admin/tags.php

这里只显示每个文件的开头 60 行。登录后可以解锁完整代码。

微信扫码关注公众号，代码整理好后第一时间通知你。

<?php
require_once __DIR__ . '/../core/Session.php';
require_once __DIR__ . '/../core/Security.php';
require_once __DIR__ . '/../core/Logger.php';
require_once __DIR__ . '/../app/models/Tag.php';

Session::start();
Session::requireLogin();

$user = Session::getUser();
$tagModel = new Tag();

$error = '';

if ($_SERVER['REQUEST_METHOD'] === 'POST') {
    $action = $_POST['action'] ?? '';
    $csrfToken = $_POST['csrf_token'] ?? '';
    
    if (!Security::verifyCSRFToken($csrfToken)) {
        $error = '安全验证失败';
    } else {
        switch ($action) {
            case 'create':
                $name = trim($_POST['name'] ?? '');
                $slug = trim($_POST['slug'] ?? '');
                $description = trim($_POST['description'] ?? '');
                
                if (empty($name)) {
                    $error = '请输入标签名称';
                } elseif ($tagModel->findOneBy('name', $name)) {
                    $error = '标签名称已存在';
                } else {
                    if (empty($slug)) {
                        $slug = Security::slugify($name);
                    }
                    
                    $tagModel->create([
                        'name' => $name,
                        'slug' => $slug,
                        'description' => $description
                    ]);
                    Logger::userAction('tag_create', "创建标签: {$name}");
                    Session::setFlash('success', '标签创建成功');
                    header('Location: tags.php');
                    exit;
                }
                break;
                
            case 'update':
                $id = (int)($_POST['id'] ?? 0);
                $name = trim($_POST['name'] ?? '');
                $slug = trim($_POST['slug'] ?? '');
                $description = trim($_POST['description'] ?? '');
                
                $tag = $tagModel->find($id);
                if (!$tag) {
                    $error = '标签不存在';
                } elseif (empty($name)) {
                    $error = '请输入标签名称';
                } else {