Files
FeedLite/index.php
T
laoyang 9b822d2d9a 安装向导:加管理员用户名,精简为填表即装、装完进首页 (#1 #2)
## 管理员账号(用户名 + 口令)
原先只有口令,没有用户名。现在两者都有:
- 用户名词入库 settings 的 admin.username(2~32 位,字母数字下划线点连字符)
- 口令仍是 bcrypt 哈希存 admin.password_hash,明文不落任何文件
- 登录校验 fb_admin_verify_login():用户名或口令任一不对都返回同一句
  「用户名或口令不正确」,且用户名错时也照常跑一次 password_verify,避免用耗时探测账号
- 向后兼容:老部署只设了口令没用户名时,仍可只填口令登录,
  并在登录页提示补一个用户名

## 安装向导精简
按用户要求「没数据就初始化,填完进主页」:
- 必填只剩 4 项:网站名称、管理员用户名、口令、确认口令
- 站点描述 / 官方邮箱 / 站点根地址改为 hidden(可留空自动探测)
- 密钥、令牌原本就自动生成
- 安装成功后展示网站名称与用户名,2 秒自动跳首页,也有按钮
- 按钮文案改为「完成安装,进入首页」

## 修掉一个真实 bug
首页把软件说明当成站点描述,导致「软件有 note 时站点描述被顶掉」。
两者是不同的东西:站点描述是全局设置必须始终显示,软件说明另起一行补充。
老基线 D6「首页描述变为新描述」就是被这个 bug 弄失败的。

## 另一个坑
admin.username 忘了加进 fb_setting_keys() 白名单,fb_set_setting() 会静默丢弃,
表现为「安装时填了用户名,装完却没有」。已补。

验证:
- 全新安装流程 32/32(真空站:无 config.php、无 data/*.db)
- 老基线 25/25、附件专项 22/22、安装向导 60/60
- PHP 8.5 全部入口 0 弃用
2026-11-01 12:39:20 +08:00

191 lines
8.0 KiB
PHP

<?php
/**
* 问题列表
*/
require __DIR__ . '/lib/bootstrap.php';
$pdo = fb_db();
/* ---- 软件切换:只配一个软件时自动落到它,不暴露软件选择器 ---- */
$swList = fb_softwares(true);
$swKey = isset($_GET['sw']) ? (string)$_GET['sw'] : '';
$sw = null;
if ($swKey !== '') {
$sw = fb_software($swKey);
// 指定的软件不存在或已停用 → 退回默认,不报错(老链接要能打开)
if (!$sw || (int)$sw['enabled'] !== 1) { $sw = null; }
}
if ($sw === null && $swList) { $sw = $swList[0]; }
$swId = $sw ? (int)$sw['id'] : 0;
$cats = fb_categories($swId);
$statuses = fb_status_keys();
$cat = isset($_GET['cat']) ? (string)$_GET['cat'] : '';
$st = isset($_GET['status']) ? (string)$_GET['status'] : '';
$q = isset($_GET['q']) ? trim((string)$_GET['q']) : '';
$sort = isset($_GET['sort']) ? (string)$_GET['sort'] : 'active';
// 分类按 slug 在当前软件内解析;解析不到退回「全部」,不许 404
$curCat = null;
if ($cat !== '') {
$curCat = fb_category_by_slug($swId, $cat);
if (!$curCat) { $cat = ''; }
}
if ($st !== '' && !isset($statuses[$st])) { $st = ''; }
if ($sort !== 'new') { $sort = 'active'; }
$where = [];
$args = [];
// 审核(先审后显):访客只看已通过审核的;管理员登录审核后台后可看全部
if (fb_moderation_on() && !fb_is_admin()) { $where[] = 'visible = 1'; }
if ($swId > 0) { $where[] = 'software_id = ?'; $args[] = $swId; }
if ($curCat) { $where[] = 'category_id = ?'; $args[] = (int)$curCat['id']; }
if ($st !== '') { $where[] = 'status = ?'; $args[] = $st; }
if ($q !== '') {
$like = '%' . addcslashes($q, '%_\\') . '%';
$where[] = "(title LIKE ? ESCAPE '\\' OR body LIKE ? ESCAPE '\\')";
$args[] = $like;
$args[] = $like;
}
$wsql = $where ? (' WHERE ' . implode(' AND ', $where)) : '';
$order = ($sort === 'new') ? 'created_at DESC' : 'updated_at DESC';
$stc = $pdo->prepare('SELECT COUNT(*) FROM threads' . $wsql);
$stc->execute($args);
$total = (int)$stc->fetchColumn();
$pageSize = max(5, (int)fb_cfg('page_size', 20));
$pages = max(1, (int)ceil($total / $pageSize));
$page = isset($_GET['page']) ? (int)$_GET['page'] : 1;
if ($page < 1) { $page = 1; }
if ($page > $pages){ $page = $pages; }
$offset = ($page - 1) * $pageSize;
$sql = 'SELECT id, title, category, category_id, software_id, status, author_name, reply_count, created_at, updated_at,'
. ' substr(body, 1, 300) AS excerpt FROM threads'
. $wsql . ' ORDER BY ' . $order . ' LIMIT ' . $pageSize . ' OFFSET ' . $offset;
$sth = $pdo->prepare($sql);
$sth->execute($args);
$threads = $sth->fetchAll();
// 附件缩略图与数量(只在有附件时才有开销)
$tids = [];
foreach ($threads as $t) { $tids[] = (int)$t['id']; }
$attImgs = $tids ? fb_attach_map_images($pdo, $tids, 3) : [];
$attCount = $tids ? fb_attach_count_map($pdo, $tids) : [];
$siteName = (string)fb_cfg('site_name');
$headTitle = $siteName !== '' ? $siteName . ' · 问题反馈' : '问题反馈';
fb_layout_head($sw ? ((string)$sw['name']) : $headTitle);
?>
<div class="page-head">
<div>
<h1><?php echo e($sw ? (string)$sw['name'] : '全部问题'); ?></h1>
<?php
$siteDesc = (string)fb_cfg('site_desc');
$swNote = ($sw && !empty($sw['note'])) ? (string)$sw['note'] : '';
?>
<?php if ($siteDesc !== ''): ?><p class="muted"><?php echo e($siteDesc); ?></p><?php endif; ?>
<?php if ($swNote !== ''): ?><p class="muted small" style="margin:2px 0 0"><?php echo e($swNote); ?></p><?php endif; ?>
</div>
<a class="btn primary" href="new.php<?php echo $sw ? '?sw=' . e(urlencode((string)$sw['slug'])) : ''; ?>">我要反馈</a>
</div>
<div class="software-bar">
<span class="sw-label">选择软件:</span>
<div class="chips">
<?php foreach ($swList as $s): ?>
<a class="chip <?php echo ($sw && (int)$s['id'] === (int)$sw['id']) ? 'on' : ''; ?>"
href="<?php echo e(fb_qs(['sw' => (string)$s['slug'], 'cat' => null, 'page' => null]) ?: ('?sw=' . e(urlencode((string)$s['slug'])))); ?>"><?php echo e((string)$s['name']); ?></a>
<?php endforeach; ?>
</div>
</div>
<div class="filters">
<div class="chips">
<a class="chip <?php echo $cat === '' ? 'on' : ''; ?>" href="<?php echo e(fb_qs(['cat' => null, 'page' => null]) ?: '?'); ?>">全部</a>
<?php foreach ($cats as $c): ?>
<a class="chip <?php echo $cat === (string)$c['slug'] ? 'on' : ''; ?>" href="<?php echo e(fb_qs(['cat' => (string)$c['slug'], 'page' => null])); ?>"><?php echo e((string)$c['name']); ?></a>
<?php endforeach; ?>
</div>
<form class="filter-row" method="get" action="">
<?php if ($sw): ?><input type="hidden" name="sw" value="<?php echo e((string)$sw['slug']); ?>"><?php endif; ?>
<input type="hidden" name="cat" value="<?php echo e($cat); ?>">
<select name="status" onchange="this.form.submit()">
<option value="">全部状态</option>
<?php foreach ($statuses as $k => $v): ?>
<option value="<?php echo e($k); ?>" <?php echo $st === $k ? 'selected' : ''; ?>><?php echo e($v); ?></option>
<?php endforeach; ?>
</select>
<select name="sort" onchange="this.form.submit()">
<option value="active" <?php echo $sort === 'active' ? 'selected' : ''; ?>>按最新回复</option>
<option value="new" <?php echo $sort === 'new' ? 'selected' : ''; ?>>按最新发布</option>
</select>
<input type="search" name="q" value="<?php echo e($q); ?>" placeholder="搜索标题或内容…">
<button class="btn" type="submit">搜索</button>
</form>
</div>
<div class="list">
<?php if (!$threads): ?>
<div class="empty">
<p>还没有符合条件的问题。</p>
<p><a class="btn primary" href="new.php<?php echo $sw ? '?sw=' . e(urlencode((string)$sw['slug'])) : ''; ?>">来提第一个吧</a></p>
</div>
<?php else: ?>
<?php foreach ($threads as $t): ?>
<a class="item" href="thread.php?id=<?php echo (int)$t['id']; ?>">
<div class="item-top">
<span class="badge cat"><?php echo e(fb_category_label($t['category_id'])); ?></span>
<span class="badge st st-<?php echo e($t['status']); ?>"><?php echo e(fb_status_label($t['status'])); ?></span>
<span class="item-title"><?php echo e($t['title']); ?></span>
<span class="item-id" title="问题编号">#<?php echo (int)$t['id']; ?></span>
</div>
<p class="item-ex"><?php echo e(fb_excerpt($t['excerpt'], 120)); ?></p>
<?php if (!empty($attImgs[(int)$t['id']])): ?>
<div class="thumbs">
<?php foreach ($attImgs[(int)$t['id']] as $im): ?>
<img loading="lazy" alt="" src="<?php echo e(fb_attach_thumb_url($im['oss_key'], 200, isset($im['mime']) ? $im['mime'] : '')); ?>">
<?php endforeach; ?>
</div>
<?php endif; ?>
<div class="item-meta">
<span class="who"><?php echo e($t['author_name']); ?></span>
<span class="dot">·</span>
<span><?php echo e(fb_fmt_time($t['updated_at'])); ?></span>
<span class="dot">·</span>
<span><?php echo (int)$t['reply_count']; ?> 条回复</span>
<?php if (!empty($attCount[(int)$t['id']])): ?>
<span class="dot">·</span>
<span class="att-tag">附件 <?php echo (int)$attCount[(int)$t['id']]; ?></span>
<?php endif; ?>
</div>
</a>
<?php endforeach; ?>
<?php endif; ?>
</div>
<?php if ($pages > 1): ?>
<div class="pager">
<?php
$mk = function ($p) {
return e(fb_qs(['page' => $p <= 1 ? null : $p]) ?: '?');
};
?>
<?php if ($page > 1): ?>
<a class="btn" href="<?php echo $mk($page - 1); ?>">上一页</a>
<?php endif; ?>
<span class="pager-info">第 <?php echo (int)$page; ?> / <?php echo (int)$pages; ?> 页 · 共 <?php echo (int)$total; ?> 个问题</span>
<?php if ($page < $pages): ?>
<a class="btn" href="<?php echo $mk($page + 1); ?>">下一页</a>
<?php endif; ?>
</div>
<?php elseif ($total > 0): ?>
<div class="pager"><span class="pager-info">共 <?php echo (int)$total; ?> 个问题</span></div>
<?php endif; ?>
<?php
fb_layout_foot();