request->filter('trim,strip_tags,htmlspecialchars'); } /** * 后台首页 */ public function index() { $cookieArr = ['adminskin' => "/^skin\-([a-z\-]+)\$/i", 'multiplenav' => "/^(0|1)\$/", 'multipletab' => "/^(0|1)\$/", 'show_submenu' => "/^(0|1)\$/"]; foreach ($cookieArr as $key => $regex) { $cookieValue = $this->request->cookie($key); if (!is_null($cookieValue) && preg_match($regex, $cookieValue)) { config('fastadmin.' . $key, $cookieValue); } } //左侧菜单 // 角标只展示需要处理的业务,不再使用 hot/new 这类装饰性角标 $badges = []; try { $pendingPost = (int)Db::name('fc_post')->whereNull('deletetime')->where('audit_status', 0)->count(); $pendingReport = (int)Db::name('fc_report')->where('status', 'pending')->count(); $pendingWithdraw = (int)Db::name('fc_withdraw')->where('status', 'auditing')->count(); $pendingMerchant = (int)Db::name('fc_merchant')->where('audit_status', 0)->count(); if ($pendingPost > 0) { $badges['fc/postaudit'] = [$pendingPost, 'orange']; } if ($pendingReport > 0) { $badges['fc/report'] = [$pendingReport, 'orange']; } $contentTotal = $pendingPost + $pendingReport; if ($contentTotal > 0) { $badges['fc/content'] = [$contentTotal, 'orange']; } if ($pendingWithdraw > 0) { $badges['fc/withdraw'] = [$pendingWithdraw, 'red']; $badges['fc/trade'] = [$pendingWithdraw, 'red']; } if ($pendingMerchant > 0) { $badges['fc/merchant'] = [$pendingMerchant, 'yellow']; $badges['fc/user'] = [$pendingMerchant, 'yellow']; } } catch (\Exception $e) { // 业务表缺失时不影响后台首页 } list($menulist, $navlist, $fixedmenu, $referermenu) = $this->auth->getSidebar($badges, $this->view->site['fixedpage']); $action = $this->request->request('action'); if ($this->request->isPost()) { if ($action == 'refreshmenu') { $this->success('', null, ['menulist' => $menulist, 'navlist' => $navlist]); } } $this->assignconfig('cookie', ['prefix' => config('cookie.prefix')]); $this->view->assign('menulist', $menulist); $this->view->assign('navlist', $navlist); $this->view->assign('fixedmenu', $fixedmenu); $this->view->assign('referermenu', $referermenu); $this->view->assign('title', __('Home')); return $this->view->fetch(); } /** * 管理员登录 */ public function login() { $url = $this->request->get('url', '', 'url_clean'); $url = $url ?: 'index/index'; if ($this->auth->isLogin()) { $this->success(__("You've logged in, do not login again"), $url); } //保持会话有效时长,单位:小时 $keeyloginhours = 24; if ($this->request->isPost()) { $username = $this->request->post('username'); $password = $this->request->post('password', '', null); $keeplogin = $this->request->post('keeplogin'); $token = $this->request->post('__token__'); $rule = [ 'username' => 'require|length:3,30', 'password' => 'require|length:3,30', '__token__' => 'require|token', ]; $data = [ 'username' => $username, 'password' => $password, '__token__' => $token, ]; if (Config::get('fastadmin.login_captcha')) { $rule['captcha'] = 'require|captcha'; $data['captcha'] = $this->request->post('captcha'); } $validate = new Validate($rule, [], ['username' => __('Username'), 'password' => __('Password'), 'captcha' => __('Captcha')]); $result = $validate->check($data); if (!$result) { $this->error($validate->getError(), $url, ['token' => $this->request->token()]); } AdminLog::setTitle(__('Login')); $result = $this->auth->login($username, $password, $keeplogin ? $keeyloginhours * 3600 : 0); if ($result === true) { Hook::listen("admin_login_after", $this->request); $this->success(__('Login successful'), $url, ['url' => $url, 'id' => $this->auth->id, 'username' => $username, 'avatar' => $this->auth->avatar]); } else { $msg = $this->auth->getError(); $msg = $msg ? $msg : __('Username or password is incorrect'); $this->error($msg, $url, ['token' => $this->request->token()]); } } // 根据客户端的cookie,判断是否可以自动登录 if ($this->auth->autologin()) { Session::delete("referer"); $this->redirect($url); } $background = Config::get('fastadmin.login_background'); $background = $background ? (stripos($background, 'http') === 0 ? $background : config('site.cdnurl') . $background) : ''; $this->view->assign('keeyloginhours', $keeyloginhours); $this->view->assign('background', $background); $this->view->assign('title', __('Login')); Hook::listen("admin_login_init", $this->request); return $this->view->fetch(); } /** * 退出登录 */ public function logout() { if ($this->request->isPost()) { // 加强校验referer是否来自服务器,允许referer为空 $referer = $this->request->server('HTTP_REFERER'); if ($referer && strtolower(parse_url($referer, PHP_URL_HOST)) != strtolower($this->request->host())) { $this->error(__('Invalid request')); } $this->token(); $this->auth->logout(); Hook::listen("admin_logout_after", $this->request); $this->success(__('Logout successful'), 'index/login'); } return $this->view->fetch(); } }