Files
TripLog/index.php
T
laoyang f9a624ef4b 交通字段简化 + 照片多图/裁剪/双存储后端 + 界面重构
交通字段
- 飞机只记航班号、火车只记车次,不再收座位号 / 线路 / 承运人 / 登机口
  (多人同乘一趟时座位号本来就无意义)
- trip_nodes 的历史列保留但不再写入也不再渲染,编辑一次即被显式清成 NULL
- 节点表单按出行方式切换号码标签(航班号 / 车次 / 班次 / 线路 / 航次)

照片
- 一个节点可传多张照片,前端支持逐张裁剪(Cropper.js,只把裁过的走 base64)
- MIME 由自建的 src/Mime.php 按内容识别:getimagesize → 魔数嗅探 → 扩展名映射,
  刻意不依赖 fileinfo —— 线上同时装着 PHP 7.4(没装该扩展)与 8.1
- 单张体积上限、可传张数在设置页可调

双存储后端
- 本站 uploads/ 或阿里云 OSS,在「存储设置」页配 endpoint / 桶名 / 前缀 / 内网开关;
  OSS 配置不完整时静默回退本地,避免管理员填错就把上传整个弄挂
- OSS 鉴权支持 ECS 实例 RAM 角色换 STS 临时凭证(临时凭证缓存在 /tmp,不落 Web 目录),
  也支持直接填 AccessKey
- OSS V1 签名手写实现,不引 SDK(本项目无 composer / 无 autoload)

媒体代理
- 照片与活动封面一律经 media/show、media/cover 代理输出,先校验家庭归属再吐字节
- 页面里不出现 OSS 域名,也不出现本地真实路径;桶保持私有
- 响应带 nosniff,并关闭 display_errors,免得 PHP 报错混进图片正文把图弄坏

数据库
- 新增迁移机制(src/Migrate.php + tools/migrate.php,仅 CLI 可跑)
- 建 app_settings 表;attachments 增加 storage / object_key / mime_type / size_bytes /
  width / height / is_image 与 idx_storage
- MySQL 8 不支持「加列时带 IF NOT EXISTS」,迁移一律先查 information_schema

界面
- 顶栏只留品牌与「新建活动」,其余入口收进右上角下拉菜单(details/summary,零 JS 可开合)
- 新增「存储设置」页:当前生效存储、数据库结构版本、是否 ECS 运行环境三张状态卡,
  外加测试连接与角色探测
- 样式表整体重写

验证
- 模板渲染检查 234 项、SQL 列名静态检查、模板到 CSS 的类覆盖检查、内联 JS 语法检查全通过
- 已部署到 trip.yangyq.net 并完成线上验证:双 PHP(8.1 / 7.4)14 条路由渲染字节数完全一致、
  26 项内容断言全部通过、照片代理取件与磁盘原件逐字节一致(69/69 字节)
2026-09-22 23:09:37 +08:00

164 lines
6.8 KiB
PHP

<?php
declare(strict_types=1);
require __DIR__ . '/src/Database.php';
require __DIR__ . '/src/Auth.php';
require __DIR__ . '/src/helpers.php';
require __DIR__ . '/src/Comments.php';
require __DIR__ . '/src/Members.php';
require __DIR__ . '/src/Expenses.php';
require __DIR__ . '/src/Access.php';
require __DIR__ . '/src/Migrate.php';
require __DIR__ . '/src/Mime.php';
require __DIR__ . '/src/Settings.php';
require __DIR__ . '/src/Oss.php';
require __DIR__ . '/src/Storage.php';
require __DIR__ . '/src/Attachments.php';
require __DIR__ . '/src/Controllers/AuthController.php';
require __DIR__ . '/src/Controllers/AttachmentController.php';
require __DIR__ . '/src/Controllers/ActivityController.php';
require __DIR__ . '/src/Controllers/NodeController.php';
require __DIR__ . '/src/Controllers/UserController.php';
require __DIR__ . '/src/Controllers/NodeTypeController.php';
require __DIR__ . '/src/Controllers/TravelModeController.php';
require __DIR__ . '/src/Controllers/VehicleController.php';
require __DIR__ . '/src/Controllers/RoleTagController.php';
require __DIR__ . '/src/Controllers/MemberController.php';
require __DIR__ . '/src/Controllers/CommentController.php';
require __DIR__ . '/src/Controllers/ExpenseController.php';
require __DIR__ . '/src/Controllers/MediaController.php';
require __DIR__ . '/src/Controllers/SettingsController.php';
use App\Auth;
use App\Controllers\AuthController;
use App\Controllers\ActivityController;
use App\Controllers\AttachmentController;
use App\Controllers\NodeController;
use App\Controllers\UserController;
use App\Controllers\NodeTypeController;
use App\Controllers\TravelModeController;
use App\Controllers\VehicleController;
use App\Controllers\RoleTagController;
use App\Controllers\MemberController;
use App\Controllers\CommentController;
use App\Controllers\ExpenseController;
use App\Controllers\MediaController;
use App\Controllers\SettingsController;
session_start();
date_default_timezone_set('Asia/Shanghai');
$route = $_GET['r'] ?? 'activities/index';
// 白名单:无需登录即可访问
$publicRoutes = ['auth/login', 'auth/doLogin'];
// 未登录时,强制跳转登录页
if (!in_array($route, $publicRoutes, true) && !Auth::check()) {
redirect('auth/login');
}
$map = [
// 认证
'auth/login' => [AuthController::class, 'login'],
'auth/doLogin' => [AuthController::class, 'doLogin'],
'auth/logout' => [AuthController::class, 'logout'],
// 活动
'activities/index' => [ActivityController::class, 'index'],
'activities/create' => [ActivityController::class, 'create'],
'activities/store' => [ActivityController::class, 'store'],
'activities/edit' => [ActivityController::class, 'edit'],
'activities/update' => [ActivityController::class, 'update'],
'activities/destroy' => [ActivityController::class, 'destroy'],
'activities/show' => [ActivityController::class, 'show'],
// 节点附件
'attachments/node' => [AttachmentController::class, 'node'],
'attachments/upload' => [AttachmentController::class, 'upload'],
'attachments/destroy' => [AttachmentController::class, 'destroy'],
'activities/uploadCover' => [ActivityController::class, 'uploadCover'],
// 媒体代理(照片/封面都经这里输出,不暴露 OSS 地址)
'media/show' => [MediaController::class, 'show'],
'media/cover' => [MediaController::class, 'cover'],
// 存储设置(仅管理员)
'settings/index' => [SettingsController::class, 'index'],
'settings/save' => [SettingsController::class, 'save'],
'settings/test' => [SettingsController::class, 'test'],
'settings/roles' => [SettingsController::class, 'roles'],
// 节点
'nodes/create' => [NodeController::class, 'create'],
'nodes/store' => [NodeController::class, 'store'],
'nodes/show' => [NodeController::class, 'show'],
'nodes/edit' => [NodeController::class, 'edit'],
'nodes/update' => [NodeController::class, 'update'],
'nodes/destroy' => [NodeController::class, 'destroy'],
'nodes/status' => [NodeController::class, 'status'],
'nodes/fromPlan' => [NodeController::class, 'fromPlan'],
// 节点参与人
'members/store' => [MemberController::class, 'store'],
'members/destroy' => [MemberController::class, 'destroy'],
'members/addAll' => [MemberController::class, 'addAll'],
// 评论(活动级 + 节点级)
'comments/store' => [CommentController::class, 'store'],
'comments/destroy' => [CommentController::class, 'destroy'],
// 花销与分摊
'expenses/store' => [ExpenseController::class, 'store'],
'expenses/destroy' => [ExpenseController::class, 'destroy'],
// 角色标签
'role_tags/index' => [RoleTagController::class, 'index'],
'role_tags/create' => [RoleTagController::class, 'create'],
'role_tags/store' => [RoleTagController::class, 'store'],
'role_tags/edit' => [RoleTagController::class, 'edit'],
'role_tags/update' => [RoleTagController::class, 'update'],
'role_tags/destroy' => [RoleTagController::class, 'destroy'],
// 用户
'users/index' => [UserController::class, 'index'],
'users/create' => [UserController::class, 'create'],
'users/store' => [UserController::class, 'store'],
'users/edit' => [UserController::class, 'edit'],
'users/update' => [UserController::class, 'update'],
'users/destroy' => [UserController::class, 'destroy'],
'users/uploadAvatar' => [UserController::class, 'uploadAvatar'],
// 节点类型
'node_types/index' => [NodeTypeController::class, 'index'],
'node_types/create' => [NodeTypeController::class, 'create'],
'node_types/store' => [NodeTypeController::class, 'store'],
'node_types/edit' => [NodeTypeController::class, 'edit'],
'node_types/update' => [NodeTypeController::class, 'update'],
'node_types/destroy' => [NodeTypeController::class, 'destroy'],
// 出行方式
'travel_modes/index' => [TravelModeController::class, 'index'],
'travel_modes/create' => [TravelModeController::class, 'create'],
'travel_modes/store' => [TravelModeController::class, 'store'],
'travel_modes/edit' => [TravelModeController::class, 'edit'],
'travel_modes/update' => [TravelModeController::class, 'update'],
'travel_modes/destroy' => [TravelModeController::class, 'destroy'],
// 车辆
'vehicles/index' => [VehicleController::class, 'index'],
'vehicles/create' => [VehicleController::class, 'create'],
'vehicles/store' => [VehicleController::class, 'store'],
'vehicles/edit' => [VehicleController::class, 'edit'],
'vehicles/update' => [VehicleController::class, 'update'],
'vehicles/destroy' => [VehicleController::class, 'destroy'],
];
if (!isset($map[$route])) {
http_response_code(404);
exit('404 页面不存在: ' . htmlspecialchars($route));
}
[$class, $method] = $map[$route];
(new $class())->$method();