VULHUB ™

###0x01漏洞简介 海康威视视频接入网关系统采用PHP+SQLite架构，其在以下34处均存在注入漏洞： ``` /userInfo/roleInfo.php /userInfo/userInfo.php /data/fetchRoleTreeJson.php /deviceConfig/configDeviceInfo.php /transformServer/serverConfigInfo.php /cameraConfig/transferInfo.php /data/deviceAndCameraListData.php /data/deviceTypeData.php /data/checkIsExist.php /data/fetchIoInfoData.php /data/saveDeviceType.php /data/saveDecodeServer.php /data/fetchGroup.php /data/login.php /data/transferCamera.php /data/modifyPassword.php /data/fetchDeviceByGroupId.php /data/deleteDeviceInfo.php /data/modifyDeviceInfo.php /data/decodeServerData.php /data/userInfoData.php /data/checkDevice.php /data/deviceListData.php /data/saveUserInfo.php /data/fetchCameraInfo.php /data/fetchDeviceType.php /data/saveGroup.php ``` 远程攻击者可以利用Union方式执行SQL指令，获取敏感信息。 ###0x02漏洞详情 第一处注入：/userInfo/userInfo.php ``` <?php include('../common/connDb.php'); include('roleInfoClass.php'); $dbQuery = new DataBaseQuery(); $isEmpty = empty($_GET['userId']); $userId = "";...

###0x01漏洞简介 海康威视视频接入网关系统采用PHP+SQLite架构，其在以下34处均存在注入漏洞： ``` /userInfo/roleInfo.php /userInfo/userInfo.php /data/fetchRoleTreeJson.php /deviceConfig/configDeviceInfo.php /transformServer/serverConfigInfo.php /cameraConfig/transferInfo.php /data/deviceAndCameraListData.php /data/deviceTypeData.php /data/checkIsExist.php /data/fetchIoInfoData.php /data/saveDeviceType.php /data/saveDecodeServer.php /data/fetchGroup.php /data/login.php /data/transferCamera.php /data/modifyPassword.php /data/fetchDeviceByGroupId.php /data/deleteDeviceInfo.php /data/modifyDeviceInfo.php /data/decodeServerData.php /data/userInfoData.php /data/checkDevice.php /data/deviceListData.php /data/saveUserInfo.php /data/fetchCameraInfo.php /data/fetchDeviceType.php /data/saveGroup.php ``` 远程攻击者可以利用Union方式执行SQL指令，获取敏感信息。 ###0x02漏洞详情 第一处注入：/userInfo/userInfo.php ``` <?php include('../common/connDb.php'); include('roleInfoClass.php'); $dbQuery = new DataBaseQuery(); $isEmpty = empty($_GET['userId']); $userId = ""; $name = ""; $password = "******"; $realName = ""; $phone = ""; $eMail = ""; $roleId = ""; $unitCode = ""; if(!$isEmpty){ $re = $dbQuery->query('select * from user_info where userId ='.$_GET['userId']); while ($row = $dbQuery->fetchArray($re)){ $userId = $row['userId']; $name = $row['name']; //$password = $row['password']; $realName = $row['realName']; $phone = $row['phone']; $eMail = $row['eMail']; $roleId = $row['roleId']; $unitCode= $row['unitCode']; ``` 第二处注入：/userInfo/roleInfo.php ``` <?php include('../common/connDb.php'); $dbQuery = new DataBaseQuery(); $isEmpty = empty($_GET['roleId']); $roleId = ""; $name = ""; $description = ""; $menuIds = ""; if(!$isEmpty){ $re = $dbQuery->query('select * from role_info where roleId ='.$_GET['roleId']); while ($row = $dbQuery->fetchArray($re)){ $roleId = $row['roleId']; $name = $row['name']; $description = $row['description']; $menuIds = $row['menuIds']; } } ``` 第三处注入：/data/fetchRoleTreeJson.php ``` <?php include('../common/connDb.php'); $type = $_GET['type']; $pNodeId = @$_GET['pNodeId']; $dbQuery = new DataBaseQuery(); if($type=="main"){//取主菜单的树 findAllMainMenuNode($dbQuery); }else{//取子菜单的树 findAllSubMenuNode($dbQuery,$pNodeId); } class TreeNode{ var $id; var $text; var $iconCls; var $state; var $children=array(); function __construct(){ } public function setId($id) { $this->id = $id; } public function setText($text) { $this->text = $text; } public function setIconCls($iconCls) { $this->iconCls = $iconCls; } public function setState($state) { $this->state = $state; } public function setChildren($children) { $this->children = $children; } public function getId() { return $this->id; } public function getText() { return $this->text; } public function getIconCls() { return $this->iconCls; } public function getState() { return $this->state; } public function getChildren() { return $this->children; } } /** 找出主菜单的树节点 */ function findAllMainMenuNode($dbQuery){ $jsonArray = array(); $pNode = new TreeNode(); $pNode->setId('0'); $pNode->setText('主菜单'); $pNode->setIconCls('icon-folder'); array_push($jsonArray,$pNode); $re= $dbQuery->query('select * from menu_info where level=1');//查询所有主菜单 while($row = $dbQuery->fetchArray($re)){ $cNode = new TreeNode(); $cNode->setId($row['menuId']); $cNode->setText($row['name']); $cNode->setIconCls('icon-systemMenu'); if ($pNode->getChildren() != null) { $childrenArray = $pNode->getChildren(); array_push($childrenArray,$cNode); $pNode->setChildren($childrenArray); }else{ $childrenNodes = array(); array_push($childrenNodes,$cNode); $pNode->setChildren($childrenNodes); } } print_r(json_encode($jsonArray)); $dbQuery->closeDb(); } /** 找出子菜单的树节点 */ function findAllSubMenuNode($dbQuery,$pNodeId){ $jsonArray = array(); $pNode = new TreeNode(); $pNode->setId('0'); $pNode->setText('子菜单'); $pNode->setIconCls('icon-folder'); array_push($jsonArray,$pNode); $re= $dbQuery->query('select * from menu_info where level=2 and parentMenuId='.$pNodeId);//根据父菜单查询所有子菜单 ``` 第四处注入：/deviceConfig/configDeviceInfo.php ``` <?php include('../common/connDb.php'); include('deviceTypeClass.php'); $deviceId = $_GET['deviceId']; $dbQuery = new DataBaseQuery(); $re = $dbQuery->query('select type_code,name from device_type_info'); $deviceTypeArray = array(); //获取所有设备类型 while ($row = $dbQuery->fetchArray($re)){ $deviceType = new DeviceType($row['type_code'],$row['name']); array_push($deviceTypeArray,$deviceType); } $re = $dbQuery->query('select id,name from device_group_info'); $groupArray = array(); array_push($groupArray,new DeviceType("0","请选择")); while ($row = $dbQuery->fetchArray($re)){ $deviceType = new DeviceType($row['id'],$row['name']); array_push($groupArray,$deviceType); } $type_code=""; $network_addr=""; $network_port=""; $username=""; $password="******"; $indexcode=""; $name=""; $serial_num=""; $analog_chan_count=""; $digital_chan_count=""; $alarm_in_count=""; $alarm_out_count=""; $audio_num=""; $reg_type=""; $group_id=""; $allowShare=""; $ctrl_unit_id =""; $re = $dbQuery->query('select * from device_info where id='.$deviceId); ``` 第五处注入：/transformServer/serverConfigInfo.php ``` <?php include('../common/connDb.php'); $dbQuery = new DataBaseQuery(); $isEmpty = empty($_GET['transId']); $transId = ""; $name = ""; $transIp = ""; $transPort = ""; $transMax = ""; $transType = ""; if(!$isEmpty){ $re = $dbQuery->query('select * from transform_server_info where transform_server_id ='.$_GET['transId']); ``` 第六处注入：/cameraConfig/transferInfo.php ``` <?php include('../common/connDb.php'); $dbQuery = new DataBaseQuery(); $id = $_GET['id']; $src_audio_encode = "-1"; $src_video_encode = "-1"; $src_standard = "0"; $src_stream_type = "0"; $src_transform = "-1"; $src_image_size = "1"; $dst_audio_encode = "2"; $dst_video_encode = "1"; $dst_stream_type = "0"; $dst_transform = "2"; $dst_bitrate_type = "1"; $dst_resolution = "3"; $dst_video_bitrate = "19"; $dst_framerate = "-1"; $dst_interval_BPframe = "2"; $dst_interval_Iframe = "30"; $dst_pic_quality = "0"; $transform_server_id = ""; $re = $dbQuery->query('select * from camera_info where is_transform=1 and id ='.$id); while ($row = $dbQuery->fetchArray($re)){ ``` 第七处注入：/data/deviceAndCameraListData.php ``` include('../common/connDb.php'); include('../common/unitCode.php'); $dbQuery = new DataBaseQuery(); $page=$_POST['page']; $rows=$_POST['rows']; $sort=$_POST['sort']; $order=$_POST['order']; $start=($page -1)*$rows; $name=@$_POST['name']; $organize=@$_POST['organize']; $group=@$_POST['group']; $configFlag=@$_POST['configFlag']; $type=@$_GET['type']; $deviceIndexCode = @$_GET['deviceIndexCode']; $deviceId = @$_GET['deviceId']; $show = @$_GET['show']; if($type =="device"){ $whereStr=""; if($name != ""){ if($name=="." || $name=="%" || $name=="_"){ $name ="[".$name."]"; } $whereStr =" and (d.name like '%".$name."%' or **.**.**.**work_addr like '%".$name."%')"; } if($organize != ""){ if($organize =="0"){ //如果是主控制中心则查询全部 }else{ if(strlen($organize)==8){//如果是派出所级别 $whereStr =" and d.indexcode like '".$organize."%'"; }else{ $qxCode = substr($organize,4,2); $shiCode = substr($organize,2,2); $shengCode = substr($organize,0,2); if($shiCode=="00" && $qxCode=="00"){ //如果是省 $whereStr =" and d.indexcode like '".$shengCode."%'"; }else if($shiCode !="00" && $qxCode=="00"){ //如果是市 $whereStr =" and d.indexcode like '".$shengCode.$shiCode."%'"; }else{ $whereStr =" and d.indexcode like '".$organize."%'"; } } } } if($group != ""){ if($group=="-1"){ }else{ $whereStr =" and d.group_id =".$group; } } $str=""; if($configFlag == "1"){ $str =" and (c.is_transform is null or c.is_transform=0)"; }else if($configFlag == "2"){ $str =" and (c.is_stream_transmit is null or c.is_stream_transmit=0)"; } $re = $dbQuery->query('select distinct d.id,d.name,d.type_code,(select name from device_type_info where type_code = d.type_code) deviceType,d.reg_type regType,**.**.**.**work_addr networkAddr,**.**.**.**work_port networkPort,d.status,"device" type,d.indexcode,d.username,d.password from device_info d,camera_info c where d.indexcode=c.device_indexcode'.$unitWhere.$whereStr.$str.' order by d.'.$sort.' '.$order.' limit '.$start.','.$rows); $jsonArray = array(); $count = $dbQuery->querySingle('select count(distinct d.id) from device_info d,camera_info c where d.indexcode=c.device_indexcode'.$unitWhere.$whereStr.$str); while ($row = $dbQuery->fetchArray($re)){ $pNode = new TreeNode(); ``` 第8处注入：/data/deviceTypeData.php ``` <?php include('../common/connDb.php'); $dbQuery = new DataBaseQuery(); $page=$_POST['page']; $rows=$_POST['rows']; $start=($page -1)*$rows; $re = $dbQuery->query('select * from device_type_info limit '.$start.','.$rows); $count = $dbQuery->querySingle('select count(*) from device_type_info'); $jsonStr =""; while ($row = $dbQuery->fetchArray($re)){ $jsonStr = $jsonStr.json_encode($row).","; } if($jsonStr !=""){ $jsonStr = substr($jsonStr,0,strlen($jsonStr)-1); } $str ='{"total":'.$count.',"rows":['.$jsonStr.']}'; $dbQuery->closeDb(); echo ($str); ?> ``` 第九处注入：/data/checkIsExist.php ``` <?php include('../common/connDb.php'); $dbQuery = new DataBaseQuery(); $object=$_POST['object']; if($object=="userInfo"){ //如果是校验用户名称 $name=$_POST['name']; $userId=$_POST['userId']; checkUserName($dbQuery,$name,$userId); }else if($object=="roleInfo"){ $name=$_POST['name']; $roleId=$_POST['roleId']; checkRoleName($dbQuery,$name,$roleId); }else if($object=="password"){ $name=$_POST['name']; $password=$_POST['password']; checkPassword($dbQuery,$name,$password); }else if($object=="deviceGroup"){ //如果是校验用户名称 $name=$_POST['name']; $groupId=$_POST['groupId']; checkGroupName($dbQuery,$name,$groupId); } function checkUserName($dbQuery,$name,$userId){ $count = 0; if($userId ==""){ $count = $dbQuery->querySingle('select count(*) from user_info where name="'.$name.'"'); }else{ $count = $dbQuery->querySingle('select count(*) from user_info where name="'.$name.'" and userId<>'.$userId); } echo $count; $dbQuery->closeDb(); } function checkRoleName($dbQuery,$name,$roleId){ $count = 0; if($roleId ==""){ $count = $dbQuery->querySingle('select count(*) from role_info where name="'.$name.'"'); }else{ $count = $dbQuery->querySingle('select count(*) from role_info where name="'.$name.'" and roleId<>'.$roleId); } echo $count; $dbQuery->closeDb(); } function checkPassword($dbQuery,$name,$password){ $oldPassword = $dbQuery->querySingle('select password from user_info where name="'.$name.'"'); if($password ==$oldPassword){ echo 0; }else{ echo 1; } $dbQuery->closeDb(); } function checkGroupName($dbQuery,$name,$groupId){ $count = 0; if($groupId ==""){ $count = $dbQuery->querySingle('select count(*) from device_group_info where name="'.$name.'"'); }else{ $count = $dbQuery->querySingle('select count(*) from device_group_info where name="'.$name.'" and id<>'.$groupId); } echo $count; $dbQuery->closeDb(); } ?> ``` 第十处注入：/data/fetchIoInfoData.php ``` <?php include('../common/connDb.php'); include('../common/unitCode.php'); $dbQuery = new DataBaseQuery(); $page=$_POST['page']; $rows=$_POST['rows']; $sort=$_POST['sort']; $order=$_POST['order']; $start=($page -1)*$rows; $organize=@$_POST['organize']; $group=@$_POST['group']; $configFlag=@$_POST['configFlag']; $re = $dbQuery->query('select c.id,c.name,c.indexcode,d.name deviceName,**.**.**.**work_addr networkAddr,d.indexcode devIndexCode,d.type_code typeCode, c.globe_num from io_info c,device_info d where c.device_indexcode=d.indexcode order by c.id '.$order.' limit '.$start.','.$rows); $count = $dbQuery->querySingle('select count(*) from io_info c,device_info d where c.device_indexcode=d.indexcode'); $jsonStr =""; while ($row = $dbQuery->fetchArray($re)){ $jsonStr = $jsonStr.json_encode($row).","; } if($jsonStr !=""){ $jsonStr = substr($jsonStr,0,strlen($jsonStr)-1); } $str ='{"total":'.$count.',"rows":['.$jsonStr.']}'; $dbQuery->closeDb(); echo ($str); ?> ``` 第十一处：/data/saveDeviceType.php ``` <?php include('../common/connDb.php'); $operate=$_POST['operate']; $typeCodes = @$_POST['typeCodes']; $typeCode= @$_POST['typeCode']; $name= @$_POST['name']; $manufacturer= @$_POST['manufacturer']; $registerType= @$_POST['registerType']; $accessType= @$_POST['accessType']; $equipmentType= @$_POST['equipmentType']; $otherMan= @$_POST['otherMan']; $port= @$_POST['port']; if($operate=="delete"){ //如果是删除操作 deleteDeviceType($typeCodes); }else if($operate=="add"){ //如果是增加操作 saveDeviceType($typeCode,$name,$manufacturer,$registerType,$accessType,$equipmentType,$otherMan,$port); }else{ //如果是修改操作 updateDeviceType($typeCode,$name,$manufacturer,$registerType,$accessType,$equipmentType,$otherMan,$port); } function deleteDeviceType($typeCodes){ $dbQuery = new DataBaseQuery(); $typeCodeArray = explode(",",$typeCodes); $codes=""; for($i=0;$i<count($typeCodeArray);$i++){ $count = $dbQuery->querySingle('select count(*) from device_info where type_code='.$typeCodeArray[$i]); if($count==0){ $codes .=$typeCodeArray[$i].","; } } if(strlen($codes)>0){ $codes = substr($codes,0,strlen($codes)-1); } $query = $dbQuery->execute("delete from device_type_info where type_code in(".$codes.")"); if ($query) { echo $codes; }else{ echo "0"; } $dbQuery->closeDb(); } function saveDeviceType($typeCode,$name,$manufacturer,$registerType,$accessType,$equipmentType,$otherMan,$port){ $pulginId=""; if($accessType=="GB28181" || $accessType=="E-home" || $accessType=="Onvif" || $accessType=="Pisa" || $accessType=="Hkp协议"){ $pulginId=""; }else{ $pulginId=$accessType; } $dbQuery = new DataBaseQuery(); date_default_timezone_set('PRC'); $time = date('Y-m-d H:i:s',time()); $query = $dbQuery->execute('insert into device_type_info(type_code,name,manufacturer,register_type,access_type,equipment_type,plugin_id,update_time,int_rev,str_rev) values('.$typeCode.',"'.$name.'","'.$manufacturer.'",'.$registerType.',"'.$accessType.'","'.$equipmentType.'","'.$pulginId.'","'.$time.'",'.$port.',"'.$otherMan.'")'); if ($query) { echo $typeCode; }else{ echo 0; } $dbQuery->closeDb(); } function updateDeviceType($typeCode,$name,$manufacturer,$registerType,$accessType,$equipmentType,$otherMan,$port){ $pulginId=""; if($accessType=="GB28181" || $accessType=="E-home" || $accessType=="Onvif" || $accessType=="Pisa" || $accessType=="Hkp协议"){ $pulginId=""; }else{ $pulginId=$accessType; } $dbQuery = new DataBaseQuery(); date_default_timezone_set('PRC'); $time = date('Y-m-d H:i:s',time()); $query = $dbQuery->execute('update device_type_info set name="'.$name.'",manufacturer="'.$manufacturer.'",register_type='.$registerType.',access_type="'.$accessType.'",equipment_type="'.$equipmentType.'",plugin_id="'.$pulginId.'",update_time="'.$time.'",int_rev='.$port.',str_rev="'.$otherMan.'" where type_code='.$typeCode); if ($query) { echo $typeCode; }else{ echo 0; } $dbQuery->closeDb(); } ?> ``` 第十二处：/data/saveDecodeServer.php ``` <?php include('../common/connDb.php'); $operate=$_POST['operate']; if($operate=="delete"){ //如果是删除操作 $transIds = $_POST['transIds']; deleteDecodeServer($transIds); }else{ //如果是增加或者修改操作 $isEmpty=empty($_POST['transId']); $name=$_POST['name']; $transIp=$_POST['transIp']; $transPort=$_POST['transPort']; $transMax=$_POST['transMax']; $transType=$_POST['transType']; if($isEmpty){ saveDecodeServer($name,$transIp,$transPort,$transMax,$transType); }else{ updateDecodeServer($_POST['transId'],$name,$transIp,$transPort,$transMax,$transType); } } function deleteDecodeServer($transIds){ $dbQuery = new DataBaseQuery(); $query = $dbQuery->execute("delete from transform_server_info where transform_server_id in(".$transIds.")"); if ($query) { echo "0"; }else{ echo "1"; } $dbQuery->closeDb(); } function saveDecodeServer($name,$transIp,$transPort,$transMax,$transType){ $dbQuery = new DataBaseQuery(); date_default_timezone_set('PRC'); $time = date('Y-m-d H:i:s',time()); $query = $dbQuery->execute("insert into transform_server_info(transform_server_id,server_ip,server_port,name,trans_type,trans_max,update_time) values (NULL,'".$transIp."',".$transPort.",'".$name."',".$transType.",".$transMax.",'".$time."')"); if ($query) { echo $dbQuery->lastInsertRowID(); }else{ echo 0; } $dbQuery->closeDb(); } function updateDecodeServer($transId,$name,$transIp,$transPort,$transMax,$transType){ $dbQuery = new DataBaseQuery(); date_default_timezone_set('PRC'); $time = date('Y-m-d H:i:s',time()); $query = $dbQuery->execute("update transform_server_info set server_ip='".$transIp."',server_port=".$transPort.",name='".$name."',trans_type=".$transType.",trans_max=".$transMax.",update_time='".$time."' where transform_server_id=".$transId); if ($query) { echo $transId; }else{ echo 0; } $dbQuery->closeDb(); } ?> ``` 第十三处：/data/fetchGroup.php ``` <?php /* 根据id找出分组 */ include('../common/connDb.php'); $dbQuery = new DataBaseQuery(); $groupId=$_POST['groupId']; $groupArray = $dbQuery->querySingleRow('select id,name from device_group_info where id='.$groupId,true); $dbQuery->closeDb(); echo(json_encode($groupArray)); ?> ``` 第十四处：/data/login.php ``` <?php /** 系统登录设置 */ include('../common/connDb.php'); $dbQuery = new DataBaseQuery(); $userName =$_POST['userName']; $password =$_POST['password']; $system =$_POST['system']; $userInfo = $dbQuery->querySingleRow('select password,roleId,unitCode from user_info where name="'.$userName.'"',true); if(count($userInfo)==0){ //用户名不存在 echo "1"; $dbQuery->closeDb(); return; }else{ //用户名存在 ``` 第十五处：/data/transferCamera.php ``` <?php include('../common/connDb.php'); $ids=@$_POST['ids']; $srcAudioType=$_POST['srcAudioType']; $srcVideoType=$_POST['srcVideoType']; $srcStandard=$_POST['srcStandard']; $srcStreamType=$_POST['srcStreamType']; $srcTransForm=$_POST['srcTransForm']; $srcImageSize=$_POST['srcImageSize']; $dstAudioType=$_POST['dstAudioType']; $dstVideoType=$_POST['dstVideoType']; $dstStreamType=$_POST['dstStreamType']; $dstTransForm=$_POST['dstTransForm']; $dstBitrateType=$_POST['dstBitrateType']; $dstResolution=$_POST['dstResolution']; $dstVideoBitrate=$_POST['dstVideoBitrate']; $dstFramerate=$_POST['dstFramerate']; $dstIntervalBPframe=$_POST['dstIntervalBPframe']; $dstIntervalIframe=$_POST['dstIntervalIframe']; $dstPicQuality=$_POST['dstPicQuality']; $transId=$_POST['transId']; $dbQuery = new DataBaseQuery(); $idArray = explode(",",$ids); $cameraIds =""; for($i=0;$i<count($idArray);$i++){ $cameraIds .=$idArray[$i].","; } $cameraIds = substr($cameraIds,0,strlen($cameraIds)-1); $query=$dbQuery->execute('update camera_info set is_transform=1,src_audio_encode='.$srcAudioType.',src_video_encode='.$srcVideoType.',src_standard='.$srcStandard.',src_transform='.$srcTransForm.',dst_audio_encode='.$dstAudioType.',dst_video_encode='.$dstVideoType.',dst_stream_type='.$dstStreamType.',dst_transform='.$dstTransForm.',dst_bitrate_type='.$dstBitrateType.',dst_resolution='.$dstResolution.',dst_video_bitrate='.$dstVideoBitrate.',dst_framerate='.$dstFramerate.',dst_interval_BPframe='.$dstIntervalBPframe.',dst_interval_Iframe='.$dstIntervalIframe.',dst_pic_quality='.$dstPicQuality.',transform_server_id='.$transId.' where id in('.$cameraIds.')'); if($query){ echo "0"; }else{ echo "1"; } $dbQuery->closeDb(); ?> ``` 第十六处：/data/modifyPassword.php ``` <?php include('../common/connDb.php'); $name=$_POST['name']; $modPassword=$_POST['modPassword']; $dbQuery = new DataBaseQuery(); date_default_timezone_set('PRC'); $time = date('Y-m-d H:i:s',time()); $query = $dbQuery->execute("update user_info set password='".$modPassword."',updataTime='".$time."' where name='".$name."'"); if ($query) { echo 0; }else{ echo 1; } $dbQuery->closeDb(); ?> ``` 第十七处：/data/fetchDeviceByGroupId.php ``` <?php include('../common/connDb.php'); include('../common/unitCode.php'); $dbQuery = new DataBaseQuery(); $page=$_POST['page']; $rows=$_POST['rows']; $sort=$_POST['sort']; $order=$_POST['order']; $start=($page -1)*$rows; $groupId=@$_POST['groupId']; $queryStatus=@$_POST['queryStatus']; $name=@$_POST['name']; $whereStr=""; if($queryStatus=="1"){ $whereStr=$whereStr." and (d.is_shared is null or d.is_shared =1)"; } if($name !=""){ if($name=="." || $name=="%" || $name=="_"){ $name ="[".$name."]"; } $whereStr =$whereStr." and (d.name like '%".$name."%' or **.**.**.**work_addr like '%".$name."%')"; } $re = $dbQuery->query('select d.id,d.name,(select name from device_type_info where type_code = d.type_code) deviceType,d.reg_type,**.**.**.**work_addr,**.**.**.**work_port,d.status,d.is_shared shared from device_info d where d.allow_share=0 and d.group_id='.$groupId.$unitWhere.$whereStr.' order by d.'.$sort.' '.$order.' limit '.$start.','.$rows); $count = $dbQuery->querySingle('select count(*) from device_info d where d.allow_share=0 and d.group_id='.$groupId.$unitWhere.$whereStr); $jsonStr =""; while ($row = $dbQuery->fetchArray($re)){ $jsonStr = $jsonStr.json_encode($row).","; } if($jsonStr !=""){ $jsonStr = substr($jsonStr,0,strlen($jsonStr)-1); } $str ='{"total":'.$count.',"rows":['.$jsonStr.']}'; $dbQuery->closeDb(); echo ($str); ?> ``` 第十八处：/data/deleteDeviceInfo.php ``` <?php include('../common/connDb.php'); $deviceIds = @$_POST['deviceIds']; $dbQuery = new DataBaseQuery(); $dbQuery->execute("delete from camera_info where device_id in(".$deviceIds.")"); $dbQuery->execute("delete from device_info where id in(".$deviceIds.")"); echo "0"; $dbQuery->closeDb(); ?> ``` 第十九处：/data/modifyDeviceInfo.php ``` <?php include('../common/connDb.php'); $deviceId = @$_POST['deviceId']; $register = @$_POST['register']; $typecode = @$_POST['typecode']; $addr = @$_POST['addr']; $port = @$_POST['port']; $username = @$_POST['username']; $password = @$_POST['password']; $password_old = @$_POST['password_old']; $groupId = @$_POST['groupId']; $oldAddr = @$_POST['oldAddr']; $oldPort = @$_POST['oldPort']; $allowShare = @$_POST['allowShare']; $dbQuery = new DataBaseQuery(); date_default_timezone_set('PRC'); $time = date('Y-m-d H:i:s',time()); if($register=="4"){ //如果是主动注册 $query = $dbQuery->execute('update device_info set type_code='.$typecode.',group_id='.$groupId.',allow_share='.$allowShare.',update_time="'.$time.'" where id='.$deviceId); if ($query) { echo $deviceId; }else{ echo 0; } }else{ //if($oldAddr != $addr || $oldPort != $port){//如果新的IP或端口不同于老的，则为新的设备，需要删除之前设备中的监控点 //$dbQuery->execute('delete from camera_info where device_id='.$deviceId); //} if($password != $password_old){ $query = $dbQuery->execute('update device_info set type_code='.$typecode.',network_addr="'.$addr.'",network_port='.$port.',username="'.$username.'",password="'.$password.'",group_id='.$groupId.',allow_share='.$allowShare.',update_time="'.$time.'" where id='.$deviceId); } else{ $query = $dbQuery->execute('update device_info set type_code='.$typecode.',network_addr="'.$addr.'",network_port='.$port.',username="'.$username.'",group_id='.$groupId.',allow_share='.$allowShare.',update_time="'.$time.'" where id='.$deviceId); } if ($query) { echo $deviceId; }else{ echo 0; } } $dbQuery->closeDb(); ?> ``` 第二十处：/data/decodeServerData.php ``` <?php include('../common/connDb.php'); $dbQuery = new DataBaseQuery(); $page=$_POST['page']; $rows=$_POST['rows']; $start=($page -1)*$rows; $re = $dbQuery->query('select * from transform_server_info limit '.$start.','.$rows); $count = $dbQuery->querySingle('select count(*) from transform_server_info'); $jsonStr =""; while ($row = $dbQuery->fetchArray($re)){ $jsonStr = $jsonStr.json_encode($row).","; } if($jsonStr !=""){ $jsonStr = substr($jsonStr,0,strlen($jsonStr)-1); } $str ='{"total":'.$count.',"rows":['.$jsonStr.']}'; $dbQuery->closeDb(); echo ($str); ?> ``` 第二十一处：/data/userInfoData.php ``` <?php include('../common/connDb.php'); $dbQuery = new DataBaseQuery(); $page=$_POST['page']; $rows=$_POST['rows']; $start=($page -1)*$rows; $re = $dbQuery->query('select * from user_info limit '.$start.','.$rows); $count = $dbQuery->querySingle('select count(*) from user_info'); $jsonStr =""; while ($row = $dbQuery->fetchArray($re)){ $row['unitCode']=fetchUnitName($row['unitCode']); $jsonStr = $jsonStr.json_encode($row).","; } 第二十二处：/data/checkDevice.php <?php include('../common/connDb.php'); $dbQuery = new DataBaseQuery(); $type=$_POST['type']; if($type=="singleIp"){ //如果是单IP设备添加 $singleIp_addr=$_POST['singleIp_addr']; $singleIp_port=$_POST['singleIp_port']; checkSingleIp($dbQuery,$singleIp_addr,$singleIp_port); }else if($type=="ipDomain"){ //如果是IP段设备添加 $ipDomain_startIp=$_POST['ipDomain_startIp']; $ipDomain_endIp=$_POST['ipDomain_endIp']; $ipDomain_port=$_POST['ipDomain_port']; checkIpDomain($dbQuery,$ipDomain_startIp,$ipDomain_endIp,$ipDomain_port); }else if($type=="singleCode"){//如果是单编号设备添加 $singleCode_indexcode=$_POST['singleCode_indexcode']; checkSingleCode($dbQuery,$singleCode_indexcode); }else{//如果是编号段设备添加 $codeDomain_preIndexCode=$_POST['codeDomain_preIndexCode']; $codeDomain_startCode=$_POST['codeDomain_startCode']; $codeDomain_endCode=$_POST['codeDomain_endCode']; checkCodeDomain($dbQuery,$codeDomain_preIndexCode,$codeDomain_startCode,$codeDomain_endCode); } function checkSingleIp($dbQuery,$singleIp_addr,$singleIp_port){ $count = $dbQuery->querySingle('select count(*) from device_info where network_addr="'.$singleIp_addr.'" and network_port='.$singleIp_port); echo $count; $dbQuery->closeDb(); } ``` 第二十三处：/data/deviceListData.php ``` <?php include('../common/connDb.php'); include('../common/unitCode.php'); $dbQuery = new DataBaseQuery(); $page=$_POST['page']; $rows=$_POST['rows']; $sort=$_POST['sort']; $order=$_POST['order']; $start=($page -1)*$rows; $name=@$_POST['name']; $organize=@$_POST['organize']; $group=@$_POST['group']; $whereStr=""; if($name != ""){ if($name=="." || $name=="%" || $name=="_"){ $name ="[".$name."]"; } $whereStr =" and (d.name like '%".$name."%' or **.**.**.**work_addr like '%".$name."%')"; } if($organize != ""){ if($organize =="0"){ //如果是主控制中心则查询全部 }else{ if(strlen($organize)==8){//如果是派出所级别 $whereStr =" and d.indexcode like '".$organize."%' and d.ctrl_unit_id<>1"; }else{ $qxCode = substr($organize,4,2); $shiCode = substr($organize,2,2); $shengCode = substr($organize,0,2); if($shiCode=="00" && $qxCode=="00"){ //如果是省 $whereStr =" and d.indexcode like '".$shengCode."%' and d.ctrl_unit_id<>1"; }else if($shiCode !="00" && $qxCode=="00"){ //如果是市 $whereStr =" and d.indexcode like '".$shengCode.$shiCode."%' and d.ctrl_unit_id<>1"; }else{ $whereStr =" and d.indexcode like '".$organize."%' and d.ctrl_unit_id<>1"; } } } } if($group != ""){ if($group=="-1"){ }else{ $whereStr =" and d.group_id =".$group; } } $re = $dbQuery->query('select d.id,d.indexcode,d.dev_guid devGuid,d.name,(select name from device_type_info where type_code = d.type_code) deviceType,d.reg_type,**.**.**.**work_addr,**.**.**.**work_port,d.analog_chan_count,d.digital_chan_count,d.alarm_in_count,d.alarm_out_count,(select name from device_group_info where id=d.group_id) groupName,d.status,d.type_code typeCode from device_info d where 1=1 '.$unitWhere.$whereStr.' order by '.$sort.' '.$order.' limit '.$start.','.$rows); //echo 'select d.id,d.indexcode,d.dev_guid devGuid,d.name,(select name from device_type_info where type_code = d.type_code) deviceType,d.reg_type,**.**.**.**work_addr,**.**.**.**work_port,d.analog_chan_count,d.digital_chan_count,d.alarm_in_count,d.alarm_out_count,(select name from device_group_info where id=d.group_id) groupName,d.status,d.type_code typeCode from device_info d where 1=1 '.$unitWhere.$whereStr.' order by '.$sort.' '.$order.' limit '.$start.','.$rows; $count = $dbQuery->querySingle('select count(*) from device_info d where 1=1'.$unitWhere.$whereStr); $jsonStr =""; while ($row = $dbQuery->fetchArray($re)){ $jsonStr = $jsonStr.json_encode($row).","; } if($jsonStr !=""){ $jsonStr = substr($jsonStr,0,strlen($jsonStr)-1); } $str ='{"total":'.$count.',"rows":['.$jsonStr.']}'; $dbQuery->closeDb(); echo ($str); ?> ``` 第二十四处：/data/saveUserInfo.php ``` <?php include('../common/connDb.php'); $operate=$_POST['operate']; if($operate=="delete"){ //如果是删除操作 $userIds = $_POST['userIds']; deleteUserInfo($userIds); }else{ //如果是增加或者修改操作 $isEmpty=empty($_POST['userId']); $name=$_POST['name']; $password = $_POST['password']; $password_old = @$_POST['password_old']; $realName = $_POST['realName']; $phone = $_POST['phone']; $eMail = $_POST['eMail']; $roleId = $_POST['roleId']; $unitCode = $_POST['unitCode']; if($isEmpty){ saveUserInfo($name,$password,$realName,$phone,$eMail,$roleId,$unitCode); }else{ updateUserInfo($_POST['userId'],$name,$password,$realName,$phone,$eMail,$roleId,$unitCode); } } function deleteUserInfo($userIds){ $dbQuery = new DataBaseQuery(); $query = $dbQuery->execute("delete from user_info where userId in(".$userIds.")"); if ($query) { echo "0"; }else{ echo "1"; } $dbQuery->closeDb(); } function saveUserInfo($name,$password,$realName,$phone,$eMail,$roleId,$unitCode){ $dbQuery = new DataBaseQuery(); date_default_timezone_set('PRC'); $time = date('Y-m-d H:i:s',time()); if($password != $password_old){ $query = $dbQuery->execute('insert into user_info values (NULL,"'.$name.'","'.$password.'","'.$unitCode.'","'.$realName.'","'.$phone.'","'.$eMail.'",'.$roleId.',"'.$time.'","1")'); } else{ $query = $dbQuery->execute('insert into user_info values (NULL,"'.$name.'","","'.$unitCode.'","'.$realName.'","'.$phone.'","'.$eMail.'",'.$roleId.',"'.$time.'","1")'); } if ($query) { echo $dbQuery->lastInsertRowID(); }else{ echo 0; } $dbQuery->closeDb(); } function updateUserInfo($userId,$name,$password,$realName,$phone,$eMail,$roleId,$unitCode){ $dbQuery = new DataBaseQuery(); date_default_timezone_set('PRC'); $time = date('Y-m-d H:i:s',time()); if($password != $password_old){ $query = $dbQuery->execute('update user_info set name="'.$name.'",password="'.$password.'",unitCode="'.$unitCode.'",realName="'.$realName.'",phone="'.$phone.'",eMail="'.$eMail.'",roleId='.$roleId.',updataTime="'.$time.'" where userId='.$userId); } else{ $query = $dbQuery->execute('update user_info set name="'.$name.'",unitCode="'.$unitCode.'",realName="'.$realName.'",phone="'.$phone.'",eMail="'.$eMail.'",roleId='.$roleId.',updataTime="'.$time.'" where userId='.$userId); } if ($query) { echo $userId; }else{ echo 0; } $dbQuery->closeDb(); } ?> ``` 第二十五处：/data/fetchCameraInfo.php ``` <?php include('../common/connDb.php'); include('../common/unitCode.php'); $dbQuery = new DataBaseQuery(); $page=$_POST['page']; $rows=$_POST['rows']; $sort=$_POST['sort']; $order=$_POST['order']; $start=($page -1)*$rows; $name=@$_POST['name']; $organize=@$_POST['organize']; $group=@$_POST['group']; $configFlag=@$_POST['configFlag']; $whereStr=""; if($name != ""){ if($name=="." || $name=="%" || $name=="_"){ $name ="[".$name."]"; } $whereStr =" and (d.name like '%".$name."%' or **.**.**.**work_addr like '%".$name."%' or c.name like '%".$name."%')"; } if($organize != ""){ if($organize =="0"){ //如果是主控制中心则查询全部 }else{ if(strlen($organize)==8){//如果是派出所级别 $whereStr =" and d.indexcode like '".$organize."%' and d.ctrl_unit_id<>1"; }else{ $qxCode = substr($organize,4,2); $shiCode = substr($organize,2,2); $shengCode = substr($organize,0,2); if($shiCode=="00" && $qxCode=="00"){ //如果是省 $whereStr =" and d.indexcode like '".$shengCode."%' and d.ctrl_unit_id<>1"; }else if($shiCode !="00" && $qxCode=="00"){ //如果是市 $whereStr =" and d.indexcode like '".$shengCode.$shiCode."%' and d.ctrl_unit_id<>1"; }else{ $whereStr =" and d.indexcode like '".$organize."%' and d.ctrl_unit_id<>1"; } } } } if($group != ""){ if($group=="-1"){ }else{ $whereStr =" and d.group_id =".$group; } } if($configFlag == "1"){ $whereStr =" and (c.is_transform is null or c.is_transform=0)"; }else if($configFlag == "2"){ $whereStr =" and (c.is_stream_transmit is null or c.is_stream_transmit=0)"; } $re = $dbQuery->query('select c.id,c.name,c.indexcode,d.name deviceName,**.**.**.**work_addr networkAddr,**.**.**.**work_port networkPort,c.is_transform transform,c.is_stream_transmit streamTransmit,d.status,d.id deviceId,c.local_num num,d.reg_type regType,d.indexcode devIndexCode,d.type_code typeCode,d.username,d.password,d.id deviceId from camera_info c,device_info d where c.device_indexcode=d.indexcode'.$unitWhere.$whereStr.' order by d.id '.$order.' limit '.$start.','.$rows); $count = $dbQuery->querySingle('select count(*) from camera_info c,device_info d where c.device_indexcode=d.indexcode'.$unitWhere.$whereStr); $jsonStr =""; while ($row = $dbQuery->fetchArray($re)){ $jsonStr = $jsonStr.json_encode($row).","; } if($jsonStr !=""){ $jsonStr = substr($jsonStr,0,strlen($jsonStr)-1); } $str ='{"total":'.$count.',"rows":['.$jsonStr.']}'; $dbQuery->closeDb(); echo ($str); ?> ``` 第二十六处：/data/fetchDeviceType.php ``` <?php /* 根据typeCode找出设备类型 */ include('../common/connDb.php'); $dbQuery = new DataBaseQuery(); $typeCode=$_POST['typeCode']; $typeCodeArray = $dbQuery->querySingleRow('select type_code typeCode,name,manufacturer,register_type registerType,access_type accessType,equipment_type equipmentType,plugin_id pluginId,int_rev port,str_rev cName from device_type_info where type_code='.$typeCode,true); $dbQuery->closeDb(); echo(json_encode($typeCodeArray)); ?> ``` 第二十七处：/data/saveGroup.php ``` <?php include('../common/connDb.php'); $operate=$_POST['operate']; $groupIds = @$_POST['groupIds']; $groupId= @$_POST['groupId']; $name= @$_POST['name']; if($operate=="delete"){ //如果是删除操作 deleteGroup($groupIds); }else if($operate=="add"){ //如果是增加操作 saveGroup($name); }else{ //如果是修改操作 updateGroup($groupId,$name); } function deleteGroup($groupIds){ $dbQuery = new DataBaseQuery(); $query1 = $dbQuery->execute("update device_info set group_id=0 where group_id in(".$groupIds.")"); $query2 = $dbQuery->execute("delete from device_group_info where id in(".$groupIds.")"); if ($query1 && $query2) { echo "0"; }else{ echo "1"; } $dbQuery->closeDb(); } function saveGroup($name){ $dbQuery = new DataBaseQuery(); date_default_timezone_set('PRC'); $time = date('Y-m-d H:i:s',time()); $query = $dbQuery->execute('insert into device_group_info values(NULL,"'.$name.'","'.$time.'",0,"")'); if ($query) { echo $dbQuery->lastInsertRowID(); }else{ echo 0; } $dbQuery->closeDb(); } function updateGroup($groupId,$name){ $dbQuery = new DataBaseQuery(); date_default_timezone_set('PRC'); $time = date('Y-m-d H:i:s',time()); $query = $dbQuery->execute('update device_group_info set name="'.$name.'",update_time="'.$time.'" where id='.$groupId); if ($query) { echo $groupId; }else{ echo 0; } $dbQuery->closeDb(); } ?> ``` 第二十八处：/data/saveRoleInfo.php ``` <?php include('../common/connDb.php'); $operate=$_POST['operate']; if($operate=="delete"){ //如果是删除操作 $roleIds = $_POST['roleIds']; deleteRoleInfo($roleIds); }else{ //如果是增加或者修改操作 $isEmpty=empty($_POST['roleId']); $name=$_POST['name']; $description = $_POST['description']; $menuIds = $_POST['menuIds']; if($isEmpty){ saveRoleInfo($name,$description,$menuIds); }else{ updateRoleInfo($_POST['roleId'],$name,$description,$menuIds); } } function deleteRoleInfo($roleIds){ $dbQuery = new DataBaseQuery(); $query1 = $dbQuery->execute("delete from user_info where roleId in(".$roleIds.")");//先删除关联该角色的用户 $query2 = $dbQuery->execute("delete from role_info where roleId in(".$roleIds.")");//再删除角色 if ($query1 && $query2) { echo "0"; }else{ echo "1"; } $dbQuery->closeDb(); } function saveRoleInfo($name,$description,$menuIds){ $dbQuery = new DataBaseQuery(); date_default_timezone_set('PRC'); $time = date('Y-m-d H:i:s',time()); $query = $dbQuery->execute('insert into role_info values (NULL,"'.$name.'","'.$description.'","'.$menuIds.'","'.$time.'","")'); if ($query) { echo $dbQuery->lastInsertRowID(); }else{ echo 0; } $dbQuery->closeDb(); } function updateRoleInfo($roleId,$name,$description,$menuIds){ $dbQuery = new DataBaseQuery(); date_default_timezone_set('PRC'); $time = date('Y-m-d H:i:s',time()); $query = $dbQuery->execute('update role_info set name="'.$name.'",description="'.$description.'",menuIds="'.$menuIds.'",updataTime="'.$time.'" where roleId='.$roleId); if ($query) { echo $roleId; }else{ echo 0; } $dbQuery->closeDb(); } ?> ``` 第二十九处：/data/roleInfoData.php ``` <?php include('../common/connDb.php'); $dbQuery = new DataBaseQuery(); $page=$_POST['page']; $rows=$_POST['rows']; $start=($page -1)*$rows; $re = $dbQuery->query('select * from role_info limit '.$start.','.$rows); $count = $dbQuery->querySingle('select count(*) from role_info'); $jsonStr =""; while ($row = $dbQuery->fetchArray($re)){ $jsonStr = $jsonStr.json_encode($row).","; } if($jsonStr !=""){ $jsonStr = substr($jsonStr,0,strlen($jsonStr)-1); } $str ='{"total":'.$count.',"rows":['.$jsonStr.']}'; $dbQuery->closeDb(); echo ($str); ?> ``` 第三十处：/data/shareDeviceInfo.php ``` <?php include('../common/connDb.php'); $operate = $_POST['operate']; $deviceIds = @$_POST['deviceIds']; $unitId = @$_POST['unitId']; $groupId = @$_POST['groupId']; $dbQuery = new DataBaseQuery(); if($operate=="share"){ //如果是指定勾选共享 shareDeviceInfo($dbQuery,$deviceIds,$unitId); }else{ //如果是全部共享 shareAllDeviceInfo($dbQuery,$groupId,$unitId); } $dbQuery->closeDb(); function shareDeviceInfo($dbQuery,$deviceIds,$unitId){ $query = $dbQuery->execute('update device_info set ctrl_unit_id='.$unitId.' where id in('.$deviceIds.')'); if ($query) { echo 0; }else{ echo 1; } } function shareAllDeviceInfo($dbQuery,$groupId,$unitId){ $query = $dbQuery->execute('update device_info set ctrl_unit_id='.$unitId.' where group_id ='.$groupId); if ($query) { echo 0; }else{ echo 1; } } ?> ``` 第三十一处：/data/modifyCameraName.php ``` <?php include('../common/connDb.php'); $deviceId=$_POST['deviceId']; $channelNum=$_POST['channelNum']; $cameraName=$_POST['cameraName']; $dbQuery = new DataBaseQuery(); $dbQuery->execute('update camera_info set name="'.$cameraName.'" where device_id='.$deviceId.' and local_num ='.$channelNum); $dbQuery->closeDb(); echo "0"; ?> ``` 第三十二处：/data/saveDeviceInfo.php ``` <?php include('../common/connDb.php'); $obj=$_POST['obj']; $analog_chan_count = $_POST['analog_chan_count']; $digital_chan_count = $_POST['digital_chan_count']; $alarm_in_count = $_POST['alarm_in_count']; $alarm_out_count = $_POST['alarm_out_count']; $audio_num = $_POST['audio_num']; $dbQuery = new DataBaseQuery(); $xml = simplexml_load_file('../../../pagconf.xml'); $pagIndexCode = $xml->pag->indexCode; if($obj=="singleIp"){ //如果是单IP添加 $singleIp_addr = $_POST['singleIp_addr']; $singleIp_port = $_POST['singleIp_port']; $singleIp_username = $_POST['singleIp_username']; $singleIp_password = $_POST['singleIp_password']; $singleIp_typecode = $_POST['singleIp_typecode']; $singleIp_groupId = $_POST['singleIp_groupId']; $singleIp_controlUnit = $_POST['singleIp_controlUnit']; $singleIp_indexcode = getIndexCode($dbQuery,$singleIp_controlUnit); $name = $_POST['name']; if($name==""){ $name = $singleIp_addr; } $serialnum = $_POST['serialnum']; $singleIp_allowShare = $_POST['singleIp_allowShare']; $reg_type = 0; //注册类型-0 被动 $deviceId = saveDeviceInfo($dbQuery,$singleIp_addr,$singleIp_port,$singleIp_username,$singleIp_password,$singleIp_typecode,$singleIp_indexcode,$name,$serialnum,$analog_chan_count,$digital_chan_count,$alarm_in_count,$alarm_out_count,$audio_num,$reg_type,$pagIndexCode,$singleIp_groupId,$singleIp_allowShare,$singleIp_controlUnit); echo $singleIp_indexcode; }else if($obj=="ipDomain"){ //如果是IP段添加 $ipDomain_startIp = $_POST['ipDomain_startIp']; $ipDomain_endIp = $_POST['ipDomain_endIp']; $ipDomain_typecode = $_POST['ipDomain_typecode']; $ipDomain_port = $_POST['ipDomain_port']; $ipDomain_username = $_POST['ipDomain_username']; $ipDomain_password = $_POST['ipDomain_password']; $ipDomain_groupId = $_POST['ipDomain_groupId']; $ipDomain_controlUnit = $_POST['ipDomain_controlUnit']; $ipDomain_allowShare = $_POST['ipDomain_allowShare']; $reg_type = 0; //注册类型-0 被动 $deviceIndexCodes =""; $ipArray = ipMiddle($ipDomain_startIp,$ipDomain_endIp); for($i=0;$i<count($ipArray);$i++){ $newIndexCode = getIndexCode($dbQuery,$ipDomain_controlUnit); $deviceId = saveDeviceInfo($dbQuery,$ipArray[$i],$ipDomain_port,$ipDomain_username,$ipDomain_password,$ipDomain_typecode,$newIndexCode,$ipArray[$i],"",$analog_chan_count,$digital_chan_count,$alarm_in_count,$alarm_out_count,$audio_num,$reg_type,$pagIndexCode,$ipDomain_groupId,$ipDomain_allowShare,$ipDomain_controlUnit); if($i==0){ $deviceIndexCodes = $newIndexCode; }else{ $deviceIndexCodes = $deviceIndexCodes.",".$newIndexCode; } } echo $deviceIndexCodes; }else if($obj=="singleCode"){ //如果是单编号添加 $singleCode_typecode = $_POST['singleCode_typecode']; $singleCode_indexcode = $_POST['singleCode_indexcode']; $singleCode_groupId = $_POST['singleCode_groupId']; $singleCode_controlUnit = $_POST['singleCode_controlUnit']; $name = $_POST['name']; if($name==""){ $name = "DEVICE_".$singleCode_indexcode; } $serialnum = $_POST['serialnum']; $singleCode_allowShare = $_POST['singleCode_allowShare']; $reg_type = 4; //注册类型-0 主动 $deviceId = saveDeviceInfo($dbQuery,"**.**.**.**",8000,"admin","12345",$singleCode_typecode,$singleCode_indexcode,$name,$serialnum,$analog_chan_count,$digital_chan_count,$alarm_in_count,$alarm_out_count,$audio_num,$reg_type,$pagIndexCode,$singleCode_groupId,$singleCode_allowShare,$singleCode_controlUnit); echo $singleCode_indexcode; }else{ //如果是编号段添加 $codeDomain_typecode = $_POST['codeDomain_typecode']; $codeDomain_preIndexCode = $_POST['codeDomain_preIndexCode']; $codeDomain_startCode = $_POST['codeDomain_startCode']; $codeDomain_endCode = $_POST['codeDomain_endCode']; $codeDomain_groupId = $_POST['codeDomain_groupId']; $codeDomain_allowShare = $_POST['codeDomain_allowShare']; $codeDomain_controlUnit = $_POST['codeDomain_controlUnit']; $reg_type = 4; //注册类型-0 主动 $deviceIndexCodes =""; $codeDomain_CodeLength = strlen($codeDomain_endCode); $indexCodeArray = generateSegmentIndexCode($codeDomain_preIndexCode,intval($codeDomain_startCode),intval($codeDomain_endCode), $codeDomain_CodeLength); for($i=0;$i<count($indexCodeArray);$i++){ $name = "DEVICE_".$indexCodeArray[$i]; $deviceId = saveDeviceInfo($dbQuery,"**.**.**.**",8000,"admin","12345",$codeDomain_typecode,$indexCodeArray[$i],$name,"",$analog_chan_count,$digital_chan_count,$alarm_in_count,$alarm_out_count,$audio_num,$reg_type,$pagIndexCode,$codeDomain_groupId,$codeDomain_allowShare,$codeDomain_controlUnit); if($i==0){ $deviceIndexCodes = $indexCodeArray[$i]; }else{ $deviceIndexCodes = $deviceIndexCodes.",".$indexCodeArray[$i]; } } echo $deviceIndexCodes; } $dbQuery->closeDb(); function saveDeviceInfo($dbQuery,$addr,$port,$username,$password,$typecode,$indexcode,$name,$serialnum,$analog_chan_count,$digital_chan_count,$alarm_in_count,$alarm_out_count,$audio_num,$reg_type,$pagIndexCode,$groupId,$allowShare,$singleIp_controlUnit){ $seq = $dbQuery->querySingle('select seq from sqlite_sequence where name="device_info"'); $str=""; if($seq==null || $seq==""){ $str = "1"; }else{ $str = strval($seq+1); } while(strlen($str)<12){ $str="0".$str; } $dev_guid=$pagIndexCode.$str; date_default_timezone_set('PRC'); $time = date('Y-m-d H:i:s',time()); $ctrl_unit_id = ""; if($singleIp_controlUnit=="0"){ $ctrl_unit_id = "1"; }else{ $ctrl_unit_id = "0"; } $query = $dbQuery->execute('insert into device_info(id,dev_guid,indexcode,name,type_code,reg_type,network_addr,network_port,username,password,group_id,serial_num,alarm_in_count,alarm_out_count,analog_chan_count,digital_chan_count,audio_num,update_time,allow_share,ctrl_unit_id) values (NULL,"'.$dev_guid.'","'.$indexcode.'","'.$name.'",'.$typecode.','.$reg_type.',"'.$addr.'",'.$port.',"'.$username.'","'.$password.'",'.$groupId.',"'.$serialnum.'",'.$alarm_in_count.','.$alarm_out_count.','.$analog_chan_count.','.$digital_chan_count.','.$audio_num.',"'.$time.'",'.$allowShare.','.$ctrl_unit_id.')'); if ($query) { return $dbQuery->lastInsertRowID(); }else{ return ""; } } function ipMiddle($ipDomain_startIp,$ipDomain_endIp){ $ipDomain_startIp = trim($ipDomain_startIp); $ipDomain_endIp = trim($ipDomain_endIp); $startIpArray = explode(".",$ipDomain_startIp); $endIpArray = explode(".",$ipDomain_endIp); $start0 = intval(trim($startIpArray[0])); $start1 = intval(trim($startIpArray[1])); $start2 = intval(trim($startIpArray[2])); $start3 = intval(trim($startIpArray[3])); $end0 = intval(trim($endIpArray[0])); $end1 = intval(trim($endIpArray[1])); $end2 = intval(trim($endIpArray[2])); $end3 = intval(trim($endIpArray[3])); $result = array(); // 如果起始IP地址和结束IP地址不等 while(!($start0 == $end0 && $start1 == $end1 && $start2 == $end2 && $start3 == $end3)){ $candidate = $start0.".".$start1.".".$start2.".".$start3; // 把起始地址放入数组中 array_push($result,$candidate); // 起始地址加1 $start3 = $start3 + 1; if($start3 == 256){ $start3 = 0; $start2 = $start2 + 1; if($start2 == 256){ $start2 = 0; $start1 = $start1 + 1; if($start1 == 256){ $start1 = 0; $start0 = $start0 + 1; } } } } // 如果退出循环，起始IP地址和结束IP地址相等 array_push($result,$ipDomain_endIp); return $result; } function getIndexCode($dbQuery,$controlUnit){ $preIndex=""; $xml = simplexml_load_file('../common/codeConfig.xml'); $areaCode = strval($xml->areaCode); $netMark = strval($xml->netMark); $version = simplexml_load_file('../../../version.xml'); $platformCode = strval($version->Code); $codeProtocol = strval($version->CodeProtocol);//DB33 GB28181 if($controlUnit=="0"){ date_default_timezone_set('PRC'); $controlUnit = date('ymd',time()); } if($codeProtocol == 'DB33'){//18bit if(strlen($controlUnit)==8){ $preIndex = $controlUnit."00".$platformCode; }else{ $preIndex = $controlUnit."0000".$platformCode; } $indexCode=""; $existCount = 0; do{ $indexCode = $preIndex.getrndnum(4)."00"; $existCount = $dbQuery->querySingle('select count(*) from device_info where indexcode="'.$indexCode.'"'); }while($existCount>0); return $indexCode; }else{ if(strlen($controlUnit)==8){ $preIndex = $controlUnit."00".$areaCode.$netMark.$platformCode; }else{ $preIndex = $controlUnit."0000".$areaCode.$netMark.$platformCode; } $indexCode=""; $existCount = 0; do{ $indexCode = $preIndex.getrndnum(4); $existCount = $dbQuery->querySingle('select count(*) from device_info where indexcode="'.$indexCode.'"'); }while($existCount>0); return $indexCode; } } function getrndnum($length=6) { $hash = ''; $chars = '0123456789'; $max = strlen($chars) - 1; mt_srand((double)microtime() * 1000000); for($i = 0; $i < $length; $i++){ $hash .= $chars[mt_rand(0, $max)]; } return $hash; } function generateSegmentIndexCode($preIndexCode,$startIndexCode,$endIndexCode,$codeDomain_CodeLength){ $indexCodeArray = array(); if ($startIndexCode <= $endIndexCode) { $version = simplexml_load_file('../../../version.xml'); $codeProtocol = strval($version->CodeProtocol);//DB33 GB28181 $length = $codeDomain_CodeLength;//strlen(strval($endIndexCode)); for($i = $startIndexCode;$i<= $endIndexCode;$i++){ $code = strval($i); $code = str_repeat("0", $length-strlen($code)).$code; /*if($codeProtocol == 'DB33'){ if(strlen($code)<6){ $code = str_repeat("0", 6-strlen($code)).$code; } }else{ if(strlen($code)<4){ $code = str_repeat("0", 4-strlen($code)).$code; } }*/ $code = $preIndexCode.$code; array_push($indexCodeArray,$code); } } return $indexCodeArray; } ``` ###0x03修复方案 过滤。