' . h($title) . '（版本 ' . self::TERMS_VERSION . '）

点击“我已阅读并同意”或继续安装、升级，即表示您已阅读、理解并接受本条款。

1. 授权与范围

本软件按随附开源许可证授权。您可在许可证允许范围内使用、复制、修改和再分发，并应保留版权、许可证和免责声明。

2. 使用者责任

您应确保部署环境、域名、服务器、数据库及上传内容拥有合法权利并遵守适用法律。您对网站、发布的信息和用户活动独立负责。

3. 内容与账号

您应审核用户内容、处理侵权或违法信息，并保护账号、口令、密钥和个人数据。软件作者不对您的内容或账号管理负责。

4. 无担保

在法律允许的最大范围内，本软件按“现状”和“可用”基础提供，不作适销性、特定用途适用性、持续可用、无错误或数据准确性的担保。

5. 风险与备份

安装、升级、迁移、插件运行可能导致中断、覆盖、丢失或不兼容。操作前必须完成可恢复备份并在测试环境验证，相关风险由您承担。

6. 责任限制

在法律允许的最大范围内，作者及贡献者不对间接、附带、特殊、惩罚性或后果性损害，以及利润、收入、商誉、业务机会或数据损失负责。累计责任不超过您实际支付的金额；免费获得时责任上限为零。

7. 第三方组件与服务

第三方组件受其各自许可证和条款约束。作者不控制其可用性、收费、隐私或安全性，您应自行评估风险。

8. 更新与变更

升级器可能下载并覆盖程序文件，数据库同步可能改变结构。您应核对来源、版本和文件清单；作者不保证升级成功或兼容定制代码。条款可随版本更新。

9. 安全与隐私

您应自行配置访问控制、加密、日志和数据删除策略。软件不承诺满足特定行业合规要求，也不替代安全或法律评估。

10. 适用法律

争议解决适用软件运营者所在地的强制性法律规定；限制按当地法律允许的最大范围执行，其余条款继续有效。

本条款是通用模板，不构成法律意见。部署前请让专业人士审阅并补充主体、联系方式、适用法律和隐私政策。

'; } public static function terms_consent(string $context = 'install', string $form_id = ''): string { $form = $form_id === '' ? '' : ' form="' . h($form_id) . '"'; $checked = $context === 'install' ? '' : ' checked'; return self::terms_html($context) . ''; } public static function terms_accepted(array $values): bool { return isset($values['terms_agree']) && (string)$values['terms_agree'] === '1' && hash_equals(self::TERMS_VERSION, (string)($values['terms_version'] ?? '')); } public static function debug_log_write(string $message, ?Throwable $e = null): void { $exception_text = $e ? exception_detail($e) : ''; $fingerprint = hash('sha256', $message . "\n" . $exception_text); $now = time(); $throttle = @fopen(DEBUG_LOG_FILE . '.throttle', 'c+'); if (is_resource($throttle) && @flock($throttle, LOCK_EX)) { rewind($throttle); $recent = json_decode((string)stream_get_contents($throttle), true); $recent = is_array($recent) ? $recent : []; foreach ($recent as $key => $timestamp) { if ($now - (int)$timestamp >= DEBUG_LOG_DEDUP_SECONDS) unset($recent[$key]); } if (isset($recent[$fingerprint])) { @flock($throttle, LOCK_UN); @fclose($throttle); return; } $recent[$fingerprint] = $now; @ftruncate($throttle, 0); rewind($throttle); @fwrite($throttle, json_encode($recent, JSON_UNESCAPED_SLASHES)); @flock($throttle, LOCK_UN); @fclose($throttle); } elseif (is_resource($throttle)) { @fclose($throttle); } $line = '[' . date('Y-m-d H:i:s') . '] ' . trim($message); $ip = ip_addr(); if ($ip !== '') $line .= "\nIP: " . $ip; $uri = trim((string)($_SERVER['REQUEST_METHOD'] ?? '') . ' ' . (string)($_SERVER['REQUEST_URI'] ?? '')); if ($uri !== '') $line .= "\n" . $uri; if ($exception_text !== '') $line .= "\n" . $exception_text; $line .= "\n\n"; @file_put_contents(DEBUG_LOG_FILE, $line, FILE_APPEND | LOCK_EX); } public static function setup_html(string $title, string $body, bool $project_modal = false): never { if (PHP_SAPI === 'cli') { $text = preg_replace('#<(?:style|script)\b[^>]*>.*?#is', '', $body) ?? $body; $text = preg_replace('#<\s*/?\s*(?:br|p|div|section|article|header|footer|h[1-6]|li|tr|ul|ol)\b[^>]*>#i', "\n", $text) ?? $text; $text = html_entity_decode(strip_tags($text), ENT_QUOTES | ENT_HTML5, 'UTF-8'); $text = preg_replace('/[ \t]+\n/u', "\n", $text) ?? $text; $text = preg_replace('/\n{3,}/', "\n\n", $text) ?? $text; $text = trim($text); $output = $text === '' || $text === $title || str_starts_with($text, $title . "\n") ? $text : $title . "\n\n" . $text; fwrite(STDOUT, trim($output) . "\n"); exit; } $meta = ''; $project_assets = $project_modal ? '' : ''; $project_scripts = $project_modal ? \project_modal_html() . '' : ''; echo '' . $meta . '' . h($title) . '' . $project_assets . '

' . $body . '

' . $project_scripts . ''; exit; } public static function app_db_config_source(array $config): string { $saved = $config; unset($saved['path']); if (($saved['driver'] ?? '') === 'sqlite') $saved['db_file'] = $saved['database']; return " "CREATE TABLE app_groups(id $id,name $key NOT NULL UNIQUE,allow_manage INTEGER NOT NULL DEFAULT 0,allow_admin INTEGER NOT NULL DEFAULT 0)", 'app_users' => "CREATE TABLE app_users(id $id,username $key NOT NULL UNIQUE,password $short NOT NULL,email $key NOT NULL DEFAULT '',bio $long NOT NULL,avatar_style $short NOT NULL DEFAULT '',avatar_seed $short NOT NULL DEFAULT '',group_id $uint NOT NULL DEFAULT 2,points INTEGER NOT NULL DEFAULT 0,is_banned INTEGER NOT NULL DEFAULT 0,is_muted INTEGER NOT NULL DEFAULT 0,unread_notifications $uint NOT NULL DEFAULT 0,last_post_at $uint NOT NULL DEFAULT 0,created_at $uint NOT NULL)", 'app_notifications' => "CREATE TABLE app_notifications(id $id,recipient_id $uint NOT NULL,sender_id $uint DEFAULT NULL,kind $short NOT NULL DEFAULT 'direct',content $long NOT NULL,topic_id $uint DEFAULT NULL,reply_id $uint DEFAULT NULL,read_at $uint NOT NULL DEFAULT 0,created_at $uint NOT NULL)", 'app_forums' => "CREATE TABLE app_forums(id $id,name $short NOT NULL,description $long NOT NULL,sort $uint NOT NULL DEFAULT 0,allow_view_groups $short NOT NULL DEFAULT '',allow_post_groups $short NOT NULL DEFAULT '',allow_reply_groups $short NOT NULL DEFAULT '')", 'app_topics' => "CREATE TABLE app_topics(id $id,forum_id $uint NOT NULL,user_id $uint NOT NULL,title $short NOT NULL,body $long NOT NULL,highlight_style $short NOT NULL DEFAULT '',reply_order INTEGER NOT NULL DEFAULT 0,reply_count $uint NOT NULL DEFAULT 0,view_count $uint NOT NULL DEFAULT 0,last_reply_at $uint NOT NULL DEFAULT 0,last_reply_user_id $uint NOT NULL DEFAULT 0,created_at $uint NOT NULL)", 'app_topics_del' => "CREATE TABLE app_topics_del(id $id,topic_id $uint NOT NULL,reply_id $uint NOT NULL,created_at $uint NOT NULL)", 'app_replies' => "CREATE TABLE app_replies(id $id,topic_id $uint NOT NULL,user_id $uint NOT NULL,body $long NOT NULL,created_at $uint NOT NULL,updated_at $uint NOT NULL)", 'app_attachments' => "CREATE TABLE app_attachments(id $id,user_id $uint NOT NULL,hash $short NOT NULL,file_name $short NOT NULL,original_name $short NOT NULL DEFAULT '',ext $short NOT NULL DEFAULT '',mime $short NOT NULL DEFAULT '',size $uint NOT NULL DEFAULT 0,is_image INTEGER NOT NULL DEFAULT 0,created_at $uint NOT NULL)", 'app_cron_logs' => "CREATE TABLE app_cron_logs(id $id,plugin_id $short NOT NULL,task_name $short NOT NULL,status $short NOT NULL,message $long NOT NULL,started_at $uint NOT NULL,finished_at $uint NOT NULL DEFAULT 0)", 'app_plugins' => "CREATE TABLE app_plugins(id $key PRIMARY KEY,name $short NOT NULL,version $short NOT NULL DEFAULT '',file $short NOT NULL,code_hash $short NOT NULL,manifest_json $long NOT NULL,config_json $long NOT NULL,entries_json $long NOT NULL,enabled $uint NOT NULL DEFAULT 0,status $short NOT NULL DEFAULT '',disabled_reason $long NOT NULL,installed_at $uint NOT NULL,updated_at $uint NOT NULL)", 'app_cron_tasks' => "CREATE TABLE app_cron_tasks(plugin_id $key NOT NULL,task_name $key NOT NULL,callback $short NOT NULL,interval_seconds $uint NOT NULL,enabled $uint NOT NULL DEFAULT 1,available_at $uint NOT NULL DEFAULT 0,lease_token $short NOT NULL DEFAULT '',lease_until $uint NOT NULL DEFAULT 0,last_started_at $uint NOT NULL DEFAULT 0,last_finished_at $uint NOT NULL DEFAULT 0,last_success_at $uint NOT NULL DEFAULT 0,status $short NOT NULL DEFAULT '',attempts $uint NOT NULL DEFAULT 0,failure_count $uint NOT NULL DEFAULT 0,retry_limit $uint NOT NULL DEFAULT 3,pause_seconds $uint NOT NULL DEFAULT 1800,pause_until $uint NOT NULL DEFAULT 0,last_error $long NOT NULL,PRIMARY KEY(plugin_id,task_name))", 'app_settings' => "CREATE TABLE app_settings(name $key PRIMARY KEY,value $long NOT NULL)", ]; if ($driver === 'mysql') { foreach ($tables as &$sql) $sql .= ' ENGINE=InnoDB DEFAULT CHARSET=utf8mb4 COLLATE=utf8mb4_unicode_ci'; unset($sql); } $indexes = [ 'idx_users_group' => 'app_users(group_id)', 'idx_users_email' => 'app_users(email)', 'idx_forums_sort' => 'app_forums(sort,id)', 'idx_replies_topic_time' => 'app_replies(topic_id,created_at,id)', 'idx_topics_del_topic' => 'app_topics_del(topic_id,created_at,id)', 'idx_topics_del_reply' => 'app_topics_del(reply_id)', 'idx_replies_user_time' => 'app_replies(user_id,created_at DESC,id DESC)', 'idx_attachments_user' => 'app_attachments(user_id,created_at DESC,id DESC)', 'idx_notifications_recipient_unread' => 'app_notifications(recipient_id,read_at)', 'idx_notifications_recipient_time' => 'app_notifications(recipient_id,created_at DESC,id DESC)', 'idx_notifications_sender_time' => 'app_notifications(sender_id,created_at DESC,id DESC)', 'idx_cron_logs_plugin_time' => 'app_cron_logs(plugin_id,started_at DESC,id DESC)', 'idx_cron_logs_time' => 'app_cron_logs(started_at DESC,id DESC)', 'idx_cron_tasks_due' => 'app_cron_tasks(enabled,available_at,plugin_id,task_name)', 'idx_topics_created' => 'app_topics(created_at DESC,id DESC)', 'idx_topics_last_reply' => 'app_topics(last_reply_at DESC,id DESC)', 'idx_topics_user_created' => 'app_topics(user_id,created_at DESC,id DESC)', 'idx_topics_forum_created' => 'app_topics(forum_id,created_at DESC,id DESC)', 'idx_topics_forum_last_reply' => 'app_topics(forum_id,last_reply_at DESC,id DESC)', ]; foreach ($indexes as $name => &$target) $target = 'CREATE INDEX ' . $name . ' ON ' . $target; unset($target); $indexes['idx_attachments_user_hash'] = 'CREATE UNIQUE INDEX idx_attachments_user_hash ON app_attachments(user_id,hash)'; return [$tables, $indexes]; } public static function app_db_index_table(string $sql): string { return preg_match('/\bON\s+[`"]?([A-Za-z_][A-Za-z0-9_]*)/i', $sql, $match) ? $match[1] : ''; } public static function i_db_name(): string { if (is_file(INSTALL_DB_CONFIG_FILE)) { $config = include INSTALL_DB_CONFIG_FILE; $name = is_array($config) ? basename((string)($config['db_file'] ?? '')) : ''; if ($name !== '' && preg_match('/^[A-Za-z0-9][A-Za-z0-9._-]*\.sqlite$/', $name)) return $name; } if (is_file(INSTALL_DEFAULT_DB_FILE)) return basename(INSTALL_DEFAULT_DB_FILE); return 'forum-' . bin2hex(random_bytes(8)) . '.sqlite'; } public static function i_save_db_config(array $config): void { if (!is_dir(INSTALL_DATA_DIR)) mkdir(INSTALL_DATA_DIR, 0755, true); if (file_put_contents(INSTALL_DB_CONFIG_FILE, self::app_db_config_source($config), LOCK_EX) === false) self::i_install_error('安装失败', '数据库配置文件写入失败。'); } public static function i_require_writable_dirs(): void { $dirs = [ INSTALL_DATA_DIR => 'app/data/', ]; foreach ($dirs as $dir => $label) { if (!is_dir($dir) && !mkdir($dir, 0755, true) && !is_dir($dir)) { self::i_install_error('安装环境检查未通过', $label . '目录无法创建，请检查目录权限。'); } if (!is_writable($dir)) { self::i_install_error('安装环境检查未通过', $label . '目录不可写，请赋予 PHP 写入权限。'); } $probe = tempnam($dir, '.install-'); if ($probe === false || file_put_contents($probe, '1', LOCK_EX) === false) { if ($probe !== false) @unlink($probe); self::i_install_error('安装环境检查未通过', $label . '目录无法写入文件，请检查目录权限。'); } @unlink($probe); } } public static function i_install_error(string $title, string $message): void { if (PHP_SAPI === 'cli') { fwrite(STDERR, $title . PHP_EOL . $message . PHP_EOL); exit(1); } self::setup_html($title, '

' . h($title) . '

安装环境检查未通过。

' . h($message) . '

'); } public static function i_db(array $config): PDO { try { return app_db_connect($config); } catch (Throwable $e) { self::i_install_error('数据库初始化失败', '数据库连接失败：' . $e->getMessage()); } } public static function i_database_install_state(PDO $db, string $driver): string { if (!app_db_table_exists($db, $driver, 'app_users') || $db->query('SELECT id FROM app_users ORDER BY id LIMIT 1')->fetchColumn() === false) return 'empty'; foreach (['app_settings', 'app_groups', 'app_forums', 'app_topics', 'app_replies'] as $table) if (!app_db_table_exists($db, $driver, $table)) return 'partial'; $site = $db->query("SELECT value FROM app_settings WHERE name='site_name' LIMIT 1")->fetchColumn(); return $site === false ? 'partial' : 'installed'; } public static function i_restore_existing_install(array $config): never { self::i_save_db_config($config); if (file_put_contents(INSTALL_LOCK_FILE, (string)now(), LOCK_EX) === false) self::i_install_error('安装失败', '安装锁文件写入失败。'); header('Location: index.php?a=login', true, 303); exit; } public static function i_result(string $title, string $admin_user, string $admin_pass, string $admin_email, string $site_name, string $database, string $notice = ''): void { $warning = $notice === '' ? '' : '

' . h($notice) . '

'; self::setup_html($title, '

安装完成

站点已初始化，管理员账号已创建。

安装结果

可以直接进入论坛使用，建议立即登录后台修改密码。

' . $warning . '

站点名

' . h($site_name) . '

数据库

' . h($database) . '

管理员用户名

' . h($admin_user) . '

管理员邮箱

' . h($admin_email) . '

管理员密码

' . h($admin_pass) . '

进入首页进入后台

'); } public static function i_locked(): void { self::setup_html('安装已锁定', '

安装已锁定

安装入口当前不可访问。

如需重新安装，请先删除安装锁文件后再访问。

进入首页

'); } public static function i_form(string $site_name, string $admin_user, string $admin_email, string $admin_pass, string $default_forum, array $values = [], string $error = ''): void { $type = in_array((string)($values['db_type'] ?? 'sqlite'), ['sqlite', 'mysql', 'pgsql'], true) ? (string)($values['db_type'] ?? 'sqlite') : 'sqlite'; $option = fn(string $value, string $label): string => ''; $v = fn(string $name, string $default = ''): string => h((string)($values[$name] ?? $default)); $default_host = $type === 'pgsql' ? 'postgres' : 'mysql'; $default_port = $type === 'pgsql' ? '5432' : '3306'; $db_fields = '

数据库地址

端口

数据库名数据库需要提前创建，安装器会创建其中的数据表。

数据库用户

数据库密码

'; $error_html = $error === '' ? '' : '

' . h($error) . '

'; $body = '

安装

一页完成初始化，创建管理员和默认版块。

' . $error_html . '

安装配置

'; self::setup_html('安装', $body); } public static function setup_install_run(): never { if (is_file(INSTALL_LOCK_FILE)) { self::i_locked(); } self::i_require_writable_dirs(); $step = (string)($_POST['step'] ?? ''); if ($step !== 'install') { self::i_form('我的论坛', 'admin', '', '', '默认版块'); } $form_values = $_POST; if (!isset($_POST['confirm_clean'], $_POST['confirm_admin'])) self::i_form('我的论坛', 'admin', '', '', '默认版块', $form_values); $driver = in_array((string)($_POST['db_type'] ?? 'sqlite'), ['sqlite', 'mysql', 'pgsql'], true) ? (string)($_POST['db_type'] ?? 'sqlite') : 'sqlite'; $db_name = trim((string)($_POST['db_name'] ?? '')); $sqlite_name = $driver === 'sqlite' ? self::i_db_name() : ''; $config = $driver === 'sqlite' ? [ 'driver' => 'sqlite', 'database' => $sqlite_name, 'path' => INSTALL_DATA_DIR . '/' . $sqlite_name, ] : [ 'driver' => $driver, 'host' => trim((string)($_POST['db_host'] ?? '127.0.0.1')), 'port' => max(1, (int)($_POST['db_port'] ?? ($driver === 'mysql' ? 3306 : 5432))), 'database' => $db_name, 'username' => (string)($_POST['db_user'] ?? ''), 'password' => (string)($_POST['db_password'] ?? ''), ]; if ($driver !== 'sqlite' && ($config['host'] === '' || $config['database'] === '' || $config['username'] === '')) self::i_form('我的论坛', 'admin', '', '', '默认版块', $form_values); $site_name = trim((string)($_POST['site_name'] ?? '我的论坛')); $admin_username = trim((string)($_POST['admin_username'] ?? 'admin')); $admin_email = trim((string)($_POST['admin_email'] ?? '')); $admin_password = (string)($_POST['admin_password'] ?? ''); $admin_password2 = (string)($_POST['admin_password2'] ?? ''); $forum_name = trim((string)($_POST['forum_name'] ?? '默认版块')); if ($site_name === '' || $admin_username === '' || $admin_email === '' || $admin_password === '' || $forum_name === '') self::i_form($site_name ?: '我的论坛', $admin_username ?: 'admin', $admin_email, $admin_password, $forum_name ?: '默认版块', $form_values); if ($admin_password !== $admin_password2) self::i_form($site_name, $admin_username, $admin_email, $admin_password, $forum_name, $form_values); if (!self::terms_accepted($form_values)) self::i_form($site_name, $admin_username, $admin_email, $admin_password, $forum_name, $form_values, '请先阅读完整软件使用条款并勾选同意。'); if (is_file(INSTALL_LOCK_FILE)) self::i_locked(); $db = self::i_db($config); $install_state = self::i_database_install_state($db, $driver); if ($install_state === 'installed') self::i_restore_existing_install($config); if ($install_state === 'partial') self::i_install_error('检测到已有数据', '数据库中已有用户数据，但安装记录不完整。请恢复原程序文件或使用空数据库安装。'); self::i_save_db_config($config); [$tables, $indexes] = self::app_db_schema($driver); foreach ($tables as $table => $sql) if (!app_db_table_exists($db, $driver, $table)) $db->exec($sql); foreach ($indexes as $index => $sql) { if (app_db_index_exists($db, $driver, $index, self::app_db_index_table($sql))) continue; $db->exec($sql); } $seed = $db->prepare(app_db_upsert_sql($driver, 'app_groups', ['id', 'name', 'allow_manage', 'allow_admin'], ['id'])); $seed->execute([1, '管理员', 1, 1]); $seed->execute([2, '会员', 0, 0]); $seed = $db->prepare(app_db_upsert_sql($driver, 'app_forums', ['id', 'name', 'description', 'sort'], ['id'])); $seed->execute([1, $forum_name, '欢迎发帖', 0]); if ($driver === 'pgsql') { $db->exec("SELECT setval(pg_get_serial_sequence('app_groups','id'), (SELECT MAX(id) FROM app_groups))"); $db->exec("SELECT setval(pg_get_serial_sequence('app_forums','id'), (SELECT MAX(id) FROM app_forums))"); } $settings = default_settings(); $settings['site_name'] = $site_name; $settings['software_terms_version'] = self::TERMS_VERSION; $settings['software_terms_accepted_at'] = (string)now(); $stmt = $db->prepare(app_db_upsert_sql($driver, 'app_settings', ['name', 'value'], ['name'])); foreach ($settings as $name => $value) $stmt->execute([$name, $value]); $admin_pass = $admin_password; $welcome_ts = now(); $db->prepare("INSERT INTO app_users(username,password,email,bio,avatar_style,avatar_seed,group_id,last_post_at,created_at) VALUES(?,?,?,?,?,?,?,?,?)")->execute([$admin_username, password_hash($admin_pass, PASSWORD_DEFAULT), $admin_email, '站点管理员', '', '', 1, $welcome_ts, $welcome_ts]); forums_cache(true); groups_cache(true); Plugin::plugin_registry_sync(); Plugin::plugin_assets_rebuild(); if (file_put_contents(INSTALL_LOCK_FILE, (string)now(), LOCK_EX) === false) self::i_install_error('安装失败', '安装锁文件写入失败。'); $database_label = $driver === 'sqlite' ? 'app/data/' . $config['database'] : strtoupper($driver === 'pgsql' ? 'PostgreSQL' : 'MySQL') . ' / ' . $config['database']; self::i_result('安装完成', $admin_username, $admin_pass, $admin_email, $site_name, $database_label); } public static function us_unlock(): void { if (isset($GLOBALS['update_lock_handle']) && is_resource($GLOBALS['update_lock_handle'])) { flock($GLOBALS['update_lock_handle'], LOCK_UN); fclose($GLOBALS['update_lock_handle']); unset($GLOBALS['update_lock_handle']); } } public static function us_styles(): string { return '.update-page{min-height:100vh;padding:28px 12px;background:#f6f7f8}.update-card{width:min(720px,100%);margin:auto;padding:28px;border:1px solid #e8e8e8;border-radius:8px;background:#fff;box-shadow:0 18px 45px rgba(16,24,40,.08)}.update-title{display:flex;align-items:center;gap:9px;margin:0;color:#111;font-size:22px;line-height:1.3}.update-file-version{padding:2px 6px;border:1px solid #dfe4e1;border-radius:4px;background:#f7f9f8;color:#6d7571;font:12px/1.4 ui-monospace,SFMono-Regular,Menlo,monospace}.update-sub{margin:7px 0 20px;color:#777;font-size:13px;line-height:1.7}.update-grid{display:grid;grid-template-columns:1fr 1fr;gap:12px;margin:0 0 18px}.update-stack{grid-template-columns:minmax(0,1fr)}.update-panel{padding:16px;border:1px solid #eee;border-radius:6px;background:#fafafa}.update-panel strong{display:block;margin-bottom:6px;color:#222}.update-panel span{display:block;color:#777;font-size:13px;line-height:1.6;overflow-wrap:anywhere}.update-version{font-family:ui-monospace,SFMono-Regular,Menlo,monospace}.update-notice,.update-warning,.update-error{margin:0 0 18px;padding:14px;border:1px solid #dfe8e3;border-radius:6px;background:#f8fcfa;color:#376348;font-size:13px;line-height:1.7;word-break:break-word}.update-warning{border-color:#f3d6a2;background:#fffaf0;color:#8a5a13}.update-error{border-color:#ffd8d8;background:#fff8f8;color:#b42318}.update-list{list-style:none;margin:0 0 20px;padding:0;border:1px solid #e5e7eb;border-radius:6px;overflow:hidden;background:#fff}.update-list li{padding:0;border-bottom:1px solid #edf0f2;color:#444;font-size:13px}.update-list li:last-child{border-bottom:0}.update-list label{display:flex;align-items:center;gap:12px;min-height:48px;padding:10px 14px;cursor:pointer;transition:background .15s ease}.update-list label:hover{background:#f7faf8}.update-list li:has(input:checked){background:#f8fcfa}.update-list input[type=checkbox]{width:18px;height:18px;margin:0;accent-color:#20a45a;cursor:pointer;flex:0 0 18px}.update-file-type{display:inline-flex;align-items:center;justify-content:center;min-width:44px;padding:3px 7px;border-radius:4px;background:#eef8f2;color:#267247;font-size:12px;line-height:1.2}.update-file-path{min-width:0;color:#252b2e;font-family:ui-monospace,SFMono-Regular,Menlo,monospace;overflow-wrap:anywhere}.update-schema-item{background:#fafafa}.update-schema-copy{display:grid;gap:2px;min-width:0}.update-schema-copy strong{color:#30363a;font-size:13px}.update-schema-copy span{color:#7a8185;font-size:12px;line-height:1.5}.update-result-item{padding:11px 14px!important;line-height:1.6}.update-actions{display:flex;align-items:center;justify-content:flex-end;gap:10px;flex-wrap:wrap}.update-actions form{display:flex;margin:0}.update-actions a,.update-actions button{display:inline-flex;align-items:center;justify-content:center;min-height:36px;padding:0 14px;border:1px solid #ddd;border-radius:6px;background:#fff;color:#555;font:inherit;text-decoration:none;cursor:pointer}.update-actions button.primary{border-color:#2ecc71;background:#2ecc71;color:#fff}.update-actions button:disabled{cursor:not-allowed;opacity:.55}@media(max-width:600px){.update-card{padding:20px}.update-grid{grid-template-columns:1fr}.update-list label{gap:10px;padding:10px 12px}.update-file-type{min-width:40px}.update-actions{display:grid;grid-template-columns:repeat(auto-fit,minmax(128px,1fr));align-items:stretch}.update-actions a,.update-actions form,.update-actions button{width:100%;min-width:0}}'; } public static function us_result_page(string $title, array $changes, string $error = ''): void { $body = '

' . h($title) . '

勾选数据库同步时，将根据当前程序幂等同步数据库结构和索引。

'; if ($error !== '') { $body .= '

' . h($error) . '

'; } elseif ($changes) { $body .= '

' . h($change) . '

'; } else { $body .= '

数据库结构和索引已是最新，无需调整。

'; } $body .= '

返回升级页进入首页

'; self::us_unlock(); self::setup_html($title, '

' . $body . '

'); } public static function us_need_admin(): void { if (!uid()) self::us_result_page('请先登录', [], '请先登录管理员账号后再执行升级。'); if (uid() === 1) return; if (!app_db_table_exists(db(), db_driver(), 'app_users') || !app_db_table_exists(db(), db_driver(), 'app_groups') || !can_access_admin()) self::us_result_page('无权限', [], '当前账号没有后台管理权限。'); } public static function us_legacy_upgrade_state(PDO $db, string $driver): string { $legacy = []; $current = []; foreach (self::migrate_core_table_map() as $table => $target) { if ($table === 'topics_fts') continue; if (app_db_table_exists($db, $driver, $table)) $legacy[] = $table; if (app_db_table_exists($db, $driver, $target)) $current[] = $target; } if (!$legacy) return ''; if ($current) return '系统表同时存在旧名称和新名称，请先检查数据库。'; foreach (['groups', 'users', 'forums', 'topics', 'replies', 'settings'] as $table) { if (!app_db_table_exists($db, $driver, $table)) return '旧数据库缺少核心表：' . $table . '。请使用备份重新安装后执行数据迁入。'; } return 'legacy'; } public static function us_legacy_admin_id(string $username, string $password): int { $user = one('SELECT * FROM users WHERE username=?', [trim($username)]); if (!$user || !password_verify($password, (string)$user['password']) || (int)($user['is_banned'] ?? 0) === 1) return 0; $user_id = (int)$user['id']; if ($user_id === 1) return $user_id; $group = one('SELECT * FROM groups WHERE id=?', [(int)($user['group_id'] ?? 0)]); return (int)($group['allow_admin'] ?? 0) === 1 ? $user_id : 0; } public static function us_acquire_lock(): void { $lock = fopen(UPDATE_RUN_LOCK_FILE, 'c'); if (!$lock || !flock($lock, LOCK_EX | LOCK_NB)) self::us_result_page('升级失败', [], '升级正在执行，请稍后再试。'); $GLOBALS['update_lock_handle'] = $lock; } public static function us_legacy_upgrade_page(string $error = ''): never { $token = csrf_token(); $body = '

旧版本数据库升级 ' . h(APP_VERSION) . '

检测到数据库仍使用无 app_ 前缀的旧系统表。升级将原子改名系统表并同步当前结构。

'; if ($error !== '') $body .= '

' . h($error) . '

'; $body .= '

操作前必须完整备份数据库。若旧库结构不完整，请重新安装后使用“数据迁入”。

'; self::setup_html('旧版本数据库升级', '

' . $body . '

'); } public static function us_handle_legacy_upgrade(): never { if ($_SERVER['REQUEST_METHOD'] !== 'POST') self::us_legacy_upgrade_page(); if (!hash_equals(csrf_token(), (string)($_POST['_csrf'] ?? ''))) self::us_legacy_upgrade_page('请求已过期，请返回重试。'); if (!isset($_POST['confirm_backup'])) self::us_legacy_upgrade_page('请先确认已完成数据库备份。'); if (!self::terms_accepted($_POST)) self::us_legacy_upgrade_page('请先阅读完整软件使用条款并勾选同意。'); $user_id = self::us_legacy_admin_id((string)($_POST['username'] ?? ''), (string)($_POST['password'] ?? '')); if ($user_id <= 0) self::us_legacy_upgrade_page('管理员账号或密码错误。'); self::us_acquire_lock(); try { $changes = self::us_sync_schema(); start_cookie_login($user_id); self::us_result_page('升级完成', $changes); } catch (Throwable $e) { self::us_result_page('升级失败', [], $e->getMessage()); } } public static function us_http(string $url, int $max_bytes = UPDATE_MAX_ARCHIVE_BYTES): string { $response = Plugin::remote_http_request($url, 30, ['Accept: application/json, text/plain, application/octet-stream'], null, [ 'connect_timeout' => 10, 'max_bytes' => $max_bytes, 'user_agent' => 'bbs1org-updater', ]); if ($response['ok']) return (string)$response['body']; if ((string)$response['error'] === '响应内容过大') { throw new RuntimeException('升级源返回内容过大。'); } $context = stream_context_create(['http' => [ 'method' => 'GET', 'header' => "Accept: application/json, text/plain, application/octet-stream\r\nUser-Agent: bbs1org-updater\r\n", 'timeout' => 30, 'follow_location' => 1, 'max_redirects' => 3, 'ignore_errors' => true, ]]); $body = @file_get_contents($url, false, $context); $status = 0; foreach (($http_response_header ?? []) as $header) { if (preg_match('/^HTTP\/\S+\s+(\d{3})/', $header, $m)) $status = (int)$m[1]; } if ($body === false || $status < 200 || $status >= 300) throw new RuntimeException('连接升级源失败（HTTP ' . ($status ?: '未知') . '）。'); if (strlen($body) > $max_bytes) throw new RuntimeException('升级源返回内容过大。'); return $body; } public static function us_source_url(string $path): string { return UPDATE_SOURCE_ENDPOINT . '?' . http_build_query(['path' => $path, 'raw' => 1], '', '&', PHP_QUERY_RFC3986); } public static function us_remote_release(): array { $json = json_decode(self::us_http(self::us_source_url('bbs1org.json'), 10485760), true, 512, JSON_THROW_ON_ERROR); $sha = (string)($json['sha'] ?? ''); if (!preg_match('/^[a-f0-9]{64}$/D', $sha) || !is_array($json['files'] ?? null)) throw new RuntimeException('升级源返回的版本信息无效。'); $files = []; foreach ($json['files'] as $path => $hash) { if (!is_string($path) || !is_string($hash) || self::us_update_ignored_path($path) || self::us_protected_path($path) || !preg_match('/^[a-f0-9]{64}$/D', $hash)) continue; $files[$path] = $hash; } if (!$files) throw new RuntimeException('升级源返回的文件清单为空。'); return [ 'sha' => $sha, 'short_sha' => $sha, 'date' => (string)($json['date'] ?? ''), 'message' => trim(strtok((string)($json['message'] ?? ''), "\r\n")), 'files' => $files, ]; } public static function us_file_sha256(string $file): string { return (string)hash_file('sha256', $file); } public static function update_state_data(): array { if (!is_file(UPDATE_STATE_FILE)) return []; $state = json_decode((string)file_get_contents(UPDATE_STATE_FILE), true); return is_array($state) ? $state : []; } public static function update_state_write(array $state): void { $json = json_encode($state, JSON_UNESCAPED_UNICODE | JSON_UNESCAPED_SLASHES | JSON_PRETTY_PRINT); $swap = UPDATE_STATE_FILE . '.tmp-' . bin2hex(random_bytes(4)); if ($json === false || file_put_contents($swap, $json, LOCK_EX) === false || !rename($swap, UPDATE_STATE_FILE)) { @unlink($swap); throw new RuntimeException('无法更新升级状态'); } } public static function us_local_changes(array $remote_files): array { $changes = []; foreach ($remote_files as $path => $sha) { $file = APP_ROOT . '/' . $path; if (!is_file($file)) $changes[] = ['path' => $path, 'type' => '新增']; elseif (!hash_equals($sha, self::us_file_sha256($file))) $changes[] = ['path' => $path, 'type' => '更新']; } foreach ((array)(self::update_state_data()['files'] ?? []) as $path) { if (is_string($path) && !isset($remote_files[$path]) && !self::us_protected_path($path) && is_file(APP_ROOT . '/' . $path)) { $changes[] = ['path' => $path, 'type' => '删除']; } } return $changes; } public static function us_json(array $data): never { header('Content-Type: application/json; charset=utf-8'); echo json_encode($data, JSON_UNESCAPED_UNICODE | JSON_UNESCAPED_SLASHES); exit; } public static function deliver_update_notice(): void { $state = self::update_state_data(); $notice = is_array($state['update_notice'] ?? null) ? $state['update_notice'] : []; $sha = (string)($notice['sha'] ?? ''); if (!preg_match('/^[a-f0-9]{64}$/', $sha)) return; $short_sha = $sha; $message = trim((string)($notice['message'] ?? '')); $content = '检测到系统新版本 ' . $short_sha . '。' . ($message !== '' ? "\n\n" . $message : '') . "\n\n请前往后台设置中的“系统升级”完成升级。"; if (!one("SELECT 1 FROM app_notifications WHERE recipient_id=? AND kind='system_update' AND content=? LIMIT 1", [uid(), $content])) { create_notification(uid(), 0, 'system_update', $content); } unset($state['update_notice']); $state['update_notice_sent_sha'] = $sha; self::update_state_write($state); unset($GLOBALS['__me_cache']); } public static function us_notice_check(): never { $lock = @fopen(UPDATE_RUN_LOCK_FILE, 'c'); if (!$lock || !flock($lock, LOCK_EX | LOCK_NB)) self::us_json(['ok' => 1, 'pending' => 1]); try { $state = self::update_state_data(); $available = is_array($state['update_notice'] ?? null); $last_checked = strtotime((string)($state['last_notice_checked_at'] ?? '')) ?: 0; if (!$available && $last_checked > time() - UPDATE_NOTICE_CHECK_INTERVAL) { self::us_json(['ok' => 1, 'update_available' => 0, 'cached' => 1]); } if (!is_array($state['update_notice'] ?? null)) { $release = self::us_remote_release(); $changes = self::us_local_changes((array)$release['files']); $sha = (string)$release['sha']; $state['last_notice_checked_at'] = date(DATE_ATOM); $available = (bool)$changes; if ($changes && !hash_equals((string)($state['update_notice_sent_sha'] ?? ''), $sha)) { $state['update_notice'] = [ 'sha' => $sha, 'message' => (string)($release['message'] ?? ''), 'checked_at' => date(DATE_ATOM), ]; } self::update_state_write($state); } self::us_json(['ok' => 1, 'update_available' => $available ? 1 : 0]); } catch (Throwable $e) { self::us_json(['ok' => 0, 'message' => $e->getMessage() ?: '检查升级失败']); } finally { flock($lock, LOCK_UN); fclose($lock); } } public static function us_update_page(?array $release = null, string $error = ''): void { $token = csrf_token(); $state = self::update_state_data(); $local = isset($state['sha']) ? (string)$state['sha'] : '未记录'; $local_time = ($timestamp = strtotime((string)($state['updated_at'] ?? ''))) !== false ? date('Y-m-d H:i', $timestamp) : ''; $body = '

系统升级 ' . h(APP_VERSION) . '

从官方只读源码下载入口检测并安装 ' . h(UPDATE_REPOSITORY) . ' 主分支代码，也可单独同步当前代码对应的数据库结构。

'; if ($error !== '') $body .= '

' . h($error) . '

'; if ($release) { $changes = self::us_local_changes($release['files']); $remote_time = ($timestamp = strtotime((string)$release['date'])) !== false ? date('Y-m-d H:i', $timestamp) : (string)$release['date']; $body .= '

本地记录' . h($local) . '' . ($local_time !== '' ? '更新时间：' . h($local_time) . '' : '') . '

远端最新' . h($release['short_sha']) . '最后提交：' . h($remote_time) . '' . h($release['message']) . '

'; if ($changes) { $body .= '

检测到 ' . count($changes) . ' 个代码文件需要变更。

警告：勾选文件的本地内容和修改将被官方源码下载入口中的版本覆盖。

' . h($type) . '' . h($path) . '
同步数据库结构文件更新并确认 OPcache 已清理后，由新请求同步缺少的表、字段和索引

'; } else { $body .= '

当前程序文件已是最新版本。

'; } } else { $changes = []; $body .= '

点击“检测更新”读取官方源码下载清单并核对当前程序。

'; } $form_id = (!$release || !$changes) ? 'schema-update-form' : 'online-update-form'; $body .= self::terms_consent('upgrade', $form_id); $body .= '

返回首页数据迁入检测更新'; if (!$release || !$changes) $body .= ''; if ($release && $changes) $body .= ''; $body .= '

'; self::us_unlock(); self::setup_html('系统升级', '

' . $body . '

', true); } public static function us_protected_path(string $path): bool { $path = trim(str_replace('\\', '/', $path), '/'); if ($path === '' || str_contains($path, "\0") || preg_match('#(^|/)\.\.(/|$)#', $path)) return true; foreach (UPDATE_PROTECTED_DIRS as $protected) if ($path === $protected || str_starts_with($path, $protected . '/')) return true; return false; } public static function us_update_ignored_path(string $path): bool { $path = trim(str_replace('\\', '/', $path), '/'); if ($path === '' || str_contains($path, "\0") || preg_match('#(^|/)\.\.(/|$)#', $path)) return true; foreach (explode('/', $path) as $name) if (str_starts_with($name, '.')) return true; return str_ends_with(strtolower($path), '.md'); } public static function us_remove_dir(string $dir): void { if (!is_dir($dir)) return; $items = scandir($dir); if ($items === false) return; foreach ($items as $item) { if ($item === '.' || $item === '..') continue; $path = $dir . '/' . $item; is_dir($path) && !is_link($path) ? self::us_remove_dir($path) : @unlink($path); } @rmdir($dir); } public static function us_writable_parent(string $path): bool { $parent = dirname($path); while (!is_dir($parent) && $parent !== dirname($parent)) $parent = dirname($parent); return is_dir($parent) && is_writable($parent); } public static function us_refresh_fpm_opcache_after_update(): string { if (PHP_SAPI !== 'cli') return 'OPcache 已成功清理'; $lock_file = UPDATE_DATA_DIR . '/opcache-refresh.lock'; if (file_put_contents($lock_file, '', LOCK_EX) === false) throw new RuntimeException('无法创建 OPcache 刷新锁。'); try { $result = @file_get_contents('http://nginx/?a=opcache_refresh'); if ($result !== 'ok') throw new RuntimeException('程序文件已更新，但 PHP-FPM OPcache 清理失败；请重启 PHP-FPM 后重试。'); return 'OPcache 已成功清理'; } finally { @unlink($lock_file); } } public static function us_refresh_opcache_after_update(array $files): string { $php_updated = (bool)array_filter($files, static fn(string $path): bool => str_ends_with(strtolower($path), '.php')); if (!$php_updated) return '本次未更新 PHP 文件，无需清理 OPcache'; $opcache_enabled = filter_var((string)ini_get('opcache.enable'), FILTER_VALIDATE_BOOL); if (function_exists('opcache_get_status')) { try { $opcache_enabled = $opcache_enabled || is_array(@opcache_get_status(false)); } catch (Throwable $e) { // 无法读取状态时，以配置值判断，随后仍要求 opcache_reset() 成功。 } } if (!$opcache_enabled) return self::us_refresh_fpm_opcache_after_update(); if (!function_exists('opcache_reset')) { throw new RuntimeException('程序文件已更新，但 OPcache 已启用且无法调用 opcache_reset()；数据库结构尚未同步，请清理 OPcache 后重试。'); } try { $cleared = opcache_reset(); } catch (Throwable $e) { $cleared = false; } if (!$cleared) { throw new RuntimeException('程序文件已更新，但 OPcache 清理失败；数据库结构尚未同步，请清理 OPcache 后重试。'); } return self::us_refresh_fpm_opcache_after_update(); } public static function us_install_files(string $sha, array $remote_files, array $selected): array { if (!preg_match('/^[a-f0-9]{64}$/', $sha)) throw new RuntimeException('升级版本无效。'); $temp = UPDATE_DATA_DIR . '/update-' . bin2hex(random_bytes(6)); if (!mkdir($temp, 0700, true)) throw new RuntimeException('无法创建升级临时目录。'); try { $files = []; foreach ($selected as $path) { if (!is_string($path) || self::us_update_ignored_path($path)) continue; if (!isset($remote_files[$path])) { if (is_file(APP_ROOT . '/' . $path)) $files[] = $path; continue; } $expected_sha = (string)$remote_files[$path]; $content = self::us_http(self::us_source_url('bbs1org/' . $path)); if (!hash_equals($expected_sha, hash('sha256', $content))) throw new RuntimeException('远端文件校验失败：' . $path); $target = $temp . '/' . $path; if (!is_dir(dirname($target)) && !mkdir(dirname($target), 0700, true)) throw new RuntimeException('无法创建临时目录：' . dirname($path)); if (file_put_contents($target, $content, LOCK_EX) === false) throw new RuntimeException('无法保存临时文件：' . $path); $files[] = $path; } if (!$files) throw new RuntimeException('请至少选择一个需要升级的文件。'); $backups = []; foreach ($files as $path) { $target = APP_ROOT . '/' . $path; if (!self::us_writable_parent($target)) throw new RuntimeException('文件所在目录不可写：' . $path); $backup = $temp . '/backup/' . $path; $existed = is_file($target); if ($existed) { if (!is_dir(dirname($backup)) && !mkdir(dirname($backup), 0700, true)) throw new RuntimeException('无法创建备份目录。'); if (!copy($target, $backup) || !hash_equals((string)hash_file('sha256', $target), (string)hash_file('sha256', $backup))) throw new RuntimeException('备份文件失败：' . $path); } $backups[$path] = ['file' => $backup, 'existed' => $existed]; } $state_existed = is_file(UPDATE_STATE_FILE); $state_backup = $temp . '/update-state.json'; if ($state_existed && (!copy(UPDATE_STATE_FILE, $state_backup) || !hash_equals((string)hash_file('sha256', UPDATE_STATE_FILE), (string)hash_file('sha256', $state_backup)))) throw new RuntimeException('备份版本记录失败。'); $replaced = []; try { foreach ($files as $path) { $target = APP_ROOT . '/' . $path; if (!isset($remote_files[$path])) { if (is_file($target) && !unlink($target)) throw new RuntimeException('删除文件失败：' . $path); $replaced[] = $path; continue; } $source = $temp . '/' . $path; if (!is_dir(dirname($target)) && !mkdir(dirname($target), 0755, true)) throw new RuntimeException('无法创建目录：' . dirname($path)); $swap = $target . '.update-' . bin2hex(random_bytes(4)); if (!copy($source, $swap) || !rename($swap, $target)) { @unlink($swap); throw new RuntimeException('更新文件失败：' . $path); } $replaced[] = $path; if (!hash_equals((string)$remote_files[$path], self::us_file_sha256($target))) throw new RuntimeException('更新后校验失败：' . $path); } $state = json_encode(['sha' => $sha, 'updated_at' => date(DATE_ATOM), 'files' => array_keys($remote_files)], JSON_UNESCAPED_SLASHES | JSON_PRETTY_PRINT); $state_swap = UPDATE_STATE_FILE . '.update-' . bin2hex(random_bytes(4)); if ($state === false || file_put_contents($state_swap, $state, LOCK_EX) === false || !rename($state_swap, UPDATE_STATE_FILE)) { @unlink($state_swap); throw new RuntimeException('无法写入版本记录。'); } } catch (Throwable $e) { $rollback_errors = []; foreach (array_reverse($replaced) as $path) { $target = APP_ROOT . '/' . $path; $backup = $backups[$path]; if ($backup['existed']) { $swap = $target . '.rollback-' . bin2hex(random_bytes(4)); if (!copy($backup['file'], $swap) || !rename($swap, $target)) { @unlink($swap); $rollback_errors[] = $path; } } elseif (is_file($target) && !unlink($target)) { $rollback_errors[] = $path; } } if ($state_existed) { if (!copy($state_backup, UPDATE_STATE_FILE)) $rollback_errors[] = basename(UPDATE_STATE_FILE); } elseif (is_file(UPDATE_STATE_FILE) && !unlink(UPDATE_STATE_FILE)) { $rollback_errors[] = basename(UPDATE_STATE_FILE); } if ($rollback_errors) throw new RuntimeException($e->getMessage() . '；回滚失败：' . implode('、', $rollback_errors), 0, $e); throw new RuntimeException($e->getMessage() . '；已恢复升级前文件。', 0, $e); } clearstatcache(); return ['count' => count($files), 'opcache' => self::us_refresh_opcache_after_update($files)]; } finally { self::us_remove_dir($temp); } } public static function us_split_defs(string $body): array { $defs = []; $buf = ''; $depth = 0; for ($i = 0, $len = strlen($body); $i < $len; $i++) { $ch = $body[$i]; if ($ch === '(') $depth++; if ($ch === ')') $depth--; if ($ch === ',' && $depth === 0) { $defs[] = trim($buf); $buf = ''; continue; } $buf .= $ch; } if (trim($buf) !== '') $defs[] = trim($buf); return $defs; } public static function us_parse_table_sql(string $sql): array { if (!preg_match('/CREATE\s+TABLE(?:\s+IF\s+NOT\s+EXISTS)?\s+[`"]?([a-zA-Z0-9_]+)[`"]?\s*$(.*)$\s*(?:ENGINE=.*)?;?\s*$/is', trim($sql), $m)) return []; $columns = []; foreach (self::us_split_defs($m[2]) as $def) { if (preg_match('/^(PRIMARY|UNIQUE|CHECK|FOREIGN|CONSTRAINT)\b/i', $def)) continue; if (preg_match('/^([a-zA-Z0-9_]+)\s+(.+)$/s', $def, $cm)) $columns[$cm[1]] = $def; } return ['name' => $m[1], 'sql' => rtrim(trim($sql), ';') . ';', 'columns' => $columns]; } public static function us_install_schema(): array { $driver = db_driver(); [$schema_tables, $schema_indexes] = self::app_db_schema($driver); $tables = []; foreach ($schema_tables as $sql) { $table = self::us_parse_table_sql($sql); if ($table) $tables[$table['name']] = $table; } return [$tables, $schema_indexes]; } public static function us_column_type(PDO $db, string $driver, string $table, string $column): string { if ($driver === 'sqlite') { foreach ($db->query('PRAGMA table_info(' . app_db_identifier($driver, $table) . ')')->fetchAll() as $row) { if ((string)($row['name'] ?? '') === $column) return strtolower((string)($row['type'] ?? '')); } return ''; } $sql = 'SELECT ' . ($driver === 'mysql' ? 'column_type' : 'data_type') . ' FROM information_schema.columns WHERE table_schema=' . ($driver === 'mysql' ? 'DATABASE()' : 'current_schema()') . ' AND table_name=? AND column_name=?'; $stmt = $db->prepare($sql); $stmt->execute([$table, $column]); return strtolower((string)$stmt->fetchColumn()); } public static function us_rename_legacy_system_tables(PDO $db, string $driver): array { $changes = []; $tables = self::migrate_core_table_map(); foreach ($tables as $table => $target) { if (app_db_table_exists($db, $driver, $table) && app_db_table_exists($db, $driver, $target)) { throw new RuntimeException('系统表同时存在旧名称和新名称：' . $table . '、' . $target . '，请先检查数据。'); } } if ($driver === 'mysql') { $renames = []; foreach ($tables as $table => $target) { if (!app_db_table_exists($db, $driver, $table)) continue; $renames[] = app_db_identifier($driver, $table) . ' TO ' . app_db_identifier($driver, $target); $changes[] = '重命名系统表：' . $table . ' -> ' . $target; } if ($renames) $db->exec('RENAME TABLE ' . implode(',', $renames)); return $changes; } foreach ($tables as $table => $target) { if (!app_db_table_exists($db, $driver, $table)) continue; $db->exec('ALTER TABLE ' . app_db_identifier($driver, $table) . ' RENAME TO ' . app_db_identifier($driver, $target)); $changes[] = '重命名系统表：' . $table . ' -> ' . $target; } return $changes; } public static function us_migrate_legacy_plugin_settings(): int { $settings = settings_cache(); $registered = array_fill_keys(array_map('strval', q("SELECT id FROM app_plugins")->fetchAll(PDO::FETCH_COLUMN)), true); $files = []; foreach (Plugin::plugin_files() as $file) { $id = basename(dirname($file)); if ($id !== 'plugin_market') $files[$id] = $file; } $files['plugin_market'] = ''; $suffixes = ['enabled', 'version', 'config', 'disabled_reason', 'entry_feature_links', 'entry_sidebar_cards']; $delete = []; $count = 0; foreach ($files as $id => $file) { $names = []; foreach ($suffixes as $suffix) { $name = 'plugin_' . $id . '_' . $suffix; if (array_key_exists($name, $settings)) $names[] = $name; } if (!$names) continue; $delete = array_merge($delete, $names); $count++; if ($file === '' || isset($registered[$id])) continue; $config = plugin_json_decode($settings['plugin_' . $id . '_config'] ?? '') ?? []; $enabled = (string)($settings['plugin_' . $id . '_enabled'] ?? '0') === '1' ? 1 : 0; app_db_insert_ignore('app_plugins', [ 'id' => $id, 'name' => $id, 'version' => (string)($settings['plugin_' . $id . '_version'] ?? ''), 'file' => ltrim(str_replace(APP_ROOT, '', $file), '/'), 'code_hash' => '', 'manifest_json' => plugin_json_encode([]), 'config_json' => plugin_json_encode($config), 'entries_json' => plugin_json_encode([ 'feature_links' => (string)($settings['plugin_' . $id . '_entry_feature_links'] ?? '1') === '1', 'sidebar_cards' => (string)($settings['plugin_' . $id . '_entry_sidebar_cards'] ?? '1') === '1', ]), 'enabled' => $enabled, 'status' => $enabled ? 'enabled' : 'disabled', 'disabled_reason' => (string)($settings['plugin_' . $id . '_disabled_reason'] ?? ''), 'installed_at' => now(), 'updated_at' => now(), ], ['id']); $registered[$id] = true; } if ($delete) { $delete = array_values(array_unique($delete)); q("DELETE FROM app_settings WHERE name IN (" . sql_marks(count($delete)) . ")", $delete); db_row_cache_clear(); if (is_array($GLOBALS['__settings_cache'] ?? null)) foreach ($delete as $name) unset($GLOBALS['__settings_cache'][$name]); } return $count; } public static function us_sync_schema(): array { [$tables, $indexes] = self::us_install_schema(); if (!$tables) throw new RuntimeException('未读取到当前程序的数据表结构。'); $db = db(); $transactional = db_driver() !== 'mysql'; $changes = []; try { if ($transactional) $db->beginTransaction(); $changes = array_merge($changes, self::us_rename_legacy_system_tables($db, db_driver())); foreach ($tables as $table => $schema) { if (!app_db_table_exists($db, db_driver(), $table)) { $db->exec($schema['sql']); $changes[] = '新增表：' . $table; continue; } $current_columns = app_db_columns($db, db_driver(), $table); foreach ($schema['columns'] as $column => $definition) { if (isset($current_columns[$column])) continue; $db->exec('ALTER TABLE ' . app_db_identifier(db_driver(), $table) . ' ADD COLUMN ' . $definition); $changes[] = '新增字段：' . $table . '.' . $column; } } foreach (['idx_attachments_hash'=>'app_attachments', 'idx_topics_user'=>'app_topics', 'idx_topics_user_updated'=>'app_topics', 'idx_topics_forum_updated'=>'app_topics', 'idx_users_created'=>'app_users', 'idx_replies_user'=>'app_replies', 'idx_replies_user_topic_time'=>'app_replies', 'idx_notifications_recipient_read'=>'app_notifications', 'idx_notifications_sender'=>'app_notifications', 'idx_cron_logs_started'=>'app_cron_logs'] as $index => $table) { if (!app_db_index_exists($db, db_driver(), $index, $table)) continue; app_db_drop_index($index, $table); $changes[] = '删除索引：' . $index; } foreach (['idx_topics_search_title' => 'app_topics', 'idx_topics_search_body' => 'app_topics', 'idx_replies_search_body' => 'app_replies'] as $index => $table) { if (!app_db_index_exists($db, db_driver(), $index, $table)) continue; app_db_drop_index($index, $table); $changes[] = '移除核心全文索引：' . $index; } if (db_driver() === 'sqlite') { foreach (['app_topics_fts', 'app_replies_fts', 'topics_fts', 'replies_fts'] as $table) { if (!app_db_table_exists($db, db_driver(), $table)) continue; $db->exec('DROP TABLE ' . app_db_identifier(db_driver(), $table)); $changes[] = '移除核心全文索引：' . $table; } } $db->exec("DELETE FROM app_settings WHERE name IN ('mysql_search_index_topics_title','mysql_search_index_topics_body','mysql_search_index_replies_body')"); $topics_table = 'app_topics'; $topic_columns = app_db_columns($db, db_driver(), $topics_table); if (isset($topic_columns['updated_at'])) { $db->exec('ALTER TABLE ' . app_db_identifier(db_driver(), $topics_table) . ' DROP COLUMN ' . app_db_identifier(db_driver(), 'updated_at')); $changes[] = '删除字段：topics.updated_at'; } $forums_table = app_db_identifier(db_driver(), 'app_forums'); $forum_columns = app_db_columns($db, db_driver(), 'app_forums'); foreach (['last_topic_id', 'last_topic_title'] as $column) { if (!isset($forum_columns[$column])) continue; $db->exec("ALTER TABLE $forums_table DROP COLUMN " . app_db_identifier(db_driver(), $column)); $changes[] = '删除字段：forums.' . $column; } $cron_table = app_db_identifier(db_driver(), 'app_cron_tasks'); $cron_columns = app_db_columns($db, db_driver(), 'app_cron_tasks'); foreach (['next_run_at', 'updated_at'] as $column) { if (!isset($cron_columns[$column])) continue; $db->exec("ALTER TABLE $cron_table DROP COLUMN " . app_db_identifier(db_driver(), $column)); $changes[] = '删除字段：cron_tasks.' . $column; } if (!str_contains(self::us_column_type($db, db_driver(), $topics_table, 'reply_order'), 'int')) { $table = app_db_identifier(db_driver(), $topics_table); $column = app_db_identifier(db_driver(), 'reply_order'); $db->exec("ALTER TABLE $table DROP COLUMN $column"); $db->exec("ALTER TABLE $table ADD COLUMN $column INTEGER NOT NULL DEFAULT 0"); $changes[] = '更新字段：topics.reply_order'; } if (db_driver() === 'mysql' && self::us_column_type($db, db_driver(), 'app_users', 'email') === 'varchar(255)') { $users_table = app_db_identifier(db_driver(), 'app_users'); $email_column = app_db_identifier(db_driver(), 'email'); $db->exec("ALTER TABLE $users_table MODIFY COLUMN $email_column VARCHAR(191) NOT NULL DEFAULT ''"); $changes[] = '更新字段：users.email'; } foreach ($indexes as $index => $sql) { if (!app_db_index_exists($db, db_driver(), $index, self::app_db_index_table($sql))) { if ($index === 'idx_attachments_user_hash') { $removed = $db->exec('DELETE FROM app_attachments WHERE id NOT IN (SELECT keep_id FROM (SELECT MIN(id) keep_id FROM app_attachments GROUP BY user_id,hash) attachment_dedup)'); if ($removed) $changes[] = '清理重复附件：' . $removed . ' 条'; } $db->exec($sql); $changes[] = '新增索引：' . $index; } } if ($transactional) $db->commit(); $legacy_plugin_count = self::us_migrate_legacy_plugin_settings(); if ($legacy_plugin_count > 0) $changes[] = '迁移旧插件配置：' . $legacy_plugin_count . ' 个'; $plugin_count = count(Plugin::plugin_registry_sync()); Plugin::plugin_assets_rebuild(); $changes[] = '同步插件注册表：' . $plugin_count . ' 个'; return $changes; } catch (Throwable $e) { if ($transactional && $db->inTransaction()) $db->rollBack(); throw $e; } } public static function us_defer_schema_after_update(array $changes): never { $nonce = bin2hex(random_bytes(24)); save_settings_values(['update_schema_pending' => json_encode([ 'nonce' => $nonce, 'created_at' => time(), 'status' => 'pending', 'changes' => array_values($changes), ], JSON_UNESCAPED_UNICODE | JSON_THROW_ON_ERROR)]); self::us_unlock(); header('Location: index.php?a=update&schema_after_update=' . rawurlencode($nonce), true, 303); exit; } public static function us_run_deferred_schema(): never { $nonce = (string)($_GET['schema_after_update'] ?? ''); $pending = preg_match('/^[a-f0-9]{48}$/D', $nonce) === 1 ? json_decode(setting('update_schema_pending', ''), true) : null; $created_at = (int)($pending['created_at'] ?? 0); $status = (string)($pending['status'] ?? 'pending'); if (!is_array($pending) || $nonce === '' || !hash_equals((string)($pending['nonce'] ?? ''), $nonce) || $created_at <= 0 || time() - $created_at > 300 || !in_array($status, ['pending', 'completed'], true) ) { self::us_result_page('升级失败', [], '数据库同步请求无效或已过期，请返回升级页重试。'); } $changes = array_values(array_filter((array)($pending['changes'] ?? []), 'is_string')); if ($status === 'completed') self::us_result_page('升级完成', $changes); self::us_acquire_lock(); try { $schema_changes = self::us_sync_schema(); $changes = array_merge($changes, $schema_changes ?: ['数据库结构同步完成，当前结构无需调整']); save_settings_values(['update_schema_pending' => json_encode([ 'nonce' => $nonce, 'created_at' => $created_at, 'status' => 'completed', 'changes' => $changes, ], JSON_UNESCAPED_UNICODE | JSON_THROW_ON_ERROR)]); self::us_result_page('升级完成', $changes); } catch (Throwable $e) { $prefix = $changes ? implode('；', $changes) . '；' : ''; self::us_result_page('数据库同步失败', [], $prefix . $e->getMessage()); } } public static function setup_update_run(): never { if (!is_file(UPDATE_INSTALL_LOCK_FILE) || !is_file(UPDATE_DB_CONFIG_FILE)) self::us_result_page('请先安装', [], '请先执行安装操作。'); if (db_driver() === 'sqlite' && !is_file((string)db_config()['path'])) self::us_result_page('请先安装', [], '请先执行安装操作。'); $legacy_state = self::us_legacy_upgrade_state(db(), db_driver()); if ($legacy_state === 'legacy') self::us_handle_legacy_upgrade(); if ($legacy_state !== '') self::us_result_page('无法自动升级', [], $legacy_state); self::us_need_admin(); if (isset($_GET['schema_after_update'])) self::us_run_deferred_schema(); if ((string)($_GET['notice_check'] ?? '') === '1') self::us_notice_check(); if ($_SERVER['REQUEST_METHOD'] !== 'POST') { if (!isset($_GET['check'])) self::us_update_page(); try { self::us_update_page(self::us_remote_release()); } catch (Throwable $e) { self::us_update_page(null, $e->getMessage()); } } if (!hash_equals(csrf_token(), (string)($_POST['_csrf'] ?? ''))) self::us_result_page('升级失败', [], '请求已过期，请返回重试。'); if (!self::terms_accepted($_POST)) self::us_result_page('升级失败', [], '请先阅读完整软件使用条款并勾选同意。'); self::us_acquire_lock(); try { $action = (string)($_POST['action'] ?? 'schema'); $changes = []; if ($action === 'online') { $remote = self::us_remote_release(); $requested_sha = (string)($_POST['sha'] ?? ''); if (!hash_equals($remote['sha'], $requested_sha)) throw new RuntimeException('远端版本已变化，请重新检测后再升级。'); $change_paths = []; foreach (self::us_local_changes($remote['files']) as $change) $change_paths[(string)($change['path'] ?? '')] = true; $selected = array_values(array_unique(array_filter((array)($_POST['files'] ?? ''), static fn($path): bool => is_string($path) && isset($change_paths[$path])))); if (in_array('index.php', $selected, true)) { foreach (['app/optional/Cron.php', 'app/optional/Plugin.php'] as $dependency) { if (isset($remote['files'][$dependency]) && !in_array($dependency, $selected, true)) $selected[] = $dependency; } } if ($selected) { $installed = self::us_install_files($remote['sha'], $remote['files'], $selected); $changes[] = '程序代码已更新至 ' . $remote['short_sha'] . '（' . (int)$installed['count'] . ' 个文件）'; $changes[] = (string)$installed['opcache']; if (isset($_POST['sync_schema'])) self::us_defer_schema_after_update($changes); } elseif (!isset($_POST['sync_schema'])) { throw new RuntimeException('请至少选择一个需要执行的升级操作。'); } } elseif ($action !== 'schema') { throw new RuntimeException('未知升级操作。'); } if ($action === 'schema' || isset($_POST['sync_schema'])) $changes = array_merge($changes, self::us_sync_schema()); self::us_result_page('升级完成', $changes); } catch (Throwable $e) { self::us_result_page('升级失败', [], $e->getMessage()); } } public static function migrate_driver(string $driver): string { if (!in_array($driver, ['sqlite', 'mysql', 'pgsql'], true)) throw new RuntimeException('不支持的数据库类型。'); return $driver; } public static function migrate_identifier(string $driver, string $name, string $context = ''): string { if ($name === '' || str_contains($name, "\0")) { $reason = $name === '' ? '为空' : '包含 NUL 字符'; $detail = '数据库标识符无效：' . $reason . '；驱动=' . $driver . '；原始值=' . var_export($name, true); if ($context !== '') $detail .= '；位置=' . $context; throw new InvalidArgumentException($detail . '。'); } return $driver === 'mysql' ? '`' . str_replace('`', '``', $name) . '`' : '"' . str_replace('"', '""', $name) . '"'; } public static function migrate_source_config(): array { $driver = self::migrate_driver((string)($_POST['source_driver'] ?? 'sqlite')); if ($driver === 'sqlite') { $path = trim((string)($_POST['source_sqlite'] ?? '')); if ($path === '') throw new RuntimeException('SQLite 文件不能为空。'); if ($path[0] !== DIRECTORY_SEPARATOR) $path = APP_ROOT . '/' . $path; return ['driver' => 'sqlite', 'database' => basename($path), 'path' => $path]; } $config = [ 'driver' => $driver, 'host' => trim((string)($_POST['source_host'] ?? '127.0.0.1')), 'port' => max(1, (int)($_POST['source_port'] ?? ($driver === 'mysql' ? 3306 : 5432))), 'database' => trim((string)($_POST['source_database'] ?? '')), 'username' => (string)($_POST['source_username'] ?? ''), 'password' => (string)($_POST['source_password'] ?? ''), ]; if ($config['host'] === '' || $config['database'] === '' || $config['username'] === '') throw new RuntimeException('数据库连接信息不完整。'); return $config; } public static function migrate_source_db(array $config): PDO { if ($config['driver'] === 'sqlite' && !is_file((string)$config['path'])) throw new RuntimeException('SQLite 文件不存在：' . $config['path']); return app_db_connect($config); } public static function migrate_tables(PDO $db, string $driver): array { if ($driver === 'sqlite') { $rows = $db->query("SELECT name,sql FROM sqlite_master WHERE type='table' AND name NOT LIKE 'sqlite_%' ORDER BY name")->fetchAll(); $virtual = []; foreach ($rows as $row) if (stripos((string)$row['sql'], 'CREATE VIRTUAL TABLE') === 0) $virtual[] = (string)$row['name']; $tables = []; foreach ($rows as $row) { $name = (string)$row['name']; foreach ($virtual as $prefix) if ($name === $prefix || str_starts_with($name, $prefix . '_')) continue 2; $tables[] = $name; } return $tables; } $stmt = $driver === 'mysql' ? $db->query("SELECT table_name FROM information_schema.tables WHERE table_schema=DATABASE() AND table_type='BASE TABLE' ORDER BY table_name") : $db->query('SELECT tablename FROM pg_tables WHERE schemaname=current_schema() ORDER BY tablename'); return array_map('strval', $stmt->fetchAll(PDO::FETCH_COLUMN)); } public static function migrate_columns(PDO $db, string $driver, string $table): array { if ($driver === 'sqlite') { $rows = $db->query('PRAGMA table_info(' . self::migrate_identifier($driver, $table, '读取源表字段：' . $table) . ')')->fetchAll(); return array_values(array_filter(array_map(fn(array $row): string => (string)($row['name'] ?? ''), $rows))); } return array_keys(app_db_columns($db, $driver, $table)); } public static function migrate_column_schema(PDO $db, string $driver, string $table): array { if ($driver === 'sqlite') { $rows = $db->query('PRAGMA table_info(' . self::migrate_identifier($driver, $table, '读取源表结构：' . $table) . ')')->fetchAll(); return array_map(fn(array $row): array => [ 'name' => (string)$row['name'], 'type' => (string)$row['type'], 'nullable' => !(bool)$row['notnull'], 'default' => $row['dflt_value'], 'auto' => false, 'pk' => (int)$row['pk'], ], $rows); } if ($driver === 'mysql') { $sql = 'SELECT column_name,data_type,column_type,is_nullable,column_default,extra FROM information_schema.columns WHERE table_schema=DATABASE() AND table_name=? ORDER BY ordinal_position'; } else { $sql = 'SELECT column_name,data_type,udt_name,is_nullable,column_default,is_identity FROM information_schema.columns WHERE table_schema=current_schema() AND table_name=? ORDER BY ordinal_position'; } $stmt = $db->prepare($sql); $stmt->execute([$table]); $columns = []; foreach ($stmt->fetchAll() as $row) { $columns[] = [ 'name' => (string)$row['column_name'], 'type' => (string)($row[$driver === 'mysql' ? 'column_type' : 'udt_name'] ?? $row['data_type']), 'nullable' => (string)$row['is_nullable'] === 'YES', 'default' => $row['column_default'], 'auto' => $driver === 'mysql' ? str_contains((string)$row['extra'], 'auto_increment') : (string)$row['is_identity'] === 'YES' || str_starts_with((string)$row['column_default'], 'nextval('), 'pk' => 0, ]; } return $columns; } public static function migrate_db_bool(mixed $value): bool { return in_array($value, [true, 1, '1', 't', 'true'], true); } public static function migrate_index_schema(PDO $db, string $driver, string $table, array $columns): array { $indexes = []; if ($driver === 'sqlite') { $primary = []; foreach ($columns as $column) if ($column['pk']) $primary[(int)$column['pk']] = $column['name']; if ($primary) { ksort($primary); $indexes['PRIMARY'] = ['name' => 'PRIMARY', 'unique' => true, 'primary' => true, 'columns' => array_values($primary)]; } foreach ($db->query('PRAGMA index_list(' . self::migrate_identifier($driver, $table, '读取源表索引：' . $table) . ')')->fetchAll() as $index) { if ((string)$index['origin'] === 'pk') continue; $name = (string)$index['name']; $items = $db->query('PRAGMA index_info(' . self::migrate_identifier($driver, $name, '读取源索引字段：表=' . $table . '，索引=' . $name) . ')')->fetchAll(); $names = array_values(array_filter(array_map(fn(array $row): string => (string)($row['name'] ?? ''), $items))); if ($names) $indexes[$name] = ['name' => $name, 'unique' => (bool)$index['unique'], 'primary' => false, 'columns' => $names]; } return array_values($indexes); } if ($driver === 'mysql') { $rows = $db->query('SHOW INDEX FROM ' . self::migrate_identifier($driver, $table, '读取源表索引：' . $table))->fetchAll(); foreach ($rows as $row) { $name = (string)$row['Key_name']; $indexes[$name] ??= ['name' => $name, 'unique' => !(bool)$row['Non_unique'], 'primary' => $name === 'PRIMARY', 'columns' => []]; $indexes[$name]['columns'][(int)$row['Seq_in_index']] = (string)$row['Column_name']; } } else { $stmt = $db->prepare('SELECT oid FROM pg_class WHERE relname=? AND relnamespace=(SELECT oid FROM pg_namespace WHERE nspname=current_schema())'); $stmt->execute([$table]); $table_oid = (int)$stmt->fetchColumn(); if ($table_oid <= 0) return []; $stmt = $db->prepare('SELECT indexrelid,indisunique,indisprimary,indkey::text index_keys FROM pg_index WHERE indrelid=?'); $stmt->execute([$table_oid]); $rows = $stmt->fetchAll(); $index_ids = array_values(array_unique(array_filter(array_map('intval', array_column($rows, 'indexrelid'))))); $index_names = []; if ($index_ids) { $marks = sql_marks(count($index_ids)); $stmt = $db->prepare("SELECT oid,relname FROM pg_class WHERE oid IN ($marks)"); $stmt->execute($index_ids); foreach ($stmt->fetchAll() as $index) $index_names[(int)$index['oid']] = $index; } $column_ids = []; foreach ($rows as $row) $column_ids = array_merge($column_ids, preg_split('/\s+/', trim((string)$row['index_keys'])) ?: []); $column_ids = array_values(array_unique(array_filter(array_map('intval', $column_ids)))); $column_names = []; if ($column_ids) { $marks = sql_marks(count($column_ids)); $stmt = $db->prepare("SELECT attnum,attname FROM pg_attribute WHERE attrelid=? AND attnum IN ($marks)"); $stmt->execute(array_merge([$table_oid], $column_ids)); foreach ($stmt->fetchAll() as $column) $column_names[(int)$column['attnum']] = (string)$column['attname']; } foreach ($rows as $row) { $index_id = (int)$row['indexrelid']; $name = (string)($index_names[$index_id]['relname'] ?? ''); if ($name === '') continue; $keys = array_values(array_filter(array_map('intval', preg_split('/\s+/', trim((string)$row['index_keys'])) ?: []))); $names = array_values(array_filter(array_map(fn(int $key): string => $column_names[$key] ?? '', $keys))); if ($names) $indexes[$name] = ['name' => $name, 'unique' => self::migrate_db_bool($row['indisunique']), 'primary' => self::migrate_db_bool($row['indisprimary']), 'columns' => $names]; } } foreach ($indexes as &$index) { ksort($index['columns']); $index['columns'] = array_values($index['columns']); } unset($index); return array_values($indexes); } public static function migrate_default_sql(PDO $db, string $source_driver, mixed $default, bool $expression = false): string { if ($default === null) return ''; $value = trim((string)$default); if (($value === '' && $source_driver !== 'mysql') || strcasecmp($value, 'NULL') === 0 || str_starts_with($value, 'nextval(')) return ''; if ($value === '') $literal = $db->quote(''); elseif (is_numeric($value)) $literal = $value; elseif (strcasecmp($value, 'true') === 0 || strcasecmp($value, 'false') === 0) $literal = strcasecmp($value, 'true') === 0 ? '1' : '0'; if (preg_match('/^CURRENT_(?:TIMESTAMP|DATE|TIME)(?:)?$/i', $value)) return ' DEFAULT ' . strtoupper(rtrim($value, '()')); if (!isset($literal)) { if ($source_driver === 'pgsql' && preg_match("/^'(.*)'(?:::[A-Za-z0-9_\[\] ]+)?$/s", $value, $match)) $value = str_replace("''", "'", $match[1]); elseif ($source_driver !== 'mysql' && strlen($value) >= 2 && (($value[0] === "'" && $value[-1] === "'") || ($value[0] === '"' && $value[-1] === '"'))) $value = str_replace($value[0] . $value[0], $value[0], substr($value, 1, -1)); $literal = $db->quote($value); } return ' DEFAULT ' . ($expression ? '(' . $literal . ')' : $literal); } public static function migrate_column_type(string $source_type, string $target_driver, bool $indexed, bool $auto): string { $type = strtolower($source_type); if ($auto) return match ($target_driver) { 'mysql' => 'BIGINT UNSIGNED PRIMARY KEY AUTO_INCREMENT', 'pgsql' => 'BIGINT GENERATED BY DEFAULT AS IDENTITY PRIMARY KEY', default => 'INTEGER PRIMARY KEY AUTOINCREMENT', }; if (preg_match('/int|serial|bool/', $type)) return $target_driver === 'sqlite' ? 'INTEGER' : 'BIGINT' . ($target_driver === 'mysql' && str_contains($type, 'unsigned') ? ' UNSIGNED' : ''); if (preg_match('/real|float|double|decimal|numeric/', $type)) return match ($target_driver) {'mysql' => 'DOUBLE', 'pgsql' => 'DOUBLE PRECISION', default => 'REAL'}; if (preg_match('/blob|binary|bytea/', $type)) return match ($target_driver) {'mysql' => 'LONGBLOB', 'pgsql' => 'BYTEA', default => 'BLOB'}; if ($indexed) return $target_driver === 'mysql' ? 'VARCHAR(191)' : 'TEXT'; return $target_driver === 'mysql' ? 'LONGTEXT' : 'TEXT'; } public static function migrate_index_name(PDO $db, string $driver, string $table, string $name, array $columns, bool $unique): string { if ($name === 'PRIMARY' || str_starts_with($name, 'sqlite_autoindex_') || !preg_match('/^[A-Za-z_][A-Za-z0-9_]*$/', $name)) $name = ($unique ? 'uidx_' : 'idx_') . $table . '_' . implode('_', $columns); $name = strlen($name) > 55 ? substr($name, 0, 44) . '_' . substr(hash('sha256', $name), 0, 10) : $name; if (!app_db_index_exists($db, $driver, $name, $table)) return $name; return substr($name, 0, 44) . '_' . substr(hash('sha256', $table . ':' . $name), 0, 10); } public static function migrate_install_table(PDO $source, string $source_driver, PDO $target, string $target_driver, string $source_table, string $target_table): void { $columns = self::migrate_column_schema($source, $source_driver, $source_table); $indexes = self::migrate_index_schema($source, $source_driver, $source_table, $columns); $primary = []; $indexed = []; foreach ($indexes as $index) { if ($index['primary']) $primary = $index['columns']; foreach ($index['columns'] as $column) $indexed[$column] = true; } $auto_column = count($primary) === 1 ? $primary[0] : ''; $definitions = []; $auto_primary = false; foreach ($columns as $column) { $auto = $column['name'] === $auto_column && ($column['auto'] || preg_match('/int|serial/i', $column['type'])); if ($auto) $auto_primary = true; $type = self::migrate_column_type($column['type'], $target_driver, isset($indexed[$column['name']]), $auto); $definition = self::migrate_identifier($target_driver, (string)$column['name'], '创建目标表字段：表=' . $target_table . '，字段=' . (string)$column['name']) . ' ' . $type; if (!$auto) $definition .= (!$column['nullable'] ? ' NOT NULL' : '') . self::migrate_default_sql($target, $source_driver, $column['default'], $target_driver === 'mysql' && preg_match('/TEXT|BLOB/', $type)); $definitions[] = $definition; } if ($primary && !$auto_primary) $definitions[] = 'PRIMARY KEY(' . implode(',', array_map(fn(string $name): string => self::migrate_identifier($target_driver, $name, '创建目标表主键：表=' . $target_table . '，字段=' . $name), $primary)) . ')'; $sql = 'CREATE TABLE ' . self::migrate_identifier($target_driver, $target_table, '创建目标表：源表=' . $source_table . '，目标表=' . $target_table) . '(' . implode(',', $definitions) . ')'; if ($target_driver === 'mysql') $sql .= ' ENGINE=InnoDB DEFAULT CHARSET=utf8mb4 COLLATE=utf8mb4_unicode_ci'; $target->exec($sql); foreach ($indexes as $index) { if ($index['primary'] || !$index['columns']) continue; $name = self::migrate_index_name($target, $target_driver, $target_table, $index['name'], $index['columns'], $index['unique']); $target->exec('CREATE ' . ($index['unique'] ? 'UNIQUE ' : '') . 'INDEX ' . self::migrate_identifier($target_driver, $name, '创建目标索引：表=' . $target_table . '，索引=' . $name) . ' ON ' . self::migrate_identifier($target_driver, $target_table, '创建目标索引所属表：' . $target_table) . '(' . implode(',', array_map(fn(string $column): string => self::migrate_identifier($target_driver, $column, '创建目标索引字段：表=' . $target_table . '，索引=' . $name . '，字段=' . $column), $index['columns'])) . ')'); } } public static function migrate_database_identity(PDO $db, array $config): string { if ($config['driver'] === 'sqlite') return (string)realpath((string)$config['path']); try { if ($config['driver'] === 'mysql') return (string)$db->query("SELECT CONCAT(@@server_uuid,':',DATABASE())")->fetchColumn(); return (string)$db->query("SELECT current_database()||':'||system_identifier::text FROM pg_control_system()")->fetchColumn(); } catch (Throwable $e) { return ''; } } public static function migrate_same_database(PDO $source_db, array $source, PDO $target_db, array $target): bool { if ($source['driver'] !== $target['driver']) return false; $source_identity = self::migrate_database_identity($source_db, $source); $target_identity = self::migrate_database_identity($target_db, $target); if ($source_identity !== '' && $target_identity !== '') return hash_equals($source_identity, $target_identity); return strtolower((string)$source['host']) === strtolower((string)$target['host']) && (int)$source['port'] === (int)$target['port'] && (string)$source['database'] === (string)$target['database']; } public static function migrate_core_table_map(): array { return [ 'groups' => 'app_groups', 'users' => 'app_users', 'forums' => 'app_forums', 'topics' => 'app_topics', 'replies' => 'app_replies', 'attachments' => 'app_attachments', 'notifications' => 'app_notifications', 'settings' => 'app_settings', 'plugins' => 'app_plugins', 'cron_tasks' => 'app_cron_tasks', ]; } public static function migrate_order_tables(array $tables): array { $core = array_flip(array_values(self::migrate_core_table_map())); usort($tables, fn(string $a, string $b): int => (($core[self::migrate_target_table($a)] ?? PHP_INT_MAX) <=> ($core[self::migrate_target_table($b)] ?? PHP_INT_MAX)) ?: strcmp($a, $b)); return $tables; } public static function migrate_target_table(string $table): string { return self::migrate_core_table_map()[$table] ?? $table; } public static function migrate_value(mixed $value): mixed { if (is_resource($value)) return stream_get_contents($value); return is_bool($value) ? (int)$value : $value; } public static function migrate_reset_sequences(PDO $db, string $driver, array $tables): void { if ($driver !== 'pgsql') return; $sequence = $db->prepare("SELECT pg_get_serial_sequence(?, 'id')"); $set = $db->prepare('SELECT setval(CAST(? AS regclass),?,?)'); foreach ($tables as $table) { if (!in_array('id', self::migrate_columns($db, $driver, $table), true)) continue; $sequence->execute([$table]); $name = $sequence->fetchColumn(); if (!$name) continue; $max = (int)$db->query('SELECT COALESCE(MAX(id),0) FROM ' . self::migrate_identifier($driver, $table, '重置序列：表=' . $table))->fetchColumn(); $set->execute([$name, max(1, $max), $max > 0]); } } public static function migrate_run(PDO $source, array $source_config): array { $target = db(); $target_config = db_config(); if (self::migrate_same_database($source, $source_config, $target, $target_config)) throw new RuntimeException('源数据库不能与当前数据库相同。'); [$schema_tables] = self::app_db_schema($target_config['driver']); $source_tables = []; foreach (array_keys($schema_tables) as $target_table) { $source_candidates = [$target_table]; foreach (self::migrate_core_table_map() as $source_table => $mapped_table) if ($mapped_table === $target_table) $source_candidates[] = $source_table; foreach (array_unique($source_candidates) as $source_table) if (app_db_table_exists($source, $source_config['driver'], $source_table)) $source_tables[] = $source_table; } $tables = self::migrate_order_tables($source_tables); if (!$tables) throw new RuntimeException('源数据库没有可迁入的系统数据表。'); $target_tables = []; foreach (array_keys($schema_tables) as $table) if (app_db_table_exists($target, $target_config['driver'], $table)) $target_tables[$table] = true; $mapped_tables = []; foreach ($tables as $source_table) { $target_table = self::migrate_target_table($source_table); if (isset($mapped_tables[$target_table])) throw new RuntimeException('多个源表映射到同一目标表：' . $mapped_tables[$target_table] . '、' . $source_table); $mapped_tables[$target_table] = $source_table; if (isset($target_tables[$target_table])) continue; self::migrate_install_table($source, $source_config['driver'], $target, $target_config['driver'], $source_table, $target_table); $target_tables[$target_table] = true; } $plans = []; foreach ($tables as $source_table) { $target_table = self::migrate_target_table($source_table); $columns = array_values(array_intersect(self::migrate_columns($target, $target_config['driver'], $target_table), self::migrate_columns($source, $source_config['driver'], $source_table))); if ($columns) $plans[] = ['source' => $source_table, 'target' => $target_table, 'columns' => $columns]; } if (!$plans) throw new RuntimeException('没有找到兼容的数据字段。'); $counts = []; if ($source_config['driver'] === 'mysql') $source->exec('SET TRANSACTION ISOLATION LEVEL REPEATABLE READ'); if ($source_config['driver'] === 'pgsql') $source->exec('BEGIN ISOLATION LEVEL REPEATABLE READ'); else $source->beginTransaction(); $target->beginTransaction(); try { foreach (array_reverse($plans) as $plan) $target->exec('DELETE FROM ' . self::migrate_identifier($target_config['driver'], $plan['target'], '清空目标表：' . $plan['target'])); foreach ($plans as $plan) { $source_table = $plan['source']; $target_table = $plan['target']; $columns = $plan['columns']; $source_columns = implode(',', array_map(fn(string $name): string => self::migrate_identifier($source_config['driver'], $name, '读取源字段：表=' . $source_table . '，字段=' . $name), $columns)); $target_columns = implode(',', array_map(fn(string $name): string => self::migrate_identifier($target_config['driver'], $name, '写入目标字段：表=' . $target_table . '，字段=' . $name), $columns)); $order = in_array('id', $columns, true) ? ' ORDER BY ' . self::migrate_identifier($source_config['driver'], 'id', '读取源表排序字段：' . $source_table) : ''; $read = $source->query('SELECT ' . $source_columns . ' FROM ' . self::migrate_identifier($source_config['driver'], $source_table, '读取源表：' . $source_table) . $order); $insert = 'INSERT INTO ' . self::migrate_identifier($target_config['driver'], $target_table, '写入目标表：源表=' . $source_table . '，目标表=' . $target_table) . '(' . $target_columns . ') VALUES(' . sql_marks(count($columns)) . ')'; $insert = $target_config['driver'] === 'mysql' ? str_replace('INSERT INTO', 'INSERT IGNORE INTO', $insert) : $insert . ' ON CONFLICT DO NOTHING'; $write = $target->prepare($insert); $count = 0; $attachment_hashes = []; while ($row = $read->fetch()) { if (in_array($source_table, ['topics', 'app_topics'], true) && array_key_exists('reply_order', $row)) $row['reply_order'] = strtolower(trim((string)$row['reply_order'])) === 'desc' || (string)$row['reply_order'] === '1' ? 1 : 0; if (in_array($source_table, ['attachments', 'app_attachments'], true) && isset($row['user_id'], $row['hash'])) { $key = $row['user_id'] . ':' . $row['hash']; if (isset($attachment_hashes[$key])) continue; $attachment_hashes[$key] = true; } $write->execute(array_map(fn(string $column) => self::migrate_value($row[$column]), $columns)); if ($write->rowCount() > 0) $count++; } $counts[$source_table] = $count; } search_index_rebuild(); self::migrate_reset_sequences($target, $target_config['driver'], array_column($plans, 'target')); $source->commit(); $target->commit(); } catch (Throwable $e) { if ($source->inTransaction()) $source->rollBack(); if ($target->inTransaction()) $target->rollBack(); throw $e; } return $counts; } public static function migrate_refresh_caches(): void { unset($GLOBALS['__settings_cache']); forums_cache(true); groups_cache(true); save_settings_values(['plugin_sync_pending' => '1']); } public static function migrate_page(): void { need_admin(); set_time_limit(0); ignore_user_abort(true); $error = ''; $counts = null; if ($_SERVER['REQUEST_METHOD'] === 'POST') { try { if (!isset($_POST['confirm_replace'])) throw new RuntimeException('请确认清空当前新数据库。'); if (!self::terms_accepted($_POST)) throw new RuntimeException('请先阅读完整软件使用条款并勾选同意。'); $source_config = self::migrate_source_config(); $counts = self::migrate_run(self::migrate_source_db($source_config), $source_config); } catch (Throwable $e) { $error = $e->getMessage(); } } $target = db_config(); $target_label = $target['driver'] === 'sqlite' ? 'SQLite / ' . basename((string)$target['path']) : strtoupper($target['driver'] === 'pgsql' ? 'PostgreSQL' : 'MySQL') . ' / ' . $target['database']; if (is_array($counts)) { $rows = ''; foreach ($counts as $table => $count) $rows .= '

' . h($table) . '

' . (int)$count . '

'; self::migrate_refresh_caches(); self::setup_html('迁入完成', '

迁入完成

旧数据库数据已写入当前数据库。

迁入结果

共迁入 ' . array_sum($counts) . ' 条数据。

目标数据库

' . h($target_label) . '

' . $rows . '

返回升级进入首页

'); } $driver = in_array((string)($_POST['source_driver'] ?? 'sqlite'), ['sqlite', 'mysql', 'pgsql'], true) ? (string)($_POST['source_driver'] ?? 'sqlite') : 'sqlite'; $v = fn(string $name, string $default = ''): string => (string)($_POST[$name] ?? $default); $options = ''; $message = $error !== '' ? '

' . h($error) . '

' : ''; $sqlite_fields = '

SQLite 文件路径

'; $server_fields = '

数据库地址

端口

数据库名

用户名

密码

'; $form = ''; $body = '

数据迁入

从旧数据库迁入当前已安装数据库。

' . $message . '

旧数据库配置

' . $form . '

'; self::setup_html('数据迁入', $body); } }