control.php 11 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376
  1. <?php
  2. /**
  3. * 系统后台公共方法
  4. *
  5. * 包括系统后台父类
  6. *
  7. ***/
  8. defined('InShopNC') or exit('Access Invalid!');
  9. require_once(BASE_HELPER_PATH . '/mtopcard/mtopcard.php');
  10. class SystemControl
  11. {
  12. /**
  13. * 管理员资料 name id group
  14. */
  15. protected $admin_info;
  16. /**
  17. * 权限内容
  18. */
  19. protected $permission;
  20. protected function __construct()
  21. {
  22. Language::read('common,layout');
  23. /**
  24. * 验证用户是否登录
  25. * $admin_info 管理员资料 name id
  26. */
  27. $this->admin_info = $this->systemLogin();
  28. if ($this->admin_info['id'] != 1){
  29. // 验证权限
  30. $this->checkPermission();
  31. }
  32. //转码 防止GBK下用ajax调用时传汉字数据出现乱码
  33. if (($_GET['branch']!='' || $_GET['op']=='ajax') && strtoupper(CHARSET) == 'GBK'){
  34. $_GET = Language::getGBK($_GET);
  35. }
  36. }
  37. /**
  38. * 取得当前管理员信息
  39. *
  40. * @param
  41. * @return 数组类型的返回结果
  42. */
  43. protected final function getAdminInfo(){
  44. return $this->admin_info;
  45. }
  46. /**
  47. * 系统后台登录验证
  48. *
  49. * @param
  50. * @return array 数组类型的返回结果
  51. */
  52. protected final function systemLogin(){
  53. //取得cookie内容,解密,和系统匹配
  54. $user = unserialize(decrypt(cookie('sys_key'),MD5_KEY));
  55. if (!key_exists('gid',(array)$user) || !isset($user['sp']) || (empty($user['name']) || empty($user['id']))){
  56. @header('Location: index.php?act=login&op=login');exit;
  57. }else {
  58. $this->systemSetKey($user);
  59. }
  60. return $user;
  61. }
  62. /**
  63. * 系统后台 会员登录后 将会员验证内容写入对应cookie中
  64. *
  65. * @param string $name 用户名
  66. * @param int $id 用户ID
  67. * @return bool 布尔类型的返回结果
  68. */
  69. protected final function systemSetKey($user){
  70. setNcCookie('sys_key',encrypt(serialize($user),MD5_KEY),3600,'',null);
  71. }
  72. /**
  73. * 验证当前管理员权限是否可以进行操作
  74. *
  75. * @param string $link_nav
  76. * @return
  77. */
  78. protected final function checkPermission($link_nav = null){
  79. if ($this->admin_info['sp'] == 1) return true;
  80. $act = $_GET['act']?$_GET['act']:$_POST['act'];
  81. $op = $_GET['op']?$_GET['op']:$_POST['op'];
  82. if (empty($this->permission)){
  83. $gadmin = Model('gadmin')->getby_gid($this->admin_info['gid']);
  84. $permission = decrypt($gadmin['limits'],MD5_KEY.md5($gadmin['gname']));
  85. $this->permission = $permission = explode('|',$permission);
  86. }else{
  87. $permission = $this->permission;
  88. }
  89. //显示隐藏小导航,成功与否都直接返回
  90. if (is_array($link_nav)){
  91. if (!in_array("{$link_nav['act']}.{$link_nav['op']}",$permission) && !in_array($link_nav['act'],$permission)){
  92. return false;
  93. }else{
  94. return true;
  95. }
  96. }
  97. //以下几项不需要验证
  98. $tmp = array('index','dashboard','login','common','cms_base');
  99. if (in_array($act,$tmp)) return true;
  100. if (in_array($act,$permission) || in_array("$act.$op",$permission)){
  101. return true;
  102. }else{
  103. $extlimit = array('ajax','export_step1');
  104. if (in_array($op,$extlimit) && (in_array($act,$permission) || strpos(serialize($permission),'"'.$act.'.'))){
  105. return true;
  106. }
  107. //带前缀的都通过
  108. foreach ($permission as $v) {
  109. if (!empty($v) && strpos("$act.$op",$v.'_') !== false) {
  110. return true;break;
  111. }
  112. }
  113. }
  114. showMessage(Language::get('nc_assign_right'),'','html','succ',0);
  115. }
  116. /**
  117. * 取得后台菜单
  118. *
  119. * @param string $permission
  120. * @return
  121. */
  122. protected final function getNav($permission = '',&$top_nav,&$left_nav,&$map_nav){
  123. $act = $_GET['act']?$_GET['act']:$_POST['act'];
  124. $op = $_GET['op']?$_GET['op']:$_POST['op'];
  125. if ($this->admin_info['sp'] != 1 && empty($this->permission)){
  126. $gadmin = Model('gadmin')->getby_gid($this->admin_info['gid']);
  127. $permission = decrypt($gadmin['limits'],MD5_KEY.md5($gadmin['gname']));
  128. $this->permission = $permission = explode('|',$permission);
  129. }
  130. Language::read('common');
  131. $lang = Language::getLangContent();
  132. $array = require(BASE_PATH.'/include/menu.php');
  133. $array = $this->parseMenu($array);
  134. //管理地图
  135. $map_nav = $array['left'];
  136. unset($map_nav[0]);
  137. $model_nav = "<li><a class=\"link actived\" id=\"nav__nav_\" href=\"javascript:;\" onclick=\"openItem('_args_');\"><span>_text_</span></a></li>\n";
  138. $top_nav = '';
  139. //顶部菜单
  140. foreach ($array['top'] as $k=>$v) {
  141. $v['nav'] = $v['args'];
  142. $top_nav .= str_ireplace(array('_args_','_text_','_nav_'),$v,$model_nav);
  143. }
  144. $top_nav = str_ireplace("\n<li><a class=\"link actived\"","\n<li><a class=\"link\"",$top_nav);
  145. //左侧菜单
  146. $model_nav = "
  147. <ul id=\"sort__nav_\">
  148. <li>
  149. <dl>
  150. <dd>
  151. <ol>
  152. list_body
  153. </ol>
  154. </dd>
  155. </dl>
  156. </li>
  157. </ul>\n";
  158. $left_nav = '';
  159. foreach ($array['left'] as $k=>$v) {
  160. $left_nav .= str_ireplace(array('_nav_'),array($v['nav']),$model_nav);
  161. $model_list = "<li nc_type='_pkey_'><a href=\"JavaScript:void(0);\" name=\"item__opact_\" id=\"item__opact_\" onclick=\"openItem('_args_');\">_text_</a></li>";
  162. $tmp_list = '';
  163. $current_parent = '';//当前父级key
  164. foreach ($v['list'] as $key=>$value) {
  165. $model_list_parent = '';
  166. $args = explode(',',$value['args']);
  167. if (!empty($value['parent'])){
  168. if (empty($current_parent) || $current_parent != $value['parent']){
  169. $model_list_parent = "<li nc_type='parentli' dataparam='{$value['parent']}'><dt>{$value['parenttext']}</dt><dd style='display:block;'></dd></li>";
  170. }
  171. $current_parent = $value['parent'];
  172. }
  173. $value['op'] = $args[0];
  174. $value['act'] = $args[1];
  175. //$tmp_list .= str_ireplace(array('_args_','_text_','_op_'),$value,$model_list);
  176. $tmp_list .= str_ireplace(['_args_','_text_','_opact_','_pkey_'],
  177. [$value['args'],$value['text'],$value['op'],$value['act'],$value['parent']],
  178. $model_list_parent.$model_list);
  179. }
  180. $left_nav = str_replace('list_body',$tmp_list,$left_nav);
  181. }
  182. }
  183. /**
  184. * 过滤掉无权查看的菜单
  185. *
  186. * @param array $menu
  187. * @return array
  188. */
  189. private final function parseMenu($menu = array()){
  190. if ($this->admin_info['sp'] == 1) return $menu;
  191. foreach ($menu['left'] as $k=>$v) {
  192. foreach ($v['list'] as $xk=>$xv) {
  193. $tmp = explode(',',$xv['args']);
  194. //以下几项不需要验证
  195. $except = array('index','dashboard','login','common');
  196. if (in_array($tmp[1],$except)) continue;
  197. if (!in_array($tmp[1],$this->permission) && !in_array($tmp[1].'.'.$tmp[0],$this->permission)){
  198. unset($menu['left'][$k]['list'][$xk]);
  199. }
  200. }
  201. if (empty($menu['left'][$k]['list'])) {
  202. unset($menu['top'][$k]);unset($menu['left'][$k]);
  203. }
  204. }
  205. return $menu;
  206. }
  207. /**
  208. * 取得顶部小导航
  209. *
  210. * @param array $links
  211. * @param 当前页 $actived
  212. */
  213. protected final function sublink($links = array(), $actived = '', $file='index.php'){
  214. $linkstr = '';
  215. foreach ($links as $k=>$v) {
  216. parse_str($v['url'],$array);
  217. if (!$this->checkPermission($array)) continue;
  218. $href = ($array['op'] == $actived ? null : "href=\"{$file}?{$v['url']}\"");
  219. $class = ($array['op'] == $actived ? "class=\"current\"" : null);
  220. $lang = L($v['lang']);
  221. $linkstr .= sprintf('<li><a %s %s><span>%s</span></a></li>',$href,$class,$lang);
  222. }
  223. return "<ul class=\"tab-base\">{$linkstr}</ul>";
  224. }
  225. /**
  226. * 记录系统日志
  227. *
  228. * @param $lang 日志语言包
  229. * @param $state 1成功0失败null不出现成功失败提示
  230. * @param $admin_name
  231. * @param $admin_id
  232. */
  233. protected final function log($lang = '', $state = 1, $admin_name = '', $admin_id = 0){
  234. if (!C('sys_log') || !is_string($lang)) return;
  235. if ($admin_name == ''){
  236. $admin = unserialize(decrypt(cookie('sys_key'),MD5_KEY));
  237. $admin_name = $admin['name'];
  238. $admin_id = $admin['id'];
  239. }
  240. $data = array();
  241. if (is_null($state)){
  242. $state = null;
  243. }else{
  244. // $state = $state ? L('nc_succ') : L('nc_fail');
  245. $state = $state ? '' : L('nc_fail');
  246. }
  247. $data['content'] = $lang.$state;
  248. $data['admin_name'] = $admin_name;
  249. $data['createtime'] = time();
  250. $data['admin_id'] = $admin_id;
  251. $data['ip'] = getIp();
  252. $data['url'] = $_REQUEST['act'].'&'.$_REQUEST['op'];
  253. return Model('admin_log')->insert($data);
  254. }
  255. /**
  256. * 添加到任务队列
  257. *
  258. * @param array $goods_array
  259. * @param boolean $ifdel 是否删除以原记录
  260. */
  261. protected function addcron($data = array(), $ifdel = false) {
  262. $model_cron = Model('cron');
  263. if (isset($data[0])) { // 批量插入
  264. $where = array();
  265. foreach ($data as $k => $v) {
  266. if (isset($v['content'])) {
  267. $data[$k]['content'] = serialize($v['content']);
  268. }
  269. // 删除原纪录条件
  270. if ($ifdel) {
  271. $where[] = '(type = ' . $data['type'] . ' and exeid = ' . $data['exeid'] . ')';
  272. }
  273. }
  274. // 删除原纪录
  275. if ($ifdel) {
  276. $model_cron->delCron(implode(',', $where));
  277. }
  278. $model_cron->addCronAll($data);
  279. } else { // 单条插入
  280. if (isset($data['content'])) {
  281. $data['content'] = serialize($data['content']);
  282. }
  283. // 删除原纪录
  284. if ($ifdel) {
  285. $model_cron->delCron(array('type' => $data['type'], 'exeid' => $data['exeid']));
  286. }
  287. $model_cron->addCron($data);
  288. }
  289. }
  290. protected function scard_type(int $card_type)
  291. {
  292. if ($card_type == 1) { //中石油
  293. return '中石油';
  294. } elseif ($card_type == 2) { //中石化
  295. return '中石化';
  296. } elseif ($card_type == 4) { //中国移动
  297. return '中国移动';
  298. } elseif ($card_type == 5) { //中国联通
  299. return '中国联通';
  300. } elseif ($card_type == 6) { //中国电信
  301. return '中国电信';
  302. } elseif ($card_type == 7) { //中国电信
  303. return '增值业务';
  304. } else {
  305. return 'unknown';
  306. }
  307. }
  308. protected function quality_format($quality,$card_type) {
  309. $oil_text = [
  310. 1 => '无流水',
  311. 5 => '有流水'
  312. ];
  313. $phone_text = [
  314. 1 => '普充',
  315. 2 => '快充',
  316. 3 => '卡密',
  317. 4 => '三方',
  318. 5 => '慢24',
  319. 6 => '慢6',
  320. 7 => '慢2'
  321. ];
  322. $text = [
  323. mtopcard\PetroChinaCard => $oil_text,
  324. mtopcard\SinopecCard => $oil_text,
  325. mtopcard\ChinaMobileCard => $phone_text,
  326. mtopcard\ChinaUnicomCard => $phone_text,
  327. mtopcard\ChinaTelecomCard => $phone_text
  328. ];
  329. return $text[$card_type][$quality] ?? '未知';
  330. }
  331. protected function elapse_time($seconds)
  332. {
  333. $minutes = intval($seconds / 60);
  334. $second = intval($seconds % 60);
  335. if ($minutes >= 60) {
  336. $minute = $minutes % 60;
  337. $hours = intval($minutes / 60);
  338. $result = "{$minute}m{$second}s";
  339. } elseif ($minutes > 0) {
  340. $result = "{$minutes}m{$second}s";
  341. } else {
  342. $result = "{$second}s";
  343. }
  344. if (isset($hours)) {
  345. $result = "{$hours}h{$minute}m";
  346. }
  347. return $result;
  348. }
  349. }