markdown-wiki/application/controller/Index.php

<?php

namespace app\controller;

// use \Firebase\JWT\JWT;

use app\Request;
use app\View;
use app\Session;
use app\model\User;
use app\utils\RRException;
use app\utils\ParsedownExtension;

class Index extends View
{
    public function auth()
    {
        if (!Session::get('userid')) {
            echo "您未登录请登录";
            header("Location: /login", TRUE, 301);

            exit();
        }
    }

    public function index()
    {
        $this->auth();

        $request = Request::getInstance();

        $doc = $request->params['doc'];

        $doc = ltrim($doc, '/');

        if (substr($doc, -1) === '/') {
            $doc = $doc . "index.md";
        }

        $doc = empty($doc) ? 'index.md' : $doc;

        if (pathinfo($doc, PATHINFO_EXTENSION) != 'md') {
            $doc = $doc . ".md";
        }

        $filename = DATA_PATH . $doc;
        $text = "";
        $toc = "";
        $content = "";

        if ($is_file_exists = file_exists($filename)) {
            $parsedownExtension = new ParsedownExtension();
            $parsedownExtension->setTocEnabled(true);
            $text = file_get_contents($filename);
            $res = $parsedownExtension->text($text);
            $toc = $res['toc'];
            $content = $res['content'];
        }

        $this->assign('doc', $doc);
        $this->assign('is_file_exists', $is_file_exists);
        $this->assign('text', $text);
        $this->assign('toc', $toc);
        $this->assign('content', $content);

        $this->fetch();
    }

    public function editor()
    {
        $doc = $GLOBALS['doc'];
        var_dump($doc);
        exit;
        $this->fetch();
    }

    public function save()
    {
        $this->auth();

        // 获取payload json数据，转换成数组形式
        $postData = file_get_contents('php://input');
        $requests = !empty($postData) ? json_decode($postData, true) : [];

        $doc = $requests['doc'];
        $content = $requests['content'];

        $pathinfo = pathinfo($doc);

        $dir_name = DATA_PATH . $pathinfo['dirname'];

        if (!is_dir($dir_name) && !mkdir($dir_name, 0744, true)) {
            die(json_encode(['code' => 2, 'msg' => '目录创建失败']));
        }

        $filename = DATA_PATH . $doc;

        $res = file_put_contents($filename, $content);

        if ($res === false) {
            echo json_encode(['code' => 2, 'msg' => '保存失败']);
        } else {
            echo json_encode(['code' => 0, 'msg' => '保存成功, 字数:' . $res]);
        }
        die();
    }

    // private function validate ()
    // {
    //     $jwt = isset($_SERVER['HTTP_TOKEN']) ? $_SERVER['HTTP_TOKEN'] : '';
    //     if (empty($jwt)) {
    //         throw new RRException("You do not have permission to access.", 401);
    //     }

    //     try {
    //         JWT::$leeway = 60;
    //         $decoded = JWT::decode($jwt, KEY, ['HS256']);
    //         $arr = (array)$decoded;
    //         if ($arr['exp'] < time()) {
    //             throw new RRException("认证信息已过期, 请重新登录.", 401);
    //         }
    //     } catch(\Exception $e) {
    //         throw new RRException($e->getMessage(), 401);
    //     }

    //     return true;
    // }

    public function login()
    {
        if (Session::get('userid')) {
            echo "您已登录请登录";
            header("Location: /index", TRUE, 301);

            exit();
        }

        $request = Request::getInstance();

        if ($request->isPost()) {
            $username = strip_tags(htmlentities($request->params['username']));
            $password = strip_tags(htmlentities($request->params['password']));

            if (!$username || !$password) {
                throw new RRException("用户名或密码不能为空!", 1);
            }

            $user = new User();

            $info = $user->getInfoByUsername($username);

            if (!$info) {
                throw new RRException("用户名或密码错误!", 1);
            }

            if (md5($password) !== $info['password']) {
                throw new RRException("用户名或密码错误!", 1);
            }

            // // 用户名和密码正确，则签发tokon
            // $nowtime = time();
            // $jwtInfo = [
            //     'iss' => 'huwhois@163.com', //签发者
            //     'iat' => $nowtime, //签发时间
            //     'nbf' => $nowtime + 10, //在什么时间之后该jwt才可用
            //     'exp' => $nowtime + 64800, //过期时间-18h
            //     'data' => [
            //         'userid' => $user['id'],
            //         'username' => $username
            //     ]
            // ];
            // $token = JWT::encode($jwtInfo, KEY);
            // echo json_encode(['code'=>0, 'msg'=>'success', 'token'=>$token]);
            // 存 session
            Session::set('userid', $info['id']);
            Session::set('username', $info['username']);

            echo json_encode(['code' => 0, 'msg' => 'success']);
            die();
        } else {
            $this->fetch();
        }
    }

    public function logout()
    {
        Session::destroy();
        echo "登出成功.....";
        header("Location: /login", TRUE, 301);

        exit();
    }

    public function password()
    {
        $request = Request::getInstance();
        if ($request->isPost()) {
            $userid = Session::get('userid');

            if (!$userid) {
                throw new RRException('用户未登录, 请登录');
            }

            $user = new User();

            // 修改密码
            $oldpassword = isset($request->params['oldpassword']) ? (string) $request->params['oldpassword'] : '';
            $password    = isset($request->params['newpassword']) ? (string) $request->params['newpassword'] : '';
            $repassword  = isset($request->params['repassword']) ? (string) $request->params['repassword'] : '';

            if (!$password) {
                throw new RRException("密码不能为空", 1);
            }

            if ($password != $repassword) {
                throw new RRException("两次密码不一致", 1);
            }

            $userinfo = $user->getInfoById($userid);

            if (md5($oldpassword) != $userinfo['password']) {
                throw new RRException("原密码不正确", 1);
            }

            try {
                $user->updateById([
                    'id' => $userid,
                    'password' => md5($password)
                ]);
            } catch (\Exception $e) {
                throw new RRException($e->getMessage(), 1);
            }

            Session::destroy();
            echo json_encode(['code' => 0, 'msg' => "保存成功"]);
            die();
        }
    }

    public function userlist()
    {
        $list = (new User())->dataList();

        $this->assign('list', $list);

        $this->fetch();
    }

    public function userdelete()
    {
        $request = Request::getInstance();

        if ($request->isPost()) {
            $id = isset($request->params['userid']) ? (int) $request->params['userid'] : 0;

            if (!$id) {
                throw new RRException('userid 不能为空', 1);
            }

            $res = (new User())->deleteById($id);

            if ($res) {
                throw new RRException('操作成功', 0);
            } else {
                throw new RRException('操作失败', 1);
            }
        }
    }

    public function userinfo()
    {
        $request = Request::getInstance();

        $userid = isset($request->params['userid']) ? (int) $request->params['userid'] : 0;

        if ($userid !== 0) {
            $data = (new User())->getInfoById($userid);

            unset($data['password']);

            echo  json_encode(['code' => 0, 'info' => $data]);
        } else {
            throw new RRException("userid 不能为空", 1);
        }
        die();
    }

    public function usersave()
    {
        $request = Request::getInstance();

        if ($request->isPost()) {
            $id = isset($request->params['userid']) ? (int) $request->params['userid'] : 0;

            $user = new User();

            if ($id === 0) {
                // 新增
                $username = isset($request->params['username']) ? (string) $request->params['username'] : '';

                if (!$username) {
                    throw new RRException("用户名不能为空", 1);
                }

                $password = isset($request->params['password']) ? (string) $request->params['password'] : '';
                $repassword = isset($request->params['repassword']) ? (string) $request->params['repassword'] : '';

                if (!$password) {
                    throw new RRException("密码不能为空", 1);
                }

                if ($password != $repassword) {
                    throw new RRException("两次密码不一致", 1);
                }

                try {
                    $user->save([
                        'username' => $username,
                        'password' => md5($password),
                        'create_time' => time()
                    ]);
                } catch (\Exception $e) {
                    throw new RRException($e->getMessage(), 1);
                }

                echo json_encode(['code' => 0, 'msg' => "保存成功"]);
                die();
            } else {
                // 修改密码
                $password = isset($request->params['password']) ? (string) $request->params['password'] : '';
                $repassword = isset($request->params['repassword']) ? (string) $request->params['repassword'] : '';

                if (!$password) {
                    throw new RRException("密码不能为空", 1);
                }

                if ($password != $repassword) {
                    throw new RRException("两次密码不一致", 1);
                }

                // $userinfo = $user->getInfoById($id);

                // $newpassword = md5($password);

                // if ($newpassword != $userinfo['password']) {
                //     throw new RRException("原密码不正确", 1);
                // }

                try {
                    $user->updateById([
                        'id' => $id,
                        'password' => md5($password)
                    ]);
                } catch (\Exception $e) {
                    throw new RRException($e->getMessage(), 1);
                }

                echo json_encode(['code' => 0, 'msg' => "保存成功, 请重新登录."]);
                die();
            }
        }
    }
}