论坛管理:查找马甲

在自己论坛根目录下放这么个文件就行了。然后以站长的身份访问这个文件。

可以查你网站里的任何人。

查出来的是可能的马甲，相互交换使用过id的也算。

是否真的是马甲，还需要看看ip地点才行，所以，如果ip地址库升过级了，查马甲更精确一些。

代码如下：（保存的文件名是getsimilar.php）

<?php

require './include/common.php';

require $discuz_root.'./include/misc.php';

if(!$isadmin) {

showmessage('admin_nopermission');

}

if($_REQUEST["similarusername"])

{

$query = $db->query("select useip from $table_posts where author = '$_REQUEST[similarusername]' group by useip");

while($rows = $db->fetch_array($query))

{

$iplist[] = $rows["useip"];

}

$query = $db->query("select regip, password from $table_members where username = '$_REQUEST[similarusername]' order by username limit 1");

$row = $db->fetch_array($query);

$passwd = $row["password"];

$ipfrom = convertip($row["regip"]);

if(!@in_array($row["regip"], $iplist))

{

$iplist[] = $row["regip"];

}

$count = count($iplist);

for($i = 0; $i < $count; $i++)

{

$ips .= "'".$iplist[$i]."'";

$ips .= ($i == $count - 1) ? "" : ",";

}

$query = $db->query("select author from $table_posts where useip in ($ips) group by author");

while($rows = $db->fetch_array($query))

{

$similarauthor[] = $rows["author"];

}

$count = count($similarauthor);

for($i = 0; $i < $count; $i++)

{

$username = $similarauthor[$i];

$query = $db->query("select password, regip from $table_members where username = '$username' limit 1");

$row = $db->fetch_array($query);

$passchk = ($row["password"] == $passwd) ? "密码相同" : "密码不同";

$iplocation = convertip($row["regip"]);

$array = array("username"=>$username, "password"=>$passchk, "ipfrom"=>$iplocation);

if($username !== $_POST["similarusername"])

{

$similarlist[] = $array;

}

}

}

?>

<form action="" method="post">

<input type="text" name="similarusername" size=30 value="<?php echo $_REQUEST["similarusername"]; ?>"><br>

<input type="submit" name="submit" value="查找马甲">

</form>

<?php

if($_REQUEST["similarusername"])

{

$count = count($similarlist);

echo "来自: ".$ipfrom."猜测该用户共有马甲 $count 个: <br><br>";

for($i = 0; $i < $count; $i++)

{

echo "<a href=getsimilar.php?similarusername=".$similarlist[$i]["username"].">".$similarlist[$i]["username"]."</a>---".$similarlist[$i]["password"]."---".$similarlist[$i]["ipfrom"]."<br>";

}

}

?>