PHP实例开发源码—BootCMS 开源内容管理系统.zip

<?php defined('SYSPATH') || exit('Access Denied.'); /** * 后台管理控制器。 * * @package BootCMS * @category 控制器 * @author Tinsh * @copyright (C) 2005-2016 Kilofox Studio */ class Controller_Manage extends Controller_Template { /** * Before 方法 * * @return void */ public function before() { parent::before(); $this->homeUrl = Url::base(); $global = BootPHP::$config->load('global_manage'); $this->template = new View('template_manage'); $this->template->homeUrl = $this->homeUrl; $this->user = Auth::instance()->get_user(); !$this->user and $this->request->action('login'); // 加载视图 $global = BootPHP::$config->load('global_manage'); // 检验用户是否已访问 if (isset($this->accessLevel)) $defaultViews = Functions::login_level_check($this->user, $this->accessLevel); else $defaultViews = Functions::login_level_check($this->user); if (isset($defaultViews[1])) { // 用户尚未登录 $this->template->body = View::factory($defaultViews[1]); } else if ($this->user) { // 用户已经登录 $this->template->user = $this->user; } // 设置相应的 CSS、脚本、页头和页脚 foreach ($global->get($defaultViews[0]) as $key => $view) { if (!is_array($view)) $this->template->$key = View::factory($view); else $this->template->$key = $view; } } /** * After 方法 * * @return void */ public function after() { parent::after(); } /** * 后台首页（控制面板） * * @return void */ public function action_index() { $this->accessLevel = Admin::minimumLevel('index'); if ($this->user->role_id >= $this->accessLevel) { $role = Model::factory('Role')->load($this->user->role_id); $this->user->role = $role->name; $this->template->body = View::factory('manage/dashboard') ->bind('user', $this->user); } } /** * 拒绝访问页 * * @return void */ public function action_denied() { $this->accessLevel = 0; $this->template->body = View::factory('manage/denied') ->bind('user', $this->user); } /** * 用户登录 * * @return void */ public function action_login() { if ($this->request->is_ajax()) { $output = new stdClass(); $output->status = 0; Auth::instance()->logout(); // 尝试登录 $this->user = Auth::instance()->login(strtolower(Functions::text($this->request->post('username'))), Functions::text($this->request->post('password')), false); $this->user = Auth::instance()->get_user(); if ($this->user) { $output->status = 1; $output->title = '登录成功'; $output->content = '您已经成功登录。'; } else { $output->status = 2; $output->title = '登录失败'; $output->content = '您输入的密码或用户名有误。'; } exit(json_encode($output)); } Auth::instance()->logout(); $this->template->body = View::factory('manage/login'); } /** * 用户退出 * * @return void */ public function action_logout() { // 注销用户 Auth::instance()->logout(); // 重定向到登录页 $this->request->redirect('manage/login'); } /** * 一般设置 * * @return void */ public function action_general_setting() { if ($this->request->is_ajax()) { $output = new stdClass(); $output->status = 0; $output->title = '操作失败'; $output->content = '您没有足够的权限进行此项操作。'; $this->accessLevel = Admin::minimumLevel('setting_general'); if ($this->user->role_id >= $this->accessLevel) { $siteId = (int) $this->request->post('sid'); if ($siteId <> Cookie::get('mid')) { $output->status = 2; $output->title = '操作失败'; $output->content = '非法操作。'; exit(json_encode($output)); } $oSite = Model::factory('Site'); $site = $oSite->load($siteId); if (!$site->id) { $output->status = 3; $output->title = '操作失败'; $output->content = '请求的站点不存在。'; exit(json_encode($output)); } try { $site->site_title = addslashes(HTML::chars($this->request->post('site_title'))); $site->site_description = addslashes(HTML::chars($this->request->post('site_description'))); $site->meta_keywords = Functions::text($this->request->post('meta_keywords')); $site->meta_description = Functions::text($this->request->post('meta_description')); $site->admin_email = Functions::text($this->request->post('admin_email')); $site->company = Functions::text($this->request->post('company')); $site->phone = Functions::text($this->request->post('phone')); $site->address = Functions::text($this->request->post('address')); $site->date_format = Functions::text($this->request->post('date_format')); $site->timezone = Functions::text($this->request->post('timezone')); if ($oSite->update()) { $output->status = 1; $output->title = '网站信息已更新'; $output->content = '网站信息已经更新成功。'; } else { $output->status = 5; $output->title = '网站信息未更新'; $output->content = '网站信息没有更新。'; } } catch (Validation_Exception $e) { $errors = $e->errors('models'); foreach ($errors as $ev) { $output->status = 4; $output->title = '操作失败'; $output->content = $ev; break; } } } exit(json_encode($output)); } $this->accessLevel = Admin::minimumLevel('setting_general'); if ($this->user->role_id >= $this->accessLevel) { $oSite = Model::factory('Site'); $site = $oSite->findAll(); $site = $site[0]; Cookie::set('mid', $site->id); $this->template->body = View::factory('manage/setting_general') ->bind('site', $site); } } /** * 支付方式设置 * * @return void */ public function action_payment_setting() { if ($this->request->is_ajax()) { $output = new stdClass(); $output->status = 0; $output->title = '操作失败'; $output->content = '您没有足够的权限进行此项操作。'; $this->accessLevel = Admin::minimumLevel('setting_payment'); if ($this->user->role_id >= $this->accessLevel) { $paymentId = (int) $this->request->post('pid'); $oPayment = Model::factory('Payment'); $payment = $oPayment->load($paymentId); if (!$payment->id) { $output->status = 2; $output->title = '操作失败'; $output->content = '请求的支付方式不存在。'; exit(json_encode($output)); } try { $config = new stdClass(); $config->service_type = Functions::text($this->request->post('service_type')); $config->account = Functions::text($this->request->post('account')); $config->partner = Functions::text($this->request->post('partner')); $config->key = Functions::text($this->request->post('key')); $payment->pay_desc = addslashes($this->request->post('pay_desc')); $payment->list_order = (int) $this->request->post('list_order'); $payment->config = serialize($config); if ($oPayment->update()) { $file = fopen('application/config/payment.php', 'w'); $content = '<?php defined(\'SYSPATH\') || exit(\'Access Denied.\'); return array ( \'alipay\' => array( \'driver\' => \'alipay\', \'service_type\' => ' . $config->service_type . ', \'account\' => \'' . $config->account . '\', \'partner\' => \'' . $config->partner . '\', \'key\' => \'' . $config->key . '\', \'sign_type\' => \'MD5\', \'input_charset\' => \'utf-8\', \'transport\' => \'http\', \'cacert\' => getcwd().DIRECTORY_SEPARATOR.\'assets\'.DIRECTORY_SEPARATOR.\'cacert.pem\' ) );';