77 lines
2.5 KiB
PHP
77 lines
2.5 KiB
PHP
<?php
|
||
/**
|
||
* @Author: prpr
|
||
* @Date: 2016-02-04 13:53:55
|
||
* @Last Modified by: prpr
|
||
* @Last Modified time: 2016-02-05 21:43:29
|
||
*/
|
||
session_start();
|
||
$dir = dirname(dirname(__FILE__));
|
||
require "$dir/includes/autoload.inc.php";
|
||
|
||
if(isset($_COOKIE['uname']) && isset($_COOKIE['token'])) {
|
||
$_SESSION['uname'] = $_COOKIE['uname'];
|
||
$_SESSION['token'] = $_COOKIE['token'];
|
||
}
|
||
|
||
/**
|
||
* Check token, won't allow non-admin user to access
|
||
*/
|
||
if (isset($_SESSION['uname'])) {
|
||
$admin = new user($_SESSION['uname']);
|
||
if ($_SESSION['token'] != $admin->getToken()) {
|
||
header('Location: ../index.php?msg=无效的 token，请重新登录。');
|
||
} else if (!$admin->is_admin) {
|
||
header('Location: ../index.php?msg=看起来你并不是管理员');
|
||
}
|
||
} else {
|
||
header('Location: ../index.php?msg=非法访问，请先登录。');
|
||
}
|
||
|
||
/*
|
||
* No protection here,
|
||
* I don't think you wanna fuck yourself :(
|
||
*/
|
||
if (isset($_GET['action'])) {
|
||
$action = $_GET['action'];
|
||
$user = new user($_GET['uname']);
|
||
|
||
if ($action == "upload") {
|
||
$type = isset($_GET['type']) ? $_GET['type'] : "skin";
|
||
$file = isset($_FILES['file']) ? $_FILES['file'] : null;
|
||
if (!is_null($file)) {
|
||
if ($user->setTexture($type, $file)) {
|
||
$json['errno'] = 0;
|
||
$json['msg'] = "皮肤上传成功。";
|
||
} else {
|
||
$json['errno'] = 1;
|
||
$json['msg'] = "出现了奇怪的错误。。请联系作者";
|
||
}
|
||
} else {
|
||
utils::raise(1, '你没有选择任何文件哦');
|
||
}
|
||
} else if ($action == "change") {
|
||
if (user::checkValidPwd($_POST['passwd'])) {
|
||
$user->changePasswd($_POST['passwd']);
|
||
$json['errno'] = 0;
|
||
$json['msg'] = "成功更改了 ".$_GET['uname']." 的密码。";
|
||
} // Will raise exception if password invalid
|
||
} else if ($action == "delete") {
|
||
$user->unRegister();
|
||
$json['errno'] = 0;
|
||
$json['msg'] = "成功删除了该用户。";
|
||
} else if ($action == "model") {
|
||
if (isset($_POST['model']) && $_POST['model'] == 'slim' || $_POST['model'] == 'default') {
|
||
$user->setPreference($_POST['model']);
|
||
$json['errno'] = 0;
|
||
$json['msg'] = "成功地将用户 ".$_GET['uname']." 的优先皮肤模型更改为 ".$_POST['model']." 。";
|
||
} else {
|
||
utils::raise(1, '非法参数。');
|
||
}
|
||
} else {
|
||
utils::raise(1, '非法参数。');
|
||
}
|
||
}
|
||
|
||
echo json_encode($json);
|