From eda9df3d1a9708dfc721af7290bb006a983cb47c Mon Sep 17 00:00:00 2001
From: Baoshuo <i@baoshuo.ren>
Date: Thu, 20 Oct 2022 17:07:43 +0800
Subject: [PATCH 1/8] refactor(web/super_manage): index manage

---
 web/app/controllers/blog_show.php        |    2 +-
 web/app/controllers/super_manage.php     | 1262 ++++++++--------------
 web/app/controllers/super_manage_old.php |  867 +++++++++++++++
 web/app/controllers/user_info_edit.php   |    2 +-
 web/app/libs/uoj-form-lib.php            |   12 +-
 web/app/route.php                        |    4 +-
 web/app/views/blog-nav.php               |    2 +-
 web/app/views/main-nav.php               |    2 +-
 web/js/uoj.js                            |   28 +-
 9 files changed, 1335 insertions(+), 846 deletions(-)
 create mode 100644 web/app/controllers/super_manage_old.php

diff --git a/web/app/controllers/blog_show.php b/web/app/controllers/blog_show.php
index 9b1918e..641e624 100644
--- a/web/app/controllers/blog_show.php
+++ b/web/app/controllers/blog_show.php
@@ -11,5 +11,5 @@
 		become404Page();
 	}
 	
-	redirectTo(HTML::blog_url($blog['poster'], '/post/'.$_GET['id']));
+	redirectTo(HTML::blog_url($blog['poster'], '/post/'.$_GET['id'] . ($_GET['sub'] ?: '')));
 	?>
diff --git a/web/app/controllers/super_manage.php b/web/app/controllers/super_manage.php
index d1e9956..19e0960 100644
--- a/web/app/controllers/super_manage.php
+++ b/web/app/controllers/super_manage.php
@@ -1,867 +1,467 @@
 <?php
-	$REQUIRE_LIB['md5'] = '';
-	$REQUIRE_LIB['jquery.query'] = '';
-
+	requireLib('bootstrap5');
+	requireLib('md5');
+	requireLib('jquery.query');
 	requirePHPLib('form');
 	requirePHPLib('judger');
-	
+
+	define('SCRIPT_REFRESH_AS_GET', '<script>;window.location = window.location.origin + window.location.pathname + (window.location.search.length ? window.location.search + "&" : "?") + "_=" + (+new Date()) + window.location.hash;</script>');
+
 	if (!isSuperUser($myUser)) {
 		become403Page();
 	}
 
-	$register_form = new UOJForm('register');
-	$register_form->submit_button_config['align'] = 'compressed';
-	$register_form->addInput('new_username', 'text', '用户名', '',
-		function ($new_username) {
-			if (!validateUsername($new_username)) {
-				return '用户名不合法';
-			}
-			if (queryUser($new_username)) {
-				return '该用户已存在';
-			}
-			return '';
-		},
-		null
-	);
-	$register_form->addInput('new_password', 'password', '密码', '',
-		function ($new_password) {
-			return '';
-		},
-		null
-	);
-	$register_form->addInput('new_realname', 'text', '真实姓名', '',
-		function ($new_realname) {
-			return '';
-		},
-		null
-	);
-	$register_form->addInput('new_school', 'text', '学校名称', '',
-		function ($new_school) {
-			return '';
-		},
-		null
-	);
-	$register_form->handle = function() {
-		$new_username = $_POST['new_username'];
-		$new_password = $_POST['new_password'];
-		$new_realname = DB::escape($_POST['new_realname']);
-		$new_school = DB::escape($_POST['new_school']);
-		$new_password = hash_hmac('md5', $new_password, getPasswordClientSalt());
-		$new_password = getPasswordToStore($new_password, $new_username);
-		$svn_pw = uojRandString(10);
+	$cur_tab = isset($_GET['tab']) ? $_GET['tab'] : 'index';
 
-		DB::query("insert into user_info (username, realname, school, password, svn_password, register_time, usergroup) values ('$new_username', '$new_realname', '$new_school', '$new_password', '$svn_pw', now(), 'U')");
-	};
-	$register_form->runAtServer();
-
-	$change_password_form = new UOJForm('change_password');
-	$change_password_form->submit_button_config['align'] = 'compressed';
-	$change_password_form->addInput('p_username', 'text', '用户名', '',
-		function ($p_username) {
-			if (!validateUsername($p_username)) {
-				return '用户名不合法';
-			}
-			if (!queryUser($p_username)) {
-				return '用户不存在';
-			}
-			return '';
-		},
-		null
-	);
-	$change_password_form->addInput('p_password', 'password', '密码', '',
-		function ($p_password) {
-			return '';
-		},
-		null
-	);
-	$change_password_form->handle = function() {
-		$p_username = $_POST['p_username'];
-		$p_password = $_POST['p_password'];
-		$p_password = hash_hmac('md5', $p_password, getPasswordClientSalt());
-		$p_password = getPasswordToStore($p_password, $p_username);
-
-		DB::query("update user_info set password = '$p_password' where username = '$p_username'");
-	};
-	$change_password_form->runAtServer();
-
-	$change_realname_form = new UOJForm('change_realname');
-	$change_realname_form->submit_button_config['align'] = 'compressed';
-	$change_realname_form->addInput('r_username', 'text', '用户名', '',
-		function ($r_username) {
-			if (!validateUsername($r_username)) {
-				return '用户名不合法';
-			}
-			if (!queryUser($r_username)) {
-				return '用户不存在';
-			}
-			return '';
-		},
-		null
-	);
-	$change_realname_form->addInput('r_realname', 'text', '真实姓名', '',
-		function ($r_realname) {
-			return '';
-		},
-		null
-	);
-	$change_realname_form->handle = function() {
-		$r_username = $_POST['r_username'];
-		$r_realname = DB::escape($_POST['r_realname']);
-
-		DB::query("update user_info set realname = '$r_realname' where username = '$r_username'");
-	};
-	$change_realname_form->runAtServer();
-
-	$change_school_form = new UOJForm('change_school');
-	$change_school_form->submit_button_config['align'] = 'compressed';
-	$change_school_form->addInput('s_username', 'text', '用户名', '',
-		function ($s_username) {
-			if (!validateUsername($s_username)) {
-				return '用户名不合法';
-			}
-			if (!queryUser($s_username)) {
-				return '用户不存在';
-			}
-			return '';
-		},
-		null
-	);
-	$change_school_form->addInput('s_school', 'text', '学校名称', '',
-		function ($s_school) {
-			return '';
-		},
-		null
-	);
-	$change_school_form->handle = function() {
-		$s_username = $_POST['s_username'];
-		$s_school = DB::escape($_POST['s_school']);
-
-		DB::query("update user_info set school = '$s_school' where username = '$s_username'");
-	};
-	$change_school_form->runAtServer();
-
-	$user_form = new UOJForm('user');
-	$user_form->submit_button_config['align'] = 'compressed';
-	$user_form->addInput('username', 'text', '用户名', '',
-		function ($username) {
-			if (!validateUsername($username)) {
-				return '用户名不合法';
-			}
-			if (!queryUser($username)) {
-				return '用户不存在';
-			}
-			return '';
-		},
-		null
-	);
-	$options = array(
-		'banneduser' => '设为封禁用户',
-		'normaluser' => '设为普通用户',
-		'superuser' => '设为超级用户'
-	);
-	$user_form->addSelect('op_type', $options, '操作类型', '');
-	$user_form->handle = function() {
-		global $user_form;
-		
-		$username = $_POST['username'];
-		switch ($_POST['op_type']) {
-			case 'banneduser':
-				DB::update("update user_info set usergroup = 'B' where username = '{$username}'");
-				DB::update("update user_info set usertype = 'banned' where username = '{$username}'");
-				break;
-			case 'normaluser':
-				DB::update("update user_info set usergroup = 'U' where username = '{$username}'");
-				DB::update("update user_info set usertype = 'student' where username = '{$username}'");
-				break;
-			case 'superuser':
-				DB::update("update user_info set usergroup = 'S' where username = '{$username}'");
-				DB::update("update user_info set usertype = 'student' where username = '{$username}'");
-				break;
-		}
-	};
-	$user_form->runAtServer();
-
-	$usertype_form = new UOJForm('usertype');
-	$user_form->submit_button_config['align'] = 'compressed';
-	$usertype_form->addInput('usertype_username', 'text', '用户名', '',
-		function ($username) {
-			if (!validateUsername($username)) {
-				return '用户名不合法';
-			}
-			if (!queryUser($username)) {
-				return '用户不存在';
-			}
-			return '';
-		},
-		null
-	);
-	$usertype_options = array(
-		'student' => '学生',
-		'teacher' => '老师',
-		'problem_uploader' => '题目上传者',
-		'problem_manager' => '题目管理员',
-		'contest_judger' => '比赛评测员',
-		'contest_only' => '仅比赛参加者',
-	);
-	$usertype_form->addSelect('usertype_type', $usertype_options, '角色', '');
-	$usertype_form->addSelect('usertype_op', array('add' => '添加', 'remove' => '移除'), '操作', '');
-	$usertype_form->handle = function() {
-		global $usertype_form;
-
-		$username = $_POST['usertype_username'];
-		$user = queryUser($username);
-		switch ($_POST['usertype_type']) {
-			case 'teacher':
-				if ($_POST['usertype_op'] === 'add') {
-					$user = addUserType($user, 'teacher');
-					$user = removeUserType($user, 'student');
-				} else {
-					$user = removeUserType($user, 'teacher');
-					$user = addUserType($user, 'student');
-				}
-				break;
-			case 'problem_manager':
-				if ($_POST['usertype_op'] === 'add') {
-					$user = addUserType($user, 'problem_manager');
-					$user = removeUserType($user, 'problem_uploader');
-				} else {
-					$user = removeUserType($user, 'problem_manager');
-				}
-				break;
-			case 'student':
-			case 'problem_uploader':
-			case 'contest_judger':
-			case 'contest_only':
-				$user = $_POST['usertype_op'] === 'add'
-					? addUserType($user, $_POST['usertype_type'])
-					: removeUserType($user, $_POST['usertype_type']);
-				break;
-		}
-
-		DB::update("update user_info set usertype = '{$user['usertype']}' where username = '{$username}'");
-	};
-	$usertype_form->runAtServer();
+	$tabs_info = [
+		'index' => [
+			'name' => '首页管理',
+			'url' => "/super_manage/index",
+		],
+		'users' => [
+			'name' => '用户管理',
+			'url' => "/super_manage/users",
+		],
+		'submissions' => [
+			'name' => '提交记录',
+			'url' => "/super_manage/submissions",
+		],
+		'custom_test' => [
+			'name' => '自定义测试',
+			'url' => "/super_manage/custom_test",
+		],
+		'image_hosting' => [
+			'name' => '图床管理',
+			'url' => "/super_manage/image_hosting",
+		],
+	];
 	
-	$blog_link_index = new UOJForm('blog_link_index');
-	$blog_link_index->addInput('blog_id2', 'text', '博客ID', '',
-		function ($x) {
-			if (!validateUInt($x)) {
-				return 'ID不合法';
+	if (!isset($tabs_info[$cur_tab])) {
+		become404Page();
+	}
+
+	if ($cur_tab == 'index') {
+		// ========== 公告 ==========
+		if (isset($_POST['submit-delete_announcement']) && $_POST['submit-delete_announcement'] == 'delete_announcement') {
+			crsf_defend();
+
+			$blog_id = $_POST['blog_id'];
+
+			if (!validateUInt($blog_id)) {
+				die('<script>alert("移除失败：博客 ID 无效");</script>' . SCRIPT_REFRESH_AS_GET);
 			}
-			if (!queryBlog($x)) {
-				return '博客不存在';
-			}
-			return '';
-		},
-		null
-	);
-	$blog_link_index->addInput('blog_level', 'text', '置顶级别（删除不用填）', '0',
-		function ($x) {
-			if (!validateUInt($x)) {
-				return '数字不合法';
-			}
-			if ($x > 3) {
-				return '该级别不存在';
-			}
-			return '';
-		},
-		null
-	);
-	$options = array(
-		'add' => '添加',
-		'del' => '删除'
-	);
-	$blog_link_index->addSelect('op-type2', $options, '操作类型', '');
-	$blog_link_index->handle = function() {
-		$blog_id = $_POST['blog_id2'];
-		$blog_level = $_POST['blog_level'];
-		if ($_POST['op-type2'] == 'add') {
+			
+			DB::delete("DELETE FROM important_blogs WHERE blog_id = {$blog_id}");
+
+			die('<script>alert("移除成功！");</script>' . SCRIPT_REFRESH_AS_GET);
+		}
+
+		$announcements = DB::selectAll("SELECT blogs.id as id, blogs.title as title, blogs.poster as poster, user_info.realname as realname, blogs.post_time as post_time, important_blogs.level as level, blogs.is_hidden as is_hidden FROM important_blogs INNER JOIN blogs ON important_blogs.blog_id = blogs.id INNER JOIN user_info ON blogs.poster = user_info.username ORDER BY level DESC, important_blogs.blog_id DESC");
+
+		$add_announcement_form = new UOJForm('add_announcement');
+		$add_announcement_form->addInput('blog_id', 'text', '博客 ID', '',
+			function($id, &$vdata) {
+				if (!validateUInt($id)) {
+					return '博客 ID 无效';
+				}
+
+				if (!queryBlog($id)) {
+					return '博客不存在';
+				}
+
+				$vdata['blog_id'] = $id;
+
+				return '';
+			},
+			null
+		);
+		$add_announcement_form->addInput('blog_level', 'text', '置顶级别', '0',
+			function ($x, &$vdata) {
+				if (!validateUInt($x)) {
+					return '数字不合法';
+				}
+
+				if ($x > 3) {
+					return '该级别不存在';
+				}
+
+				$vdata['level'] = $x;
+				
+				return '';
+			},
+			null
+		);
+		$add_announcement_form->handle = function(&$vdata) {
+			$blog_id = $vdata['blog_id'];
+			$blog_level = $vdata['level'];
+			
 			if (DB::selectFirst("select * from important_blogs where blog_id = {$blog_id}")) {
 				DB::update("update important_blogs set level = {$blog_level} where blog_id = {$blog_id}");
 			} else {
 				DB::insert("insert into important_blogs (blog_id, level) values ({$blog_id}, {$blog_level})");
 			}
-		}
-		if ($_POST['op-type2'] == 'del') {
-			DB::delete("delete from important_blogs where blog_id = {$blog_id}");
-		}
-	};
-	$blog_link_index->runAtServer();
-	
-	$blog_deleter = new UOJForm('blog_deleter');
-	$blog_deleter->addInput('blog_del_id', 'text', '博客ID', '',
-		function ($x) {
-			if (!validateUInt($x)) {
-				return 'ID不合法';
-			}
-			if (!queryBlog($x)) {
-				return '博客不存在';
-			}
-			return '';
-		},
-		null
-	);
-	$blog_deleter->handle = function() {
-		deleteBlog($_POST['blog_del_id']);
-	};
-	$blog_deleter->runAtServer();
+		};
+		$add_announcement_form->submit_button_config['align'] = 'compressed';
+		$add_announcement_form->submit_button_config['text'] = '提交';
+		$add_announcement_form->succ_href = '/super_manage/index#announcements';
+		$add_announcement_form->runAtServer();
 
-	$countdown_adder = new UOJForm('new_countdown');
-	$countdown_adder->submit_button_config['align'] = 'compressed';
-	$countdown_adder->addInput('new_countdown_title', 'text', '标题', '',
-		function ($new_countdown_title) {
-			return '';
-		},
-		null
-	);
-	$countdown_adder->addInput('new_countdown_endtime', 'text', '截止日期', date("Y-m-d H:i:s"),
-		function($str, &$vdata) {
-			try {
-				$vdata['new_countdown_endtime'] = new DateTime($str);
-			} catch (Exception $e) {
-				return '无效时间格式';
-			}
-			return '';
-		},
-		null
-	);
-	$countdown_adder->handle = function() {
-		$new_countdown_title = $_POST['new_countdown_title'];
-		$new_countdown_endtime = $_POST['new_countdown_endtime'];
-		$esc_countdown_title = DB::escape($new_countdown_title);
+		// ========== 倒计时 ==========
+		if (isset($_POST['submit-delete_countdown']) && $_POST['submit-delete_countdown'] == 'delete_countdown') {
+			crsf_defend();
 
-		DB::query("insert into countdowns (title, endtime) values ('$esc_countdown_title', '$new_countdown_endtime')");
-	};
-	$countdown_adder->runAtServer();
+			$countdown_id = $_POST['countdown_id'];
 
-	$countdown_deleter = new UOJForm('delete_countdown');
-	$countdown_deleter->submit_button_config['align'] = 'compressed';
-	$countdown_deleter->addInput('delete_countdown_id', 'text', 'ID', '',
-		function ($x) {
-			if (!validateUInt($x)) {
-				return 'ID不合法';
+			if (!validateUInt($countdown_id)) {
+				die('<script>alert("删除失败：倒计时 ID 无效");</script>' . SCRIPT_REFRESH_AS_GET);
 			}
 
-			if (!DB::selectFirst("select * from countdowns where id = $x")) {
-				return '倒计时不存在';
-			}
+			DB::delete("DELETE FROM countdowns WHERE id = {$countdown_id}");
 
-			return '';
-		},
-		null
-	);
-	$countdown_deleter->handle = function() {
-		$delete_countdown_id = $_POST['delete_countdown_id'];
-
-		DB::query("delete from countdowns where id = $delete_countdown_id");
-	};
-	$countdown_deleter->runAtServer();
-
-	$countdowns_header_row = <<<EOD
-	<tr>
-		<th>ID</th>
-		<th>标题</th>
-		<th>时间</th>
-	</tr>
-EOD;
-	$countdowns_print_row = function($row) {
-		echo <<<EOD
-	<tr>
-		<td>{$row['id']}</td>
-		<td>{$row['title']}</td>
-		<td>{$row['endtime']}</td>
-	</tr>
-EOD;
-	};
-
-	$friend_link_adder = new UOJForm('new_friend_link');
-	$friend_link_adder->submit_button_config['align'] = 'compressed';
-	$friend_link_adder->addInput('new_friend_link_title', 'text', '名称', '',
-		function ($str) {
-			return '';
-		},
-		null
-	);
-	$friend_link_adder->addInput('new_friend_link_url', 'text', '链接', '',
-		function($str) {
-			if (!validateURL($str)) {
-				return '链接不合法';
-			}
-
-			return '';
-		},
-		null
-	);
-	$friend_link_adder->addInput('new_friend_link_level', 'text', '权重', '10',
-		function($str) {
-			if (!validateUInt($str)) {
-				return '权重必须是数字';
-			}
-
-			return '';
-		},
-		null
-	);
-	$friend_link_adder->handle = function() {
-		$new_friend_link_title = $_POST['new_friend_link_title'];
-		$new_friend_link_url = $_POST['new_friend_link_url'];
-		$new_friend_link_level = $_POST['new_friend_link_level'];
-		$esc_new_friend_link_title = DB::escape($new_friend_link_title);
-		$esc_new_friend_link_url = DB::escape($new_friend_link_url);
-
-		DB::query("insert into friend_links (title, url, level) values ('$esc_new_friend_link_title', '$esc_new_friend_link_url', $new_friend_link_level)");
-	};
-	$friend_link_adder->runAtServer();
-
-	$friend_link_deleter = new UOJForm('delete_friend_link');
-	$friend_link_deleter->submit_button_config['align'] = 'compressed';
-	$friend_link_deleter->addInput('delete_friend_link_id', 'text', 'ID', '',
-		function ($id) {
-			if (!validateUInt($id)) {
-				return 'ID不合法';
-			}
-
-			if (!DB::selectFirst("select * from friend_links where id = $id")) {
-				return 'ID不存在';
-			}
-
-			return '';
-		},
-		null
-	);
-	$friend_link_deleter->handle = function() {
-		$delete_friend_link_id = $_POST['delete_friend_link_id'];
-
-		DB::query("delete from friend_links where id = $delete_friend_link_id");
-	};
-	$friend_link_deleter->runAtServer();
-
-	$friend_links_header_row = <<<EOD
-	<tr>
-		<th>ID</th>
-		<th>名称</th>
-		<th>链接</th>
-		<th>置顶等级</th>
-	</tr>
-EOD;
-	$friend_links_print_row = function($row) {
-		echo <<<EOD
-	<tr>
-		<td>{$row['id']}</td>
-		<td>{$row['title']}</td>
-		<td>{$row['url']}</td>
-		<td>{$row['level']}</td>
-	</tr>
-EOD;
-	};
-
-	$contest_submissions_deleter = new UOJForm('contest_submissions');
-	$contest_submissions_deleter->addInput('contest_id', 'text', '比赛ID', '',
-		function ($x) {
-			if (!validateUInt($x)) {
-				return 'ID不合法';
-			}
-			if (!queryContest($x)) {
-				return '博客不存在';
-			}
-			return '';
-		},
-		null
-	);
-	$contest_submissions_deleter->handle = function() {
-		$contest = queryContest($_POST['contest_id']);
-		genMoreContestInfo($contest);
-		
-		$contest_problems = DB::selectAll("select problem_id from contests_problems where contest_id = {$contest['id']}");
-		foreach ($contest_problems as $problem) {
-			$submissions = DB::selectAll("select * from submissions where problem_id = {$problem['problem_id']} and submit_time < '{$contest['start_time_str']}'");
-			foreach ($submissions as $submission) {
-				$content = json_decode($submission['content'], true);
-				unlink(UOJContext::storagePath().$content['file_name']);
-				DB::delete("delete from submissions where id = {$submission['id']}");
-				updateBestACSubmissions($submission['submitter'], $submission['problem_id']);
-			}
-		}
-	};
-	$contest_submissions_deleter->runAtServer();
-
-	$custom_test_deleter = new UOJForm('custom_test_deleter');
-	$custom_test_deleter->addInput('last', 'text', '删除末尾记录', '5',
-		function ($x, &$vdata) {
-			if (!validateUInt($x)) {
-				return '不合法';
-			}
-			$vdata['last'] = $x;
-			return '';
-		},
-		null
-	);
-	$custom_test_deleter->handle = function(&$vdata) {
-		$all = DB::selectAll("select * from custom_test_submissions order by id asc limit {$vdata['last']}");
-		foreach ($all as $submission) {
-			$content = json_decode($submission['content'], true);
-			unlink(UOJContext::storagePath().$content['file_name']);
-		}
-		DB::delete("delete from custom_test_submissions order by id asc limit {$vdata['last']}");
-	};
-	$custom_test_deleter->runAtServer();
-
-	$judger_adder = new UOJForm('judger_adder');
-	$judger_adder->addInput('judger_adder_name', 'text', '评测机名称', '',
-		function ($x, &$vdata) {
-			if (!validateUsername($x)) {
-				return '不合法';
-			}
-			if (DB::selectCount("select count(*) from judger_info where judger_name='$x'")!=0) {
-				return '不合法';
-			}
-			$vdata['name'] = $x;
-			return '';
-		},
-		null
-	);
-	$judger_adder->handle = function(&$vdata) {
-		$password=uojRandString(32);
-		DB::insert("insert into judger_info (judger_name,password) values('{$vdata['name']}','{$password}')");
-	};
-	$judger_adder->runAtServer();
-	
-	$judger_deleter = new UOJForm('judger_deleter');
-	$judger_deleter->addInput('judger_deleter_name', 'text', '评测机名称', '',
-		function ($x, &$vdata) {
-			if (!validateUsername($x)) {
-				return '不合法';
-			}
-			if (DB::selectCount("select count(*) from judger_info where judger_name='$x'")!=1) {
-				return '不合法';
-			}
-			$vdata['name'] = $x;
-			return '';
-		},
-		null
-	);
-	$judger_deleter->handle = function(&$vdata) {
-		DB::delete("delete from judger_info where judger_name='{$vdata['name']}'");
-	};
-	$judger_deleter->runAtServer();
-
-	$judgerlist_cols = array('judger_name', 'password');
-	$judgerlist_config = array();
-	$judgerlist_header_row = <<<EOD
-	<tr>
-		<th>评测机名称</th>
-		<th>密码</th>
-	</tr>
-EOD;
-	$judgerlist_print_row = function($row) {
-		echo <<<EOD
-			<tr>
-				<td>{$row['judger_name']}</td>
-				<td>{$row['password']}</td>
-			</tr>
-EOD;
-	};
-	
-	$userlist_cols = array('username', 'school', 'usergroup', 'usertype', 'register_time');
-	$userlist_config = array('page_len' => 20,
-			'table_classes' => array('table', 'table-bordered', 'table-hover', 'table-striped'));
-	$userlist_header_row = <<<EOD
-	<tr>
-		<th>用户名</th>
-		<th>学校</th>
-		<th style="width: 6em">用户类别</th>
-		<th style="width: 12em">注册时间</th>
-	</tr>
-EOD;
-
-	$cur_tab = isset($_GET['tab']) ? $_GET['tab'] : 'users';
-
-	$user_list_cond = array();
-	if ($cur_tab === 'users') {
-		if (isset($_GET['username']) && $_GET['username'] != "") {
-			$user_list_cond[] = "username like '%" . DB::escape($_GET['username']) . "%'";
-		}
-		if (isset($_GET['usergroup']) && $_GET['usergroup'] != "") {
-			$user_list_cond[] = "usergroup = '" . DB::escape($_GET['usergroup']) . "'";
-		}
-	}
-	if ($user_list_cond) {
-		$user_list_cond = join($user_list_cond, ' and ');
-	} else {
-		$user_list_cond = '1';
-	}
-
-	$userlist_print_row = function($row) {
-		$hislink = getUserLink($row['username']);
-		echo <<<EOD
-			<tr>
-				<td>${hislink}</td>
-				<td>{$row['school']}</td>
-				<td>{$row['usergroup']}, {$row['usertype']}</td>
-				<td>{$row['register_time']}</td>
-			</tr>
-EOD;
-	};
-
-	$image_hosting_cols = ['*'];
-	$image_hosting_config = ['page_len' => 20, 'table_classes' => ['table', 'table-bordered', 'table-hover', 'table-striped']];
-	$image_hosting_header_row = <<<EOD
-	<tr>
-		<th>ID</th>
-		<th>上传者</th>
-		<th>预览</th>
-		<th style="width: 3em">文件大小</th>
-		<th style="width: 12em">上传时间</th>
-	</tr>
-EOD;
-	$image_hosting_print_row = function($row) {
-		$user_link = getUserLink($row['uploader']);
-		if ($row['size'] < 1024 * 512) {
-			$size = strval(round($row['size'] * 1.0 / 1024, 1)) . ' KB';
-		} else {
-			$size = strval(round($row['size'] * 1.0 / 1024 / 1024, 1)) . ' MB';
+			die('<script>alert("删除成功！");</script>' . SCRIPT_REFRESH_AS_GET);
 		}
 
-		echo <<<EOD
-	<tr>
-		<td>{$row['id']}</td>
-		<td>$user_link</td>
-		<td><img src="{$row['path']}" width="250"></td>
-		<td>$size</td>
-		<td>{$row['upload_time']}</td>
-	</tr>
-EOD;
-	};
+		$countdowns = DB::selectAll("SELECT id, title, endtime FROM countdowns ORDER BY endtime ASC");
 
-	$image_deleter = new UOJForm('image_deleter');
-	$image_deleter->submit_button_config['align'] = 'compressed';
-	$image_deleter->submit_button_config['text'] = '删除';
-	$image_deleter->submit_button_config['class_str'] = 'btn btn-danger';
-	$image_deleter->addInput('image_deleter_id', 'text', '图片 ID', '',
-		function ($x, &$vdata) {
-			if (!validateUInt($x)) {
-				return 'ID 不合法';
-			}
-			if (!DB::selectCount("select count(*) from users_images where id = $x")) {
-				return '图片不存在';
-			}
-			$vdata['id'] = $x;
-			return '';
-		},
-		null
-	);
-	$image_deleter->handle = function(&$vdata) {
-		$id = $vdata['id'];
-		$result = DB::selectFirst("SELECT * from users_images WHERE id = $id");
-		unlink(UOJContext::storagePath().$result['path']);
-		DB::delete("DELETE FROM users_images WHERE id = $id");
-	};
-	$image_deleter->runAtServer();
+		$add_countdown_form = new UOJForm('add_countdown');
+		$add_countdown_form->addInput('countdown_title', 'text', '标题', '',
+			function($title, &$vdata) {
+				if ($title == '') {
+					return '标题不能为空';
+				}
 
-	$change_user_image_total_size_limit_form = new UOJForm('change_user_image_total_size_limit');
-	$change_user_image_total_size_limit_form->submit_button_config['align'] = 'compressed';
-	$change_user_image_total_size_limit_form->addInput('change_user_image_total_size_limit_username', 'text', '用户名', '',
-		function ($x, &$vdata) {
-			if (!validateUsername($x)) {
-				return '用户名不合法';
-			}
-			if (!queryUser($x)) {
-				return '用户不存在';
-			}
-			$vdata['username'] = $x;
-			return '';
-		},
-		null
-	);
-	$change_user_image_total_size_limit_form->addInput('change_user_image_total_size_limit_limit', 'text', '存储限制（单位：Byte）', '104857600',
-		function ($x, &$vdata) {
-			if (!validateUInt($x, 10)) {
-				return '限制不合法';
-			}
-			if (intval($x) > 2147483648) {
-				return '限制不能大于 2 GB';
-			}
-			$vdata['limit'] = $x;
-			return '';
-		},
-		null
-	);
-	$change_user_image_total_size_limit_form->handle = function(&$vdata) {
-		DB::update("UPDATE user_info SET images_size_limit = {$vdata['limit']} WHERE username = '{$vdata['username']}'");
-	};
-	$change_user_image_total_size_limit_form->runAtServer();
+				$vdata['title'] = $title;
 
-	$tabs_info = array(
-		'users' => array(
-			'name' => '用户管理',
-			'url' => "/super-manage/users"
-		),
-		'blogs' => array(
-			'name' => '博客管理',
-			'url' => "/super-manage/blogs"
-		),
-		'index' => array(
-			'name' => '首页管理',
-			'url' => '/super-manage/index'
-		),
-		'submissions' => array(
-			'name' => '提交记录',
-			'url' => "/super-manage/submissions"
-		),
-		'custom-test' => array(
-			'name' => '自定义测试',
-			'url' => '/super-manage/custom-test'
-		),
-		'judger' => array(
-			'name' => '评测机管理',
-			'url' => '/super-manage/judger'
-		),
-		'image_hosting' => array(
-			'name' => '图床管理',
-			'url' => '/super-manage/image_hosting'
-		)
-	);
-	
-	if (!isset($tabs_info[$cur_tab])) {
-		become404Page();
+				return '';
+			},
+			null
+		);
+		$add_countdown_form->addInput('countdown_endtime', 'text', '结束时间', date("Y-m-d H:i:s"),
+			function($endtime, &$vdata) {
+				try {
+					$vdata['endtime'] = new DateTime($endtime);
+				} catch (Exception $e) {
+					return '无效时间格式';
+				}
+
+				return '';
+			},
+			null
+		);
+		$add_countdown_form->handle = function(&$vdata) {
+			$esc_title = DB::escape($vdata['title']);
+			$esc_endtime = DB::escape($vdata['endtime']->format('Y-m-d H:i:s'));
+
+			DB::insert("INSERT INTO countdowns (title, endtime) VALUES ('{$esc_title}', '{$esc_endtime}')");
+		};
+		$add_countdown_form->submit_button_config['align'] = 'compressed';
+		$add_countdown_form->submit_button_config['text'] = '添加';
+		$add_countdown_form->succ_href = '/super_manage/index#countdowns';
+		$add_countdown_form->runAtServer();
+
+		// ========== 常用链接 ==========
+		if (isset($_POST['submit-delete_link']) && $_POST['submit-delete_link'] == 'delete_link') {
+			crsf_defend();
+
+			$item_id = $_POST['item_id'];
+
+			if (!validateUInt($item_id)) {
+				die('<script>alert("删除失败：ID 无效");</script>' . SCRIPT_REFRESH_AS_GET);
+			}
+
+			DB::delete("DELETE FROM links WHERE id = {$item_id}");
+
+			die('<script>alert("删除成功！");</script>' . SCRIPT_REFRESH_AS_GET);
+		}
+
+		$links = DB::selectAll("SELECT `id`, `title`, `url`, `level` FROM `friend_links` ORDER BY `level` DESC, `id` ASC");
+
+		$add_link_form = new UOJForm('add_link');
+		$add_link_form->addInput('link_title', 'text', '标题', '',
+			function($title, &$vdata) {
+				if ($title == '') {
+					return '标题不能为空';
+				}
+
+				$vdata['title'] = $title;
+
+				return '';
+			},
+			null
+		);
+		$add_link_form->addInput('link_url', 'text', '链接', '',
+			function($url, &$vdata) {
+				if (!validateURL($url)) {
+					return '链接不合法';
+				}
+
+				$vdata['url'] = $url;
+
+				return '';
+			},
+			null
+		);
+		$add_link_form->addInput('link_level', 'text', '权重', '10',
+			function($level, &$vdata) {
+				if (!validateUInt($level)) {
+					return '数字不合法';
+				}
+
+				$vdata['level'] = $level;
+				
+				return '';
+			},
+			null
+		);
+		$add_link_form->handle = function(&$vdata) {
+			$esc_title = DB::escape($vdata['title']);
+			$esc_url = DB::escape($vdata['url']);
+			$level = $vdata['level'];
+			
+			DB::insert("INSERT INTO friend_links (title, url, level) VALUES ('{$esc_title}', '{$esc_url}', {$level})");
+		};
+		$add_link_form->submit_button_config['align'] = 'compressed';
+		$add_link_form->submit_button_config['text'] = '添加';
+		$add_link_form->succ_href = '/super_manage/index#links';
+		$add_link_form->runAtServer();
+	} elseif ($cur_tab == 'users') {
+		//
 	}
 	?>
-<?php
-	requireLib('shjs');
-	requireLib('morris');
-	?>
-<?php echoUOJPageHeader('系统管理') ?>
-<div class="row">
-	<div class="col-sm-3">
-		<?= HTML::tablist($tabs_info, $cur_tab, 'nav-pills flex-column') ?>
+
+<?php echoUOJPageHeader(UOJLocale::get('system manage')) ?>
+
+<h1 class="h2">
+	<?= UOJLocale::get('system manage') ?>
+</h1>
+
+
+<div class="row mt-4">
+<!-- left col -->
+<div class="col-md-3">
+
+<div class="list-group">
+	<?php foreach ($tabs_info as $id => $tab): ?>
+	<a
+		role="button"
+		class="list-group-item list-group-item-action <?= $cur_tab == $id ? 'active' : '' ?>"
+		href="<?= $tab['url'] ?>">
+		<?= $tab['name'] ?>
+	</a>
+	<?php endforeach ?>
+</div>
+
+</div>
+<!-- end left col -->
+
+<!-- right col -->
+<div class="col-md-9">
+<?php if ($cur_tab == 'index'): ?>
+<div class="card">
+	<div class="card-header">
+		<ul class="nav nav-tabs card-header-tabs" role="tablist">
+			<li class="nav-item">
+				<a class="nav-link active" href="#announcements" data-bs-toggle="tab" data-bs-target="#announcements">公告</a>
+			</li>
+			<li class="nav-item">
+				<a class="nav-link" href="#countdowns" data-bs-toggle="tab" data-bs-target="#countdowns">倒计时</a>
+			</li>
+			<li class="nav-item">
+				<a class="nav-link" href="#links" data-bs-toggle="tab" data-bs-target="#links">常用链接</a>
+			</li>
+		</ul>
 	</div>
-	
-	<div class="col-sm-9">
-		<?php if ($cur_tab === 'users'): ?>
-			<h3>添加新用户</h3>
-			<?php $register_form->printHTML(); ?>
-			<h3>修改用户密码</h3>
-			<?php $change_password_form->printHTML(); ?>
-			<h3>用户类别设置</h3>
-			<p>在此处更新用户所属类别后会自动重置用户权限。</p>
-			<?php $user_form->printHTML(); ?>
-			<h3>用户权限管理</h3>
-			<?php $usertype_form->printHTML(); ?>
-			<h3>修改用户真实姓名</h3>
-			<?php $change_realname_form->printHTML(); ?>
-			<h3>修改用户学校名称</h3>
-			<?php $change_school_form->printHTML(); ?>
-			<h3>用户名单</h3>
-			<div id="user-query">
-				<form class="form-horizontal uoj-form-compressed" target="_self" method="GET">
-					<div class="form-group">
-						<label for="username" class="col-sm-2 control-label">用户名</label>
-						<div class="col-sm-3">
-							<input type="text" class="form-control" name="username" id="user-query-username" value="" />
-						</div>
-					</div>
-					<div class="form-group">
-						<label for="usergroup" class="col-sm-2 control-label">用户类别</label>
-						<div class="col-sm-3">
-							<select class="form-control" id="user-query-usergroup" name="usergroup">
-								<option value="">*: 所有用户</option>
-								<option value="B">B: 封禁用户</option>
-								<option value="U">U: 普通用户</option>
-								<option value="S">S: 超级用户</option>
-							</select>
-						</div>
-					</div><div class="text-center"><button type="submit" id="user-query-submit" class="mt-2 btn btn-secondary">查询</button></div>
-				</form>
-			</div>
-			<?php echoLongTable($userlist_cols, 'user_info', $user_list_cond, 'order by username asc', $userlist_header_row, $userlist_print_row, $userlist_config) ?>
-		<?php elseif ($cur_tab === 'blogs'): ?>
-			<div>
-				<h4>添加到公告</h4>
-				<?php $blog_link_index->printHTML(); ?>
-			</div>
-		
-			<div>
-				<h4>删除博客</h4>
-				<?php $blog_deleter->printHTML(); ?>
-			</div>
-		<?php elseif ($cur_tab === 'index'): ?>
-			<div>
-				<h4>倒计时</h4>
-				<?php echoLongTable(array('id', 'title', 'endtime'), 'countdowns', '1', 'order by endtime asc', $countdowns_header_row, $countdowns_print_row, $userlist_config) ?>
-				<h5>添加倒计时</h5>
-				<?php $countdown_adder->printHTML(); ?>
-				<h5>删除倒计时</h5>
-				<?php $countdown_deleter->printHTML(); ?>
+	<div class="card-body">
+		<div class="tab-content">
+			<!-- 公告 -->
+			<div class="tab-pane active" id="announcements">
+				<div id="announcements-list"></div>
 
-				<h4>友情链接</h4>
-				<?php echoLongTable(array('id', 'title', 'url', 'level'), 'friend_links', '1', 'order by level desc, id asc', $friend_links_header_row, $friend_links_print_row, $userlist_config) ?>
-				<h5>添加友情链接</h5>
-				<?php $friend_link_adder->printHTML(); ?>
-				<h5>删除友情链接</h5>
-				<?php $friend_link_deleter->printHTML(); ?>
+				<script>
+					var announcements = <?= json_encode($announcements) ?>;
+
+					$('#announcements-list').long_table(
+						announcements,
+						1,
+						'<tr>' +
+							'<th style="width:3em">ID</th>' +
+							'<th style="width:14em">标题</th>' +
+							'<th style="width:8em">发布者</th>' +
+							'<th style="width:8em">发布时间</th>' +
+							'<th style="width:6em">置顶等级</th>' +
+							'<th style="width:8em">操作</th>' +
+						'</tr>',
+						function(row) {
+							var col_tr = '';
+
+							col_tr += '<tr>';
+
+							col_tr += '<td>' + row['id'] + '</td>';
+							col_tr += '<td>' +
+									(row['is_hidden'] ? '<span class="text-danger">[隐藏]</span> ' : '') +
+									'<a class="text-decoration-none" href="/blogs/' + row['id'] + '">' +
+										row['title'] +
+									'</a>' +
+								'</td>';
+							col_tr += '<td>' + getUserLink(row['poster'], row['realname']) + '</td>';
+							col_tr += '<td>' + row['post_time'] + '</td>';
+							col_tr += '<td>' + row['level'] + '</td>';
+							col_tr += '<td>' +
+										'<a class="text-decoration-none d-inline-block align-middle" href="/post/' + row['id'] + '/write">编辑</a>' +
+										'<form class="d-inline-block ms-2" method="POST" onsubmit=\'return confirm("你真的要移除这条公告吗？")\'>' +
+											'<input type="hidden" name="_token" value="<?= crsf_token() ?>">' +
+											'<input type="hidden" name="blog_id" value="' + row['id'] + '">' +
+											'<button class="btn btn-link text-danger text-decoration-none p-0" type="submit" name="submit-delete_announcement" value="delete_announcement">移除</button>' +
+										'</form>' +
+									'</td>';
+
+							col_tr += '</tr>';
+
+							return col_tr;
+						},
+						{
+							div_classes: ['table-responsive'],
+							table_classes: ['table', 'align-middle'],
+							page_len: 20,
+						}
+					);
+				</script>
+
+				<h5>添加/修改公告</h5>
+				<?php $add_announcement_form->printHTML(); ?>
 			</div>
-		<?php elseif ($cur_tab === 'submissions'): ?>
-			<div>
-				<h4>删除赛前提交记录</h4>
-				<?php $contest_submissions_deleter->printHTML(); ?>
+
+			<!-- 倒计时 -->
+			<div class="tab-pane" id="countdowns">
+				<div id="countdowns-list"></div>
+
+				<script>
+					var countdowns = <?= json_encode($countdowns) ?>;
+
+					$('#countdowns-list').long_table(
+						countdowns,
+						1,
+						'<tr>' +
+							'<th style="width:14em">标题</th>' +
+							'<th style="width:8em">结束时间</th>' +
+							'<th style="width:6em">操作</th>' +
+						'</tr>',
+						function(row) {
+							var col_tr = '';
+
+							col_tr += '<tr>';
+
+							col_tr += '<td>' + row['title'] + '</td>';
+							col_tr += '<td>' + row['endtime'] + '</td>';
+							col_tr += '<td>' +
+									'<form method="POST" onsubmit=\'return confirm("你真的要删除这个倒计时吗？")\'>' +
+										'<input type="hidden" name="_token" value="<?= crsf_token() ?>">' +
+										'<input type="hidden" name="countdown_id" value="' + row['id'] + '">' +
+										'<button class="btn btn-link text-danger text-decoration-none p-0" type="submit" name="submit-delete_countdown" value="delete_countdown">删除</button>' +
+									'</form>' +
+								'</td>';
+
+							col_tr += '</tr>';
+
+							return col_tr;
+						},
+						{
+							div_classes: ['table-responsive'],
+							table_classes: ['table', 'align-middle'],
+							page_len: 20,
+						}
+					);
+				</script>
+
+				<h5>添加倒计时</h5>
+				<?php $add_countdown_form->printHTML(); ?>
 			</div>
-			<div>
-				<h4>测评失败的提交记录</h4>
-				<?php echoSubmissionsList("result_error = 'Judgement Failed'", 'order by id desc', array('result_hidden' => ''), $myUser); ?>
+
+			<!-- 常用链接 -->
+			<div class="tab-pane" id="links">
+				<div id="links-list"></div>
+
+				<script>
+					var links = <?= json_encode($links) ?>;
+
+					$('#links-list').long_table(
+						links,
+						1,
+						'<tr>' +
+							'<th style="width:18em">标题</th>' +
+							'<th style="width:26em">链接</th>' +
+							'<th style="width:14em">操作</th>' +
+						'</tr>',
+						function(row) {
+							var col_tr = '';
+
+							col_tr += '<tr>';
+
+							col_tr += '<td>' + row['title'] + '</td>';
+							col_tr += '<td>' + row['url'] + '</td>';
+							col_tr += '<td>' +
+									'<form method="POST" onsubmit=\'return confirm("你真的要删除这条链接吗？")\'>' +
+										'<input type="hidden" name="_token" value="<?= crsf_token() ?>">' +
+										'<input type="hidden" name="link_id" value="' + row['id'] + '">' +
+										'<button class="btn btn-link text-danger text-decoration-none p-0" type="submit" name="submit-delete_link" value="delete_link">删除</button>' +
+									'</form>' +
+								'</td>';
+
+							col_tr += '</tr>';
+
+							return col_tr;
+						},
+						{
+							div_classes: ['table-responsive'],
+							table_classes: ['table', 'align-middle'],
+							page_len: 20,
+						}
+					);
+				</script>
+
+				<h5>添加常用链接</h5>
+				<?php $add_link_form->printHTML(); ?>
 			</div>
-		<?php elseif ($cur_tab === 'custom-test'): ?>
-		<?php $custom_test_deleter->printHTML() ?>
-		<?php
-				$submissions_pag = new Paginator(array(
-					'col_names' => array('*'),
-					'table_name' => 'custom_test_submissions',
-					'cond' => '1',
-					'tail' => 'order by id asc',
-					'page_len' => 5
-				));
-			foreach ($submissions_pag->get() as $submission) {
-				$problem = queryProblemBrief($submission['problem_id']);
-				$submission_result = json_decode($submission['result'], true);
-				echo '<dl class="dl-horizontal">';
-				echo '<dt>id</dt>';
-				echo '<dd>', "#{$submission['id']}", '</dd>';
-				echo '<dt>problem_id</dt>';
-				echo '<dd>', "#{$submission['problem_id']}", '</dd>';
-				echo '<dt>submit time</dt>';
-				echo '<dd>', $submission['submit_time'], '</dd>';
-				echo '<dt>submitter</dt>';
-				echo '<dd>', $submission['submitter'], '</dd>';
-				echo '<dt>judge_time</dt>';
-				echo '<dd>', $submission['judge_time'], '</dd>';
-				echo '</dl>';
-				echoSubmissionContent($submission, getProblemCustomTestRequirement($problem));
-				echoCustomTestSubmissionDetails($submission_result['details'], "submission-{$submission['id']}-details");
-			}
-			?>
-		<?= $submissions_pag->pagination() ?>
-		<?php elseif ($cur_tab === 'judger'): ?>
-			<div>
-				<h4>添加评测机</h4>
-				<?php $judger_adder->printHTML(); ?>
-			</div>
-			<div>
-				<h4>删除评测机</h4>
-				<?php $judger_deleter->printHTML(); ?>
-			</div>
-			<h3>评测机列表</h3>
-			<?php echoLongTable($judgerlist_cols, 'judger_info', "1=1", '', $judgerlist_header_row, $judgerlist_print_row, $judgerlist_config) ?>
-		<?php elseif ($cur_tab === 'image_hosting'): ?>
-			<h3>图床管理</h3>
-			<?php echoLongTable($image_hosting_cols, 'users_images', "1=1", 'order by id desc', $image_hosting_header_row, $image_hosting_print_row, $image_hosting_config) ?>
-			<div>
-				<h4>删除图片</h4>
-				<?php $image_deleter->printHTML() ?>
-			</div>
-			<div>
-				<h4>修改用户存储上限</h4>
-				<?php $change_user_image_total_size_limit_form->printHTML() ?>
-			</div>
-		<?php endif ?>
+		</div>
 	</div>
 </div>
+
+<script>
+$(document).ready(function() {
+	// Javascript to enable link to tab
+	var hash = location.hash.replace(/^#/, '');
+	if (hash) {
+		bootstrap.Tab.jQueryInterface.call($('.nav-tabs a[href="#' + hash + '"]'), 'show').blur();
+	}
+
+	// Change hash for page-reload
+	$('.nav-tabs a').on('shown.bs.tab', function(e) {
+		window.location.hash = e.target.hash;
+	});
+});
+</script>
+<?php elseif ($cur_tab == 'users'): ?>
+<div class="card">
+	<div class="card-header">
+		<ul class="nav nav-tabs card-header-tabs">
+			<li class="nav-item">
+				<a class="nav-link active" href="#" data-bs-toggle="tab" data-bs-target="#">Active</a>
+			</li>
+			<li class="nav-item">
+				<a class="nav-link" href="#" data-bs-toggle="tab" data-bs-target="#">2</a>
+			</li>
+		</ul>
+	</div>
+	<div class="card-body">
+		<div class="tab-content">
+			<div class="tab-pane" id="">1</div>
+			<div class="tab-pane" id="">2</div>
+		</div>
+	</div>
+</div>
+<?php endif ?>
+</div>
+<!-- end right col -->
+</div>
+
 <?php echoUOJPageFooter() ?>
diff --git a/web/app/controllers/super_manage_old.php b/web/app/controllers/super_manage_old.php
new file mode 100644
index 0000000..1231e6b
--- /dev/null
+++ b/web/app/controllers/super_manage_old.php
@@ -0,0 +1,867 @@
+<?php
+	requireLib('bootstrap5');
+	requireLib('md5');
+	requireLib('jquery.query');
+	requirePHPLib('form');
+	requirePHPLib('judger');
+	
+	if (!isSuperUser($myUser)) {
+		become403Page();
+	}
+
+	$register_form = new UOJForm('register');
+	$register_form->submit_button_config['align'] = 'compressed';
+	$register_form->addInput('new_username', 'text', '用户名', '',
+		function ($new_username) {
+			if (!validateUsername($new_username)) {
+				return '用户名不合法';
+			}
+			if (queryUser($new_username)) {
+				return '该用户已存在';
+			}
+			return '';
+		},
+		null
+	);
+	$register_form->addInput('new_password', 'password', '密码', '',
+		function ($new_password) {
+			return '';
+		},
+		null
+	);
+	$register_form->addInput('new_realname', 'text', '真实姓名', '',
+		function ($new_realname) {
+			return '';
+		},
+		null
+	);
+	$register_form->addInput('new_school', 'text', '学校名称', '',
+		function ($new_school) {
+			return '';
+		},
+		null
+	);
+	$register_form->handle = function() {
+		$new_username = $_POST['new_username'];
+		$new_password = $_POST['new_password'];
+		$new_realname = DB::escape($_POST['new_realname']);
+		$new_school = DB::escape($_POST['new_school']);
+		$new_password = hash_hmac('md5', $new_password, getPasswordClientSalt());
+		$new_password = getPasswordToStore($new_password, $new_username);
+		$svn_pw = uojRandString(10);
+
+		DB::query("insert into user_info (username, realname, school, password, svn_password, register_time, usergroup) values ('$new_username', '$new_realname', '$new_school', '$new_password', '$svn_pw', now(), 'U')");
+	};
+	$register_form->runAtServer();
+
+	$change_password_form = new UOJForm('change_password');
+	$change_password_form->submit_button_config['align'] = 'compressed';
+	$change_password_form->addInput('p_username', 'text', '用户名', '',
+		function ($p_username) {
+			if (!validateUsername($p_username)) {
+				return '用户名不合法';
+			}
+			if (!queryUser($p_username)) {
+				return '用户不存在';
+			}
+			return '';
+		},
+		null
+	);
+	$change_password_form->addInput('p_password', 'password', '密码', '',
+		function ($p_password) {
+			return '';
+		},
+		null
+	);
+	$change_password_form->handle = function() {
+		$p_username = $_POST['p_username'];
+		$p_password = $_POST['p_password'];
+		$p_password = hash_hmac('md5', $p_password, getPasswordClientSalt());
+		$p_password = getPasswordToStore($p_password, $p_username);
+
+		DB::query("update user_info set password = '$p_password' where username = '$p_username'");
+	};
+	$change_password_form->runAtServer();
+
+	$change_realname_form = new UOJForm('change_realname');
+	$change_realname_form->submit_button_config['align'] = 'compressed';
+	$change_realname_form->addInput('r_username', 'text', '用户名', '',
+		function ($r_username) {
+			if (!validateUsername($r_username)) {
+				return '用户名不合法';
+			}
+			if (!queryUser($r_username)) {
+				return '用户不存在';
+			}
+			return '';
+		},
+		null
+	);
+	$change_realname_form->addInput('r_realname', 'text', '真实姓名', '',
+		function ($r_realname) {
+			return '';
+		},
+		null
+	);
+	$change_realname_form->handle = function() {
+		$r_username = $_POST['r_username'];
+		$r_realname = DB::escape($_POST['r_realname']);
+
+		DB::query("update user_info set realname = '$r_realname' where username = '$r_username'");
+	};
+	$change_realname_form->runAtServer();
+
+	$change_school_form = new UOJForm('change_school');
+	$change_school_form->submit_button_config['align'] = 'compressed';
+	$change_school_form->addInput('s_username', 'text', '用户名', '',
+		function ($s_username) {
+			if (!validateUsername($s_username)) {
+				return '用户名不合法';
+			}
+			if (!queryUser($s_username)) {
+				return '用户不存在';
+			}
+			return '';
+		},
+		null
+	);
+	$change_school_form->addInput('s_school', 'text', '学校名称', '',
+		function ($s_school) {
+			return '';
+		},
+		null
+	);
+	$change_school_form->handle = function() {
+		$s_username = $_POST['s_username'];
+		$s_school = DB::escape($_POST['s_school']);
+
+		DB::query("update user_info set school = '$s_school' where username = '$s_username'");
+	};
+	$change_school_form->runAtServer();
+
+	$user_form = new UOJForm('user');
+	$user_form->submit_button_config['align'] = 'compressed';
+	$user_form->addInput('username', 'text', '用户名', '',
+		function ($username) {
+			if (!validateUsername($username)) {
+				return '用户名不合法';
+			}
+			if (!queryUser($username)) {
+				return '用户不存在';
+			}
+			return '';
+		},
+		null
+	);
+	$options = array(
+		'banneduser' => '设为封禁用户',
+		'normaluser' => '设为普通用户',
+		'superuser' => '设为超级用户'
+	);
+	$user_form->addSelect('op_type', $options, '操作类型', '');
+	$user_form->handle = function() {
+		global $user_form;
+		
+		$username = $_POST['username'];
+		switch ($_POST['op_type']) {
+			case 'banneduser':
+				DB::update("update user_info set usergroup = 'B' where username = '{$username}'");
+				DB::update("update user_info set usertype = 'banned' where username = '{$username}'");
+				break;
+			case 'normaluser':
+				DB::update("update user_info set usergroup = 'U' where username = '{$username}'");
+				DB::update("update user_info set usertype = 'student' where username = '{$username}'");
+				break;
+			case 'superuser':
+				DB::update("update user_info set usergroup = 'S' where username = '{$username}'");
+				DB::update("update user_info set usertype = 'student' where username = '{$username}'");
+				break;
+		}
+	};
+	$user_form->runAtServer();
+
+	$usertype_form = new UOJForm('usertype');
+	$user_form->submit_button_config['align'] = 'compressed';
+	$usertype_form->addInput('usertype_username', 'text', '用户名', '',
+		function ($username) {
+			if (!validateUsername($username)) {
+				return '用户名不合法';
+			}
+			if (!queryUser($username)) {
+				return '用户不存在';
+			}
+			return '';
+		},
+		null
+	);
+	$usertype_options = array(
+		'student' => '学生',
+		'teacher' => '老师',
+		'problem_uploader' => '题目上传者',
+		'problem_manager' => '题目管理员',
+		'contest_judger' => '比赛评测员',
+		'contest_only' => '仅比赛参加者',
+	);
+	$usertype_form->addSelect('usertype_type', $usertype_options, '角色', '');
+	$usertype_form->addSelect('usertype_op', array('add' => '添加', 'remove' => '移除'), '操作', '');
+	$usertype_form->handle = function() {
+		global $usertype_form;
+
+		$username = $_POST['usertype_username'];
+		$user = queryUser($username);
+		switch ($_POST['usertype_type']) {
+			case 'teacher':
+				if ($_POST['usertype_op'] === 'add') {
+					$user = addUserType($user, 'teacher');
+					$user = removeUserType($user, 'student');
+				} else {
+					$user = removeUserType($user, 'teacher');
+					$user = addUserType($user, 'student');
+				}
+				break;
+			case 'problem_manager':
+				if ($_POST['usertype_op'] === 'add') {
+					$user = addUserType($user, 'problem_manager');
+					$user = removeUserType($user, 'problem_uploader');
+				} else {
+					$user = removeUserType($user, 'problem_manager');
+				}
+				break;
+			case 'student':
+			case 'problem_uploader':
+			case 'contest_judger':
+			case 'contest_only':
+				$user = $_POST['usertype_op'] === 'add'
+					? addUserType($user, $_POST['usertype_type'])
+					: removeUserType($user, $_POST['usertype_type']);
+				break;
+		}
+
+		DB::update("update user_info set usertype = '{$user['usertype']}' where username = '{$username}'");
+	};
+	$usertype_form->runAtServer();
+	
+	$blog_link_index = new UOJForm('blog_link_index');
+	$blog_link_index->addInput('blog_id2', 'text', '博客ID', '',
+		function ($x) {
+			if (!validateUInt($x)) {
+				return 'ID不合法';
+			}
+			if (!queryBlog($x)) {
+				return '博客不存在';
+			}
+			return '';
+		},
+		null
+	);
+	$blog_link_index->addInput('blog_level', 'text', '置顶级别（删除不用填）', '0',
+		function ($x) {
+			if (!validateUInt($x)) {
+				return '数字不合法';
+			}
+			if ($x > 3) {
+				return '该级别不存在';
+			}
+			return '';
+		},
+		null
+	);
+	$options = array(
+		'add' => '添加',
+		'del' => '删除'
+	);
+	$blog_link_index->addSelect('op-type2', $options, '操作类型', '');
+	$blog_link_index->handle = function() {
+		$blog_id = $_POST['blog_id2'];
+		$blog_level = $_POST['blog_level'];
+		if ($_POST['op-type2'] == 'add') {
+			if (DB::selectFirst("select * from important_blogs where blog_id = {$blog_id}")) {
+				DB::update("update important_blogs set level = {$blog_level} where blog_id = {$blog_id}");
+			} else {
+				DB::insert("insert into important_blogs (blog_id, level) values ({$blog_id}, {$blog_level})");
+			}
+		}
+		if ($_POST['op-type2'] == 'del') {
+			DB::delete("delete from important_blogs where blog_id = {$blog_id}");
+		}
+	};
+	$blog_link_index->runAtServer();
+	
+	$blog_deleter = new UOJForm('blog_deleter');
+	$blog_deleter->addInput('blog_del_id', 'text', '博客ID', '',
+		function ($x) {
+			if (!validateUInt($x)) {
+				return 'ID不合法';
+			}
+			if (!queryBlog($x)) {
+				return '博客不存在';
+			}
+			return '';
+		},
+		null
+	);
+	$blog_deleter->handle = function() {
+		deleteBlog($_POST['blog_del_id']);
+	};
+	$blog_deleter->runAtServer();
+
+	$countdown_adder = new UOJForm('new_countdown');
+	$countdown_adder->submit_button_config['align'] = 'compressed';
+	$countdown_adder->addInput('new_countdown_title', 'text', '标题', '',
+		function ($new_countdown_title) {
+			return '';
+		},
+		null
+	);
+	$countdown_adder->addInput('new_countdown_endtime', 'text', '截止日期', date("Y-m-d H:i:s"),
+		function($str, &$vdata) {
+			try {
+				$vdata['new_countdown_endtime'] = new DateTime($str);
+			} catch (Exception $e) {
+				return '无效时间格式';
+			}
+			return '';
+		},
+		null
+	);
+	$countdown_adder->handle = function() {
+		$new_countdown_title = $_POST['new_countdown_title'];
+		$new_countdown_endtime = $_POST['new_countdown_endtime'];
+		$esc_countdown_title = DB::escape($new_countdown_title);
+
+		DB::query("insert into countdowns (title, endtime) values ('$esc_countdown_title', '$new_countdown_endtime')");
+	};
+	$countdown_adder->runAtServer();
+
+	$countdown_deleter = new UOJForm('delete_countdown');
+	$countdown_deleter->submit_button_config['align'] = 'compressed';
+	$countdown_deleter->addInput('delete_countdown_id', 'text', 'ID', '',
+		function ($x) {
+			if (!validateUInt($x)) {
+				return 'ID不合法';
+			}
+
+			if (!DB::selectFirst("select * from countdowns where id = $x")) {
+				return '倒计时不存在';
+			}
+
+			return '';
+		},
+		null
+	);
+	$countdown_deleter->handle = function() {
+		$delete_countdown_id = $_POST['delete_countdown_id'];
+
+		DB::query("delete from countdowns where id = $delete_countdown_id");
+	};
+	$countdown_deleter->runAtServer();
+
+	$countdowns_header_row = <<<EOD
+	<tr>
+		<th>ID</th>
+		<th>标题</th>
+		<th>时间</th>
+	</tr>
+EOD;
+	$countdowns_print_row = function($row) {
+		echo <<<EOD
+	<tr>
+		<td>{$row['id']}</td>
+		<td>{$row['title']}</td>
+		<td>{$row['endtime']}</td>
+	</tr>
+EOD;
+	};
+
+	$friend_link_adder = new UOJForm('new_friend_link');
+	$friend_link_adder->submit_button_config['align'] = 'compressed';
+	$friend_link_adder->addInput('new_friend_link_title', 'text', '名称', '',
+		function ($str) {
+			return '';
+		},
+		null
+	);
+	$friend_link_adder->addInput('new_friend_link_url', 'text', '链接', '',
+		function($str) {
+			if (!validateURL($str)) {
+				return '链接不合法';
+			}
+
+			return '';
+		},
+		null
+	);
+	$friend_link_adder->addInput('new_friend_link_level', 'text', '权重', '10',
+		function($str) {
+			if (!validateUInt($str)) {
+				return '权重必须是数字';
+			}
+
+			return '';
+		},
+		null
+	);
+	$friend_link_adder->handle = function() {
+		$new_friend_link_title = $_POST['new_friend_link_title'];
+		$new_friend_link_url = $_POST['new_friend_link_url'];
+		$new_friend_link_level = $_POST['new_friend_link_level'];
+		$esc_new_friend_link_title = DB::escape($new_friend_link_title);
+		$esc_new_friend_link_url = DB::escape($new_friend_link_url);
+
+		DB::query("insert into friend_links (title, url, level) values ('$esc_new_friend_link_title', '$esc_new_friend_link_url', $new_friend_link_level)");
+	};
+	$friend_link_adder->runAtServer();
+
+	$friend_link_deleter = new UOJForm('delete_friend_link');
+	$friend_link_deleter->submit_button_config['align'] = 'compressed';
+	$friend_link_deleter->addInput('delete_friend_link_id', 'text', 'ID', '',
+		function ($id) {
+			if (!validateUInt($id)) {
+				return 'ID不合法';
+			}
+
+			if (!DB::selectFirst("select * from friend_links where id = $id")) {
+				return 'ID不存在';
+			}
+
+			return '';
+		},
+		null
+	);
+	$friend_link_deleter->handle = function() {
+		$delete_friend_link_id = $_POST['delete_friend_link_id'];
+
+		DB::query("delete from friend_links where id = $delete_friend_link_id");
+	};
+	$friend_link_deleter->runAtServer();
+
+	$friend_links_header_row = <<<EOD
+	<tr>
+		<th>ID</th>
+		<th>名称</th>
+		<th>链接</th>
+		<th>置顶等级</th>
+	</tr>
+EOD;
+	$friend_links_print_row = function($row) {
+		echo <<<EOD
+	<tr>
+		<td>{$row['id']}</td>
+		<td>{$row['title']}</td>
+		<td>{$row['url']}</td>
+		<td>{$row['level']}</td>
+	</tr>
+EOD;
+	};
+
+	$contest_submissions_deleter = new UOJForm('contest_submissions');
+	$contest_submissions_deleter->addInput('contest_id', 'text', '比赛ID', '',
+		function ($x) {
+			if (!validateUInt($x)) {
+				return 'ID不合法';
+			}
+			if (!queryContest($x)) {
+				return '博客不存在';
+			}
+			return '';
+		},
+		null
+	);
+	$contest_submissions_deleter->handle = function() {
+		$contest = queryContest($_POST['contest_id']);
+		genMoreContestInfo($contest);
+		
+		$contest_problems = DB::selectAll("select problem_id from contests_problems where contest_id = {$contest['id']}");
+		foreach ($contest_problems as $problem) {
+			$submissions = DB::selectAll("select * from submissions where problem_id = {$problem['problem_id']} and submit_time < '{$contest['start_time_str']}'");
+			foreach ($submissions as $submission) {
+				$content = json_decode($submission['content'], true);
+				unlink(UOJContext::storagePath().$content['file_name']);
+				DB::delete("delete from submissions where id = {$submission['id']}");
+				updateBestACSubmissions($submission['submitter'], $submission['problem_id']);
+			}
+		}
+	};
+	$contest_submissions_deleter->runAtServer();
+
+	$custom_test_deleter = new UOJForm('custom_test_deleter');
+	$custom_test_deleter->addInput('last', 'text', '删除末尾记录', '5',
+		function ($x, &$vdata) {
+			if (!validateUInt($x)) {
+				return '不合法';
+			}
+			$vdata['last'] = $x;
+			return '';
+		},
+		null
+	);
+	$custom_test_deleter->handle = function(&$vdata) {
+		$all = DB::selectAll("select * from custom_test_submissions order by id asc limit {$vdata['last']}");
+		foreach ($all as $submission) {
+			$content = json_decode($submission['content'], true);
+			unlink(UOJContext::storagePath().$content['file_name']);
+		}
+		DB::delete("delete from custom_test_submissions order by id asc limit {$vdata['last']}");
+	};
+	$custom_test_deleter->runAtServer();
+
+	$judger_adder = new UOJForm('judger_adder');
+	$judger_adder->addInput('judger_adder_name', 'text', '评测机名称', '',
+		function ($x, &$vdata) {
+			if (!validateUsername($x)) {
+				return '不合法';
+			}
+			if (DB::selectCount("select count(*) from judger_info where judger_name='$x'")!=0) {
+				return '不合法';
+			}
+			$vdata['name'] = $x;
+			return '';
+		},
+		null
+	);
+	$judger_adder->handle = function(&$vdata) {
+		$password=uojRandString(32);
+		DB::insert("insert into judger_info (judger_name,password) values('{$vdata['name']}','{$password}')");
+	};
+	$judger_adder->runAtServer();
+	
+	$judger_deleter = new UOJForm('judger_deleter');
+	$judger_deleter->addInput('judger_deleter_name', 'text', '评测机名称', '',
+		function ($x, &$vdata) {
+			if (!validateUsername($x)) {
+				return '不合法';
+			}
+			if (DB::selectCount("select count(*) from judger_info where judger_name='$x'")!=1) {
+				return '不合法';
+			}
+			$vdata['name'] = $x;
+			return '';
+		},
+		null
+	);
+	$judger_deleter->handle = function(&$vdata) {
+		DB::delete("delete from judger_info where judger_name='{$vdata['name']}'");
+	};
+	$judger_deleter->runAtServer();
+
+	$judgerlist_cols = array('judger_name', 'password');
+	$judgerlist_config = array();
+	$judgerlist_header_row = <<<EOD
+	<tr>
+		<th>评测机名称</th>
+		<th>密码</th>
+	</tr>
+EOD;
+	$judgerlist_print_row = function($row) {
+		echo <<<EOD
+			<tr>
+				<td>{$row['judger_name']}</td>
+				<td>{$row['password']}</td>
+			</tr>
+EOD;
+	};
+	
+	$userlist_cols = array('username', 'school', 'usergroup', 'usertype', 'register_time');
+	$userlist_config = array('page_len' => 20,
+			'table_classes' => array('table', 'table-bordered', 'table-hover', 'table-striped'));
+	$userlist_header_row = <<<EOD
+	<tr>
+		<th>用户名</th>
+		<th>学校</th>
+		<th style="width: 6em">用户类别</th>
+		<th style="width: 12em">注册时间</th>
+	</tr>
+EOD;
+
+	$cur_tab = isset($_GET['tab']) ? $_GET['tab'] : 'users';
+
+	$user_list_cond = array();
+	if ($cur_tab === 'users') {
+		if (isset($_GET['username']) && $_GET['username'] != "") {
+			$user_list_cond[] = "username like '%" . DB::escape($_GET['username']) . "%'";
+		}
+		if (isset($_GET['usergroup']) && $_GET['usergroup'] != "") {
+			$user_list_cond[] = "usergroup = '" . DB::escape($_GET['usergroup']) . "'";
+		}
+	}
+	if ($user_list_cond) {
+		$user_list_cond = join($user_list_cond, ' and ');
+	} else {
+		$user_list_cond = '1';
+	}
+
+	$userlist_print_row = function($row) {
+		$hislink = getUserLink($row['username']);
+		echo <<<EOD
+			<tr>
+				<td>${hislink}</td>
+				<td>{$row['school']}</td>
+				<td>{$row['usergroup']}, {$row['usertype']}</td>
+				<td>{$row['register_time']}</td>
+			</tr>
+EOD;
+	};
+
+	$image_hosting_cols = ['*'];
+	$image_hosting_config = ['page_len' => 20, 'table_classes' => ['table', 'table-bordered', 'table-hover', 'table-striped']];
+	$image_hosting_header_row = <<<EOD
+	<tr>
+		<th>ID</th>
+		<th>上传者</th>
+		<th>预览</th>
+		<th style="width: 3em">文件大小</th>
+		<th style="width: 12em">上传时间</th>
+	</tr>
+EOD;
+	$image_hosting_print_row = function($row) {
+		$user_link = getUserLink($row['uploader']);
+		if ($row['size'] < 1024 * 512) {
+			$size = strval(round($row['size'] * 1.0 / 1024, 1)) . ' KB';
+		} else {
+			$size = strval(round($row['size'] * 1.0 / 1024 / 1024, 1)) . ' MB';
+		}
+
+		echo <<<EOD
+	<tr>
+		<td>{$row['id']}</td>
+		<td>$user_link</td>
+		<td><img src="{$row['path']}" width="250"></td>
+		<td>$size</td>
+		<td>{$row['upload_time']}</td>
+	</tr>
+EOD;
+	};
+
+	$image_deleter = new UOJForm('image_deleter');
+	$image_deleter->submit_button_config['align'] = 'compressed';
+	$image_deleter->submit_button_config['text'] = '删除';
+	$image_deleter->submit_button_config['class_str'] = 'btn btn-danger';
+	$image_deleter->addInput('image_deleter_id', 'text', '图片 ID', '',
+		function ($x, &$vdata) {
+			if (!validateUInt($x)) {
+				return 'ID 不合法';
+			}
+			if (!DB::selectCount("select count(*) from users_images where id = $x")) {
+				return '图片不存在';
+			}
+			$vdata['id'] = $x;
+			return '';
+		},
+		null
+	);
+	$image_deleter->handle = function(&$vdata) {
+		$id = $vdata['id'];
+		$result = DB::selectFirst("SELECT * from users_images WHERE id = $id");
+		unlink(UOJContext::storagePath().$result['path']);
+		DB::delete("DELETE FROM users_images WHERE id = $id");
+	};
+	$image_deleter->runAtServer();
+
+	$change_user_image_total_size_limit_form = new UOJForm('change_user_image_total_size_limit');
+	$change_user_image_total_size_limit_form->submit_button_config['align'] = 'compressed';
+	$change_user_image_total_size_limit_form->addInput('change_user_image_total_size_limit_username', 'text', '用户名', '',
+		function ($x, &$vdata) {
+			if (!validateUsername($x)) {
+				return '用户名不合法';
+			}
+			if (!queryUser($x)) {
+				return '用户不存在';
+			}
+			$vdata['username'] = $x;
+			return '';
+		},
+		null
+	);
+	$change_user_image_total_size_limit_form->addInput('change_user_image_total_size_limit_limit', 'text', '存储限制（单位：Byte）', '104857600',
+		function ($x, &$vdata) {
+			if (!validateUInt($x, 10)) {
+				return '限制不合法';
+			}
+			if (intval($x) > 2147483648) {
+				return '限制不能大于 2 GB';
+			}
+			$vdata['limit'] = $x;
+			return '';
+		},
+		null
+	);
+	$change_user_image_total_size_limit_form->handle = function(&$vdata) {
+		DB::update("UPDATE user_info SET images_size_limit = {$vdata['limit']} WHERE username = '{$vdata['username']}'");
+	};
+	$change_user_image_total_size_limit_form->runAtServer();
+
+	$tabs_info = array(
+		'users' => array(
+			'name' => '用户管理',
+			'url' => "/super-manage/users"
+		),
+		'blogs' => array(
+			'name' => '博客管理',
+			'url' => "/super-manage/blogs"
+		),
+		'index' => array(
+			'name' => '首页管理',
+			'url' => '/super-manage/index'
+		),
+		'submissions' => array(
+			'name' => '提交记录',
+			'url' => "/super-manage/submissions"
+		),
+		'custom-test' => array(
+			'name' => '自定义测试',
+			'url' => '/super-manage/custom-test'
+		),
+		'judger' => array(
+			'name' => '评测机管理',
+			'url' => '/super-manage/judger'
+		),
+		'image_hosting' => array(
+			'name' => '图床管理',
+			'url' => '/super-manage/image_hosting'
+		)
+	);
+	
+	if (!isset($tabs_info[$cur_tab])) {
+		become404Page();
+	}
+	?>
+<?php
+	requireLib('shjs');
+	requireLib('morris');
+	?>
+<?php echoUOJPageHeader('系统管理') ?>
+<div class="row">
+	<div class="col-sm-3">
+		<?= HTML::tablist($tabs_info, $cur_tab, 'nav-pills flex-column') ?>
+	</div>
+	
+	<div class="col-sm-9">
+		<?php if ($cur_tab === 'users'): ?>
+			<h3>添加新用户</h3>
+			<?php $register_form->printHTML(); ?>
+			<h3>修改用户密码</h3>
+			<?php $change_password_form->printHTML(); ?>
+			<h3>用户类别设置</h3>
+			<p>在此处更新用户所属类别后会自动重置用户权限。</p>
+			<?php $user_form->printHTML(); ?>
+			<h3>用户权限管理</h3>
+			<?php $usertype_form->printHTML(); ?>
+			<h3>修改用户真实姓名</h3>
+			<?php $change_realname_form->printHTML(); ?>
+			<h3>修改用户学校名称</h3>
+			<?php $change_school_form->printHTML(); ?>
+			<h3>用户名单</h3>
+			<div id="user-query">
+				<form class="form-horizontal uoj-form-compressed" target="_self" method="GET">
+					<div class="form-group">
+						<label for="username" class="col-sm-2 control-label">用户名</label>
+						<div class="col-sm-3">
+							<input type="text" class="form-control" name="username" id="user-query-username" value="" />
+						</div>
+					</div>
+					<div class="form-group">
+						<label for="usergroup" class="col-sm-2 control-label">用户类别</label>
+						<div class="col-sm-3">
+							<select class="form-control" id="user-query-usergroup" name="usergroup">
+								<option value="">*: 所有用户</option>
+								<option value="B">B: 封禁用户</option>
+								<option value="U">U: 普通用户</option>
+								<option value="S">S: 超级用户</option>
+							</select>
+						</div>
+					</div><div class="text-center"><button type="submit" id="user-query-submit" class="mt-2 btn btn-secondary">查询</button></div>
+				</form>
+			</div>
+			<?php echoLongTable($userlist_cols, 'user_info', $user_list_cond, 'order by username asc', $userlist_header_row, $userlist_print_row, $userlist_config) ?>
+		<?php elseif ($cur_tab === 'blogs'): ?>
+			<div>
+				<h4>添加到公告</h4>
+				<?php $blog_link_index->printHTML(); ?>
+			</div>
+		
+			<div>
+				<h4>删除博客</h4>
+				<?php $blog_deleter->printHTML(); ?>
+			</div>
+		<?php elseif ($cur_tab === 'index'): ?>
+			<div>
+				<h4>倒计时</h4>
+				<?php echoLongTable(array('id', 'title', 'endtime'), 'countdowns', '1', 'order by endtime asc', $countdowns_header_row, $countdowns_print_row, $userlist_config) ?>
+				<h5>添加倒计时</h5>
+				<?php $countdown_adder->printHTML(); ?>
+				<h5>删除倒计时</h5>
+				<?php $countdown_deleter->printHTML(); ?>
+
+				<h4>友情链接</h4>
+				<?php echoLongTable(array('id', 'title', 'url', 'level'), 'friend_links', '1', 'order by level desc, id asc', $friend_links_header_row, $friend_links_print_row, $userlist_config) ?>
+				<h5>添加友情链接</h5>
+				<?php $friend_link_adder->printHTML(); ?>
+				<h5>删除友情链接</h5>
+				<?php $friend_link_deleter->printHTML(); ?>
+			</div>
+		<?php elseif ($cur_tab === 'submissions'): ?>
+			<div>
+				<h4>删除赛前提交记录</h4>
+				<?php $contest_submissions_deleter->printHTML(); ?>
+			</div>
+			<div>
+				<h4>测评失败的提交记录</h4>
+				<?php echoSubmissionsList("result_error = 'Judgement Failed'", 'order by id desc', array('result_hidden' => ''), $myUser); ?>
+			</div>
+		<?php elseif ($cur_tab === 'custom-test'): ?>
+		<?php $custom_test_deleter->printHTML() ?>
+		<?php
+				$submissions_pag = new Paginator(array(
+					'col_names' => array('*'),
+					'table_name' => 'custom_test_submissions',
+					'cond' => '1',
+					'tail' => 'order by id asc',
+					'page_len' => 5
+				));
+			foreach ($submissions_pag->get() as $submission) {
+				$problem = queryProblemBrief($submission['problem_id']);
+				$submission_result = json_decode($submission['result'], true);
+				echo '<dl class="dl-horizontal">';
+				echo '<dt>id</dt>';
+				echo '<dd>', "#{$submission['id']}", '</dd>';
+				echo '<dt>problem_id</dt>';
+				echo '<dd>', "#{$submission['problem_id']}", '</dd>';
+				echo '<dt>submit time</dt>';
+				echo '<dd>', $submission['submit_time'], '</dd>';
+				echo '<dt>submitter</dt>';
+				echo '<dd>', $submission['submitter'], '</dd>';
+				echo '<dt>judge_time</dt>';
+				echo '<dd>', $submission['judge_time'], '</dd>';
+				echo '</dl>';
+				echoSubmissionContent($submission, getProblemCustomTestRequirement($problem));
+				echoCustomTestSubmissionDetails($submission_result['details'], "submission-{$submission['id']}-details");
+			}
+			?>
+		<?= $submissions_pag->pagination() ?>
+		<?php elseif ($cur_tab === 'judger'): ?>
+			<div>
+				<h4>添加评测机</h4>
+				<?php $judger_adder->printHTML(); ?>
+			</div>
+			<div>
+				<h4>删除评测机</h4>
+				<?php $judger_deleter->printHTML(); ?>
+			</div>
+			<h3>评测机列表</h3>
+			<?php echoLongTable($judgerlist_cols, 'judger_info', "1=1", '', $judgerlist_header_row, $judgerlist_print_row, $judgerlist_config) ?>
+		<?php elseif ($cur_tab === 'image_hosting'): ?>
+			<h3>图床管理</h3>
+			<?php echoLongTable($image_hosting_cols, 'users_images', "1=1", 'order by id desc', $image_hosting_header_row, $image_hosting_print_row, $image_hosting_config) ?>
+			<div>
+				<h4>删除图片</h4>
+				<?php $image_deleter->printHTML() ?>
+			</div>
+			<div>
+				<h4>修改用户存储上限</h4>
+				<?php $change_user_image_total_size_limit_form->printHTML() ?>
+			</div>
+		<?php endif ?>
+	</div>
+</div>
+<?php echoUOJPageFooter() ?>
diff --git a/web/app/controllers/user_info_edit.php b/web/app/controllers/user_info_edit.php
index dbd9f49..a79092c 100644
--- a/web/app/controllers/user_info_edit.php
+++ b/web/app/controllers/user_info_edit.php
@@ -341,7 +341,7 @@ EOD);
 				</div>
 				<?php if (isSuperUser($myUser) && $user['username'] != $myUser['username']): ?>
 				<div class="alert alert-warning mb-0" role="alert">
-					如需重置其他用户的密码，请前往 <a href="/super-manage/users" class="alert-link">系统管理</a> 页面操作。
+					如需重置其他用户的密码，请前往 <a href="/super_manage/users" class="alert-link">系统管理</a> 页面操作。
 				</div>
 				<?php endif ?>
 
diff --git a/web/app/libs/uoj-form-lib.php b/web/app/libs/uoj-form-lib.php
index 897111a..18560c2 100644
--- a/web/app/libs/uoj-form-lib.php
+++ b/web/app/libs/uoj-form-lib.php
@@ -111,7 +111,7 @@ EOD;
 	<label for="input-$name" class="col-sm-2 control-label">$label_text</label>
 	<div class="col-sm-3">
 		<input type="$type" class="form-control" name="$name" id="input-$name" value="$default_value" />
-		<span class="help-block" id="help-$name"></span>
+		<span class="help-block invalid-feedback" id="help-$name"></span>
 	</div>
 </div>
 EOD;
@@ -197,7 +197,7 @@ EOD;
 	<label for="input-$name" class="col-sm-2 control-label">$label_text</label>
 	<div class="col-sm-10">
 		<textarea class="form-control" name="$name" id="input-$name">$default_value</textarea>
-		<span class="help-block" id="help-$name"></span>
+		<span class="help-block invalid-feedback" id="help-$name"></span>
 	</div>
 </div>
 EOD;
@@ -210,7 +210,7 @@ EOD;
 <div id="div-$name" class="form-group">
 	<label for="input-$name" class="control-label">$label_text</label>
 	<textarea class="form-control" name="$name" id="input-$name">$default_value</textarea>
-	<span class="help-block" id="help-$name"></span>
+	<span class="help-block invalid-feedback" id="help-$name"></span>
 </div>
 EOD;
 			$this->add($name, $html, $validator_php, $validator_js, $no_val);
@@ -270,7 +270,7 @@ EOD;
 <div id="div-$name">
 	<label for="input-$name" class="control-label">$label_text</label>
 	<textarea class="ckeditor" name="$name" id="input-$name">$default_value</textarea>
-	<span class="help-block" id="help-$name"></span>
+	<span class="help-block invalid-feedback" id="help-$name"></span>
 </div>
 EOD;
 			$this->add($name, $html, $validator_php, $validator_js);
@@ -333,7 +333,7 @@ EOD
 <div id="div-$name">
 	<label for="input-$name" class="control-label">$label_text</label>
 	<textarea name="$name" id="input-$name">$default_value</textarea>
-	<span class="help-block" id="help-$name"></span>
+	<span class="help-block invalid-feedback" id="help-$name"></span>
 </div>
 <script type="text/javascript">
 $('#input-$name').slide_editor();
@@ -794,7 +794,7 @@ EOD;
 			<button type="button" class="btn btn-primary" style="width:100px; !important" onclick="$('#input-{$name}').click();"><span class="glyphicon glyphicon-folder-open"></span> $browse_text</button>
 		</span>
 	</div>
-	<span class="help-block" id="help-{$name}"></span>
+	<span class="help-block invalid-feedback" id="help-{$name}"></span>
 </div>
 EOD;
 		
diff --git a/web/app/route.php b/web/app/route.php
index f4f2789..5932527 100644
--- a/web/app/route.php
+++ b/web/app/route.php
@@ -58,6 +58,7 @@ Route::group([
 		}
 		Route::any('/blogs/{id}', '/blog_show.php');
 		Route::any('/post/{id}', '/blog_show.php');
+		Route::any('/post/{id}/write', '/blog_show.php?sub=%2Fwrite');
 		
 		Route::any('/announcements', '/announcements.php');
 		
@@ -76,7 +77,8 @@ Route::group([
 		Route::any('/user_msg', '/user_msg.php');
 		Route::any('/user/{username}/system_msg', '/user_system_msg.php');
 
-		Route::any('/super-manage(?:/{tab})?', '/super_manage.php');
+		Route::any('/super-manage(?:/{tab})?', '/super_manage_old.php');
+		Route::any('/super_manage(?:/{tab})?', '/super_manage.php');
 		
 		Route::any('/download.php', '/download.php');
 		
diff --git a/web/app/views/blog-nav.php b/web/app/views/blog-nav.php
index 5f40b83..ae040d3 100644
--- a/web/app/views/blog-nav.php
+++ b/web/app/views/blog-nav.php
@@ -145,7 +145,7 @@ mb-4" role="navigation">
 						</li>
 						<?php if (isSuperUser(Auth::user())): ?>
 							<li>
-								<a class="dropdown-item" href="<?= HTML::url('/super-manage') ?>">
+								<a class="dropdown-item" href="<?= HTML::url('/super_manage') ?>">
 									<?= UOJLocale::get('system manage') ?>
 								</a>
 							</li>
diff --git a/web/app/views/main-nav.php b/web/app/views/main-nav.php
index 7a3c40c..6adc9e4 100644
--- a/web/app/views/main-nav.php
+++ b/web/app/views/main-nav.php
@@ -212,7 +212,7 @@ mb-4" role="navigation">
 						</li>
 						<?php if (isSuperUser(Auth::user())): ?>
 							<li>
-								<a class="dropdown-item" href="<?= HTML::url('/super-manage') ?>">
+								<a class="dropdown-item" href="<?= HTML::url('/super_manage') ?>">
 									<?= UOJLocale::get('system manage') ?>
 								</a>
 							</li>
diff --git a/web/js/uoj.js b/web/js/uoj.js
index 3c1f465..513b4ce 100644
--- a/web/js/uoj.js
+++ b/web/js/uoj.js
@@ -576,18 +576,38 @@ $.fn.long_table = function(data, cur_page, header_row, get_row_str, config) {
 		if (n_pages > 1) {
 			var pagination = $('<ul class="pagination top-buffer-no bot-buffer-sm justify-content-center"></ul>');
 			if (cur_page > 1) {
-				pagination.append(get_page_li(cur_page - 1, '<span class="glyphicon glyphicon glyphicon-backward"></span>'));
+				if (isBootstrap5Page) {
+					pagination.append(get_page_li(1, '<i class="bi bi-chevron-double-left"></i>'));
+					pagination.append(get_page_li(cur_page - 1, '<i class="bi bi-chevron-left"></i>'));
+				} else {
+					pagination.append(get_page_li(cur_page - 1, '<span class="glyphicon glyphicon glyphicon-backward"></span>'));
+				}
 			} else {
-				pagination.append(get_page_li(-1, '<span class="glyphicon glyphicon glyphicon-backward"></span>'));
+				if (isBootstrap5Page) {
+					pagination.append(get_page_li(-1, '<i class="bi bi-chevron-double-left"></i>'));
+					pagination.append(get_page_li(-1, '<i class="bi bi-chevron-left"></i>'));
+				} else {
+					pagination.append(get_page_li(-1, '<span class="glyphicon glyphicon glyphicon-backward"></span>'));
+				}
 			}
 			var max_extend = config.max_extend != undefined ? config.max_extend : 5;
 			for (var i = Math.max(cur_page - max_extend, 1); i <= Math.min(cur_page + max_extend, n_pages); i++) {
 				pagination.append(get_page_li(i, i.toString()));
 			}
 			if (cur_page < n_pages) {
-				pagination.append(get_page_li(cur_page + 1, '<span class="glyphicon glyphicon glyphicon-forward"></span>'));
+				if (isBootstrap5Page) {
+					pagination.append(get_page_li(cur_page + 1, '<i class="bi bi-chevron-right"></i>'));
+					pagination.append(get_page_li(n_pages, '<i class="bi bi-chevron-double-right"></i>'));
+				} else {
+					pagination.append(get_page_li(cur_page + 1, '<span class="glyphicon glyphicon glyphicon-forward"></span>'));
+				}
 			} else {
-				pagination.append(get_page_li(-1, '<span class="glyphicon glyphicon glyphicon-forward"></span>'));
+				if (isBootstrap5Page) {
+					pagination.append(get_page_li(-1, '<i class="bi bi-chevron-right"></i>'));
+					pagination.append(get_page_li(-1, '<i class="bi bi-chevron-double-right"></i>'));
+				} else {
+					pagination.append(get_page_li(-1, '<span class="glyphicon glyphicon glyphicon-forward"></span>'));
+				}
 			}
 			$(table_div).append($('<div class="text-center"></div>').append(pagination));
 		}

From bf179148a1282ee48ec1ff15f06c585b8475e168 Mon Sep 17 00:00:00 2001
From: Baoshuo <i@baoshuo.ren>
Date: Thu, 20 Oct 2022 19:50:53 +0800
Subject: [PATCH 2/8] refactor(web/super_manage): users manage

---
 web/app/controllers/super_manage.php   | 419 ++++++++++++++++++++++++-
 web/app/controllers/user_info_edit.php |  14 +
 web/app/libs/uoj-html-lib.php          |   2 +-
 web/app/locale/user/en.php             |   4 +
 web/app/locale/user/zh-cn.php          |   4 +
 5 files changed, 435 insertions(+), 8 deletions(-)

diff --git a/web/app/controllers/super_manage.php b/web/app/controllers/super_manage.php
index 19e0960..59edbac 100644
--- a/web/app/controllers/super_manage.php
+++ b/web/app/controllers/super_manage.php
@@ -7,6 +7,10 @@
 
 	define('SCRIPT_REFRESH_AS_GET', '<script>;window.location = window.location.origin + window.location.pathname + (window.location.search.length ? window.location.search + "&" : "?") + "_=" + (+new Date()) + window.location.hash;</script>');
 
+	if (!Auth::check()) {
+		redirectToLogin();
+	}
+
 	if (!isSuperUser($myUser)) {
 		become403Page();
 	}
@@ -225,7 +229,234 @@
 		$add_link_form->succ_href = '/super_manage/index#links';
 		$add_link_form->runAtServer();
 	} elseif ($cur_tab == 'users') {
-		//
+		$user_list_cond = [];
+
+		if (isset($_GET['username']) && $_GET['username'] != "") {
+			$user_list_cond[] = "username like '%" . DB::escape($_GET['username']) . "%'";
+		}
+		if (isset($_GET['usergroup']) && $_GET['usergroup'] != "") {
+			$user_list_cond[] = "usergroup = '" . DB::escape($_GET['usergroup']) . "'";
+		}
+		if (isset($_GET['usertype']) && $_GET['usertype'] != "") {
+			$user_list_cond[] = "usertype like '%" . DB::escape($_GET['usertype']) . "%'";
+		}
+
+		if ($user_list_cond) {
+			$user_list_cond = join($user_list_cond, ' and ');
+		} else {
+			$user_list_cond = '1';
+		}
+
+		$register_form = new UOJForm('register');
+		$register_form->addVInput('new_username', 'text', '用户名', '',
+			function ($username, &$vdata) {
+				if (!validateUsername($username)) {
+					return '用户名不合法';
+				}
+
+				if (queryUser($username)) {
+					return '该用户已存在';
+				}
+
+				$vdata['username'] = $username;
+
+				return '';
+			},
+			null
+		);
+		$register_form->addVInput('new_password', 'password', '密码', '',
+			function ($password, &$vdata) {
+				$vdata['password'] = $password;
+
+				return '';
+			},
+			'validatePassword'
+		);
+		$register_form->addVInput('new_email', 'text', '电子邮件（选填）', '',
+			function ($email, &$vdata) {
+				if ($email && !validateEmail($email)) {
+					return '邮件地址不合法';
+				}
+
+				$vdata['email'] = $email;
+
+				return '';
+			},
+			null
+		);
+		$register_form->addVInput('new_realname', 'text', '真实姓名（选填）', '',
+			function ($realname, &$vdata) {
+				$vdata['realname'] = $realname;
+
+				return '';
+			},
+			null
+		);
+		$register_form->addVInput('new_school', 'text', '学校名称（选填）', '',
+			function ($school, &$vdata) {
+				$vdata['school'] = $school;
+
+				return '';
+			},
+			null
+		);
+		$register_form->handle = function(&$vdata) {
+			$username = $vdata['username'];
+			$realname = DB::escape($vdata['realname']);
+			$school = DB::escape($vdata['school']);
+			$email = DB::escape($vdata['email']);
+			$password = hash_hmac('md5', $vdata['password'], getPasswordClientSalt());
+			$password = getPasswordToStore($password, $username);
+			$svn_password = uojRandString(10);
+	
+			DB::query("insert into user_info (username, realname, email, school, password, svn_password, register_time, usergroup) values ('$username', '$realname', '$email', '$school', '$password', '$svn_password', now(), 'U')");
+			
+			header('Content-Type: application/json');
+			die(json_encode(['status' => 'success', 'message' => '']));
+		};
+		$register_form->setAjaxSubmit(<<<EOD
+		function(res) {
+			if (res.status === 'success') {
+				$('#result-alert-register')
+					.html('用户新建成功！' + (res.message || ''))
+					.addClass('alert-success')
+					.removeClass('alert-danger')
+					.show();
+			} else {
+				$('#result-alert-register')
+					.html('用户新建失败。' + (res.message || ''))
+					.removeClass('alert-success')
+					.addClass('alert-danger')
+					.show();
+			}
+
+			$(window).scrollTop(0);
+		}
+EOD);
+		$register_form->runAtServer();
+
+		$change_password_form = new UOJForm('change_password');
+		$change_password_form->addVInput('p_username', 'text', '用户名', '',
+			function ($username, &$vdata) {
+				if (!validateUsername($username)) {
+					return '用户名不合法';
+				}
+
+				if (!queryUser($username)) {
+					return '用户不存在';
+				}
+
+				$vdata['username'] = $username;
+				
+				return '';
+			},
+			null
+		);
+		$change_password_form->addVInput('p_password', 'password', '密码', '',
+			function ($password, &$vdata) {
+				$vdata['password'] = $password;
+
+				return '';
+			},
+			'validatePassword'
+		);
+		$change_password_form->handle = function(&$vdata) {
+			$esc_username = DB::escape($vdata['username']);
+			$password = hash_hmac('md5', $vdata['password'], getPasswordClientSalt());
+			$esc_password = DB::escape(getPasswordToStore($password, $vdata['username']));
+
+			DB::query("update user_info set password = '$esc_password' where username = '$esc_username'");
+
+			header('Content-Type: application/json');
+			die(json_encode(['status' => 'success', 'message' => '用户 ' . $vdata['username'] . ' 的密码已经被成功重置。']));
+		};
+		$change_password_form->submit_button_config['margin_class'] = 'mt-3';
+		$change_password_form->submit_button_config['text'] = '重置';
+		$change_password_form->setAjaxSubmit(<<<EOD
+		function(res) {
+			if (res.status === 'success') {
+				$('#result-alert-reset-password')
+					.html('密码重置成功！' + (res.message || ''))
+					.addClass('alert-success')
+					.removeClass('alert-danger')
+					.show();
+			} else {
+				$('#result-alert-reset-password')
+					.html('密码重置失败。' + (res.message || ''))
+					.removeClass('alert-success')
+					.addClass('alert-danger')
+					.show();
+			}
+
+			$(window).scrollTop(0);
+		}
+EOD);
+		$change_password_form->runAtServer();
+
+		$change_usergroup_form = new UOJForm('change_usergroup');
+		$change_usergroup_form->addVInput('username', 'text', '用户名', '',
+			function ($username, &$vdata) {
+				if (!validateUsername($username)) {
+					return '用户名不合法';
+				}
+
+				if (!queryUser($username)) {
+					return '用户不存在';
+				}
+				
+				$vdata['username'] = $username;
+
+				return '';
+			},
+			null
+		);
+		$change_usergroup_form->addVSelect('op_type', [
+			'banneduser' => '设为封禁用户',
+			'normaluser' => '设为普通用户',
+			'superuser' => '设为超级用户',
+		], '操作类型', '');
+		$change_usergroup_form->handle = function($vdata) {
+			$username = $vdata['username'];
+			$usergroup = '';
+
+			switch ($_POST['op_type']) {
+				case 'banneduser':
+					DB::update("update user_info set usergroup = 'B', usertype = 'banned' where username = '{$username}'");
+					$usergroup = '被封禁的用户';
+					break;
+				case 'normaluser':
+					DB::update("update user_info set usergroup = 'U', usertype = 'student' where username = '{$username}'");
+					$usergroup = '普通用户';
+					break;
+				case 'superuser':
+					DB::update("update user_info set usergroup = 'S', usertype = 'student' where username = '{$username}'");
+					$usergroup = '超级用户';
+					break;
+			}
+
+			header('Content-Type: application/json');
+			die(json_encode(['status' => 'success', 'message' => '用户 ' . $username . ' 现在是 ' . $usergroup . '。']));
+		};
+		$change_usergroup_form->setAjaxSubmit(<<<EOD
+		function(res) {
+			if (res.status === 'success') {
+				$('#result-alert-change_usergroup')
+					.html('修改成功！' + (res.message || ''))
+					.addClass('alert-success')
+					.removeClass('alert-danger')
+					.show();
+			} else {
+				$('#result-alert-change_usergroup')
+					.html('修改失败。' + (res.message || ''))
+					.removeClass('alert-success')
+					.addClass('alert-danger')
+					.show();
+			}
+
+			$(window).scrollTop(0);
+		}
+EOD);
+	$change_usergroup_form->runAtServer();
 	}
 	?>
 
@@ -257,7 +488,7 @@
 <!-- right col -->
 <div class="col-md-9">
 <?php if ($cur_tab == 'index'): ?>
-<div class="card">
+<div class="card mt-3 mt-md-0">
 	<div class="card-header">
 		<ul class="nav nav-tabs card-header-tabs" role="tablist">
 			<li class="nav-item">
@@ -441,24 +672,198 @@ $(document).ready(function() {
 });
 </script>
 <?php elseif ($cur_tab == 'users'): ?>
-<div class="card">
+<div class="card mt-3 mt-md-0">
 	<div class="card-header">
 		<ul class="nav nav-tabs card-header-tabs">
 			<li class="nav-item">
-				<a class="nav-link active" href="#" data-bs-toggle="tab" data-bs-target="#">Active</a>
+				<a class="nav-link active" href="#users" data-bs-toggle="tab" data-bs-target="#users">用户列表</a>
 			</li>
 			<li class="nav-item">
-				<a class="nav-link" href="#" data-bs-toggle="tab" data-bs-target="#">2</a>
+				<a class="nav-link" href="#new-user" data-bs-toggle="tab" data-bs-target="#new-user">新增用户</a>
+			</li>
+			<li class="nav-item">
+				<a class="nav-link" href="#reset-password" data-bs-toggle="tab" data-bs-target="#reset-password">重置密码</a>
+			</li>
+			<li class="nav-item">
+				<a class="nav-link" href="#user-group" data-bs-toggle="tab" data-bs-target="#user-group">用户类别</a>
 			</li>
 		</ul>
 	</div>
 	<div class="card-body">
 		<div class="tab-content">
-			<div class="tab-pane" id="">1</div>
-			<div class="tab-pane" id="">2</div>
+			<div class="tab-pane active" id="users">
+				<form class="row gy-2 gx-3 align-items-end mb-3" target="_self" method="GET">
+					<div class="col-auto">
+						<label for="username" class="form-label">用户名</label>
+						<input type="text" class="form-control" name="username" id="user-query-username" value="" />
+					</div>
+					<div class="col-auto">
+						<label for="user-query-usergroup" class="form-label">用户类别</label>
+						<select class="form-select" id="user-query-usergroup" name="usergroup">
+							<?php
+							$usergroups = [
+								'' => '*: 所有用户',
+								'B' => 'B: 封禁用户',
+								'U' => 'U: 普通用户',
+								'S' => 'S: 超级用户',
+							];
+	?>
+							<?php foreach ($usergroups as $name => $group): ?>
+								<option value="<?= $name ?>"
+								<?php if ($_GET['usergroup'] == $name): ?>
+									selected
+								<?php endif ?>
+								><?= $group ?></option>
+							<?php endforeach ?>
+						</select>
+					</div>
+					<div class="col-auto">
+						<label for="user-query-usertype" class="form-label">用户权限</label>
+						<select class="form-select" id="user-query-usertype" name="usertype">
+							<?php
+	$usertypes = [
+		'' => '*: 所有',
+		'student' => 'student: 学生',
+		'teacher' => 'teacher: 老师',
+		'problem_uploader' => 'problem_uploader: 题目上传者',
+		'problem_manager' => 'problem_manager: 题目管理员',
+		'contest_judger' => 'contest_judger: 比赛评测员',
+		'contest_only' => 'contest_only: 仅比赛参加者',
+	];
+	?>
+							<?php foreach ($usertypes as $name => $type): ?>
+								<option value="<?= $name ?>"
+								<?php if ($_GET['usertype'] == $name): ?>
+									selected
+								<?php endif ?>
+								><?= $type ?></option>
+							<?php endforeach ?>
+						</select>
+					</div>
+					<div class="col-auto">
+						<button type="submit" id="user-query-submit" class="mt-2 btn btn-secondary">查询</button>
+					</div>
+				</form>
+				<?php
+					echoLongTable(
+						['*'],
+						'user_info',
+						$user_list_cond,
+						'order by username asc',
+						<<<EOD
+	<tr>
+		<th>用户名</th>
+		<th>学校</th>
+		<th>用户类别</th>
+		<th>权限</th>
+		<th>注册时间</th>
+		<th>操作</th>
+	</tr>
+EOD,
+						function($row) {
+							echo '<tr>';
+							echo '<td>', '<span class="uoj-username" data-realname="', HTML::escape($row['realname']), '">', $row['username'], '</span>', '</td>';
+							echo '<td>', HTML::escape($row['school']), '</td>';
+							echo '<td>';
+							switch ($row['usergroup']) {
+								case 'S':
+									echo UOJLocale::get('user::super user');
+									break;
+								case 'B':
+									echo UOJLocale::get('user::banned user');
+									break;
+								default:
+									echo UOJLocale::get('user::normal user');
+									break;
+							}
+							echo '</td>';
+							echo '<td>';
+							foreach (explode(',', $row['usertype']) as $idx => $type) {
+								if ($idx) {
+									echo ', ';
+								}
+								echo UOJLocale::get('user::' . str_replace('_', ' ', $type)) ?: HTML::escape($type);
+							}
+							echo '</td>';
+							echo '<td>', $row['register_time'], '</td>';
+							echo '<td>', '<a class="text-decoration-none d-inline-block align-middle" href="/user/', $row['username'], '/edit">编辑</a>', '</td>';
+							echo '</tr>';
+						},
+						[
+							'page_len' => 20,
+							'div_classes' => ['table-responsive'],
+							'table_classes' => ['table', 'align-middle'],
+						],
+					);
+	?>
+			</div>
+			<div class="tab-pane" id="new-user">
+				<div id="result-alert-register" class="alert" role="alert" style="display: none"></div>
+				<div class="row row-cols-1 row-cols-md-2">
+					<div class="col">
+						<?php $register_form->printHTML() ?>
+					</div>
+					<div class="col mt-3 mt-md-0">
+						<h5>注意事项</h5>
+						<ul class="mb-0">
+							<li>用户名推荐格式为年级 + 姓名全拼，如 2022 级的张三同学可以设置为 <code>2022zhangsan</code>。对于外校学生，推荐格式为学校名称缩写 + 姓名拼音首字母，如山大附中的赵锦熙同学可以设置为 <code>sdfzzjx</code>)。</li>
+							<li>请提醒用户及时修改初始密码，以免账号被盗导致教学资源流出。请勿设置过于简单的初始密码。</li>
+							<li>我们推荐在创建账号时输入号主的电子邮件地址以便后期发生忘记密码等情况时进行验证。</li>
+							<li>创建账号后可以在「修改个人信息」页面中的「特权」选项卡为用户分配权限。特别地，如果该用户是外校学生，那么您可能需要将其设置为「仅比赛参加者」以禁止其查看已参与比赛以外的题目。</li>
+						</ul>
+					</div>
+				</div>
+			</div>
+			<div class="tab-pane" id="reset-password">
+				<div id="result-alert-reset-password" class="alert" role="alert" style="display: none"></div>
+				<div class="row row-cols-1 row-cols-md-2">
+					<div class="col">
+						<?php $change_password_form->printHTML() ?>
+					</div>
+					<div class="col mt-3 mt-md-0">
+						<h5>注意事项</h5>
+						<ul class="mb-0">
+							<li>在为用户重置密码前请核对对方身份以免被骗。</li>
+							<li>请勿设置过于简单的密码。</li>
+							<li>请提醒用户在登录后及时修改初始密码。</li>
+						</ul>
+					</div>
+				</div>
+			</div>
+			<div class="tab-pane" id="user-group">
+				<div id="result-alert-change_usergroup" class="alert" role="alert" style="display: none"></div>
+				<div class="row row-cols-1 row-cols-md-2">
+					<div class="col">
+						<?php $change_usergroup_form->printHTML() ?>
+					</div>
+					<div class="col mt-3 mt-md-0">
+						<h5>注意事项</h5>
+						<ul class="mb-0">
+							<li>用户被封禁后将不能再次登录系统。</li>
+							<li>将当前用户移除权限后将无法再次访问本页面。</li>
+							<li>在修改用户类别前请仔细核对用户名以免产生不必要的麻烦。</li>
+						</ul>
+					</div>
+				</div>
+			</div>
 		</div>
 	</div>
 </div>
+
+<script>
+$(document).ready(function() {
+	// Javascript to enable link to tab
+	var hash = location.hash.replace(/^#/, '');
+	if (hash) {
+		bootstrap.Tab.jQueryInterface.call($('.nav-tabs a[href="#' + hash + '"]'), 'show').blur();
+	}
+
+	// Change hash for page-reload
+	$('.nav-tabs a').on('shown.bs.tab', function(e) {
+		window.location.hash = e.target.hash;
+	});
+});
+</script>
 <?php endif ?>
 </div>
 <!-- end right col -->
diff --git a/web/app/controllers/user_info_edit.php b/web/app/controllers/user_info_edit.php
index a79092c..f475885 100644
--- a/web/app/controllers/user_info_edit.php
+++ b/web/app/controllers/user_info_edit.php
@@ -410,6 +410,20 @@ EOD);
 				<?php else: ?>
 				<fieldset disabled>
 				<?php endif ?>
+				<div class="mb-3">
+					<span>
+						<?= UOJLocale::get('user::user group') ?>
+					</span>
+					<span class="d-inline-block ms-3">
+						<?php if ($user['usergroup'] == 'S'): ?>
+							<?= UOJLocale::get('user::super user') ?>
+						<?php elseif ($user['usergroup'] == 'B'): ?>
+							<?= UOJLocale::get('user::banned user') ?>
+						<?php else: ?>
+							<?= UOJLocale::get('user::normal user') ?>
+						<?php endif ?>
+					</span>
+				</div>
 				<div class="input-group mb-3">
 					<label for="input-user_type" class="form-label">
 						<?= UOJLocale::get('user::user type') ?>
diff --git a/web/app/libs/uoj-html-lib.php b/web/app/libs/uoj-html-lib.php
index e5be21e..72152e4 100644
--- a/web/app/libs/uoj-html-lib.php
+++ b/web/app/libs/uoj-html-lib.php
@@ -88,7 +88,7 @@ function getUserLink($username) {
 		if ($realname == "") {
 			return '<span class="uoj-username">'.$username.'</span>';
 		} else {
-			return '<span class="uoj-username" data-realname="'.$realname.'">'.$username.'</span>';
+			return '<span class="uoj-username" data-realname="'.HTML::escape($realname).'">'.$username.'</span>';
 		}
 	} else {
 		$esc_username = HTML::escape($username);
diff --git a/web/app/locale/user/en.php b/web/app/locale/user/en.php
index 95a9e2f..c9a758d 100644
--- a/web/app/locale/user/en.php
+++ b/web/app/locale/user/en.php
@@ -1,5 +1,9 @@
 <?php
 return [
+	'user group' => 'User Group',
+	'super user' => 'Super User',
+	'normal user' => 'Normal User',
+	'banned user' => 'Banned User',
 	'real name' => 'Real name',
 	'belongs to these groups' => 'Belongs to these groups:',
 	'avatar source' => 'Avatar source',
diff --git a/web/app/locale/user/zh-cn.php b/web/app/locale/user/zh-cn.php
index e956cda..207d4bf 100644
--- a/web/app/locale/user/zh-cn.php
+++ b/web/app/locale/user/zh-cn.php
@@ -1,5 +1,9 @@
 <?php
 return [
+	'user group' => '用户类别',
+	'super user' => '超级用户',
+	'normal user' => '普通用户',
+	'banned user' => '封禁用户',
 	'real name' => '真实姓名',
 	'belongs to these groups' => '属于这些小组：',
 	'avatar source' => '头像来源',

From fdfb0245a0df2a307233bd2d4571bac9acb21506 Mon Sep 17 00:00:00 2001
From: Baoshuo <i@baoshuo.ren>
Date: Thu, 20 Oct 2022 20:46:32 +0800
Subject: [PATCH 3/8] refactor(web/super_manage): submissions

---
 web/app/controllers/super_manage.php | 104 ++++++++++++++++++++++++++-
 1 file changed, 103 insertions(+), 1 deletion(-)

diff --git a/web/app/controllers/super_manage.php b/web/app/controllers/super_manage.php
index 59edbac..83aeda5 100644
--- a/web/app/controllers/super_manage.php
+++ b/web/app/controllers/super_manage.php
@@ -34,6 +34,10 @@
 			'name' => '自定义测试',
 			'url' => "/super_manage/custom_test",
 		],
+		'judger' => [
+			'name' => '评测机管理',
+			'url' => "/super_manage/judger",
+		],
 		'image_hosting' => [
 			'name' => '图床管理',
 			'url' => "/super_manage/image_hosting",
@@ -456,7 +460,40 @@ EOD);
 			$(window).scrollTop(0);
 		}
 EOD);
-	$change_usergroup_form->runAtServer();
+		$change_usergroup_form->runAtServer();
+	} elseif ($cur_tab == 'submissions') {
+	} elseif ($cur_tab == 'custom_test') {
+		requireLib('hljs');
+
+		$submissions_pag = new Paginator([
+			'col_names' => ['*'],
+			'table_name' => 'custom_test_submissions',
+			'cond' => '1',
+			'tail' => 'order by id desc',
+			'page_len' => 10
+		]);
+		
+		$custom_test_deleter = new UOJForm('custom_test_deleter');
+		$custom_test_deleter->addInput('last', 'text', '删除末尾的 n 条记录', '5',
+			function ($x, &$vdata) {
+				if (!validateUInt($x)) {
+					return '不合法';
+				}
+				$vdata['last'] = $x;
+				return '';
+			},
+			null
+		);
+		$custom_test_deleter->handle = function(&$vdata) {
+			$all = DB::selectAll("select * from custom_test_submissions order by id asc limit {$vdata['last']}");
+			foreach ($all as $submission) {
+				$content = json_decode($submission['content'], true);
+				unlink(UOJContext::storagePath().$content['file_name']);
+			}
+			DB::delete("delete from custom_test_submissions order by id asc limit {$vdata['last']}");
+		};
+		$custom_test_deleter->submit_button_config['align'] = 'compressed';
+		$custom_test_deleter->runAtServer();
 	}
 	?>
 
@@ -864,6 +901,71 @@ $(document).ready(function() {
 	});
 });
 </script>
+<?php elseif ($cur_tab === 'submissions'): ?>
+<h4>测评失败的提交记录</h4>
+<?php
+echoSubmissionsList(
+	"result_error = 'Judgement Failed'",
+	'order by id desc',
+	[
+		'result_hidden' => '',
+		'table_config' => [
+			'div_classes' => ['card', 'mb-3', 'table-responsive'],
+			'table_classes' => ['table', 'uoj-table', 'mb-0', 'text-center']
+		]
+	],
+	$myUser
+);
+	?>
+<?php elseif ($cur_tab === 'custom_test'): ?>
+	<div class="card mb-3 table-responsive">
+		<table class="table uoj-table mb-0">
+			<thead>
+				<tr>
+					<th class="text-center">ID</th>
+					<th class="text-center">题目 ID</th>
+					<th>提交者</th>
+					<th>提交时间</th>
+					<th>测评时间</th>
+				</tr>
+			</thead>
+			<tbody>
+			<?php foreach ($submissions_pag->get() as $submission): ?>
+				<?php
+				$problem = queryProblemBrief($submission['problem_id']);
+				$submission_result = json_decode($submission['result'], true);
+				?>
+				<tr style="cursor: pointer" data-bs-toggle="collapse" data-bs-target="#custom_test__<?= $submission['id'] ?>">
+					<td class="text-center">#<?= $submission['id'] ?></td>
+					<td class="text-center">#<?= $submission['problem_id'] ?></td>
+					<td><?= getUserLink($submission['submitter']) ?></td>
+					<td><?= $submission['submit_time'] ?></td>
+					<td><?= $submission['judge_time'] ?></td>
+				</tr>
+				<tr class="collapse" id="custom_test__<?= $submission['id'] ?>">
+					<td colspan="233">
+						<?php echoSubmissionContent($submission, getProblemCustomTestRequirement($problem)) ?>
+						<?php echoCustomTestSubmissionDetails($submission_result['details'], "submission-{$submission['id']}-details") ?>
+					</td>
+				</tr>
+			<?php endforeach ?>
+			<?php if ($submissions_pag->isEmpty()): ?>
+				<tr>
+					<td class="text-center" colspan="233">
+						<?= UOJLocale::get('none') ?>
+					</td>
+				</tr>
+			<?php endif ?>
+			</tbody>
+		</table>
+	</div>
+	<?= $submissions_pag->pagination() ?>
+
+	<div class="card mt-3">
+		<div class="card-body">
+			<?php $custom_test_deleter->printHTML() ?>
+		</div>
+	</div>
 <?php endif ?>
 </div>
 <!-- end right col -->

From f57ff959a97565c6a143e7ad6a98334fac6ebf0d Mon Sep 17 00:00:00 2001
From: Baoshuo <i@baoshuo.ren>
Date: Thu, 20 Oct 2022 21:12:05 +0800
Subject: [PATCH 4/8] refactor(web/super_manage): image hosting

---
 web/app/controllers/super_manage.php | 118 ++++++++++++++++++++++++++-
 1 file changed, 117 insertions(+), 1 deletion(-)

diff --git a/web/app/controllers/super_manage.php b/web/app/controllers/super_manage.php
index 83aeda5..483390e 100644
--- a/web/app/controllers/super_manage.php
+++ b/web/app/controllers/super_manage.php
@@ -474,7 +474,7 @@ EOD);
 		]);
 		
 		$custom_test_deleter = new UOJForm('custom_test_deleter');
-		$custom_test_deleter->addInput('last', 'text', '删除末尾的 n 条记录', '5',
+		$custom_test_deleter->addInput('last', 'text', '删除末尾记录', '5',
 			function ($x, &$vdata) {
 				if (!validateUInt($x)) {
 					return '不合法';
@@ -494,6 +494,68 @@ EOD);
 		};
 		$custom_test_deleter->submit_button_config['align'] = 'compressed';
 		$custom_test_deleter->runAtServer();
+	} elseif ($cur_tab == 'image_hosting') {
+		if (isset($_POST['submit-delete_image']) && $_POST['submit-delete_image'] == 'delete_image') {
+			crsf_defend();
+
+			$image_id = $_POST['image_id'];
+
+			if (!validateUInt($image_id)) {
+				die('<script>alert("删除失败：图片 ID 无效");</script>' . SCRIPT_REFRESH_AS_GET);
+			}
+
+			if (!($image = DB::selectFirst("SELECT * from users_images where id = $image_id"))) {
+				die('<script>alert("删除失败：图片不存在");</script>' . SCRIPT_REFRESH_AS_GET);
+			}
+			
+			unlink(UOJContext::storagePath().$result['path']);
+			DB::delete("DELETE FROM users_images WHERE id = $image_id");
+
+			die('<script>alert("删除成功！");</script>' . SCRIPT_REFRESH_AS_GET);
+		}
+
+		
+		$change_user_image_total_size_limit_form = new UOJForm('change_user_image_total_size_limit');
+		$change_user_image_total_size_limit_form->submit_button_config['align'] = 'compressed';
+		$change_user_image_total_size_limit_form->addInput('change_user_image_total_size_limit_username', 'text', '用户名', '',
+			function ($x, &$vdata) {
+				if (!validateUsername($x)) {
+					return '用户名不合法';
+				}
+
+				if (!queryUser($x)) {
+					return '用户不存在';
+				}
+				
+				$vdata['username'] = $x;
+				
+				return '';
+			},
+			null
+		);
+		$change_user_image_total_size_limit_form->addInput('change_user_image_total_size_limit_limit', 'text', '存储限制（单位：Byte）', '104857600',
+			function ($x, &$vdata) {
+				if (!validateUInt($x, 10)) {
+					return '限制不合法';
+				}
+
+				if (intval($x) > 2147483648) {
+					return '限制不能大于 2 GB';
+				}
+				
+				$vdata['limit'] = $x;
+				
+				return '';
+			},
+			null
+		);
+
+		$change_user_image_total_size_limit_form->handle = function(&$vdata) {
+			DB::update("UPDATE user_info SET images_size_limit = {$vdata['limit']} WHERE username = '{$vdata['username']}'");
+		};
+		
+		$change_user_image_total_size_limit_form->runAtServer();
+
 	}
 	?>
 
@@ -963,9 +1025,63 @@ echoSubmissionsList(
 
 	<div class="card mt-3">
 		<div class="card-body">
+			<h5 class="card-title">删除末尾的 n 条记录</h5>
 			<?php $custom_test_deleter->printHTML() ?>
 		</div>
 	</div>
+<?php elseif ($cur_tab == 'image_hosting'): ?>
+<?php
+echoLongTable(
+	['*'],
+	'users_images',
+	'1',
+	'order by id desc',
+	<<<EOD
+	<tr>
+		<th style="width: 10em">上传者</th>
+		<th style="width: 14em">预览</th>
+		<th style="width: 6em">文件大小</th>
+		<th style="width: 8em">上传时间</th>
+		<th style="width: 6em">操作</th>
+	</tr>
+EOD,
+	function($row) {
+		$user_link = getUserLink($row['uploader']);
+		if ($row['size'] < 1024 * 512) {
+			$size = strval(round($row['size'] * 1.0 / 1024, 1)) . ' KB';
+		} else {
+			$size = strval(round($row['size'] * 1.0 / 1024 / 1024, 1)) . ' MB';
+		}
+		$token = crsf_token();
+
+		echo <<<EOD
+	<tr>
+		<td>$user_link</td>
+		<td><img src="{$row['path']}" width="250" loading="lazy"></td>
+		<td>$size</td>
+		<td>{$row['upload_time']}</td>
+		<td>
+			<form class="d-inline-block" method="POST" onsubmit="return confirm('你真的要删除这张图片吗？')">
+				<input type="hidden" name="_token" value="$token">
+				<input type="hidden" name="image_id" value="{$row['id']}">
+				<button class="btn btn-link text-danger text-decoration-none p-0" type="submit" name="submit-delete_image" value="delete_image">删除</button>
+			</form>
+		</td>
+	</tr>
+EOD;
+	},
+	[
+		'page_len' => 20,
+		'div_classes' => ['card', 'mb-3', 'table-responsive'],
+		'table_classes' => ['table', 'uoj-table', 'mb-0']
+	]
+	); ?>
+	<div class="card mt-3">
+		<div class="card-body">
+			<h5>修改用户图床空间上限</h5>
+			<?php $change_user_image_total_size_limit_form->printHTML() ?>
+		</div>
+	</div>
 <?php endif ?>
 </div>
 <!-- end right col -->

From c8277ed5b962289f60336e115d7a9ab56ceae645 Mon Sep 17 00:00:00 2001
From: Baoshuo <i@baoshuo.ren>
Date: Thu, 20 Oct 2022 21:23:55 +0800
Subject: [PATCH 5/8] refactor(web/super_manage): judger

---
 web/app/controllers/super_manage.php | 82 +++++++++++++++++++++++++++-
 1 file changed, 81 insertions(+), 1 deletion(-)

diff --git a/web/app/controllers/super_manage.php b/web/app/controllers/super_manage.php
index 483390e..1a33206 100644
--- a/web/app/controllers/super_manage.php
+++ b/web/app/controllers/super_manage.php
@@ -494,6 +494,47 @@ EOD);
 		};
 		$custom_test_deleter->submit_button_config['align'] = 'compressed';
 		$custom_test_deleter->runAtServer();
+	} elseif ($cur_tab == 'judger') {
+		$judger_adder = new UOJForm('judger_adder');
+		$judger_adder->addInput('judger_adder_name', 'text', '评测机名称', '',
+			function ($x, &$vdata) {
+				if (!validateUsername($x)) {
+					return '不合法';
+				}
+				if (DB::selectCount("select count(*) from judger_info where judger_name='$x'")!=0) {
+					return '不合法';
+				}
+				$vdata['name'] = $x;
+				return '';
+			},
+			null
+		);
+		$judger_adder->handle = function(&$vdata) {
+			$password = uojRandString(32);
+			DB::insert("insert into judger_info (judger_name,password) values('{$vdata['name']}','{$password}')");
+		};
+		$judger_adder->submit_button_config['align'] = 'compressed';
+		$judger_adder->runAtServer();
+		
+		$judger_deleter = new UOJForm('judger_deleter');
+		$judger_deleter->addInput('judger_deleter_name', 'text', '评测机名称', '',
+			function ($x, &$vdata) {
+				if (!validateUsername($x)) {
+					return '不合法';
+				}
+				if (DB::selectCount("select count(*) from judger_info where judger_name='$x'")!=1) {
+					return '不合法';
+				}
+				$vdata['name'] = $x;
+				return '';
+			},
+			null
+		);
+		$judger_deleter->handle = function(&$vdata) {
+			DB::delete("delete from judger_info where judger_name='{$vdata['name']}'");
+		};
+		$judger_deleter->submit_button_config['align'] = 'compressed';
+		$judger_deleter->runAtServer();
 	} elseif ($cur_tab == 'image_hosting') {
 		if (isset($_POST['submit-delete_image']) && $_POST['submit-delete_image'] == 'delete_image') {
 			crsf_defend();
@@ -1029,6 +1070,45 @@ echoSubmissionsList(
 			<?php $custom_test_deleter->printHTML() ?>
 		</div>
 	</div>
+<?php elseif ($cur_tab == 'judger'): ?>
+	<h3>评测机列表</h3>
+	<?php
+	echoLongTable(
+		['*'],
+		'judger_info',
+		'1',
+		'',
+		<<<EOD
+	<tr>
+		<th>评测机名称</th>
+		<th>密码</th>
+		<th>IP</th>
+	</tr>
+EOD,
+function($row) {
+	echo <<<EOD
+		<tr>
+			<td>{$row['judger_name']}</td>
+			<td>{$row['password']}</td>
+			<td>{$row['ip']}</td>
+		</tr>
+EOD;
+},
+		[
+			'page_len' => 10,
+			'div_classes' => ['card', 'mb-3', 'table-responsive'],
+			'table_classes' => ['table', 'uoj-table', 'mb-0'],
+		]
+	); ?>
+	
+	<div class="card">
+		<div class="card-body">
+			<h5>添加评测机</h5>
+			<?php $judger_adder->printHTML(); ?>
+			<h5>删除评测机</h5>
+			<?php $judger_deleter->printHTML(); ?>
+		</div>
+	</div>
 <?php elseif ($cur_tab == 'image_hosting'): ?>
 <?php
 echoLongTable(
@@ -1073,7 +1153,7 @@ EOD;
 	[
 		'page_len' => 20,
 		'div_classes' => ['card', 'mb-3', 'table-responsive'],
-		'table_classes' => ['table', 'uoj-table', 'mb-0']
+		'table_classes' => ['table', 'uoj-table', 'mb-0'],
 	]
 	); ?>
 	<div class="card mt-3">

From 4b30f7523697e6cb66e99783870285256b4cb8a0 Mon Sep 17 00:00:00 2001
From: Baoshuo <i@baoshuo.ren>
Date: Thu, 20 Oct 2022 21:24:39 +0800
Subject: [PATCH 6/8] refactor(web/super_manage): drop old super_manage page

---
 web/app/controllers/super_manage_old.php | 867 -----------------------
 web/app/route.php                        |   1 -
 web/app/views/page-header.php            |   2 +-
 3 files changed, 1 insertion(+), 869 deletions(-)
 delete mode 100644 web/app/controllers/super_manage_old.php

diff --git a/web/app/controllers/super_manage_old.php b/web/app/controllers/super_manage_old.php
deleted file mode 100644
index 1231e6b..0000000
--- a/web/app/controllers/super_manage_old.php
+++ /dev/null
@@ -1,867 +0,0 @@
-<?php
-	requireLib('bootstrap5');
-	requireLib('md5');
-	requireLib('jquery.query');
-	requirePHPLib('form');
-	requirePHPLib('judger');
-	
-	if (!isSuperUser($myUser)) {
-		become403Page();
-	}
-
-	$register_form = new UOJForm('register');
-	$register_form->submit_button_config['align'] = 'compressed';
-	$register_form->addInput('new_username', 'text', '用户名', '',
-		function ($new_username) {
-			if (!validateUsername($new_username)) {
-				return '用户名不合法';
-			}
-			if (queryUser($new_username)) {
-				return '该用户已存在';
-			}
-			return '';
-		},
-		null
-	);
-	$register_form->addInput('new_password', 'password', '密码', '',
-		function ($new_password) {
-			return '';
-		},
-		null
-	);
-	$register_form->addInput('new_realname', 'text', '真实姓名', '',
-		function ($new_realname) {
-			return '';
-		},
-		null
-	);
-	$register_form->addInput('new_school', 'text', '学校名称', '',
-		function ($new_school) {
-			return '';
-		},
-		null
-	);
-	$register_form->handle = function() {
-		$new_username = $_POST['new_username'];
-		$new_password = $_POST['new_password'];
-		$new_realname = DB::escape($_POST['new_realname']);
-		$new_school = DB::escape($_POST['new_school']);
-		$new_password = hash_hmac('md5', $new_password, getPasswordClientSalt());
-		$new_password = getPasswordToStore($new_password, $new_username);
-		$svn_pw = uojRandString(10);
-
-		DB::query("insert into user_info (username, realname, school, password, svn_password, register_time, usergroup) values ('$new_username', '$new_realname', '$new_school', '$new_password', '$svn_pw', now(), 'U')");
-	};
-	$register_form->runAtServer();
-
-	$change_password_form = new UOJForm('change_password');
-	$change_password_form->submit_button_config['align'] = 'compressed';
-	$change_password_form->addInput('p_username', 'text', '用户名', '',
-		function ($p_username) {
-			if (!validateUsername($p_username)) {
-				return '用户名不合法';
-			}
-			if (!queryUser($p_username)) {
-				return '用户不存在';
-			}
-			return '';
-		},
-		null
-	);
-	$change_password_form->addInput('p_password', 'password', '密码', '',
-		function ($p_password) {
-			return '';
-		},
-		null
-	);
-	$change_password_form->handle = function() {
-		$p_username = $_POST['p_username'];
-		$p_password = $_POST['p_password'];
-		$p_password = hash_hmac('md5', $p_password, getPasswordClientSalt());
-		$p_password = getPasswordToStore($p_password, $p_username);
-
-		DB::query("update user_info set password = '$p_password' where username = '$p_username'");
-	};
-	$change_password_form->runAtServer();
-
-	$change_realname_form = new UOJForm('change_realname');
-	$change_realname_form->submit_button_config['align'] = 'compressed';
-	$change_realname_form->addInput('r_username', 'text', '用户名', '',
-		function ($r_username) {
-			if (!validateUsername($r_username)) {
-				return '用户名不合法';
-			}
-			if (!queryUser($r_username)) {
-				return '用户不存在';
-			}
-			return '';
-		},
-		null
-	);
-	$change_realname_form->addInput('r_realname', 'text', '真实姓名', '',
-		function ($r_realname) {
-			return '';
-		},
-		null
-	);
-	$change_realname_form->handle = function() {
-		$r_username = $_POST['r_username'];
-		$r_realname = DB::escape($_POST['r_realname']);
-
-		DB::query("update user_info set realname = '$r_realname' where username = '$r_username'");
-	};
-	$change_realname_form->runAtServer();
-
-	$change_school_form = new UOJForm('change_school');
-	$change_school_form->submit_button_config['align'] = 'compressed';
-	$change_school_form->addInput('s_username', 'text', '用户名', '',
-		function ($s_username) {
-			if (!validateUsername($s_username)) {
-				return '用户名不合法';
-			}
-			if (!queryUser($s_username)) {
-				return '用户不存在';
-			}
-			return '';
-		},
-		null
-	);
-	$change_school_form->addInput('s_school', 'text', '学校名称', '',
-		function ($s_school) {
-			return '';
-		},
-		null
-	);
-	$change_school_form->handle = function() {
-		$s_username = $_POST['s_username'];
-		$s_school = DB::escape($_POST['s_school']);
-
-		DB::query("update user_info set school = '$s_school' where username = '$s_username'");
-	};
-	$change_school_form->runAtServer();
-
-	$user_form = new UOJForm('user');
-	$user_form->submit_button_config['align'] = 'compressed';
-	$user_form->addInput('username', 'text', '用户名', '',
-		function ($username) {
-			if (!validateUsername($username)) {
-				return '用户名不合法';
-			}
-			if (!queryUser($username)) {
-				return '用户不存在';
-			}
-			return '';
-		},
-		null
-	);
-	$options = array(
-		'banneduser' => '设为封禁用户',
-		'normaluser' => '设为普通用户',
-		'superuser' => '设为超级用户'
-	);
-	$user_form->addSelect('op_type', $options, '操作类型', '');
-	$user_form->handle = function() {
-		global $user_form;
-		
-		$username = $_POST['username'];
-		switch ($_POST['op_type']) {
-			case 'banneduser':
-				DB::update("update user_info set usergroup = 'B' where username = '{$username}'");
-				DB::update("update user_info set usertype = 'banned' where username = '{$username}'");
-				break;
-			case 'normaluser':
-				DB::update("update user_info set usergroup = 'U' where username = '{$username}'");
-				DB::update("update user_info set usertype = 'student' where username = '{$username}'");
-				break;
-			case 'superuser':
-				DB::update("update user_info set usergroup = 'S' where username = '{$username}'");
-				DB::update("update user_info set usertype = 'student' where username = '{$username}'");
-				break;
-		}
-	};
-	$user_form->runAtServer();
-
-	$usertype_form = new UOJForm('usertype');
-	$user_form->submit_button_config['align'] = 'compressed';
-	$usertype_form->addInput('usertype_username', 'text', '用户名', '',
-		function ($username) {
-			if (!validateUsername($username)) {
-				return '用户名不合法';
-			}
-			if (!queryUser($username)) {
-				return '用户不存在';
-			}
-			return '';
-		},
-		null
-	);
-	$usertype_options = array(
-		'student' => '学生',
-		'teacher' => '老师',
-		'problem_uploader' => '题目上传者',
-		'problem_manager' => '题目管理员',
-		'contest_judger' => '比赛评测员',
-		'contest_only' => '仅比赛参加者',
-	);
-	$usertype_form->addSelect('usertype_type', $usertype_options, '角色', '');
-	$usertype_form->addSelect('usertype_op', array('add' => '添加', 'remove' => '移除'), '操作', '');
-	$usertype_form->handle = function() {
-		global $usertype_form;
-
-		$username = $_POST['usertype_username'];
-		$user = queryUser($username);
-		switch ($_POST['usertype_type']) {
-			case 'teacher':
-				if ($_POST['usertype_op'] === 'add') {
-					$user = addUserType($user, 'teacher');
-					$user = removeUserType($user, 'student');
-				} else {
-					$user = removeUserType($user, 'teacher');
-					$user = addUserType($user, 'student');
-				}
-				break;
-			case 'problem_manager':
-				if ($_POST['usertype_op'] === 'add') {
-					$user = addUserType($user, 'problem_manager');
-					$user = removeUserType($user, 'problem_uploader');
-				} else {
-					$user = removeUserType($user, 'problem_manager');
-				}
-				break;
-			case 'student':
-			case 'problem_uploader':
-			case 'contest_judger':
-			case 'contest_only':
-				$user = $_POST['usertype_op'] === 'add'
-					? addUserType($user, $_POST['usertype_type'])
-					: removeUserType($user, $_POST['usertype_type']);
-				break;
-		}
-
-		DB::update("update user_info set usertype = '{$user['usertype']}' where username = '{$username}'");
-	};
-	$usertype_form->runAtServer();
-	
-	$blog_link_index = new UOJForm('blog_link_index');
-	$blog_link_index->addInput('blog_id2', 'text', '博客ID', '',
-		function ($x) {
-			if (!validateUInt($x)) {
-				return 'ID不合法';
-			}
-			if (!queryBlog($x)) {
-				return '博客不存在';
-			}
-			return '';
-		},
-		null
-	);
-	$blog_link_index->addInput('blog_level', 'text', '置顶级别（删除不用填）', '0',
-		function ($x) {
-			if (!validateUInt($x)) {
-				return '数字不合法';
-			}
-			if ($x > 3) {
-				return '该级别不存在';
-			}
-			return '';
-		},
-		null
-	);
-	$options = array(
-		'add' => '添加',
-		'del' => '删除'
-	);
-	$blog_link_index->addSelect('op-type2', $options, '操作类型', '');
-	$blog_link_index->handle = function() {
-		$blog_id = $_POST['blog_id2'];
-		$blog_level = $_POST['blog_level'];
-		if ($_POST['op-type2'] == 'add') {
-			if (DB::selectFirst("select * from important_blogs where blog_id = {$blog_id}")) {
-				DB::update("update important_blogs set level = {$blog_level} where blog_id = {$blog_id}");
-			} else {
-				DB::insert("insert into important_blogs (blog_id, level) values ({$blog_id}, {$blog_level})");
-			}
-		}
-		if ($_POST['op-type2'] == 'del') {
-			DB::delete("delete from important_blogs where blog_id = {$blog_id}");
-		}
-	};
-	$blog_link_index->runAtServer();
-	
-	$blog_deleter = new UOJForm('blog_deleter');
-	$blog_deleter->addInput('blog_del_id', 'text', '博客ID', '',
-		function ($x) {
-			if (!validateUInt($x)) {
-				return 'ID不合法';
-			}
-			if (!queryBlog($x)) {
-				return '博客不存在';
-			}
-			return '';
-		},
-		null
-	);
-	$blog_deleter->handle = function() {
-		deleteBlog($_POST['blog_del_id']);
-	};
-	$blog_deleter->runAtServer();
-
-	$countdown_adder = new UOJForm('new_countdown');
-	$countdown_adder->submit_button_config['align'] = 'compressed';
-	$countdown_adder->addInput('new_countdown_title', 'text', '标题', '',
-		function ($new_countdown_title) {
-			return '';
-		},
-		null
-	);
-	$countdown_adder->addInput('new_countdown_endtime', 'text', '截止日期', date("Y-m-d H:i:s"),
-		function($str, &$vdata) {
-			try {
-				$vdata['new_countdown_endtime'] = new DateTime($str);
-			} catch (Exception $e) {
-				return '无效时间格式';
-			}
-			return '';
-		},
-		null
-	);
-	$countdown_adder->handle = function() {
-		$new_countdown_title = $_POST['new_countdown_title'];
-		$new_countdown_endtime = $_POST['new_countdown_endtime'];
-		$esc_countdown_title = DB::escape($new_countdown_title);
-
-		DB::query("insert into countdowns (title, endtime) values ('$esc_countdown_title', '$new_countdown_endtime')");
-	};
-	$countdown_adder->runAtServer();
-
-	$countdown_deleter = new UOJForm('delete_countdown');
-	$countdown_deleter->submit_button_config['align'] = 'compressed';
-	$countdown_deleter->addInput('delete_countdown_id', 'text', 'ID', '',
-		function ($x) {
-			if (!validateUInt($x)) {
-				return 'ID不合法';
-			}
-
-			if (!DB::selectFirst("select * from countdowns where id = $x")) {
-				return '倒计时不存在';
-			}
-
-			return '';
-		},
-		null
-	);
-	$countdown_deleter->handle = function() {
-		$delete_countdown_id = $_POST['delete_countdown_id'];
-
-		DB::query("delete from countdowns where id = $delete_countdown_id");
-	};
-	$countdown_deleter->runAtServer();
-
-	$countdowns_header_row = <<<EOD
-	<tr>
-		<th>ID</th>
-		<th>标题</th>
-		<th>时间</th>
-	</tr>
-EOD;
-	$countdowns_print_row = function($row) {
-		echo <<<EOD
-	<tr>
-		<td>{$row['id']}</td>
-		<td>{$row['title']}</td>
-		<td>{$row['endtime']}</td>
-	</tr>
-EOD;
-	};
-
-	$friend_link_adder = new UOJForm('new_friend_link');
-	$friend_link_adder->submit_button_config['align'] = 'compressed';
-	$friend_link_adder->addInput('new_friend_link_title', 'text', '名称', '',
-		function ($str) {
-			return '';
-		},
-		null
-	);
-	$friend_link_adder->addInput('new_friend_link_url', 'text', '链接', '',
-		function($str) {
-			if (!validateURL($str)) {
-				return '链接不合法';
-			}
-
-			return '';
-		},
-		null
-	);
-	$friend_link_adder->addInput('new_friend_link_level', 'text', '权重', '10',
-		function($str) {
-			if (!validateUInt($str)) {
-				return '权重必须是数字';
-			}
-
-			return '';
-		},
-		null
-	);
-	$friend_link_adder->handle = function() {
-		$new_friend_link_title = $_POST['new_friend_link_title'];
-		$new_friend_link_url = $_POST['new_friend_link_url'];
-		$new_friend_link_level = $_POST['new_friend_link_level'];
-		$esc_new_friend_link_title = DB::escape($new_friend_link_title);
-		$esc_new_friend_link_url = DB::escape($new_friend_link_url);
-
-		DB::query("insert into friend_links (title, url, level) values ('$esc_new_friend_link_title', '$esc_new_friend_link_url', $new_friend_link_level)");
-	};
-	$friend_link_adder->runAtServer();
-
-	$friend_link_deleter = new UOJForm('delete_friend_link');
-	$friend_link_deleter->submit_button_config['align'] = 'compressed';
-	$friend_link_deleter->addInput('delete_friend_link_id', 'text', 'ID', '',
-		function ($id) {
-			if (!validateUInt($id)) {
-				return 'ID不合法';
-			}
-
-			if (!DB::selectFirst("select * from friend_links where id = $id")) {
-				return 'ID不存在';
-			}
-
-			return '';
-		},
-		null
-	);
-	$friend_link_deleter->handle = function() {
-		$delete_friend_link_id = $_POST['delete_friend_link_id'];
-
-		DB::query("delete from friend_links where id = $delete_friend_link_id");
-	};
-	$friend_link_deleter->runAtServer();
-
-	$friend_links_header_row = <<<EOD
-	<tr>
-		<th>ID</th>
-		<th>名称</th>
-		<th>链接</th>
-		<th>置顶等级</th>
-	</tr>
-EOD;
-	$friend_links_print_row = function($row) {
-		echo <<<EOD
-	<tr>
-		<td>{$row['id']}</td>
-		<td>{$row['title']}</td>
-		<td>{$row['url']}</td>
-		<td>{$row['level']}</td>
-	</tr>
-EOD;
-	};
-
-	$contest_submissions_deleter = new UOJForm('contest_submissions');
-	$contest_submissions_deleter->addInput('contest_id', 'text', '比赛ID', '',
-		function ($x) {
-			if (!validateUInt($x)) {
-				return 'ID不合法';
-			}
-			if (!queryContest($x)) {
-				return '博客不存在';
-			}
-			return '';
-		},
-		null
-	);
-	$contest_submissions_deleter->handle = function() {
-		$contest = queryContest($_POST['contest_id']);
-		genMoreContestInfo($contest);
-		
-		$contest_problems = DB::selectAll("select problem_id from contests_problems where contest_id = {$contest['id']}");
-		foreach ($contest_problems as $problem) {
-			$submissions = DB::selectAll("select * from submissions where problem_id = {$problem['problem_id']} and submit_time < '{$contest['start_time_str']}'");
-			foreach ($submissions as $submission) {
-				$content = json_decode($submission['content'], true);
-				unlink(UOJContext::storagePath().$content['file_name']);
-				DB::delete("delete from submissions where id = {$submission['id']}");
-				updateBestACSubmissions($submission['submitter'], $submission['problem_id']);
-			}
-		}
-	};
-	$contest_submissions_deleter->runAtServer();
-
-	$custom_test_deleter = new UOJForm('custom_test_deleter');
-	$custom_test_deleter->addInput('last', 'text', '删除末尾记录', '5',
-		function ($x, &$vdata) {
-			if (!validateUInt($x)) {
-				return '不合法';
-			}
-			$vdata['last'] = $x;
-			return '';
-		},
-		null
-	);
-	$custom_test_deleter->handle = function(&$vdata) {
-		$all = DB::selectAll("select * from custom_test_submissions order by id asc limit {$vdata['last']}");
-		foreach ($all as $submission) {
-			$content = json_decode($submission['content'], true);
-			unlink(UOJContext::storagePath().$content['file_name']);
-		}
-		DB::delete("delete from custom_test_submissions order by id asc limit {$vdata['last']}");
-	};
-	$custom_test_deleter->runAtServer();
-
-	$judger_adder = new UOJForm('judger_adder');
-	$judger_adder->addInput('judger_adder_name', 'text', '评测机名称', '',
-		function ($x, &$vdata) {
-			if (!validateUsername($x)) {
-				return '不合法';
-			}
-			if (DB::selectCount("select count(*) from judger_info where judger_name='$x'")!=0) {
-				return '不合法';
-			}
-			$vdata['name'] = $x;
-			return '';
-		},
-		null
-	);
-	$judger_adder->handle = function(&$vdata) {
-		$password=uojRandString(32);
-		DB::insert("insert into judger_info (judger_name,password) values('{$vdata['name']}','{$password}')");
-	};
-	$judger_adder->runAtServer();
-	
-	$judger_deleter = new UOJForm('judger_deleter');
-	$judger_deleter->addInput('judger_deleter_name', 'text', '评测机名称', '',
-		function ($x, &$vdata) {
-			if (!validateUsername($x)) {
-				return '不合法';
-			}
-			if (DB::selectCount("select count(*) from judger_info where judger_name='$x'")!=1) {
-				return '不合法';
-			}
-			$vdata['name'] = $x;
-			return '';
-		},
-		null
-	);
-	$judger_deleter->handle = function(&$vdata) {
-		DB::delete("delete from judger_info where judger_name='{$vdata['name']}'");
-	};
-	$judger_deleter->runAtServer();
-
-	$judgerlist_cols = array('judger_name', 'password');
-	$judgerlist_config = array();
-	$judgerlist_header_row = <<<EOD
-	<tr>
-		<th>评测机名称</th>
-		<th>密码</th>
-	</tr>
-EOD;
-	$judgerlist_print_row = function($row) {
-		echo <<<EOD
-			<tr>
-				<td>{$row['judger_name']}</td>
-				<td>{$row['password']}</td>
-			</tr>
-EOD;
-	};
-	
-	$userlist_cols = array('username', 'school', 'usergroup', 'usertype', 'register_time');
-	$userlist_config = array('page_len' => 20,
-			'table_classes' => array('table', 'table-bordered', 'table-hover', 'table-striped'));
-	$userlist_header_row = <<<EOD
-	<tr>
-		<th>用户名</th>
-		<th>学校</th>
-		<th style="width: 6em">用户类别</th>
-		<th style="width: 12em">注册时间</th>
-	</tr>
-EOD;
-
-	$cur_tab = isset($_GET['tab']) ? $_GET['tab'] : 'users';
-
-	$user_list_cond = array();
-	if ($cur_tab === 'users') {
-		if (isset($_GET['username']) && $_GET['username'] != "") {
-			$user_list_cond[] = "username like '%" . DB::escape($_GET['username']) . "%'";
-		}
-		if (isset($_GET['usergroup']) && $_GET['usergroup'] != "") {
-			$user_list_cond[] = "usergroup = '" . DB::escape($_GET['usergroup']) . "'";
-		}
-	}
-	if ($user_list_cond) {
-		$user_list_cond = join($user_list_cond, ' and ');
-	} else {
-		$user_list_cond = '1';
-	}
-
-	$userlist_print_row = function($row) {
-		$hislink = getUserLink($row['username']);
-		echo <<<EOD
-			<tr>
-				<td>${hislink}</td>
-				<td>{$row['school']}</td>
-				<td>{$row['usergroup']}, {$row['usertype']}</td>
-				<td>{$row['register_time']}</td>
-			</tr>
-EOD;
-	};
-
-	$image_hosting_cols = ['*'];
-	$image_hosting_config = ['page_len' => 20, 'table_classes' => ['table', 'table-bordered', 'table-hover', 'table-striped']];
-	$image_hosting_header_row = <<<EOD
-	<tr>
-		<th>ID</th>
-		<th>上传者</th>
-		<th>预览</th>
-		<th style="width: 3em">文件大小</th>
-		<th style="width: 12em">上传时间</th>
-	</tr>
-EOD;
-	$image_hosting_print_row = function($row) {
-		$user_link = getUserLink($row['uploader']);
-		if ($row['size'] < 1024 * 512) {
-			$size = strval(round($row['size'] * 1.0 / 1024, 1)) . ' KB';
-		} else {
-			$size = strval(round($row['size'] * 1.0 / 1024 / 1024, 1)) . ' MB';
-		}
-
-		echo <<<EOD
-	<tr>
-		<td>{$row['id']}</td>
-		<td>$user_link</td>
-		<td><img src="{$row['path']}" width="250"></td>
-		<td>$size</td>
-		<td>{$row['upload_time']}</td>
-	</tr>
-EOD;
-	};
-
-	$image_deleter = new UOJForm('image_deleter');
-	$image_deleter->submit_button_config['align'] = 'compressed';
-	$image_deleter->submit_button_config['text'] = '删除';
-	$image_deleter->submit_button_config['class_str'] = 'btn btn-danger';
-	$image_deleter->addInput('image_deleter_id', 'text', '图片 ID', '',
-		function ($x, &$vdata) {
-			if (!validateUInt($x)) {
-				return 'ID 不合法';
-			}
-			if (!DB::selectCount("select count(*) from users_images where id = $x")) {
-				return '图片不存在';
-			}
-			$vdata['id'] = $x;
-			return '';
-		},
-		null
-	);
-	$image_deleter->handle = function(&$vdata) {
-		$id = $vdata['id'];
-		$result = DB::selectFirst("SELECT * from users_images WHERE id = $id");
-		unlink(UOJContext::storagePath().$result['path']);
-		DB::delete("DELETE FROM users_images WHERE id = $id");
-	};
-	$image_deleter->runAtServer();
-
-	$change_user_image_total_size_limit_form = new UOJForm('change_user_image_total_size_limit');
-	$change_user_image_total_size_limit_form->submit_button_config['align'] = 'compressed';
-	$change_user_image_total_size_limit_form->addInput('change_user_image_total_size_limit_username', 'text', '用户名', '',
-		function ($x, &$vdata) {
-			if (!validateUsername($x)) {
-				return '用户名不合法';
-			}
-			if (!queryUser($x)) {
-				return '用户不存在';
-			}
-			$vdata['username'] = $x;
-			return '';
-		},
-		null
-	);
-	$change_user_image_total_size_limit_form->addInput('change_user_image_total_size_limit_limit', 'text', '存储限制（单位：Byte）', '104857600',
-		function ($x, &$vdata) {
-			if (!validateUInt($x, 10)) {
-				return '限制不合法';
-			}
-			if (intval($x) > 2147483648) {
-				return '限制不能大于 2 GB';
-			}
-			$vdata['limit'] = $x;
-			return '';
-		},
-		null
-	);
-	$change_user_image_total_size_limit_form->handle = function(&$vdata) {
-		DB::update("UPDATE user_info SET images_size_limit = {$vdata['limit']} WHERE username = '{$vdata['username']}'");
-	};
-	$change_user_image_total_size_limit_form->runAtServer();
-
-	$tabs_info = array(
-		'users' => array(
-			'name' => '用户管理',
-			'url' => "/super-manage/users"
-		),
-		'blogs' => array(
-			'name' => '博客管理',
-			'url' => "/super-manage/blogs"
-		),
-		'index' => array(
-			'name' => '首页管理',
-			'url' => '/super-manage/index'
-		),
-		'submissions' => array(
-			'name' => '提交记录',
-			'url' => "/super-manage/submissions"
-		),
-		'custom-test' => array(
-			'name' => '自定义测试',
-			'url' => '/super-manage/custom-test'
-		),
-		'judger' => array(
-			'name' => '评测机管理',
-			'url' => '/super-manage/judger'
-		),
-		'image_hosting' => array(
-			'name' => '图床管理',
-			'url' => '/super-manage/image_hosting'
-		)
-	);
-	
-	if (!isset($tabs_info[$cur_tab])) {
-		become404Page();
-	}
-	?>
-<?php
-	requireLib('shjs');
-	requireLib('morris');
-	?>
-<?php echoUOJPageHeader('系统管理') ?>
-<div class="row">
-	<div class="col-sm-3">
-		<?= HTML::tablist($tabs_info, $cur_tab, 'nav-pills flex-column') ?>
-	</div>
-	
-	<div class="col-sm-9">
-		<?php if ($cur_tab === 'users'): ?>
-			<h3>添加新用户</h3>
-			<?php $register_form->printHTML(); ?>
-			<h3>修改用户密码</h3>
-			<?php $change_password_form->printHTML(); ?>
-			<h3>用户类别设置</h3>
-			<p>在此处更新用户所属类别后会自动重置用户权限。</p>
-			<?php $user_form->printHTML(); ?>
-			<h3>用户权限管理</h3>
-			<?php $usertype_form->printHTML(); ?>
-			<h3>修改用户真实姓名</h3>
-			<?php $change_realname_form->printHTML(); ?>
-			<h3>修改用户学校名称</h3>
-			<?php $change_school_form->printHTML(); ?>
-			<h3>用户名单</h3>
-			<div id="user-query">
-				<form class="form-horizontal uoj-form-compressed" target="_self" method="GET">
-					<div class="form-group">
-						<label for="username" class="col-sm-2 control-label">用户名</label>
-						<div class="col-sm-3">
-							<input type="text" class="form-control" name="username" id="user-query-username" value="" />
-						</div>
-					</div>
-					<div class="form-group">
-						<label for="usergroup" class="col-sm-2 control-label">用户类别</label>
-						<div class="col-sm-3">
-							<select class="form-control" id="user-query-usergroup" name="usergroup">
-								<option value="">*: 所有用户</option>
-								<option value="B">B: 封禁用户</option>
-								<option value="U">U: 普通用户</option>
-								<option value="S">S: 超级用户</option>
-							</select>
-						</div>
-					</div><div class="text-center"><button type="submit" id="user-query-submit" class="mt-2 btn btn-secondary">查询</button></div>
-				</form>
-			</div>
-			<?php echoLongTable($userlist_cols, 'user_info', $user_list_cond, 'order by username asc', $userlist_header_row, $userlist_print_row, $userlist_config) ?>
-		<?php elseif ($cur_tab === 'blogs'): ?>
-			<div>
-				<h4>添加到公告</h4>
-				<?php $blog_link_index->printHTML(); ?>
-			</div>
-		
-			<div>
-				<h4>删除博客</h4>
-				<?php $blog_deleter->printHTML(); ?>
-			</div>
-		<?php elseif ($cur_tab === 'index'): ?>
-			<div>
-				<h4>倒计时</h4>
-				<?php echoLongTable(array('id', 'title', 'endtime'), 'countdowns', '1', 'order by endtime asc', $countdowns_header_row, $countdowns_print_row, $userlist_config) ?>
-				<h5>添加倒计时</h5>
-				<?php $countdown_adder->printHTML(); ?>
-				<h5>删除倒计时</h5>
-				<?php $countdown_deleter->printHTML(); ?>
-
-				<h4>友情链接</h4>
-				<?php echoLongTable(array('id', 'title', 'url', 'level'), 'friend_links', '1', 'order by level desc, id asc', $friend_links_header_row, $friend_links_print_row, $userlist_config) ?>
-				<h5>添加友情链接</h5>
-				<?php $friend_link_adder->printHTML(); ?>
-				<h5>删除友情链接</h5>
-				<?php $friend_link_deleter->printHTML(); ?>
-			</div>
-		<?php elseif ($cur_tab === 'submissions'): ?>
-			<div>
-				<h4>删除赛前提交记录</h4>
-				<?php $contest_submissions_deleter->printHTML(); ?>
-			</div>
-			<div>
-				<h4>测评失败的提交记录</h4>
-				<?php echoSubmissionsList("result_error = 'Judgement Failed'", 'order by id desc', array('result_hidden' => ''), $myUser); ?>
-			</div>
-		<?php elseif ($cur_tab === 'custom-test'): ?>
-		<?php $custom_test_deleter->printHTML() ?>
-		<?php
-				$submissions_pag = new Paginator(array(
-					'col_names' => array('*'),
-					'table_name' => 'custom_test_submissions',
-					'cond' => '1',
-					'tail' => 'order by id asc',
-					'page_len' => 5
-				));
-			foreach ($submissions_pag->get() as $submission) {
-				$problem = queryProblemBrief($submission['problem_id']);
-				$submission_result = json_decode($submission['result'], true);
-				echo '<dl class="dl-horizontal">';
-				echo '<dt>id</dt>';
-				echo '<dd>', "#{$submission['id']}", '</dd>';
-				echo '<dt>problem_id</dt>';
-				echo '<dd>', "#{$submission['problem_id']}", '</dd>';
-				echo '<dt>submit time</dt>';
-				echo '<dd>', $submission['submit_time'], '</dd>';
-				echo '<dt>submitter</dt>';
-				echo '<dd>', $submission['submitter'], '</dd>';
-				echo '<dt>judge_time</dt>';
-				echo '<dd>', $submission['judge_time'], '</dd>';
-				echo '</dl>';
-				echoSubmissionContent($submission, getProblemCustomTestRequirement($problem));
-				echoCustomTestSubmissionDetails($submission_result['details'], "submission-{$submission['id']}-details");
-			}
-			?>
-		<?= $submissions_pag->pagination() ?>
-		<?php elseif ($cur_tab === 'judger'): ?>
-			<div>
-				<h4>添加评测机</h4>
-				<?php $judger_adder->printHTML(); ?>
-			</div>
-			<div>
-				<h4>删除评测机</h4>
-				<?php $judger_deleter->printHTML(); ?>
-			</div>
-			<h3>评测机列表</h3>
-			<?php echoLongTable($judgerlist_cols, 'judger_info', "1=1", '', $judgerlist_header_row, $judgerlist_print_row, $judgerlist_config) ?>
-		<?php elseif ($cur_tab === 'image_hosting'): ?>
-			<h3>图床管理</h3>
-			<?php echoLongTable($image_hosting_cols, 'users_images', "1=1", 'order by id desc', $image_hosting_header_row, $image_hosting_print_row, $image_hosting_config) ?>
-			<div>
-				<h4>删除图片</h4>
-				<?php $image_deleter->printHTML() ?>
-			</div>
-			<div>
-				<h4>修改用户存储上限</h4>
-				<?php $change_user_image_total_size_limit_form->printHTML() ?>
-			</div>
-		<?php endif ?>
-	</div>
-</div>
-<?php echoUOJPageFooter() ?>
diff --git a/web/app/route.php b/web/app/route.php
index 5932527..d62588f 100644
--- a/web/app/route.php
+++ b/web/app/route.php
@@ -77,7 +77,6 @@ Route::group([
 		Route::any('/user_msg', '/user_msg.php');
 		Route::any('/user/{username}/system_msg', '/user_system_msg.php');
 
-		Route::any('/super-manage(?:/{tab})?', '/super_manage_old.php');
 		Route::any('/super_manage(?:/{tab})?', '/super_manage.php');
 		
 		Route::any('/download.php', '/download.php');
diff --git a/web/app/views/page-header.php b/web/app/views/page-header.php
index 4fd4300..984b19b 100644
--- a/web/app/views/page-header.php
+++ b/web/app/views/page-header.php
@@ -265,7 +265,7 @@
 							<li role="presentation"><a class="dropdown-item" href="<?= HTML::url('/user_msg') ?>"><?= UOJLocale::get('private message') ?>&nbsp;&nbsp;<?= $new_user_msg_num_html ?></a></li>
 							<li role="presentation"><a class="dropdown-item" href="<?= HTML::url('/user/'.Auth::id().'/system_msg') ?>"><?= UOJLocale::get('system message') ?>&nbsp;&nbsp;<?= $new_system_msg_num_html ?></a></li>
 							<?php if (isSuperUser(Auth::user())): ?>
-								<li role="presentation"><a class="dropdown-item" href="<?= HTML::url('/super-manage') ?>"><?= UOJLocale::get('system manage') ?></a></li>
+								<li role="presentation"><a class="dropdown-item" href="<?= HTML::url('/super_manage') ?>"><?= UOJLocale::get('system manage') ?></a></li>
 							<?php endif ?>
 						</ul>
 					</li>

From 5c3408652226f33e40d4a502a0bcab51c4ddba05 Mon Sep 17 00:00:00 2001
From: Baoshuo <i@baoshuo.ren>
Date: Thu, 20 Oct 2022 21:26:48 +0800
Subject: [PATCH 7/8] fix(web/super_manage): custom test id color

---
 web/app/controllers/super_manage.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/web/app/controllers/super_manage.php b/web/app/controllers/super_manage.php
index 1a33206..7352ea2 100644
--- a/web/app/controllers/super_manage.php
+++ b/web/app/controllers/super_manage.php
@@ -1039,7 +1039,7 @@ echoSubmissionsList(
 				$submission_result = json_decode($submission['result'], true);
 				?>
 				<tr style="cursor: pointer" data-bs-toggle="collapse" data-bs-target="#custom_test__<?= $submission['id'] ?>">
-					<td class="text-center">#<?= $submission['id'] ?></td>
+					<td class="text-center text-primary">#<?= $submission['id'] ?></td>
 					<td class="text-center">#<?= $submission['problem_id'] ?></td>
 					<td><?= getUserLink($submission['submitter']) ?></td>
 					<td><?= $submission['submit_time'] ?></td>

From 65bbc99560414d3b23654af7d06c51d191b966ee Mon Sep 17 00:00:00 2001
From: Baoshuo <i@baoshuo.ren>
Date: Thu, 20 Oct 2022 21:27:31 +0800
Subject: [PATCH 8/8] fix(web): style

---
 web/app/controllers/super_manage.php | 49 ++++++++++++++--------------
 1 file changed, 24 insertions(+), 25 deletions(-)

diff --git a/web/app/controllers/super_manage.php b/web/app/controllers/super_manage.php
index 7352ea2..11186ab 100644
--- a/web/app/controllers/super_manage.php
+++ b/web/app/controllers/super_manage.php
@@ -596,7 +596,6 @@ EOD);
 		};
 		
 		$change_user_image_total_size_limit_form->runAtServer();
-
 	}
 	?>
 
@@ -1085,15 +1084,15 @@ echoSubmissionsList(
 		<th>IP</th>
 	</tr>
 EOD,
-function($row) {
-	echo <<<EOD
+		function($row) {
+			echo <<<EOD
 		<tr>
 			<td>{$row['judger_name']}</td>
 			<td>{$row['password']}</td>
 			<td>{$row['ip']}</td>
 		</tr>
 EOD;
-},
+		},
 		[
 			'page_len' => 10,
 			'div_classes' => ['card', 'mb-3', 'table-responsive'],
@@ -1111,12 +1110,12 @@ EOD;
 	</div>
 <?php elseif ($cur_tab == 'image_hosting'): ?>
 <?php
-echoLongTable(
-	['*'],
-	'users_images',
-	'1',
-	'order by id desc',
-	<<<EOD
+	echoLongTable(
+		['*'],
+		'users_images',
+		'1',
+		'order by id desc',
+		<<<EOD
 	<tr>
 		<th style="width: 10em">上传者</th>
 		<th style="width: 14em">预览</th>
@@ -1125,16 +1124,16 @@ echoLongTable(
 		<th style="width: 6em">操作</th>
 	</tr>
 EOD,
-	function($row) {
-		$user_link = getUserLink($row['uploader']);
-		if ($row['size'] < 1024 * 512) {
-			$size = strval(round($row['size'] * 1.0 / 1024, 1)) . ' KB';
-		} else {
-			$size = strval(round($row['size'] * 1.0 / 1024 / 1024, 1)) . ' MB';
-		}
-		$token = crsf_token();
+		function($row) {
+			$user_link = getUserLink($row['uploader']);
+			if ($row['size'] < 1024 * 512) {
+				$size = strval(round($row['size'] * 1.0 / 1024, 1)) . ' KB';
+			} else {
+				$size = strval(round($row['size'] * 1.0 / 1024 / 1024, 1)) . ' MB';
+			}
+			$token = crsf_token();
 
-		echo <<<EOD
+			echo <<<EOD
 	<tr>
 		<td>$user_link</td>
 		<td><img src="{$row['path']}" width="250" loading="lazy"></td>
@@ -1149,12 +1148,12 @@ EOD,
 		</td>
 	</tr>
 EOD;
-	},
-	[
-		'page_len' => 20,
-		'div_classes' => ['card', 'mb-3', 'table-responsive'],
-		'table_classes' => ['table', 'uoj-table', 'mb-0'],
-	]
+		},
+		[
+			'page_len' => 20,
+			'div_classes' => ['card', 'mb-3', 'table-responsive'],
+			'table_classes' => ['table', 'uoj-table', 'mb-0'],
+		]
 	); ?>
 	<div class="card mt-3">
 		<div class="card-body">