jeremy/mrbs-equbao-2026
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

MRBS 1.12.2 等保2.0二级整改完整提交
Docker image / push (push) Canceled after 0s
Details

Browse Source 
包含：登录失败锁定、90天密码有效期、30分钟会话超时、
强制改密、登录审计日志、屏幕水印、企业背景图、
备案信息固定底部、favicon、登录页JS修复等全部改动
This commit is contained in:
人事系统开发
2026-09-08 21:19:47 +08:00
commit 48092cab42
2221 changed files with 659586 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
web/Themes/classic126/styling.inc
+118
View File
@@ -0,0 +1,118 @@
<?php
namespace MRBS;
// CLASSIC MRBS 1.2.6 THEME
// ***** COLOURS ************************
// Colours used in MRBS. All the colours are defined here as PHP variables
$body_background_color = "#ffffed"; // 主体的背景色
$standard_font_color = "black"; // 默认字体颜色
$header_font_color = "#ffffff"; // 页眉中文本的字体颜色
$highlight_font_color = "red"; // 用于突出显示文本（如链接、错误）
$color_key_font_color = "#5B69A6"; // 用于颜色键表
$banner_back_color = "#c0e0ff"; // 横幅的背景色
$banner_border_color = "#5B69A6"; // 横幅的边框颜色
$banner_font_color = $banner_border_color; // 横幅的字体颜色
$header_back_color = "#999999"; // 页眉的背景色
$admin_table_header_back_color = $header_back_color; // 页眉的背景颜色以及表格单元格的边框颜色
$admin_table_header_sep_color = $body_background_color; // vertical separator colour in header
$admin_table_header_font_color = $header_font_color; // 页眉的字体颜色
$admin_table_border_color = "#C3CCD3";
$main_table_border_color = "#dddddd"; // 日/周/月表格的边框颜色-外部
$main_table_header_border_color = "#dddddd"; // 日/周/月表格的边框颜色-标题
$main_table_body_h_border_color = "#ffffff"; // 日/周/月表格的边框颜色-正文，水平
$main_table_body_v_border_color = "#e4e4e4"; // 日/周/月表格的边框颜色-正文，垂直
$main_table_month_color = "#ffffff"; // 月份视图中日期的背景色
$main_table_month_weekend_color = "#f4f4f4"; // 月视图中周末的背景色
$main_table_month_holiday_color = "#e8e8e8"; // 月份视图中假日的背景色
$main_table_month_weekend_holiday_color = "#dfdfdf"; // 月份视图中周末假期的背景色
$main_table_month_invalid_color = "#d0d0d0"; // 月份视图中无效日期的背景色
$main_table_slot_invalid_color = "#d1d9de"; // 日视图和周视图中无效时段的背景色
$main_table_slot_private_type_color = "#d1d9de"; // 字体必须保密时的背景色
$main_table_labels_back_color = "#fff0f0"; // 行标签列的背景色
$timeline_color = $header_back_color;
// 打印时主表的边框颜色。这些由mrbs-print.css.php使用
$main_table_border_color_print = "#dddddd"; // 主表的边框颜色（打印视图）
$main_table_header_border_color_print = "#dddddd"; // 日/周/月表格的边框颜色-页眉（打印视图）
$main_table_body_h_border_color_print = "#dddddd"; // 日/周/月表格的边框颜色-正文，水平（打印视图）
$main_table_body_v_border_color_print = "#dddddd"; // 日/周/月表格的边框颜色-正文，垂直（打印视图）
$report_table_border_color = $standard_font_color;
$report_h2_border_color = $banner_back_color; // report.php中<h2>的边框颜色
$report_h3_border_color = "#879AA8"; // report.php中<h2>的边框颜色
$search_table_border_color = $standard_font_color;
$site_faq_entry_border_color = "#C3CCD3"; // 用于分离help.php中的各个常见问题
$anchor_link_color = "#5B69A6"; // 链接颜色
$anchor_visited_color = "#5B69A6"; // 链接颜色（已访问）
$anchor_hover_color = "red"; // 链接颜色（悬停）
$anchor_link_color_banner = $anchor_link_color; // link color
$anchor_visited_color_banner = $anchor_visited_color; // link color (visited)
$anchor_hover_color_banner = $anchor_hover_color; // link color (hover)
$anchor_link_color_header = $anchor_link_color; // link color
$anchor_visited_color_header = $anchor_visited_color; // link color (visited)
$anchor_hover_color_header = $anchor_hover_color; // link color (hover)
$column_hidden_color = $main_table_month_invalid_color; // hidden days in the week and month views
$calendar_hidden_color = "#dae0e4"; // 迷你卡中隐藏的日子
$row_highlight_color = "#ffc0da"; // 用于突出显示一行
$row_even_color = "#ffffff"; // 日视图和周视图中的偶数行
$row_odd_color = "#eeeeee"; // 日视图和周视图中的奇数行
$row_even_color_weekend = "#f4f4f4"; // 周末的日视图和周视图中的偶数行
$row_odd_color_weekend = "#e4e4e4"; // 周末的日视图和周视图中的奇数行
$row_even_color_holiday = "#e8e8e8"; // 假日的日视图和周视图中的偶数行
$row_odd_color_holiday = "#d8d8d8"; // 假日的日视图和周视图中的奇数行
$row_even_color_weekend_holiday = "#dfdfdf"; // 周末假期的日视图和周视图中的偶数行
$row_odd_color_weekend_holiday = "#cfcfcf"; // 周末假期的日视图和周视图中的奇数行
$zebra_even_color = "#ffffff"; // 其他表中偶数行的颜色（例如搜索、报告和用户）
$zebra_odd_color = '#e2e4ff'; // 其他表中偶数行的颜色（例如搜索、报告和用户）
$help_highlight_color = "#ffe6f0"; // 突出显示帮助页面上的文本
// Button colours
$button_color_stops = array('#eeeeee', '#cccccc'); // 线性渐变色光圈
$button_inset_color = '#a7c7e6';
// 这些颜色主要用于区分不同类型的预订
// 在日、周和月视图中显示
$color_types = array(
'A' => "#FFCCFF",
'B' => "#99CCCC",
'C' => "#FF9999",
'D' => "#FFFF99",
'E' => "#C0E0FF",
'F' => "#FFCC99",
'G' => "#FF6666",
'H' => "#66FFFF",
'I' => "#DDFFDD",
'J' => "#CCCCCC");
// 用于pending.php和等待批准的预订的颜色
$outstanding_color = "#FF4444"; // 标题中未完成预订信息的字体颜色
$pending_header_back_color = $header_back_color; // 系列标题的背景色
$series_entry_back_color = "#FFFBC2"; // 系列中条目的背景色
$pending_control_color = "#FFF36C"; // pending.php中系列+/-控件的背景色
$attention_color = '#FFDFBF'; // 等待批准的预订数量的背景色
// ***** DIMENSIONS *******************
$banner_border_width = '0'; // (px) border width for the outside of the banner
$banner_border_cell_width = '1'; // (px) border width for the cells of the banner
$main_table_border_width = '0'; // (px) the border width for the outside of the main day/week/month tables
$main_table_cell_border_width = '1'; // (px) the border width for the cells of the main day/week/month tables
$main_cell_height = '1.5em'; // height of the cells in the main day/week tables
// ***** FONTS ************************
$standard_font_family = "Arial, 'Arial Unicode MS', Verdana, sans-serif";
web/Themes/default/footer.inc
+47
View File
@@ -0,0 +1,47 @@
<?php
declare(strict_types=1);
namespace MRBS;
function print_theme_footer()
{
// 等保整改（2026-09-08）：备案信息固定显示在页面底部
$beian_number = "蜀ICP备2023013112号-1";
$beian_url = "https://beian.miit.gov.cn/";
$gongan_icon = "/img/gongan.png";
$gongan_number = "川公网安备51050402000368号";
$gongan_url = "https://www.beian.gov.cn/portal/registerSystemInfo?recordcode=51050402000368";
$copyright = "&#169; 2026 泸州龙涧假日酒店";
echo <<<HTML
<style>
.mrbs-footer {
position: fixed;
bottom: 0;
left: 0;
right: 0;
z-index: 1000;
background: rgba(255,255,255,0.92);
border-top: 1px solid #e2e8f0;
text-align: center;
padding: 6px 12px;
font-size: 12px;
color: #64748b;
line-height: 1.6;
}
.mrbs-footer a { color: #64748b; text-decoration: none; }
.mrbs-footer a:hover { text-decoration: underline; }
.mrbs-footer img { border: none; vertical-align: middle; margin: 0 3px; width: 18px; height: 18px; }
</style>
<div class="mrbs-footer">
工信部备案号：<a href="{$beian_url}" target="_blank">{$beian_number}</a>
&nbsp;|&nbsp;
公安网安备案号：<img src="{$gongan_icon}" alt="公安备案图标"> <a href="{$gongan_url}" target="_blank">{$gongan_number}</a>
&nbsp;|&nbsp;
{$copyright}
</div>
HTML;
echo "</div>\n"; // closing the contents div, opened in print_theme_header()
echo "</body>\n";
echo "</html>\n";
}
web/Themes/default/header.inc
+741
View File
@@ -0,0 +1,741 @@
<?php
declare(strict_types=1);
namespace MRBS;
use chillerlan\QRCode\QRCode;
use chillerlan\QRCode\QROptions;
use MRBS\Form\ElementInputDate;
use MRBS\Form\ElementInputSearch;
use MRBS\Form\ElementInputSubmit;
use MRBS\Form\Form;
function print_head(bool $simple=false) : void
{
global $refresh_rate;
echo "<head>\n";
echo "<meta charset=\"" . Language::MRBS_CHARSET . "\">\n";
// Set IE=edge so that IE10 will display MRBS properly, even if compatibility mode is used
// on the browser. If we don't do this then MRBS will treat IE10 as an unsupported browser
// when compatibility mode is turned on, potentially confusing users who may have forgotten
// that they are using compatibility mode. Unfortunately we can't set IE=edge in the header,
// which is where we would normally do it, because then we won't be able to detect IE9 using
// conditional comments. So we have to do it in a <meta> tag, after the conditional comments
// around the <html> tags.
echo "<meta http-equiv=\"X-UA-Compatible\" content=\"IE=edge\">\n";
// Improve scaling on mobile devices
echo "<meta name=\"viewport\" content=\"width=device-width, initial-scale=1\">\n";
if (!$simple)
{
// Add the CSRF token so that JavaScript can use it
echo "<meta name=\"csrf_token\" content=\"" . escape_html(Form::getToken()) . "\">\n";
}
echo "<meta name=\"robots\" content=\"noindex, nofollow, noarchive\">\n";
if (($refresh_rate != 0) && (this_page(false, '.php') == 'index'))
{
// If we're using JavaScript we'll do the refresh by getting a new
// table using Ajax requests, which means we only have to download
// the table not the whole page each time
echo "<noscript>\n";
echo "<meta http-equiv=\"Refresh\" content=\"$refresh_rate\">\n";
echo "</noscript>\n";
}
echo "<title>" . get_vocab("mrbs") . "</title>\n";
// 等保整改（2026-09-08）：favicon.ico，构造相对于当前脚本的路径
echo "<link rel=\"icon\" href=\"/img/favicon.ico\">\n";
require_once MRBS_ROOT . "/style.inc";
if (!$simple)
{
require_once MRBS_ROOT . "/js.inc";
}
echo "</head>\n";
}
// Print the basic site information. This function is used for all headers, including
// the simple header, and so mustn't require any database access.
function print_header_site_info() : void
{
global $mrbs_company,
$mrbs_company_url,
$mrbs_company_logo,
$mrbs_company_more_info;
// Company logo, with a link to the company
if (!empty($mrbs_company_logo))
{
echo "<div class=\"logo\">\n";
if (!empty($mrbs_company_url))
{
echo '<a href="' . escape_html($mrbs_company_url) . '">';
}
// Suppress error messages in case the logo is a URL, in which case getimagesize() can
// fail for any number of reasons, eg (a) allow_url_fopen is not enabled in php.ini or
// (b) "SSL operation failed with code 1. OpenSSL Error messages: error:1416F086:SSL
// routines:tls_process_server_certificate:certificate verify failed". As the image
// size is not essential we'll just carry on.
$logo_size = @getimagesize($mrbs_company_logo);
echo '<img src="' . $mrbs_company_logo . '"';
echo ' alt="' . escape_html($mrbs_company) . '"';
if (is_array($logo_size))
{
echo ' ' . $logo_size[3];
}
echo '>';
if (!empty($mrbs_company_url))
{
echo "</a>\n";
}
echo "</div>\n";
}
// Company name, any extra company info and MRBS
echo "<div class=\"company\">\n";
if (!empty($mrbs_company_url))
{
echo '<a href="' . escape_html($mrbs_company_url) . '">';
}
echo '<span>' . escape_html($mrbs_company) . '</span>';
if (!empty($mrbs_company_url))
{
echo "</a>\n";
}
if (!empty($mrbs_company_more_info))
{
// Do not put $mrbs_company_more_info through escape_html() as it is
// trusted and allowed to contain HTML.
echo "<span class=\"company_more_info\">$mrbs_company_more_info</span>\n";
}
echo '<a href="' . escape_html(multisite('index.php')) . '">' . get_vocab('mrbs') . "</a>\n";
echo "</div>\n";
}
function print_goto_date(array $context) : void
{
global $multisite, $site;
if (!checkAuthorised('index.php', true))
{
// Don't show the goto box if the user isn't allowed to view the calendar
return;
}
$form = new Form();
$form_id = 'form_nav';
$form->setAttributes(array('id' => $form_id,
'class' => 'js_hidden',
'action' => multisite('index.php')))
->addHiddenInput('view', $context['view']);
if (isset($context['area']))
{
$form->addHiddenInput('area', $context['area']);
}
if (isset($room))
{
$form->addHiddenInput('room', $context['room']);
}
if ($multisite && isset($site) && ($site !== ''))
{
$form->addHiddenInput('site', $site);
}
$input = new ElementInputDate();
// Add the 'navigation' class so that the JavaScript knows it can use hidden days
$input->setAttributes(array(
'name' => 'page_date',
'value' => format_iso_date($context['year'], $context['month'], $context['day']),
'class' => 'navigation',
'aria-label' => get_vocab('goto'),
'required' => true,
'data-submit' => $form_id)
);
$form->addElement($input);
$submit = new ElementInputSubmit();
$submit->setAttribute('value', get_vocab('goto'));
$form->addElement($submit);
$form->render();
}
function print_outstanding(string $query) : void
{
$mrbs_user = session()->getCurrentUser();
if (!isset($mrbs_user))
{
return;
}
// Provide a link to the list of bookings awaiting approval
// (if there are any enabled areas where we require bookings to be approved)
$approval_somewhere = some_area('approval_enabled', TRUE);
if ($approval_somewhere && ($mrbs_user->level > 0))
{
$n_outstanding = get_entries_n_outstanding($mrbs_user);
$class = 'notification';
if ($n_outstanding > 0)
{
$class .= ' attention';
}
$url = 'pending.php';
if ($query !== '')
{
$url .= "?$query";
}
echo '<a href="' . escape_html(multisite($url)) . '"' .
" class=\"$class\"" .
' title="' . get_vocab('outstanding', $n_outstanding) .
"\">$n_outstanding</a>\n";
}
}
function print_menu_items(string $query) : void
{
global $auth, $kiosk_mode_enabled;
$menu_items = array('help' => 'help.php',
'report' => 'report.php',
'import' => 'import.php');
if ($kiosk_mode_enabled)
{
$menu_items['kiosk'] = 'kiosk.php';
}
$menu_items['rooms'] = 'admin.php';
if (auth()->canCreateUsers())
{
$menu_items['user_list'] = 'edit_users.php';
}
// 等保整改：自助修改密码入口（对已登录及未登录用户均显示）
$menu_items['change_password'] = 'change_password.php';
foreach ($menu_items as $token => $page)
{
// Only print menu items for which the user is allowed to access the page
if (checkAuthorised($page, true))
{
$url = $page;
if ($query !== '')
{
$url .= "?$query";
}
echo '<a href="' . escape_html(multisite($url)) . '">' . get_vocab($token) . "</a>\n";
}
}
}
function print_search(array $context) : void
{
if (!checkAuthorised('search.php', true))
{
// Don't show the search box if the user isn't allowed to search
return;
}
echo "<div>\n";
$form = new Form(Form::METHOD_POST);
$form->setAttributes(array(
'id' => 'header_search',
'action' => multisite('search.php'))
)
->addHiddenInputs(array(
'view' => $context['view'],
'year' => $context['year'],
'month' => $context['month'],
'day' => $context['day'],
'from_date' => format_iso_date($context['year'], $context['month'], $context['day'])
)
);
if (!empty($context['area']))
{
$form->addHiddenInput('area', $context['area']);
}
if (!empty($context['room']))
{
$form->addHiddenInput('room', $context['room']);
}
$input = new ElementInputSearch();
$search_vocab = get_vocab('search');
$input->setAttributes(array('name' => 'search_str',
'placeholder' => $search_vocab,
'aria-label' => $search_vocab,
'required' => true));
$form->addElement($input);
$submit = new ElementInputSubmit();
$submit->setAttributes(array('value' => get_vocab('search_button'),
'class' => 'js_none'));
$form->addElement($submit);
$form->render();
echo "</div>\n";
}
// Generate the username link, which gives a report on the user's upcoming bookings.
function print_report_link(User $user) : void
{
// If possible, provide a link to the Report page, otherwise the Search page
// and if that's not possible just print the username with no link. (Note that
// the Search page isn't the perfect solution because it searches for any bookings
// containing the search string, not just those created by the user.)
if (checkAuthorised('report.php', true))
{
$attributes = array('action' => multisite('report.php'));
$hidden_inputs = array('phase' => '2',
'creatormatch' => $user->username);
}
elseif (checkAuthorised('search.php', true))
{
$attributes = array('action' => multisite('search.php'));
$date_now = new DateTime();
$hidden_inputs = array(
'search_str' => $user->username,
'from_date' => $date_now->getISODate()
);
}
else
{
echo '<span>' . escape_html($user->display_name) . '</span>';
return;
}
// We're authorised for either Report or Search so print the form.
$form = new Form(Form::METHOD_POST);
$attributes['id'] = 'show_my_entries';
$form->setAttributes($attributes)
->addHiddenInputs($hidden_inputs);
$submit = new ElementInputSubmit();
$submit->setAttributes(array('title' => get_vocab('show_my_entries'),
'value' => $user->display_name));
$form->addElement($submit);
$form->render();
}
function print_logonoff_button(array $params, string $value) : void
{
$form = new Form($params['method']);
$form->setAttributes(array('action' => $params['action']));
// A Get method will replace the query string in the action URL with a query
// string made up of the hidden inputs. So put any parameters in the action
// query string into hidden inputs.
if ($params['method'] == Form::METHOD_GET)
{
$query_string = parse_url($params['action'], PHP_URL_QUERY);
if (isset($query_string))
{
parse_str($query_string, $query_parameters);
$form->addHiddenInputs($query_parameters);
}
}
// Add the hidden fields
if (isset($params['hidden_inputs']))
{
$form->addHiddenInputs($params['hidden_inputs']);
}
// The submit button
$element = new ElementInputSubmit();
$element->setAttribute('value', $value);
$form->addElement($element);
$form->render();
}
function print_logon() : void
{
if (method_exists(session(), 'getLogonFormParams'))
{
$form_params = session()->getLogonFormParams();
if (isset($form_params))
{
print_logonoff_button($form_params, get_vocab('login'));
}
}
}
function print_logoff() : void
{
if (method_exists(session(), 'getLogoffFormParams'))
{
$form_params = session()->getLogoffFormParams();
if (isset($form_params))
{
print_logonoff_button($form_params, get_vocab('logoff'));
}
}
}
// $context is an associative array indexed by 'view', 'view_all', 'year', 'month', 'day', 'area' and 'room'.
// When $omit_login is true the Login link is omitted.
function print_banner(?array $context, $simple=false, $omit_login=false) : void
{
global $kiosk_QR_code, $auth;
echo '<header class="banner' . (($simple) ? ' simple' : '') . "\">\n";
$vars = array();
if (isset($context['view']))
{
$vars['view'] = $context['view'];
}
if (isset($context['year']) && isset($context['month']) && isset($context['day']))
{
$vars['page_date'] = format_iso_date($context['year'], $context['month'], $context['day']);
}
if (isset($context['area']))
{
$vars['area'] = $context['area'];
}
if (isset($context['room']))
{
$vars['room'] = $context['room'];
}
$query = http_build_query($vars, '', '&');
print_header_site_info();
if (!$simple)
{
echo "<nav class=\"container\">\n";
echo "<nav>\n";
echo "<nav class=\"menu\">\n";
print_menu_items($query);
echo "</nav>\n";
echo "<nav class=\"logon\">\n";
print_outstanding($query);
$mrbs_user = session()->getCurrentUser();
// The empty string username is a special case when using anonymous booking
if (isset($mrbs_user) && (!$auth['allow_anonymous_booking'] || ($mrbs_user->username !== '')))
{
print_report_link($mrbs_user);
print_logoff();
}
elseif (!$omit_login)
{
print_logon();
}
echo "</nav>\n";
echo "</nav>\n";
echo "<nav>\n";
print_goto_date($context);
print_search($context);
echo "</nav>\n";
echo "</nav>\n";
// Add in a QR code for kiosk mode
// (The QR code library requires PHP 7.4 or greater and the mbstring extension)
if (isset($context['kiosk']) &&
$kiosk_QR_code &&
(version_compare(PHP_VERSION, '7.4') >= 0) &&
//Check for a Mbstring constant rather than using extension_loaded, which is sometimes disabled
defined('MB_CASE_UPPER'))
{
$url = multisite(url_base() . "/index.php?$query");
echo '<nav class="qr" title="' . escape_html($url) . "\">\n";
$options = new QROptions([
'outputType' => QRCode::OUTPUT_MARKUP_SVG,
'imageBase64' => false,
]);
$qrcode = new QRCode($options);
echo $qrcode->render($url);
echo "</nav>\n";
}
}
echo "</header>\n";
}
// Print a message which will only be displayed (thanks to CSS) if the user is
// using an unsupported browser.
function print_unsupported_message(?array $context) : void
{
echo "<div class=\"unsupported_message\">\n";
print_banner($context, true);
echo "<div class=\"contents\">\n";
echo "<p>" . get_vocab('browser_not_supported', get_vocab('mrbs_abbr')) . "</p>\n";
echo "</div>\n";
echo "</div>\n";
}
// Print the page header
// $context is an associative array indexed by 'view', 'view_all', 'year', 'month', 'day', 'area' and 'room',
// any of which can be NULL.
// If $simple is true, then just print a simple header that doesn't require any database
// access or JavaScript (useful for fatal errors and database upgrades).
// When $omit_login is true the Login link is omitted.
function print_theme_header(?array $context=null, bool $simple=false, bool $omit_login=false) : void
{
global $multisite, $site, $default_view, $default_view_all, $view_week_number, $style_weekends, $watermark_enabled;
if ($simple)
{
$data = array();
$classes = array();
}
else
{
// Set the context values if they haven't been given
if (!isset($context))
{
$context = array();
}
if (empty($context['area']))
{
$context['area'] = get_default_area();
}
if (empty($context['room']))
{
$context['room'] = get_default_room($context['area']);
}
if (!isset($context['view']))
{
$context['view'] = (isset($default_view)) ? $default_view : 'day';
}
if (!isset($context['view_all']))
{
$context['view_all'] = (isset($default_view_all)) ? $default_view_all : true;
}
// Need to set the timezone before we can use date()
// This will set the correct timezone for the area
get_area_settings($context['area']);
// If we don't know the right date then use today's
if (!isset($context['year']))
{
$context['year'] = (int) date('Y');
}
if (!isset($context['month']))
{
$context['month'] = (int) date('m');
}
if (!isset($context['day']))
{
$context['day'] = (int) date('d');
}
// Get the form token now, before any headers are sent, in case we are using the 'cookie'
// session scheme. Otherwise we won't be able to store the Form token.
Form::getToken();
$page = this_page(false, '.php');
// Put some data attributes in the body element for the benefit of JavaScript. Note that we
// cannot use these PHP variables directly in the JavaScript files as those files are cached.
// Get the language preferences
$lang_preferences = Language::getInstance()->getPreferences();
// Add to the beginning of the list the best fit locale (which may not necessarily have been the first choice)
array_unshift($lang_preferences, mb_strtolower(Language::getInstance()->getWebLocale()));
// Remove duplicates and renumber keys
$lang_preferences = array_values(array_unique($lang_preferences));
$data = [
'view' => $context['view'],
'view_all' => $context['view_all'],
'area' => $context['area'],
'room' => $context['room'],
'page' => $page,
'page-date' => format_iso_date($context['year'], $context['month'], $context['day']),
'is-admin' => (is_admin()) ? 'true' : 'false',
'is-book-admin' => (is_book_admin()) ? 'true' : 'false',
'lang-prefs' => json_encode($lang_preferences)
];
if ($multisite && isset($site) && ($site !== ''))
{
$data['site'] = $site;
}
if (isset($context['kiosk']))
{
$data['kiosk'] = $context['kiosk'];
}
$mrbs_user = session()->getCurrentUser();
if (isset($mrbs_user))
{
$data['username'] = $mrbs_user->username;
}
// We need $timetohighlight for the day and week views
$timetohighlight = get_form_var('timetohighlight', 'int');
if (isset($timetohighlight))
{
$data['timetohighlight'] = $timetohighlight;
}
// Put the filename in as a class to aid styling.
$classes[] = $page;
// And if the user is logged in, add another class to aid styling
if (isset($mrbs_user))
{
$classes[] = 'logged_in';
}
// To help styling
if ($view_week_number)
{
$classes[] = 'view_week_number';
}
if ($style_weekends)
{
$classes[] = 'style_weekends';
}
// ===== 等保整改：口令到期 / 首次登录 → 强制跳转改密页（改密页自身除外） =====
if (isset($mrbs_user) && !empty($_SESSION['mrbs_force_pwd_change']) &&
($page !== 'change_password'))
{
// 关闭会话写入后重定向，确保强制改密标记已持久化
session_write_close();
location_header('change_password.php?target_url=' . urlencode(this_page(true)));
exit;
}
}
$headers = array("Content-Type: text/html; charset=" . Language::MRBS_CHARSET);
http_headers($headers);
echo DOCTYPE . "\n";
// We produce two <html> tags: one for versions of IE that we don't support and one for all
// other browsers. This enables us to use CSS to hide and show the appropriate text.
$mrbs_lang = Language::getInstance()->getWebLang();
echo "<!--[if lte IE 9]>\n";
echo "<html lang=\"" . escape_html($mrbs_lang) . "\" class=\"unsupported_browser\">\n";
echo "<![endif]-->\n";
echo "<!--[if (!IE)|(gt IE 9)]><!-->\n";
echo "<html lang=\"" . escape_html($mrbs_lang) . "\">\n";
echo "<!--<![endif]-->\n";
print_head($simple);
echo '<body class="' . escape_html(implode(' ', $classes)) . '"';
foreach ($data as $key => $value)
{
if (isset($value))
{
// Convert booleans to 0 or 1
if (is_bool($value))
{
$value = (int)$value;
}
echo " data-$key=\"" . escape_html($value) . '"';
}
}
echo ">\n";
// ===== 等保整改：屏幕水印（防截图/拍照泄密溯源；config.inc.php $watermark_enabled 控制开关） =====
if (!$simple && isset($data['username']) && !empty($watermark_enabled))
{
$wm_user = htmlspecialchars((string)$data['username']);
$wm_ip = htmlspecialchars((string)($_SERVER['REMOTE_ADDR'] ?? '-'));
echo <<<WM_EOT
<div id="screen_watermark" data-user="{$wm_user}" data-ip="{$wm_ip}" aria-hidden="true"></div>
<style>
#screen_watermark{position:fixed;inset:0;z-index:99999;pointer-events:none;overflow:hidden;opacity:.09}
#screen_watermark span{position:absolute;font-size:15px;line-height:1;color:#000;white-space:nowrap;user-select:none;transform:rotate(-28deg);letter-spacing:1px}
</style>
<script>
(function(){
var w=document.getElementById('screen_watermark');if(!w)return;
var u=w.getAttribute('data-user')||'';var ip=w.getAttribute('data-ip')||'';if(!u)return;
function pad(n){return (n<10)?'0'+n:''+n;}
function ts(){var d=new Date();return d.getFullYear()+'-'+pad(d.getMonth()+1)+'-'+pad(d.getDate())+' '+pad(d.getHours())+':'+pad(d.getMinutes())+':'+pad(d.getSeconds());}
function tile(){return u+' '+ip+' '+ts();}
function draw(){
var cw=Math.max(6,Math.ceil(window.innerWidth/320)),ch=Math.max(4,Math.ceil(window.innerHeight/160));
var t=tile();
for(var r=0;r<ch;r++){for(var c=0;c<cw;c++){var s=document.createElement('span');s.textContent=t;
s.style.left=(c*320+((r%2)*80))+'px';s.style.top=(r*160)+'px';w.appendChild(s);}}
}
draw();
setInterval(function(){var t=tile();var s=w.querySelectorAll('span');for(var i=0;i<s.length;i++){s[i].textContent=t;}},1000);
})();
</script>
WM_EOT;
}
print_unsupported_message($context);
print_banner($context, $simple, $omit_login);
// This <div> should really be moved out of here so that we can always see
// the matching closing </div>
// 等保整改（2026-09-08）：背景图从导航栏下方开始（contents div 在 banner 导航栏之下）
$contents_class = 'contents';
if (!isset($mrbs_user)) { $contents_class .= ' login-bg'; }
echo "<div class=\"$contents_class\">\n";
} // end of print_theme_header()
web/Themes/default/header.inc.bak-20260908
+673
View File
@@ -0,0 +1,673 @@
<?php
declare(strict_types=1);
namespace MRBS;
use chillerlan\QRCode\QRCode;
use chillerlan\QRCode\QROptions;
use MRBS\Form\ElementInputDate;
use MRBS\Form\ElementInputSearch;
use MRBS\Form\ElementInputSubmit;
use MRBS\Form\Form;
function print_head(bool $simple=false) : void
{
global $refresh_rate;
echo "<head>\n";
echo "<meta charset=\"" . get_charset() . "\">\n";
// Set IE=edge so that IE10 will display MRBS properly, even if compatibility mode is used
// on the browser. If we don't do this then MRBS will treat IE10 as an unsupported browser
// when compatibility mode is turned on, potentially confusing users who may have forgotten
// that they are using compatibility mode. Unfortunately we can't set IE=edge in the header,
// which is where we would normally do it, because then we won't be able to detect IE9 using
// conditional comments. So we have to do it in a <meta> tag, after the conditional comments
// around the <html> tags.
echo "<meta http-equiv=\"X-UA-Compatible\" content=\"IE=edge\">\n";
// Improve scaling on mobile devices
echo "<meta name=\"viewport\" content=\"width=device-width, initial-scale=1\">\n";
if (!$simple)
{
// Add the CSRF token so that JavaScript can use it
echo "<meta name=\"csrf_token\" content=\"" . htmlspecialchars(Form::getToken()) . "\">\n";
}
echo "<meta name=\"robots\" content=\"noindex, nofollow, noarchive\">\n";
if (($refresh_rate != 0) && (this_page(false, '.php') == 'index'))
{
// If we're using JavaScript we'll do the refresh by getting a new
// table using Ajax requests, which means we only have to download
// the table not the whole page each time
echo "<noscript>\n";
echo "<meta http-equiv=\"Refresh\" content=\"$refresh_rate\">\n";
echo "</noscript>\n";
}
echo "<title>" . get_vocab("mrbs") . "</title>\n";
require_once MRBS_ROOT . "/style.inc";
if (!$simple)
{
require_once MRBS_ROOT . "/js.inc";
}
echo "</head>\n";
}
// Print the basic site information. This function is used for all headers, including
// the simple header, and so mustn't require any database access.
function print_header_site_info() : void
{
global $mrbs_company,
$mrbs_company_url,
$mrbs_company_logo,
$mrbs_company_more_info;
// Company logo, with a link to the company
if (!empty($mrbs_company_logo))
{
echo "<div class=\"logo\">\n";
if (!empty($mrbs_company_url))
{
echo '<a href="' . htmlspecialchars($mrbs_company_url) . '">';
}
// Suppress error messages in case the logo is a URL, in which case getimagesize() can
// fail for any number of reasons, eg (a) allow_url_fopen is not enabled in php.ini or
// (b) "SSL operation failed with code 1. OpenSSL Error messages: error:1416F086:SSL
// routines:tls_process_server_certificate:certificate verify failed". As the image
// size is not essential we'll just carry on.
$logo_size = @getimagesize($mrbs_company_logo);
echo '<img src="' . $mrbs_company_logo . '"';
echo ' alt="' . htmlspecialchars($mrbs_company) . '"';
if (is_array($logo_size))
{
echo ' ' . $logo_size[3];
}
echo '>';
if (!empty($mrbs_company_url))
{
echo "</a>\n";
}
echo "</div>\n";
}
// Company name, any extra company info and MRBS
echo "<div class=\"company\">\n";
if (!empty($mrbs_company_url))
{
echo '<a href="' . htmlspecialchars($mrbs_company_url) . '">';
}
echo '<span>' . htmlspecialchars($mrbs_company) . '</span>';
if (!empty($mrbs_company_url))
{
echo "</a>\n";
}
if (!empty($mrbs_company_more_info))
{
// Do not put $mrbs_company_more_info through htmlspecialchars() as it is
// trusted and allowed to contain HTML.
echo "<span class=\"company_more_info\">$mrbs_company_more_info</span>\n";
}
echo '<a href="' . htmlspecialchars(multisite('index.php')) . '">' . get_vocab('mrbs') . "</a>\n";
echo "</div>\n";
}
function print_goto_date(array $context) : void
{
global $multisite, $site;
if (!checkAuthorised('index.php', true))
{
// Don't show the goto box if the user isn't allowed to view the calendar
return;
}
$form = new Form();
$form_id = 'form_nav';
$form->setAttributes(array('id' => $form_id,
'class' => 'js_hidden',
'action' => multisite('index.php')))
->addHiddenInput('view', $context['view']);
if (isset($context['area']))
{
$form->addHiddenInput('area', $context['area']);
}
if (isset($room))
{
$form->addHiddenInput('room', $context['room']);
}
if ($multisite && isset($site) && ($site !== ''))
{
$form->addHiddenInput('site', $site);
}
$input = new ElementInputDate();
$input->setAttributes(array('name' => 'page_date',
'value' => format_iso_date($context['year'], $context['month'], $context['day']),
'aria-label' => get_vocab('goto'),
'required' => true,
'data-submit' => $form_id));
$form->addElement($input);
$submit = new ElementInputSubmit();
$submit->setAttribute('value', get_vocab('goto'));
$form->addElement($submit);
$form->render();
}
function print_outstanding(string $query) : void
{
$mrbs_user = session()->getCurrentUser();
if (!isset($mrbs_user))
{
return;
}
// Provide a link to the list of bookings awaiting approval
// (if there are any enabled areas where we require bookings to be approved)
$approval_somewhere = some_area('approval_enabled', TRUE);
if ($approval_somewhere && ($mrbs_user->level > 0))
{
$n_outstanding = get_entries_n_outstanding($mrbs_user);
$class = 'notification';
if ($n_outstanding > 0)
{
$class .= ' attention';
}
$url = 'pending.php';
if ($query !== '')
{
$url .= "?$query";
}
echo '<a href="' . htmlspecialchars(multisite($url)) . '"' .
" class=\"$class\"" .
' title="' . get_vocab('outstanding', $n_outstanding) .
"\">$n_outstanding</a>\n";
}
}
function print_menu_items(string $query) : void
{
global $auth, $kiosk_mode_enabled;
$menu_items = array('help' => 'help.php',
'report' => 'report.php',
'import' => 'import.php');
if ($kiosk_mode_enabled)
{
$menu_items['kiosk'] = 'kiosk.php';
}
$menu_items['rooms'] = 'admin.php';
if ($auth['type'] == 'db')
{
$menu_items['user_list'] = 'edit_users.php';
}
foreach ($menu_items as $token => $page)
{
// Only print menu items for which the user is allowed to access the page
if (checkAuthorised($page, true))
{
$url = $page;
if ($query !== '')
{
$url .= "?$query";
}
echo '<a href="' . htmlspecialchars(multisite($url)) . '">' . get_vocab($token) . "</a>\n";
}
}
}
function print_search(array $context) : void
{
if (!checkAuthorised('search.php', true))
{
// Don't show the search box if the user isn't allowed to search
return;
}
echo "<div>\n";
$form = new Form(Form::METHOD_POST);
$form->setAttributes(array(
'id' => 'header_search',
'action' => multisite('search.php'))
)
->addHiddenInputs(array(
'view' => $context['view'],
'year' => $context['year'],
'month' => $context['month'],
'day' => $context['day'],
'from_date' => format_iso_date($context['year'], $context['month'], $context['day'])
)
);
if (!empty($context['area']))
{
$form->addHiddenInput('area', $context['area']);
}
if (!empty($context['room']))
{
$form->addHiddenInput('room', $context['room']);
}
$input = new ElementInputSearch();
$search_vocab = get_vocab('search');
$input->setAttributes(array('name' => 'search_str',
'placeholder' => $search_vocab,
'aria-label' => $search_vocab,
'required' => true));
$form->addElement($input);
$submit = new ElementInputSubmit();
$submit->setAttributes(array('value' => get_vocab('search_button'),
'class' => 'js_none'));
$form->addElement($submit);
$form->render();
echo "</div>\n";
}
// Generate the username link, which gives a report on the user's upcoming bookings.
function print_report_link(User $user) : void
{
// If possible, provide a link to the Report page, otherwise the Search page
// and if that's not possible just print the username with no link. (Note that
// the Search page isn't the perfect solution because it searches for any bookings
// containing the search string, not just those created by the user.)
if (checkAuthorised('report.php', true))
{
$attributes = array('action' => multisite('report.php'));
$hidden_inputs = array('phase' => '2',
'creatormatch' => $user->username);
}
elseif (checkAuthorised('search.php', true))
{
$attributes = array('action' => multisite('search.php'));
$date_now = new DateTime();
$hidden_inputs = array(
'search_str' => $user->username,
'from_date' => $date_now->getISODate()
);
}
else
{
echo '<span>' . htmlspecialchars($user->display_name) . '</span>';
return;
}
// We're authorised for either Report or Search so print the form.
$form = new Form(Form::METHOD_POST);
$attributes['id'] = 'show_my_entries';
$form->setAttributes($attributes)
->addHiddenInputs($hidden_inputs);
$submit = new ElementInputSubmit();
$submit->setAttributes(array('title' => get_vocab('show_my_entries'),
'value' => $user->display_name));
$form->addElement($submit);
$form->render();
}
function print_logonoff_button(array $params, string $value) : void
{
$form = new Form($params['method']);
$form->setAttributes(array('action' => $params['action']));
// A Get method will replace the query string in the action URL with a query
// string made up of the hidden inputs. So put any parameters in the action
// query string into hidden inputs.
if ($params['method'] == Form::METHOD_GET)
{
$query_string = parse_url($params['action'], PHP_URL_QUERY);
if (isset($query_string))
{
parse_str($query_string, $query_parameters);
$form->addHiddenInputs($query_parameters);
}
}
// Add the hidden fields
if (isset($params['hidden_inputs']))
{
$form->addHiddenInputs($params['hidden_inputs']);
}
// The submit button
$element = new ElementInputSubmit();
$element->setAttribute('value', $value);
$form->addElement($element);
$form->render();
}
function print_logon() : void
{
if (method_exists(session(), 'getLogonFormParams'))
{
$form_params = session()->getLogonFormParams();
if (isset($form_params))
{
print_logonoff_button($form_params, get_vocab('login'));
}
}
}
function print_logoff() : void
{
if (method_exists(session(), 'getLogoffFormParams'))
{
$form_params = session()->getLogoffFormParams();
if (isset($form_params))
{
print_logonoff_button($form_params, get_vocab('logoff'));
}
}
}
// $context is an associative array indexed by 'view', 'view_all', 'year', 'month', 'day', 'area' and 'room'.
// When $omit_login is true the Login link is omitted.
function print_banner(?array $context, $simple=false, $omit_login=false) : void
{
global $kiosk_QR_code, $auth;
echo '<header class="banner' . (($simple) ? ' simple' : '') . "\">\n";
$vars = array();
if (isset($context['view']))
{
$vars['view'] = $context['view'];
}
if (isset($context['year']) && isset($context['month']) && isset($context['day']))
{
$vars['page_date'] = format_iso_date($context['year'], $context['month'], $context['day']);
}
if (isset($context['area']))
{
$vars['area'] = $context['area'];
}
if (isset($context['room']))
{
$vars['room'] = $context['room'];
}
$query = http_build_query($vars, '', '&');
print_header_site_info();
if (!$simple)
{
echo "<nav class=\"container\">\n";
echo "<nav>\n";
echo "<nav class=\"menu\">\n";
print_menu_items($query);
echo "</nav>\n";
echo "<nav class=\"logon\">\n";
print_outstanding($query);
$mrbs_user = session()->getCurrentUser();
// The empty string username is a special case when using anonymous booking
if (isset($mrbs_user) && (!$auth['allow_anonymous_booking'] || ($mrbs_user->username !== '')))
{
print_report_link($mrbs_user);
print_logoff();
}
elseif (!$omit_login)
{
print_logon();
}
echo "</nav>\n";
echo "</nav>\n";
echo "<nav>\n";
print_goto_date($context);
print_search($context);
echo "</nav>\n";
echo "</nav>\n";
// Add in a QR code for kiosk mode
// (The QR code library requires PHP 7.4 or greater and the mbstring extension)
if (isset($context['kiosk']) &&
$kiosk_QR_code &&
(version_compare(PHP_VERSION, '7.4') >= 0) &&
//Check for a Mbstring constant rather than using extension_loaded, which is sometimes disabled
defined('MB_CASE_UPPER'))
{
$url = multisite(url_base() . "/index.php?$query");
echo '<nav class="qr" title="' . htmlspecialchars($url) . "\">\n";
$options = new QROptions([
'outputType' => QRCode::OUTPUT_MARKUP_SVG,
'imageBase64' => false,
]);
$qrcode = new QRCode($options);
echo $qrcode->render($url);
echo "</nav>\n";
}
}
echo "</header>\n";
}
// Print a message which will only be displayed (thanks to CSS) if the user is
// using an unsupported browser.
function print_unsupported_message(?array $context) : void
{
echo "<div class=\"unsupported_message\">\n";
print_banner($context, true);
echo "<div class=\"contents\">\n";
echo "<p>" . get_vocab('browser_not_supported', get_vocab('mrbs_abbr')) . "</p>\n";
echo "</div>\n";
echo "</div>\n";
}
// Print the page header
// $context is an associative array indexed by 'view', 'view_all', 'year', 'month', 'day', 'area' and 'room',
// any of which can be NULL.
// If $simple is true, then just print a simple header that doesn't require any database
// access or JavaScript (useful for fatal errors and database upgrades).
// When $omit_login is true the Login link is omitted.
function print_theme_header(?array $context=null, bool $simple=false, bool $omit_login=false) : void
{
global $multisite, $site, $default_view, $default_view_all, $view_week_number, $style_weekends;
if ($simple)
{
$data = array();
$classes = array();
}
else
{
// Set the context values if they haven't been given
if (!isset($context))
{
$context = array();
}
if (empty($context['area']))
{
$context['area'] = get_default_area();
}
if (empty($context['room']))
{
$context['room'] = get_default_room($context['area']);
}
if (!isset($context['view']))
{
$context['view'] = (isset($default_view)) ? $default_view : 'day';
}
if (!isset($context['view_all']))
{
$context['view_all'] = (isset($default_view_all)) ? $default_view_all : true;
}
// Need to set the timezone before we can use date()
// This will set the correct timezone for the area
get_area_settings($context['area']);
// If we don't know the right date then use today's
if (!isset($context['year']))
{
$context['year'] = (int) date('Y');
}
if (!isset($context['month']))
{
$context['month'] = (int) date('m');
}
if (!isset($context['day']))
{
$context['day'] = (int) date('d');
}
// Get the form token now, before any headers are sent, in case we are using the 'cookie'
// session scheme. Otherwise we won't be able to store the Form token.
Form::getToken();
$page = this_page(false, '.php');
// Put some data attributes in the body element for the benefit of JavaScript. Note that we
// cannot use these PHP variables directly in the JavaScript files as those files are cached.
$data = array(
'view' => $context['view'],
'view_all' => $context['view_all'],
'area' => $context['area'],
'room' => $context['room'],
'page' => $page,
'page-date' => format_iso_date($context['year'], $context['month'], $context['day']),
'is-admin' => (is_admin()) ? 'true' : 'false',
'is-book-admin' => (is_book_admin()) ? 'true' : 'false',
'lang-prefs' => json_encode(get_lang_preferences())
);
if ($multisite && isset($site) && ($site !== ''))
{
$data['site'] = $site;
}
if (isset($context['kiosk']))
{
$data['kiosk'] = $context['kiosk'];
}
$mrbs_user = session()->getCurrentUser();
if (isset($mrbs_user))
{
$data['username'] = $mrbs_user->username;
}
// We need $timetohighlight for the day and week views
$timetohighlight = get_form_var('timetohighlight', 'int');
if (isset($timetohighlight))
{
$data['timetohighlight'] = $timetohighlight;
}
// Put the filename in as a class to aid styling.
$classes[] = $page;
// And if the user is logged in, add another class to aid styling
if (isset($mrbs_user))
{
$classes[] = 'logged_in';
}
// To help styling
if ($view_week_number)
{
$classes[] = 'view_week_number';
}
if ($style_weekends)
{
$classes[] = 'style_weekends';
}
}
$headers = array("Content-Type: text/html; charset=" . get_charset());
http_headers($headers);
echo DOCTYPE . "\n";
// We produce two <html> tags: one for versions of IE that we don't support and one for all
// other browsers. This enables us to use CSS to hide and show the appropriate text.
echo "<!--[if lte IE 9]>\n";
echo "<html lang=\"" . htmlspecialchars(get_mrbs_lang()) . "\" class=\"unsupported_browser\">\n";
echo "<![endif]-->\n";
echo "<!--[if (!IE)|(gt IE 9)]><!-->\n";
echo "<html lang=\"" . htmlspecialchars(get_mrbs_lang()) . "\">\n";
echo "<!--<![endif]-->\n";
print_head($simple);
echo '<body class="' . htmlspecialchars(implode(' ', $classes)) . '"';
foreach ($data as $key => $value)
{
if (isset($value))
{
echo " data-$key=\"" . htmlspecialchars((string)$value) . '"';
}
}
echo ">\n";
print_unsupported_message($context);
print_banner($context, $simple, $omit_login);
// This <div> should really be moved out of here so that we can always see
// the matching closing </div>
echo "<div class=\"contents\">\n";
} // end of print_theme_header()
web/Themes/default/styling.inc
+129
View File
@@ -0,0 +1,129 @@
<?php
namespace MRBS;
// DEFAULT THEME
// ***** COLOURS ************************
// Colours used in MRBS. All the colours are defined here as PHP variables
$body_background_color = "#f9fbfc"; // background colour for the main body
$login_background_image = "img/login_bg.png"; // 等保优化（2026-09-08）：登录页背景图（留空则不用）
$login_background_overlay = "rgba(255,255,255,0.55)"; // 背景上方遮罩，提升登录表单可读性
$standard_font_color = "#0B263B"; // default font color
$header_font_color = "#ffffff"; // font color for text in headers
$highlight_font_color = "#ff0066"; // used for highlighting text (eg links, errors)
$color_key_font_color = $standard_font_color; // used in the colour key table
$banner_back_color = "#b598a1"; // background colour for banner
$banner_border_color = $body_background_color; // border colour for banner
$banner_font_color = $header_font_color; // font colour for banner
$banner_nav_hover_color = 'darkblue'; // background colour when header links are hovered over
$minical_view_color = "#2b3a42"; // used for highlighting the dates in the current view
$minical_today_color = "#bdd4de"; // used for highlighting today
$header_back_color = $banner_back_color; // background colour for headers
$flatpickr_highlight_color = $banner_back_color; // used for highlighting the date
$admin_table_header_back_color = $header_back_color; // background colour for header and also border colour for table cells
$admin_table_header_sep_color = $body_background_color; // vertical separator colour in header
$admin_table_header_font_color = $header_font_color; // font colour for header
$admin_table_border_color = "#C3CCD3";
$main_table_border_color = "#dddddd"; // border colour for day/week/month tables - outside
$main_table_header_border_color = "#dddddd"; // border colour for day/week/month tables - header
$main_table_body_h_border_color = "#ffffff"; // border colour for day/week/month tables - body, horizontal
$main_table_body_v_border_color = "#e4e4e4"; // border colour for day/week/month tables - body, vertical
$main_table_month_color = "#ffffff"; // background colour for days in the month view
$main_table_month_weekend_color = "#f4f4f4"; // background colour for weekends in the month view
$main_table_month_holiday_color = "#e8e8e8"; // background colour for holidays in the month view
$main_table_month_weekend_holiday_color = "#dfdfdf"; // background colour for weekend holidays in the month view
$main_table_month_invalid_color = "#d1d9de"; // background colour for invalid days in the month view
$main_table_slot_invalid_color = "#d1d9de"; // background colour for invalid slots in the day and week views
$main_table_slot_private_type_color = "#d1d9de"; // background colour when the type has to kept private
$main_table_labels_back_color = $header_back_color; // background colour for the row labels column
$timeline_color = $header_back_color;
// border colours for the main table when it is printed. These are used by mrbs-print.css.php
$main_table_border_color_print = "#dddddd"; // border colour for the main table (print view)
$main_table_header_border_color_print = "#dddddd"; // border colour for day/week/month tables - header (print view)
$main_table_body_h_border_color_print = "#dddddd"; // border colour for day/week/month tables - body, horizontal (print view)
$main_table_body_v_border_color_print = "#dddddd"; // border colour for day/week/month tables - body, vertical (print view)
// font colours for the main table when it is printed
$header_font_color_print = "#0B263B";
$anchor_link_color_header_print = "#0B263B";
$report_table_border_color = $standard_font_color;
$report_h2_border_color = $banner_back_color; // border colour for <h2> in report.php
$report_h3_border_color = "#879AA8"; // border colour for <h2> in report.php
$search_table_border_color = $standard_font_color;
$site_faq_entry_border_color = "#C3CCD3"; // used to separate individual FAQ's in help.php
$anchor_link_color = $standard_font_color; // link color
$anchor_visited_color = $anchor_link_color; // link color (visited)
$anchor_hover_color = $anchor_link_color; // link color (hover)
$anchor_link_color_banner = $header_font_color; // link color
$anchor_visited_color_banner = $anchor_link_color_banner; // link color (visited)
$anchor_hover_color_banner = $anchor_link_color_banner; // link color (hover)
$anchor_link_color_header = $standard_font_color; // link color
$anchor_visited_color_header = $anchor_link_color_header; // link color (visited)
$anchor_hover_color_header = $anchor_link_color_header; // link color (hover)
$column_hidden_color = $main_table_month_invalid_color; // hidden days in the week and month views
$calendar_hidden_color = "#dae0e4"; // hidden days in the mini-cals
$row_highlight_color = $banner_back_color; // used for highlighting a row
$row_even_color = "#ffffff"; // even rows in the day and week views
$row_odd_color = "#efefef"; // odd rows in the day and week views
$row_even_color_weekend = "#f4f4f4"; // even rows in the day and week views for weekends
$row_odd_color_weekend = "#e4e4e4"; // odd rows in the day and week views for weekends
$row_even_color_holiday = "#e8e8e8"; // even rows in the day and week views for holidays
$row_odd_color_holiday = "#d8d8d8"; // odd rows in the day and week views for holidays
$row_even_color_weekend_holiday = "#dfdfdf"; // even rows in the day and week views for weekend holidays
$row_odd_color_weekend_holiday = "#cfcfcf"; // odd rows in the day and week views for weekend holidays
$zebra_even_color = "#ffffff"; // Colour for even rows in other tables (eg Search, Report and Users)
$zebra_odd_color = '#e2e4ff'; // Colour for odd rows in other tables (eg Search, Report and Users)
$help_highlight_color = "#ffe6f0"; // highlighting text on the help page
// Button colours
$button_color_stops = array('#eeeeee', '#cccccc'); // linear gradient colour stops
$button_inset_color = 'darkblue';
// These are the colours used for distinguishing between the different types of bookings in the main
// displays in the day, week and month views
$color_types = array(
'A' => "#ffff99",
'B' => "#99cccc",
'C' => "#ffffcd",
'D' => "#cde6e6",
'E' => "#ee3f4d", //外部使用
'F' => "#82adad",
'G' => "#ccffcc",
'H' => "#d9d982",
'I' => "#0096FF", //内部使用
'J' => "#e6ffe6");
// colours used for pending.php and bookings awaiting approval
$outstanding_color = "#FFF36C"; // font colour for the outstanding reservations message in the header
$pending_header_back_color = $header_back_color; // background colour for series headers
$series_entry_back_color = "#FFFCDA"; // background colour for entries in a series
$pending_control_color = "#FFF36C"; // background colour for the series +/- controls in pending.php
$attention_color = 'darkorange'; // background colour for the number of bookings awaiting approval
// ***** DIMENSIONS *******************
$banner_border_width = '0'; // (px) border width for the outside of the banner
$banner_border_cell_width = '1'; // (px) border width for the cells of the banner
$main_table_border_width = '0'; // (px) border width for the outside of the main day/week/month tables
$main_table_cell_border_width = '1'; // (px) vertical border width for the cells of the main day/week/month tables
$main_cell_height = '1.5em'; // height of the cells in the main day/week tables
// ***** FONTS ************************
$standard_font_family = "Arial, 'Arial Unicode MS', Verdana, sans-serif";