|
@@ -1,461 +1,461 @@
|
|
|
-<?php
|
|
|
-
|
|
|
-namespace app\common\controller;
|
|
|
-
|
|
|
-use app\admin\library\Auth;
|
|
|
-use think\Config;
|
|
|
-use think\Controller;
|
|
|
-use think\Hook;
|
|
|
-use think\Lang;
|
|
|
-use think\Session;
|
|
|
-
|
|
|
-/**
|
|
|
- * 后台控制器基类
|
|
|
- */
|
|
|
-class Backend extends Controller
|
|
|
-{
|
|
|
-
|
|
|
- /**
|
|
|
- * 无需登录的方法,同时也就不需要鉴权了
|
|
|
- * @var array
|
|
|
- */
|
|
|
- protected $noNeedLogin = [];
|
|
|
-
|
|
|
- /**
|
|
|
- * 无需鉴权的方法,但需要登录
|
|
|
- * @var array
|
|
|
- */
|
|
|
- protected $noNeedRight = [];
|
|
|
-
|
|
|
- /**
|
|
|
- * 布局模板
|
|
|
- * @var string
|
|
|
- */
|
|
|
- protected $layout = 'default';
|
|
|
-
|
|
|
- /**
|
|
|
- * 权限控制类
|
|
|
- * @var Auth
|
|
|
- */
|
|
|
- protected $auth = null;
|
|
|
-
|
|
|
- /**
|
|
|
- * 快速搜索时执行查找的字段
|
|
|
- */
|
|
|
- protected $searchFields = 'id';
|
|
|
-
|
|
|
- /**
|
|
|
- * 是否是关联查询
|
|
|
- */
|
|
|
- protected $relationSearch = false;
|
|
|
-
|
|
|
- /**
|
|
|
- * 是否开启数据限制
|
|
|
- * 支持auth/personal
|
|
|
- * 表示按权限判断/仅限个人
|
|
|
- * 默认为禁用,若启用请务必保证表中存在admin_id字段
|
|
|
- */
|
|
|
- protected $dataLimit = false;
|
|
|
-
|
|
|
- /**
|
|
|
- * 数据限制字段
|
|
|
- */
|
|
|
- protected $dataLimitField = 'admin_id';
|
|
|
-
|
|
|
- /**
|
|
|
- * 是否开启Validate验证
|
|
|
- */
|
|
|
- protected $modelValidate = false;
|
|
|
-
|
|
|
- /**
|
|
|
- * 是否开启模型场景验证
|
|
|
- */
|
|
|
- protected $modelSceneValidate = false;
|
|
|
-
|
|
|
- /**
|
|
|
- * Multi方法可批量修改的字段
|
|
|
- */
|
|
|
- protected $multiFields = 'status';
|
|
|
-
|
|
|
- /**
|
|
|
- * 引入后台控制器的traits
|
|
|
- */
|
|
|
- use \app\admin\library\traits\Backend;
|
|
|
-
|
|
|
- public function _initialize()
|
|
|
- {
|
|
|
- $modulename = $this->request->module();
|
|
|
- $controllername = strtolower($this->request->controller());
|
|
|
- $actionname = strtolower($this->request->action());
|
|
|
-
|
|
|
- $path = str_replace('.', '/', $controllername) . '/' . $actionname;
|
|
|
-
|
|
|
- // 定义是否Addtabs请求
|
|
|
- !defined('IS_ADDTABS') && define('IS_ADDTABS', input("addtabs") ? TRUE : FALSE);
|
|
|
-
|
|
|
- // 定义是否Dialog请求
|
|
|
- !defined('IS_DIALOG') && define('IS_DIALOG', input("dialog") ? TRUE : FALSE);
|
|
|
-
|
|
|
- // 定义是否AJAX请求
|
|
|
- !defined('IS_AJAX') && define('IS_AJAX', $this->request->isAjax());
|
|
|
-
|
|
|
- $this->auth = Auth::instance();
|
|
|
-
|
|
|
- // 设置当前请求的URI
|
|
|
- $this->auth->setRequestUri($path);
|
|
|
- // 检测是否需要验证登录
|
|
|
- if (!$this->auth->match($this->noNeedLogin))
|
|
|
- {
|
|
|
- //检测是否登录
|
|
|
- if (!$this->auth->isLogin())
|
|
|
- {
|
|
|
- Hook::listen('admin_nologin', $this);
|
|
|
- $url = Session::get('referer');
|
|
|
- $url = $url ? $url : $this->request->url();
|
|
|
- $this->error(__('Please login first'), url('index/login', ['url' => $url]));
|
|
|
- }
|
|
|
- // 判断是否需要验证权限
|
|
|
- if (!$this->auth->match($this->noNeedRight))
|
|
|
- {
|
|
|
- // 判断控制器和方法判断是否有对应权限
|
|
|
- if (!$this->auth->check($path))
|
|
|
- {
|
|
|
- Hook::listen('admin_nopermission', $this);
|
|
|
- $this->error(__('You have no permission'), '');
|
|
|
- }
|
|
|
- }
|
|
|
- }
|
|
|
-
|
|
|
- // 非选项卡时重定向
|
|
|
- if (!$this->request->isPost() && !IS_AJAX && !IS_ADDTABS && !IS_DIALOG && input("ref") == 'addtabs')
|
|
|
- {
|
|
|
- $url = preg_replace_callback("/([\?|&]+)ref=addtabs(&?)/i", function($matches) {
|
|
|
- return $matches[2] == '&' ? $matches[1] : '';
|
|
|
- }, $this->request->url());
|
|
|
- $this->redirect('index/index', [], 302, ['referer' => $url]);
|
|
|
- exit;
|
|
|
- }
|
|
|
-
|
|
|
- // 设置面包屑导航数据
|
|
|
- $breadcrumb = $this->auth->getBreadCrumb($path);
|
|
|
- array_pop($breadcrumb);
|
|
|
- $this->view->breadcrumb = $breadcrumb;
|
|
|
-
|
|
|
- // 如果有使用模板布局
|
|
|
- if ($this->layout)
|
|
|
- {
|
|
|
- $this->view->engine->layout('layout/' . $this->layout);
|
|
|
- }
|
|
|
-
|
|
|
- // 语言检测
|
|
|
- $lang = strip_tags(Lang::detect());
|
|
|
-
|
|
|
- $site = Config::get("site");
|
|
|
-
|
|
|
- $upload = \app\common\model\Config::upload();
|
|
|
-
|
|
|
- // 上传信息配置后
|
|
|
- Hook::listen("upload_config_init", $upload);
|
|
|
-
|
|
|
- // 配置信息
|
|
|
- $config = [
|
|
|
- 'site' => array_intersect_key($site, array_flip(['name', 'cdnurl', 'version', 'timezone', 'languages'])),
|
|
|
- 'upload' => $upload,
|
|
|
- 'modulename' => $modulename,
|
|
|
- 'controllername' => $controllername,
|
|
|
- 'actionname' => $actionname,
|
|
|
- 'jsname' => 'backend/' . str_replace('.', '/', $controllername),
|
|
|
- 'moduleurl' => rtrim(url("/{$modulename}", '', false), '/'),
|
|
|
- 'language' => $lang,
|
|
|
- 'fastadmin' => Config::get('fastadmin'),
|
|
|
- 'referer' => Session::get("referer")
|
|
|
- ];
|
|
|
-
|
|
|
- Config::set('upload', array_merge(Config::get('upload'), $upload));
|
|
|
-
|
|
|
- // 配置信息后
|
|
|
- Hook::listen("config_init", $config);
|
|
|
- //加载当前控制器语言包
|
|
|
- $this->loadlang($controllername);
|
|
|
- //渲染站点配置
|
|
|
- $this->assign('site', $site);
|
|
|
- //渲染配置信息
|
|
|
- $this->assign('config', $config);
|
|
|
- //渲染权限对象
|
|
|
- $this->assign('auth', $this->auth);
|
|
|
- //渲染管理员对象
|
|
|
- $this->assign('admin', Session::get('admin'));
|
|
|
- }
|
|
|
-
|
|
|
- /**
|
|
|
- * 加载语言文件
|
|
|
- * @param string $name
|
|
|
- */
|
|
|
- protected function loadlang($name)
|
|
|
- {
|
|
|
- Lang::load(APP_PATH . $this->request->module() . '/lang/' . Lang::detect() . '/' . str_replace('.', '/', $name) . '.php');
|
|
|
- }
|
|
|
-
|
|
|
- /**
|
|
|
- * 渲染配置信息
|
|
|
- * @param mixed $name 键名或数组
|
|
|
- * @param mixed $value 值
|
|
|
- */
|
|
|
- protected function assignconfig($name, $value = '')
|
|
|
- {
|
|
|
- $this->view->config = array_merge($this->view->config ? $this->view->config : [], is_array($name) ? $name : [$name => $value]);
|
|
|
- }
|
|
|
-
|
|
|
- /**
|
|
|
- * 生成查询所需要的条件,排序方式
|
|
|
- * @param mixed $searchfields 快速查询的字段
|
|
|
- * @param boolean $relationSearch 是否关联查询
|
|
|
- * @return array
|
|
|
- */
|
|
|
- protected function buildparams($searchfields = null, $relationSearch = null)
|
|
|
- {
|
|
|
- $searchfields = is_null($searchfields) ? $this->searchFields : $searchfields;
|
|
|
- $relationSearch = is_null($relationSearch) ? $this->relationSearch : $relationSearch;
|
|
|
- $search = $this->request->get("search", '');
|
|
|
- $filter = $this->request->get("filter", '');
|
|
|
- $op = $this->request->get("op", '', 'trim');
|
|
|
- $sort = $this->request->get("sort", "id");
|
|
|
- $order = $this->request->get("order", "DESC");
|
|
|
- $offset = $this->request->get("offset", 0);
|
|
|
- $limit = $this->request->get("limit", 0);
|
|
|
- $filter = json_decode($filter, TRUE);
|
|
|
- $op = json_decode($op, TRUE);
|
|
|
- $filter = $filter ? $filter : [];
|
|
|
- $where = [];
|
|
|
- $tableName = '';
|
|
|
- if ($relationSearch)
|
|
|
- {
|
|
|
- if (!empty($this->model))
|
|
|
- {
|
|
|
- $class = get_class($this->model);
|
|
|
- $name = basename(str_replace('\\', '/', $class));
|
|
|
- $tableName = $this->model->getQuery()->getTable($name) . ".";
|
|
|
- }
|
|
|
- $sort = stripos($sort, ".") === false ? $tableName . $sort : $sort;
|
|
|
- }
|
|
|
- $adminIds = $this->getDataLimitAdminIds();
|
|
|
- if (is_array($adminIds))
|
|
|
- {
|
|
|
- $where[] = [$this->dataLimitField, 'in', $adminIds];
|
|
|
- }
|
|
|
- if ($search)
|
|
|
- {
|
|
|
- $searcharr = is_array($searchfields) ? $searchfields : explode(',', $searchfields);
|
|
|
- foreach ($searcharr as $k => &$v)
|
|
|
- {
|
|
|
- $v = stripos($v, ".") === false ? $tableName . $v : $v;
|
|
|
- }
|
|
|
- unset($v);
|
|
|
- $where[] = [implode("|", $searcharr), "LIKE", "%{$search}%"];
|
|
|
- }
|
|
|
- foreach ($filter as $k => $v)
|
|
|
- {
|
|
|
- $sym = isset($op[$k]) ? $op[$k] : '=';
|
|
|
- if (stripos($k, ".") === false)
|
|
|
- {
|
|
|
- $k = $tableName . $k;
|
|
|
- }
|
|
|
- $sym = strtoupper(isset($op[$k]) ? $op[$k] : $sym);
|
|
|
- switch ($sym)
|
|
|
- {
|
|
|
- case '=':
|
|
|
- case '!=':
|
|
|
- $where[] = [$k, $sym, (string) $v];
|
|
|
- break;
|
|
|
- case 'LIKE':
|
|
|
- case 'NOT LIKE':
|
|
|
- case 'LIKE %...%':
|
|
|
- case 'NOT LIKE %...%':
|
|
|
- $where[] = [$k, trim(str_replace('%...%', '', $sym)), "%{$v}%"];
|
|
|
- break;
|
|
|
- case '>':
|
|
|
- case '>=':
|
|
|
- case '<':
|
|
|
- case '<=':
|
|
|
- $where[] = [$k, $sym, intval($v)];
|
|
|
- break;
|
|
|
- case 'IN':
|
|
|
- case 'IN(...)':
|
|
|
- case 'NOT IN':
|
|
|
- case 'NOT IN(...)':
|
|
|
- $where[] = [$k, str_replace('(...)', '', $sym), explode(',', $v)];
|
|
|
- break;
|
|
|
- case 'BETWEEN':
|
|
|
- case 'NOT BETWEEN':
|
|
|
- $arr = array_slice(explode(',', $v), 0, 2);
|
|
|
- if (stripos($v, ',') === false || !array_filter($arr))
|
|
|
- continue;
|
|
|
- //当出现一边为空时改变操作符
|
|
|
- if ($arr[0] === '')
|
|
|
- {
|
|
|
- $sym = $sym == 'BETWEEN' ? '<=' : '>';
|
|
|
- $arr = $arr[1];
|
|
|
- }
|
|
|
- else if ($arr[1] === '')
|
|
|
- {
|
|
|
- $sym = $sym == 'BETWEEN' ? '>=' : '<';
|
|
|
- $arr = $arr[0];
|
|
|
- }
|
|
|
- $where[] = [$k, $sym, $arr];
|
|
|
- break;
|
|
|
- case 'RANGE':
|
|
|
- case 'NOT RANGE':
|
|
|
- $v = str_replace(' - ', ',', $v);
|
|
|
- $arr = array_slice(explode(',', $v), 0, 2);
|
|
|
- if (stripos($v, ',') === false || !array_filter($arr))
|
|
|
- continue;
|
|
|
- //当出现一边为空时改变操作符
|
|
|
- if ($arr[0] === '')
|
|
|
- {
|
|
|
- $sym = $sym == 'RANGE' ? '<=' : '>';
|
|
|
- $arr = $arr[1];
|
|
|
- }
|
|
|
- else if ($arr[1] === '')
|
|
|
- {
|
|
|
- $sym = $sym == 'RANGE' ? '>=' : '<';
|
|
|
- $arr = $arr[0];
|
|
|
- }
|
|
|
- $where[] = [$k, str_replace('RANGE', 'BETWEEN', $sym) . ' time', $arr];
|
|
|
- break;
|
|
|
- case 'LIKE':
|
|
|
- case 'LIKE %...%':
|
|
|
- $where[] = [$k, 'LIKE', "%{$v}%"];
|
|
|
- break;
|
|
|
- case 'NULL':
|
|
|
- case 'IS NULL':
|
|
|
- case 'NOT NULL':
|
|
|
- case 'IS NOT NULL':
|
|
|
- $where[] = [$k, strtolower(str_replace('IS ', '', $sym))];
|
|
|
- break;
|
|
|
- default:
|
|
|
- break;
|
|
|
- }
|
|
|
- }
|
|
|
- $where = function($query) use ($where) {
|
|
|
- foreach ($where as $k => $v)
|
|
|
- {
|
|
|
- if (is_array($v))
|
|
|
- {
|
|
|
- call_user_func_array([$query, 'where'], $v);
|
|
|
- }
|
|
|
- else
|
|
|
- {
|
|
|
- $query->where($v);
|
|
|
- }
|
|
|
- }
|
|
|
- };
|
|
|
- return [$where, $sort, $order, $offset, $limit];
|
|
|
- }
|
|
|
-
|
|
|
- /**
|
|
|
- * 获取数据限制的管理员ID
|
|
|
- * 禁用数据限制时返回的是null
|
|
|
- * @return mixed
|
|
|
- */
|
|
|
- protected function getDataLimitAdminIds()
|
|
|
- {
|
|
|
- if (!$this->dataLimit)
|
|
|
- {
|
|
|
- return null;
|
|
|
- }
|
|
|
- $adminIds = [];
|
|
|
- if (in_array($this->dataLimit, ['auth', 'personal']))
|
|
|
- {
|
|
|
- $adminIds = $this->dataLimit == 'auth' ? $this->auth->getChildrenAdminIds(true) : [$this->auth->id];
|
|
|
- }
|
|
|
- return $adminIds;
|
|
|
- }
|
|
|
-
|
|
|
- /**
|
|
|
- * Selectpage的实现方法
|
|
|
- *
|
|
|
- * 当前方法只是一个比较通用的搜索匹配,请按需重载此方法来编写自己的搜索逻辑,$where按自己的需求写即可
|
|
|
- * 这里示例了所有的参数,所以比较复杂,实现上自己实现只需简单的几行即可
|
|
|
- *
|
|
|
- */
|
|
|
- protected function selectpage()
|
|
|
- {
|
|
|
- //设置过滤方法
|
|
|
- $this->request->filter(['strip_tags', 'htmlspecialchars']);
|
|
|
-
|
|
|
- //搜索关键词,客户端输入以空格分开,这里接收为数组
|
|
|
- $word = (array) $this->request->request("q_word/a");
|
|
|
- //当前页
|
|
|
- $page = $this->request->request("page");
|
|
|
- //分页大小
|
|
|
- $pagesize = $this->request->request("per_page");
|
|
|
- //搜索条件
|
|
|
- $andor = $this->request->request("and_or");
|
|
|
- //排序方式
|
|
|
- $orderby = (array) $this->request->request("order_by/a");
|
|
|
- //显示的字段
|
|
|
- $field = $this->request->request("field");
|
|
|
- //主键
|
|
|
- $primarykey = $this->request->request("pkey_name");
|
|
|
- //主键值
|
|
|
- $primaryvalue = $this->request->request("pkey_value");
|
|
|
- //搜索字段
|
|
|
- $searchfield = (array) $this->request->request("search_field/a");
|
|
|
- //自定义搜索条件
|
|
|
- $custom = (array) $this->request->request("custom/a");
|
|
|
- $order = [];
|
|
|
- foreach ($orderby as $k => $v)
|
|
|
- {
|
|
|
- $order[$v[0]] = $v[1];
|
|
|
- }
|
|
|
- $field = $field ? $field : 'name';
|
|
|
-
|
|
|
- //如果有primaryvalue,说明当前是初始化传值
|
|
|
- if ($primaryvalue !== null)
|
|
|
- {
|
|
|
- $where = [$primarykey => ['in', $primaryvalue]];
|
|
|
- }
|
|
|
- else
|
|
|
- {
|
|
|
- $where = function($query) use($word, $andor, $field, $searchfield, $custom) {
|
|
|
- foreach ($word as $k => $v)
|
|
|
- {
|
|
|
- foreach ($searchfield as $m => $n)
|
|
|
- {
|
|
|
- $query->where($n, "like", "%{$v}%", $andor);
|
|
|
- }
|
|
|
- }
|
|
|
- if ($custom && is_array($custom))
|
|
|
- {
|
|
|
- foreach ($custom as $k => $v)
|
|
|
- {
|
|
|
- $query->where($k, '=', $v);
|
|
|
- }
|
|
|
- }
|
|
|
- };
|
|
|
- }
|
|
|
- $adminIds = $this->getDataLimitAdminIds();
|
|
|
- if (is_array($adminIds))
|
|
|
- {
|
|
|
- $this->model->where($this->dataLimitField, 'in', $adminIds);
|
|
|
- }
|
|
|
- $list = [];
|
|
|
- $total = $this->model->where($where)->count();
|
|
|
- if ($total > 0)
|
|
|
- {
|
|
|
- if (is_array($adminIds))
|
|
|
- {
|
|
|
- $this->model->where($this->dataLimitField, 'in', $adminIds);
|
|
|
- }
|
|
|
- $list = $this->model->where($where)
|
|
|
- ->order($order)
|
|
|
- ->page($page, $pagesize)
|
|
|
- ->field("{$primarykey},{$field}")
|
|
|
- ->field("password,salt", true)
|
|
|
- ->select();
|
|
|
- }
|
|
|
- //这里一定要返回有list这个字段,total是可选的,如果total<=list的数量,则会隐藏分页按钮
|
|
|
- return json(['list' => $list, 'total' => $total]);
|
|
|
- }
|
|
|
-
|
|
|
-}
|
|
|
+<?php
|
|
|
+
|
|
|
+namespace app\common\controller;
|
|
|
+
|
|
|
+use app\admin\library\Auth;
|
|
|
+use think\Config;
|
|
|
+use think\Controller;
|
|
|
+use think\Hook;
|
|
|
+use think\Lang;
|
|
|
+use think\Session;
|
|
|
+
|
|
|
+/**
|
|
|
+ * 后台控制器基类
|
|
|
+ */
|
|
|
+class Backend extends Controller
|
|
|
+{
|
|
|
+
|
|
|
+ /**
|
|
|
+ * 无需登录的方法,同时也就不需要鉴权了
|
|
|
+ * @var array
|
|
|
+ */
|
|
|
+ protected $noNeedLogin = [];
|
|
|
+
|
|
|
+ /**
|
|
|
+ * 无需鉴权的方法,但需要登录
|
|
|
+ * @var array
|
|
|
+ */
|
|
|
+ protected $noNeedRight = [];
|
|
|
+
|
|
|
+ /**
|
|
|
+ * 布局模板
|
|
|
+ * @var string
|
|
|
+ */
|
|
|
+ protected $layout = 'default';
|
|
|
+
|
|
|
+ /**
|
|
|
+ * 权限控制类
|
|
|
+ * @var Auth
|
|
|
+ */
|
|
|
+ protected $auth = null;
|
|
|
+
|
|
|
+ /**
|
|
|
+ * 快速搜索时执行查找的字段
|
|
|
+ */
|
|
|
+ protected $searchFields = 'id';
|
|
|
+
|
|
|
+ /**
|
|
|
+ * 是否是关联查询
|
|
|
+ */
|
|
|
+ protected $relationSearch = false;
|
|
|
+
|
|
|
+ /**
|
|
|
+ * 是否开启数据限制
|
|
|
+ * 支持auth/personal
|
|
|
+ * 表示按权限判断/仅限个人
|
|
|
+ * 默认为禁用,若启用请务必保证表中存在admin_id字段
|
|
|
+ */
|
|
|
+ protected $dataLimit = false;
|
|
|
+
|
|
|
+ /**
|
|
|
+ * 数据限制字段
|
|
|
+ */
|
|
|
+ protected $dataLimitField = 'admin_id';
|
|
|
+
|
|
|
+ /**
|
|
|
+ * 是否开启Validate验证
|
|
|
+ */
|
|
|
+ protected $modelValidate = false;
|
|
|
+
|
|
|
+ /**
|
|
|
+ * 是否开启模型场景验证
|
|
|
+ */
|
|
|
+ protected $modelSceneValidate = false;
|
|
|
+
|
|
|
+ /**
|
|
|
+ * Multi方法可批量修改的字段
|
|
|
+ */
|
|
|
+ protected $multiFields = 'status';
|
|
|
+
|
|
|
+ /**
|
|
|
+ * 引入后台控制器的traits
|
|
|
+ */
|
|
|
+ use \app\admin\library\traits\Backend;
|
|
|
+
|
|
|
+ public function _initialize()
|
|
|
+ {
|
|
|
+ $modulename = $this->request->module();
|
|
|
+ $controllername = strtolower($this->request->controller());
|
|
|
+ $actionname = strtolower($this->request->action());
|
|
|
+
|
|
|
+ $path = str_replace('.', '/', $controllername) . '/' . $actionname;
|
|
|
+
|
|
|
+ // 定义是否Addtabs请求
|
|
|
+ !defined('IS_ADDTABS') && define('IS_ADDTABS', input("addtabs") ? TRUE : FALSE);
|
|
|
+
|
|
|
+ // 定义是否Dialog请求
|
|
|
+ !defined('IS_DIALOG') && define('IS_DIALOG', input("dialog") ? TRUE : FALSE);
|
|
|
+
|
|
|
+ // 定义是否AJAX请求
|
|
|
+ !defined('IS_AJAX') && define('IS_AJAX', $this->request->isAjax());
|
|
|
+
|
|
|
+ $this->auth = Auth::instance();
|
|
|
+
|
|
|
+ // 设置当前请求的URI
|
|
|
+ $this->auth->setRequestUri($path);
|
|
|
+ // 检测是否需要验证登录
|
|
|
+ if (!$this->auth->match($this->noNeedLogin))
|
|
|
+ {
|
|
|
+ //检测是否登录
|
|
|
+ if (!$this->auth->isLogin())
|
|
|
+ {
|
|
|
+ Hook::listen('admin_nologin', $this);
|
|
|
+ $url = Session::get('referer');
|
|
|
+ $url = $url ? $url : $this->request->url();
|
|
|
+ $this->error(__('Please login first'), url('index/login', ['url' => $url]));
|
|
|
+ }
|
|
|
+ // 判断是否需要验证权限
|
|
|
+ if (!$this->auth->match($this->noNeedRight))
|
|
|
+ {
|
|
|
+ // 判断控制器和方法判断是否有对应权限
|
|
|
+ if (!$this->auth->check($path))
|
|
|
+ {
|
|
|
+ Hook::listen('admin_nopermission', $this);
|
|
|
+ $this->error(__('You have no permission'), '');
|
|
|
+ }
|
|
|
+ }
|
|
|
+ }
|
|
|
+
|
|
|
+ // 非选项卡时重定向
|
|
|
+ if (!$this->request->isPost() && !IS_AJAX && !IS_ADDTABS && !IS_DIALOG && input("ref") == 'addtabs')
|
|
|
+ {
|
|
|
+ $url = preg_replace_callback("/([\?|&]+)ref=addtabs(&?)/i", function($matches) {
|
|
|
+ return $matches[2] == '&' ? $matches[1] : '';
|
|
|
+ }, $this->request->url());
|
|
|
+ $this->redirect('index/index', [], 302, ['referer' => $url]);
|
|
|
+ exit;
|
|
|
+ }
|
|
|
+
|
|
|
+ // 设置面包屑导航数据
|
|
|
+ $breadcrumb = $this->auth->getBreadCrumb($path);
|
|
|
+ array_pop($breadcrumb);
|
|
|
+ $this->view->breadcrumb = $breadcrumb;
|
|
|
+
|
|
|
+ // 如果有使用模板布局
|
|
|
+ if ($this->layout)
|
|
|
+ {
|
|
|
+ $this->view->engine->layout('layout/' . $this->layout);
|
|
|
+ }
|
|
|
+
|
|
|
+ // 语言检测
|
|
|
+ $lang = strip_tags(Lang::detect());
|
|
|
+
|
|
|
+ $site = Config::get("site");
|
|
|
+
|
|
|
+ $upload = \app\common\model\Config::upload();
|
|
|
+
|
|
|
+ // 上传信息配置后
|
|
|
+ Hook::listen("upload_config_init", $upload);
|
|
|
+
|
|
|
+ // 配置信息
|
|
|
+ $config = [
|
|
|
+ 'site' => array_intersect_key($site, array_flip(['name', 'cdnurl', 'version', 'timezone', 'languages'])),
|
|
|
+ 'upload' => $upload,
|
|
|
+ 'modulename' => $modulename,
|
|
|
+ 'controllername' => $controllername,
|
|
|
+ 'actionname' => $actionname,
|
|
|
+ 'jsname' => 'backend/' . str_replace('.', '/', $controllername),
|
|
|
+ 'moduleurl' => rtrim(url("/{$modulename}", '', false), '/'),
|
|
|
+ 'language' => $lang,
|
|
|
+ 'fastadmin' => Config::get('fastadmin'),
|
|
|
+ 'referer' => Session::get("referer")
|
|
|
+ ];
|
|
|
+
|
|
|
+ Config::set('upload', array_merge(Config::get('upload'), $upload));
|
|
|
+
|
|
|
+ // 配置信息后
|
|
|
+ Hook::listen("config_init", $config);
|
|
|
+ //加载当前控制器语言包
|
|
|
+ $this->loadlang($controllername);
|
|
|
+ //渲染站点配置
|
|
|
+ $this->assign('site', $site);
|
|
|
+ //渲染配置信息
|
|
|
+ $this->assign('config', $config);
|
|
|
+ //渲染权限对象
|
|
|
+ $this->assign('auth', $this->auth);
|
|
|
+ //渲染管理员对象
|
|
|
+ $this->assign('admin', Session::get('admin'));
|
|
|
+ }
|
|
|
+
|
|
|
+ /**
|
|
|
+ * 加载语言文件
|
|
|
+ * @param string $name
|
|
|
+ */
|
|
|
+ protected function loadlang($name)
|
|
|
+ {
|
|
|
+ Lang::load(APP_PATH . $this->request->module() . '/lang/' . Lang::detect() . '/' . str_replace('.', '/', $name) . '.php');
|
|
|
+ }
|
|
|
+
|
|
|
+ /**
|
|
|
+ * 渲染配置信息
|
|
|
+ * @param mixed $name 键名或数组
|
|
|
+ * @param mixed $value 值
|
|
|
+ */
|
|
|
+ protected function assignconfig($name, $value = '')
|
|
|
+ {
|
|
|
+ $this->view->config = array_merge($this->view->config ? $this->view->config : [], is_array($name) ? $name : [$name => $value]);
|
|
|
+ }
|
|
|
+
|
|
|
+ /**
|
|
|
+ * 生成查询所需要的条件,排序方式
|
|
|
+ * @param mixed $searchfields 快速查询的字段
|
|
|
+ * @param boolean $relationSearch 是否关联查询
|
|
|
+ * @return array
|
|
|
+ */
|
|
|
+ protected function buildparams($searchfields = null, $relationSearch = null)
|
|
|
+ {
|
|
|
+ $searchfields = is_null($searchfields) ? $this->searchFields : $searchfields;
|
|
|
+ $relationSearch = is_null($relationSearch) ? $this->relationSearch : $relationSearch;
|
|
|
+ $search = $this->request->get("search", '');
|
|
|
+ $filter = $this->request->get("filter", '');
|
|
|
+ $op = $this->request->get("op", '', 'trim');
|
|
|
+ $sort = $this->request->get("sort", "id");
|
|
|
+ $order = $this->request->get("order", "DESC");
|
|
|
+ $offset = $this->request->get("offset", 0);
|
|
|
+ $limit = $this->request->get("limit", 0);
|
|
|
+ $filter = json_decode($filter, TRUE);
|
|
|
+ $op = json_decode($op, TRUE);
|
|
|
+ $filter = $filter ? $filter : [];
|
|
|
+ $where = [];
|
|
|
+ $tableName = '';
|
|
|
+ if ($relationSearch)
|
|
|
+ {
|
|
|
+ if (!empty($this->model))
|
|
|
+ {
|
|
|
+ $class = get_class($this->model);
|
|
|
+ $name = basename(str_replace('\\', '/', $class));
|
|
|
+ $tableName = $this->model->getQuery()->getTable($name) . ".";
|
|
|
+ }
|
|
|
+ $sort = stripos($sort, ".") === false ? $tableName . $sort : $sort;
|
|
|
+ }
|
|
|
+ $adminIds = $this->getDataLimitAdminIds();
|
|
|
+ if (is_array($adminIds))
|
|
|
+ {
|
|
|
+ $where[] = [$this->dataLimitField, 'in', $adminIds];
|
|
|
+ }
|
|
|
+ if ($search)
|
|
|
+ {
|
|
|
+ $searcharr = is_array($searchfields) ? $searchfields : explode(',', $searchfields);
|
|
|
+ foreach ($searcharr as $k => &$v)
|
|
|
+ {
|
|
|
+ $v = stripos($v, ".") === false ? $tableName . $v : $v;
|
|
|
+ }
|
|
|
+ unset($v);
|
|
|
+ $where[] = [implode("|", $searcharr), "LIKE", "%{$search}%"];
|
|
|
+ }
|
|
|
+ foreach ($filter as $k => $v)
|
|
|
+ {
|
|
|
+ $sym = isset($op[$k]) ? $op[$k] : '=';
|
|
|
+ if (stripos($k, ".") === false)
|
|
|
+ {
|
|
|
+ $k = $tableName . $k;
|
|
|
+ }
|
|
|
+ $sym = strtoupper(isset($op[$k]) ? $op[$k] : $sym);
|
|
|
+ switch ($sym)
|
|
|
+ {
|
|
|
+ case '=':
|
|
|
+ case '!=':
|
|
|
+ $where[] = [$k, $sym, (string) $v];
|
|
|
+ break;
|
|
|
+ case 'LIKE':
|
|
|
+ case 'NOT LIKE':
|
|
|
+ case 'LIKE %...%':
|
|
|
+ case 'NOT LIKE %...%':
|
|
|
+ $where[] = [$k, trim(str_replace('%...%', '', $sym)), "%{$v}%"];
|
|
|
+ break;
|
|
|
+ case '>':
|
|
|
+ case '>=':
|
|
|
+ case '<':
|
|
|
+ case '<=':
|
|
|
+ $where[] = [$k, $sym, intval($v)];
|
|
|
+ break;
|
|
|
+ case 'IN':
|
|
|
+ case 'IN(...)':
|
|
|
+ case 'NOT IN':
|
|
|
+ case 'NOT IN(...)':
|
|
|
+ $where[] = [$k, str_replace('(...)', '', $sym), explode(',', $v)];
|
|
|
+ break;
|
|
|
+ case 'BETWEEN':
|
|
|
+ case 'NOT BETWEEN':
|
|
|
+ $arr = array_slice(explode(',', $v), 0, 2);
|
|
|
+ if (stripos($v, ',') === false || !array_filter($arr))
|
|
|
+ continue;
|
|
|
+ //当出现一边为空时改变操作符
|
|
|
+ if ($arr[0] === '')
|
|
|
+ {
|
|
|
+ $sym = $sym == 'BETWEEN' ? '<=' : '>';
|
|
|
+ $arr = $arr[1];
|
|
|
+ }
|
|
|
+ else if ($arr[1] === '')
|
|
|
+ {
|
|
|
+ $sym = $sym == 'BETWEEN' ? '>=' : '<';
|
|
|
+ $arr = $arr[0];
|
|
|
+ }
|
|
|
+ $where[] = [$k, $sym, $arr];
|
|
|
+ break;
|
|
|
+ case 'RANGE':
|
|
|
+ case 'NOT RANGE':
|
|
|
+ $v = str_replace(' - ', ',', $v);
|
|
|
+ $arr = array_slice(explode(',', $v), 0, 2);
|
|
|
+ if (stripos($v, ',') === false || !array_filter($arr))
|
|
|
+ continue;
|
|
|
+ //当出现一边为空时改变操作符
|
|
|
+ if ($arr[0] === '')
|
|
|
+ {
|
|
|
+ $sym = $sym == 'RANGE' ? '<=' : '>';
|
|
|
+ $arr = $arr[1];
|
|
|
+ }
|
|
|
+ else if ($arr[1] === '')
|
|
|
+ {
|
|
|
+ $sym = $sym == 'RANGE' ? '>=' : '<';
|
|
|
+ $arr = $arr[0];
|
|
|
+ }
|
|
|
+ $where[] = [$k, str_replace('RANGE', 'BETWEEN', $sym) . ' time', $arr];
|
|
|
+ break;
|
|
|
+ case 'LIKE':
|
|
|
+ case 'LIKE %...%':
|
|
|
+ $where[] = [$k, 'LIKE', "%{$v}%"];
|
|
|
+ break;
|
|
|
+ case 'NULL':
|
|
|
+ case 'IS NULL':
|
|
|
+ case 'NOT NULL':
|
|
|
+ case 'IS NOT NULL':
|
|
|
+ $where[] = [$k, strtolower(str_replace('IS ', '', $sym))];
|
|
|
+ break;
|
|
|
+ default:
|
|
|
+ break;
|
|
|
+ }
|
|
|
+ }
|
|
|
+ $where = function($query) use ($where) {
|
|
|
+ foreach ($where as $k => $v)
|
|
|
+ {
|
|
|
+ if (is_array($v))
|
|
|
+ {
|
|
|
+ call_user_func_array([$query, 'where'], $v);
|
|
|
+ }
|
|
|
+ else
|
|
|
+ {
|
|
|
+ $query->where($v);
|
|
|
+ }
|
|
|
+ }
|
|
|
+ };
|
|
|
+ return [$where, $sort, $order, $offset, $limit];
|
|
|
+ }
|
|
|
+
|
|
|
+ /**
|
|
|
+ * 获取数据限制的管理员ID
|
|
|
+ * 禁用数据限制时返回的是null
|
|
|
+ * @return mixed
|
|
|
+ */
|
|
|
+ protected function getDataLimitAdminIds()
|
|
|
+ {
|
|
|
+ if (!$this->dataLimit)
|
|
|
+ {
|
|
|
+ return null;
|
|
|
+ }
|
|
|
+ $adminIds = [];
|
|
|
+ if (in_array($this->dataLimit, ['auth', 'personal']))
|
|
|
+ {
|
|
|
+ $adminIds = $this->dataLimit == 'auth' ? $this->auth->getChildrenAdminIds(true) : [$this->auth->id];
|
|
|
+ }
|
|
|
+ return $adminIds;
|
|
|
+ }
|
|
|
+
|
|
|
+ /**
|
|
|
+ * Selectpage的实现方法
|
|
|
+ *
|
|
|
+ * 当前方法只是一个比较通用的搜索匹配,请按需重载此方法来编写自己的搜索逻辑,$where按自己的需求写即可
|
|
|
+ * 这里示例了所有的参数,所以比较复杂,实现上自己实现只需简单的几行即可
|
|
|
+ *
|
|
|
+ */
|
|
|
+ protected function selectpage()
|
|
|
+ {
|
|
|
+ //设置过滤方法
|
|
|
+ $this->request->filter(['strip_tags', 'htmlspecialchars']);
|
|
|
+
|
|
|
+ //搜索关键词,客户端输入以空格分开,这里接收为数组
|
|
|
+ $word = (array) $this->request->request("q_word/a");
|
|
|
+ //当前页
|
|
|
+ $page = $this->request->request("page");
|
|
|
+ //分页大小
|
|
|
+ $pagesize = $this->request->request("per_page");
|
|
|
+ //搜索条件
|
|
|
+ $andor = $this->request->request("and_or");
|
|
|
+ //排序方式
|
|
|
+ $orderby = (array) $this->request->request("order_by/a");
|
|
|
+ //显示的字段
|
|
|
+ $field = $this->request->request("field");
|
|
|
+ //主键
|
|
|
+ $primarykey = $this->request->request("pkey_name");
|
|
|
+ //主键值
|
|
|
+ $primaryvalue = $this->request->request("pkey_value");
|
|
|
+ //搜索字段
|
|
|
+ $searchfield = (array) $this->request->request("search_field/a");
|
|
|
+ //自定义搜索条件
|
|
|
+ $custom = (array) $this->request->request("custom/a");
|
|
|
+ $order = [];
|
|
|
+ foreach ($orderby as $k => $v)
|
|
|
+ {
|
|
|
+ $order[$v[0]] = $v[1];
|
|
|
+ }
|
|
|
+ $field = $field ? $field : 'name';
|
|
|
+
|
|
|
+ //如果有primaryvalue,说明当前是初始化传值
|
|
|
+ if ($primaryvalue !== null)
|
|
|
+ {
|
|
|
+ $where = [$primarykey => ['in', $primaryvalue]];
|
|
|
+ }
|
|
|
+ else
|
|
|
+ {
|
|
|
+ $where = function($query) use($word, $andor, $field, $searchfield, $custom) {
|
|
|
+ foreach ($word as $k => $v)
|
|
|
+ {
|
|
|
+ foreach ($searchfield as $m => $n)
|
|
|
+ {
|
|
|
+ $query->where($n, "like", "%{$v}%", $andor);
|
|
|
+ }
|
|
|
+ }
|
|
|
+ if ($custom && is_array($custom))
|
|
|
+ {
|
|
|
+ foreach ($custom as $k => $v)
|
|
|
+ {
|
|
|
+ $query->where($k, '=', $v);
|
|
|
+ }
|
|
|
+ }
|
|
|
+ };
|
|
|
+ }
|
|
|
+ $adminIds = $this->getDataLimitAdminIds();
|
|
|
+ if (is_array($adminIds))
|
|
|
+ {
|
|
|
+ $this->model->where($this->dataLimitField, 'in', $adminIds);
|
|
|
+ }
|
|
|
+ $list = [];
|
|
|
+ $total = $this->model->where($where)->count();
|
|
|
+ if ($total > 0)
|
|
|
+ {
|
|
|
+ if (is_array($adminIds))
|
|
|
+ {
|
|
|
+ $this->model->where($this->dataLimitField, 'in', $adminIds);
|
|
|
+ }
|
|
|
+ $list = $this->model->where($where)
|
|
|
+ ->order($order)
|
|
|
+ ->page($page, $pagesize)
|
|
|
+ ->field("{$primarykey},{$field}")
|
|
|
+ ->field("password,salt", true)
|
|
|
+ ->select();
|
|
|
+ }
|
|
|
+ //这里一定要返回有list这个字段,total是可选的,如果total<=list的数量,则会隐藏分页按钮
|
|
|
+ return json(['list' => $list, 'total' => $total]);
|
|
|
+ }
|
|
|
+
|
|
|
+}
|