小鬼EPD分销破解源码附教程

我们可以看到这个作者也是做了一些防御的手段，在这个文件的开头我们看到了filesize，这一段其实是检查核心文件，也就是刚才我们还原的文件的大小，还有就是检查等一下我们会继续破解的那一个文件的大小，但是其实我们把这一段删掉就行！目前这个index.php我们已经破解完毕了！至于login.php作者似乎没有进行加密，那么我们进去可以看到也是有filesize这一段检查，我们直接删掉就行！

同样我们在head.php这个文件中，也是有发现这么一段filesize的代码存在，把它删掉就行。接下来我们来处理admin.class.php这一个文件。

同样还是那一段东西，同样的手法破解掉出现代码应该如下：

query("SELECT * FROM `impepd_admin` WHERE `adminUser` = '$adminUser'")->fetch(PDO::FETCH_ASSOC);
    }
    public static function getAdminId($DB,$id)
    {
        return $DB->query("SELECT * FROM `impepd_admin` WHERE `id` = '$id'")->fetch(PDO::FETCH_ASSOC);
    }
    public static function loginAdmin($DB,$adminUser)
    {
        $ip = Gets::ip();
        return $DB->exec("UPDATE `impepd_admin` SET `adminLoginIp` = '$ip' WHERE `adminUser` = '$adminUser'");
    }
    public static function get_os()
    {
        if (!empty($_SERVER['HTTP_USER_AGENT'])){
            $os = $_SERVER['HTTP_USER_AGENT'];
            if (preg_match('/win/i', $os)) {
                $os = 'Windows';
            } else if (preg_match('/mac/i', $os)) {
                $os = 'MAC';
            } else if (preg_match('/linux/i', $os)) {
                $os = 'Android';
            } else if (preg_match('/unix/i', $os)) {
                $os = 'Unix';
            } else if (preg_match('/bsd/i', $os)) {
                $os = 'BSD';
            } else {
                $os = 'Other';
            }
            return $os;
        } else {
            return 'unknow';
        }
    }
    public static function browse_info()
    {
        if (!empty($_SERVER['HTTP_USER_AGENT'])){
            $br = $_SERVER['HTTP_USER_AGENT'];
            if (preg_match('/MSIE/i', $br)) {
                $br = 'MSIE';
            } else if (preg_match('/Firefox/i', $br)) {
                $br = 'Firefox';
            } else if (preg_match('/Chrome/i', $br)) {
                $br = 'Chrome';
            } else if (preg_match('/Safari/i', $br)) {
                $br = 'Safari';
            } else if (preg_match('/Opera/i', $br)) {
                $br = 'Opera';
            } else {
                $br = 'Other';
            }
            return $br;
        } else {
            return 'unknow';
        }
    }
    public static function mysql_info($DB)
    {
        $info=$DB->query('select VERSION()')->fetch(PDO::FETCH_ASSOC);
        return $info['VERSION()'];
    }
    public static function detect_encoding($file='./login.php')
    {
        $list = array('GBK', 'UTF-8', 'UTF-16LE', 'UTF-16BE', 'ISO-8859-1');
        $str = file_get_contents($file);
        foreach ($list as $item) {
            $tmp = mb_convert_encoding($str, $item, $item);
            if (md5($tmp) == md5($str)) {
                return $item;
            }
        }
        return null;
    }
    public static function getVersion()
    {
        $data = json_decode(file_get_contents(AUTH_API_URL . '?act=version'),true);
        return $data['0']['versionCode'];
    }
    public static function getApi($DB, $id = false)
    {
        $data = $DB->query('SELECT * FROM `impepd_api`')->fetchAll(PDO::FETCH_ASSOC);
        if($id)$data = $DB->query("SELECT * FROM `impepd_api` WHERE `id` = '$id'")->fetch(PDO::FETCH_ASSOC);
        return $data;
    }
    public static function getHost($DB, $id = false,$name=null)
    {
        if($id){
$data = $DB->query("SELECT * FROM `impepd_host` WHERE `id` = '$id'")->fetch(PDO::FETCH_ASSOC);
}elseif($name!=''){
$data=$DB->query("SELECT * FROM `impepd_host` WHERE `hostName` LIKE '%$name%'")->fetchAll(PDO::FETCH_ASSOC);
}else{
$data = $DB->query('SELECT * FROM `impepd_host`')->fetchAll(PDO::FETCH_ASSOC);
}

return $data;
    }
    public static function createHost($DB, $data)
    {
        $ip = $data['apiIp'];
        $apiData = self::getApiIp($DB, $ip);
        unset($data['apiIp']);

        $data['log_file'] = '1';
        $data['htaccess'] = '1';
        $data['access'] = '1';

        $url = self::CreateUrl($apiData['apiIp'], $apiData['apiKey'], 'add_vh');

        $resultData = self::GetCloud($url, $data);

        if($resultData['result'] != 200)return false;

        $hostData = array(
            'hostIp' => $apiData['apiIp'],
            'hostName' => $data['name'],
            'hostPwd' => $data['passwd'],
            'hostWebSize' => $data['web_quota'],
            'hostDbSize' => $data['db_quota']
        );
        self::addHost($DB, $hostData);
        return true;
    }
    public static function isShow($DB, $id, $isShow)
    {
        return $DB->exec("UPDATE `impepd_api` SET `isShow` = '$isShow' WHERE `id` = '$id'");
    }
    public static function apiState($DB, $id, $apiState)
    {
        return $DB->exec("UPDATE `impepd_api` SET `apiState` = '$apiState' WHERE `id` = '$id'");
    }
    public static function editApi($DB, $data)
    {
        $id = $data['id'];
        $apiIp = $data['apiIp'];
        $apiKey = $data['apiKey'];
        $apiMoney = $data['apiMoney'];
        $apiName = $data['apiName'];
        $apiMixWeb = $data['apiMixWeb'];
        $apiMixDb = $data['apiMixDb'];
        $apiMixFlow = $data['apiMixFlow'];
        $apiUseMoney = $data['apiUseMoney'];

        return $DB->exec("UPDATE `impepd_api` SET `apiIp` = '$apiIp',`apiKey` = '$apiKey',`apiMoney` = '$apiMoney',`apiName` = '$apiName',`apiMixWeb` = '$apiMixWeb',`apiMixDb` = '$apiMixDb',`apiMixFlow` = '$apiMixFlow',`apiUseMoney` = '$apiUseMoney' WHERE `id` = '$id'");
    }
    public static function delApi($DB, $id)
    {
        return $DB->exec("DELETE FROM `impepd_api` WHERE `id` = '$id'");
    }
    public static function getApiIp($DB, $ip)
    {
        $data = $DB->query("SELECT * FROM `impepd_api` WHERE `apiIp` = '$ip'")->fetch(PDO::FETCH_ASSOC);
        return $data;
    }
    public static function getUserApi($DB, $ip)
    {
        $data = $DB->query("SELECT * FROM `impepd_apib` WHERE `apiIp` = '$ip'")->fetch(PDO::FETCH_ASSOC);
        return $data;
    }
    public static function apiAdd($DB, $data)
    {
        $apiIp = $data['apiIp'];
        $apiKey = $data['apiKey'];
        $apiMoney = $data['apiMoney'];

        return $DB->exec("INSERT INTO `impepd_api`(`apiIp`,`apiKey`,`apiMoney`)VALUES('$apiIp','$apiKey','$apiMoney')");
    }
    public static function getUser ($DB, $id = false,$uname = null)
    {
        $data = $DB->query('SELECT * FROM `impepd_user`')->fetchAll(PDO::FETCH_ASSOC);
        if($id)$data = $DB->query("SELECT * FROM `impepd_user` WHERE `id` = '$id'")->fetch(PDO::FETCH_ASSOC);
		if(!empty($uname))$data = $DB->query("SELECT * FROM `impepd_user` WHERE `userName` LIKE '%$uname%'")->fetchAll(PDO::FETCH_ASSOC);
        return $data;
    }
    public static function delUser($DB, $id)
    {
        return $DB->exec("DELETE FROM `impepd_user` WHERE `id` = '$id'");
    }
    public static function userState($DB, $id, $userState)
    {
        return $DB->exec("UPDATE `impepd_user` SET `userState` = '$userState' WHERE `id` = '$id'");
    }
    public static function editUser($DB, $data)
    {
        $id = $data['id'];
        $userName = $data['userName'];
        $userPwd = $data['userPwd'];
        $userMoney = $data['userMoney'];
        $userMail = $data['userMail'];

        $sql = "UPDATE `impepd_user` SET `userName` = '$userName',`userMoney` = '$userMoney',`userMail` = '$userMail' WHERE `id` = '$id'";
        if(!empty($data['userPwd'])){
            $userPwd = md5($data['userPwd']);
            $sql = "UPDATE `impepd_user` SET `userName` = '$userName',`userMoney` = '$userMoney',`userPwd` = '$userPwd',`userMail` = '$userMail' WHERE `id` = '$id'";
        }

        return $DB->exec($sql);
    }
    public static function getUserName($DB, $userName)
    {
        $data = $DB->query("SELECT * FROM `impepd_user` WHERE `userName` = '$userName'")->fetch(PDO::FETCH_ASSOC);
        return $data;
    }
    public static function userAdd($DB, $data)
    {
        $userName = $data['userName'];
        $userPwd = $data['userPwd'];
        $userMail = $data['userMail'];

        return $DB->exec("INSERT INTO `impepd_user`(`userName`,`userPwd`,`userMail`)VALUES('$userName','$userPwd','$userMail')");
    }
	public static function apiDis($DB, $data)
    {
		$sql = self::insSql('impepd_apib', $data);
		
		$apiData = self::getUserApi($DB, $data['apiIp']);
		$ary['useLength'] = '`useLength` + ' . $data['useLength'];
		if(!empty($apiData))$sql = self::updSql('impepd_apib', $ary, '`apiIp` = \'' . $apiData['apiIp'] . '\'');

		return $DB->exec($sql);
	}
	public static function noticeAdd($DB, $data)
    {
        $data['time'] = date('Y-m-d');
        $data['adminUser'] = $_SESSION['adminUser'];
        $sql = self::insSql('impepd_gonggao', $data);
        return $DB->exec($sql);
    }
	public static function getNotice($DB, $id = false)
    {
        $data = $DB->query('SELECT * FROM `impepd_gonggao`')->fetchAll(PDO::FETCH_ASSOC);
        if($id)$data = $DB->query("SELECT * FROM `impepd_gonggao` WHERE `id` = '$id'")->fetch(PDO::FETCH_ASSOC);
        return $data;
    }
    public static function delNotice($DB, $id)
    {
        return $DB->exec("DELETE FROM `impepd_gonggao` WHERE `id` = '$id'");
    }
    public static function GetCloud($url, $data)
    {
        foreach ($data as $k => $v) {
            $url .= '&' . $k . '=' . $v;
        }
        return json_decode(file_get_contents($url), TRUE);
    }
    public static function CreateUrl($apiIp, $apiKey, $type)
    {
        $ip = $apiIp;
        $key = $apiKey;
        $c = 'whm';
        $a = $type;
        $r = rand(100000,999999);
        $json = '1';
        $s = md5($a.$key.$r);
        $url = "http://$ip:3312/api/index.php?c=$c&a=$a&r=$r&json=$json&s=$s";

        return $url;
    }
    public static function addHost($DB, $data){
        $sql = 'INSERT INTO `impepd_host`(';
        foreach ($data as $k => $v) {
            $sql .= "`$k`,";
        }
        $sql = trim($sql, ',');
        $sql .= ')VALUES(';
        foreach ($data as $k => $v) {
            $sql .= "'$v',";
        }
        $sql = trim($sql, ',');
        $sql .= ')';

        $DB->query($sql);
    }
	public static function insSql($table, $data){
        $sql = 'INSERT INTO `' . $table . '`(';
        foreach ($data as $k => $v) {
            $sql .= "`$k`,";
        }
        $sql = trim($sql, ',');
        $sql .= ')VALUES(';
        foreach ($data as $k => $v) {
            $sql .= "'$v',";
        }
        $sql = trim($sql, ',');
        $sql .= ')';
		
		return $sql;
	}
	public static function updSql($table, $data, $where = false){
        $sql = 'UPDATE `' . $table . '` SET ';
        foreach ($data as $k => $v) {
            $sql .= "`$k` = '$v',";
        }
        $sql = trim($sql, ',');
		if($where)$sql .= " WHERE $where";
		
		return $sql;
	}
    public static function editNotice($DB, $data)
    {
        $sql = self::updSql('impepd_gonggao', $data, '`id` = \'' . $data['id'] . '\'');

        return $DB->exec($sql);
    }
}

同样我们来检查，发现getVersion这一个功能会用到官方的接口，我们其实可以毫不犹疑的把这一个功能给删掉了。删掉的同时我们再次回到index.php看到最下面那一段代码有用到getVersion这一个功能，把那一段删掉。中间的代码，也就是公告的那一部分似乎也有用到官方授权站的API，所以我们也可以把它删掉，现在index.php的内容应该是这样的：

到目前为止，admin目录已经是全部破解完毕，那么我们只需要检查一遍user文件夹之后就可以直接进行安装测试了！

过不期然，user文件夹里面的user.class.php，apicron.php，apilist.php也是被加密的，当然也是同样的加密，同样的手法破解还原，出来的代码应该如下：

query('SELECT * FROM `impepd_user`')->fetchAll(PDO::FETCH_ASSOC);
        if($userName)$data = $DB->query("SELECT * FROM `impepd_user` WHERE `userName` = '$userName'")->fetch(PDO::FETCH_ASSOC);

        return $data;
    }
    public static function getUserId($DB, $id)
    {
        return $DB->query("SELECT * FROM `impepd_user` WHERE `id` = '$id'")->fetch(PDO::FETCH_ASSOC);
    }
    public static function regUser($DB, $data)
    {
        $userName = $data['userName'];
        $userPwd = $data['userPwd'];
        $userMail = $data['userMail'];

        $sql = "INSERT INTO `impepd_user`(`userName`,`userPwd`,`userMail`)VALUES('$userName','$userPwd','$userMail')";

        if(isset($data['upUserId'])){
            $upUserId = $data['upUserId'];
            $upUserData = self::getUserId($DB, $upUserId);
            $upUserName = $upUserData['userName'];
            $sql = "INSERT INTO `impepd_user`(`userName`,`userPwd`,`upUserName`,`userMail`)VALUES('$userName','$userPwd','$upUserName','$userMail')";
        }

        return $DB->exec($sql);
    }
    public static function userB($DB, $userName, $id)
    {
        $userData = self::getUser($DB, $userName);
        $userId = $userData['id'];

        $DB->exec("INSERT INTO `impepd_userb`(`upUserId`,`downUserId`)VALUES('$id','$userId')");
    }
    public static function getUserMail($DB, $userMail)
    {
        return $DB->query("SELECT * FROM `impepd_user` WHERE `userMail` = '$userMail'")->fetch(PDO::FETCH_ASSOC);
    }
    public static function loginUser($DB,$userName)
    {
        $ip = Gets::ip();
        return $DB->exec("UPDATE `impepd_user` SET `userIp` = '$ip' WHERE `userName` = '$userName'");
    }
    public static function get_os()
    {
        if (!empty($_SERVER['HTTP_USER_AGENT'])){
            $os = $_SERVER['HTTP_USER_AGENT'];
            if (preg_match('/win/i', $os)) {
                $os = 'Windows';
            } else if (preg_match('/mac/i', $os)) {
                $os = 'MAC';
            } else if (preg_match('/linux/i', $os)) {
                $os = 'Android';
            } else if (preg_match('/unix/i', $os)) {
                $os = 'Unix';
            } else if (preg_match('/bsd/i', $os)) {
                $os = 'BSD';
            } else {
                $os = 'Other';
            }
            return $os;
        } else {
            return 'unknow';
        }
    }
    public static function browse_info()
    {
        if (!empty($_SERVER['HTTP_USER_AGENT'])){
            $br = $_SERVER['HTTP_USER_AGENT'];
            if (preg_match('/MSIE/i', $br)) {
                $br = 'MSIE';
            } else if (preg_match('/Firefox/i', $br)) {
                $br = 'Firefox';
            } else if (preg_match('/Chrome/i', $br)) {
                $br = 'Chrome';
            } else if (preg_match('/Safari/i', $br)) {
                $br = 'Safari';
            } else if (preg_match('/Opera/i', $br)) {
                $br = 'Opera';
            } else {
                $br = 'Other';
            }
            return $br;
        } else {
            return 'unknow';
        }
    }
    public static function mysql_info($DB)
    {
        $info=$DB->query('select VERSION()')->fetch(PDO::FETCH_ASSOC);
        return $info['VERSION()'];
    }
    public static function detect_encoding($file='./login.php')
    {
        $list = array('GBK', 'UTF-8', 'UTF-16LE', 'UTF-16BE', 'ISO-8859-1');
        $str = file_get_contents($file);
        foreach ($list as $item) {
            $tmp = mb_convert_encoding($str, $item, $item);
            if (md5($tmp) == md5($str)) {
                return $item;
            }
        }
        return null;
    }
    public static function getVersion()
    {
        $data = json_decode(file_get_contents('http://129.204.108.129/'),true);
        $version = array_reverse($data['version']);
        return $version['0']['version'];
    }
    public static function getMoney($DB, $userName)
    {
        $data = $DB->query("SELECT * FROM `impepd_user` WHERE `userName` = '$userName'")->fetch(PDO::FETCH_ASSOC);
        return $data['userMoney'];
    }
    public static function editPwd($DB, $userName, $newUserPwd)
    {
        return $DB->exec("UPDATE `impepd_user` SET `userPwd` = '$newUserPwd' WHERE `userName` = '$userName'");
    }
    public static function getUserApi($DB, $id)
    {
        return $DB->query("SELECT * FROM `impepd_apib` WHERE `id` = '$id'")->fetch(PDO::FETCH_ASSOC);
    }
    public static function getUserApiIp($DB, $ip, $userName)
    {
        return $DB->query("SELECT * FROM `impepd_apib` WHERE `apiIp` = '$ip' AND `userName` = '$userName'")->fetch(PDO::FETCH_ASSOC);
    }
    public static function delUserApi($DB, $id)
    {
        return $DB->exec("DELETE FROM `impepd_apib` WHERE `id` = '$id'");
    }
    public static function getUserApiUserName($DB, $userName)
    {
        return $DB->query("SELECT * FROM `impepd_apib` WHERE `userName` = '$userName'")->fetchAll(PDO::FETCH_ASSOC);
    }
    public static function apiAdd($DB, $data)
    {
        $apiIp = $data['apiIp'];
        $apiKey = $data['apiKey'];
        $apiMoney = $data['apiMoney'];
        $userName = $data['userName'];

        return $DB->exec("INSERT INTO `impepd_api`(`apiIp`,`apiKey`,`apiMoney`,`userName`,`apiState`)VALUES('$apiIp','$apiKey','$apiMoney','$userName',1)");
    }
    public static function getApiIp($DB, $ip)
    {
        $data = $DB->query("SELECT * FROM `impepd_api` WHERE `apiIp` = '$ip'")->fetch(PDO::FETCH_ASSOC);
        return $data;
    }
    public static function getApi($DB, $userName)
    {
        $data = $DB->query("SELECT * FROM `impepd_api` WHERE `userName` = '$userName'")->fetchAll(PDO::FETCH_ASSOC);
        return $data;
    }
    public static function getApiId($DB, $id)
    {
        $data = $DB->query("SELECT * FROM `impepd_api` WHERE `id` = '$id'")->fetch(PDO::FETCH_ASSOC);
        return $data;
    }
    public static function isShow($DB, $id, $isShow)
    {
        return $DB->exec("UPDATE `impepd_api` SET `isShow` = '$isShow' WHERE `id` = '$id'");
    }
    public static function apiState($DB, $id, $apiState)
    {
        return $DB->exec("UPDATE `impepd_api` SET `apiState` = '$apiState' WHERE `id` = '$id'");
    }
    public static function delApi($DB, $id, $userName = fasle)
    {
        if($userName)return $DB->exec("DELETE FROM `impepd_api` WHERE `id` = '$id' AND `userName` = '$userName'");
        return $DB->exec("DELETE FROM `impepd_api` WHERE `id` = '$id'");
    }
    public static function editApi($DB, $data)
    {
        $id = $data['id'];
        $apiIp = $data['apiIp'];
        $apiKey = $data['apiKey'];
        $apiMoney = $data['apiMoney'];
        $apiName = $data['apiName'];
        $apiMixWeb = $data['apiMixWeb'];
        $apiMixDb = $data['apiMixDb'];
        $apiMixFlow = $data['apiMixFlow'];
        $apiUseMoney = $data['apiUseMoney'];

        return $DB->exec("UPDATE `impepd_api` SET `apiIp` = '$apiIp',`apiKey` = '$apiKey',`apiMoney` = '$apiMoney',`apiName` = '$apiName',`apiMixWeb` = '$apiMixWeb',`apiMixDb` = '$apiMixDb',`apiMixFlow` = '$apiMixFlow',`apiUseMoney` = '$apiUseMoney' WHERE `id` = '$id'");
    }
    public static function getShowApi($DB)
    {
        return $DB->query('SELECT * FROM `impepd_api` WHERE `isShow` = 1')->fetchAll(PDO::FETCH_ASSOC);
    }
    public static function buyApi($DB, $ip, $userName)
    {
        $useTime = date('Y-m-d');
        $useLength = 30;
        $apiData = self::getUserApiIp($DB, $ip, $userName);
        $apiData2 = self::getApiIp($DB, $ip);
        $apiName = $apiData2['apiName'];
        $apiMoney = $apiData2['apiMoney'];
        $apiUseMoney = $apiData2['apiUseMoney'];
		
        if(empty($apiData))return $DB->exec("INSERT INTO `impepd_apib`(`userName`,`apiIp`,`useLength`,`useTime`,`apiName`,`apiMoney`,`apiUseMoney`)VALUES('$userName','$ip','$useLength','$useTime','$apiName','$apiMoney','$apiUseMoney')");
        return $DB->exec("UPDATE `impepd_apib` SET `useLength` = `useLength` + '$useLength' WHERE `apiIp` = '$ip' AND `userName` = '$userName'");
    }
    public static function getUp($DB, $id)
    {
        return $DB->query("SELECT * FROM `impepd_userb` WHERE `downUserId` = '$id'")->fetch(PDO::FETCH_ASSOC);
    }
    public static function incId($DB, $id, $money)
    {
        return $DB->query("UPDATE `impepd_user` SET `userMoney` = `userMoney` + '$money' WHERE `id` = '$id'");
    }
    public static function incUserName($DB, $userName, $money)
    {
        return $DB->query("UPDATE `impepd_user` SET `userMoney` = `userMoney` + '$money' WHERE `userName` = '$userName'");
    }
    public static function buy($DB, $data, $buyUserName, $userName, $upTicheng)
    {
		$ip = $data['apiIp'];
		$money = $data['apiMoney'];
        $useTime = date('Y-m-d');
        $useLength = 30;
        $apiData = self::getUserApiIp($DB, $ip, $buyUserName);
        $buy = true;
        $apiData2 = self::getApiIp($DB, $ip);
        $apiName = $apiData2['apiName'];
        $apiMoney = $apiData2['apiMoney'];
        $apiUseMoney = $apiData2['apiUseMoney'];

        $DB->setAttribute(PDO::ATTR_AUTOCOMMIT, false);
        try {
            $DB->beginTransaction();

            if($money > 0){
                $DB->exec("UPDATE `impepd_user` SET `userMoney` = `userMoney` - '$money' WHERE `userName` = '$buyUserName'");
                if($money >= 1){
                    $upTicheng = $upTicheng / 100;
                    $ticheng = $money * $upTicheng;

                    $userData = self::getUser($DB, $buyUserName);
                    $upData = self::getUp($DB, $userData['id']);
                    if(!empty($upData)){
                        $upUserId = $upData['upUserId'];
                        $DB->exec("UPDATE `impepd_user` SET `userMoney` = `userMoney` + '$ticheng' WHERE `id` = '$upUserId'");
                        $upData = self::getUp($DB, $upUserId);
                        if(!empty($upData)){
                            $upUserId = $upData['upUserId'];
                            $DB->exec("UPDATE `impepd_user` SET `userMoney` = `userMoney` + '$ticheng' WHERE `id` = '$upUserId'");
                        }
                    }
                }
            }
            if(!empty($userName))$DB->exec("UPDATE `impepd_user` SET `userMoney` = `userMoney` + '$money' WHERE `userName` = '$userName'");
            if(empty($apiData))$DB->exec("INSERT INTO `impepd_apib`(`userName`,`apiIp`,`useLength`,`useTime`,`apiName`,`apiMoney`,`apiUseMoney`)VALUES('$buyUserName','$ip','$useLength','$useTime','$apiName','$apiMoney','$apiUseMoney')");
            if(!empty($apiData))$DB->exec("UPDATE `impepd_apib` SET `useLength` = `useLength` + '$useLength' WHERE `apiIp` = '$ip' AND `userName` = '$buyUserName'");

            $DB->commit();
        } catch (PDOException $e) {
            $DB->rollback();
            $buy = false;
        }
        $DB->setAttribute(PDO::ATTR_AUTOCOMMIT, true);
        return $buy;
    }
    public static function makeKey($DB, $userName)
    {
        $key = md5(uniqid());
        return $DB->exec("UPDATE `impepd_user` SET `userKey` = '$key' WHERE `userName` = '$userName'");
    }
    public static function gonggao($DB)
    {
        return $DB->query('SELECT * FROM `impepd_gonggao` ORDER BY `time` DESC')->fetchAll(PDO::FETCH_ASSOC);
    }
    public static function BindQq($DB, $userQqCode)
    {
        $username = $_SESSION['userName'];
        return $DB->exec("UPDATE `impepd_user` SET `userQq` = '$userQqCode' WHERE `userName` = '$username'");
    }
    public static function SearchCode($DB, $code)
    {
        return $DB->query("SELECT * FROM `impepd_user` WHERE `userQq` = '$code'")->fetch(PDO::FETCH_ASSOC);
    }
}

getVersion这个功能很明显的API还没换，也是和admin文件夹里面同样的手法处理了，或者不处理也可以，因为连接的根本不是官方，现在打开还是显示403ForBidden呢！

那么现在我们可以直接进行安装测试了！

上传，域名绑定这些我就不多说了，我直接来汇报结果吧！破解全部成功了，运行全部成功，过程十分顺利！

截图如下：

恭喜破解成功了，如果你是一直看到这里的人十分感谢你，如果你是直接划到这里要源码的人我也十分感谢你，如果要转载记得要注明NE博客哦！