pid) { $this->result('您正使用本系统内部接口,禁止非法链接使用!'); } return parent::beforeAction($action); } public function actionIndex() { $apis = [ 'list'=>'清单', 'detail'=>'详情', 'add'=>'添加', 'edit'=>'编辑', 'delete'=>'删除', 'show'=>'显示', 'hide'=>'隐藏', 'ajax'=>'ajax操作' ]; $this->result('您正使用CMTS-GM系统文章内容管理接口!', $apis, 200); } public function actionList() { $s = $this->search(); $res = $s['res']; if (!$res) { $this->result('没有查询到相应的数据!', [], 0); } $news = []; foreach ($res as $v) { $news[] = $v->toArray(); } $data= [ 'total'=>intval($s['query']->count()), 'news' => $news, 'page'=>$this->page ]; $this->result('文章查询成功!', $data, 200); } public function actionDetail() { $id = (int)Yii::$app->request->get('id'); if(!$id) $this->result('请求错误,未携带ID参数'); $model = new AcNews(); $res = $model->findOne($id); if(!$res) $this->result('未查询到相应数据'); //SN处理 if(!$res->sn){ $sn = $this->idToSn($id,'News'); if($sn) $res->sn = $sn; $res->save(); } $this->result('文章信息查询完成', $res->toArray(), 200); } public function actionAdd() { //数据预检查、编排 $data = $this->preSave('add'); if(!$data) $this->result('数据预检查未通过,保存失败', $data, 100); //保存资料 $model = new AcNews(); foreach ($data as $key=>$val) { $model->$key = $val; } $res = $model->save(); $msg = '数据保存失败!'; if(!$res) $this->result($msg, [], 100); $msg = '数据保存成功!'; $return = []; $return['id']= $model->attributes['id']; //获取插入后id; $this->result($msg,$return, 200); } public function actionEdit() { $detail = $this->preUpdate(); //数据预检查、编排 $data = $this->preSave('edit'); if(!$data) $this->result('数据预检查未通过,保存失败', $data, 100); //保存资料 foreach ($data as $key=>$val) { $detail->$key = $val; } $res = $detail->save(); $msg = '数据编辑失败!'; if(!$res) $this->result($msg, [], 100); $msg = '数据编辑成功!'; $return = []; $return['data']= $detail; $this->result($msg,$return, 200); } public function actionDelete() { $detail = $this->preUpdate(); $data = []; $data['update_at'] = time(); $data['deleted'] = $detail->deleted + 1; //保存资料 foreach ($data as $key=>$val) { $detail->$key = $val; } $res = $detail->save(); $msg = '文章数据删除失败!'; if(!$res) $this->result($msg, [], 100); $msg = '文章数据删除成功!'; $this->result($msg,[], 200); } public function actionAjax() { $detail = $this->preUpdate(); $get = Yii::$app->request->get(); $msg = ''; $errorCode = 0; $detail->update_at = time(); switch ($get['do']) { case 'hide': $detail->is_show = 0; $res = $detail->save(); if ($res) { $msg = '文章隐藏标记成功'; $errorCode = 200; } else { $msg = '文章隐藏标记失败'; } break; case 'show': $detail->is_show = 1; $res = $detail->save(); if ($res) { $msg = '文章显示标记成功'; $errorCode = 200; } else { $msg = '文章显示标记失败'; } break; default: break; } $this->result($msg,[], $errorCode); } private function search(){ $pid = $this->pid; $return = []; $model = new AcNews(); $where = $where2 = []; $where['pid'] = $pid; $post = $this->postdata; $search = $post['search'] ?? []; $search['title'] = isset($search['title']) ? trim(htmlspecialchars_decode($search['title'])) : ''; if (!empty($search['title'])) { $where2[] = 'or'; $where2[] = ['LIKE', 'title', $search['title']]; $where2[] = ['LIKE', 'des', $search['title']]; } $search['cat'] = isset($search['cat']) ? trim(htmlspecialchars_decode($search['cat_sn'])) : ''; $search['cid'] = isset($search['cid']) ? intval($search['cid']) : 0; if (!empty($search['cat'])) { $where['cat_sn'] = $search['cat']; }elseif ($search['cid']) { $where['cid'] = $search['cid']; } $where['deleted'] = 0; $data = $model->find()->where($where); if ($search['title']) { $data = $data->andwhere($where2); } $pages = new Pagination(['totalCount' => $data->count(), 'pageSize' => $this->pageSize]); $res = $data->offset($pages->offset)->limit($pages->limit)->orderBy('order_by DESC')->all(); return ['res'=>$res,'query'=>$data]; } /* * 数据更新前的预检查,返回对应关联数据 * 必须确保get与post数据中均包含需更新的数据id且一致 * */ private function preUpdate() { $id = (int)Yii::$app->request->get('id'); if(!$id) $this->result('请求错误,未携带ID参数'); $post = $this->postdata; if($post['id'] != $id) $this->result('传参id与请求数据不匹配',[],403); $model = new AcNews(); $res = $model->findOne($id); if(!$res) $this->result('未查询到相应数据',[],404); //SN处理 if(!$res->sn){ $sn = $this->idToSn($id,'News'); if($sn) $res->sn = $sn; $res->save(); } return $res; } /* * 数据保存前的预检查(查重、参数校验等) * 要保存的数据[],直接从post中取出 * @op,操作类型(add,edit……) * 校验机制: * 编辑数据时,必须用get方式传入参数id,并与post进来的数据id进行比对,只有一致时才能继续; * 查重:禁止录入重复数据 * 返回:校验重组后的数据 * */ private function preSave($op) { $post = $this->postdata; $data = []; //格式化数据 //目标键=》POST键 $_time = time(); $id = 0; $model = new AcNews(); switch ($op) { case 'add': $data['is_show'] = 1; $data['create_at'] = $_time; $data['update_at'] = $data['create_at']; $sn = $this->idToSn($id,'News'); if($sn) $data['sn'] = $sn; break; case 'edit': $id = (int)Yii::$app->request->get('id'); $_id = (int)$post['id']; if(!$id != $_id) $this->result('id参数不匹配,请检查'); $data['update_at'] = $_time; $data['is_show'] = isset($post['is_show']) ? intval($post['is_show']) : 0; break; } $data['pid'] = $this->pid; //目标键=》POST键 $cols = ['title'=>'title','des'=>'des']; foreach($cols as $col=>$key){ if(isset($post[$key])){ $data[$col] = trim($post[$key]); }elseif(!$id){ $data[$col] = ''; } } $cols = ['content'=>'editor']; foreach($cols as $col=>$key){ if(isset($post[$key])){ $data[$col] = htmlspecialchars($post[$key]); } } $cols = ['order_by' => 'order_by', 'deleted' => 'deleted','cid'=>'cid','liked'=>'liked','reading'=>'reading','viewed'=>'viewed']; foreach ($cols as $col => $key) { if(isset($post[$key])){ $data[$col] = (int)$post[$key]; } } return $data; } }