public function login()
 {
     $username = jget('username', 'txt');
     $password = jget('password');
     $openid = jget('openid');
     if ($username == "" || $password == "") {
         json_error("无法登录,用户名或密码不能为空");
     }
     if ($this->Config['login_by_uid']) {
         is_numeric($username) && json_error("禁止使用UID登录");
     }
     if ($GLOBALS['_J']['plugins']['func']['login']) {
         hookscript('login', 'funcs', array('param' => $this->Post, 'step' => 'check'), 'login');
     }
     $rets = jsg_member_login($username, $password);
     $uid = (int) $rets['uid'];
     if ($uid < 1) {
         json_error(array_iconv($this->Config['charset'], 'utf-8', $rets['error']));
     }
     $r = false;
     if ($openid && $uid) {
         $r = jlogic('wechat')->do_bind($openid, $uid);
     }
     if ($r) {
         json_result("绑定成功！");
     } else {
         json_error("绑定失败！");
     }
 }

 public function run()
 {
     header('Access-Control-Allow-Origin: *');
     date_default_timezone_set('Asia/Seoul');
     user()->login();
     if ($model = http_input('model')) {
         list($model_name, $class_name, $method_name) = explode('.', $model);
         $uc_first_class_name = ucfirst($class_name);
         $namespace = "of\\{$model_name}\\{$uc_first_class_name}";
         $obj = new $namespace();
         return $obj->{$method_name}();
     }
     switch ($doing = http_input('do')) {
         default:
             if (strpos($doing, '.')) {
                 $doing = str_replace('.', '\\', $doing);
             } else {
                 $doing = ucfirst($doing);
             }
             $name = "of\\{$doing}";
             $obj = new $name();
             $obj->runAjax();
             json_error(-40444, "Nothing to do");
             return null;
     }
 }

 protected function executeImpl(ArrayAdapter $params)
 {
     $action = $params->str('action');
     $gallery = $params->str('gallery');
     switch ($action) {
         case 'creategall':
             PsGallery::makeNew($gallery, $params->str('name'));
             break;
         case 'save':
             PsGallery::inst($gallery)->saveGallery($params->str('name'), $params->arr('images'));
             break;
         case 'imgadd':
             PsGallery::inst($gallery)->addWebImg($params->arr('img'));
             break;
         case 'imgdel':
             if ($params->bool('web')) {
                 PsGallery::inst($gallery)->deleteWebImg($params->str('file'));
             } else {
                 PsGallery::inst($gallery)->deleteLocalImg($params->str('file'));
             }
             break;
         default:
             json_error("Unknown action [{$action}].");
     }
     return new AjaxSuccess();
 }

 /**
  * 로그인 과정을 진행한다.
  *
  * 입력 정보는 HTTP input 의 idx_member 와 session_id 로 들어오며,
  * 회원 정보를 $sys->member 에 저장하고,
  * 회원 번호를 리턴한다.
  *
  * 이것은 module/ajax/DataLayer.php 의 회원 로그인과 비슷하며,
  *
  * ajax 의 model=.... 와 같이 호출하는 경우, overframe/ajax/Ajax.php 의 run() 에 의해서 호출된다.
  *
  * @return mixed 회원번호 또는 ajax 에러 메세지.
  */
 public function login()
 {
     global $sys;
     $in = http_input();
     $in['remember'] = 'Y';
     sys()->log(" =========> UserLayer::login() in: ");
     if (empty($in['idx_member'])) {
         return FALSE;
     }
     if (isset($in['idx_member']) && $in['idx_member'] && isset($in['session_id'])) {
         $member = $sys->member->get($in['idx_member']);
         if (empty($member)) {
             json_error(-508, "User not found. Wrong idx_member.");
         }
         if ($this->session_id($member) != $in['session_id']) {
             json_error(-507, "Wrong user session id. Your IP and location information has been reported to admin.");
         }
     } else {
         sys()->log(" =====> No. login. in[idx_member] and in[action] is not member_register_submit,  in[id], in[password] is empty. ");
         return FALSE;
     }
     $sys->member->idx = $member['idx'];
     $sys->member->info = $member;
     return $sys->member->idx;
 }

 /**
  * Validate the provided API key.
  */
 public function checkAuth()
 {
     $api = new API();
     $api->key = $_GET['key'];
     try {
         $api->validate_key();
     } catch (Exception $e) {
         json_error($e->getMessage());
         die;
     }
 }

 /**
  * Check that the object can be accessed.
  *
  * @param mixed $id Object ID
  * @return boolean|WP_Error
  */
 protected function check_object($id)
 {
     $id = (int) $id;
     $post = get_post($id, ARRAY_A);
     if (empty($id) || empty($post['ID'])) {
         json_error(BigAppErr::$post['code'], BigAppErr::$post['msg'], "empty {$id}");
     }
     if (!json_check_post_permission($post, 'edit')) {
         json_error(BigAppErr::$post['code'], BigAppErr::$post['msg'], "cant read:{$id}");
     }
     return true;
 }

function do_upload_avatar()
{
    $cleaned = vB::getCleaner()->cleanArray($_REQUEST, array('upload' => vB_Cleaner::TYPE_FILE));
    if (empty($cleaned['upload'])) {
        return json_error(ERR_NO_PERMISSION);
    }
    $upload_result = vB_Api::instance('profile')->upload($cleaned['upload']);
    if (!empty($upload_result['errors'])) {
        return json_error(ERR_NO_PERMISSION);
    }
    return true;
}

/**
 * Выполнение ajax действия
 * 
 * @param AjaxClassProvider $provider
 */
function execute_ajax_action(AbstractAjaxAction $action = null)
{
    /* Для безопасности не будем писать детали обработки */
    if (!$action) {
        json_error('Действие не опеределено');
    }
    $result = $action->execute();
    $result = $result ? $result : 'Ошибка выполнения действия';
    if ($result instanceof AjaxSuccess) {
        json_success($result->getJsParams());
    }
    json_error($result);
}

 function handle($args)
 {
     /*
      * Make sure we have a search term.
      */
     if (!isset($args['term']) || empty($args['term'])) {
         json_error('Search term not provided.');
         die;
     }
     /*
      * Clean up the search term.
      */
     $term = filter_var($args['term'], FILTER_SANITIZE_STRING);
     /*
      * Append an asterix to the search term, so that Solr can suggest autocomplete terms.
      */
     $term .= '*';
     /*
      * Intialize Solarium.
      */
     $client = new Solarium_Client($GLOBALS['solr_config']);
     /*
      * Set up our query.
      */
     $query = $client->createSuggester();
     $query->setHandler('suggest');
     $query->setQuery($term);
     $query->setOnlyMorePopular(TRUE);
     $query->setCount(5);
     $query->setCollate(TRUE);
     /*
      * Execute the query.
      */
     $search_results = $client->suggester($query);
     /*
      * If there are no results.
      */
     if (count($search_results) == 0) {
         $response->terms = FALSE;
     } else {
         $response->terms = array();
         foreach ($search_results as $term => $term_result) {
             $i = 0;
             foreach ($term_result as $suggestion) {
                 $response->terms[] = array('id' => $i, 'term' => $suggestion);
                 $i++;
             }
         }
     }
     $this->render($response, 'OK');
 }

function process_work($pdo, $worker_id, $pool_id, $response, $json_id)
{
    $q = $pdo->prepare('
        INSERT IGNORE INTO work_data

        (worker_id, pool_id, data, time_requested)
            VALUES
        (:worker_id, :pool_id, :data, UTC_TIMESTAMP())
    ');
    $data = strtolower(substr($response->result->data, 0, 152));
    if (!$q->execute(array(':worker_id' => $worker_id, ':pool_id' => $pool_id, ':data' => $data))) {
        json_error('Database error on INSERT into work_data: ' . json_encode($q->errorInfo()), $json_id);
    }
}

 /**
  * 设置AK SK
  * @param ak,sk
  */
 public function set_ak_sk($ak, $sk)
 {
     $ak = trim($ak);
     $sk = trim($sk);
     $st = false;
     if (strlen($ak) == 32 && strlen($sk) == 32) {
         $ak_sk = array('ak' => $ak, 'sk' => $sk);
         $st = update_option("bigapp_ak_sk", json_encode($ak_sk));
         $st = true;
     } else {
         json_error(BigAppErr::$server['code'], __lan("app key/app secret format is wrong"), "");
     }
     return $st;
 }

function do_subscribe_thread()
{
    $userinfo = vB_Api::instance('user')->fetchUserInfo();
    if ($userinfo['userid'] < 1) {
        return json_error(ERR_NO_PERMISSION);
    }
    $cleaned = vB::getCleaner()->cleanArray($_REQUEST, array('threadid' => vB_Cleaner::TYPE_UINT));
    if (empty($cleaned['threadid'])) {
        return json_error(ERR_INVALID_SUB);
    }
    $result = vB_Api::instance('follow')->add($cleaned['threadid'], vB_Api_Follow::FOLLOWTYPE_CONTENT);
    if (empty($result) || !empty($result['errors'])) {
        return json_error(ERR_INVALID_SUB);
    }
    return true;
}

function do_get_announcement()
{
    $cleaned = vB::getCleaner()->cleanArray($_REQUEST, array('forumid' => vB_Cleaner::TYPE_UINT));
    if (!isset($cleaned['forumid']) || $cleaned['forumid'] < 1) {
        return json_error(ERR_NO_PERMISSION);
    }
    $result = vB_Api::instance('announcement')->fetch($cleaned['forumid']);
    if ($result === null || isset($result['errors'])) {
        return json_error(ERR_NO_PERMISSION);
    }
    $posts = array();
    foreach ($result as $ann) {
        $posts[] = fr_parse_post($ann);
    }
    return array('posts' => $posts, 'total_posts' => count($posts));
}

 public function actionDeleteAttachment()
 {
     $vals = $this->_input->filter(array('attachmentid' => XenForo_Input::UINT, 'poststarttime' => XenForo_Input::STRING));
     try {
         $attachment = $this->_getAttachmentOrError($vals['attachmentid']);
     } catch (Exception $e) {
         $error = new XenForo_Phrase('do_not_have_permission');
         json_error($error->render());
     }
     if (!$this->_getAttachmentModel()->canDeleteAttachment($attachment, $vals['poststarttime'])) {
         $error = new XenForo_Phrase('do_not_have_permission');
         json_error($error->render());
     }
     $dw = XenForo_DataWriter::create('XenForo_DataWriter_Attachment');
     $dw->setExistingData($attachment, true);
     $dw->delete();
     return array('success' => true);
 }

 protected function executeImpl(ArrayAdapter $params)
 {
     $action = $params->str('action');
     $controller = PsLogger::controller();
     switch ($action) {
         case 'reset':
             $controller->clearLogs();
             break;
         case 'on':
             $controller->setLoggingEnabled(true);
             break;
         case 'off':
             $controller->setLoggingEnabled(false);
             break;
         default:
             json_error("Unknown action [{$action}].");
     }
     return new AjaxSuccess();
 }

function do_upload_attachment()
{
    global $vbulletin, $db, $foruminfo, $attachlib;
    $vbulletin->input->clean_gpc('f', 'attachment', TYPE_FILE);
    // format vbulletin expects: $files[name][x]... we only have one per post
    $vbulletin->GPC['attachment'] = array('name' => array($vbulletin->GPC['attachment']['name']), 'tmp_name' => array($vbulletin->GPC['attachment']['tmp_name']), 'error' => array($vbulletin->GPC['attachment']['error']), 'size' => array($vbulletin->GPC['attachment']['size']));
    if ($vbulletin->GPC['flash'] and is_array($vbulletin->GPC['attachment'])) {
        $vbulletin->GPC['attachment']['utf8_names'] = true;
    }
    $uploadids = $attachlib->upload($vbulletin->GPC['attachment'], array(), $vbulletin->GPC['filedata']);
    $uploads = explode(',', $uploadids);
    if (!empty($attachlib->errors)) {
        $errorlist = '';
        foreach ($attachlib->errors as $error) {
            $filename = htmlspecialchars_uni($error['filename']);
            $errormessage = $error['error'] ? $error['error'] : $vbphrase["{$error['errorphrase']}"];
            json_error($errormessage, RV_UPLOAD_ERROR);
        }
    }
    return array('attachmentid' => $uploads[0]);
}

function do_delete_attachment()
{
    $userinfo = vB_Api::instance('user')->fetchUserInfo();
    if ($userinfo['userid'] < 1) {
        return json_error(ERR_NO_PERMISSION);
    }
    $cleaned = vB::getCleaner()->cleanArray($_REQUEST, array('attachmentid' => vB_Cleaner::TYPE_UINT));
    if (empty($cleaned['attachmentid'])) {
        return json_error(ERR_NO_PERMISSION);
    }
    $fr_attach = vB_dB_Assertor::instance()->assertQuery('ForumRunner:getAttachmentMarkerById', array('id' => $cleaned['attachmentid']));
    if (empty($fr_attach)) {
        return json_error(ERR_NO_PERMISSION);
    }
    $result = vB_Api::instance('content_attach')->deleteAttachment($fr_attach['attachmentid']);
    if (empty($result) || !empty($result['errors'])) {
        return json_error(ERR_NO_PERMISSION);
    }
    vB_dB_Assertor::instance()->assertQuery('ForumRunner:deleteAttachmentMarker', array('id' => $cleaned['attachmentid']));
    return true;
}

function do_online()
{
    $userinfo = vB_Api::instance('user')->fetchUserInfo();
    $result = vB_Api::instance('wol')->fetchAll();
    $options = vB::get_datastore()->get_value('options');
    if (is_null($result) || isset($result['errors'])) {
        return json_error(ERR_NO_PERMISSION);
    }
    $user_counts = vB_Api::instance('wol')->fetchCounts();
    if (is_null($user_counts) || isset($user_counts['errors'])) {
        return json_error(ERR_NO_PERMISSION);
    }
    $users = array();
    foreach ($result as $user) {
        $user_final = array('username' => $user['username'], 'userid' => $user['userid'], 'avatarurl' => $options['bburl'] . '/' . $user['avatarpath']);
        if (!empty($userinfo) && $user['userid'] === $userinfo['userid']) {
            $user_final['me'] = true;
        }
        $users[] = $user_final;
    }
    return array('users' => $users, 'num_guests' => $user_counts['guests']);
}

 /**
  *
  *
  */
 public function attend()
 {
     $idx = user()->getIdx();
     if (empty($idx)) {
         json_error(-40443, "로그인을 하십시오.");
     }
     $id = user()->getUsername();
     $meta = new PhilgoMeta();
     $nick = $meta->get("google_store.{$id}");
     if (empty($nick)) {
         json_error(-40401, "앱 평가를 먼저 하셔야 출석을 할 수 있습니다.");
     }
     $date = date('Ymd');
     $entity = $this->load("user_id={$idx} AND date={$date}");
     if ($entity) {
         $count = $this->count_consecutive_attend();
         if ($count >= self::max_attend) {
             json_error(-40448, "출석 이벤트를 완료하였습니다.");
         } else {
             $ymd = preg_replace('/([0-9]{4})([0-9]{2})([0-9]{2})/', "\$1년 \$2월 \$3일", $date);
             json_error(-40448, "{$ymd}에 출근 도장을 이미 찍으셨습니다. 연속으로 {$count} 번 출근 도장을 찍으셨습니다.");
         }
     }
     $entity = $this->create()->sets(array('user_id' => $idx, 'date' => $date))->save();
     if ($entity) {
         $count = $this->count_consecutive_attend();
         if ($count >= 5) {
             $meta = new PhilgoMeta();
             $meta->set("attend.complete.{$idx}", time());
             json_success(array('code' => 1, 'message' => "축하합니다. 출석 이벤트를 완료하였습니다."));
         } else {
             json_success(array('count' => $count));
         }
     } else {
         json_error(-40041, "출근 실패");
     }
 }

function handle_json_rpc($object)
{
    /*
    if ($input == '') {
      $input = file_get_contents('php://input');
    }
    */
    $input = $GLOBALS['HTTP_RAW_POST_DATA'];
    $encoding = mb_detect_encoding($input, 'auto');
    //convert to unicode
    if ($encoding != 'UTF-8') {
        $input = iconv($encoding, 'UTF-8', $input);
    }
    $input = json_decode($input);
    header('Content-Type: text/plain');
    // handle Errors
    if (!$input) {
        if ($GLOBALS['HTTP_RAW_POST_DATA'] == "") {
            echo response(null, 0, array("code" => -32700, "message" => "Parse Error: no data"));
        } else {
            // json parse error
            $error = json_error();
            $id = extract_id();
            echo response(null, $id, array("code" => -32700, "message" => "Parse Error: {$error}"));
        }
        exit;
    } else {
        $method = get_field($input, 'method', null);
        $params = get_field($input, 'params', null);
        $id = get_field($input, 'id', null);
        // json rpc error
        if (!($method && $id)) {
            if (!$id) {
                $id = extract_id();
            }
            if (!$method) {
                $error = "no method";
            } else {
                if (!$id) {
                    $error = "no id";
                } else {
                    $error = "unknown reason";
                }
            }
            echo response(null, $id, array("code" => -32600, "message" => "Invalid Request: {$error}"));
            exit;
        }
    }
    // fix params (if params is null set it to empty array)
    if (!$params) {
        $params = array();
    }
    // if params is object change it to array
    if (is_object($params)) {
        if (count(get_object_vars($params)) == 0) {
            $params = array();
        } else {
            $params = get_object_vars($params);
        }
    }
    // call Service Method
    try {
        $class = get_class($object);
        $methods = get_class_methods($class);
        do_debug($methods);
        if (strcmp($method, 'help') == 0) {
            if (count($params) > 0) {
                if (!in_array($params[0], $methods)) {
                    $no_method = 'There is no ' . $params[0] . ' method';
                    throw new Exception($no_method);
                } else {
                    $static = get_class_vars($class);
                    $help_str_name = $params[0] . "_documentation";
                    //throw new Exception(implode(", ", $static));
                    if (array_key_exists($help_str_name, $static)) {
                        echo response($static[$help_str_name], $id, null);
                    } else {
                        throw new Exception($method . " method has no documentation");
                    }
                }
            } else {
                $url = "http://" . $_SERVER["HTTP_HOST"] . $_SERVER["REQUEST_URI"];
                $msg = 'PHP JSON-RPC - in "' . $url . "\"\n";
                $msg .= "class \"{$class}\" has methods: " . implode(", ", array_slice($methods, 0, -1)) . " and " . $methods[count($methods) - 1] . ".";
                echo response($msg, $id, null);
            }
        } else {
            if (!in_array($method, $methods)) {
                $msg = 'There is no ' . $method . ' method';
                echo response(null, $id, array("code" => -32601, "message" => $msg));
            } else {
                //throw new Exception('x -> ' . json_encode($params));
                $result = call_user_func_array(array($object, $method), $params);
                echo response($result, $id, null);
            }
        }
        exit;
    } catch (Exception $e) {
        //catch all exeption from user code
        $msg = "Internal error: " . $e->getMessage();
//.........这里部分代码省略.........