阶段 0 完整版：名册 + 账号 + 安装向导 + 设置（宣纸主题）
这一版把「家」的地基铺完： 功能 - 安装向导 install.php：建四张表 → 建家庭 → 建第一人（兼管理员），装完自删； 「是否已装」以数据库四张表为准，不以文件是否存在为准 - 家庭名册：成员增删改查、头像上传（居中裁方 512×512 转 JPEG、finfo 校验、 随机文件名）、生日自动算年龄与倒数天数 - 敏感信息加密存储：手机号双写（SHA-256 哈希用于登录 + AES-256-CBC 密文用于显示）、 身份证只存密文；页面上永远只显示脱敏后的 138****8000 / 前 6 后 4 - 账号体系：人与账号分离（孩子可入名册但无需密码）、开通/停用/角色、 防爆破（5 次失败锁 60 秒）、修改密码、最后一个管理员不可移除 - 设置页：家庭名称与座右铭、加密密钥状态 - 宣纸主题 UI：砖红取自图标，扁平、留白充足；移动端顶栏收紧不换行 安全 - 所有 POST 走 CSRF；输出全量 e() 转义；uploads/ 禁执行脚本 - app/ 与 templates/ 加 .htaccess 整体拒绝直连（直接请求模板会 Fatal 并 把服务器绝对路径打在页面上 —— 这是线上真实抓到过的问题） - 已安装的 install.php 返回 404；display_errors 线上关闭 工程 - 无框架无 Composer，query-string 路由（index.php?r=模块/动作），不依赖 rewrite - 静态资源带 mtime+size 版本号，改版后浏览器不会吃旧缓存 - 配套部署与冒烟（_tooling/，不入库）：部署脚本容忍 tar 对非属主目录的 元数据回填失败；冒烟断言「状态码 + 正文无 PHP 错误 + </html> 收尾 + 无绝对路径泄露 + 断言总数下限」—— 只看状态码会把「200 但正文中间 Fatal」当成通过，这一版在线上真实抓到过一次
This commit is contained in:
@@ -0,0 +1,9 @@
|
||||
# app/ 里的文件只会被 PHP include，绝不允许被 Web 直接请求。
|
||||
# 一旦能被直接请求，缺上下文的执行会 Fatal，并把服务器绝对路径打到页面上（信息泄露）。
|
||||
<IfModule mod_authz_core.c>
|
||||
Require all denied
|
||||
</IfModule>
|
||||
<IfModule !mod_authz_core.c>
|
||||
Order allow,deny
|
||||
Deny from all
|
||||
</IfModule>
|
||||
@@ -0,0 +1,70 @@
|
||||
<?php
|
||||
/**
|
||||
* 登录账号。一个人最多一个账号，账号依附于「人」而存在。
|
||||
*/
|
||||
|
||||
declare(strict_types=1);
|
||||
|
||||
namespace App;
|
||||
|
||||
final class Account
|
||||
{
|
||||
public static function findByPerson(int $personId): ?array
|
||||
{
|
||||
$st = Database::get()->prepare('SELECT * FROM accounts WHERE person_id = ?');
|
||||
$st->execute([$personId]);
|
||||
$row = $st->fetch();
|
||||
return $row ?: null;
|
||||
}
|
||||
|
||||
public static function create(int $personId, string $password, string $role = 'member'): int
|
||||
{
|
||||
$st = Database::get()->prepare(
|
||||
'INSERT INTO accounts (person_id, password_hash, role) VALUES (?, ?, ?)'
|
||||
);
|
||||
$st->execute([$personId, password_hash($password, PASSWORD_DEFAULT), $role]);
|
||||
return (int)Database::get()->lastInsertId();
|
||||
}
|
||||
|
||||
public static function setPassword(int $accountId, string $password): void
|
||||
{
|
||||
Database::get()->prepare('UPDATE accounts SET password_hash = ? WHERE id = ?')
|
||||
->execute([password_hash($password, PASSWORD_DEFAULT), $accountId]);
|
||||
}
|
||||
|
||||
public static function setRole(int $accountId, string $role): void
|
||||
{
|
||||
Database::get()->prepare('UPDATE accounts SET role = ? WHERE id = ?')
|
||||
->execute([$role, $accountId]);
|
||||
}
|
||||
|
||||
public static function setStatus(int $accountId, string $status): void
|
||||
{
|
||||
Database::get()->prepare('UPDATE accounts SET status = ? WHERE id = ?')
|
||||
->execute([$status, $accountId]);
|
||||
}
|
||||
|
||||
/** 管理员不能被停用/降权 —— 否则全家人都会被锁在系统外面 */
|
||||
public static function adminCount(): int
|
||||
{
|
||||
$st = Database::get()->prepare(
|
||||
"SELECT COUNT(*) FROM accounts a
|
||||
JOIN persons p ON p.id = a.person_id
|
||||
WHERE a.role = 'admin' AND a.status = 'active'"
|
||||
);
|
||||
$st->execute();
|
||||
return (int)$st->fetchColumn();
|
||||
}
|
||||
|
||||
public static function validatePassword(string $password): array
|
||||
{
|
||||
$err = [];
|
||||
if (strlen($password) < 8) {
|
||||
$err[] = '密码至少 8 位';
|
||||
}
|
||||
if (!preg_match('/[0-9]/', $password) || !preg_match('/[A-Za-z]/', $password)) {
|
||||
$err[] = '密码要同时包含字母和数字';
|
||||
}
|
||||
return $err;
|
||||
}
|
||||
}
|
||||
+130
@@ -0,0 +1,130 @@
|
||||
<?php
|
||||
/**
|
||||
* 登录态与权限。
|
||||
*
|
||||
* 一个重要设计：**人（Person）≠ 账号（Account）**。
|
||||
* 六岁的孩子应该出现在家庭名册、照片、活动参与人里，但不必有密码。
|
||||
* 所以 person 可以先于 account 存在，将来再「开通账号」。
|
||||
*/
|
||||
|
||||
declare(strict_types=1);
|
||||
|
||||
namespace App;
|
||||
|
||||
final class Auth
|
||||
{
|
||||
public static function check(): bool
|
||||
{
|
||||
return !empty($_SESSION['account_id']);
|
||||
}
|
||||
|
||||
public static function id(): ?int
|
||||
{
|
||||
return isset($_SESSION['account_id']) ? (int)$_SESSION['account_id'] : null;
|
||||
}
|
||||
|
||||
public static function personId(): ?int
|
||||
{
|
||||
return isset($_SESSION['person_id']) ? (int)$_SESSION['person_id'] : null;
|
||||
}
|
||||
|
||||
public static function familyId(): ?int
|
||||
{
|
||||
return isset($_SESSION['family_id']) ? (int)$_SESSION['family_id'] : null;
|
||||
}
|
||||
|
||||
public static function name(): string
|
||||
{
|
||||
return $_SESSION['name'] ?? '';
|
||||
}
|
||||
|
||||
public static function isAdmin(): bool
|
||||
{
|
||||
return ($_SESSION['role'] ?? '') === 'admin';
|
||||
}
|
||||
|
||||
/** 未登录跳登录页 */
|
||||
public static function requireLogin(): void
|
||||
{
|
||||
if (!self::check()) {
|
||||
redirect('auth/login');
|
||||
}
|
||||
}
|
||||
|
||||
public static function requireAdmin(): void
|
||||
{
|
||||
self::requireLogin();
|
||||
if (!self::isAdmin()) {
|
||||
http_response_code(403);
|
||||
\App\View::render('error', [
|
||||
'title' => '没有权限',
|
||||
'message' => '这一页只有家庭管理员可以操作。',
|
||||
], 'home');
|
||||
exit;
|
||||
}
|
||||
}
|
||||
|
||||
/**
|
||||
* 手机号 + 密码登录。
|
||||
* 返回 true 表示成功并已写入会话。
|
||||
*/
|
||||
public static function login(string $phone, string $password): bool
|
||||
{
|
||||
// 简单节流：5 次失败后 60 秒内不再尝试。
|
||||
// 防爆破的关键不在判定多严，而在于「尝试次数有成本」。
|
||||
$fail = $_SESSION['login_fail'] ?? ['n' => 0, 't' => 0];
|
||||
if ($fail['n'] >= 5 && (time() - $fail['t']) < 60) {
|
||||
usleep(500000);
|
||||
return false;
|
||||
}
|
||||
|
||||
$hash = Crypto::hash($phone);
|
||||
$stmt = Database::get()->prepare(
|
||||
'SELECT a.id AS account_id, a.password_hash, a.role, a.status,
|
||||
p.id AS person_id, p.family_id, p.name, p.avatar
|
||||
FROM accounts a
|
||||
JOIN persons p ON p.id = a.person_id
|
||||
WHERE p.phone_hash = ? LIMIT 1'
|
||||
);
|
||||
$stmt->execute([$hash]);
|
||||
$row = $stmt->fetch();
|
||||
|
||||
if (!$row || $row['status'] !== 'active'
|
||||
|| !password_verify($password, (string)$row['password_hash'])) {
|
||||
$_SESSION['login_fail'] = ['n' => $fail['n'] + 1, 't' => time()];
|
||||
usleep(300000);
|
||||
return false;
|
||||
}
|
||||
|
||||
unset($_SESSION['login_fail']);
|
||||
session_regenerate_id(true);
|
||||
$_SESSION['account_id'] = (int)$row['account_id'];
|
||||
$_SESSION['person_id'] = (int)$row['person_id'];
|
||||
$_SESSION['family_id'] = (int)$row['family_id'];
|
||||
$_SESSION['name'] = $row['name'];
|
||||
$_SESSION['role'] = $row['role'];
|
||||
$_SESSION['avatar'] = $row['avatar'];
|
||||
|
||||
Database::get()->prepare('UPDATE accounts SET last_login_at = NOW() WHERE id = ?')
|
||||
->execute([$row['account_id']]);
|
||||
|
||||
return true;
|
||||
}
|
||||
|
||||
public static function logout(): void
|
||||
{
|
||||
$_SESSION = [];
|
||||
if (ini_get('session.use_cookies')) {
|
||||
$p = session_get_cookie_params();
|
||||
setcookie(session_name(), '', time() - 42000,
|
||||
$p['path'], $p['domain'], $p['secure'], $p['httponly']);
|
||||
}
|
||||
session_destroy();
|
||||
}
|
||||
|
||||
/** 头像改动后刷新会话里的缓存 */
|
||||
public static function refreshAvatar(string $avatar): void
|
||||
{
|
||||
$_SESSION['avatar'] = $avatar;
|
||||
}
|
||||
}
|
||||
+100
@@ -0,0 +1,100 @@
|
||||
<?php
|
||||
/**
|
||||
* 敏感字段加密。
|
||||
*
|
||||
* 身份证号、手机号这类个人信息，一律加密后再进库：
|
||||
* - 加密用 AES-256-CBC，密钥 = sha256(app_key)（app_key 是 32 位十六进制，
|
||||
* raw bytes 只有 16 字节，不够 256 位，所以必须再过一次 sha256）
|
||||
* - 手机号另存一份 sha256 明文哈希，专门用于「登录时按手机号查找」
|
||||
*
|
||||
* ⚠️ app_key 换掉，已有数据就再解开不了 —— 见 README 的备份说明。
|
||||
*/
|
||||
|
||||
declare(strict_types=1);
|
||||
|
||||
namespace App;
|
||||
|
||||
final class Crypto
|
||||
{
|
||||
private const CIPHER = 'aes-256-cbc';
|
||||
|
||||
private static function key(): string
|
||||
{
|
||||
$raw = $GLOBALS['config']['app_key'] ?? '';
|
||||
if ($raw === '' || strpos($raw, '请填写') === 0) {
|
||||
throw new \RuntimeException('config.php 里的 app_key 还没填写');
|
||||
}
|
||||
return hash('sha256', $raw, true);
|
||||
}
|
||||
|
||||
public static function encrypt(string $plain): string
|
||||
{
|
||||
if ($plain === '') {
|
||||
return '';
|
||||
}
|
||||
$iv = random_bytes(openssl_cipher_iv_length(self::CIPHER));
|
||||
$raw = openssl_encrypt($plain, self::CIPHER, self::key(), OPENSSL_RAW_DATA, $iv);
|
||||
if ($raw === false) {
|
||||
throw new \RuntimeException('加密失败');
|
||||
}
|
||||
return base64_encode($iv . $raw);
|
||||
}
|
||||
|
||||
/** 解密失败返回空串，不抛异常 —— 展示层宁可空白，也不让整页崩掉 */
|
||||
public static function decrypt(string $blob): string
|
||||
{
|
||||
if ($blob === '') {
|
||||
return '';
|
||||
}
|
||||
$data = base64_decode($blob, true);
|
||||
if ($data === false) {
|
||||
return '';
|
||||
}
|
||||
$len = openssl_cipher_iv_length(self::CIPHER);
|
||||
if (strlen($data) <= $len) {
|
||||
return '';
|
||||
}
|
||||
$iv = substr($data, 0, $len);
|
||||
$raw = substr($data, $len);
|
||||
$out = openssl_decrypt($raw, self::CIPHER, self::key(), OPENSSL_RAW_DATA, $iv);
|
||||
return $out === false ? '' : $out;
|
||||
}
|
||||
|
||||
/** 手机号 / 登录名查找用的哈希（确定性，不需要可逆） */
|
||||
public static function hash(string $plain): string
|
||||
{
|
||||
return hash('sha256', self::normalizePhone($plain));
|
||||
}
|
||||
|
||||
/** 去掉号码里的空格、横线、加号前缀，避免"138 0000 0000"和"13800000000"存成两个人 */
|
||||
public static function normalizePhone(string $phone): string
|
||||
{
|
||||
$p = preg_replace('/[\s\-()]/', '', trim($phone));
|
||||
return preg_replace('/^\+?86/', '', $p) === '' ? '' : preg_replace('/^\+?86/', '', $p);
|
||||
}
|
||||
|
||||
/** 掩码显示：手机保留前 3 后 4，身份证保留前 6 后 4 */
|
||||
public static function maskPhone(string $phone): string
|
||||
{
|
||||
$p = self::decrypt($phone);
|
||||
if ($p === '') {
|
||||
return '—';
|
||||
}
|
||||
$n = strlen($p);
|
||||
return $n <= 7 ? substr($p, 0, 1) . str_repeat('*', max($n - 1, 0))
|
||||
: substr($p, 0, 3) . '****' . substr($p, -4);
|
||||
}
|
||||
|
||||
public static function maskIdCard(string $blob): string
|
||||
{
|
||||
$c = self::decrypt($blob);
|
||||
if ($c === '') {
|
||||
return '—';
|
||||
}
|
||||
$n = strlen($c);
|
||||
if ($n <= 10) {
|
||||
return str_repeat('*', $n);
|
||||
}
|
||||
return substr($c, 0, 6) . str_repeat('*', $n - 10) . substr($c, -4);
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,54 @@
|
||||
<?php
|
||||
/**
|
||||
* 数据库：PDO 单例。
|
||||
* 只依赖 config.php 里的 db 配置，方言差异集中在这里。
|
||||
*/
|
||||
|
||||
declare(strict_types=1);
|
||||
|
||||
namespace App;
|
||||
|
||||
use PDO;
|
||||
|
||||
final class Database
|
||||
{
|
||||
/** @var PDO|null */
|
||||
private static $pdo = null;
|
||||
|
||||
public static function get(): PDO
|
||||
{
|
||||
if (self::$pdo instanceof PDO) {
|
||||
return self::$pdo;
|
||||
}
|
||||
$c = $GLOBALS['config']['db'];
|
||||
$dsn = sprintf(
|
||||
'mysql:host=%s;port=%d;dbname=%s;charset=%s',
|
||||
$c['host'],
|
||||
$c['port'],
|
||||
$c['name'],
|
||||
$c['charset']
|
||||
);
|
||||
self::$pdo = new PDO($dsn, $c['user'], $c['pass'], [
|
||||
PDO::ATTR_ERRMODE => PDO::ERRMODE_EXCEPTION,
|
||||
PDO::ATTR_DEFAULT_FETCH_MODE => PDO::FETCH_ASSOC,
|
||||
PDO::ATTR_EMULATE_PREPARES => false,
|
||||
]);
|
||||
return self::$pdo;
|
||||
}
|
||||
|
||||
/** 表是否存在（安装判定用，不依赖异常） */
|
||||
public static function hasTables(): bool
|
||||
{
|
||||
try {
|
||||
$st = self::get()->prepare(
|
||||
'SELECT COUNT(*) FROM information_schema.tables
|
||||
WHERE table_schema = DATABASE() AND table_name IN
|
||||
(\'families\',\'persons\',\'accounts\',\'settings\')'
|
||||
);
|
||||
$st->execute();
|
||||
return (int)$st->fetchColumn() === 4;
|
||||
} catch (\Throwable $e) {
|
||||
return false;
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,41 @@
|
||||
<?php
|
||||
/**
|
||||
* 家庭：数据空间的根，所有名册条目都挂在它下面。
|
||||
*/
|
||||
|
||||
declare(strict_types=1);
|
||||
|
||||
namespace App;
|
||||
|
||||
final class Family
|
||||
{
|
||||
public static function find(int $id): ?array
|
||||
{
|
||||
$st = Database::get()->prepare('SELECT * FROM families WHERE id = ?');
|
||||
$st->execute([$id]);
|
||||
$row = $st->fetch();
|
||||
return $row ?: null;
|
||||
}
|
||||
|
||||
public static function create(string $name, string $motto = ''): int
|
||||
{
|
||||
$st = Database::get()->prepare('INSERT INTO families (name, motto) VALUES (?, ?)');
|
||||
$st->execute([$name, $motto !== '' ? $motto : null]);
|
||||
return (int)Database::get()->lastInsertId();
|
||||
}
|
||||
|
||||
public static function update(int $id, string $name, string $motto = ''): void
|
||||
{
|
||||
$st = Database::get()->prepare('UPDATE families SET name = ?, motto = ? WHERE id = ?');
|
||||
$st->execute([$name, $motto !== '' ? $motto : null, $id]);
|
||||
}
|
||||
|
||||
public static function countMembers(int $familyId): int
|
||||
{
|
||||
$st = Database::get()->prepare(
|
||||
"SELECT COUNT(*) FROM persons WHERE family_id = ? AND kind = 'member'"
|
||||
);
|
||||
$st->execute([$familyId]);
|
||||
return (int)$st->fetchColumn();
|
||||
}
|
||||
}
|
||||
+189
@@ -0,0 +1,189 @@
|
||||
<?php
|
||||
/**
|
||||
* 家庭名册（家庭成员 + 将来的外部联系人共用一张表）。
|
||||
*
|
||||
* 之所以不拆成两张表：两者字段几乎一样；而且需要互相转换 ——
|
||||
* 一个「认识的人」随时可能变成家庭成员，一个家庭成员也可能只作为联系人存在。
|
||||
*/
|
||||
|
||||
declare(strict_types=1);
|
||||
|
||||
namespace App;
|
||||
|
||||
final class Person
|
||||
{
|
||||
/** 名册列表（连带账号信息，用于显示「是否已开通登录」） */
|
||||
public static function all(int $familyId, string $q = '', string $kind = 'member'): array
|
||||
{
|
||||
$sql = 'SELECT p.*, a.id AS account_id, a.role AS account_role, a.status AS account_status,
|
||||
a.last_login_at
|
||||
FROM persons p
|
||||
LEFT JOIN accounts a ON a.person_id = p.id
|
||||
WHERE p.family_id = ? AND p.kind = ?';
|
||||
$args = [$familyId, $kind];
|
||||
if ($q !== '') {
|
||||
$sql .= ' AND (p.name LIKE ? OR p.nickname LIKE ? OR p.email LIKE ?)';
|
||||
$like = '%' . $q . '%';
|
||||
$args[] = $like;
|
||||
$args[] = $like;
|
||||
$args[] = $like;
|
||||
}
|
||||
$sql .= ' ORDER BY p.sort_order ASC, p.id ASC';
|
||||
$st = Database::get()->prepare($sql);
|
||||
$st->execute($args);
|
||||
return $st->fetchAll();
|
||||
}
|
||||
|
||||
public static function find(int $id): ?array
|
||||
{
|
||||
$st = Database::get()->prepare('SELECT * FROM persons WHERE id = ?');
|
||||
$st->execute([$id]);
|
||||
$row = $st->fetch();
|
||||
return $row ?: null;
|
||||
}
|
||||
|
||||
/** 带账号信息的详情（详情页用） */
|
||||
public static function findWithAccount(int $id): ?array
|
||||
{
|
||||
$st = Database::get()->prepare(
|
||||
'SELECT p.*, a.id AS account_id, a.role AS account_role,
|
||||
a.status AS account_status, a.last_login_at
|
||||
FROM persons p LEFT JOIN accounts a ON a.person_id = p.id
|
||||
WHERE p.id = ?'
|
||||
);
|
||||
$st->execute([$id]);
|
||||
$row = $st->fetch();
|
||||
return $row ?: null;
|
||||
}
|
||||
|
||||
public static function findByPhoneHash(string $hash): ?array
|
||||
{
|
||||
$st = Database::get()->prepare('SELECT * FROM persons WHERE phone_hash = ? LIMIT 1');
|
||||
$st->execute([$hash]);
|
||||
$row = $st->fetch();
|
||||
return $row ?: null;
|
||||
}
|
||||
|
||||
/**
|
||||
* 新增。手机号是敏感字段，进来就加密 + 哈希。
|
||||
* @return int 新 id
|
||||
*/
|
||||
public static function create(int $familyId, array $d): int
|
||||
{
|
||||
$phone = $d['phone'] ?? '';
|
||||
$sql = 'INSERT INTO persons
|
||||
(family_id, kind, name, nickname, gender, birthday, avatar,
|
||||
phone_hash, phone_encrypted, id_card_encrypted, email, address, note, sort_order)
|
||||
VALUES (?,?,?,?,?,?,?,?,?,?,?,?,?,?)';
|
||||
$st = Database::get()->prepare($sql);
|
||||
$st->execute([
|
||||
$familyId,
|
||||
$d['kind'] ?? 'member',
|
||||
$d['name'],
|
||||
$d['nickname'] !== '' ? $d['nickname'] : null,
|
||||
$d['gender'] !== '' ? $d['gender'] : null,
|
||||
$d['birthday'] !== '' ? $d['birthday'] : null,
|
||||
$d['avatar'] !== '' ? $d['avatar'] : null,
|
||||
$phone !== '' ? Crypto::hash($phone) : null,
|
||||
$phone !== '' ? Crypto::encrypt($phone) : null,
|
||||
($d['id_card'] ?? '') !== '' ? Crypto::encrypt($d['id_card']) : null,
|
||||
$d['email'] !== '' ? $d['email'] : null,
|
||||
$d['address'] !== '' ? $d['address'] : null,
|
||||
$d['note'] !== '' ? $d['note'] : null,
|
||||
(int)($d['sort_order'] ?? 1000),
|
||||
]);
|
||||
return (int)Database::get()->lastInsertId();
|
||||
}
|
||||
|
||||
public static function update(int $id, array $d): void
|
||||
{
|
||||
$phone = $d['phone'] ?? '';
|
||||
$sql = 'UPDATE persons SET
|
||||
name = ?, nickname = ?, gender = ?, birthday = ?, avatar = ?,
|
||||
phone_hash = ?, phone_encrypted = ?, id_card_encrypted = ?,
|
||||
email = ?, address = ?, note = ?, sort_order = ?
|
||||
WHERE id = ?';
|
||||
Database::get()->prepare($sql)->execute([
|
||||
$d['name'],
|
||||
$d['nickname'] !== '' ? $d['nickname'] : null,
|
||||
$d['gender'] !== '' ? $d['gender'] : null,
|
||||
$d['birthday'] !== '' ? $d['birthday'] : null,
|
||||
$d['avatar'] !== '' ? $d['avatar'] : null,
|
||||
$phone !== '' ? Crypto::hash($phone) : null,
|
||||
$phone !== '' ? Crypto::encrypt($phone) : null,
|
||||
($d['id_card'] ?? '') !== '' ? Crypto::encrypt($d['id_card']) : null,
|
||||
$d['email'] !== '' ? $d['email'] : null,
|
||||
$d['address'] !== '' ? $d['address'] : null,
|
||||
$d['note'] !== '' ? $d['note'] : null,
|
||||
(int)($d['sort_order'] ?? 1000),
|
||||
$id,
|
||||
]);
|
||||
}
|
||||
|
||||
/** 只改头像（上传后单独调用，避免整条记录被表单覆盖） */
|
||||
public static function setAvatar(int $id, ?string $avatar): void
|
||||
{
|
||||
Database::get()->prepare('UPDATE persons SET avatar = ? WHERE id = ?')
|
||||
->execute([$avatar, $id]);
|
||||
}
|
||||
|
||||
public static function delete(int $id): void
|
||||
{
|
||||
Database::get()->prepare('DELETE FROM persons WHERE id = ?')->execute([$id]);
|
||||
}
|
||||
|
||||
/**
|
||||
* 最近要过生日的人（首页用）。
|
||||
* 直接算「今天是今年的第几天」与生日的差值，跨年自动处理。
|
||||
*/
|
||||
public static function upcomingBirthdays(int $familyId, int $withinDays = 60): array
|
||||
{
|
||||
$st = Database::get()->prepare(
|
||||
"SELECT id, name, avatar, birthday FROM persons
|
||||
WHERE family_id = ? AND kind = 'member' AND birthday IS NOT NULL
|
||||
ORDER BY DAYOFYEAR(birthday)"
|
||||
);
|
||||
$st->execute([$familyId]);
|
||||
$rows = $st->fetchAll();
|
||||
|
||||
$out = [];
|
||||
foreach ($rows as $r) {
|
||||
$days = days_until_birthday($r['birthday']);
|
||||
if ($days !== null && $days <= $withinDays) {
|
||||
$r['days_left'] = $days;
|
||||
$out[] = $r;
|
||||
}
|
||||
}
|
||||
usort($out, function ($a, $b) {
|
||||
return $a['days_left'] <=> $b['days_left'];
|
||||
});
|
||||
return $out;
|
||||
}
|
||||
|
||||
/** 校验表单，返回错误数组（空数组表示通过） */
|
||||
public static function validate(array $d): array
|
||||
{
|
||||
$err = [];
|
||||
if (trim((string)($d['name'] ?? '')) === '') {
|
||||
$err['name'] = '姓名不能为空';
|
||||
}
|
||||
$phone = trim((string)($d['phone'] ?? ''));
|
||||
if ($phone !== '' && !preg_match('/^\+?[0-9\-]{6,20}$/', $phone)) {
|
||||
$err['phone'] = '手机号格式看起来不对';
|
||||
}
|
||||
$email = trim((string)($d['email'] ?? ''));
|
||||
if ($email !== '' && !filter_var($email, FILTER_VALIDATE_EMAIL)) {
|
||||
$err['email'] = '邮箱格式看起来不对';
|
||||
}
|
||||
$b = trim((string)($d['birthday'] ?? ''));
|
||||
if ($b !== '' && !preg_match('/^\d{4}-\d{2}-\d{2}$/', $b)) {
|
||||
$err['birthday'] = '生日请按 年-月-日 填写';
|
||||
}
|
||||
// 身份证号只做很松的校验：家庭场景里要不要存它，本来就值得三思
|
||||
$idc = trim((string)($d['id_card'] ?? ''));
|
||||
if ($idc !== '' && !preg_match('/^[0-9Xx]{15,18}$/', $idc)) {
|
||||
$err['id_card'] = '身份证号应为 15 或 18 位';
|
||||
}
|
||||
return $err;
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,81 @@
|
||||
<?php
|
||||
/**
|
||||
* 建表语句（安装向导与 tests 共用同一份）。
|
||||
*
|
||||
* 四条约定：
|
||||
* 1. 全部 IF NOT EXISTS —— 重复执行不破坏已有数据
|
||||
* 2. 字符集一律 utf8mb4_unicode_ci，emoji 与人名生僻字都不会乱码
|
||||
* 3. 一切业务数据挂在 family_id 下，将来要支持多个家庭也不必改模型
|
||||
* 4. 手机号存两份：phone_hash 用于登录查找（确定性哈希），phone_encrypted 用于展示
|
||||
*/
|
||||
|
||||
declare(strict_types=1);
|
||||
|
||||
namespace App;
|
||||
|
||||
final class Schema
|
||||
{
|
||||
/** @return string[] */
|
||||
public static function statements(): array
|
||||
{
|
||||
return [
|
||||
<<<'SQL'
|
||||
CREATE TABLE IF NOT EXISTS `families` (
|
||||
`id` INT UNSIGNED NOT NULL AUTO_INCREMENT,
|
||||
`name` VARCHAR(100) NOT NULL COMMENT '家庭名称',
|
||||
`motto` VARCHAR(200) DEFAULT NULL COMMENT '一句话，展示在首页',
|
||||
`created_at` DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP,
|
||||
PRIMARY KEY (`id`)
|
||||
) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4 COLLATE=utf8mb4_unicode_ci COMMENT='家庭空间（一切数据的根）'
|
||||
SQL,
|
||||
<<<'SQL'
|
||||
CREATE TABLE IF NOT EXISTS `persons` (
|
||||
`id` INT UNSIGNED NOT NULL AUTO_INCREMENT,
|
||||
`family_id` INT UNSIGNED NOT NULL,
|
||||
`kind` ENUM('member','contact') NOT NULL DEFAULT 'member' COMMENT '家庭成员 / 外部联系人',
|
||||
`name` VARCHAR(50) NOT NULL COMMENT '姓名',
|
||||
`nickname` VARCHAR(50) DEFAULT NULL COMMENT '小名',
|
||||
`gender` ENUM('m','f','x') DEFAULT NULL COMMENT '男 / 女 / 未填写',
|
||||
`birthday` DATE DEFAULT NULL COMMENT '生日（自动生成日历上的生日日程用）',
|
||||
`avatar` VARCHAR(255) DEFAULT NULL COMMENT '头像，相对于 uploads/avatars',
|
||||
`phone_hash` CHAR(64) DEFAULT NULL COMMENT '手机号 sha256，登录查找用；NULL 不参与唯一约束',
|
||||
`phone_encrypted` VARCHAR(512) DEFAULT NULL COMMENT 'AES 加密的手机号',
|
||||
`id_card_encrypted` VARCHAR(512) DEFAULT NULL COMMENT 'AES 加密的身份证号',
|
||||
`email` VARCHAR(120) DEFAULT NULL,
|
||||
`address` VARCHAR(200) DEFAULT NULL,
|
||||
`note` TEXT DEFAULT NULL COMMENT '备注',
|
||||
`sort_order` INT NOT NULL DEFAULT 1000 COMMENT '名册排序，小的在前',
|
||||
`created_at` DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP,
|
||||
`updated_at` DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP ON UPDATE CURRENT_TIMESTAMP,
|
||||
PRIMARY KEY (`id`),
|
||||
UNIQUE KEY `uk_phone_hash` (`phone_hash`),
|
||||
KEY `idx_family_kind` (`family_id`, `kind`, `sort_order`),
|
||||
CONSTRAINT `fk_persons_family` FOREIGN KEY (`family_id`) REFERENCES `families` (`id`) ON DELETE CASCADE
|
||||
) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4 COLLATE=utf8mb4_unicode_ci COMMENT='家庭名册'
|
||||
SQL,
|
||||
<<<'SQL'
|
||||
CREATE TABLE IF NOT EXISTS `accounts` (
|
||||
`id` INT UNSIGNED NOT NULL AUTO_INCREMENT,
|
||||
`person_id` INT UNSIGNED NOT NULL COMMENT '一个人最多一个账号',
|
||||
`password_hash` VARCHAR(255) NOT NULL,
|
||||
`role` ENUM('admin','member') NOT NULL DEFAULT 'member' COMMENT '管理员 / 普通成员',
|
||||
`status` ENUM('active','disabled') NOT NULL DEFAULT 'active',
|
||||
`last_login_at` DATETIME DEFAULT NULL,
|
||||
`created_at` DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP,
|
||||
PRIMARY KEY (`id`),
|
||||
UNIQUE KEY `uk_account_person` (`person_id`),
|
||||
CONSTRAINT `fk_accounts_person` FOREIGN KEY (`person_id`) REFERENCES `persons` (`id`) ON DELETE CASCADE
|
||||
) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4 COLLATE=utf8mb4_unicode_ci COMMENT='登录账号'
|
||||
SQL,
|
||||
<<<'SQL'
|
||||
CREATE TABLE IF NOT EXISTS `settings` (
|
||||
`family_id` INT UNSIGNED NOT NULL,
|
||||
`k` VARCHAR(64) NOT NULL,
|
||||
`v` TEXT DEFAULT NULL,
|
||||
PRIMARY KEY (`family_id`, `k`),
|
||||
CONSTRAINT `fk_settings_family` FOREIGN KEY (`family_id`) REFERENCES `families` (`id`) ON DELETE CASCADE
|
||||
) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4 COLLATE=utf8mb4_unicode_ci COMMENT='家庭级键值对设置'
|
||||
SQL,
|
||||
];
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,28 @@
|
||||
<?php
|
||||
/**
|
||||
* 家庭级键值对设置。
|
||||
*/
|
||||
|
||||
declare(strict_types=1);
|
||||
|
||||
namespace App;
|
||||
|
||||
final class Setting
|
||||
{
|
||||
public static function get(int $familyId, string $key, $default = null)
|
||||
{
|
||||
$st = Database::get()->prepare('SELECT v FROM settings WHERE family_id = ? AND k = ?');
|
||||
$st->execute([$familyId, $key]);
|
||||
$v = $st->fetchColumn();
|
||||
return $v === false ? $default : $v;
|
||||
}
|
||||
|
||||
public static function set(int $familyId, string $key, string $value): void
|
||||
{
|
||||
$st = Database::get()->prepare(
|
||||
'INSERT INTO settings (family_id, k, v) VALUES (?, ?, ?)
|
||||
ON DUPLICATE KEY UPDATE v = VALUES(v)'
|
||||
);
|
||||
$st->execute([$familyId, $key, $value]);
|
||||
}
|
||||
}
|
||||
+105
@@ -0,0 +1,105 @@
|
||||
<?php
|
||||
/**
|
||||
* 头像上传：裁成正方形、缩到 512×512、转成 JPEG 落盘。
|
||||
*
|
||||
* 安全要点：
|
||||
* - 用 finfo 判断真实 MIME，不信浏览器给的扩展名
|
||||
* - 文件名随机，绝不使用用户提供的名字（防路径穿越与扩展名绕过）
|
||||
* - 只写进 uploads/avatars/，该目录有 .htaccess 禁止执行脚本
|
||||
*/
|
||||
|
||||
declare(strict_types=1);
|
||||
|
||||
namespace App;
|
||||
|
||||
final class Upload
|
||||
{
|
||||
private const MAX_BYTES = 5 * 1024 * 1024;
|
||||
private const SIZE = 512;
|
||||
|
||||
/** @return array{ok:bool,file?:string,error?:string} */
|
||||
public static function avatar(array $file): array
|
||||
{
|
||||
if (!isset($file['error']) || is_array($file['error'])) {
|
||||
return ['ok' => false, 'error' => '上传参数不对'];
|
||||
}
|
||||
switch ($file['error']) {
|
||||
case UPLOAD_ERR_OK:
|
||||
break;
|
||||
case UPLOAD_ERR_NO_FILE:
|
||||
return ['ok' => false, 'error' => ''];
|
||||
case UPLOAD_ERR_INI_SIZE:
|
||||
case UPLOAD_ERR_FORM_SIZE:
|
||||
return ['ok' => false, 'error' => '图片太大了（上限 5MB）'];
|
||||
default:
|
||||
return ['ok' => false, 'error' => '上传失败（错误码 ' . (int)$file['error'] . '）'];
|
||||
}
|
||||
|
||||
if ($file['size'] > self::MAX_BYTES) {
|
||||
return ['ok' => false, 'error' => '图片太大了（上限 5MB）'];
|
||||
}
|
||||
|
||||
$finfo = new \finfo(FILEINFO_MIME_TYPE);
|
||||
$mime = $finfo->file($file['tmp_name']);
|
||||
$allow = ['image/jpeg' => 'imagecreatefromjpeg', 'image/png' => 'imagecreatefrompng',
|
||||
'image/gif' => 'imagecreatefromgif', 'image/webp' => 'imagecreatefromwebp'];
|
||||
if (!isset($allow[$mime])) {
|
||||
return ['ok' => false, 'error' => '只支持 JPG / PNG / GIF / WebP 图片'];
|
||||
}
|
||||
|
||||
$src = $allow[$mime]($file['tmp_name']);
|
||||
if (!$src) {
|
||||
return ['ok' => false, 'error' => '图片读不出来'];
|
||||
}
|
||||
|
||||
$w = imagesx($src);
|
||||
$h = imagesy($src);
|
||||
// 居中裁成正方形
|
||||
$side = min($w, $h);
|
||||
$sx = (int)(($w - $side) / 2);
|
||||
$sy = (int)(($h - $side) / 2);
|
||||
|
||||
$canvas = imagecreatetruecolor(self::SIZE, self::SIZE);
|
||||
// PNG/GIF 的透明区转成纸白，不然头像会是黑底
|
||||
$bg = imagecolorallocate($canvas, 253, 251, 245);
|
||||
imagefilledrectangle($canvas, 0, 0, self::SIZE, self::SIZE, $bg);
|
||||
imagecopyresampled($canvas, $src, 0, 0, $sx, $sy, self::SIZE, self::SIZE, $side, $side);
|
||||
|
||||
$dir = FB_UPLOADS . '/avatars';
|
||||
if (!is_dir($dir)) {
|
||||
mkdir($dir, 0755, true);
|
||||
}
|
||||
$name = bin2hex(random_bytes(12)) . '.jpg';
|
||||
if (!imagejpeg($canvas, $dir . '/' . $name, 88)) {
|
||||
imagedestroy($canvas);
|
||||
imagedestroy($src);
|
||||
return ['ok' => false, 'error' => '保存失败'];
|
||||
}
|
||||
imagedestroy($canvas);
|
||||
imagedestroy($src);
|
||||
|
||||
return ['ok' => true, 'file' => 'avatars/' . $name];
|
||||
}
|
||||
|
||||
/** 头像访问地址（无头像时回退到内置剪影，保证永远不出现破图） */
|
||||
public static function avatarUrl(?string $rel): string
|
||||
{
|
||||
if ($rel && is_file(FB_UPLOADS . '/' . $rel)) {
|
||||
$p = FB_UPLOADS . '/' . $rel;
|
||||
// 注意：filemtime() 返回 int，本文件开了 strict_types，直接喂给 md5() 会 TypeError
|
||||
return 'uploads/' . $rel . '?v=' . substr(md5(filemtime($p) . filesize($p)), 0, 8);
|
||||
}
|
||||
return asset('/assets/avatar-default.svg');
|
||||
}
|
||||
|
||||
public static function remove(?string $rel): void
|
||||
{
|
||||
if (!$rel) {
|
||||
return;
|
||||
}
|
||||
$p = FB_UPLOADS . '/' . $rel;
|
||||
if (is_file($p)) {
|
||||
@unlink($p);
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,42 @@
|
||||
<?php
|
||||
/**
|
||||
* 视图渲染。
|
||||
*
|
||||
* 流程：render() 把数据展开 → 把「本页模板文件路径 / 当前页标识 / 标题」交给
|
||||
* layout.php → layout 在正文位置 require 本页模板。
|
||||
*/
|
||||
|
||||
declare(strict_types=1);
|
||||
|
||||
namespace App;
|
||||
|
||||
final class View
|
||||
{
|
||||
public static function render(string $tpl, array $data = [], string $page = ''): void
|
||||
{
|
||||
$file = dirname(__DIR__) . '/templates/' . $tpl . '.php';
|
||||
if (!is_file($file)) {
|
||||
throw new \RuntimeException('模板不存在：' . $tpl);
|
||||
}
|
||||
|
||||
$tplFile = $file;
|
||||
$pageKey = $page ?: $tpl;
|
||||
$pageTitle = $data['title'] ?? '家书';
|
||||
$extraHead = $data['extraHead'] ?? '';
|
||||
|
||||
extract($data, EXTR_SKIP);
|
||||
require dirname(__DIR__) . '/templates/layout.php';
|
||||
}
|
||||
|
||||
/** 独立的整页（登录、安装、错误），不套顶栏 */
|
||||
public static function renderBare(string $tpl, array $data = []): void
|
||||
{
|
||||
$file = dirname(__DIR__) . '/templates/' . $tpl . '.php';
|
||||
if (!is_file($file)) {
|
||||
throw new \RuntimeException('模板不存在：' . $tpl);
|
||||
}
|
||||
$pageTitle = $data['title'] ?? '家书';
|
||||
extract($data, EXTR_SKIP);
|
||||
require $file;
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,68 @@
|
||||
<?php
|
||||
/**
|
||||
* 应用引导：配置加载、会话、自动加载、全局辅助函数。
|
||||
* 每个页面/入口只需 require 这一个文件。
|
||||
*/
|
||||
|
||||
declare(strict_types=1);
|
||||
|
||||
// ---------------- 自动加载（避免「新增类忘了 require」这类事故）----------------
|
||||
spl_autoload_register(function ($class) {
|
||||
if (strpos($class, 'App\\') !== 0) {
|
||||
return;
|
||||
}
|
||||
$rel = str_replace('\\', '/', substr($class, 4));
|
||||
$file = __DIR__ . '/' . $rel . '.php';
|
||||
if (is_file($file)) {
|
||||
require $file;
|
||||
}
|
||||
});
|
||||
|
||||
define('FB_ROOT', dirname(__DIR__));
|
||||
define('FB_APP', __DIR__);
|
||||
define('FB_UPLOADS', FB_ROOT . '/uploads');
|
||||
|
||||
// ---------------- 配置 ----------------
|
||||
$configFile = FB_ROOT . '/config.php';
|
||||
if (!is_file($configFile)) {
|
||||
http_response_code(500);
|
||||
echo '<!doctype html><meta charset="utf-8"><title>家书 · 未配置</title>'
|
||||
. '<div style="max-width:520px;margin:12vh auto;padding:28px 32px;'
|
||||
. 'background:#fff;border:1px solid rgba(47,36,30,.1);border-radius:16px;'
|
||||
. 'font:15px/1.8 -apple-system,\'PingFang SC\',\'Microsoft YaHei\',sans-serif;color:#2F241E">'
|
||||
. '<h1 style="font-size:18px;margin:0 0 12px">还差一步：没有找到 config.php</h1>'
|
||||
. '<p style="color:#7C6A5B;margin:0 0 16px">'
|
||||
. '请复制同目录下的 <code>config.example.php</code> 为 <code>config.php</code>，'
|
||||
. '填好数据库连接与 app_key 后再访问。</p>'
|
||||
. '</div>';
|
||||
exit;
|
||||
}
|
||||
|
||||
$GLOBALS['config'] = require $configFile;
|
||||
|
||||
// ---------------- 错误报告（线上不显示错误，避免泄露路径与库信息）----------------
|
||||
$debug = !empty($GLOBALS['config']['debug']);
|
||||
error_reporting(E_ALL);
|
||||
ini_set('display_errors', $debug ? '1' : '0');
|
||||
ini_set('log_errors', '1');
|
||||
|
||||
// ---------------- 时区：日期是家书的核心数据，一开始就必须明确 ----------------
|
||||
date_default_timezone_set($GLOBALS['config']['timezone'] ?? 'Asia/Shanghai');
|
||||
|
||||
// ---------------- 会话 ----------------
|
||||
$isHttps = (!empty($_SERVER['HTTPS']) && $_SERVER['HTTPS'] !== 'off')
|
||||
|| (($_SERVER['HTTP_X_FORWARDED_PROTO'] ?? '') === 'https');
|
||||
|
||||
session_name('fbsid');
|
||||
session_set_cookie_params([
|
||||
'lifetime' => 0,
|
||||
'path' => '/',
|
||||
'secure' => $isHttps,
|
||||
'httponly' => true,
|
||||
'samesite' => 'Lax',
|
||||
]);
|
||||
if (session_status() !== PHP_SESSION_ACTIVE) {
|
||||
session_start();
|
||||
}
|
||||
|
||||
require FB_APP . '/helpers.php';
|
||||
+139
@@ -0,0 +1,139 @@
|
||||
<?php
|
||||
/**
|
||||
* 全局辅助函数（由 bootstrap.php 引入，页面无需重复 require）
|
||||
*/
|
||||
|
||||
declare(strict_types=1);
|
||||
|
||||
/** HTML 转义：所有输出到页面的动态值都必须过一道 */
|
||||
function e($value): string
|
||||
{
|
||||
return htmlspecialchars((string)$value, ENT_QUOTES, 'UTF-8');
|
||||
}
|
||||
|
||||
/** 静态资源地址，带版本号（mtime + size）——没版本号的话浏览器会一直用旧缓存 */
|
||||
function asset(string $rel): string
|
||||
{
|
||||
$p = dirname(__DIR__) . $rel;
|
||||
if (!is_file($p)) {
|
||||
return $rel;
|
||||
}
|
||||
return $rel . '?v=' . substr(md5(filemtime($p) . filesize($p)), 0, 8);
|
||||
}
|
||||
|
||||
/** 站内链接（统一走 query-string 路由，不依赖 Apache 重写） */
|
||||
function url(string $route = 'home', array $query = []): string
|
||||
{
|
||||
$q = array_merge(['r' => $route], $query);
|
||||
return 'index.php?' . http_build_query($q);
|
||||
}
|
||||
|
||||
function redirect(string $route = 'home', array $query = []): void
|
||||
{
|
||||
header('Location: ' . url($route, $query));
|
||||
exit;
|
||||
}
|
||||
|
||||
function is_post(): bool
|
||||
{
|
||||
return ($_SERVER['REQUEST_METHOD'] ?? 'GET') === 'POST';
|
||||
}
|
||||
|
||||
function fb_config(string $key = null, $default = null)
|
||||
{
|
||||
$c = $GLOBALS['config'];
|
||||
if ($key === null) {
|
||||
return $c;
|
||||
}
|
||||
return array_key_exists($key, $c) ? $c[$key] : $default;
|
||||
}
|
||||
|
||||
// ---------------- CSRF ----------------
|
||||
function csrf_token(): string
|
||||
{
|
||||
if (empty($_SESSION['_csrf'])) {
|
||||
$_SESSION['_csrf'] = bin2hex(random_bytes(16));
|
||||
}
|
||||
return $_SESSION['_csrf'];
|
||||
}
|
||||
|
||||
function csrf_field(): string
|
||||
{
|
||||
return '<input type="hidden" name="_csrf" value="' . e(csrf_token()) . '">';
|
||||
}
|
||||
|
||||
/**
|
||||
* 校验 CSRF。失败直接结束请求 —— 不做这种假返回：
|
||||
* 「返回 false 让调用层自己处理」的写法，迟早有人忘了判断。
|
||||
*/
|
||||
function csrf_check(): void
|
||||
{
|
||||
$ok = isset($_POST['_csrf'], $_SESSION['_csrf'])
|
||||
&& hash_equals($_SESSION['_csrf'], (string)$_POST['_csrf']);
|
||||
if (!$ok) {
|
||||
http_response_code(419);
|
||||
echo '页面已过期，请刷新后重试（CSRF 校验失败）';
|
||||
exit;
|
||||
}
|
||||
}
|
||||
|
||||
// ---------------- 一次性提示 ----------------
|
||||
function flash(string $type, string $message): void
|
||||
{
|
||||
$_SESSION['_flash'][] = ['type' => $type, 'message' => $message];
|
||||
}
|
||||
|
||||
function take_flash(): array
|
||||
{
|
||||
$f = $_SESSION['_flash'] ?? [];
|
||||
unset($_SESSION['_flash']);
|
||||
return $f;
|
||||
}
|
||||
|
||||
/** 表单回填（校验失败时保留用户输入） */
|
||||
function old(string $key, $default = '')
|
||||
{
|
||||
return $_SESSION['_old'][$key] ?? $default;
|
||||
}
|
||||
|
||||
function set_old(array $data): void
|
||||
{
|
||||
$_SESSION['_old'] = $data;
|
||||
}
|
||||
|
||||
function clear_old(): void
|
||||
{
|
||||
unset($_SESSION['_old']);
|
||||
}
|
||||
|
||||
/** 生日相关：返回年龄与距下次生日天数 */
|
||||
function age_from(string $birthday): ?int
|
||||
{
|
||||
if ($birthday === '' || $birthday === null) {
|
||||
return null;
|
||||
}
|
||||
try {
|
||||
$b = new DateTimeImmutable($birthday);
|
||||
} catch (Exception $ex) {
|
||||
return null;
|
||||
}
|
||||
return (int)$b->diff(new DateTimeImmutable('today'))->y;
|
||||
}
|
||||
|
||||
function days_until_birthday(string $birthday): ?int
|
||||
{
|
||||
if (!$birthday) {
|
||||
return null;
|
||||
}
|
||||
try {
|
||||
$b = new DateTimeImmutable($birthday);
|
||||
$now = new DateTimeImmutable('today');
|
||||
$next = new DateTimeImmutable($now->format('Y') . '-' . $b->format('m-d'));
|
||||
if ($next < $now) {
|
||||
$next = $next->modify('+1 year');
|
||||
}
|
||||
return (int)$now->diff($next)->days;
|
||||
} catch (Exception $ex) {
|
||||
return null;
|
||||
}
|
||||
}
|
||||
Reference in New Issue
Block a user