admin/settings.php

这里只显示每个文件的开头 60 行。登录后可以解锁完整代码。

微信扫码关注公众号，代码整理好后第一时间通知你。

<?php
require_once __DIR__ . '/../core/Session.php';
require_once __DIR__ . '/../core/Security.php';
require_once __DIR__ . '/../core/Logger.php';
require_once __DIR__ . '/../app/models/Setting.php';

Session::start();
Session::requireAdmin();

$user = Session::getUser();
$settingModel = new Setting();

$error = '';
$success = Session::getFlash('success');

if ($_SERVER['REQUEST_METHOD'] === 'POST') {
    $csrfToken = $_POST['csrf_token'] ?? '';
    
    if (!Security::verifyCSRFToken($csrfToken)) {
        $error = '安全验证失败';
    } else {
        try {
            $settings = [
                'site_title' => trim($_POST['site_title'] ?? ''),
                'site_description' => trim($_POST['site_description'] ?? ''),
                'site_keywords' => trim($_POST['site_keywords'] ?? ''),
                'site_url' => trim($_POST['site_url'] ?? ''),
                'admin_email' => trim($_POST['admin_email'] ?? ''),
                'posts_per_page' => (int)($_POST['posts_per_page'] ?? 10),
                'allow_comment' => isset($_POST['allow_comment']) ? 1 : 0,
                'comment_need_approval' => isset($_POST['comment_need_approval']) ? 1 : 0,
                'footer_text' => trim($_POST['footer_text'] ?? '')
            ];
            
            foreach ($settings as $key => $value) {
                $settingModel->set($key, $value);
            }
            
            Logger::userAction('settings_update', '更新系统设置');
            Session::setFlash('success', '设置保存成功');
            header('Location: settings.php');
            exit;
        } catch (Exception $e) {
            $error = '保存失败：' . $e->getMessage();
        }
    }
}

$settings = $settingModel->getAllSettings();
$csrfToken = Security::generateCSRFToken();
?>
<!DOCTYPE html>
<html lang="zh-CN">
<head>
    <meta charset="UTF-8">
    <meta name="viewport" content="width=device-width, initial-scale=1.0">
    <title>系统设置 - PHP个人博客系统</title>
    <link rel="stylesheet" href="../assets/css/admin.css">
</head>
<body class="admin-page">