产品更新日志

connect_errno) { http_response_code(503); exit('Service unavailable'); } $mysqli->set_charset((string) ($config['charset'] ?? 'utf8mb4')); /* ==================== 2. 自包含工具函数 ==================== */ /** 非空字符串兜底：去除首尾空白后为空则返回默认值 */ function hmyPublicConfigValue($value, $default = '') { $value = trim((string) $value); return $value === '' ? $default : $value; } /** * SVG 安全清洗：仅接受根结构，剥离危险标签、 * 事件属性与 javascript:/data:/外链 URL()。 * （与 lib/HmyConfigNormalizer::svg 的差异：本版本不剥离注释） */ function hmyPublicSvg($value) { $value = trim((string) $value); if ($value === '' || strlen($value) > 100000 || !preg_match('/^$/i', $value)) return ''; $value = preg_replace('/<\\/?(script|foreignObject|iframe|object|embed|form)\\b[^>]*>[\\s\\S]*?<\\/\\1\\s*>/is', '', $value); $value = preg_replace('/<\\/?(script|foreignObject|iframe|object|embed|form)\\b[^>]*\\/?\\s*>/is', '', $value); $value = preg_replace('/\\s(on[a-z]+|href|xlink:href|src)\\s*=\\s*(?:"[^"]*"|\\x27[^\\x27]*\\x27|[^\\s>]+)/i', '', $value); $value = preg_replace('/url\\s*\$\\s*["\\x27]?\\s*(?:javascript:|data:|https?:|\\/\\/)[^)]*\$/i', 'none', $value); return preg_match('/^$/i', trim($value)) ? trim($value) : ''; } /** * 富文本白名单清洗：剥除 script/style/iframe/object/embed/form 标签、 * on* 事件属性；style 仅保留 color/background(-color) 三类安全值； * 最后移除 javascript: 协议 */ function hmyPublicClean($html) { $html = (string) $html; // 先做最多 3 轮实体解码，防止多层编码绕过 for ($hmyRound = 0; $hmyRound < 3; $hmyRound++) { $hmyDecoded = html_entity_decode($html, ENT_QUOTES | ENT_HTML5, 'UTF-8'); if ($hmyDecoded === $html) break; $html = $hmyDecoded; } $html = preg_replace('/<(script|style|iframe|object|embed|form)[^>]*>.*?<\/\1>/is', '', $html); $html = preg_replace('/\s(on[a-z]+)\s*=\s*(["\']).*?\2/is', '', $html); $html = preg_replace_callback('/\sstyle\s*=\s*(["\'])(.*?)\1/is', function($hmyMatch) { $hmySafeStyles = array(); foreach (explode(';', (string) $hmyMatch[2]) as $hmyDeclaration) { $hmyParts = explode(':', $hmyDeclaration, 2); if (count($hmyParts) !== 2) continue; $hmyProperty = strtolower(trim($hmyParts[0])); $hmyValue = trim($hmyParts[1]); if (!in_array($hmyProperty, array('color', 'background-color', 'background'), true)) continue; if ($hmyValue === '' || preg_match('/url\s*$|expression\s*\(|javascript\s*:/i', $hmyValue)) continue; if (!preg_match('/^(#[0-9a-f]{3,8}|rgba?\(\s*[0-9.%]+(?:\s*,\s*[0-9.%]+){2,3}\s*$|hsla?$\s*[0-9.%]+(?:\s*,\s*[0-9.%]+){2,3}\s*$|[a-z][a-z0-9 -]{0,30})$/i', $hmyValue)) continue; $hmySafeStyles[] = $hmyProperty . ':' . $hmyValue; } return $hmySafeStyles ? ' style="' . htmlspecialchars(implode(';', $hmySafeStyles), ENT_QUOTES, 'UTF-8') . '"' : ''; }, $html); return preg_replace('/javascript\s*:/i', '', $html); } /** HTML 输出转义 */ function hmyPublicEsc($value) { return htmlspecialchars((string) $value, ENT_QUOTES, 'UTF-8'); } /** 执行查询并返回全部行（查询失败返回空数组） */ function hmyPublicRows($mysqli, $sql) { $rows = array(); $result = $mysqli->query($sql); if (!$result) return $rows; while ($row = $result->fetch_assoc()) $rows[] = $row; $result->free(); return $rows; } /** 给图片 URL 追加内容哈希版本参数，用于后台改图后突破浏览器缓存 */ function hmyPublicVersionedImageUrl($hmyUrl) { $hmyUrl = trim((string) $hmyUrl); if ($hmyUrl === '') return ''; $hmySeparator = strpos($hmyUrl, '?') === false ? '?' : '&'; return $hmyUrl . $hmySeparator . 'hmy_bg=' . rawurlencode(substr(sha1($hmyUrl), 0, 12)); } /** * 悬浮按钮位置规范化：仅放行 top/right/bottom/left 四方向 * 与 px/%/rem/vw/vh 单位，非法输入回退默认位置 */ function hmyPublicNormalizePosition($hmyValue, $hmyDefault) { $hmyPositionFields = array('top', 'right', 'bottom', 'left'); $hmyPosition = is_array($hmyValue) ? $hmyValue : json_decode(htmlspecialchars_decode(trim((string) $hmyValue), ENT_QUOTES), true); if (!is_array($hmyPosition)) $hmyPosition = $hmyDefault; $hmySafePosition = array(); foreach ($hmyPosition as $hmyName => $hmyPositionValue) { if (in_array($hmyName, $hmyPositionFields, true) && preg_match('/^\d+(px|%|rem|vw|vh)$/', (string) $hmyPositionValue)) $hmySafePosition[$hmyName] = (string) $hmyPositionValue; } return $hmySafePosition ?: $hmyDefault; } /** * 输出悬浮按钮运行时配置 JSON 并结束请求（mode=config 分支） * 结构：{button:{...}, modal:{...}, 以及一组扁平兼容键} */ function hmyPublicServeConfig($mysqli, $hmyPluginConfig) { $hmyButtonColor = preg_match('/^#[0-9a-fA-F]{6}$/', (string) ($hmyPluginConfig['hmy_button_color'] ?? '')) ? $hmyPluginConfig['hmy_button_color'] : '#2378f7'; $hmyButtonSize = max(36, min(96, intval($hmyPluginConfig['hmy_button_size'] ?? 48))); $hmyModalAutoSize = (string) ($hmyPluginConfig['hmy_modal_auto_size'] ?? '1') === '1'; $hmyModalWidth = max(600, min(1600, intval($hmyPluginConfig['hmy_modal_width'] ?? 1100))); $hmyModalHeight = max(400, min(1200, intval($hmyPluginConfig['hmy_modal_height'] ?? 820))); $hmyModalColor = preg_match('/^#[0-9a-fA-F]{6}$/', (string) ($hmyPluginConfig['hmy_modal_background_color'] ?? '')) ? $hmyPluginConfig['hmy_modal_background_color'] : '#ffffff'; $hmyModalImage = trim((string) ($hmyPluginConfig['hmy_modal_background_image'] ?? '')); if ($hmyModalImage !== '' && !preg_match('#^(https?:)?//|^/#i', $hmyModalImage)) $hmyModalImage = ''; $hmyDesktopPosition = hmyPublicNormalizePosition($hmyPluginConfig['hmy_button_desktop_position'] ?? '', array('right' => '28px', 'bottom' => '120px')); $hmyMobilePosition = hmyPublicNormalizePosition($hmyPluginConfig['hmy_button_mobile_position'] ?? '', array('right' => '14px', 'bottom' => '92px')); $hmyPagePaths = array(); $hmyPageValue = str_replace(array("\r\n", "\r", ',', ';'), "\n", (string) ($hmyPluginConfig['hmy_button_page_paths'] ?? '')); foreach (preg_split('/\n+/', $hmyPageValue) as $hmyPageRow) { $hmyPageRow = trim($hmyPageRow); if ($hmyPageRow === '') continue; if ($hmyPageRow[0] !== '/') $hmyPageRow = '/' . $hmyPageRow; $hmyPageRow = parse_url($hmyPageRow, PHP_URL_PATH); $hmyPageRow = '/' . ltrim(preg_replace('#/+#', '/', (string) ($hmyPageRow ?: '/')), '/'); if ($hmyPageRow !== '/') $hmyPageRow = rtrim($hmyPageRow, '/'); if (preg_match('#^/[A-Za-z0-9_./-]*$#', $hmyPageRow) && !in_array($hmyPageRow, $hmyPagePaths, true)) $hmyPagePaths[] = $hmyPageRow; } $hmyPublicConfig = array( 'button' => array( 'enabled' => (string) ($hmyPluginConfig['hmy_button_enabled'] ?? '0') === '1', 'text' => hmyPublicConfigValue($hmyPluginConfig['hmy_button_text'] ?? '', '产品更新日志'), 'icon' => hmyPublicConfigValue($hmyPluginConfig['hmy_button_icon'] ?? '', '↗'), 'color' => $hmyButtonColor, 'size' => $hmyButtonSize, 'icon_background_image' => preg_match('#^(https?:)?//|^/#i', trim((string) ($hmyPluginConfig['hmy_float_icon_background_image'] ?? ''))) ? trim((string) $hmyPluginConfig['hmy_float_icon_background_image']) : 'https://haimoyun.com/themes/web/sp/automatic.png', 'icon_border_width' => max(0, intval($hmyPluginConfig['hmy_float_icon_border_width'] ?? 4)), 'icon_border_color' => preg_match('/^(#[0-9a-fA-F]{3,8}|rgba?$\s*\d+\s*,\s*\d+\s*,\s*\d+(\s*,\s*(0|1|0?\.\d+))?\s*$)$/', (string) ($hmyPluginConfig['hmy_float_icon_border_color'] ?? '')) ? $hmyPluginConfig['hmy_float_icon_border_color'] : '#ffffff', 'label_background_color' => preg_match('/^(#[0-9a-fA-F]{3,8}|rgba?$\s*\d+\s*,\s*\d+\s*,\s*\d+(\s*,\s*(0|1|0?\.\d+))?\s*$)$/', (string) ($hmyPluginConfig['hmy_float_label_background_color'] ?? '')) ? $hmyPluginConfig['hmy_float_label_background_color'] : '#2491ff', 'label_padding' => array('top'=>max(0, intval($hmyPluginConfig['hmy_float_label_padding_top'] ?? 5)),'right'=>max(0, intval($hmyPluginConfig['hmy_float_label_padding_right'] ?? 9)),'bottom'=>max(0, intval($hmyPluginConfig['hmy_float_label_padding_bottom'] ?? 4)),'left'=>max(0, intval($hmyPluginConfig['hmy_float_label_padding_left'] ?? 9))), 'label_border_width' => max(0, intval($hmyPluginConfig['hmy_float_label_border_width'] ?? 2)), 'label_border_color' => preg_match('/^(#[0-9a-fA-F]{3,8}|rgba?$\s*\d+\s*,\s*\d+\s*,\s*\d+(\s*,\s*(0|1|0?\.\d+))?\s*$)$/', (string) ($hmyPluginConfig['hmy_float_label_border_color'] ?? '')) ? $hmyPluginConfig['hmy_float_label_border_color'] : '#ffffff', 'desktop_position' => $hmyDesktopPosition, 'mobile_position' => $hmyMobilePosition, ), 'modal' => array( 'page_paths' => $hmyPagePaths, 'auto_size' => $hmyModalAutoSize, 'width' => $hmyModalWidth, 'height' => $hmyModalHeight, 'background_color' => $hmyModalColor, 'background_image' => $hmyModalImage, 'z_index' => max(1000, min(2147483647, intval($hmyPluginConfig['hmy_modal_z_index'] ?? 10001))), 'overlay_color' => preg_match('/^(#[0-9a-fA-F]{6}|rgba?\$\\s*\\d+\\s*,\\s*\\d+\\s*,\\s*\\d+(\\s*,\\s*(0|1|0?\\.\\d+))?\\s*\$)$/', (string) ($hmyPluginConfig['hmy_modal_overlay_color'] ?? '')) ? $hmyPluginConfig['hmy_modal_overlay_color'] : 'rgba(15,23,42,.55)', 'border_radius' => max(0, min(32, intval($hmyPluginConfig['hmy_modal_border_radius'] ?? 8))), 'action_size' => max(28, min(64, intval($hmyPluginConfig['hmy_modal_action_size'] ?? 36))), 'action_background' => preg_match('/^(#[0-9a-fA-F]{6}|rgba?\$\\s*\\d+\\s*,\\s*\\d+\\s*,\\s*\\d+(\\s*,\\s*(0|1|0?\\.\\d+))?\\s*\$)$/', (string) ($hmyPluginConfig['hmy_modal_action_background'] ?? '')) ? $hmyPluginConfig['hmy_modal_action_background'] : 'rgba(255,255,255,.92)', 'action_color' => preg_match('/^#[0-9a-fA-F]{6}$/', (string) ($hmyPluginConfig['hmy_modal_action_color'] ?? '')) ? $hmyPluginConfig['hmy_modal_action_color'] : '#475569', 'full_svg' => hmyPublicSvg($hmyPluginConfig['hmy_modal_full_svg'] ?? ''), 'full_width' => max(0, intval($hmyPluginConfig['hmy_modal_full_width'] ?? 36)), 'full_height' => max(0, intval($hmyPluginConfig['hmy_modal_full_height'] ?? 36)), 'full_background' => preg_match('/^(#[0-9a-fA-F]{3,8}|rgba?$\s*\d+\s*,\s*\d+\s*,\s*\d+(\s*,\s*(0|1|0?\.\d+))?\s*$)$/', (string) ($hmyPluginConfig['hmy_modal_full_background'] ?? '')) ? $hmyPluginConfig['hmy_modal_full_background'] : 'rgba(255,255,255,.92)', 'full_top' => max(0, intval($hmyPluginConfig['hmy_modal_full_top'] ?? 3)), 'close_svg' => hmyPublicSvg($hmyPluginConfig['hmy_modal_close_svg'] ?? ''), 'close_width' => max(0, intval($hmyPluginConfig['hmy_modal_close_width'] ?? 36)), 'close_height' => max(0, intval($hmyPluginConfig['hmy_modal_close_height'] ?? 36)), 'close_background' => preg_match('/^(#[0-9a-fA-F]{3,8}|rgba?$\s*\d+\s*,\s*\d+\s*,\s*\d+(\s*,\s*(0|1|0?\.\d+))?\s*$)$/', (string) ($hmyPluginConfig['hmy_modal_close_background'] ?? '')) ? $hmyPluginConfig['hmy_modal_close_background'] : 'rgba(255,255,255,.92)', 'close_top' => max(0, intval($hmyPluginConfig['hmy_modal_close_top'] ?? 3)), 'close_on_overlay' => (string) ($hmyPluginConfig['hmy_modal_close_on_overlay'] ?? '1') === '1', 'close_on_escape' => (string) ($hmyPluginConfig['hmy_modal_close_on_escape'] ?? '1') === '1', 'title' => trim((string) ($hmyPluginConfig['hmy_modal_title'] ?? '产品更新日志')) ?: '产品更新日志', ), ); // 扁平兼容键：兼容旧版嵌入代码直接读顶层字段的用法 $hmyPublicConfig['button_enabled'] = $hmyPublicConfig['button']['enabled']; $hmyPublicConfig['button_text'] = $hmyPublicConfig['button']['text']; $hmyPublicConfig['button_icon'] = $hmyPublicConfig['button']['icon']; $hmyPublicConfig['button_color'] = $hmyPublicConfig['button']['color']; $hmyPublicConfig['button_size'] = $hmyPublicConfig['button']['size']; $hmyPublicConfig['modal_auto_size'] = $hmyPublicConfig['modal']['auto_size']; $hmyPublicConfig['modal_width'] = $hmyPublicConfig['modal']['width']; $hmyPublicConfig['modal_height'] = $hmyPublicConfig['modal']['height']; $hmyPublicConfig['modal_background_color'] = $hmyPublicConfig['modal']['background_color']; $hmyPublicConfig['modal_background_image'] = $hmyPublicConfig['modal']['background_image']; header('Content-Type: application/json; charset=utf-8'); echo json_encode($hmyPublicConfig, JSON_UNESCAPED_UNICODE | JSON_UNESCAPED_SLASHES); $mysqli->close(); exit; } /* ==================== 3. 读取插件配置行 ==================== */ $hmyPluginTable = '`' . $prefix . 'plugin`'; $hmyPluginConfig = array(); $hmyPluginResult = $mysqli->query("SELECT config FROM {$hmyPluginTable} WHERE name='HmyProductActivityLog' AND module='addons' LIMIT 1"); if ($hmyPluginResult && ($hmyPluginRow = $hmyPluginResult->fetch_assoc())) { $hmyDecodedPluginConfig = json_decode((string) ($hmyPluginRow['config'] ?? ''), true); if (is_array($hmyDecodedPluginConfig)) $hmyPluginConfig = $hmyDecodedPluginConfig; } if ($hmyPluginResult) $hmyPluginResult->free(); /* ==================== 4. mode=config：输出运行时配置 JSON ==================== */ if (isset($_GET['mode']) && $_GET['mode'] === 'config') { hmyPublicServeConfig($mysqli, $hmyPluginConfig); } /* ==================== 5. 内容数据查询与整形 ==================== */ $articleTable = '`' . $prefix . 'hmy_articles`'; $activityTable = '`' . $prefix . 'hmy_product_activity_log`'; $categoryTable = '`' . $prefix . 'hmy_product_activity_category`'; $articles = hmyPublicRows($mysqli, "SELECT a.*, c.hmy_name AS hmy_category_name FROM {$articleTable} a LEFT JOIN {$categoryTable} c ON c.hmy_id=a.hmy_category_id WHERE a.hmy_status=1 ORDER BY a.hmy_is_top DESC, a.hmy_sort DESC, a.hmy_publish_time DESC, a.hmy_id DESC LIMIT 50"); $activities = hmyPublicRows($mysqli, "SELECT a.*, c.hmy_name AS hmy_category_name FROM {$activityTable} a LEFT JOIN {$categoryTable} c ON c.hmy_id=a.hmy_category_id WHERE a.hmy_status=1 ORDER BY a.hmy_sort DESC, a.hmy_activity_time DESC, a.hmy_id DESC LIMIT 50"); $categories = hmyPublicRows($mysqli, "SELECT hmy_id, hmy_name FROM {$categoryTable} WHERE hmy_status=1 ORDER BY hmy_sort ASC, hmy_id ASC"); foreach ($articles as &$article) { $article['hmy_content'] = hmyPublicClean($article['hmy_content'] ?? ''); $article['hmy_description'] = hmyPublicClean($article['hmy_description'] ?? ''); $article['hmy_time_text'] = !empty($article['hmy_publish_time']) ? date('Y-m-d H:i', (int) $article['hmy_publish_time']) : '-'; $article['hmy_type'] = 'article'; } unset($article); foreach ($activities as &$activity) { $activity['hmy_content'] = hmyPublicClean($activity['hmy_content'] ?? ''); $activity['hmy_time_text'] = !empty($activity['hmy_activity_time']) ? date('Y-m-d', (int) $activity['hmy_activity_time']) : '-'; $activity['hmy_type'] = 'activity'; } unset($activity); // 按分类聚合文章发布月份，生成"YYYY年N期"期数导航 $hmyCategoryPeriodRows = hmyPublicRows($mysqli, "SELECT hmy_category_id, hmy_publish_time FROM {$articleTable} WHERE hmy_status=1 AND hmy_category_id>0 AND hmy_publish_time>0 ORDER BY hmy_publish_time DESC, hmy_id DESC"); $hmyCategoryPeriodMap = array(); foreach ($hmyCategoryPeriodRows as $hmyPeriodRow) { $hmyCategoryId = (int) ($hmyPeriodRow['hmy_category_id'] ?? 0); $hmyPublishTime = (int) ($hmyPeriodRow['hmy_publish_time'] ?? 0); if (!$hmyCategoryId || !$hmyPublishTime) continue; $hmyPeriodKey = date('Y-m', $hmyPublishTime); if (isset($hmyCategoryPeriodMap[$hmyCategoryId][$hmyPeriodKey])) continue; $hmyCategoryPeriodMap[$hmyCategoryId][$hmyPeriodKey] = array( 'key' => $hmyPeriodKey, 'text' => date('Y', $hmyPublishTime) . '年' . (int) date('n', $hmyPublishTime) . '期' ); } foreach ($categories as &$category) { $hmyPeriods = array_values($hmyCategoryPeriodMap[(int) $category['hmy_id']] ?? array()); $category['hmy_periods'] = $hmyPeriods; $category['hmy_period_text'] = $hmyPeriods ? implode('、', array_column($hmyPeriods, 'text')) : ''; } unset($category); /* ==================== 6. 前端展示配置解析 ==================== */ $hmyFrontDefaults = array('hmy_front_background_image'=>'','hmy_front_category_background_image'=>'','hmy_front_pc_background_image'=>'','hmy_front_mobile_background_image'=>'','hmy_front_pc_title_size'=>'70','hmy_front_mobile_title_size'=>'36','hmy_front_pc_body_size'=>'16','hmy_front_mobile_body_size'=>'13','hmy_front_category_pc_background_image'=>'','hmy_front_category_mobile_background_image'=>'','hmy_front_category_pc_title_size'=>'17','hmy_front_category_mobile_title_size'=>'17','hmy_front_category_pc_body_size'=>'16','hmy_front_category_mobile_body_size'=>'16','hmy_front_content_pc_background_image'=>'','hmy_front_content_mobile_background_image'=>'','hmy_front_title'=>'产品更新日志','hmy_front_brand'=>'海沫云','hmy_front_subtitle'=>'每月最新产品实时动态资讯','hmy_front_emphasis'=>'重磅发布','hmy_front_sidebar_title'=>'产品更新大纲','hmy_front_font_family'=>'Microsoft YaHei','hmy_front_title_size'=>'70','hmy_front_title_weight'=>'800','hmy_front_title_color'=>'#081d46','hmy_front_body_size'=>'16','hmy_front_body_color'=>'#334155','hmy_front_emphasis_color'=>'#ffffff','hmy_front_emphasis_background'=>'#f59e0b'); $hmyFrontConfig = $hmyFrontDefaults; $hmyFrontStoredKeys = array(); $hmyPluginTable = '`' . $prefix . 'plugin`'; $hmyPluginResult = $mysqli->query("SELECT config FROM {$hmyPluginTable} WHERE name='HmyProductActivityLog' AND module='addons' LIMIT 1"); if ($hmyPluginResult && ($hmyPluginRow = $hmyPluginResult->fetch_assoc())) { $hmyStoredConfig = json_decode((string) ($hmyPluginRow['config'] ?? ''), true); if (is_array($hmyStoredConfig)) { $hmyFrontStoredKeys = array_keys($hmyStoredConfig); foreach ($hmyFrontDefaults as $hmyKey=>$hmyDefault) if (array_key_exists($hmyKey,$hmyStoredConfig)) $hmyFrontConfig[$hmyKey]=(string) $hmyStoredConfig[$hmyKey]; } } if ($hmyPluginResult) $hmyPluginResult->free(); // 图片配置仅放行 http(s) 外链或站内绝对路径 foreach (array('hmy_front_background_image','hmy_front_category_background_image','hmy_front_pc_background_image','hmy_front_mobile_background_image','hmy_front_category_pc_background_image','hmy_front_category_mobile_background_image','hmy_front_content_pc_background_image','hmy_front_content_mobile_background_image') as $hmyFrontImageKey) if ($hmyFrontConfig[$hmyFrontImageKey] !== '' && !preg_match('#^(https?:)?//|^/#i',$hmyFrontConfig[$hmyFrontImageKey])) $hmyFrontConfig[$hmyFrontImageKey]=''; // 旧配置兼容：未单独配置 PC/手机端背景图时逐级沿用旧字段 if (!in_array('hmy_front_pc_background_image', $hmyFrontStoredKeys, true)) $hmyFrontConfig['hmy_front_pc_background_image'] = $hmyFrontConfig['hmy_front_background_image']; if (!in_array('hmy_front_mobile_background_image', $hmyFrontStoredKeys, true)) $hmyFrontConfig['hmy_front_mobile_background_image'] = $hmyFrontConfig['hmy_front_pc_background_image']; if (!in_array('hmy_front_category_pc_background_image', $hmyFrontStoredKeys, true)) $hmyFrontConfig['hmy_front_category_pc_background_image'] = $hmyFrontConfig['hmy_front_category_background_image']; if (!in_array('hmy_front_category_mobile_background_image', $hmyFrontStoredKeys, true)) $hmyFrontConfig['hmy_front_category_mobile_background_image'] = $hmyFrontConfig['hmy_front_category_pc_background_image']; if (!in_array('hmy_front_content_mobile_background_image', $hmyFrontStoredKeys, true)) $hmyFrontConfig['hmy_front_content_mobile_background_image'] = $hmyFrontConfig['hmy_front_content_pc_background_image']; // 响应式字号范围兜底（超出范围回退默认值） $hmyFrontRanges = array('hmy_front_pc_title_size'=>array(32,100,'70'),'hmy_front_mobile_title_size'=>array(24,70,'36'),'hmy_front_pc_body_size'=>array(12,32,'16'),'hmy_front_mobile_body_size'=>array(10,24,'13'),'hmy_front_category_pc_title_size'=>array(14,32,'17'),'hmy_front_category_mobile_title_size'=>array(14,32,'17'),'hmy_front_category_pc_body_size'=>array(12,24,'16'),'hmy_front_category_mobile_body_size'=>array(12,24,'16')); foreach ($hmyFrontRanges as $hmySizeKey=>$hmySizeRange) { $hmySizeValue=intval($hmyFrontConfig[$hmySizeKey]); if ($hmySizeValue<$hmySizeRange[0]||$hmySizeValue>$hmySizeRange[1]) $hmyFrontConfig[$hmySizeKey]=$hmySizeRange[2]; } if (!preg_match('/^[12][0-9]|3[0-2]$/',$hmyFrontConfig['hmy_front_body_size'])) $hmyFrontConfig['hmy_front_body_size']='16'; if (!preg_match('/^(3[2-9]|[4-9][0-9]|100)$/',$hmyFrontConfig['hmy_front_title_size'])) $hmyFrontConfig['hmy_front_title_size']='70'; if (!in_array($hmyFrontConfig['hmy_front_title_weight'],array('400','500','600','700','800','900'),true)) $hmyFrontConfig['hmy_front_title_weight']='800'; foreach (array('hmy_front_title_color','hmy_front_body_color','hmy_front_emphasis_color','hmy_front_emphasis_background') as $hmyColorKey) if (!preg_match('/^#[0-9a-fA-F]{6}$/',$hmyFrontConfig[$hmyColorKey])) $hmyFrontConfig[$hmyColorKey]=$hmyFrontDefaults[$hmyColorKey]; $hmyFrontFontFamily = preg_replace('/[^a-zA-Z0-9_ ,\-\x{4e00}-\x{9fff}]/u','',$hmyFrontConfig['hmy_front_font_family']); if ($hmyFrontFontFamily==='') $hmyFrontFontFamily=$hmyFrontDefaults['hmy_front_font_family']; // CSS 变量用的背景 URL（去除引号与换行，并追加版本参数） $hmyFrontBackgroundUrl = preg_replace('/["\'\r\n]/', '', $hmyFrontConfig['hmy_front_background_image']); $hmyFrontCategoryBackgroundUrl = preg_replace('/["\'\r\n]/', '', $hmyFrontConfig['hmy_front_category_background_image']); $hmyFrontPcBackgroundUrl = hmyPublicVersionedImageUrl(preg_replace('/["\'\r\n]/', '', $hmyFrontConfig['hmy_front_pc_background_image'])); $hmyFrontMobileBackgroundUrl = hmyPublicVersionedImageUrl(preg_replace('/["\'\r\n]/', '', $hmyFrontConfig['hmy_front_mobile_background_image'])); $hmyFrontCategoryPcBackgroundUrl = hmyPublicVersionedImageUrl(preg_replace('/["\'\r\n]/', '', $hmyFrontConfig['hmy_front_category_pc_background_image'])); $hmyFrontCategoryMobileBackgroundUrl = hmyPublicVersionedImageUrl(preg_replace('/["\'\r\n]/', '', $hmyFrontConfig['hmy_front_category_mobile_background_image'])); $hmyFrontContentPcBackgroundUrl = hmyPublicVersionedImageUrl(str_replace(array("\"","'",chr(13),chr(10)),'',$hmyFrontConfig['hmy_front_content_pc_background_image'])); $hmyFrontContentMobileBackgroundUrl = hmyPublicVersionedImageUrl(str_replace(array("\"","'",chr(13),chr(10)),'',$hmyFrontConfig['hmy_front_content_mobile_background_image'])); $hmyFrontTitle = hmyPublicEsc($hmyFrontConfig['hmy_front_title']); $hmyFrontBrand = hmyPublicEsc($hmyFrontConfig['hmy_front_brand']); $hmyFrontSubtitle = hmyPublicEsc($hmyFrontConfig['hmy_front_subtitle']); $hmyFrontEmphasis = hmyPublicEsc($hmyFrontConfig['hmy_front_emphasis']); $hmyFrontSidebarTitle = hmyPublicEsc($hmyFrontConfig['hmy_front_sidebar_title']); $mysqli->close(); /* ==================== 7. 页面输出 ==================== */ $payload = json_encode(array('articles' => $articles, 'activities' => $activities, 'categories' => $categories), JSON_UNESCAPED_UNICODE | JSON_UNESCAPED_SLASHES | JSON_HEX_TAG | JSON_HEX_AMP | JSON_HEX_APOS | JSON_HEX_QUOT); ?> 产品更新日志