143 lines
4.4 KiB
PHP
Executable File
143 lines
4.4 KiB
PHP
Executable File
<?php
|
||
namespace App\Core;
|
||
|
||
class WebBaseController extends BaseController {
|
||
|
||
protected function render($viewPath, $data = []) {
|
||
// 如果是绝对路径，直接使用
|
||
if (strpos($viewPath, '/') === 0 || preg_match('/^[a-zA-Z]:\\\\/', $viewPath)) {
|
||
$fullPath = $viewPath;
|
||
} else {
|
||
// 相对路径，按默认视图目录拼接
|
||
$viewsDir = __DIR__ . '/../views/';
|
||
$fullPath = $viewsDir . $viewPath;
|
||
}
|
||
|
||
if (!file_exists($fullPath)) {
|
||
throw new Exception("视图文件不存在: $fullPath");
|
||
}
|
||
|
||
extract($data);
|
||
|
||
if (
|
||
!empty($_SERVER['HTTP_X_REQUESTED_WITH']) &&
|
||
strtolower($_SERVER['HTTP_X_REQUESTED_WITH']) === 'xmlhttprequest'
|
||
) {
|
||
include $fullPath;
|
||
} else {
|
||
ob_start();
|
||
include $fullPath;
|
||
$Content = ob_get_clean();
|
||
|
||
include __DIR__ . '/../views/Web/index.php'; // 主后台模板
|
||
}
|
||
}
|
||
|
||
/**
|
||
* 检查前台用户登录状态
|
||
* 如果未登录，重定向到登录页面
|
||
*/
|
||
protected function checkWebLogin() {
|
||
if (session_status() === PHP_SESSION_NONE) {
|
||
session_start();
|
||
}
|
||
|
||
$timeout = isset($_SESSION['web_remember']) && $_SESSION['web_remember'] ? 604800 : 7200; // 记住我：7天，否则2小时
|
||
|
||
// 检查是否有用户ID
|
||
if (!isset($_SESSION['web_user_id'])) {
|
||
$this->redirectToLogin();
|
||
return;
|
||
}
|
||
|
||
// 提取 IP 前三段（IPv4）
|
||
function get_ip_prefix($ip, $segments = 3) {
|
||
if (empty($ip)) return '';
|
||
$parts = explode('.', $ip);
|
||
if (count($parts) < 4) return $ip; // IPv6 或其他格式，直接返回
|
||
return implode('.', array_slice($parts, 0, $segments));
|
||
}
|
||
|
||
// 宽松 IP 检查（只比对前三段，例如 192.168.1.xxx）
|
||
$currentIp = $_SERVER['REMOTE_ADDR'] ?? '';
|
||
$sessionIp = $_SESSION['web_ip'] ?? '';
|
||
|
||
if (!empty($currentIp) && !empty($sessionIp)) {
|
||
$current_ip_prefix = get_ip_prefix($currentIp, 3);
|
||
$session_ip_prefix = get_ip_prefix($sessionIp, 3);
|
||
|
||
if ($current_ip_prefix !== $session_ip_prefix) {
|
||
session_destroy();
|
||
$this->redirectToLogin();
|
||
return;
|
||
}
|
||
}
|
||
|
||
// User Agent 检查
|
||
$currentUa = $_SERVER['HTTP_USER_AGENT'] ?? '';
|
||
$sessionUa = $_SESSION['web_ua'] ?? '';
|
||
|
||
if (!empty($currentUa) && !empty($sessionUa) && $currentUa !== $sessionUa) {
|
||
session_destroy();
|
||
$this->redirectToLogin();
|
||
return;
|
||
}
|
||
|
||
// 会话超时检查
|
||
$lastActivity = $_SESSION['web_last_activity'] ?? 0;
|
||
if (time() - $lastActivity > $timeout) {
|
||
session_destroy();
|
||
$this->redirectToLogin();
|
||
return;
|
||
}
|
||
|
||
// 更新最后活动时间
|
||
$_SESSION['web_last_activity'] = time();
|
||
}
|
||
|
||
/**
|
||
* 重定向到登录页面
|
||
*/
|
||
private function redirectToLogin() {
|
||
$currentUrl = $_SERVER['REQUEST_URI'] ?? '/';
|
||
$loginUrl = '/login?redirect=' . urlencode($currentUrl);
|
||
|
||
if (
|
||
!empty($_SERVER['HTTP_X_REQUESTED_WITH']) &&
|
||
strtolower($_SERVER['HTTP_X_REQUESTED_WITH']) === 'xmlhttprequest'
|
||
) {
|
||
// AJAX 请求，返回 JSON
|
||
header('Content-Type: application/json');
|
||
echo json_encode([
|
||
'success' => false,
|
||
'redirect' => $loginUrl,
|
||
'message' => 'Phiên đăng nhập đã hết hạn, vui lòng đăng nhập lại!'
|
||
]);
|
||
} else {
|
||
// 普通请求，重定向
|
||
header('Location: ' . $loginUrl);
|
||
}
|
||
exit;
|
||
}
|
||
|
||
/**
|
||
* 获取当前登录用户ID
|
||
*/
|
||
protected function getCurrentUserId() {
|
||
if (session_status() === PHP_SESSION_NONE) {
|
||
session_start();
|
||
}
|
||
return $_SESSION['web_user_id'] ?? null;
|
||
}
|
||
|
||
/**
|
||
* 获取当前登录用户名
|
||
*/
|
||
protected function getCurrentUsername() {
|
||
if (session_status() === PHP_SESSION_NONE) {
|
||
session_start();
|
||
}
|
||
return $_SESSION['web_username'] ?? null;
|
||
}
|
||
}
|