360 lines
10 KiB
PHP
Executable File
360 lines
10 KiB
PHP
Executable File
<?php
|
||
namespace App\Controllers\Admin;
|
||
use App\Core\AdminBaseController;
|
||
use Db\Database;
|
||
|
||
class UserController extends AdminBaseController {
|
||
/**
|
||
* 构造函数 - 验证管理员权限
|
||
*/
|
||
public function __construct() {
|
||
$this->checkLogin();
|
||
}
|
||
|
||
|
||
/**
|
||
* 用户列表页面
|
||
*/
|
||
public function index() {
|
||
$this->checkAdmin();
|
||
$db = new Database();
|
||
// 只查询普通用户，排除管理员
|
||
$users = $db->select('users', '*', [
|
||
'role[!]' => 'admin',
|
||
'ORDER' => ['id' => 'DESC']
|
||
]);
|
||
$this->render('Admin/user.php', [
|
||
'users' => $users,
|
||
'title' => '用户管理'
|
||
]);
|
||
}
|
||
|
||
/**
|
||
* 获取单个用户数据（用于编辑和详情）
|
||
*/
|
||
public function get($id) {
|
||
header('Content-Type: application/json');
|
||
|
||
if (empty($id) || !is_numeric($id)) {
|
||
echo json_encode([
|
||
'success' => false,
|
||
'message' => '无效的用户ID'
|
||
]);
|
||
return;
|
||
}
|
||
|
||
$db = new Database();
|
||
$user = $db->get('users', '*', [
|
||
'id' => $id
|
||
]);
|
||
|
||
if ($user) {
|
||
// 移除密码字段，避免泄露
|
||
unset($user['password']);
|
||
|
||
echo json_encode([
|
||
'success' => true,
|
||
'data' => $user
|
||
]);
|
||
} else {
|
||
echo json_encode([
|
||
'success' => false,
|
||
'message' => '用户不存在'
|
||
]);
|
||
}
|
||
}
|
||
|
||
public function update() {
|
||
header('Content-Type: application/json');
|
||
|
||
$data = $_POST;
|
||
if (empty($data)) {
|
||
echo json_encode([
|
||
'success' => false,
|
||
'message' => '未接收到数据'
|
||
]);
|
||
return;
|
||
}
|
||
|
||
$db = new Database();
|
||
$id = isset($data['id']) ? (int)$data['id'] : 0;
|
||
$isEditMode = $id > 0;
|
||
|
||
$username = trim($data['username'] ?? '');
|
||
$email = trim($data['email'] ?? '');
|
||
$role = $data['role'] ?? 'user';
|
||
$status = isset($data['status']) ? (int)$data['status'] : 0;
|
||
|
||
if (empty($username) || empty($email)) {
|
||
echo json_encode([
|
||
'success' => false,
|
||
'message' => '用户名和邮箱不能为空'
|
||
]);
|
||
return;
|
||
}
|
||
|
||
if (!filter_var($email, FILTER_VALIDATE_EMAIL)) {
|
||
echo json_encode([
|
||
'success' => false,
|
||
'message' => '邮箱格式不正确'
|
||
]);
|
||
return;
|
||
}
|
||
|
||
// 统一查重（排除当前 ID）
|
||
$exists = $db->get('users', '*', [
|
||
'AND' => [
|
||
'OR' => [
|
||
'username' => $username,
|
||
'email' => $email
|
||
],
|
||
'id[!]' => $id
|
||
]
|
||
]);
|
||
|
||
if ($exists) {
|
||
if ($exists['username'] === $username) {
|
||
$msg = '用户名已存在';
|
||
} elseif ($exists['email'] === $email) {
|
||
$msg = '邮箱已被使用';
|
||
} else {
|
||
$msg = '用户名或邮箱已被占用';
|
||
}
|
||
echo json_encode([
|
||
'success' => false,
|
||
'message' => $msg
|
||
]);
|
||
return;
|
||
}
|
||
|
||
// 准备数据
|
||
$userData = [
|
||
'username' => $username,
|
||
'email' => $email,
|
||
'role' => $role,
|
||
'status' => $status,
|
||
'updated_at' => date('Y-m-d H:i:s')
|
||
];
|
||
|
||
try {
|
||
if ($isEditMode) {
|
||
// 如果密码不为空，更新密码
|
||
if (!empty($data['password'])) {
|
||
if (strlen($data['password']) < 8) {
|
||
echo json_encode([
|
||
'success' => false,
|
||
'message' => '密码长度至少8位'
|
||
]);
|
||
return;
|
||
}
|
||
$userData['password'] = password_hash($data['password'], PASSWORD_DEFAULT);
|
||
}
|
||
|
||
$db->update('users', $userData, ['id' => $id]);
|
||
$message = '用户更新成功';
|
||
} else {
|
||
// 新增时必须有密码
|
||
if (empty($data['password']) || strlen($data['password']) < 8) {
|
||
echo json_encode([
|
||
'success' => false,
|
||
'message' => '密码长度至少8位'
|
||
]);
|
||
return;
|
||
}
|
||
$userData['password'] = password_hash($data['password'], PASSWORD_DEFAULT);
|
||
$userData['created_at'] = date('Y-m-d H:i:s');
|
||
|
||
$id = $db->insert('users', $userData);
|
||
$message = '用户创建成功';
|
||
}
|
||
|
||
echo json_encode([
|
||
'success' => true,
|
||
'message' => $message,
|
||
'data' => ['id' => $id]
|
||
]);
|
||
} catch (\Exception $e) {
|
||
echo json_encode([
|
||
'success' => false,
|
||
'message' => '操作失败：' . $e->getMessage()
|
||
]);
|
||
}
|
||
}
|
||
|
||
|
||
/**
|
||
* 调整用户余额
|
||
*/
|
||
public function adjustBalance($id) {
|
||
header('Content-Type: application/json');
|
||
|
||
if (empty($id) || !is_numeric($id)) {
|
||
echo json_encode([
|
||
'success' => false,
|
||
'message' => '无效的用户ID'
|
||
]);
|
||
return;
|
||
}
|
||
|
||
$rawData = file_get_contents('php://input');
|
||
$data = json_decode($rawData, true);
|
||
|
||
if (json_last_error() !== JSON_ERROR_NONE) {
|
||
echo json_encode([
|
||
'success' => false,
|
||
'message' => '数据格式错误'
|
||
]);
|
||
return;
|
||
}
|
||
|
||
$amount = isset($data['amount']) ? floatval($data['amount']) : 0;
|
||
$action = $data['action'] ?? ''; // 'increase' or 'decrease'
|
||
|
||
if ($amount <= 0) {
|
||
echo json_encode([
|
||
'success' => false,
|
||
'message' => '金额必须大于0'
|
||
]);
|
||
return;
|
||
}
|
||
|
||
if (!in_array($action, ['increase', 'decrease'])) {
|
||
echo json_encode([
|
||
'success' => false,
|
||
'message' => '无效的操作类型'
|
||
]);
|
||
return;
|
||
}
|
||
|
||
$db = new Database();
|
||
|
||
// 获取当前用户信息
|
||
$user = $db->get('users', ['id', 'balance', 'username'], [
|
||
'id' => $id,
|
||
'role[!]' => 'admin' // 只能调整普通用户的余额
|
||
]);
|
||
|
||
if (!$user) {
|
||
echo json_encode([
|
||
'success' => false,
|
||
'message' => '用户不存在或无法操作'
|
||
]);
|
||
return;
|
||
}
|
||
|
||
$currentBalance = floatval($user['balance'] ?? 0);
|
||
$newBalance = $action === 'increase'
|
||
? $currentBalance + $amount
|
||
: $currentBalance - $amount;
|
||
|
||
// 检查减少后余额不能为负数
|
||
if ($newBalance < 0) {
|
||
echo json_encode([
|
||
'success' => false,
|
||
'message' => '余额不足，当前余额：' . number_format($currentBalance, 2)
|
||
]);
|
||
return;
|
||
}
|
||
|
||
try {
|
||
$db->medoo->pdo->beginTransaction();
|
||
|
||
// 更新用户余额
|
||
$db->update('users', [
|
||
'balance' => $newBalance,
|
||
'updated_at' => date('Y-m-d H:i:s')
|
||
], ['id' => $id]);
|
||
|
||
// 写入资金流水
|
||
// 修改这里：使用 manual_deposit 和 manual_withdraw 区分人工操作
|
||
$transactionType = $action === 'increase' ? 'manual_deposit' : 'manual_withdraw';
|
||
$transactionAmount = $action === 'increase' ? $amount : -$amount;
|
||
$description = $action === 'increase' ? '管理员手动增加余额' : '管理员手动减少余额';
|
||
|
||
$db->insert('transactions', [
|
||
'user_id' => $id,
|
||
'type' => $transactionType,
|
||
'amount' => $transactionAmount,
|
||
'balance_before' => $currentBalance,
|
||
'balance_after' => $newBalance,
|
||
'description' => $description,
|
||
'created_at' => date('Y-m-d H:i:s')
|
||
]);
|
||
|
||
$db->medoo->pdo->commit();
|
||
|
||
$actionText = $action === 'increase' ? '增加' : '减少';
|
||
echo json_encode([
|
||
'success' => true,
|
||
'message' => "余额{$actionText}成功",
|
||
'data' => [
|
||
'old_balance' => $currentBalance,
|
||
'new_balance' => $newBalance,
|
||
'amount' => $amount
|
||
]
|
||
]);
|
||
} catch (\Exception $e) {
|
||
$db->medoo->pdo->rollBack();
|
||
echo json_encode([
|
||
'success' => false,
|
||
'message' => '操作失败：' . $e->getMessage()
|
||
]);
|
||
}
|
||
}
|
||
|
||
/**
|
||
* 删除用户
|
||
*/
|
||
public function delete($id) {
|
||
header('Content-Type: application/json');
|
||
|
||
if (empty($id) || !is_numeric($id)) {
|
||
echo json_encode([
|
||
'success' => false,
|
||
'message' => '无效的用户ID'
|
||
]);
|
||
return;
|
||
}
|
||
|
||
// 禁止删除自己
|
||
session_start();
|
||
if ($id == $_SESSION['user_id']) {
|
||
echo json_encode([
|
||
'success' => false,
|
||
'message' => '不能删除当前登录用户'
|
||
]);
|
||
return;
|
||
}
|
||
|
||
$db = new Database();
|
||
$userExists = $db->get('users', 'id', [
|
||
'id' => $id
|
||
]);
|
||
|
||
if (!$userExists) {
|
||
echo json_encode([
|
||
'success' => false,
|
||
'message' => '用户不存在'
|
||
]);
|
||
return;
|
||
}
|
||
|
||
try {
|
||
$db->delete('users', [
|
||
'id' => $id
|
||
]);
|
||
|
||
echo json_encode([
|
||
'success' => true,
|
||
'message' => '用户已删除'
|
||
]);
|
||
} catch (\Exception $e) {
|
||
echo json_encode([
|
||
'success' => false,
|
||
'message' => '删除失败：' . $e->getMessage()
|
||
]);
|
||
}
|
||
}
|
||
|
||
}
|