项目初始化

app/admin/controller/security/DataRecycle.php

@@ -0,0 +1,155 @@
+<?php
+
+declare(strict_types=1);
+
+namespace app\admin\controller\security;
+
+use app\common\controller\Backend;
+use app\admin\model\DataRecycle as DataRecycleModel;
+use Webman\Http\Request;
+use support\Response;
+
+class DataRecycle extends Backend
+{
+    protected ?object $model = null;
+
+    protected array|string $preExcludeFields = ['update_time', 'create_time'];
+    protected array|string $quickSearchField = 'name';
+
+    protected function initController(Request $request): ?Response
+    {
+        $this->model = new DataRecycleModel();
+        return null;
+    }
+
+    public function index(Request $request): Response
+    {
+        $response = $this->initializeBackend($request);
+        if ($response !== null) return $response;
+
+        if ($request->get('select') || $request->post('select')) {
+            return $this->select($request);
+        }
+
+        list($where, $alias, $limit, $order) = $this->queryBuilder();
+        $res = $this->model
+            ->withJoin($this->withJoinTable ?? [], $this->withJoinType ?? 'LEFT')
+            ->alias($alias)
+            ->where($where)
+            ->order($order)
+            ->paginate($limit);
+
+        return $this->success('', [
+            'list' => $res->items(),
+            'total' => $res->total(),
+            'remark' => get_route_remark(),
+        ]);
+    }
+
+    public function add(Request $request): Response
+    {
+        $response = $this->initializeBackend($request);
+        if ($response !== null) return $response;
+
+        if ($request->method() === 'POST') {
+            $data = $request->post();
+            if (!$data) {
+                return $this->error(__('Parameter %s can not be empty', ['']));
+            }
+            $data = $this->excludeFields($data);
+            $data['controller_as'] = str_ireplace('.php', '', $data['controller'] ?? '');
+            $data['controller_as'] = strtolower(str_ireplace(['\\', '.'], '/', $data['controller_as']));
+
+            $result = false;
+            $this->model->startTrans();
+            try {
+                if ($this->modelValidate) {
+                    $validateClass = str_replace("\\model\\", "\\validate\\", get_class($this->model));
+                    if (class_exists($validateClass)) {
+                        $validate = new $validateClass();
+                        $validate->scene('add')->check($data);
+                    }
+                }
+                $result = $this->model->save($data);
+                $this->model->commit();
+            } catch (\Throwable $e) {
+                $this->model->rollback();
+                return $this->error($e->getMessage());
+            }
+            return $result !== false ? $this->success(__('Added successfully')) : $this->error(__('No rows were added'));
+        }
+
+        return $this->success('', [
+            'controllers' => $this->getControllerList(),
+        ]);
+    }
+
+    public function edit(Request $request): Response
+    {
+        $response = $this->initializeBackend($request);
+        if ($response !== null) return $response;
+
+        $pk = $this->model->getPk();
+        $id = $request->post($pk) ?? $request->get($pk);
+        $row = $this->model->find($id);
+        if (!$row) {
+            return $this->error(__('Record not found'));
+        }
+
+        if ($request->method() === 'POST') {
+            $data = $request->post();
+            if (!$data) {
+                return $this->error(__('Parameter %s can not be empty', ['']));
+            }
+            $data = $this->excludeFields($data);
+            $data['controller_as'] = str_ireplace('.php', '', $data['controller'] ?? '');
+            $data['controller_as'] = strtolower(str_ireplace(['\\', '.'], '/', $data['controller_as']));
+
+            $result = false;
+            $this->model->startTrans();
+            try {
+                if ($this->modelValidate) {
+                    $validateClass = str_replace("\\model\\", "\\validate\\", get_class($this->model));
+                    if (class_exists($validateClass)) {
+                        $validate = new $validateClass();
+                        $validate->scene('edit')->check(array_merge($data, [$pk => $row[$pk]]));
+                    }
+                }
+                $result = $row->save($data);
+                $this->model->commit();
+            } catch (\Throwable $e) {
+                $this->model->rollback();
+                return $this->error($e->getMessage());
+            }
+            return $result !== false ? $this->success(__('Update successful')) : $this->error(__('No rows updated'));
+        }
+
+        return $this->success('', [
+            'row' => $row,
+            'controllers' => $this->getControllerList(),
+        ]);
+    }
+
+    private function getControllerList(): array
+    {
+        $outExcludeController = [
+            'Addon.php',
+            'Ajax.php',
+            'Module.php',
+            'Terminal.php',
+            'Dashboard.php',
+            'Index.php',
+            'routine/AdminInfo.php',
+            'user/MoneyLog.php',
+            'user/ScoreLog.php',
+        ];
+        $outControllers = [];
+        $controllers = get_controller_list();
+        foreach ($controllers as $key => $controller) {
+            if (!in_array($controller, $outExcludeController)) {
+                $outControllers[$key] = $controller;
+            }
+        }
+        return $outControllers;
+    }
+}

app/admin/controller/security/DataRecycleLog.php

@@ -0,0 +1,119 @@
+<?php
+
+declare(strict_types=1);
+
+namespace app\admin\controller\security;
+
+use ba\TableManager;
+use support\think\Db;
+use app\common\controller\Backend;
+use app\admin\model\DataRecycleLog as DataRecycleLogModel;
+use Webman\Http\Request;
+use support\Response;
+
+class DataRecycleLog extends Backend
+{
+    protected ?object $model = null;
+
+    protected array|string $preExcludeFields = [];
+    protected array|string $quickSearchField = 'recycle.name';
+    protected array $withJoinTable = ['recycle', 'admin'];
+
+    protected function initController(Request $request): ?Response
+    {
+        $this->model = new DataRecycleLogModel();
+        return null;
+    }
+
+    public function index(Request $request): Response
+    {
+        $response = $this->initializeBackend($request);
+        if ($response !== null) return $response;
+
+        if ($request->get('select') || $request->post('select')) {
+            return $this->select($request);
+        }
+
+        list($where, $alias, $limit, $order) = $this->queryBuilder();
+        $res = $this->model
+            ->withJoin($this->withJoinTable, $this->withJoinType)
+            ->alias($alias)
+            ->where($where)
+            ->order($order)
+            ->paginate($limit);
+
+        return $this->success('', [
+            'list' => $res->items(),
+            'total' => $res->total(),
+            'remark' => get_route_remark(),
+        ]);
+    }
+
+    public function restore(Request $request): Response
+    {
+        $response = $this->initializeBackend($request);
+        if ($response !== null) return $response;
+
+        $ids = $request->post('ids', $request->get('ids', []));
+        $ids = is_array($ids) ? $ids : [];
+        $data = $this->model->where('id', 'in', $ids)->select();
+        if (!$data) {
+            return $this->error(__('Record not found'));
+        }
+
+        $count = 0;
+        $this->model->startTrans();
+        try {
+            foreach ($data as $row) {
+                $recycleData = json_decode($row['data'], true);
+                if (is_array($recycleData) && Db::connect(TableManager::getConnection($row->connection))->name($row->data_table)->insert($recycleData)) {
+                    $row->delete();
+                    $count++;
+                }
+            }
+            $this->model->commit();
+        } catch (\Throwable $e) {
+            $this->model->rollback();
+            return $this->error($e->getMessage());
+        }
+
+        return $count ? $this->success(__('Restore successful')) : $this->error(__('No rows were restore'));
+    }
+
+    public function info(Request $request): Response
+    {
+        $response = $this->initializeBackend($request);
+        if ($response !== null) return $response;
+
+        $pk = $this->model->getPk();
+        $id = $request->get($pk) ?? $request->post($pk);
+        $row = $this->model
+            ->withJoin($this->withJoinTable, $this->withJoinType)
+            ->where('data_recycle_log.id', $id)
+            ->find();
+        if (!$row) {
+            return $this->error(__('Record not found'));
+        }
+        $data = $this->jsonToArray($row['data']);
+        if (is_array($data)) {
+            foreach ($data as $key => $item) {
+                $data[$key] = $this->jsonToArray($item);
+            }
+        }
+        $row['data'] = $data;
+
+        return $this->success('', ['row' => $row]);
+    }
+
+    protected function jsonToArray(mixed $value = ''): mixed
+    {
+        if (!is_string($value)) {
+            return $value;
+        }
+        $data = json_decode($value, true);
+        if (($data && is_object($data)) || (is_array($data) && !empty($data))) {
+            return $data;
+        }
+        return $value;
+    }
+}

app/admin/controller/security/SensitiveData.php

@@ -0,0 +1,182 @@
+<?php
+
+declare(strict_types=1);
+
+namespace app\admin\controller\security;
+
+use app\common\controller\Backend;
+use app\admin\model\SensitiveData as SensitiveDataModel;
+use Webman\Http\Request;
+use support\Response;
+
+class SensitiveData extends Backend
+{
+    protected ?object $model = null;
+
+    protected array|string $preExcludeFields = ['update_time', 'create_time'];
+    protected array|string $quickSearchField = 'controller';
+
+    protected function initController(Request $request): ?Response
+    {
+        $this->model = new SensitiveDataModel();
+        return null;
+    }
+
+    public function index(Request $request): Response
+    {
+        $response = $this->initializeBackend($request);
+        if ($response !== null) return $response;
+
+        if ($request->get('select') || $request->post('select')) {
+            return $this->select($request);
+        }
+
+        list($where, $alias, $limit, $order) = $this->queryBuilder();
+        $res = $this->model
+            ->withJoin($this->withJoinTable, $this->withJoinType)
+            ->alias($alias)
+            ->where($where)
+            ->order($order)
+            ->paginate($limit);
+
+        $items = $res->items();
+        foreach ($items as $item) {
+            if ($item->data_fields) {
+                $fields = [];
+                foreach ($item->data_fields as $key => $field) {
+                    $fields[] = $field ?: $key;
+                }
+                $item->data_fields = $fields;
+            }
+        }
+
+        return $this->success('', [
+            'list' => $items,
+            'total' => $res->total(),
+            'remark' => get_route_remark(),
+        ]);
+    }
+
+    public function add(Request $request): Response
+    {
+        $response = $this->initializeBackend($request);
+        if ($response !== null) return $response;
+
+        if ($request->method() !== 'POST') {
+            return $this->success('', ['controllers' => $this->getControllerList()]);
+        }
+
+        $data = $request->post();
+        if (!$data) {
+            return $this->error(__('Parameter %s can not be empty', ['']));
+        }
+
+        $data = $this->excludeFields($data);
+        $data['controller_as'] = str_ireplace('.php', '', $data['controller'] ?? '');
+        $data['controller_as'] = strtolower(str_ireplace(['\\', '.'], '/', $data['controller_as']));
+
+        if (is_array($data['fields'] ?? null)) {
+            $data['data_fields'] = [];
+            foreach ($data['fields'] as $field) {
+                $data['data_fields'][$field['name']] = $field['value'];
+            }
+        }
+
+        $result = false;
+        $this->model->startTrans();
+        try {
+            if ($this->modelValidate) {
+                $validateClass = str_replace("\\model\\", "\\validate\\", get_class($this->model));
+                if (class_exists($validateClass)) {
+                    $validate = new $validateClass();
+                    $validate->scene('add')->check($data);
+                }
+            }
+            $result = $this->model->save($data);
+            $this->model->commit();
+        } catch (\Throwable $e) {
+            $this->model->rollback();
+            return $this->error($e->getMessage());
+        }
+        return $result !== false ? $this->success(__('Added successfully')) : $this->error(__('No rows were added'));
+    }
+
+    public function edit(Request $request): Response
+    {
+        $response = $this->initializeBackend($request);
+        if ($response !== null) return $response;
+
+        $pk = $this->model->getPk();
+        $id = $request->get($pk) ?? $request->post($pk);
+        $row = $this->model->find($id);
+        if (!$row) {
+            return $this->error(__('Record not found'));
+        }
+
+        if ($request->method() !== 'POST') {
+            return $this->success('', [
+                'row' => $row,
+                'controllers' => $this->getControllerList(),
+            ]);
+        }
+
+        $data = $request->post();
+        if (!$data) {
+            return $this->error(__('Parameter %s can not be empty', ['']));
+        }
+
+        $data = $this->excludeFields($data);
+        $data['controller_as'] = str_ireplace('.php', '', $data['controller'] ?? '');
+        $data['controller_as'] = strtolower(str_ireplace(['\\', '.'], '/', $data['controller_as']));
+
+        if (is_array($data['fields'] ?? null)) {
+            $data['data_fields'] = [];
+            foreach ($data['fields'] as $field) {
+                $data['data_fields'][$field['name']] = $field['value'];
+            }
+        }
+
+        $result = false;
+        $this->model->startTrans();
+        try {
+            if ($this->modelValidate) {
+                $validateClass = str_replace("\\model\\", "\\validate\\", get_class($this->model));
+                if (class_exists($validateClass)) {
+                    $validate = new $validateClass();
+                    $validate->scene('edit')->check(array_merge($data, [$pk => $row[$pk]]));
+                }
+            }
+            $result = $row->save($data);
+            $this->model->commit();
+        } catch (\Throwable $e) {
+            $this->model->rollback();
+            return $this->error($e->getMessage());
+        }
+        return $result !== false ? $this->success(__('Update successful')) : $this->error(__('No rows updated'));
+    }
+
+    private function getControllerList(): array
+    {
+        $outExcludeController = [
+            'Addon.php',
+            'Ajax.php',
+            'Dashboard.php',
+            'Index.php',
+            'Module.php',
+            'Terminal.php',
+            'auth/AdminLog.php',
+            'routine/AdminInfo.php',
+            'routine/Config.php',
+            'user/MoneyLog.php',
+            'user/ScoreLog.php',
+        ];
+        $outControllers = [];
+        $controllers = get_controller_list();
+        foreach ($controllers as $key => $controller) {
+            if (!in_array($controller, $outExcludeController)) {
+                $outControllers[$key] = $controller;
+            }
+        }
+        return $outControllers;
+    }
+}

app/admin/controller/security/SensitiveDataLog.php

@@ -0,0 +1,102 @@
+<?php
+
+declare(strict_types=1);
+
+namespace app\admin\controller\security;
+
+use ba\TableManager;
+use support\think\Db;
+use app\common\controller\Backend;
+use app\admin\model\SensitiveDataLog as SensitiveDataLogModel;
+use Webman\Http\Request;
+use support\Response;
+
+class SensitiveDataLog extends Backend
+{
+    protected ?object $model = null;
+
+    protected array|string $preExcludeFields = [];
+    protected array|string $quickSearchField = 'sensitive.name';
+    protected array $withJoinTable = ['sensitive', 'admin'];
+
+    protected function initController(Request $request): ?Response
+    {
+        $this->model = new SensitiveDataLogModel();
+        return null;
+    }
+
+    public function index(Request $request): Response
+    {
+        $response = $this->initializeBackend($request);
+        if ($response !== null) return $response;
+
+        if ($request->get('select') || $request->post('select')) {
+            return $this->select($request);
+        }
+
+        list($where, $alias, $limit, $order) = $this->queryBuilder();
+        $res = $this->model
+            ->withJoin($this->withJoinTable, $this->withJoinType)
+            ->alias($alias)
+            ->where($where)
+            ->order($order)
+            ->paginate($limit);
+
+        $items = $res->items();
+        foreach ($items as $item) {
+            $item->id_value = $item['primary_key'] . '=' . $item->id_value;
+        }
+
+        return $this->success('', [
+            'list' => $items,
+            'total' => $res->total(),
+            'remark' => get_route_remark(),
+        ]);
+    }
+
+    public function info(Request $request): Response
+    {
+        $response = $this->initializeBackend($request);
+        if ($response !== null) return $response;
+
+        $pk = $this->model->getPk();
+        $id = $request->get($pk) ?? $request->post($pk);
+        $row = $this->model
+            ->withJoin($this->withJoinTable, $this->withJoinType)
+            ->where('security_sensitive_data_log.id', $id)
+            ->find();
+        if (!$row) {
+            return $this->error(__('Record not found'));
+        }
+        return $this->success('', ['row' => $row]);
+    }
+
+    public function rollback(Request $request): Response
+    {
+        $response = $this->initializeBackend($request);
+        if ($response !== null) return $response;
+
+        $ids = $request->post('ids', $request->get('ids', []));
+        $ids = is_array($ids) ? $ids : [];
+        $data = $this->model->where('id', 'in', $ids)->select();
+        if (!$data) {
+            return $this->error(__('Record not found'));
+        }
+
+        $count = 0;
+        $this->model->startTrans();
+        try {
+            foreach ($data as $row) {
+                $conn = Db::connect(TableManager::getConnection($row->connection));
+                if ($conn->name($row->data_table)->where($row->primary_key, $row->id_value)->update([$row->data_field => $row->before])) {
+                    $count++;
+                }
+            }
+            $this->model->commit();
+        } catch (\Throwable $e) {
+            $this->model->rollback();
+            return $this->error($e->getMessage());
+        }
+        return $count ? $this->success(__('Rollback successful')) : $this->error(__('No rows were rolled back'));
+    }
+}