admin/users.php

这里只显示每个文件的开头 60 行。登录后可以解锁完整代码。

微信扫码关注公众号，代码整理好后第一时间通知你。

<?php
require_once __DIR__ . '/../core/Session.php';
require_once __DIR__ . '/../core/Security.php';
require_once __DIR__ . '/../core/Logger.php';
require_once __DIR__ . '/../core/Pagination.php';
require_once __DIR__ . '/../app/models/User.php';

Session::start();
Session::requireAdmin();

$user = Session::getUser();
$userModel = new User();

$error = '';
$search = $_GET['search'] ?? '';
$role = $_GET['role'] ?? '';
$page = max(1, (int)($_GET['page'] ?? 1));

$where = "1=1";
$params = [];

if ($search) {
    $where .= " AND (username LIKE ? OR email LIKE ? OR nickname LIKE ?)";
    $params[] = "%{$search}%";
    $params[] = "%{$search}%";
    $params[] = "%{$search}%";
}

if ($role) {
    $where .= " AND role = ?";
    $params[] = $role;
}

$result = $userModel->paginate($page, PER_PAGE, $where, $params, 'created_at', 'DESC');
$users = $result['items'];
$pagination = $result['pagination'];

if ($_SERVER['REQUEST_METHOD'] === 'POST') {
    $action = $_POST['action'] ?? '';
    $csrfToken = $_POST['csrf_token'] ?? '';
    
    if (!Security::verifyCSRFToken($csrfToken)) {
        $error = '安全验证失败';
    } else {
        switch ($action) {
            case 'create':
                $username = trim($_POST['username'] ?? '');
                $email = trim($_POST['email'] ?? '');
                $password = $_POST['password'] ?? '';
                $nickname = trim($_POST['nickname'] ?? '');
                $newRole = $_POST['role'] ?? 'user';
                $status = isset($_POST['status']) ? 1 : 0;
                
                if (empty($username) || empty($email) || empty($password)) {
                    $error = '请填写必填项';
                } elseif (!Security::validateEmail($email)) {
                    $error = '邮箱格式不正确';
                } elseif ($userModel->findOneBy('username', $username)) {
                    $error = '用户名已存在';
                } elseif ($userModel->findOneBy('email', $email)) {