control.php 15 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486
  1. <?php
  2. /**
  3. * 系统后台公共方法
  4. *
  5. * 包括系统后台父类
  6. *
  7. ***/
  8. defined('InShopNC') or exit('Access Invalid!');
  9. require_once(BASE_HELPER_PATH . '/mtopcard/mtopcard.php');
  10. class SystemControl
  11. {
  12. /**
  13. * 管理员资料 name id group
  14. */
  15. protected $admin_info;
  16. /**
  17. * 权限内容
  18. */
  19. protected $permission;
  20. protected function __construct()
  21. {
  22. Language::read('common,layout');
  23. /**
  24. * 验证用户是否登录
  25. * $admin_info 管理员资料 name id
  26. */
  27. $this->admin_info = $this->systemLogin();
  28. if ($this->admin_info['id'] != 1){
  29. // 验证权限
  30. $this->checkPermission();
  31. }
  32. //转码 防止GBK下用ajax调用时传汉字数据出现乱码
  33. if (($_GET['branch']!='' || $_GET['op']=='ajax') && strtoupper(CHARSET) == 'GBK'){
  34. $_GET = Language::getGBK($_GET);
  35. }
  36. }
  37. /**
  38. * 取得当前管理员信息
  39. *
  40. * @param
  41. * @return 数组类型的返回结果
  42. */
  43. protected final function getAdminInfo(){
  44. return $this->admin_info;
  45. }
  46. /**
  47. * 系统后台登录验证
  48. *
  49. * @param
  50. * @return array 数组类型的返回结果
  51. */
  52. protected final function systemLogin(){
  53. //取得cookie内容,解密,和系统匹配
  54. $user = unserialize(decrypt(cookie('sys_key'),MD5_KEY));
  55. if (!key_exists('gid',(array)$user) || !isset($user['sp']) || (empty($user['name']) || empty($user['id']))){
  56. @header('Location: index.php?act=login&op=login');exit;
  57. }else {
  58. $this->systemSetKey($user);
  59. }
  60. return $user;
  61. }
  62. /**
  63. * 系统后台 会员登录后 将会员验证内容写入对应cookie中
  64. *
  65. * @param string $name 用户名
  66. * @param int $id 用户ID
  67. * @return bool 布尔类型的返回结果
  68. */
  69. protected final function systemSetKey($user){
  70. setNcCookie('sys_key',encrypt(serialize($user),MD5_KEY),3600,'',null);
  71. }
  72. /**
  73. * 验证当前管理员权限是否可以进行操作
  74. *
  75. * @param string $link_nav
  76. * @return
  77. */
  78. protected final function checkPermission($link_nav = null){
  79. if ($this->admin_info['sp'] == 1) return true;
  80. $act = $_GET['act']?$_GET['act']:$_POST['act'];
  81. $op = $_GET['op']?$_GET['op']:$_POST['op'];
  82. if (empty($this->permission)){
  83. $gadmin = Model('gadmin')->getby_gid($this->admin_info['gid']);
  84. $permission = decrypt($gadmin['limits'],MD5_KEY.md5($gadmin['gname']));
  85. $this->permission = $permission = explode('|',$permission);
  86. }else{
  87. $permission = $this->permission;
  88. }
  89. //显示隐藏小导航,成功与否都直接返回
  90. if (is_array($link_nav)){
  91. if (!in_array("{$link_nav['act']}.{$link_nav['op']}",$permission) && !in_array($link_nav['act'],$permission)){
  92. return false;
  93. }else{
  94. return true;
  95. }
  96. }
  97. //以下几项不需要验证
  98. $tmp = array('index','dashboard','login','common','cms_base');
  99. if (in_array($act,$tmp)) return true;
  100. if (in_array($act,$permission) || in_array("$act.$op",$permission)){
  101. return true;
  102. }else{
  103. $extlimit = array('ajax','export_step1');
  104. if (in_array($op,$extlimit) && (in_array($act,$permission) || strpos(serialize($permission),'"'.$act.'.'))){
  105. return true;
  106. }
  107. //带前缀的都通过
  108. foreach ($permission as $v) {
  109. if (!empty($v) && strpos("$act.$op",$v.'_') !== false) {
  110. return true;break;
  111. }
  112. }
  113. }
  114. showMessage(Language::get('nc_assign_right'),'','html','succ',0);
  115. }
  116. /**
  117. * 取得后台菜单
  118. *
  119. * @param string $permission
  120. * @return
  121. */
  122. protected final function getNav($permission = '',&$top_nav,&$left_nav,&$map_nav){
  123. $act = $_GET['act']?$_GET['act']:$_POST['act'];
  124. $op = $_GET['op']?$_GET['op']:$_POST['op'];
  125. if ($this->admin_info['sp'] != 1 && empty($this->permission)){
  126. $gadmin = Model('gadmin')->getby_gid($this->admin_info['gid']);
  127. $permission = decrypt($gadmin['limits'],MD5_KEY.md5($gadmin['gname']));
  128. $this->permission = $permission = explode('|',$permission);
  129. }
  130. Language::read('common');
  131. $lang = Language::getLangContent();
  132. $array = require(BASE_PATH.'/include/menu.php');
  133. $array = $this->parseMenu($array);
  134. //管理地图
  135. $map_nav = $array['left'];
  136. unset($map_nav[0]);
  137. $model_nav = "<li><a class=\"link actived\" id=\"nav__nav_\" href=\"javascript:;\" onclick=\"openItem('_args_');\"><span>_text_</span></a></li>\n";
  138. $top_nav = '';
  139. //顶部菜单
  140. foreach ($array['top'] as $k=>$v) {
  141. $v['nav'] = $v['args'];
  142. $top_nav .= str_ireplace(array('_args_','_text_','_nav_'),$v,$model_nav);
  143. }
  144. $top_nav = str_ireplace("\n<li><a class=\"link actived\"","\n<li><a class=\"link\"",$top_nav);
  145. //左侧菜单
  146. $model_nav = "
  147. <ul id=\"sort__nav_\">
  148. <li>
  149. <dl>
  150. <dd>
  151. <ol>
  152. list_body
  153. </ol>
  154. </dd>
  155. </dl>
  156. </li>
  157. </ul>\n";
  158. $left_nav = '';
  159. foreach ($array['left'] as $k=>$v) {
  160. $left_nav .= str_ireplace(array('_nav_'),array($v['nav']),$model_nav);
  161. $model_list = "<li nc_type='_pkey_'><a href=\"JavaScript:void(0);\" name=\"item__opact_\" id=\"item__opact_\" onclick=\"openItem('_args_');\">_text_</a></li>";
  162. $tmp_list = '';
  163. $current_parent = '';//当前父级key
  164. foreach ($v['list'] as $key=>$value) {
  165. $model_list_parent = '';
  166. $args = explode(',',$value['args']);
  167. if (!empty($value['parent'])){
  168. if (empty($current_parent) || $current_parent != $value['parent']){
  169. $model_list_parent = "<li nc_type='parentli' dataparam='{$value['parent']}'><dt>{$value['parenttext']}</dt><dd style='display:block;'></dd></li>";
  170. }
  171. $current_parent = $value['parent'];
  172. }
  173. $value['op'] = $args[0];
  174. $value['act'] = $args[1];
  175. //$tmp_list .= str_ireplace(array('_args_','_text_','_op_'),$value,$model_list);
  176. $tmp_list .= str_ireplace(['_args_','_text_','_opact_','_pkey_'],
  177. [$value['args'],$value['text'],$value['op'],$value['act'],$value['parent']],
  178. $model_list_parent.$model_list);
  179. }
  180. $left_nav = str_replace('list_body',$tmp_list,$left_nav);
  181. }
  182. }
  183. /**
  184. * 过滤掉无权查看的菜单
  185. *
  186. * @param array $menu
  187. * @return array
  188. */
  189. private final function parseMenu($menu = array()){
  190. if ($this->admin_info['sp'] == 1) return $menu;
  191. foreach ($menu['left'] as $k=>$v) {
  192. foreach ($v['list'] as $xk=>$xv) {
  193. $tmp = explode(',',$xv['args']);
  194. //以下几项不需要验证
  195. $except = array('index','dashboard','login','common');
  196. if (in_array($tmp[1],$except)) continue;
  197. if (!in_array($tmp[1],$this->permission) && !in_array($tmp[1].'.'.$tmp[0],$this->permission)){
  198. unset($menu['left'][$k]['list'][$xk]);
  199. }
  200. }
  201. if (empty($menu['left'][$k]['list'])) {
  202. unset($menu['top'][$k]);unset($menu['left'][$k]);
  203. }
  204. }
  205. return $menu;
  206. }
  207. /**
  208. * 取得顶部小导航
  209. *
  210. * @param array $links
  211. * @param 当前页 $actived
  212. */
  213. protected final function sublink($links = array(), $actived = '', $file='index.php'){
  214. $linkstr = '';
  215. foreach ($links as $k=>$v) {
  216. parse_str($v['url'],$array);
  217. if (!$this->checkPermission($array)) continue;
  218. $href = ($array['op'] == $actived ? null : "href=\"{$file}?{$v['url']}\"");
  219. $class = ($array['op'] == $actived ? "class=\"current\"" : null);
  220. $lang = L($v['lang']);
  221. $linkstr .= sprintf('<li><a %s %s><span>%s</span></a></li>',$href,$class,$lang);
  222. }
  223. return "<ul class=\"tab-base\">{$linkstr}</ul>";
  224. }
  225. /**
  226. * 记录系统日志
  227. *
  228. * @param $lang 日志语言包
  229. * @param $state 1成功0失败null不出现成功失败提示
  230. * @param $admin_name
  231. * @param $admin_id
  232. */
  233. protected final function log($lang = '', $state = 1, $admin_name = '', $admin_id = 0){
  234. if (!C('sys_log') || !is_string($lang)) return;
  235. if ($admin_name == ''){
  236. $admin = unserialize(decrypt(cookie('sys_key'),MD5_KEY));
  237. $admin_name = $admin['name'];
  238. $admin_id = $admin['id'];
  239. }
  240. $data = array();
  241. if (is_null($state)){
  242. $state = null;
  243. }else{
  244. // $state = $state ? L('nc_succ') : L('nc_fail');
  245. $state = $state ? '' : L('nc_fail');
  246. }
  247. $data['content'] = $lang.$state;
  248. $data['admin_name'] = $admin_name;
  249. $data['createtime'] = time();
  250. $data['admin_id'] = $admin_id;
  251. $data['ip'] = getIp();
  252. $data['url'] = $_REQUEST['act'].'&'.$_REQUEST['op'];
  253. return Model('admin_log')->insert($data);
  254. }
  255. /**
  256. * 添加到任务队列
  257. *
  258. * @param array $goods_array
  259. * @param boolean $ifdel 是否删除以原记录
  260. */
  261. protected function addcron($data = array(), $ifdel = false) {
  262. $model_cron = Model('cron');
  263. if (isset($data[0])) { // 批量插入
  264. $where = array();
  265. foreach ($data as $k => $v) {
  266. if (isset($v['content'])) {
  267. $data[$k]['content'] = serialize($v['content']);
  268. }
  269. // 删除原纪录条件
  270. if ($ifdel) {
  271. $where[] = '(type = ' . $data['type'] . ' and exeid = ' . $data['exeid'] . ')';
  272. }
  273. }
  274. // 删除原纪录
  275. if ($ifdel) {
  276. $model_cron->delCron(implode(',', $where));
  277. }
  278. $model_cron->addCronAll($data);
  279. } else { // 单条插入
  280. if (isset($data['content'])) {
  281. $data['content'] = serialize($data['content']);
  282. }
  283. // 删除原纪录
  284. if ($ifdel) {
  285. $model_cron->delCron(array('type' => $data['type'], 'exeid' => $data['exeid']));
  286. }
  287. $model_cron->addCron($data);
  288. }
  289. }
  290. protected function scard_type(int $card_type)
  291. {
  292. if ($card_type == 1) { //中石油
  293. return '中石油';
  294. } elseif ($card_type == 2) { //中石化
  295. return '中石化';
  296. } elseif ($card_type == 4) { //中国移动
  297. return '中国移动';
  298. } elseif ($card_type == 5) { //中国联通
  299. return '中国联通';
  300. } elseif ($card_type == 6) { //中国电信
  301. return '中国电信';
  302. } elseif ($card_type == 7) { //中国电信
  303. return '增值业务';
  304. } else {
  305. return 'unknown';
  306. }
  307. }
  308. protected function quality_format($quality,$card_type) {
  309. $oil_text = [
  310. 1 => '无流水',
  311. 3 => '卡密',
  312. 5 => '有流水'
  313. ];
  314. $phone_text = [
  315. 1 => '普充',
  316. 2 => '快充',
  317. 3 => '卡密',
  318. 4 => '三方',
  319. 5 => '慢24',
  320. 6 => '慢6',
  321. 7 => '慢2',
  322. 8 => '慢48',
  323. 9 => '慢72'
  324. ];
  325. $text = [
  326. mtopcard\PetroChinaCard => $oil_text,
  327. mtopcard\SinopecCard => $oil_text,
  328. mtopcard\ChinaMobileCard => $phone_text,
  329. mtopcard\ChinaUnicomCard => $phone_text,
  330. mtopcard\ChinaTelecomCard => $phone_text
  331. ];
  332. return $text[$card_type][$quality] ?? $quality;
  333. }
  334. protected function elapse_time($seconds)
  335. {
  336. $minutes = intval($seconds / 60);
  337. $second = intval($seconds % 60);
  338. if ($minutes >= 60) {
  339. $minute = $minutes % 60;
  340. $hours = intval($minutes / 60);
  341. $result = "{$minute}m{$second}s";
  342. } elseif ($minutes > 0) {
  343. $result = "{$minutes}m{$second}s";
  344. } else {
  345. $result = "{$second}s";
  346. }
  347. if (isset($hours)) {
  348. $result = "{$hours}h{$minute}m";
  349. }
  350. return $result;
  351. }
  352. protected function check_fetch_order($order_sn): bool
  353. {
  354. $mod = Model('fetch_order');
  355. $cond['order_sn'] = $order_sn;
  356. $res = $mod->order_info($cond);
  357. return empty($res);
  358. }
  359. protected function merchants()
  360. {
  361. $items = Model('')->table('merchant')->limit(1000)->order('company_name asc')->select();
  362. foreach ($items as &$item) {
  363. $item['pinyin'] = Pinyin::getPinyin($item['company_name']);
  364. $item['alpha'] = substr($item['pinyin'],0,1);
  365. }
  366. $asc = function ($l,$r)
  367. {
  368. $lp = $l['pinyin'];
  369. $rp = $r['pinyin'];
  370. if(empty($lp) && empty($rp)) {
  371. $lo = $l['name'];
  372. $ro = $r['name'];
  373. return strcmp($lo,$ro);
  374. }
  375. else {
  376. return strcmp($lp,$rp);
  377. }
  378. };
  379. usort($items,$asc);
  380. return $items;
  381. }
  382. protected function providers($condition = [])
  383. {
  384. $items = Model('')->table('refill_provider,store')
  385. ->field('refill_provider.*,store.store_name')
  386. ->join('inner')
  387. ->on('store.store_id=refill_provider.store_id')
  388. ->where($condition)
  389. ->order('opened asc, name asc')
  390. ->limit(1000)
  391. ->select();
  392. foreach ($items as &$item) {
  393. $item['pinyin'] = Pinyin::getPinyin($item['store_name']);
  394. }
  395. $asc = function ($l,$r)
  396. {
  397. $lo = $l['opened'];
  398. $ro = $r['opened'];
  399. $lp = $l['pinyin'];
  400. $rp = $r['pinyin'];
  401. if($lo != $ro) {
  402. return $lo < $ro ? -1 : 1;
  403. }
  404. else {
  405. return strcmp($lp,$rp);
  406. }
  407. };
  408. usort($items,$asc);
  409. return $items;
  410. }
  411. protected function credit_save_money($money, $operatetype, $member_id, $bz = '')
  412. {
  413. $obj_member = Model('member');
  414. $member_id = intval($member_id);
  415. $member_info = $obj_member->getMemberInfo(['member_id' => $member_id], '*', true);
  416. $admininfo = $this->getAdminInfo();
  417. $bz = $bz == '' ? '管理员更改客户授信' : $bz;
  418. switch ($operatetype) {
  419. case 'add':
  420. $admin_act = "sys_add_money";
  421. $log_msg = "管理员【{$admininfo['name']}】操作会员{$member_id}余额:【{$member_info['member_name']}】,预存款【增加】,金额为{$money}。备注:{$bz}。";
  422. break;
  423. case 'del':
  424. $admin_act = "sys_del_money";
  425. $log_msg = "管理员【{$admininfo['name']}】操作会员{$member_id}余额:【{$member_info['member_name']}】,预存款【减少】,金额为{$money}。备注:{$bz}。";
  426. break;
  427. default:
  428. return [false, '调节类型错误'];
  429. }
  430. $model_pd = Model('predeposit');
  431. //调节预存款
  432. $data = [];
  433. $data['member_id'] = $member_info['member_id'];
  434. $data['member_name'] = $member_info['member_name'];
  435. $data['amount'] = $money;
  436. $data['order_sn'] = '';
  437. $data['admin_name'] = $admininfo['name'];
  438. $data['pdr_sn'] = '';
  439. $data['lg_desc'] = $bz;
  440. $isRefill = $model_pd->isRefill($data['member_id']);
  441. $model_pd->changePd($admin_act, $data,$isRefill);
  442. $this->log($log_msg, 1);
  443. return [true, 'success'];
  444. }
  445. }