diff --git a/admin/addapp.php b/admin/addapp.php index 6551185..d0574d0 100644 --- a/admin/addapp.php +++ b/admin/addapp.php @@ -2,10 +2,17 @@ require_once '../config.php'; session_start(); -// 检查管理员登录状态 +// 检查是否已登录 if (!isset($_SESSION['admin'])) { header('Location: login.php'); - exit; + exit(); +} + +// 检查权限 +if ($_SESSION['admin']['permission'] != 'all') { + $redirect = $_SESSION['admin']['permission'] == 'say' ? 'announcements.php' : 'review_apps.php'; + header("Location: $redirect"); + exit(); } $success = ''; @@ -96,19 +103,36 @@ if ($_SERVER['REQUEST_METHOD'] === 'POST' && isset($_POST['add_app'])) { } ?> - + - - - 添加App - <?php echo APP_STORE_NAME; ?> - - - + 添加应用 - - - - + diff --git a/admin/logout.php b/admin/logout.php new file mode 100644 index 0000000..1370452 --- /dev/null +++ b/admin/logout.php @@ -0,0 +1,28 @@ +'; +echo ''; +exit(); \ No newline at end of file diff --git a/admin/manage_developers.php b/admin/manage_developers.php index 149387e..8a35838 100644 --- a/admin/manage_developers.php +++ b/admin/manage_developers.php @@ -4,10 +4,17 @@ require_once '../config.php'; // 设置会话cookie路径为根目录以确保跨目录访问 session_set_cookie_params(0, '/'); session_start(); -// 检查管理员登录状态 +// 检查是否已登录 if (!isset($_SESSION['admin'])) { header('Location: login.php'); - exit; + exit(); +} + +// 检查权限 +if ($_SESSION['admin']['permission'] != 'all') { + $redirect = $_SESSION['admin']['permission'] == 'say' ? 'announcements.php' : 'review_apps.php'; + header("Location: $redirect"); + exit(); } // 处理退出登录 @@ -41,7 +48,7 @@ if (isset($_GET['logout'])) { 管理开发者 @@ -206,6 +213,22 @@ if (!$stmt) { } + + diff --git a/admin/manage_tags.php b/admin/manage_tags.php index 365822b..56bd142 100644 --- a/admin/manage_tags.php +++ b/admin/manage_tags.php @@ -2,6 +2,13 @@ require_once '../config.php'; require_once 'login.php'; // 确保管理员已登录 +// 检查权限 +if ($_SESSION['admin']['permission'] != 'all') { + $redirect = $_SESSION['admin']['permission'] == 'say' ? 'announcements.php' : 'review_apps.php'; + header("Location: $redirect"); + exit(); +} + // 处理标签添加 if ($_SERVER['REQUEST_METHOD'] === 'POST' && isset($_POST['add_tag'])) { $name = trim($_POST['tag_name']); @@ -61,6 +68,22 @@ $tagsResult = $conn->query("SELECT * FROM tags ORDER BY created_at DESC"); 标签管理 - 应用商店后台 + +
@@ -152,5 +175,8 @@ $tagsResult = $conn->query("SELECT * FROM tags ORDER BY created_at DESC");
+ \ No newline at end of file diff --git a/admin/manage_versions.php b/admin/manage_versions.php index 2b0f2c2..fc97cbd 100644 --- a/admin/manage_versions.php +++ b/admin/manage_versions.php @@ -2,10 +2,17 @@ require_once '../config.php'; session_start(); -// 检查管理员登录状态 +// 检查是否已登录 if (!isset($_SESSION['admin'])) { header('Location: login.php'); - exit; + exit(); +} + +// 检查权限 +if ($_SESSION['admin']['permission'] != 'all') { + $redirect = $_SESSION['admin']['permission'] == 'say' ? 'announcements.php' : 'review_apps.php'; + header("Location: $redirect"); + exit(); } // 验证App ID diff --git a/admin/review_apps.php b/admin/review_apps.php index f231896..f58ec68 100644 --- a/admin/review_apps.php +++ b/admin/review_apps.php @@ -6,10 +6,17 @@ use PHPMailer\PHPMailer\PHPMailer; use PHPMailer\PHPMailer\Exception; session_start(); -// 检查管理员登录状态 +// 检查是否已登录 if (!isset($_SESSION['admin'])) { header('Location: login.php'); - exit; + exit(); +} + +// 检查权限 - 允许all和review权限 +if (!in_array($_SESSION['admin']['permission'], ['all', 'review'])) { + $redirect = $_SESSION['admin']['permission'] == 'say' ? 'announcements.php' : 'review_apps.php'; + header("Location: $redirect"); + exit(); } $success = ''; @@ -133,7 +140,7 @@ if (!($conn instanceof mysqli)) { - + @@ -171,7 +178,7 @@ if (!($conn instanceof mysqli)) { 应用审核 @@ -314,6 +321,22 @@ function showRejectReason(appId, appName) { - + + \ No newline at end of file diff --git a/admin/system_info.php b/admin/system_info.php index 4f9009d..dc85eb0 100644 --- a/admin/system_info.php +++ b/admin/system_info.php @@ -55,6 +55,13 @@ exit; } + // 检查权限 + if ($_SESSION['admin']['permission'] != 'all') { + $redirect = $_SESSION['admin']['permission'] == 'say' ? 'announcements.php' : 'review_apps.php'; + header("Location: $redirect"); + exit(); + } + // 获取上传文件和图片信息 function get_uploaded_files_info() { $uploaded_files = []; diff --git a/app.php b/app.php index 4fb3aa9..ba43fca 100644 --- a/app.php +++ b/app.php @@ -137,8 +137,8 @@ if ($_SERVER['REQUEST_METHOD'] === 'POST' && isset($_POST['rating'])) { - - + + diff --git a/config.php b/config.php index 7ee3ed4..bea057a 100644 --- a/config.php +++ b/config.php @@ -23,6 +23,7 @@ define('SMTP_FROM_NAME', 'leonmm2@163.com'); // 管理员账号 - 支持多个账号 $admin_accounts = [ ['id' => 1, 'username' => 'Admin', 'password' => ''], + ['id' => 2, 'username' => 'Admin2', 'password' => ''], // 可添加更多管理员账号,格式: ['id' => 数字, 'username' => '用户名', 'password' => ''] ]; diff --git a/developer/dashboard.php b/developer/dashboard.php index d0deb50..e2be416 100644 --- a/developer/dashboard.php +++ b/developer/dashboard.php @@ -48,7 +48,7 @@ if (!($conn instanceof mysqli)) { - +