prepare('SELECT * FROM accounts WHERE person_id = ?'); $st->execute([$personId]); $row = $st->fetch(); return $row ?: null; } public static function create(int $personId, string $password, string $role = 'member'): int { $role = in_array($role, self::ROLES, true) ? $role : 'member'; $st = Database::get()->prepare( 'INSERT INTO accounts (person_id, password_hash, role) VALUES (?, ?, ?)' ); $st->execute([$personId, password_hash($password, PASSWORD_DEFAULT), $role]); return (int)Database::get()->lastInsertId(); } public static function setPassword(int $accountId, string $password): void { Database::get()->prepare('UPDATE accounts SET password_hash = ? WHERE id = ?') ->execute([password_hash($password, PASSWORD_DEFAULT), $accountId]); } public static function setRole(int $accountId, string $role): void { $role = in_array($role, self::ROLES, true) ? $role : 'member'; Database::get()->prepare('UPDATE accounts SET role = ? WHERE id = ?') ->execute([$role, $accountId]); } public static function setStatus(int $accountId, string $status): void { Database::get()->prepare('UPDATE accounts SET status = ? WHERE id = ?') ->execute([$status, $accountId]); } /** 各角色各有多少人(设置页显示) */ public static function roleCounts(): array { $st = Database::get()->query( "SELECT role, COUNT(*) AS n FROM accounts WHERE status = 'active' GROUP BY role" ); $out = ['admin' => 0, 'member' => 0, 'guest' => 0]; foreach ($st->fetchAll() as $r) { $out[(string)$r['role']] = (int)$r['n']; } return $out; } public static function roleWord(string $role): string { return ['admin' => '管理员', 'member' => '家庭成员', 'guest' => '访客'][$role] ?? '成员'; } /** 管理员不能被停用/降权 —— 否则全家人都会被锁在系统外面 */ public static function adminCount(): int { $st = Database::get()->prepare( "SELECT COUNT(*) FROM accounts a JOIN persons p ON p.id = a.person_id WHERE a.role = 'admin' AND a.status = 'active'" ); $st->execute(); return (int)$st->fetchColumn(); } public static function validatePassword(string $password): array { $err = []; if (strlen($password) < 8) { $err[] = '密码至少 8 位'; } if (!preg_match('/[0-9]/', $password) || !preg_match('/[A-Za-z]/', $password)) { $err[] = '密码要同时包含字母和数字'; } return $err; } }