442 lines
17 KiB
PHP
442 lines
17 KiB
PHP
|
<?php
|
|||
|
|
// ============================================
|
|||
|
|
// 文件: users.php (完整版，含编辑功能)
|
|||
|
|
// ============================================
|
|||
|
|
|
|||
|
|
require_once 'config.php';
|
|||
|
|
checkLogin();
|
|||
|
|
|
|||
|
|
$admin = getCurrentAdmin();
|
|||
|
|
$db = getDB();
|
|||
|
|
|
|||
|
|
// 获取所有观影人
|
|||
|
|
$stmt = $db->query("SELECT * FROM persons ORDER BY name");
|
|||
|
|
$all_persons = $stmt->fetchAll();
|
|||
|
|
|
|||
|
|
$message = '';
|
|||
|
|
$error = '';
|
|||
|
|
|
|||
|
|
// 处理关联观影人（当前用户）
|
|||
|
|
if ($_SERVER['REQUEST_METHOD'] === 'POST' && isset($_POST['action']) && $_POST['action'] === 'link_person') {
|
|||
|
|
$admin_id = (int)$_POST['admin_id'];
|
|||
|
|
$person_id = !empty($_POST['person_id']) ? (int)$_POST['person_id'] : null;
|
|||
|
|
|
|||
|
|
if ($admin_id != $_SESSION['admin_id']) {
|
|||
|
|
$error = '只能修改自己的关联';
|
|||
|
|
} else {
|
|||
|
|
if (updateAdminPersonId($admin_id, $person_id)) {
|
|||
|
|
$message = '关联观影人更新成功';
|
|||
|
|
$_SESSION['admin_id'] = $admin_id;
|
|||
|
|
$admin = getCurrentAdmin();
|
|||
|
|
} else {
|
|||
|
|
$error = '更新失败';
|
|||
|
|
}
|
|||
|
|
}
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
// 处理添加用户
|
|||
|
|
if ($_SERVER['REQUEST_METHOD'] === 'POST' && isset($_POST['action']) && $_POST['action'] === 'add') {
|
|||
|
|
$new_user = trim($_POST['new_username'] ?? '');
|
|||
|
|
$new_pass = $_POST['new_password'] ?? '';
|
|||
|
|
$confirm = $_POST['confirm_password'] ?? '';
|
|||
|
|
$person_id = !empty($_POST['person_id']) ? (int)$_POST['person_id'] : null;
|
|||
|
|
|
|||
|
|
if (empty($new_user)) {
|
|||
|
|
$error = '用户名不能为空';
|
|||
|
|
} elseif (strlen($new_pass) < 6) {
|
|||
|
|
$error = '密码至少6位';
|
|||
|
|
} elseif ($new_pass !== $confirm) {
|
|||
|
|
$error = '两次密码不一致';
|
|||
|
|
} else {
|
|||
|
|
if (addAdmin($new_user, $new_pass, null, $person_id)) {
|
|||
|
|
$message = "用户 {$new_user} 添加成功";
|
|||
|
|
} else {
|
|||
|
|
$error = '用户名已存在';
|
|||
|
|
}
|
|||
|
|
}
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
// 处理编辑用户
|
|||
|
|
if ($_SERVER['REQUEST_METHOD'] === 'POST' && isset($_POST['action']) && $_POST['action'] === 'edit') {
|
|||
|
|
$edit_id = (int)$_POST['id'];
|
|||
|
|
$username = trim($_POST['username'] ?? '');
|
|||
|
|
$new_password = $_POST['new_password'] ?? '';
|
|||
|
|
$confirm_password = $_POST['confirm_password'] ?? '';
|
|||
|
|
$person_id = !empty($_POST['person_id']) ? (int)$_POST['person_id'] : null;
|
|||
|
|
|
|||
|
|
if (empty($username)) {
|
|||
|
|
$error = '用户名不能为空';
|
|||
|
|
} else {
|
|||
|
|
// 检查用户名是否已被其他用户使用
|
|||
|
|
$stmt = $db->prepare("SELECT COUNT(*) FROM admins WHERE username = ? AND id != ?");
|
|||
|
|
$stmt->execute([$username, $edit_id]);
|
|||
|
|
if ($stmt->fetchColumn() > 0) {
|
|||
|
|
$error = '用户名已被占用';
|
|||
|
|
} else {
|
|||
|
|
// 构建更新语句
|
|||
|
|
$sql = "UPDATE admins SET username = ?, person_id = ?";
|
|||
|
|
$params = [$username, $person_id];
|
|||
|
|
if (!empty($new_password)) {
|
|||
|
|
if (strlen($new_password) < 6) {
|
|||
|
|
$error = '密码至少6位';
|
|||
|
|
} elseif ($new_password !== $confirm_password) {
|
|||
|
|
$error = '两次密码不一致';
|
|||
|
|
} else {
|
|||
|
|
$hashed = password_hash($new_password, PASSWORD_DEFAULT);
|
|||
|
|
$sql .= ", password = ?";
|
|||
|
|
$params[] = $hashed;
|
|||
|
|
}
|
|||
|
|
}
|
|||
|
|
if (empty($error)) {
|
|||
|
|
$sql .= " WHERE id = ?";
|
|||
|
|
$params[] = $edit_id;
|
|||
|
|
$stmt = $db->prepare($sql);
|
|||
|
|
if ($stmt->execute($params)) {
|
|||
|
|
$message = "用户 {$username} 更新成功";
|
|||
|
|
// 如果编辑的是自己，刷新 session 信息
|
|||
|
|
if ($edit_id == $_SESSION['admin_id']) {
|
|||
|
|
$_SESSION['admin_id'] = $edit_id;
|
|||
|
|
$admin = getCurrentAdmin();
|
|||
|
|
}
|
|||
|
|
} else {
|
|||
|
|
$error = '更新失败';
|
|||
|
|
}
|
|||
|
|
}
|
|||
|
|
}
|
|||
|
|
}
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
// 处理删除用户
|
|||
|
|
if ($_SERVER['REQUEST_METHOD'] === 'POST' && isset($_POST['action']) && $_POST['action'] === 'delete') {
|
|||
|
|
$delete_id = (int)$_POST['delete_id'];
|
|||
|
|
if (deleteAdmin($delete_id)) {
|
|||
|
|
$message = '用户已删除';
|
|||
|
|
} else {
|
|||
|
|
$error = '无法删除该用户（可能是最后一个管理员或您自己）';
|
|||
|
|
}
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
// 获取编辑数据
|
|||
|
|
$edit_data = null;
|
|||
|
|
if (isset($_GET['action']) && $_GET['action'] === 'edit' && isset($_GET['id'])) {
|
|||
|
|
$edit_id = (int)$_GET['id'];
|
|||
|
|
$stmt = $db->prepare("SELECT * FROM admins WHERE id = ?");
|
|||
|
|
$stmt->execute([$edit_id]);
|
|||
|
|
$edit_data = $stmt->fetch();
|
|||
|
|
if (!$edit_data) {
|
|||
|
|
header('Location: users.php');
|
|||
|
|
exit;
|
|||
|
|
}
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
$users = getAllAdmins();
|
|||
|
|
?>
|
|||
|
|
<!DOCTYPE html>
|
|||
|
|
<html lang="zh-CN">
|
|||
|
|
<head>
|
|||
|
|
<meta charset="UTF-8">
|
|||
|
|
<meta name="viewport" content="width=device-width, initial-scale=1.0">
|
|||
|
|
<title>用户管理 - 电影日志</title>
|
|||
|
|
<link rel="stylesheet" href="css/style.css">
|
|||
|
|
<style>
|
|||
|
|
.form-container {
|
|||
|
|
max-width: 800px;
|
|||
|
|
margin: 0 auto;
|
|||
|
|
padding: 20px;
|
|||
|
|
}
|
|||
|
|
.card {
|
|||
|
|
background: var(--card-bg);
|
|||
|
|
border-radius: 16px;
|
|||
|
|
padding: 28px 32px;
|
|||
|
|
box-shadow: var(--shadow);
|
|||
|
|
margin-bottom: 24px;
|
|||
|
|
}
|
|||
|
|
.card h2 {
|
|||
|
|
font-size: 22px;
|
|||
|
|
font-weight: 700;
|
|||
|
|
margin: 0 0 8px;
|
|||
|
|
color: var(--text-primary);
|
|||
|
|
}
|
|||
|
|
.card .sub {
|
|||
|
|
color: var(--text-secondary);
|
|||
|
|
font-size: 14px;
|
|||
|
|
margin-bottom: 16px;
|
|||
|
|
}
|
|||
|
|
.form-group {
|
|||
|
|
margin-bottom: 16px;
|
|||
|
|
}
|
|||
|
|
.form-group label {
|
|||
|
|
display: block;
|
|||
|
|
font-weight: 600;
|
|||
|
|
font-size: 14px;
|
|||
|
|
color: var(--text-primary);
|
|||
|
|
margin-bottom: 4px;
|
|||
|
|
}
|
|||
|
|
.form-group input, .form-group select {
|
|||
|
|
width: 100%;
|
|||
|
|
padding: 10px 14px;
|
|||
|
|
border: 1px solid var(--border-color);
|
|||
|
|
border-radius: 8px;
|
|||
|
|
font-size: 15px;
|
|||
|
|
box-sizing: border-box;
|
|||
|
|
transition: border-color 0.2s;
|
|||
|
|
}
|
|||
|
|
.form-group input:focus, .form-group select:focus {
|
|||
|
|
outline: none;
|
|||
|
|
border-color: var(--primary);
|
|||
|
|
box-shadow: 0 0 0 4px rgba(230,126,34,0.12);
|
|||
|
|
}
|
|||
|
|
.btn {
|
|||
|
|
padding: 10px 20px;
|
|||
|
|
border-radius: 8px;
|
|||
|
|
font-size: 14px;
|
|||
|
|
font-weight: 600;
|
|||
|
|
border: none;
|
|||
|
|
cursor: pointer;
|
|||
|
|
transition: var(--transition);
|
|||
|
|
text-decoration: none;
|
|||
|
|
display: inline-block;
|
|||
|
|
}
|
|||
|
|
.btn-primary {
|
|||
|
|
background: linear-gradient(135deg, var(--primary), var(--primary-light));
|
|||
|
|
color: #fff;
|
|||
|
|
}
|
|||
|
|
.btn-primary:hover {
|
|||
|
|
transform: translateY(-2px);
|
|||
|
|
box-shadow: 0 8px 28px rgba(230,126,34,0.35);
|
|||
|
|
}
|
|||
|
|
.btn-danger {
|
|||
|
|
background: #e74c3c;
|
|||
|
|
color: #fff;
|
|||
|
|
}
|
|||
|
|
.btn-danger:hover {
|
|||
|
|
background: #c0392b;
|
|||
|
|
}
|
|||
|
|
.btn-outline {
|
|||
|
|
background: transparent;
|
|||
|
|
color: var(--text-secondary);
|
|||
|
|
border: 1px solid var(--border-color);
|
|||
|
|
}
|
|||
|
|
.btn-outline:hover {
|
|||
|
|
background: var(--bg-secondary);
|
|||
|
|
}
|
|||
|
|
.btn-sm {
|
|||
|
|
padding: 4px 12px;
|
|||
|
|
font-size: 13px;
|
|||
|
|
}
|
|||
|
|
.user-list {
|
|||
|
|
list-style: none;
|
|||
|
|
padding: 0;
|
|||
|
|
margin: 0;
|
|||
|
|
}
|
|||
|
|
.user-list li {
|
|||
|
|
display: flex;
|
|||
|
|
justify-content: space-between;
|
|||
|
|
align-items: center;
|
|||
|
|
padding: 10px 0;
|
|||
|
|
border-bottom: 1px solid var(--border-color);
|
|||
|
|
flex-wrap: wrap;
|
|||
|
|
gap: 8px;
|
|||
|
|
}
|
|||
|
|
.user-list li:last-child {
|
|||
|
|
border-bottom: none;
|
|||
|
|
}
|
|||
|
|
.user-list .username {
|
|||
|
|
font-weight: 500;
|
|||
|
|
}
|
|||
|
|
.user-list .badge {
|
|||
|
|
background: var(--bg-secondary);
|
|||
|
|
color: var(--text-secondary);
|
|||
|
|
font-size: 12px;
|
|||
|
|
padding: 2px 10px;
|
|||
|
|
border-radius: 12px;
|
|||
|
|
margin-left: 8px;
|
|||
|
|
}
|
|||
|
|
.user-list .badge.self {
|
|||
|
|
background: var(--primary);
|
|||
|
|
color: #fff;
|
|||
|
|
}
|
|||
|
|
.user-list .badge.has-link {
|
|||
|
|
background: #2ecc71;
|
|||
|
|
color: #fff;
|
|||
|
|
}
|
|||
|
|
.error-box {
|
|||
|
|
background: rgba(231,76,60,0.08);
|
|||
|
|
border: 1px solid rgba(231,76,60,0.2);
|
|||
|
|
color: #e74c3c;
|
|||
|
|
padding: 10px 14px;
|
|||
|
|
border-radius: 8px;
|
|||
|
|
margin-bottom: 16px;
|
|||
|
|
font-size: 14px;
|
|||
|
|
}
|
|||
|
|
.success-box {
|
|||
|
|
background: rgba(39,174,96,0.08);
|
|||
|
|
border: 1px solid rgba(39,174,96,0.2);
|
|||
|
|
color: #27ae60;
|
|||
|
|
padding: 10px 14px;
|
|||
|
|
border-radius: 8px;
|
|||
|
|
margin-bottom: 16px;
|
|||
|
|
font-size: 14px;
|
|||
|
|
}
|
|||
|
|
.form-row {
|
|||
|
|
display: flex;
|
|||
|
|
gap: 12px;
|
|||
|
|
align-items: flex-end;
|
|||
|
|
flex-wrap: wrap;
|
|||
|
|
}
|
|||
|
|
.form-row .form-group {
|
|||
|
|
flex: 1;
|
|||
|
|
margin-bottom: 0;
|
|||
|
|
min-width: 150px;
|
|||
|
|
}
|
|||
|
|
.link-form {
|
|||
|
|
display: flex;
|
|||
|
|
gap: 12px;
|
|||
|
|
align-items: center;
|
|||
|
|
flex-wrap: wrap;
|
|||
|
|
}
|
|||
|
|
.link-form select {
|
|||
|
|
flex: 1;
|
|||
|
|
min-width: 150px;
|
|||
|
|
}
|
|||
|
|
@media (max-width: 600px) {
|
|||
|
|
.form-row {
|
|||
|
|
flex-direction: column;
|
|||
|
|
}
|
|||
|
|
.card {
|
|||
|
|
padding: 20px 16px;
|
|||
|
|
}
|
|||
|
|
.link-form {
|
|||
|
|
flex-direction: column;
|
|||
|
|
align-items: stretch;
|
|||
|
|
}
|
|||
|
|
}
|
|||
|
|
</style>
|
|||
|
|
</head>
|
|||
|
|
<body>
|
|||
|
|
<?php include 'nav.php'; ?>
|
|||
|
|
|
|||
|
|
<main class="main-content">
|
|||
|
|
<div class="form-container">
|
|||
|
|
<!-- 当前用户关联设置 -->
|
|||
|
|
<div class="card">
|
|||
|
|
<h2>🔗 关联我的观影人身份</h2>
|
|||
|
|
<p class="sub">设置你作为观影人的身份，用于年度报告等统计功能（排除自己）</p>
|
|||
|
|
|
|||
|
|
<?php if ($message): ?>
|
|||
|
|
<div class="success-box"><?= h($message) ?></div>
|
|||
|
|
<?php endif; ?>
|
|||
|
|
<?php if ($error): ?>
|
|||
|
|
<div class="error-box"><?= h($error) ?></div>
|
|||
|
|
<?php endif; ?>
|
|||
|
|
|
|||
|
|
<form method="POST" class="link-form">
|
|||
|
|
<input type="hidden" name="action" value="link_person">
|
|||
|
|
<input type="hidden" name="admin_id" value="<?= $_SESSION['admin_id'] ?>">
|
|||
|
|
<select name="person_id">
|
|||
|
|
<option value="">-- 不关联 --</option>
|
|||
|
|
<?php foreach ($all_persons as $p): ?>
|
|||
|
|
<option value="<?= $p['id'] ?>" <?= ($admin['person_id'] == $p['id']) ? 'selected' : '' ?>>
|
|||
|
|
<?= h($p['name']) ?>
|
|||
|
|
</option>
|
|||
|
|
<?php endforeach; ?>
|
|||
|
|
</select>
|
|||
|
|
<button type="submit" class="btn btn-primary">保存关联</button>
|
|||
|
|
<?php if ($admin['person_id']): ?>
|
|||
|
|
<span style="font-size:13px;color:#27ae60;">✅ 当前关联：<?= h($admin['person_name'] ?? '') ?></span>
|
|||
|
|
<?php else: ?>
|
|||
|
|
<span style="font-size:13px;color:var(--text-secondary);">⚠️ 未关联观影人，年度报告将无法排除你自己</span>
|
|||
|
|
<?php endif; ?>
|
|||
|
|
</form>
|
|||
|
|
</div>
|
|||
|
|
|
|||
|
|
<!-- 添加/编辑用户 -->
|
|||
|
|
<div class="card">
|
|||
|
|
<h2><?= $edit_data ? '✏️ 编辑用户' : '➕ 添加新管理员' ?></h2>
|
|||
|
|
<p class="sub"><?= $edit_data ? '修改用户信息' : '新增一个可登录系统的账户' ?></p>
|
|||
|
|
|
|||
|
|
<form method="POST">
|
|||
|
|
<input type="hidden" name="action" value="<?= $edit_data ? 'edit' : 'add' ?>">
|
|||
|
|
<?php if ($edit_data): ?>
|
|||
|
|
<input type="hidden" name="id" value="<?= $edit_data['id'] ?>">
|
|||
|
|
<?php endif; ?>
|
|||
|
|
<div class="form-row">
|
|||
|
|
<div class="form-group">
|
|||
|
|
<label>用户名</label>
|
|||
|
|
<input type="text" name="<?= $edit_data ? 'username' : 'new_username' ?>"
|
|||
|
|
value="<?= $edit_data ? h($edit_data['username']) : '' ?>"
|
|||
|
|
placeholder="如: manager" required>
|
|||
|
|
</div>
|
|||
|
|
<div class="form-group">
|
|||
|
|
<label><?= $edit_data ? '新密码 (留空则不修改)' : '密码 (至少6位)' ?></label>
|
|||
|
|
<input type="password" name="new_password" placeholder="<?= $edit_data ? '留空则不修改' : '输入密码' ?>">
|
|||
|
|
</div>
|
|||
|
|
<?php if ($edit_data): ?>
|
|||
|
|
<div class="form-group">
|
|||
|
|
<label>确认新密码</label>
|
|||
|
|
<input type="password" name="confirm_password" placeholder="再次输入新密码">
|
|||
|
|
</div>
|
|||
|
|
<?php endif; ?>
|
|||
|
|
<div class="form-group">
|
|||
|
|
<label>关联观影人</label>
|
|||
|
|
<select name="person_id">
|
|||
|
|
<option value="">-- 不关联 --</option>
|
|||
|
|
<?php foreach ($all_persons as $p): ?>
|
|||
|
|
<option value="<?= $p['id'] ?>" <?= ($edit_data && $edit_data['person_id'] == $p['id']) ? 'selected' : '' ?>>
|
|||
|
|
<?= h($p['name']) ?>
|
|||
|
|
</option>
|
|||
|
|
<?php endforeach; ?>
|
|||
|
|
</select>
|
|||
|
|
</div>
|
|||
|
|
<div>
|
|||
|
|
<button type="submit" class="btn btn-primary"><?= $edit_data ? '💾 保存修改' : '添加用户' ?></button>
|
|||
|
|
<?php if ($edit_data): ?>
|
|||
|
|
<a href="users.php" class="btn btn-outline">取消</a>
|
|||
|
|
<?php endif; ?>
|
|||
|
|
</div>
|
|||
|
|
</div>
|
|||
|
|
</form>
|
|||
|
|
</div>
|
|||
|
|
|
|||
|
|
<!-- 用户列表 -->
|
|||
|
|
<div class="card">
|
|||
|
|
<h2>👥 现有管理员</h2>
|
|||
|
|
<p class="sub">共 <?= count($users) ?> 个账户</p>
|
|||
|
|
<?php if (count($users) > 0): ?>
|
|||
|
|
<ul class="user-list">
|
|||
|
|
<?php foreach ($users as $u): ?>
|
|||
|
|
<li>
|
|||
|
|
<span>
|
|||
|
|
<span class="username"><?= h($u['username']) ?></span>
|
|||
|
|
<?php if ($u['id'] == $_SESSION['admin_id']): ?>
|
|||
|
|
<span class="badge self">当前登录</span>
|
|||
|
|
<?php else: ?>
|
|||
|
|
<span class="badge">管理员</span>
|
|||
|
|
<?php endif; ?>
|
|||
|
|
<?php if ($u['person_id']): ?>
|
|||
|
|
<span class="badge has-link">👤 关联: <?= h($u['person_name']) ?></span>
|
|||
|
|
<?php endif; ?>
|
|||
|
|
</span>
|
|||
|
|
<span>
|
|||
|
|
<a href="?action=edit&id=<?= $u['id'] ?>" class="btn btn-outline btn-sm">✏️ 编辑</a>
|
|||
|
|
<?php if ($u['id'] != $_SESSION['admin_id']): ?>
|
|||
|
|
<form method="POST" style="display:inline;" onsubmit="return confirm('确定删除用户 <?= h($u['username']) ?> 吗？')">
|
|||
|
|
<input type="hidden" name="action" value="delete">
|
|||
|
|
<input type="hidden" name="delete_id" value="<?= $u['id'] ?>">
|
|||
|
|
<button type="submit" class="btn btn-danger btn-sm">删除</button>
|
|||
|
|
</form>
|
|||
|
|
<?php else: ?>
|
|||
|
|
<span style="color: var(--text-secondary); font-size:13px;">不可删除自己</span>
|
|||
|
|
<?php endif; ?>
|
|||
|
|
</span>
|
|||
|
|
</li>
|
|||
|
|
<?php endforeach; ?>
|
|||
|
|
</ul>
|
|||
|
|
<?php else: ?>
|
|||
|
|
<p style="color: var(--text-secondary);">暂无其他管理员</p>
|
|||
|
|
<?php endif; ?>
|
|||
|
|
</div>
|
|||
|
|
</div>
|
|||
|
|
</main>
|
|||
|
|
</body>
|
|||
|
|
</html>
|