设置->管理源管理，角色管理 - ��ѡ��̳

class AdminManageController extends AdminController {
private $db,$role_db;
function __construct() {
parent::__construct();
$this->db = M('Admin');
$this->role_db = D('Admin_role');
$this->op = new \Admin\Classes\admin_op();
}
public function init() {
$userid = session('user_auth.userid');
$admin_username = session('user_auth.username');
$page = $_GET['page'] ? intval($_GET['page']) : '1';
$infos = $this->db->page($page, 20)->select();
$pages = $this->db->pages;
$rolesarr = M('admin_role')->order('roleid asc')->select();//getcache('role');
$roles = array();
foreach($rolesarr as $val){
$roles[$val['roleid']]= $val['rolename'];
}
$this->assign('admin_username',$admin_username);
$this->assign('infos',$infos);
$this->assign('roles',$roles);
//var_dump($roles);
$this->display('admin_list');
}
/**
* 添加管理员
*/
public function add() {
if(isset($_POST['dosubmit'])) {
if($this->check_admin_manage_code()==false){
showmessage("error auth code");
}
$info = array();
if(!$this->op->checkname($_POST['info']['username'])){
showmessage(L('admin_already_exists'));
}
$info = checkuserinfo($_POST['info']);
if(!checkpasswd($info['password'])){
showmessage(L('pwd_incorrect'));
}
$encrypt = create_randomstr();
$password = user_md5($info['password'],$encrypt); //password($info['password']);
$info['password'] = $password;
$info['encrypt'] = $encrypt;
$info['status'] = 1;
$admin_fields = array('username', 'email', 'password', 'encrypt','roleid','realname','status');
foreach ($info as $k=>$value) {
if (!in_array($k, $admin_fields)){
unset($info[$k]);
}
}
$addres = $this->db->add($info);
if($addres){
showmessage(L('operation_success'),'?m=admin&c=admin_manage&a=init');
}
} else {
$roles = $this->role_db->where(array('disabled'=>'0'))->select();
$admin_manage_code = $this->get_admin_manage_code();
$this->assign('roles', $roles);
$this->assign('admin_manage_code', $admin_manage_code);
$this->display('admin_add');
}
}
/**
* 修改管理员
*/
public function edit() {
if(isset($_POST['dosubmit'])) {
if($this->check_admin_manage_code()==false){
showmessage("error auth code");
}
$memberinfo = $info = array();
$info = checkuserinfo($_POST['info']);
if(isset($info['password']) && !empty($info['password']))
{
$this->op->edit_password($info['userid'], $info['password']);
}
$userid = $info['userid'];
$info['status'] = 1;
$admin_fields = array('username', 'email', 'roleid','realname','status');
foreach ($info as $k=>$value) {
if (!in_array($k, $admin_fields)){
unset($info[$k]);
}
}
$this->db->where(array('userid'=>$userid))->save($info);
showmessage(L('operation_success'),'','','edit');
} else {
$info = $this->db->where(array('userid'=>$_GET['userid']))->find();
extract($info);
$roles = $this->role_db->where(array('disabled'=>'0'))->select();
$show_header = true;
$admin_manage_code = $this->get_admin_manage_code();
$this->assign($info);
$this->assign('admin_manage_code',$admin_manage_code);
$this->assign('roles',$roles);
// $this->assign('roleid',session('user_auth.roleid'));
//print_r($_SESSION);
$this->display('admin_edit');
}
}
public function public_edit_info(){
$userid = session('user_auth.userid');
//print_r($_SESSION);
if(isset($_POST['dosubmit'])) {
$admin_fields = array('email','realname','lang');
$info = array();
$info = $_POST['info'];
if(trim($info['lang'])=='') $info['lang'] = 'zh-cn';
foreach ($info as $k=>$value) {
if (!in_array($k, $admin_fields)){
unset($info[$k]);
}
}
$this->db->where(array('userid'=>$userid))->save($info);
cookie('sys_lang', $info['lang'],SYS_TIME+86400*30);
showmessage(L('operation_success'),HTTP_REFERER);
} else {
$info = $this->db->where(array('userid'=>$userid))->find();
extract($info);
$lang_dirs = glob(APP_PATH.'/Common/Lang/*');
$dir_array = array();
foreach($lang_dirs as $dirs) {
$dir_array[] = str_replace(APP_PATH.'/Common/Lang/','',$dirs);
}
$this->assign($info);
$this->assign('dir_array',$dir_array);
$this->display('admin_edit_info');
}
}
public function public_edit_pwd(){
$userid = session('user_auth.userid');
if(isset($_POST['dosubmit'])) {
$r = $this->db->where(array('userid'=>$userid))->field('password,encrypt')->find();
if ( user_md5($_POST['old_password'],$r['encrypt']) !== $r['password'] ) showmessage(L('old_password_wrong'),HTTP_REFERER);
if(isset($_POST['new_password']) && !empty($_POST['new_password'])) {
$this->op->edit_password($userid, $_POST['new_password']);
}
showmessage(L('password_edit_succ_logout'),'?m=Admin&c=Public&a=logout');
} else {
$info = $this->db->where(array('userid'=>$userid))->find();
extract($info);
$this->assign($info);
$this->display('admin_edit_pwd');
}
}
/**
* 异步检测用户名
*/
function public_checkname_ajx() {
$username = isset($_GET['username']) && trim($_GET['username']) ? trim($_GET['username']) : exit(0);
if ($this->db->field('userid')->where(array('username'=>$username))->find()){
exit('0');
}
exit('1');
}
/**
* 异步检测密码
*/
function public_password_ajx() {
$userid = session('user_auth.userid');
$r = array();
$r = $this->db->field('password,encrypt')->where(array('userid'=>$userid))->find();
if ( user_md5($_GET['old_password'],$r['encrypt']) == $r['password'] ) {
exit('1');
}
exit('0');
}
/**
* 异步检测emial合法性
*/
function public_email_ajx() {
$email = $_GET['email'];
$userid = session('user_auth.userid');
$check = $this->db->field('userid')->where(array('email'=>$email))->find();
if ($check && $check['userid']!=$userid){
exit('0');
}else{
exit('1');
}
}
//电子口令卡
function card() {
if (C( 'safe_card') != 1) {
showmessage(L('your_website_opened_the_card_no_password'));
}
$userid = isset($_GET['userid']) && intval($_GET['userid']) ? intval($_GET['userid']) : showmessage(L('user_id_cannot_be_empty'));
$data = array();
if ($data = $this->db->where(array('userid'=>$userid))->field('`card`,`username`')->find()) {
$pic_url = '';
if ($data['card']) {
pc_base::load_app_class('card', 'admin', 0);
$pic_url = card::get_pic($data['card']);
}
$show_header = true;
$this->display('admin_card');
} else {
showmessage(L('users_were_not_found'));
}
}
//绑定电子口令卡
function creat_card() {
if (C( 'safe_card') != 1) {
showmessage(L('your_website_opened_the_card_no_password'));
}
$userid = isset($_GET['userid']) && intval($_GET['userid']) ? intval($_GET['userid']) : showmessage(L('user_id_cannot_be_empty'));
$data = $card = '';
if ($data = $this->db->field( '`card`,`username`')->where(array('userid'=>$userid))->find()) {
if (empty($data['card'])) {
pc_base::load_app_class('card', 'admin', 0);
$card = card::creat_card();
if ($this->db->update(array('card'=>$card), array('userid'=>$userid))) {
showmessage(L('password_card_application_success'), '?m=admin&c=admin_manage&a=card&userid='.$userid);
} else {
showmessage(L('a_card_with_a_local_database_please_contact_the_system_administrators'));
}
} else {
showmessage(L('please_lift_the_password_card_binding'),HTTP_REFERER);
}
} else {
showmessage(L('users_were_not_found'));
}
}
//解除口令卡绑定
function remove_card() {
if (pc_base::load_config('system', 'safe_card') != 1) {
showmessage(L('your_website_opened_the_card_no_password'));
}
$userid = isset($_GET['userid']) && intval($_GET['userid']) ? intval($_GET['userid']) : showmessage(L('user_id_cannot_be_empty'));
$data = $result = '';
if ($data = $this->db->get_one(array('userid'=>$userid), '`card`,`username`,`userid`')) {
pc_base::load_app_class('card', 'admin', 0);
if ($result = card::remove_card($data['card'])) {
$this->db->update(array('card'=>''), array('userid'=>$userid));
showmessage(L('the_binding_success'), '?m=admin&c=admin_manage&a=card&userid='.$userid);
}
} else {
showmessage(L('users_were_not_found'));
}
}
//添加修改用户验证串验证
private function check_admin_manage_code(){
$admin_manage_code = $_POST['info']['admin_manage_code'];
$pc_auth_key = md5(C('auth_key').'adminuser');
$admin_manage_code = sys_auth($admin_manage_code, 'DECODE', $pc_auth_key);
if($admin_manage_code==""){
return false;
}
$admin_manage_code = explode("_", $admin_manage_code);
if($admin_manage_code[0]!="adminuser" || $admin_manage_code[1]!=$_POST[pc_hash]){
return false;
}
return true;
}
//添加修改用户生成验证串
private function get_admin_manage_code(){
$pc_auth_key = md5(C('auth_key').'adminuser');
$code = sys_auth("adminuser_".$_GET[pc_hash]."_".time(), 'ENCODE', $pc_auth_key);
return $code;
}
}

复制代码

class RoleController extends AdminController {
private $db, $priv_db;
function __construct() {
parent::__construct();
$this->db = M('admin_role');
$this->priv_db = M('admin_role_priv');
$this->op = new \Admin\Classes\role_op(); //pc_base::load_app_class('role_op');
}
/**
* 角色管理列表
*/
public function init() {
$infos = $this->db->order('listorder DESC, roleid DESC')->select();
$this->assign('infos',$infos);
$this->display('role_list');
}
/**
* 添加角色
*/
public function add() {
if(isset($_POST['dosubmit'])) {
if(!is_array($_POST['info']) || empty($_POST['info']['rolename'])){
showmessage(L('operation_failure'));
}
if($this->op->checkname($_POST['info']['rolename'])){
showmessage(L('role_duplicate'));
}
$insert_id = $this->db->add($_POST['info']);
$this->_cache();
if($insert_id){
showmessage(L('operation_success'),'?m=admin&c=role&a=init');
}
} else {
$this->display('role_add');
}
}
/**
* 编辑角色
*/
public function edit() {
if(isset($_POST['dosubmit'])) {
$_POST['roleid'] = intval($_POST['roleid']);
if(!is_array($_POST['info']) || empty($_POST['info']['rolename'])){
showmessage(L('operation_failure'));
}
$this->db->where(array('roleid'=>$_POST['roleid']))->save($_POST['info']);
$this->_cache();
showmessage(L('operation_success'),'?m=admin&c=role&a=init');
} else {
$info = $this->db->where(array('roleid'=>$_GET['roleid']))->find();
extract($info);
$this->assign($info);
$this->display('role_edit');
}
}
/**
* 删除角色
*/
public function delete() {
$roleid = intval($_GET['roleid']);
if($roleid == '1') showmessage(L('this_object_not_del'), HTTP_REFERER);
$this->db->where(array('roleid'=>$roleid))->delete();
$this->priv_db->where(array('roleid'=>$roleid))->delete();
$this->_cache();
showmessage(L('role_del_success'));
}
/**
* 更新角色排序
*/
public function listorder() {
if(isset($_POST['dosubmit'])) {
foreach($_POST['listorders'] as $roleid => $listorder) {
$this->db->where(array('roleid'=>$roleid))->save(array('listorder'=>$listorder));
}
showmessage(L('operation_success'));
} else {
showmessage(L('operation_failure'));
}
}
/**
* 角色权限设置
*/
public function role_priv() {
$this->menu_db = M('menu');
$siteid = $siteid ? $siteid : self::get_siteid();
if(isset($_POST['dosubmit'])){
if (is_array($_POST['menuid']) && count($_POST['menuid']) > 0) {
$this->priv_db->where(array('roleid'=>$_POST['roleid'],'siteid'=>$_POST['siteid']))->delete();
$menuinfo = $this->menu_db->field('`id`,`m`,`c`,`a`,`data`')->select();
foreach ($menuinfo as $_v) $menu_info[$_v[id]] = $_v;
foreach($_POST['menuid'] as $menuid){
$info = array();
$info = $this->op->get_menuinfo(intval($menuid),$menu_info);
$info['roleid'] = $_POST['roleid'];
$info['siteid'] = $_POST['siteid'];
$this->priv_db->add($info);
}
} else {
$this->priv_db->where(array('roleid'=>$_POST['roleid'],'siteid'=>$_POST['siteid']))->delete();
}
$this->_cache();
showmessage(L('operation_success'), HTTP_REFERER);
} else {
$siteid = intval($_GET['siteid']);
$roleid = intval($_GET['roleid']);
if ($siteid) {
$menu = new \Think\Tree();
$menu->icon = array('│ ','├─ ','└─ ');
$menu->nbsp = ' ';
$result = $this->menu_db->select();
$priv_data = $this->priv_db->select(); //获取权限表数据
$modules = 'admin,system';
foreach ($result as $n=>$t) {
$result[$n]['cname'] = L($t['name']); //,'',$modules
$result[$n]['checked'] = ($this->op->is_checked($t,$_GET['roleid'],$siteid, $priv_data))? ' checked' : '';
$result[$n]['level'] = $this->op->get_level($t['id'],$result);
$result[$n]['parentid_node'] = ($t['parentid'])? ' class="child-of-node-'.$t['parentid'].'"' : '';
}
$str = "<tr id='node-\$id' \$parentid_node>
<td style='padding-left:30px;'>\$spacer<input type='checkbox' name='menuid[]' value='\$id' level='\$level' \$checked onclick='javascript:checknode(this);'> \$cname</td>
</tr>";
$menu->init($result);
$categorys = $menu->get_tree(0, $str);
}
$show_header = true;
$show_scroll = true;
$this->assign('siteid',$siteid);
$this->assign('categorys',$categorys);
$this->assign('priv_data',$priv_data);
$this->assign('roleid',$roleid);
//print_r($priv_data);
$this->display('role_priv');
}
}
public function priv_setting() {
$sites = new \Admin\Classes\sites() ;// pc_base::load_app_class('sites', 'admin');
$sites_list = $sites->get_list();
$roleid = intval($_GET['roleid']);
$this->assign('sites_list',$sites_list);
$this->assign('roleid',$roleid);
$this->display('role_priv_setting');
}
/**
* 更新角色状态
*/
public function change_status(){
$roleid = intval($_GET['roleid']);
$disabled = intval($_GET['disabled']);
$this->db->update(array('disabled'=>$disabled),array('roleid'=>$roleid));
$this->_cache();
showmessage(L('operation_success'),'?m=admin&c=role');
}
/**
* 成员管理
*/
public function member_manage() {
$this->admin_db = M('admin');
$roleid = intval($_GET['roleid']);
$roles = getcache('role'); // getcache('role','commons');
$infos = $this->admin_db->where(array('roleid'=>$roleid))->select();
$this->assign('roleid',$roleid);
$this->assign('roles',$roles);
$this->assign('infos',$infos);
$this->display('admin_list');
}
/**
* 设置栏目权限
*/
public function setting_cat_priv() {
$roleid = isset($_GET['roleid']) && intval($_GET['roleid']) ? intval($_GET['roleid']) : showmessage(L('illegal_parameters'), HTTP_REFERER);
$op = isset($_GET['op']) && intval($_GET['op']) ? intval($_GET['op']) : '';
$this->assign('roleid',$roleid);
$this->assign('op',$op);
switch ($op) {
case 1:
$siteid = isset($_GET['siteid']) && intval($_GET['siteid']) ? intval($_GET['siteid']) : showmessage(L('illegal_parameters'), HTTP_REFERER);
//pc_base::load_app_class('role_cat', '', 0);
//$role_cat = \Admin\Classes\role_cat;
$category = \Admin\Classes\role_cat::get_category($siteid);
//获取角色当前权限设置
$priv = \Admin\Classes\role_cat::get_roleid($roleid, $siteid);
//加载tree
$tree = new \Think\Tree();
$categorys = array();
foreach ($category as $k=>$v) {
if ($v['type'] == 1) {
$v['disabled'] = 'disabled';
$v['init_check'] = '';
$v['add_check'] = '';
$v['delete_check'] = '';
$v['listorder_check'] = '';
$v['push_check'] = '';
$v['move_check'] = '';
} else {
$v['disabled'] = '';
$v['add_check'] = isset($priv[$v['catid']]['add']) ? 'checked' : '';
$v['delete_check'] = isset($priv[$v['catid']]['delete']) ? 'checked' : '';
$v['listorder_check'] = isset($priv[$v['catid']]['listorder']) ? 'checked' : '';
$v['push_check'] = isset($priv[$v['catid']]['push']) ? 'checked' : '';
$v['move_check'] = isset($priv[$v['catid']]['remove']) ? 'checked' : '';
$v['edit_check'] = isset($priv[$v['catid']]['edit']) ? 'checked' : '';
}
$v['init_check'] = isset($priv[$v['catid']]['init']) ? 'checked' : '';
$category[$k] = $v;
}
$show_header = true;
$str = "<tr>
<td align='center'><input type='checkbox' value='1' onclick='select_all(\$catid, this)' ></td>
<td>\$spacer\$catname</td>
<td align='center'><input type='checkbox' name='priv[\$catid][]' \$init_check value='init' ></td>
<td align='center'><input type='checkbox' name='priv[\$catid][]' \$disabled \$add_check value='add' ></td>
<td align='center'><input type='checkbox' name='priv[\$catid][]' \$disabled \$edit_check value='edit' ></td>
<td align='center'><input type='checkbox' name='priv[\$catid][]' \$disabled \$delete_check value='delete' ></td>
<td align='center'><input type='checkbox' name='priv[\$catid][]' \$disabled \$listorder_check value='listorder' ></td>
<td align='center'><input type='checkbox' name='priv[\$catid][]' \$disabled \$push_check value='push' ></td>
<td align='center'><input type='checkbox' name='priv[\$catid][]' \$disabled \$move_check value='remove' ></td>
</tr>";
$tree->init($category);
$categorys = $tree->get_tree(0, $str);
$this->assign('categorys',$categorys);
$this->assign('siteid',$siteid);
$this->display('role_cat_priv_list');
break;
case 2:
$siteid = isset($_GET['siteid']) && intval($_GET['siteid']) ? intval($_GET['siteid']) : showmessage(L('illegal_parameters'), HTTP_REFERER);
//pc_base::load_app_class('role_cat', '', 0);
\Admin\Classes\role_cat::updata_priv($roleid, $siteid, $_POST['priv']);
showmessage(L('operation_success'),'?m=admin&c=role&a=init', '', 'edit');
break;
default:
$sites = new \Admin\Classes\sites();
$sites_list = $sites->get_list();
$this->assign('sites_list',$sites_list);
$this->display('role_cat_priv');
break;
}
}
/**
* 角色缓存
*/
private function _cache() {
$infos = $this->db->select(array('disabled'=>'0'), $data = '`roleid`,`rolename`', '', 'roleid ASC');
$role = array();
foreach ($infos as $info){
$role[$info['roleid']] = $info['rolename'];
}
$this->_cache_siteid($role);
setcache('role', $role);
return $infos;
}
/**
* 缓存站点数据
*/
private function _cache_siteid($role) {
$sitelist = array();
foreach($role as $n=>$r) {
$sitelistsarr = $this->priv_db->field('siteid')->where(array('roleid'=>$n))->select();
$sitelists = array();
foreach($sitelists as $val){
$sitelists[$val['siteid']] = $val;
}
foreach($sitelists as $site) {
foreach($site as $v){
$sitelist[$n][] = intval($v);
}
}
}
if(is_array($sitelist)) {
$sitelist = @array_map("array_unique", $sitelist);
setcache('role_siteid', $sitelist);
}
return $sitelist;
}
}

复制代码

����ѡ������̳

��ѡ��̳