molong/sentcms
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

代码格式化

Browse Source
This commit is contained in:
molong
2016-08-27 22:24:30 +08:00
parent db9e4b00e7
commit 1710eb742c
12 changed files with 418 additions and 395 deletions
Download Patch File Download Diff File Expand all files Collapse all files

164
application/common/controller/Admin.php
View File

@@ -8,48 +8,48 @@
// +----------------------------------------------------------------------
namespace app\common\controller;
use app\common\model\AuthRule;
use app\common\model\AuthGroup;
use app\common\model\AuthRule;
class Admin extends Base{
class Admin extends Base {
public function _initialize(){
public function _initialize() {
parent::_initialize();
if (!is_login() and !in_array($this->url,array('admin/index/login', 'admin/index/logout', 'admin/index/verify'))) {
if (!is_login() and !in_array($this->url, array('admin/index/login', 'admin/index/logout', 'admin/index/verify'))) {
$this->redirect('admin/index/login');
}
if (!in_array($this->url,array('admin/index/login', 'admin/index/logout', 'admin/index/verify'))) {
if (!in_array($this->url, array('admin/index/login', 'admin/index/logout', 'admin/index/verify'))) {
// 是否是超级管理员
define('IS_ROOT', is_administrator());
if(!IS_ROOT && \think\Config::get('admin_allow_ip')){
define('IS_ROOT', is_administrator());
if (!IS_ROOT && \think\Config::get('admin_allow_ip')) {
// 检查IP地址访问
if(!in_array(get_client_ip(),explode(',',\think\Config::get('admin_allow_ip')))){
if (!in_array(get_client_ip(), explode(',', \think\Config::get('admin_allow_ip')))) {
$this->error('403:禁止访问');
}
}
// 检测系统权限
if(!IS_ROOT){
$access = $this->accessControl();
if ( false === $access ) {
if (!IS_ROOT) {
$access = $this->accessControl();
if (false === $access) {
$this->error('403:禁止访问');
}elseif(null === $access ){
$dynamic = $this->checkDynamic();//检测分类栏目有关的各项动态权限
if( $dynamic === null ){
} elseif (null === $access) {
$dynamic = $this->checkDynamic(); //检测分类栏目有关的各项动态权限
if ($dynamic === null) {
//检测访问权限
if ( !$this->checkRule($this->url,array('in','1,2')) ){
if (!$this->checkRule($this->url, array('in', '1,2'))) {
$this->error('未授权访问!');
}else{
} else {
// 检测分类及内容有关的各项动态权限
$dynamic = $this->checkDynamic();
if( false === $dynamic ){
$dynamic = $this->checkDynamic();
if (false === $dynamic) {
$this->error('未授权访问!');
}
}
}elseif( $dynamic === false ){
} elseif ($dynamic === false) {
$this->error('未授权访问!');
}
}
@@ -61,18 +61,18 @@ class Admin extends Base{
}
/**
* 权限检测
* @param string $rule 检测的规则
* @param string $mode check模式
* @return boolean
* @author 朱亚杰 <xcoolcc@gmail.com>
*/
final protected function checkRule($rule, $type=AuthRule::rule_url, $mode='url'){
static $Auth = null;
* 权限检测
* @param string $rule 检测的规则
* @param string $mode check模式
* @return boolean
* @author 朱亚杰 <xcoolcc@gmail.com>
*/
final protected function checkRule($rule, $type = AuthRule::rule_url, $mode = 'url') {
static $Auth = null;
if (!$Auth) {
$Auth = new \com\Auth();
$Auth = new \com\Auth();
}
if(!$Auth->check($rule,session('user_auth.uid'),$type,$mode)){
if (!$Auth->check($rule, session('user_auth.uid'), $type, $mode)) {
return false;
}
return true;
@@ -87,11 +87,11 @@ class Admin extends Base{
*
* @author 朱亚杰 <xcoolcc@gmail.com>
*/
protected function checkDynamic(){
if(IS_ROOT){
return true;//管理员允许访问任何页面
protected function checkDynamic() {
if (IS_ROOT) {
return true; //管理员允许访问任何页面
}
return null;//不明,需checkRule
return null; //不明,需checkRule
}
/**
@@ -104,38 +104,39 @@ class Admin extends Base{
* 返回 **null**, 需要继续执行节点权限检测决定是否允许访问
* @author 朱亚杰 <xcoolcc@gmail.com>
*/
final protected function accessControl(){
final protected function accessControl() {
$allow = \think\Config::get('allow_visit');
$deny = \think\Config::get('deny_visit');
$check = strtolower($this->request->controller().'/'.$this->request->action());
if ( !empty($deny) && in_array_case($check,$deny) ) {
return false;//非超管禁止访问deny中的方法
$check = strtolower($this->request->controller() . '/' . $this->request->action());
if (!empty($deny) && in_array_case($check, $deny)) {
return false; //非超管禁止访问deny中的方法
}
if ( !empty($allow) && in_array_case($check,$allow) ) {
if (!empty($allow) && in_array_case($check, $allow)) {
return true;
}
return null;//需要检测节点权限
return null; //需要检测节点权限
}
protected function setMenu(){
$hover_url = $this->request->module().'/'.$this->request->controller();
protected function setMenu() {
$hover_url = $this->request->module() . '/' . $this->request->controller();
$controller = $this->url;
$menu = array(
$menu = array(
'main' => array(),
'child' => array(),
'child' => array(),
);
$where['pid'] = 0;
$where['hide'] = 0;
$where['type'] = 'admin';
if(!config('develop_mode')){ // 是否开发者模式
$where['is_dev'] = 0;
$where['pid'] = 0;
$where['hide'] = 0;
$where['type'] = 'admin';
if (!config('develop_mode')) {
// 是否开发者模式
$where['is_dev'] = 0;
}
$row = db('menu')->field('id,title,url,icon,"" as style')->where($where)->select();
foreach ($row as $key => $value) {
//此处用来做权限判断
if (!IS_ROOT && !$this->checkRule($value['url'],2,null) ) {
if (!IS_ROOT && !$this->checkRule($value['url'], 2, null)) {
unset($menu['main'][$value['id']]);
continue;//继续循环
continue; //继续循环
}
if ($controller == $value['url']) {
$value['style'] = "active";
@@ -145,39 +146,39 @@ class Admin extends Base{
// 查找当前子菜单
$pid = db('menu')->where("pid !=0 AND url like '%{$hover_url}%'")->value('pid');
$id = db('menu')->where("pid = 0 AND url like '%{$hover_url}%'")->value('id');
$id = db('menu')->where("pid = 0 AND url like '%{$hover_url}%'")->value('id');
$pid = $pid ? $pid : $id;
if ($hover_url == 'admin/content' || $hover_url == 'admin/attribute') {
//内容管理菜单
$pid = db('menu')->where("pid =0 AND url like '%admin/category%'")->value('id');
}
if ($pid) {
$map['pid'] = $pid;
$map['hide'] = 0;
$map['type'] = 'admin';
$row = db('menu')->field('id,title,url,icon,group,pid,"" as style')->where($map)->select();
$map['pid'] = $pid;
$map['hide'] = 0;
$map['type'] = 'admin';
$row = db('menu')->field('id,title,url,icon,group,pid,"" as style')->where($map)->select();
foreach ($row as $key => $value) {
if (IS_ROOT || $this->checkRule($value['url'],2,null) ) {
if (IS_ROOT || $this->checkRule($value['url'], 2, null)) {
if ($controller == $value['url']) {
$menu['main'][$value['pid']]['style'] = "active";
$value['style'] = "active";
$value['style'] = "active";
}
$menu['child'][$value['group']][] = $value;
}
}
}
$this->assign('__menu__',$menu);
$this->assign('__menu__', $menu);
}
protected function getContentMenu(){
protected function getContentMenu() {
$model = \think\Loader::model('Model');
$list = array();
$map = array(
'status' => array('gt',0),
'extend' => array('gt',0),
$list = array();
$map = array(
'status' => array('gt', 0),
'extend' => array('gt', 0),
);
$list = $model::where($map)->field("name,id,title,icon,'' as 'style'")->select();
//判断是否有模型权限
$models = AuthGroup::getAuthModels(session('user_auth.uid'));
foreach ($list as $key => $value) {
@@ -185,41 +186,40 @@ class Admin extends Base{
if ('admin/content/index' == $this->url && input('model_id') == $value['id']) {
$value['style'] = "active";
}
$value['url'] = "admin/content/index?model_id=".$value['id'];
$value['title'] = $value['title']."管理";
$value['icon'] = $value['icon'] ? $value['icon'] : 'file';
$menu[] = $value;
$value['url'] = "admin/content/index?model_id=" . $value['id'];
$value['title'] = $value['title'] . "管理";
$value['icon'] = $value['icon'] ? $value['icon'] : 'file';
$menu[] = $value;
}
}
if (!empty($menu)) {
$this->assign('extend_menu',array('内容管理'=>$menu));
$this->assign('extend_menu', array('内容管理' => $menu));
}
}
protected function getAddonsMenu(){
protected function getAddonsMenu() {
$model = db('Addons');
$list = array();
$map = array(
'status' => array('gt',0),
$list = array();
$map = array(
'status' => array('gt', 0),
);
$list = $model->field("name,id,title,'' as 'style'")->where($map)->select();
$menu = array();
foreach ($list as $key => $value) {
$class = "\\addons\\".strtolower($value['name'])."\\controller\\Admin";
if (is_file(ROOT_PATH . $class.".php")) {
$action = get_class_methods($class);
$value['url'] = "admin/addons/execute?mc=".strtolower($value['name'])."&ac=".$action[0];
$menu[$key] = $value;
$class = "\\addons\\" . strtolower($value['name']) . "\\controller\\Admin";
if (is_file(ROOT_PATH . $class . ".php")) {
$action = get_class_methods($class);
$value['url'] = "admin/addons/execute?mc=" . strtolower($value['name']) . "&ac=" . $action[0];
$menu[$key] = $value;
}
}
if (!empty($menu)) {
$this->assign('extend_menu',array('管理插件'=>$menu));
$this->assign('extend_menu', array('管理插件' => $menu));
}
}
protected function setMeta($title = ''){
$this->assign('meta_title',$title);
protected function setMeta($title = '') {
$this->assign('meta_title', $title);
}
}