修复bug

controllers/cms.py

@@ -133,7 +133,10 @@ class CMS:
             # print(play_url)
             if self.play_parse:
                 # self.play_url = play_url + self.vod + '?play_url='
-                self.play_url = f'{play_url}{self.vod}?rule={self.id}&ext={ext}&play_url='
+                js0_password = self.lsg.getItem('JS0_PASSWORD')
+                # print(f'js0密码:{js0_password}')
+                js0_password = f'pwd={js0_password}&' if js0_password else ''
+                self.play_url = f'{play_url}{self.vod}?{js0_password}rule={self.id}&ext={ext}&play_url='
                 # logger.info(f'cms重定向链接:{self.play_url}')
             else:
                 self.play_url = ''

controllers/home.py

@@ -156,9 +156,12 @@ def get_lives():
     # ?path=base/live.txt
     path = getParmas('path')
     live_path = path or 'base/直播.txt'
+    if not re.search('(txt|json|conf)$',live_path,re.M|re.S) or not re.search('^(txt|base)',live_path,re.M|re.S):
+        abort(403)
     if not os.path.exists(live_path):
-        with open(live_path,mode='w+',encoding='utf-8') as f:
-            f.write('')
+        # with open(live_path,mode='w+',encoding='utf-8') as f:
+        #     f.write('')
+        return ''
 
     with open(live_path,encoding='utf-8') as f:
         live_text = f.read()

jiexi/江湖.js

-realUrl = 重定向('http://211.99.99.236:4567/jhjson/ceshi.php?url='+vipUrl)
\ No newline at end of file
+// realUrl = 重定向('http://211.99.99.236:4567/jhjson/ceshi.php?url='+vipUrl);
+let jxUrl = 'http://211.99.99.236:4567/jhjson/ceshi.php?url=';
+fetch_params.headers.Referer = jxUrl;
+try {
+    // realUrl = null;
+    let html = request(jxUrl+vipUrl);
+    // log(html);
+    realUrl = jsp.pjfh(html,'$..url');
+    log('解析到真实播放地址:'+realUrl);
+}catch (e) {
+    log('解析发生错误:'+e.message);
+    realUrl = vipUrl;
+}
\ No newline at end of file

js/version.txt

-3.9.18beta3
\ No newline at end of file
+3.9.18beta4
\ No newline at end of file

js/在线189.jsd

+var rule = {
+    title:'在线189',
+    host:'https://www.zx189.com',
+    // homeUrl:'/',
+    url:'/vodtype/fyclass-fypage.html',
+    headers:{
+        'User-Agent':'MOBILE_UA',
+        "Cookie": "searchneed=ok"
+    },
+    searchUrl:'/vodsearch/**----------fypage---.html',
+    searchable:2,
+    // class_name:'电影&网剧&剧集&动漫&综艺&记录',
+    // class_url:'20&1&2&3&4&23',
+    class_parse:'.stui-header__menu li:gt(0):lt(5);a&&Text;a&&href;/(\\d+).html',
+    play_parse:true,
+    // lazy:'干饭',
+    // lazy:'@js:cacheUrl = d.getParse(input);print(cacheUrl);input=cacheUrl',
+    // lazy:'js:cacheUrl = d.getParse(input);print(cacheUrl);input=cacheUrl',
+    // lazy:'js:cacheUrl=d.getParse(input);if(cacheUrl){input=cacheUrl}else{try{let html=fetch(input,{headers:d.headers,timeout:d.timeout,encoding:d.encoding});let ret=html.match(/var player_(.*?)=(.*?)</)[2];let url=JSON.parse(ret).url;if(url.length>10){real_url="https://player.buyaotou.xyz/?url="+url;d.saveParse(input,real_url);input=real_url}}catch(e){print("网络请求发生错误:"+e.message)}}',
+    lazy:'js:cacheUrl=getParse(input);if(cacheUrl){input=cacheUrl}else{try{let html=fetch(input,fetch_params);let ret=html.match(/var player_(.*?)=(.*?)</)[2];let url=JSON.parse(ret).url;if(url.length>10){real_url="https://player.buyaotou.xyz/?url="+url;saveParse(input,real_url);input=real_url}}catch(e){print("网络请求发生错误:"+e.message)}}',
+    limit:5,
+    推荐:'ul.stui-vodlist.clearfix;li;a&&title;.lazyload&&data-original;.pic-text.text-right&&Text;a&&href',
+    double:true, // 推荐内容是否双层定位
+    一级:'body .stui-vodlist__box;a&&title;.lazyload&&data-original;.pic-text.text-right&&Text;a&&href',
+    二级:{"title":"h1.title&&Text;.stui-content__detail p:eq(1)&&Text","img":".lazyload&&data-original","desc":".stui-content__detail p:eq(-3)&&Text;.stui-content__detail p:eq(-2)&&Text","content":".stui-content__detail p.detail&&Text","tabs":".stui-pannel__head ul li","lists":".stui-content__playlist:eq(#id) li"},
+    // 搜索:'body .module-item;.module-card-item-title&&Text;.lazyload&&data-original;.module-item-note&&Text;a&&href;.module-info-item-content&&Text',
+}

readme.md

@@ -47,6 +47,8 @@
 [dockerfile教程](https://blog.csdn.net/qq_46158060/article/details/125718218)   
 [获取本地设备信息](https://blog.csdn.net/cui_yonghua/article/details/125508991)   
 [获取本地设备信息](https://m.jb51.net/article/140716.htm)
+###### 2022/10/30
+- [X] 3.9.18beta4 修复lives?path=接口漏洞,修复js0设置密码后播放解析没自动带密码Bug
 ###### 2022/10/28
 - [X] 3.9.18beta1 未来功能排序优化,设置中心增加js0防盗用和禁用功能
 ###### 2022/10/27