admin/comments.php

这里只显示每个文件的开头 60 行。登录后可以解锁完整代码。

微信扫码关注公众号，代码整理好后第一时间通知你。

<?php
require_once __DIR__ . '/../core/Session.php';
require_once __DIR__ . '/../core/Security.php';
require_once __DIR__ . '/../core/Logger.php';
require_once __DIR__ . '/../core/Pagination.php';
require_once __DIR__ . '/../app/models/Comment.php';
require_once __DIR__ . '/../app/models/Post.php';

Session::start();
Session::requireLogin();

$user = Session::getUser();
$commentModel = new Comment();

$status = $_GET['status'] ?? '';
$page = max(1, (int)($_GET['page'] ?? 1));

$where = "1=1";
$params = [];

if ($status) {
    $where = "status = ?";
    $params = [$status];
}

$result = $commentModel->paginate($page, PER_PAGE, $where, $params, 'created_at', 'DESC');
$comments = $result['items'];
$pagination = $result['pagination'];

if ($_SERVER['REQUEST_METHOD'] === 'POST') {
    $action = $_POST['action'] ?? '';
    $id = (int)($_POST['id'] ?? 0);
    $csrfToken = $_POST['csrf_token'] ?? '';
    
    if (!Security::verifyCSRFToken($csrfToken)) {
        Session::setFlash('error', '安全验证失败');
    } else {
        switch ($action) {
            case 'approve':
                $commentModel->approve($id);
                Logger::userAction('comment_approve', "审核通过评论ID: {$id}");
                Session::setFlash('success', '评论已审核通过');
                break;
                
            case 'spam':
                $commentModel->markAsSpam($id);
                Logger::userAction('comment_spam', "标记垃圾评论ID: {$id}");
                Session::setFlash('success', '已标记为垃圾评论');
                break;
                
            case 'trash':
                $commentModel->moveToTrash($id);
                Logger::userAction('comment_trash', "移至回收站评论ID: {$id}");
                Session::setFlash('success', '评论已移至回收站');
                break;
                
            case 'delete':
                $commentModel->delete($id);
                Logger::userAction('comment_delete', "删除评论ID: {$id}");
                Session::setFlash('success', '评论已删除');