PHP Trojan Backdoor Research

I don’t know enough, so I got a source code, but I found that there is a webshell backdoor. As for what code it is, I can’t identify it. Could someone please give me some advice?
<?php
function a($where) {
$where['pagesize']=1;
$article=alist($where);
if(isset($article['list'][0])) {
Return $article['list'][0];
}else {
Return false;
}
}
function u($cid='') {
if(empty($cid)) {
Return gethomeurl();
}
Return getchannelurl($cid);
}
function z($strname,$return=1) {
Return str($strname,0,$return);
}
function s($strname,$cid='',$return=1) {
Return str($strname,$cid,$return);
}
function n($where=0) {
Return nav($where);
}
function c($kind=0,$num=9999,$fid=0,$shownav=0) {
$channel=getchannelscache();
$newchannel=array();
$count=0;
if(isset($GLOBALS['nav'][$fid])) {
if(is_array($GLOBALS['nav'][$fid])) {
$diychannel=$GLOBALS['nav'][$fid];
}elseif(function_exists($GLOBALS['nav'][$fid])) {
$diychannel=$GLOBALS['nav'][$fid]($fid);
}
if(isset($diychannel)) {
foreach($diychannel as $val) {
if($shownav==0 || !isset($val['ifshownav']) ||($shownav>0 && @$val['ifshownav'])) {
$newchannel[]=$val;
$count  ;
}
if($count==$num) {
Return $newchannel;
}
}
Return $newchannel;
}
}
foreach($channel as $val) {
if($fid==$val['fid']) {
if($shownav==0 || ($shownav>0 && $val['ifshownav'])) {
if($kind==0) {
$newchannel[]=$val;
$count  ;
$newchannel[count($newchannel)-1]['key']=$count;
}elseif($val['ckind']==$kind) {
$newchannel[]=$val;
$count  ;
$newchannel[count($newchannel)-1]['key']=$count;
}
}
}
if($count==$num) {
break;
}
}
$fidarray=@cnav(cid,1);
foreach($newchannel as $key=>$val) {
$newchannel[$key]['onstyle']='';
foreach($fidarray as $fidkey=>$fidval) {
if($val['cid']==$fidval['cid']) {
$newchannel[$key]['onstyle']='on';
break;
}
}
}
Return $newchannel;
}
function b($cid='',$return=false,$linktag=' > ',$homepage=SystemDir) {
Return cnav($cid,$return,$linktag,$homepage);
}
function i($kind='',$cid=0) {
if($cid===0) {
if(!defined('cid')) {Return false;}
$cid=cid;
}
$channel=getchannelcache($cid);
if(!$channel) {
Return false;
}
if(empty($kind)) {
Return $channel;
}elseif($kind=='name' && isset($channel['cname'])) {
Return $channel['cname'];
}elseif($kind=='topfid') {
$breadcrumb=b($channel['cid'],1);
if(isset($breadcrumb[0]['cid'])) {
Return $breadcrumb[0]['cid'];
}
}elseif($kind=='url') {
Return u($channel['cid']);
}elseif($kind=='domain') {
Return @$channel['csetting']['channel_domain'];
}else {
if(isset($channel[$kind])) {
Return $channel[$kind];
}
}
Return false;
}
function uri($uri) {
$uri=ltrim($uri,'/');
if(UrlRewrite) {
Return SystemDir.$uri;
}else {
Return SystemDir.IndexFile.'/'.$uri;
}
}
function f($file) {
require(SystemRoot.TemplateDir.DIRECTORY_SEPARATOR.$file);
}
function t($file='',$echo=1) {
if($echo==1) {
echo(SystemDir.TemplateDir.'/'.$file);
}
Return SystemDir.TemplateDir.'/'.$file;
}
function alist($where='') {
if(isset($where['page']) && !is_numeric($where['page'])) {
if(isset($_GET[$where['page']]) && $_GET[$where['page']]>0) {
$where['page']=intval($_GET[$where['page']]);
}else {
$where['page']=1;
}
}
$nullarticle=array('list'=>array(),'pagecount'=>0,'pagesize'=>1,'page'=>1,);
if(!isset($where['cid']) && !defined('cid') && !isset($where['tablename']) && !isset($where['cids'])) {Return $nullarticle;}
if(!isset($where['tablename']) && !isset($where['cid']) && !isset($where['cids']) && defined('cid')) {$where['cid']=cid;}
if(!isset($where['cid'])) {$where['cid']=0;}
if(is_numeric($where['cid'])) {$where['cid']=intval($where['cid']);}
if(SiteCache && isset($where['cache']) && $where['cache']>0) {
$cachewhere=$where;
$cachehash=md5(json_encode($where));
$res =cacheget($cachehash,$where['cache'],'alist');
if ($res) {return json_decode($res,1);}
}
$sql='';
if($where['cid']!==0) {
$thischannelcache=getchannelcache($where['cid']);
if(!$thischannelcache) {Return $nullarticle;}
$where['cid']=$thischannelcache['cid'];
}
if(!isset($where['tablename'])) {$where['tablename']='';}
if(!isset($where['all']) || $where['all']==1) {
if(!isset($where['cids'])) {$where['cids']='';}
$clistsetting=alist_getson($where['cid'],$where['tablename'],$where['cids']);
if(!isset($clistsetting['sql'])) {Return $nullarticle;}$where['cidsql']=$clistsetting['sql'];
$where['tablename']=$clistsetting['tablename'];
$defaultsetting=getchannelcache($clistsetting['default']);
if(!isset($where['pageurl']) && !isset($clistsetting['pageurl'])) {
unset($defaultsetting['csetting']['channel_pageurl']);
}
}else {
if(!isset($where['cidsql'])) {
$where['cidsql']=" and (cid='".$where['cid']."')";
}
if($where['cid']) {
$defaultsetting=getchannelcache($where['cid']);
if(empty($where['tablename']) && isset($defaultsetting['csetting']['articletable'])) {
$where['tablename']=$defaultsetting['csetting']['articletable'];
}
}
}
$sql.=$where['cidsql'];
if(!isset($where['pagesize'])) {
if(isset($defaultsetting['csetting']['temppage_size']) && !empty($defaultsetting['csetting']['temppage_size'])) {
$where['pagesize']=$defaultsetting['csetting']['temppage_size'];
}
}
if(!isset($where['order'])) {
if(isset($defaultsetting['csetting']['temppage_order']) && !empty($defaultsetting['csetting']['temppage_order'])) {
$where['order']=$defaultsetting['csetting']['temppage_order'];
}
}
isset($where['addslashes']) ? $ifaddslashes=$where['addslashes']:$ifaddslashes=1;
isset($where['tablename']) ? $where['tablename']=$where['tablename']:die('no tablename');
isset($where['pagesize']) ? $where['pagesize']=intval($where['pagesize']):$where['pagesize']=9;
isset($where['order']) ? $where['order']='order by '.$where['order']:$where['order']='order by id desc';
isset($where['start']) ? $where['start']=intval($where['start']):$where['start']=0;
isset($where['column']) ? $where['column']=$where['column']:$where['column']='*';
isset($where['rowidstyle']) && !isset($where['rowidname']) ? $where['rowidname']='id' :'';
isset($where['linktime'])  ?  1==1 : $where['linktime']='posttime';
isset($where['link'])  ?  1==1 : $where['link']='';
isset($where['domain'])  ?  1==1 : $where['domain']='';
if(trim($where['column'])<>'*') {$where['column'].=',cid';}if(isset($where['where'])) {
if(is_array($where['where'])) {
foreach($where['where'] as $key=>$val) {
$key=addslashes_str($key,$ifaddslashes);
if(is_array($val) && count($val)>0) {
$sql.=" and (";
foreach($val as $value) {
$sql.=$key."='".addslashes_str($value,$ifaddslashes)."' or ";
}
$sql=substr($sql,0,strlen($sql)-4);
$sql.=")";
}else {
$sql.=" and ".$key."='".addslashes_str($val,$ifaddslashes)."'";
}
}
}else {
$sql.=" and ".$where['where'];
}
}
if(isset($where['inwhere'])) {
foreach($where['inwhere'] as $key=>$val) {
if(!is_array($val)) {
$val=array();
$val[]=$where['inwhere'][$key];
}
$key=addslashes_str($key,$ifaddslashes);
foreach($val as $val1) {
if(is_numeric($val1) && $val1>0) {
$sql.=" and (".$key."='[".$val1."]' or ".$key." like '%,".$val1.",%' or ".$key." like '[".$val1.",%' or ".$key." like '%,".$val1."]')";
}else {
unset($where['inwhere'][$key]);
}
}
}
}
if(isset($where['nowhere'])) {
foreach($where['nowhere'] as $key=>$val) {
$key=addslashes_str($key,$ifaddslashes);
if(is_array($val) && count($val)>0) {
foreach($val as $value) {
$sql.=" and ".$key."<>'".addslashes_str($value,$ifaddslashes).'\'';
}
}else {
$sql.=" and ".$key."<>'".addslashes_str($val,$ifaddslashes)."'";
}
}
}
if(isset($where['other']) && !empty($where['other'])) {
$sql.=" and ".$where['other'];
}
if(isset($where['keyword']) && !empty($where['keyword'])) {
if(!isset($where['searchcolumn'])) {$where['searchcolumn']='title';}
if(!is_array($where['searchcolumn'])) {$where['searchcolumn']=explode(',',$where['searchcolumn']);}
if(!is_array($where['keyword'])) {$where['keyword']=explode('|',$where['keyword']);}
$sql.=" and (";
foreach($where['searchcolumn'] as $key=>$searchcolumn) {
foreach($where['keyword'] as $keywordkey=>$keywordval) {
if($key==0 && $keywordkey==0) {
$sql.="$searchcolumn like '%".addslashes_str($keywordval,$ifaddslashes)."%'";
}else {
$sql.=" or $searchcolumn like '%".addslashes_str($keywordval,$ifaddslashes)."%'";
}
}
}
$sql.=" )";
}
if(!empty($sql)) {
$sql='where '.ltrim($sql,'and ');
}
if(isset($where['page'])) {
$where['page']=intval($where['page']);
$where['pagecount'] = $GLOBALS['db'] -> fetchcount("SELECT count(id) FROM ".$where['tablename']." $sql");
$where['articlecount']=$where['pagecount'];
$where['start']=($where['page']-1)*$where['pagesize'];
if($where['articlecount']%$where['pagesize']==0) {
$where['pages']=($where['articlecount']/$where['pagesize']);
}else {
$where['pages']=intval($where['articlecount']/$where['pagesize']) 1;
}
if(isset($defaultsetting['csetting']['channel_pageurl']) && !empty($defaultsetting['csetting']['channel_pageurl']) && !isset($where['pageurl'])) {
$allpageurl=explode(';',$defaultsetting['csetting']['channel_pageurl']);
if(UrlRewrite) {
$where['pageurl']=$allpageurl[0];
}else {
$where['pageurl']=SystemDir.IndexFile.$allpageurl[0];
}
}
}
if(!isset($where['sql'])) {
$where['sql_id']='SELECT id FROM '.$where['tablename'].' '.$sql.' '.$where['order'].' limit '.$where['start'].','.$where['pagesize'];
$idquery =$GLOBALS['db'] -> query($where['sql_id']);
$ids = $GLOBALS['db'] -> fetchall($idquery);
$sql='id in(';
if(count($ids)>0) {
foreach($ids as $key=>$val) {
$sql.=$val[0].',';
}
}else {
$sql.='0,';
}
$sql=rtrim($sql,',');
$sql.=')';
$where['sql']='SELECT '.$where['column'].' FROM '.$where['tablename'].' where '.$sql.' '.$where['order'];
}
$query = $GLOBALS['db'] -> query($where['sql']);
$articles = $GLOBALS['db'] -> fetchall($query);
$i=0;
foreach ($articles as $value) 
{
$i  ;
$value['key']=$i;
if(isset($where['stepstyle'])) {
foreach($where['stepstyle'] as $key=>$val) {if($i%$key==0) {$value['stepstyle']=$where['stepstyle'][$key];}}
if(!isset($value['stepstyle'])) {$value['stepstyle']='';}
}if(isset($where['rowstyle'])) {
foreach($where['rowstyle'] as $key=>$val) {if($i==$key) {$value['rowstyle']=$where['rowstyle'][$key];}}
if(!isset($value['rowstyle'])) {$value['rowstyle']='';}
}
if(isset($where['rowidstyle'])) {
foreach($where['rowidstyle'] as $key=>$val) {
if($value[$where['rowidname']]==$key) {
$value['rowidstyle']=$val;
}
}
if(!isset($value['rowidstyle'])) {$value['rowidstyle']='';}
}
if(!isset($value[$where['linktime']])) {$value[$where['linktime']]=0;}
$value['link']=aurl($value,$where['link'],$value[$where['linktime']],$where['domain']);
$where['list'][]=$value;
}
if(!isset($where['list'])) {$where['list']=array();}
if(SiteCache && isset($where['cache']) && $where['cache']>0) {
cacheset($cachehash,json_encode($where),$where['cache'],'alist');
}
Return $where;
}
function getkinds($cid,$fid) {
$fid=intval($fid);
$kindsarray=array($fid);
if(is_numeric($cid)) {
$thichannelcache=getchannelcache($cid);
$defaultsetting=$thichannelcache['csetting'];
if(isset($defaultsetting['articletable']) && !empty($defaultsetting['articletable'])) {
$kindtable=$defaultsetting['articletable'];
}else {Return $kindsarray;}
}else {
$kindtable=$cid;
}
$query = $GLOBALS['db'] -> query("SELECT id FROM $kindtable where fid='$fid';");
$link = $GLOBALS['db'] -> fetchall($query);
foreach ($link as $value) 
{
$thisallkinds=getkinds($kindtable,$value['id']);
foreach ($thisallkinds as $thisvalue) 
{
$kindsarray[]=$thisvalue;
}
}
Return $kindsarray;
}
function alist_getson($cid,$tablename,$cids,$first=1) {
if($cid==0 && empty($tablename)) {
$tablename=ArticleTable;
}
$array=array();
$array['list']=array();
$channels=getchannelscache();
if($first) {
if(!is_array($cids)) {$cids=explode(';',$cids);}
$thischannel=getchannelcache($cid);
if($thischannel && @$thischannel['ckind']==2 && (in_array($cid,$cids) || empty($cids[0]))) {
if(isset($thischannel['csetting']['articletable']) && !empty($thischannel['csetting']['articletable']) && empty($tablename)) {
$tablename=$thischannel['csetting']['articletable'];
}if($tablename==$thischannel['csetting']['articletable']) {
$array['list'][]=$thischannel;
if(isset($thischannel['csetting']['channel_pageurl']) && !empty($thischannel['csetting']['channel_pageurl'])) {
$array['pageurl']=$thischannel['csetting']['channel_pageurl'];
}
}
}
$array['tablename']=$tablename;
}
foreach($channels as $key=>$val) {
if($val['fid']==$cid) {
$thischannel=getchannelcache($val['cid']);
if(empty($tablename)) {
if($thischannel['ckind']==2 && isset($thischannel['csetting']['articletable']) && (in_array($val['cid'],$cids) || empty($cids[0]))) {
$array['list'][]=$val;
$tablename=$thischannel['csetting']['articletable'];
$array['tablename']=$tablename;
}
}else {
if($thischannel['ckind']==2 && isset($thischannel['csetting']['articletable']) && $thischannel['csetting']['articletable']==$tablename && (in_array($val['cid'],$cids) || empty($cids[0]))) {
$array['list'][]=$val;
}
}
$sonarray=alist_getson($val['cid'],$tablename,$cids,0);
foreach($sonarray['list'] as $key1=>$val1) {
$array['list'][]=$val1;
}
}
}
if($first) {
$cids=array();
$sql='';
foreach($array['list'] as $key=>$val) {
if($key==0) {
$sql.=" and (cid='".$val['cid']."'";
}elseif($key==(count($array['list'])-1)) {
$sql.=" or cid='".$val['cid']."'";
}else {
$sql.=" or cid='".$val['cid']."'";
}
}
if(count($array['list'])>0) {$array['sql']=$sql.')';}
if(isset($array['list'][0])) {
$array['default']=$array['list'][0]['cid'];
}else {
$array['default']=0;
}
Return $array;
}else {
Return $array;
}
}
function aurl($value,$rowurl,$rowurltime,$domain='') {
$thissetting=getchannelcache($value['cid']);
if(empty($domain)) {
if(isset($thissetting['csetting']['channel_domain']) && !empty($thissetting['csetting']['channel_domain'])) {
$domains=explode(';',$thissetting['csetting']['channel_domain']);
$domain=$domains[0];
foreach($domains as $key) {
if($key==server_name()) {
$domain=null;
break;
}
}
}
}
if(empty($rowurl)) {
if(empty($thissetting['csetting']['channel_articleurl'])) {
Return '';
}
$rowurl=$thissetting['csetting']['channel_articleurl'];
}if(!empty($where['domain'])) {
$domains=explode(';',$where['domain']);
$where['domain']=$domains[0];
foreach($domains as $domain) {
if($domain==server_name()) {
$where['domain']=null;
break;
}
}
}
unset($thissetting);
$rowurls=explode(';',$rowurl);
$rowurl=$rowurls[0];
preg_match_all("/{(.*)}|\[(.*)\]|\((.*)\)/isU",$rowurl,$match);
if(count($match[0])>0) {
foreach($match[0] as $key=>$val) {
if($rowurltime>0 && ($val=='(y)' || $val=='(m)' || $val=='(d)')) {
isset($value['y'])  ?  1==1 : $value['y']=date('Y',$rowurltime);
isset($value['m'])  ?  1==1 : $value['m']=date('m',$rowurltime);
isset($value['d'])  ?  1==1 : $value['d']=date('d',$rowurltime);
}
if(isset($value[$match[1][$key]])) {
if(is_numeric($value[$match[1][$key]])) {$rowurl=str_replace($val,$value[$match[1][$key]],$rowurl);}else {$rowurl=str_replace($val,urlencode($value[$match[1][$key]]),$rowurl);}
}
if(isset($value[$match[2][$key]])) {
if(is_numeric($value[$match[2][$key]])) {$rowurl=str_replace($val,$value[$match[2][$key]],$rowurl); }else {$rowurl=str_replace($val,urlencode($value[$match[2][$key]]),$rowurl); }
}
if(isset($value[$match[3][$key]])) {
if(is_numeric($value[$match[3][$key]])) {$rowurl=str_replace($val,$value[$match[3][$key]],$rowurl); }else {$rowurl=str_replace($val,urlencode($value[$match[3][$key]]),$rowurl); }
}
}
}
if(!empty($domain)) {
$domain='//'.$domain.server_port();
}
if(UrlRewrite) {
$rowurl=$domain.$rowurl;
}else {
$rowurl=$domain.SystemDir.IndexFile.$rowurl;
}
Return $rowurl;
}
function all_list($where=array(),$pagesize=10,$cid='') {
if(!isset($where['cache'])) {$where['cache']=3600;}
$cachehash=md5(json_encode($where).$pagesize.json_encode($cid));
$res =cacheget($cachehash,$where['cache'],'alist');
if ($res) {return json_decode($res,1);}
if(empty($cid)) {
$cid=array();
$allchannels=getchannelscache();
foreach($allchannels as $channel) {
if($channel['ckind']==2) {
$cid[]=$channel['cid'];
}
}
}elseif(is_numeric($cid)) {
$cid=array($cid);
}
$articles=array();
foreach($cid as $thiscid) {
$where['cid']=$thiscid;
$where['pagesize']=$pagesize;
$where['all']=0;
$thisarticles=alist($where);
foreach($thisarticles['list'] as $thisarticle) {
$articles[]=$thisarticle;
}
}
$posttime=array();
foreach ($articles as $article) {
$posttime[] = $article['posttime'];
}$orderarticles=array_multisort($posttime, SORT_DESC, $articles);
$returnarticles=array();
$i=0;
foreach($articles as $key=>$val) {
$i  ;
$val['key']=$i;
$returnarticles[]=$val;
if($key==($pagesize-1)) {
break;
}
}
if(SiteCache && $where['cache']>0) {
cacheset($cachehash,json_encode($returnarticles),$where['cache'],'alist');
}
Return $returnarticles;
}
function ainsert($article,$setting='') {
if(!is_array($article)) {Return false;}
if(empty($setting)) {$setting=array();}
if(!isset($setting['cid']) && !isset($article['cid'])) {
if(defined('cid')) {
$setting['cid']=cid;
}else {
Return 'setting no cid';
}
}
if(!isset($setting['addslashes'])) {$setting['addslashes']=1;}
if(!isset($setting['default'])) {$setting['default']=1;}
if(!isset($setting['check'])) {$setting['check']=1;}
if(!isset($setting['cid'])) {$setting['cid']=$article['cid'];}
if(isset($article['cid'])) {unset($article['cid']);}
$channel = getchannelcache($setting['cid']);
if(!$channel) {Return 'channel not exist';}
$setting['cid']=$channel['cid'];
$csetting=$channel['csetting'];
if(!isset($setting['tablename']) || empty($setting['tablename'])) {$setting['tablename']=$csetting['articletable'];}
if(count($article)==0) {
Return 'where article columns';
}
foreach($article as $key=>$val) {
$article[$key]=addslashes_str($article[$key],$setting['addslashes']);
}
if($setting['check']) {
$columns = $GLOBALS['db'] -> all("select mname,mkind,ifonly,strdefault,msetting from ".tableex('moudle')." where cid=".$setting['cid']."  order by morder asc;");
foreach($columns as $thiscolumn) {
$key=$thiscolumn['mname'];
if(!isset($article[$key]) && $setting['default']) {
$article[$key]=$thiscolumn['strdefault'];
if($thiscolumn['mkind']==9) {
if($thiscolumn['strdefault']=='now') {
$article[$key]=time();
}else{
$thiscolumn['strdefault']=@strtotime($thiscolumn['strdefault']);
if($thiscolumn['strdefault']) {
$article[$key]=$thiscolumn['strdefault'];
}else {
$article[$key]=0;
}
}
}
}if(isset($article[$key])) {
$thismsetting=json_decode($thiscolumn['msetting'],1);
$thismsetting['ifonly']=$thiscolumn['ifonly'];
$thismsetting['tablename']=$setting['tablename'];
$thismoudlevalue=$article[$key];
if($thismsetting['filterhtml']==1) {
require_once(SystemRoot.AdminDir.'/input/kses.php');
$thismoudlevalue= kses($thismoudlevalue);
}elseif($thismsetting['filterhtml']==2) {
$thismoudlevalue=htmlspecialchars($thismoudlevalue);
}
$acheck=acheck($key,$thismoudlevalue,$setting['cid'],$thismsetting);
if($acheck==='error') {Return $key.' error';}
if($acheck==='short') {Return $key.' short';}
if($acheck==='long') {Return $key.' long';}
if($acheck==='exist') {Return $key.' exist';}
$article[$key]=$thismoudlevalue;
}
}
}
$article['cid']=$setting['cid'];
if(!isset($article['posttime'])) {$article['posttime']=time();}
if(!isset($article['adminuid'])) {$article['adminuid']=0;}
$result = $GLOBALS['db'] -> insert($setting['tablename'],$article);
if($result) {Return $result;}else {Return false;}
}
function aedit($article,$setting='') {
if(!isset($article['id']) || !is_numeric($article['id']) || $article['id']<1) {
Return 'id error';
}
$id=$article['id'];
unset($article['id']);
if(!is_array($article)) {Return false;}
if(empty($setting)) {$setting=array();}
if(!isset($setting['cid']) && !isset($article['cid'])) {
if(defined('cid')) {
$setting['cid']=cid;
}else {
Return 'setting no cid';
}
}
if(!isset($setting['addslashes'])) {$setting['addslashes']=1;}
if(!isset($setting['check'])) {$setting['check']=1;}
if(!isset($setting['cid'])) {$setting['cid']=$article['cid'];}
if(isset($article['cid'])) {unset($article['cid']);}
$channel = getchannelcache($setting['cid']);
if(!$channel) {Return 'channel not exist';}
$setting['cid']=$channel['cid'];
$csetting=$channel['csetting'];
if(!isset($setting['tablename']) || empty($setting['tablename'])) {$setting['tablename']=$csetting['articletable'];}
if(count($article)==0) {
Return 'where article columns';
}
foreach($article as $key=>$val) {
$article[$key]=addslashes_str($article[$key],$setting['addslashes']);
}if($setting['check']) {
$columns = $GLOBALS['db'] -> all("select mname,ifonly,strdefault,msetting from ".tableex('moudle')." where cid=".$setting['cid']."  order by morder asc;");
foreach($columns as $thiscolumn) {
$key=$thiscolumn['mname'];
if(isset($article[$key])) {
$thismsetting=json_decode($thiscolumn['msetting'],1);
$thismsetting['ifonly']=$thiscolumn['ifonly'];
$thismsetting['tablename']=$setting['tablename'];
$thismoudlevalue=$article[$key];
if($thismsetting['filterhtml']==1) {
require_once(SystemRoot.AdminDir.'/input/kses.php');
$thismoudlevalue= kses($thismoudlevalue);
}elseif($thismsetting['filterhtml']==2) {
$thismoudlevalue=htmlspecialchars($thismoudlevalue);
}
$acheck=acheck($key,$thismoudlevalue,$setting['cid'],$thismsetting,$id);
if($acheck==='error') {Return $key.' error';}
if($acheck==='short') {Return $key.' short';}
if($acheck==='long') {Return $key.' long';}
if($acheck==='exist') {Return $key.' exist';}
$article[$key]=$thismoudlevalue;
}
}
}
$result = $GLOBALS['db'] -> update($setting['tablename'],"id='$id'",$article);
if($result) {Return true;}else {Return false;}
}
function adel($cid,$id,$tablename='') {
if(empty($cid) && empty($tablename)) {
if(defined('cid')) {
$cid=cid;
}else {
Return 'no cid';
}
}
if(empty($id)) {Return 'no id';}else {$id=intval($id);}
if(empty($tablename)) {
$channel = getchannelcache($cid);
if(!$channel) {Return 'channel not exist';}
$cid=$channel['cid'];
$csetting=$channel['csetting'];
$tablename=$csetting['articletable'];
}
$query = $GLOBALS['db'] -> query("delete from `$tablename` WHERE id='$id'");
if($query) {
Return true;
}else {
Return false;
}
}
function acheck($mname,$value,$cid='',$thismsetting='',$id=0) {
if($cid=='') {
if(defined('cid')) {
$cid=cid;
}else {
Return 'no cid';
}
}if($thismsetting=='') {
$column = $GLOBALS['db'] -> one("select mname,ifonly,msetting from ".tableex('moudle')." where cid='".$cid."' and mname='".$mname."' limit 1;");
$thismsetting=json_decode($column['msetting'],1);
$thismsetting['ifonly']=$column['ifonly'];
}
if(isset($thismsetting['regular']) && strlen($thismsetting['regular'])>3 && !empty($value)) {
if(!preg_match($thismsetting['regular'],$value)){
Return 'error';
}
}
if(isset($thismsetting['lenmin']) && is_numeric($thismsetting['lenmin']) && $thismsetting['lenmin']>0) {
if(strlen($value)<$thismsetting['lenmin']) {
Return 'short';
}
}
if(isset($thismsetting['lenmax']) && is_numeric($thismsetting['lenmax']) && $thismsetting['lenmax']>0) {
if(strlen($value)>$thismsetting['lenmax']) {
Return 'long';
}
}
if($thismsetting['ifonly']==1) {
if(!isset($thismsetting['tablename'])) {
$channel = getchannelcache($cid);
$thismsetting['tablename']=$channel['csetting']['articletable'];
}
if($id>0) {
$pagecount = $GLOBALS['db'] -> fetchcount("SELECT id FROM ".$thismsetting['tablename']." where $mname='$value' and cid='".$cid."' and id<>'$id' limit 1;");
}else {
$pagecount = $GLOBALS['db'] -> fetchcount("SELECT id FROM ".$thismsetting['tablename']." where $mname='$value' and cid='".$cid."' limit 1;");
}
if($pagecount) {
Return 'exist';
}
}
Return true;
}
function addslashes_str($val,$addslashes) {
if($addslashes) {
Return dbstr($val);
}else {
Return $val;
}
}
function pagelist($alist,$url='',$returnarray=0)
{
if(!isset($alist['pagecount']) || !isset($alist['page'])) {
Return false;
}
$recordcount=$alist['pagecount'];
$pagesize=$alist['pagesize'];
$curpage=$alist['page'];
$pages=isset($alist['showpages']) ? $alist['showpages'] :3 ;
if(empty($url) && isset($alist['pageurl']) && !empty($alist['pageurl'])) {
$url=$alist['pageurl'];
if(isset($alist['cid'])) {
$url=str_replace('(cid)',$alist['cid'],$url);
}
}else {
if ( UrlRewrite ) {
$url=$_SERVER['REQUEST_URI'];
}else {
$url=$_SERVER['SCRIPT_NAME'].$_SERVER['REQUEST_URI'];
} }
if(stripes($url,'page=')===false) {
if(stripes($url,'?')===false) {
$url=$url."?page=(page)";
}else {
$url=$url."&page=(page)";
} }
} }
$url = preg_replace("/page=([0-9] )/is", "page=(page)", $url);
} }
if($pagesize<1) {
$pagesize=1;
} }
$pagearray=array();
$totalpage = max(ceil($recordcount/$pagesize),1);
if($curpage<0 || $curpage>$totalpage) $curpage=1;
$outhtml = "";
$pageno = $curpage;
if($page<0 || $page>$totalpage) $page=1;
if($pageno==1) {
$pagearray[]=array('url'=>str_replace('(page)','1',$url),'title'=>'<<','class'=>'disabled ');
}else {
$pagearray[]=array('url'=>str_replace('(page)','1',$url),'title'=>'<<','class'=>' );
} }
if($pages>$totalpage){
$ startpage = 1 ;
$endpage=min($startpage $pages,$totalpage);
}else{
$startpage=max($totalpage-$pages,1);
$startpage=min($startpage,$curpage);
$endpage=min($startpage $pages,$totalpage);
} }
if($page>1){
$pagearray[]=array('url'=>str_replace('(page)',$pageno-1,$url),'title'=>'<','class'=>'') ;
}else{
$pagearray[]=array('url'=>str_replace('(page)',1,$url),'title'=>'<','class'=>'disabled');
} }
for($i=$startpage;$i<=$endpage;$i)
{
if($curpage==$i){
$pagearray[]=array('url'=>str_replace('(page)',$i,$url),'title'=>$i,'class'=>'on');
}else{
$pagearray[]=array('url'=>str_replace('(page)',$i,$url),'title'=>$i,'class'=>'');
} }
} }
if($pageno<$totalpage){
$pagearray[]=array('url'=>str_replace('(page)',$pageno1,$url),'title'=>'>','class'=>'');
}else{
$pagearray[]=array('url'=>str_replace('(page)',$totalpage,$url),'title'=>'>','class'=>'disabled');
} }
if($page==$totalpage) {
$pagearray[]=array('url'=>str_replace('(page)',$totalpage,$url),'title'=>'>>','class'=>'disabled' );
}else {
$pagearray[]=array('url'=>str_replace('(page)',$totalpages,$url),'title'=>'>>','class'=>'') ;
} }
if($returnray) {
Return $ pagearray ;
} }else {
$outhtml='';
foreach($pagesarray as $val) {
if(!empty($val['class'])) {
$val['class']=' class="'.$val['class'].'"';
}
$outhtml.='<li'.$val['class'].'><a href="'.$val['url'].'">'.$val['title'].'</a></li>';
}
}
echo $outhtml;
}
function nav($where=0) {
$channelarray=array();
if(!is_array($where)) {
$thiscid=$where;
$where=array();
$where['cid']=$thiscid;
}
if(!isset($where['cid'])) {
$where['cid']=0;
}
$cid=$where['cid'];
if(!isset($where['oncid'])) {
if(defined('cid')) {
$where['oncid']=cid;
}else {
$where['oncid']=0;
}
//取出on的所有id
}
if(!isset($where['onstyle'])) {
$where['onstyle']=' class="on"';
}
if(!isset($where['bro'])) {$where['bro']=1;}
if(!isset($where['papa'])) {$where['papa']=1;}
if($where['cid']==0) {
if(!isset($where['homepage'])) {
$where['homepage']['name']='首页';
$where['homepage']['url']=gethomeurl();
$where['homepage']['target']='';
}else {
if(is_array($where['homepage'])) {
if(!isset($where['homepage']['name'])) {
$where['homepage']['name']='首页';
}
if(!isset($where['homepage']['url'])) {
$where['homepage']['url']=gethomeurl();
}
if(!isset($where['homepage']['target'])) {
$where['homepage']['target']='';
}
}
}
if(is_array($where['homepage'])) {
$channelarray[]=array('cid'=>'0','fid'=>'0','name'=>$where['homepage']['name'],'url'=>$where['homepage']['url'],'target'=>$where['homepage']['target']);
}
}
$allchannels=getchannelscache();
$channels=array();
foreach($allchannels as $val) {
if($val['ifshownav']==1) {
$channels[]=$val;
}
}
$count=0;
$myfid=0;
$papaid=0;
foreach($channels as $channel) {
if(is_numeric($cid)) {
if($channel['cid']==$cid) {
$myfid=$channel['fid'];
if($cid>0 && $where['papa']==1) {
$channelarray['papa']=$myfid;//显示父栏目
$papaid=$myfid;
}
}
if($channel['fid']==$cid) {
$count=1;
$channelarray[]=$channel;
}
}elseif(is_array($cid)) {
if(in_array($channel['cid'],$cid)) {
$count=1;
$channelarray[]=$channel;
}
}
}if($count>0 && is_numeric($cid) && $cid>0 && $where['papa']==1) {
$channelarray['papa']=$cid;
}
if($count==0) {
$noonpapaid=$myfid;
}else {
$noonpapaid=false;
}
if(isset($channelarray['papa']) && $channelarray['papa']>0) {
foreach($channels as $channel) {
if($channel['cid']==$channelarray['papa']) {
$channelarray['papa']=$channel;
}
}
}else {
unset($channelarray['papa']);
}
if(isset($where['bro']) && $where['bro']==1 && $count==0 &&  is_numeric($cid)) {
//显示兄弟栏目
if(isset($myfid) && $myfid>0) {
foreach($channels as $key=>$channel) {
if($channel['fid']==$myfid) {$channelarray[]=$channel;}
}
}elseif(isset($myfid) && $myfid==0) {
foreach($channels as $key=>$channel) {
if($channel['cid']==$cid) {$channelarray[]=$channel;}
}
}
}
$onarray=array();
if(defined('cid')) {
$thiscid=cid;
while(1<2) {
$ifin=false;
foreach($channels as $channel) {
if($channel['cid']==$thiscid && $channel['cid']!=$noonpapaid) {
$onarray[]=$channel['cid'];
$thiscid=$channel['fid'];
$ifin=true;
break;
}
}
if($ifin===false || $thiscid==0) {
break;
}
}
}
$returnarray=array();
$returnstr='';
if(!isset($where['html'])) {
$where['html']='<li{onstyle}><a href="{url}"{target}>{name}</a></li>';
}
if(isset($GLOBALS['nav'][$cid])) {
if(is_array($GLOBALS['nav'][$cid])) {
$channelarray=$GLOBALS['nav'][$cid];
}elseif(function_exists($GLOBALS['nav'][$cid])){
$channelarray=$GLOBALS['nav'][$cid]($cid);
}
}
foreach($channelarray as $key=>$channel) {
$thisstr=$where['html'];
if(!isset($channel['onstyle']) || empty($channel['onstyle'])) {
if(in_array($channel['cid'],$onarray)) {
$channel['onstyle']=$where['onstyle'];
}else {
$channel['onstyle']='';
}
}
if(defined('cid') && cid==0 && $channel['cid']==0) {//homepage
$channel['onstyle']=$where['onstyle'];
}
$returnarray[]=$channel;
if(!isset($where['returnarray']) || $where['returnarray']==0) {
$thisstr=str_replace('{url}',@$channel['url'],$thisstr);
$thisstr=str_replace('{target}',@$channel['target'],$thisstr);
$thisstr=str_replace('{name}',@$channel['name'],$thisstr);
$thisstr=str_replace('{onstyle}',@$channel['onstyle'],$thisstr);
$returnstr.=$thisstr."\r\n";
}
}
if(!isset($where['returnarray']) || $where['returnarray']==0) {
Return $returnstr;
}else{
Return $returnarray;
}
}
function cnav($cid='',$returnarray=false,$linktag=' > ',$homepage=SystemDir) {
if(empty($cid)) {
if(defined('cid')){
$cid=cid;
}else {
$cid=0;
}
}
$channels=getchannelscache();
$breadcrumb='';
$breadcrumbarray=array();
while(1<2)
{
$thischannel=false;
foreach($channels as $channel) {
if($channel['cid']==$cid) {
$thischannel=$channel;
}
}
if($thischannel==false) {
if($breadcrumb=='') {
$breadcrumb='<a href="'.gethomeurl().'">首页</a>';
}else {
$breadcrumb='<a href="'.gethomeurl().'">首页</a>'.$linktag.$breadcrumb;
}
if($returnarray) {
Return array_reverse($breadcrumbarray);
}else {
Return $breadcrumb;
}
}else {
if($breadcrumb=='') {
$breadcrumb='<a href="'.$thischannel['url'].'">'.$thischannel['name'].'</a>';
}else {
$breadcrumb='<a href="'.$thischannel['url'].'">'.$thischannel['name'].'</a>'.$linktag.$breadcrumb;
}
$breadcrumbarray[]=$thischannel;
$cid=$thischannel['fid'];
}
}
}
function getallchannelscache() {
if(isset($GLOBALS['allchannelscache'])) {
Return $GLOBALS['allchannelscache'];
}
$channelcachekeyname='allchannelscache';
$channelcache=cacheget($channelcachekeyname,604800,'channel');
if($channelcache) {
$channels=json_decode($channelcache,1);
}else {
$channelslist=$GLOBALS['db']->all("SELECT cid,fid,ifshownav,cname,ckind,cvalue,newwindow,csetting FROM ".tableex('channel')." where ckind<>'4' order by corder asc");
if($channelslist) {
$channels=array();
foreach($channelslist as $val) {
unset($thischannel);
$thischannel=array();
$thischannel['cid']=$val['cid'];
$thischannel['fid']=$val['fid'];
$thischannel['ckind']=$val['ckind'];
$thischannel['ifshownav']=$val['ifshownav'];
$thischannel['name']=$val['cname'];
if($val['newwindow']==1) {
$thischannel['target']=' target="_blank" ';
}else {
$thischannel['target']='';
}
$thischannel['url']=getchannelurl($val);
if(empty($thischannel['url'])) {
$thischannel['url']='#';
$thischannel['target']='';
}$channels[]=$thischannel;
}
cacheset($channelcachekeyname,json_encode($channels),604800,'channel');
}else {
Return array();
}
}
$GLOBALS['allchannelscache']=$channels;
Return $channels;
}
function getchannelscache() {
if(isset($GLOBALS['channelscache'])) {
Return $GLOBALS['channelscache'];
}
$channelcachekeyname='channelscache';
$channelcache=cacheget($channelcachekeyname,604800,'channel');
if($channelcache) {
$channels=json_decode($channelcache,1);
}else {
$channelslist=$GLOBALS['db']->all("SELECT cid,fid,ifshownav,cname,ckind,cvalue,newwindow,csetting FROM ".tableex('channel')." where ckind<>'4' and ifshow=1 order by corder asc");
if($channelslist) {
$channels=array();
foreach($channelslist as $val) {
unset($thischannel);
$thischannel=array();
$thischannel['cid']=$val['cid'];
$thischannel['fid']=$val['fid'];
$thischannel['ckind']=$val['ckind'];
$thischannel['ifshownav']=$val['ifshownav'];
$thischannel['name']=$val['cname'];
if($val['newwindow']==1) {
$thischannel['target']=' target="_blank" ';
}else {
$thischannel['target']='';
}
$thischannel['url']=getchannelurl($val);
if(empty($thischannel['url'])) {
$thischannel['url']='#';
$thischannel['target']='';
}
$channels[]=$thischannel;
}
cacheset($channelcachekeyname,json_encode($channels),604800,'channel');
}else {
Return array();
}
}
$GLOBALS['channelscache']=$channels;
Return $channels;
}
function getchannelcache($cid) {
if(isset($GLOBALS['channelcache'][$cid])) {
Return $GLOBALS['channelcache'][$cid];
}
$channelcachekeyname='channelcache_'.$cid;
$channelcache=cacheget($channelcachekeyname,604800,'channel');
if($channelcache) {
$channelcache=json_decode($channelcache,1);
}else {
if(is_numeric($cid)) {
$channelcache=$GLOBALS['db']->one("SELECT * FROM ".tableex('channel')." where cid='$cid' limit 1");
}else {
$channelcache=$GLOBALS['db']->one("SELECT * FROM ".tableex('channel')." where cname='$cid' limit 1");
}
if($channelcache) {
$channelcache['csetting']=json_decode($channelcache['csetting'],1);
cacheset($channelcachekeyname,json_encode($channelcache),604800,'channel');
}else {
Return false;
}
}
$GLOBALS['channelcache'][$cid]=$channelcache;
Return $channelcache;
}function getchannelurl($cid) {
if(!is_array($cid)) {
$cid=getchannelcache($cid);
if(!$cid) {Return false;}
$csetting=$cid['csetting'];
}else {
$csetting=json_decode($cid['csetting'],1);
}
$channel=$cid;
if($channel['ckind']==3 || $channel['ckind']==4 || $channel['ckind']==5) {
Return $channel['cvalue'];
}elseif($channel['ckind']==1 || $channel['ckind']==2) {
if(isset($csetting['template']) && empty($csetting['template'])) {
Return '';
}
}
if(!isset($csetting['channel_url'])) {Return '';}
$channelurls=explode(';',$csetting['channel_url']);
$channelurl=str_replace("(cid)",$cid['cid'],$channelurls[0]);
if(empty($channelurl)) {
Return '';
}
if(!isset($csetting['channel_domain']) || empty($csetting['channel_domain'])) {
$csetting['channel_domain']=SystemDomain;
}
if(isset($csetting['channel_domain']) && $csetting['channel_domain']<>'') {
$channel_domains=explode(';',$csetting['channel_domain']);
$csetting['channel_domain']=$channel_domains[0];
foreach($channel_domains as $channel_domain) {
if(stripos($channel_domain,'*')===false) {
$csetting['channel_domain']=$channel_domain;
break;
}
}
foreach($channel_domains as $channel_domain) {
if(server_name()==$channel_domain) {
$csetting['channel_domain']='';
break;
}
}
}
if(UrlRewrite) {
if(empty($csetting['channel_domain'])) {
$thisurl=$channelurl;
}else {
$thisurl='//'.$csetting['channel_domain'].server_port().$channelurl;
}
}else {
if(empty($csetting['channel_domain'])) {
$thisurl=SystemDir.IndexFile.$channelurl;
}else {
$thisurl='//'.$csetting['channel_domain'].server_port().SystemDir.IndexFile.$channelurl;
}
}
Return $thisurl;
}
function gethomeurl() {
if(isset($GLOBALS['homeurl'])) {
Return $GLOBALS['homeurl'];
}
if(!UrlRewrite) {
$indexfile=IndexFile;
}else {
$indexfile='';
}
$domains=explode(';',SystemDomain);
foreach($domains as $domain) {
$domain=trim($domain);
if($domain==server_name()) {
$GLOBALS['homeurl']=SystemDir.$indexfile;
Return $GLOBALS['homeurl'];
}
}
if(SystemDomain=='') {$GLOBALS['homeurl']=SystemDir.$indexfile;Return&
七字铺1367 days ago1034
PHP Trojan Backdoor Research

reply all(3)I'll reply
