/**
  * [_is_auth_success 验证权限是否成功]
  * @param  [type]  $auths [description]
  * @return boolean        [description]
  */
 private function _is_auth_success($auths)
 {
     $route = Common::get_route();
     //需权限
     if (array_key_exists($route, $auths)) {
         $user = isset($_SESSION[$this->login_in_session_name]) ? $_SESSION[$this->login_in_session_name] : NULL;
         $user_role = isset($user['role']) ? $user['role'] : NULL;
         //有权限
         if (strstr($auths[$route], "|{$user_role}|")) {
             return TRUE;
         } else {
             //有登录权限
             if (strstr($auths[$route], "|1|")) {
                 //已登录
                 if (!empty($user)) {
                     return TRUE;
                 } else {
                     $this->error->output('NOTLOGIN_ERROR', array('script' => 'swal({title: "请登录后再进行操作",type: "warning",showCancelButton: true,confirmButtonColor: "#DD6B55",confirmButtonText: "注册/登录",closeOnConfirm: false},function () {showsign();});'));
                 }
             }
             //没有权限
             $this->error->output('NOAUTH_ERROR', array('script' => 'window.location.href ="' . base_url() . '";'));
         }
     } else {
         return TRUE;
     }
 }

 function tinlienquan($idtloai, $datatin = null, $idtin = null)
 {
     $where = " ";
     if (isset($idtin)) {
         $where = " AND id_tintuc<>" . $idtin;
     }
     $datatin = isset($datatin) ? $datatin : null;
     $nd = new Common();
     $output = '<div class="clear more left">';
     $output .= '<div class="tinthem left"><div class="left iconleft"></div>MORE</div>';
     $data = $nd->query("SELECT tieude,id_tintuc,ngaythang, solanxem,id_theloai FROM tbltintucs WHERE id_theloai=" . $idtloai . " " . $where . "  ORDER BY ngaythang DESC LIMIT 0,5");
     foreach ($data as $item) {
         if (!$this->checkDisplay($item, $datatin)) {
             $id_tintuc = $item['tbltintucs']['id_tintuc'];
             $tieude = $item['tbltintucs']['tieude'];
             $date = $item['tbltintucs']['ngaythang'];
             $d = getdate(strtotime($date));
             $ngay = $d['mday'] . '/' . $d['mon'] . '/' . $d['year'];
             $solanxem = $item['tbltintucs']['solanxem'];
             $tt = $item['tbltintucs']['tieude'];
             $output .= '<div class="left"><span class="icontin"></span>' . $this->link($tt, array('controller' => 'Tbltintucs', 'action' => 'view', $item['tbltintucs']['id_tintuc'])) . "<p style='margin-left:10px;'><span class='bitsmall'>({$ngay})</span><span class='bitsmall'>({$solanxem} lần xem)</span></p></div>";
         }
     }
     $output .= '</div>';
     return $output;
 }

 /**
  * 上传图片
  */
 public function actionUpload()
 {
     $Common = new Common();
     $fn = $_GET['CKEditorFuncNum'];
     $url = $Common->getCompleteUrl();
     $imgTypeArr = $Common->getImageTypes();
     if (!in_array($_FILES['upload']['type'], $imgTypeArr)) {
         echo '<script type="text/javascript">
             window.parent.CKEDITOR.tools.callFunction("' . $fn . '","","图片格式错误！");
             </script>';
     } else {
         $projectPath = Wave::app()->projectPath;
         $uploadPath = $projectPath . 'data/uploadfile/substance';
         if (!is_dir($uploadPath)) {
             mkdir($uploadPath, 0777);
         }
         $ym = $Common->getYearMonth();
         $uploadPath .= '/' . $ym;
         if (!is_dir($uploadPath)) {
             mkdir($uploadPath, 0777);
         }
         $imgType = strtolower(substr(strrchr($_FILES['upload']['name'], '.'), 1));
         $imageName = time() . '_' . rand() . '.' . $imgType;
         $file_abso = $url . '/data/uploadfile/substance/' . $ym . '/' . $imageName;
         $SimpleImage = new SimpleImage();
         $SimpleImage->load($_FILES['upload']['tmp_name']);
         $SimpleImage->resizeToWidth(800);
         $SimpleImage->save($uploadPath . '/' . $imageName);
         echo '<script type="text/javascript">
             window.parent.CKEDITOR.tools.callFunction("' . $fn . '","' . $file_abso . '","上传成功");
             </script>';
     }
 }

 function groupsLdap($param)
 {
     $ldap_host = $GLOBALS['phpgw_info']['server']['ldap_host'];
     $ldap_root_dn = $GLOBALS['phpgw_info']['server']['ldap_root_dn'];
     $ldap_root_pw = $GLOBALS['phpgw_info']['server']['ldap_root_pw'];
     $ldap_context = $GLOBALS['phpgw_info']['server']['ldap_context'];
     $result_groups = '';
     //Organizations Ldap
     $organization = 'ou=' . $param . "," . $ldap_context;
     if ($param == $ldap_context) {
         $organization = $ldap_context;
     }
     //Commons Functions
     $common = new Common();
     // Ldap Connection
     $ldap = $common->ldapConnect($ldap_host, $ldap_root_dn, $ldap_root_pw);
     if ($ldap) {
         $filter = "(&(phpgwAccountType=g)(cn=grupo*-im))";
         $justthese = array("cn", "gidNumber");
         $search = ldap_search($ldap, $organization, $filter, $justthese);
         $entry = ldap_get_entries($ldap, $search);
         if ($entry) {
             foreach ($entry as $tmp) {
                 if ($tmp['gidnumber'][0] != "") {
                     $result_groups[] = $tmp['cn'][0] . ";" . $tmp['gidnumber'][0];
                 }
             }
         }
         natsort($result_groups);
     }
     return $result_groups;
 }

function getConfirmPassword()
{
    $COMMON = new Common($debug);
    $sql = "SELECT * FROM `Proj2Advisors` WHERE `New` = 'true'";
    $rs = $COMMON->executeQuery($sql, "Advising Appointments");
    $row = mysql_fetch_row($rs);
    return $row[5];
}

function getAdvisor()
{
    $COMMON = new Common($debug);
    $sID = $_SESSION["studID"];
    $sql = "select * from Proj2Students where `StudentID` = '{$sID}'";
    $rs = $COMMON->executeQuery($sql, $_SERVER["SCRIPT_NAME"]);
    $row = mysql_fetch_row($rs);
    return $row[7];
}

 public function insertdata($url)
 {
     $common_obj = new Common();
     $set = array(CURLOPT_URL => "{$url}", CURLOPT_RETURNTRANSFER => true);
     $ch = curl_init();
     curl_setopt_array($ch, $set);
     $data1 = curl_exec($ch);
     $pattern = '/<li>(.*?)<\\/li>/is';
     preg_match_all($pattern, $data1, $str);
     $strall = $str[0];
     $listparse = parse_url($url);
     foreach ($strall as $k => $v) {
         preg_match('/<a href="(.*?)">(.*?)<\\/a><\\/div>/is', $v, $title);
         $conurl = parse_url($title[1]);
         if ($courl['scheme'] == null) {
             $scheme = 'http://';
         }
         if ($courl['host'] == null) {
             $host = $listparse['host'];
         }
         if ($courl['path'] == null) {
             $path = $listparse['path'];
         }
         $conquery = '?' . $conurl['query'];
         $contenturl = trim($scheme . $host . $path . $conquery);
         $md5url = md5("{$contenturl}");
         $csql = "select urlmd5 from " . DB_PREFIX . "gather where urlmd5='" . $md5url . "'";
         $query = $this->db->query($csql);
         $checkurl = $this->db->fetch_array($query);
         if ($checkurl) {
             continue;
         }
         //内容页preg
         curl_setopt($ch, CURLOPT_URL, $contenturl);
         $href_content = curl_exec($ch);
         preg_match('/<\\!\\-\\- m2o content start \\-\\->(.*?)<\\!\\-\\- m2o content end \\-\\->/is', $href_content, $maincontent);
         preg_match('/<div class="brief">(.*?)<\\/div>/is', $v, $brief);
         preg_match('/<div class="pubdate">(.*?)<\\/div>/is', $v, $pubdate);
         preg_match('/<div class="subtitle">(.*?)<\\/div>/is', $v, $subtitle);
         preg_match('/<div class="keywords">(.*?)<\\/div>/is', $v, $keywords);
         preg_match('/<div class="author">(.*?)<\\/div>/is', $v, $author);
         preg_match('/<img src="(.*?)" class="indexpic"\\/>/is', $v, $indexpic);
         $arr = array('title' => $title[2], 'brief' => $brief[1], 'pubdate' => $pubdate[1], 'subtitle' => $subtitle[1], 'keywords' => $keywords[1], 'author' => $author[1], 'indexpic' => $indexpic[1], 'content' => $maincontent[1], 'source_url' => $contenturl);
         $resultdata[] = array_reverse($arr);
     }
     foreach ($resultdata as $key => $value) {
         $common_obj->post_datagather($value, $this->sort_id);
         //更新接入状态
         $urlstatus = array('urlmd5' => md5($contenturl), 'url' => $contenturl, 'is_publish' => 1, 'title' => $title[2], 'create_time' => TIMENOW);
         $this->updata->creategather($urlstatus);
     }
     curl_close($ch);
     return TRUE;
 }

 function getStudent()
 {
     $debug = false;
     $COMMON = new Common($debug);
     //Use this as base for student access method
     $sql = "select * from Proj2Students where `StudentID` = '{$this->ID}'";
     $rs = $COMMON->executeQuery($sql, $_SERVER["SCRIPT_NAME"]);
     $studRow = mysql_fetch_row($rs);
     return $studRow;
     //end
 }

 public static function modify_settings($settings)
 {
     $Common = new Common();
     $settings_filename = '../require/settings.php';
     $content = file_get_contents($settings_filename);
     $fh = fopen($settings_filename, 'w');
     foreach ($settings as $settingname => $value) {
         if ($value == 'TRUE' || $value == 'FALSE') {
             $pattern = '/\\$' . $settingname . " = " . '(TRUE|FALSE)' . "/";
             $replace = '\\$' . $settingname . " = " . $value . "";
         } elseif (is_array($value)) {
             $pattern = '/\\$' . $settingname . " = array\\(" . '(.*)' . "\\)/";
             if ($Common->isAssoc($value)) {
                 foreach ($value as $key => $data) {
                     if (!isset($array_value)) {
                         $array_value = "'" . $key . "' => '" . $data . "'";
                     } else {
                         $array_value .= ",'" . $key . "' => '" . $data . "'";
                     }
                 }
             } else {
                 foreach ($value as $data) {
                     if (!isset($array_value)) {
                         $array_value = "'" . $data . "'";
                     } else {
                         $array_value .= ",'" . $data . "'";
                     }
                 }
             }
             if (!isset($array_value)) {
                 $array_value = '';
             }
             $replace = '\\$' . $settingname . " = array(" . $array_value . ")";
             unset($array_value);
         } else {
             $pattern = '/\\$' . $settingname . " = '" . '(.*)' . "'/";
             $replace = '\\$' . $settingname . " = '" . $value . "'";
         }
         $rep_cnt = 0;
         $content = preg_replace($pattern, $replace, $content, 1, $rep_cnt);
         /// If setting was a string and is now an array
         if ($rep_cnt == 0 && is_array($value)) {
             $pattern = '/\\$' . $settingname . " = '" . '(.*)' . "'/";
             $content = preg_replace($pattern, $replace, $content, 1, $rep_cnt);
         }
         // If setting is not in settings.php (for update)
         if ($rep_cnt == 0) {
             $content = preg_replace('/\\?>/', $replace . ";\n?>", $content, 1, $rep_cnt);
         }
     }
     fwrite($fh, $content);
     fclose($fh);
 }

 function __construct()
 {
     global $db, $common, $config;
     // connect to db
     $db = new Database();
     // get an instance of the other classes
     $common = new Common();
     // run under certain conditions
     $common->checkPaths();
     // see if all this is an authorized use of the script
     $this->checkSession();
     // load some html parts we are going to use
     require 'admin/php/content.php';
 }

 public function execute()
 {
     GWF_Website::plaintext();
     GWF3::setConfig('store_last_url', false);
     $lat = $this->module->lat();
     $lon = $this->module->lon();
     $descr = trim(Common::getGetString('pp_descr'));
     $descr = $descr === '' ? null : $descr;
     $id = Common::getGetInt('pp_id', 0);
     $user = GWF_User::getStaticOrGuest();
     $uid = $user->getID();
     if (!GWF_ProfilePOI::changeAllowed($id, $uid)) {
         $this->module->ajaxError('Permission error!');
     }
     $count = $id === 0 ? GWF_ProfilePOI::getPOICount($uid) : 0;
     $max_pois = $this->module->cfgAllowedPOIs();
     if ($count >= $max_pois) {
         $this->module->ajaxErr('err_poi_exceed');
     }
     $poi = new GWF_ProfilePOI(array('pp_id' => $id, 'pp_uid' => $uid, 'pp_lat' => $lat, 'pp_lon' => $lon, 'pp_descr' => $descr));
     $poi->replace();
     $data = $poi->getGDOData();
     $data['user_name'] = $user->getVar('user_name');
     die(json_encode($data));
 }

 public function execute()
 {
     if (false === Common::isFile(GWF_GESHI_PATH)) {
         return '';
         // FIXME: {gizmore} log it? GESHI_PATH is may not readable
     }
     require_once GWF_GESHI_PATH;
     $geshi = new GeSHi();
     $langs = $geshi->get_supported_languages(false);
     $key = htmlspecialchars(Common::getGetString('key', ''), ENT_QUOTES);
     sort($langs);
     //		$this->niceArray($langs, false, '-------')
     $this->niceArray($langs, 'python', 'Python');
     $this->niceArray($langs, 'perl', 'Perl');
     $this->niceArray($langs, 'cpp', 'CPP');
     $this->niceArray($langs, 'php', 'PHP');
     $back = $this->module->lang('th_lang') . ':' . PHP_EOL;
     $back .= '<select id="bb_code_lang_sel_' . $key . '">' . PHP_EOL;
     $back .= '<option value="0">' . $this->module->lang('th_lang') . '</option>' . PHP_EOL;
     foreach ($langs as $lang) {
         $back .= sprintf('<option value="%s">%s</option>', $lang, $lang) . PHP_EOL;
     }
     $back .= '</select>' . PHP_EOL;
     $back .= $this->module->lang('th_title') . ': <input type="text" id="bb_code_title_' . $key . '" size="20" value="" />' . PHP_EOL;
     $back .= '<input type="submit" value="' . $this->module->lang('btn_code') . '" onclick="return bbInsertCodeNow(\'' . $key . '\');" />' . PHP_EOL;
     return $back;
 }

 public function create($mundane_id)
 {
     if (trimlen($this->request->Action) > 0) {
         $this->request->save('Unit_create', true);
         if (!isset($this->session->user_id)) {
             header('Location: ' . UIR . 'Login/login/Unit/create/' . $mundane_id);
         } else {
             if ($_FILES['Heraldry']['size'] > 0 && Common::supported_mime_types($_FILES['Heraldry']['type'])) {
                 if (move_uploaded_file($_FILES['Heraldry']['tmp_name'], DIR_TMP . sprintf("um_%05d", $mundane_id))) {
                     $h_im = file_get_contents(DIR_TMP . sprintf("um_%05d", $mundane_id));
                     $h_imdata = base64_encode($h_im);
                 } else {
                     $Status = ['Status' => 1000, 'Error' => 'File IO Error', 'Detail' => 'File could not be moved to .../tmp'];
                 }
             }
             $r = $this->Unit->create_unit(['Heraldry' => $h_imdata, 'HeraldryMimeType' => $_FILES['Heraldry']['type'], 'Name' => $this->request->Unit_create->Name, 'Type' => $this->request->Unit_create->Type, 'Description' => $this->request->Unit_create->Description, 'History' => $this->request->Unit_create->History, 'Url' => $this->request->Unit_create->Url, 'Token' => $this->session->token, 'MundaneId' => $mundane_id]);
             if ($r['Status'] == 0) {
                 $this->request->clear('Unit_create');
                 header('Location: ' . UIR . 'Unit/index/' . $r['Detail']);
             } else {
                 if ($r['Status'] == 5) {
                     header('Location: ' . UIR . 'Login/login/Unit/create/' . $mundane_id);
                 } else {
                     $this->data['Error'] = $r['Error'] . ':<p>' . $r['Detail'];
                 }
             }
         }
     }
     if ($this->request->exists('Unit_create')) {
         $this->data['Unit_create'] = $this->request->Unit_create->Request;
     }
     $this->data['MundaneId'] = $mundane_id;
 }

 public function execute()
 {
     return $_SERVER['REMOTE_ADDR'];
     $ip = Common::getGetString('ip', false);
     $type = Common::getGetString('type', GWF_IP6::INT_32);
     return GWF_IP6::getIP($type, $ip);
 }

 public function payNotice($params = array(), $slave_url)
 {
     $output = Common::httpRequest($slave_url, $params, 'post');
     echo $output;
     Common::logGameResponse($slave_url . '|' . $output);
     exit;
 }

 public function execute()
 {
     if (false === ($user = GWF_User::getByID(Common::getGet('userid')))) {
         return GWF_HTML::err('ERR_UNKNOWN_USER');
     }
     $tmpfile = GWF_PATH . 'extra/temp/gpg/' . $user->getVar('user_id');
     if (!is_file($tmpfile) || !is_readable($tmpfile)) {
         return GWF_HTML::err('ERR_FILE_NOT_FOUND', array($tmpfile));
     }
     if (false === ($file_content = file_get_contents($tmpfile))) {
         return GWF_HTML::err('ERR_FILE_NOT_FOUND', array($tmpfile));
     }
     if (false === unlink($tmpfile)) {
         return GWF_HTML::err('ERR_WRITE_FILE', array($tmpfile));
     }
     if (false === ($fingerprint = GWF_PublicKey::grabFingerprint($file_content))) {
         return $this->module->error('err_gpg_key');
     }
     if (Common::getGet('token') !== $fingerprint) {
         return $this->module->error('err_gpg_token');
     }
     if (false === GWF_PublicKey::updateKey($user->getID(), $file_content)) {
         return GWF_HTML::err('ERR_DATABASE', array(__FILE__, __LINE__));
     }
     if (false === $user->saveOption(GWF_User::EMAIL_GPG, true)) {
         return GWF_HTML::err('ERR_DATABASE', array(__FILE__, __LINE__));
     }
     return $this->module->message('msg_setup_gpg');
 }

 public function onNPCTalk(SR_Player $player, $word, array $args)
 {
     $price = 800 - Common::clamp($player->get('negotiation'), 0, 10) * 10;
     $time = 1000 * $player->get('charisma') * 60;
     $b = chr(2);
     switch ($word) {
         case 'shadowrun':
             return $this->reply("I am in for a run, Do you want to {$b}hire{$b} my hacking skills?");
         case 'yes':
             return $this->reply("Yes, {$b}hire{$b} me and i'll aid you in combat and hacking.");
         case 'no':
             if ($player->hasTemp(self::MANIFESTO)) {
                 return $this->reply('Yes, no, what else?');
             } else {
                 $this->reply("This is our world now... The world of the electron and the switch, the beauty of the baud.");
                 $this->reply("We make use of a service already existing without paying for what could be dirt-cheap if it wasn't run by profiteering gluttons, and you call us criminals.");
                 $this->reply("We explore... And you call us criminals. We seek after knowledge... And you call us criminals. We exist without skin color, without nationality, without religious bias... And you call us criminals.");
                 $this->reply("You build atomic bombs, you wage wars, you murder, cheat, and lie to us and try to make us believe it's for our own good, yet we're the criminals.");
                 $this->reply("Yes, I am a criminal. My crime is that of curiosity. My crime is that of judging people by what they say and think, not what they look like. My crime is that of outsmarting you, something that you will never forgive me for.");
                 $this->reply("I am a hacker, and this is my manifesto. You may stop this individual, but you can't stop us all... After all, we're all alike.");
                 $player->setTemp(self::MANIFESTO, 1);
                 return true;
             }
             break;
         case 'hire':
             return $this->reply($this->onHire($player, $price, $time));
         default:
             return $this->reply("Need a hacker?");
             break;
     }
 }

 /**
  * Before Save callback
  * @param $Model
  */
 function beforeSave(&$Model)
 {
     $action = Common::isUuid($Model->id) ? 'update' : 'create';
     $details = print_r($Model->data, true);
     $this->__deferred = true;
     $this->__log($Model->alias, $action, $details, $Model->id);
 }

 public function get()
 {
     $arLotinfoTypes = $this->getLotinfoTypes();
     if (!empty($arLotinfoTypes)) {
         Common::recRMDir($this->arParams['XML_DIR']);
         Common::recRMDir($this->arParams['TMP_DIR']);
         foreach ($arLotinfoTypes as $arType) {
             $curlResult = Curl::getFile($this->arParams['XML_FILE'], $this->arParams['XML_DIR'], $arType, $this->arParams['API_URL'], ['apiKey' => $this->arParams['API_KEY'], 'cmd' => $this->arParams['API_CMD'], 'getData' => $this->arParams['GET_PARAMS']]);
             if (!$curlResult or !file_exists($curlResult)) {
                 $this->errors .= \Helper::boldColorText("Curl::getFile error: " . Curl::$ERROR, "red");
             } else {
                 try {
                     $parseXml = new ParseXml($curlResult, $this->arParams['TMP_DIR']);
                     $result = $parseXml->getData();
                     if (!$result) {
                         $this->errors .= \Helper::boldColorText("ObjectType - {$arType}: " . $parseXml->error, "red");
                     } else {
                         $this->message .= \Helper::boldColorText("ObjectType - {$arType}: Файл получен и обработан", "green");
                     }
                 } catch (Exception $e) {
                     $this->errors .= \Helper::boldColorText($e->getMessage(), "red");
                 }
             }
         }
     } else {
         $this->errors = \Helper::boldColorText("Нет номеров объектов Лотинфо", "red");
     }
     $log = !empty($this->errors) ? \Helper::boldColorText("Errors", "black") . $this->errors : "";
     $log .= !empty($this->message) ? \Helper::boldColorText("Messages", "black") . $this->message : "";
     file_put_contents($this->arParams['LOG_FILE'], $log, FILE_APPEND);
 }

 public function actionIndex()
 {
     $this->hasPrivilege(Acl::ACTION_VIEW);
     $this->pageTitle = Lang::t(Common::pluralize($this->resourceLabel));
     $searchModel = Dept::model()->searchModel(array(), $this->settings[Constants::KEY_PAGINATION], 'name');
     $this->render('default/index', array('model' => $searchModel));
 }