帝国CMS快速重置后台密码

<?php
/*
 * @Author: yumusb
 * @Date: 2019-06-17 09:22:50
 * @LastEditors: yumusb
 * @LastEditTime: 2019-06-17 09:22:52
 * @Description: 直接放到帝国CMS根目录运行即可
 */

define('EmpireCMSAdmin', '1');

if (!file_exists('./e/class/connect.php')) {
	exit("Please PUt THis File into The EmpireCMS's root dir !!");
}
require("./e/class/connect.php");
require("./e/class/db_sql.php");
$link = db_connect();
$empire = new mysqlquery();

function ReturnHLoginQuestionStr($userid, $question, $answer)
{
	$pass = md5(md5('-#20empire27#-' . $question . '-empirecms-' . $userid . '-www.phome.net-' . $answer . '-wm-') . '-dg2002-' . $answer . '-wm_chief-' . $userid . '-wangmeng-');
	return $pass;
}
function DoEmpireCMSAdminPassword($password, $salt, $salt2)
{
	$pw = md5($salt2 . 'E!m^p-i(r#e.C:M?S' . md5(md5($password) . $salt) . 'd)i.g^o-d' . $salt);
	return $pw;
}
/*编辑密码*/
function EditPassword($username, $password)
{
	global $empire, $dbtbpre, $gr;
	$a = '';
	$salt = make_password(8);
	$salt2 = make_password(20);
	$password1 = DoEmpireCMSAdminPassword($password, $salt, $salt2);
	$a = "password='$password1',salt='$salt',salt2='$salt2'";

	$sql = $empire->query("update {$dbtbpre}enewsuser set " . $a . " where username='$username'");
	if ($sql) {
		echo "{$username}的密码已经修改{$password}";
	}
}
/*重新设置安全密码*/
function EditQuestion($userid, $question, $answer)
{
	global $empire, $dbtbpre;
	if (!is_numeric($userid) || !is_numeric($userid)) {
		exit("userid and question must be `int` ");
	}
	$answerstr = ReturnHLoginQuestionStr($userid, $question, $answer);
	$a = "equestion='$question',eanswer='$answerstr'";
	$sql = $empire->query("update {$dbtbpre}enewsuseradd set " . $a . " where userid=$userid");
	if ($sql) {
		echo "用户ID{$userid}的安全问题已经修改为: (问题:{$question} 对应答案{$answer} 对应答案密文{$answerstr}";
	}
}
/*删除安全密码*/
function DelQuestion($userid)
{
	global $empire, $dbtbpre;
	if (!is_numeric($userid)) {
		exit("userid must be `int`");
	}
	$sql = $empire->query("update {$dbtbpre}enewsuseradd set equestion=0,eanswer=null WHERE userid=$userid");
	if ($sql) {
		echo "用户ID{$userid}的安全密码已经删除";
	}
}
//EditPassword("admin","admin");
//EditQuestion("1","4","0");
DelQuestion("x");