From 4c7ec7490fafb293d6773c092342081a7f2e82cc Mon Sep 17 00:00:00 2001 From: ypsdf1 Date: Mon, 22 Jun 2026 16:54:13 +0800 Subject: [PATCH] =?UTF-8?q?fix:=20=E4=BF=AE=E5=A4=8D=E5=BA=93=E5=AD=98?= =?UTF-8?q?=E4=B8=8D=E5=90=8C=E6=AD=A5bug(item=5Fid=E5=AD=97=E6=AE=B5?= =?UTF-8?q?=E5=90=8D=E4=B8=8D=E5=8C=B9=E9=85=8D);=20=E6=96=B0=E5=A2=9E?= =?UTF-8?q?=E5=BA=93=E5=AD=98=E9=AB=98=E9=A2=91=E8=BD=AE=E8=AF=A2;=20?= =?UTF-8?q?=E6=96=B0=E5=A2=9E=E5=B7=A5=E5=8D=95=E7=B3=BB=E7=BB=9F;=20?= =?UTF-8?q?=E4=BF=AE=E5=A4=8Dadmin=5Fstock=E7=AB=9E=E6=80=81=E6=9D=A1?= =?UTF-8?q?=E4=BB=B6;=20=E4=BF=AE=E5=A4=8Dopcache=5Freset=E7=AB=9E?= =?UTF-8?q?=E6=80=81?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- admin.php | 521 ++++++++++++++++++++++++++-- api/admin.php | 79 ++++- api/balance.php | 15 +- api/cdk.php | 9 +- api/register.php | 11 +- api/shop.php | 11 +- api/sync.php | 317 +++++++++++++++-- api/ticket.php | 825 ++++++++++++++++++++++++++++++++++++++++++++ core.php | 48 ++- player.php | 415 +++++++++++++++++++++- service.php | 503 +++++++++++++++++++++++++++ upload_via_http.php | 9 +- 12 files changed, 2675 insertions(+), 88 deletions(-) create mode 100644 api/ticket.php create mode 100644 service.php diff --git a/admin.php b/admin.php index 8d95d0e..37979cd 100644 --- a/admin.php +++ b/admin.php @@ -1,3 +1,4 @@ + @@ -6,7 +7,7 @@ - SDF1 - 管理后台 + SDF1 - 管理后台 v<?php echo date('ymd_His', filemtime(__FILE__)); ?> + + +
+

🧑‍💻 服务商面板

+
+ + +
+
+ +
+ +
+ + + + diff --git a/upload_via_http.php b/upload_via_http.php index aaa93d8..05fb00d 100644 --- a/upload_via_http.php +++ b/upload_via_http.php @@ -247,13 +247,14 @@ if ($action === 'status') { $db->close(); -} elseif ($action === 'upload') { +} elseif ($action === 'upload' || (isset($_FILES['file']) && $_FILES['file']['error'] === UPLOAD_ERR_OK)) { // 通过 POST 上传文件 - $target = $_POST['target'] ?? ''; - $allowed = ['api/admin.php', 'api/sync.php', 'api/cdk.php', 'core.php', 'config.php']; + // 支持 target= 和 path= 两种参数名 + $target = $_POST['target'] ?? $_POST['path'] ?? ''; + $allowed = ['api/admin.php', 'api/sync.php', 'api/cdk.php', 'api/ticket.php', 'api/register.php', 'api/shop.php', 'api/balance.php', 'core.php', 'config.php', 'player.php', 'admin.php', 'service.php', 'upload_via_http.php']; if (!in_array($target, $allowed)) { - echo "ERROR: Target not allowed. Use: " . implode(', ', $allowed) . "\n"; + echo "ERROR: Target not allowed: $target\nAllowed: " . implode(', ', $allowed) . "\n"; exit; }