更新

admin/appmarket/cp.php

@@ -213,7 +213,7 @@ elseif ($do == 'install') {//安装应用
     if(empty($apparray['app']['app_path'])) $apparray['app']['app_path']=$dir;
 	$filename = $apparray['app']['extra']['installfile'];
 
-	$request_uri = MOD_NAME;
+	$request_uri = MOD_URL;
 	if (!empty($filename) && preg_match('/^[\w\.]+$/', $filename)) {
 		$filename = DZZ_ROOT . './'.$dir.'/' . $appname . '/' . $filename;
 		if (file_exists($filename)) {

admin/appmarket/list.php

@@ -12,7 +12,7 @@ if (!defined('IN_DZZ') || !defined('IN_ADMIN')) {
 include libfile('function/admin');
 include libfile('function/organization');
 $do = empty($_GET['do']) ? 'available' : trim($_GET['do']);
-$refer = urlencode(MOD_URL. '&op=list&do=' . $do);
+$refer = urlencode(MOD_URL . '&op=list&do=' . $do);
 $grouptitle = array('0' => lang('all'), '-1' => lang('visitors_visible'), '1' => lang('members_available'), '2' => lang('section_administrators_available'), '3' => lang('system_administrators_available'));
 $list = array();
 $op=$_GET['op'];

core/function/function_core.php

@@ -381,7 +381,7 @@ function authcode($string, $operation = 'DECODE', $key = '', $expiry = 0, $ckey_
     }
 
     if ($operation == 'DECODE') {
-        if ((substr($result, 0, 10) == 0 || substr($result, 0, 10) - time() > 0) && substr($result, 10, 16) == substr(md5(substr($result, 26) . $keyb), 0, 16)) {
+        if ((substr($result, 0, 10) == 0 || substr($result, 0, 10) - time() > 0) && substr($result, 10, 16) === substr(md5(substr($result, 26) . $keyb), 0, 16)) {
             return substr($result, 26);
         } else {
             return '';

dzz/system/template/filelist.htm

@@ -296,10 +296,10 @@ function submitdata(){
     }else{
         $.post(MOD_URL+'&op=positionlist&do=geffolderinfo',{'fid':fid},function(data){
 			try{if(typeof parent.showWindow_callback == 'function') parent.showWindow_callback(fid,data);}catch(e){}
-            if(parent.$callback){
-               try{ parent.$callback (fid,data);}catch(e){}
+            if(parent.{$callback}){
+               try{ parent.{$callback}(fid,data);}catch(e){}
             }else{
-               try{ opened.$callback (fid,data);}catch(e){}
+               try{ opened.{$callback}(fid,data);}catch(e){}
             }
 			
             hide_window();

dzz/system/template/fileselection/index.htm

@@ -164,13 +164,13 @@ html, body{
 							parent.showWindow_callback(data,'$token');
 					} 
 				}catch(e){}	
-                if (parent.$callback) {
+                if (parent.{$callback}) {
 					try{
-                    	parent.$callback (data, '$token');
+                    	parent.{$callback}(data, '$token');
 					}catch(e){}	
                 } else {
 					try{
-						opened.$callback (data, '$token');
+						opened.{$callback}(data, '$token');
 					}catch(e){}
                 }
                 hide_window();

dzz/system/template/positionlist.htm

@@ -373,10 +373,10 @@
             return false;
         } else {
             $.post(MOD_URL + '&op=positionlist&do=geffolderinfo', {'fid': fid}, function (data) {
-                if (parent.$callback) {
-                    parent.$callback (fid, data);
+                if (parent.{$callback}) {
+                    parent.{$callback}(fid, data);
                 } else {
-                    opened.$callback (fid, data);
+                    opened.{$callback}(fid, data);
                 }
                 hide_window();
             }, 'json')

dzz/system/template/selorguser.htm

@@ -208,7 +208,7 @@
 		 }
 	 });
 	 try{
-		$callback (ids,data,'$token');//ids:选中的id列表如：[g_1,125,g_32...],g_开头的标识是机构部门或群组 
+		{$callback}(ids,data,'$token');//ids:选中的id列表如：[g_1,125,g_32...],g_开头的标识是机构部门或群组 
 	 }catch(e){};
 	 hideWindow("$_GET['handlekey']");
 	 return false;