#!/bin/bash
# ============================================================
# Login warning banner for file integrity alerts
# 部署: /etc/profile.d/thinkphp-warning.sh (root:root 644)
# ============================================================

FLAGFILE="/var/run/thinkphp-integrity.flag"

if [ -f "$FLAGFILE" ] && [ -s "$FLAGFILE" ]; then
    echo ""
    echo "!!!!!!!!!!!!!!!!!!!!!!!!!! 文件完整性警告 !!!!!!!!!!!!!!!!!!!!!!!!!!"
    echo "以下文件发生变化（新增/删除/篡改）："
    while IFS= read -r line; do
        echo "  $line"
    done < "$FLAGFILE"
    echo ""
    echo "执行以下命令确认并更新基线："
    echo "  sudo /usr/local/bin/thinkphp-integrity.sh snapshot"
    echo "!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!"
    echo ""
fi