631 lines
21 KiB
PHP
Executable File
631 lines
21 KiB
PHP
Executable File
<?php
|
|
declare(strict_types=1);
|
|
/**
|
|
* The control file of admin module of ZenTaoPMS.
|
|
*
|
|
* @copyright Copyright 2009-2023 禅道软件（青岛）有限公司(ZenTao Software (Qingdao) Co., Ltd. www.cnezsoft.com)
|
|
* @license ZPL(http://zpl.pub/page/zplv12.html) or AGPL(https://www.gnu.org/licenses/agpl-3.0.en.html)
|
|
* @author Chunsheng Wang <chunsheng@cnezsoft.com>
|
|
* @package admin
|
|
* @version $Id: control.php 4460 2013-02-26 02:28:02Z chencongzhi520@gmail.com $
|
|
* @link https://www.zentao.net
|
|
*/
|
|
class admin extends control
|
|
{
|
|
/**
|
|
*
|
|
* @access public
|
|
* @return void
|
|
*/
|
|
public function index()
|
|
{
|
|
set_time_limit(0);
|
|
|
|
/* 设置导航信息。*/
|
|
/* Set the nav. */
|
|
$this->admin->setMenu();
|
|
|
|
/* 处理社区登记。*/
|
|
/* Process community registration. */
|
|
$community = zget($this->config->global, 'community', '');
|
|
if(!$community || $community == 'na')
|
|
{
|
|
$this->view->bind = false;
|
|
$this->view->ignore = $community == 'na';
|
|
}
|
|
else
|
|
{
|
|
$this->view->bind = true;
|
|
$this->view->ignore = false;
|
|
}
|
|
|
|
$this->view->title = $this->lang->admin->common;
|
|
$this->view->zentaoData = $this->adminZen->getZentaoData();
|
|
$this->view->dateUsed = $this->admin->genDateUsed();
|
|
$this->view->hasInternet = $this->admin->checkInternet();
|
|
$this->display();
|
|
}
|
|
|
|
/**
|
|
* 获取禅道官网数据。
|
|
* Get zentao.net data by api.
|
|
*
|
|
* @access public
|
|
* @return void
|
|
*/
|
|
public function ajaxSetZentaoData()
|
|
{
|
|
session_write_close();
|
|
if(helper::isIntranet()) return $this->send(array('result' => 'ignore'));
|
|
|
|
if($this->admin->checkInternet())
|
|
{
|
|
$lastSyncDate = !empty($this->config->zentaoWebsite->lastSyncDate) ? $this->config->zentaoWebsite->lastSyncDate : '';
|
|
$nextWeek = date('Y-m-d', strtotime('-7 days'));
|
|
|
|
$needSync = empty($lastSyncDate) || $lastSyncDate <= $nextWeek;
|
|
$zentaoData = $this->adminZen->getZentaoData();
|
|
|
|
if($needSync || empty($zentaoData->plugins)) $this->adminZen->syncExtensions('plugin', 6);
|
|
if($needSync || empty($zentaoData->patches)) $this->adminZen->syncExtensions('patch', 5);
|
|
if($needSync || empty($zentaoData->dynamics)) $this->adminZen->syncDynamics(3);
|
|
if($needSync || empty($zentaoData->classes)) $this->adminZen->syncPublicClasses(3);
|
|
|
|
if($needSync) $this->loadModel('setting')->setItem('system.common.zentaoWebsite.lastSyncDate', date('Y-m-d'));
|
|
}
|
|
|
|
return $this->send(array('result' => 'success'));
|
|
}
|
|
|
|
/**
|
|
* 登记禅道社区。
|
|
* Register zentao.
|
|
*
|
|
* @param string $from admin|mail
|
|
* @access public
|
|
* @return void
|
|
*/
|
|
public function register(string $from = 'admin')
|
|
{
|
|
if($_POST)
|
|
{
|
|
$response = $this->adminZen->registerByAPI();
|
|
$response = json_decode($response);
|
|
if($response->result == 'fail')
|
|
{
|
|
$message = '';
|
|
if(is_string($response->message))
|
|
{
|
|
$message = $response->message;
|
|
}
|
|
else
|
|
{
|
|
foreach($response->message as $item) $message .= is_array($item) ? join('\n', $item) . '\n' : $item . '\n';
|
|
}
|
|
$message = str_replace(array('<strong>', '</strong>'), '', $message);
|
|
|
|
return $this->send(array('result' => 'fail', 'message' => $message));
|
|
}
|
|
|
|
$user = $response->data;
|
|
$data['community'] = $user->account;
|
|
$data['ztPrivateKey'] = $user->private;
|
|
|
|
$this->loadModel('setting');
|
|
$this->setting->deleteItems('owner=system&module=common§ion=global&key=community');
|
|
$this->setting->deleteItems('owner=system&module=common§ion=global&key=ztPrivateKey');
|
|
$this->setting->setItems('system.common.global', $data);
|
|
|
|
$locate = true;
|
|
if($from == 'admin') $locate = inlink('index');
|
|
if($from == 'mail') $locate = $this->createLink('mail', 'ztcloud');
|
|
|
|
return $this->send(array('result' => 'success', 'message' => $this->lang->admin->registerNotice->success, 'load' => $locate));
|
|
}
|
|
|
|
$this->adminZen->initSN();
|
|
|
|
$this->view->title = $this->lang->admin->registerNotice->caption;
|
|
$this->view->register = $this->adminZen->getRegisterInfo();
|
|
$this->view->sn = $this->config->global->sn;
|
|
$this->view->from = $from;
|
|
$this->display();
|
|
}
|
|
|
|
/**
|
|
* 绑定禅道账号。
|
|
* Bind zentao.
|
|
*
|
|
* @param string $from admin|mail
|
|
* @access public
|
|
* @return void
|
|
*/
|
|
public function bind(string $from = 'admin')
|
|
{
|
|
if($_POST)
|
|
{
|
|
$response = $this->adminZen->bindByAPI();
|
|
$response = json_decode($response);
|
|
|
|
if($response->result == 'fail') return $this->send($response);
|
|
|
|
$user = $response->data;
|
|
$data['community'] = $user->account;
|
|
$data['ztPrivateKey'] = $user->private;
|
|
|
|
$this->loadModel('setting')->deleteItems('owner=system&module=common§ion=global&key=community');
|
|
$this->setting->deleteItems('owner=system&module=common§ion=global&key=ztPrivateKey');
|
|
$this->setting->setItems('system.common.global', $data);
|
|
|
|
$locate = true;
|
|
if($from == 'admin') $locate = inlink('index');
|
|
if($from == 'mail') $locate = $this->createLink('mail', 'ztcloud');
|
|
|
|
return $this->send(array('result' => 'success', 'message' => $this->lang->admin->bind->success, 'load' => $locate));
|
|
}
|
|
|
|
$this->adminZen->initSN();
|
|
|
|
$this->view->title = $this->lang->admin->bind->caption;
|
|
$this->view->sn = $this->config->global->sn;
|
|
$this->view->from = $from;
|
|
$this->display();
|
|
}
|
|
|
|
/**
|
|
* 系统安全设置。
|
|
* System security Settings.
|
|
*
|
|
* @access public
|
|
* @return void
|
|
*/
|
|
public function safe()
|
|
{
|
|
if($_POST)
|
|
{
|
|
$data = form::data()->get();
|
|
$this->loadModel('setting')->setItems('system.common.safe', $data);
|
|
return $this->send(array('result' => 'success', 'message' => $this->lang->saveSuccess, 'load' => true));
|
|
}
|
|
|
|
$this->view->title = $this->lang->admin->safe->common . $this->lang->hyphen . $this->lang->admin->safe->set;
|
|
$this->view->gdInfo = function_exists('gd_info') ? gd_info() : array();
|
|
$this->display();
|
|
}
|
|
|
|
/**
|
|
* 弱口令扫描。
|
|
* Check weak user.
|
|
*
|
|
* @access public
|
|
* @return void
|
|
*/
|
|
public function checkWeak()
|
|
{
|
|
$this->view->title = $this->lang->admin->safe->common . $this->lang->hyphen . $this->lang->admin->safe->checkWeak;
|
|
$this->view->weakUsers = $this->loadModel('user')->getWeakUsers();
|
|
$this->display();
|
|
}
|
|
|
|
/**
|
|
* ZDOO集成。
|
|
* Config sso for ranzhi.
|
|
*
|
|
* @access public
|
|
* @return void
|
|
*/
|
|
public function sso()
|
|
{
|
|
if(!empty($_POST))
|
|
{
|
|
$data = form::data()->get();
|
|
if(!$data->turnon) $data->redirect = $data->turnon;
|
|
$this->loadModel('setting')->setItems('system.sso', $data);
|
|
|
|
if(dao::isError()) return $this->send(array('result' => 'fail', 'message' => dao::getError()));
|
|
return $this->send(array('result' => 'success', 'message' => $this->lang->saveSuccess, 'load' => inlink('sso')));
|
|
}
|
|
|
|
$this->loadModel('sso');
|
|
if(!isset($this->config->sso)) $this->config->sso = new stdclass();
|
|
|
|
$this->view->title = $this->lang->admin->sso;
|
|
$this->view->turnon = isset($this->config->sso->turnon) ? $this->config->sso->turnon : 1;
|
|
$this->view->redirect = isset($this->config->sso->redirect) ? $this->config->sso->redirect : 0;
|
|
$this->view->addr = isset($this->config->sso->addr) ? $this->config->sso->addr : '';
|
|
$this->view->key = isset($this->config->sso->key) ? $this->config->sso->key : '';
|
|
$this->view->code = isset($this->config->sso->code) ? $this->config->sso->code : '';
|
|
$this->display();
|
|
}
|
|
|
|
/**
|
|
* 系统功能配置。
|
|
* Set closed features config.
|
|
*
|
|
* @access public
|
|
* @return void
|
|
*/
|
|
public function setModule()
|
|
{
|
|
$this->loadModel('setting');
|
|
|
|
if($_POST)
|
|
{
|
|
$data = form::data()->get();
|
|
$closedFeatures = array();
|
|
foreach($this->config->featureGroup as $group => $features)
|
|
{
|
|
foreach($features as $feature)
|
|
{
|
|
$code = $group . ucfirst($feature);
|
|
if(empty($data->module[$code])) $closedFeatures[] = $code;
|
|
}
|
|
}
|
|
|
|
$enableER = $this->config->edition == 'ipd' ? 1 : zget($data->module, 'productER', 0);
|
|
$URAndSR = $this->config->edition == 'ipd' ? 1 : zget($data->module, 'productUR', 0);
|
|
if($enableER && !$URAndSR) $this->send(array('result' => 'fail', 'message' => $this->lang->admin->notice->openUR));
|
|
|
|
$this->setting->setItem('system.common.closedFeatures', implode(',', $closedFeatures));
|
|
$this->setting->setItem('system.common.global.scoreStatus', zget($data->module, 'myScore', 0));
|
|
$this->setting->setItem('system.custom.enableER', $enableER);
|
|
$this->setting->setItem('system.custom.URAndSR', $URAndSR);
|
|
$this->setting->setItem('system.common.setCode', in_array('otherSetCode', $closedFeatures) ? 0 : 1);
|
|
$this->loadModel('custom')->processMeasrecordCron();
|
|
$this->send(array('result' => 'success', 'message' => $this->lang->saveSuccess, 'callback' => '$.apps.updateAppsMenu(true);loadCurrentPage();'));
|
|
}
|
|
|
|
$closedFeatures = $this->setting->getItem('owner=system&module=common§ion=&key=closedFeatures');
|
|
if(empty($this->config->setCode) && strpos(",{$closedFeatures},", ',otherSetCode,') === false) $closedFeatures .= ',otherSetCode';
|
|
|
|
$this->view->title = $this->lang->admin->setModuleIndex;
|
|
$this->view->closedFeatures = $closedFeatures;
|
|
$this->view->useScore = $this->setting->getItem('owner=system&module=common&global&key=scoreStatus');
|
|
$this->view->disabledFeatures = $this->setting->getItem('owner=system&module=common§ion=&key=disabledFeatures');
|
|
$this->display();
|
|
}
|
|
|
|
/**
|
|
* 认证邮箱。
|
|
* Certify ztEmail.
|
|
*
|
|
* @param string $email
|
|
* @access public
|
|
* @return void
|
|
*/
|
|
public function certifyZtEmail(string $email = '')
|
|
{
|
|
if($_POST)
|
|
{
|
|
$response = $this->adminZen->certifyByAPI('mail');
|
|
$response = json_decode($response);
|
|
if($response->result == 'fail') return print(js::alert($response->message));
|
|
return print(js::locate($this->createLink('mail', 'ztCloud'), 'parent'));
|
|
}
|
|
|
|
$this->view->title = $this->lang->admin->certifyEmail;
|
|
$this->view->email = helper::safe64Decode($email);
|
|
$this->display();
|
|
}
|
|
|
|
/**
|
|
* 认证手机。
|
|
* Certify ztMobile.
|
|
*
|
|
* @param string $mobile
|
|
* @access public
|
|
* @return void
|
|
*/
|
|
public function certifyZtMobile(string $mobile = '')
|
|
{
|
|
if($_POST)
|
|
{
|
|
$response = $this->adminZen->certifyByAPI('mobile');
|
|
$response = json_decode($response);
|
|
if($response->result == 'fail') return print(js::alert($response->message));
|
|
return print(js::locate($this->createLink('mail', 'ztCloud'), 'parent'));
|
|
}
|
|
|
|
$this->view->title = $this->lang->admin->certifyMobile;
|
|
$this->view->mobile = helper::safe64Decode($mobile);
|
|
$this->display();
|
|
}
|
|
|
|
/**
|
|
* 认证公司。
|
|
* Set ztCompany.
|
|
*
|
|
* @param string $fields
|
|
* @access public
|
|
* @return void
|
|
*/
|
|
public function ztCompany(string $fields = 'company')
|
|
{
|
|
if($_POST)
|
|
{
|
|
$response = $this->adminZen->setCompanyByAPI();
|
|
$response = json_decode($response);
|
|
if($response->result == 'fail') return print(js::alert($response->message));
|
|
return print(js::locate($this->createLink('mail', 'ztCloud'), 'parent'));
|
|
}
|
|
|
|
$this->view->title = $this->lang->admin->ztCompany;
|
|
$this->view->fields = explode(',', $fields);
|
|
$this->display();
|
|
}
|
|
|
|
/**
|
|
* 获取验证码。
|
|
* Get the verification code.
|
|
*
|
|
* @param string $type mobile|email
|
|
* @access public
|
|
* @return void
|
|
*/
|
|
public function ajaxSendCode(string $type)
|
|
{
|
|
return print($this->adminZen->sendCodeByAPI($type));
|
|
}
|
|
|
|
/**
|
|
* 设置日志保存天数。
|
|
* Set save days of log.
|
|
*
|
|
* @access public
|
|
* @return void
|
|
*/
|
|
public function log()
|
|
{
|
|
if($_POST)
|
|
{
|
|
$days = form::data()->get()->days;
|
|
if(!validater::checkInt($days)) return $this->send(array('result' => 'fail', 'message' => array('days' => sprintf($this->lang->admin->notice->int, $this->lang->admin->days))));
|
|
|
|
$this->loadModel('setting')->setItem('system.admin.log.saveDays', (string)$days);
|
|
if(dao::isError()) return $this->send(array('result' => 'fail', 'message' => dao::getError()));
|
|
return $this->send(array('result' => 'success', 'message' => $this->lang->saveSuccess, 'load' => true, 'closeModal' => true));
|
|
}
|
|
|
|
$this->app->loadLang('webhook');
|
|
|
|
$this->view->title = $this->lang->webhook->setting;
|
|
$this->display();
|
|
}
|
|
|
|
/**
|
|
* 删除过期日志。
|
|
* Delete logs older than save days.
|
|
*
|
|
* @access public
|
|
* @return bool
|
|
*/
|
|
public function deleteLog()
|
|
{
|
|
$date = date(DT_DATE1, strtotime("-{$this->config->admin->log->saveDays} days"));
|
|
$this->dao->delete()->from(TABLE_LOG)->where('date')->lt($date)->exec();
|
|
return !dao::isError();
|
|
}
|
|
|
|
/**
|
|
* 重置密码设置。
|
|
* Reset password setting.
|
|
*
|
|
* @access public
|
|
* @return void
|
|
*/
|
|
public function resetPWDSetting()
|
|
{
|
|
if($_POST)
|
|
{
|
|
$resetPWDByMail = form::data()->get()->resetPWDByMail;
|
|
$this->loadModel('setting')->setItem('system.common.resetPWDByMail', (string)$resetPWDByMail);
|
|
return $this->send(array('result' => 'success', 'message' => $this->lang->saveSuccess, 'load' => true));
|
|
}
|
|
|
|
$this->view->title = $this->lang->admin->resetPWDSetting;
|
|
$this->display();
|
|
}
|
|
|
|
/**
|
|
* 表引擎。
|
|
* Show table engine.
|
|
*
|
|
* @access public
|
|
* @return void
|
|
*/
|
|
public function tableEngine()
|
|
{
|
|
$this->view->title = $this->lang->admin->tableEngine;
|
|
$this->view->tableEngines = $this->dao->getTableEngines();
|
|
$this->display();
|
|
}
|
|
|
|
/**
|
|
* 更换表引擎为InnoDB。
|
|
* Ajax change table engine.
|
|
*
|
|
* @access public
|
|
* @return void
|
|
*/
|
|
public function ajaxChangeTableEngine()
|
|
{
|
|
$response = array();
|
|
$response['result'] = 'success';
|
|
$response['message'] = '';
|
|
$response['thisTable'] = '';
|
|
$response['nextTable'] = '';
|
|
|
|
$tableEngines = $this->dao->getTableEngines();
|
|
|
|
$thisTable = '';
|
|
$nextTable = '';
|
|
foreach($tableEngines as $table => $engine)
|
|
{
|
|
if($engine == 'InnoDB') continue;
|
|
if(strpos(",{$this->session->errorTables},", ",{$table},") !== false) continue;
|
|
|
|
if(stripos($table, 'searchindex') !== false)
|
|
{
|
|
$mysqlVersion = $this->loadModel('install')->getDatabaseVersion();
|
|
if($mysqlVersion < 5.6) continue;
|
|
}
|
|
|
|
if($thisTable && empty($nextTable)) $nextTable = $table;
|
|
if(empty($thisTable)) $thisTable = $table;
|
|
if($thisTable && $nextTable) break;
|
|
}
|
|
|
|
if(empty($thisTable))
|
|
{
|
|
unset($_SESSION['errorTables']);
|
|
$response['result'] = 'finished';
|
|
return $this->send($response);
|
|
}
|
|
|
|
try
|
|
{
|
|
/* Check process this table or not. */
|
|
$dbProcesses = $this->dbh->query("SHOW PROCESSLIST")->fetchAll();
|
|
foreach($dbProcesses as $dbProcess)
|
|
{
|
|
if($dbProcess->db != $this->config->db->name) continue;
|
|
if(!empty($dbProcess->Info) && strpos($dbProcess->Info, " {$thisTable} ") !== false)
|
|
{
|
|
$response['message'] = sprintf($this->lang->admin->changingTable, $thisTable);
|
|
return $this->send($response);
|
|
}
|
|
}
|
|
}
|
|
catch(PDOException $e){}
|
|
|
|
$response['thisTable'] = $thisTable;
|
|
$response['nextTable'] = $nextTable;
|
|
|
|
try
|
|
{
|
|
$sql = "ALTER TABLE `$thisTable` ENGINE='InnoDB'";
|
|
$this->dbh->exec($sql);
|
|
$response['message'] = sprintf($this->lang->admin->changeSuccess, $thisTable);
|
|
}
|
|
catch(PDOException $e)
|
|
{
|
|
$this->session->set('errorTables', $this->session->errorTables . ',' . $thisTable);
|
|
|
|
$response['result'] = 'fail';
|
|
$response['message'] = sprintf($this->lang->admin->changeFail, $thisTable, htmlspecialchars($e->getMessage()));
|
|
}
|
|
|
|
return $this->send($response);
|
|
}
|
|
|
|
/**
|
|
* 设置1.5级后台下拉菜单。
|
|
* AJAX: Get drop menu.
|
|
*
|
|
* @param string $currentMenuKey
|
|
* @access public
|
|
* @return void
|
|
*/
|
|
public function ajaxGetDropMenu(string $currentMenuKey = '')
|
|
{
|
|
$this->admin->checkPrivMenu();
|
|
|
|
$data = array();
|
|
foreach($this->lang->admin->menuList as $menuKey => $menuGroup)
|
|
{
|
|
if($this->config->vision == 'lite' && !in_array($menuKey, $this->config->admin->liteMenuList)) continue;
|
|
$data[] = array(
|
|
'id' => $menuKey,
|
|
'name' => $menuKey,
|
|
'content' => array('html' => "<div class='flex items-center my-0.5'><img class='mr-2' src='static/svg/admin-{$menuKey}.svg'/> {$menuGroup['name']}</div>"),
|
|
'text' => $menuGroup['name'],
|
|
'titleClass' => 'hidden',
|
|
'type' => 'item',
|
|
'disabled' => $menuGroup['disabled'],
|
|
'url' => $menuGroup['disabled'] || $currentMenuKey == $menuKey ? '' : $menuGroup['link'],
|
|
'active' => $currentMenuKey == $menuKey,
|
|
'rootClass' => 'admin-menu-item',
|
|
'attrs' => array('disabled' => $menuGroup['disabled'])
|
|
);
|
|
}
|
|
|
|
$this->view->data = $data;
|
|
$this->display();
|
|
}
|
|
|
|
/**
|
|
* 将队列中的SQL语句同步到SQLite中。
|
|
* Execute sql from SQLite queue.
|
|
*
|
|
* @access public
|
|
* @return void
|
|
*/
|
|
public function execSqliteQueue()
|
|
{
|
|
$now = helper::now();
|
|
$sqlite = $this->app->connectSqlite();
|
|
|
|
$querys = $this->dao->select('*')->from(TABLE_SQLITE_QUEUE)->where('status')->eq('wait')->fetchAll();
|
|
|
|
$sqlite->beginTransaction();
|
|
foreach($querys as $query)
|
|
{
|
|
$sqlite->exec($query->sql);
|
|
$this->dao->update(TABLE_SQLITE_QUEUE)
|
|
->set('status')->eq('done')
|
|
->set('execDate')->eq($now)
|
|
->where('id')->eq($query->id)
|
|
->exec();
|
|
}
|
|
$sqlite->commit();
|
|
|
|
echo 'success';
|
|
}
|
|
|
|
/**
|
|
* 设置是否启用缓存。
|
|
* Set cache enable.
|
|
*
|
|
* @access public
|
|
* @return void
|
|
*/
|
|
public function cache()
|
|
{
|
|
if($_POST)
|
|
{
|
|
if(!extension_loaded('apcu')) return $this->send(array('result' => 'fail', 'message' => $this->lang->admin->apcuNotLoaded));
|
|
if(!ini_get('apc.enabled')) return $this->send(array('result' => 'fail', 'message' => $this->lang->admin->apcuNotEnabled));
|
|
|
|
$cache = form::data()->get();
|
|
$this->loadModel('setting')->setItem('system.common.global.cache', json_encode($cache));
|
|
|
|
if($cache->dao['enable'] != $this->config->cache->dao->enable) $this->dao->clearCache();
|
|
|
|
return $this->send(array('result' => 'success', 'message' => $this->lang->saveSuccess, 'load' => true));
|
|
}
|
|
|
|
if(helper::isAPCuEnabled())
|
|
{
|
|
$this->view->rate = $this->adminZen->getAPCuMemory('rate');
|
|
$this->view->used = $this->adminZen->getAPCuMemory('used');
|
|
$this->view->total = $this->adminZen->getAPCuMemory('total');
|
|
}
|
|
|
|
$this->view->title = $this->lang->admin->cache;
|
|
$this->display();
|
|
}
|
|
|
|
/**
|
|
* 清除数据缓存。
|
|
* Clear data cache.
|
|
*
|
|
* @access public
|
|
* @return void
|
|
*/
|
|
public function ajaxClearCache()
|
|
{
|
|
$this->dao->clearCache();
|
|
return $this->send(array('result' => 'success', 'message' => $this->lang->admin->clearSuccess, 'load' => true));
|
|
}
|
|
}
|