diff --git a/config/config.php b/config/config.php
index df2e4fbdcc..46ea05babf 100644
--- a/config/config.php
+++ b/config/config.php
@@ -16,37 +16,36 @@ if(!class_exists('config')){class config{}}
 if(!function_exists('getWebRoot')){function getWebRoot(){}}
 
 /* Basic settings. */
-$config = new config();
 $config->version      = '9.2.1';        // The version of zentaopms. Don't change it.
 $config->charset      = 'UTF-8';           // The charset of zentaopms.
 $config->cookieLife   = time() + 2592000;  // The cookie life time.
 $config->timezone     = 'Asia/Shanghai';   // The time zone setting, for more see http://www.php.net/manual/en/timezones.php
 $config->webRoot      = '';                // The root path of the pms.
-$config->checkVersion = true;              // Auto check for new version or not.
 
 /* The request settings. */
 $config->requestType = 'PATH_INFO';       // The request type: PATH_INFO|GET, if PATH_INFO, must use url rewrite.
-$config->pathType    = 'clean';           // If the request type is PATH_INFO, the path type.
 $config->requestFix  = '-';               // The divider in the url when PATH_INFO.
 $config->moduleVar   = 'm';               // requestType=GET: the module var name.
 $config->methodVar   = 'f';               // requestType=GET: the method var name.
 $config->viewVar     = 't';               // requestType=GET: the view var name.
 $config->sessionVar  = 'zentaosid';       // requestType=GET: the session var name.
+$config->views       = ',html,json,mhtml,'; 
+
+/* 支持的主题和语言。Supported thems and languages. */
+$config->themes['default'] = 'default'; 
+$config->langs['zh-cn'] = '简体';
+$config->langs['en']    = 'English';
+$config->langs['zh-tw'] = '繁體';
+
 $config->allowedTags = '<p><span><h1><h2><h3><h4><h5><em><u><strong><br><ol><ul><li><img><a><b><font><hr><pre><div><table><td><th><tr><tbody><embed><style>';
 $config->accountRule = '|^[a-zA-Z0-9_]{1}[a-zA-Z0-9_\.]{1,}[a-zA-Z0-9_]{1}$|';
-
-/* Supported views. */
-$config->views  = ',html,json,mhtml,'; 
+$config->checkVersion = true;              // Auto check for new version or not.
 
 /* Set the wide window size and timeout(ms) and duplicate interval time(s). */
 $config->wideSize      = 1400;
 $config->timeout       = 30000;
 $config->duplicateTime = 60;
 
-/* Supported languages. */
-$config->langs['zh-cn'] = '简体';
-$config->langs['zh-tw'] = '繁體';
-$config->langs['en']    = 'English';
 
 $config->productCommonList['en'][0]    = 'Product';
 $config->productCommonList['en'][1]    = 'Project';
@@ -69,6 +68,12 @@ $config->charsets['zh-tw']['big5']  = 'BIG5';
 $config->charsets['en']['utf-8']    = 'UTF-8';
 $config->charsets['en']['GBK']      = 'GBK';
 
+/* IP white list settings.*/
+$config->ipWhiteList = '*';
+
+/* 设备类型视图文件前缀。The prefix for view file for different device. */ 
+$config->devicePrefix['mhtml'] = 'm.';
+
 /* Default settings. */
 $config->default = new stdclass();
 $config->default->view   = 'html';        // Default view.
@@ -77,47 +82,74 @@ $config->default->theme  = 'default';     // Default theme.
 $config->default->module = 'index';       // Default module.
 $config->default->method = 'index';       // Default method.
 
-/* Upload settings. */
-$config->file = new stdclass();
-$config->file->dangers = 'php,php3,php4,phtml,php5,jsp,py,rb,asp,asa,cer,cdx,aspl'; // Dangerous files.
-$config->file->maxSize = 1024 * 1024;          // Max size.
-
-/* IP white list settings.*/
-$config->ipWhiteList = '*';
-
-/* View type settings. */ 
-$config->devicePrefix = array();
 
 /* Master database settings. */
 $config->db = new stdclass();
+$config->slaveDB = new stdclass();
 $config->db->persistant     = false;     // Pconnect or not.
 $config->db->driver         = 'mysql';   // Must be MySQL. Don't support other database server yet.
 $config->db->encoding       = 'UTF8';    // Encoding of database.
 $config->db->strictMode     = false;     // Turn off the strict mode of MySQL.
-//$config->db->emulatePrepare = true;    // PDO::ATTR_EMULATE_PREPARES
-//$config->db->bufferQuery    = true;     // PDO::MYSQL_ATTR_USE_BUFFERED_QUERY
-
-/* Slave database settings. */
-$config->slaveDB = new stdclass();
+$config->db->prefix          = '';        // 数据库表名前缀。       The prefix of the table name.
 $config->slaveDB->persistant = false;      
 $config->slaveDB->driver     = 'mysql';    
 $config->slaveDB->encoding   = 'UTF8';     
 $config->slaveDB->strictMode = false;      
-$config->slaveDB->checkCentOS= true;       
 
 /* Framework config. */
 $config->framework = new stdclass();
-$config->framework->jsWithPrefix    = false;
+$config->framework->autoConnectDB   = true;  // 是否自动连接数据库。              Whether auto connect database or not.
+$config->framework->multiLanguage   = true; // 是否启用多语言功能。              Whether enable multi lanuage or not.
+$config->framework->multiTheme      = true; // 是否启用多风格功能。              Whether enable multi theme or not.
+$config->framework->multiSite       = false; // 是否启用多站点模式。              Whether enable multi site mode or not.
+$config->framework->extensionLevel  = 1;     // 0=>无扩展,1=>公共扩展,2=>站点扩展 0=>no extension, 1=> common extension, 2=> every site has it's extension.
+$config->framework->jsWithPrefix    = false;  // js::set()输出的时候是否增加前缀。 When us js::set(), add prefix or not.
+$config->framework->filterBadKeys   = true;  // 是否过滤不合要求的键值。          Whether filter bad keys or not.
+$config->framework->filterTrojan    = true;  // 是否过滤木马攻击代码。            Whether strip trojan code or not.
+$config->framework->filterXSS       = true;  // 是否过滤XSS攻击代码。             Whether strip xss code or not.
+$config->framework->filterParam     = 2;     // 是否开启过滤参数功能。            Whether strip param or not.
+$config->framework->purifier        = true;  // 是否对数据做purifier处理。        Whether purifier data or not.
+$config->framework->logDays         = 14;    // 日志文件保存的天数。              The days to save log files.
 $config->framework->autoRepairTable = true;
-$config->framework->logDays         = 14;
-$config->framework->purifier        = true;
 $config->framework->autoLang        = false;
 
+$config->framework->detectDevice['zh-cn'] = true; // 在zh-cn语言情况下，是否启用设备检测功能。 Whether enable device detect or not.
+$config->framework->detectDevice['zh-tw'] = true; // 在zh-tw语言情况下，是否启用设备检测功能。 Whether enable device detect or not.
+$config->framework->detectDevice['en']    = true; // 在en语言情况下，是否启用设备检测功能。 Whether enable device detect or not.
+
 /* Include the custom config file. */
 $configRoot = dirname(__FILE__) . DIRECTORY_SEPARATOR;
 $myConfig   = $configRoot . 'my.php';
 if(file_exists($myConfig)) include $myConfig;
 
+/* 文件上传设置。 Upload settings. */
+$config->file = new stdclass();    
+// 危险文件类型。 Dangerous file types.
+$config->file->dangers = 'php,php3,php4,phtml,php5,jsp,py,rb,asp,aspx,ashx,asa,cer,cdx,aspl,shtm,shtml,html,htm';
+// 允许上传的文件类型。 Allowed file types.
+$config->file->allowed = ',txt,doc,docx,dot,wps,wri,pdf,ppt,xls,xlsx,ett,xlt,xlsm,csv,jpg,jpeg,png,psd,gif,ico,bmp,swf,avi,rmvb,rm,mp3,mp4,3gp,flv,mov,movie,rar,zip,bz,bz2,tar,gz,';
+
+/* 配置参数过滤。Filter param settings. */
+/* Like $config->filterParam->param[moduleName][methodname][ruleType] = rule. */
+$config->filterParam          = new stdclass();
+$config->filterParam->badKeys = '[^a-zA-Z0-9_\.]'; 
+$config->filterParam->module['reg'] = '/^[a-zA-Z0-9]+$/';
+$config->filterParam->method['common']['reg'] = '/^[a-zA-Z0-9]+$/';
+$config->filterParam->param['common']['name']['reg']  = '/^[a-zA-Z0-9_\.]+$/';
+$config->filterParam->param['common']['value']['reg'] = '/^[a-zA-Z0-9=_,`#+\^\/\.%\|\x7f-\xff]+$/';
+
+$config->filterParam->get['common']['hold'] = 'onlybody,HTTP_X_REQUESTED_WITH,' . $config->sessionVar;
+$config->filterParam->get['common']['params']['onlybody']['reg']                = '/^yes$|^no$/';
+$config->filterParam->get['common']['params']['HTTP_X_REQUESTED_WITH']['equal'] = 'XMLHttpRequest';
+$config->filterParam->get['common']['params'][$config->sessionVar]['reg']       = '/^[a-zA-Z0-9]+$/';
+
+$config->filterParam->cookie['common']['hold'] = 'lang,theme,device,za,zp';
+$config->filterParam->cookie['common']['params']['lang']['reg']   = '/^[a-zA-Z\-_]+$/';
+$config->filterParam->cookie['common']['params']['theme']['reg']  = '/^[a-zA-Z0-9_]+$/';
+$config->filterParam->cookie['common']['params']['device']['reg'] = '/^[a-zA-Z0-9_]+$/';
+$config->filterParam->cookie['common']['params']['za']['account'] = '';
+$config->filterParam->cookie['common']['params']['zp']['reg']     = '/^[a-f0-9]{40}$/';
+
 /* Set default table prefix. */
 if(!isset($config->db->prefix)) $config->db->prefix = 'zt_';
 
diff --git a/framework/base/control.class.php b/framework/base/control.class.php
index 662a01cff4..406f318d45 100644
--- a/framework/base/control.class.php
+++ b/framework/base/control.class.php
@@ -1,8 +1,9 @@
-<?php
-/**
+<?php /**
  * ZenTaoPHP的baseControl类。
  * The baseControl class file of ZenTaoPHP framework.
  *
+ * @package framework
+ *
  * The author disclaims copyright to this source code.  In place of
  * a legal notice, here is a blessing:
  *
@@ -10,13 +11,6 @@
  *  May you find forgiveness for yourself and forgive others.
  *  May you share freely, never taking more than you give.
  */
-
-/**
- * baseControl基类.
- * The base class of control.
- *
- * @package framework
- */
 class baseControl
 {
     /**
@@ -254,8 +248,8 @@ class baseControl
     }
 
     /**
-     * set the method name.
      * 设置方法名。
+     * Set the method name.
      * 
      * @param   string  $methodName   方法名，如果为空，则从$app中获取。The method name, if empty, get it from $app.   
      * @access  public
@@ -279,7 +273,7 @@ class baseControl
     {
         if(empty($moduleName)) $moduleName = $this->moduleName;
         if(empty($appName))    $appName    = $this->appName;
-        $modelFile = helper::setModelFile($moduleName, $appName);
+        $modelFile = $this->app->setModelFile($moduleName, $appName);
 
         /**
          * 如果没有model文件，尝试加载config配置信息。
@@ -287,7 +281,7 @@ class baseControl
          */
         if(!helper::import($modelFile)) 
         {
-            $this->app->loadConfig($moduleName, $appName, false);
+            $this->app->loadModuleConfig($moduleName, $appName, false);
             $this->app->loadLang($moduleName, $appName);
             $this->dao = new dao();
             return false;
@@ -308,7 +302,10 @@ class baseControl
          * 初始化model对象，在control对象中可以通过$this->$moduleName来引用。同时将dao对象赋为control对象的成员变量，方便引用。
          * Init the model object thus you can try $this->$moduleName to access it. Also assign the $dao object as a member of control object.
          */
-        $this->$moduleName = new $modelClass($appName);
+        static $singleModule = array();
+        if(!isset($singleModule["$moduleName"])) $singleModule["$moduleName"] = new $modelClass($appName);
+
+        $this->$moduleName = $singleModule["$moduleName"];
         $this->dao = $this->$moduleName->dao;
         return $this->$moduleName;
     }
@@ -327,7 +324,6 @@ class baseControl
         $this->server  = $this->app->server;
         $this->session = $this->app->session;
         $this->cookie  = $this->app->cookie;
-        $this->global  = $this->app->global;
     }
 
     /**
@@ -372,19 +368,24 @@ class baseControl
 
         $modulePath  = $this->app->getModulePath($this->appName, $moduleName);
         $viewExtPath = $this->app->getModuleExtPath($this->appName, $moduleName, 'view');
-        $viewType    = $this->viewType == 'mhtml' ? 'html' : $this->viewType;
 
-        $mainViewFile      = $modulePath . 'view' . DS . $this->devicePrefix . $methodName . '.' . $viewType . '.php';
-        $commonExtViewFile = $viewExtPath['common'] . $this->devicePrefix . $methodName . ".{$viewType}.php";
-        $siteExtViewFile   = empty($viewExtPath['site']) ? '' : $viewExtPath['site'] . $this->devicePrefix . $methodName . ".{$viewType}.php";
+        $viewType     = $this->viewType == 'mhtml' ? 'html' : $this->viewType;
+        $mainViewFile = $modulePath . 'view' . DS . $this->devicePrefix . $methodName . '.' . $viewType . '.php';
+        $viewFile     = $mainViewFile;
 
-        $viewFile = file_exists($commonExtViewFile) ? $commonExtViewFile : $mainViewFile;
-        $viewFile = (!empty($siteExtViewFile) and file_exists($siteExtViewFile)) ? $siteExtViewFile : $viewFile;
-        if(!is_file($viewFile)) $this->app->triggerError("the view file $viewFile not found", __FILE__, __LINE__, $exit = true);
+        if(!empty($viewExtPath))
+        {
+            $commonExtViewFile = $viewExtPath['common'] . $this->devicePrefix . $methodName . ".{$viewType}.php";
+            $siteExtViewFile   = empty($viewExtPath['site']) ? '' : $viewExtPath['site'] . $this->devicePrefix . $methodName . ".{$viewType}.php";
 
-        $commonExtHookFiles = glob($viewExtPath['common'] . $this->devicePrefix . $methodName . ".*.{$viewType}.hook.php");
-        $siteExtHookFiles   = empty($viewExtPath['site']) ? '' : glob($viewExtPath['site'] . $this->devicePrefix . $methodName . ".*.{$viewType}.hook.php");
-        $extHookFiles       = array_merge((array) $commonExtHookFiles, (array) $siteExtHookFiles);
+            $viewFile = file_exists($commonExtViewFile) ? $commonExtViewFile : $mainViewFile;
+            $viewFile = (!empty($siteExtViewFile) and file_exists($siteExtViewFile)) ? $siteExtViewFile : $viewFile;
+            if(!is_file($viewFile)) $this->app->triggerError("the view file $viewFile not found", __FILE__, __LINE__, $exit = true);
+
+            $commonExtHookFiles = glob($viewExtPath['common'] . $this->devicePrefix . $methodName . ".*.{$viewType}.hook.php");
+            $siteExtHookFiles   = empty($viewExtPath['site']) ? '' : glob($viewExtPath['site'] . $this->devicePrefix . $methodName . ".*.{$viewType}.hook.php");
+            $extHookFiles       = array_merge((array) $commonExtHookFiles, (array) $siteExtHookFiles);
+        }
 
         if(!empty($extHookFiles)) return array('viewFile' => $viewFile, 'hookFiles' => $extHookFiles);
         return $viewFile;
@@ -404,9 +405,9 @@ class baseControl
          * 首先找sitecode下的扩展文件，如果没有，再找ext下的扩展文件。 
          * Find extViewFile in ext/_$siteCode/view first, then try ext/view/.
          */
-        if($this->config->site->code)
+        if($this->app->siteCode)
         {
-            $extPath     = dirname(dirname(realpath($viewFile))) . "/ext/_{$this->config->site->code}/view";
+            $extPath     = dirname(dirname(realpath($viewFile))) . "/ext/_{$this->app->siteCode}/view";
             $extViewFile = $extPath . basename($viewFile);
 
             if(file_exists($extViewFile))
@@ -442,8 +443,6 @@ class baseControl
 
         $modulePath   = $this->app->getModulePath($this->appName, $moduleName);
         $cssExtPath   = $this->app->getModuleExtPath($this->appName, $moduleName, 'css') ;
-        $cssMethodExt = $cssExtPath['common'] . $methodName . DS;
-        $cssCommonExt = $cssExtPath['common'] . 'common' . DS;
 
         $css = '';
         $mainCssFile   = $modulePath . 'css' . DS . $this->devicePrefix . 'common.css';
@@ -451,21 +450,27 @@ class baseControl
         if(file_exists($mainCssFile)) $css .= file_get_contents($mainCssFile);
         if(is_file($methodCssFile))   $css .= file_get_contents($methodCssFile);
 
-        $cssExtFiles = glob($cssCommonExt . $this->devicePrefix . '*.css');
-        if(!empty($cssExtFiles) and is_array($cssExtFiles)) foreach($cssExtFiles as $cssFile) $css .= file_get_contents($cssFile);
-
-        $cssExtFiles = glob($cssMethodExt . $this->devicePrefix . '*.css');
-        if(!empty($cssExtFiles) and is_array($cssExtFiles)) foreach($cssExtFiles as $cssFile) $css .= file_get_contents($cssFile);
-
-        if(!empty($cssExtPath['site']))
+        if(!empty($cssExtPath))
         {
-            $cssMethodExt = $cssExtPath['site'] . $methodName . DS;
-            $cssCommonExt = $cssExtPath['site'] . 'common' . DS;
+            $cssMethodExt = $cssExtPath['common'] . $methodName . DS;
+            $cssCommonExt = $cssExtPath['common'] . 'common' . DS;
+
             $cssExtFiles = glob($cssCommonExt . $this->devicePrefix . '*.css');
             if(!empty($cssExtFiles) and is_array($cssExtFiles)) foreach($cssExtFiles as $cssFile) $css .= file_get_contents($cssFile);
 
             $cssExtFiles = glob($cssMethodExt . $this->devicePrefix . '*.css');
             if(!empty($cssExtFiles) and is_array($cssExtFiles)) foreach($cssExtFiles as $cssFile) $css .= file_get_contents($cssFile);
+
+            if(!empty($cssExtPath['site']))
+            {
+                $cssMethodExt = $cssExtPath['site'] . $methodName . DS;
+                $cssCommonExt = $cssExtPath['site'] . 'common' . DS;
+                $cssExtFiles = glob($cssCommonExt . $this->devicePrefix . '*.css');
+                if(!empty($cssExtFiles) and is_array($cssExtFiles)) foreach($cssExtFiles as $cssFile) $css .= file_get_contents($cssFile);
+
+                $cssExtFiles = glob($cssMethodExt . $this->devicePrefix . '*.css');
+                if(!empty($cssExtFiles) and is_array($cssExtFiles)) foreach($cssExtFiles as $cssFile) $css .= file_get_contents($cssFile);
+            }
         }
 
         return $css;
@@ -487,8 +492,6 @@ class baseControl
 
         $modulePath  = $this->app->getModulePath($this->appName, $moduleName);
         $jsExtPath   = $this->app->getModuleExtPath($this->appName, $moduleName, 'js');
-        $jsMethodExt = $jsExtPath['common'] . $methodName . DS;
-        $jsCommonExt = $jsExtPath['common'] . 'common' . DS;
 
         $js = '';
         $mainJsFile   = $modulePath . 'js' . DS . $this->devicePrefix . 'common.js';
@@ -496,24 +499,30 @@ class baseControl
         if(file_exists($mainJsFile))   $js .= file_get_contents($mainJsFile);
         if(is_file($methodJsFile))     $js .= file_get_contents($methodJsFile);
 
-        $jsExtFiles = glob($jsCommonExt . $this->devicePrefix . '*.js');
-        if(!empty($jsExtFiles) and is_array($jsExtFiles)) foreach($jsExtFiles as $jsFile) $js .= file_get_contents($jsFile);
-
-        $jsExtFiles = glob($jsMethodExt . $this->devicePrefix . '*.js');
-        if(!empty($jsExtFiles) and is_array($jsExtFiles)) foreach($jsExtFiles as $jsFile) $js .= file_get_contents($jsFile);
-
-        if(!empty($jsExtPath['site']))
+        if(!empty($jsExtPath))
         {
-            $jsMethodExt = $jsExtPath['site'] . $methodName . DS;
-            $jsCommonExt = $jsExtPath['site'] . 'common' . DS;
+            $jsMethodExt = $jsExtPath['common'] . $methodName . DS;
+            $jsCommonExt = $jsExtPath['common'] . 'common' . DS;
 
             $jsExtFiles = glob($jsCommonExt . $this->devicePrefix . '*.js');
             if(!empty($jsExtFiles) and is_array($jsExtFiles)) foreach($jsExtFiles as $jsFile) $js .= file_get_contents($jsFile);
 
             $jsExtFiles = glob($jsMethodExt . $this->devicePrefix . '*.js');
             if(!empty($jsExtFiles) and is_array($jsExtFiles)) foreach($jsExtFiles as $jsFile) $js .= file_get_contents($jsFile);
-        }
 
+            if(!empty($jsExtPath['site']))
+            {
+                $jsMethodExt = $jsExtPath['site'] . $methodName . DS;
+                $jsCommonExt = $jsExtPath['site'] . 'common' . DS;
+
+                $jsExtFiles = glob($jsCommonExt . $this->devicePrefix . '*.js');
+                if(!empty($jsExtFiles) and is_array($jsExtFiles)) foreach($jsExtFiles as $jsFile) $js .= file_get_contents($jsFile);
+
+                $jsExtFiles = glob($jsMethodExt . $this->devicePrefix . '*.js');
+                if(!empty($jsExtFiles) and is_array($jsExtFiles)) foreach($jsExtFiles as $jsFile) $js .= file_get_contents($jsFile);
+            }
+        }
+        
         return $js;
     }
 
@@ -588,7 +597,7 @@ class baseControl
         $output['data']   = json_encode($this->view);
         $output['md5']    = md5(json_encode($this->view));
 
-        $this->output     = json_encode($output);
+        $this->output = json_encode($output);
     }
 
     /**
@@ -659,6 +668,10 @@ class baseControl
      */
     public function fetch($moduleName = '', $methodName = '', $params = array(), $appName = '')
     {
+        /**
+         * 如果模块名为空，则调用该模块、该方法。
+         * If the module name is empty, then use the current module and method.
+         */
         if($moduleName == '') $moduleName = $this->moduleName;
         if($methodName == '') $methodName = $this->methodName;
         if($appName == '')    $appName    = $this->appName;
@@ -668,20 +681,47 @@ class baseControl
             return $this->output;
         }
 
+        $currentModuleName = $this->moduleName;
+        $currentMethodName = $this->methodName;
+        $currentAppName    = $this->appName;
+
+        /**
+         * 设置调用指定模块的指定方法。
+         * chang the dir to the previous.
+         */
+        $this->app->setModuleName($moduleName);
+        $this->app->setMethodName($methodName);
+
+        if(!is_array($params)) parse_str($params, $params);
+        $currentPWD = getcwd();
+
         /**
          * 设置引用的文件和路径。
          * Set the pathes and files to included.
-         **/
+         */
         $modulePath        = $this->app->getModulePath($appName, $moduleName);
         $moduleControlFile = $modulePath . 'control.php';
         $actionExtPath     = $this->app->getModuleExtPath($appName, $moduleName, 'control');
+        $file2Included     = $moduleControlFile;
 
-        $commonActionExtFile = $actionExtPath['common'] . strtolower($methodName) . '.php';
-        $file2Included       = file_exists($commonActionExtFile) ? $commonActionExtFile : $moduleControlFile;
-        if(!empty($actionExtPath['site']))
+        if(!empty($actionExtPath))
         {
-            $siteActionExtFile = $actionExtPath['site'] . strtolower($methodName) . '.php';
-            $file2Included     = file_exists($siteActionExtFile) ? $siteActionExtFile : $file2Included;
+            /**
+             * 设置公共扩展。
+             * set common extension.
+             */
+            $commonActionExtFile = $actionExtPath['common'] . strtolower($methodName) . '.php';
+            $file2Included       = file_exists($commonActionExtFile) ? $commonActionExtFile : $moduleControlFile;
+
+            if(!empty($actionExtPath['site']))
+            {
+                /**
+                 * 设置站点扩展。
+                 * every site has it's extension.
+                 */
+                $siteActionExtFile = $actionExtPath['site'] . strtolower($methodName) . '.php';
+                $file2Included     = file_exists($siteActionExtFile) ? $siteActionExtFile : $file2Included;
+            }
         }
 
         /**
@@ -689,7 +729,6 @@ class baseControl
          * Load the control file. 
          */
         if(!is_file($file2Included)) $this->app->triggerError("The control file $file2Included not found", __FILE__, __LINE__, $exit = true);
-        $currentPWD = getcwd();
         chdir(dirname($file2Included));
         if($moduleName != $this->moduleName) helper::import($file2Included);
 
@@ -704,7 +743,6 @@ class baseControl
          * 解析参数，创建模块control对象。
          * Parse the params, create the $module control object. 
          */
-        if(!is_array($params)) parse_str($params, $params);
         $module = new $className($moduleName, $methodName, $appName);
 
         /**
@@ -715,13 +753,70 @@ class baseControl
         call_user_func_array(array($module, $methodName), $params);
         $output = ob_get_contents();
         ob_end_clean();
+        
+        unset($module);
+
+        /**
+         * 切换回之前的模块和方法。
+         * Chang the module、method to the previous.
+         */
+        $this->app->setModuleName($currentModuleName);
+        $this->app->setMethodName($currentMethodName);
+
+        $currentClassName = class_exists("my$currentModuleName") ? "my$currentModuleName" : $currentModuleName;
+        if(!class_exists($currentClassName)) $this->app->triggerError(" The class $currentClassName not found", __FILE__, __LINE__, $exit = true);
+
+        /* include default value for module*/
+        $defaultValueFiles = glob($this->app->getTmpRoot() . "defaultvalue/*.php");
+        if($defaultValueFiles) foreach($defaultValueFiles as $file) include $file;
+
+        /* 
+         * 使用反射机制获取函数参数的默认值。
+         * Get the default settings of the method to be called using the reflecting. 
+         *
+         * */
+        $defaultParams = array();
+        $methodReflect = new reflectionMethod($currentClassName, $currentMethodName);
+        foreach($methodReflect->getParameters() as $param)
+        {
+            $name = $param->getName();
+
+            $default = '_NOT_SET';
+            if(isset($paramDefaultValue[$currentAppName][$currentClassName][$currentMethodName][$name]))
+            {
+                $default = $paramDefaultValue[$currentAppName][$currentClassName][$currentMethodName][$name];
+            }
+            elseif(isset($paramDefaultValue[$currentClassName][$currentMethodName][$name]))
+            {
+                $default = $paramDefaultValue[$currentClassName][$currentMethodName][$name];
+            }
+            elseif($param->isDefaultValueAvailable())
+            {
+                $default = $param->getDefaultValue();
+            }
+
+            $defaultParams[$name] = $default;
+        }
+
+        /** 
+         * 根据PATH_INFO或者GET方式设置请求的参数。
+         * Set params according PATH_INFO or GET.
+         */
+        if($this->config->requestType != 'GET')
+        {
+            $this->app->setParamsByPathInfo($defaultParams);
+        }
+        else
+        {
+            $this->app->setParamsByGET($defaultParams);
+        }
+
+        chdir($currentPWD);
 
         /**
          * 返回内容。
          * Return the content. 
          */
-        unset($module);
-        chdir($currentPWD);
         return $output;
     }
 
@@ -754,7 +849,7 @@ class baseControl
         if($type != 'json') die();
 
         $data = (array) $data;
-        if(helper::isAjaxRequest()) print(json_encode($data)) and die(helper::removeUTF8Bom(ob_get_clean()));
+        if(helper::isAjaxRequest() or $this->viewType == 'json') print(json_encode($data)) and die(helper::removeUTF8Bom(ob_get_clean()));
 
         /**
          * 响应非ajax的请求。
diff --git a/framework/base/helper.class.php b/framework/base/helper.class.php
index c6bdcd99ff..5db377614d 100644
--- a/framework/base/helper.class.php
+++ b/framework/base/helper.class.php
@@ -3,6 +3,8 @@
  * ZenTaoPHP的baseHelper类。
  * The baseHelper class file of ZenTaoPHP framework.
  *
+ * @package framework
+ *
  * The author disclaims copyright to this source code. In place of
  * a legal notice, here is a blessing:
  * 
@@ -10,17 +12,10 @@
  *  May you find forgiveness for yourself and forgive others.
  *  May you share freely, never taking more than you give.
  */
-
-/**
- * 该类实现了一些常用的方法
- * The baseHelper class, contains the tool functions.
- *
- * @package framework
- */
 class baseHelper
 {
     /**
-     * 设置一个对象的成员变量
+     * 设置一个对象的成员变量。
      * Set the member's value of one object.
      * <code>
      * <?php
@@ -47,11 +42,8 @@ class baseHelper
     }
 
     /**
-     * 创建一个模块方法的链接
-     * control类的createLink实际上调用的是这个方法
-     *
-     * Create a link to a module's method.
-     * This method also mapped in control class to call conveniently.
+     * 生成一个模块方法的链接。control类的createLink实际上调用的是这个方法。
+     * Create a link to a module's method, mapped in control class to call conveniently.
      *
      * <code>
      * <?php
@@ -59,79 +51,133 @@ class baseHelper
      * helper::createLink('hello', 'index', array('var1' => 'value1', 'var2' => 'value2');
      * ?>
      * </code>
-     * @param string       $moduleName     module name
+     * @param string       $moduleName     module name, can pass appName like app.module.
      * @param string       $methodName     method name
      * @param string|array $vars           the params passed to the method, can be array('key' => 'value') or key1=value1&key2=value2) or key1=value1&key2=value2
      * @param string       $viewType       the view type
-     * @param bool         $onlybody       whether onlybody
+     * @param bool         $onlyBody       pass onlyBody=yes to the link thus the app can control the header and footer hide or show..
      * @static
      * @access public
      * @return string the link string.
      */
-    static public function createLink($moduleName, $methodName = 'index', $vars = '', $viewType = '', $onlybody = false)
+    static public function createLink($moduleName, $methodName = 'index', $vars = '', $viewType = '', $onlyBody = false)
     {
+        /* 设置$appName和$moduleName。Set appName and moduleName. */
         global $app, $config;
-        $appName = $app->getAppName();
-        if(strpos($moduleName, '.') !== false) list($appName, $moduleName) = explode('.', $moduleName);
-        $appName = empty($appName) ? '' : $appName . '/';
+        if(strpos($moduleName, '.') !== false) 
+        {
+            list($appName, $moduleName) = explode('.', $moduleName);
+        }
+        else
+        {
+            $appName = $app->getAppName();
+        }
+        if(!empty($appName)) $appName .= '/';
 
-        $link = $config->requestType == 'PATH_INFO' ? $config->webRoot . $appName : $config->webRoot . $appName . basename($_SERVER['SCRIPT_NAME']);
-        if($config->requestType == 'PATH_INFO2') $link .= '/';
-
-        /* 设置视图类型和变量。 */
-        /* Set the view type and vars. */
+        /* 处理$viewType和$vars。Set $viewType and $vars. */
         if(empty($viewType)) $viewType = $app->getViewType();
         if(!is_array($vars)) parse_str($vars, $vars);
 
-        /* PATH_INFO方式。 */
-        /* The PATH_INFO and PATH_INFO2 type. */
-        if($config->requestType != 'GET')
-        {
-            /* 如果方法名与默认方法相等，并且参数是空的，转换为友好的链接地址。 */
-            /* If the method equal the default method defined in the config file and the vars is empty, convert the link. */
-            if($methodName == $config->default->method and empty($vars))
-            {
-                /* 如果模块名与默认模块名相等，转换为index.html。*/
-                /* If the module also equal the default module, change index-index to index.html. */
-                if($moduleName == $config->default->module)
-                {
-                    $link .= 'index.' . $viewType;
-                }
-                elseif($viewType == $app->getViewType())
-                {
-                    $link .= $moduleName . '/';
-                }
-                else
-                {
-                    $link .= $moduleName . '.' . $viewType;
-                }
-            }
-            else
-            {
-                $link .= "$moduleName{$config->requestFix}$methodName";
-                foreach($vars as $value) $link .= "{$config->requestFix}$value";
-                $link .= '.' . $viewType;
-            }
-        }
-        else
+        /* 生成url链接的开始部分。Set the begin parts of the link. */
+        if($config->requestType == 'PATH_INFO')  $link = $config->webRoot . $appName;
+        if($config->requestType != 'PATH_INFO')  $link = $config->webRoot . $appName . basename($_SERVER['SCRIPT_NAME']);
+        if($config->requestType == 'PATH_INFO2') $link .= '/';
+
+        /**
+         * #1: RequestType为GET。When the requestType is GET. 
+         * Input: moduleName=article&methodName=index&var1=value1. Output: ?m=article&f=index&var1=value1.
+         *
+         */
+        if($config->requestType == 'GET')
         {
             $link .= "?{$config->moduleVar}=$moduleName&{$config->methodVar}=$methodName";
             if($viewType != 'html') $link .= "&{$config->viewVar}=" . $viewType;
             foreach($vars as $key => $value) $link .= "&$key=$value";
+            return self::processOnlyBodyParam($link, $onlyBody);
         }
 
-        /* if page has onlybody param then add this param in all link. the param hide header and footer. */
-        if($onlybody or isonlybody())
+        /**
+         * #2: 方法名不是默认值或者是默认值，但有传参。MethodName equals the default method or vars not empty. 
+         * Input: moduleName=article&methodName=view. Output: article-view.html
+         * Input: moduleName=article&methodName=view. Output: article-index-abc.html
+         *
+         */
+        if($methodName != $config->default->method or !empty($vars))
         {
-            $onlybody = $config->requestType != 'GET' ? "?onlybody=yes" : "&onlybody=yes";
-            $link .= $onlybody;
+            $link .= "$moduleName{$config->requestFix}$methodName";
+            foreach($vars as $value) $link .= "{$config->requestFix}$value";
+            $link .= '.' . $viewType;
+
+            return self::processOnlyBodyParam($link, $onlyBody);
         }
-        return $link;
+
+        /**
+         * #3: 方法名为默认值且没有传参且模块名为默认值。MethodName is the default and moduleName is default and vars empty. 
+         * Input: moduleName=index&methodName=index. Output: index.html
+         *
+         */
+        if($moduleName == $config->default->module)
+        {
+            $link .= $config->default->method . '.' . $viewType; 
+            return self::processOnlyBodyParam($link, $onlyBody);
+        }
+
+        /**
+         * #4: 方法名为默认值且没有传参且模块名不为默认值，viewType和app指定的相等。MethodName is default but moduleName not and viewType equal app's viewType.. 
+         * Input: moduleName=article&methodName=index&viewType=html. Output: /article/
+         *
+         */
+        if($viewType == $app->getViewType())
+        {
+            $link .= $moduleName . '/';
+            return self::processOnlyBodyParam($link, $onlyBody);
+        }
+
+        /**
+         * #5: 方法名为默认值且没有传参且模块名不为默认值，viewType有另外指定。MethodName is default but moduleName not and viewType no equls app's viewType. 
+         * Input: moduleName=article&methodName=index&viewType=json. Output: /article.json
+         *
+         */
+        $link .= $moduleName . '.' . $viewType;
+        return self::processOnlyBodyParam($link, $onlyBody);
     }
 
     /**
-     * 引用一个文件，替换内置的include及require方法
-     * Import a file instend of include or require.
+     * 处理onlyBody 参数。
+     * Process the onlyBody param in url.
+     *
+     * 如果传参的时候设定了$onlyBody为真，或者当前页面请求中包含了onlybody=yes，在生成链接的时候继续追加。
+     * If $onlyBody set to true or onlybody=yes in the url, append onlyBody param to the link.
+     * 
+     * @param  string  $link 
+     * @param  bool    $onlyBody 
+     * @static
+     * @access public
+     * @return string
+     */
+    public static function processOnlyBodyParam($link, $onlyBody = true)
+    {
+        global $config;
+        if($onlyBody == false or !self::inOnlyBodyMode()) return $link;
+        $onlybodyString = $config->requestType != 'GET' ? "?onlybody=yes" : "&onlybody=yes";
+        return $link . $onlybodyString;
+    }
+
+    /**
+     * 检查是否是onlybody模式。
+     * Check in only body mode or not.
+     * 
+     * @access public
+     * @return void
+     */
+    public static function inOnlyBodyMode()
+    {
+        return (isset($_GET['onlybody']) and $_GET['onlybody'] == 'yes');
+    }
+
+    /**
+     * 使用helper::import()来引入文件，不要直接使用include或者require. 
+     * Using helper::import() to import a file, instead of include or require.
      *
      * @param string    $file   the file to be imported.
      * @static
@@ -141,6 +187,7 @@ class baseHelper
     static public function import($file)
     {
         if(!is_file($file)) return false;
+
         static $includedFiles = array();
         if(!isset($includedFiles[$file]))
         {
@@ -148,196 +195,36 @@ class baseHelper
             $includedFiles[$file] = true;
             return true;
         }
+
         return true;
     }
 
     /**
-     * 设置一个模块的model文件，如果存在model扩展，一起合并
-     * Set the model file of one module. If there's an extension file, merge it with the main model file.
+     * 将数组或者列表转化成 IN( 'a', 'b') 的形式。
+     * Convert a list to  IN('a', 'b') string.
      * 
-     * @param   string $moduleName the module name
-     * @param   string $appName the app name
-     * @static
-     * @access  public
-     * @return  string the model file
-     */
-    static public function setModelFile($moduleName, $appName = '')
-    {
-        global $app;
-        if($appName == '') $appName = $app->getAppName();
-
-        /* 设置主model文件，扩展文件和路径。 */
-        /* Set the main model file, extension path and files. */
-        $mainModelFile = $app->getModulePath($appName, $moduleName) . 'model.php';
-        $modelExtPaths = $app->getModuleExtPath($appName, $moduleName, 'model');
-
-        $hookFiles = array();
-        $extFiles  = array();
-        foreach($modelExtPaths as $modelExtPath)
-        {
-            if(empty($modelExtPath)) continue;
-            $hookFiles = array_merge($hookFiles, helper::ls($modelExtPath . 'hook/', '.php'));
-            $extFiles  = array_merge($extFiles, helper::ls($modelExtPath, '.php'));
-        }
-
-        /* Get ext's app name from realname. */
-        if($appName) $extAppName = basename(dirname(dirname(dirname($modelExtPath))));
-
-        /* 如果没有扩展文件，返回主文件目录。 */
-        /* If no extension file, return the main file directly. */
-        if(empty($extFiles) and empty($hookFiles)) return $mainModelFile;
-
-        /* 通过对比合并后的缓存文件和扩展文件的修改时间，确定是否要重新生成缓存 */
-        /* Else, judge whether needed update or not .*/
-        $extModelPrefix  = empty($app->siteCode) ? '' : $app->siteCode{0} . DS . $app->siteCode . DS;
-        $mergedModelDir  = $app->getTmpRoot() . 'model' . DS . $extModelPrefix;
-        $mergedModelFile = $mergedModelDir . (empty($app->siteCode) ? '' : $app->siteCode . '.') . $moduleName . '.php';
-        $needUpdate      = false;
-        $lastTime        = file_exists($mergedModelFile) ? filemtime($mergedModelFile) : 0;
-        if(!is_dir($mergedModelDir)) mkdir($mergedModelDir, 0755, true);
-
-        while(!$needUpdate)
-        {
-            foreach($extFiles  as $extFile) if(filemtime($extFile)  > $lastTime) break 2;
-            foreach($hookFiles as $hookFile) if(filemtime($hookFile) > $lastTime) break 2;
-
-            $modelExtPath  = $modelExtPaths['common']; 
-            $modelHookPath = $modelExtPaths['common'] . 'hook/';
-            if(is_dir($modelExtPath ) and filemtime($modelExtPath)  > $lastTime) break;
-            if(is_dir($modelHookPath) and filemtime($modelHookPath) > $lastTime) break;
-            if($modelExtPaths['site'])
-            {
-                $modelExtPath  = $modelExtPaths['site']; 
-                $modelHookPath = $modelExtPaths['site'] . 'hook/';
-                if(is_dir($modelExtPath ) and filemtime($modelExtPath)  > $lastTime) break;
-                if(is_dir($modelHookPath) and filemtime($modelHookPath) > $lastTime) break;
-            }
-
-            if(filemtime($mainModelFile) > $lastTime) break;
-
-            return $mergedModelFile;
-        }
-
-        /* If loaded zend opcache module, turn off cache when create tmp model file to avoid the conflics. */
-        if(extension_loaded('Zend OPcache')) ini_set('opcache.enable', 0);
-
-        /* Update the cache file. */
-        $modelClass       = $moduleName . 'Model';
-        $extModelClass    = 'ext' . $modelClass;
-        $extTmpModelClass = 'tmpExt' . $modelClass;
-        $modelLines       = "<?php\n";
-        $modelLines      .= "global \$app;\n";
-        $modelLines      .= "helper::cd(\$app->getBasePath());\n";
-        $modelLines      .= "helper::import('" . str_replace($app->getBasePath(), '.' . DS, $mainModelFile) . "');\n";
-        $modelLines      .= "helper::cd();\n";
-        $modelLines      .= "class $extTmpModelClass extends $modelClass \n{\n";
-
-        /* Cycle all the extension files. */
-        foreach($extFiles as $extFile)
-        {
-            $extLines = self::removeTagsOfPHP($extFile);
-            $modelLines .= $extLines . "\n";
-        }
-
-        /* Create the merged model file and import it. */
-        $replaceMark = '//**//';    // This mark is for replacing code using.
-        $modelLines .= "$replaceMark\n}";
-
-        $tmpMergedModelFile = $mergedModelDir . 'tmp.' . (empty($app->siteCode) ? '' : $app->siteCode . '.') . $moduleName . '.php';
-        if(!@file_put_contents($tmpMergedModelFile, $modelLines))
-        {
-            die("ERROR: $tmpMergedModelFile not writable, please make sure the " . dirname($tmpMergedModelFile) . ' directory exists and writable');
-        }
-        if(!class_exists($extTmpModelClass)) include $tmpMergedModelFile;
-
-        /* Get hook codes need to merge. */
-        $hookCodes = array();
-        foreach($hookFiles as $hookFile)
-        {
-            $fileName = baseName($hookFile);
-            list($method) = explode('.', $fileName);
-            $hookCodes[$method][] = self::removeTagsOfPHP($hookFile);
-        }
-
-        /* Cycle the hook methods and merge hook codes. */
-        $hookedMethods    = array_keys($hookCodes);
-        $mainModelCodes   = file($mainModelFile);
-        $mergedModelCodes = file($tmpMergedModelFile);
-        foreach($hookedMethods as $method)
-        {
-            /* Reflection the hooked method to get it's defined position. */
-            $methodRelfection = new reflectionMethod($extTmpModelClass, $method);
-            $definedFile = $methodRelfection->getFileName();
-            $startLine   = $methodRelfection->getStartLine() . ' ';
-            $endLine     = $methodRelfection->getEndLine() . ' ';
-
-            /* Merge hook codes. */
-            $oldCodes = $definedFile == $tmpMergedModelFile ? $mergedModelCodes : $mainModelCodes;
-            $oldCodes = join("", array_slice($oldCodes, $startLine - 1, $endLine - $startLine + 1));
-            $openBrace = strpos($oldCodes, '{');
-            $newCodes = substr($oldCodes, 0, $openBrace + 1) . "\n" . join("\n", $hookCodes[$method]) . substr($oldCodes, $openBrace + 1);
-
-            /* Replace it. */
-            if($definedFile == $tmpMergedModelFile)
-            {
-                $modelLines = str_replace($oldCodes, $newCodes, $modelLines);
-            }
-            else
-            {
-                $modelLines = str_replace($replaceMark, $newCodes . "\n$replaceMark", $modelLines);
-            }
-        }
-        unlink($tmpMergedModelFile);
-        
-        /* Save it. */
-        $modelLines = str_replace($extTmpModelClass, $extModelClass, $modelLines);
-        file_put_contents($mergedModelFile, $modelLines);
-
-        return $mergedModelFile;
-    }
-
-    /**
-     * Remove tags of PHP 
-     * 
-     * @param  string    $fileName 
-     * @static
-     * @access public
-     * @return string
-     */
-    static public function removeTagsOfPHP($fileName)
-    {
-        $code = trim(file_get_contents($fileName));
-        if(strpos($code, '<?php') === 0)     $code = ltrim($code, '<?php');
-        if(strrpos($code, '?>')   !== false) $code = rtrim($code, '?>');
-        return trim($code);
-    }
-
-    /**
-     * 将数组转化成 IN( 'a', 'b') 的形式，用于数据库字符串拼接
-     * Create the in('a', 'b') string.
-     * 
-     * @param   string|array $ids   the id lists, can be a array or a string with ids joined with comma.
+     * @param   string|array $idList   列表，可以是数组或者用逗号隔开的列表。The id lists, can be a array or a string joined with comma.
      * @static
      * @access  public
      * @return  string  the string like IN('a', 'b').
      */
-    static public function dbIN($ids)
+    static public function dbIN($idList)
     {
-        if(is_array($ids)) 
+        if(is_array($idList)) 
         {
             if(!function_exists('get_magic_quotes_gpc') or !get_magic_quotes_gpc())
             {
-                foreach ($ids as $key=>$value)  $ids[$key] = addslashes($value); 
+                foreach ($idList as $key=>$value)  $idList[$key] = addslashes($value); 
             }
-            return "IN ('" . join("','", $ids) . "')";
+            return "IN ('" . join("','", $idList) . "')";
         }
 
-        if(!function_exists('get_magic_quotes_gpc') or !get_magic_quotes_gpc()) $ids = addslashes($ids);
-        return "IN ('" . str_replace(',', "','", str_replace(' ', '', $ids)) . "')";
+        if(!function_exists('get_magic_quotes_gpc') or !get_magic_quotes_gpc()) $idList = addslashes($idList);
+        return "IN ('" . str_replace(',', "','", str_replace(' ', '', $idList)) . "')";
     }
 
     /**
-     * base64编码，框架对'/'字符比较敏感，转换为'.'
+     * 安全的Base64编码，框架对'/'字符比较敏感，转换为'.'。
      * Create safe base64 encoded string for the framework.
      * 
      * @param   string  $string   the string to encode.
@@ -365,7 +252,8 @@ class baseHelper
     }
 
     /**
-     * Json encode and addslashe if magic_quotes_gpc is on. 
+     * JSON编码，自动处理转义的问题。
+     * JSON encode, process the slashes.
      * 
      * @param   mixed  $data   the object to encode
      * @static
@@ -374,15 +262,15 @@ class baseHelper
      */
     static public function jsonEncode($data)
     {
-        return (version_compare(phpversion(), '5.4', '<') and function_exists('get_magic_quotes_gpc') and get_magic_quotes_gpc()) ? addslashes(json_encode($data)) : json_encode($data);
+        return (function_exists('get_magic_quotes_gpc') and get_magic_quotes_gpc()) ? addslashes(json_encode($data)) : json_encode($data);
     }
 
     /**
      * 判断是否是utf8编码
      * Judge a string is utf-8 or not.
      * 
-     * @param  string    $string 
      * @author hmdker@gmail.com
+     * @param  string    $string 
      * @see    http://php.net/manual/en/function.mb-detect-encoding.php
      * @static
      * @access public
@@ -420,11 +308,127 @@ class baseHelper
     }
 
     /**
-     *  计算两个日期相差的天数，取整
+     * 去掉UTF-8 Bom头。
+     * Remove UTF-8 Bom.
+     * 
+     * @param  string    $string
+     * @access public
+     * @return string
+     */
+    public static function removeUTF8Bom($string)
+    {
+        if(substr($string, 0, 3) == pack('CCC', 239, 187, 191)) return substr($string, 3);
+        return $string;
+    }
+
+    /**
+     * 增强substr方法：支持多字节语言，比如中文。
+     * Enhanced substr version: support multibyte languages like Chinese.
+     *
+     * @param string    $string
+     * @param int       $length 
+     * @param string    $append 
+     * @return string 
+     */
+    public static function substr($string, $length, $append = '')
+    {
+        $rawString = $string;
+
+        if(function_exists('mb_substr')) $string = mb_substr($string, 0, $length, 'utf-8');
+
+        preg_match_all("/./su", $string, $data);
+        $string = join("", array_slice($data[0],  0, $length));
+
+        return ($string != $rawString) ? $string . $append : $string;
+    }
+
+    /**
+     * Get browser name and version.
+     * 
+     * @access public
+     * @return array
+     */
+    public static function getBrowser()
+    {
+        $browser = array('name'=>'unknown', 'version'=>'unknown');
+
+        if(empty($_SERVER['HTTP_USER_AGENT'])) return $browser;
+
+        $agent = $_SERVER["HTTP_USER_AGENT"];
+
+        /* Chrome should checked before safari.*/
+        if(strpos($agent, 'Firefox') !== false) $browser['name'] = "firefox";
+        if(strpos($agent, 'Opera') !== false)   $browser['name'] = 'opera';
+        if(strpos($agent, 'Safari') !== false)  $browser['name'] = 'safari';
+        if(strpos($agent, 'Chrome') !== false)  $browser['name'] = "chrome";
+
+        // Check the name of browser
+        if(strpos($agent, 'MSIE') !== false || strpos($agent, 'rv:11.0')) $browser['name'] = 'ie';
+        if(strpos($agent, 'Edge') !== false) $browser['name'] = 'edge';
+
+        // Check the version of browser
+        if(preg_match('/MSIE\s(\d+)\..*/i', $agent, $regs))       $browser['version'] = $regs[1];
+        if(preg_match('/FireFox\/(\d+)\..*/i', $agent, $regs))    $browser['version'] = $regs[1];
+        if(preg_match('/Opera[\s|\/](\d+)\..*/i', $agent, $regs)) $browser['version'] = $regs[1];
+        if(preg_match('/Chrome\/(\d+)\..*/i', $agent, $regs))     $browser['version'] = $regs[1];
+
+        if((strpos($agent, 'Chrome') == false) && preg_match('/Safari\/(\d+)\..*$/i', $agent, $regs)) $browser['version'] = $regs[1];
+        if(preg_match('/rv:(\d+)\..*/i', $agent, $regs)) $browser['version'] = $regs[1];
+        if(preg_match('/Edge\/(\d+)\..*/i', $agent, $regs)) $browser['version'] = $regs[1];
+
+        return $browser;
+    }
+
+    /**
+     * Get client os from agent info. 
+     * 
+     * @static
+     * @access public
+     * @return string
+     */
+    public static function getOS()
+    {
+        if(empty($_SERVER['HTTP_USER_AGENT'])) return 'unknow';
+
+        $osList = array();
+        $osList['/windows nt 10/i']      = 'Windows 10';
+        $osList['/windows nt 6.3/i']     = 'Windows 8.1';
+        $osList['/windows nt 6.2/i']     = 'Windows 8';
+        $osList['/windows nt 6.1/i']     = 'Windows 7';
+        $osList['/windows nt 6.0/i']     = 'Windows Vista';
+        $osList['/windows nt 5.2/i']     = 'Windows Server 2003/XP x64';
+        $osList['/windows nt 5.1/i']     = 'Windows XP';
+        $osList['/windows xp/i']         = 'Windows XP';
+        $osList['/windows nt 5.0/i']     = 'Windows 2000';
+        $osList['/windows me/i']         = 'Windows ME';
+        $osList['/win98/i']              = 'Windows 98';
+        $osList['/win95/i']              = 'Windows 95';
+        $osList['/win16/i']              = 'Windows 3.11';
+        $osList['/macintosh|mac os x/i'] = 'Mac OS X';
+        $osList['/mac_powerpc/i']        = 'Mac OS 9';
+        $osList['/linux/i']              = 'Linux';
+        $osList['/ubuntu/i']             = 'Ubuntu';
+        $osList['/iphone/i']             = 'iPhone';
+        $osList['/ipod/i']               = 'iPod';
+        $osList['/ipad/i']               = 'iPad';
+        $osList['/android/i']            = 'Android';
+        $osList['/blackberry/i']         = 'BlackBerry';
+        $osList['/webos/i']              = 'Mobile';
+
+        foreach ($osList as $regex => $value)
+        { 
+            if(preg_match($regex, $_SERVER['HTTP_USER_AGENT'])) return $value; 
+        }   
+
+        return 'unknown';
+    }
+    
+    /**
+     *  计算两个日期相差的天数，取整。
      *  Compute the diff days of two date.
      * 
      * @param   string $date1   the first date.
-     * @param   string $date2   the sencode date.
+     * @param   string $date2   the sencond date.
      * @access  public
      * @return  int  the diff of the two days.
      */
@@ -434,7 +438,7 @@ class baseHelper
     }
 
     /**
-     *  获取当前时间，使用common语言文件定义的DT_DATETIME1常量
+     *  获取当前时间，使用common语言文件定义的DT_DATETIME1常量。
      *  Get now time use the DT_DATETIME1 constant defined in the lang file.
      * 
      * @access  public
@@ -446,7 +450,7 @@ class baseHelper
     }
 
     /**
-     *  获取当前日期，使用common语言文件定义的DT_DATE1常量
+     *  获取当前日期，使用common语言文件定义的DT_DATE1常量。
      *  Get today according to the  DT_DATE1 constant defined in the lang file.
      *
      * @access  public
@@ -458,7 +462,7 @@ class baseHelper
     }
 
     /**
-     *  获取当前日期，使用common语言文件定义的DT_DATE1常量
+     *  获取当前日期，使用common语言文件定义的DT_TIME1常量。
      *  Get now time use the DT_TIME1 constant defined in the lang file.
      * 
      * @access  public
@@ -470,7 +474,7 @@ class baseHelper
     }
 
     /**
-     *  判断日期是不是零
+     *  判断日期是不是零。
      *  Judge a date is zero or not.
      * 
      * @access  public
@@ -482,8 +486,8 @@ class baseHelper
     }
 
     /**
-     *  列出目录中符合该正则表达式的文件
-     *  Get files match the pattern under one directory.
+     *  列出目录中符合该正则表达式的文件。
+     *  Get files match the pattern under a directory.
      * 
      * @access  public
      * @return  array   the files match the pattern
@@ -499,8 +503,8 @@ class baseHelper
     }
 
     /**
-     * 切换目录
-     * Change directory.
+     * 切换目录。第一次调用的时候记录当前的路径，再次调用的时候切换回之前的路径。
+     * Change directory: first call, save the $cwd, secend call, change to $cwd.
      * 
      * @param  string $path 
      * @static
@@ -514,80 +518,52 @@ class baseHelper
         !empty($path) ? chdir($path) : chdir($cwd);
     }
 
-    /**
-     * 去掉UTF8 Bom头
-     * Remove UTF8 Bom 
-     * 
-     * @param  string    $string
-     * @access public
-     * @return string
-     */
-    public static function removeUTF8Bom($string)
-    {
-        if(substr($string, 0, 3) == pack('CCC', 239, 187, 191)) return substr($string, 3);
-        return $string;
-    }
-
     /**
      * 通过域名获取站点代号。
-     * Get siteCode from domain.
+     * Get siteCode for a domain.
+     *
+     * www.xirang.com => xirang
+     * xirang.com     => xirang
+     * xirang.com.cn  => xirang
+     * xirang.cn      => xirang
+     * xirang         => xirang
+     *
      * @param  string $domain
      * @return string $siteCode
      **/ 
-    public static function getSiteCode($domain)
+    public static function parseSiteCode($domain)
     {
         global $config;
 
-        if(strpos($domain, ':') !== false) $domain = substr($domain, 0, strpos($domain, ':')); // Remove port from domain.
+        /* 去除域名中的端口部分。Remove the port part of the domain. */
+        if(strpos($domain, ':') !== false) $domain = substr($domain, 0, strpos($domain, ':'));
         $domain = strtolower($domain);
 
-        if(isset($config->siteCode[$domain])) return $config->siteCode[$domain];
+        /* $config里面有定义或者是localhost，直接返回。 Return directly if defined in $config or is localhost. */
+        if(isset($config->siteCodeList[$domain])) return $config->siteCodeList[$domain];
         if($domain == 'localhost') return $domain;
 
-        $domain  = str_replace('-', '_', $domain);    // Replace '-' by '_'.
-        $items   = explode('.', $domain);
+        /* 将域名中的-改为_。Replace '-' with '_' in the domain. */
+        $domain = str_replace('-', '_', $domain);
+        $items  = explode('.', $domain);
+
+        /* 类似a.com的形式。 Domain like a.com. */
         $postfix = str_replace($items[0] . '.', '', $domain);
-        if(isset($config->chanzhi->node->domain) and $postfix == $config->chanzhi->node->domain) return $items[0];
         if(isset($config->domainPostfix) and strpos($config->domainPostfix, "|$postfix|") !== false) return $items[0];
 
+        /* 类似www.a.com的形式。 Domain like www.a.com. */
         $postfix = str_replace($items[0] . '.' . $items[1] . '.', '', $domain);
         if(isset($config->domainPostfix) and strpos($config->domainPostfix, "|$postfix|") !== false) return $items[1];
 
-        return null;
+        /* 类似xxx.sub.a.com的形式。 Domain like xxx.sub.a.com. */
+        $postfix = str_replace($items[0] . '.' . $items[1] . '.' . $items[2] . '.', '', $domain);
+        if(isset($config->domainPostfix) and strpos($config->domainPostfix, "|$postfix|") !== false) return $items[0];
+
+        return '';
     }
 
     /**
-     * 增强substr方法：支持多字节语言，比如中文。
-     * Enhanced substr version: support multibyte languages like Chinese.
-     *
-     * @param string $string
-     * @param int $length 
-     * @param string $append 
-     * @return string 
-     **/
-    public static function substr($string, $length, $append = '')
-    {
-        if (strlen($string) <= $length ) $append = '';
-        if(function_exists('mb_substr')) return mb_substr($string, 0, $length, 'utf-8') . $append;
-
-        preg_match_all("/./su", $string, $data);
-        return join("", array_slice($data[0],  0, $length)) . $append;
-    }
-
-    /**
-     * 检查是否是SEO模式
-     * Check in seo mode or not.
-     *
-     * return bool
-     */
-    public static function inSeoMode()
-    {
-        global $config;
-        return (!empty($config->seoMode) and ($config->requestType != 'GET'));
-    }
-
-    /**
-     * 检查是否是AJAX请求
+     * 检查是否是AJAX请求。
      * Check is ajax request.
      * 
      * @static
@@ -596,13 +572,13 @@ class baseHelper
      */
     public static function isAjaxRequest()
     {
-        $isAjax = isset($_SERVER['HTTP_X_REQUESTED_WITH']) && $_SERVER['HTTP_X_REQUESTED_WITH'] == 'XMLHttpRequest';
-        if(!$isAjax) $isAjax = (isset($_GET['HTTP_X_REQUESTED_WITH']) && $_GET['HTTP_X_REQUESTED_WITH'] == 'true');
-        return $isAjax;
+        if(isset($_SERVER['HTTP_X_REQUESTED_WITH']) && $_SERVER['HTTP_X_REQUESTED_WITH'] == 'XMLHttpRequest') return true;
+        if(isset($_GET['HTTP_X_REQUESTED_WITH'])    && $_GET['HTTP_X_REQUESTED_WITH']    == 'XMLHttpRequest') return true;
+        return false;
     }
 
     /**
-     * 301跳转
+     * 301跳转。
      * Header 301 Moved Permanently.
      * 
      * @param  string    $locate 
@@ -615,229 +591,6 @@ class baseHelper
         die(header('Location:' . $locate));
     }
 
-    /**
-     * 获取浏览器类型。
-     * Get browser.
-     * 
-     * @access public
-     * @return string
-     */
-    public static function getBrowser()
-    {
-        if(empty($_SERVER['HTTP_USER_AGENT'])) return 'unknow';
-
-        $agent = $_SERVER["HTTP_USER_AGENT"];
-        if(strpos($agent, 'MSIE') !== false || strpos($agent, 'rv:11.0')) 
-        {
-            return "ie";
-        }
-        else if(strpos($agent, 'Firefox') !== false)
-        {
-            return "firefox";
-        }
-        else if(strpos($agent, 'Chrome') !== false)
-        {
-            return "chrome";
-        }
-        else if(strpos($agent, 'Opera') !== false)
-        {
-            return 'opera';
-        }
-        else if((strpos($agent, 'Chrome') == false) && strpos($agent, 'Safari') !== false)
-        {
-            return 'safari';
-        }
-        else
-        {
-            return 'unknown';
-        }
-    }
-
-    /**
-     * 获取浏览器版本
-     * Get browser version. 
-     * 
-     * @access public
-     * @return string
-     */
-    public static function getBrowserVersion()
-    {
-        if(empty($_SERVER['HTTP_USER_AGENT'])) return 'unknow';
-
-        $agent = $_SERVER['HTTP_USER_AGENT'];   
-        if(preg_match('/MSIE\s(\d+)\..*/i', $agent, $regs))
-        {
-            return $regs[1];
-        }
-        else if(preg_match('/FireFox\/(\d+)\..*/i', $agent, $regs))
-        {
-            return $regs[1];
-        }
-        else if(preg_match('/Opera[\s|\/](\d+)\..*/i', $agent, $regs))
-        {
-            return $regs[1];
-        }
-        else if(preg_match('/Chrome\/(\d+)\..*/i', $agent, $regs))
-        {
-            return $regs[1];
-        }
-        else if((strpos($agent,'Chrome') == false) && preg_match('/Safari\/(\d+)\..*$/i', $agent, $regs))
-        {
-            return $regs[1];
-        }
-        else if(preg_match('/rv:(\d+)\..*/i', $agent, $regs))
-        {
-            return $regs[1];
-        }
-        else
-        {
-            return 'unknow';
-        }
-    }
-
-    /**
-     * 获取客户端操作系统
-     * Get client os from agent info. 
-     * 
-     * @static
-     * @access public
-     * @return string
-     */
-    public static function getOS()
-    {
-        if(empty($_SERVER['HTTP_USER_AGENT'])) return 'unknow';
-
-        $osList = array(
-            '/windows nt 10/i'      =>  'Windows 10',
-            '/windows nt 6.3/i'     =>  'Windows 8.1',
-            '/windows nt 6.2/i'     =>  'Windows 8',
-            '/windows nt 6.1/i'     =>  'Windows 7',
-            '/windows nt 6.0/i'     =>  'Windows Vista',
-            '/windows nt 5.2/i'     =>  'Windows Server 2003/XP x64',
-            '/windows nt 5.1/i'     =>  'Windows XP',
-            '/windows xp/i'         =>  'Windows XP',
-            '/windows nt 5.0/i'     =>  'Windows 2000',
-            '/windows me/i'         =>  'Windows ME',
-            '/win98/i'              =>  'Windows 98',
-            '/win95/i'              =>  'Windows 95',
-            '/win16/i'              =>  'Windows 3.11',
-            '/macintosh|mac os x/i' =>  'Mac OS X',
-            '/mac_powerpc/i'        =>  'Mac OS 9',
-            '/linux/i'              =>  'Linux',
-            '/ubuntu/i'             =>  'Ubuntu',
-            '/iphone/i'             =>  'iPhone',
-            '/ipod/i'               =>  'iPod',
-            '/ipad/i'               =>  'iPad',
-            '/android/i'            =>  'Android',
-            '/blackberry/i'         =>  'BlackBerry',
-            '/webos/i'              =>  'Mobile'
-        );
-
-        foreach ($osList as $regex => $value)
-        { 
-            if(preg_match($regex, $_SERVER['HTTP_USER_AGENT'])) return $value; 
-        }   
-
-        return 'unknown';
-    }
-
-    /**
-     * 设置$viewType，html还是mhtml或其他。
-     * Set viewType.
-     * 
-     * @static
-     * @access public
-     * @return void
-     */
-    public static function setViewType()
-    {
-        global $config, $app;
-        if($config->requestType != 'GET')
-        {
-            $pathInfo = $app->getPathInfo();
-            if(!empty($pathInfo))
-            {
-                $dotPos = strrpos($pathInfo, '.');
-                if($dotPos)
-                {
-                    $viewType = substr($pathInfo, $dotPos + 1);
-                }
-                else
-                {
-                    $config->default->view = $config->default->view == 'mhtml' ? 'html' : $config->default->view;
-                }
-            }
-        }
-        elseif($config->requestType == 'GET')
-        {
-            if(isset($_GET[$config->viewVar]))
-            {
-                $viewType = $_GET[$config->viewVar]; 
-            }
-            else
-            {
-                /* Set default view when url has not module name. such as only domain. */
-                $config->default->view = ($config->default->view == 'mhtml' and isset($_GET[$config->moduleVar])) ? 'html' : $config->default->view;
-            }
-        }
-
-        if(isset($viewType) and strpos($config->views, ',' . $viewType . ',') === false) $viewType = $config->default->view;
-        $app->viewType = isset($viewType) ? $viewType : $config->default->view;
-    }
-
-    /**
-     * 数据配置合并到主配置
-     * Merge config items in database and config files.
-     * 
-     * @param  array  $dbConfig 
-     * @param  string $moduleName 
-     * @static
-     * @access public
-     * @return void
-     */
-    public static function mergeConfig($dbConfig, $moduleName = 'common')
-    {
-        global $config;
-
-        $config2Merge = $config;
-        if($moduleName != 'common') $config2Merge = $config->$moduleName;
-
-        foreach($dbConfig as $item)
-        {
-            foreach($item as $record)
-            {
-                if(!is_object($record))
-                {
-                    if($item->section and !isset($config2Merge->{$item->section})) $config2Merge->{$item->section} = new stdclass();
-                    $configItem = $item->section ? $config2Merge->{$item->section} : $config2Merge;
-                    if($item->key) $configItem->{$item->key} = $item->value;
-                    break;
-                }
-
-                if($record->section and !isset($config2Merge->{$record->section})) $config2Merge->{$record->section} = new stdclass();
-                $configItem = $record->section ? $config2Merge->{$record->section} : $config2Merge;
-                if($record->key) $configItem->{$record->key} = $record->value;
-            }
-        }
-    }
-
-    /**
-     * 将字符串中的字符统一到标准字符。
-     * Unify string to standard chars.
-     * 
-     * @param  string    $string 
-     * @param  string    $to 
-     * @static
-     * @access public
-     * @return string
-     */
-    public static function unify($string, $to = ',')
-    {
-        $labels = array('_', '、', ' ', '-', '?', '@', '&', '%', '~', '`', '+', '*', '/', '\\', '，', '。');
-        $string = str_replace($labels, $to, $string);
-        return preg_replace("/[{$to}]+/", $to, trim($string, $to));
-    }
-
     /** 
      * 获取远程IP。
      * Get remote ip. 
@@ -848,124 +601,19 @@ class baseHelper
     public static function getRemoteIp()
     {
         $ip = '';
-        if(!empty($_SERVER['HTTP_CLIENT_IP']))
-        {
-            $ip = $_SERVER['HTTP_CLIENT_IP'];
-        }
-        else if(!empty($_SERVER["HTTP_X_FORWARDED_FOR"]))
-        {
-            $ip = $_SERVER["HTTP_X_FORWARDED_FOR"];
-        }
-        else if(!empty($_SERVER["REMOTE_ADDR"]))
-        {
-            $ip = $_SERVER["REMOTE_ADDR"];
-        }
+        if(!empty($_SERVER["REMOTE_ADDR"]))          $ip = $_SERVER["REMOTE_ADDR"];
+        if(!empty($_SERVER["HTTP_X_FORWARDED_FOR"])) $ip = $_SERVER["HTTP_X_FORWARDED_FOR"];
+        if(!empty($_SERVER['HTTP_CLIENT_IP']))       $ip = $_SERVER['HTTP_CLIENT_IP'];
 
         return $ip;
     }
-
-    /**
-     * 检查IP是否在给定的IP范围内。
-     * check ip is in network.  
-     * 
-     * @param  string $ip 
-     * @param  string $network 
-     * @access public
-     * @return void
-     */
-    public static function checkIpScope($ip, $network)
-    {
-        if(strpos($network, '/') === false) return $ip == $network;
-
-        $ip = (double) (sprintf("%u", ip2long($ip)));
-        $s  = explode('/', $network);
-        $networkStart = (double) (sprintf("%u", ip2long($s[0])));
-        $networkLen = pow(2, 32 - $s[1]);
-        $networkEnd = $networkStart + $networkLen - 1;
-
-        if ($ip >= $networkStart && $ip <= $networkEnd)
-        {
-            return true;
-        }
-        return false;
-    }
-
-    /**
-     * 检查IP是否合法。
-     * Check ip avaliable.  
-     * 
-     * @param  string $ip 
-     * @access public
-     * @return bool
-     */
-    public static function checkIP($ip)
-    {
-        $ip = trim($ip);
-        if(strpos($ip, '/') !== false)
-        {
-            $s = explode('/', $ip);
-            preg_match('/^(((25[0-5])|(2[0-4]\d)|(1\d\d)|([1-9]\d)|\d)(\.((25[0-5])|(2[0-4]\d)|(1\d\d)|([1-9]\d)|\d)){3})$/', $s[0], $matches);
-            if(!empty($matches) and $s[1] > 0 and $s[1] < 36) return true;
-        }
-        else
-        {
-            preg_match('/^(((25[0-5])|(2[0-4]\d)|(1\d\d)|([1-9]\d)|\d)(\.((25[0-5])|(2[0-4]\d)|(1\d\d)|([1-9]\d)|\d)){3})$/', $ip, $matches);
-            if(!empty($matches)) return true;
-        }
-        return false;
-    }
-
-    /**
-     * 创建随机的字符串。
-     * Create random string. 
-     * 
-     * @param  int    $length 
-     * @param  string $skip A-Z|a-z|0-9
-     * @static
-     * @access public
-     * @return void
-     */
-    public static function createRandomStr($length, $skip = '')
-    {
-        $str  = '0123456789abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ';
-        $skip = str_replace('A-Z', 'ABCDEFGHIJKLMNOPQRSTUVWXYZ', $skip);
-        $skip = str_replace('a-z', 'abcdefghijklmnopqrstuvwxyz', $skip);
-        $skip = str_replace('0-9', '0123456789', $skip);
-        for($i = 0; $i < strlen($skip); $i++)
-        {
-            $str = str_replace($skip[$i], '', $str);
-        }
-
-        $strlen = strlen($str);
-        while($length > strlen($str)) $str .= $str;
-
-        $str = str_shuffle($str); 
-        return substr($str,0,$length); 
-    }
-
-    /**
-     * 获取设备类型。
-     * Get device.
-     * 
-     * @access public
-     * @return void
-     */
-    public static function getClientDevice()
-    {
-        global $config;
-
-        if(isset($_COOKIE['visualDevice'])) return $_COOKIE['visualDevice'];
-
-        /* Detect mobile. */
-        $mobile = new mobile();
-        if(!$mobile->isTablet() and $mobile->isMobile()) return 'mobile';
-        return 'desktop';
-    }
 }
 
+//------------------------------- 常用函数。Some tool functions.-------------------------------//
+
 /**
- *  helper::createLink()的别名，方便创建本模块的链接
- *  The short alias of helper::createLink() method. 
+ *  helper::createLink()的别名，方便创建本模块方法的链接。
+ *  The short alias of helper::createLink() method to create link to control method of current module.
  *
  * @param  string        $methodName  the method name
  * @param  string|array  $vars        the params passed to the method, can be array('key' => 'value') or key1=value1&key2=value2)
@@ -979,8 +627,8 @@ function inLink($methodName = 'index', $vars = '', $viewType = '')
 }
 
 /**
- *  通过一个静态游标，可以遍历数组
- *  Static cycle a array
+ *  通过一个静态游标，可以遍历数组。
+ *  Static cycle a array.
  *
  * @param array  $items     the array to be cycled.
  * @return mixed
@@ -994,7 +642,7 @@ function cycle($items)
 }
 
 /**
- * 获取当前时间的Unix时间戳，精确到微妙
+ * 获取当前时间的Unix时间戳，精确到微妙。
  * Get current microtime.
  * 
  * @access public
@@ -1030,9 +678,11 @@ function a($var)
  */
 function isLocalIP()
 {
+    global $config;
+    if(isset($config->islocalIP)) return $config->isLocalIP;
     $serverIP = $_SERVER['SERVER_ADDR'];
     if($serverIP == '127.0.0.1') return true;
-    if(strpos($serverIP, '10.60') !== false) return false;
+    if(strpos($serverIP, '10.70') !== false) return false;
     return !filter_var($serverIP, FILTER_VALIDATE_IP, FILTER_FLAG_NO_PRIV_RANGE);
 }
 
@@ -1043,73 +693,30 @@ function isLocalIP()
  * @access public
  * @return string 
  */
-function getWebRoot()
+function getWebRoot($full = false)
 {
     $path = $_SERVER['SCRIPT_NAME'];
+
     if(PHP_SAPI == 'cli')
     {
-        $url  = parse_url($_SERVER['argv'][1]);
-        $path = empty($url['path']) ? '/' : rtrim($url['path'], '/');
+        if(isset($_SERVER['argv'][1]))
+        {
+            $url  = parse_url($_SERVER['argv'][1]);
+            $path = empty($url['path']) ? '/' : rtrim($url['path'], '/');
+        }
         $path = empty($path) ? '/' : preg_replace('/\/www$/', '/www/', $path);
     }
+    
+    if($full)
+    {
+        $http = (isset($_SERVER['HTTPS']) and strtolower($_SERVER['HTTPS']) != 'off') ? 'https://' : 'http://';
+        return $http . $_SERVER['HTTP_HOST'] . substr($path, 0, (strrpos($path, '/') + 1));
+    }
 
-    return substr($path, 0, (strrpos($path, '/') + 1));
-}
-
-/**
- * 检查是否是onlybody模式。
- * Check exist onlybody param.
- * 
- * @access public
- * @return void
- */
-function isonlybody()
-{
-    return (isset($_GET['onlybody']) and $_GET['onlybody'] == 'yes');
-}
-
-/**
- * 格式化钱。
- * Format money.
- * 
- * @param  float    $money 
- * @access public
- * @return string
- */
-function formatMoney($money)
-{
-    return trim(preg_replace('/\.0*$/', '', number_format($money, 2)));
-}
-
-/**
- * 格式化时间
- * Format time.
- * 
- * @param  int    $time 
- * @param  string $format 
- * @access public
- * @return void
- */
-function formatTime($time, $format = '')
-{
-    $time = str_replace('0000-00-00', '', $time);
-    $time = str_replace('00:00:00', '', $time);
-    if(trim($time) == '') return ;
-    if($format) return date($format, strtotime($time));
-    return trim($time);
-}
-
-/**
- * 检查可用curl ssl。
- * Check curl ssl enabled.
- * 
- * @access public
- * @return void
- */
-function checkCurlSSL()
-{
-    $version = curl_version();
-    return ($version['features'] & CURL_VERSION_SSL);
+    $path = dirname(dirname($path));
+    $path = str_replace('\\', '/', $path);
+    if($path == '/') return '/';
+    return $path . '/';
 }
 
 /**
@@ -1126,138 +733,16 @@ function checkCurlSSL()
 function zget($var, $key, $valueWhenNone = false, $valueWhenExists = false)
 {
     if(!is_array($var) and !is_object($var)) return false;
+
     $type = is_array($var) ? 'array' : 'object';
     $checkExists = $type == 'array' ? isset($var[$key]) : isset($var->$key);
+
     if($checkExists)
     {
         if($valueWhenExists !== false) return $valueWhenExists;
         return $type == 'array' ? $var[$key] : $var->$key;
     }
+
     if($valueWhenNone !== false) return $valueWhenNone;
     return $key;
 }
-
-/**
- * 301跳转。
- * Header lcoation 301. 
- * 
- * @param  string    $url 
- * @access public
- * @return void
- */
-function header301($url)
-{
-    header('HTTP/1.1 301 Moved Permanently');
-    die(header('Location:' . $url));
-}
-
-/**
- * 处理恶意参数.
- * Process evil params.
- * 
- * @param  string    $value 
- * @access public
- * @return void
- */
-function processEvil($value)
-{
-    global $config;
-    if(strpos(htmlspecialchars_decode($value), '<?') !== false)
-    {
-        $value       = (string) $value;
-        $evils       = array('eval', 'exec', 'passthru', 'proc_open', 'shell_exec', 'system', '$$', 'include', 'require', 'assert');
-        $gibbedEvils = array('e v a l', 'e x e c', ' p a s s t h r u', ' p r o c _ o p e n', 's h e l l _ e x e c', 's y s t e m', '$ $', 'i n c l u d e', 'r e q u i r e', 'a s s e r t');
-        $value       = str_ireplace($evils, $gibbedEvils, $value);
-    }
-    if(isset($config->framework->stripXSS) and $config->framework->stripXSS)
-    {
-        if(stripos($value, '<script') !== false)
-        {
-            $value       = (string) $value;
-            $evils       = array('appendchild(', 'createElement(', 'xss.re', 'onfocus', 'onclick', 'innerHTML', 'replaceChild(', 'html(', 'append(', 'appendTo(', 'prepend(', 'prependTo(', 'after(', 'before(', 'replaceWith(');
-            $gibbedEvils = array('a p p e n d c h i l d (', 'c r e a t e E l e  m e n t (', 'x s s . r e', 'o n f o c u s', 'o n c l i c k', 'i n n e r H T M L', 'r e p l a c e C h i l d (', 'h t m l (', 'a p p e n d (', 'a p p e n d T o (', 'p r e p e n d (', 'p r e p e n d T o (', 'a f t e r (', 'b e f o r e (', 'r e p l a c e W i t h (');
-            $value       = str_ireplace($evils, $gibbedEvils, $value);
-        }
-        /* Process like 'javascript:' */
-        $value = preg_replace('/j\s*a\s*v\s*a\s*s\s*c\s*r\s*i\s*p\s*t\s*:/Ui', 'j a v a s c r i p t :', $value);
-    }
-    return $value;
-}
-
-/**
- * 批量处理恶意参数.
- * Process array evils.
- * 
- * @param  array    $params 
- * @access public
- * @return array
- */
-function processArrayEvils($params)
-{
-    $params = (array) $params;
-    foreach($params as $item => $values)
-    {
-        if(!is_array($values))
-        {
-            $params[$item] = processEvil($values);
-            if(processEvil($item) != $item) unset($params[$item]);
-        }
-        else
-        {
-            foreach($values as $key => $value)
-            {
-                if(is_array($value)) continue;
-                $params[$item][$key] = processEvil($value);
-                if(processEvil($key) != $key) unset($params[$item][$key]);
-            }
-        }
-    }
-    return $params;
-}
-
-/**
- * 获取主机地址。
- * Get host URL.
- * 
- * @access public
- * @return bool
- */
-function getHostURL()
-{
-    return ((isset($_SERVER['HTTPS']) and strtolower($_SERVER['HTTPS']) != 'off') ? 'https://' : 'http://') . $_SERVER['HTTP_HOST'];
-}
-
-/**
- * 判断requestType是否是GET类型。
- * Check current request is GET.
- * 
- * @access public
- * @return void
- */
-function isGetUrl()
-{
-    $webRoot = getWebRoot();
-    if(strpos($_SERVER['REQUEST_URI'], "{$webRoot}?") === 0) return true;
-    if(strpos($_SERVER['REQUEST_URI'], "{$webRoot}index.php?") === 0) return true;
-    if(strpos($_SERVER['REQUEST_URI'], "{$webRoot}index.php/?") === 0) return true;
-    return false;
-}
-
-/**
- * 获取文件mime。
- * Get file mime type.
- * 
- * @param  int    $file 
- * @access public
- * @return void
- */
-function getFileMimeType($file)
-{
-    if(function_exists('mime_content_type')) return mime_content_type($file);
-    if(function_exists('finfo_open'))
-    {
-        $finfo = finfo_open(FILEINFO_MIME_TYPE);
-        return finfo_file($finfo, $file); 
-    }
-    return false;
-}
diff --git a/framework/base/model.class.php b/framework/base/model.class.php
index a0ed040e6a..ccd3499cdb 100644
--- a/framework/base/model.class.php
+++ b/framework/base/model.class.php
@@ -3,6 +3,8 @@
  * ZenTaoPHP的baseModel类。
  * The baseModel class file of ZenTaoPHP framework.
  *
+ * @package framework
+ *
  * The author disclaims copyright to this source code.  In place of
  * a legal notice, here is a blessing:
  * 
@@ -10,13 +12,6 @@
  *  May you find forgiveness for yourself and forgive others.
  *  May you share freely, never taking more than you give.
  */
-
-/**
- * baseModel基类。
- * The base class of model.
- * 
- * @package framework
- */
 class baseModel
 {
     /**
@@ -150,8 +145,8 @@ class baseModel
         $this->appName = empty($appName) ? $this->app->getAppName() : $appName;
 
         $moduleName = $this->getModuleName();
-        $this->app->loadLang($moduleName, $this->appName);
-        $this->app->loadConfig($moduleName, $this->appName, $exitIfNone = false);
+        if($this->config->framework->multiLanguage) $this->app->loadLang($moduleName, $this->appName);
+        if($moduleName != 'common') $this->app->loadModuleConfig($moduleName, $this->appName, $exitIfNone = false);
 
         $this->loadDAO();
         $this->setSuperVars();
@@ -196,7 +191,6 @@ class baseModel
         $this->server  = $this->app->server;
         $this->cookie  = $this->app->cookie;
         $this->session = $this->app->session;
-        $this->global  = $this->app->global;
     }
 
     /**
@@ -213,7 +207,7 @@ class baseModel
     {
         if(empty($moduleName)) return false;
         if(empty($appName)) $appName = $this->appName;
-        $modelFile = helper::setModelFile($moduleName, $appName);
+        $modelFile = $this->app->setModelFile($moduleName, $appName);
 
         if(!helper::import($modelFile)) return false;
         $modelClass = class_exists('ext' . $appName . $moduleName. 'model') ? 'ext' . $appName . $moduleName . 'model' : $appName . $moduleName . 'model';
@@ -228,8 +222,17 @@ class baseModel
     }
 
     /**
-     * 加载model的class扩展。
-     * Load extension class of a model. Saved to $moduleName/ext/model/class/$extensionName.class.php.
+     * 加载model的class扩展，主要是为了开发加密代码使用。
+     * 可以将主要的逻辑存放到$moduleName/ext/model/class/$extensionName.class.php中。
+     * 然后在ext/model/$extension.php的扩展里面使用$this->loadExtension()来调用相应的方法。
+     * ext/model/class/*.class.php代码可以加密。而ext/model/*.php可以不用加密。
+     * 因为框架对model的扩展是采取合并文件的方式，ext/model/*.php文件不能加密。
+     *
+     * Load extension class of a model thus user can encrypt the code.
+     * You can put the main extension logic codes in $moduleName/ext/model/class/$extensionName.class.php.
+     * And call them by the ext/model/$extension.php like this: $this->loadExtension('myextension')->method().
+     * You can encrypt the code in ext/model/class/*.class.php.
+     * Because the framework will merge the extension files in ext/model/*.php to the module/model.php.
      * 
      * @param  string $extensionName 
      * @param  string $moduleName 
@@ -240,22 +243,22 @@ class baseModel
     {
         if(empty($extensionName)) return false;
 
-        /* Set extenson name and extension file. */
+        /* 设置扩展的名字和相应的文件。Set extenson name and extension file. */
         $extensionName = strtolower($extensionName);
         $moduleName    = $moduleName ? $moduleName : $this->getModuleName();
         $moduleExtPath = $this->app->getModuleExtPath($this->appName, $moduleName, 'model');
-        if(!empty($moduleExtPath['site']))$extensionFile = $moduleExtPath['site'] . 'class/' . $extensionName . '.class.php';
+        if(!empty($moduleExtPath['site'])) $extensionFile = $moduleExtPath['site'] . 'class/' . $extensionName . '.class.php';
         if(!isset($extensionFile) or !file_exists($extensionFile)) $extensionFile = $moduleExtPath['common'] . 'class/' . $extensionName . '.class.php';
 
-        /* Try to import parent model file auto and then import the extension file. */
+        /* 载入父类。Try to import parent model file auto and then import the extension file. */
         if(!class_exists($moduleName . 'Model')) helper::import($this->app->getModulePath($this->appName, $moduleName) . 'model.php');
         if(!helper::import($extensionFile)) return false;
 
-        /* Set the extension class name. */
+        /* 设置扩展类的名字。Set the extension class name. */
         $extensionClass = $extensionName . ucfirst($moduleName);
         if(!class_exists($extensionClass)) return false;
 
-        /* Create an instance of the extension class and return it. */
+        /* 实例化扩展类。Create an instance of the extension class and return it. */
         $extensionObject = new $extensionClass;
         $extensionClass  = str_replace('Model', '', $extensionClass);
         $this->$extensionClass = $extensionObject;
@@ -275,7 +278,7 @@ class baseModel
     }
 
     /**
-     * 删除记录
+     * 删除记录。
      * Delete one record.
      * 
      * @param  string    $table  the table name
diff --git a/framework/base/router.class.php b/framework/base/router.class.php
index 373dcf8d47..79412fb34a 100644
--- a/framework/base/router.class.php
+++ b/framework/base/router.class.php
@@ -3,6 +3,8 @@
  * 此文件包括ZenTaoPHP框架的三个类：baseRouter, config, lang。
  * The router, config and lang class file of ZenTaoPHP framework.
  *
+ * @package framework
+ *
  * The author disclaims copyright to this source code. In place of 
  * a legal notice, here is a blessing:
  *
@@ -10,16 +12,8 @@
  *  May you find forgiveness for yourself and forgive others.
  *  May you share freely, never taking more than you give.
  */
-
-/**
- * baseRouter类。
- * The baseRouter class.
- *
- * @package framework
- */
 class baseRouter
 {
-
     /**
      * ZenTaoPHP的基础目录，一般是程序的根目录。
      * The base path of the ZenTaoPHP framework.
@@ -39,14 +33,23 @@ class baseRouter
     public $frameRoot;
 
     /**
-     * 应用类库的根目录($this->appRoot/lib)。
-     * The root directory of the app library($this->appRoot/lib).
+     * 类库的根目录。{$this->basePath/lib}
+     * The root directory of the library($this->basePath/lib).
      * 
      * @var string
      * @access public
      */
     public $coreLibRoot;
 
+    /**
+     * 应用名称
+     * The appName.
+     * 
+     * @var string
+     * @access public
+     */
+    public $appName = '';
+
     /**
      * 应用程序的根目录。
      * The root directory of the app.
@@ -75,7 +78,7 @@ class baseRouter
     public $cacheRoot;
 
     /**
-     *WWW目录 
+     * WWW目录。
      * The root directory of www.
      * 
      * @var string
@@ -84,7 +87,7 @@ class baseRouter
     public $wwwRoot;
 
     /**
-     * 附件存放目录
+     * 附件存放目录。
      * The root directory of data.
      * 
      * @var string
@@ -146,6 +149,15 @@ class baseRouter
      */
     public $clientTheme;
 
+    /**
+     * 客户端设备类型。
+     * The device type of client.
+     * 
+     * @var string   
+     * @access public
+     */
+    public $clientDevice;
+
     /**
      * 当前模块的control对象。
      * The control object of current module.
@@ -300,16 +312,7 @@ class baseRouter
     public $cookie;
 
     /**
-     * $global对象，用于访问$_GLOBAL变量。
-     * The $global object, used to access the $_GLOBAL var.
-     * 
-     * @var ojbect
-     * @access public
-     */
-    public $global;
-
-    /**
-     * 网站代号
+     * 网站代号。
      * The code of current site.
      * 
      * @var string
@@ -317,24 +320,6 @@ class baseRouter
      */
     public $siteCode;
 
-    /**
-     * 客户端设备类型
-     * The device type of client.
-     * 
-     * @var string   
-     * @access public
-     */
-    public $clientDevice;
-
-    /**
-     * 应用名称
-     * The appName.
-     * 
-     * @var string
-     * @access public
-     */
-    public $appName = '';
-
     /**
      * 构造方法, 设置路径，类，超级变量等。注意：
      * 1.应该使用createApp()方法实例化router类；
@@ -363,48 +348,40 @@ class baseRouter
         $this->setLogRoot();
         $this->setConfigRoot();
         $this->setModuleRoot();
-        $this->setThemeRoot();
         $this->setWwwRoot();
+        $this->setThemeRoot();
         $this->setDataRoot();
-
-        $this->setSuperVars();
-        $this->loadConfig('common');
-        $this->filterSuperVars();
-
-        $this->setDebug();
-        $this->setErrorHandler();
-
-        $this->connectDB();
-
-        $this->setTimezone();
-        $this->setClientLang();
-        $this->loadLang('common');
-        $this->setClientTheme();
+        $this->loadMainConfig();
 
         $this->loadClass('front',  $static = true);
         $this->loadClass('filter', $static = true);
         $this->loadClass('dao',    $static = true);
         $this->loadClass('mobile', $static = true);
 
-        $this->setClientDevice();
+        $this->setSuperVars();
+        $this->setDebug();
+        $this->setErrorHandler();
+        $this->setTimezone();
+        $this->startSession();
+
+        if($this->config->framework->multiSite)     $this->setSiteCode() && $this->loadExtraConfig();
+        if($this->config->framework->autoConnectDB) $this->connectDB();
+        if($this->config->framework->multiLanguage) $this->setClientLang();
+
+        $isDetectDevice     = zget($this->config->framework->detectDevice, $this->clientLang, false);
+        $this->clientDevice = $isDetectDevice ? $this->setClientDevice() : 'desktop';
+
+        if($this->config->framework->multiLanguage) $this->loadLang('common');
+        if($this->config->framework->multiTheme)    $this->setClientTheme();
     }
 
     /**
      * 创建一个应用。
      * Create an application.
      * 
-     * <code>
-     * <?php
-     * $demo = router::createApp('demo');
-     * ?>
-     * or specify the root path of the app. Thus the app and framework can be seperated.
-     * <?php
-     * $demo = router::createApp('demo', '/home/app/demo');
-     * ?>
-     * </code>
-     * @param string $appName   the name of the app 
-     * @param string $appRoot   the root path of the app
-     * @param string $className the name of the router class. When extends a child, you should pass in the child router class name.
+     * @param string $appName   应用名称。  The name of the app.
+     * @param string $appRoot   应用根路径。The root path of the app.
+     * @param string $className 应用类名，如果对router类做了扩展，需要指定类名。When extends router class, you should pass in the child router class name.
      * @static
      * @access public
      * @return object   the app object
@@ -418,7 +395,7 @@ class baseRouter
     //-------------------- 路径相关方法(Path related methods)--------------------//
 
     /**
-     * 设置应用名称
+     * 设置应用名称。
      * Set app name.
      * 
      * @param  string    $appName 
@@ -467,7 +444,7 @@ class baseRouter
     }
 
     /**
-     * 设置应用类库的根目录。
+     * 设置类库的根目录。
      * Set the app lib root.
      * 
      * @access public
@@ -489,14 +466,8 @@ class baseRouter
      */
     public function setAppRoot($appName = 'demo', $appRoot = '')
     {
-        if(empty($appRoot))
-        {
-            $this->appRoot = $this->basePath . 'app' . DS . $appName . DS;
-        }
-        else
-        {
-            $this->appRoot = realpath($appRoot) . DS;
-        }
+        if(empty($appRoot))  $this->appRoot = $this->basePath . 'app' . DS . $appName . DS;
+        if(!empty($appRoot)) $this->appRoot = realpath($appRoot) . DS;
         if(!is_dir($this->appRoot)) $this->triggerError("The app you call not found in {$this->appRoot}", __FILE__, __LINE__, $exit = true);
     }
 
@@ -548,6 +519,25 @@ class baseRouter
         $this->configRoot = $this->basePath . 'config' . DS;
     }
 
+    /**
+     * Start the session.
+     *
+     * @access public
+     * @return void
+     */
+    public function startSession()
+    {
+        if(!defined('SESSION_STARTED'))
+        {
+            $sessionName = $this->config->sessionVar;
+            session_name($sessionName);
+            if(isset($_GET[$this->config->sessionVar])) session_id($_GET[$this->config->sessionVar]);
+            session_start();
+            define('SESSION_STARTED', true);
+        }
+    }
+
+
     /**
      * 设置模块的根目录。
      * Set the module root.
@@ -561,6 +551,7 @@ class baseRouter
     }
 
     /**
+     * 设置www的根目录。
      * Set the www root.
      * 
      * @access public
@@ -571,17 +562,6 @@ class baseRouter
         $this->wwwRoot = rtrim(dirname($_SERVER['SCRIPT_FILENAME']), DS) . DS;
     }
 
-    /**
-     * Set the data root.
-     * 
-     * @access public
-     * @return void
-     */
-    public function setDataRoot()
-    {
-        $this->dataRoot = $this->wwwRoot . 'data' . DS;
-    }
-
     /**
      * 设置主题根目录。
      * Set the theme root.
@@ -594,52 +574,16 @@ class baseRouter
         $this->themeRoot = $this->wwwRoot . 'theme' . DS;
     }
 
-    /**
-     * 过滤超级变量数据
-     * Filter superVars.
+   /**
+     * 设置data根目录。
+     * Set the data root.
      * 
      * @access public
      * @return void
      */
-    public function filterSuperVars()
+    public function setDataRoot()
     {
-        if(!empty($_COOKIE))
-        {
-            foreach($_COOKIE as $cookieKey => $cookieValue)
-            {
-                if(preg_match('/[^a-zA-Z0-9_\.]/', $cookieKey)) unset($_COOKIE[$cookieKey]);
-                if(preg_match('/[^a-zA-Z0-9=_\|\- ,`+\/\.%\x7f-\xff]/', $cookieValue)) unset($_COOKIE[$cookieKey]);
-            }
-        }
-
-        if(!empty($_FILES) and isset($this->config->file->dangers))
-        {
-            foreach($_FILES as $varName => $files)
-            {
-                if(is_array($files['name']))
-                {
-                    foreach($files['name'] as $i => $fileName)
-                    {
-                        $extension = ltrim(strrchr($fileName, '.'), '.');
-                        if(strrpos(",{$this->config->file->dangers},", ",{$extension},") !== false)
-                        {
-                            unset($_FILES);
-                            break;
-                        }
-                    }
-                }
-                else
-                {
-                    $extension = ltrim(strrchr($files['name'], '.'), '.');
-                    if(strrpos(",{$this->config->file->dangers},", ",{$extension},") !== false) unset($_FILES);
-                }
-            }
-        }
-        $_POST   = processArrayEvils($_POST);
-        $_GET    = processArrayEvils($_GET);
-        $_COOKIE = processArrayEvils($_COOKIE);
-        unset($GLOBALS);
-        unset($_REQUEST);
+        $this->dataRoot = $this->wwwRoot . 'data' . DS;
     }
 
     /**
@@ -656,38 +600,14 @@ class baseRouter
         $this->server  = new super('server');
         $this->cookie  = new super('cookie');
         $this->session = new super('session');
-        $this->global  = new super('global');
-    }
 
-    /**
-     * 设置站点代号
-     * Set the code of current site. 
-     * 
-     * www.xirang.com => xirang
-     * xirang.com     => xirang
-     * xirang.com.cn  => xirang
-     * xirang.cn      => xirang
-     * xirang         => xirang
-     * 192.168.1.1    => 192.168.1.1
-     *
-     * @access public
-     * @return void
-     */
-    public function setSiteCode()
-    {
-        return $this->siteCode = helper::getSiteCode($this->server->http_host);
-    }
+        unset($GLOBALS);
+        unset($_REQUEST);
 
-    /**
-     * 设置客户端的设备类型
-     * Set client device.
-     * 
-     * @access public
-     * @return void
-     */
-    public function setClientDevice()
-    {
-        $this->clientDevice = helper::getClientDevice();
+        $_FILES  = validater::filterFiles();
+        $_POST   = validater::filterSuper($_POST);
+        $_GET    = validater::filterSuper($_GET);
+        $_COOKIE = validater::filterSuper($_COOKIE);
     }
 
     /**
@@ -715,18 +635,6 @@ class baseRouter
         register_shutdown_function(array($this, 'shutdown'));
     }
 
-    /**
-     * 根据配置设置当前时区。
-     * Set the time zone according to the config.
-     * 
-     * @access public
-     * @return void
-     */
-    public function setTimezone()
-    {
-        if(isset($this->config->timezone)) date_default_timezone_set($this->config->timezone);
-    }
-
     /**
      * 获取应用名称
      * Get app name 
@@ -862,15 +770,15 @@ class baseRouter
     }
 
     /**
-     * 获取$dataRoot目录
-     * Get the $dataRoot var
+     * 获取$webRoot，即应用的路径。
+     * Get the $webRoot var.
      * 
      * @access public
      * @return string
      */
-    public function getDataRoot()
+    public function getWebRoot()
     {
-        return $this->dataRoot;
+        return $this->config->webRoot;
     }
 
     /**
@@ -885,7 +793,31 @@ class baseRouter
         return $this->themeRoot;
     }
 
-    //------ 客户端环境有关的函数(Client environment related functions) ------//
+    /**
+     * 获取$dataRoot目录
+     * Get the $dataRoot var
+     * 
+     * @access public
+     * @return string
+     */
+    public function getDataRoot()
+    {
+        return $this->dataRoot;
+    }
+
+   //------ 客户端环境有关的函数(Client environment related functions) ------//
+    
+    /**
+     * 根据配置设置当前时区。
+     * Set the time zone according to the config.
+     * 
+     * @access public
+     * @return void
+     */
+    public function setTimezone()
+    {
+        if(isset($this->config->timezone)) date_default_timezone_set($this->config->timezone);
+    }
 
     /**
      * 根据用户浏览器的语言设置和服务器配置，选择显示的语言。
@@ -900,33 +832,11 @@ class baseRouter
      */
     public function setClientLang($lang = '')
     {
-        if(!empty($lang))
-        {
-            $this->clientLang = $lang;
-        }
-        elseif(isset($_SESSION['lang']))
-        {
-            $this->clientLang = $_SESSION['lang'];
-        }
-        elseif(isset($_COOKIE['lang']))
-        {
-            $this->clientLang = $_COOKIE['lang'];
-        }
-        elseif(isset($_SERVER['HTTP_ACCEPT_LANGUAGE']))
-        {
-            if(strpos($_SERVER['HTTP_ACCEPT_LANGUAGE'], ',') === false)
-            {
-                $this->clientLang = $_SERVER['HTTP_ACCEPT_LANGUAGE'];
-            }
-            else
-            {
-                $this->clientLang = substr($_SERVER['HTTP_ACCEPT_LANGUAGE'], 0, strpos($_SERVER['HTTP_ACCEPT_LANGUAGE'], ','));
-            }
-
-            /* Fix clientLang for ie >= 10. https://www.drupal.org/node/365615. */
-            if(stripos($this->clientLang, 'hans')) $this->clientLang = 'zh-cn';
-            if(stripos($this->clientLang, 'hant')) $this->clientLang = 'zh-tw';
-        }
+        if(isset($_SERVER['HTTP_ACCEPT_LANGUAGE'])) $this->clientLang = $this->parseHttpAcceptLang();
+        if(isset($_COOKIE['lang']))                 $this->clientLang = $_COOKIE['lang'];
+        if(isset($_SESSION['lang']))                $this->clientLang = $_SESSION['lang'];
+        if(!empty($lang))                           $this->clientLang = $lang;
+     
         if(!empty($this->clientLang))
         {
             $this->clientLang = strtolower($this->clientLang);
@@ -936,20 +846,32 @@ class baseRouter
         {
             $this->clientLang = $this->config->default->lang;
         }
+
         setcookie('lang', $this->clientLang, $this->config->cookieLife, $this->config->webRoot);
         if(!isset($_COOKIE['lang'])) $_COOKIE['lang'] = $this->clientLang;
+
+        return true;
     }
 
     /**
-     * 获取$clientLang变量，即客户端的语言。
-     * Get the $clientLang var.
+     * 从HTTP_ACCEPT_LANGUAGE中提出去支持的语言。
+     * Parse the lang str from HTTP_ACCEPT_LANGUAGE header.
      * 
      * @access public
      * @return string
      */
-    public function getClientLang()
+    public function parseHttpAcceptLang()
     {
-        return $this->clientLang;
+        if(empty($_SERVER['HTTP_ACCEPT_LANGUAGE'])) return '';
+
+        $raw  = $_SERVER['HTTP_ACCEPT_LANGUAGE'];
+        $pos  = strpos($raw, ',');
+        $lang = $pos === false ? $raw : substr($raw, 0, $pos);
+
+        /* Fix clientLang for ie >= 10. https://www.drupal.org/node/365615. */
+        if(stripos($lang, 'hans')) $lang = 'zh-cn';
+        if(stripos($lang, 'hant')) $lang = 'zh-tw';
+        return $lang;
     }
 
     /**
@@ -965,18 +887,9 @@ class baseRouter
      */
     public function setClientTheme($theme = '')
     {
-        if(!empty($theme))
-        {
-            $this->clientTheme = $theme;
-        }
-        elseif(isset($_COOKIE['theme']))
-        {
-            $this->clientTheme = $_COOKIE['theme'];
-        }    
-        elseif(isset($this->config->client->theme))
-        {
-            $this->clientTheme = $this->config->client->theme;
-        }    
+        if(isset($this->config->client->theme)) $this->clientTheme = $this->config->client->theme;
+        if(isset($_COOKIE['theme']))            $this->clientTheme = $_COOKIE['theme'];
+        if(!empty($theme))                      $this->clientTheme = $theme;
 
         if(!empty($this->clientTheme))
         {
@@ -987,8 +900,59 @@ class baseRouter
         {
             $this->clientTheme = $this->config->default->theme;
         }
+
         setcookie('theme', $this->clientTheme, $this->config->cookieLife, $this->config->webRoot);
         if(!isset($_COOKIE['theme'])) $_COOKIE['theme'] = $this->clientTheme;
+
+        return true;
+    }
+
+   /**
+     * 设置客户端的设备类型。
+     * Set client device.
+     * 
+     * @access public
+     * @return void
+     */
+    public function setClientDevice()
+    {
+        $this->clientDevice = 'desktop';
+
+        if($this->cookie->device == 'mobile')  $this->clientDevice = 'mobile';
+        if($this->cookie->device == 'desktop') $this->clientDevice = 'desktop';
+
+        if(strpos('mobile,desktop', $this->cookie->device) === false) 
+        {
+            $mobile = new mobile();
+            $this->clientDevice = ($mobile->isMobile() and !$mobile->isTablet()) ? 'mobile' : 'desktop';
+        }
+
+        setcookie('device', $this->clientDevice, $this->config->cookieLife, $this->config->webRoot);
+        if(!isset($_COOKIE['device'])) $_COOKIE['device'] = $this->clientDevice;
+    }
+
+    /**
+     * 设置站点代号，可以针对不同的站点来加载不同的扩展。
+     * Set the code of current site, thus can load diffrent extension of diffrent site.
+     * 
+     * @access public
+     * @return void
+     */
+    public function setSiteCode()
+    {
+        return $this->siteCode = helper::parseSiteCode($this->server->http_host);
+    }
+
+    /**
+     * 获取$clientLang变量，即客户端的语言。
+     * Get the $clientLang var.
+     * 
+     * @access public
+     * @return string
+     */
+    public function getClientLang()
+    {
+        return $this->clientLang;
     }
 
     /**
@@ -1004,15 +968,15 @@ class baseRouter
     }
 
     /**
-     * 获取$webRoot，即应用的路径。
-     * Get the $webRoot var.
+     * 获得客户端的终端设备。
+     * Get the client device.
      * 
      * @access public
-     * @return string
+     * @return void
      */
-    public function getWebRoot()
+    public function getClientDevice()
     {
-        return $this->config->webRoot;
+        return $this->clientDevice;
     }
 
     //-------------------- 请求相关的方法(Request related methods) --------------------//
@@ -1026,12 +990,6 @@ class baseRouter
      */
     public function parseRequest()
     {
-        if(isGetUrl())
-        {
-            if($this->config->requestType == 'PATH_INFO2') define('FIX_PATH_INFO2', true);
-            $this->config->requestType = 'GET';
-        }
-
         if($this->config->requestType == 'PATH_INFO' or $this->config->requestType == 'PATH_INFO2')
         {
             $this->parsePathInfo();
@@ -1103,16 +1061,24 @@ class baseRouter
         {
             $value = $_SERVER['ORIG_PATH_INFO'];
         }
+        elseif(isset($_SERVER['REQUEST_URI']))
+        {
+            $value = $_SERVER['REQUEST_URI'];
+        }
         else
         {
             $value = @getenv('PATH_INFO');
             if(empty($value)) $value = @getenv('ORIG_PATH_INFO');
-            if(strpos($value, $_SERVER['SCRIPT_NAME']) !== false) $value = str_replace($_SERVER['SCRIPT_NAME'], '', $value);
         }
 
+        $subpath = str_replace($_SERVER['DOCUMENT_ROOT'], '', dirname($_SERVER['SCRIPT_FILENAME']));
+        if($subpath != '' and $subpath != '/' and strpos($value, $subpath) === 0) $value = substr($value, strlen($subpath));
+        if(defined('RUN_MODE') and RUN_MODE == 'front' and strpos($value, $_SERVER['SCRIPT_NAME']) !== false) $value = str_replace($_SERVER['SCRIPT_NAME'], '', $value);
+
         if(strpos($value, '?') === false) return trim($value, '/');
+
         $value = parse_url($value);
-        return trim($value['path'], '/');
+        return trim(zget($value, 'path', ''), '/');
     }
 
     /**
@@ -1166,7 +1132,7 @@ class baseRouter
         return $this->viewType;
     }
 
-    //-------------------- 路由相关方法(Routing related methods) --------------------//
+    //-------------------- 模块及扩展设置(Module and extension) --------------------//
 
     /**
      * 加载common模块。
@@ -1182,28 +1148,20 @@ class baseRouter
      *  This method should called manually in the router file(www/index.php) after the $lang, $config, $dbh loaded.
      *
      * @access public
-     * @return object|bool  the common control object or false if not exits.
+     * @return object|bool  the common model object or false if not exits.
      */
     public function loadCommon()
     {
         $this->setModuleName('common');
-        $commonModelFile = helper::setModelFile('common');
-        if(file_exists($commonModelFile))
-        {
-            helper::import($commonModelFile);
-            if(class_exists('extcommonModel'))
-            {
-                return new extcommonModel();
-            }
-            elseif(class_exists('commonModel'))
-            {
-                return new commonModel();
-            }
-            else
-            {
-                return false;
-            }
-        }
+        $commonModelFile = $this->setModelFile('common');
+        if(!file_exists($commonModelFile)) return false;
+
+        helper::import($commonModelFile);
+
+        if($this->config->framework->extensionLevel > 0  and class_exists('extCommonModel')) return new extCommonModel();
+
+        if(class_exists('commonModel')) return new commonModel();
+        return false;
     }
 
     /**
@@ -1216,9 +1174,7 @@ class baseRouter
      */
     public function setModuleName($moduleName = '')
     {
-        $moduleName = strip_tags(strtolower($moduleName));
-        if(!preg_match('/^[a-zA-Z0-9]+$/', $moduleName)) $this->triggerError("The modulename '$moduleName' illegal. ", __FILE__, __LINE__, $exit = true);
-        $this->moduleName = $moduleName;
+        if($this->checkAlnum($moduleName, 'module')) $this->moduleName = strtolower($moduleName);
     }
 
     /**
@@ -1233,12 +1189,8 @@ class baseRouter
     public function setControlFile($exitIfNone = true)
     {
         $this->controlFile = $this->moduleRoot . $this->moduleName . DS . 'control.php';
-        if(!is_file($this->controlFile))
-        {
-            $this->triggerError("the control file $this->controlFile not found.", __FILE__, __LINE__, $exitIfNone);
-            return false;
-        }
-        return true;
+        if(file_exists($this->controlFile)) return true;
+        $this->triggerError("the control file $this->controlFile not found.", __FILE__, __LINE__, $exitIfNone);
     }
 
     /**
@@ -1251,9 +1203,7 @@ class baseRouter
      */
     public function setMethodName($methodName = '')
     {
-        $methodName = strip_tags(strtolower($methodName));
-        if(!preg_match('/^[a-zA-Z0-9]+$/', $methodName)) $this->triggerError("The methodname '$methodName' illegal. ", __FILE__, __LINE__, $exit = true);
-        $this->methodName = $methodName;
+        if($this->checkAlnum($methodName, 'method')) $this->methodName = strtolower($methodName);
     }
 
     /**
@@ -1268,16 +1218,21 @@ class baseRouter
     public function getModulePath($appName = '', $moduleName = '')
     {
         if($moduleName == '') $moduleName = $this->moduleName;
-        if(!preg_match('/^[a-zA-Z0-9]+$/', $moduleName)) $this->triggerError("The modulename '$moduleName' illegal. ", __FILE__, __LINE__, $exit = true);
-        $modulePath = $this->getModuleRoot($appName) . strtolower(trim($moduleName)) . DS;
 
-        return $modulePath;
+        if($this->checkAlnum($moduleName, 'module'))
+        {
+            $modulePath = $this->getModuleRoot($appName) . strtolower($moduleName) . DS;
+            return $modulePath;
+        }
     }
 
     /**
-     * 获取一个模块的扩展路径。
-     * Get extension path of one module.
+     * 获取一个模块的扩展路径。 Get extension path of one module.
      * 
+     * If the extensionLevel == 0, return empty array.
+     * If the extensionLevel == 1, return the common extension directory.
+     * If the extensionLevel == 2, return the common and site extension directories.
+     *
      * @param   string $appName        the app name
      * @param   string $moduleName     the module name
      * @param   string $ext            the extension type, can be control|model|view|lang|config
@@ -1286,16 +1241,44 @@ class baseRouter
      */
     public function getModuleExtPath($appName, $moduleName, $ext)
     {
-        if(!preg_match('/^[a-zA-Z0-9]+$/', $moduleName) or !preg_match('/^[a-zA-Z0-9]+$/', $ext)) $this->triggerError("The modulename '$moduleName' or ext '$ext' illegal. ", __FILE__, __LINE__, $exit = true);
+        /* 检查失败或者extensionLevel为0，直接返回空。If check failed or extensionLevel == 0, return empty array. */
+        if(!$this->checkAlnum($moduleName, 'module') or $this->config->framework->extensionLevel == 0) return array();
+
+        /* When extensionLevel == 1. */
+        $modulePath = $this->getModulePath($appName, $moduleName);
         $paths = array();
-        $paths['common'] = $this->getModulePath($appName, $moduleName) . 'ext' . DS . $ext . DS;
-        $paths['site']   = empty($this->siteCode) ? '' : $this->getModulePath($appName, $moduleName) . 'ext' . DS . '_' . $this->siteCode . DS . $ext . DS;
+        $paths['common'] = $modulePath . 'ext' . DS . $ext . DS;
+        if($this->config->framework->extensionLevel == 1) return $paths;
+
+        /* When extensionLevel == 2. */
+        $paths['site'] = empty($this->siteCode) ? '' : $modulePath . 'ext' . DS . '_' . $this->siteCode . DS . $ext . DS;
         return $paths;
     }
 
     /**
-     * 设置请求方法的扩展文件。
-     * Set the action extension file.
+     * 检查某一个变量必须为英文字母和数字组合。Check a variable must be ascii.
+     * 
+     * @param  string    $var 
+     * @param  string    $type 
+     * @access public
+     * @return void
+     */
+    public function checkAlnum($var, $type)
+    {
+        $filterConfig = $this->config->filterParam;
+        $rules = $filterConfig->module;
+        if($type == 'method')
+        {
+            $rules  = $filterConfig->method['common'];
+            if($this->config->framework->filterParam == 2) $rules = zget($filterConfig->method, $this->moduleName, $rules);
+        }
+
+        if(validater::checkByRules($var, $rules)) return true;
+        $this->triggerError("'$var' illegal. ", __FILE__, __LINE__, $exit = true);
+    }
+
+    /**
+     * 设置Action的扩展文件。 Set the action extension file.
      * 
      * @access  public
      * @return  bool
@@ -1303,14 +1286,226 @@ class baseRouter
     public function setActionExtFile()
     {
         $moduleExtPaths = $this->getModuleExtPath('', $this->moduleName, 'control');
+        
+        /* 如果扩展目录为空，不包含任何扩展文件。If there's no ext pathes return false.*/
+        if(empty($moduleExtPaths)) return false;
 
-        $this->extActionFile = '';
-        if($moduleExtPaths['site']) $this->extActionFile = $moduleExtPaths['site'] . $this->methodName . '.php';
-        if(empty($this->extActionFile) or !file_exists($this->extActionFile)) $this->extActionFile = $moduleExtPaths['common'] . $this->methodName . '.php';
+        /* 如果extensionLevel == 2，且扩展文件存在，返回该站点扩展文件。If extensionLevel == 2 and site extensionFile exists, return it. */
+        if($this->config->framework->extensionLevel == 2 and !empty( $moduleExtPaths['site']))
+        {
+            $this->extActionFile = $moduleExtPaths['site'] . $this->methodName . '.php';
+            if(file_exists($this->extActionFile)) return true;
+        }
 
+        /* 然后再尝试寻找公共扩展文件。Then try to find the common extension file. */
+        $this->extActionFile = $moduleExtPaths['common'] . $this->methodName . '.php';
         return file_exists($this->extActionFile);
     }
 
+    /**
+     * 设置一个模块的model文件，如果存在model扩展，一起合并。
+     * Set the model file of one module. If there's an extension file, merge it with the main model file.
+     * 
+     * @param   string $moduleName the module name
+     * @param   string $appName the app name
+     * @static
+     * @access  public
+     * @return  string the model file
+     */
+    public function setModelFile($moduleName, $appName = '')
+    {
+        if($appName == '') $appName = $this->getAppName();
+
+        /* 设置主model文件。 Set the main model file. */
+        $mainModelFile = $this->getModulePath($appName, $moduleName) . 'model.php';
+        if($this->config->framework->extensionLevel == 0) return $mainModelFile;
+
+        /* 计算扩展的文件和hook文件。Compute the extension files and hook files. */
+        $hookFiles     = array();
+        $extFiles      = array();
+        $siteExtended  = false; 
+
+        $modelExtPaths = $this->getModuleExtPath($appName, $moduleName, 'model');
+        foreach($modelExtPaths as $extType => $modelExtPath)
+        {
+            if(empty($modelExtPath)) continue;
+
+            $tmpHookFiles = helper::ls($modelExtPath . 'hook/', '.php');
+            $tmpExtFiles  = helper::ls($modelExtPath, '.php');
+            $hookFiles    = array_merge($hookFiles, $tmpHookFiles);
+            $extFiles     = array_merge($extFiles,  $tmpExtFiles);
+
+            if($extType == 'site' and (!empty($tmpHookFiles) or !empty($tmpExtFiles))) $siteExtended = true;
+        }
+
+        /* 如果没有扩展文件，返回主文件。 If no extension or hook files, return the main file directly. */
+        if(empty($extFiles) and empty($hookFiles)) return $mainModelFile;
+
+        /* 计算合并之后的modelFile路径。Compute the merged model file path. */
+        $extModelPrefix  = ($siteExtended and !empty($this->siteCode)) ? $this->siteCode{0} . DS . $this->siteCode : '';
+        $mergedModelDir  = $this->getTmpRoot() . 'model' . DS . ($extModelPrefix ? $extModelPrefix . DS : '');
+        $mergedModelFile = $mergedModelDir . $moduleName . '.php';
+        if(!is_dir($mergedModelDir)) mkdir($mergedModelDir, 0755, true);
+
+        /* 判断生成的缓存文件是否需要更新。 Judge whether the merged model file needed update or not. */
+        if(!$this->needModelFileUpdate($mergedModelFile, $extFiles, $hookFiles, $modelExtPaths, $mainModelFile)) return $mergedModelFile;
+
+        /* 合并扩展和hook文件。Merge the extension and hook files. */
+        $modelLines = $this->mergeModelExtFiles($moduleName, $mainModelFile, $extFiles, $mergedModelDir);
+        $this->mergeModelHookFiles($moduleName, $mainModelFile, $modelLines, $hookFiles, $mergedModelDir, $mergedModelFile);
+
+        return $mergedModelFile;
+    }
+
+    /**
+     * 检查合并之后的model文件是否需要更新。Check whether the merged model file need update or not.
+     * 
+     * @param  string    $mainModelFile 
+     * @param  string    $mergedModelFile 
+     * @param  string    $modelExtPaths 
+     * @param  array     $extFiles 
+     * @param  array     $hookFiles 
+     * @access public
+     * @return bool
+     */
+    public function needModelFileUpdate($mergedModelFile, $extFiles, $hookFiles, $modelExtPaths, $mainModelFile)
+    {
+        $lastTime = file_exists($mergedModelFile) ? filemtime($mergedModelFile) : 0;
+
+        foreach($extFiles  as $extFile)  if(filemtime($extFile)  > $lastTime) return true;
+        foreach($hookFiles as $hookFile) if(filemtime($hookFile) > $lastTime) return true;
+
+        $modelExtPath  = $modelExtPaths['common']; 
+        $modelHookPath = $modelExtPaths['common'] . 'hook/';
+        if(is_dir($modelExtPath ) and filemtime($modelExtPath)  > $lastTime) return true;
+        if(is_dir($modelHookPath) and filemtime($modelHookPath) > $lastTime) return true;
+
+        if(!empty($modelExtPaths['site']))
+        {
+            $modelExtPath  = $modelExtPaths['site']; 
+            $modelHookPath = $modelExtPaths['site'] . 'hook/';
+            if(is_dir($modelExtPath ) and filemtime($modelExtPath)  > $lastTime) return true;
+            if(is_dir($modelHookPath) and filemtime($modelHookPath) > $lastTime) return true;
+        }
+
+        if(filemtime($mainModelFile) > $lastTime) return true;
+
+        return false;
+    }
+
+    /**
+     * 将model的扩展文件合并在一起。Merge model ext files.
+     * 
+     * @param  string    $moduleName 
+     * @param  string    $mainModelFile 
+     * @param  array     $extFiles 
+     * @param  string    $mergedModelDir 
+     * @access public
+     * @return void
+     */
+    public function mergeModelExtFiles($moduleName, $mainModelFile, $extFiles, $mergedModelDir)
+    {
+        /* 设置类名。Set the class names. */
+        $modelClass    = "{$moduleName}Model";
+        $tmpModelClass = "tmpExt$modelClass";
+
+        /* 开始拼装代码。Prepare the codes. */
+        $modelLines  = "<?php\n";
+        $modelLines .= "global \$app;\n";
+        $modelLines .= "helper::cd(\$app->getBasePath());\n";
+        $modelLines .= "helper::import('$mainModelFile');\n";
+        $modelLines .= "helper::cd();\n";
+        $modelLines .= "class $tmpModelClass extends $modelClass \n{\n";
+
+        /* 将扩展文件的代码合并到代码中。Cycle all the extension files and merge them into model lines. */
+        foreach($extFiles as $extFile) $modelLines .= self::removePHPTAG($extFile);
+
+        /* 做个标记，方便后面替换代码使用。Make a mark for replacing codes. */
+        $replaceMark = '//**//';
+        $modelLines .= "\n$replaceMark\n}";
+
+        /* 生成一个临时的model扩展文件，并加载，用于后续的hook文件加载使用。Create a tmp merged model file and import it for merge hook codes using. */
+        $tmpModelFile = $mergedModelDir . "tmp$moduleName.php";
+        if(@file_put_contents($tmpModelFile, $modelLines)) 
+        {
+            if(!class_exists($tmpModelClass)) include $tmpModelFile;
+            return $modelLines;
+        }
+            
+        $this->triggerError("ERROR: $tmpModelFile not writable.", __FILE__, __LINE__, true);
+    }
+
+    /**
+     * 合并model的hook脚本。Merge hook files for a model.
+     * 
+     * @access public
+     * @return void
+     */
+    public function mergeModelHookFiles($moduleName, $mainModelFile, $modelLines, $hookFiles, $mergedModelDir, $mergedModelFile)
+    {
+        /* 定义相关变量。Init vars. */
+        $modelClass    = $moduleName . 'Model';
+        $extModelClass = 'ext' . $modelClass;
+        $tmpModelClass = 'tmpExt' . $modelClass;
+        $tmpModelFile  = $mergedModelDir . "tmp$moduleName.php";
+        $replaceMark   = '//**//';
+
+        /* 读取hook文件。Get hook codes need to merge. */
+        $hookCodes = array();
+        foreach($hookFiles as $hookFile)
+        {
+            /* 通过文件名获得其对应的方法名。Get methods according it's filename. */
+            $fileName = baseName($hookFile);
+            list($method) = explode('.', $fileName);
+            $hookCodes[$method][] = self::removePHPTAG($hookFile);
+        }
+
+        /* 合并Hook文件。Cycle the hook methods and merge hook codes. */
+        $hookedMethods    = array_keys($hookCodes);
+        $mainModelCodes   = file($mainModelFile);
+        $mergedModelCodes = file($tmpModelFile);
+        foreach($hookedMethods as $method)
+        {
+            /* 通过反射获得hook脚本对应的方法所在的文件和起止行数。Reflection the hooked method to get it's defined position. */
+            $methodRelfection = new reflectionMethod($tmpModelClass, $method);
+            $definedFile = $methodRelfection->getFileName();
+            $startLine   = $methodRelfection->getStartLine() . ' ';
+            $endLine     = $methodRelfection->getEndLine() . ' ';
+
+            /* 将Hook脚本和老的代码合并在一起，并替换原来的定义。Merge hook codes with old codes and replace back. */
+            $oldCodes  = $definedFile == $tmpModelFile ? $mergedModelCodes : $mainModelCodes;
+            $oldCodes  = join("", array_slice($oldCodes, $startLine - 1, $endLine - $startLine + 1));
+            $openBrace = strpos($oldCodes, '{');
+            $newCodes  = substr($oldCodes, 0, $openBrace + 1) . "\n" . join("\n", $hookCodes[$method]) . substr($oldCodes, $openBrace + 1);
+
+            if($definedFile == $tmpModelFile) $modelLines = str_replace($oldCodes, $newCodes, $modelLines);
+            if($definedFile != $tmpModelFile) $modelLines = str_replace($replaceMark, $newCodes . "\n$replaceMark", $modelLines);
+        }
+        
+        /* 保存最终的Model文件。Save the last merged model file. */
+        $modelLines = str_replace($tmpModelClass, $extModelClass, $modelLines);
+        file_put_contents($mergedModelFile, $modelLines);
+        unlink($tmpModelFile);
+    }
+
+    /**
+     * Remove tags of PHP 
+     * 
+     * @param  string    $fileName 
+     * @static
+     * @access public
+     * @return string
+     */
+    static public function removePHPTAG($fileName)
+    {
+        $code = trim(file_get_contents($fileName));
+        if(strpos($code, '<?php') === 0)     $code = ltrim($code, '<?php');
+        if(strrpos($code, '?>')   !== false) $code = rtrim($code, '?>');
+        return trim($code);
+    }
+
+    //-------------------- 路由相关方法(Routing related methods) --------------------//
+   
     /**
      * 设置路由(PATH_INFO 方式)：
      * 1.设置模块名；
@@ -1398,6 +1593,7 @@ class baseRouter
      */
     public function loadModule()
     {
+        $appName    = $this->appName;
         $moduleName = $this->moduleName;
         $methodName = $this->methodName;
 
@@ -1440,7 +1636,11 @@ class baseRouter
             $name = $param->getName();
 
             $default = '_NOT_SET';
-            if(isset($paramDefaultValue[$className][$methodName][$name]))
+            if(isset($paramDefaultValue[$appName][$className][$methodName][$name]))
+            {
+                $default = $paramDefaultValue[$appName][$className][$methodName][$name];
+            }
+            elseif(isset($paramDefaultValue[$className][$methodName][$name]))
             {
                 $default = $paramDefaultValue[$className][$methodName][$name];
             }
@@ -1465,6 +1665,12 @@ class baseRouter
             $this->setParamsByGET($defaultParams);
         }
 
+        if($this->config->framework->filterParam == 2)
+        {
+            $_GET     = validater::filterParam($_GET, 'get');
+            $_COOKIE  = validater::filterParam($_COOKIE, 'cookie');
+        }
+
         /* 调用该方法   Call the method. */
         call_user_func_array(array($module, $methodName), $this->params);
         return $module;
@@ -1492,7 +1698,7 @@ class baseRouter
         for($i = 2; $i < $itemCount; $i ++)
         {
             $key = key($defaultParams);     // Get key from the $defaultParams.
-            $params[$key] = $items[$i];
+            $params[$key] = str_replace('.', '-', $items[$i]);
             next($defaultParams);
         }
 
@@ -1507,15 +1713,21 @@ class baseRouter
      * @access  public
      * @return  void
      */
-    public function setParamsByGET($defaultParams)
+    public function setParamsByGET($defaultParams, $type = '')
     {
-        /* Unset moduleVar, methodVar, viewVar and session 变量， 剩下的作为参数。 */
-        /* Unset the moduleVar, methodVar, viewVar and session var, all the left are the params. */
-        unset($_GET[$this->config->moduleVar]);
-        unset($_GET[$this->config->methodVar]);
-        unset($_GET[$this->config->viewVar]);
-        unset($_GET[$this->config->sessionVar]);
-        $this->params = $this->mergeParams($defaultParams, $_GET);
+        $params = array();
+        if($type != 'fetch')
+        {
+            /* Unset moduleVar, methodVar, viewVar and session 变量， 剩下的作为参数。 */
+            /* Unset the moduleVar, methodVar, viewVar and session var, all the left are the params. */
+            unset($_GET[$this->config->moduleVar]);
+            unset($_GET[$this->config->methodVar]);
+            unset($_GET[$this->config->viewVar]);
+            unset($_GET[$this->config->sessionVar]);
+            $params = $_GET;
+        }
+
+        $this->params = $this->mergeParams($defaultParams, $params);
     }
 
     /**
@@ -1529,22 +1741,26 @@ class baseRouter
      */
     public function mergeParams($defaultParams, $passedParams)
     {
-        /* Check params from URL. */
-        foreach($passedParams as $param => $value)
-        {
-            if(preg_match('/[^a-zA-Z0-9_\.]/', $param)) die('Bad Request!');
-            if(preg_match('/[^a-zA-Z0-9=_,`#+\^\/\.%\|\x7f-\xff]/', trim($value))) die('Bad Request!');
-        }
-
+        /* Remove these two params. */
         unset($passedParams['onlybody']);
         unset($passedParams['HTTP_X_REQUESTED_WITH']);
+
+        /* Check params from URL. */
+        $nameRules  = isset($this->config->filterParam->param[$this->moduleName][$this->methodName]['name'])  ? $this->config->filterParam->param[$this->moduleName][$this->methodName]['name']  : $this->config->filterParam->param['common']['name'];
+        $valueRules = isset($this->config->filterParam->param[$this->moduleName][$this->methodName]['value']) ? $this->config->filterParam->param[$this->moduleName][$this->methodName]['value'] : $this->config->filterParam->param['common']['value'];
+        foreach($passedParams as $param => $value)
+        {
+            if(!validater::checkByRules($param, $nameRules)) die('Bad Request!');
+            if($value and !validater::checkByRules($value, $valueRules)) die('Bad Request!');
+        }
+
         $passedParams = array_values($passedParams);
         $i = 0;
         foreach($defaultParams as $key => $defaultValue)
         {
             if(isset($passedParams[$i]))
             {
-                $defaultParams[$key] = strip_tags($passedParams[$i]);
+                $defaultParams[$key] = strip_tags(urldecode($passedParams[$i]));
             }
             else
             {
@@ -1636,6 +1852,43 @@ class baseRouter
         return $$className;
     }
 
+    /**
+     * 加载整个应用公共的配置文件。
+     * Load the common config files for the app.
+     * 
+     * @access public
+     * @return void
+     */
+    public function loadMainConfig()
+    {
+        /* 初始化$config对象。Init the $config object. */
+        global $config;
+        if(!is_object($config)) $config = new config();
+        $this->config = $config;
+
+        /* 加载主配置文件。 Load the main config file. */
+        $mainConfigFile = $this->configRoot . 'config.php';
+        if(!file_exists($mainConfigFile)) $this->triggerError("The main config file $mainConfigFile not found", __FILE__, __LINE__, $exit = true);
+        include $mainConfigFile;
+    }
+
+    /**
+     * 当multiSite功能打开的时候，加载额外的配置文件。
+     * When multiSite feature enabled, load extra config file.
+     * 
+     * @access public
+     * @return void
+     */
+    public function loadExtraConfig()
+    {
+        global $config;
+        $multiConfigFile = $this->configRoot . 'multi.php';
+        if(file_exists($multiConfigFile)) include $multiConfigFile;
+
+        $siteConfigFile = $this->configRoot . "sites/{$this->siteCode}.php";
+        if(file_exists($siteConfigFile))  include $siteConfigFile;
+    }
+
     /**
      * 加载模块的config文件，返回全局$config对象。
      * 如果该模块是common，加载$configRoot的配置文件，其他模块则加载其模块的配置文件。
@@ -1649,82 +1902,79 @@ class baseRouter
      * @access  public
      * @return  object|bool the config object or false.
      */
-    public function loadConfig($moduleName, $appName = '', $exitIfNone = true)
+    public function loadModuleConfig($moduleName, $appName = '')
     {
         global $config;
-        if(!is_object($config)) $config = new config();
-        if(!isset($config->$moduleName)) $config->$moduleName = new stdclass();
 
-        $extConfigFiles = array();
+        if($config and (!isset($config->$moduleName) or !is_object($config->$moduleName))) $config->$moduleName = new stdclass();
 
-        /*
-         * 设置主配置文件和扩展配置文件。
-         * Set the main config file and extension config file.
-         * */
-        if($moduleName == 'common')
-        {
-            $mainConfigFile = $this->configRoot . 'config.php';
-            $myConfig       = $this->configRoot . 'my.php';
-            if(is_file($myConfig)) $extConfigFiles[] = $myConfig;
-        }
-        else
-        {
-            $mainConfigFile = $this->getModulePath($appName, $moduleName) . 'config.php';
+        /* 初始化数组。Init the variables. */
+        $extConfigFiles       = array();
+        $commonExtConfigFiles = array();
+        $siteExtConfigFiles   = array();
 
-            /* Get config extension. */
-            $extConfigPath        = $this->getModuleExtPath($appName, $moduleName, 'config');
-            $commonExtConfigFiles = helper::ls($extConfigPath['common'], '.php');
-            $siteExtConfigFiles   = helper::ls($extConfigPath['site'], '.php');
-            $extConfigFiles       = array_merge($commonExtConfigFiles, $siteExtConfigFiles);
-        }
+        /* 先获得模块的主配置文件。Get the main config file for current module first. */
+        $mainConfigFile = $this->getModulePath($appName, $moduleName) . 'config.php';
 
-        /* 设置引用的文件(Set the files to include) */
-        if(!is_file($mainConfigFile))
-        {
-            if($exitIfNone) self::triggerError("config file $mainConfigFile not found", __FILE__, __LINE__, true);
-            if(empty($extConfigFiles) and !isset($config->system->$moduleName) and !isset($config->personal->$moduleName)) return false;  //  and no extension file or extension in db, exit.
-            $configFiles = $extConfigFiles;
-        }
-        else
-        {
-            $configFiles = array_merge(array($mainConfigFile), $extConfigFiles);
-        }
+        /* 查找扩展配置文件。Get extension config files. */
+        if($config->framework->extensionLevel > 0) $extConfigPath = $this->getModuleExtPath($appName, $moduleName, 'config');
+        if($config->framework->extensionLevel >= 1 and !empty($extConfigPath['common'])) $commonExtConfigFiles = helper::ls($extConfigPath['common'], '.php');
+        if($config->framework->extensionLevel == 2 and !empty($extConfigPath['site']))   $siteExtConfigFiles   = helper::ls($extConfigPath['site'], '.php');
+        $extConfigFiles = array_merge($commonExtConfigFiles, $siteExtConfigFiles);
 
+        /* 将主配置文件和扩展配置文件合并在一起。Put the main config file and extension config files together. */
+        $configFiles = array_merge(array($mainConfigFile), $extConfigFiles);
+
+        /* 加载每一个配置文件。Load every config file. */
         static $loadedConfigs = array();
         foreach($configFiles as $configFile)
         {
             if(in_array($configFile, $loadedConfigs)) continue;
-            include $configFile;
+            if(file_exists($configFile)) include $configFile;
             $loadedConfigs[] = $configFile;
         }
 
-        if($moduleName == 'common')
+        /* 加载数据库中与本模块相关的配置项。Merge from the db configs. */
+        if($moduleName != 'common')
         {
-            $this->config = $config;
-            $this->setSiteCode();
-            if(!isset($config->site)) $config->site = new stdclass();
-            $config->site->code = $this->siteCode;
+            if(isset($config->system->$moduleName))   $this->mergeConfig($config->system->$moduleName, $moduleName);
+            if(isset($config->personal->$moduleName)) $this->mergeConfig($config->personal->$moduleName, $moduleName);
+        }
+    }
 
-            if(!empty($config->multi))
+    /**
+     * Merge db config.
+     * 
+     * @param  array  $dbConfig 
+     * @param  string $moduleName 
+     * @access public
+     * @return void
+     */
+    public  function mergeConfig($dbConfig, $moduleName = 'common')
+    {
+        global $config;
+
+        /* 如果没有设置本模块配置，则首先进行初始化。Init the $config->$moduleName if not set.*/
+        if($moduleName != 'common' and !isset($config->$moduleName)) $config->$moduleName = new stdclass();
+
+        $config2Merge = $config;
+        if($moduleName != 'common') $config2Merge = $config->$moduleName;
+
+        foreach($dbConfig as $item)
+        {
+            if($item->section)
             {
-                $multiConfigFile = $this->configRoot . "multi.php";
-                if(is_file($multiConfigFile)) include $multiConfigFile;
+                if(!isset($config2Merge->{$item->section})) $config2Merge->{$item->section} = new stdclass();
+                if(is_object($config2Merge->{$item->section}))
+                {
+                    $config2Merge->{$item->section}->{$item->key} = $item->value;
+                }
             }
-
-            if(!empty($this->siteCode))
+            else
             {
-                $siteConfigFile = $this->configRoot . "sites/{$this->siteCode}.php";
-                if(is_file($siteConfigFile)) include $siteConfigFile;
+                $config2Merge->{$item->key} = $item->value;
             }
         }
-
-        /* Merge from the db configs. */
-        if($moduleName != 'common' and isset($config->system->$moduleName)) helper::mergeConfig($config->system->$moduleName, $moduleName);
-        if($moduleName != 'common' and isset($config->personal->$moduleName)) helper::mergeConfig($config->personal->$moduleName, $moduleName);
-
-        $this->config = $config;
-
-        return $config;
     }
 
     /**
@@ -1746,14 +1996,17 @@ class baseRouter
         $view->sessionVar  = $this->config->sessionVar;
 
         $this->session->set('rand', mt_rand(0, 10000));
+        $this->session->set('random', $this->session->rand);
         $view->sessionName = session_name();
         $view->sessionID   = session_id();
         $view->rand        = $this->session->rand;
+        $view->random      = $this->session->random;
         $view->expiredTime = ini_get('session.gc_maxlifetime');
         $view->serverTime  = time();
 
-        $view->ip          = gethostbyname($_SERVER['HTTP_HOST']);
-        $view->name        = isset($this->config->socket->name) ? $this->config->socket->name : '';
+        $ip         = gethostbyname($_SERVER['HTTP_HOST']);
+        $view->ip   = strpos($ip, ':') === false ? $ip : substr($ip, 0, strpos($ip, ':'));
+        $view->name = isset($this->config->socket->name) ? $this->config->socket->name : '';
         $view->port        = isset($this->config->socket->port) ? $this->config->socket->port : '';
         echo json_encode($view);
     }
@@ -1769,59 +2022,44 @@ class baseRouter
      */
     public function loadLang($moduleName, $appName = '')
     {
-        $modulePath   = $this->getModulePath($appName, $moduleName);
+        /* 初始化变量。Init vars. */
+        $modulePath      = $this->getModulePath($appName, $moduleName);
+        $extLangFiles    = array();
+        $langFilesToLoad = array();
+
+        /* 判断主语言文件是否存在。Whether the main lang file exists or not. */
         $mainLangFile = $modulePath . 'lang' . DS . $this->clientLang . '.php';
-        $extLangPath        = $this->getModuleExtPath($appName, $moduleName, 'lang');
-        $commonExtLangFiles = helper::ls($extLangPath['common'] . $this->clientLang, '.php');
-        $siteExtLangFiles   = helper::ls($extLangPath['site'] . $this->clientLang, '.php');
-        $extLangFiles       = array_merge($commonExtLangFiles, $siteExtLangFiles);
+        if(file_exists($mainLangFile)) $langFilesToLoad[] = $mainLangFile;
 
-        /* 设置引用的文件(Set the files to include). */
-        if(!is_file($mainLangFile))
+        /* 获取扩展语言文件。If extensionLevel > 0, get extension lang files. */
+        if($this->config->framework->extensionLevel > 0)
         {
-            if(empty($extLangFiles)) return false;  // 没有扩展文件，返回false(Return false if no extension file).
-            $langFiles = $extLangFiles;
-        }
-        else
-        {
-            $langFiles = array_merge(array($mainLangFile), $extLangFiles);
+            $commonExtLangFiles = array();
+            $siteExtLangFiles   = array();
+
+            $extLangPath = $this->getModuleExtPath($appName, $moduleName, 'lang');
+            if($this->config->framework->extensionLevel >= 1 and !empty($extLangPath['common'])) $commonExtLangFiles = helper::ls($extLangPath['common'] . $this->clientLang, '.php');
+            if($this->config->framework->extensionLevel == 2 and !empty($extLangPath['site']))   $siteExtLangFiles   = helper::ls($extLangPath['site'] . $this->clientLang, '.php');
+            $extLangFiles  = array_merge($commonExtLangFiles, $siteExtLangFiles);
         }
 
+        /* 计算最终要加载的语言文件。 Get the lang files to be loaded. */
+        $langFilesToLoad = array_merge($langFilesToLoad, $extLangFiles);
+        if(empty($langFilesToLoad)) return false;
+
+        /* 加载语言文件。Load lang files. */
         global $lang;
         if(!is_object($lang)) $lang = new language();
+        if(!isset($lang->$moduleName)) $lang->$moduleName = new stdclass();
 
         static $loadedLangs = array();
-        foreach($langFiles as $langFile)
+        foreach($langFilesToLoad as $langFile)
         {
             if(in_array($langFile, $loadedLangs)) continue;
             include $langFile;
             $loadedLangs[] = $langFile;
         }
 
-        /* Merge from the db lang. */
-        if($moduleName != 'common' and isset($lang->db->custom[$moduleName]))
-        {
-            foreach($lang->db->custom[$moduleName] as $section => $fields)
-            {
-                if(isset($lang->{$moduleName}->{$section}['']))
-                {
-                    $nullKey   = '';
-                    $nullValue = $lang->{$moduleName}->{$section}[$nullKey]; 
-                }
-                elseif(isset($lang->{$moduleName}->{$section}[0]))
-                {
-                    $nullKey   = 0;
-                    $nullValue = $lang->{$moduleName}->{$section}[0]; 
-                }
-                unset($lang->{$moduleName}->{$section});
-
-                if(isset($nullKey))$lang->{$moduleName}->{$section}[$nullKey] = $nullValue;
-                foreach($fields as $key => $value) $lang->{$moduleName}->{$section}[$key] = $value;
-                unset($nullKey);
-                unset($nullValue);
-            }
-        }
-
         $this->lang = $lang;
         return $lang;
     }
@@ -1921,7 +2159,8 @@ class baseRouter
     public function triggerError($message, $file, $line, $exit = false)
     {
         /* 设置错误信息(Set the error info) */
-        $log = "ERROR: $message in $file on line $line";
+        $message = htmlspecialchars($message);
+        $log     = "ERROR: $message in $file on line $line";
         if(isset($_SERVER['SCRIPT_URI'])) $log .= ", request: $_SERVER[SCRIPT_URI]";; 
         $trace = debug_backtrace();
         extract($trace[0]);
@@ -1945,13 +2184,15 @@ class baseRouter
      */
     public function saveError($level, $message, $file, $line)
     {
-        if(empty($this->config->debug)) return true;
+        if(empty($this->config->debug))  return true;
+        if(!is_dir($this->logRoot))      return true;
+        if(!is_writable($this->logRoot)) return true;
 
         /*
          * 删除设定时间之前的日志。
          * Delete the log before the set time.
          **/
-        if(mt_rand(0, 1) == 1)
+        if(mt_rand(0, 10) == 1)
         {
             $logDays = isset($this->config->framework->logDays) ? $this->config->framework->logDays : 14;
             $dayTime = time() - $logDays * 24 * 3600;
@@ -1984,7 +2225,7 @@ class baseRouter
         }
 
         /* 保存到日志文件(Save to log file) */
-        $errorFile = $this->getLogRoot() . 'php.' . date('Ymd') . '.log.php';
+        $errorFile = $this->logRoot . 'php.' . date('Ymd') . '.log.php';
         if(!is_file($errorFile)) file_put_contents($errorFile, "<?php\n die();\n?>\n");
 
         $fh = fopen($errorFile, 'a');
diff --git a/framework/helper.class.php b/framework/helper.class.php
index ef0f515865..a6f142d08e 100644
--- a/framework/helper.class.php
+++ b/framework/helper.class.php
@@ -112,3 +112,15 @@ class helper extends baseHelper
         return $string;
     }
 }
+
+/**
+ * 检查是否是onlybody模式。
+ * Check exist onlybody param.
+ * 
+ * @access public
+ * @return void
+ */
+function isonlybody()
+{
+    return helper::inOnlyBodyMode();
+}
diff --git a/framework/router.class.php b/framework/router.class.php
index 3c8da3b2c4..38394bf2d2 100755
--- a/framework/router.class.php
+++ b/framework/router.class.php
@@ -77,7 +77,32 @@ class router extends baseRouter
             $lang->projectCommon = isset($this->config->projectCommonList[$this->clientLang][(int)$projectCommon]) ? $this->config->projectCommonList[$this->clientLang][(int)$projectCommon] : $this->config->projectCommonList['zh-cn'][0];
         }
 
-        return parent::loadLang($moduleName, $appName);
+        parent::loadLang($moduleName, $appName);
+
+        /* Merge from the db lang. */
+        if($moduleName != 'common' and isset($lang->db->custom[$moduleName]))
+        {
+            foreach($lang->db->custom[$moduleName] as $section => $fields)
+            {
+                if(isset($lang->{$moduleName}->{$section}['']))
+                {
+                    $nullKey   = '';
+                    $nullValue = $lang->{$moduleName}->{$section}[$nullKey]; 
+                }
+                elseif(isset($lang->{$moduleName}->{$section}[0]))
+                {
+                    $nullKey   = 0;
+                    $nullValue = $lang->{$moduleName}->{$section}[0]; 
+                }
+                unset($lang->{$moduleName}->{$section});
+
+                if(isset($nullKey))$lang->{$moduleName}->{$section}[$nullKey] = $nullValue;
+                foreach($fields as $key => $value) $lang->{$moduleName}->{$section}[$key] = $value;
+                unset($nullKey);
+                unset($nullValue);
+            }
+        }
+        return $lang;
     }
 
     /**
@@ -99,4 +124,9 @@ class router extends baseRouter
         if(isset($fatalLevel[$level])) $this->config->debug = true;
         parent::saveError($level, $message, $file, $line);
     }
+
+    public function loadConfig($moduleName, $appName = '')
+    {
+        return parent::loadModuleConfig($moduleName, $appName);
+    }
 }
diff --git a/lib/base/dao/dao.class.php b/lib/base/dao/dao.class.php
index 567fc3569e..24c2f7c80b 100644
--- a/lib/base/dao/dao.class.php
+++ b/lib/base/dao/dao.class.php
@@ -386,7 +386,7 @@ class baseDAO
             $this->sqlError($e);
         }
 
-        return $row->recTotal;
+        return is_object($row) ? $row->recTotal : 0;
     }
 
     /**
@@ -513,6 +513,7 @@ class baseDAO
         if($this->autoLang and !isset($data->lang)) 
         {
             $data->lang = $this->app->getClientLang();
+            if(isset($this->app->config->cn2tw) and $this->app->config->cn2tw and $data->lang == 'zh-tw') $data->lang = 'zh-cn';
             if(defined('RUN_MODE') and RUN_MODE == 'front' and !empty($this->app->config->cn2tw)) $data->lang = str_replace('zh-tw', 'zh-cn', $data->lang);
         }
 
diff --git a/lib/base/filter/filter.class.php b/lib/base/filter/filter.class.php
index d59b62cb69..c9d3291750 100644
--- a/lib/base/filter/filter.class.php
+++ b/lib/base/filter/filter.class.php
@@ -143,7 +143,7 @@ class baseValidater
      */
     public static function checkTel($var)
     {
-        return preg_match("/^([0-9]{3,4}-)?[0-9]{7,8}$/", $var);
+        return preg_match("/^([0-9]{3,4}-?)?[0-9]{7,8}$/", $var);
     }
 
     /**
@@ -157,7 +157,7 @@ class baseValidater
      */
     public static function checkMobile($var)
     {
-        return preg_match("/^1[3-5,8]{1}[0-9]{9}$/", $var);
+        return preg_match("/^1[3-5,7,8]{1}[0-9]{9}$/", $var);
     }
 
     /**
@@ -214,6 +214,43 @@ class baseValidater
         }
     }
 
+    /**
+     * 身份证号检查。
+     * Idcard checking.
+     * 
+     * @access public
+     * @return void
+     */
+    public static function checkIdcard($idcard)
+    {
+        if(strlen($idcard)!=18) return false;
+        $idcard = strtoupper($idcard); 
+        $cityList = array(
+            '11','12','13','14','15','21','22',
+            '23','31','32','33','34','35','36',
+            '37','41','42','43','44','45','46',
+            '50','51','52','53','54','61','62',
+            '63','64','65','71','81','82','91'
+        );
+
+        if (!preg_match('/^([\d]{17}[xX\d]|[\d]{15})$/', $idcard)) return false;
+
+        if (!in_array(substr($idcard, 0, 2), $cityList)) return false;
+
+        $baseCode     = substr($idcard, 0, 17);
+        $verifyCode   = substr($idcard, 17, 1);
+        $interference = array(7, 9, 10, 5, 8, 4, 2, 1, 6, 3, 7, 9, 10, 5, 8, 4, 2);
+
+        $verifyConfig = array('1', '0', 'X', '9', '8', '7', '6', '5', '4', '3', '2');
+
+        $total = 0;
+        for($i=0; $i<17; $i++) $total += substr($baseCode, $i, 1) * $interference[$i];
+
+        $mod = $total % 11;
+
+        return $verifyCode == $verifyConfig[$mod];
+    }
+
     /**
      * 日期检查。注意，2009-09-31是一个合法日期，系统会将它转换为2009-10-01。
      * Date checking. Note: 2009-09-31 will be an valid date, because strtotime auto fixed it to 10-01.
@@ -480,6 +517,227 @@ class baseValidater
         return true;
     }
 
+    /**
+     * 过滤附件。
+     * Filter files. 
+     * 
+     * @access public
+     * @return array
+     */
+    public static function filterFiles()
+    {
+        global $config;
+        if(empty($_FILES)) return $_FILES;
+
+        foreach($_FILES as $varName => $files)
+        {
+            if(is_array($files['name']))
+            {
+                foreach($files['name'] as $i => $fileName)
+                {
+                    $extension = ltrim(strrchr($fileName, '.'), '.');
+                    if(stripos(",{$config->file->dangers},", ",{$extension},") !== false)
+                    {
+                        unset($_FILES);
+                        return array();
+                    }
+                }
+            }
+            else
+            {
+                $extension = ltrim(strrchr($files['name'], '.'), '.');
+                if(stripos(",{$config->file->dangers},", ",{$extension},") !== false)
+                {
+                    unset($_FILES);
+                    return array();
+                }
+            }
+        }
+
+        return $_FILES;
+    }
+
+    /**
+     * 过滤超级变量。
+     * Filter super vars.
+     * 
+     * @param  array    $super 
+     * @access public
+     * @return array
+     */
+    public static function filterSuper($super)
+    {
+        if(!is_array($super)) return $super;
+
+        $super = self::filterBadKeys($super);
+        foreach($super as $key => $item)
+        {
+            if(is_array($item))
+            {
+                $item = self::filterBadKeys($item);
+                foreach($item as $subkey => $subItem)
+                {
+                    if(is_array($subItem)) continue;
+                    $subItem = self::filterTrojan($subItem);
+                    $super[$key][$subkey] = self::filterXSS($subItem);
+                }
+            }
+            else
+            {
+                $item = self::filterTrojan($item);
+                $super[$key] = self::filterXSS($item);
+            }
+        }
+
+        return $super;
+    }
+
+    /**
+     * 过滤不符合规则的键值。
+     * Filter bad keys.
+     * 
+     * @param  mix    $var 
+     * @access public
+     * @return mix
+     */
+    public static function filterBadKeys($var)
+    {
+        global $config;
+        if(empty($config->framework->filterBadKeys)) return $var;
+        foreach($var as $key => $value) if(preg_match('/[^a-zA-Z0-9_\.\-]/', $key)) unset($var[$key]);
+        return $var;
+    }
+
+    /**
+     * 过滤木马代码。
+     * Filter trojan codes.
+     * 
+     * @param  string    $var 
+     * @access public
+     * @return string
+     */
+    public static function filterTrojan($var)
+    {
+        global $config;
+        if(empty($config->framework->filterTrojan)) return $var;
+        if(strpos(htmlspecialchars_decode($var), '<?') === false) return $var;
+
+        $var      = (string) $var;
+        $evils    = array('eval', 'exec', 'passthru', 'proc_open', 'shell_exec', 'system', '$$', 'include', 'require', 'assert');
+        $replaces = array('e v a l', 'e x e c', ' p a s s t h r u', ' p r o c _ o p e n', 's h e l l _ e x e c', 's y s t e m', '$ $', 'i n c l u d e', 'r e q u i r e', 'a s s e r t');
+        $var      = str_ireplace($evils, $replaces, $var);
+
+        return $var;
+    }
+
+    /**
+     * 过滤 XSS代码。
+     * Filter XSS codes.
+     * 
+     * @param  string    $var 
+     * @access public
+     * @return string
+     */
+    public static function filterXSS($var)
+    {
+        global $config;
+        if(empty($config->framework->filterXSS)) return $var;
+
+        if(stripos($var, '<script') !== false)
+        {
+            $var      = (string) $var;
+            $evils    = array('appendchild(', 'createElement(', 'xss.re', 'onfocus', 'onclick', 'innerHTML', 'replaceChild(', 'html(', 'append(', 'appendTo(', 'prepend(', 'prependTo(', 'after(', 'insertBefore', 'before(', 'replaceWith(');
+            $replaces = array('a p p e n d c h i l d (', 'c r e a t e E l e  m e n t (', 'x s s . r e', 'o n f o c u s', 'o n c l i c k', 'i n n e r H T M L', 'r e p l a c e C h i l d (', 'h t m l (', 'a p p e n d (', 'a p p e n d T o (', 'p r e p e n d (', 'p r e p e n d T o (', 'a f t e r (', 'i n s e r t B e f o r e(', 'b e f o r e (', 'r e p l a c e W i t h (');
+            $var      = str_ireplace($evils, $replaces, $var);
+        }
+
+        /* Process like 'javascript:' */
+        $var = preg_replace('/j\s*a\s*v\s*a\s*s\s*c\s*r\s*i\s*p\s*t\s*:/Ui', 'j a v a s c r i p t :', $var);
+
+        return $var;
+    }
+
+    /**
+     * Filter param.
+     * 
+     * @param  array    $var 
+     * @param  string   $type 
+     * @static
+     * @access public
+     * @return array
+     */
+    public static function filterParam($var, $type)
+    {
+        global $config, $app;
+
+        if(!isset($config->filterParam->$type)) return array();
+
+        $moduleName   = $app->getModuleName();
+        $methodName   = $app->getMethodName();
+        $params       = $app->getParams();
+        $filterConfig = $config->filterParam->$type;
+
+        $holdVars = '';
+        if(isset($filterConfig['common']['hold'])) $holdVars .= $filterConfig['common']['hold'] . ',';
+        if(isset($filterConfig[$moduleName]['common']['hold'])) $holdVars .= $filterConfig[$moduleName]['common']['hold'] . ',';
+        if(isset($filterConfig[$moduleName][$methodName]['hold'])) $holdVars .= $filterConfig[$moduleName][$methodName]['hold'] . ',';
+        if($type == 'cookie') $holdVars .= 'pager' . ucfirst($moduleName) . ucfirst($methodName) . ',';
+        foreach($var as $key => $value)
+        {
+            if($config->requestType == 'GET' and $type == 'get' and isset($params[$key])) continue;
+            if(strpos(",$holdVars", ",$key,") === false)
+            {
+                unset($var[$key]);
+                continue;
+            }
+
+            $rules = '';
+            if(isset($filterConfig[$moduleName][$methodName]['params'][$key]))
+            {
+                $rules = $filterConfig[$moduleName][$methodName]['params'][$key];
+            }
+            elseif(isset($filterConfig[$moduleName]['common']['params'][$key]))
+            {
+                $rules = $filterConfig[$moduleName]['common']['params'][$key];
+            }
+            elseif(isset($filterConfig['common']['params'][$key]))
+            {
+                $rules = $filterConfig['common']['params'][$key];
+            }
+            if(!self::checkByRules($value, $rules)) unset($var[$key]);
+        }
+        return $var;
+    }
+
+    /**
+     * Check by rules.
+     * 
+     * @param  string   $var 
+     * @param  array    $rules 
+     * @static
+     * @access public
+     * @return bool
+     */
+    public static function checkByRules($var, $rules)
+    {
+        if(empty($rules)) return false;
+        foreach($rules as $type => $rule)
+        {
+            $checkMethod = 'check' . $type;
+            if(method_exists('baseValidater', $checkMethod))
+            {
+                if(empty($rule)  and self::$checkMethod($var) === false) return false;
+                if(!empty($rule) and self::$checkMethod($var, $rule) === false) return false;
+            }
+            elseif(function_exists('is_' . $type))
+            {
+                $checkFunction = 'is_' . $type;
+                if(!$checkFunction($var)) return false;
+            }
+        }
+        return true;
+    }
+
     /**
      * 调用一个方法进行检查。
      * Call a function to check it.
@@ -718,7 +976,7 @@ class baseFixer
         $fields = $this->processFields($fieldName);
         foreach($fields as $fieldName)
         {
-            if(version_compare(phpversion(), '5.4', '<') and get_magic_quotes_gpc()) $this->data->$fieldName = stripslashes($this->data->$fieldName);
+            if(function_exists('get_magic_quotes_gpc') and get_magic_quotes_gpc()) $this->data->$fieldName = stripslashes($this->data->$fieldName);
 
             if(!in_array($fieldName, $this->stripedFields))
             {
@@ -728,6 +986,8 @@ class baseFixer
                      * purifier会把&nbsp;替换空格，kindeditor在会吧行首的空格去掉。
                      * purifier will change &nbsp; to ' ', and edit it will no space in line head use kindeditor. 
                      **/
+                    $this->data->$fieldName = preg_replace('/<[^>]+</', '<', $this->data->$fieldName);
+                    $this->data->$fieldName = preg_replace('/>[^<]+>/', '>', $this->data->$fieldName);
                     if($usePurifier) $this->data->$fieldName = str_replace('&nbsp;', '&spnb;', $this->data->$fieldName);
                     $this->data->$fieldName = $usePurifier ? $purifier->purify($this->data->$fieldName) : strip_tags($this->data->$fieldName, $allowedTags);
                     if($usePurifier) $this->data->$fieldName = str_replace('&amp;spnb;', '&nbsp;', $this->data->$fieldName);
@@ -929,7 +1189,7 @@ class baseFixer
         foreach($this->data as $field => $value)
         {
             if(!isset($fields[$field])) unset($this->data->$field);
-            if(!in_array($field, $this->stripedFields)) $this->data->$field = $this->specialChars($this->data->field);
+            if(!in_array($field, $this->stripedFields)) $this->specialChars($field);
         }
 
         return $this->data;
diff --git a/lib/base/front/front.class.php b/lib/base/front/front.class.php
index fc4a3ac8b7..95803fd0f4 100644
--- a/lib/base/front/front.class.php
+++ b/lib/base/front/front.class.php
@@ -77,7 +77,6 @@ class baseHTML
     {
         $class = empty($class) ? ('icon-' . $name) : ('icon-' . $name . ' ' . $class);
         return "<i class='$class'></i>";
-
     }
 
     /**
@@ -110,16 +109,11 @@ class baseHTML
     static public function a($href = '', $title = '', $misc = '', $newline = true)
     {
         global $config;
+
         if(empty($title)) $title = $href;
         $newline = $newline ? "\n" : '';
-
-        /* if page has onlybody param then add this param in all link. the param hide header and footer. */
-        if(strpos($href, 'onlybody=yes') === false and isonlybody())
-        {
-            $onlybody = strpos($href, '?') === false ? "?onlybody=yes" : "&onlybody=yes";
-            $href .= $onlybody;
-        }
-
+        $href = helper::processOnlyBodyParam($href);
+      
         return "<a href='$href' $misc>$title</a>$newline";
     }
 
@@ -491,7 +485,7 @@ class baseHTML
      */
     public static function backButton($label = '', $misc = '', $class = '')
     {
-        if(isonlybody()) return false;
+        if(helper::inOnlyBodyMode()) return false;
 
         global $lang;
         if(empty($label))
@@ -537,14 +531,9 @@ class baseHTML
     {
         global $config, $lang;
 
-        if(isonlybody() and $lang->goback == $label) return false;
+        if(helper::inOnlyBodyMode() and $lang->goback == $label) return false;
+        $link = helper::processOnlyBodyParam($link);
 
-        /* if page has onlybody param then add this param in all link. the param hide header and footer. */
-        if(strpos($link, 'onlybody=') === false and isonlybody())
-        {
-            $onlybody = strpos($link, '?') === false ? "?onlybody=yes" : "&onlybody=yes";
-            $link .= $onlybody;
-        }
         return " <button type='button' class='$class' $misc onclick='$target.location.href=\"$link\"'>$label</button>";
     }
 
@@ -703,7 +692,7 @@ EOT;
         $string .= "<a id='allchecker' class='btn btn-select-all check-all $appendClass' data-scope='$scope' href='javascript:;' >{$lang->selectAll}</a>";
         $string .= "<a id='reversechecker' class='btn btn-select-reverse check-inverse $appendClass' data-scope='$scope' href='javascript:;'>{$lang->selectReverse}</a>";
         if($asGroup) $string .= "</div>";
-        return  $string;
+        return $string;
     }
 
     /**
diff --git a/lib/base/pager/pager.class.php b/lib/base/pager/pager.class.php
index be9ac6d810..73de3b0093 100644
--- a/lib/base/pager/pager.class.php
+++ b/lib/base/pager/pager.class.php
@@ -282,13 +282,14 @@ class basePager
         }
 
         parse_str(strip_tags(urldecode($_SERVER['QUERY_STRING'])), $query);
+        if(!empty($query['m']) && !empty($query['f']) && $query['m'] == $this->moduleName && $query['f'] == $this->methodName)
+        {
+            unset($query['m']);
+            unset($query['f']);
+            unset($query['t']);
 
-        unset($query['m']);
-        unset($query['f']);
-        unset($query['t']);
-
-        $this->params = array_merge($this->params, $query);
-
+            $this->params = array_merge($this->params, $query);
+        }
     }
 
     /**
@@ -301,7 +302,7 @@ class basePager
     public function limit()
     {
         $limit = '';
-        if($this->pageTotal > 1) $limit = ' limit ' . ($this->pageID - 1) * $this->recPerPage . ", $this->recPerPage";
+        if($this->pageTotal > 1) $limit = ' lImiT ' . ($this->pageID - 1) * $this->recPerPage . ", $this->recPerPage";
         return $limit;
     }
 
@@ -341,7 +342,7 @@ class basePager
         $pager = '';
 
         $pager .= "<li class='previous" . ($this->pageID == 1 ? ' disabled' : '') . "'>";
-        $this->params['pageID'] = 1;
+        $this->params['pageID'] = min(1, $this->pageID - 1);
         $pager .= $this->createLink('« ' . $this->lang->pager->previousPage) . '</li>';
 
         $pager .= "<li class='caption'>";
@@ -602,7 +603,7 @@ EOT;
     public function createLink($title)
     {
         global $config; 
-        if(helper::inSeoMode() && method_exists('uri', 'create' . $this->moduleName . $this->methodName)) 
+        if($config->requestType != 'GET' && method_exists('uri', 'create' . $this->moduleName . $this->methodName)) 
         {
             $link  = strip_tags(urldecode($_SERVER['REQUEST_URI']));
 
@@ -611,7 +612,8 @@ EOT;
             if(preg_match('/\/p\d+/', $link)) return html::a(preg_replace('/\/p\d+\./', '/p' . $this->params['pageID'] . '.', $link), $title);
 
             if($config->requestType == 'PATH_INFO2') $link = str_replace('index.php/', 'index_php/', $link);
-            $link = str_replace('.', "/p{$this->params['pageID']}.", $link);
+            if(strpos($link, '.') !== false) $link = str_replace('.', "/p{$this->params['pageID']}.", $link);
+            if(strpos($link, '.') === false) $link .= "/p{$this->params['pageID']}.html";
             if($config->requestType == 'PATH_INFO2') $link =  str_replace('index_php/', 'index.php/', $link);
             return html::a($link, $title);
         }