blessing-skin-server/app/Controllers/AdminController.php

<?php

namespace App\Controllers;

use App\Models\User;
use App\Models\UserModel;
use App\Models\Player;
use App\Models\PlayerModel;
use App\Models\Texture;
use App\Exceptions\E;
use Validate;
use Utils;
use View;

class AdminController extends BaseController
{

    public function index()
    {
        View::show('admin.index');
    }

    public function customize()
    {
        View::show('admin.customize');
    }

    public function score()
    {
        View::show('admin.score');
    }

    public function options()
    {
        View::show('admin.options');
    }

    public function update()
    {
        $action = Utils::getValue('action', $_GET);

        if ($action == "check") {
            $updater = new \Updater(\App::version());
            if ($updater->newVersionAvailable()) {
                View::json([
                    'new_version_available' => true,
                    'latest_version' => $updater->latest_version
                ]);
            } else {
                View::json([
                    'new_version_available' => false,
                    'latest_version' => $updater->current_version
                ]);
            }
        } elseif ($action == "download") {
            View::show('admin.download');
        } else {
            View::show('admin.update');
        }
    }

    public function users()
    {
        $page = isset($_GET['page']) ? $_GET['page'] : 1;

        $filter = isset($_GET['filter']) ? $_GET['filter'] : "";

        $q = isset($_GET['q']) ? $_GET['q'] : "";

        if ($filter == "") {
            $users = UserModel::orderBy('uid');
        } elseif ($filter == "email") {
            $users = UserModel::like('email', $q)->orderBy('uid');
        } elseif ($filter == "nickname") {
            $users = UserModel::like('nickname', $q)->orderBy('uid');
        }

        $total_pages = ceil($users->count() / 30);
        $users = $users->skip(($page - 1) * 30)->take(30)->get();

        echo View::make('admin.users')->with('users', $users)
                                      ->with('filter', $filter)
                                      ->with('q', $q)
                                      ->with('page', $page)
                                      ->with('total_pages', $total_pages)
                                      ->render();
    }

    public function players()
    {
        $page = isset($_GET['page']) ? $_GET['page'] : 1;

        $filter = isset($_GET['filter']) ? $_GET['filter'] : "";

        $q = isset($_GET['q']) ? $_GET['q'] : "";

        if ($filter == "") {
            $players = PlayerModel::orderBy('uid');
        } elseif ($filter == "player_name") {
            $players = PlayerModel::like('player_name', $q)->orderBy('uid');
        } elseif ($filter == "uid") {
            $players = PlayerModel::where('uid', $q)->orderBy('uid');
        }

        $total_pages = ceil($players->count() / 30);
        $players = $players->skip(($page - 1) * 30)->take(30)->get();

        echo View::make('admin.players')->with('players', $players)
                                        ->with('filter', $filter)
                                        ->with('q', $q)
                                        ->with('page', $page)
                                        ->with('total_pages', $total_pages)
                                        ->render();
    }

    /**
     * Handle ajax request from /admin/users
     */
    public function userAjaxHandler()
    {
        $action = isset($_GET['action']) ? $_GET['action'] : "";

        if ($action == "color") {
            Validate::checkPost(['color_scheme']);

            $color_scheme = str_replace('_', '-', $_POST['color_scheme']);
            \Option::set('color_scheme', $color_scheme);

            View::json('修改配色成功', 0);
        }

        $user     = new User(Utils::getValue('uid', $_POST));
        // current user
        $cur_user = new User($_SESSION['uid']);

        if (!$user->is_registered)
            throw new E('用户不存在', 1);

        if ($action == "email") {
            Validate::checkPost(['email']);

            if (!filter_var($_POST['email'], FILTER_VALIDATE_EMAIL)) {
                View::json('邮箱格式错误', 3);
            }

            if ($user->setEmail($_POST['email']))
                View::json('邮箱修改成功', 0);

        } elseif ($action == "nickname") {
            Validate::checkPost(['nickname']);

            if (Utils::convertString($_POST['nickname']) != $_POST['nickname'])
                View::json('无效的昵称。昵称中包含了奇怪的字符。', 1);

            if ($user->setNickName($_POST['nickname']))
                View::json('昵称已成功设置为 '.$_POST['nickname'], 0);

        } elseif ($action == "password") {
            Validate::checkPost(['password']);

            if (\Validate::password($_POST['password'])) {
                if ($user->changePasswd($_POST['password']))
                    View::json('密码修改成功', 0);
            }

        } elseif ($action == "score") {
            Validate::checkPost(['score']);

            if ($user->setScore($_POST['score']))
                    View::json('积分修改成功', 0);

        } elseif ($action == "ban") {
            if ($user->getPermission() == "1") {
                if ($cur_user->getPermission() != "2")
                    View::json('非超级管理员无法封禁普通管理员');
            } elseif ($user->getPermission() == "2") {
                View::json('超级管理员无法被封禁');
            }

            $permission = $user->getPermission() == "-1" ? "0" : "-1";

            if ($user->setPermission($permission)) {
                View::json([
                    'errno'      => 0,
                    'msg'        => '账号已被' . ($permission == '-1' ? '封禁' : '解封'),
                    'permission' => $user->getPermission()
                ]);
            }

        } elseif ($action == "admin") {
            if ($cur_user->getPermission() != "2")
                View::json('非超级管理员无法进行此操作');

            if ($user->getPermission() == "2")
                View::json('超级管理员无法被解除');

            $permission = $user->getPermission() == "1" ? "0" : "1";

            if ($user->setPermission($permission)) {
                View::json([
                    'errno'      => 0,
                    'msg'        => '账号已被' . ($permission == '1' ? '设为' : '解除') . '管理员',
                    'permission' => $user->getPermission()
                ]);
            }

        } elseif ($action == "delete") {
            if ($user->delete())
                View::json('账号已被成功删除', 0);

        } else {
            throw new E('非法参数', 1);
        }
    }

    /**
     * Handle ajax request from /admin/players
     */
    public function playerAjaxHandler()
    {
        $action = isset($_GET['action']) ? $_GET['action'] : "";

        // exception will be throw by model if player is not existent
        $player = new Player(Utils::getValue('pid', $_POST));

        if ($action == "preference") {
            Validate::checkPost(['preference']);

            if ($_POST['preference'] != "default" && $_POST['preference'] != "slim")
                View::json('无效的参数', 0);

            if ($player->setPreference($_POST['preference']))
                View::json('角色 '.$player->player_name.' 的优先模型已更改至 '.$_POST['preference'], 0);

        } elseif ($action == "texture") {
            Validate::checkPost(['model', 'tid']);

            if ($_POST['model'] != "steve" && $_POST['model'] != "alex" && $_POST['model'] != "cape")
                View::json('无效的参数', 0);

            if (!(is_numeric($_POST['tid']) && Texture::find($_POST['tid'])))
                View::json('材质 tid.'.$_POST['tid'].' 不存在', 1);

            if ($player->setTexture(['tid_'.$_POST['model'] => $_POST['tid']]))
                View::json('角色 '.$player->player_name.' 的材质修改成功', 0);

        } elseif ($action == "owner") {
            Validate::checkPost(['uid']);

            if (!is_numeric($_POST['uid']))
                View::json('无效的参数', 0);

            $user = new User($_POST['uid']);

            if (!$user->is_registered)
                View::json('不存在的用户', 1);

            if ($player->setOwner($_POST['uid']))
                View::json('角色 '.$player->player_name.' 已成功让渡至 '.$user->getNickName(), 0);

        } elseif ($action == "delete") {
            if (PlayerModel::where('pid', $_POST['pid'])->delete())
                View::json('角色已被成功删除', 0);
        } else {
            throw new E('非法参数', 1);
        }
    }

}