From bf179148a1282ee48ec1ff15f06c585b8475e168 Mon Sep 17 00:00:00 2001 From: Baoshuo Date: Thu, 20 Oct 2022 19:50:53 +0800 Subject: [PATCH] refactor(web/super_manage): users manage --- web/app/controllers/super_manage.php | 419 ++++++++++++++++++++++++- web/app/controllers/user_info_edit.php | 14 + web/app/libs/uoj-html-lib.php | 2 +- web/app/locale/user/en.php | 4 + web/app/locale/user/zh-cn.php | 4 + 5 files changed, 435 insertions(+), 8 deletions(-) diff --git a/web/app/controllers/super_manage.php b/web/app/controllers/super_manage.php index 19e0960..59edbac 100644 --- a/web/app/controllers/super_manage.php +++ b/web/app/controllers/super_manage.php @@ -7,6 +7,10 @@ define('SCRIPT_REFRESH_AS_GET', ''); + if (!Auth::check()) { + redirectToLogin(); + } + if (!isSuperUser($myUser)) { become403Page(); } @@ -225,7 +229,234 @@ $add_link_form->succ_href = '/super_manage/index#links'; $add_link_form->runAtServer(); } elseif ($cur_tab == 'users') { - // + $user_list_cond = []; + + if (isset($_GET['username']) && $_GET['username'] != "") { + $user_list_cond[] = "username like '%" . DB::escape($_GET['username']) . "%'"; + } + if (isset($_GET['usergroup']) && $_GET['usergroup'] != "") { + $user_list_cond[] = "usergroup = '" . DB::escape($_GET['usergroup']) . "'"; + } + if (isset($_GET['usertype']) && $_GET['usertype'] != "") { + $user_list_cond[] = "usertype like '%" . DB::escape($_GET['usertype']) . "%'"; + } + + if ($user_list_cond) { + $user_list_cond = join($user_list_cond, ' and '); + } else { + $user_list_cond = '1'; + } + + $register_form = new UOJForm('register'); + $register_form->addVInput('new_username', 'text', '用户名', '', + function ($username, &$vdata) { + if (!validateUsername($username)) { + return '用户名不合法'; + } + + if (queryUser($username)) { + return '该用户已存在'; + } + + $vdata['username'] = $username; + + return ''; + }, + null + ); + $register_form->addVInput('new_password', 'password', '密码', '', + function ($password, &$vdata) { + $vdata['password'] = $password; + + return ''; + }, + 'validatePassword' + ); + $register_form->addVInput('new_email', 'text', '电子邮件（选填）', '', + function ($email, &$vdata) { + if ($email && !validateEmail($email)) { + return '邮件地址不合法'; + } + + $vdata['email'] = $email; + + return ''; + }, + null + ); + $register_form->addVInput('new_realname', 'text', '真实姓名（选填）', '', + function ($realname, &$vdata) { + $vdata['realname'] = $realname; + + return ''; + }, + null + ); + $register_form->addVInput('new_school', 'text', '学校名称（选填）', '', + function ($school, &$vdata) { + $vdata['school'] = $school; + + return ''; + }, + null + ); + $register_form->handle = function(&$vdata) { + $username = $vdata['username']; + $realname = DB::escape($vdata['realname']); + $school = DB::escape($vdata['school']); + $email = DB::escape($vdata['email']); + $password = hash_hmac('md5', $vdata['password'], getPasswordClientSalt()); + $password = getPasswordToStore($password, $username); + $svn_password = uojRandString(10); + + DB::query("insert into user_info (username, realname, email, school, password, svn_password, register_time, usergroup) values ('$username', '$realname', '$email', '$school', '$password', '$svn_password', now(), 'U')"); + + header('Content-Type: application/json'); + die(json_encode(['status' => 'success', 'message' => ''])); + }; + $register_form->setAjaxSubmit(<<runAtServer(); + + $change_password_form = new UOJForm('change_password'); + $change_password_form->addVInput('p_username', 'text', '用户名', '', + function ($username, &$vdata) { + if (!validateUsername($username)) { + return '用户名不合法'; + } + + if (!queryUser($username)) { + return '用户不存在'; + } + + $vdata['username'] = $username; + + return ''; + }, + null + ); + $change_password_form->addVInput('p_password', 'password', '密码', '', + function ($password, &$vdata) { + $vdata['password'] = $password; + + return ''; + }, + 'validatePassword' + ); + $change_password_form->handle = function(&$vdata) { + $esc_username = DB::escape($vdata['username']); + $password = hash_hmac('md5', $vdata['password'], getPasswordClientSalt()); + $esc_password = DB::escape(getPasswordToStore($password, $vdata['username'])); + + DB::query("update user_info set password = '$esc_password' where username = '$esc_username'"); + + header('Content-Type: application/json'); + die(json_encode(['status' => 'success', 'message' => '用户 ' . $vdata['username'] . ' 的密码已经被成功重置。'])); + }; + $change_password_form->submit_button_config['margin_class'] = 'mt-3'; + $change_password_form->submit_button_config['text'] = '重置'; + $change_password_form->setAjaxSubmit(<<runAtServer(); + + $change_usergroup_form = new UOJForm('change_usergroup'); + $change_usergroup_form->addVInput('username', 'text', '用户名', '', + function ($username, &$vdata) { + if (!validateUsername($username)) { + return '用户名不合法'; + } + + if (!queryUser($username)) { + return '用户不存在'; + } + + $vdata['username'] = $username; + + return ''; + }, + null + ); + $change_usergroup_form->addVSelect('op_type', [ + 'banneduser' => '设为封禁用户', + 'normaluser' => '设为普通用户', + 'superuser' => '设为超级用户', + ], '操作类型', ''); + $change_usergroup_form->handle = function($vdata) { + $username = $vdata['username']; + $usergroup = ''; + + switch ($_POST['op_type']) { + case 'banneduser': + DB::update("update user_info set usergroup = 'B', usertype = 'banned' where username = '{$username}'"); + $usergroup = '被封禁的用户'; + break; + case 'normaluser': + DB::update("update user_info set usergroup = 'U', usertype = 'student' where username = '{$username}'"); + $usergroup = '普通用户'; + break; + case 'superuser': + DB::update("update user_info set usergroup = 'S', usertype = 'student' where username = '{$username}'"); + $usergroup = '超级用户'; + break; + } + + header('Content-Type: application/json'); + die(json_encode(['status' => 'success', 'message' => '用户 ' . $username . ' 现在是 ' . $usergroup . '。'])); + }; + $change_usergroup_form->setAjaxSubmit(<<runAtServer(); } ?> @@ -257,7 +488,7 @@
-
+
  • @@ -441,24 +672,198 @@ $(document).ready(function() { }); -
    +
    -
    1
    -
    2
    +
    +
    +
    + + +
    +
    + + +
    +
    + + +
    +
    + +
    +
    + + 用户名 + 学校 + 用户类别 + 权限 + 注册时间 + 操作 + +EOD, + function($row) { + echo ''; + echo '', '', $row['username'], '', ''; + echo '', HTML::escape($row['school']), ''; + echo ''; + switch ($row['usergroup']) { + case 'S': + echo UOJLocale::get('user::super user'); + break; + case 'B': + echo UOJLocale::get('user::banned user'); + break; + default: + echo UOJLocale::get('user::normal user'); + break; + } + echo ''; + echo ''; + foreach (explode(',', $row['usertype']) as $idx => $type) { + if ($idx) { + echo ', '; + } + echo UOJLocale::get('user::' . str_replace('_', ' ', $type)) ?: HTML::escape($type); + } + echo ''; + echo '', $row['register_time'], ''; + echo '', '编辑', ''; + echo ''; + }, + [ + 'page_len' => 20, + 'div_classes' => ['table-responsive'], + 'table_classes' => ['table', 'align-middle'], + ], + ); + ?> +
    +
    + +
    +
    + printHTML() ?> +
    +
    +
    注意事项
    +
      +
    • 用户名推荐格式为年级 + 姓名全拼，如 2022 级的张三同学可以设置为 2022zhangsan。对于外校学生，推荐格式为学校名称缩写 + 姓名拼音首字母，如山大附中的赵锦熙同学可以设置为 sdfzzjx)。
      • +
    • 请提醒用户及时修改初始密码，以免账号被盗导致教学资源流出。请勿设置过于简单的初始密码。
      • +
    • 我们推荐在创建账号时输入号主的电子邮件地址以便后期发生忘记密码等情况时进行验证。
      • +
    • 创建账号后可以在「修改个人信息」页面中的「特权」选项卡为用户分配权限。特别地，如果该用户是外校学生，那么您可能需要将其设置为「仅比赛参加者」以禁止其查看已参与比赛以外的题目。
      • +
    +
    +
    +
    +
    + +
    +
    + printHTML() ?> +
    +
    +
    注意事项
    +
      +
    • 在为用户重置密码前请核对对方身份以免被骗。
      • +
    • 请勿设置过于简单的密码。
      • +
    • 请提醒用户在登录后及时修改初始密码。
      • +
    +
    +
    +
    +
    + +
    +
    + printHTML() ?> +
    +
    +
    注意事项
    +
      +
    • 用户被封禁后将不能再次登录系统。
      • +
    • 将当前用户移除权限后将无法再次访问本页面。
      • +
    • 在修改用户类别前请仔细核对用户名以免产生不必要的麻烦。
      • +
    +
    +
    +
    + +
    diff --git a/web/app/controllers/user_info_edit.php b/web/app/controllers/user_info_edit.php index a79092c..f475885 100644 --- a/web/app/controllers/user_info_edit.php +++ b/web/app/controllers/user_info_edit.php @@ -410,6 +410,20 @@ EOD);
    +
    + + + + + + + + + + + + +