admin/links.php

这里只显示每个文件的开头 60 行。登录后可以解锁完整代码。

微信扫码关注公众号，代码整理好后第一时间通知你。

<?php
require_once __DIR__ . '/../core/Session.php';
require_once __DIR__ . '/../core/Security.php';
require_once __DIR__ . '/../core/Logger.php';
require_once __DIR__ . '/../core/Pagination.php';
require_once __DIR__ . '/../app/models/Link.php';

Session::start();
Session::requireLogin();

$user = Session::getUser();
$linkModel = new Link();

$links = $linkModel->findAll('sort_order', 'ASC');

if ($_SERVER['REQUEST_METHOD'] === 'POST') {
    $action = $_POST['action'] ?? '';
    $csrfToken = $_POST['csrf_token'] ?? '';
    
    if (!Security::verifyCSRFToken($csrfToken)) {
        Session::setFlash('error', '安全验证失败');
        header('Location: links.php');
        exit;
    }
    
    if ($action === 'delete') {
        $id = (int)($_POST['id'] ?? 0);
        if ($linkModel->delete($id)) {
            Logger::userAction('link_delete', "删除友情链接 ID: {$id}");
            Session::setFlash('success', '删除成功');
        }
        header('Location: links.php');
        exit;
    }
    
    if ($action === 'toggle') {
        $id = (int)($_POST['id'] ?? 0);
        $link = $linkModel->find($id);
        if ($link) {
            $newStatus = $link['status'] ? 0 : 1;
            $linkModel->update($id, ['status' => $newStatus]);
            Logger::userAction('link_toggle', "切换友情链接状态 ID: {$id}");
            Session::setFlash('success', '状态更新成功');
        }
        header('Location: links.php');
        exit;
    }
}

$csrfToken = Security::generateCSRFToken();
?>
<!DOCTYPE html>
<html lang="zh-CN">
<head>
    <meta charset="UTF-8">
    <meta name="viewport" content="width=device-width, initial-scale=1.0">
    <title>友情链接 - PHP个人博客系统</title>
    <link rel="stylesheet" href="../assets/css/admin.css">
</head>
<body class="admin-page">