blessing-skin-server/app/Http/Controllers/AdminController.php

<?php

namespace App\Http\Controllers;

use View;
use Utils;
use Option;
use App\Events;
use App\Models\User;
use App\Models\Player;
use App\Models\Texture;
use Illuminate\Http\Request;
use App\Exceptions\PrettyPageException;
use App\Services\Repositories\UserRepository;

class AdminController extends Controller
{
    public function index()
    {
        return view('admin.index');
    }

    public function customize()
    {
        return view('admin.customize');
    }

    public function score()
    {
        $rate = Option::form('rate', '积分换算', function($form)
        {
            $form->group('score_per_storage', '存储', function($group) {
                $group->text('score_per_storage');
                $group->addon('积分 = 1 KB');
            });

            $form->group('private_score_per_storage', '私密材质存储', function($group) {
                $group->text('private_score_per_storage');
                $group->addon('积分 = 1 KB');
            })->hint('上传私密材质将消耗更多积分');

            $form->checkbox('return_score', '积分返还', '用户删除角色/材质时返还积分');

            $form->group('score_per_player', '角色', function($group) {
                $group->text('score_per_player');
                $group->addon('积分 = 一个角色');
            });

            $form->text('user_initial_score', '新用户默认积分');

        })->handle();

        return view('admin.score', compact('rate'));
    }

    public function options()
    {
        $general = Option::form('general', '常规选项', function($form)
        {
            $form->text('site_name', '站点标题');
            $form->text('site_description', '站点描述');
            $form->text('site_url', '站点地址（URL）')->hint('以 http(s):// 开头，不要以 / 结尾');

            $form->checkbox('user_can_register', '开放注册', '任何人都可以注册');

            $form->text('regs_per_ip', '每个 IP 限制注册数');

            $form->group('max_upload_file_size', '最大允许上传大小', function($group) {
                // main textbox
                $group->text('max_upload_file_size');
                $group->addon('KB');
            })->hint('PHP 限制：'.ini_get('post_max_size').'，定义在 php.ini 中。');

            $form->checkbox('allow_chinese_playername', '角色名', '允许中文角色名');

            $form->select('api_type', '首选 JSON API', function($options) {
                $options->add('0', 'CustomSkinLoader API');
                $options->add('1', 'UniversalSkinAPI');
            });

            $form->checkbox('auto_del_invalid_texture', '失效材质', '自动删除失效材质')->hint('自动从皮肤库中删除文件不存在的材质记录');

            $form->textarea('comment_script', '评论代码', function($textarea) {
                $textarea->setRows(6);
                $textarea->setDescription('评论代码内可使用占位符，<code>{tid}</code> 将会被自动替换为材质的 id，<code>{name}</code> 会被替换为材质名称，<code>{url}</code> 会被替换为当前页面地址。');
            });
        })->handle(function() {
            if (substr($_POST['site_url'], -1) == "/")
                $_POST['site_url'] = substr($_POST['site_url'], 0, -1);
        });

        $cache = Option::form('cache', '资源文件配置', function($form)
        {
            $form->checkbox('force_ssl', '强制 SSL', '强制使用 HTTPS 协议加载资源')->hint('请确认 SSL 可用后再开启');
            $form->checkbox('auto_detect_asset_url', '资源地址', '自动判断资源文件地址')->hint('根据当前 URL 自动加载资源文件，如果关闭则将根据「站点地址」填写的内容加载。如果出现 CDN 回源问题请关闭');
            $form->checkbox('return_200_when_notfound', 'HTTP 响应码', '请求不存在的角色时返回 200 而不是 404');

            $form->text('cache_expire_time', '缓存失效时间')->hint('秒数，86400 = 一天，31536000 = 一年');

        })->hint('如果启用了 CDN 缓存请适当修改这些配置')->handle();

        return view('admin.options')->with('forms', compact('general', 'cache'));
    }

    /**
     * Show Manage Page of Users.
     *
     * @param  Request $request
     * @return \Illuminate\Http\Response
     */
    public function users(Request $request)
    {
        $page   = $request->input('page', 1);
        $filter = $request->input('filter', '');
        $q      = $request->input('q', '');

        if ($filter == "") {
            $users = User::orderBy('uid');
        } elseif ($filter == "email") {
            $users = User::like('email', $q)->orderBy('uid');
        } elseif ($filter == "nickname") {
            $users = User::like('nickname', $q)->orderBy('uid');
        }

        $total_pages = ceil($users->count() / 30);
        $users = $users->skip(($page - 1) * 30)->take(30)->get();

        return view('admin.users')->with('users', $users)
                                  ->with('filter', $filter)
                                  ->with('q', $q)
                                  ->with('page', $page)
                                  ->with('total_pages', $total_pages);
    }

    /**
     * Show Manage Page of Players.
     *
     * @param  Request $request
     * @return \Illuminate\Http\Response
     */
    public function players(Request $request)
    {
        $page   = $request->input('page', 1);
        $filter = $request->input('filter', '');
        $q      = $request->input('q', '');

        if ($filter == "") {
            $players = Player::orderBy('uid');
        } elseif ($filter == "player_name") {
            $players = Player::like('player_name', $q)->orderBy('uid');
        } elseif ($filter == "uid") {
            $players = Player::where('uid', $q)->orderBy('uid');
        }

        $total_pages = ceil($players->count() / 30);
        $players = $players->skip(($page - 1) * 30)->take(30)->get();

        return view('admin.players')->with('players', $players)
                                    ->with('filter', $filter)
                                    ->with('q', $q)
                                    ->with('page', $page)
                                    ->with('total_pages', $total_pages);
    }

    /**
     * Handle ajax request from /admin/users
     *
     * @param  Request $request
     * @return void
     */
    public function userAjaxHandler(Request $request, UserRepository $users)
    {
        $action = $request->input('action');

        if ($action == "color") {
            $this->validate($request, [
                'color_scheme' => 'required'
            ]);

            $color_scheme = str_replace('_', '-', $request->input('color_scheme'));
            \Option::set('color_scheme', $color_scheme);

            return json('修改配色成功', 0);
        }

        $user     = $users->get($request->input('uid'));
        // current user
        $cur_user = $users->get(session('uid'));

        if (!$user)
            return json('用户不存在', 1);

        if ($action == "email") {
            $this->validate($request, [
                'email' => 'required|email'
            ]);

            if ($user->setEmail($request->input('email')))
                return json('邮箱修改成功', 0);

        } elseif ($action == "nickname") {
            $this->validate($request, [
                'nickname' => 'required|nickname'
            ]);

            if ($user->setNickName($request->input('nickname')))
                return json('昵称已成功设置为 '.$request->input('nickname'), 0);

        } elseif ($action == "password") {
            $this->validate($request, [
                'password' => 'required|min:8|max:16'
            ]);

            if ($user->changePasswd($request->input('password')))
                return json('密码修改成功', 0);

        } elseif ($action == "score") {
            $this->validate($request, [
                'score' => 'required|integer'
            ]);

            if ($user->setScore($request->input('score')))
                return json('积分修改成功', 0);

        } elseif ($action == "ban") {
            if ($user->getPermission() == User::ADMIN) {
                if ($cur_user->getPermission() != User::SUPER_ADMIN)
                    return json('非超级管理员无法封禁普通管理员');
            } elseif ($user->getPermission() == User::SUPER_ADMIN) {
                return json('超级管理员无法被封禁');
            }

            $permission = $user->getPermission() == User::BANNED ? User::NORMAL : User::BANNED;

            if ($user->setPermission($permission)) {
                return json([
                    'errno'      => 0,
                    'msg'        => '账号已被' . ($permission == User::BANNED ? '封禁' : '解封'),
                    'permission' => $user->getPermission()
                ]);
            }

        } elseif ($action == "admin") {
            if ($cur_user->getPermission() != User::SUPER_ADMIN)
                return json('非超级管理员无法进行此操作');

            if ($user->getPermission() == User::SUPER_ADMIN)
                return json('超级管理员无法被解除');

            $permission = $user->getPermission() == User::ADMIN ? User::NORMAL : User::ADMIN;

            if ($user->setPermission($permission)) {
                return json([
                    'errno'      => 0,
                    'msg'        => '账号已被' . ($permission == User::ADMIN ? '设为' : '解除') . '管理员',
                    'permission' => $user->getPermission()
                ]);
            }

        } elseif ($action == "delete") {
            if ($user->delete())
                return json('账号已被成功删除', 0);

        } else {
            return json('非法参数', 1);
        }
    }

    /**
     * Handle ajax request from /admin/players
     */
    public function playerAjaxHandler(Request $request, UserRepository $users)
    {
        $action = isset($_GET['action']) ? $_GET['action'] : "";

        $player = Player::find($request->input('pid'));

        if (!$player)
            abort(404, trans('general.unexistent-player'));

        if ($action == "preference") {
            $this->validate($request, [
                'preference' => 'required|preference'
            ]);

            if ($player->setPreference($request->input('preference')))
                return json('角色 '.$player->player_name.' 的优先模型已更改至 '.$request->input('preference'), 0);

        } elseif ($action == "texture") {
            $this->validate($request, [
                'model' => 'required|model',
                'tid'   => 'required|integer'
            ]);

            if (!Texture::find($request->tid))
                return json("材质 tid.{$request->tid} 不存在", 1);

            if ($player->setTexture(['tid_'.$request->model => $request->tid]))
                return json("角色 {$player->player_name} 的材质修改成功", 0);

        } elseif ($action == "owner") {
            $this->validate($request, [
                'pid'   => 'required|integer',
                'uid'   => 'required|integer'
            ]);

            $user = $users->get($request->input('uid'));

            if (!$user)
                return json('不存在的用户', 1);

            if ($player->setOwner($request->input('uid')))
                return json("角色 $player->player_name 已成功让渡至 ".$user->getNickName(), 0);

        } elseif ($action == "delete") {
            if ($player->delete())
                return json('角色已被成功删除', 0);
        } else {
            return json('非法参数', 1);
        }
    }

}