虚拟备案系统搭建

继萌ICP备案之后，一直想搞一个自己的备案系统。今天，终于完成了！

地址：https://icp.mcenahle.net

警告：以下代码经晚夜的个人博客和本人查证，存在一处严重漏洞，不建议继续使用。转到 https://blog.mcenahle.com/2024/07/19/85.html 以下载修复版。

搭建方法：

一、数据库和表

CREATE DATABASE record_system;

USE record_system;

CREATE TABLE records (
    id INT AUTO_INCREMENT PRIMARY KEY,
    site_name VARCHAR(255) NOT NULL,
    email VARCHAR(255) NOT NULL,
    url VARCHAR(255) NOT NULL,
    site_description TEXT,
    status VARCHAR(50) DEFAULT 'pending',
    created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP
);

CREATE TABLE admin_users (
    id INT AUTO_INCREMENT PRIMARY KEY,
    username VARCHAR(50) NOT NULL,
    password VARCHAR(255) NOT NULL
);
    INSERT INTO admin_users (username, password) VALUES ('admin', 'admin123');

注意，上面的“admin”和“admin123”是后期登录管理系统的用户名和密码。

二、申请备案页面（record_form.html）

<!DOCTYPE html>
<html lang="en">
<head>
    <meta charset="UTF-8">
    <title>申请备案</title>
</head>
<body>
    <h1>申请备案</h1>
    <form action="submit_record.php" method="post">
        <label for="site_name">网站名:</label>
        <input type="text" id="site_name" name="site_name" required><br><br>
        <label for="email">邮箱:</label>
        <input type="email" id="email" name="email" required><br><br>
        <label for="url">网址:</label>
        <input type="url" id="url" name="url" required><br><br>
        <label for="site_description">网站描述:</label>
        <textarea id="site_description" name="site_description" required></textarea><br><br>
        <input type="submit" value="提交">
    </form>
</body>
</html>

三、处理表单提交（submit_record.php）

<?php
$servername = "localhost";
$username = "root";
$password = "";
$dbname = "record_system";

$conn = new mysqli($servername, $username, $password, $dbname);

if ($conn->connect_error) {
    die("连接失败: " . $conn->connect_error);
}

$site_name = $_POST['site_name'];
$email = $_POST['email'];
$url = $_POST['url'];
$site_description = $_POST['site_description'];

$sql = "INSERT INTO records (site_name, email, url, site_description)
VALUES ('$site_name', '$email', '$url', '$site_description')";

if ($conn->query($sql) === TRUE) {
    echo "备案申请提交成功!";
} else {
    echo "提交失败: " . $conn->error;
}

$conn->close();
?>

四、管理员登录页面（admin_login.html）

<!DOCTYPE html>
<html lang="en">
<head>
    <meta charset="UTF-8">
    <title>管理员登录</title>
</head>
<body>
    <h1>管理员登录</h1>
    <form action="admin_login.php" method="post">
        <label for="username">用户名:</label>
        <input type="text" id="username" name="username" required><br><br>
        <label for="password">密码:</label>
        <input type="password" id="password" name="password" required><br><br>
        <input type="submit" value="登录">
    </form>
</body>
</html>

五、处理管理员登录请求（admin_login.php）

<?php
session_start();

$servername = "localhost";
$username = "root";
$password = "";
$dbname = "record_system";

$conn = new mysqli($servername, $username, $password, $dbname);

if ($conn->connect_error) {
    die("连接失败: " . $conn->connect_error);
}

$username = $_POST['username'];
$password = $_POST['password'];

$sql = "SELECT * FROM admin_users WHERE username='$username' AND password='$password'";
$result = $conn->query($sql);

if ($result->num_rows > 0) {
    $_SESSION['loggedin'] = true;
    header("Location: admin_dashboard.php");
} else {
    echo "用户名或密码错误";
}

$conn->close();
?>

六、管理后台页面（admin_dashboard.php）

<?php
session_start();
if (!isset($_SESSION['loggedin']) || $_SESSION['loggedin'] !== true) {
    header("Location: admin_login.html");
    exit;
}

$servername = "localhost";
$username = "root";
$password = "";
$dbname = "record_system";

$conn = new mysqli($servername, $username, $password, $dbname);

if ($conn->connect_error) {
    die("连接失败: " . $conn->connect_error);
}

$sql = "SELECT * FROM records";
$result = $conn->query($sql);
?>

<!DOCTYPE html>
<html lang="en">
<head>
    <meta charset="UTF-8">
    <title>管理后台</title>
</head>
<body>
    <h1>管理后台</h1>
    <table border="1">
        <tr>
            <th>ID</th>
            <th>网站名</th>
            <th>邮箱</th>
            <th>网址</th>
            <th>网站描述</th>
            <th>状态</th>
            <th>创建时间</th>
            <th>操作</th>
        </tr>
        <?php
        if ($result->num_rows > 0) {
            while ($row = $result->fetch_assoc()) {
                echo "<tr>";
                echo "<td>" . $row['id'] . "</td>";
                echo "<td>" . $row['site_name'] . "</td>";
                echo "<td>" . $row['email'] . "</td>";
                echo "<td>" . $row['url'] . "</td>";
                echo "<td>" . $row['site_description'] . "</td>";
                echo "<td>" . $row['status'] . "</td>";
                echo "<td>" . $row['created_at'] . "</td>";
                echo "<td><a href='update_status.php?id=" . $row['id'] . "'>更新状态</a></td>";
                echo "</tr>";
            }
        } else {
            echo "<tr><td colspan='8'>暂无数据</td></tr>";
        }
        ?>
    </table>
</body>
</html>

<?php
$conn->close();
?>

七、更新备案状态（update_status.php）

<?php
session_start();
if (!isset($_SESSION['loggedin']) || $_SESSION['loggedin'] !== true) {
    header("Location: admin_login.html");
    exit;
}

$servername = "localhost";
$username = "root";
$password = "";
$dbname = "record_system";

$conn = new mysqli($servername, $username, $password, $dbname);

if ($conn->connect_error) {
    die("连接失败: " . $conn->connect_error);
}

$id = $_GET['id'];

$sql = "UPDATE records SET status='approved' WHERE id='$id'";

if ($conn->query($sql) === TRUE) {
    echo "备案状态更新成功!";
} else {
    echo "更新失败: " . $conn->error;
}

$conn->close();
?>

八、查询备案页面（query_record.html）

<!DOCTYPE html>
<html lang="en">
<head>
    <meta charset="UTF-8">
    <title>查询备案</title>
</head>
<body>
    <h1>查询备案</h1>
    <form action="query_record.php" method="get">
        <label for="email">邮箱:</label>
        <input type="email" id="email" name="email" required><br><br>
        <input type="submit" value="查询">
    </form>
</body>
</html>

九、处理查询请求（query_record.php）

<?php
$servername = "localhost";
$username = "root";
$password = "";
$dbname = "record_system";

$conn = new mysqli($servername, $username, $password, $dbname);

if ($conn->connect_error) {
    die("连接失败: " . $conn->connect_error);
}

$email = $_GET['email'];

$sql = "SELECT * FROM records WHERE email='$email'";
$result = $conn->query($sql);
?>

<!DOCTYPE html>
<html lang="en">
<head>
    <meta charset="UTF-8">
    <title>查询结果</title>
</head>
<body>
    <h1>查询结果</h1>
    <table border="1">
        <tr>
            <th>ID</th>
            <th>网站名</th>
            <th>网址</th>
            <th>网站描述</th>
            <th>状态</th>
            <th>创建时间</th>
        </tr>
        <?php
        if ($result->num_rows > 0) {
            while ($row = $result->fetch_assoc()) {
                echo "<tr>";
                echo "<td>" . $row['id'] . "</td>";
                echo "<td>" . $row['site_name'] . "</td>";
                echo "<td>" . $row['url'] . "</td>";
                echo "<td>" . $row['site_description'] . "</td>";
                echo "<td>" . $row['status'] . "</td>";
                echo "<td>" . $row['created_at'] . "</td>";
                echo "</tr>";
            }
        } else {
            echo "<tr><td colspan='6'>暂无数据</td></tr>";
        }
        ?>
    </table>
</body>
</html>

<?php
$conn->close();
?>