update

.env.example

@@ -5,13 +5,13 @@ DEFAULT_TIMEZONE = Asia/Shanghai
 
 [DATABASE]
 TYPE = mysql
-HOSTNAME = localhost
-DATABASE = btcloud
-USERNAME = btcloud
-PASSWORD = 123456
-HOSTPORT = 3306
+HOSTNAME = {dbhost}
+DATABASE = {dbname}
+USERNAME = {dbuser}
+PASSWORD = {dbpwd}
+HOSTPORT = {dbport}
 CHARSET = utf8mb4
-PREFIX = cloud_
+PREFIX = {dbprefix}
 DEBUG = false
 
 [LANG]

README.md

@@ -28,19 +28,14 @@
 - 如果是下载的源码包，需要执行 `composer install --no-dev` 安装依赖，如果是下载的Release包，则不需要
 - 设置网站运行目录为`public`
 - 设置伪静态为`ThinkPHP`
-- 导入`install.sql`到数据库
-- 在`.env`里面修改数据库信息，包括数据库地址（HOSTNAME）、数据库名（DATABASE）、用户名（USERNAME）、密码（PASSWORD）
-- 访问`/admin`进入网站后台，默认管理员用户名密码：admin/123456
+- 访问网站，会自动跳转到安装页面，根据提示安装完成
 
 ## 使用方法
 
-- 在`系统基本设置`修改宝塔面板接口设置。你需要一个官方最新脚本安装并绑定账号的宝塔面板，用于获取最新插件列表及插件包。并根据界面提示安装好专用插件。
+- 在`批量替换工具`，执行页面显示的命令，可将bt安装包、更新包和脚本文件里面的`http://www.example.com`批量替换成当前网站的网址。
+- 在`系统基本设置`修改宝塔面板接口设置。你需要准备一个使用官方最新脚本安装并绑定账号的宝塔面板，用于获取最新插件列表及插件包。并根据界面提示安装好专用插件。
 - 在`定时任务设置`执行所显示的命令从宝塔官方获取最新的插件列表并批量下载插件包（增量更新）。当然你也可以去插件列表，一个一个点击下载。
-- 在public/install/src和update文件夹里面分别是Linux面板安装包和更新包，解压后源码里面全部的 www.example.com 替换成你自己搭建的云端域名（如果云端用了强制https也需要单独改），然后重新打包。可使用VSCode等支持批量替换的软件。
-- 在public/win/panel/panel_x.x.x.zip是Windows面板的更新包，同样方法替换域名。
-- Linux面板安装脚本public/install/install_6.0.sh和更新脚本update6.sh里面的 www.example.com 替换成你自己搭建的云端域名。
-- Windows面板更新脚本 public/win/install/panel_update.py、public/win/panel/data/setup.py、api.py 里面的 www.example.com 替换成你自己搭建的云端域名。
-- 访问网站`/download`查看使用此第三方云端的一键安装脚本
+- 访问网站`/download`查看使用此第三方云端的一键安装脚本。
 
 ## 其他
 

app/command/DecryptFile.php

@@ -0,0 +1,115 @@
+<?php
+declare (strict_types = 1);
+
+namespace app\command;
+
+use think\console\Command;
+use think\console\Input;
+use think\console\input\Argument;
+use think\console\input\Option;
+use think\console\Output;
+use think\facade\Db;
+use think\facade\Config;
+use app\lib\Plugins;
+
+class DecryptFile extends Command
+{
+    protected function configure()
+    {
+        $this->setName('decrypt')
+            ->addArgument('type', Argument::REQUIRED, '文件类型,plugin:插件文件,module:模块文件,classdir:宝塔class目录,all:所有py文件')
+            ->addArgument('file', Argument::REQUIRED, '文件路径')
+            ->addArgument('os', Argument::OPTIONAL, '操作系统:Windows/Linux')
+            ->setDescription('解密宝塔面板python文件');
+    }
+
+    protected function execute(Input $input, Output $output)
+    {
+        $type = trim($input->getArgument('type'));
+        $file = trim($input->getArgument('file'));
+
+        if(!file_exists($file)){
+            $output->writeln('文件不存在');
+            return;
+        }
+        
+        if($type == 'plugin'){
+            $os = trim($input->getArgument('os'));
+            try{
+                if(Plugins::decode_plugin_main_local($file, $os)){
+                    $output->writeln('文件解密成功！');
+                }else{
+                    $output->writeln('文件解密失败！');
+                }
+            }catch(\Exception $e){
+                $output->writeln($e->getMessage());
+            }
+        }elseif($type == 'module'){
+            try{
+                $res = Plugins::decode_module_file($file);
+                if($res == 2){
+                    $output->writeln('文件解密失败！');
+                }elseif($res == 1){
+                    $output->writeln('文件解密成功！');
+                }
+            }catch(\Exception $e){
+                $output->writeln($e->getMessage());
+            }
+        }elseif($type == 'classdir'){
+            $file = rtrim($file, '/');
+            if(!file_exists($file.'/common.py')){
+                $output->writeln('当前路径非宝塔面板class目录');
+                return;
+            }
+            $dirs = glob($file.'/*Model');
+            foreach($dirs as $dir){
+                if(!is_dir($dir))continue;
+                $files = glob($dir.'/*Model.py');
+                foreach($files as $file){
+                    try{
+                        $res = Plugins::decode_module_file($file);
+                        if($res == 2){
+                            $output->writeln('文件解密失败：'.$file);
+                        }elseif($res == 1){
+                            $output->writeln('文件解密成功：'.$file);
+                        }
+                    }catch(\Exception $e){
+                        $output->writeln($e->getMessage().'：'.$file);
+                    }
+                }
+            }
+        }elseif($type == 'all'){
+            $file = rtrim($file, '/');
+            $this->scan_all_file($input, $output, $file);
+        }else{
+            $output->writeln('未知文件类型');
+        }
+    }
+
+    private function scan_all_file(Input $input, Output $output, $path) {
+        $dir = opendir($path);
+        while(false !== ( $file = readdir($dir)) ) {
+            if (( $file != '.' ) && ( $file != '..' )) {
+                $filepath = $path . '/' . $file;
+                if ( is_dir($filepath) ) {
+                    $this->scan_all_file($input, $output, $filepath);
+                }
+                elseif(substr($filepath, -3) == '.py') {
+                    try{
+                        $res = Plugins::decode_module_file($filepath);
+                        if($res == 2){
+                            $output->writeln('文件解密失败：'.$filepath);
+                        }elseif($res == 1){
+                            $output->writeln('文件解密成功：'.$filepath);
+                        }
+                    }catch(\Exception $e){
+                        $output->writeln($e->getMessage().'：'.$filepath);
+                    }
+                }
+            }
+        }
+        closedir($dir);
+    }
+
+    
+}

app/controller/Admin.php

@@ -6,6 +6,7 @@ use app\BaseController;
 use think\facade\Db;
 use think\facade\View;
 use think\facade\Request;
+use think\facade\Cache;
 use app\lib\Btapi;
 use app\lib\Plugins;
 
@@ -357,4 +358,31 @@ class Admin extends BaseController
         }
         return json(['code'=>-1, 'msg'=>'no act']);
     }
+
+    public function deplist(){
+        $deplist_linux = get_data_dir().'config/deployment_list.json';
+        $deplist_win = get_data_dir('Windows').'config/deployment_list.json';
+        $deplist_linux_time = file_exists($deplist_linux) ? date("Y-m-d H:i:s", filemtime($deplist_linux)) : '不存在';
+        $deplist_win_time = file_exists($deplist_win) ? date("Y-m-d H:i:s", filemtime($deplist_win)) : '不存在';
+        View::assign('deplist_linux_time', $deplist_linux_time);
+        View::assign('deplist_win_time', $deplist_win_time);
+        return view();
+    }
+
+    public function refresh_deplist(){
+        $os = input('get.os');
+        if(!$os) $os = 'Linux';
+        try{
+            Plugins::refresh_deplist($os);
+            Db::name('log')->insert(['uid' => 0, 'action' => '刷新一键部署列表', 'data' => '刷新'.$os.'一键部署列表成功', 'addtime' => date("Y-m-d H:i:s")]);
+            return json(['code'=>0,'msg'=>'获取最新一键部署列表成功！']);
+        }catch(\Exception $e){
+            return json(['code'=>-1, 'msg'=>$e->getMessage()]);
+        }
+    }
+
+    public function cleancache(){
+        Cache::clear();
+        return json(['code'=>0,'msg'=>'succ']);
+    }
 }

app/controller/Api.php

@@ -272,6 +272,12 @@ class Api extends BaseController
         return json($json_arr);
     }
 
+    //获取宝塔SSL列表
+    public function get_ssl_list(){
+        $data = bin2hex('[]');
+        return json(['status'=>true, 'msg'=>'', 'data'=>$data]);
+    }
+
     public function return_success(){
         return json(['status'=>true, 'msg'=>1, 'data'=>(object)[]]);
     }

app/controller/Install.php

@@ -0,0 +1,81 @@
+<?php
+namespace app\controller;
+
+use PDO;
+use Exception;
+use app\BaseController;
+use think\facade\View;
+use think\facade\Cache;
+
+class Install extends BaseController
+{
+    public function index()
+    {
+        if (file_exists(app()->getRootPath().'.env')){
+            return '当前已经安装成功，如果需要重新安装，请手动删除根目录.env文件';
+        }
+        if(request()->isPost()){
+            $mysql_host = input('post.mysql_host', null, 'trim');
+            $mysql_port = intval(input('post.mysql_port', '3306'));
+            $mysql_user = input('post.mysql_user', null, 'trim');
+            $mysql_pwd = input('post.mysql_pwd', null, 'trim');
+            $mysql_name = input('post.mysql_name', null, 'trim');
+            $mysql_prefix = input('post.mysql_prefix', 'cloud_', 'trim');
+            $admin_username = input('post.admin_username', null, 'trim');
+            $admin_password = input('post.admin_password', null, 'trim');
+
+            if(!$mysql_host || !$mysql_user || !$mysql_pwd || !$mysql_name || !$admin_username || !$admin_password){
+                return json(['code'=>0, 'msg'=>'必填项不能为空']);
+            }
+
+            $configdata = file_get_contents(app()->getRootPath().'.env.example');
+            $configdata = str_replace(['{dbhost}','{dbname}','{dbuser}','{dbpwd}','{dbport}','{dbprefix}'], [$mysql_host, $mysql_name, $mysql_user, $mysql_pwd, $mysql_port, $mysql_prefix], $configdata);
+
+            try{
+                $DB=new PDO("mysql:host=".$mysql_host.";dbname=".$mysql_name.";port=".$mysql_port,$mysql_user,$mysql_pwd);
+            }catch(Exception $e){
+                if($e->getCode() == 2002){
+                    $errorMsg='连接数据库失败：数据库地址填写错误！';
+                }elseif($e->getCode() == 1045){
+                    $errorMsg='连接数据库失败：数据库用户名或密码填写错误！';
+                }elseif($e->getCode() == 1049){
+                    $errorMsg='连接数据库失败：数据库名不存在！';
+                }else{
+                    $errorMsg='连接数据库失败：'.$e->getMessage();
+                }
+                return json(['code'=>0, 'msg'=>$errorMsg]);
+            }
+            $DB->setAttribute(PDO::ATTR_ERRMODE, PDO::ERRMODE_SILENT);
+            $DB->exec("set sql_mode = ''");
+            $DB->exec("set names utf8");
+
+            $sqls=file_get_contents(app()->getRootPath().'install.sql');
+            $sqls=explode(';', $sqls);
+            $sqls[]="REPLACE INTO `".$mysql_prefix."config` VALUES ('syskey', '".random(16)."')";
+            $success=0;$error=0;$errorMsg=null;
+            foreach ($sqls as $value) {
+                $value=trim($value);
+                if(empty($value))continue;
+                $value = str_replace('cloud_',$mysql_prefix,$value);
+                if($DB->exec($value)===false){
+                    $error++;
+                    $dberror=$DB->errorInfo();
+                    $errorMsg.=$dberror[2]."\n";
+                }else{
+                    $success++;
+                }
+            }
+            if(empty($errorMsg)){
+                if(!file_put_contents(app()->getRootPath().'.env', $configdata)){
+                    return json(['code'=>0, 'msg'=>'保存失败，请确保网站根目录有写入权限']);
+                }
+                Cache::clear();
+                return json(['code'=>1, 'msg'=>'安装完成！成功执行SQL语句'.$success.'条']);
+            }else{
+                return json(['code'=>0, 'msg'=>$errorMsg]);
+            }
+        }
+        return view();
+    }
+    
+}

app/lib/Btapi.php

@@ -193,7 +193,7 @@ class Btapi
         return $output;
     }
 
-	private function curl_download($url, $localpath, $timeout = 60)
+	private function curl_download($url, $localpath, $timeout = 300)
     {
     	//定义cookie保存位置
         $cookie_file=app()->getRuntimePath().md5($this->BT_PANEL).'.cookie';

app/lib/Plugins.php

@@ -48,8 +48,7 @@ class Plugins
             $list[] = $plugin;
         }
         $data['list'] = $list;
-        if($data['pro']>-1) $data['pro'] = 0;
-        if($data['ltd']>-1) $data['ltd'] = strtotime('+1 year');
+        $data['ltd'] = strtotime('+10 year');
         $json_file = get_data_dir($os).'config/plugin_list.json';
         if(!file_put_contents($json_file, json_encode($data))){
             throw new Exception('保存插件列表失败，文件无写入权限');
@@ -166,6 +165,7 @@ class Plugins
 
     //解密并下载插件主程序文件
     public static function decode_plugin_main($plugin_name, $version, $main_filepath, $os = 'Linux'){
+        if(self::decode_plugin_main_local($main_filepath, $os)) return true;
         $btapi = self::get_btapi($os);
         $result = $btapi->get_decode_plugin_main($plugin_name, $version);
         if($result && isset($result['status'])){
@@ -181,6 +181,61 @@ class Plugins
         }
     }
 
+    //本地解密插件主程序文件
+    public static function decode_plugin_main_local($main_filepath, $os = 'Linux'){
+        $btapi = self::get_btapi($os);
+        $userinfo = $btapi->get_user_info();
+        if(isset($userinfo['uid'])){
+            $src = file_get_contents($main_filepath);
+            if($src===false)throw new Exception('文件打开失败');
+            if(!$src || strpos($src, 'import ')!==false)return true;
+            $uid = $userinfo['uid'];
+            $serverid = $userinfo['serverid'];
+            $key = md5(substr($serverid, 10, 16).$uid.$serverid);
+            $iv = md5($key.$serverid);
+            $key = substr($key, 8, 16);
+            $iv = substr($iv, 8, 16);
+            $data_arr = explode("\n", $src);
+            $de_text = '';
+            foreach($data_arr as $data){
+                $data = trim($data);
+                if(!empty($data) && strlen($data)!=24){
+                    $tmp = openssl_decrypt($data, 'aes-128-cbc', $key, 0, $iv);
+                    if($tmp) $de_text .= $tmp;
+                }
+            }
+            if(!empty($de_text) && strpos($de_text, 'import ')!==false){
+                file_put_contents($main_filepath, $de_text);
+                return true;
+            }
+            return false;
+        }else{
+            throw new Exception('解密插件主程序文件失败，获取用户信息失败');
+        }
+    }
+
+    public static function decode_module_file($filepath){
+        $src = file_get_contents($filepath);
+        if($src===false)throw new Exception('文件打开失败');
+        if(!$src || strpos($src, 'import ')!==false)return 0;
+        $key = 'Z2B87NEAS2BkxTrh';
+        $iv = 'WwadH66EGWpeeTT6';
+        $data_arr = explode("\n", $src);
+        $de_text = '';
+        foreach($data_arr as $data){
+            $data = trim($data);
+            if(!empty($data)){
+                $tmp = openssl_decrypt($data, 'aes-128-cbc', $key, 0, $iv);
+                if($tmp) $de_text .= $tmp;
+            }
+        }
+        if(!empty($de_text) && strpos($de_text, 'import ')!==false){
+            file_put_contents($filepath, $de_text);
+            return 1;
+        }
+        return 2;
+    }
+
     //去除插件主程序文件授权校验
     public static function noauth_plugin_main($main_filepath){
         $data = file_get_contents($main_filepath);
@@ -215,8 +270,9 @@ class Plugins
                 self::download_file($btapi, $filename, $filepath);
                 if(file_exists($filepath)){
                     if($filemd5 && md5_file($filepath) != $filemd5){
+                        $msg = filesize($filepath) < 300 ? file_get_contents($filepath) : '插件文件MD5校验失败';
                         @unlink($filepath);
-                        throw new Exception('插件文件MD5校验失败');
+                        throw new Exception($msg);
                     }
                     return true;
                 }else{

app/middleware/AuthAdmin.php

@@ -12,10 +12,12 @@ class AuthAdmin
         $cookie = cookie('admin_token');
         if($cookie){
             $token=authcode($cookie, 'DECODE', config_get('syskey'));
-            list($user, $sid, $expiretime) = explode("\t", $token);
-            $session=md5(config_get('admin_username').config_get('admin_password'));
-            if($session==$sid && $expiretime>time()) {
-                $islogin = true;
+            if($token){
+                list($user, $sid, $expiretime) = explode("\t", $token);
+                $session=md5(config_get('admin_username').config_get('admin_password'));
+                if($session==$sid && $expiretime>time()) {
+                    $islogin = true;
+                }
             }
         }
         request()->islogin = $islogin;

app/middleware/LoadConfig.php

@@ -17,6 +17,16 @@ class LoadConfig
      */
     public function handle($request, \Closure $next)
     {
+        if (!file_exists(app()->getRootPath().'.env')){
+            if(strpos(request()->url(),'/installapp')===false){
+                return redirect((string)url('/installapp'))->header([
+                    'Cache-Control' => 'no-store, no-cache, must-revalidate',
+                    'Pragma' => 'no-cache',
+                ]);
+            }else{
+                return $next($request);
+            }
+        }
 
         $res = Db::name('config')->cache('configs',0)->column('value','key');
         Config::set($res, 'sys');

app/script/convert.sh

@@ -0,0 +1,76 @@
+#!/bin/bash
+
+Linux_Version="7.9.4"
+Windows_Version="7.6.0"
+
+FILES=(
+public/install/src/panel6.zip
+public/install/update/LinuxPanel-${Linux_Version}.zip
+public/install/install_6.0.sh
+public/install/update_panel.sh
+public/install/update6.sh
+public/win/install/panel_update.py
+public/win/panel/panel_${Windows_Version}.zip
+public/win/panel/data/api.py
+public/win/panel/data/setup.py
+)
+
+DIR=$1
+SITEURL=$2
+
+if [ ! -d "$DIR" ]; then
+	echo "网站目录不存在"
+	exit 1
+fi
+if [ "$SITEURL" = "" ]; then
+	echo "网站URL不正确"
+	exit 1
+fi
+
+function handleFile()
+{
+	Filename=$1
+	if [ "${Filename##*.}" = "zip" ]; then
+		handleZipFile $Filename
+	else
+		handleTextFile $Filename
+	fi
+}
+
+function handleZipFile()
+{
+	Filename=$1
+	mkdir -p /tmp/package
+	unzip -o -q $Filename -d /tmp/package
+	grep -rl --include=\*.py --include=\*.sh --include=index.js 'http://www.example.com' /tmp/package | xargs -I @ sed -i "s|http://www.example.com|${SITEURL}|g" @
+	Sprit_SITEURK=${SITEURL//\//\\\\\/}
+	grep -rl --include=\*.sh 'http:\\\/\\\/www.example.com' /tmp/package | xargs -I @ sed -i "s|http:\\\/\\\/www.example.com|${Sprit_SITEURK}|g" @
+	rm -f $Filename
+	cd /tmp/package && zip -9 -q -r $Filename * && cd -
+	rm -rf /tmp/package
+}
+
+function handleTextFile()
+{
+	sed -i "s|http://www.example.com|${SITEURL}|g" $1
+}
+
+
+echo "=========================="
+echo "正在处理中..."
+echo "=========================="
+
+for File in ${FILES[@]}
+do
+	Filename="${DIR}${File}"
+	if [ -f "$Filename" ]; then
+		handleFile $Filename
+		echo -e "成功处理文件：\033[32m${Filename}\033[0m"
+	else
+		echo -e "文件不存在：\033[33m${Filename}\033[0m"
+	fi
+done
+
+echo "=========================="
+echo "处理完成"
+echo "=========================="

app/view/admin/deplist.html

@@ -0,0 +1,49 @@
+{extend name="admin/layout" /}
+{block name="title"}一键部署列表{/block}
+{block name="main"}
+<div class="container" style="padding-top:70px;">
+<div class="col-sm-12 col-md-10 col-lg-8 center-block" style="float: none;">
+<div class="panel panel-primary">
+<div class="panel-heading"><h3 class="panel-title">一键部署列表</h3></div>
+<div class="panel-body">
+	<div class="list-group">
+		<div class="list-group-item list-group-item-warning">Linux面板</div>
+		<div class="list-group-item" style="line-height:35px">列表文件更新时间：<font color="blue">{$deplist_linux_time}</font><a href="javascript:refresh_deplist('Linux')" class="btn btn-success pull-right"><i class="fa fa-refresh"></i>重新获取</a></div>
+	</div>
+	<div class="list-group">
+		<div class="list-group-item list-group-item-warning">Windows面板</div>
+		<div class="list-group-item" style="line-height:35px">列表文件更新时间：<font color="blue">{$deplist_win_time}</font><a href="javascript:refresh_deplist('Windows')" class="btn btn-success pull-right"><i class="fa fa-refresh"></i>重新获取</a></div>
+	</div>
+</div>
+</div>
+<script src="//cdn.staticfile.org/layer/3.5.1/layer.js"></script>
+<script>
+function refresh_deplist(os){
+    var confirm = layer.confirm('是否确定从宝塔官方获取最新一键部署列表？', {
+        btn: ['确定','取消']
+    }, function(){
+        layer.close(confirm)
+        var ii = layer.msg('正在获取一键部署列表，请稍候...', {icon: 16, shade:0.1, time: 0});
+        $.ajax({
+            type : 'GET',
+            url : '/admin/refresh_deplist?os='+os,
+            dataType : 'json',
+            success : function(data) {
+                layer.close(ii)
+                if(data.code == 0){
+                    layer.alert(data.msg, {icon:1}, function(){window.location.reload()});
+                }else{
+                    layer.alert(data.msg, {icon:2});
+                }
+            },
+            error:function(data){
+                layer.close(ii)
+                layer.msg('服务器错误', {icon:2});
+            }
+        });
+    }, function(){
+        layer.close(confirm)
+    });
+}
+</script>
+{/block}

app/view/admin/layout.html

@@ -3,7 +3,7 @@
 <head>
   <meta charset="utf-8" />
   <meta name="renderer" content="webkit">
-  <meta name="viewport" content="width=device-width, initial-scale=1" />
+  <meta name="viewport" content="width=device-width, initial-scale=1.0, minimum-scale=1.0, maximum-scale=1.0, user-scalable=no" />
   <title>{block name="title"}标题{/block}</title>
   <link href="//cdn.staticfile.org/twitter-bootstrap/3.4.1/css/bootstrap.min.css" rel="stylesheet" />
   <link href="//cdn.staticfile.org/font-awesome/4.7.0/css/font-awesome.min.css" rel="stylesheet" />
@@ -34,11 +34,12 @@
           <li class="{:checkIfActive('index')}">
             <a href="/admin"><i class="fa fa-home"></i> 后台首页</a>
           </li>
-          <li class="{:checkIfActive('plugins,pluginswin')}">
+          <li class="{:checkIfActive('plugins,pluginswin,deplist')}">
             <a href="#" class="dropdown-toggle" data-toggle="dropdown"><i class="fa fa-cubes"></i> 插件列表<b class="caret"></b></a>
             <ul class="dropdown-menu">
               <li class="{:checkIfActive('plugins')}"><a href="/admin/plugins">Linux面板</a></li>
               <li class="{:checkIfActive('pluginswin')}"><a href="/admin/pluginswin">Windows面板</a></li>
+              <li class="{:checkIfActive('deplist')}"><a href="/admin/deplist">一键部署列表</a></li>
             </ul>
           </li>
           <li class="{:checkIfActive('record')}">
@@ -56,6 +57,7 @@
             <ul class="dropdown-menu">
               <li><a href="/admin/set">系统基本设置</a></li>
               <li><a href="/admin/set/mod/task">定时任务设置</a></li>
+              <li><a href="/admin/set/mod/tools">批量替换工具</a></li>
               <li><a href="/admin/set/mod/account">管理账号设置</a></li>
             </ul>
           </li>

app/view/admin/plugins.html

@@ -35,7 +35,7 @@ td{overflow: hidden;text-overflow: ellipsis;white-space: nowrap;max-width:340px;
 			<div class="modal-body">
 				<p>“版本与状态”一列中，红色的按钮代表本地不存在该版本插件包，需要点击下载；绿色的按钮代表已存在。</p>
                 <p>官方插件包本地存储路径是/data/plugins/package/软件标识-版本号.zip，第三方插件包路径是/data/plugins/other/other/，对于部分包含二次验证的插件可以自行修改。</p>
-                <p>点击【重新获取】按钮会从宝塔官方获取最新插件列表，但是插件包需要手动点击下载。如果需要批量下载插件包，可查看<a href="/admin/set/type/task">定时任务设置</a></p>
+                <p>点击【重新获取】按钮会从宝塔官方获取最新插件列表，但是插件包需要手动点击下载。如果需要批量下载插件包，可查看<a href="/admin/set/mod/task">定时任务设置</a></p>
 			</div>
 			<div class="modal-footer">
 				<button type="button" class="btn btn-default" data-dismiss="modal">关闭</button>

app/view/admin/pluginswin.html

@@ -35,7 +35,7 @@ td{overflow: hidden;text-overflow: ellipsis;white-space: nowrap;max-width:340px;
 			<div class="modal-body">
 				<p>“版本与状态”一列中，红色的按钮代表本地不存在该版本插件包，需要点击下载；绿色的按钮代表已存在。</p>
                 <p>官方插件包本地存储路径是/data/win/plugins/package/软件标识-版本号.zip，第三方插件包路径是/data/plugins/other/other/，对于部分包含二次验证的插件可以自行修改。</p>
-                <p>点击【重新获取】按钮会从宝塔官方获取最新插件列表，但是插件包需要手动点击下载。如果需要批量下载插件包，可查看<a href="/admin/set/type/task">定时任务设置</a></p>
+                <p>点击【重新获取】按钮会从宝塔官方获取最新插件列表，但是插件包需要手动点击下载。如果需要批量下载插件包，可查看<a href="/admin/set/mod/task">定时任务设置</a></p>
 			</div>
 			<div class="modal-footer">
 				<button type="button" class="btn btn-default" data-dismiss="modal">关闭</button>

app/view/admin/set.html

@@ -2,8 +2,8 @@
 {block name="title"}系统设置{/block}
 {block name="main"}
 <div class="container" style="padding-top:70px;">
-    <div class="col-xs-12 col-sm-10 col-lg-8 center-block" style="float: none;">
 {if $mod=='sys'}
+<div class="col-sm-12 col-md-6 center-block">
 <div class="panel panel-primary">
 <div class="panel-heading"><h3 class="panel-title">系统基本设置</h3></div>
 <div class="panel-body">
@@ -54,12 +54,14 @@
   </form>
 </div>
 </div>
+</div>
+<div class="col-sm-12 col-md-6 center-block">
 <div class="panel panel-primary">
 <div class="panel-heading"><h3 class="panel-title">宝塔Linux面板接口设置</h3></div>
 <div class="panel-body">
   <form onsubmit="return saveSetting(this)" method="post" class="form" role="form">
     <p>以下宝塔面板请使用官方最新脚本安装并绑定账号，用于获取最新插件列表及插件包</p>
-    <p><a href="/static/file/kaixin.zip">下载专用插件</a>，在面板【软件商店】->【第三方应用】，点击【导入插件】，导入该专用插件，<b>然后重启一次面板</b></p>
+    <p><a href="/static/file/kaixin.zip">下载专用插件(Linux)</a>，在面板【软件商店】->【第三方应用】，点击【导入插件】，导入该专用插件。</p>
 	<div class="form-group">
 	  <label>宝塔面板URL：</label><br/>
 	  <input type="text" name="bt_url" value="{:config_get('bt_url')}" class="form-control"/>
@@ -81,8 +83,7 @@
 <div class="panel-body">
   <form onsubmit="return saveSetting(this)" method="post" class="form" role="form">
     <p>以下宝塔面板请使用官方最新脚本安装并绑定账号，用于获取最新插件列表及插件包</p>
-    <p><a href="/static/file/win/kaixin.zip">下载专用插件</a>，在面板【软件商店】->【第三方应用】，点击【导入插件】，导入该专用插件。</p>
-	<p><a href="/static/file/win/__init__.zip">下载py替换文件</a>，解压覆盖到C:\Program Files\python\Lib\json\目录下，然后重启面板。</p>
+    <p><a href="/static/file/win/kaixin.zip">下载专用插件(Win)</a>，在面板【软件商店】->【第三方应用】，点击【导入插件】，导入该专用插件。</p>
 	<div class="form-group">
 	  <label>宝塔面板URL：</label><br/>
 	  <input type="text" name="wbt_url" value="{:config_get('wbt_url')}" class="form-control"/>
@@ -99,7 +100,9 @@
   </form>
 </div>
 </div>
+</div>
 {elseif $mod=='task'}
+<div class="col-sm-12 col-md-6 center-block">
 <div class="panel panel-success">
 <div class="panel-heading"><h3 class="panel-title">定时任务说明</h3></div>
 <div class="panel-body">
@@ -111,6 +114,8 @@
   </form>
 </div>
 </div>
+</div>
+<div class="col-sm-12 col-md-6 center-block">
 <div class="panel panel-info">
 <div class="panel-heading"><h3 class="panel-title">定时任务设置</h3></div>
 <div class="panel-body">
@@ -129,7 +134,9 @@
   </form>
 </div>
 </div>
+</div>
 {elseif $mod=='account'}
+<div class="col-xs-12 col-sm-8 col-lg-6 center-block" style="float: none;">
 <div class="panel panel-primary">
 <div class="panel-heading"><h3 class="panel-title">管理账号设置</h3></div>
 <div class="panel-body">
@@ -153,8 +160,21 @@
 	<div class="form-group text-center">
 	  <input type="submit" name="submit" value="保存" class="btn btn-success btn-block"/>
 	</div>
+	<a href="javascript:cleancache()" class="btn btn-default btn-sm btn-block">清理缓存</a>
   </form>
 </div>
+</div>
+{elseif $mod=='tools'}
+<div class="col-sm-12 col-md-10 col-lg-8 center-block" style="float: none;">
+<div class="panel panel-primary">
+<div class="panel-heading"><h3 class="panel-title">批量替换工具</h3></div>
+<div class="panel-body">
+  <form onsubmit="return saveAccount(this)" method="post" class="form" role="form">
+	<div class="alert alert-info" style="word-break:break-all;">使用以下命令可以将bt安装包、更新包和脚本文件里面的<code>http://www.example.com</code>批量替换成当前网址<code>{:request()->root(true)}</code>，每次更新版本后只需要执行一次即可。</div>
+    <div class="list-group-item" style="word-break:break-all;">cd {:app()->getRootPath()}app/script && chmod +x convert.sh && ./convert.sh {:app()->getRootPath()} {:request()->root(true)}</div><br/>
+  </form>
+</div>
+</div>
 {/if}
 <script src="//cdn.staticfile.org/layer/3.5.1/layer.js"></script>
 <script>
@@ -282,5 +302,21 @@ function saveAccount(obj){
 	});
 	return false;
 }
+function cleancache(){
+	var ii = layer.load(2, {shade:[0.1,'#fff']});
+	$.ajax({
+		type : 'GET',
+		url : '/admin/cleancache',
+		dataType : 'json',
+		success : function(data) {
+			layer.close(ii);
+			layer.msg('清理缓存成功', {icon: 1});
+		},
+		error:function(data){
+            layer.close(ii);
+			layer.msg('服务器错误');
+		}
+	});
+}
 </script>
 {/block}

app/view/install/index.html

@@ -0,0 +1,268 @@
+<!doctype html>
+<html>
+<head>
+    <meta charset="utf-8">
+    <meta http-equiv="X-UA-Compatible" content="IE=edge">
+    <title>宝塔第三方云端 - 安装程序</title>
+    <meta name="viewport" content="width=device-width, initial-scale=1.0, minimum-scale=1.0, maximum-scale=1.0, user-scalable=no" />
+    <meta name="renderer" content="webkit">
+    <style>
+        body {
+            background: #f1f6fd;
+            margin: 0;
+            padding: 0;
+            line-height: 1.5;
+            -webkit-font-smoothing: antialiased;
+            -moz-osx-font-smoothing: grayscale;
+        }
+
+        body, input, button {
+            font-family: 'Source Sans Pro', 'Helvetica Neue', Helvetica, 'Microsoft Yahei', Arial, sans-serif;
+            font-size: 14px;
+            color: #7E96B3;
+        }
+
+        .container {
+            max-width: 480px;
+            margin: 0 auto;
+            padding: 20px;
+            text-align: center;
+        }
+
+        a {
+            color: #4e73df;
+            text-decoration: none;
+        }
+
+        a:hover {
+            text-decoration: underline;
+        }
+
+        h1 {
+            margin-top: 0;
+            margin-bottom: 10px;
+        }
+
+        h2 {
+            font-size: 28px;
+            font-weight: normal;
+            color: #3C5675;
+            margin-bottom: 0;
+            margin-top: 0;
+        }
+
+        form {
+            margin-top: 40px;
+        }
+
+        .form-group {
+            margin-bottom: 20px;
+        }
+
+        .form-group .form-field:first-child input {
+            border-top-left-radius: 4px;
+            border-top-right-radius: 4px;
+        }
+
+        .form-group .form-field:last-child input {
+            border-bottom-left-radius: 4px;
+            border-bottom-right-radius: 4px;
+        }
+
+        .form-field input {
+            background: #fff;
+            margin: 0 0 2px;
+            border: 2px solid transparent;
+            transition: background 0.2s, border-color 0.2s, color 0.2s;
+            width: 100%;
+            padding: 15px 15px 15px 180px;
+            box-sizing: border-box;
+        }
+
+        .form-field input:focus {
+            border-color: #4e73df;
+            background: #fff;
+            color: #444;
+            outline: none;
+        }
+
+        .form-field label {
+            float: left;
+            width: 160px;
+            text-align: right;
+            margin-right: -160px;
+            position: relative;
+            margin-top: 15px;
+            font-size: 14px;
+            pointer-events: none;
+            opacity: 0.7;
+        }
+
+        button, .btn {
+            background: #3C5675;
+            color: #fff;
+            border: 0;
+            font-weight: bold;
+            border-radius: 4px;
+            cursor: pointer;
+            padding: 15px 30px;
+            -webkit-appearance: none;
+        }
+
+        button[disabled] {
+            opacity: 0.5;
+        }
+
+        .form-buttons {
+            height: 52px;
+            line-height: 52px;
+        }
+
+        .form-buttons .btn {
+            margin-right: 5px;
+        }
+
+        #error, .error, #success, .success, #warmtips, .warmtips {
+            background: #D83E3E;
+            color: #fff;
+            padding: 15px 20px;
+            border-radius: 4px;
+            margin-bottom: 20px;
+        }
+
+        #success {
+            background: #3C5675;
+        }
+
+        #error a, .error a {
+            color: white;
+            text-decoration: underline;
+        }
+
+        #warmtips {
+            background: #fff;
+            font-size: 14px;
+            color: #3C5675;
+            border: 2px solid #4e73df;
+            text-align: left;
+        }
+
+    </style>
+</head>
+
+<body>
+<div class="container">
+    <h1>
+        <svg t="1660545699809" class="icon" viewBox="0 0 1024 1024" version="1.1" xmlns="http://www.w3.org/2000/svg" p-id="4887" width="100px" height="100px">
+             <path d="M811.4 418.7C765.6 297.9 648.9 212 512.2 212S258.8 297.8 213 418.6C127.3 441.1 64 519.1 64 612c0 110.5 89.5 200 199.9 200h496.2C870.5 812 960 722.5 960 612c0-92.7-63.1-170.7-148.6-193.3z m36.3 281c-23.4 23.4-54.5 36.3-87.6 36.3H263.9c-33.1 0-64.2-12.9-87.6-36.3-23.4-23.4-36.3-54.6-36.3-87.7 0-28 9.1-54.3 26.2-76.3 16.7-21.3 40.2-36.8 66.1-43.7l37.9-9.9 13.9-36.6c8.6-22.8 20.6-44.1 35.7-63.4 14.9-19.2 32.6-35.9 52.4-49.9 41.1-28.9 89.5-44.2 140-44.2s98.9 15.3 140 44.2c19.9 14 37.5 30.8 52.4 49.9 15.1 19.3 27.1 40.7 35.7 63.4l13.8 36.5 37.8 10c54.3 14.5 92.1 63.8 92.1 120 0 33.1-12.9 64.3-36.3 87.7z" p-id="4888" fill="#4e73df"></path>
+        </svg>
+    </h1>
+    <h2>宝塔第三方云端 - 安装程序</h2>
+    <div>
+
+        <form method="post">
+            <div id="error" style="display:none"></div>
+            <div id="success" style="display:none"></div>
+            <div id="warmtips" style="display:none"><p>安装完成后，你还需要进行以下操作：</p><p>1、在后台使用批量替换工具，执行命令一键替换压缩包与安装脚本中的域名。</p><p></p>2、在后台配置面板对接，同步插件列表与插件包。</p></div>
+
+            <div class="form-group">
+                <div class="form-field">
+                    <label>MySQL 数据库地址</label>
+                    <input type="text" name="mysql_host" value="localhost" required="">
+                </div>
+
+                <div class="form-field">
+                    <label>MySQL 数据库端口</label>
+                    <input type="number" name="mysql_port" value="3306">
+                </div>
+
+                <div class="form-field">
+                    <label>MySQL 用户名</label>
+                    <input type="text" name="mysql_user" value="" required="">
+                </div>
+
+                <div class="form-field">
+                    <label>MySQL 密码</label>
+                    <input type="text" name="mysql_pwd" value="" required="">
+                </div>
+
+                <div class="form-field">
+                    <label>MySQL 数据库名</label>
+                    <input type="text" name="mysql_name" value="" required="">
+                </div>
+
+                <div class="form-field">
+                    <label>MySQL 数据表前缀</label>
+                    <input type="text" name="mysql_prefix" value="cloud_">
+                </div>
+            </div>
+
+            <div class="form-group">
+                <div class="form-field">
+                    <label>管理员用户名</label>
+                    <input type="text" name="admin_username" value="admin" required=""/>
+                </div>
+
+                <div class="form-field">
+                    <label>管理员密码</label>
+                    <input type="text" name="admin_password" value="123456" required="">
+                </div>
+            </div>
+
+            <div class="form-buttons">
+                <!--@formatter:off-->
+                <button type="submit" >点击安装</button>
+                <!--@formatter:on-->
+            </div>
+        </form>
+    </div>
+</div>
+<script src="//cdn.staticfile.org/jquery/2.1.4/jquery.min.js"></script>
+<script>
+    $(function () {
+        $('form').on('submit', function (e) {
+            e.preventDefault();
+            var form = this;
+            var $error = $("#error");
+            var $success = $("#success");
+            var $button = $(this).find('button')
+                .text("安装中...")
+                .prop('disabled', true);
+            $.ajax({
+                url: "",
+                type: "POST",
+                dataType: "json",
+                data: $(this).serialize(),
+                success: function (ret) {
+                    if (ret.code == 1) {
+                        $error.hide();
+                        $(".form-group", form).remove();
+                        $button.remove();
+                        $("#success").text(ret.msg).show();
+                        $("#warmtips").show();
+
+                        $buttons = $(".form-buttons", form);
+                        $('<a class="btn" href="/admin" style="background:#4e73df">进入后台</a>').appendTo($buttons);
+
+                    } else {
+                        $error.show().text(ret.msg);
+                        $button.prop('disabled', false).text("点击安装");
+                        $("html,body").animate({
+                            scrollTop: 0
+                        }, 500);
+                    }
+                },
+                error: function (xhr) {
+                    $error.show().text(xhr.responseText);
+                    $button.prop('disabled', false).text("点击安装");
+                    $("html,body").animate({
+                        scrollTop: 0
+                    }, 500);
+                }
+            });
+            return false;
+        });
+    });
+</script>
+</body>
+</html>

config/console.php

@@ -6,5 +6,6 @@ return [
     // 指令定义
     'commands' => [
         'updateall' => 'app\command\UpdateAll',
+        'decrypt' => 'app\command\DecryptFile',
     ],
 ];

install.sql

@@ -12,7 +12,7 @@ INSERT INTO `cloud_config` (`key`, `value`) VALUES
 ('bt_key', ''),
 ('whitelist', '0'),
 ('download_page', '1'),
-('new_version', '7.9.3'),
+('new_version', '7.9.4'),
 ('update_msg', '暂无更新日志'),
 ('update_date', '2022-07-13'),
 ('new_version_win', '7.6.0'),

public/install/install_6.0.sh

@@ -184,6 +184,11 @@ get_node_url(){
 	echo '---------------------------------------------';
 	echo "Selected download node...";
 	nodes=(http://dg2.bt.cn http://dg1.bt.cn http://125.90.93.52:5880 http://36.133.1.8:5880 http://123.129.198.197 http://38.34.185.130 http://116.213.43.206:5880 http://128.1.164.196);
+
+	if [ "$1" ];then
+		nodes=($(echo ${nodes[*]}|sed "s#${1}##"))
+	fi
+
 	tmp_file1=/dev/shm/net_test1.pl
 	tmp_file2=/dev/shm/net_test2.pl
 	[ -f "${tmp_file1}" ] && rm -f ${tmp_file1}
@@ -304,6 +309,10 @@ Install_RPM_Pack(){
 }
 Install_Deb_Pack(){
 	ln -sf bash /bin/sh
+	UBUNTU_22=$(cat /etc/issue|grep "Ubuntu 22")
+	if [ "${UBUNTU_22}" ];then
+		apt-get remove needrestart -y
+	fi
 	apt-get update -y
 	apt-get install ruby -y
 	apt-get install lsb-release -y
@@ -329,7 +338,7 @@ Install_Deb_Pack(){
 
 	for debPack in ${debPacks}
 	do
-		packCheck=$(dpkg -l ${debPack})
+		packCheck=$(dpkg -l|grep ${debPack})
 		if [ "$?" -ne "0" ] ;then
 			apt-get install -y $debPack
 		fi
@@ -484,6 +493,10 @@ Install_Python_Lib(){
 	if [ "${os_version}" != "" ];then
 		pyenv_file="/www/pyenv.tar.gz"
 		wget -O $pyenv_file $download_Url/install/pyenv/pyenv-${os_type}${os_version}-x${is64bit}.tar.gz -T 10
+		if [ "$?" != "0" ];then
+			get_node_url $download_Url
+			wget -O $pyenv_file $download_Url/install/pyenv/pyenv-${os_type}${os_version}-x${is64bit}.tar.gz -T 10
+		fi
 		tmp_size=$(du -b $pyenv_file|awk '{print $1}')
 		if [ $tmp_size -lt 703460 ];then
 			rm -f $pyenv_file
@@ -836,7 +849,14 @@ if [ "$go" == 'n' ];then
 	exit;
 fi
 
+ARCH_LINUX=$(cat /etc/os-release |grep "Arch Linux")
+if [ "${ARCH_LINUX}" ] && [ -f "/usr/bin/pacman" ];then
+	pacman -Sy 
+    pacman -S curl wget unzip firewalld openssl pkg-config make gcc cmake libxml2 libxslt libvpx gd libsodium oniguruma sqlite libzip autoconf inetutils sudo --noconfirm
+fi
+
 Install_Main
+
 echo > /www/server/panel/data/bind.pl
 echo -e "=================================================================="
 echo -e "\033[32mCongratulations! Installed successfully!\033[0m"
@@ -855,4 +875,3 @@ endTime=`date +%s`
 echo -e "Time consumed:\033[32m $outTime \033[0mMinute!"
 
 
-

public/install/public.sh

@@ -11,6 +11,11 @@ export LANGUAGE=en_US:en
 
 get_node_url(){
 	nodes=(http://dg2.bt.cn http://dg1.bt.cn http://36.133.1.8:5880 http://123.129.198.197 http://38.34.185.130 http://116.213.43.206:5880 http://128.1.164.196);
+
+	if [ "$1" ];then
+		nodes=($(echo ${nodes[*]}|sed "s#${1}##"))
+	fi
+
 	tmp_file1=/dev/shm/net_test1.pl
 	tmp_file2=/dev/shm/net_test2.pl
 	[ -f "${tmp_file1}" ] && rm -f ${tmp_file1}

public/install/update6.sh

@@ -42,7 +42,7 @@ download_Url=$NODE_URL
 setup_path=/www
 version=$(curl -Ss --connect-timeout 5 -m 2 $Btapi_Url/api/panel/get_version)
 if [ "$version" = '' ];then
-	version='7.9.3'
+	version='7.9.4'
 fi
 armCheck=$(uname -m|grep arm)
 if [ "${armCheck}" ];then

public/install/update_panel.sh

@@ -70,7 +70,7 @@ select_node(){
 get_version(){
     version=$(curl -Ss --connect-timeout 5 -m 2 $Btapi_Url/api/panel/get_version)
     if [ "$version" = '' ];then
-        version='7.9.3'
+        version='7.9.4'
     fi
 }
 

public/static/css/download.css

@@ -535,4 +535,186 @@ canvas {
 	.wrap-title a {
 		font-size: 12px;
 	}
-}
+}
+
+@media screen and (max-width: 1440px) {
+	.wrap {
+		width: 97%;
+	}
+}
+
+@media only screen and (max-width: 1299px) {
+	.d2 .wrap,
+	.d3 .wrap,
+	.d4 .wrap {
+		padding: 60px 0;
+	}
+
+	.install-box {
+		padding: 24px 20px 10px;
+		padding-right: 0;
+	}
+
+	.install-box.linux .title,
+	.install-box.windows .title,
+	.install-box .title {
+		margin-bottom: 10px;
+		font-size: 20px;
+	}
+
+	.install-box .img {
+		flex: 0 0 40%;
+	}
+
+	.install-box.linux .title,
+	.install-box.windows .title {
+		margin-bottom: 16px;
+	}
+
+	.install-box .desc {
+		font-size: 13px;
+	}
+	.install-box .btn {
+		padding: 0 12px;
+		height: 30px;
+		border-radius: 8px;
+		font-size: 12px;
+	}
+}
+@media only screen and (max-width: 1200px) {
+	.install-box .title {
+		font-size: 16px;
+	}
+	.install-box .desc {
+		font-size: 12px;
+	}
+}
+@media only screen and (max-width: 980px) {
+	.install-list {
+		justify-content: flex-start;
+		flex-wrap: wrap;
+	}
+	.install-box,
+	.install-box.linux,
+	.install-box.windows {
+		width: 48%;
+		padding: 15px;
+		align-items: center;
+	}
+	.install-box:nth-child(2n) {
+		margin-left: 4%;
+	}
+	.install-box.app {
+		margin-top: 30px;
+		margin-left: 0;
+	}
+	.install-box.monitor {
+		margin-top: 30px;
+	}
+	.install-box.linux .title,
+	.install-box.windows .title,
+	.install-box .title {
+		font-size: 16px;
+	}
+	.install-box .btn {
+		height: 24px;
+		padding: 0 10px;
+		border-radius: 6px;
+		font-weight: normal;
+	}
+	.install-box .btn + .btn {
+		margin-left: 5px;
+	}
+
+	.install-code {
+		flex-direction: column;
+		align-items: flex-start;
+	}
+	.install-code .code-cont {
+		width: 100%;
+	}
+	.install-code .command {
+		flex: 1;
+		width: 0;
+		margin-left: 0;
+		line-height: 18px;
+		font-size: 12px;
+		word-break: break-all;
+	}
+	.online-install-cont {
+		flex-direction: column;
+	}
+	.online-install-cont .form {
+		margin-bottom: 20px;
+	}
+	.online-install-cont .pr-70 {
+		padding-right: 0;
+	}
+	.online-install-cont .pl-10 {
+		padding-left: 0;
+	}
+	.online-install-cont .first-line {
+		flex-wrap: wrap;
+	}
+	.online-install-cont .server-line {
+		width: 100%;
+		flex: none;
+	}
+	.online-install-cont .port-line {
+		flex: none;
+		margin-top: 20px;
+		width: 100%;
+	}
+
+	.d2 .desc,
+	.d2 .tips {
+		line-height: 24px;
+	}
+}
+
+@media only screen and (max-width: 768px) {
+	.d2 .wrap,
+	.d3 .wrap,
+	.d4 .wrap {
+		padding: 40px 0;
+	}
+	.d1 .wrap {
+		padding-top: 40px;
+	}
+	.install-box {
+		flex-wrap: wrap;
+	}
+	.install-box .img,
+	.install-box .cont {
+		flex: 0 0 100%;
+	}
+	.install-box .cont {
+		margin-top: 10px;
+		margin-left: 0;
+		padding: 0;
+	}
+	.install-box .title,
+	.install-box.linux .title,
+	.install-box.windows .title {
+		margin-bottom: 10px;
+	}
+	.install-box .desc {
+		margin-bottom: 10px;
+	}
+
+	.wrap-title {
+		margin-bottom: 20px;
+	}
+	.wrap-title::before {
+		width: 3px;
+		height: 20px;
+		margin-right: 10px;
+	}
+	.wrap-title .text {
+		font-size: 20px;
+		margin-right: 10px;
+	}
+	.wrap-title a {
+		font-size: 12px;
+	}
+}

route/app.php

@@ -36,6 +36,9 @@ Route::group('api', function () {
     Route::get('/getIpAddress', 'api/get_ip_address');
     Route::post('/Auth/GetAuthToken', 'api/get_auth_token');
     Route::post('/Auth/GetBindCode', 'api/return_error');
+    Route::post('/Auth/GetSSLList', 'api/get_ssl_list');
+    Route::post('/Cert/get_order_list', 'api/return_empty_array');
+    Route::post('/Cert/get_product_list', 'api/return_success');
     Route::get('/Pluginother/get_file', 'api/download_plugin_other');
 
     Route::post('/Pluginother/create_order', 'api/return_error');
@@ -114,9 +117,14 @@ Route::group('admin', function () {
     Route::get('/list', 'admin/list');
     Route::post('/list_data', 'admin/list_data');
     Route::post('/list_op', 'admin/list_op');
+    Route::get('/deplist', 'admin/deplist');
+    Route::get('/refresh_deplist', 'admin/refresh_deplist');
+    Route::get('/cleancache', 'admin/cleancache');
 
 })->middleware(\app\middleware\CheckAdmin::class);
 
+Route::any('/installapp', 'install/index');
+
 Route::miss(function() {
     return response('404 Not Found')->code(404);
 });

wiki/files/PluginLoader.py

@@ -36,6 +36,7 @@ def get_auth_state():
 #执行插件方法(插件名,方法名,参数)
 def plugin_run(plugin_name, def_name, args):
     if not plugin_name or not def_name: return public.returnMsg(False,'插件名称和插件方法名称不能为空!')
+    if not path_check(plugin_name) or not path_check(def_name): return public.returnMsg(False,'插件名或方法名不能包含特殊符号!')
     p_path = public.get_plugin_path(plugin_name)
     if not os.path.exists(p_path + '/index.php') and not os.path.exists(p_path + '/%s_main.py' % plugin_name): return public.returnMsg(False,'插件不存在!')
     
@@ -73,12 +74,21 @@ def plugin_run(plugin_name, def_name, args):
 #执行模块方法(模块名,方法名,参数)
 def module_run(mod_name, def_name, args):
     if not mod_name or not def_name: return public.returnMsg(False,'模块名称和模块方法名称不能为空!')
+    if not path_check(mod_name) or not path_check(def_name): return public.returnMsg(False,'模块名或方法名不能包含特殊符号!')
+
+    if 'model_index' in args:
+        if args.model_index:
+            mod_file = "{}/{}Model/{}Model.py".format(public.get_class_path(),args.model_index,mod_name)
+        else:
+            mod_file = "{}/projectModel/{}Model.py".format(public.get_class_path(),mod_name)
+    else:
+        module_list = get_module_list()
+        for module_dir in module_list:
+            mod_file = "{}/{}/{}Model.py".format(public.get_class_path(),module_dir,mod_name)
+            if os.path.exists(mod_file): break
 
-    mod_file = "{}/projectModel/{}Model.py".format(public.get_class_path(),mod_name)
     if not os.path.exists(mod_file):
-        mod_file = "{}/databaseModel/{}Model.py".format(public.get_class_path(),mod_name)
-        if not os.path.exists(mod_file):
-            return public.returnMsg(False,'模块[%s]不存在' % mod_name)
+        return public.returnMsg(False,'模块[%s]不存在' % mod_name)
 
     def_object = public.get_script_object(mod_file)
     if not def_object: return public.returnMsg(False,'模块[%s]不存在!' % mod_name)
@@ -92,3 +102,21 @@ def module_run(mod_name, def_name, args):
     result = run_object(args)
     return result
 
+#获取模块文件夹列表
+def get_module_list():
+    list = []
+    class_path = public.get_class_path()
+    f_list = os.listdir(class_path)
+    for fname in f_list:
+        f_path = class_path+'/'+fname
+        if os.path.isdir(f_path) and len(fname) > 6 and fname.find('.') == -1 and fname.find('Model') != -1:
+            list.append(fname)
+    return list
+
+#检查路径是否合法
+def path_check(path):
+    list = ["./","..",",",";",":","?","'","\"","<",">","|","\\","\n","\r","\t","\b","\a","\f","\v","*","%","&","$","#","@","!","~","`","^","(",")","+","=","{","}","[","]"]
+    for i in path:
+        if i in list:
+            return False
+    return True

wiki/files/bt.js

@@ -40,8 +40,9 @@ if("undefined" != typeof bt && bt.hasOwnProperty("prompt_confirm")){
 }
 if("undefined" != typeof database && database.hasOwnProperty("del_database")){
     database.del_database = function (wid, dbname,obj, callback) {
+        var type = $('.database-pos .tabs-item.active').data('type')
         title = '',
-        tips = '是否确认【删除数据库】，删除后可能会影响业务使用！';
+        tips = '是否确认【删除数据库】，'+ (type !== 'mysql'?'当前数据库暂不支持数据库回收站，删除后将无法恢复，请谨慎操作':'，删除后可能会影响业务使用！');
         if(obj && obj.db_type > 0) tips = '远程数据库不支持数据库回收站，删除后将无法恢复，请谨慎操作';
         var title = typeof dbname === "function" ?'批量删除数据库':'删除数据库 [ '+ dbname +' ]';
         layer.open({
@@ -157,7 +158,10 @@ if("undefined" != typeof bt && bt.hasOwnProperty("firewall") && bt.firewall.hasO
             if (port.indexOf('-') != -1) ports = port.split('-');
             for (var i = 0; i < ports.length; i++) {
                 if (!bt.check_port(ports[i])) {
-                    layer.msg(lan.firewall.port_err, { icon: 5 });
+                    layer.msg('可用端口范围：1-65535', { icon: 2 });
+                    // layer.msg(lan.firewall.port_err, {
+                    //   icon: 5
+                    // });
                     return;
                 }
             }

wiki/update.md

@@ -10,9 +10,11 @@
 
 - 将PluginLoader.py复制到class文件夹
 
+- 批量解密模块文件：执行 php think decrypt classdir <面板class文件夹路径>
+
 - 全局搜索替换 https://api.bt.cn => http://www.example.com
 
-- 全局搜索替换 https://www.bt.cn/api/ => http://www.example.com/api/（需排除clearModel.py）
+- 全局搜索替换 https://www.bt.cn/api/ => http://www.example.com/api/（需排除clearModel.py、ipsModel.py）
 
 - 全局搜索替换 http://download.bt.cn/install/update6.sh => http://www.example.com/install/update6.sh
 
@@ -40,6 +42,8 @@
 
 - class/panelPlugin.py 文件，download_icon方法内替换 public.GetConfigValue('home') => 'https://www.bt.cn'
 
+- class/panelPlugin.py 文件，删除public.total_keyword(get.query)这一行
+
 - class/panelPlugin.py 文件，set_pyenv方法内，temp_file = public.readFile(filename)这行代码下面加上
 
   ```python
@@ -61,16 +65,12 @@
 
   "update_software_list": update_software_list,
 
-  "check_files_panel": check_files_panel,
-
   "check_panel_msg": check_panel_msg,
 
-- 去除面板日志上报：script/site_task.py 文件
-
-  删除最下面 logs_analysis() 这1行
-
 - 去除首页广告：BTPanel/static/js/index.js 文件删除最下面index.recommend_paid_version()这一行
 
+- 去除内页广告：BTPanel/templates/default/layout.html 删除getPaymentStatus();这一行
+
 - 去除首页自动检测更新，避免频繁请求云端：BTPanel/static/js/index.js 文件注释掉bt.system.check_update这一段代码外的setTimeout
 
 - [可选]去除各种计算题：复制bt.js到 BTPanel/static/ ，在 BTPanel/templates/default/layout.html 的\</body\>前面加入
@@ -91,9 +91,8 @@
 
 - [可选]关闭未绑定域名提示页面：在class/panelSite.py，root /www/server/nginx/html改成return 400
 
-- [可选]关闭自动生成访问日志：在 BT-Panel，WSGIServer((HOST, PORT)里面增加参数 log=None
+- [可选]关闭自动生成访问日志：在 BTPanel/\_\_init\_\_.py  删除public.write_request_log()这一行
 
-  在 BTPanel/\_\_init\_\_.py  删除public.write_request_log()这一行
 
 解压安装包panel6.zip，将更新包改好的文件覆盖到里面，然后重新打包，即可更新安装包。（