<?php if(!defined('DIR')){header('HTTP/1.1 404 Not Found');header("status: 404 Not Found");exit;}
//允许跨域访问
header("Access-Control-Allow-Origin: *"); 
header("Access-Control-Allow-Headers: Access-Control-Allow-Private-Network,Content-Type, AccessToken, X-CSRF-Token, Authorization, Token,X-Token,X-Cid");

//鉴权验证 Cookie验证通过,验证二级密码,Cookie验证失败时尝试验证token

//获取请求方法
$method = htmlspecialchars(trim($_GET['method']),ENT_QUOTES); 

$LoginConfig = unserialize($USER_DB['LoginConfig']);
if(!is_login()){
    //没登录,根据API模式来限制
    $api_model = $LoginConfig['api_model']; //API模式
    $token = trim($_REQUEST['token']); //尝试获取令牌
    
    if( empty($USER_DB['Token']) && $api_model != 'compatible+open' ){
        Amsg(-1,'未设置token'); 
    }
    if(empty($token)){
        if($api_model != 'compatible+open'){
            Amsg(-1,'非开放模式,token不能为空!'); 
        }
        if(in_array($method,['link_list','get_a_link','q_category_link','category_list','get_a_category','check_login'])){
            define('Access_Type','open'); //数据访问类型:仅开放
            require 'api_compatible.php';
            exit;
        }else{
            Amsg(-1,'token为空时不允许访问此接口');
        }
    }else{
        if($token === $USER_DB['Token']){
            define('Access_Type','all');
        }else{
            Amsg(-1,'token验证失败'); 
        }
    }
    if($api_model === 'compatible' || $api_model ==='compatible+open'){
        require 'api_compatible.php';
    }
//Cookie登录验证OK,验证二级密码
}elseif(Check_Password2($LoginConfig)){
    // Cookie 二级密码验证成功(未设置时也认为成功)
}else{
    msg(-1,'请先验证二级密码!');
}


//站长相关方法名
$root = ['write_subscribe','write_sys_settings','write_default_settings','read_user_list','write_user_info','read_purview_list','read_users_list','write_users','read_regcode_list','write_regcode','other_upsys','read_log','other_root'];
if(in_array($method,$root)){
    require('api_root.php');
//非站长接口则判断是否加载防火墙
}elseif($global_config['XSS_WAF'] == 1 || $global_config['SQL_WAF'] == 1){
    require DIR.'/system/firewall.php';
}

//函数名过滤和检测是否存在,存在则执行,否则报错
if ( preg_match("/^read_|^write_|^other_/",$method) && function_exists($method) ) {
    $method();
}else{
    if($api_model == 'security'){
        Amsg(-1,'方法未找到 >> '.$method);
    }
}

//读分类列表
function read_category_list(){
    if($_GET['type'] == 'onlyf'){
        $where = ['uid'=>UID,'fid'=>0,'ORDER' => ['weight'=>'ASC']];
    }else{
        $where = ['uid'=>UID,'ORDER' => ['weight'=>'ASC']];
    }
    //
    if($_GET['type'] == 'share'){
        $categorys = [];
        //获取父分类
        $category_parent = select_db('user_categorys',['cid(id)','fid','name','font_icon'],['uid'=>UID,'fid'=>0]);
        //遍历父分类下的二级分类
        foreach ($category_parent as $category) {
            array_push($categorys,$category);
            $category_subs = select_db('user_categorys',['cid(id)','fid','name','font_icon'],['uid'=>UID,'fid'=>$category['id']]);
            $categorys = array_merge ($categorys,$category_subs);
        }
        msgA(['code'=>1,'msg'=>'获取成功','count'=>count($categorys),'data'=>$categorys ]);
    }
    
    //精简数据(链接列表调用)
    if($_GET['type'] === 'Simplify'){
        $categorys = [];
        //获取父分类
        $category_parent = select_db('user_categorys',['cid','fid','name','font_icon'],['uid'=>UID,'fid'=>0]);
        //遍历父分类下的二级分类
        foreach ($category_parent as $category) {
            array_push($categorys,$category);
            $category_subs = select_db('user_categorys',['cid','fid','name','font_icon'],['uid'=>UID,'fid'=>$category['cid']]);
            $categorys = array_merge ($categorys,$category_subs);
        }
        //数据处理
        $new_categorys=[];
        foreach ($categorys as $data){
            $new_categorys[$data['cid']]['name']=$data['name'];
            $new_categorys[$data['cid']]['font_icon']=$data['font_icon'];
            $new_categorys[$data['cid']]['fid'] = $data['fid'];
        }
        msgA(['code'=>1,'msg'=>'获取成功','count'=>count($new_categorys),'data'=>$new_categorys ]);
    }
    
    $datas = select_db('user_categorys',['cid','fid','pid(pwd_id)','status','property','name','add_time','up_time','weight','description','font_icon','icon'],$where);
    foreach ($datas as $key => $data){
        $datas[$key]['count'] = count_db('user_links',['uid'=>UID,'fid'=>$data['cid']]);
        if(!empty($datas[$key]['pwd_id'])){
            $datas[$key]['pwd'] = get_db('user_pwd_group','password',['uid'=>UID,'pid'=>$datas[$key]['pwd_id']]);
        }
    }
    msgA(['code'=>1,'msg'=>'获取成功','count'=>count($datas),'data'=>$datas ]);
}
//读一个分类信息
function read_one_category(){
    $cid = intval(trim($_REQUEST['cid']));
    //虚拟分类是指通过书签分享时产生的分类,主要配合前端编辑
    if(empty($cid)){msg(-1,$_REQUEST['cid'] == 'share'?'虚拟分类不能编辑':'id不能为空！');}
    $where['cid'] = $cid;
    $where['uid'] = UID;
    $category_info = get_db('user_categorys',['cid','fid','property','name','font_icon','description','icon'],$where);
    if(empty($category_info)){
        msgA(['code'=>-1,'msg'=>'没有找到分类信息','data'=>[]]);
    }else{
        msgA(['code'=>1,'data'=>$category_info]);
    }
}
//写分类列表(新增/修改/删除/排序) 
function write_category(){
    check_purview('category',2);
    //新增/修改时名称和图标不能为空
    if(in_array($_GET['type'],['add','edit'])){
        if(empty($_POST['name'])){
            msg(-1,'分类名称不能为空');
        }elseif(!preg_match('/^(fa fa-|layui-icon layui-icon-)([A-Za-z0-9]|-)+$/',$_POST['font_icon'])){
            $_POST['font_icon'] = 'fa fa-star-o';
            //msg(-1,'无效的分类图标');
        }
    }
    //新增
    if($_GET['type'] === 'add'){
        //分类名查重
        if(get_db('user_categorys','cid',['uid'=>UID ,"name" => $_POST['name']])){
            msg(-1,'分类名称已存在');
        }
        //父分类不能是二级分类
        if(intval($_POST['fid']) !=0 && get_db('user_categorys','fid',['uid'=>UID ,"cid" => intval($_POST['fid']) ]) !=0  ){
            msg(-1,'父分类不能是二级分类');
        }
        //加密组pid是否存在
        if(intval($_POST['pwd_id']) !=0  && empty(get_db('user_pwd_group','pid',['uid'=>UID ,"pid" => intval($_POST['pwd_id'])]))){
            msg(-1,'加密组不存在');
        }
        
        //取最大CID
        //$cid = intval(max_db('user_categorys','cid',['uid'=>UID])) +1; 
        $cid = get_maxid('category_id');
        //插入数据库
        insert_db('user_categorys',[
            'uid'=>UID,
            'cid'=>$cid,
            'fid'=>intval($_POST['fid']??'0'),
            'pid'=>intval($_POST['pwd_id']??'0'),
            'status'=>1,
            'property'=>$_POST['property']??'0',
            'name'=>htmlspecialchars($_POST['name'],ENT_QUOTES),
            'add_time'=>time(),
            'up_time'=>time(),
            'weight'=>$cid,
            'description'=>htmlspecialchars($_POST['description'],ENT_QUOTES),
            'font_icon'=>$_POST['font_icon'],
            'icon'=>$_POST['icon']??''
            ],[1,'添加成功']
        );
        
    //修改
    }elseif($_GET['type'] === 'edit'){
        //父分类不能是自己
        if($_POST['cid'] == $_POST['fid']){
            msg(-1,'父分类不能是自己');
        }
        
        //查CID是否存在
        if(!get_db('user_categorys','cid',['uid'=>UID ,"cid" => intval($_POST['cid'])])){
            msg(-1,'分类不存在');
        }
        
        //分类名查重(排除自身)
        if(get_db('user_categorys','cid',['uid'=>UID,'cid[!]'=>intval($_POST['cid']),"name" => $_POST['name']])){
            msg(-1,'分类名称已存在');
        }
        
        //父分类不能是二级分类
        if(intval($_POST['fid']) !=0 && get_db('user_categorys','fid',['uid'=>UID ,"cid" => intval($_POST['fid']) ]) !=0  ){
            msg(-1,'父分类不能是二级分类');
        }
        //分类下存在子分类,禁止修改父分类
        if( $_POST['fid']!=0  && count_db('user_categorys',['uid'=>UID,'fid'=>$_POST['cid']])>0){
            msg(-1,'该分类下已存在子分类！');
        }
        
        //查父分类是否存在
        if( $_POST['fid'] !=0  && !get_db('user_categorys','cid',['uid'=>UID ,"cid" => intval($_POST['fid'])])){
            msg(-1,'父分类不存在');
        }
        
        //加密组pid是否存在
        if(intval($_POST['pwd_id']) !=0  && empty(get_db('user_pwd_group','pid',['uid'=>UID ,"pid" => intval($_POST['pwd_id'])]))){
            msg(-1,'加密组不存在');
        }
        //更新数据
        $data = [
            'fid'=>$_POST['fid'],
            'pid'=>intval($_POST['pwd_id']??'0'),
            'property'=>$_POST['property']??'0',
            'name'=>$_POST['name'],
            'up_time'=>time(),
            'description'=>$_POST['description'],
            'font_icon'=>$_POST['font_icon'],
            'icon'=>$_POST['icon']
            ];
        if(!isset($_POST['fid'])){ //为空时不修改父id,避免二级变一级
            unset($data['fid']);
        }    
        update_db('user_categorys',$data,['uid'=>UID ,"cid"=>intval($_POST['cid'])],[1,'更新成功']);
        
        
    //删除 判断有没链接和子分类
    }elseif($_GET['type'] === 'del'){
       //查CID是否存在
        if(empty($_POST['cid']) || !get_db('user_categorys','cid',['uid'=>UID ,"cid" => intval($_POST['cid'])])){
            msg(-1,'分类不存在');
        }

        //判断分类下是否存在子分类
        if(!empty(get_db('user_categorys','cid',['uid'=>UID ,"fid" => intval($_POST['cid'])]))){
            msg(-1,'该分类下已存在子分类,请先删除子分类!');
        }
        
        //判断分类下是否存在链接
        if(!empty(get_db('user_links','id',['uid'=>UID ,"fid" => intval($_POST['cid'])]))){
            msg(-1,'分类下存在链接,请先删除链接!');
        }
        
        //删除数据
        delete_db('user_categorys',['uid'=>UID ,"cid" => intval($_POST['cid'])],[1,'删除成功']);
        
    //排序
    }elseif($_GET['type'] === 'order' ){
        foreach ($_POST['data'] as $key ){
            update_db('user_categorys',['weight'=>$key[1]],['uid'=>UID,'cid'=>$key[0]]);
        }
        msg(1,'保存成功');
        
    //私有切换
    }elseif($_GET['type'] === 'property_sw' ){
        //查CID是否存在
        if(empty($_POST['cid']) || !get_db('user_categorys','cid',['uid'=>UID ,"cid" => intval($_POST['cid'])])){
            msg(-1,'分类不存在');
        }
        //更新数据
        update_db('user_categorys',['property'=>intval($_POST['property']) ],['uid'=>UID,'cid'=>intval($_POST['cid']) ],[1,'保存成功']);
        
    //状态切换
    }elseif($_GET['type'] === 'status_sw' ){
        //查CID是否存在
        if(empty($_POST['cid']) || !get_db('user_categorys','cid',['uid'=>UID ,"cid" => intval($_POST['cid'])])){
            msg(-1,'分类不存在');
        }
        //更新数据
        update_db('user_categorys',['status'=>intval($_POST['status']) ],['uid'=>UID,'cid'=>intval($_POST['cid']) ],[1,'保存成功']);
    }
    
    
    msg(-1,'操作类型错误');
}

//读链接列表
function read_link_list(){
    if($_GET['type'] == 'extend_list'){
        if($GLOBALS['global_config']['link_extend'] != 1 || !check_purview('link_extend',1)){
            msgA(['code'=>1,'msg'=>'无权限','count'=>0,'data'=>[]]);
        }
        $list = get_db("user_config","v",["k"=>"s_extend_list","uid"=>UID]);
        if(empty($list)){
            msgA(['code'=>1,'msg'=>'无数据','count'=>0,'data'=>[]]);
        }
        $list = unserialize($list);
        msgA(['code'=>1,'msg'=>'获取成功','count'=>count($list),'data'=>$list]);
    }
    
    $query  = $_POST['query'];
    $fid    = intval(@$_POST['fid']); //获取分类ID
    $page   = empty(intval($_REQUEST['page'])) ? 1 : intval($_REQUEST['page']);
    $limit  = empty(intval($_REQUEST['limit'])) ? 50 : intval($_REQUEST['limit']);
    $offset = ($page - 1) * $limit; //起始行号
    $where = ["uid"=> UID];
    //分类筛选
    if(!empty($fid)){
        $where['AND']['fid'] = $fid;
        //查询分类下的子分类
        //$category = select_db('user_categorys','cid',['uid'=>UID,'fid'=>$fid]);
        // if(!empty($category)){
        //     array_push($category,$fid);
        //     $where['AND']['fid'] = $category;
        // }
    }
    //属性筛选
    if($_POST['property']==='0' || $_POST['property'] ==='1'){$where['AND']['property'] = ($_POST['property'] == 1?1:0);}
    if($_POST['status']==='0' || $_POST['status']==='1'){$where['AND']['status'] = ($_POST['status'] == 1?1:0);}
    
    //关键字筛选
    if(!empty($query)){
        $where['AND']['OR'] = ["title[~]" => $query,"url[~]" => $query,"description[~]" => $query];
    }
    
    //统计条数
    $count = count_db('user_links',$where);
    //权重排序(数字小的排前面)
    
    $where['ORDER']['weight'] = 'ASC';
    $where['ORDER']['lid'] = 'ASC';
    //分页
    $where['LIMIT'] = [$offset,$limit];
    //查询
    $datas = select_db('user_links',['lid','fid','pid(pwd_id)','status','property','title','url','url_standby','weight','description','icon','click','add_time','up_time'],$where);

    msgA(['code'=>1,'msg'=>'获取成功','count'=>$count,'data'=>$datas]);
}
//读一条链接信息(根据链接id)
function read_one_link(){
    $lid = intval(trim($_REQUEST['lid']));
    if(empty($lid)){msg(-1,'id不能为空！');}
    $where['lid'] = $lid;
    $where['uid'] = UID;
    $link_info = get_db('user_links',['lid','fid','property','title','url','description'],$where);
    if(empty($link_info)){
        msgA(['code'=>-1,'msg'=>'没有找到链接信息','data'=>[]]);
    }else{
        msgA(['code'=>1,'data'=>$link_info]);
    }
    
}


//写链接列表 权重后期可以在页面添加个插入头部还是尾部(选项记录到浏览器)
function write_link(){
    check_purview('link',2);
    global $u;
    //添加链接
    if($_GET['type'] === 'add'){
        $fid = intval(@$_POST['fid']);
        $title = $_POST['title'];
        $url = $_POST['url'];
        $icon = empty($_POST['icon']) ? '' : $_POST['icon'];
        $description = empty($_POST['description']) ? '' : $_POST['description'];
        $property = empty($_POST['property']) ? 0 : 1;
        //检测链接是否合法
        check_link($fid,$title,$url); 
        //检查链接是否已存在
        if(get_db('user_links','lid',['uid'=>UID ,"url" => $url])){
            msg(-1,'链接已存在!');
        }
        //备用链接检测
        if(!empty($_POST['url_standby'])){
            foreach ($_POST['url_standby'] as $key => $url_standby){
                //尝试匹配Markdown语法的URL,如果没有则认为直接输入
                if(preg_match('/\[(.*?)\]\((.*?)\)/', $url_standby, $match)){
                    check_link($fid,$title,$match[2]);
                }else{
                    check_link($fid,$title,$url_standby); 
                }
            }
        }
        //取最大链接ID
        $lid = get_maxid('link_id');
        //图标处理
        if(!empty($_POST['file'])){
            session_start();
            $tmp_path = $_SESSION['upload_images'][UID][$_POST['file']];
            if(!empty($tmp_path) && is_file($tmp_path)){
                $suffix = strtolower(end(explode('.',$tmp_path)));
                $path =  "./data/user/{$u}/favicon/{$lid}.{$suffix}";
                if(rename($tmp_path,$path)) { //移动文件到用户目录
                    $icon = $path;
                }else{
                    msg(-1,'保存图标失败,请检查权限');
                }
            }
        }

        $data = [
            'uid'           =>  UID,
            'lid'           =>  $lid,
            'fid'           =>  $fid,
            'pid'           =>  intval($_POST['pwd_id']??'0'),
            'title'         =>  htmlspecialchars($title,ENT_QUOTES),
            'url'           =>  $url,
            'url_standby'   =>  $_POST['url_standby']??'',
            'description'   =>  htmlspecialchars($description,ENT_QUOTES),
            'add_time'      =>  time(),
            'up_time'       =>  time(),
            'click'         =>  0,
            'weight'        =>  $lid,
            'status'        =>  1,
            'property'      =>  $property,
            'icon'          =>  $icon
            ];
        
        //插入数据库
        insert_db('user_links',$data);
        msgA(['code'=>1,'msg'=>'添加成功','id'=>$lid]);
    //上传图标
    }elseif($_GET['type'] === 'upload_images'){
        //权限检测
        if(!check_purview('Upload_icon',1)){
            msg(-1,'您的用户组无权限上传图标');
        }elseif(empty($_FILES["file"]) || $_FILES["file"]["error"] > 0){
            msg(-1,'文件上传失败');
        }
        
        //取后缀并判断是否支持
        $suffix = strtolower(end(explode('.',$_FILES["file"]["name"])));
        if(!preg_match('/^(jpg|jpeg|png|ico|bmp|svg)$/',$suffix)){
            @unlink($_FILES["file"]["tmp_name"]);
            msg(-1,'文件格式不被支持!');
        }
        
        session_start();
        $sid = $_POST['page_sid'];
        //添加链接
        if( !empty($sid) && $sid != 'undefined'){
            //适用在添加页上传图标未点击添加前又重新上传图标时删除老图标
            if(!empty($sid) && !empty($_SESSION['upload_images'][UID][$sid]) && is_file($_SESSION['upload_images'][UID][$sid])){
                @unlink($_SESSION['upload_images'][UID][$sid]);
            }

            //文件临时路径
            $temp_path = DIR . "/data/temp";
            //检测目录,不存在则创建!
            if(!Check_Path($temp_path)){
                msg(-1,'创建临时目录失败,请检查权限');
            }
            //移动文件到临时目录
            $tmp_name = UID . "_link_ico_" . uniqid() . ".{$suffix}"; //临时文件名
            if(!move_uploaded_file($_FILES["file"]["tmp_name"],"{$temp_path}/{$tmp_name}")) {
                msg(-1,'上传失败,请检查目录权限');
            }else{
                $_SESSION['upload_images'][UID][$sid] = "{$temp_path}/{$tmp_name}";
                msg(1,'上传成功');
            }
        //编辑链接
        }elseif(!empty($_POST['link_id'])){
            $link = get_db('user_links',['lid','icon'],['uid'=>UID ,'lid'=>$_POST['link_id'] ]);
            if(empty($link)){
                msg(-1,'链接ID不存在!');
            }
            
            //如果存在本地图标,则先删除
            if(!empty($link['icon']) && preg_match("/^\.\/data\/user\/{$u}\/favicon\//",$link['icon']) && is_file($link['icon'])){
                @unlink($link['icon']);
            }
            
            //文件路径
            $path = DIR . "/data/user/{$u}/favicon";
            //检测目录,不存在则创建!
            if(!Check_Path($path)){
                msg(-1,'创建目录失败,请检查权限');
            }
            //移动文件
            if(!move_uploaded_file($_FILES["file"]["tmp_name"],"{$path}/{$link['lid']}.{$suffix}")) {
                msg(-1,'上传失败,请检查目录权限');
            }else{
                //更新记录
                $icon = "./data/user/{$u}/favicon/{$link['lid']}.{$suffix}";
                update_db('user_links',['icon'=>$icon],['uid'=>UID,'lid'=>$_POST['link_id']]);
                msgA(['code'=>1,'msg'=>'上传成功','icon'=>$icon]);
            }
        }else{
            msg(-1,'参数错误');
        }

    //删除图标
    }elseif($_GET['type'] === 'del_images'){
        session_start();
        $sid = $_POST['page_sid'];
        if(!empty($sid)){
            //适用在添加页上传图标未点击添加前又删除图标
            if(!empty($sid) && !empty($_SESSION['upload_images'][UID][$sid]) && is_file($_SESSION['upload_images'][UID][$sid])){
                @unlink($_SESSION['upload_images'][UID][$sid]);
                msg(1,'删除成功');
            }else{
                msg(-1,'您未上传图标');
            }
        }elseif(!empty($_POST['link_id'])){
            $link = get_db('user_links',['lid','icon'],['uid'=>UID ,'lid'=>$_POST['link_id'] ]);
            if(empty($link)){
                msg(-1,'链接ID不存在');
            }elseif(empty($link['icon'])){
                msg(-1,'链接未设置图标');
            }
            //删除图标(如果是本地图标则同时删除文件)
            if(preg_match("/^\.\/data\/user\/{$u}\/favicon\//",$link['icon']) && is_file($link['icon'])){
                @unlink($link['icon']);
            }
            //更新记录
            update_db('user_links',['icon'=>''],['uid'=>UID,'lid'=>$_POST['link_id']],[1,'删除成功']);
        }else{
            msg(-1,'参数错误');
        }
        
    //编辑
    }elseif($_GET['type'] === 'edit' || $_GET['type'] === 'edit2'){
        $lid = intval(@$_POST['lid']);
        $fid = intval(@$_POST['fid']);
        $title = $_POST['title'];
        $url = $_POST['url'];
        $icon =  $_POST['icon'];
        $description = empty($_POST['description']) ? '' : $_POST['description'];
        $property = empty($_POST['property']) ? 0 : 1;
        //检测链接是否合法
        check_link($fid,$title,$url); 
        //检查链接是否已存在
        if(get_db('user_links','lid',['uid'=>UID ,'lid[!]'=>$lid, "url" => $url])){msg(-1,'链接已存在!');}
        //检查链接ID是否存在
        if(!get_db('user_links','lid',['uid'=>UID ,'lid'=>$lid])){msg(-1,'链接ID不存在!');}
        //备用链接检测
        if(!empty($_POST['url_standby'])){
            foreach ($_POST['url_standby'] as $key => $url_standby){
                //尝试匹配Markdown语法的URL,如果没有则认为直接输入
                if(preg_match('/\[(.*?)\]\((.*?)\)/', $url_standby, $match)){
                    check_link($fid,$title,$match[2]);
                }else{
                    check_link($fid,$title,$url_standby); 
                }
            }
        }

        $data = [
            'fid'           =>  $fid,
            'pid'           =>  intval($_POST['pwd_id']??'0'),
            'title'         =>  htmlspecialchars($title,ENT_QUOTES),
            'url'           =>  $url,
            'url_standby'   =>  $_POST['url_standby']??'',
            'description'   =>  htmlspecialchars($description,ENT_QUOTES),
            'up_time'       =>  time(),
            'property'      =>  $property,
            'icon'          =>  $icon
            ];
        
        //扩展字段
        if($GLOBALS['global_config']['link_extend'] == 1 && check_purview('link_extend',1)){
            $list = get_db("user_config","v",["k"=>"s_extend_list","uid"=>UID]);
            if(!empty($list)){
                $list = unserialize($list); 
                $extend = [];
                foreach($list as $field){
                    $name = "_{$field['name']}";
                    if(isset($_POST[$name])){
                        $data['extend'][$name] = $_POST[$name];
                    }
                }
            }
        
        }
        
        //非必须参数,未传递参数时
        if(isset($_POST['icon'])){
            //指定本地图标时检测是否存在
            if(preg_match("/^\.\/data\/user\/{$u}\/favicon\//",$icon)  && !is_file($icon)){
                msg(-1,'指定的本地图标不存在');
            }
            
            //适用原本地图标改成非本地图标时删除本地图标
            $link = get_db('user_links','icon',['uid'=>UID ,'lid'=>$lid]);
            if($icon != $link && !empty($link) && preg_match("/^\.\/data\/user\/{$u}\/favicon\//",$link) && is_file($link)){
                @unlink($link);
            }
        }else{
            unset($data['icon']);
        }

        if(!isset($_POST['pwd_id'])){
            unset($data['pid']);
        }
        //更新数据
        update_db('user_links',$data,['uid'=>UID,'lid'=>intval($_POST['lid']) ]);
        msgA(['code'=>1,'msg'=>'修改成功','icon' => $icon]);
    //删除
    }elseif($_GET['type'] === 'del'){
        //查链接是否存在
        $link = get_db('user_links',['lid','icon'],['uid'=>UID ,'lid'=>intval($_POST['lid']) ]);
        if(empty($link)){
            msg(-1,'链接ID不存在!');
        }
            
        //如果存在本地图标,则先删除
        if(!empty($link['icon']) && preg_match("/^\.\/data\/user\/{$u}\/favicon\//",$link['icon']) && is_file($link['icon'])){
            @unlink($link['icon']);
        }
            
        //删除数据
        delete_db('user_links',['uid'=>UID ,"lid" => intval($_POST['lid'])],[1,'删除成功']);
    
    //排序
    }elseif($_GET['type'] === 'order'){
        foreach ($_POST['data'] as $key ){
            update_db('user_links',['weight'=>$key[1]],['uid'=>UID,'lid'=>$key[0]]);
        }
        msg(1,'保存成功');
        
        msg(-1,'未支持');
    

    //私有切换
    }elseif($_GET['type'] === 'property_sw' ){
        update_db('user_links',['property'=>intval($_POST['property']) ],['uid'=>UID,'lid'=>intval($_POST['lid']) ],[1,'保存成功']);
    
    //状态切换
    }elseif($_GET['type'] === 'status_sw' ){
        update_db('user_links',['status'=>intval($_POST['status']) ],['uid'=>UID,'lid'=>intval($_POST['lid']) ],[1,'保存成功']);
    
    
    //快速编辑
    }elseif($_GET['type'] === 'fast_edit' ){
        $lid = intval($_POST['lid']);
        $field = $_POST['field'];
        $value = $_POST['value'];
        if(empty($lid)){
            msg(-1,'链接不能为空');
        }elseif( $field ==='name' || $field ==='description' || $field ==='title' ){
            $t = time();
            update_db('user_links',[$field => $value,'up_time' =>$t],['uid'=>UID,'lid'=>intval($_POST['lid'])]);
            msgA(['code'=>1,'msg'=>'successful','t'=>$t]);
        }
        msg(-1,'参数错误,请尝试清理浏览器缓存!若不能解决请联系管理员!');
    
    
    //批量删除
    }elseif($_GET['type'] === 'batch_del'){
        //取链接图标,并遍历检测若未本地图标则一起删除
        $datas = select_db('user_links','icon',['uid'=>UID,'lid'=>json_decode($_POST['lid'])]);
        foreach ($datas as $icon ){
            if(!empty($icon) && preg_match("/^\.\/data\/user\/{$u}\/favicon\//",$icon) && is_file($icon)){
                @unlink($icon);
            }
        }
        delete_db('user_links',['uid'=>UID ,"lid" => json_decode($_POST['lid']) ],[1,'删除成功']);
    //批量设为私有
    }elseif($_GET['type'] === 'batch_private'){
        update_db('user_links',['property'=>1],['uid'=>UID ,"lid" => json_decode($_POST['lid']) ],[1,'设置成功']);
    //批量设为公开
    }elseif($_GET['type'] === 'batch_public'){
        update_db('user_links',['property'=>0],['uid'=>UID ,"lid" => json_decode($_POST['lid']) ],[1,'设置成功']);
    //批量设为启用
    }elseif($_GET['type'] === 'batch_start'){
        update_db('user_links',['status'=>1],['uid'=>UID ,"lid" => json_decode($_POST['lid']) ],[1,'设置成功']);
    //批量设为禁用
    }elseif($_GET['type'] === 'batch_disable'){
        update_db('user_links',['status'=>0],['uid'=>UID ,"lid" => json_decode($_POST['lid']) ],[1,'设置成功']);
    //批量修改分类
    }elseif($_GET['type'] === 'batch_category'){
        $fid = intval(@$_POST['fid']);
        if(empty($fid)){msg(-1,'分类ID错误');}
        //加一个查找分类是否存在
        update_db('user_links',['fid'=>$fid],['uid'=>UID ,"lid" => json_decode($_POST['lid']) ],[1,'设置成功']);
    //图标拉取(不完善,未开放使用)
    }elseif($_GET['type'] === 'icon_pull'){
        $link = get_db('user_links','url',['uid'=>UID,'lid'=>$_POST['id']]);
        if(empty($link)){
            msg(-1,'请求的链接id不存在');
        }
        $s_site = unserialize(get_db("user_config","v",["k"=>"s_site","uid"=>UID]));
        if(empty($s_site['link_icon']) || $s_site['link_icon'] == 0){
            msg(-1,'站点设置链接图标不能是离线图标!请先修改配置!');
        }
        $icon = $s_site['link_icon'];
        if($icon ==2){
            function base64($url){
                $urls = parse_url($url);
                $scheme = empty( $urls['scheme'] ) ? 'http://' : $urls['scheme'].'://'; //获取请求协议
                $host = $urls['host']; //获取主机名
                $port = empty( $urls['port'] ) ? '' : ':'.$urls['port']; //获取端口
                $new_url = $scheme.$host.$port;
                return base64_encode($new_url);
            }
            $api = 'https://favicon.rss.ink/v1/'.base64($link);
        }elseif($icon ==4){
            $api = 'https://api.15777.cn/get.php?url='.$link;
        }elseif($icon ==5){
            $api = 'https://favicon.cccyun.cc/'.$link;
        }elseif($icon ==6){
            $api = 'https://api.iowen.cn/favicon/'.parse_url($link)['host'].'.png';
        }elseif($icon ==7){
            $api = 'https://toolb.cn/favicon/'.parse_url($link)['host'];
        }
        if(downFile($api,$_POST['id'].'.ico',DIR ."/data/user/".U."/favicon/")){
            update_db('user_links',['icon'=>"./data/user/".U.'/favicon/'.$_POST['id'].'.ico'],['uid'=>UID ,"lid" => $_POST['id'] ],[1,'获取成功']);
        }
        msg(-1,'获取失败');

    }elseif($_GET['type'] == 'extend_list'){
        if($GLOBALS['global_config']['link_extend'] != 1 ||!check_purview('link_extend',1)){
            msg(-1,'无权限');
        }
        $lists = json_decode($_POST['list'],true);
        
        $weight = [];
        foreach ($lists as  $data ){
            if(empty($data['weight']) || !preg_match('/^\d$/', $data['weight'])){
                msgA( ['code' => -1,'msg' => '序号错误,请输入正整数'] );
            }
            if(empty($data['title']) || check_xss($data['title'])){
                msgA( ['code' => -1,'msg' => '标题不能为空'] );
            }
            if(empty($data['name']) || check_xss($data['name']) || !preg_match('/^[A-Za-z0-9]{3,18}$/',$data['name'])){
                msgA( ['code' => -1,'msg' => '字段名错误,请输入长度3-18的字母/数字'] );
            }
            if(!in_array($data['type'],['text','textarea'])){
                msgA( ['code' => -1,'msg' => '类型错误'] );
            }
        }
        if(is_Duplicated($lists,'weight')){
            msg(-1,'序号不能重复');
        }elseif(is_Duplicated($lists,'title')){
            msg(-1,'标题不能重复');
        }elseif(is_Duplicated($lists,'name')){
            msg(-1,'字段名不能重复');
        }
        
        $datas = [];
        foreach ($lists as $key => $data ){
            array_push($datas,['title'=>$data['title'],'name'=>$data['name'],'weight'=>$data['weight'],'type'=>$data['type'],'default'=> "{$data['default']}"]);
        }
        //根据序号排序
        usort($datas, function($a, $b) {
            return $a['weight'] - $b['weight'];
        });
        write_user_config('s_extend_list',$datas,'config','链接扩展字段');
        msgA( ['code' => 1,'msg' => '保存成功','datas'=>$datas] );
    }

    msg(-1,'操作类型错误');
}


//写安全设置
function write_security_setting(){ 
    global $USER_DB;
    if($USER_DB['Password'] !== Get_MD5_Password($_POST['Password'],$USER_DB['RegTime'])){
        msg(-1,'密码错误,请核对后再试！');
    }elseif( $_POST['KeyClear'] > $_POST['Session']){
        msg(-1,'Key清理时间不能大于登录保持时间');
    }
    
    $datas = [
        'Session'=>['int'=>true,'min'=>0,'max'=>360,'msg'=>'登录保持参数错误'],
        'HttpOnly'=>['int'=>true,'min'=>0,'max'=>1,'msg'=>'HttpOnly参数错误'],
        'KeySecurity'=>['int'=>true,'min'=>0,'max'=>2,'msg'=>'Key安全参数错误'],
        'KeyClear'=>['int'=>true,'min'=>1,'max'=>60,'msg'=>'Key清理参数错误'],
        'api_model'=>['v'=>['security','compatible','compatible+open'],'msg'=>'API模式参数错误'],
        'login_page'=>['v'=>['admin','index','auto'],'msg'=>'登录成功参数错误'],
        'Password2'=>['empty'=>true]
        ];
    
    foreach ($datas as $key => $data){
        if($data['int']){
            $LoginConfig[$key] = ($_POST[$key] >= $data['min'] && $_POST[$key] <= $data['max'])?intval($_POST[$key]):msg(-1,$data['msg']);
        }elseif(isset($data['v'])){
            $LoginConfig[$key] = in_array($_POST[$key],$data['v']) ? $_POST[$key]:msg(-1,$data['msg']);
        }else{
            $LoginConfig[$key] = $data['empty']?$_POST[$key]:(!empty($_POST[$key])?$_POST[$key]:msg(-1,$data['msg']));
        }
    }
    $LoginConfig['Login'] = '0';

    if($_POST['Login'] == '1'){ //更换入口和保存安全配置
        $Login = Get_Exclusive_Login($USER_DB['User']);
        $USER_DB['Login'] = $Login;
        update_db("global_user", ["LoginConfig"=>$LoginConfig,"Login"=> $Login],["ID"=>UID]); 
    }else{ //不更换入口只保存安全配置
        update_db("global_user", ["LoginConfig" =>$LoginConfig], ["ID"=>UID]); 
    }
    $USER_DB['LoginConfig'] = serialize($LoginConfig);

    //删除所有登录信息并生成新的Key
    delete_db("user_login_info", ["uid"=>UID]);
    $Key = Set_key($USER_DB);
    
    //如果设置了二级密码
    if(!empty($LoginConfig['Password2'])){
        setcookie($USER_DB['User'].'_Password2', md5($USER_DB['Password'].$Key.$LoginConfig['Password2']), 0,'','',false,true);
    }
    msg(1,'保存成功');
}

//写收录配置
function write_apply(){ 
    global $global_config;
    if($global_config['apply'] != 1){
        msg(-1,'管理员禁止了此功能!');
    }
    if($_GET['type'] == 'set'){
        $s['apply']   = intval($_POST['apply']);   // 功能选项0.关闭 1.需要审核  2.无需审核
        $s['Notice']  = $_POST['Notice']??'';  // 公告
        if($s['apply'] < 0 || $s['apply'] > 2 ){ 
            msg(-1102,'参数错误!');
        }elseif(strlen($s['Notice']) > 512){
            msg(-1102,'公告长度超限!');
        }
        write_user_config('apply',$s,'config','收录配置');
        msg(1,'保存成功');
    }elseif($_GET['type'] == '2'){ //通过
        $id = intval($_POST['id']); 
        $link =  get_db("user_apply","*",["uid"=>UID,"id"=> $id ]);
        if(empty($id)){
            msg(-1,'id错误');
        }elseif(empty($link['category_id'])){
            msg(-1,'分类id错误');
        }elseif(empty($link['title'])){
            msg(-1,'标题不能为空');
        }elseif(empty($link['url'])){
            msg(-1,'链接不能为空');
        }elseif($link['state'] != 0){
            msg(-1,'此申请信息不是待审核状态!');
        }elseif(!empty(get_db('user_links','*',['uid'=>UID,'url'=>$link['url']]))){
            msg(-1,'链接已存在');
        }
        check_link($link['category_id'],$link['title'],$link['url'],''); //检测链接是否合法
        $lid = get_maxid('link_id');
        $data = [
            'lid'           =>  $lid,
            'uid'           =>  UID,
            'fid'           =>  $link['category_id'],
            'title'         =>  $link['title'],
            'url'           =>  $link['url'],
            'description'   =>  $link['description'],
            'add_time'      =>  time(),
            'icon'          =>  $link['iconurl']
            ];
        insert_db('user_links',$data);//插入链接
        update_db('user_apply',['state'=>1],['uid'=>UID,'id'=>$id]);//更新状态
        msg(1,'操作成功');
    }elseif($_GET['type'] == '3'){ //拒绝
        update_db('user_apply',['state'=>2],['uid'=>UID,'id'=>intval($_POST['id'])],[1,'操作成功']);//更新状态
    }elseif($_GET['type'] == '4'){ //删除
        delete_db('user_apply',['uid'=>UID,'id'=>intval($_POST['id'])],[1,'操作成功']); 
    }elseif($_GET['type'] == 'empty'){ //清空
        delete_db('user_apply',['uid'=>UID],[1,'操作成功']); //删除
    }elseif($_GET['type'] == 'edit'){ //编辑
        $id = intval($_POST['id']); 
        $link =  get_db("user_apply","*",["uid"=>UID,"id"=> $id]);
        if(empty($id)){
            msg(-1,'id错误');
        }elseif(empty($link)){
            msg(-1,'未找到数据');
        }
        $category_id = intval($_POST['edit_category']); 
        $category_name = get_db("user_categorys","name",["uid"=>UID,"cid"=> $category_id ]);
        if(empty($category_name)){
            msg(-1,'未找到分类');
        }

        $data = [
            'category_id'   =>  $category_id,
            'category_name' =>  $category_name,
            'title'         =>  htmlspecialchars($_POST['title'],ENT_QUOTES),
            'url'           =>  $_POST['url'],
            'description'   =>  htmlspecialchars($_POST['description'],ENT_QUOTES),
            'iconurl'       =>  $_POST['iconurl']
            ];
        update_db('user_apply',$data,['uid'=>UID,'id'=>intval($_POST['id'])]);
        msg(1,'修改成功');
    }
    msg(-1,'不支持的操作类型');
}
//读收录列表
function read_apply_list(){
    $page   = empty(intval($_REQUEST['page'])) ? 1 : intval($_REQUEST['page']);
    $limit  = empty(intval($_REQUEST['limit'])) ? 50 : intval($_REQUEST['limit']);
    $offset = ($page - 1) * $limit; //起始行号
    $where["uid"] = UID;

    //统计条数
    $count = count_db('user_apply',$where);
    //权重排序(数字小的排前面)
    $where['ORDER']['id'] = 'DESC';
    //分页
    $where['LIMIT'] = [$offset,$limit];
    //查询
    $datas = select_db('user_apply','*',$where);
    msgA(['code'=>1,'msg'=>'获取成功','count'=>$count,'data'=>$datas]);
}

//写站点设置
function write_site_setting(){ 
    //图标上传
    if(!empty($_FILES["file"])){
        check_purview('Upload_icon',2);
        if ($_FILES["file"]["error"] > 0){
            msg(-1,'文件上传失败,error:'.$_FILES["file"]["error"]);
        }
        //获取文件名后缀
        $suffix = strtolower(end(explode('.',$_FILES["file"]["name"])));
        if(!preg_match('/^(jpg|jpeg|png|bmp|gif|ico|svg)$/',$suffix)){
            @unlink($_FILES["file"]["tmp_name"]);
            msg(-1,'文件上传失败,文件格式不被支持!');
        }
        //文件路径
        $path = 'data/user/'.U.'/favicon/favicon.'.$suffix;
        //检查并创建目录
        if(!Check_Path(dirname($path))){
            msg(-1,'创建目录失败,请检查权限');
        }
        $site = unserialize(get_db('user_config','v',['uid'=>UID,'k'=>'s_site']));
        //存在旧图标则先删除
        if(!empty($site['site_icon_file']) && is_file($site['site_icon_file'])){
            @unlink($site['site_icon_file']);
        }
        //转移临时文件
        if(move_uploaded_file($_FILES["file"]["tmp_name"],$path)) {
            
            $site['site_icon_file'] = 'data/user/'.U.'/favicon/favicon.'.$suffix; //储存路径
            $site['site_icon'] = './'.$site['site_icon_file']; //前端请求路径
            update_db("user_config", ["v" =>$site], ['uid'=>UID,'k'=>'s_site'],[1,'上传成功']); 
        }else{
            msg(-1,'上传失败,请检查目录权限');
        }
    }
    check_purview('site_info',2);
    if(!empty($_POST['custom_header']) && !check_purview('header',1)){
        msg(-1,'您所在的用户组无法使用自定义头部代码!');
    }
    if(!empty($_POST['custom_footer']) && !check_purview('footer',1)){
        msg(-1,'您所在的用户组无法使用自定义底部代码!');
    }
    $datas = [
        'title'=>['empty'=>false,'msg'=>'主标题不能为空'],
        'subtitle'=>['empty'=>true],
        'logo'=>['empty'=>true],
        'keywords'=>['empty'=>true],
        'description'=>['empty'=>true],
        'link_model'=>['v'=>['direct','Privacy','Privacy_js','Privacy_meta','301','302','Transition'],'msg'=>'链接模式参数错误'],
        'link_icon'=>['int'=>true,'min'=>0,'max'=>10,'msg'=>'链接图标参数错误'],
        'site_icon'=>['empty'=>true],
        'top_link'=>['int'=>true,'min'=>0,'max'=>20,'msg'=>'热门链接参数错误'],
        'new_link'=>['int'=>true,'min'=>0,'max'=>20,'msg'=>'最新链接参数错误'],
        'max_link'=>['int'=>true,'min'=>0,'max'=>100,'msg'=>'输出上限参数错误'],
        'custom_header'=>['empty'=>true],
        'custom_footer'=>['empty'=>true]
        ];
    $s_site = unserialize(get_db('user_config','v',['uid'=>UID,'k'=>'s_site']));
    foreach ($datas as $key => $data){
        if($data['int']){
            $s_site[$key] = ($_POST[$key] >= $data['min'] && $_POST[$key] <= $data['max'])?intval($_POST[$key]):msg(-1,$data['msg']);
        }elseif(isset($data['v'])){
            $s_site[$key] = in_array($_POST[$key],$data['v']) ? $_POST[$key]:msg(-1,$data['msg']);
        }else{
            $s_site[$key] = $data['empty']?$_POST[$key]:(!empty($_POST[$key])?$_POST[$key]:msg(-1,$data['msg']));
        }
    }

    
    $site = unserialize(get_db('user_config','v',['uid'=>UID,'k'=>'s_site']));
    //留空时尝试删除图标
    if(empty($s_site['site_icon']) && !empty($site['site_icon_file']) && is_file($site['site_icon_file'])){
        @unlink($site['site_icon_file']);
        $s_site['site_icon_file'] = '';
    }
    update_db("user_config",["v"=>$s_site],["k"=>'s_site',"uid"=>UID],[1,'保存成功']);
}
//写过渡页配置
function write_transit_setting(){ 
    $datas = [
        'visitor_stay_time'=>['int'=>true,'min'=>0,'max'=>60,'msg'=>'访客停留时间范围0-60'],
        'admin_stay_time'=>['int'=>true,'min'=>0,'max'=>60,'msg'=>'管理员停留时间范围0-60']
        ];
    
    foreach ($datas as $key => $data){
        if($data['int']){
            $s[$key] = ($_POST[$key] >= $data['min'] && $_POST[$key] <= $data['max'])?intval($_POST[$key]):msg(-1,$data['msg']);
        }elseif(isset($data['v'])){
            $s[$key] = in_array($_POST[$key],$data['v']) ? $_POST[$key]:msg(-1,$data['msg']);
        }else{
            $s[$key] = $data['empty']?$_POST[$key]:(!empty($_POST[$key])?$_POST[$key]:msg(-1,$data['msg']));
        }
    }
    write_user_config('s_transition_page',$s,'config','过渡页配置');
    msg(1,"保存成功！");
}


//修改密码
function write_user_password(){
    global $USER_DB;
    $NewPassword = Get_MD5_Password($_POST['NewPassword'],$USER_DB['RegTime']);
    if($USER_DB['Password'] !== Get_MD5_Password($_POST['Password'],$USER_DB['RegTime'])){
        msg(-1102,'密码错误,请核对后再试！');
    }elseif(!empty($_POST['Password'])&&strlen($_POST['Password'])!=32){
        msg(-1103,'密码异常,正常情况是32位的md5！');
    }elseif($USER_DB['Password'] === $NewPassword ){
        msg(-1103,'新密码不能和原密码一样!');
    }
    
    //修改密码
    update_db("global_user", ["Password" => $NewPassword],["User" => $USER_DB['User']]);
    $USER_DB['Password'] = $NewPassword;
    //删除所有登录记录
    delete_db( "user_login_info", ["uid"=>UID] );
    Set_key($USER_DB);//生成新的Key
    msg(1,'修改成功');
}

//查Token
function read_token(){
    global $USER_DB;
    if($USER_DB['Password'] !== Get_MD5_Password($_POST['Password'],$USER_DB['RegTime'])){
        msg(-1102,'密码错误,请核对后再试！');
    }elseif(empty($USER_DB['Token'])){
        msg(-1,'您还未设置Token,如需使用请点击更换Token');
    }
    msgA(['code'=>1,'msg'=>'获取成功','Token'=> $USER_DB['Token'] ,'SecretKey'=>$USER_DB['SecretKey']]);
}

//更换或删除Token
function write_token(){
    global $USER_DB;
    if($USER_DB['Password'] !== Get_MD5_Password($_POST['Password'],$USER_DB['RegTime'])){
        msg(-1102,'密码错误,请核对后再试！');
    }elseif($_POST['type'] === 'delete' && empty($USER_DB['Token'])){
        msg(1,'您还未设置Token');
    }
    
    if($_POST['type'] === 'delete'){
        update_db("global_user", ["SecretKey"=>"","Token" => ""],["User" => $USER_DB['User']]);
        msgA(['code'=>1,'msg'=>'您的Token已清除','Token'=>'','SecretKey'=>'']);
    }elseif($_POST['type'] === 'replace'){
        $SecretKey = md5(uniqid(mt_rand(), true));
        $Token = md5(U.$SecretKey);
        if(!empty(get_db('global_user','User',["Token" => $Token]))){
            msg(-1,'系统错误,请重试');
        }
        update_db("global_user", ["SecretKey"=>$SecretKey,"Token" => $Token],["User" => $USER_DB['User']]);
        msgA(['code'=>1,'msg'=>'获取成功','Token'=>$Token,'SecretKey'=>$SecretKey]);
        msg(1,$Token);
    }else{
        msg(-1,'请求参数有误');
    }
}

//读加密分组列表
function read_pwd_group_list(){
    $page   = empty(intval($_REQUEST['page'])) ? 1 : intval($_REQUEST['page']);
    $limit  = empty(intval($_REQUEST['limit'])) ? 50 : intval($_REQUEST['limit']);
    $offset = ($page - 1) * $limit; //起始行号
    $where["uid"] = UID;

    //统计条数
    $count = count_db('user_pwd_group',$where);
    //权重排序(数字小的排前面)
    $where['ORDER']['pid'] = 'ASC';
    //分页
    $where['LIMIT'] = [$offset,$limit];
    //查询
    $datas = select_db('user_pwd_group',['pid','name','password','description'],$where);
    msgA(['code'=>1,'msg'=>'获取成功','count'=>$count,'data'=>$datas]);
}
//写加密分组 考虑要不要限制特殊字符
function write_pwd_group(){
    check_purview('link_pwd',2);
    if($_GET['type'] === 'del'){
        //判断有没有被使用
        if(!empty(get_db('user_links','id',['uid'=>UID,'pid'=>intval($_POST['pid'])]))){
            msg(-1,'正在被链接使用,无法删除!');
        }else if(!empty(get_db('user_categorys','id',['uid'=>UID,'pid'=>intval($_POST['pid'])]))){
            msg(-1,'正在被分类使用,无法删除!');
        }
        
        delete_db('user_pwd_group',['uid'=>UID,'pid'=>intval($_POST['pid'])],[1,'删除成功']);
    }elseif($_GET['type'] == 'add'){
        //$pid = intval(max_db('user_pwd_group','pid',['uid'=>UID])) +1; 
        $pid = get_maxid('pwd_group_id');
        insert_db('user_pwd_group',['name' => $_POST['name'],'password' =>$_POST['password'],'description'=>$_POST['description'],'uid'=>UID,'pid'=>$pid],[1,'操作成功']);
    }elseif($_GET['type'] === 'edit'){
        update_db('user_pwd_group',['name' => $_POST['name'],'password' =>$_POST['password'],'description'=>$_POST['description']],['uid'=>UID,'pid'=>intval($_POST['pid'])],[1,'操作成功']);
    }
    msgA(['code' => 1 ,'msg'=> '1111']);
}


//检测链接是否有效
function other_testing_link(){
    global $global_config;
    if ( $global_config['offline'] == '1'){ msg(-1,"离线模式无法使用此功能"); }
    $code = get_http_code($_POST['url']);
    msgA(['code' => 0 ,'StatusCode'=> $code]);
}

//主题下载/更新/删除
function write_theme(){
    global $global_config;
    $fn = $_POST['fn'];if($_GET['type'] != 'config' && !in_array($fn,['home','login','transit','register'])){msg(-1,'fn参数错误');}
    if($_GET['type'] == 'download'){
        is_root();
        if($global_config['offline']){msg(-1,"离线模式禁止下载主题!");} //离线模式
        if(!is_subscribe('bool')){msg(-1,"未检测到有效授权,无法使用该功能!");}
        $dir = $_POST['dir'];
        $name = $_POST['name'];
        if(preg_match('/^v.+-(\d{8})$/i',SysVer,$matches)){
            $sysver = intval( $matches[1] );
        }else{
            msg(-1,"获取程序版本异常");
        }
        //从数据库查找主题信息
        $template = get_db('global_config','v',['k'=> 'theme_'.$fn.'_cache']);
        if(empty($template)){
            msg(-1,'-1,未找到数据');
        }else{
            $data = json_decode($template, true); //转为数组
            foreach($data["data"] as $key){
                if( $key['dir'] === $dir && $sysver >= intval($key["low"])  && $sysver <= intval($key["high"])){
                    $file = $key['dir'].".tar.gz";
                    $filePath = DIR."/data/temp/{$file}";
                    break; //找到跳出
                }
            }
            if(empty($file)){
                msg(-1,'-2,未找到数据');
            }
        }
        
        //下载主题包
        if (!is_dir('./data/temp')) mkdir('./data/temp',0755,true) or msg(-1,'下载失败,创建临时[/data/temp]目录失败');
        $data = $key;
        foreach($data['url'] as $url){
            if(downFile( $url , $file , DIR.'/data/temp/')){
                $file_md5 = md5_file($filePath);
                if($file_md5 === $data['md5']){
                    $downok = true;
                    break;//下载成功,跳出循环!
                }else{
                    unlink($filePath);
                }
            }
        }
        //判断下载结果
        if(!$downok || !file_exists($filePath)){
            msg(-1,'-1,下载失败');
        }elseif($file_md5 != $data['md5']){
            msgA(['code'=>-1,'msg'=> '效验压缩包异常','Correct_md5'=> $data['md5'],'file_md5'=>$file_md5]);
        }
        //解压主题包
        try {
            $phar = new PharData($filePath);
            $phar->extractTo(DIR.'/templates/'.$fn, null, true); //路径 要解压的文件 是否覆盖
            unlink($filePath);//删除文件
        } catch (Exception $e) {
            msg(-1,'解压主题包失败');
        }
        //检查结果并返回
        if(file_exists(DIR."/templates/$fn/".$data['dir']."/info.json")){
            msgA(['code'=>1,'msg'=> '下载成功']);
        }else{
            msgA(['code'=>-1,'msg'=> '解压后未找到主题信息','url'=> $url,'file_md5'=>$file_md5]);
        }
        
    //删除主题
    }elseif($_GET['type'] == 'del'){
        is_root();
        $name = $_POST['dir'];
        if ( !preg_match("/^[a-zA-Z0-9_-]{1,64}$/",$name) ) { 
            msg(-1,"主题名称不合法！");
        }elseif( $name === 'default') { 
            msg(-1,"默认主题不允许删除！");
        }elseif(!is_dir(DIR."/templates/$fn/".$name)){
            msg(-1,"主题不存在！");
        }
        deldir(DIR."/templates/$fn/".$name);
        if( is_dir(DIR."/templates/$fn/".$name) ) {
            msg(-1,"删除失败，可能是权限不足！");
        }else{
            msg(1,"主题已删除！");
        }
    //使用主题
    }elseif($_GET['type'] == 'set'){
        $type = $_POST['type'];
        $name = $_POST['name'];
        //如果是注册模板则必须是root权限
        if($fn == 'register'){is_root();}
        //相关检测
        if ( !preg_match("/^[a-zA-Z0-9_-]{1,64}$/",$name) ) { 
            msg(-1,"主题名称不合法！");
        }elseif(!is_dir(DIR."/templates/$fn/".$name)){
            msg(-1,'主题不存在');
        }
        //读取用户模板配置
        require DIR."/system/templates.php";
        //判断设置的类型
        if($fn == 'home'){
            if( $type == 'PC/Pad'){
                $s_templates['home_pc'] = $name;
                $s_templates['home_pad'] = $name;
            }elseif($type == 'PC'){
                $s_templates['home_pc'] = $name;
            }elseif($type == 'Pad'){
                $s_templates['home_pad'] = $name;
            }else{
                msg(-1,'参数错误');
            }
        }elseif($fn == 'login'){
            $s_templates['login'] = $name;
        }elseif($fn == 'transit'){
            $s_templates['transit'] = $name;
        }elseif($fn == 'register'){
            $global_templates['register'] = $name;
            update_db('global_config',['v'=>$global_templates],['k'=>'s_templates'],[1,'注册模板设置成功']);
        }
        //更新数据
        update_db('user_config',['v'=>$s_templates],['uid'=>UID,'k'=>'s_templates'],[1,'设置成功']);
        
    //配置主题信息
    }elseif($_GET['type'] == 'config'){
        if(!check_purview('theme_set',1)){
            msg(-1,"无权限！");
        }
        if(empty($_POST)){
            msg(-1,"POST请求数据不能为空！");
        }
        //20230420,修复同名窜数据的问题!由于保存主题不提交模板类型,只能从来路中提取
        parse_str(parse_url($_SERVER['HTTP_REFERER'])['query'],$GET);
        if(empty($GET['fn']) && empty($_GET['template_type']) ){
            msg(-1,"获取模板类型错误");
        }
        $fn = empty($GET['fn']) ? $_GET['template_type'] : $GET['fn'];
        if(!in_array($fn,['home','login','register','transit'])){
            msg(-1,"参数错误");
        }
        //0420 END
        write_user_config($_GET['t'],$_POST,'theme_' . $fn,'主题配置');
        msg(1,"保存成功！");
    }
}


//读登录信息
function read_login_info(){
    $page   = empty(intval($_REQUEST['page'])) ? 1 : intval($_REQUEST['page']);
    $limit  = empty(intval($_REQUEST['limit'])) ? 50 : intval($_REQUEST['limit']);
    $offset = ($page - 1) * $limit; //起始行号
    $where["uid"] = UID;
    $where["cookie_key[!]"] = md5($_COOKIE[U.'_key']);
    //统计条数
    $count = count_db('user_login_info',$where);
    //权重排序(数字小的排前面)
    $where['ORDER']['id'] = 'DESC';
    //分页
    $where['LIMIT'] = [$offset,$limit];
    //查询
    $datas = select_db('user_login_info',['id','ip','ua','login_time','last_time','expire_time'],$where);
    msgA(['code'=>1,'msg'=>'获取成功','count'=>$count,'data'=>$datas]);
}

//写登录信息
function write_login_info(){
    if($_GET['type'] == 'out'){
        delete_db('user_login_info',['uid'=>UID,'id'=>intval($_POST['id'])],[1,'删除成功']);
    }
}

//写分享
function write_share(){
    //规划添加和编辑共享
    if($_GET['type'] == 'save'){
        if($_POST['type'] == '1'){
            $data = $_POST['category_data'];
            $type = 1;
        }elseif($_POST['type'] == '2'){
            $data = $_POST['link_data'];
            $type = 2;
        }else{
            msg(-1,'类型参数错误');
        }
        
        if(empty($_POST['name'])){
            msg(-1,'分类名称不能为空');
        }elseif(empty($data)){
            msg(-1,'分享内容不能为空');
        }
        //到期时间检测
        if( !empty($_POST['expire']) &&  !preg_match('/^\d{4}-\d{2}-\d{2} \d{2}:\d{2}:\d{2}$/i',$_POST['expire'])){
            msg(-1,'到期时间格式错误');
        }
        $current_time = time();
        $d = [
            'uid'  => UID,
            'type' => $type,
            'name' => $_POST['name'],
            'pwd'  => $_POST['pwd'],
            'data' => $data,
            'pv'   => empty($_POST['pv']) ? 0 : 1,
            'expire_time'    => empty($_POST['expire'])?9999999999:strtotime($_POST['expire']),
            'description' => $_POST['description'],
            'up_time'   => $current_time
            ];
        if(empty($_POST['sid'])){
            //添加
            $d['add_time'] = $current_time;
            $d['views'] = 0;
            $d['sid'] = hash("crc32b",uniqid(Get_Rand_Str()));
            insert_db('user_share',$d,[1,'操作成功']);
        }else{
            //修改
            update_db('user_share',$d,['uid'=>UID,'sid'=>$_POST['sid']],[1,'操作成功']);
        }
        msg(-1,'1111');
        
    //删除
    }elseif($_GET['type'] == 'del'){
        delete_db('user_share',['uid'=>UID ,"sid" => json_decode($_POST['sid']) ],[1,'删除成功']);
    }
}

//读分享
function read_share(){
    //分类列表
    if($_GET['type'] == 'categorys'){
        $where['uid'] = UID;
        $where['fid'] = 0;
        $where['ORDER']['weight'] = 'ASC';
        $where['name[~]'] = $_GET['keyword'];
        $categorys = [];
        $category_parent = select_db('user_categorys',['cid(id)','fid','name'],$where);
        foreach ($category_parent as $category) {
            $where['fid'] = $category['id'];
            array_push($categorys,$category);
            $category_subs = select_db('user_categorys',['cid(id)','fid','name'],$where);
            $categorys = array_merge ($categorys,$category_subs);
        }
        msgA(['code'=>1,'msg'=>'获取成功','count'=>count($categorys),'data'=>$categorys ]);
    
    //链接列表
    }elseif($_GET['type'] == 'links'){
        $query  = $_GET['keyword'];
        $page   = empty(intval($_GET['page'])) ? 1 : intval($_GET['page']);
        $limit  = empty(intval($_GET['limit'])) ? 50 : intval($_GET['limit']);
        $offset = ($page - 1) * $limit; //起始行号
        $where = [];
        $where = ["uid"=> UID];
    
        //关键字筛选
        if(!empty($query)){
            $where['AND']['OR'] = ["title[~]" => $query,"url[~]" => $query,"description[~]" => $query];
        }
        //var_dump([$offset,$limit],$where);
        $count = count_db('user_links',$where);
        $where['ORDER']['lid'] = 'DESC';
        $where['ORDER']['weight'] = 'ASC';
        $where['LIMIT'] = [$offset,$limit];
        $datas = select_db('user_links',["lid(id)","title(name)"],$where);
        //var_dump($db->last());
        msgA(['code'=>1,'msg'=>'获取成功','count'=>$count,'data'=>$datas]);
    
    //分享列表
    }elseif($_GET['type'] == 'share_list'){
        $keyword  = $_POST['keyword'];
        $status = intval(@$_POST['status']); //状态
        $type   = intval(@$_POST['type']); //类型
        $page   = empty(intval($_REQUEST['page'])) ? 1 : intval($_REQUEST['page']);
        $limit  = empty(intval($_REQUEST['limit'])) ? 50 : intval($_REQUEST['limit']);
        $offset = ($page - 1) * $limit; //起始行号
        $where = ["uid"=> UID];

        if($status == 1){
            $where['AND']["expire_time[>]"] = time();
        }elseif($status == 2){
            $where['AND']['expire_time[<]'] = time();
        }
        
        if($type == 1){
            $where['AND']['type'] = 1;
        }elseif($type == 2){
            $where['AND']['type'] = 2;
        }
        
        //关键字筛选
        if(!empty($keyword)){
            $where['AND']['OR']["sid"] = $keyword;
            $where['AND']['OR']["name[~]"] = $keyword;
            $where['AND']['OR']["description[~]"] = $keyword;
        }
        //var_dump($where);
        $count = count_db('user_share',$where);
        $where['ORDER']['id'] = 'DESC';
        $where['LIMIT'] = [$offset,$limit];
        $datas = select_db('user_share','*',$where);
        msgA(['code'=>1,'msg'=>'获取成功','count'=>$count,'data'=>$datas]);
    }
}

//导出数据
function read_data_control(){
    require DIR . '/system/UseFew/export_data.php';
    exit;
}
//链接导入/清空
function write_data_control(){
    require DIR . '/system/UseFew/Import_data.php';
    exit;
}

//读数据(后台首页调用读取实时统计)
function read_data(){
    global $USER_DB;
    //指定类型限制仅root账号可用!
    if(in_array($USER_DB['UserGroup'] != 'root' && $_GET['type'],['diagnostic_log','phpinfo'])){
        msg(-1,'无权限');
    }
    
    //概要数据统计
    if($_GET['type'] == 'home'){
        $category_count = count_db('user_categorys',['uid'=>UID])??0;
        $link_count = count_db('user_links',['uid'=>UID])??0;
        $index_count = get_db('user_count','v',['uid'=>UID,'k'=>date('Ym'),'t'=>'index_Ym'])??0;
        $click_count = get_db('user_count','v',['uid'=>UID,'k'=>date('Ym'),'t'=>'click_Ym'])??0;
        msgA( ['code'=>1,'data'=>[$category_count,$link_count,$index_count,$click_count] ]);
        
    //一键诊断
    }elseif($_GET['type'] == 'diagnostic_log'){
        clearstatcache(); //清除缓存
        $log='';
        $log .= "服务器时间：" . date("Y-m-d H:i:s") ."\n"; 
        $log .= "系统信息：" . php_uname('s').','.php_uname('r') ."\n";
        $log .= "当前版本：" . SysVer . "\n";
        if(!empty(get_cfg_var('docker_ver'))){
            $log .= "Docker镜像版本: " .get_cfg_var('docker_ver')."\n";
        }
        //检查PHP版本
        $php_version = floatval(PHP_VERSION);
        $log .= "PHP版本：{$php_version}\n";
        $log .= "Web版本：{$_SERVER['SERVER_SOFTWARE']}\n";
        if( ( $php_version < 7.3 ) || ( $php_version > 8.1 ) ) {
            $log .= "PHP版本：不满足要求,需要7.3 <= PHP <= 8.1 )\n";
        }
        //获取加载的模块
        $ext = get_loaded_extensions(); 
        global $db_config,$db;
        $log .= "数据储存：{$db_config['type']}\n";
        
        if($db_config['type'] == 'sqlite'){
            $log .= "SQLite：".(is_writable($db_config['path'])?'数据库读写正常':'数据库只读(请将权限设为755)')."\n";
        }elseif($db_config['type'] == 'mysql'){
            $log .= "MySQL：".$db->info ()['version']."\n";
            
        }
        
        $path = './data/test_'.time().'.txt';
        if(file_put_contents($path, '测试文本,可以删除!由一键诊断生成!')){
            if(unlink($path)){
                $log .= "data目录：正常\n";
            }else{
                $log .= "data目录：创建文件成功,删除文件失败\n";
            }
        }else{
            $log .= "data目录：异常,请检查权限!\n";
        }
        if(function_exists("opcache_reset")){
            $log .=  "opcache: 存在\n";
        }
        if(!class_exists('SQLite3')){
            $log .=  "SQLite3: 不支持\n";
        }
        $log .= "脚本权限:" . get_current_user()."/".substr(sprintf("%o",fileperms("index.php")),-4)."\n";
        
        $log .= "PHP配置: " . 
            (ini_get('file_uploads') == 1 ? '允许上传':'禁止上传文件') .
            " ,最大文件(upload_max_filesize) > " . ini_get('upload_max_filesize').
            " ,POST数据(post_max_size) > " . ini_get('post_max_size'). 
            " ,内存限制(memory_limit) > " . ini_get('memory_limit').
            " ,执行超时(max_execution_time) > " . ini_get('max_execution_time').
            "\n";
        
        $log .= in_array("pdo_sqlite",$ext) ? "" : "PDO_Sqlite：不支持 (导入db3)\n";
        $log .= in_array("curl",$ext) ? "" : "curl：不支持 (链接识别/在线更新/主题下载/订阅等)\n";
        $log .= in_array("mbstring",$ext) ? "" : "mbstring：不支持 (链接识别)\n";
        $log .= in_array("Phar",$ext) ? "" : "Phar：不支持 (在线更新/主题下载)\n";
        $log .= in_array("hash",$ext) ? "" : "hash：不支持 (书签分享/生成注册码)\n";
        $log .= in_array("session",$ext) ? "" : "session：不支持 (影响较大)\n";
        $log .= "可用模块：".implode("&#12288;",$ext)."\n";
        $updatadb_logs = select_db('updatadb_logs','file_name',['file_name[!]'=>'install.sql']);
        $log .= "数据库更新记录:".(empty($updatadb_logs)?'无':"\n".implode("\n",$updatadb_logs))."\n";
        msg(1,$log);
    //输出phpinfo信息
    }elseif($_GET['type'] == 'phpinfo'){
        phpinfo();
    }
}

//备份/回滚/删除等
function other_local_backup(){
    require DIR . '/system/UseFew/local_backup.php';
    exit;
}
//获取链接信息
function other_get_link_info(){
    global $global_config;
    if ( $global_config['offline'] == '1'){ msg(-1,"离线模式无法使用此功能"); }
    $url = @$_POST['url']; //获取URL
    //检查链接是否合法
    if( empty($url) ) {
        msg(-1010,'URL不能为空!');
    }elseif(!preg_match("/^(http:\/\/|https:\/\/).*/",$url)){
        msg(-1010,'只支持识别http/https协议的链接!');
    }elseif( !filter_var($url, FILTER_VALIDATE_URL) ) {
         msg(-1010,'URL无效!');
    }
    //获取网站标题 (HTML/JS跳转无法识别)
    $c = curl_init(); 
    curl_setopt($c, CURLOPT_URL, $url); 
    curl_setopt($c, CURLOPT_RETURNTRANSFER, 1); 
    curl_setopt($c, CURLOPT_SSL_VERIFYPEER, false);
    curl_setopt($c, CURLOPT_SSL_VERIFYHOST, false);
    curl_setopt($c, CURLOPT_FOLLOWLOCATION, 1); //允许重定向,解决http跳转到https无法识别
    curl_setopt($c , CURLOPT_TIMEOUT, 5); //设置超时时间
    $data = curl_exec($c); 
    curl_close($c); 

    require (DIR .'/system/get_page_info.php');
    $info = get_page_info($data);
    $link['title'] =  $info['site_title'];
    $link['description'] = $info['site_description'];
    msgA(['code'=>1,'data'=>$link]);
}