prepare('INSERT INTO settings (key, value) VALUES (?, ?) ON CONFLICT(key) DO UPDATE SET value = excluded.value'); $st->execute([$key, $value]); } /** 删除当前已上传的自定义 logo 文件（仅限 data/logo 目录内） */ function remove_old_logo(): void { $old = setting_get('site_logo', ''); if ($old !== '' && strpos($old, 'data/logo/') === 0) { $file = DATA_DIR . '/logo/' . basename($old); if (is_file($file)) { @unlink($file); } } } function alert_html(string $kind, string $msg): void { echo '

' . he($msg) . '

'; } $msgKind = ''; $msgText = ''; if ($_SERVER['REQUEST_METHOD'] === 'POST') { if (!csrf_verify()) { $msgKind = 'err'; $msgText = '安全校验失败，请刷新页面重试。'; } else { $act = (string)($_POST['act'] ?? ''); switch ($act) { case 'site': settings_set('site_name', trim((string)($_POST['site_name'] ?? '知识导航站'))); settings_set('site_slogan', trim((string)($_POST['site_slogan'] ?? ''))); touch_last_updated(); $msgKind = 'ok'; $msgText = '站点信息已保存。'; break; case 'boards': $names = (array)($_POST['b_name'] ?? []); $descs = (array)($_POST['b_desc'] ?? []); $icons = (array)($_POST['b_icon'] ?? []); $sorts = (array)($_POST['b_sort'] ?? []); $stUpd = $pdo->prepare('UPDATE categories SET name = ?, description = ?, icon = ?, sort = ? WHERE id = ?'); foreach (array_keys($names) as $i) { $name = trim((string)($names[$i] ?? '')); $desc = trim((string)($descs[$i] ?? '')); $icon = trim((string)($icons[$i] ?? '')); $sort = max(0, (int)($sorts[$i] ?? 0)); $id = (int)$i; $key = $pdo->query('SELECT key FROM categories WHERE id = ' . $id)->fetchColumn(); if ($name === '' || !$key || !in_array((string)$key, $catKeys, true)) continue; $stUpd->execute([$name, $desc, $icon, $sort, $id]); } touch_last_updated(); $msgKind = 'ok'; $msgText = '板块名称 / 说明 / 图标 / 顺序已保存。'; break; case 'footer': settings_set('icp_no', trim((string)($_POST['icp_no'] ?? ''))); settings_set('gongan_no', trim((string)($_POST['gongan_no'] ?? ''))); settings_set('gongan_link', trim((string)($_POST['gongan_link'] ?? ''))); settings_set('copyright', trim((string)($_POST['copyright'] ?? ''))); settings_set('footer_text', trim((string)($_POST['footer_text'] ?? ''))); touch_last_updated(); $msgKind = 'ok'; $msgText = '底部信息已保存。'; break; case 'quotes': $content = (string)($_POST['quotes'] ?? ''); $file = DATA_DIR . '/quota.txt'; if (!is_dir(DATA_DIR)) @mkdir(DATA_DIR, 0777, true); $savedBytes = @file_put_contents($file, $content); if ($savedBytes === false) { $msgKind = 'err'; $msgText = '名言文件写入失败，请检查 data 目录权限。'; } else { touch_last_updated(); $msgKind = 'ok'; $msgText = '名言库已保存。'; } break; case 'logo': $up = $_FILES['logo_file'] ?? null; if (!$up || ($up['error'] ?? UPLOAD_ERR_NO_FILE) !== UPLOAD_ERR_OK) { $msgKind = 'err'; $msgText = '未收到有效图片，请重新选择。'; break; } if (($up['size'] ?? 0) > 2 * 1024 * 1024) { $msgKind = 'err'; $msgText = '图片不能超过 2MB。'; break; } $extMap = [ 'png' => 'png', 'jpg' => 'jpg', 'jpeg' => 'jpg', 'gif' => 'gif', 'webp' => 'webp', 'svg' => 'svg', 'ico' => 'ico', ]; $ext = strtolower(pathinfo((string)$up['name'], PATHINFO_EXTENSION)); if (!isset($extMap[$ext])) { $msgKind = 'err'; $msgText = '仅支持 png / jpg / gif / webp / svg / ico 图片。'; break; } $logoDir = DATA_DIR . '/logo'; if (!is_dir($logoDir)) { @mkdir($logoDir, 0777, true); } $filename = 'site_logo_' . date('YmdHis') . '_' . bin2hex(random_bytes(4)) . '.' . $extMap[$ext]; if (!@move_uploaded_file($up['tmp_name'], $logoDir . '/' . $filename)) { $msgKind = 'err'; $msgText = '文件保存失败，请检查 data 目录写入权限。'; break; } remove_old_logo(); settings_set('site_logo', 'data/logo/' . $filename); touch_last_updated(); $msgKind = 'ok'; $msgText = 'LOGO 已更新并应用到全站。'; break; case 'logo_clear': remove_old_logo(); settings_set('site_logo', ''); touch_last_updated(); $msgKind = 'ok'; $msgText = '已恢复默认 LOGO。'; break; case 'hero': settings_set('hero_bg', trim((string)($_POST['hero_bg'] ?? ''))); touch_last_updated(); $msgKind = 'ok'; $msgText = '首页顶部标识栏背景已保存。'; break; case 'cdn': settings_set('cdn_ranges', trim((string)($_POST['cdn_ranges'] ?? ''))); touch_last_updated(); $msgKind = 'ok'; $msgText = 'CDN IP 段库已保存。'; break; case 'engines': $raw = (string)($_POST['data'] ?? ''); $rows = json_decode($raw, true); if (!is_array($rows)) { $msgKind = 'err'; $msgText = '引擎数据格式错误。'; break; } $list = []; foreach ($rows as $e) { if (!is_array($e)) continue; $name = trim((string)($e['name'] ?? '')); $url = trim((string)($e['url'] ?? '')); $icon = trim((string)($e['icon'] ?? '')); if ($name === '' || $url === '' || strpos($url, '{kw}') === false) continue; $list[] = [ 'key' => 'e' . (count($list) + 1), 'name' => $name, 'icon' => ($icon !== '' ? $icon : 'S'), 'url' => $url, ]; } if (!$list) { $msgKind = 'err'; $msgText = '至少需要保留一个有效搜索引擎（名称与含 {kw} 的地址必填）。'; break; } settings_set('search_engines', json_encode($list, JSON_UNESCAPED_UNICODE)); touch_last_updated(); $msgKind = 'ok'; $msgText = '已保存 ' . count($list) . ' 个搜索引擎。'; break; case 'engines_reset': settings_set('search_engines', ''); touch_last_updated(); $msgKind = 'ok'; $msgText = '已恢复默认搜索引擎（Bing / 百度 / GitHub / Google）。'; break; case 'quicklinks': $raw = (string)($_POST['data'] ?? ''); $rows = json_decode($raw, true); if (!is_array($rows)) { $msgKind = 'err'; $msgText = '快捷站点数据格式错误。'; break; } $clean = []; foreach ($rows as $i => $r) { if (!is_array($r)) continue; $name = trim((string)($r['name'] ?? '')); $url = trim((string)($r['url'] ?? '')); $icon = trim((string)($r['icon'] ?? '')); $note = trim((string)($r['note'] ?? '')); if ($name === '' && $url === '') continue; if ($name === '' || $url === '') { $msgKind = 'err'; $msgText = '快捷站点第 ' . ((int)$i + 1) . ' 行：名称与地址均不能为空。'; break; } if (!preg_match('#^https?://#i', $url)) { $msgKind = 'err'; $msgText = '快捷站点第 ' . ((int)$i + 1) . ' 行：地址需为完整 http(s) 链接。'; break; } $clean[] = [ 'id' => (int)($r['id'] ?? 0), 'icon' => ($icon !== '' ? $icon : '🔗'), 'name' => $name, 'url' => $url, 'note' => $note, 'enabled' => (((string)($r['enabled'] ?? '1') === '1')) ? 1 : 0, ]; } if ($msgKind === '' && !$clean) { $msgKind = 'err'; $msgText = '至少需要保留一个快捷站点。'; } if ($msgKind === '') { try { $pdo->beginTransaction(); $oldIds = array_map('intval', array_column($pdo->query('SELECT id FROM quick_links')->fetchAll(), 'id')); $keep = []; foreach ($clean as $c) { if ($c['id'] > 0) $keep[] = $c['id']; } $del = array_values(array_diff($oldIds, $keep)); foreach ($del as $did) { $pdo->prepare('DELETE FROM quick_links WHERE id = ?')->execute([$did]); } $stUpd = $pdo->prepare('UPDATE quick_links SET name=?, url=?, icon=?, note=?, enabled=?, sort=? WHERE id=?'); $stIns = $pdo->prepare('INSERT INTO quick_links (name, url, icon, note, enabled, sort) VALUES (?,?,?,?,?,?)'); $sort = 0; foreach ($clean as $c) { $sort++; if ($c['id'] > 0 && in_array($c['id'], $oldIds, true)) { $stUpd->execute([$c['name'], $c['url'], $c['icon'], $c['note'], $c['enabled'], $sort, $c['id']]); } else { $stIns->execute([$c['name'], $c['url'], $c['icon'], $c['note'], $c['enabled'], $sort]); } } $pdo->commit(); touch_last_updated(); $msgKind = 'ok'; $msgText = '快捷站点已保存。'; } catch (Throwable $e) { if ($pdo->inTransaction()) { $pdo->rollBack(); } $msgKind = 'err'; $msgText = '保存失败：' . $e->getMessage(); } } break; case 'pwd': $np = (string)($_POST['new_pwd'] ?? ''); $np2 = (string)($_POST['new_pwd2'] ?? ''); if ($np !== $np2) { $msgKind = 'err'; $msgText = '两次输入的新密码不一致。'; } else { [$ok, $text] = hp_change_password((string)($_POST['old_pwd'] ?? ''), $np); $msgKind = $ok ? 'ok' : 'err'; $msgText = $text; } break; default: $msgKind = 'err'; $msgText = '未知操作。'; } } } // 板块数据（顺序展示，sort 同值按 id 兜底） $cats = $pdo->query('SELECT * FROM categories ORDER BY sort ASC, id ASC')->fetchAll(); // 板块说明 seed（未编辑过时为空则给占位） $boardDefaults = [ 'popular' => '面向大众与初学者的计算机科学、网络安全与前沿技术科普。', 'red' => '面向渗透测试与攻防演练的红队资源集。', 'blue' => '面向防御侧：应急响应、威胁狩猎、取证溯源。', 'tool' => '日常效率与安全实用小工具，直达功能区。', 'article' => '站长原创与整理收录的图文与 Markdown 文章合集。', ]; $logo = setting_get('site_logo', ''); $quotesFile = DATA_DIR . '/quota.txt'; $quotesContent = is_file($quotesFile) ? (string)@file_get_contents($quotesFile) : ''; $all = []; foreach ($pdo->query('SELECT key, value FROM settings') as $r) { $all[$r['key']] = (string)$r['value']; } $site = $all['site_name'] ?? '知识导航站'; layout_head('内容与顺序'); admin_topbar('content'); ?>

内容与顺序

对全站展示内容与 logo 进行维护，保存后自动更新首页"上次更新时间"。

站点信息

站点 LOGO（浏览器标签页图标与页面内容同步生效）

当前生效的 logo；更换后浏览器标签页图标（favicon）与页面头部 logo 都会更新。

首页顶部标识栏背景（Hero 区，支持纯色或 CSS 渐变）

底部信息

搜索引擎（导航区搜索栏可切换的引擎）

名言库（data/quota.txt，首页随机展示）

CDN IP 段库（供“IP 地址处理”工具识别 CDN 来源）

修改登录密码

四大板块（名称 / 悬停说明文案 / 顺序）

首页快捷站点（四大板块上方的胶囊按钮，新标签页打开）