yangwx
18101cf11a
安全（P0） - 发布包签名：新增 scripts/package_keygen.php、scripts/package_verify.php、 ywxapp\service\PackageVerifier；FrameworkService::apply() 解压前强制验签 （ywxapp.framework_package_verify，默认开启） - JWT 收紧：config/jwt.php 移除公开默认密钥，JwtService::assertStrongSecret() 校验非空 / 长度≥32 / 已知弱值；.env.production.example 键名由 JWT_SECRET_KEY 修正为 JWT_SECRET - /api/v1/Article：免登录白名单收窄为只读接口，写操作字段白名单 + assertOwner() 越权校验 - 开发者令牌：查找接口不再回显明文、统一失败文案 + 限流 - TemplateInstaller：文件名白名单 + realpath 归一化 + 目录内断言，修复 Zip Slip；补 use ZipArchive - 后台登录：接入验证码、失败锁定与登录限流（config/ratelimit.php） - 缓存 / Session 驱动可由 .env 覆盖（CACHE_DRIVER / SESSION_TYPE），集群部署改 redis - paycenter 支付日志开关改为 PAY_LOG，不再跟随 APP_DEBUG 工程化 / 交付 - 新增 CHANGELOG.md 与 .env.production.example；composer.lock 入库锁定依赖版本 - 插件离线安装 CLI 增加 --uid，后台上传安装透传 uid，付费插件授权校验可通过 - 授权拒绝文案区分「未携带 uid」与「未找到有效授权」，便于排障 - .gitignore 放行 .env.production.example / .env.addon.example / .gitattributes / public/.htaccess 结构 - appmall 由 addon/appmall 迁移为独立应用 app/appmall（市场 / 开发者中心 / 审核 / 分润）
198 lines
9.7 KiB
JavaScript
198 lines
9.7 KiB
JavaScript
layui.define(['form', 'table', 'http', 'auth'], function (exports) {
|
|
var $ = layui.jquery,
|
|
form = layui.form,
|
|
table = layui.table,
|
|
layer = layui.layer,
|
|
http = layui.http, laytpl = layui.laytpl
|
|
, auth = layui.auth;
|
|
var _savedPerms = (layui.data('backend').permission) || [];
|
|
auth.init(_savedPerms);
|
|
auth.setController('medal');
|
|
|
|
table.render({
|
|
elem: '#dataTable',
|
|
url: "index",
|
|
toolbar: '#tableBar',
|
|
defaultToolbar: ['filter', 'exports', 'print'],
|
|
parseData: function (res) {
|
|
return { code: res.code === 0 ? 0 : 1, msg: res.message || '', count: res.count || 0, data: res.data || [] };
|
|
},
|
|
cols: [[
|
|
{ type: "checkbox", width: 50 },
|
|
{ field: 'id', width: 80, title: 'ID', sort: true },
|
|
{ field: 'title', minWidth: 160, title: '勋章名称' },
|
|
{ field: 'sort', width: 100, title: '排序', sort: true },
|
|
{ field: 'status', width: 100, title: '状态', templet: '#statusTpl' },
|
|
{ field: 'create_time', width: 180, title: '创建时间' },
|
|
{ title: '操作', minWidth: 150, toolbar: '#dataBar', align: "center" }
|
|
]],
|
|
limits: [10, 15, 20, 25, 50, 100],
|
|
limit: 15,
|
|
page: true,
|
|
skin: 'line',
|
|
done: function () {
|
|
var view = $('#dataTable').next('.layui-table-view');
|
|
auth.filterDom(view);
|
|
auth.filterDom('.layui-btn[data-perm]');
|
|
}
|
|
});
|
|
|
|
form.on('submit(data-search-btn)', function (data) {
|
|
table.reload('dataTable', { page: { curr: 1 }, where: { title: data.field.title } });
|
|
return false;
|
|
});
|
|
$('#btn-reset').on('click', function () {
|
|
$('input[name=\"title\"]').val('');
|
|
table.reload('dataTable', { page: { curr: 1 }, where: { title: '' } });
|
|
});
|
|
|
|
table.on('toolbar(dataTable)', function (elem) {
|
|
switch (elem.event) {
|
|
case 'dataCreate': active.dataCreate({}); break;
|
|
case 'dataDelete':
|
|
var check = table.checkStatus('dataTable').data;
|
|
active.dataDelete(check.map(function (i) { return i.id; }));
|
|
break;
|
|
case 'dataRecybin': active.dataRecybin(); break;
|
|
}
|
|
});
|
|
table.on('tool(dataTable)', function (elem) {
|
|
var data = elem.data;
|
|
switch (elem.event) {
|
|
case 'update': active.dataEdit(data); break;
|
|
case 'delete': active.dataDelete([data.id]); break;
|
|
case 'grant': active.dataGrant(data); break;
|
|
}
|
|
});
|
|
|
|
form.on('switch(statusSwitch)', function (obj) {
|
|
var status = obj.elem.checked ? 1 : 0;
|
|
http.put('update', { id: this.value, status: status })
|
|
.then(function (res) {
|
|
if (res.code === 0) { layer.msg('操作成功'); }
|
|
else { layer.msg(res.msg || '操作失败'); }
|
|
table.reload('dataTable', {}, true);
|
|
})
|
|
.catch(function () { table.reload('dataTable', {}, true); });
|
|
});
|
|
|
|
var dataFromFun = function (data, callback, done) {
|
|
var title = data.id ? '编辑勋章中心' : '添加勋章中心';
|
|
var formHtml = laytpl($('#dataFormTpl').html()).render(data || {});
|
|
layer.open({
|
|
title: title, content: formHtml, anim: "slideLeft", offset: "r",
|
|
btnAlign: "l", area: [window.width > 768 ? '50%' : '99%', '99%'],
|
|
shade: 0.1, shadeClose: true, btn: ['确定', '取消'],
|
|
success: function (layero, index) { callback(layero, index); form.render(); },
|
|
yes: function (index, layero) {
|
|
window.layui.form.on('submit(wxapp-form-submit)', function (elem) {
|
|
done(layero, index, elem); layui.off('submit(wxapp-form)', 'from'); return false;
|
|
});
|
|
layero.contents().find("#wxapp-form-submit").trigger('click');
|
|
}
|
|
});
|
|
};
|
|
|
|
var active = {
|
|
dataDelete: function (ids, force) {
|
|
if (ids.length === 0) { return layer.msg('请选择数据'); }
|
|
layer.confirm('确定删除吗？' + (force ? '（彻底删除，不可恢复）' : '（可到回收站恢复）'), function (index) {
|
|
layer.close(index);
|
|
http.delete('delete', { ids: ids.join(','), force: force ? 1 : 0 })
|
|
.then(function (res) { if (res.code === 0) { table.reload('dataTable', {}, true); } else { layer.msg(res.msg || '操作失败'); } });
|
|
});
|
|
},
|
|
dataCreate: function (data) {
|
|
dataFromFun(data, function () {}, function (layero, index, elem) {
|
|
var field = elem.field;
|
|
if (field.status === undefined) field.status = 0;
|
|
field.status = field.status ? 1 : 0;
|
|
http.post('save', field).then(function (res) {
|
|
if (res.code === 0) { layer.close(index); table.reload('dataTable', {}, true); }
|
|
else { layer.msg(res.msg || '操作失败'); }
|
|
});
|
|
});
|
|
},
|
|
dataEdit: function (data) {
|
|
dataFromFun(data, function () {}, function (layero, index, elem) {
|
|
var field = elem.field;
|
|
field.status = field.status ? 1 : 0;
|
|
http.put('update', field).then(function (res) {
|
|
if (res.code === 0) { layer.close(index); table.reload('dataTable', {}, true); }
|
|
else { layer.msg(res.msg || '操作失败'); }
|
|
});
|
|
});
|
|
},
|
|
dataGrant: function (data) {
|
|
var formHtml = ''
|
|
+ '<div class="layui-form" style="padding:20px 30px;">'
|
|
+ '<div class="layui-form-item"><label class="layui-form-label">勋章</label>'
|
|
+ '<div class="layui-input-block"><input class="layui-input" value="' + (data.title || '') + '" disabled></div></div>'
|
|
+ '<div class="layui-form-item"><label class="layui-form-label">用户ID</label>'
|
|
+ '<div class="layui-input-block"><input class="layui-input" name="uid" id="grantUid" placeholder="输入要授予的用户UID" lay-verify="required"></div></div>'
|
|
+ '<div class="layui-form-item"><div class="layui-input-block"><button class="layui-btn" id="grantSubmit">确认授予</button></div></div>'
|
|
+ '</div>';
|
|
layer.open({
|
|
title: '授予勋章', content: formHtml, anim: 'slideLeft', offset: 'r',
|
|
area: ['420px', '320px'], shade: 0.1, shadeClose: true,
|
|
success: function (layero, index) {
|
|
$('#grantSubmit').on('click', function () {
|
|
var uid = parseInt($('#grantUid').val(), 10);
|
|
if (!uid || uid <= 0) { return layer.msg('请输入有效的用户ID'); }
|
|
http.post('grant', { uid: uid, medal_id: data.id }).then(function (res) {
|
|
if (res.code === 0) { layer.close(index); layer.msg(res.message || '授予成功', { icon: 1 }); }
|
|
else { layer.msg(res.message || '授予失败', { icon: 2 }); }
|
|
}).catch(function () { layer.msg('请求失败', { icon: 2 }); });
|
|
});
|
|
}
|
|
});
|
|
},
|
|
dataRecybin: function () {
|
|
var formHtml = laytpl($('#dataRecybinTpl').html()).render({});
|
|
layer.open({
|
|
title: '资源回收站', content: formHtml, anim: "slideLeft", offset: "r",
|
|
area: ['50%', '99%'], shade: 0.1, shadeClose: true,
|
|
success: function () {
|
|
table.render({
|
|
elem: '#dataRecybinTable', url: "recyclebin", height: 'full-120',
|
|
parseData: function (res) { return { code: res.code === 0 ? 0 : 1, msg: res.message || '', count: res.count || 0, data: res.data || [] }; },
|
|
cols: [[
|
|
{ type: 'checkbox', fixed: 'left' },
|
|
{ field: 'id', title: 'ID', width: 80, sort: true, fixed: 'left' },
|
|
{ field: 'title', title: '勋章名称', minWidth: 160, fixed: 'left' },
|
|
{ field: 'sort', title: '排序', width: 80 },
|
|
{ field: 'delete_at', title: '删除时间', width: 160 },
|
|
{ fixed: "right", title: "操作", width: 140, align: "center", toolbar: "#dataRecybinBarTpl" }
|
|
]],
|
|
page: true
|
|
});
|
|
}
|
|
});
|
|
},
|
|
dataRestore: function (data) {
|
|
http.put("restore", { ids: data.id }).then(function (res) {
|
|
if (res.code === 0) { layer.msg('恢复成功'); table.reload('dataRecybinTable', {}, true); table.reload('dataTable', {}, true); }
|
|
else { layer.msg(res.msg || '恢复失败'); }
|
|
});
|
|
},
|
|
dataForceDelete: function (data) {
|
|
layer.confirm('彻底删除后不可恢复，确定吗？', function (index) {
|
|
layer.close(index);
|
|
http.delete('delete', { ids: data.id, force: 1 }).then(function (res) {
|
|
if (res.code === 0) { layer.msg('已彻底删除'); table.reload('dataRecybinTable', {}, true); }
|
|
else { layer.msg(res.msg || '操作失败'); }
|
|
});
|
|
});
|
|
}
|
|
};
|
|
|
|
table.on('tool(dataRecybinTable)', function (elem) {
|
|
var data = elem.data;
|
|
switch (elem.event) {
|
|
case 'restore': active.dataRestore(data); break;
|
|
case 'forcedelete': active.dataForceDelete(data); break;
|
|
}
|
|
});
|
|
|
|
exports('medal', {});
|
|
}); |