对分享文件和云盘文件进行适当权限控制

2026-04-10 04:56:42 +08:00 · 2024-09-29 15:22:35 +08:00
parent fd6ffb7da6
commit 3c34d8980e
36 changed files with 71 additions and 50 deletions
--- a/admin/appmanagement/template/header_left.htm
+++ b/admin/appmanagement/template/header_left.htm
@@ -1,4 +1,4 @@
 <a class="leftTopmenu" href="{$_G[siteurl]}">
-  <img src="{eval echo $_G['setting']['sitelogo']?'index.php?mod=io&op=thumbnail&size=small&path='.dzzencode('attach::'.$_G['setting']['sitelogo']):'static/image/common/logo.png';}" class="d-inline-block align-middle">
+  <img src="{eval echo $_G['setting']['sitelogo']?'index.php?mod=io&op=thumbnail&size=small&original=1&path='.dzzencode('attach::'.$_G['setting']['sitelogo']):'static/image/common/logo.png';}" class="d-inline-block align-middle">
  {lang appname}
 </a>
--- a/admin/login/login.php
+++ b/admin/login/login.php
@@ -75,7 +75,7 @@ function html_login_form() {
  $avatarstatus=getglobal('avatarstatus','member');
   if(!$uid){
 	if(!$_G['setting']['bbclosed']){
-		$sitelogo=$_G['setting']['sitelogo']?'index.php?mod=io&op=thumbnail&size=small&path='.dzzencode('attach::'.$_G['setting']['sitelogo']):'static/image/common/logo.png';
+		$sitelogo=$_G['setting']['sitelogo']?'index.php?mod=io&op=thumbnail&size=small&original=1&path='.dzzencode('attach::'.$_G['setting']['sitelogo']):'static/image/common/logo.png';
 	}else{
 		$sitelogo = 'static/image/common/logo.png'; 
 	}
--- a/admin/setting/template/main.htm
+++ b/admin/setting/template/main.htm
@@ -169,7 +169,7 @@
          <label class="col-sm-2">{lang sitelogo}</label>
          <div class="col-sm-10">		
            <div class="file-hidde-content">
-              <img src="{eval echo $_G['setting']['sitelogo']?'index.php?mod=io&op=thumbnail&size=small&path='.dzzencode('attach::'.$_G['setting']['sitelogo']):'static/image/common/logo.png';}" class="upold-add">
+              <img src="{eval echo $_G['setting']['sitelogo']?'index.php?mod=io&op=thumbnail&size=small&original=1&path='.dzzencode('attach::'.$_G['setting']['sitelogo']):'static/image/common/logo.png';}" class="upold-add">
              <input type="file" name="files[]" value="" class="file-hidde" />
              <input type="hidden" name="settingnew[sitelogo]" value="$setting[sitelogo]" class="build-images" /> 
              <div class="progress-bar"></div>
--- a/core/class/io/io_dzz.php
+++ b/core/class/io/io_dzz.php
@@ -127,6 +127,9 @@ class io_dzz extends io_api
    public function getStream($path, $fop = '')
    {
        global $_G;//123
+        if (strpos($path, 'preview_') === 0) {
+            $path = preg_replace('/^preview_/', '', $path);
+        }
        if (strpos($path, 'attach::') === 0) {
            $attach = C::t('attachment')->fetch(intval(str_replace('attach::', '', $path)));
 			Hook::listen('io_dzz_getstream_attach',$attach);//挂载点
@@ -187,6 +190,9 @@ class io_dzz extends io_api
    public function getFileUri($path, $fop = '')
    {
        global $_G;
+        if (strpos($path, 'preview_') === 0) {
+            $path = preg_replace('/^preview_/', '', $path);
+        }
        if (strpos($path, 'attach::') === 0) {
            $attach = C::t('attachment')->fetch(intval(str_replace('attach::', '', $path)));
 			Hook::listen('io_dzz_getstream_attach',$attach);//挂载点
@@ -469,6 +475,10 @@ class io_dzz extends io_api
    //获取icosdata
    public function getMeta($icoid)
    {
+        if (strpos($icoid, 'preview_') === 0) {
+            $icoid = preg_replace('/^preview_/', '', $icoid);
+            $preview = true;
+        }
        if (strpos($icoid, 'dzz::') === 0) {
            $attachment = preg_replace('/^dzz::/i', '', $icoid);
            $name = array_pop(explode('/', $icoid));
@@ -532,9 +542,9 @@ class io_dzz extends io_api
            if (!$rid = DB::result_first("select rid from %t where pfid = %d and name = %s", array('resources', $pfid, $filename))) {
                return false;
            }
-            return C::t('resources')->fetch_by_rid($rid);
+            return C::t('resources')->fetch_by_rid($rid,'',$preview);
        } elseif (preg_match('/\w{32}/i', $icoid)) {
-            return C::t('resources')->fetch_by_rid($icoid);
+            return C::t('resources')->fetch_by_rid($icoid,'',$preview);
        } else {
            return false;//C::t('resources')->fetch_by_icoid($icoid);
        }
@@ -650,6 +660,9 @@ class io_dzz extends io_api
        }
        @set_time_limit(0);
        $attachexists = FALSE;
+        if (strpos($path, 'preview_') === 0) {
+            $path = preg_replace('/^preview_/', '', $path);
+        }
        if (strpos($path, 'attach::') === 0) {
            $attachment = C::t('attachment')->fetch(intval(str_replace('attach::', '', $path)));
            $attachment['name'] = $filename ? $filename : $attachment['filename'];
@@ -765,6 +778,9 @@ class io_dzz extends io_api
    {

        global $_G;
+        if (strpos($path, 'preview_') === 0) {
+            $path = preg_replace('/^preview_/', '', $path);
+        }
        if (strpos($path, 'dzz::') === 0) {
            if (strpos($path, './') !== false) return false;
            @unlink($_G['setting']['attachdir'] . preg_replace('/^dzz::/i', '', $path));
@@ -2816,7 +2832,9 @@ class io_dzz extends io_api
        //判断大小
        //判断空间大小
        $filename = self::name_filter($filename);
-
+        if (strpos($path, 'preview_') === 0) {
+            $path = preg_replace('/^preview_/', '', $path);
+        }
        if (strpos($path, 'dzz::') === false && strpos($path, 'TMP::') === false) {
            $gid = DB::result_first("select gid from %t where fid=%d", array('folder', $path));
            if (!SpaceSize($size, $gid)) {
--- a/core/class/perm/perm_check.php
+++ b/core/class/perm/perm_check.php
@@ -172,6 +172,9 @@ class perm_check{
    //$arr=array('uid','gid','desktop');其中这几项必须
    function checkperm($action,$arr,$bz=''){ //检查某个图标是否有权限;
        global $_G;
+        if ($arr['preview'] && $action === 'read') {
+            return true;
+        }
        if($_G['uid']<1){ //游客没有权限
            return false;
        }
--- a/core/class/table/table_resources.php
+++ b/core/class/table/table_resources.php
@@ -375,7 +375,7 @@ class table_resources extends dzz_table
        return $resourcedata;
    }

-    public function fetch_by_rid($rid, $force_from_db = false)
+    public function fetch_by_rid($rid, $force_from_db = false,$preview = false)
    { //返回一条数据同时加载资源表数据
        global $_G;
        $cachekey = 'resourcesdata_' . $rid;
@@ -425,6 +425,7 @@ class table_resources extends dzz_table
        $data['relpath'] = dirname(preg_replace('/dzz:(.+?):/', '', $data['relativepath'])) . '/';
        $data['path'] = $data['rid'];
        $data['bz'] = '';
+        $data['preview'] = $preview;
        $data['collect'] = C::t('resources_collect')->fetch_by_rid($rid);
        if ($data['remote'] > 1) $data['rbz'] = io_remote::getBzByRemoteid($data['remote']);

--- a/core/function/function_mail.php
+++ b/core/function/function_mail.php
@@ -25,7 +25,7 @@ function sendmail($toemail, $subject, $message, $from = '') {
  $sitename=$_G['setting']['sitename'];
  $sitecopyright=replacesitevar($_G['setting']['sitecopyright']);
  if(!$_G['setting']['bbclosed']){
-		$sitelogo=$_G['setting']['sitelogo']?$_G['siteurl'].'index.php?mod=io&op=thumbnail&size=small&path='.dzzencode('attach::'.$_G['setting']['sitelogo']):$_G['siteurl'].'static/image/common/logo.png';
+		$sitelogo=$_G['setting']['sitelogo']?$_G['siteurl'].'index.php?mod=io&op=thumbnail&size=small&original=1&path='.dzzencode('attach::'.$_G['setting']['sitelogo']):$_G['siteurl'].'static/image/common/logo.png';
 	}else{
 		$sitelogo=$_G['siteurl'].'static/image/common/logo.png';
 	}
--- a/core/template/default/common/adminlogin.htm
+++ b/core/template/default/common/adminlogin.htm
@@ -121,7 +121,7 @@
          <p class="text-center mt-3"><!--{template common/copyright}--></p>
        </div>
        <div class="login-right p-5 d-none d-sm-block">
-          <p class="mb-3"><img src="<!--{if !$_G['setting']['bbclosed']}-->{eval echo $_G['setting']['sitelogo']?'index.php?mod=io&op=thumbnail&size=small&path='.dzzencode('attach::'.$_G['setting']['sitelogo']):'static/image/common/logo.png';}<!--{else}-->static/image/common/logo.png<!--{/if}-->" alt="logo" /></p>
+          <p class="mb-3"><img src="<!--{if !$_G['setting']['bbclosed']}-->{eval echo $_G['setting']['sitelogo']?'index.php?mod=io&op=thumbnail&size=small&original=1&path='.dzzencode('attach::'.$_G['setting']['sitelogo']):'static/image/common/logo.png';}<!--{else}-->static/image/common/logo.png<!--{/if}-->" alt="logo" /></p>
          <!--{if $_G[setting][loginset][subtitle]}--><p class="text-white">$_G[setting][loginset][subtitle]</p><!--{/if}-->
          <!--{if $_G[setting][metadescription]}--><p class="text-white align-self-end">$_G[setting][metadescription]</p><!--{/if}-->
        </div>
--- a/core/template/default/common/footer_simple.htm
+++ b/core/template/default/common/footer_simple.htm
@@ -45,9 +45,9 @@ try{
 <!--{/if}-->
 <script type="text/javascript">
    // 全局错误处理
-    $(document).ready(function() {
+    jQuery(document).ready(function() {
        // 设置jQuery全局的Ajax错误处理
-        $.ajaxSetup({
+        jQuery.ajaxSetup({
            error: function(xhr, textStatus, errorThrown) {
                var errorMsg = "Ajax Error: " + textStatus + ", " + errorThrown;
                showmessage(errorMsg, 'error', 3000, 1);
--- a/core/template/default/common/footer_system.htm
+++ b/core/template/default/common/footer_system.htm
@@ -20,9 +20,9 @@ try{
 <!--{/if}-->
 <script type="text/javascript">
    // 全局错误处理
-    $(document).ready(function() {
+    jQuery(document).ready(function() {
        // 设置jQuery全局的Ajax错误处理
-        $.ajaxSetup({
+        jQuery.ajaxSetup({
            error: function(xhr, textStatus, errorThrown) {
                var errorMsg = "Ajax Error: " + textStatus + ", " + errorThrown;
                showmessage(errorMsg, 'error', 3000, 1);
--- a/core/template/default/common/header_left.htm
+++ b/core/template/default/common/header_left.htm
@@ -1,4 +1,4 @@
 <a class="leftTopmenu" href="{$_G[siteurl]}">
-  <img src="<!--{if !$_G['setting']['bbclosed']}-->{eval echo $_G['setting']['sitelogo']?'index.php?mod=io&op=thumbnail&size=small&path='.dzzencode('attach::'.$_G['setting']['sitelogo']):'static/image/common/logo.png';}<!--{else}-->static/image/common/logo.png<!--{/if}-->" class="d-inline-block align-middle">
+  <img src="<!--{if !$_G['setting']['bbclosed']}-->{eval echo $_G['setting']['sitelogo']?'index.php?mod=io&op=thumbnail&size=small&original=1&path='.dzzencode('attach::'.$_G['setting']['sitelogo']):'static/image/common/logo.png';}<!--{else}-->static/image/common/logo.png<!--{/if}-->" class="d-inline-block align-middle">
  $_G['setting']['sitename']
 </a>
--- a/core/template/default/common/showmessage.htm
+++ b/core/template/default/common/showmessage.htm
@@ -42,7 +42,7 @@
 <!--{if $param[msgtype] == 1 || $param[msgtype] == 2 && !$_G[inajax]}-->
  <div id="ct" class="text-center" style="display: flex;align-items: center;justify-content: center;min-height: -webkit-fill-available;margin: 0;text-align: center;">
 			<div id="messagetext">
-        <img src="<!--{if !$_G['setting']['bbclosed']}-->{eval echo $_G['setting']['sitelogo']?'index.php?mod=io&op=thumbnail&size=small&path='.dzzencode('attach::'.$_G['setting']['sitelogo']):'static/image/common/logo.png';}<!--{else}-->static/image/common/logo.png<!--{/if}-->">
+        <img src="<!--{if !$_G['setting']['bbclosed']}-->{eval echo $_G['setting']['sitelogo']?'index.php?mod=io&op=thumbnail&size=small&original=1&path='.dzzencode('attach::'.$_G['setting']['sitelogo']):'static/image/common/logo.png';}<!--{else}-->static/image/common/logo.png<!--{/if}-->">
 				<h4>$show_message</h4>
 				<!--{if !$_G['setting']['bbclosed']|| !$_G['adminid'] ==0}-->
 				<!--{if $url_forward}-->
--- a/dzz/DPlayer/index.php
+++ b/dzz/DPlayer/index.php
@@ -10,25 +10,22 @@ if(!defined('IN_DZZ')) {
 	exit('Access Denied');
 }
 if($_GET['path']){
-	$path=dzzdecode($_GET['path']);
+	if (!$path = dzzdecode($_GET['path'])) {
+    showmessage('parameter_error');
+  }
  $meta=IO::getMeta($path);
+  if(!$meta) showmessage(lang('file_not_exist'));
+  //判断有无查看权限
+  if(!perm_check::checkperm('read', $meta)) showmessage(lang('no_privilege'),dreferer());
  if($meta['name']){
    $navtitle=$meta['name'];
    $navtitle=str_replace(strrchr($navtitle, "."),"",$navtitle); 
  }else{
    $navtitle='视频';
  }
-  $patharr=explode(':',$path);
-  if($patharr[0]=='ftp'){
-    $src=$_G['siteurl'].DZZSCRIPT.'?mod=io&op=getStream&path='.rawurldecode($_GET['path']).'&n=play.'.$_GET['ext'];
-  }else{
-    $src=IO::getFileUri($path);
-    $src=str_replace('-internal.aliyuncs.com','.aliyuncs.com',$src);
-  }
+  $src=$_G['siteurl'].'index.php?mod=io&op=getStream&path='.$_GET['path'].'&filename='.$meta['name'];
 }elseif($_GET['url']){
    $src=$_GET['url'];
  }
-
 include template('index');
-
 ?>
--- a/dzz/index/template/header_left.htm
+++ b/dzz/index/template/header_left.htm
@@ -1,4 +1,4 @@
 <a class="leftTopmenu" href="{$_G[siteurl]}">
-  <img src="<!--{if !$_G['setting']['bbclosed']}-->{eval echo $_G['setting']['sitelogo']?'index.php?mod=io&op=thumbnail&size=small&path='.dzzencode('attach::'.$_G['setting']['sitelogo']):'static/image/common/logo.png';}<!--{else}-->static/image/common/logo.png<!--{/if}-->" class="d-inline-block align-middle">
+  <img src="<!--{if !$_G['setting']['bbclosed']}-->{eval echo $_G['setting']['sitelogo']?'index.php?mod=io&op=thumbnail&size=small&original=1&path='.dzzencode('attach::'.$_G['setting']['sitelogo']):'static/image/common/logo.png';}<!--{else}-->static/image/common/logo.png<!--{/if}-->" class="d-inline-block align-middle">
 $_G['setting']['sitename']
 </a>
--- a/dzz/orguser/language/en-US/lang.php
+++ b/dzz/orguser/language/en-US/lang.php
@@ -67,7 +67,7 @@ $lang = array (
  'Organization management instructions'=>' Organization Management instructions',
  'inport_guide_download'=>' Download the person information import template ',
  'inport_guide_template'=>' template items will be automatically generated based on the number of user profile items ',
-  'inport_guide_user.'=>' Edit the required personnel information table according to the template. ',
+  'inport_guide_user'=>' Edit the required personnel information table according to the template. ',
  'inport_guide_step'=>' Step 3: Select Excel ',
  'inport_guide_layout'=>' Select the edited staff layout, support. XLS,. XLSX format ',
  'inport_guide_notice'=>' Edit staff information sheet notes ',
--- a/dzz/orguser/language/zh-cn/lang.php
+++ b/dzz/orguser/language/zh-cn/lang.php
@@ -47,7 +47,7 @@ $lang = array (
 	'Organization management instructions'=>'组织管理说明',
 	'inport_guide_download'=>'下载人员信息导入模板',
 	'inport_guide_template'=>'模板的项目会根据用户资料项的多少自动生成',
-	'inport_guide_user.'=>'根据模板编辑需要人员信息表。',
+	'inport_guide_user'=>'根据模板编辑需要人员信息表。',
 	'inport_guide_step'=>'步骤3：选择excel表',
 	'inport_guide_layout'=>'选择编辑好的人员信息表，支持 .xls、.xlsx格式',
 	'inport_guide_notice'=>'编辑人员信息表注意事项',
--- a/dzz/orguser/template/import_guide.htm
+++ b/dzz/orguser/template/import_guide.htm
@@ -41,7 +41,7 @@
      <div class="row mb-3">
        <label class="col-sm-2">{lang step}2</label>
        <div class="col-sm-10">
-          {lang inport_guide_user.}
+          {lang inport_guide_user}
        </div>
      </div>
      <form name="importfile" class="form-horizontal form-horizontal-left" method="post" action="{MOD_URL}&op=import" id="importfile" enctype="multipart/form-data">
--- a/dzz/shares/template/header_left.htm
+++ b/dzz/shares/template/header_left.htm
@@ -1,3 +1,3 @@
 <a class="leftTopmenu" href="{$_G[siteurl]}">
-<img src="<!--{if !$_G['setting']['bbclosed']}-->{eval echo $_G['setting']['sitelogo']?'index.php?mod=io&op=thumbnail&size=small&path='.dzzencode('attach::'.$_G['setting']['sitelogo']):'static/image/common/logo.png';}<!--{else}-->static/image/common/logo.png<!--{/if}-->" style="max-height:30px;">
+<img src="<!--{if !$_G['setting']['bbclosed']}-->{eval echo $_G['setting']['sitelogo']?'index.php?mod=io&op=thumbnail&size=small&original=1&path='.dzzencode('attach::'.$_G['setting']['sitelogo']):'static/image/common/logo.png';}<!--{else}-->static/image/common/logo.png<!--{/if}-->" style="max-height:30px;">
 {$share[username]}{lang de}{lang file_share}</a>
--- a/dzz/system/notification.php
+++ b/dzz/system/notification.php
@@ -46,7 +46,7 @@ if($filter=='new'){//列出所有新通知
        $searchappid[] = $v['from_id'];
    }
    if(!$_G['setting']['bbclosed']){
-		$sitelogo=$_G['setting']['sitelogo']?'index.php?mod=io&op=thumbnail&size=small&path='.dzzencode('attach::'.$_G['setting']['sitelogo']):'static/image/common/logo.png';
+		$sitelogo=$_G['setting']['sitelogo']?'index.php?mod=io&op=thumbnail&size=small&original=1&path='.dzzencode('attach::'.$_G['setting']['sitelogo']):'static/image/common/logo.png';
 	}else{
 		$sitelogo = 'static/image/common/logo.png'; 
 	}
--- a/dzz/system/template/header_left.htm
+++ b/dzz/system/template/header_left.htm
@@ -5,7 +5,7 @@
 <!--{/if}-->
 <!--{if $_GET[op] == 'mobilefileselection'}-->
 <a class="leftTopmenu" href="{$_G[siteurl]}">
-    <img src="<!--{if !$_G['setting']['bbclosed']}-->{eval echo $_G['setting']['sitelogo']?'index.php?mod=io&op=thumbnail&size=small&path='.dzzencode('attach::'.$_G['setting']['sitelogo']):'static/image/common/logo.png';}<!--{else}-->static/image/common/logo.png<!--{/if}-->" style="max-height:30px;">
+    <img src="<!--{if !$_G['setting']['bbclosed']}-->{eval echo $_G['setting']['sitelogo']?'index.php?mod=io&op=thumbnail&size=small&original=1&path='.dzzencode('attach::'.$_G['setting']['sitelogo']):'static/image/common/logo.png';}<!--{else}-->static/image/common/logo.png<!--{/if}-->" style="max-height:30px;">
    <!--{if $type == 1}-->另存为<!--{elseif $type == 0}-->选择文件<!--{elseif $type == 2}-->选择位置
        <!--{/if}--></a>
    <!--{/if}-->
--- a/share.php
+++ b/share.php
@@ -77,8 +77,9 @@ if($_GET['a']=='down'){
 			}, $url);
 			//添加path参数；
 			if(strpos($url,'?')!==false  && strpos($url,'path=')===false){
-				$shareLink=dzzdecode($icoarr['icoid']);
-				$url.='&path='.$icoarr['icoid'].'&shareLink='.dzzencode($shareLink.$shareLink);
+				//$path = dzzdecode($icoarr['icoid']);
+				$path = $path ? $path : $_GET['s'];
+				$url.='&path=' . dzzencode('preview_' . $path);
 			}
 			$url = $_G['siteurl'].$url;
 			@header("Location: $url");
@@ -147,7 +148,8 @@ if($_GET['a']=='down'){
 			}, $url);
 			//添加path参数；
 			if(strpos($url,'?')!==false  && strpos($url,'path=')===false){
-				$url.='&path='.$icoarr['icoid'];
+				$path = $path ? $path : $_GET['s'];
+				$url.='&path=' . dzzencode('preview_' . $path);
 			}
 			$url = $_G['siteurl'].$url;
 			@header("Location: $url");
--- a/user/login/logging/lostpasswd.php
+++ b/user/login/logging/lostpasswd.php
@@ -35,7 +35,7 @@ elseif(isset($_GET['lostpwsubmit'])) {
    $idstring = random(6);
    $sitename=$_G['setting']['sitename'];
    if(!$_G['setting']['bbclosed']){
-		$sitelogo=$_G['setting']['sitelogo']?'index.php?mod=io&op=thumbnail&size=small&path='.dzzencode('attach::'.$_G['setting']['sitelogo']):'static/image/common/logo.png';
+		$sitelogo=$_G['setting']['sitelogo']?'index.php?mod=io&op=thumbnail&size=small&original=1&path='.dzzencode('attach::'.$_G['setting']['sitelogo']):'static/image/common/logo.png';
 	}else{
 		$sitelogo = 'static/image/common/logo.png'; 
 	}
--- a/user/login/template/getpasswd.htm
+++ b/user/login/template/getpasswd.htm
@@ -41,7 +41,7 @@
 <div class="center-vh overflow-auto">
 <div class="card card-shadowed p-5 mb-0 mr-2 ml-2<!--{if $_G[setting][loginset][lwaveanimation]}--> wave wave-animate-slow<!--{/if}-->">
  <div class="text-center mb-3">
-		<img alt="light year admin" src="<!--{if !$_G['setting']['bbclosed']}-->{eval echo $_G['setting']['sitelogo']?'index.php?mod=io&op=thumbnail&size=small&path='.dzzencode('attach::'.$_G['setting']['sitelogo']):'static/image/common/logo.png';}<!--{else}-->static/image/common/logo.png<!--{/if}-->" style="max-height: 60px;">
+		<img alt="light year admin" src="<!--{if !$_G['setting']['bbclosed']}-->{eval echo $_G['setting']['sitelogo']?'index.php?mod=io&op=thumbnail&size=small&original=1&path='.dzzencode('attach::'.$_G['setting']['sitelogo']):'static/image/common/logo.png';}<!--{else}-->static/image/common/logo.png<!--{/if}-->" style="max-height: 60px;">
 		<h1>{lang getpassword}</h1>
   
  </div>
--- a/user/login/template/getpasswd2.htm
+++ b/user/login/template/getpasswd2.htm
@@ -35,7 +35,7 @@
  <div class="col-md-6 col-lg-5 col-xl-4 align-self-center" style="background-color: <!--{if $_G['setting']['loginset']['kbcolor']}-->$_G['setting']['loginset']['kbcolor']<!--{else}-->#fff<!--{/if}-->;height: 100%;display: flex;align-items: center;justify-content: center;">
    <div class="p-5">
      <div class="text-center">
-        <img alt="light year admin" src="<!--{if !$_G['setting']['bbclosed']}-->{eval echo $_G['setting']['sitelogo']?'index.php?mod=io&op=thumbnail&size=small&path='.dzzencode('attach::'.$_G['setting']['sitelogo']):'static/image/common/logo.png';}<!--{else}-->static/image/common/logo.png<!--{/if}-->">
+        <img alt="light year admin" src="<!--{if !$_G['setting']['bbclosed']}-->{eval echo $_G['setting']['sitelogo']?'index.php?mod=io&op=thumbnail&size=small&original=1&path='.dzzencode('attach::'.$_G['setting']['sitelogo']):'static/image/common/logo.png';}<!--{else}-->static/image/common/logo.png<!--{/if}-->">
      </div>
      <h2 class="text-center">{lang getpassword}</h2>
      <form class="signin-form needs-validation" method="post" autocomplete="off" id="lostpwform_$loginhash" role="form" onsubmit="return validate(this);" action="user.php?mod=login&op=logging&action=getpasswd&uid=$uid&id=$hashid">
--- a/user/login/template/getpasswd3.htm
+++ b/user/login/template/getpasswd3.htm
@@ -25,7 +25,7 @@
 <div class="flex-box login-box">
  <div class="login-left p-5">
 		<div class="text-center mb-3 d-sm-none">
-			<img src="<!--{if !$_G['setting']['bbclosed']}-->{eval echo $_G['setting']['sitelogo']?'index.php?mod=io&op=thumbnail&size=small&path='.dzzencode('attach::'.$_G['setting']['sitelogo']):'static/image/common/logo.png';}<!--{else}-->static/image/common/logo.png<!--{/if}-->" alt="logo" />
+			<img src="<!--{if !$_G['setting']['bbclosed']}-->{eval echo $_G['setting']['sitelogo']?'index.php?mod=io&op=thumbnail&size=small&original=1&path='.dzzencode('attach::'.$_G['setting']['sitelogo']):'static/image/common/logo.png';}<!--{else}-->static/image/common/logo.png<!--{/if}-->" alt="logo" />
 		</div>
 		<h2 class="text-center">{lang getpassword}</h2>
 		<form class="signin-form needs-validation" method="post" autocomplete="off" id="lostpwform_$loginhash" role="form" onsubmit="return validate(this);" action="user.php?mod=login&op=logging&action=getpasswd&uid=$uid&id=$hashid">
--- a/user/login/template/login_single1.htm
+++ b/user/login/template/login_single1.htm
@@ -41,7 +41,7 @@
 <div class="center-vh overflow-auto">
 <div class="card card-shadowed p-5 mb-0 mr-2 ml-2<!--{if $_G[setting][loginset][lwaveanimation]}--> wave wave-animate-slow<!--{/if}-->">
  <div class="text-center mb-3">
-  	<img alt="light year admin" src="<!--{if !$_G['setting']['bbclosed']}-->{eval echo $_G['setting']['sitelogo']?'index.php?mod=io&op=thumbnail&size=small&path='.dzzencode('attach::'.$_G['setting']['sitelogo']):'static/image/common/logo.png';}<!--{else}-->static/image/common/logo.png<!--{/if}-->">
+  	<img alt="light year admin" src="<!--{if !$_G['setting']['bbclosed']}-->{eval echo $_G['setting']['sitelogo']?'index.php?mod=io&op=thumbnail&size=small&original=1&path='.dzzencode('attach::'.$_G['setting']['sitelogo']):'static/image/common/logo.png';}<!--{else}-->static/image/common/logo.png<!--{/if}-->">
 		<h1><!--{if $_G[setting][loginset][title]}-->$_G[setting][loginset][title]<!--{else}-->$_G[setting][sitename]<!--{/if}--></h1>
 		<!--{if $_G[setting][loginset][subtitle]}--><p>$_G[setting][loginset][subtitle]</p><!--{/if}-->
  </div>
--- a/user/login/template/login_single2.htm
+++ b/user/login/template/login_single2.htm
@@ -31,7 +31,7 @@
  <div class="col-md-6 col-lg-5 col-xl-4 align-self-center" style="background-color: <!--{if $_G['setting']['loginset']['kbcolor']}-->$_G['setting']['loginset']['kbcolor']<!--{else}-->#fff<!--{/if}-->;height: 100%;display: flex;align-items: center;justify-content: center;">
    <div style="width: 100%;">
      <div class="text-center">
-        <img alt="light year admin" src="<!--{if !$_G['setting']['bbclosed']}-->{eval echo $_G['setting']['sitelogo']?'index.php?mod=io&op=thumbnail&size=small&path='.dzzencode('attach::'.$_G['setting']['sitelogo']):'static/image/common/logo.png';}<!--{else}-->static/image/common/logo.png<!--{/if}-->">
+        <img alt="light year admin" src="<!--{if !$_G['setting']['bbclosed']}-->{eval echo $_G['setting']['sitelogo']?'index.php?mod=io&op=thumbnail&size=small&original=1&path='.dzzencode('attach::'.$_G['setting']['sitelogo']):'static/image/common/logo.png';}<!--{else}-->static/image/common/logo.png<!--{/if}-->">
      </div>
      <h2 class="text-center"><!--{if $_G[setting][loginset][title]}-->$_G[setting][loginset][title]<!--{else}-->$_G[setting][sitename]<!--{/if}--></h2>
      <form class="signin-form needs-validation" action="user.php?mod=login&op=logging&action=login&loginsubmit=yes{if !empty($_GET['handlekey'])}&handlekey=$_GET[handlekey]{/if}{if isset($_GET['frommessage'])}&frommessage{/if}&loginhash=$loginhash" method="POST" name="login" id="loginform_$loginhash" role="form" onsubmit="{if $_G['setting']['pwdsafety']}pwmd5('password3_$loginhash');{/if}pwdclear = 1; loginsub('loginform_$loginhash', 'returnmessage_$loginhash');return false;">
--- a/user/login/template/login_single3.htm
+++ b/user/login/template/login_single3.htm
@@ -55,7 +55,7 @@
    <div class="flex-box login-box">
      <div class="login-left p-5">
        <div class="text-center mb-3 d-sm-none">
-          <img src="<!--{if !$_G['setting']['bbclosed']}-->{eval echo $_G['setting']['sitelogo']?'index.php?mod=io&op=thumbnail&size=small&path='.dzzencode('attach::'.$_G['setting']['sitelogo']):'static/image/common/logo.png';}<!--{else}-->static/image/common/logo.png<!--{/if}-->" alt="logo" />
+          <img src="<!--{if !$_G['setting']['bbclosed']}-->{eval echo $_G['setting']['sitelogo']?'index.php?mod=io&op=thumbnail&size=small&original=1&path='.dzzencode('attach::'.$_G['setting']['sitelogo']):'static/image/common/logo.png';}<!--{else}-->static/image/common/logo.png<!--{/if}-->" alt="logo" />
        </div>
        <h2 class="text-center d-sm-none"><!--{if $_G[setting][loginset][title]}-->$_G[setting][loginset][title]<!--{else}-->$_G[setting][sitename]<!--{/if}--></h2>
        <form class="signin-form needs-validation" action="user.php?mod=login&op=logging&action=login&loginsubmit=yes{if !empty($_GET['handlekey'])}&handlekey=$_GET[handlekey]{/if}{if isset($_GET['frommessage'])}&frommessage{/if}&loginhash=$loginhash" method="POST" name="login" id="loginform_$loginhash" role="form" onsubmit="{if $_G['setting']['pwdsafety']}pwmd5('password3_$loginhash');{/if}pwdclear = 1; loginsub('loginform_$loginhash', 'returnmessage_$loginhash');return false;">
--- a/user/login/template/login_single4.htm
+++ b/user/login/template/login_single4.htm
@@ -41,7 +41,7 @@
 <div class="center-vh overflow-auto">
 <div class="card card-shadowed p-5 mb-0 mr-2 ml-2<!--{if $_G[setting][loginset][lwaveanimation]}--> wave wave-animate-slow<!--{/if}-->">
  <div class="text-center mb-3">
-  	<img alt="light year admin" src="<!--{if !$_G['setting']['bbclosed']}-->{eval echo $_G['setting']['sitelogo']?'index.php?mod=io&op=thumbnail&size=small&path='.dzzencode('attach::'.$_G['setting']['sitelogo']):'static/image/common/logo.png';}<!--{else}-->static/image/common/logo.png<!--{/if}-->">
+  	<img alt="light year admin" src="<!--{if !$_G['setting']['bbclosed']}-->{eval echo $_G['setting']['sitelogo']?'index.php?mod=io&op=thumbnail&size=small&original=1&path='.dzzencode('attach::'.$_G['setting']['sitelogo']):'static/image/common/logo.png';}<!--{else}-->static/image/common/logo.png<!--{/if}-->">
 		<h1><!--{if $_G[setting][loginset][title]}-->$_G[setting][loginset][title]<!--{else}-->$_G[setting][sitename]<!--{/if}--></h1>
    <!--{if $_G[setting][loginset][subtitle]}--><p>$_G[setting][loginset][subtitle]</p><!--{/if}-->
 		<p><small>请选择下列用户登录</small></p>
--- a/user/login/template/lostpasswd.htm
+++ b/user/login/template/lostpasswd.htm
@@ -21,7 +21,7 @@
 <div class="center-vh overflow-auto">
 <div class="card card-shadowed p-5 mb-0 mr-2 ml-2<!--{if $_G[setting][loginset][lwaveanimation]}--> wave wave-animate-slow<!--{/if}-->" id="lostpw_container_$loginhash" tabindex="-1" role="dialog" aria-labelledby="myModalLabel" aria-hidden="true">
  <div class="text-center mb-3">
-		<img alt="light year admin" src="<!--{if !$_G['setting']['bbclosed']}-->{eval echo $_G['setting']['sitelogo']?'index.php?mod=io&op=thumbnail&size=small&path='.dzzencode('attach::'.$_G['setting']['sitelogo']):'static/image/common/logo.png';}<!--{else}-->static/image/common/logo.png<!--{/if}-->" style="max-height: 60px;">
+		<img alt="light year admin" src="<!--{if !$_G['setting']['bbclosed']}-->{eval echo $_G['setting']['sitelogo']?'index.php?mod=io&op=thumbnail&size=small&original=1&path='.dzzencode('attach::'.$_G['setting']['sitelogo']):'static/image/common/logo.png';}<!--{else}-->static/image/common/logo.png<!--{/if}-->" style="max-height: 60px;">
 		<h1>{lang getpassword}</h1>
  </div>
 	<!--{if !empty($_GET['inajax'])}--><button type="button" class="close" data-bs-dismiss="modal" aria-hidden="true">×</button><!--{/if}-->
--- a/user/login/template/lostpasswd2.htm
+++ b/user/login/template/lostpasswd2.htm
@@ -36,7 +36,7 @@
  <div class="col-md-6 col-lg-5 col-xl-4 align-self-center" style="background-color: <!--{if $_G['setting']['loginset']['kbcolor']}-->$_G['setting']['loginset']['kbcolor']<!--{else}-->#fff<!--{/if}-->;height: 100%;display: flex;align-items: center;justify-content: center;">
    <div class="p-5">
      <div class="text-center">
-        <img alt="light year admin" src="<!--{if !$_G['setting']['bbclosed']}-->{eval echo $_G['setting']['sitelogo']?'index.php?mod=io&op=thumbnail&size=small&path='.dzzencode('attach::'.$_G['setting']['sitelogo']):'static/image/common/logo.png';}<!--{else}-->static/image/common/logo.png<!--{/if}-->">
+        <img alt="light year admin" src="<!--{if !$_G['setting']['bbclosed']}-->{eval echo $_G['setting']['sitelogo']?'index.php?mod=io&op=thumbnail&size=small&original=1&path='.dzzencode('attach::'.$_G['setting']['sitelogo']):'static/image/common/logo.png';}<!--{else}-->static/image/common/logo.png<!--{/if}-->">
      </div>
      <h2 class="text-center">{lang getpassword}</h2>
 			<div class="Mbody">
--- a/user/login/template/lostpasswd3.htm
+++ b/user/login/template/lostpasswd3.htm
@@ -57,7 +57,7 @@
    <div class="flex-box login-box" id="lostpw_container_$loginhash">
        <div class="login-left p-5">
          <div class="text-center mb-3 d-sm-none">
-            <img src="<!--{if !$_G['setting']['bbclosed']}-->{eval echo $_G['setting']['sitelogo']?'index.php?mod=io&op=thumbnail&size=small&path='.dzzencode('attach::'.$_G['setting']['sitelogo']):'static/image/common/logo.png';}<!--{else}-->static/image/common/logo.png<!--{/if}-->" alt="logo" />
+            <img src="<!--{if !$_G['setting']['bbclosed']}-->{eval echo $_G['setting']['sitelogo']?'index.php?mod=io&op=thumbnail&size=small&original=1&path='.dzzencode('attach::'.$_G['setting']['sitelogo']):'static/image/common/logo.png';}<!--{else}-->static/image/common/logo.png<!--{/if}-->" alt="logo" />
          </div>
          <h2 class="text-center">{lang getpassword}</h2>
          <div class="Mbody">
--- a/user/register/template/register.htm
+++ b/user/register/template/register.htm
@@ -42,7 +42,7 @@
 <div class="center-vh overflow-auto">
 <div class="card card-shadowed p-5 mb-0 mr-2 ml-2<!--{if $_G[setting][loginset][lwaveanimation]}--> wave wave-animate-slow<!--{/if}-->" id="register_form">
  <div class="text-center mb-3">
-		<img alt="light year admin" src="{eval echo $_G['setting']['sitelogo']?'index.php?mod=io&op=thumbnail&size=small&path='.dzzencode('attach::'.$_G['setting']['sitelogo']):'static/image/common/logo.png';}" style="max-height: 60px;">
+		<img alt="light year admin" src="{eval echo $_G['setting']['sitelogo']?'index.php?mod=io&op=thumbnail&size=small&original=1&path='.dzzencode('attach::'.$_G['setting']['sitelogo']):'static/image/common/logo.png';}" style="max-height: 60px;">
 		<h1>{lang register_welcome_tip}</h1>
  </div>
  <form action="{MOD_URL}" method="post" class="signin-form needs-validation" name="registerform" id="registerform" role="form" enctype="multipart/form-data" onsubmit="check_submit(this);return false">
--- a/user/register/template/register2.htm
+++ b/user/register/template/register2.htm
@@ -19,7 +19,7 @@
  <div class="col-md-6 col-lg-5 col-xl-4 align-self-center" style="background-color: <!--{if $_G['setting']['loginset']['kbcolor']}-->$_G['setting']['loginset']['kbcolor']<!--{else}-->#fff<!--{/if}-->;height: 100%;display: flex;align-items: center;justify-content: center;">
    <div class="p-5">
      <div class="text-center">
-        <img alt="light year admin" src="<!--{if !$_G['setting']['bbclosed']}-->{eval echo $_G['setting']['sitelogo']?'index.php?mod=io&op=thumbnail&size=small&path='.dzzencode('attach::'.$_G['setting']['sitelogo']):'static/image/common/logo.png';}<!--{else}-->static/image/common/logo.png<!--{/if}-->">
+        <img alt="light year admin" src="<!--{if !$_G['setting']['bbclosed']}-->{eval echo $_G['setting']['sitelogo']?'index.php?mod=io&op=thumbnail&size=small&original=1&path='.dzzencode('attach::'.$_G['setting']['sitelogo']):'static/image/common/logo.png';}<!--{else}-->static/image/common/logo.png<!--{/if}-->">
      </div>
      <h2 class="text-center">{lang register_welcome_tip}</h2>
      <form class="signin-form needs-validation" action="{MOD_URL}" method="POST" name="registerform" id="registerform" role="form" enctype="multipart/form-data" onsubmit="check_submit(this);return false">
--- a/user/register/template/register3.htm
+++ b/user/register/template/register3.htm
@@ -55,7 +55,7 @@
    <div class="flex-box login-box">
        <div class="login-left p-5">
          <div class="text-center mb-3 d-sm-none">
-            <img src="<!--{if !$_G['setting']['bbclosed']}-->{eval echo $_G['setting']['sitelogo']?'index.php?mod=io&op=thumbnail&size=small&path='.dzzencode('attach::'.$_G['setting']['sitelogo']):'static/image/common/logo.png';}<!--{else}-->static/image/common/logo.png<!--{/if}-->" alt="logo" />
+            <img src="<!--{if !$_G['setting']['bbclosed']}-->{eval echo $_G['setting']['sitelogo']?'index.php?mod=io&op=thumbnail&size=small&original=1&path='.dzzencode('attach::'.$_G['setting']['sitelogo']):'static/image/common/logo.png';}<!--{else}-->static/image/common/logo.png<!--{/if}-->" alt="logo" />
          </div>
          <h2 class="text-center">{lang register_welcome_tip}</h2>
          <form class="signin-form needs-validation"  action="{MOD_URL}" method="POST" name="registerform" id="registerform" role="form" enctype="multipart/form-data" onsubmit="check_submit(this);return false">
--- a/user/register/template/register_brand.htm
+++ b/user/register/template/register_brand.htm
@@ -1,5 +1,5 @@
 
 <div class="brand"> 
- 	<img src="<!--{if !$_G['setting']['bbclosed']}-->{eval echo $_G['setting']['sitelogo']?'index.php?mod=io&op=thumbnail&size=small&path='.dzzencode('attach::'.$_G['setting']['sitelogo']):'static/image/common/logo.png';}<!--{else}-->static/image/common/logo.png<!--{/if}-->">
+ 	<img src="<!--{if !$_G['setting']['bbclosed']}-->{eval echo $_G['setting']['sitelogo']?'index.php?mod=io&op=thumbnail&size=small&original=1&path='.dzzencode('attach::'.$_G['setting']['sitelogo']):'static/image/common/logo.png';}<!--{else}-->static/image/common/logo.png<!--{/if}-->">
 	<div class="main-title">{lang register_welcome_tip}</div>
 </div>