-
Notifications
You must be signed in to change notification settings - Fork 0
/
Copy pathexam.php
206 lines (178 loc) · 8.11 KB
/
exam.php
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
<?php
// 包含数据库配置文件
require_once 'config.php';
require_once './vendor/autoload.php';
use FluxSoft\Turnstile\Turnstile;
if (CLOSED) {
} else {
$turnstileResponse = $_POST['cf-turnstile-response'];
if (empty($turnstileResponse)) {
echo "入站考试系统使用 Cloudflare Turnstile 验证码，而你提交的信息表单中缺少用于服务器端验证的值。";
echo "这表明你在填写基本信息时 Turnstile 验证框未正常加载，或者浏览器因不支持 JavaScript 或版本太过老旧而不支持 Turnstile。";
echo "为了更好的体验，请尝试重新填写基本信息，或者更换浏览器。";
exit;
}
$secretKey = CF_TURNSTILE_SECRET;
$turnstile = new Turnstile($secretKey);
$verifyResponse = $turnstile->verify($_POST['cf-turnstile-response'], $_SERVER['REMOTE_ADDR']);
try {
$db = new PDO("mysql:host=" . DB_HOST . ";dbname=" . DB_NAME, DB_USER, DB_PASS);
$db->setAttribute(PDO::ATTR_ERRMODE, PDO::ERRMODE_EXCEPTION);
} catch (PDOException $e) {
die("Connection failed: " . $e->getMessage());
}
if ($verifyResponse->success) {
// Turnstile 验证成功
} else {
if ($verifyResponse->hasErrors()) {
foreach ($verifyResponse->errorCodes as $errorCode) {
echo 'Turnstile 服务器端验证失败：' . $errorCode;
echo '如果问题依旧存在，你可能需要通过管理邮箱联系我们或者向源代码仓库创建 Issues 以报告此问题。';
exit;
}
} else {
echo 'Turnstile 服务器端验证失败，但类型未知。';
echo '如果问题依旧存在，你可能需要通过管理邮箱联系我们或者向源代码仓库创建 Issues 以报告此问题。';
exit;
}
}
if ($_SERVER["REQUEST_METHOD"] == "POST") {
$username = $_POST['username'];
$email = $_POST['email'];
// 检查电子邮件是否已存在于 users 表中
$stmt = $db->prepare("SELECT id FROM `users` WHERE `email` = ?");
$stmt->execute([$email]);
$existingUser = $stmt->fetch(PDO::FETCH_ASSOC);
if ($existingUser) {
// 如果电子邮件已存在，则使用现有用户的 ID
$userId = $existingUser['id'];
} else {
// 如果电子邮件不存在，则将用户加入 users 表
$stmt = $db->prepare("INSERT INTO `users` (`username`, `email`) VALUES (?, ?)");
$stmt->execute([$username, $email]);
// 获取最新用户的 ID
$stmt = $db->prepare("SELECT id FROM `users` WHERE `email` = ?");
$stmt->execute([$email]);
$newUser = $stmt->fetch(PDO::FETCH_ASSOC);
if (!$newUser) {
die('错误：用户信息未找到。请立即通过管理邮箱报告此问题。');
}
$userId = $newUser['id'];
}
// 更新用户开始时间
$stmt = $db->prepare("UPDATE `users` SET `start_time` = NOW() WHERE `id` = ?");
$stmt->execute([$userId]);
// 仅执行一次
$stmt->closeCursor();
}
// 从 users 表中获取用户信息
$stmt = $db->prepare("SELECT * FROM `users` WHERE `id` = ?");
$stmt->execute([$userId]);
$user = $stmt->fetch(PDO::FETCH_ASSOC);
// 确保至少有一条记录
if (!$user) {
die('错误：用户信息未找到。请立即通过管理邮箱报告此问题。');
}
// 获取问题列表
$stmt = $db->prepare("SELECT * FROM questions");
$stmt->execute();
$questions = $stmt->fetchAll(PDO::FETCH_ASSOC);
// 开始HTML输出
}
?>
<!DOCTYPE html>
<html lang="zh-CN">
<head>
<meta charset="UTF-8">
<title>答卷 - 十八桥社区入站测试系统</title>
<link rel="stylesheet" href="./vendor/twbs/bootstrap/dist/css/bootstrap.min.css">
<script>
function startTimer(duration, display) {
var timer = duration,
minutes, seconds;
setInterval(function() {
minutes = parseInt(timer / 60, 10);
seconds = parseInt(timer % 60, 10);
minutes = minutes < 10 ? "0" + minutes : minutes;
seconds = seconds < 10 ? "0" + seconds : seconds;
display.textContent = minutes + ":" + seconds;
if (--timer < 0) {
document.getElementById("examForm").submit();
}
}, 1000);
}
window.onload = function() {
var duration = 70 * 60, // 70 minutes
display = document.querySelector('#timer');
startTimer(duration, display);
};
</script>
</head>
<?php
include './views/nav.php';
if (CLOSED) {
echo '<div class="alert alert-warning" role="alert">测试通道已关闭。更多详情请查看社区网站和联邦宇宙官宣账号。</div>';
include './views/footer.php';
exit;
} else {
}
?>
<h2>答卷 <span class="badge badge-secondary" id="timer"></span></h2>
<table class="table table-bordered">
<thead>
<tr>
<th scope="col">用户 ID</th>
<th scope="col">登记用户名</th>
<th scope="col">电子邮件地址</th>
</tr>
</thead>
<tbody>
<tr>
<th scope="row"><?php echo htmlspecialchars(isset($user['id']) ? $user['id'] : '错误：数据库返回了空值。请立即停止测试并通过管理邮箱报告此问题。', ENT_QUOTES, 'UTF-8'); ?></th>
<td><?php echo htmlspecialchars(isset($user['username']) ? $user['username'] : '错误：数据库返回了空值。请立即停止测试并通过管理邮箱报告此问题。', ENT_QUOTES, 'UTF-8'); ?></td>
<td><?php echo htmlspecialchars(isset($user['email']) ? $user['email'] : '错误：数据库返回了空值。请立即停止测试并通过管理邮箱报告此问题。', ENT_QUOTES, 'UTF-8'); ?></td>
</tr>
</tbody>
</table>
<form id="examForm" action="result.php" method="post">
<?php
foreach ($questions as $question) {
echo '
<div class="card mb-3">
<div class="card-body">
<h5 class="card-title">' . htmlspecialchars($question['id']) . '. ' . htmlspecialchars($question['question_text']) . '</h5>';
echo '
<input type="hidden" name="user_id" value="' . htmlspecialchars(isset($user['id']) ? $user['id'] : '', ENT_QUOTES, 'UTF-8') . '">';
if ($question['type'] === 'single') {
echo '
<input type="hidden" name="question_' . htmlspecialchars($question['id']) . '" value="' . htmlspecialchars($question['id']) . '">';
for ($i = 'A'; $i <= 'D'; $i++) {
echo '
<div class="form-check">
<input class="form-check-input" type="radio" name="answer_' . htmlspecialchars($question['id']) . '" value="' . htmlspecialchars($i) . '" id="singleCheck' . htmlspecialchars($question['id']) . '_' . htmlspecialchars($i) . '">
<label class="form-check-label" for="singleCheck' . htmlspecialchars($question['id']) . '_' . htmlspecialchars($i) . '">
' . htmlspecialchars($i) . '. ' . htmlspecialchars($question['option_' . strtolower($i)]) . '
</label>
</div>';
}
} else { // multiple
echo '
<input type="hidden" name="question_' . htmlspecialchars($question['id']) . '" value="' . htmlspecialchars($question['id']) . '">';
for ($i = 'A'; $i <= 'D'; $i++) {
echo '
<div class="form-check">
<input class="form-check-input" type="checkbox" name="answer_' . htmlspecialchars($question['id']) . '[]" value="' . htmlspecialchars($i) . '" id="multipleCheck' . htmlspecialchars($question['id']) . '_' . htmlspecialchars($i) . '">
<label class="form-check-label" for="multipleCheck' . htmlspecialchars($question['id']) . '_' . htmlspecialchars($i) . '">
' . htmlspecialchars($i) . '. ' . htmlspecialchars($question['option_' . strtolower($i)]) . '
</label>
</div>';
}
}
echo '
</div>
</div>';
}
?>
<button type="submit" class="btn btn-primary">提交</button>
</form>
<?php include './views/footer.php'; ?>