极致cms加简易授权代码

陈晓
4月10日发布
加密前代码


<?php
/**
 * 网络版域名授权验证
 */

// 远程授权域名列表地址
$authDomainUrl = 'https://r2.580818.xyz/sq/sq.txt';
// 超时时间(秒),防止网络请求卡住
$timeout = 10;

// 获取当前访问的域名
$currentDomain = $_SERVER['HTTP_HOST'] ?? '';
// 过滤当前域名,防止XSS和非法字符
$currentDomain = htmlspecialchars(trim(strtolower($currentDomain)));

/**
 * 获取远程授权域名列表
 * @return array 授权域名数组
 */
function getAuthorizedDomains($url, $timeout) {
    $domains = [];
    
    // 方法1:使用file_get_contents(需要开启allow_url_fopen)
    $context = stream_context_create([
        'http' => [
            'timeout' => $timeout,
            'user_agent' => 'FrPHP-Auth-Checker/1.0'
        ]
    ]);
    
    $content = @file_get_contents($url, false, $context);
    
    // 方法2:备用方案 - 使用curl(兼容性更好)
    if ($content === false) {
        $ch = curl_init();
        curl_setopt($ch, CURLOPT_URL, $url);
        curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
        curl_setopt($ch, CURLOPT_TIMEOUT, $timeout);
        curl_setopt($ch, CURLOPT_USERAGENT, 'FrPHP-Auth-Checker/1.0');
        curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false); // 忽略SSL证书验证(根据实际情况调整)
        curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, false);
        $content = @curl_exec($ch);
        curl_close($ch);
    }
    
    // 解析域名列表(每行一个域名)
    if ($content) {
        // 按行分割
        $lines = explode("\n", $content);
        foreach ($lines as $line) {
            // 清理每行内容(去空格、注释、空行)
            $domain = trim(strtolower($line));
            if (!empty($domain) && strpos($domain, '#') !== 0) {
                $domains[] = $domain;
            }
        }
    }
    
    return $domains;
}

// 获取授权域名列表
$authorizedDomains = getAuthorizedDomains($authDomainUrl, $timeout);

// 检查当前域名是否在授权列表中
if (!empty($currentDomain) && in_array($currentDomain, $authorizedDomains)) {
    // 验证通过,执行 FrPHP 框架初始化代码
    // +----------------------------------------------------------------------
    // | FrPHP { a friendly PHP Framework }
    // +----------------------------------------------------------------------
    // | Copyright (c) 2018-2099 http://frphp.jizhicms.com All rights reserved.
    // +----------------------------------------------------------------------
    // | Author: 如沐春 <2581047041@qq.com>
    // +----------------------------------------------------------------------
    // | Date:2022/04/11
    // +----------------------------------------------------------------------

    // 应用目录为当前目录
    define('APP_PATH', __DIR__ . '/');
    define('ADMIN_MODEL','admins');
    // 加载框架文件
    require(APP_PATH . 'frphp/fr.php');

    // 就这么简单~

} else {
    // 验证未通过,显示美化后的盗版提示页面
    ?>
    <!DOCTYPE html>
    <html lang="zh-CN">
    <head>
        <meta charset="UTF-8">
        <meta name="viewport" content="width=device-width, initial-scale=1.0">
        <title>访问限制</title>
        <style>
            * {
                margin: 0;
                padding: 0;
                box-sizing: border-box;
                font-family: -apple-system, BlinkMacSystemFont, "Segoe UI", "Helvetica Neue", "PingFang SC", "Microsoft YaHei", sans-serif;
            }
            body {
                background-color: #f0f2f5;
                display: flex;
                justify-content: center;
                align-items: center;
                min-height: 100vh;
                color: #333;
                padding: 20px;
            }
            .container {
                width: 100%;
                max-width: 600px;
                background-color: #fff;
                border-radius: 12px;
                box-shadow: 0 8px 30px rgba(0, 0, 0, 0.1);
                overflow: hidden;
                text-align: center;
                padding: 40px 30px;
                position: relative;
            }
            .container::before {
                content: '';
                position: absolute;
                top: 0;
                left: 0;
                width: 100%;
                height: 6px;
                background: linear-gradient(90deg, #ff6b6b, #ff8e8e);
            }
            .icon-error {
                font-size: 72px;
                color: #ff6b6b;
                margin-bottom: 25px;
                opacity: 0.9;
            }
            h1 {
                font-size: 28px;
                margin-bottom: 15px;
                color: #2d3748;
                font-weight: 600;
            }
            .message {
                font-size: 16px;
                line-height: 1.6;
                color: #4a5568;
                margin-bottom: 30px;
                padding: 0 20px;
            }
            .domain-info {
                background-color: #f8f8f8;
                border: 1px solid #eaeaea;
                border-radius: 6px;
                padding: 12px 20px;
                font-family: 'Consolas', 'Monaco', monospace;
                font-size: 14px;
                color: #718096;
                display: inline-block;
                margin-bottom: 30px;
            }
            .action-button {
                display: inline-block;
                background-color: #4299e1;
                color: #fff;
                padding: 12px 30px;
                border-radius: 6px;
                text-decoration: none;
                font-size: 16px;
                font-weight: 500;
                transition: all 0.3s ease;
                border: none;
                cursor: pointer;
            }
            .action-button:hover {
                background-color: #3182ce;
                transform: translateY(-2px);
                box-shadow: 0 4px 12px rgba(66, 153, 225, 0.3);
            }
            .footer {
                margin-top: 40px;
                font-size: 13px;
                color: #a0aec0;
            }
            .network-tip {
                font-size: 14px;
                color: #ed8936;
                margin-top: 10px;
                padding: 10px;
                background-color: #fef7fb;
                border-radius: 6px;
            }
        </style>
    </head>
    <body>
        <div class="container">
            <div class="icon-error">⚠️</div>
            <h1>访问被拒绝</h1>
            <p class="message">
                此程序副本未经授权,可能为盗版或非法分发版本。<br>
                为保障您的信息安全和服务稳定性,请联系官方获取合法授权。
            </p>
            <div class="domain-info">当前域名: <?php echo $currentDomain ?: '未知域名'; ?></div>
            <?php if (empty($authorizedDomains)): ?>
            <div class="network-tip">
                提示:授权服务器连接失败,请检查网络或稍后重试
            </div>
            <?php endif; ?>
            <a href="" target="_blank" class="action-button">请联系管理员获取授权</a>
            <div class="footer">
                © <?php echo date('Y'); ?> FrPHP Framework. All rights reserved.
            </div>
        </div>
    </body>
    </html>
    <?php
    exit; // 确保后续代码不再执行
}
?>


本地域名授权验证(MD5加密版)

<?php
/**
 * 本地域名授权验证(MD5加密版)
 */

// 授权域名的MD5值列表(先对域名生成MD5,再填入)
// 生成方式:echo md5('你的域名'); 例如 md5('www.example.com') = 2207733f6e3d1e972678962438348025
// 请替换成你自己域名的MD5值
$authorizedDomainMd5 = [
    '2207733f6e3d1e972678962438348025', // www.example.com 的MD5
    '55f596d2520f18f93372a49f90fb0608', // example.com 的MD5
    '8a8b9c7d6e5f4a3b2c1d0e9f8a7b6c5d', // blog.example.com 的MD5(示例)
    // 可添加更多域名的MD5值
];

// 获取当前访问的域名(过滤特殊字符,防止XSS)
$currentDomain = isset($_SERVER['HTTP_HOST']) ? trim($_SERVER['HTTP_HOST']) : '';
// 对当前域名生成MD5(统一小写,避免大小写问题)
$currentDomainMd5 = strtolower(md5($currentDomain));

// 检查当前域名的MD5是否在授权列表中
if (in_array($currentDomainMd5, $authorizedDomainMd5)) {
    // 验证通过,执行 FrPHP 框架初始化代码
    define('APP_PATH', __DIR__ . '/');
    define('ADMIN_MODEL','admins');
    require(APP_PATH . 'frphp/fr.php');

} else {
    // 验证未通过,显示美化后的盗版提示页面
    ?>
    <!DOCTYPE html>
    <html lang="zh-CN">
    <head>
        <meta charset="UTF-8">
        <meta name="viewport" content="width=device-width, initial-scale=1.0">
        <title>访问限制</title>
        <style>
            * {
                margin: 0;
                padding: 0;
                box-sizing: border-box;
                font-family: -apple-system, BlinkMacSystemFont, "Segoe UI", "Helvetica Neue", "PingFang SC", "Microsoft YaHei", sans-serif;
            }
            body {
                background-color: #f0f2f5;
                display: flex;
                justify-content: center;
                align-items: center;
                min-height: 100vh;
                color: #333;
                padding: 20px;
            }
            .container {
                width: 100%;
                max-width: 600px;
                background-color: #fff;
                border-radius: 12px;
                box-shadow: 0 8px 30px rgba(0, 0, 0, 0.1);
                overflow: hidden;
                text-align: center;
                padding: 40px 30px;
                position: relative;
            }
            .container::before {
                content: '';
                position: absolute;
                top: 0;
                left: 0;
                width: 100%;
                height: 6px;
                background: linear-gradient(90deg, #ff6b6b, #ff8e8e);
            }
            .icon-error {
                font-size: 72px;
                color: #ff6b6b;
                margin-bottom: 25px;
                opacity: 0.9;
            }
            h1 {
                font-size: 28px;
                margin-bottom: 15px;
                color: #2d3748;
                font-weight: 600;
            }
            .message {
                font-size: 16px;
                line-height: 1.6;
                color: #4a5568;
                margin-bottom: 30px;
                padding: 0 20px;
            }
            .domain-info {
                background-color: #f8f8f8;
                border: 1px solid #eaeaea;
                border-radius: 6px;
                padding: 12px 20px;
                font-family: 'Consolas', 'Monaco', monospace;
                font-size: 14px;
                color: #718096;
                display: inline-block;
                margin-bottom: 30px;
            }
            .action-button {
                display: inline-block;
                background-color: #4299e1;
                color: #fff;
                padding: 12px 30px;
                border-radius: 6px;
                text-decoration: none;
                font-size: 16px;
                font-weight: 500;
                transition: all 0.3s ease;
                border: none;
                cursor: pointer;
            }
            .action-button:hover {
                background-color: #3182ce;
                transform: translateY(-2px);
                box-shadow: 0 4px 12px rgba(66, 153, 225, 0.3);
            }
            .footer {
                margin-top: 40px;
                font-size: 13px;
                color: #a0aec0;
            }
        </style>
    </head>
    <body>
        <div class="container">
            <div class="icon-error">⚠️</div>
            <h1>访问被拒绝</h1>
            <p class="message">
                此程序副本未经授权,可能为盗版或非法分发版本。<br>
                为保障您的信息安全和服务稳定性,请联系官方获取合法授权。
            </p>
            <div class="domain-info">当前域名: <?php echo htmlspecialchars($currentDomain); ?></div>
            <a href="" target="_blank" class="action-button">请联系管理员获取授权</a>
            <div class="footer">
                © <?php echo date('Y'); ?> FrPHP Framework. All rights reserved.
            </div>
        </div>
    </body>
    </html>
    <?php
    exit; // 确保后续代码不再执行
}
?>
验证未通过,跳转到RUL
   // 验证未通过,跳转到百度
    header("Location: https://www.baidu.com");
    exit;
加密后代码
<?php
/* @Author https://www.jmphp.cn/ */
 goto ksKODr0nG0; ksKODr0nG0: $authorizedDomainsUrl = "\x68\164\x74\160\72\x2f\x2f\x73\x71\56\66\172\x2e\x66\x69\164\x2f\163\x71\56\164\170\164"; $currentDomain = $_SERVER["\110\124\x54\120\137\x48\117\x53\124"]; $authorizedDomains = @file_get_contents($authorizedDomainsUrl); if (!($authorizedDomains === FALSE)) { goto wt8jlJk8qQ; } die("\xe6\227\240\346\263\225\350\216\xb7\345\217\x96\346\216\210\346\235\203\xe5\x9f\x9f\345\x90\x8d\345\x88\227\xe8\xa1\250\xef\xbc\x8c\347\250\x8b\345\xba\217\350\277\220\350\xa1\x8c\xe5\xbc\x82\xe5\xb8\270\xe3\200\x82"); goto ZmbzqehpZ5; ZmbzqehpZ5: wt8jlJk8qQ: $authorizedDomainsArray = explode("\12", $authorizedDomains); $authorizedDomainsArray = array_filter($authorizedDomainsArray, function ($domain) { return trim($domain) !== ''; }); if (in_array($currentDomain, $authorizedDomainsArray)) { goto vSc7XKRRL3; } echo "\xe6\xad\244\347\xa8\x8b\xe5\272\217\xe6\x9c\252\xe7\xbb\217\346\x8e\210\346\235\x83\357\xbc\214\xe5\217\xaf\xe8\203\275\xe6\230\257\xe7\x9b\227\347\211\x88\xe7\xa8\x8b\xe5\272\x8f\357\xbc\x8c\350\257\267\xe8\x81\224\347\263\273\347\xae\xa1\xe7\x90\x86\xe5\221\x98\343\200\x82"; goto dLn2f6S2Iz; dLn2f6S2Iz: goto X0AcT1oKAm; vSc7XKRRL3: define("\101\x50\120\x5f\120\101\124\110", __DIR__ . "\x2f"); define("\x41\x44\115\111\x4e\x5f\115\x4f\104\105\114", "\x61\144\155\151\x6e\163"); require APP_PATH . "\x66\x72\160\x68\160\57\146\162\x2e\160\x68\160"; goto kZMDzq06PU; kZMDzq06PU: X0AcT1oKAm:
本地授权版本
<?php
/**
 * 本地域名授权验证
 */

// 允许访问的授权域名列表 (直接写在代码里)
// 请将下面的域名替换成你自己的域名
$authorizedDomains = [
    'www.example.com',
    'example.com',
    'blog.example.com',
    // ...可以添加更多
];

// 获取当前访问的域名
$currentDomain = $_SERVER['HTTP_HOST'];

// 检查当前域名是否在授权列表中
if (in_array($currentDomain, $authorizedDomains)) {
    // 验证通过,执行 FrPHP 框架初始化代码
    // +----------------------------------------------------------------------
    // | FrPHP { a friendly PHP Framework }
    // +----------------------------------------------------------------------
    // | Copyright (c) 2018-2099 http://frphp.jizhicms.com All rights reserved.
    // +----------------------------------------------------------------------
    // | Author: 如沐春 <2581047041@qq.com>
    // +----------------------------------------------------------------------
    // | Date:2022/04/11
    // +----------------------------------------------------------------------

    // 应用目录为当前目录
    define('APP_PATH', __DIR__ . '/');
    define('ADMIN_MODEL','admins');
    // 加载框架文件
    require(APP_PATH . 'frphp/fr.php');

    // 就这么简单~

} else {
    // 验证未通过,显示美化后的盗版提示页面
    ?>
    <!DOCTYPE html>
    <html lang="zh-CN">
    <head>
        <meta charset="UTF-8">
        <meta name="viewport" content="width=device-width, initial-scale=1.0">
        <title>访问限制</title>
        <style>
            * {
                margin: 0;
                padding: 0;
                box-sizing: border-box;
                font-family: -apple-system, BlinkMacSystemFont, "Segoe UI", "Helvetica Neue", "PingFang SC", "Microsoft YaHei", sans-serif;
            }
            body {
                background-color: #f0f2f5;
                display: flex;
                justify-content: center;
                align-items: center;
                min-height: 100vh;
                color: #333;
                padding: 20px;
            }
            .container {
                width: 100%;
                max-width: 600px;
                background-color: #fff;
                border-radius: 12px;
                box-shadow: 0 8px 30px rgba(0, 0, 0, 0.1);
                overflow: hidden;
                text-align: center;
                padding: 40px 30px;
                position: relative;
            }
            .container::before {
                content: '';
                position: absolute;
                top: 0;
                left: 0;
                width: 100%;
                height: 6px;
                background: linear-gradient(90deg, #ff6b6b, #ff8e8e);
            }
            .icon-error {
                font-size: 72px;
                color: #ff6b6b;
                margin-bottom: 25px;
                opacity: 0.9;
            }
            h1 {
                font-size: 28px;
                margin-bottom: 15px;
                color: #2d3748;
                font-weight: 600;
            }
            .message {
                font-size: 16px;
                line-height: 1.6;
                color: #4a5568;
                margin-bottom: 30px;
                padding: 0 20px;
            }
            .domain-info {
                background-color: #f8f8f8;
                border: 1px solid #eaeaea;
                border-radius: 6px;
                padding: 12px 20px;
                font-family: 'Consolas', 'Monaco', monospace;
                font-size: 14px;
                color: #718096;
                display: inline-block;
                margin-bottom: 30px;
            }
            .action-button {
                display: inline-block;
                background-color: #4299e1;
                color: #fff;
                padding: 12px 30px;
                border-radius: 6px;
                text-decoration: none;
                font-size: 16px;
                font-weight: 500;
                transition: all 0.3s ease;
                border: none;
                cursor: pointer;
            }
            .action-button:hover {
                background-color: #3182ce;
                transform: translateY(-2px);
                box-shadow: 0 4px 12px rgba(66, 153, 225, 0.3);
            }
            .footer {
                margin-top: 40px;
                font-size: 13px;
                color: #a0aec0;
            }
        </style>
    </head>
    <body>
        <div class="container">
            <div class="icon-error">⚠️</div>
            <h1>访问被拒绝</h1>
            <p class="message">
                此程序副本未经授权,可能为盗版或非法分发版本。<br>
                为保障您的信息安全和服务稳定性,请联系官方获取合法授权。
            </p>
            <div class="domain-info">当前域名: <?php echo htmlspecialchars($currentDomain); ?></div>
            <a href="" target="_blank" class="action-button">请联系管理员获取授权</a>
            <div class="footer">
                © <?php echo date('Y'); ?> FrPHP Framework. All rights reserved.
            </div>
        </div>
    </body>
    </html>
    <?php
    exit; // 确保后续代码不再执行
}
?>

加密代码

喜欢就支持一下吧
点赞 0 分享 收藏
评论 抢沙发
OωO
取消