data("bs.popover"),f="object"==typeof c&&c;(e||"destroy"!=c)&&(e||d.data("bs.popover",e=new b(this,f)),"string"==typeof c&&e[c]())})},a.fn.popover.Constructor=b,a.fn.popover.noConflict=function(){return a.fn.popover=c,this}}(jQuery),+function(a){"use strict";function b(c,d){var e,f=a.proxy(this.process,this);this.$element=a(a(c).is("body")?window:c),this.$body=a("body"),this.$scrollElement=this.$element.on("scroll.bs.scroll-spy.data-api",f),this.options=a.extend({},b.DEFAULTS,d),this.selector=(this.options.target||(e=a(c).attr("href"))&&e.replace(/.*(?=#[^\s]+$)/,"")||"")+" .nav li > a",this.offsets=a([]),this.targets=a([]),this.activeTarget=null,this.refresh(),this.process()}b.DEFAULTS={offset:10},b.prototype.refresh=function(){var b=this.$element[0]==window?"offset":"position";this.offsets=a([]),this.targets=a([]);{var c=this;this.$body.find(this.selector).map(function(){var d=a(this),e=d.data("target")||d.attr("href"),f=/^#./.test(e)&&a(e);return f&&f.length&&f.is(":visible")&&[[f[b]().top+(!a.isWindow(c.$scrollElement.get(0))&&c.$scrollElement.scrollTop()),e]]||null}).sort(function(a,b){return a[0]-b[0]}).each(function(){c.offsets.push(this[0]),c.targets.push(this[1])})}},b.prototype.process=function(){var a,b=this.$scrollElement.scrollTop()+this.options.offset,c=this.$scrollElement[0].scrollHeight||this.$body[0].scrollHeight,d=c-this.$scrollElement.height(),e=this.offsets,f=this.targets,g=this.activeTarget;if(b>=d)return g!=(a=f.last()[0])&&this.activate(a);if(g&&b<=e[0])return g!=(a=f[0])&&this.activate(a);for(a=e.length;a--;)g!=f[a]&&b>=e[a]&&(!e[a+1]||b<=e[a+1])&&this.activate(f[a])},b.prototype.activate=function(b){this.activeTarget=b,a(this.selector).parentsUntil(this.options.target,".active").removeClass("active");var c=this.selector+'[data-target="'+b+'"],'+this.selector+'[href="'+b+'"]',d=a(c).parents("li").addClass("active");d.parent(".dropdown-menu").length&&(d=d.closest("li.dropdown").addClass("active")),d.trigger("activate.bs.scrollspy")};var c=a.fn.scrollspy;a.fn.scrollspy=function(c){return this.each(function(){var d=a(this),e=d.data("bs.scrollspy"),f="object"==typeof c&&c;e||d.data("bs.scrollspy",e=new b(this,f)),"string"==typeof c&&e[c]()})},a.fn.scrollspy.Constructor=b,a.fn.scrollspy.noConflict=function(){return a.fn.scrollspy=c,this},a(window).on("load",function(){a('[data-spy="scroll"]').each(function(){var b=a(this);b.scrollspy(b.data())})})}(jQuery),+function(a){"use strict";var b=function(b){this.element=a(b)};b.prototype.show=function(){var b=this.element,c=b.closest("ul:not(.dropdown-menu)"),d=b.data("target");if(d||(d=b.attr("href"),d=d&&d.replace(/.*(?=#[^\s]*$)/,"")),!b.parent("li").hasClass("active")){var e=c.find(".active:last a")[0],f=a.Event("show.bs.tab",{relatedTarget:e});if(b.trigger(f),!f.isDefaultPrevented()){var g=a(d);this.activate(b.parent("li"),c),this.activate(g,g.parent(),function(){b.trigger({type:"shown.bs.tab",relatedTarget:e})})}}},b.prototype.activate=function(b,c,d){function e(){f.removeClass("active").find("> .dropdown-menu > .active").removeClass("active"),b.addClass("active"),g?(b[0].offsetWidth,b.addClass("in")):b.removeClass("fade"),b.parent(".dropdown-menu")&&b.closest("li.dropdown").addClass("active"),d&&d()}var f=c.find("> .active"),g=d&&a.support.transition&&f.hasClass("fade");g?f.one(a.support.transition.end,e).emulateTransitionEnd(150):e(),f.removeClass("in")};var c=a.fn.tab;a.fn.tab=function(c){return this.each(function(){var d=a(this),e=d.data("bs.tab");e||d.data("bs.tab",e=new b(this)),"string"==typeof c&&e[c]()})},a.fn.tab.Constructor=b,a.fn.tab.noConflict=function(){return a.fn.tab=c,this},a(document).on("click.bs.tab.data-api",'[data-toggle="tab"], [data-toggle="pill"]',function(b){b.preventDefault(),a(this).tab("show")})}(jQuery),+function(a){"use strict";var b=function(c,d){this.options=a.extend({},b.DEFAULTS,d),this.$window=a(window).on("scroll.bs.affix.data-api",a.proxy(this.checkPosition,this)).on("click.bs.affix.data-api",a.proxy(this.checkPositionWithEventLoop,this)),this.$element=a(c),this.affixed=this.unpin=this.pinnedOffset=null,this.checkPosition()};b.RESET="affix affix-top affix-bottom",b.DEFAULTS={offset:0},b.prototype.getPinnedOffset=function(){if(this.pinnedOffset)return this.pinnedOffset;this.$element.removeClass(b.RESET).addClass("affix");var a=this.$window.scrollTop(),c=this.$element.offset();return this.pinnedOffset=c.top-a},b.prototype.checkPositionWithEventLoop=function(){setTimeout(a.proxy(this.checkPosition,this),1)},b.prototype.checkPosition=function(){if(this.$element.is(":visible")){var c=a(document).height(),d=this.$window.scrollTop(),e=this.$element.offset(),f=this.options.offset,g=f.top,h=f.bottom;"top"==this.affixed&&(e.top+=d),"object"!=typeof f&&(h=g=f),"function"==typeof g&&(g=f.top(this.$element)),"function"==typeof h&&(h=f.bottom(this.$element));var i=null!=this.unpin&&d+this.unpin<=e.top?!1:null!=h&&e.top+this.$element.height()>=c-h?"bottom":null!=g&&g>=d?"top":!1;if(this.affixed!==i){this.unpin&&this.$element.css("top","");var j="affix"+(i?"-"+i:""),k=a.Event(j+".bs.affix");this.$element.trigger(k),k.isDefaultPrevented()||(this.affixed=i,this.unpin="bottom"==i?this.getPinnedOffset():null,this.$element.removeClass(b.RESET).addClass(j).trigger(a.Event(j.replace("affix","affixed"))),"bottom"==i&&this.$element.offset({top:c-h-this.$element.height()}))}}};var c=a.fn.affix;a.fn.affix=function(c){return this.each(function(){var d=a(this),e=d.data("bs.affix"),f="object"==typeof c&&c;e||d.data("bs.affix",e=new b(this,f)),"string"==typeof c&&e[c]()})},a.fn.affix.Constructor=b,a.fn.affix.noConflict=function(){return a.fn.affix=c,this},a(window).on("load",function(){a('[data-spy="affix"]').each(function(){var b=a(this),c=b.data();c.offset=c.offset||{},c.offsetBottom&&(c.offset.bottom=c.offsetBottom),c.offsetTop&&(c.offset.top=c.offsetTop),b.affix(c)})})}(jQuery);


--------------------------------------------------------------------------------
/VAuditDemo_Debug/js/bootswatch.js:
--------------------------------------------------------------------------------
1 | $('[data-toggle="tooltip"]').tooltip();


--------------------------------------------------------------------------------
/VAuditDemo_Debug/js/bsa.js:
--------------------------------------------------------------------------------
1 | (function(){
2 |   var bsa = document.createElement('script');
3 |      bsa.type = 'text/javascript';
4 |      bsa.async = true;
5 |      bsa.src = 'http://s3.buysellads.com/ac/bsa.js';
6 |   (document.getElementsByTagName('head')[0]||document.getElementsByTagName('body')[0]).appendChild(bsa);
7 | })();


--------------------------------------------------------------------------------
/VAuditDemo_Debug/js/check.js:
--------------------------------------------------------------------------------
 1 | function check()
 2 | { 
 3 | 	with(document.all){
 4 | 		if(passwd.value!=passwd2.value)
 5 | 		{
 6 | 			alert("密码不一致");
 7 | 			passwd2.value = "";
 8 | 		}
 9 | 	}
10 | }


--------------------------------------------------------------------------------
/VAuditDemo_Debug/message.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | require_once('sys/config.php');
 3 | require_once('header.php');
 4 | 
 5 | $query = "SELECT * FROM comment ORDER BY comment_id";
 6 | $data = mysql_query($query, $conn) or die('Error!!');
 7 | mysql_close($conn);
 8 | ?>
 9 | <div class="bs-example table-responsive">
10 | 	<table class="table table-striped table-hover ">
11 | 	<tr>
12 | 		<th>#</th>
13 | 		<th>Column heading</th>
14 | 	</tr>
15 | <?php
16 | while($com = mysql_fetch_array($data)) {
17 | 	$html['username'] = htmlspecialchars($com['user_name']);
18 | 	$html['comment_text'] = htmlspecialchars($com['comment_text']);
19 | 	
20 | 	echo '<tr>';
21 | 	echo '<td>'.$html['username'].'</td>';
22 | 	echo '<td><a href="messageDetail.php?id='.$com['comment_id'].'">'.$html['comment_text'].'</td></a>';
23 | 	echo '</tr>';
24 | }
25 | ?>
26 | </table>
27 | </div>
28 | <?php 
29 | if (isset($_SESSION['username']))
30 | {?>
31 | <form action="messageSub.php" method="post" name="message">
32 | 	<div class="col-lg-10">
33 |         <textarea class="form-control" rows="3" id="textArea" name="message"></textarea>
34 |     </div>
35 |     <input type="submit" name="submit" value="留言"/>
36 | 	<a href="user/user.php">返回</a><br /><br /><br /><br /><br />
37 | </form>
38 | 
39 | <?php 
40 | }
41 | 
42 | require_once('footer.php');
43 | ?>


--------------------------------------------------------------------------------
/VAuditDemo_Debug/messageDetail.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | include_once 'sys/config.php';
 3 | include_once 'header.php';
 4 | 
 5 | if ( !empty( $_GET['id'] ) ) {
 6 | 	$id = sqlwaf( $_GET['id'] );
 7 | 	$query = "SELECT * FROM comment WHERE comment_id = $id";
 8 | 	$data = mysql_query( $query, $conn ) or print_r(mysql_error());
 9 | ?>
10 | <div class="bs-example table-responsive">
11 | 	<?php echo 'The result for ['.$id.'] is:'?>
12 | 	<table class="table table-striped table-hover ">
13 | 	<tr>
14 | 		<th>ID</th>
15 | 		<th>Username</th>
16 | 		<th>Content</th>
17 | 		<th>Date</th>
18 | 	</tr>
19 | 	<?php
20 | 	while ( $com = mysql_fetch_array( $data ) ) {
21 | 
22 | 		$html['username'] = htmlspecialchars( $com['user_name'] );
23 | 		$html['comment_text'] = htmlspecialchars( $com['comment_text'] );
24 | 
25 | 		echo '<tr>';
26 | 		echo '<td>'.$com['comment_id'].'</td>';
27 | 		echo '<td>'.$html['username'].'</td>';
28 | 		echo '<td>'.$html['comment_text'].'</td>';
29 | 		echo '<td>'.$com['pub_date'].'</td>';
30 | 		echo '</tr>';
31 | 	}
32 | ?>
33 | 	</table>
34 | </div>
35 | 	<?php
36 | 	if ( isset( $_SESSION['username'] ) ) {
37 | 	?>
38 | 	<form action="messageSub.php" method="post" name="message">
39 | 		<div class="col-lg-10">
40 | 	        <textarea class="form-control" rows="3" id="textArea" name="message"></textarea>
41 | 	    </div>
42 | 	    <input type="submit" name="submit" value="留言"/>
43 | 	</form>
44 | 	<a href="user/user.php">返回</a><br /><br /><br /><br /><br />
45 | 	<?php
46 | 	}
47 | }
48 | require_once 'footer.php';
49 | ?>
50 | 


--------------------------------------------------------------------------------
/VAuditDemo_Debug/messageSub.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | include_once('sys/config.php');
 3 | 
 4 | if (isset($_POST['submit']) && !empty($_POST['message']) && isset($_SESSION['username'])) {
 5 | 
 6 | 	$clean_message = clean_input($_POST['message']);
 7 | 	
 8 | 	$query = "INSERT INTO comment(user_name,comment_text,pub_date) VALUES ('{$_SESSION['username']}','$clean_message',now())";
 9 | 	mysql_query($query, $conn) or die(mysql_error());
10 | 	mysql_close($conn);
11 | 	header('Location: message.php');
12 | }
13 | else {
14 | 	echo "<!DOCTYPE HTML PUBLIC \"-//IETF//DTD HTML 2.0//EN\"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1>
15 | 		<p>The requested URL ".$_SERVER['PHP_SELF']." was not found on this server.</p></body></html>";
16 | }
17 | ?>
18 | 


--------------------------------------------------------------------------------
/VAuditDemo_Debug/search.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | include_once 'sys/config.php';
 3 | include_once 'header.php';
 4 | 
 5 | if ( !empty( $_GET['search'] ) ) {
 6 | 	$query = "SELECT * FROM comment WHERE comment_text LIKE '%{$_GET['search']}%'";
 7 | 	$data = mysql_query($query, $conn);
 8 | ?>
 9 | <div class="bs-example table-responsive">
10 | 	<?php echo 'The result for [ '.$_GET['search'].' ] is:'?>
11 | 	<table class="table table-striped table-hover ">
12 | 	<tr>
13 | 		<th>#</th>
14 | 		<th>Column heading</th>
15 | 	</tr>
16 | 	<?php
17 | 	while ( $com = mysql_fetch_array( $data ) ) {
18 | 		//净化输出变量
19 | 		$html['username'] = htmlspecialchars( $com['user_name'] );
20 | 		$html['comment_text'] = htmlspecialchars( $com['comment_text'] );
21 | 
22 | 		echo '<tr>';
23 | 		echo '<td>'.$html['username'].'</td>';
24 | 		echo '<td><a href="messageDetail.php?id='.$com['comment_id'].'">'.$html['comment_text'].'</a></td>';
25 | 		echo '</tr>';
26 | 	}
27 | 	?>
28 | 	</table>
29 | </div>
30 | 	<?php
31 | 	if ( isset( $_SESSION['username'] ) ) {
32 | 	?>
33 | <form action="messageSub.php" method="post" name="message">
34 | 	<div class="col-lg-10">
35 |         <textarea class="form-control" rows="3" id="textArea" name="message"></textarea>
36 |     </div>
37 |     <input type="submit" name="submit" value="留言"/>
38 | </form>
39 | <a href="user/user.php">返回</a><br /><br /><br /><br /><br />
40 | <?php
41 | 	}
42 | }
43 | require_once 'footer.php';
44 | ?>
45 | 


--------------------------------------------------------------------------------
/VAuditDemo_Debug/sys/config.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | error_reporting(0);
 4 | 
 5 | if (!file_exists($_SERVER["DOCUMENT_ROOT"] . '/sys/install.lock')) {
 6 | 	header("Location: /install/install.php");
 7 | 	exit;
 8 | }
 9 | 
10 | include_once '../sys/lib.php';
11 | 
12 | $host = "localhost";
13 | $username = "root";
14 | $password = "root";
15 | $database = "vauditdemo";
16 | 
17 | $conn = mysql_connect($host, $username, $password);
18 | mysql_query('set names utf8', $conn);
19 | mysql_select_db($database, $conn) or die(mysql_error());
20 | if (!$conn) {
21 | 	die('Could not connect: ' . mysql_error());
22 | 	exit;
23 | }
24 | 
25 | session_start();
26 | 
27 | ?>


--------------------------------------------------------------------------------
/VAuditDemo_Debug/sys/lib.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | date_default_timezone_set('UTC');
 4 | 
 5 | if( !get_magic_quotes_gpc() ) {
 6 | 	$_GET = sec ( $_GET );
 7 | 	$_POST = sec ( $_POST );
 8 | 	$_COOKIE = sec ( $_COOKIE ); 
 9 | }
10 | $_SERVER = sec ( $_SERVER );
11 | 
12 | function sec( &$array ) {
13 | 	if ( is_array( $array ) ) {
14 | 		foreach ( $array as $k => $v ) {
15 | 			$array [$k] = sec ( $v );
16 | 		}
17 | 	} else if ( is_string( $array ) ) {
18 | 		$array = addslashes( $array );
19 | 	} else if ( is_numeric( $array ) ) {
20 | 		$array = intval( $array );
21 | 	}
22 | 	return $array;
23 | }
24 | 
25 | function sqlwaf( $str ) {
26 | 	$str = str_ireplace( "and", "sqlwaf", $str );
27 | 	$str = str_ireplace( "or", "sqlwaf", $str );
28 | 	$str = str_ireplace( "from", "sqlwaf", $str );
29 | 	$str = str_ireplace( "execute", "sqlwaf", $str );
30 | 	$str = str_ireplace( "update", "sqlwaf", $str );
31 | 	$str = str_ireplace( "count", "sqlwaf", $str );
32 | 	$str = str_ireplace( "chr", "sqlwaf", $str );
33 | 	$str = str_ireplace( "mid", "sqlwaf", $str );
34 | 	$str = str_ireplace( "char", "sqlwaf", $str );
35 | 	$str = str_ireplace( "union", "sqlwaf", $str );
36 | 	$str = str_ireplace( "select", "sqlwaf", $str );
37 | 	$str = str_ireplace( "delete", "sqlwaf", $str );
38 | 	$str = str_ireplace( "insert", "sqlwaf", $str );
39 | 	$str = str_ireplace( "limit", "sqlwaf", $str );
40 | 	$str = str_ireplace( "concat", "sqlwaf", $str );
41 | 	$str = str_ireplace( "\\", "\\\\", $str );
42 | 	$str = str_ireplace( "&&", "", $str );
43 | 	$str = str_ireplace( "||", "", $str );
44 | 	$str = str_ireplace( "'", "", $str );
45 | 	$str = str_ireplace( "%", "\%", $str );
46 | 	$str = str_ireplace( "_", "\_", $str );
47 | 	return $str;
48 | }
49 | 
50 | function get_client_ip(){
51 | 	if ($_SERVER["HTTP_CLIENT_IP"] && strcasecmp($_SERVER["HTTP_CLIENT_IP"], "unknown")){
52 | 		$ip = $_SERVER["HTTP_CLIENT_IP"];
53 | 	}else if ($_SERVER["HTTP_X_FORWARDED_FOR"] && strcasecmp($_SERVER["HTTP_X_FORWARDED_FOR"], "unknown")){
54 | 		$ip = $_SERVER["HTTP_X_FORWARDED_FOR"];
55 | 	}else if ($_SERVER["REMOTE_ADDR"] && strcasecmp($_SERVER["REMOTE_ADDR"], "unknown")){
56 | 		$ip = $_SERVER["REMOTE_ADDR"];
57 | 	}else if (isset($_SERVER['REMOTE_ADDR']) && $_SERVER['REMOTE_ADDR'] && strcasecmp($_SERVER['REMOTE_ADDR'], "unknown")){
58 | 		$ip = $_SERVER['REMOTE_ADDR'];
59 | 	}else{
60 | 		$ip = "unknown";
61 | 	}
62 | 	return($ip);
63 | }
64 | 
65 | function clean_input( $dirty ) {
66 | 	return mysql_real_escape_string( stripslashes( $dirty ) );
67 | }
68 | 
69 | function is_pic( $file_name ) {
70 | 	$extend =explode( "." , $file_name );
71 | 	$va=count( $extend )-1;
72 | 	if ( $extend[$va]=='jpg' || $extend[$va]=='jpeg' || $extend[$va]=='png' ) {
73 | 		return 1;
74 | 	}
75 | 	else
76 | 		return 0;
77 | }
78 | 
79 | function not_find( $page ) {
80 | 	echo "<!DOCTYPE HTML PUBLIC \"-//IETF//DTD HTML 2.0//EN\"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1>
81 | 		<p>The requested URL ".$page." was not found on this server.</p></body></html>";
82 | }
83 | ?>
84 | 


--------------------------------------------------------------------------------
/VAuditDemo_Debug/uploads/.gitkeep:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/virink/VAuditDemo/33dc98de2e9e505b86cf324b50fd484cfb9832c8/VAuditDemo_Debug/uploads/.gitkeep


--------------------------------------------------------------------------------
/VAuditDemo_Debug/user/avatar.php:
--------------------------------------------------------------------------------
1 | <?php
2 | error_reporting(0);
3 | session_start();
4 | header("Content-type:image/jpeg");
5 | echo file_get_contents($_SESSION['avatar']);
6 | ?> 


--------------------------------------------------------------------------------
/VAuditDemo_Debug/user/edit.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | include_once($_SERVER["DOCUMENT_ROOT"].'/sys/config.php');
 4 | 
 5 | if (isset($_SESSION['username'])) {
 6 | 	include_once('../header.php');
 7 | 	$html_avatar = htmlspecialchars($_SESSION['avatar']);
 8 | 	$html_username = htmlspecialchars($_SESSION['username']);
 9 | 
10 | 	if(isset($_SESSION['error_info']) && $_SESSION['error_info'] != '') {
11 | 		echo $_SESSION['error_info'];
12 | 		$_SESSION['error_info'] = '';
13 | 	}
14 | ?>
15 | 
16 | <form action="updateName.php" method="post" name="update_name" class="bs-example form-horizontal">
17 | 	<input type="hidden" name="id" value="<?php echo $_SESSION['user_id']?>">
18 |         <div class="form-group">
19 |             <label for="inputEmail" class="col-lg-2 control-label">用户名：</label>
20 |                 <div class="col-lg-3">
21 |                     <input type="text" name="username" value="<?php echo $html_username?>" class="form-control" id="inputEmail">
22 | 				</div>
23 | 				<div><input type="submit" name="submit" class="btn btn-primary" value="更新"/></div>
24 |         </div>
25 | </form>
26 | <form class="bs-example form-horizontal" action="updatePass.php" method="get" name="update_passwd">
27 | 	<legend></legend>
28 |     <div class="form-group">
29 |         <label for="inputEmail" class="col-lg-2 control-label">新密码：</label>
30 |         <div class="col-lg-3">
31 |             <input type="password" name="passwd" class="form-control" id="inputEmail">
32 |         </div>
33 | 	</div>
34 | 	<div class="form-group">
35 | 		<label for="inputEmail" class="col-lg-2 control-label">确认：</label>
36 |         <div class="col-lg-3">
37 | 			<input type="password" name="passwd2" class="form-control" id="inputEmail" onblur="check()">
38 |         </div>
39 | 		<div><input type="submit" name="submit" class="btn btn-primary" value="更新"/></div>
40 |     </div>				  
41 | </form>
42 | 
43 | <form class="bs-example form-horizontal" action="updateAvatar.php" method="post" enctype="multipart/form-data" name="upload">
44 | 	<legend></legend>                 
45 | 	<div class="form-group">
46 |         <label for="inputEmail" class="col-lg-2 control-label">头像：</label>
47 | 		<div>
48 | 			<img src="avatar.php" width="100" height="100" class="img-thumbnail">
49 | 			<input type="file" name="upfile" style="float:right;padding-right:600px">
50 | 		</div>
51 |     </div>
52 | 	<div class="form-group" style="padding-left:200px">
53 | 		<label></label>
54 | 		<div>
55 | 		<input type="submit" name="submit"  class="btn btn-primary" value="上传"/>
56 | 		<a href="user.php"><button type="button" class="btn btn-primary">返回</button></a>
57 | 		</div>
58 | 	</div>
59 | </form>
60 | <script src="../js/check.js"></script>
61 | <?php 
62 | require_once('../footer.php');
63 | }
64 | //用户没有登录
65 | else {
66 | 	not_find($_SERVER['PHP_SELF']);
67 | }
68 | ?>
69 | 


--------------------------------------------------------------------------------
/VAuditDemo_Debug/user/logCheck.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | include_once('../sys/config.php');
 3 | 
 4 | if (isset($_POST['submit']) && !empty($_POST['user']) && !empty($_POST['pass'])) {
 5 | 	$clean_name = clean_input($_POST['user']);
 6 | 	$clean_pass = clean_input($_POST['pass']);
 7 |     $query = "SELECT * FROM users WHERE user_name = '$clean_name' AND user_pass = SHA('$clean_pass')";
 8 |     $data = mysql_query($query, $conn) or die('Error!!');
 9 | 
10 |     if (mysql_num_rows($data) == 1) {
11 |         $row = mysql_fetch_array($data);
12 | 		$_SESSION['username'] = $row['user_name'];
13 | 		$_SESSION['avatar'] = $row['user_avatar'];
14 | 		$ip = sqlwaf(get_client_ip());
15 | 		$query = "UPDATE users SET login_ip = '$ip' WHERE user_id = '$row[user_id]'";
16 | 		mysql_query($query, $conn) or die("updata error!");
17 |         header('Location: user.php');
18 |         }
19 | 	else {
20 | 		$_SESSION['error_info'] = '用户名或密码错误';
21 | 		header('Location: login.php');
22 | 	}
23 | 	mysql_close($conn);
24 | }
25 | else {
26 | 	not_find($_SERVER['PHP_SELF']);
27 | }
28 | ?>


--------------------------------------------------------------------------------
/VAuditDemo_Debug/user/login.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | include_once('../sys/config.php');
 3 | require_once('../header.php');
 4 | 
 5 | if(isset($_SESSION['error_info']) && $_SESSION['error_info'] != '') {
 6 | 	echo $_SESSION['error_info'];
 7 | 	$_SESSION['error_info'] = '';
 8 | }
 9 | ?>
10 | <form class="bs-example form-horizontal" action="logCheck.php" method="post" name="log">
11 | 	<legend>登录</legend>
12 |     <div class="form-group">
13 |         <label for="inputEmail" class="col-lg-2 control-label">用户名：</label>
14 |         <div class="col-lg-3">
15 |             <input type="text" name="user" class="form-control" id="inputEmail">
16 |         </div>
17 | 	</div>
18 | 	<div class="form-group">
19 | 		<label for="inputEmail" class="col-lg-2 control-label">密码：</label>
20 |         <div class="col-lg-3">
21 | 			<input type="password" name="pass" class="form-control" id="inputEmail" onblur="check()">
22 |         </div>
23 | 		<div><input type="submit" name="submit" class="btn btn-primary" value="登录"/></div>
24 |     </div>				  
25 | </form>
26 | 	
27 | <?php require_once('../footer.php');?>


--------------------------------------------------------------------------------
/VAuditDemo_Debug/user/logout.php:
--------------------------------------------------------------------------------
1 | <?php
2 | include_once('../sys/config.php');
3 | session_destroy();
4 | header('Location: ../index.php');
5 | ?>


--------------------------------------------------------------------------------
/VAuditDemo_Debug/user/reg.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | include_once('../sys/config.php');
 3 | require_once('../header.php');
 4 | 
 5 | if(isset($_SESSION['error_info']) && $_SESSION['error_info'] != '') {
 6 | 	echo $_SESSION['error_info'];
 7 | 	$_SESSION['error_info'] = '';
 8 | }
 9 | ?>
10 | <form class="bs-example form-horizontal" action="regCheck.php" method="post" name="reg">
11 | 	<legend>注册</legend>
12 | 	<div class="form-group">
13 |         <label for="inputEmail" class="col-lg-2 control-label">用户：</label>
14 |         <div class="col-lg-3">
15 |             <input type="text" name="user" class="form-control" id="inputEmail">
16 |         </div>
17 | 	</div>
18 |     <div class="form-group">
19 |         <label for="inputEmail" class="col-lg-2 control-label">新密码：</label>
20 |         <div class="col-lg-3">
21 |             <input type="password" name="passwd" class="form-control" id="inputEmail">
22 |         </div>
23 | 	</div>
24 | 	<div class="form-group">
25 | 		<label for="inputEmail" class="col-lg-2 control-label">确认：</label>
26 |         <div class="col-lg-3">
27 | 			<input type="password" name="passwd2" class="form-control" id="inputEmail" onblur="check()">
28 |         </div>
29 | 		<div><input type="submit" name="submit" class="btn btn-primary" value="注册"/></div>
30 |     </div>				  
31 | </form>
32 | <script src="../js/check.js"></script>
33 | <?php
34 | require_once('../footer.php');
35 | ?>
36 | 


--------------------------------------------------------------------------------
/VAuditDemo_Debug/user/regCheck.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | include_once('../sys/config.php');
 3 | 
 4 | if (isset($_POST['submit']) && !empty($_POST['user']) && !empty($_POST['passwd'])) {
 5 | 
 6 | 	if (strlen($_POST['user'])>16) {
 7 | 		$_SESSION['error_info'] = '用户名過長（用戶名長度<=16）';
 8 | 		header('Location: reg.php');
 9 | 		exit;
10 | 	}
11 | 
12 | 	//过滤输入变量
13 | 	$clean_name = clean_input($_POST['user']);
14 | 	$clean_pass = clean_input($_POST['passwd']);
15 | 	$avatar = '../images/default.jpg';
16 | 	
17 | 	//判断用户名已是否存在
18 | 	$query = "SELECT * FROM users WHERE user_name = '$clean_name'";
19 |     $data = mysql_query($query, $conn);
20 | 	if (mysql_num_rows($data) == 1) {
21 | 		$_SESSION['error_info'] = '用户名已存在';
22 | 		header('Location: reg.php');
23 | 	}
24 | 	//添加用户
25 | 	else {
26 | 		$_SESSION['username'] = $clean_name;
27 | 		$_SESSION['avatar'] = $avatar;
28 | 		$date = date('Y-m-d');
29 | 		$query = "INSERT INTO users(user_name,user_pass,user_avatar,join_date) VALUES ('$clean_name',SHA('$clean_pass'),'$avatar','$date')";
30 | 		mysql_query($query, $conn) or die("Error!!");
31 | 		header('Location: user.php');
32 | 	}
33 | 	mysql_close($conn);
34 | }
35 | else {
36 | 	not_find($_SERVER['PHP_SELF']);
37 | }
38 | ?>
39 | 


--------------------------------------------------------------------------------
/VAuditDemo_Debug/user/updateAvatar.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | include_once('../sys/config.php');
 3 | $uploaddir = '../uploads';
 4 | 
 5 | if (isset($_POST['submit']) && isset($_FILES['upfile'])) {
 6 | 
 7 | 	if(is_pic($_FILES['upfile']['name'])){
 8 | 
 9 | 		$avatar = $uploaddir . '/u_'. time(). '_' . $_FILES['upfile']['name'];
10 | 
11 | 		if (move_uploaded_file($_FILES['upfile']['tmp_name'], $avatar)) {
12 | 			//更新用户信息
13 | 			$query = "UPDATE users SET user_avatar = '$avatar' WHERE user_id = '{$_SESSION['user_id']}'";
14 | 			mysql_query($query, $conn) or die('update error!');
15 | 			mysql_close($conn);
16 | 			//刷新缓存
17 | 			$_SESSION['avatar'] = $avatar;
18 | 			header('Location: edit.php');
19 | 		}
20 | 		else {
21 | 			echo 'upload error<br />';
22 | 			echo '<a href="edit.php">返回</a>';
23 | 		}
24 | 	}else{
25 | 		echo '只能上傳 jpg png gif！<br />';
26 | 		echo '<a href="edit.php">返回</a>';
27 | 	}
28 | }
29 | else {
30 | 	not_find($_SERVER['PHP_SELF']);
31 | }
32 | ?>
33 | 


--------------------------------------------------------------------------------
/VAuditDemo_Debug/user/updateName.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | include_once('../sys/config.php');
 3 | if (isset($_POST['submit']) && !empty($_POST['username']) ) {
 4 | 
 5 | 	if (strlen($_POST['username'])>16) {
 6 | 		$_SESSION['error_info'] = '用户名過長（用戶名長度<=16）';
 7 | 		header('Location: edit.php');
 8 | 		exit;
 9 | 	}
10 | 
11 | 	$clean_username = clean_input($_POST['username']);
12 | 	$clean_user_id = clean_input($_POST['id']);
13 | 	
14 | 	//判断用户名已是否存在
15 | 	$query = "SELECT * FROM users WHERE user_name = '$clean_username'";
16 |     $data = mysql_query($query, $conn);
17 | 	if (mysql_num_rows($data) == 1) {
18 | 		$_SESSION['error_info'] = '用户名已存在';
19 | 		header('Location: edit.php');
20 | 		exit;
21 | 	}
22 | 	
23 | 	$query = "UPDATE users SET user_name = '$clean_username' WHERE user_id = '$clean_user_id'";
24 | 	mysql_query($query, $conn) or die("update error!");
25 | 	mysql_close($conn);
26 | 	//刷新缓存
27 | 	$_SESSION['username'] = $clean_username;
28 | 	header('Location: edit.php');
29 | }
30 | else {
31 | 	not_find($_SERVER['PHP_SELF']);
32 | }
33 | ?>


--------------------------------------------------------------------------------
/VAuditDemo_Debug/user/updatePass.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | include_once('../sys/config.php');
 3 | 
 4 | if (!empty($_GET['passwd'])) {
 5 | 	$clean_passwd = clean_input($_GET['passwd']);
 6 | 	
 7 | 	$query = "UPDATE users SET user_pass = SHA('$clean_passwd') WHERE user_id = '{$_SESSION['user_id']}'";
 8 | 	mysql_query($query, $conn) or die("update error!");
 9 | 	mysql_close($conn);
10 | 	header('Location: edit.php');
11 | }
12 | else {
13 | 	not_find($_SERVER['PHP_SELF']);
14 | }
15 | ?>


--------------------------------------------------------------------------------
/VAuditDemo_Debug/user/user.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | include_once '../sys/config.php';
 3 | 
 4 | if ( isset( $_SESSION['username'] ) ) {
 5 | 
 6 | 	include_once '../header.php';
 7 | 
 8 | 	if ( !isset( $SESSION['user_id'] ) ) {
 9 | 		$query = "SELECT * FROM users WHERE user_name = '{$_SESSION['username']}'";
10 | 		$data = mysql_query( $query, $conn ) or die( 'Error!!' );
11 | 		mysql_close( $conn );
12 | 		$result = mysql_fetch_array( $data );
13 | 		$_SESSION['user_id'] = $result['user_id'];
14 | 	}
15 | 
16 | 	$html_avatar = htmlspecialchars( $_SESSION['avatar'] );
17 | ?>
18 | <div class="row">
19 | 	<div style="float:left;">
20 | 		<img src="avatar.php" width="100" height="100" class="img-thumbnail" >
21 | 		<div class="text-center"><?php echo $_SESSION['username']?></div>
22 | 	</div>
23 | 
24 | 	<div style="float:right;padding-right:900px">
25 | 		<div><a href="logout.php"><button type="button" class="btn btn-primary">退出</button></a></div>
26 | 		<br />
27 | 		<div><a href="edit.php"><button type="button" class="btn btn-primary">编辑</button></a></div>
28 | 		<br />
29 | 		<div><a href="../message.php"><button type="button" class="btn btn-primary">发留言</button></a></div><br /><br /><br /><br />
30 | 	</div>
31 | </div>
32 | <?php
33 | 	require_once '../footer.php';
34 | }
35 | else {
36 | 	not_find( $_SERVER['PHP_SELF'] );
37 | }
38 | ?>
39 | 


--------------------------------------------------------------------------------
/VAuditDemo_Release/about.inc:
--------------------------------------------------------------------------------
 1 |     <div class="span2">
 2 |     </div>
 3 |     <div class="span10">
 4 |         <div id="content">
 5 | 			<div class="page-header">
 6 |                 <h4>关于 VAuditDemo</h4>
 7 |                 <hr>
 8 | 				<p>
 9 |                     <b>[测试环境]</b>
10 |                     <br />
11 | 					<ul>
12 |                         <li><?=strtr(explode(" ",$_SERVER["SERVER_SOFTWARE"])[0],"/"," ")?></li>
13 | 						<li>PHP <?=PHP_VERSION?></li>
14 | 					</ul>
15 |                     <b>[php配置文件中]</b>
16 |                     <br />
17 | 					<ul>
18 |                         <li>allow_url_include = <?=ini_get('allow_url_include')?'On':'Off'?></li>
19 |                         <li>allow_url_fopen = <?=ini_get('allow_url_fopen')?'On':'Off'?></li>
20 |                         <li>magic_quotes_gpc = <?=ini_get('magic_quotes_gpc')?'On':'Off'?></li>
21 | 					</ul>
22 |                 </p>
23 |                 <hr>
24 |                 <p>
25 |                     <b>[联系]</b>
26 |                     <br />
27 |                     Telegram: <a href="https://telegram.me/virink">@virink</a>
28 |                     <br />
29 |                     Email: virink@outlook.com
30 |                     <br />
31 | 					欢迎一起交流学习
32 |                 </p>    
33 |             </div>
34 |         </div>
35 |     </div>
36 | 


--------------------------------------------------------------------------------
/VAuditDemo_Release/admin/captcha.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | session_start();
 3 | $rand = '';
 4 | for($i=0; $i<4; $i++){
 5 | 	$rand.= dechex(rand(1,15));
 6 | }
 7 | $_SESSION['captcha']=$rand;
 8 | $im = imagecreatetruecolor(100,30);
 9 | $bg=imagecolorallocate($im,0,0,0);
10 | $te=imagecolorallocate($im,255,255,255);
11 | imagestring($im,rand(5,6),rand(25,30),5,$rand,$te);
12 | header("Content-type:image/jpeg");
13 | imagejpeg($im);
14 | ?> 


--------------------------------------------------------------------------------
/VAuditDemo_Release/admin/delAdmin.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | include_once('../sys/config.php');
 3 | 
 4 | if (isset($_SESSION['admin']) && !empty($_GET['id'])) {
 5 | 
 6 |     $clean_id = clean_input($_GET['id']);
 7 |     $query = "DELETE FROM admin WHERE admin_id = '$clean_id' LIMIT 1";
 8 |     mysql_query($query, $conn) or die('Error');
 9 |     mysql_close($conn);
10 |     header('Location: manageAdmin.php');
11 | }
12 | else {
13 |     not_find($_SERVER['PHP_SELF']);
14 | }   
15 | ?>
16 | 


--------------------------------------------------------------------------------
/VAuditDemo_Release/admin/delCom.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | include_once('../sys/config.php');
 3 | 
 4 | if (isset($_SESSION['admin']) && !empty($_GET['id'])) {
 5 | 
 6 | 	$clean_id = clean_input($_GET['id']);
 7 | 	$query = "DELETE FROM comment WHERE comment_id = '$clean_id' LIMIT 1";
 8 | 	mysql_query($query, $conn) or die('Error');
 9 | 	mysql_close($conn);
10 | 	header('Location: manageCom.php');
11 | }
12 | else {
13 | 	not_find($_SERVER['PHP_SELF']);
14 | }	
15 | ?>


--------------------------------------------------------------------------------
/VAuditDemo_Release/admin/delUser.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | include_once('../sys/config.php');
 3 | 
 4 | if (isset($_SESSION['admin']) && !empty($_GET['id'])) {
 5 | 
 6 | 	$clean_id = clean_input($_GET['id']);
 7 | 	$query = "DELETE FROM users WHERE user_id = '$clean_id' LIMIT 1";
 8 | 	mysql_query($query, $conn) or die('Error');
 9 | 	mysql_close($conn);
10 | 	header('Location: manageUser.php');
11 | }
12 | else {
13 | 	not_find($_SERVER['PHP_SELF']);
14 | }	
15 | ?>


--------------------------------------------------------------------------------
/VAuditDemo_Release/admin/index.php:
--------------------------------------------------------------------------------
1 | <?php
2 | session_start();
3 | if(isset($_SESSION['admin']))
4 | 	header('Location: manage.php');
5 | else
6 | 	header('Location: login.php');
7 | ?>


--------------------------------------------------------------------------------
/VAuditDemo_Release/admin/logCheck.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | include_once('../sys/config.php');
 3 | 
 4 | if (isset($_POST['submit']) && !empty($_POST['user']) && !empty($_POST['pass']) && !empty($_POST['captcha'])) {
 5 | 	include_once('../header.php');
 6 | 
 7 | 	if((@$_POST['captcha'] !== $_SESSION['captcha']) && !empty($_SESSION['captcha'])){
 8 |         // $_SESSION['captcha'] = null
 9 |         // $_POST['captcha'] = null
10 | 		echo "captcha error";
11 |         header('Location: login.php');
12 | 		exit;
13 | 	}
14 |     else{
15 |         echo "captcha succeed";
16 |     }
17 | 
18 | 	$name = $_POST['user'];
19 | 	$pass = $_POST['pass'];
20 | 
21 |     $query = "SELECT * FROM admin WHERE admin_name = '$name' AND admin_pass = SHA('$pass')";
22 |     $data = mysql_query($query, $conn) or die('Error!!');
23 | 
24 |     if (mysql_num_rows($data) == 1) {
25 | 		$_SESSION['admin'] = $name;
26 |         header('Location: manage.php');
27 |     }
28 | 	else {
29 | 		$_SESSION['error_info'] = '用户名或密码错误';
30 | 		header('Location: login.php');
31 | 	}
32 | 	mysql_close($conn);
33 | }
34 | else {
35 | 	not_find($_SERVER['PHP_SELF']);
36 | }
37 | ?>
38 | 


--------------------------------------------------------------------------------
/VAuditDemo_Release/admin/login.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | include_once('../sys/config.php');
 3 | include_once('../header.php');
 4 | 
 5 | if(isset($_SESSION['error_info']) && $_SESSION['error_info'] != '') {
 6 | 	echo $_SESSION['error_info'];
 7 | 	$_SESSION['error_info'] = '';
 8 | }
 9 | ?>
10 | <form class="bs-example form-horizontal" action="logCheck.php" method="post" name="log">
11 | 	<legend>登录</legend>
12 |     <div class="form-group">
13 |         <label for="inputEmail" class="col-lg-2 control-label">用户名：</label>
14 |         <div class="col-lg-3">
15 |             <input type="text" name="user" class="form-control" id="inputEmail">
16 |         </div>
17 | 	</div>
18 | 	<div class="form-group">
19 | 		<label for="inputEmail" class="col-lg-2 control-label">密码：</label>
20 |         <div class="col-lg-3">
21 | 			<input type="password" name="pass" class="form-control" id="inputEmail" onblur="check()">
22 |         </div>
23 |     </div>	
24 | 	<div class="form-group">
25 | 		<label for="inputEmail" class="col-lg-2 control-label">驗證碼</label>
26 |         <div class="col-lg-3">
27 | 			<input type="text" name="captcha" class="form-control" id="inputEmail" onblur="check()">
28 |         </div>
29 | 		<div><img src="captcha.php"></div>
30 |     </div>	
31 | 	<div class="form-group">
32 | 		<label for="inputEmail" class="col-lg-2 control-label"></label>
33 |         <div class="col-lg-3">
34 | 			<input type="submit" name="submit" class="btn btn-primary" value="登录"/>
35 |         </div>
36 |     </div>				  
37 | </form>
38 | <?php
39 | require_once('../footer.php');
40 | ?>
41 | 


--------------------------------------------------------------------------------
/VAuditDemo_Release/admin/manage.php:
--------------------------------------------------------------------------------
 1 | <?php 
 2 | include_once($_SERVER["DOCUMENT_ROOT"].'/sys/config.php');
 3 | 
 4 | if (isset($_SESSION['admin'])) {
 5 | 	include_once($_SERVER["DOCUMENT_ROOT"].'/header.php');
 6 | ?>
 7 | 	<table class="items table">
 8 | 	<thead>
 9 | 	<tr>
10 | 	<th id="yw0_c0">管理</th>
11 | 	<th id="yw0_c1">入口</th>
12 | 	</thead>
13 | 	<tbody>
14 | 		<tr class="odd">
15 | 			<td>管理員</td>
16 | 			<td><a href="manageAdmin.php">进入</a></td>
17 | 		</tr>
18 | 		<tr class="odd">
19 | 			<td>用户</td>
20 | 			<td><a href="manageUser.php">进入</a></td>
21 | 		</tr>
22 | 		<tr class="odd">
23 | 			<td>评论</td>
24 | 			<td><a href="manageCom.php">进入</a></td>
25 | 		</tr>
26 | 		<tr class="odd">
27 | 			<td>Ping</td>
28 | 			<td><a href="ping.php">进入</a></td>
29 | 		</tr>
30 | 	</tbody>
31 | 	</table>
32 | 	<?php
33 | 	require_once($_SERVER["DOCUMENT_ROOT"].'/footer.php');
34 | }
35 | else {
36 | 	not_find($_SERVER['PHP_SELF']);
37 | }
38 | ?>
39 | 


--------------------------------------------------------------------------------
/VAuditDemo_Release/admin/manageAdmin.php:
--------------------------------------------------------------------------------
 1 | <?php 
 2 | include_once('../sys/config.php');
 3 | 
 4 | if (isset($_SESSION['admin'])) {
 5 | 	include_once('../header.php');
 6 | 
 7 | 	if(isset($_POST['username']) && isset($_POST['password'])){
 8 | 		$clean_name = clean_input($_POST['username']);
 9 | 		$clean_pass = clean_input($_POST['password']);
10 | 		$query = "SELECT * FROM admin WHERE admin_name = '$clean_name'";
11 | 	    $data = mysql_query($query, $conn);
12 | 		if (mysql_num_rows($data) == 1) {
13 | 			$_SESSION['error_info'] = '用户名已存在';
14 | 			header('Location: manageUser.php');
15 | 			exit;
16 | 		} else {
17 | 			$query = "INSERT INTO admin(admin_name,admin_pass) VALUES ('$clean_name',SHA('$clean_pass'))";
18 | 			mysql_query($query, $conn) or die("Error!!");
19 | 		}
20 | 	}
21 | 
22 | 	$query = "SELECT * FROM admin ORDER BY admin_id";
23 | 	$data = mysql_query($query, $conn) or die('Error');
24 | 	mysql_close($conn);
25 | ?>
26 | <table class="items table">
27 | 	<thead>
28 | 	<tr>
29 | 		<th id="yw0_c0">Name</th>
30 | 		<th id="yw0_c4">Manege</th>
31 | 	</thead>
32 | 	<tbody>
33 | <?php while ($admin = mysql_fetch_array($data)) {
34 | 	$html_user_name = htmlspecialchars($admin['admin_name']);
35 | ?>
36 | 	<tr class="odd">
37 | 		<td><?php echo $html_user_name;?></td>
38 | 		<td><a href="delAdmin.php?id=<?php echo $admin['admin_id'];?>">删除</a></td>
39 | 	</tr>
40 | <?php } ?>
41 | </tbody>
42 | </table>
43 | 
44 | <form class="bs-example form-horizontal" action="manageAdmin.php" method="post" name="log">
45 | 	<legend>添加管理員</legend>
46 |     <div class="form-group">
47 |         <label for="inputEmail" class="col-lg-2 control-label">用户名：</label>
48 |         <div class="col-lg-3">
49 |             <input type="text" name="username" class="form-control" id="inputEmail">
50 |         </div>
51 | 	</div>
52 | 	<div class="form-group">
53 | 		<label for="inputEmail" class="col-lg-2 control-label">密码：</label>
54 |         <div class="col-lg-3">
55 | 			<input type="password" name="password" class="form-control" id="inputEmail" onblur="check()">
56 |         </div>
57 | 		<div><input type="submit" name="submit" class="btn btn-primary" value="添加"/></div>
58 |     </div>				  
59 | </form>
60 | 
61 | <a href="manage.php">返回</a>
62 | <?php 
63 | require_once('../footer.php');
64 | }
65 | else {
66 | 	not_find($_SERVER['PHP_SELF']);
67 | }
68 |  ?>
69 | 


--------------------------------------------------------------------------------
/VAuditDemo_Release/admin/manageCom.php:
--------------------------------------------------------------------------------
 1 | <?php 
 2 | include_once('../sys/config.php');
 3 | 
 4 | if (isset($_SESSION['admin'])) {
 5 | 	include_once('../header.php');
 6 | 	$query = "SELECT * FROM comment ORDER BY comment_id";
 7 | 	$data = mysql_query($query, $conn) or die('Error');
 8 | 	mysql_close($conn);
 9 | ?>
10 | <table class="items table">
11 | <thead>
12 | <tr>
13 | <th id="yw0_c0">留言</th>
14 | <th id="yw0_c0">用户</th>
15 | <th id="yw0_c4">管理</th>
16 | </thead>
17 | <tbody>
18 | <?php 
19 | 	//打印数据
20 | 	while ($com = mysql_fetch_array($data)) {
21 | 		$html_comment_text = htmlspecialchars($com['comment_text']);
22 | 		$html_user_name = htmlspecialchars($com['user_name']);
23 | ?>
24 | 	<tr class="odd">
25 | 		<td><?php echo $html_comment_text;?></td>
26 | 		<td><?php echo $html_user_name;?></td>
27 | 		<td><a href="delCom.php?id=<?php echo $com['comment_id'];?>">删除</a></td>
28 | 	</tr>
29 | <?php } 
30 | ?>
31 | </tbody>
32 | </table>
33 | <a href="manage.php">返回</a>
34 | <?php 
35 | require_once('../footer.php');
36 | }
37 | else {
38 | 	not_find($_SERVER['PHP_SELF']);
39 | }
40 |  ?>


--------------------------------------------------------------------------------
/VAuditDemo_Release/admin/manageUser.php:
--------------------------------------------------------------------------------
 1 | <?php 
 2 | include_once('../sys/config.php');
 3 | 
 4 | if (isset($_SESSION['admin'])) {
 5 | 	include_once('../header.php');
 6 | 
 7 | 	$query = "SELECT * FROM users ORDER BY user_id";
 8 | 	$data = mysql_query($query, $conn) or die('Error');
 9 | 	mysql_close($conn);
10 | ?>
11 | <table class="items table">
12 | 	<thead>
13 | 	<tr>
14 | 		<th id="yw0_c0">Id</th>
15 | 		<th id="yw0_c4">Name</th>
16 | 		<th id="yw0_c4">Ip</th>
17 | 		<th id="yw0_c4">Manege</th>
18 | 	</thead>
19 | 	<tbody>
20 | <?php while ($users = mysql_fetch_array($data)) {
21 | 	$html_user_name = htmlspecialchars($users['user_name']);
22 | ?>
23 | 	<tr class="odd">
24 | 		<td><?php echo $users['user_id'];?></a></td>
25 | 		<td><?php echo $html_user_name;?></td>
26 | 		<td><?php echo $users['login_ip'];?></td>
27 | 		<td><a href="delUser.php?id=<?php echo $users['user_id'];?>">删除</a></td>
28 | 	</tr>
29 | <?php } ?>
30 | </tbody>
31 | </table>
32 | 
33 | <a href="manage.php">返回</a>
34 | <?php 
35 | require_once('../footer.php');
36 | }
37 | else {
38 | 	not_find($_SERVER['PHP_SELF']);
39 | }
40 |  ?>


--------------------------------------------------------------------------------
/VAuditDemo_Release/admin/php_errors.log:
--------------------------------------------------------------------------------
  1 | [03-Aug-2016 19:04:07 UTC] PHP Deprecated:  mysql_connect(): The mysql extension is deprecated and will be removed in the future: use mysqli or PDO instead in E:\SourceCodes\VAuditDemo\sys\config.php on line 17

  2 | [03-Aug-2016 19:04:07 UTC] PHP Stack trace:

  3 | [03-Aug-2016 19:04:07 UTC] PHP   1. {main}() E:\SourceCodes\VAuditDemo\admin\login.php:0

  4 | [03-Aug-2016 19:04:07 UTC] PHP   2. include_once() E:\SourceCodes\VAuditDemo\admin\login.php:2

  5 | [03-Aug-2016 19:04:07 UTC] PHP   3. mysql_connect('localhost', 'root', 'root') E:\SourceCodes\VAuditDemo\sys\config.php:17

  6 | [03-Aug-2016 19:04:09 UTC] PHP Deprecated:  mysql_connect(): The mysql extension is deprecated and will be removed in the future: use mysqli or PDO instead in E:\SourceCodes\VAuditDemo\sys\config.php on line 17

  7 | [03-Aug-2016 19:04:09 UTC] PHP Stack trace:

  8 | [03-Aug-2016 19:04:09 UTC] PHP   1. {main}() E:\SourceCodes\VAuditDemo\admin\login.php:0

  9 | [03-Aug-2016 19:04:09 UTC] PHP   2. include_once() E:\SourceCodes\VAuditDemo\admin\login.php:2

 10 | [03-Aug-2016 19:04:09 UTC] PHP   3. mysql_connect('localhost', 'root', 'root') E:\SourceCodes\VAuditDemo\sys\config.php:17

 11 | [03-Aug-2016 19:05:06 UTC] PHP Deprecated:  mysql_connect(): The mysql extension is deprecated and will be removed in the future: use mysqli or PDO instead in E:\SourceCodes\VAuditDemo\sys\config.php on line 17

 12 | [03-Aug-2016 19:05:06 UTC] PHP Stack trace:

 13 | [03-Aug-2016 19:05:06 UTC] PHP   1. {main}() E:\SourceCodes\VAuditDemo\admin\logCheck.php:0

 14 | [03-Aug-2016 19:05:06 UTC] PHP   2. include_once() E:\SourceCodes\VAuditDemo\admin\logCheck.php:2

 15 | [03-Aug-2016 19:05:06 UTC] PHP   3. mysql_connect('localhost', 'root', 'root') E:\SourceCodes\VAuditDemo\sys\config.php:17

 16 | [03-Aug-2016 19:05:07 UTC] PHP Deprecated:  mysql_connect(): The mysql extension is deprecated and will be removed in the future: use mysqli or PDO instead in E:\SourceCodes\VAuditDemo\sys\config.php on line 17

 17 | [03-Aug-2016 19:05:07 UTC] PHP Stack trace:

 18 | [03-Aug-2016 19:05:07 UTC] PHP   1. {main}() E:\SourceCodes\VAuditDemo\admin\manage.php:0

 19 | [03-Aug-2016 19:05:07 UTC] PHP   2. include_once() E:\SourceCodes\VAuditDemo\admin\manage.php:2

 20 | [03-Aug-2016 19:05:07 UTC] PHP   3. mysql_connect('localhost', 'root', 'root') E:\SourceCodes\VAuditDemo\sys\config.php:17

 21 | [03-Aug-2016 19:05:09 UTC] PHP Deprecated:  mysql_connect(): The mysql extension is deprecated and will be removed in the future: use mysqli or PDO instead in E:\SourceCodes\VAuditDemo\sys\config.php on line 17

 22 | [03-Aug-2016 19:05:09 UTC] PHP Stack trace:

 23 | [03-Aug-2016 19:05:09 UTC] PHP   1. {main}() E:\SourceCodes\VAuditDemo\admin\manage.php:0

 24 | [03-Aug-2016 19:05:09 UTC] PHP   2. include_once() E:\SourceCodes\VAuditDemo\admin\manage.php:2

 25 | [03-Aug-2016 19:05:09 UTC] PHP   3. mysql_connect('localhost', 'root', 'root') E:\SourceCodes\VAuditDemo\sys\config.php:17

 26 | [03-Aug-2016 19:05:16 UTC] PHP Deprecated:  mysql_connect(): The mysql extension is deprecated and will be removed in the future: use mysqli or PDO instead in E:\SourceCodes\VAuditDemo\sys\config.php on line 17

 27 | [03-Aug-2016 19:05:16 UTC] PHP Stack trace:

 28 | [03-Aug-2016 19:05:16 UTC] PHP   1. {main}() E:\SourceCodes\VAuditDemo\admin\ping.php:0

 29 | [03-Aug-2016 19:05:16 UTC] PHP   2. include_once() E:\SourceCodes\VAuditDemo\admin\ping.php:2

 30 | [03-Aug-2016 19:05:16 UTC] PHP   3. mysql_connect('localhost', 'root', 'root') E:\SourceCodes\VAuditDemo\sys\config.php:17

 31 | [03-Aug-2016 19:05:17 UTC] PHP Deprecated:  mysql_connect(): The mysql extension is deprecated and will be removed in the future: use mysqli or PDO instead in E:\SourceCodes\VAuditDemo\sys\config.php on line 17

 32 | [03-Aug-2016 19:05:17 UTC] PHP Stack trace:

 33 | [03-Aug-2016 19:05:17 UTC] PHP   1. {main}() E:\SourceCodes\VAuditDemo\admin\ping.php:0

 34 | [03-Aug-2016 19:05:18 UTC] PHP   2. include_once() E:\SourceCodes\VAuditDemo\admin\ping.php:2

 35 | [03-Aug-2016 19:05:18 UTC] PHP   3. mysql_connect('localhost', 'root', 'root') E:\SourceCodes\VAuditDemo\sys\config.php:17

 36 | [03-Aug-2016 19:05:42 UTC] PHP Deprecated:  mysql_connect(): The mysql extension is deprecated and will be removed in the future: use mysqli or PDO instead in E:\SourceCodes\VAuditDemo\sys\config.php on line 17

 37 | [03-Aug-2016 19:05:42 UTC] PHP Stack trace:

 38 | [03-Aug-2016 19:05:42 UTC] PHP   1. {main}() E:\SourceCodes\VAuditDemo\admin\ping.php:0

 39 | [03-Aug-2016 19:05:42 UTC] PHP   2. include_once() E:\SourceCodes\VAuditDemo\admin\ping.php:2

 40 | [03-Aug-2016 19:05:42 UTC] PHP   3. mysql_connect('localhost', 'root', 'root') E:\SourceCodes\VAuditDemo\sys\config.php:17

 41 | [03-Aug-2016 19:06:20 UTC] PHP Deprecated:  mysql_connect(): The mysql extension is deprecated and will be removed in the future: use mysqli or PDO instead in E:\SourceCodes\VAuditDemo\sys\config.php on line 17

 42 | [03-Aug-2016 19:06:20 UTC] PHP Stack trace:

 43 | [03-Aug-2016 19:06:20 UTC] PHP   1. {main}() E:\SourceCodes\VAuditDemo\admin\ping.php:0

 44 | [03-Aug-2016 19:06:20 UTC] PHP   2. include_once() E:\SourceCodes\VAuditDemo\admin\ping.php:2

 45 | [03-Aug-2016 19:06:21 UTC] PHP   3. mysql_connect('localhost', 'root', 'root') E:\SourceCodes\VAuditDemo\sys\config.php:17

 46 | [03-Aug-2016 19:08:19 UTC] PHP Deprecated:  mysql_connect(): The mysql extension is deprecated and will be removed in the future: use mysqli or PDO instead in E:\SourceCodes\VAuditDemo\sys\config.php on line 17

 47 | [03-Aug-2016 19:08:19 UTC] PHP Stack trace:

 48 | [03-Aug-2016 19:08:19 UTC] PHP   1. {main}() E:\SourceCodes\VAuditDemo\admin\ping.php:0

 49 | [03-Aug-2016 19:08:19 UTC] PHP   2. include_once() E:\SourceCodes\VAuditDemo\admin\ping.php:2

 50 | [03-Aug-2016 19:08:19 UTC] PHP   3. mysql_connect('localhost', 'root', 'root') E:\SourceCodes\VAuditDemo\sys\config.php:17

 51 | [03-Aug-2016 19:08:30 UTC] PHP Deprecated:  mysql_connect(): The mysql extension is deprecated and will be removed in the future: use mysqli or PDO instead in E:\SourceCodes\VAuditDemo\sys\config.php on line 17

 52 | [03-Aug-2016 19:08:30 UTC] PHP Stack trace:

 53 | [03-Aug-2016 19:08:30 UTC] PHP   1. {main}() E:\SourceCodes\VAuditDemo\admin\ping.php:0

 54 | [03-Aug-2016 19:08:30 UTC] PHP   2. include_once() E:\SourceCodes\VAuditDemo\admin\ping.php:2

 55 | [03-Aug-2016 19:08:30 UTC] PHP   3. mysql_connect('localhost', 'root', 'root') E:\SourceCodes\VAuditDemo\sys\config.php:17

 56 | [03-Aug-2016 20:49:53 UTC] PHP Deprecated:  mysql_connect(): The mysql extension is deprecated and will be removed in the future: use mysqli or PDO instead in E:\SourceCodes\VAuditDemo\sys\config.php on line 17

 57 | [03-Aug-2016 20:49:53 UTC] PHP Stack trace:

 58 | [03-Aug-2016 20:49:53 UTC] PHP   1. {main}() E:\SourceCodes\VAuditDemo\admin\login.php:0

 59 | [03-Aug-2016 20:49:53 UTC] PHP   2. include_once() E:\SourceCodes\VAuditDemo\admin\login.php:2

 60 | [03-Aug-2016 20:49:53 UTC] PHP   3. mysql_connect('localhost', 'root', 'root') E:\SourceCodes\VAuditDemo\sys\config.php:17

 61 | [03-Aug-2016 20:49:55 UTC] PHP Deprecated:  mysql_connect(): The mysql extension is deprecated and will be removed in the future: use mysqli or PDO instead in E:\SourceCodes\VAuditDemo\sys\config.php on line 17

 62 | [03-Aug-2016 20:49:55 UTC] PHP Stack trace:

 63 | [03-Aug-2016 20:49:55 UTC] PHP   1. {main}() E:\SourceCodes\VAuditDemo\admin\login.php:0

 64 | [03-Aug-2016 20:49:55 UTC] PHP   2. include_once() E:\SourceCodes\VAuditDemo\admin\login.php:2

 65 | [03-Aug-2016 20:49:55 UTC] PHP   3. mysql_connect('localhost', 'root', 'root') E:\SourceCodes\VAuditDemo\sys\config.php:17

 66 | [03-Aug-2016 20:50:04 UTC] PHP Deprecated:  mysql_connect(): The mysql extension is deprecated and will be removed in the future: use mysqli or PDO instead in E:\SourceCodes\VAuditDemo\sys\config.php on line 17

 67 | [03-Aug-2016 20:50:04 UTC] PHP Stack trace:

 68 | [03-Aug-2016 20:50:04 UTC] PHP   1. {main}() E:\SourceCodes\VAuditDemo\admin\logCheck.php:0

 69 | [03-Aug-2016 20:50:04 UTC] PHP   2. include_once() E:\SourceCodes\VAuditDemo\admin\logCheck.php:2

 70 | [03-Aug-2016 20:50:04 UTC] PHP   3. mysql_connect('localhost', 'root', 'root') E:\SourceCodes\VAuditDemo\sys\config.php:17

 71 | [03-Aug-2016 20:50:05 UTC] PHP Deprecated:  mysql_connect(): The mysql extension is deprecated and will be removed in the future: use mysqli or PDO instead in E:\SourceCodes\VAuditDemo\sys\config.php on line 17

 72 | [03-Aug-2016 20:50:05 UTC] PHP Stack trace:

 73 | [03-Aug-2016 20:50:05 UTC] PHP   1. {main}() E:\SourceCodes\VAuditDemo\admin\manage.php:0

 74 | [03-Aug-2016 20:50:05 UTC] PHP   2. include_once() E:\SourceCodes\VAuditDemo\admin\manage.php:2

 75 | [03-Aug-2016 20:50:05 UTC] PHP   3. mysql_connect('localhost', 'root', 'root') E:\SourceCodes\VAuditDemo\sys\config.php:17

 76 | [03-Aug-2016 20:50:07 UTC] PHP Deprecated:  mysql_connect(): The mysql extension is deprecated and will be removed in the future: use mysqli or PDO instead in E:\SourceCodes\VAuditDemo\sys\config.php on line 17

 77 | [03-Aug-2016 20:50:07 UTC] PHP Stack trace:

 78 | [03-Aug-2016 20:50:07 UTC] PHP   1. {main}() E:\SourceCodes\VAuditDemo\admin\manage.php:0

 79 | [03-Aug-2016 20:50:07 UTC] PHP   2. include_once() E:\SourceCodes\VAuditDemo\admin\manage.php:2

 80 | [03-Aug-2016 20:50:07 UTC] PHP   3. mysql_connect('localhost', 'root', 'root') E:\SourceCodes\VAuditDemo\sys\config.php:17

 81 | [03-Aug-2016 20:50:24 UTC] PHP Deprecated:  mysql_connect(): The mysql extension is deprecated and will be removed in the future: use mysqli or PDO instead in E:\SourceCodes\VAuditDemo\sys\config.php on line 17

 82 | [03-Aug-2016 20:50:24 UTC] PHP Stack trace:

 83 | [03-Aug-2016 20:50:24 UTC] PHP   1. {main}() E:\SourceCodes\VAuditDemo\admin\manageUser.php:0

 84 | [03-Aug-2016 20:50:24 UTC] PHP   2. include_once() E:\SourceCodes\VAuditDemo\admin\manageUser.php:2

 85 | [03-Aug-2016 20:50:24 UTC] PHP   3. mysql_connect('localhost', 'root', 'root') E:\SourceCodes\VAuditDemo\sys\config.php:17

 86 | [03-Aug-2016 20:50:26 UTC] PHP Deprecated:  mysql_connect(): The mysql extension is deprecated and will be removed in the future: use mysqli or PDO instead in E:\SourceCodes\VAuditDemo\sys\config.php on line 17

 87 | [03-Aug-2016 20:50:26 UTC] PHP Stack trace:

 88 | [03-Aug-2016 20:50:26 UTC] PHP   1. {main}() E:\SourceCodes\VAuditDemo\admin\manageUser.php:0

 89 | [03-Aug-2016 20:50:26 UTC] PHP   2. include_once() E:\SourceCodes\VAuditDemo\admin\manageUser.php:2

 90 | [03-Aug-2016 20:50:26 UTC] PHP   3. mysql_connect('localhost', 'root', 'root') E:\SourceCodes\VAuditDemo\sys\config.php:17

 91 | [03-Aug-2016 20:50:41 UTC] PHP Deprecated:  mysql_connect(): The mysql extension is deprecated and will be removed in the future: use mysqli or PDO instead in E:\SourceCodes\VAuditDemo\sys\config.php on line 17

 92 | [03-Aug-2016 20:50:41 UTC] PHP Stack trace:

 93 | [03-Aug-2016 20:50:41 UTC] PHP   1. {main}() E:\SourceCodes\VAuditDemo\admin\manage.php:0

 94 | [03-Aug-2016 20:50:41 UTC] PHP   2. include_once() E:\SourceCodes\VAuditDemo\admin\manage.php:2

 95 | [03-Aug-2016 20:50:41 UTC] PHP   3. mysql_connect('localhost', 'root', 'root') E:\SourceCodes\VAuditDemo\sys\config.php:17

 96 | [03-Aug-2016 20:50:43 UTC] PHP Deprecated:  mysql_connect(): The mysql extension is deprecated and will be removed in the future: use mysqli or PDO instead in E:\SourceCodes\VAuditDemo\sys\config.php on line 17

 97 | [03-Aug-2016 20:50:43 UTC] PHP Stack trace:

 98 | [03-Aug-2016 20:50:43 UTC] PHP   1. {main}() E:\SourceCodes\VAuditDemo\admin\manage.php:0

 99 | [03-Aug-2016 20:50:43 UTC] PHP   2. include_once() E:\SourceCodes\VAuditDemo\admin\manage.php:2

100 | [03-Aug-2016 20:50:43 UTC] PHP   3. mysql_connect('localhost', 'root', 'root') E:\SourceCodes\VAuditDemo\sys\config.php:17

101 | [03-Aug-2016 20:50:46 UTC] PHP Deprecated:  mysql_connect(): The mysql extension is deprecated and will be removed in the future: use mysqli or PDO instead in E:\SourceCodes\VAuditDemo\sys\config.php on line 17

102 | [03-Aug-2016 20:50:46 UTC] PHP Stack trace:

103 | [03-Aug-2016 20:50:46 UTC] PHP   1. {main}() E:\SourceCodes\VAuditDemo\admin\manageAdmin.php:0

104 | [03-Aug-2016 20:50:46 UTC] PHP   2. include_once() E:\SourceCodes\VAuditDemo\admin\manageAdmin.php:2

105 | [03-Aug-2016 20:50:46 UTC] PHP   3. mysql_connect('localhost', 'root', 'root') E:\SourceCodes\VAuditDemo\sys\config.php:17

106 | [03-Aug-2016 20:50:47 UTC] PHP Notice:  Undefined index: user_id in E:\SourceCodes\VAuditDemo\admin\manageAdmin.php on line 38

107 | [03-Aug-2016 20:50:47 UTC] PHP Stack trace:

108 | [03-Aug-2016 20:50:47 UTC] PHP   1. {main}() E:\SourceCodes\VAuditDemo\admin\manageAdmin.php:0

109 | [03-Aug-2016 20:50:47 UTC] PHP Deprecated:  mysql_connect(): The mysql extension is deprecated and will be removed in the future: use mysqli or PDO instead in E:\SourceCodes\VAuditDemo\sys\config.php on line 17

110 | [03-Aug-2016 20:50:47 UTC] PHP Stack trace:

111 | [03-Aug-2016 20:50:47 UTC] PHP   1. {main}() E:\SourceCodes\VAuditDemo\admin\manageAdmin.php:0

112 | [03-Aug-2016 20:50:47 UTC] PHP   2. include_once() E:\SourceCodes\VAuditDemo\admin\manageAdmin.php:2

113 | [03-Aug-2016 20:50:47 UTC] PHP   3. mysql_connect('localhost', 'root', 'root') E:\SourceCodes\VAuditDemo\sys\config.php:17

114 | [03-Aug-2016 20:50:48 UTC] PHP Notice:  Undefined index: user_id in E:\SourceCodes\VAuditDemo\admin\manageAdmin.php on line 38

115 | [03-Aug-2016 20:50:48 UTC] PHP Stack trace:

116 | [03-Aug-2016 20:50:48 UTC] PHP   1. {main}() E:\SourceCodes\VAuditDemo\admin\manageAdmin.php:0

117 | [03-Aug-2016 20:51:22 UTC] PHP Deprecated:  mysql_connect(): The mysql extension is deprecated and will be removed in the future: use mysqli or PDO instead in E:\SourceCodes\VAuditDemo\sys\config.php on line 17

118 | [03-Aug-2016 20:51:22 UTC] PHP Stack trace:

119 | [03-Aug-2016 20:51:22 UTC] PHP   1. {main}() E:\SourceCodes\VAuditDemo\admin\manageAdmin.php:0

120 | [03-Aug-2016 20:51:22 UTC] PHP   2. include_once() E:\SourceCodes\VAuditDemo\admin\manageAdmin.php:2

121 | [03-Aug-2016 20:51:22 UTC] PHP   3. mysql_connect('localhost', 'root', 'root') E:\SourceCodes\VAuditDemo\sys\config.php:17

122 | [03-Aug-2016 20:51:23 UTC] PHP Notice:  Undefined index: user_id in E:\SourceCodes\VAuditDemo\admin\manageAdmin.php on line 38

123 | [03-Aug-2016 20:51:23 UTC] PHP Stack trace:

124 | [03-Aug-2016 20:51:23 UTC] PHP   1. {main}() E:\SourceCodes\VAuditDemo\admin\manageAdmin.php:0

125 | [03-Aug-2016 20:51:23 UTC] PHP Notice:  Undefined index: user_id in E:\SourceCodes\VAuditDemo\admin\manageAdmin.php on line 38

126 | [03-Aug-2016 20:51:23 UTC] PHP Stack trace:

127 | [03-Aug-2016 20:51:23 UTC] PHP   1. {main}() E:\SourceCodes\VAuditDemo\admin\manageAdmin.php:0

128 | [03-Aug-2016 20:52:10 UTC] PHP Deprecated:  mysql_connect(): The mysql extension is deprecated and will be removed in the future: use mysqli or PDO instead in E:\SourceCodes\VAuditDemo\sys\config.php on line 17

129 | [03-Aug-2016 20:52:10 UTC] PHP Stack trace:

130 | [03-Aug-2016 20:52:10 UTC] PHP   1. {main}() E:\SourceCodes\VAuditDemo\admin\manageAdmin.php:0

131 | [03-Aug-2016 20:52:10 UTC] PHP   2. include_once() E:\SourceCodes\VAuditDemo\admin\manageAdmin.php:2

132 | [03-Aug-2016 20:52:10 UTC] PHP   3. mysql_connect('localhost', 'root', 'root') E:\SourceCodes\VAuditDemo\sys\config.php:17

133 | [03-Aug-2016 20:52:12 UTC] PHP Deprecated:  mysql_connect(): The mysql extension is deprecated and will be removed in the future: use mysqli or PDO instead in E:\SourceCodes\VAuditDemo\sys\config.php on line 17

134 | [03-Aug-2016 20:52:12 UTC] PHP Stack trace:

135 | [03-Aug-2016 20:52:12 UTC] PHP   1. {main}() E:\SourceCodes\VAuditDemo\admin\manageAdmin.php:0

136 | [03-Aug-2016 20:52:12 UTC] PHP   2. include_once() E:\SourceCodes\VAuditDemo\admin\manageAdmin.php:2

137 | [03-Aug-2016 20:52:12 UTC] PHP   3. mysql_connect('localhost', 'root', 'root') E:\SourceCodes\VAuditDemo\sys\config.php:17

138 | [03-Aug-2016 20:52:19 UTC] PHP Deprecated:  mysql_connect(): The mysql extension is deprecated and will be removed in the future: use mysqli or PDO instead in E:\SourceCodes\VAuditDemo\sys\config.php on line 17

139 | [03-Aug-2016 20:52:19 UTC] PHP Stack trace:

140 | [03-Aug-2016 20:52:19 UTC] PHP   1. {main}() E:\SourceCodes\VAuditDemo\admin\delUser.php:0

141 | [03-Aug-2016 20:52:19 UTC] PHP   2. include_once() E:\SourceCodes\VAuditDemo\admin\delUser.php:2

142 | [03-Aug-2016 20:52:19 UTC] PHP   3. mysql_connect('localhost', 'root', 'root') E:\SourceCodes\VAuditDemo\sys\config.php:17

143 | [03-Aug-2016 20:52:20 UTC] PHP Deprecated:  mysql_connect(): The mysql extension is deprecated and will be removed in the future: use mysqli or PDO instead in E:\SourceCodes\VAuditDemo\sys\config.php on line 17

144 | [03-Aug-2016 20:52:20 UTC] PHP Stack trace:

145 | [03-Aug-2016 20:52:20 UTC] PHP   1. {main}() E:\SourceCodes\VAuditDemo\admin\manageUser.php:0

146 | [03-Aug-2016 20:52:20 UTC] PHP   2. include_once() E:\SourceCodes\VAuditDemo\admin\manageUser.php:2

147 | [03-Aug-2016 20:52:20 UTC] PHP   3. mysql_connect('localhost', 'root', 'root') E:\SourceCodes\VAuditDemo\sys\config.php:17

148 | [03-Aug-2016 20:52:22 UTC] PHP Deprecated:  mysql_connect(): The mysql extension is deprecated and will be removed in the future: use mysqli or PDO instead in E:\SourceCodes\VAuditDemo\sys\config.php on line 17

149 | [03-Aug-2016 20:52:22 UTC] PHP Stack trace:

150 | [03-Aug-2016 20:52:22 UTC] PHP   1. {main}() E:\SourceCodes\VAuditDemo\admin\manageUser.php:0

151 | [03-Aug-2016 20:52:22 UTC] PHP   2. include_once() E:\SourceCodes\VAuditDemo\admin\manageUser.php:2

152 | [03-Aug-2016 20:52:22 UTC] PHP   3. mysql_connect('localhost', 'root', 'root') E:\SourceCodes\VAuditDemo\sys\config.php:17

153 | [03-Aug-2016 20:52:27 UTC] PHP Deprecated:  mysql_connect(): The mysql extension is deprecated and will be removed in the future: use mysqli or PDO instead in E:\SourceCodes\VAuditDemo\sys\config.php on line 17

154 | [03-Aug-2016 20:52:27 UTC] PHP Stack trace:

155 | [03-Aug-2016 20:52:27 UTC] PHP   1. {main}() E:\SourceCodes\VAuditDemo\admin\manage.php:0

156 | [03-Aug-2016 20:52:27 UTC] PHP   2. include_once() E:\SourceCodes\VAuditDemo\admin\manage.php:2

157 | [03-Aug-2016 20:52:27 UTC] PHP   3. mysql_connect('localhost', 'root', 'root') E:\SourceCodes\VAuditDemo\sys\config.php:17

158 | [03-Aug-2016 20:52:28 UTC] PHP Deprecated:  mysql_connect(): The mysql extension is deprecated and will be removed in the future: use mysqli or PDO instead in E:\SourceCodes\VAuditDemo\sys\config.php on line 17

159 | [03-Aug-2016 20:52:28 UTC] PHP Stack trace:

160 | [03-Aug-2016 20:52:28 UTC] PHP   1. {main}() E:\SourceCodes\VAuditDemo\admin\manage.php:0

161 | [03-Aug-2016 20:52:28 UTC] PHP   2. include_once() E:\SourceCodes\VAuditDemo\admin\manage.php:2

162 | [03-Aug-2016 20:52:28 UTC] PHP   3. mysql_connect('localhost', 'root', 'root') E:\SourceCodes\VAuditDemo\sys\config.php:17

163 | [03-Aug-2016 21:01:13 UTC] PHP Deprecated:  mysql_connect(): The mysql extension is deprecated and will be removed in the future: use mysqli or PDO instead in E:\SourceCodes\VAuditDemo\sys\config.php on line 17

164 | [03-Aug-2016 21:01:13 UTC] PHP Stack trace:

165 | [03-Aug-2016 21:01:13 UTC] PHP   1. {main}() E:\SourceCodes\VAuditDemo\admin\manageAdmin.php:0

166 | [03-Aug-2016 21:01:13 UTC] PHP   2. include_once() E:\SourceCodes\VAuditDemo\admin\manageAdmin.php:2

167 | [03-Aug-2016 21:01:13 UTC] PHP   3. mysql_connect('localhost', 'root', 'root') E:\SourceCodes\VAuditDemo\sys\config.php:17

168 | [03-Aug-2016 21:01:15 UTC] PHP Deprecated:  mysql_connect(): The mysql extension is deprecated and will be removed in the future: use mysqli or PDO instead in E:\SourceCodes\VAuditDemo\sys\config.php on line 17

169 | [03-Aug-2016 21:01:15 UTC] PHP Stack trace:

170 | [03-Aug-2016 21:01:15 UTC] PHP   1. {main}() E:\SourceCodes\VAuditDemo\admin\manageAdmin.php:0

171 | [03-Aug-2016 21:01:15 UTC] PHP   2. include_once() E:\SourceCodes\VAuditDemo\admin\manageAdmin.php:2

172 | [03-Aug-2016 21:01:15 UTC] PHP   3. mysql_connect('localhost', 'root', 'root') E:\SourceCodes\VAuditDemo\sys\config.php:17

173 | [03-Aug-2016 21:07:10 UTC] PHP Deprecated:  mysql_connect(): The mysql extension is deprecated and will be removed in the future: use mysqli or PDO instead in E:\SourceCodes\VAuditDemo\sys\config.php on line 17

174 | [03-Aug-2016 21:07:10 UTC] PHP Stack trace:

175 | [03-Aug-2016 21:07:10 UTC] PHP   1. {main}() E:\SourceCodes\VAuditDemo\admin\login.php:0

176 | [03-Aug-2016 21:07:10 UTC] PHP   2. include_once() E:\SourceCodes\VAuditDemo\admin\login.php:2

177 | [03-Aug-2016 21:07:10 UTC] PHP   3. mysql_connect('localhost', 'root', 'root') E:\SourceCodes\VAuditDemo\sys\config.php:17

178 | [03-Aug-2016 21:07:20 UTC] PHP Deprecated:  mysql_connect(): The mysql extension is deprecated and will be removed in the future: use mysqli or PDO instead in E:\SourceCodes\VAuditDemo\sys\config.php on line 17

179 | [03-Aug-2016 21:07:20 UTC] PHP Stack trace:

180 | [03-Aug-2016 21:07:20 UTC] PHP   1. {main}() E:\SourceCodes\VAuditDemo\admin\logCheck.php:0

181 | [03-Aug-2016 21:07:20 UTC] PHP   2. include_once() E:\SourceCodes\VAuditDemo\admin\logCheck.php:2

182 | [03-Aug-2016 21:07:20 UTC] PHP   3. mysql_connect('localhost', 'root', 'root') E:\SourceCodes\VAuditDemo\sys\config.php:17

183 | [03-Aug-2016 21:07:21 UTC] PHP Deprecated:  mysql_connect(): The mysql extension is deprecated and will be removed in the future: use mysqli or PDO instead in E:\SourceCodes\VAuditDemo\sys\config.php on line 17

184 | [03-Aug-2016 21:07:21 UTC] PHP Stack trace:

185 | [03-Aug-2016 21:07:21 UTC] PHP   1. {main}() E:\SourceCodes\VAuditDemo\admin\manage.php:0

186 | [03-Aug-2016 21:07:21 UTC] PHP   2. include_once() E:\SourceCodes\VAuditDemo\admin\manage.php:2

187 | [03-Aug-2016 21:07:21 UTC] PHP   3. mysql_connect('localhost', 'root', 'root') E:\SourceCodes\VAuditDemo\sys\config.php:17

188 | [03-Aug-2016 21:07:27 UTC] PHP Deprecated:  mysql_connect(): The mysql extension is deprecated and will be removed in the future: use mysqli or PDO instead in E:\SourceCodes\VAuditDemo\sys\config.php on line 17

189 | [03-Aug-2016 21:07:27 UTC] PHP Stack trace:

190 | [03-Aug-2016 21:07:27 UTC] PHP   1. {main}() E:\SourceCodes\VAuditDemo\admin\manageUser.php:0

191 | [03-Aug-2016 21:07:27 UTC] PHP   2. include_once() E:\SourceCodes\VAuditDemo\admin\manageUser.php:2

192 | [03-Aug-2016 21:07:27 UTC] PHP   3. mysql_connect('localhost', 'root', 'root') E:\SourceCodes\VAuditDemo\sys\config.php:17

193 | [03-Aug-2016 21:08:54 UTC] PHP Deprecated:  mysql_connect(): The mysql extension is deprecated and will be removed in the future: use mysqli or PDO instead in E:\SourceCodes\VAuditDemo\sys\config.php on line 17

194 | [03-Aug-2016 21:08:54 UTC] PHP Stack trace:

195 | [03-Aug-2016 21:08:54 UTC] PHP   1. {main}() E:\SourceCodes\VAuditDemo\admin\manageUser.php:0

196 | [03-Aug-2016 21:08:54 UTC] PHP   2. include_once() E:\SourceCodes\VAuditDemo\admin\manageUser.php:2

197 | [03-Aug-2016 21:08:54 UTC] PHP   3. mysql_connect('localhost', 'root', 'root') E:\SourceCodes\VAuditDemo\sys\config.php:17

198 | [03-Aug-2016 21:08:58 UTC] PHP Deprecated:  mysql_connect(): The mysql extension is deprecated and will be removed in the future: use mysqli or PDO instead in E:\SourceCodes\VAuditDemo\sys\config.php on line 17

199 | [03-Aug-2016 21:08:58 UTC] PHP Stack trace:

200 | [03-Aug-2016 21:08:58 UTC] PHP   1. {main}() E:\SourceCodes\VAuditDemo\admin\manageAdmin.php:0

201 | [03-Aug-2016 21:08:58 UTC] PHP   2. include_once() E:\SourceCodes\VAuditDemo\admin\manageAdmin.php:2

202 | [03-Aug-2016 21:08:58 UTC] PHP   3. mysql_connect('localhost', 'root', 'root') E:\SourceCodes\VAuditDemo\sys\config.php:17

203 | [03-Aug-2016 21:09:36 UTC] PHP Deprecated:  mysql_connect(): The mysql extension is deprecated and will be removed in the future: use mysqli or PDO instead in E:\SourceCodes\VAuditDemo\sys\config.php on line 17

204 | [03-Aug-2016 21:09:36 UTC] PHP Stack trace:

205 | [03-Aug-2016 21:09:36 UTC] PHP   1. {main}() E:\SourceCodes\VAuditDemo\admin\manage.php:0

206 | [03-Aug-2016 21:09:36 UTC] PHP   2. include_once() E:\SourceCodes\VAuditDemo\admin\manage.php:2

207 | [03-Aug-2016 21:09:36 UTC] PHP   3. mysql_connect('localhost', 'root', 'root') E:\SourceCodes\VAuditDemo\sys\config.php:17

208 | [03-Aug-2016 21:09:42 UTC] PHP Deprecated:  mysql_connect(): The mysql extension is deprecated and will be removed in the future: use mysqli or PDO instead in E:\SourceCodes\VAuditDemo\sys\config.php on line 17

209 | [03-Aug-2016 21:09:42 UTC] PHP Stack trace:

210 | [03-Aug-2016 21:09:42 UTC] PHP   1. {main}() E:\SourceCodes\VAuditDemo\admin\manageAdmin.php:0

211 | [03-Aug-2016 21:09:42 UTC] PHP   2. include_once() E:\SourceCodes\VAuditDemo\admin\manageAdmin.php:2

212 | [03-Aug-2016 21:09:42 UTC] PHP   3. mysql_connect('localhost', 'root', 'root') E:\SourceCodes\VAuditDemo\sys\config.php:17

213 | [03-Aug-2016 21:09:57 UTC] PHP Deprecated:  mysql_connect(): The mysql extension is deprecated and will be removed in the future: use mysqli or PDO instead in E:\SourceCodes\VAuditDemo\sys\config.php on line 17

214 | [03-Aug-2016 21:09:57 UTC] PHP Stack trace:

215 | [03-Aug-2016 21:09:57 UTC] PHP   1. {main}() E:\SourceCodes\VAuditDemo\admin\login.php:0

216 | [03-Aug-2016 21:09:57 UTC] PHP   2. include_once() E:\SourceCodes\VAuditDemo\admin\login.php:2

217 | [03-Aug-2016 21:09:57 UTC] PHP   3. mysql_connect('localhost', 'root', 'root') E:\SourceCodes\VAuditDemo\sys\config.php:17

218 | [03-Aug-2016 21:10:10 UTC] PHP Deprecated:  mysql_connect(): The mysql extension is deprecated and will be removed in the future: use mysqli or PDO instead in E:\SourceCodes\VAuditDemo\sys\config.php on line 17

219 | [03-Aug-2016 21:10:10 UTC] PHP Stack trace:

220 | [03-Aug-2016 21:10:10 UTC] PHP   1. {main}() E:\SourceCodes\VAuditDemo\admin\logCheck.php:0

221 | [03-Aug-2016 21:10:10 UTC] PHP   2. include_once() E:\SourceCodes\VAuditDemo\admin\logCheck.php:2

222 | [03-Aug-2016 21:10:10 UTC] PHP   3. mysql_connect('localhost', 'root', 'root') E:\SourceCodes\VAuditDemo\sys\config.php:17

223 | [03-Aug-2016 21:10:11 UTC] PHP Deprecated:  mysql_connect(): The mysql extension is deprecated and will be removed in the future: use mysqli or PDO instead in E:\SourceCodes\VAuditDemo\sys\config.php on line 17

224 | [03-Aug-2016 21:10:11 UTC] PHP Stack trace:

225 | [03-Aug-2016 21:10:11 UTC] PHP   1. {main}() E:\SourceCodes\VAuditDemo\admin\manage.php:0

226 | [03-Aug-2016 21:10:11 UTC] PHP   2. include_once() E:\SourceCodes\VAuditDemo\admin\manage.php:2

227 | [03-Aug-2016 21:10:11 UTC] PHP   3. mysql_connect('localhost', 'root', 'root') E:\SourceCodes\VAuditDemo\sys\config.php:17

228 | 


--------------------------------------------------------------------------------
/VAuditDemo_Release/admin/ping.php:
--------------------------------------------------------------------------------
 1 | <?php 
 2 | include_once('../sys/config.php');
 3 | 
 4 | if (isset($_SESSION['admin'])) {
 5 | 	include_once('../header.php');
 6 | 
 7 | 	
 8 | ?>
 9 | <div class="span10">
10 | 	<div id="content">
11 | 		<div class="page-header">
12 | 			<h4>Ping</h4>
13 | 			<hr>
14 | 			<form name="ping" action="" method="post">
15 | 				<input type="text" name="target" size="30" class="form-control">
16 | 				<input type="submit" value="Ping" name="submit" class="btn btn-primary">
17 | 			</form>
18 | 			<?php
19 | 			if( isset( $_POST[ 'submit' ] ) ) {
20 | 				$target = $_POST[ 'target' ];
21 | 
22 | 				if(preg_match('/^(?=^.{3,255}$)[a-zA-Z0-9][-a-zA-Z0-9]{0,62}(\.[a-zA-Z0-9][-a-zA-Z0-9]{0,62})+$|^((25[0-5]|2[0-4]\d|[01]?\d\d?)($|(?!\.$)\.)){4}$/',$target)){
23 | 					if (stristr(php_uname('s'), 'Windows NT')) { 
24 | 						$cmd = 'ping ' . $target;
25 | 					} else { 
26 | 						$cmd = 'ping -c 3 ' . $target;
27 | 					}
28 | 					$res = shell_exec( $cmd );
29 | 					echo "<br /><pre>$cmd\r\n".iconv('GB2312', 'UTF-8',$res)."</pre>";
30 | 				}else{
31 | 					echo "IP is error";
32 | 				}
33 | 			}
34 | 			?>
35 | 		</div>
36 | 	</div>
37 | </div>
38 | 
39 | 
40 | <a href="manage.php">返回</a>
41 | 	<?php 
42 | 	require_once('../footer.php');
43 | 	}
44 | else {
45 | 	not_find($_SERVER['PHP_SELF']);
46 | }
47 |  ?>
48 | 


--------------------------------------------------------------------------------
/VAuditDemo_Release/css/bootswatch.less:
--------------------------------------------------------------------------------
 1 | // Custom 3.1.0
 2 | // Bootswatch
 3 | // -----------------------------------------------------
 4 | 
 5 | 
 6 | // Navbar =====================================================================
 7 | 
 8 | // Buttons ====================================================================
 9 | 
10 | // Typography =================================================================
11 | 
12 | // Tables =====================================================================
13 | 
14 | // Forms ======================================================================
15 | 
16 | // Navs =======================================================================
17 | 
18 | // Indicators =================================================================
19 | 
20 | // Progress bars ==============================================================
21 | 
22 | // Containers =================================================================
23 | 


--------------------------------------------------------------------------------
/VAuditDemo_Release/css/bootswatch.min.css:
--------------------------------------------------------------------------------
 1 | body{padding-top:50px}
 2 | #banner{border-bottom:none}
 3 | .page-header h1{font-size:4em}
 4 | .bs-docs-section{margin-top:8em}
 5 | footer{margin:5em 0}footer li{float:left;margin-right:1.5em;margin-bottom:1.5em}
 6 | footer p{clear:left;margin-bottom:0}
 7 | .splash{padding:4em 0 2em;background-color:#1c2533;background:-webkit-linear-gradient(70deg, #080f1f 30%, #2b4b5a 87%, #435e67 100%);background:-o-linear-gradient(70deg, #080f1f 30%, #2b4b5a 87%, #435e67 100%);background:-ms-linear-gradient(70deg, #080f1f 30%, #2b4b5a 87%, #435e67 100%);background:-moz-linear-gradient(70deg, #080f1f 30%, #2b4b5a 87%, #435e67 100%);background:linear-gradient(20deg, #080f1f 30%, #2b4b5a 87%, #435e67 100%);background-attachment:fixed;color:#fff;text-align:center}.splash .alert{margin:4em 0 2em}
 8 | .splash h1{font-size:4em}
 9 | .splash #social{margin:2em 0 4em}
10 | .splash .bsa{max-width:350px;margin:0 auto;background:none}.splash .bsa .one .bsa_it_ad{border:1px solid #3e4653 !important;border-color:rgba(255,255,255,0.2) !important}
11 | .splash .bsa a{color:#fff}
12 | .section-tout{padding:4em 0 3em;border-top:1px solid rgba(255,255,255,0.1);border-bottom:1px solid rgba(0,0,0,0.1);background-color:#eaf1f1}.section-tout .fa{margin-right:.5em}
13 | .section-tout p{margin-bottom:3em}
14 | .section-preview{padding:4em 0 4em}.section-preview .preview{margin-bottom:4em;background-color:#eaf1f1;border:1px solid rgba(0,0,0,0.1);border-radius:6px}.section-preview .preview .image{padding:5px}.section-preview .preview .image img{border:1px solid rgba(0,0,0,0.1)}
15 | .section-preview .preview .options{text-align:center;padding:0 2em 2em}.section-preview .preview .options p{margin-bottom:2em}
16 | .section-preview .dropdown-menu{text-align:left}
17 | .section-preview .lead{margin-bottom:2em}
18 | @media (max-width:767px){.section-preview .image img{width:100%}}
19 | .bsa{padding:0}.bsa .one .bsa_it_ad{border:none !important;background-color:transparent !important}.bsa .one .bsa_it_ad .bsa_it_t,.bsa .one .bsa_it_ad .bsa_it_d{color:inherit !important}
20 | .bsa .one .bsa_it_ad .bsa_it_i{margin-bottom:0 !important}
21 | .bsa .one .bsa_it_p{display:none}
22 | 


--------------------------------------------------------------------------------
/VAuditDemo_Release/footer.php:
--------------------------------------------------------------------------------
1 |         <hr>
2 | 	   <div id="footer" class="pull-right">Copyright &copy; 2016 <a href="https://www.virzz.com/" target="_blank">Virink</a></div> 
3 |     </div>
4 |     <script src="https://code.jquery.com/jquery-1.10.2.min.js"></script>
5 |     <script src="/js/bootstrap.min.js"></script>
6 |     <script src="/js/bootswatch.js"></script>
7 |   </body>
8 | </html>
9 | 


--------------------------------------------------------------------------------
/VAuditDemo_Release/header.php:
--------------------------------------------------------------------------------
 1 | <!DOCTYPE html>
 2 | <html lang="en">
 3 |   <head>
 4 |     <title>VAuditDemo</title>
 5 |     <meta name="viewport" content="width=device-width, initial-scale=1.0">
 6 |     <meta charset="utf-8">
 7 |     <link rel="stylesheet" href="/css/bootstrap.css" media="screen">
 8 |     <link rel="stylesheet" href="/css/bootswatch.min.css">
 9 |     <!-- HTML5 shim and Respond.js IE8 support of HTML5 elements and media queries -->
10 |     <!--[if lt IE 9]>
11 |       <script src="../bower_components/html5shiv/dist/html5shiv.js"></script>
12 |       <script src="../bower_components/respond/dest/respond.min.js"></script>
13 |     <![endif]-->
14 |   </head>
15 |   <body>
16 |     <script src="/js/bsa.js"></script>
17 | 
18 |     <div class="navbar navbar-default navbar-fixed-top">
19 |       <div class="container">
20 |         <div class="navbar-header">
21 |           <a href="/" class="navbar-brand">VAuditDemo</a>
22 |         </div>
23 |         <div class="navbar-collapse collapse" id="navbar-main">
24 |           <ul class="nav navbar-nav">
25 |             <li>
26 |               <a href="/message.php">留言</a>
27 |             </li>
28 |             <li>
29 |               <a href="/index.php?module=about">關於<span></a>
30 |             </li>
31 |           </ul>
32 |           <form class="navbar-form navbar-left" action="/search.php" method="get">
33 |             <input type="text" name="search" class="form-control col-lg-8" placeholder="搜索留言">
34 |           </form>
35 |           <ul class="nav navbar-nav navbar-right">
36 |       <?php if ( isset( $_SESSION['username'] ) ) {?>
37 |             <li><a href="/user/user.php"><?php echo $_SESSION['username'];?></a></li>
38 |             <li><a href="/user/logout.php">退出</a></li>
39 |       <?php } else if ( isset( $_SESSION['admin'] ) ) {?>
40 |         <li><a href="/admin/manage.php"><?php echo $_SESSION['admin'];?></a></li>
41 |             <li><a href="/user/logout.php">退出</a></li>
42 |       <?php } else {?>
43 |       <li><a href="/user/login.php">登录</a></li>
44 |             <li><a href="/user/reg.php">注册</a></li>
45 |       <?php }?>
46 |           </ul>
47 | 
48 |         </div>
49 |       </div>
50 |     </div>
51 | 
52 | <br />
53 |     <div class="container">
54 | 


--------------------------------------------------------------------------------
/VAuditDemo_Release/images/default.jpg:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/virink/VAuditDemo/33dc98de2e9e505b86cf324b50fd484cfb9832c8/VAuditDemo_Release/images/default.jpg


--------------------------------------------------------------------------------
/VAuditDemo_Release/index.php:
--------------------------------------------------------------------------------
 1 | <?php 
 2 | require_once('sys/config.php');
 3 | require_once('header.php');
 4 | ?>
 5 | <div class="row">
 6 | 	<?php
 7 | 	$m = array('about','xxx');
 8 | 	/* Include */
 9 | 	if (isset($_GET['module'])){
10 | 		$a = $_GET['module'];
11 | 		if(in_array($a, $m))
12 | 			include('./'.$_GET['module'].'.inc');
13 | 		else
14 | 			exit('include error');
15 | 		// phar://uploads/u_1470339033_v.png/v.inc
16 | 	}else{
17 | 	?>
18 | 	<div class="jumbotron" style="text-align: center;">
19 | 		<h1><b>VAuditDemo</b></h1>
20 | 		<p>一个简单的Web漏洞演练平台</p><br />
21 | 	</div>
22 | 	<div class="col-lg-12">
23 | 		<h2>用於演示講解PHP基本漏洞</h2>
24 | 		<p></p>
25 | 	</div>
26 | 	<?php
27 | 	}
28 | 	?>
29 | </div>
30 | 		
31 | <?php
32 | require_once('footer.php');
33 | ?>
34 | 


--------------------------------------------------------------------------------
/VAuditDemo_Release/install/install.php:
--------------------------------------------------------------------------------
  1 | <?php
  2 | 
  3 | if ( file_exists($_SERVER["DOCUMENT_ROOT"].'/sys/install.lock') ) {
  4 | 	header( "Location: ../index.php" );
  5 | 	exit;
  6 | }
  7 | 
  8 | require_once '../header.php';
  9 | 
 10 | function check_writeable( $file ) {
 11 | 	if ( file_exists( $file ) ) {
 12 | 		if ( is_dir( $file ) ) {
 13 | 			$dir = $file;
 14 | 			if ( $fp = @fopen( "$dir/test.txt", 'w' ) ) {
 15 | 				@fclose( $fp );
 16 | 				@unlink( "$dir/test.txt" );
 17 | 				$writeable = 1;
 18 | 			}
 19 | 			else {
 20 | 				$writeable = 0;
 21 | 			}
 22 | 		}
 23 | 		else {
 24 | 			if ( $fp = @fopen( $file, 'a+' ) ) {
 25 | 				@fclose( $fp );
 26 | 				$writeable = 1;
 27 | 			}
 28 | 			else {
 29 | 				$writeable = 0;
 30 | 			}
 31 | 		}
 32 | 	}
 33 | 	else {
 34 | 		$writeable = 2;
 35 | 	}
 36 | 	return $writeable;
 37 | }
 38 | 
 39 | $sys_info['mysql_ver']     = extension_loaded( 'mysql' ) ? 'OK' : 'NO';
 40 | $sys_info['zlib']          = function_exists( 'gzclose' ) ? 'OK' : 'NO';
 41 | $sys_info['gd']            = extension_loaded( "gd" ) ? 'OK' : 'NO';
 42 | $sys_info['socket']        = function_exists( 'fsockopen' ) ? 'OK' : 'NO';
 43 | $sys_info['curl_init']        = function_exists( 'curl_init' ) ? 'OK' : 'NO';
 44 | 
 45 | echo '<div id="ourhp_er">';
 46 | echo '<h1>系統環境</h1>';
 47 | echo '<p>服務器操作系統:&nbsp;....................................................................&nbsp;'.PHP_OS.'</p>';
 48 | echo '<p>Web 服務器:&nbsp;....................................................&nbsp;'.$_SERVER['SERVER_SOFTWARE'].'</p>';
 49 | echo '<p>PHP 版本:&nbsp;....................................................................&nbsp;'.PHP_VERSION.'</p>';
 50 | echo '<p>MySQL 版本:&nbsp;....................................................................&nbsp;'.$sys_info['mysql_ver'].'</p>';
 51 | echo '<p>Zlib 支持:&nbsp;....................................................................&nbsp;'.$sys_info['zlib'].'</p>';
 52 | echo '<p>GD2 支持:&nbsp;....................................................................&nbsp;'.$sys_info['gd'].'</p>';
 53 | echo '<p>Socket 支持:&nbsp;....................................................................&nbsp;'.$sys_info['socket'].'</p>';
 54 | echo '<p>curl 支持:&nbsp;....................................................................&nbsp;'.$sys_info['curl_init'].'</p>';
 55 | echo '<h1>目錄權限</h1>';
 56 | 
 57 | /* 检查目录 */
 58 | $check_dirs = array (
 59 | 	'../sys',
 60 | 	'../uploads'
 61 | );
 62 | 
 63 | $i = 0;
 64 | foreach ( $check_dirs as $dir ) {
 65 | 	$full_dir = $dir;
 66 | 	$check_writeable = check_writeable( $full_dir );
 67 | 	if ( $check_writeable == '1' ) {
 68 | 		echo "<p>".$check_dirs[$i]."&nbsp;...................................................................&nbsp;<font color='#00CC33'>可寫</font></p>";
 69 | 	}
 70 | 	elseif ( $check_writeable == '0' ) {
 71 | 		echo "<p>".$check_dirs[$i]."&nbsp;...................................................................&nbsp;<font color='#ff0000'>不可寫</font></p>";
 72 | 		$no_write = true;
 73 | 	}
 74 | 	elseif ( $check_writeable == '2' ) {
 75 | 		echo "<p>".$check_dirs[$i]."&nbsp;...................................................................&nbsp;<b>不存在</b></p>";
 76 | 		$no_write = true;
 77 | 	}
 78 | 	$i = $i + 1;
 79 | }
 80 | 
 81 | if ( $sys_info['gd'] == 'NO' || $sys_info['curl_init'] == 'NO' ) {
 82 | 	exit( '組建不支持，無法安裝使用！' );
 83 | }else if ( $check_writeable == '0' || $check_writeable == '2' ) {
 84 | 	exit( '關鍵目錄不可寫，無法安裝使用！' );
 85 | }
 86 | 
 87 | if ( $_POST ) {
 88 | 
 89 | 	if ( $_POST["dbhost"] == "" ) {
 90 | 		exit( '数据库连接地址不能为空' );
 91 | 	}elseif ( $_POST["dbuser"] == "" ) {
 92 | 		exit( '数据库数据库登录名' );
 93 | 	}elseif ( $_POST["dbname"] == "" ) {
 94 | 		exit( '请先创建数据库名称' );
 95 | 	}
 96 | 
 97 | 	$dbhost = $_POST["dbhost"];
 98 | 	$dbuser = $_POST["dbuser"];
 99 | 	$dbpass = $_POST["dbpass"];
100 | 	$dbname = $_POST["dbname"];
101 | 
102 | 	$con = mysql_connect( $dbhost, $dbuser, $dbpass );
103 | 	if ( !$con ) {
104 | 		die( '数据库链接出错，请检查账号密码及地址是否正确: ' . mysql_error() );
105 | 	}
106 | 
107 | 	$result = mysql_query('show databases;') or die ( mysql_error() );;
108 | 	While($row = mysql_fetch_assoc($result)){       
109 | 		$data[] = $row['Database'];
110 | 	}
111 | 	unset($result, $row);
112 | 	if (in_array(strtolower($dbname), $data)){
113 | 		mysql_close();
114 | 		echo "<script>if(!alert('數據庫已存在')){window.history.back(-1);}</script>";
115 | 		exit();
116 | 	}
117 | 
118 | 	// exp;-- -";phpinfo();//
119 | 
120 | 	mysql_query( "CREATE DATABASE $dbname", $con ) or die ( mysql_error() );
121 | 
122 | 	$str_tmp="<?php\r\n";
123 | 	$str_end="?>";
124 | 	$str_tmp.="\r\n";
125 | 	$str_tmp.="error_reporting(0);\r\n";
126 | 	$str_tmp.="\r\n";
127 | 	$str_tmp.="if (!file_exists(\$_SERVER[\"DOCUMENT_ROOT\"].'/sys/install.lock')){\r\n\theader(\"Location: /install/install.php\");\r\nexit;\r\n}\r\n";
128 | 	$str_tmp.="\r\n";
129 | 	$str_tmp.="include_once('../sys/lib.php');\r\n";
130 | 	$str_tmp.="\r\n";
131 | 	$str_tmp.="\$host=\"$dbhost\"; \r\n";
132 | 	$str_tmp.="\$username=\"$dbuser\"; \r\n";
133 | 	$str_tmp.="\$password=\"$dbpass\"; \r\n";
134 | 	$str_tmp.="\$database=\"$dbname\"; \r\n";
135 | 	$str_tmp.="\r\n";
136 | 	$str_tmp.="\$conn = mysql_connect(\$host,\$username,\$password);\r\n";
137 | 	$str_tmp.="mysql_query('set names utf8',\$conn);\r\n";
138 | 	$str_tmp.="mysql_select_db(\$database, \$conn) or die(mysql_error());\r\n";
139 | 	$str_tmp.="if (!\$conn)\r\n";
140 | 	$str_tmp.="{\r\n";
141 | 	$str_tmp.="\tdie('Could not connect: ' . mysql_error());\r\n";
142 | 	$str_tmp.="\texit;\r\n";
143 | 	$str_tmp.="}\r\n";
144 | 	$str_tmp.="\r\n";
145 | 	$str_tmp.="session_start();\r\n";
146 | 	$str_tmp.="\r\n";
147 | 	$str_tmp.=$str_end;
148 | 
149 | 	$fp=fopen( "../sys/config.php", "w" );
150 | 	fwrite( $fp, $str_tmp );
151 | 	fclose( $fp );
152 | 
153 | 	//创建表
154 | 	mysql_select_db( $dbname, $con );
155 | 	mysql_query( "set names 'utf8'", $con );
156 | 	//导入数据库
157 | 	$sql=file_get_contents( "install.sql" );
158 | 	$a=explode( ";", $sql );
159 | 	foreach ( $a as $b ) {
160 | 		mysql_query( $b.";" );
161 | 	}
162 | 	mysql_close( $con );
163 | 	file_put_contents($_SERVER["DOCUMENT_ROOT"].'/sys/install.lock', 'virink');
164 | 	echo "<script>if(!alert('安裝成功')){window.location.href='../index.php';}</script>";
165 | 	exit;
166 | }else {
167 | 	echo "<form id='form1' name='form1' method='post' action=''>";
168 | 	echo "<table width='100%' border='0' align='center' cellpadding='10' id='table'>";
169 | 	echo "<tr>";
170 | 	echo "<td colspan='2'><h1></h1></td>";
171 | 	echo "</tr>";
172 | 	echo "<tr>";
173 | 	echo "<td><div align='right'>數據庫连接地址：</div></td>";
174 | 	echo "<td><input name='dbhost' type='text' id='input' value='localhost'/> *</td>";
175 | 	echo "</tr>";
176 | 	echo "<tr>";
177 | 	echo "<td><div align='right'>數據庫登錄名：</div></td>";
178 | 	echo "<td><input name='dbuser' type='text' id='input' value='root'/> *</td>";
179 | 	echo "</tr>";
180 | 	echo "<tr>";
181 | 	echo "<td><div align='right'>數據庫登錄密碼：</div></td>";
182 | 	echo "<td><input name='dbpass' type='password' id='input' value='root'/> *</td>";
183 | 	echo "</tr>";
184 | 	echo "<tr>";
185 | 	echo "<td><div align='right'>創建數據庫名稱：</div></td>";
186 | 	echo "<td><input name='dbname' type='text' id='input' value='vauditdemo'/> *</td> ";
187 | 	echo "</tr>";
188 | 	echo "<tr>";
189 | 	echo "<td></td>";
190 | 	echo "<td><input type='submit' class='btn' name='Submit' value='安裝' /></td>";
191 | 	echo "</tr>";
192 | 	echo "</table>";
193 | 	echo "</form>";
194 | }
195 | ?>
196 | 
197 | 
198 | <?php
199 | require_once '../footer.php';
200 | ?>
201 | 


--------------------------------------------------------------------------------
/VAuditDemo_Release/install/install.sql:
--------------------------------------------------------------------------------
 1 | # Host: localhost  (Version: 5.5.40)
 2 | # Date: 2016-07-06 02:06:51
 3 | # Generator: MySQL-Front 5.3  (Build 4.214)
 4 | 
 5 | /*!40101 SET NAMES utf-8 */;
 6 | 
 7 | #
 8 | # Structure for table "admin"
 9 | #
10 | 
11 | DROP TABLE IF EXISTS `admin`;
12 | CREATE TABLE `admin` (
13 |   `admin_id` int(10) unsigned NOT NULL AUTO_INCREMENT,
14 |   `admin_name` varchar(200) NOT NULL DEFAULT '',
15 |   `admin_pass` varchar(200) NOT NULL DEFAULT '',
16 |   PRIMARY KEY (`admin_id`)
17 | ) ENGINE=MyISAM AUTO_INCREMENT=3 DEFAULT CHARSET=utf8;
18 | 
19 | #
20 | # Data for table "admin"
21 | #
22 | 
23 | /*!40000 ALTER TABLE `admin` DISABLE KEYS */;
24 | INSERT INTO `admin` VALUES (1,'admin','d033e22ae348aeb5660fc2140aec35850c4da997');
25 | /*!40000 ALTER TABLE `admin` ENABLE KEYS */;
26 | 
27 | #
28 | # Structure for table "comment"
29 | #
30 | 
31 | DROP TABLE IF EXISTS `comment`;
32 | CREATE TABLE `comment` (
33 |   `comment_id` int(10) unsigned NOT NULL AUTO_INCREMENT,
34 |   `user_name` varchar(16) NOT NULL,
35 |   `comment_text` varchar(255) NOT NULL DEFAULT '',
36 |   `pub_date` date NOT NULL,
37 |   PRIMARY KEY (`comment_id`)
38 | ) ENGINE=MyISAM AUTO_INCREMENT=7 DEFAULT CHARSET=utf8;
39 | 
40 | #
41 | # Data for table "comment"
42 | #
43 | 
44 | /*!40000 ALTER TABLE `comment` DISABLE KEYS */;
45 | /*!40000 ALTER TABLE `comment` ENABLE KEYS */;
46 | 
47 | #
48 | # Structure for table "users"
49 | #
50 | 
51 | DROP TABLE IF EXISTS `users`;
52 | CREATE TABLE `users` (
53 |   `user_id` int(10) unsigned NOT NULL AUTO_INCREMENT,
54 |   `user_name` varchar(16) NOT NULL DEFAULT '',
55 |   `user_pass` varchar(255) NOT NULL DEFAULT '',
56 |   `user_avatar` varchar(255) NOT NULL DEFAULT '',
57 |   `join_date` date NOT NULL,
58 |   `login_ip` varchar(255) DEFAULT NULL,
59 |   PRIMARY KEY (`user_id`)
60 | ) ENGINE=MyISAM AUTO_INCREMENT=8 DEFAULT CHARSET=utf8;
61 | 
62 | #
63 | # Data for table "users"
64 | #
65 | 
66 | /*!40000 ALTER TABLE `users` DISABLE KEYS */;
67 | /*!40000 ALTER TABLE `users` ENABLE KEYS */;
68 | 


--------------------------------------------------------------------------------
/VAuditDemo_Release/js/bootstrap.min.js:
--------------------------------------------------------------------------------
1 | /*!
2 |  * Bootstrap v3.1.0 (http://getbootstrap.com)
3 |  * Copyright 2011-2014 Twitter, Inc.
4 |  * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE)
5 |  */
6 | if("undefined"==typeof jQuery)throw new Error("Bootstrap requires jQuery");+function(a){"use strict";function b(){var a=document.createElement("bootstrap"),b={WebkitTransition:"webkitTransitionEnd",MozTransition:"transitionend",OTransition:"oTransitionEnd otransitionend",transition:"transitionend"};for(var c in b)if(void 0!==a.style[c])return{end:b[c]};return!1}a.fn.emulateTransitionEnd=function(b){var c=!1,d=this;a(this).one(a.support.transition.end,function(){c=!0});var e=function(){c||a(d).trigger(a.support.transition.end)};return setTimeout(e,b),this},a(function(){a.support.transition=b()})}(jQuery),+function(a){"use strict";var b='[data-dismiss="alert"]',c=function(c){a(c).on("click",b,this.close)};c.prototype.close=function(b){function c(){f.trigger("closed.bs.alert").remove()}var d=a(this),e=d.attr("data-target");e||(e=d.attr("href"),e=e&&e.replace(/.*(?=#[^\s]*$)/,""));var f=a(e);b&&b.preventDefault(),f.length||(f=d.hasClass("alert")?d:d.parent()),f.trigger(b=a.Event("close.bs.alert")),b.isDefaultPrevented()||(f.removeClass("in"),a.support.transition&&f.hasClass("fade")?f.one(a.support.transition.end,c).emulateTransitionEnd(150):c())};var d=a.fn.alert;a.fn.alert=function(b){return this.each(function(){var d=a(this),e=d.data("bs.alert");e||d.data("bs.alert",e=new c(this)),"string"==typeof b&&e[b].call(d)})},a.fn.alert.Constructor=c,a.fn.alert.noConflict=function(){return a.fn.alert=d,this},a(document).on("click.bs.alert.data-api",b,c.prototype.close)}(jQuery),+function(a){"use strict";var b=function(c,d){this.$element=a(c),this.options=a.extend({},b.DEFAULTS,d),this.isLoading=!1};b.DEFAULTS={loadingText:"loading..."},b.prototype.setState=function(b){var c="disabled",d=this.$element,e=d.is("input")?"val":"html",f=d.data();b+="Text",f.resetText||d.data("resetText",d[e]()),d[e](f[b]||this.options[b]),setTimeout(a.proxy(function(){"loadingText"==b?(this.isLoading=!0,d.addClass(c).attr(c,c)):this.isLoading&&(this.isLoading=!1,d.removeClass(c).removeAttr(c))},this),0)},b.prototype.toggle=function(){var a=!0,b=this.$element.closest('[data-toggle="buttons"]');if(b.length){var c=this.$element.find("input");"radio"==c.prop("type")&&(c.prop("checked")&&this.$element.hasClass("active")?a=!1:b.find(".active").removeClass("active")),a&&c.prop("checked",!this.$element.hasClass("active")).trigger("change")}a&&this.$element.toggleClass("active")};var c=a.fn.button;a.fn.button=function(c){return this.each(function(){var d=a(this),e=d.data("bs.button"),f="object"==typeof c&&c;e||d.data("bs.button",e=new b(this,f)),"toggle"==c?e.toggle():c&&e.setState(c)})},a.fn.button.Constructor=b,a.fn.button.noConflict=function(){return a.fn.button=c,this},a(document).on("click.bs.button.data-api","[data-toggle^=button]",function(b){var c=a(b.target);c.hasClass("btn")||(c=c.closest(".btn")),c.button("toggle"),b.preventDefault()})}(jQuery),+function(a){"use strict";var b=function(b,c){this.$element=a(b),this.$indicators=this.$element.find(".carousel-indicators"),this.options=c,this.paused=this.sliding=this.interval=this.$active=this.$items=null,"hover"==this.options.pause&&this.$element.on("mouseenter",a.proxy(this.pause,this)).on("mouseleave",a.proxy(this.cycle,this))};b.DEFAULTS={interval:5e3,pause:"hover",wrap:!0},b.prototype.cycle=function(b){return b||(this.paused=!1),this.interval&&clearInterval(this.interval),this.options.interval&&!this.paused&&(this.interval=setInterval(a.proxy(this.next,this),this.options.interval)),this},b.prototype.getActiveIndex=function(){return this.$active=this.$element.find(".item.active"),this.$items=this.$active.parent().children(),this.$items.index(this.$active)},b.prototype.to=function(b){var c=this,d=this.getActiveIndex();return b>this.$items.length-1||0>b?void 0:this.sliding?this.$element.one("slid.bs.carousel",function(){c.to(b)}):d==b?this.pause().cycle():this.slide(b>d?"next":"prev",a(this.$items[b]))},b.prototype.pause=function(b){return b||(this.paused=!0),this.$element.find(".next, .prev").length&&a.support.transition&&(this.$element.trigger(a.support.transition.end),this.cycle(!0)),this.interval=clearInterval(this.interval),this},b.prototype.next=function(){return this.sliding?void 0:this.slide("next")},b.prototype.prev=function(){return this.sliding?void 0:this.slide("prev")},b.prototype.slide=function(b,c){var d=this.$element.find(".item.active"),e=c||d[b](),f=this.interval,g="next"==b?"left":"right",h="next"==b?"first":"last",i=this;if(!e.length){if(!this.options.wrap)return;e=this.$element.find(".item")[h]()}if(e.hasClass("active"))return this.sliding=!1;var j=a.Event("slide.bs.carousel",{relatedTarget:e[0],direction:g});return this.$element.trigger(j),j.isDefaultPrevented()?void 0:(this.sliding=!0,f&&this.pause(),this.$indicators.length&&(this.$indicators.find(".active").removeClass("active"),this.$element.one("slid.bs.carousel",function(){var b=a(i.$indicators.children()[i.getActiveIndex()]);b&&b.addClass("active")})),a.support.transition&&this.$element.hasClass("slide")?(e.addClass(b),e[0].offsetWidth,d.addClass(g),e.addClass(g),d.one(a.support.transition.end,function(){e.removeClass([b,g].join(" ")).addClass("active"),d.removeClass(["active",g].join(" ")),i.sliding=!1,setTimeout(function(){i.$element.trigger("slid.bs.carousel")},0)}).emulateTransitionEnd(1e3*d.css("transition-duration").slice(0,-1))):(d.removeClass("active"),e.addClass("active"),this.sliding=!1,this.$element.trigger("slid.bs.carousel")),f&&this.cycle(),this)};var c=a.fn.carousel;a.fn.carousel=function(c){return this.each(function(){var d=a(this),e=d.data("bs.carousel"),f=a.extend({},b.DEFAULTS,d.data(),"object"==typeof c&&c),g="string"==typeof c?c:f.slide;e||d.data("bs.carousel",e=new b(this,f)),"number"==typeof c?e.to(c):g?e[g]():f.interval&&e.pause().cycle()})},a.fn.carousel.Constructor=b,a.fn.carousel.noConflict=function(){return a.fn.carousel=c,this},a(document).on("click.bs.carousel.data-api","[data-slide], [data-slide-to]",function(b){var c,d=a(this),e=a(d.attr("data-target")||(c=d.attr("href"))&&c.replace(/.*(?=#[^\s]+$)/,"")),f=a.extend({},e.data(),d.data()),g=d.attr("data-slide-to");g&&(f.interval=!1),e.carousel(f),(g=d.attr("data-slide-to"))&&e.data("bs.carousel").to(g),b.preventDefault()}),a(window).on("load",function(){a('[data-ride="carousel"]').each(function(){var b=a(this);b.carousel(b.data())})})}(jQuery),+function(a){"use strict";var b=function(c,d){this.$element=a(c),this.options=a.extend({},b.DEFAULTS,d),this.transitioning=null,this.options.parent&&(this.$parent=a(this.options.parent)),this.options.toggle&&this.toggle()};b.DEFAULTS={toggle:!0},b.prototype.dimension=function(){var a=this.$element.hasClass("width");return a?"width":"height"},b.prototype.show=function(){if(!this.transitioning&&!this.$element.hasClass("in")){var b=a.Event("show.bs.collapse");if(this.$element.trigger(b),!b.isDefaultPrevented()){var c=this.$parent&&this.$parent.find("> .panel > .in");if(c&&c.length){var d=c.data("bs.collapse");if(d&&d.transitioning)return;c.collapse("hide"),d||c.data("bs.collapse",null)}var e=this.dimension();this.$element.removeClass("collapse").addClass("collapsing")[e](0),this.transitioning=1;var f=function(){this.$element.removeClass("collapsing").addClass("collapse in")[e]("auto"),this.transitioning=0,this.$element.trigger("shown.bs.collapse")};if(!a.support.transition)return f.call(this);var g=a.camelCase(["scroll",e].join("-"));this.$element.one(a.support.transition.end,a.proxy(f,this)).emulateTransitionEnd(350)[e](this.$element[0][g])}}},b.prototype.hide=function(){if(!this.transitioning&&this.$element.hasClass("in")){var b=a.Event("hide.bs.collapse");if(this.$element.trigger(b),!b.isDefaultPrevented()){var c=this.dimension();this.$element[c](this.$element[c]())[0].offsetHeight,this.$element.addClass("collapsing").removeClass("collapse").removeClass("in"),this.transitioning=1;var d=function(){this.transitioning=0,this.$element.trigger("hidden.bs.collapse").removeClass("collapsing").addClass("collapse")};return a.support.transition?void this.$element[c](0).one(a.support.transition.end,a.proxy(d,this)).emulateTransitionEnd(350):d.call(this)}}},b.prototype.toggle=function(){this[this.$element.hasClass("in")?"hide":"show"]()};var c=a.fn.collapse;a.fn.collapse=function(c){return this.each(function(){var d=a(this),e=d.data("bs.collapse"),f=a.extend({},b.DEFAULTS,d.data(),"object"==typeof c&&c);!e&&f.toggle&&"show"==c&&(c=!c),e||d.data("bs.collapse",e=new b(this,f)),"string"==typeof c&&e[c]()})},a.fn.collapse.Constructor=b,a.fn.collapse.noConflict=function(){return a.fn.collapse=c,this},a(document).on("click.bs.collapse.data-api","[data-toggle=collapse]",function(b){var c,d=a(this),e=d.attr("data-target")||b.preventDefault()||(c=d.attr("href"))&&c.replace(/.*(?=#[^\s]+$)/,""),f=a(e),g=f.data("bs.collapse"),h=g?"toggle":d.data(),i=d.attr("data-parent"),j=i&&a(i);g&&g.transitioning||(j&&j.find('[data-toggle=collapse][data-parent="'+i+'"]').not(d).addClass("collapsed"),d[f.hasClass("in")?"addClass":"removeClass"]("collapsed")),f.collapse(h)})}(jQuery),+function(a){"use strict";function b(b){a(d).remove(),a(e).each(function(){var d=c(a(this)),e={relatedTarget:this};d.hasClass("open")&&(d.trigger(b=a.Event("hide.bs.dropdown",e)),b.isDefaultPrevented()||d.removeClass("open").trigger("hidden.bs.dropdown",e))})}function c(b){var c=b.attr("data-target");c||(c=b.attr("href"),c=c&&/#[A-Za-z]/.test(c)&&c.replace(/.*(?=#[^\s]*$)/,""));var d=c&&a(c);return d&&d.length?d:b.parent()}var d=".dropdown-backdrop",e="[data-toggle=dropdown]",f=function(b){a(b).on("click.bs.dropdown",this.toggle)};f.prototype.toggle=function(d){var e=a(this);if(!e.is(".disabled, :disabled")){var f=c(e),g=f.hasClass("open");if(b(),!g){"ontouchstart"in document.documentElement&&!f.closest(".navbar-nav").length&&a('<div class="dropdown-backdrop"/>').insertAfter(a(this)).on("click",b);var h={relatedTarget:this};if(f.trigger(d=a.Event("show.bs.dropdown",h)),d.isDefaultPrevented())return;f.toggleClass("open").trigger("shown.bs.dropdown",h),e.focus()}return!1}},f.prototype.keydown=function(b){if(/(38|40|27)/.test(b.keyCode)){var d=a(this);if(b.preventDefault(),b.stopPropagation(),!d.is(".disabled, :disabled")){var f=c(d),g=f.hasClass("open");if(!g||g&&27==b.keyCode)return 27==b.which&&f.find(e).focus(),d.click();var h=" li:not(.divider):visible a",i=f.find("[role=menu]"+h+", [role=listbox]"+h);if(i.length){var j=i.index(i.filter(":focus"));38==b.keyCode&&j>0&&j--,40==b.keyCode&&j<i.length-1&&j++,~j||(j=0),i.eq(j).focus()}}}};var g=a.fn.dropdown;a.fn.dropdown=function(b){return this.each(function(){var c=a(this),d=c.data("bs.dropdown");d||c.data("bs.dropdown",d=new f(this)),"string"==typeof b&&d[b].call(c)})},a.fn.dropdown.Constructor=f,a.fn.dropdown.noConflict=function(){return a.fn.dropdown=g,this},a(document).on("click.bs.dropdown.data-api",b).on("click.bs.dropdown.data-api",".dropdown form",function(a){a.stopPropagation()}).on("click.bs.dropdown.data-api",e,f.prototype.toggle).on("keydown.bs.dropdown.data-api",e+", [role=menu], [role=listbox]",f.prototype.keydown)}(jQuery),+function(a){"use strict";var b=function(b,c){this.options=c,this.$element=a(b),this.$backdrop=this.isShown=null,this.options.remote&&this.$element.find(".modal-content").load(this.options.remote,a.proxy(function(){this.$element.trigger("loaded.bs.modal")},this))};b.DEFAULTS={backdrop:!0,keyboard:!0,show:!0},b.prototype.toggle=function(a){return this[this.isShown?"hide":"show"](a)},b.prototype.show=function(b){var c=this,d=a.Event("show.bs.modal",{relatedTarget:b});this.$element.trigger(d),this.isShown||d.isDefaultPrevented()||(this.isShown=!0,this.escape(),this.$element.on("click.dismiss.bs.modal",'[data-dismiss="modal"]',a.proxy(this.hide,this)),this.backdrop(function(){var d=a.support.transition&&c.$element.hasClass("fade");c.$element.parent().length||c.$element.appendTo(document.body),c.$element.show().scrollTop(0),d&&c.$element[0].offsetWidth,c.$element.addClass("in").attr("aria-hidden",!1),c.enforceFocus();var e=a.Event("shown.bs.modal",{relatedTarget:b});d?c.$element.find(".modal-dialog").one(a.support.transition.end,function(){c.$element.focus().trigger(e)}).emulateTransitionEnd(300):c.$element.focus().trigger(e)}))},b.prototype.hide=function(b){b&&b.preventDefault(),b=a.Event("hide.bs.modal"),this.$element.trigger(b),this.isShown&&!b.isDefaultPrevented()&&(this.isShown=!1,this.escape(),a(document).off("focusin.bs.modal"),this.$element.removeClass("in").attr("aria-hidden",!0).off("click.dismiss.bs.modal"),a.support.transition&&this.$element.hasClass("fade")?this.$element.one(a.support.transition.end,a.proxy(this.hideModal,this)).emulateTransitionEnd(300):this.hideModal())},b.prototype.enforceFocus=function(){a(document).off("focusin.bs.modal").on("focusin.bs.modal",a.proxy(function(a){this.$element[0]===a.target||this.$element.has(a.target).length||this.$element.focus()},this))},b.prototype.escape=function(){this.isShown&&this.options.keyboard?this.$element.on("keyup.dismiss.bs.modal",a.proxy(function(a){27==a.which&&this.hide()},this)):this.isShown||this.$element.off("keyup.dismiss.bs.modal")},b.prototype.hideModal=function(){var a=this;this.$element.hide(),this.backdrop(function(){a.removeBackdrop(),a.$element.trigger("hidden.bs.modal")})},b.prototype.removeBackdrop=function(){this.$backdrop&&this.$backdrop.remove(),this.$backdrop=null},b.prototype.backdrop=function(b){var c=this.$element.hasClass("fade")?"fade":"";if(this.isShown&&this.options.backdrop){var d=a.support.transition&&c;if(this.$backdrop=a('<div class="modal-backdrop '+c+'" />').appendTo(document.body),this.$element.on("click.dismiss.bs.modal",a.proxy(function(a){a.target===a.currentTarget&&("static"==this.options.backdrop?this.$element[0].focus.call(this.$element[0]):this.hide.call(this))},this)),d&&this.$backdrop[0].offsetWidth,this.$backdrop.addClass("in"),!b)return;d?this.$backdrop.one(a.support.transition.end,b).emulateTransitionEnd(150):b()}else!this.isShown&&this.$backdrop?(this.$backdrop.removeClass("in"),a.support.transition&&this.$element.hasClass("fade")?this.$backdrop.one(a.support.transition.end,b).emulateTransitionEnd(150):b()):b&&b()};var c=a.fn.modal;a.fn.modal=function(c,d){return this.each(function(){var e=a(this),f=e.data("bs.modal"),g=a.extend({},b.DEFAULTS,e.data(),"object"==typeof c&&c);f||e.data("bs.modal",f=new b(this,g)),"string"==typeof c?f[c](d):g.show&&f.show(d)})},a.fn.modal.Constructor=b,a.fn.modal.noConflict=function(){return a.fn.modal=c,this},a(document).on("click.bs.modal.data-api",'[data-toggle="modal"]',function(b){var c=a(this),d=c.attr("href"),e=a(c.attr("data-target")||d&&d.replace(/.*(?=#[^\s]+$)/,"")),f=e.data("bs.modal")?"toggle":a.extend({remote:!/#/.test(d)&&d},e.data(),c.data());c.is("a")&&b.preventDefault(),e.modal(f,this).one("hide",function(){c.is(":visible")&&c.focus()})}),a(document).on("show.bs.modal",".modal",function(){a(document.body).addClass("modal-open")}).on("hidden.bs.modal",".modal",function(){a(document.body).removeClass("modal-open")})}(jQuery),+function(a){"use strict";var b=function(a,b){this.type=this.options=this.enabled=this.timeout=this.hoverState=this.$element=null,this.init("tooltip",a,b)};b.DEFAULTS={animation:!0,placement:"top",selector:!1,template:'<div class="tooltip"><div class="tooltip-arrow"></div><div class="tooltip-inner"></div></div>',trigger:"hover focus",title:"",delay:0,html:!1,container:!1},b.prototype.init=function(b,c,d){this.enabled=!0,this.type=b,this.$element=a(c),this.options=this.getOptions(d);for(var e=this.options.trigger.split(" "),f=e.length;f--;){var g=e[f];if("click"==g)this.$element.on("click."+this.type,this.options.selector,a.proxy(this.toggle,this));else if("manual"!=g){var h="hover"==g?"mouseenter":"focusin",i="hover"==g?"mouseleave":"focusout";this.$element.on(h+"."+this.type,this.options.selector,a.proxy(this.enter,this)),this.$element.on(i+"."+this.type,this.options.selector,a.proxy(this.leave,this))}}this.options.selector?this._options=a.extend({},this.options,{trigger:"manual",selector:""}):this.fixTitle()},b.prototype.getDefaults=function(){return b.DEFAULTS},b.prototype.getOptions=function(b){return b=a.extend({},this.getDefaults(),this.$element.data(),b),b.delay&&"number"==typeof b.delay&&(b.delay={show:b.delay,hide:b.delay}),b},b.prototype.getDelegateOptions=function(){var b={},c=this.getDefaults();return this._options&&a.each(this._options,function(a,d){c[a]!=d&&(b[a]=d)}),b},b.prototype.enter=function(b){var c=b instanceof this.constructor?b:a(b.currentTarget)[this.type](this.getDelegateOptions()).data("bs."+this.type);return clearTimeout(c.timeout),c.hoverState="in",c.options.delay&&c.options.delay.show?void(c.timeout=setTimeout(function(){"in"==c.hoverState&&c.show()},c.options.delay.show)):c.show()},b.prototype.leave=function(b){var c=b instanceof this.constructor?b:a(b.currentTarget)[this.type](this.getDelegateOptions()).data("bs."+this.type);return clearTimeout(c.timeout),c.hoverState="out",c.options.delay&&c.options.delay.hide?void(c.timeout=setTimeout(function(){"out"==c.hoverState&&c.hide()},c.options.delay.hide)):c.hide()},b.prototype.show=function(){var b=a.Event("show.bs."+this.type);if(this.hasContent()&&this.enabled){if(this.$element.trigger(b),b.isDefaultPrevented())return;var c=this,d=this.tip();this.setContent(),this.options.animation&&d.addClass("fade");var e="function"==typeof this.options.placement?this.options.placement.call(this,d[0],this.$element[0]):this.options.placement,f=/\s?auto?\s?/i,g=f.test(e);g&&(e=e.replace(f,"")||"top"),d.detach().css({top:0,left:0,display:"block"}).addClass(e),this.options.container?d.appendTo(this.options.container):d.insertAfter(this.$element);var h=this.getPosition(),i=d[0].offsetWidth,j=d[0].offsetHeight;if(g){var k=this.$element.parent(),l=e,m=document.documentElement.scrollTop||document.body.scrollTop,n="body"==this.options.container?window.innerWidth:k.outerWidth(),o="body"==this.options.container?window.innerHeight:k.outerHeight(),p="body"==this.options.container?0:k.offset().left;e="bottom"==e&&h.top+h.height+j-m>o?"top":"top"==e&&h.top-m-j<0?"bottom":"right"==e&&h.right+i>n?"left":"left"==e&&h.left-i<p?"right":e,d.removeClass(l).addClass(e)}var q=this.getCalculatedOffset(e,h,i,j);this.applyPlacement(q,e),this.hoverState=null;var r=function(){c.$element.trigger("shown.bs."+c.type)};a.support.transition&&this.$tip.hasClass("fade")?d.one(a.support.transition.end,r).emulateTransitionEnd(150):r()}},b.prototype.applyPlacement=function(b,c){var d,e=this.tip(),f=e[0].offsetWidth,g=e[0].offsetHeight,h=parseInt(e.css("margin-top"),10),i=parseInt(e.css("margin-left"),10);isNaN(h)&&(h=0),isNaN(i)&&(i=0),b.top=b.top+h,b.left=b.left+i,a.offset.setOffset(e[0],a.extend({using:function(a){e.css({top:Math.round(a.top),left:Math.round(a.left)})}},b),0),e.addClass("in");var j=e[0].offsetWidth,k=e[0].offsetHeight;if("top"==c&&k!=g&&(d=!0,b.top=b.top+g-k),/bottom|top/.test(c)){var l=0;b.left<0&&(l=-2*b.left,b.left=0,e.offset(b),j=e[0].offsetWidth,k=e[0].offsetHeight),this.replaceArrow(l-f+j,j,"left")}else this.replaceArrow(k-g,k,"top");d&&e.offset(b)},b.prototype.replaceArrow=function(a,b,c){this.arrow().css(c,a?50*(1-a/b)+"%":"")},b.prototype.setContent=function(){var a=this.tip(),b=this.getTitle();a.find(".tooltip-inner")[this.options.html?"html":"text"](b),a.removeClass("fade in top bottom left right")},b.prototype.hide=function(){function b(){"in"!=c.hoverState&&d.detach(),c.$element.trigger("hidden.bs."+c.type)}var c=this,d=this.tip(),e=a.Event("hide.bs."+this.type);return this.$element.trigger(e),e.isDefaultPrevented()?void 0:(d.removeClass("in"),a.support.transition&&this.$tip.hasClass("fade")?d.one(a.support.transition.end,b).emulateTransitionEnd(150):b(),this.hoverState=null,this)},b.prototype.fixTitle=function(){var a=this.$element;(a.attr("title")||"string"!=typeof a.attr("data-original-title"))&&a.attr("data-original-title",a.attr("title")||"").attr("title","")},b.prototype.hasContent=function(){return this.getTitle()},b.prototype.getPosition=function(){var b=this.$element[0];return a.extend({},"function"==typeof b.getBoundingClientRect?b.getBoundingClientRect():{width:b.offsetWidth,height:b.offsetHeight},this.$element.offset())},b.prototype.getCalculatedOffset=function(a,b,c,d){return"bottom"==a?{top:b.top+b.height,left:b.left+b.width/2-c/2}:"top"==a?{top:b.top-d,left:b.left+b.width/2-c/2}:"left"==a?{top:b.top+b.height/2-d/2,left:b.left-c}:{top:b.top+b.height/2-d/2,left:b.left+b.width}},b.prototype.getTitle=function(){var a,b=this.$element,c=this.options;return a=b.attr("data-original-title")||("function"==typeof c.title?c.title.call(b[0]):c.title)},b.prototype.tip=function(){return this.$tip=this.$tip||a(this.options.template)},b.prototype.arrow=function(){return this.$arrow=this.$arrow||this.tip().find(".tooltip-arrow")},b.prototype.validate=function(){this.$element[0].parentNode||(this.hide(),this.$element=null,this.options=null)},b.prototype.enable=function(){this.enabled=!0},b.prototype.disable=function(){this.enabled=!1},b.prototype.toggleEnabled=function(){this.enabled=!this.enabled},b.prototype.toggle=function(b){var c=b?a(b.currentTarget)[this.type](this.getDelegateOptions()).data("bs."+this.type):this;c.tip().hasClass("in")?c.leave(c):c.enter(c)},b.prototype.destroy=function(){clearTimeout(this.timeout),this.hide().$element.off("."+this.type).removeData("bs."+this.type)};var c=a.fn.tooltip;a.fn.tooltip=function(c){return this.each(function(){var d=a(this),e=d.data("bs.tooltip"),f="object"==typeof c&&c;(e||"destroy"!=c)&&(e||d.data("bs.tooltip",e=new b(this,f)),"string"==typeof c&&e[c]())})},a.fn.tooltip.Constructor=b,a.fn.tooltip.noConflict=function(){return a.fn.tooltip=c,this}}(jQuery),+function(a){"use strict";var b=function(a,b){this.init("popover",a,b)};if(!a.fn.tooltip)throw new Error("Popover requires tooltip.js");b.DEFAULTS=a.extend({},a.fn.tooltip.Constructor.DEFAULTS,{placement:"right",trigger:"click",content:"",template:'<div class="popover"><div class="arrow"></div><h3 class="popover-title"></h3><div class="popover-content"></div></div>'}),b.prototype=a.extend({},a.fn.tooltip.Constructor.prototype),b.prototype.constructor=b,b.prototype.getDefaults=function(){return b.DEFAULTS},b.prototype.setContent=function(){var a=this.tip(),b=this.getTitle(),c=this.getContent();a.find(".popover-title")[this.options.html?"html":"text"](b),a.find(".popover-content")[this.options.html?"string"==typeof c?"html":"append":"text"](c),a.removeClass("fade top bottom left right in"),a.find(".popover-title").html()||a.find(".popover-title").hide()},b.prototype.hasContent=function(){return this.getTitle()||this.getContent()},b.prototype.getContent=function(){var a=this.$element,b=this.options;return a.attr("data-content")||("function"==typeof b.content?b.content.call(a[0]):b.content)},b.prototype.arrow=function(){return this.$arrow=this.$arrow||this.tip().find(".arrow")},b.prototype.tip=function(){return this.$tip||(this.$tip=a(this.options.template)),this.$tip};var c=a.fn.popover;a.fn.popover=function(c){return this.each(function(){var d=a(this),e=d.data("bs.popover"),f="object"==typeof c&&c;(e||"destroy"!=c)&&(e||d.data("bs.popover",e=new b(this,f)),"string"==typeof c&&e[c]())})},a.fn.popover.Constructor=b,a.fn.popover.noConflict=function(){return a.fn.popover=c,this}}(jQuery),+function(a){"use strict";function b(c,d){var e,f=a.proxy(this.process,this);this.$element=a(a(c).is("body")?window:c),this.$body=a("body"),this.$scrollElement=this.$element.on("scroll.bs.scroll-spy.data-api",f),this.options=a.extend({},b.DEFAULTS,d),this.selector=(this.options.target||(e=a(c).attr("href"))&&e.replace(/.*(?=#[^\s]+$)/,"")||"")+" .nav li > a",this.offsets=a([]),this.targets=a([]),this.activeTarget=null,this.refresh(),this.process()}b.DEFAULTS={offset:10},b.prototype.refresh=function(){var b=this.$element[0]==window?"offset":"position";this.offsets=a([]),this.targets=a([]);{var c=this;this.$body.find(this.selector).map(function(){var d=a(this),e=d.data("target")||d.attr("href"),f=/^#./.test(e)&&a(e);return f&&f.length&&f.is(":visible")&&[[f[b]().top+(!a.isWindow(c.$scrollElement.get(0))&&c.$scrollElement.scrollTop()),e]]||null}).sort(function(a,b){return a[0]-b[0]}).each(function(){c.offsets.push(this[0]),c.targets.push(this[1])})}},b.prototype.process=function(){var a,b=this.$scrollElement.scrollTop()+this.options.offset,c=this.$scrollElement[0].scrollHeight||this.$body[0].scrollHeight,d=c-this.$scrollElement.height(),e=this.offsets,f=this.targets,g=this.activeTarget;if(b>=d)return g!=(a=f.last()[0])&&this.activate(a);if(g&&b<=e[0])return g!=(a=f[0])&&this.activate(a);for(a=e.length;a--;)g!=f[a]&&b>=e[a]&&(!e[a+1]||b<=e[a+1])&&this.activate(f[a])},b.prototype.activate=function(b){this.activeTarget=b,a(this.selector).parentsUntil(this.options.target,".active").removeClass("active");var c=this.selector+'[data-target="'+b+'"],'+this.selector+'[href="'+b+'"]',d=a(c).parents("li").addClass("active");d.parent(".dropdown-menu").length&&(d=d.closest("li.dropdown").addClass("active")),d.trigger("activate.bs.scrollspy")};var c=a.fn.scrollspy;a.fn.scrollspy=function(c){return this.each(function(){var d=a(this),e=d.data("bs.scrollspy"),f="object"==typeof c&&c;e||d.data("bs.scrollspy",e=new b(this,f)),"string"==typeof c&&e[c]()})},a.fn.scrollspy.Constructor=b,a.fn.scrollspy.noConflict=function(){return a.fn.scrollspy=c,this},a(window).on("load",function(){a('[data-spy="scroll"]').each(function(){var b=a(this);b.scrollspy(b.data())})})}(jQuery),+function(a){"use strict";var b=function(b){this.element=a(b)};b.prototype.show=function(){var b=this.element,c=b.closest("ul:not(.dropdown-menu)"),d=b.data("target");if(d||(d=b.attr("href"),d=d&&d.replace(/.*(?=#[^\s]*$)/,"")),!b.parent("li").hasClass("active")){var e=c.find(".active:last a")[0],f=a.Event("show.bs.tab",{relatedTarget:e});if(b.trigger(f),!f.isDefaultPrevented()){var g=a(d);this.activate(b.parent("li"),c),this.activate(g,g.parent(),function(){b.trigger({type:"shown.bs.tab",relatedTarget:e})})}}},b.prototype.activate=function(b,c,d){function e(){f.removeClass("active").find("> .dropdown-menu > .active").removeClass("active"),b.addClass("active"),g?(b[0].offsetWidth,b.addClass("in")):b.removeClass("fade"),b.parent(".dropdown-menu")&&b.closest("li.dropdown").addClass("active"),d&&d()}var f=c.find("> .active"),g=d&&a.support.transition&&f.hasClass("fade");g?f.one(a.support.transition.end,e).emulateTransitionEnd(150):e(),f.removeClass("in")};var c=a.fn.tab;a.fn.tab=function(c){return this.each(function(){var d=a(this),e=d.data("bs.tab");e||d.data("bs.tab",e=new b(this)),"string"==typeof c&&e[c]()})},a.fn.tab.Constructor=b,a.fn.tab.noConflict=function(){return a.fn.tab=c,this},a(document).on("click.bs.tab.data-api",'[data-toggle="tab"], [data-toggle="pill"]',function(b){b.preventDefault(),a(this).tab("show")})}(jQuery),+function(a){"use strict";var b=function(c,d){this.options=a.extend({},b.DEFAULTS,d),this.$window=a(window).on("scroll.bs.affix.data-api",a.proxy(this.checkPosition,this)).on("click.bs.affix.data-api",a.proxy(this.checkPositionWithEventLoop,this)),this.$element=a(c),this.affixed=this.unpin=this.pinnedOffset=null,this.checkPosition()};b.RESET="affix affix-top affix-bottom",b.DEFAULTS={offset:0},b.prototype.getPinnedOffset=function(){if(this.pinnedOffset)return this.pinnedOffset;this.$element.removeClass(b.RESET).addClass("affix");var a=this.$window.scrollTop(),c=this.$element.offset();return this.pinnedOffset=c.top-a},b.prototype.checkPositionWithEventLoop=function(){setTimeout(a.proxy(this.checkPosition,this),1)},b.prototype.checkPosition=function(){if(this.$element.is(":visible")){var c=a(document).height(),d=this.$window.scrollTop(),e=this.$element.offset(),f=this.options.offset,g=f.top,h=f.bottom;"top"==this.affixed&&(e.top+=d),"object"!=typeof f&&(h=g=f),"function"==typeof g&&(g=f.top(this.$element)),"function"==typeof h&&(h=f.bottom(this.$element));var i=null!=this.unpin&&d+this.unpin<=e.top?!1:null!=h&&e.top+this.$element.height()>=c-h?"bottom":null!=g&&g>=d?"top":!1;if(this.affixed!==i){this.unpin&&this.$element.css("top","");var j="affix"+(i?"-"+i:""),k=a.Event(j+".bs.affix");this.$element.trigger(k),k.isDefaultPrevented()||(this.affixed=i,this.unpin="bottom"==i?this.getPinnedOffset():null,this.$element.removeClass(b.RESET).addClass(j).trigger(a.Event(j.replace("affix","affixed"))),"bottom"==i&&this.$element.offset({top:c-h-this.$element.height()}))}}};var c=a.fn.affix;a.fn.affix=function(c){return this.each(function(){var d=a(this),e=d.data("bs.affix"),f="object"==typeof c&&c;e||d.data("bs.affix",e=new b(this,f)),"string"==typeof c&&e[c]()})},a.fn.affix.Constructor=b,a.fn.affix.noConflict=function(){return a.fn.affix=c,this},a(window).on("load",function(){a('[data-spy="affix"]').each(function(){var b=a(this),c=b.data();c.offset=c.offset||{},c.offsetBottom&&(c.offset.bottom=c.offsetBottom),c.offsetTop&&(c.offset.top=c.offsetTop),b.affix(c)})})}(jQuery);


--------------------------------------------------------------------------------
/VAuditDemo_Release/js/bootswatch.js:
--------------------------------------------------------------------------------
1 | $('[data-toggle="tooltip"]').tooltip();


--------------------------------------------------------------------------------
/VAuditDemo_Release/js/bsa.js:
--------------------------------------------------------------------------------
1 | (function(){
2 |   var bsa = document.createElement('script');
3 |      bsa.type = 'text/javascript';
4 |      bsa.async = true;
5 |      bsa.src = 'http://s3.buysellads.com/ac/bsa.js';
6 |   (document.getElementsByTagName('head')[0]||document.getElementsByTagName('body')[0]).appendChild(bsa);
7 | })();


--------------------------------------------------------------------------------
/VAuditDemo_Release/js/check.js:
--------------------------------------------------------------------------------
 1 | function check()
 2 | { 
 3 | 	with(document.all){
 4 | 		if(passwd.value!=passwd2.value)
 5 | 		{
 6 | 			alert("密码不一致");
 7 | 			passwd2.value = "";
 8 | 		}
 9 | 	}
10 | }


--------------------------------------------------------------------------------
/VAuditDemo_Release/message.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | require_once('sys/config.php');
 3 | require_once('header.php');
 4 | 
 5 | $query = "SELECT * FROM comment ORDER BY comment_id";
 6 | $data = mysql_query($query, $conn) or die('Error!!');
 7 | mysql_close($conn);
 8 | ?>
 9 | <div class="bs-example table-responsive">
10 | 	<table class="table table-striped table-hover ">
11 | 	<tr>
12 | 		<th>#</th>
13 | 		<th>Column heading</th>
14 | 	</tr>
15 | <?php
16 | while($com = mysql_fetch_array($data)) {
17 | 	$html['username'] = htmlspecialchars($com['user_name']);
18 | 	$html['comment_text'] = htmlspecialchars($com['comment_text']);
19 | 	
20 | 	echo '<tr>';
21 | 	echo '<td>'.$html['username'].'</td>';
22 | 	echo '<td><a href="messageDetail.php?id='.$com['comment_id'].'">'.$html['comment_text'].'</td></a>';
23 | 	echo '</tr>';
24 | }
25 | ?>
26 | </table>
27 | </div>
28 | <?php 
29 | if (isset($_SESSION['username']))
30 | {?>
31 | <form action="messageSub.php" method="post" name="message">
32 | 	<div class="col-lg-10">
33 |         <textarea class="form-control" rows="3" id="textArea" name="message"></textarea>
34 |     </div>
35 |     <input type="submit" name="submit" value="留言"/>
36 | 	<a href="user/user.php">返回</a><br /><br /><br /><br /><br />
37 | </form>
38 | 
39 | <?php 
40 | }
41 | 
42 | require_once('footer.php');
43 | ?>


--------------------------------------------------------------------------------
/VAuditDemo_Release/messageDetail.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | include_once 'sys/config.php';
 3 | include_once 'header.php';
 4 | 
 5 | if ( !empty( $_GET['id'] ) ) {
 6 | 	$id = sqlwaf( $_GET['id'] );
 7 | 	// id=-1 uni||on sel||ect *,4 fr||om admin
 8 | 	$query = "SELECT * FROM comment WHERE comment_id = '$id'";
 9 | 	$data = mysql_query( $query, $conn ) or print_r(mysql_error());
10 | ?>
11 | <div class="bs-example table-responsive">
12 | 	<?php echo 'The result for ['.$id.'] is:'?>
13 | 	<table class="table table-striped table-hover ">
14 | 	<tr>
15 | 		<th>ID</th>
16 | 		<th>Username</th>
17 | 		<th>Content</th>
18 | 		<th>Date</th>
19 | 	</tr>
20 | 	<?php
21 | 	while ( $com = mysql_fetch_array( $data ) ) {
22 | 
23 | 		$html['username'] = htmlspecialchars( $com['user_name'] );
24 | 		$html['comment_text'] = htmlspecialchars( $com['comment_text'] );
25 | 
26 | 		echo '<tr>';
27 | 		echo '<td>'.$com['comment_id'].'</td>';
28 | 		echo '<td>'.$html['username'].'</td>';
29 | 		echo '<td>'.$html['comment_text'].'</td>';
30 | 		echo '<td>'.$com['pub_date'].'</td>';
31 | 		echo '</tr>';
32 | 	}
33 | ?>
34 | 	</table>
35 | </div>
36 | 	<?php
37 | 	if ( isset( $_SESSION['username'] ) ) {
38 | 	?>
39 | 	<form action="messageSub.php" method="post" name="message">
40 | 		<div class="col-lg-10">
41 | 	        <textarea class="form-control" rows="3" id="textArea" name="message"></textarea>
42 | 	    </div>
43 | 	    <input type="submit" name="submit" value="留言"/>
44 | 	</form>
45 | 	<a href="user/user.php">返回</a><br /><br /><br /><br /><br />
46 | 	<?php
47 | 	}
48 | }
49 | require_once 'footer.php';
50 | ?>
51 | 


--------------------------------------------------------------------------------
/VAuditDemo_Release/messageSub.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | include_once('sys/config.php');
 3 | 
 4 | if (isset($_POST['submit']) && !empty($_POST['message']) && isset($_SESSION['username'])) {
 5 | 
 6 | 	$clean_message = sqlwaf(clean_input($_POST['message']));
 7 | 	
 8 | 	$query = "INSERT INTO comment(user_name,comment_text,pub_date) VALUES ('{$_SESSION['username']}','$clean_message',now())";
 9 | 
10 |     // INSERT INTO comment(user_name,comment_text,pub_date) VALUES ('xxx\',',(),1);#',now())
11 |     // xxx\
12 |     // ,(select admin_pass from admin limit 0,1),1);#
13 |     
14 | 	mysql_query($query, $conn) or die(mysql_error());
15 | 	mysql_close($conn);
16 | 	header('Location: message.php');
17 | }
18 | else {
19 | 	echo "<!DOCTYPE HTML PUBLIC \"-//IETF//DTD HTML 2.0//EN\"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1>
20 | 		<p>The requested URL ".$_SERVER['PHP_SELF']." was not found on this server.</p></body></html>";
21 | }
22 | ?>
23 | 


--------------------------------------------------------------------------------
/VAuditDemo_Release/search.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | include_once 'sys/config.php';
 3 | include_once 'header.php';
 4 | 
 5 | if ( !empty( $_GET['search'] ) ) {
 6 | 	$query = "SELECT * FROM comment WHERE comment_text LIKE '%{$_GET['search']}%'";
 7 | 	$data = mysql_query($query, $conn);
 8 | ?>
 9 | <div class="bs-example table-responsive">
10 | 	<?php echo 'The result for [ '.$_GET['search'].' ] is:'?>
11 | 	<table class="table table-striped table-hover ">
12 | 	<tr>
13 | 		<th>#</th>
14 | 		<th>Column heading</th>
15 | 	</tr>
16 | 	<?php
17 | 	while ( $com = mysql_fetch_array( $data ) ) {
18 | 		//净化输出变量
19 | 		$html['username'] = htmlspecialchars( $com['user_name'] );
20 | 		$html['comment_text'] = htmlspecialchars( $com['comment_text'] );
21 | 
22 | 		echo '<tr>';
23 | 		echo '<td>'.$html['username'].'</td>';
24 | 		echo '<td><a href="messageDetail.php?id='.$com['comment_id'].'">'.$html['comment_text'].'</a></td>';
25 | 		echo '</tr>';
26 | 	}
27 | 	?>
28 | 	</table>
29 | </div>
30 | 	<?php
31 | 	if ( isset( $_SESSION['username'] ) ) {
32 | 	?>
33 | <form action="messageSub.php" method="post" name="message">
34 | 	<div class="col-lg-10">
35 |         <textarea class="form-control" rows="3" id="textArea" name="message"></textarea>
36 |     </div>
37 |     <input type="submit" name="submit" value="留言"/>
38 | </form>
39 | <a href="user/user.php">返回</a><br /><br /><br /><br /><br />
40 | <?php
41 | 	}
42 | }
43 | require_once 'footer.php';
44 | ?>
45 | 


--------------------------------------------------------------------------------
/VAuditDemo_Release/strtotime.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | date_default_timezone_set('UTC');
 3 | echo strtotime('Thu, 04 Aug 2016 19:30:31 GMT');
 4 | 
 5 | //   1470339031
 6 | // u_1470339033_v.png
 7 | 
 8 | 
 9 | ?>
10 | 


--------------------------------------------------------------------------------
/VAuditDemo_Release/sys/config.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | error_reporting(0);
 4 | 
 5 | if (!file_exists($_SERVER["DOCUMENT_ROOT"].'/sys/install.lock')){
 6 | 	header("Location: /install/install.php");
 7 |     exit;
 8 | }
 9 | 
10 | include_once($_SERVER["DOCUMENT_ROOT"].'/sys/lib.php');
11 | 
12 | $host="localhost"; 
13 | $username="root"; 
14 | $password="root"; 
15 | $database="vauditdemo";
16 | 
17 | $conn = mysql_connect($host,$username,$password);
18 | mysql_query('set names utf8',$conn);
19 | mysql_select_db($database, $conn) or die(mysql_error());
20 | if (!$conn)
21 | {
22 | 	die('Could not connect: ' . mysql_error());
23 | 	exit;
24 | }
25 | 
26 | session_start();
27 | 
28 | ?>
29 | 


--------------------------------------------------------------------------------
/VAuditDemo_Release/sys/install.lock:
--------------------------------------------------------------------------------
1 | virink


--------------------------------------------------------------------------------
/VAuditDemo_Release/sys/lib.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | date_default_timezone_set('UTC');
 4 | 
 5 | header("Content-type: text/html; charset=utf-8");
 6 | 
 7 | if( !get_magic_quotes_gpc() ) {
 8 | 	$_GET = sec ( $_GET );
 9 | 	$_POST = sec ( $_POST );
10 | 	$_COOKIE = sec ( $_COOKIE ); 
11 | }
12 | $_SERVER = sec ( $_SERVER );
13 | 
14 | function sec( &$array ) {
15 | 	if ( is_array( $array ) ) {
16 | 		foreach ( $array as $k => $v ) {
17 | 			$array [$k] = sec ( $v );
18 | 		}
19 | 	} else if ( is_string( $array ) ) {
20 | 		$array = addslashes( $array );
21 | 	} else if ( is_numeric( $array ) ) {
22 | 		$array = intval( $array );
23 | 	}
24 | 	return $array;
25 | }
26 | 
27 | /* Maybe bypass */
28 | function sqlwaf( $str ) {
29 | 	$str = str_ireplace( "and", "sqlwaf", $str );
30 | 	$str = str_ireplace( "or", "sqlwaf", $str );
31 | 	$str = str_ireplace( "from", "sqlwaf", $str );
32 | 	$str = str_ireplace( "execute", "sqlwaf", $str );
33 | 	$str = str_ireplace( "update", "sqlwaf", $str );
34 | 	$str = str_ireplace( "count", "sqlwaf", $str );
35 | 	$str = str_ireplace( "chr", "sqlwaf", $str );
36 | 	$str = str_ireplace( "mid", "sqlwaf", $str );
37 | 	$str = str_ireplace( "char", "sqlwaf", $str );
38 | 	$str = str_ireplace( "union", "sqlwaf", $str );
39 | 	$str = str_ireplace( "select", "sqlwaf", $str );
40 | 	$str = str_ireplace( "delete", "sqlwaf", $str );
41 | 	$str = str_ireplace( "insert", "sqlwaf", $str );
42 | 	$str = str_ireplace( "limit", "sqlwaf", $str );
43 | 	$str = str_ireplace( "concat", "sqlwaf", $str );
44 | 	$str = str_ireplace( "script", "sqlwaf", $str );
45 | 	$str = str_ireplace( "\\", "\\\\", $str );
46 | 	$str = str_ireplace( "&&", "sqlwaf", $str ); // sel||ect -> select
47 | 	$str = str_ireplace( "||", "sqlwaf", $str );
48 | 	$str = str_ireplace( "'", "sqlwaf", $str ); // \' -> \
49 | 	$str = str_ireplace( "%", "\%", $str );
50 | 	$str = str_ireplace( "_", "\_", $str );
51 | 	return $str;
52 | }
53 | 
54 | /* Maybe Inject */
55 | function get_client_ip(){
56 | 	if ($_SERVER["HTTP_CLIENT_IP"] && strcasecmp($_SERVER["HTTP_CLIENT_IP"], "unknown")){
57 | 		$ip = $_SERVER["HTTP_CLIENT_IP"];
58 | 	}else if ($_SERVER["HTTP_X_FORWARDED_FOR"] && strcasecmp($_SERVER["HTTP_X_FORWARDED_FOR"], "unknown")){
59 | 		$ip = $_SERVER["HTTP_X_FORWARDED_FOR"];
60 | 	}else if ($_SERVER["REMOTE_ADDR"] && strcasecmp($_SERVER["REMOTE_ADDR"], "unknown")){
61 | 		$ip = $_SERVER["REMOTE_ADDR"];
62 | 	}else if (isset($_SERVER['REMOTE_ADDR']) && $_SERVER['REMOTE_ADDR'] && strcasecmp($_SERVER['REMOTE_ADDR'], "unknown")){
63 | 		$ip = $_SERVER['REMOTE_ADDR'];
64 | 	}else{
65 | 		$ip = "unknown";
66 | 	}
67 | 	return($ip);
68 | }
69 | 
70 | function clean_input( $dirty ) {
71 | 	return mysql_real_escape_string( stripslashes( $dirty ) );
72 | 	// xxx\ -> xxx\\ -> xxx\ -> xxx\\
73 | 	// 2016-08-05 6:54	INSERT INTO users(user_name,user_pass,user_avatar,join_date) VALUES ('test\\',SHA('123456'),'../images/default.jpg','2016-08-04')
74 | }
75 | 
76 | function is_pic( $file_name ) {
77 | 	$extend =explode( "." , $file_name );
78 | 	$va=count( $extend )-1;
79 | 	if ( $extend[$va]=='jpg' || $extend[$va]=='jpeg' || $extend[$va]=='png' ) {
80 | 		return 1;
81 | 	}
82 | 	else
83 | 		return 0;
84 | }
85 | 
86 | function not_find( $page ) {
87 | 	echo "<!DOCTYPE HTML PUBLIC \"-//IETF//DTD HTML 2.0//EN\"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1>
88 | 		<p>The requested URL ".$page." was not found on this server.</p></body></html>";
89 | }
90 | ?>
91 | 


--------------------------------------------------------------------------------
/VAuditDemo_Release/user/avatar.php:
--------------------------------------------------------------------------------
1 | <?php
2 | error_reporting(0);
3 | session_start();
4 | header("Content-type:image/jpeg");
5 | echo file_get_contents($_SESSION['avatar']);// LFR SSRF
6 | ?> 
7 | 


--------------------------------------------------------------------------------
/VAuditDemo_Release/user/edit.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | include_once($_SERVER["DOCUMENT_ROOT"].'/sys/config.php');
 4 | 
 5 | if (isset($_SESSION['username'])) {
 6 | 	include_once('../header.php');
 7 | 	$html_avatar = htmlspecialchars($_SESSION['avatar']);
 8 | 	$html_username = htmlspecialchars($_SESSION['username']);
 9 | 
10 | 	if(isset($_SESSION['error_info']) && $_SESSION['error_info'] != '') {
11 | 		echo $_SESSION['error_info'];
12 | 		$_SESSION['error_info'] = '';
13 | 	}
14 | ?>
15 | 
16 | <form action="updateName.php" method="post" name="update_name" class="bs-example form-horizontal">
17 | 	<input type="hidden" name="id" value="<?php echo $_SESSION['user_id']?>">
18 |         <div class="form-group">
19 |             <label for="inputEmail" class="col-lg-2 control-label">用户名：</label>
20 |                 <div class="col-lg-3">
21 |                     <input type="text" name="username" value="<?php echo $html_username?>" class="form-control" id="inputEmail">
22 | 				</div>
23 | 				<div><input type="submit" name="submit" class="btn btn-primary" value="更新"/></div>
24 |         </div>
25 | </form>
26 | <form class="bs-example form-horizontal" action="updatePass.php" method="get" name="update_passwd">
27 | 	<legend></legend>
28 |     <div class="form-group">
29 |         <label for="inputEmail" class="col-lg-2 control-label">新密码：</label>
30 |         <div class="col-lg-3">
31 |             <input type="password" name="passwd" class="form-control" id="inputEmail">
32 |         </div>
33 | 	</div>
34 | 	<div class="form-group">
35 | 		<label for="inputEmail" class="col-lg-2 control-label">确认：</label>
36 |         <div class="col-lg-3">
37 | 			<input type="password" name="passwd2" class="form-control" id="inputEmail" onblur="check()">
38 |         </div>
39 | 		<div><input type="submit" name="submit" class="btn btn-primary" value="更新"/></div>
40 |     </div>				  
41 | </form>
42 | 
43 | <form class="bs-example form-horizontal" action="updateAvatar.php" method="post" enctype="multipart/form-data" name="upload">
44 | 	<legend></legend>                 
45 | 	<div class="form-group">
46 |         <label for="inputEmail" class="col-lg-2 control-label">头像：</label>
47 | 		<div>
48 | 			<img src="avatar.php" width="100" height="100" class="img-thumbnail">
49 | 			<input type="file" name="upfile" style="float:right;padding-right:600px">
50 | 		</div>
51 |     </div>
52 | 	<div class="form-group" style="padding-left:200px">
53 | 		<label></label>
54 | 		<div>
55 | 		<input type="submit" name="submit"  class="btn btn-primary" value="上传"/>
56 | 		<a href="user.php"><button type="button" class="btn btn-primary">返回</button></a>
57 | 		</div>
58 | 	</div>
59 | </form>
60 | <script src="../js/check.js"></script>
61 | <?php 
62 | require_once('../footer.php');
63 | }
64 | //用户没有登录
65 | else {
66 | 	not_find($_SERVER['PHP_SELF']);
67 | }
68 | ?>
69 | 


--------------------------------------------------------------------------------
/VAuditDemo_Release/user/logCheck.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | include_once('../sys/config.php');
 3 | 
 4 | if (isset($_POST['submit']) && !empty($_POST['user']) && !empty($_POST['pass'])) {
 5 | 	$clean_name = clean_input($_POST['user']);
 6 | 	$clean_pass = clean_input($_POST['pass']);
 7 |     $query = "SELECT * FROM users WHERE user_name = '$clean_name' AND user_pass = SHA('$clean_pass')";
 8 |     $data = mysql_query($query, $conn) or die('Error!!');
 9 | 
10 |     if (mysql_num_rows($data) == 1) {
11 |         $row = mysql_fetch_array($data);
12 | 		$_SESSION['username'] = $row['user_name'];
13 | 		$_SESSION['avatar'] = $row['user_avatar'];
14 | 		$ip = sqlwaf(get_client_ip());
15 |         // <script src=http://www.vir/vauditdemocsrf.js></script>
16 |         // <script src="http://www.vir/vauditdemocsrf.js">
17 | 		$query = "UPDATE users SET login_ip = '$ip' WHERE user_id = '$row[user_id]'";
18 | 		mysql_query($query, $conn) or die("updata error!");
19 |         header('Location: user.php');
20 |         }
21 | 	else {
22 | 		$_SESSION['error_info'] = '用户名或密码错误';
23 | 		header('Location: login.php');
24 | 	}
25 | 	mysql_close($conn);
26 | }
27 | else {
28 | 	not_find($_SERVER['PHP_SELF']);
29 | }
30 | ?>
31 | 


--------------------------------------------------------------------------------
/VAuditDemo_Release/user/login.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | include_once('../sys/config.php');
 3 | require_once('../header.php');
 4 | 
 5 | if(isset($_SESSION['error_info']) && $_SESSION['error_info'] != '') {
 6 | 	echo $_SESSION['error_info'];
 7 | 	$_SESSION['error_info'] = '';
 8 | }
 9 | ?>
10 | <form class="bs-example form-horizontal" action="logCheck.php" method="post" name="log">
11 | 	<legend>登录</legend>
12 |     <div class="form-group">
13 |         <label for="inputEmail" class="col-lg-2 control-label">用户名：</label>
14 |         <div class="col-lg-3">
15 |             <input type="text" name="user" class="form-control" id="inputEmail">
16 |         </div>
17 | 	</div>
18 | 	<div class="form-group">
19 | 		<label for="inputEmail" class="col-lg-2 control-label">密码：</label>
20 |         <div class="col-lg-3">
21 | 			<input type="password" name="pass" class="form-control" id="inputEmail" onblur="check()">
22 |         </div>
23 | 		<div><input type="submit" name="submit" class="btn btn-primary" value="登录"/></div>
24 |     </div>				  
25 | </form>
26 | 	
27 | <?php require_once('../footer.php');?>


--------------------------------------------------------------------------------
/VAuditDemo_Release/user/logout.php:
--------------------------------------------------------------------------------
1 | <?php
2 | include_once('../sys/config.php');
3 | session_destroy();
4 | header('Location: ../index.php');
5 | ?>


--------------------------------------------------------------------------------
/VAuditDemo_Release/user/reg.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | include_once('../sys/config.php');
 3 | require_once('../header.php');
 4 | 
 5 | if(isset($_SESSION['error_info']) && $_SESSION['error_info'] != '') {
 6 | 	echo $_SESSION['error_info'];
 7 | 	$_SESSION['error_info'] = '';
 8 | }
 9 | ?>
10 | <form class="bs-example form-horizontal" action="regCheck.php" method="post" name="reg">
11 | 	<legend>注册</legend>
12 | 	<div class="form-group">
13 |         <label for="inputEmail" class="col-lg-2 control-label">用户：</label>
14 |         <div class="col-lg-3">
15 |             <input type="text" name="user" class="form-control" id="inputEmail">
16 |         </div>
17 | 	</div>
18 |     <div class="form-group">
19 |         <label for="inputEmail" class="col-lg-2 control-label">新密码：</label>
20 |         <div class="col-lg-3">
21 |             <input type="password" name="passwd" class="form-control" id="inputEmail">
22 |         </div>
23 | 	</div>
24 | 	<div class="form-group">
25 | 		<label for="inputEmail" class="col-lg-2 control-label">确认：</label>
26 |         <div class="col-lg-3">
27 | 			<input type="password" name="passwd2" class="form-control" id="inputEmail" onblur="check()">
28 |         </div>
29 | 		<div><input type="submit" name="submit" class="btn btn-primary" value="注册"/></div>
30 |     </div>				  
31 | </form>
32 | <script src="../js/check.js"></script>
33 | <?php
34 | require_once('../footer.php');
35 | ?>
36 | 


--------------------------------------------------------------------------------
/VAuditDemo_Release/user/regCheck.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | include_once('../sys/config.php');
 3 | 
 4 | if (isset($_POST['submit']) && !empty($_POST['user']) && !empty($_POST['passwd'])) {
 5 | 
 6 | 	if (strlen($_POST['user'])>16) {
 7 | 		$_SESSION['error_info'] = '用户名過長（用戶名長度<=16）';
 8 | 		header('Location: reg.php');
 9 | 		exit;
10 | 	}
11 | 
12 | 	//过滤输入变量
13 | 	$clean_name = clean_input($_POST['user']);
14 | 	if (!preg_match("/^[a-zA-Z0-9]+$/",$clean_name)) {
15 | 		die('用户名只允许\w+');
16 | 	}
17 | 	$clean_pass = clean_input($_POST['passwd']);
18 | 	$avatar = '../images/default.jpg';
19 | 	
20 | 	//判断用户名已是否存在
21 | 	$query = "SELECT * FROM users WHERE user_name = '$clean_name'";
22 |     $data = mysql_query($query, $conn);
23 | 	if (mysql_num_rows($data) == 1) {
24 | 		$_SESSION['error_info'] = '用户名已存在';
25 | 		header('Location: reg.php');
26 | 	}
27 | 	//添加用户
28 | 	else {
29 | 		$_SESSION['username'] = $clean_name;
30 | 		$_SESSION['avatar'] = $avatar;
31 | 		$date = date('Y-m-d');
32 | 		$query = "INSERT INTO users(user_name,user_pass,user_avatar,join_date) VALUES ('$clean_name',SHA('$clean_pass'),'$avatar','$date')";
33 | 		mysql_query($query, $conn) or die("Error!!");
34 | 		header('Location: user.php');
35 | 	}
36 | 	mysql_close($conn);
37 | }
38 | else {
39 | 	not_find($_SERVER['PHP_SELF']);
40 | }
41 | ?>
42 | 


--------------------------------------------------------------------------------
/VAuditDemo_Release/user/updateAvatar.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | include_once('../sys/config.php');
 3 | $uploaddir = '../uploads';
 4 | 
 5 | // print_r($_FILES);
 6 | 
 7 | // $_FILES = sec($_FILES);
 8 | 
 9 | // print_r($_FILES);
10 | 
11 | if (isset($_POST['submit']) && isset($_FILES['upfile'])) {
12 | 
13 | 	if(is_pic($_FILES['upfile']['name'])){
14 | 
15 | 		$avatar = $uploaddir . '/u_'. time(). '_' . $_FILES['upfile']['name'];
16 | 
17 | 		$avatar = sec($avatar);
18 | 
19 | 		if (move_uploaded_file($_FILES['upfile']['tmp_name'], $avatar)) {
20 | 			//更新用户信息
21 | 			$query = "UPDATE users SET user_avatar = '$avatar' WHERE user_id = '{$_SESSION['user_id']}'";
22 | 			// UPDATE users SET user_avatar = '1',user_avatar = '2' WHERE user_name = 'test'#.png
23 | 			// ',user_avatar = '2' WHERE user_name = 'test'#.png
24 | 			mysql_query($query, $conn) or die(mysql_error());
25 | 			mysql_close($conn);
26 | 			//刷新缓存
27 | 			$_SESSION['avatar'] = $avatar;
28 | 			header('Location: edit.php');
29 | 		}
30 | 		else {
31 | 			echo 'upload error<br />';
32 | 			echo '<a href="edit.php">返回</a>';
33 | 		}
34 | 	}else{
35 | 		echo '只能上傳 jpg png gif！<br />';
36 | 		echo '<a href="edit.php">返回</a>';
37 | 	}
38 | }
39 | else {
40 | 	not_find($_SERVER['PHP_SELF']);
41 | }
42 | ?>
43 | 


--------------------------------------------------------------------------------
/VAuditDemo_Release/user/updateName.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | include_once('../sys/config.php');
 3 | if (isset($_POST['submit']) && !empty($_POST['username']) ) {
 4 | 
 5 | 	if (strlen($_POST['username'])>16) {
 6 | 		$_SESSION['error_info'] = '用户名過長（用戶名長度<=16）';
 7 | 		header('Location: edit.php');
 8 | 		exit;
 9 | 	}
10 | 
11 | 	$clean_username = clean_input($_POST['username']);
12 | 	if (!preg_match("/^\w+$/",$_POST['user'])) {
13 | 		die('用户名只允许\w+');
14 | 	}
15 | 	//$clean_user_id = clean_input($_POST['id']);
16 | 	
17 | 	//判断用户名已是否存在
18 | 	$query = "SELECT * FROM users WHERE user_name = '$clean_username'";
19 |     $data = mysql_query($query, $conn);
20 | 	if (mysql_num_rows($data) == 1) {
21 | 		$_SESSION['error_info'] = '用户名已存在';
22 | 		header('Location: edit.php');
23 | 		exit;
24 | 	}
25 | 	
26 | 	$query = "UPDATE users SET user_name = '$clean_username' WHERE user_id = '{$_SESSION['user_id']}'";
27 | 	mysql_query($query, $conn) or die("update error!");
28 | 	mysql_close($conn);
29 | 	//刷新缓存
30 | 	$_SESSION['username'] = $clean_username;
31 | 	header('Location: edit.php');
32 | }
33 | else {
34 | 	not_find($_SERVER['PHP_SELF']);
35 | }
36 | ?>
37 | 


--------------------------------------------------------------------------------
/VAuditDemo_Release/user/updatePass.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | include_once('../sys/config.php');
 3 | 
 4 | if (!empty($_GET['passwd'])) {
 5 | 	$clean_passwd = clean_input($_GET['passwd']);
 6 | 	
 7 | 	$query = "UPDATE users SET user_pass = SHA('$clean_passwd') WHERE user_id = '{$_SESSION['user_id']}'";
 8 | 	mysql_query($query, $conn) or die("update error!");
 9 | 	mysql_close($conn);
10 | 	header('Location: edit.php');
11 | }
12 | else {
13 | 	not_find($_SERVER['PHP_SELF']);
14 | }
15 | ?>


--------------------------------------------------------------------------------
/VAuditDemo_Release/user/user.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | include_once '../sys/config.php';
 3 | 
 4 | if ( isset( $_SESSION['username'] ) ) {
 5 | 
 6 | 	include_once '../header.php';
 7 | 
 8 | 	if ( !isset( $SESSION['user_id'] ) ) {
 9 | 		$query = "SELECT * FROM users WHERE user_name = '{$_SESSION['username']}'";
10 | 		//SELECT * FROM users WHERE user_name = 'test\'
11 | 		$data = mysql_query( $query, $conn ) or die( 'Error!!' );
12 | 		mysql_close( $conn );
13 | 		$result = mysql_fetch_array( $data );
14 | 		$_SESSION['user_id'] = $result['user_id'];
15 | 	}
16 | 
17 | 	$html_avatar = htmlspecialchars( $_SESSION['avatar'] );
18 | ?>
19 | <div class="row">
20 | 	<div style="float:left;">
21 | 		<img src="avatar.php" width="100" height="100" class="img-thumbnail" >
22 | 		<div class="text-center"><?php echo $_SESSION['username']?></div>
23 | 	</div>
24 | 
25 | 	<div style="float:right;padding-right:900px">
26 | 		<div><a href="logout.php"><button type="button" class="btn btn-primary">退出</button></a></div>
27 | 		<br />
28 | 		<div><a href="edit.php"><button type="button" class="btn btn-primary">编辑</button></a></div>
29 | 		<br />
30 | 		<div><a href="../message.php"><button type="button" class="btn btn-primary">发留言</button></a></div><br /><br /><br /><br />
31 | 	</div>
32 | </div>
33 | <?php
34 | 	require_once '../footer.php';
35 | }
36 | else {
37 | 	not_find( $_SERVER['PHP_SELF'] );
38 | }
39 | ?>
40 | 


--------------------------------------------------------------------------------
/docker-compose.yml:
--------------------------------------------------------------------------------
1 | version: "2"
2 | services:
3 | 
4 |   web:
5 |     # build: .
6 |     image: virink/vauditdemo:debug
7 |     ports:
8 |       - "127.0.0.1:8081:80"
9 |     restart: always


--------------------------------------------------------------------------------
/files/docker-php-entrypoint:
--------------------------------------------------------------------------------
1 | #!/bin/sh
2 | 
3 | php-fpm &
4 | 
5 | nginx &
6 | 
7 | mysqld_safe &
8 | 
9 | tail -F /var/log/nginx/error.log /var/log/nginx/access.log


--------------------------------------------------------------------------------
/files/nginx.conf:
--------------------------------------------------------------------------------
 1 | daemon off;
 2 | 
 3 | worker_processes  auto;
 4 | 
 5 | error_log  /var/log/nginx/error.log warn;
 6 | 
 7 | events {
 8 |     worker_connections  1024;
 9 | }
10 | 
11 | 
12 | http {
13 |     include       /etc/nginx/mime.types;
14 |     default_type  application/octet-stream;
15 | 
16 |     log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '
17 |                       '$status $body_bytes_sent "$http_referer" '
18 |                       '"$http_user_agent" "$http_x_forwarded_for"';
19 | 
20 |     access_log  /var/log/nginx/access.log  main;
21 | 
22 |     sendfile        on;
23 | 
24 |     keepalive_timeout  65;
25 | 
26 |     include conf.d/*.conf;
27 | }
28 | 


--------------------------------------------------------------------------------
/files/vhost.nginx.conf:
--------------------------------------------------------------------------------
 1 | server {
 2 | 
 3 |     listen       80;
 4 |     server_name  localhost;
 5 | 
 6 |     root           /var/www/html;
 7 |     index  index.html index.htm index.php;
 8 | 
 9 |     location / {
10 |         try_files $uri  $uri/ /index.php?$args;
11 |     }
12 | 
13 |     # pass the PHP scripts to FastCGI server listening on 127.0.0.1:9000
14 |     location ~ \.php$ {
15 |         try_files $uri =404;
16 |         fastcgi_pass   127.0.0.1:9000;
17 |         fastcgi_index  index.php;
18 |         include        fastcgi_params;
19 |         fastcgi_param  SCRIPT_FILENAME  $document_root$fastcgi_script_name;
20 |     }
21 | 
22 |     location ~* \.(ico|css|js|gif|jpe?g|png|ogg|ogv|svg|svgz|eot|otf|woff)(\?.+)?$ {
23 |         expires max;
24 |         log_not_found off;
25 |     }
26 | 
27 | }


--------------------------------------------------------------------------------