982 lines
50 KiB
PHP
982 lines
50 KiB
PHP
<?php
|
|
/**
|
|
* @package AKSRT
|
|
*/
|
|
|
|
namespace AKSRT\Admin\Native;
|
|
|
|
defined('ABSPATH') || exit;
|
|
|
|
class UsersMenus {
|
|
|
|
public const CAPABILITY = 'manage_options';
|
|
|
|
private static $instance = null;
|
|
|
|
public static function get_instance(): self {
|
|
if (null === self::$instance) {
|
|
self::$instance = new self();
|
|
}
|
|
return self::$instance;
|
|
}
|
|
|
|
public function init(): void {
|
|
if (!is_admin()) {
|
|
return;
|
|
}
|
|
|
|
add_action('admin_menu', [$this, 'register_menus']);
|
|
add_action('admin_notices', [$this, 'pending_notices']);
|
|
add_action('admin_post_aksrt_users_send_message', [$this, 'handle_send_message']);
|
|
add_action('admin_post_aksrt_users_review_verify', [$this, 'handle_review_verify']);
|
|
add_action('admin_post_aksrt_users_update_report', [$this, 'handle_update_report']);
|
|
add_action('admin_post_aksrt_users_add_restriction', [$this, 'handle_add_restriction']);
|
|
add_action('admin_post_aksrt_users_remove_restriction', [$this, 'handle_remove_restriction']);
|
|
add_action('admin_post_aksrt_users_process_appeal', [$this, 'handle_process_appeal']);
|
|
add_action('admin_post_aksrt_users_batch_invite_codes', [$this, 'handle_batch_invite_codes']);
|
|
add_action('admin_post_aksrt_users_disable_invite_code', [$this, 'handle_disable_invite_code']);
|
|
}
|
|
|
|
public function register_menus(): void {
|
|
if (!current_user_can(self::CAPABILITY)) {
|
|
return;
|
|
}
|
|
|
|
add_submenu_page(
|
|
'users.php',
|
|
__('消息管理', 'aksrt'),
|
|
__('消息管理', 'aksrt'),
|
|
self::CAPABILITY,
|
|
'aksrt_messages',
|
|
[$this, 'render_messages_page']
|
|
);
|
|
add_submenu_page(
|
|
'users.php',
|
|
__('邀请码管理', 'aksrt'),
|
|
__('邀请码管理', 'aksrt'),
|
|
self::CAPABILITY,
|
|
'aksrt_invite_codes',
|
|
[$this, 'render_invite_codes_page']
|
|
);
|
|
add_submenu_page(
|
|
'users.php',
|
|
__('身份认证', 'aksrt'),
|
|
__('身份认证', 'aksrt'),
|
|
self::CAPABILITY,
|
|
'aksrt_user_auth',
|
|
[$this, 'render_verify_page']
|
|
);
|
|
add_submenu_page(
|
|
'users.php',
|
|
__('举报&禁封', 'aksrt'),
|
|
__('举报&禁封', 'aksrt'),
|
|
self::CAPABILITY,
|
|
'aksrt_user_ban',
|
|
[$this, 'render_ban_page']
|
|
);
|
|
}
|
|
|
|
public function pending_notices(): void {
|
|
if (!current_user_can(self::CAPABILITY)) {
|
|
return;
|
|
}
|
|
$page = isset($_GET['page']) ? sanitize_key((string) wp_unslash($_GET['page'])) : '';
|
|
|
|
if ($page !== 'aksrt_user_auth') {
|
|
$pending_verify = $this->count_verify_status('pending');
|
|
if ($pending_verify > 0) {
|
|
$url = admin_url('users.php?page=aksrt_user_auth&status=pending');
|
|
echo '<div class="notice notice-info is-dismissible"><h3>' . esc_html__('用户身份认证申请待处理', 'aksrt') . '</h3>';
|
|
echo '<p>' . esc_html(sprintf(
|
|
/* translators: %d count */
|
|
__('您有 %d 个用户身份认证申请待处理', 'aksrt'),
|
|
$pending_verify
|
|
)) . '</p>';
|
|
echo '<p><a class="button button-primary" href="' . esc_url($url) . '">' . esc_html__('立即处理', 'aksrt') . '</a></p></div>';
|
|
}
|
|
}
|
|
|
|
if ($page !== 'aksrt_user_ban' && class_exists('\AKSRT\Messages\ReportCenter')) {
|
|
$pending_reports = (int) \AKSRT\Messages\ReportCenter::get_instance()->get_pending_count();
|
|
if ($pending_reports > 0) {
|
|
$url = admin_url('users.php?page=aksrt_user_ban&tab=reports&status=pending');
|
|
echo '<div class="notice notice-info is-dismissible"><h3>' . esc_html__('举报待处理', 'aksrt') . '</h3>';
|
|
echo '<p>' . esc_html(sprintf(
|
|
/* translators: %d count */
|
|
__('您有 %d 条举报待处理', 'aksrt'),
|
|
$pending_reports
|
|
)) . '</p>';
|
|
echo '<p><a class="button button-primary" href="' . esc_url($url) . '">' . esc_html__('立即处理', 'aksrt') . '</a></p></div>';
|
|
}
|
|
}
|
|
|
|
if ($page !== 'aksrt_user_ban' && class_exists('\AKSRT\User\BanAppeal')) {
|
|
$pending_appeals = count(get_users([
|
|
'meta_key' => \AKSRT\User\BanAppeal::META_STATUS,
|
|
'meta_value' => 'pending',
|
|
'number' => 50,
|
|
'fields' => 'ID',
|
|
]));
|
|
if ($pending_appeals > 0) {
|
|
$url = admin_url('users.php?page=aksrt_user_ban&tab=appeals&status=pending');
|
|
echo '<div class="notice notice-warning is-dismissible"><h3>' . esc_html__('禁封申诉待处理', 'aksrt') . '</h3>';
|
|
echo '<p>' . esc_html(sprintf(__('您有 %d 条禁封申诉待处理', 'aksrt'), $pending_appeals)) . '</p>';
|
|
echo '<p><a class="button button-primary" href="' . esc_url($url) . '">' . esc_html__('立即处理', 'aksrt') . '</a></p></div>';
|
|
}
|
|
}
|
|
}
|
|
|
|
private function ensure_cap(): void {
|
|
if (!current_user_can(self::CAPABILITY)) {
|
|
wp_die(esc_html__('您没有权限访问此页面。', 'aksrt'));
|
|
}
|
|
}
|
|
|
|
private function flash(): void {
|
|
if (empty($_GET['aksrt_users_msg'])) {
|
|
return;
|
|
}
|
|
$code = sanitize_key((string) wp_unslash($_GET['aksrt_users_msg']));
|
|
$map = [
|
|
'message_sent' => __('消息已发送。', 'aksrt'),
|
|
'message_failed' => __('消息发送失败。', 'aksrt'),
|
|
'verify_updated' => __('认证状态已更新。', 'aksrt'),
|
|
'verify_failed' => __('认证审核失败。', 'aksrt'),
|
|
'report_updated' => __('举报状态已更新。', 'aksrt'),
|
|
'report_failed' => __('举报更新失败。', 'aksrt'),
|
|
'restriction_added' => __('限制已添加。', 'aksrt'),
|
|
'restriction_removed' => __('限制已移除。', 'aksrt'),
|
|
'restriction_failed' => __('限制操作失败。', 'aksrt'),
|
|
'appeal_approved' => __('申诉已通过，限制已解除。', 'aksrt'),
|
|
'appeal_rejected' => __('申诉已驳回。', 'aksrt'),
|
|
'appeal_failed' => __('申诉处理失败。', 'aksrt'),
|
|
'invite_batch_ok' => __('邀请码批量生成完成。', 'aksrt'),
|
|
'invite_batch_failed' => __('邀请码批量生成失败。', 'aksrt'),
|
|
'invite_disabled' => __('邀请码已禁用。', 'aksrt'),
|
|
'invite_failed' => __('邀请码操作失败。', 'aksrt'),
|
|
];
|
|
if (!isset($map[$code])) {
|
|
return;
|
|
}
|
|
$class = str_contains($code, 'failed') ? 'notice-error' : 'notice-success';
|
|
echo '<div class="notice ' . esc_attr($class) . ' is-dismissible"><p>' . esc_html($map[$code]) . '</p></div>';
|
|
}
|
|
|
|
private function redirect(string $page, string $msg, array $extra = []): void {
|
|
wp_safe_redirect(add_query_arg(array_merge(['page' => $page, 'aksrt_users_msg' => $msg], $extra), admin_url('users.php')));
|
|
exit;
|
|
}
|
|
|
|
/* ------------------------------------------------------------------
|
|
* Messages
|
|
* ----------------------------------------------------------------*/
|
|
|
|
public function render_messages_page(): void {
|
|
$this->ensure_cap();
|
|
echo '<div class="wrap"><h1>' . esc_html__('消息管理', 'aksrt') . '</h1>';
|
|
$this->flash();
|
|
|
|
echo '<h2>' . esc_html__('发送系统消息', 'aksrt') . '</h2>';
|
|
echo '<form method="post" action="' . esc_url(admin_url('admin-post.php')) . '" style="margin-bottom:20px;">';
|
|
echo '<input type="hidden" name="action" value="aksrt_users_send_message" />';
|
|
wp_nonce_field('aksrt_users_send_message');
|
|
echo '<p><label>' . esc_html__('用户 ID（0=广播给管理员自己测试）', 'aksrt') . '<br><input type="number" name="user_id" value="0" min="0" /></label></p>';
|
|
echo '<p><label>' . esc_html__('标题', 'aksrt') . '<br><input type="text" name="title" class="regular-text" required /></label></p>';
|
|
echo '<p><label>' . esc_html__('内容', 'aksrt') . '<br><textarea name="content" class="large-text" rows="4" required></textarea></label></p>';
|
|
submit_button(__('发送', 'aksrt'));
|
|
echo '</form>';
|
|
|
|
$page_num = max(1, (int) ($_GET['paged'] ?? 1));
|
|
$per_page = 30;
|
|
$offset = ($page_num - 1) * $per_page;
|
|
$table = class_exists('\AKSRT\Core\DBMigrator') ? \AKSRT\Core\DBMigrator::table('notification') : '';
|
|
|
|
if ($table === '') {
|
|
echo '<div class="notice notice-warning"><p>' . esc_html__('通知表不可用。', 'aksrt') . '</p></div></div>';
|
|
return;
|
|
}
|
|
|
|
global $wpdb;
|
|
$total = (int) $wpdb->get_var("SELECT COUNT(*) FROM {$table}");
|
|
$items = $wpdb->get_results($wpdb->prepare(
|
|
"SELECT * FROM {$table} ORDER BY created_at DESC LIMIT %d OFFSET %d",
|
|
$per_page,
|
|
$offset
|
|
), ARRAY_A);
|
|
$pages = max(1, (int) ceil(max(1, $total) / $per_page));
|
|
|
|
echo '<h2>' . esc_html__('最近消息', 'aksrt') . '</h2>';
|
|
echo '<table class="wp-list-table widefat fixed striped"><thead><tr>';
|
|
echo '<th>ID</th><th>' . esc_html__('用户', 'aksrt') . '</th><th>' . esc_html__('类型', 'aksrt') . '</th><th>' . esc_html__('标题', 'aksrt') . '</th><th>' . esc_html__('已读', 'aksrt') . '</th><th>' . esc_html__('时间', 'aksrt') . '</th>';
|
|
echo '</tr></thead><tbody>';
|
|
if (!$items) {
|
|
echo '<tr><td colspan="6">' . esc_html__('暂无消息', 'aksrt') . '</td></tr>';
|
|
}
|
|
foreach ((array) $items as $row) {
|
|
$user_id = (int) ($row['user_id'] ?? 0);
|
|
$user = $user_id > 0 ? get_userdata($user_id) : null;
|
|
echo '<tr>';
|
|
echo '<td>' . esc_html((string) ($row['id'] ?? '')) . '</td>';
|
|
echo '<td>' . ($user ? esc_html($user->display_name . ' (#' . $user_id . ')') : esc_html((string) $user_id)) . '</td>';
|
|
echo '<td>' . esc_html((string) ($row['type'] ?? '')) . '</td>';
|
|
echo '<td>' . esc_html((string) ($row['title'] ?? $row['description'] ?? '')) . '</td>';
|
|
echo '<td>' . (!empty($row['is_read']) ? esc_html__('是', 'aksrt') : esc_html__('否', 'aksrt')) . '</td>';
|
|
echo '<td>' . esc_html((string) ($row['created_at'] ?? '')) . '</td>';
|
|
echo '</tr>';
|
|
}
|
|
echo '</tbody></table>';
|
|
$this->pagination($pages, $page_num);
|
|
echo '</div>';
|
|
}
|
|
|
|
public function handle_send_message(): void {
|
|
if (!current_user_can(self::CAPABILITY)) {
|
|
wp_die(esc_html__('权限不足', 'aksrt'));
|
|
}
|
|
check_admin_referer('aksrt_users_send_message');
|
|
|
|
$user_id = isset($_POST['user_id']) ? (int) $_POST['user_id'] : 0;
|
|
$title = isset($_POST['title']) ? sanitize_text_field((string) wp_unslash($_POST['title'])) : '';
|
|
$content = isset($_POST['content']) ? sanitize_textarea_field((string) wp_unslash($_POST['content'])) : '';
|
|
if ($user_id <= 0) {
|
|
$user_id = get_current_user_id();
|
|
}
|
|
|
|
$ok = false;
|
|
if ($content !== '' && class_exists('\AKSRT\Messages\Message')) {
|
|
$ok = \AKSRT\Messages\Message::get_instance()->send($user_id, 'system', $content, ['title' => $title !== '' ? $title : $content]);
|
|
}
|
|
$this->redirect('aksrt_messages', $ok ? 'message_sent' : 'message_failed');
|
|
}
|
|
|
|
/* ------------------------------------------------------------------
|
|
* Invite codes
|
|
* ----------------------------------------------------------------*/
|
|
|
|
public function render_invite_codes_page(): void {
|
|
$this->ensure_cap();
|
|
echo '<div class="wrap"><h1>' . esc_html__('邀请码管理', 'aksrt') . '</h1>';
|
|
$this->flash();
|
|
|
|
echo '<h2>' . esc_html__('批量生成独立邀请码', 'aksrt') . '</h2>';
|
|
echo '<form method="post" action="' . esc_url(admin_url('admin-post.php')) . '" style="margin:12px 0 20px;display:flex;flex-wrap:wrap;gap:8px;align-items:end;">';
|
|
echo '<input type="hidden" name="action" value="aksrt_users_batch_invite_codes" />';
|
|
wp_nonce_field('aksrt_users_batch_invite_codes');
|
|
echo '<p><label>' . esc_html__('数量', 'aksrt') . '<br><input type="number" name="count" min="1" max="100" value="10" /></label></p>';
|
|
echo '<p><label>' . esc_html__('长度', 'aksrt') . '<br><input type="number" name="length" min="4" max="12" value="6" /></label></p>';
|
|
echo '<p><label>' . esc_html__('前缀', 'aksrt') . '<br><input type="text" name="prefix" value="" /></label></p>';
|
|
echo '<p><label>' . esc_html__('备注', 'aksrt') . '<br><input type="text" name="note" value="" class="regular-text" /></label></p>';
|
|
submit_button(__('生成', 'aksrt'), 'primary', '', false);
|
|
echo '</form>';
|
|
|
|
if (!empty($_GET['aksrt_generated'])) {
|
|
echo '<div class="notice notice-success"><p>' . esc_html(sprintf(
|
|
/* translators: %d count */
|
|
__('成功生成 %d 个邀请码。', 'aksrt'),
|
|
(int) $_GET['aksrt_generated']
|
|
)) . '</p></div>';
|
|
}
|
|
|
|
$standalone = get_option('aksrt_standalone_invite_codes', []);
|
|
$standalone = is_array($standalone) ? array_reverse(array_values($standalone)) : [];
|
|
|
|
echo '<h2>' . esc_html__('独立邀请码', 'aksrt') . '</h2>';
|
|
echo '<table class="wp-list-table widefat fixed striped"><thead><tr>';
|
|
echo '<th>' . esc_html__('邀请码', 'aksrt') . '</th><th>' . esc_html__('状态', 'aksrt') . '</th><th>' . esc_html__('批次', 'aksrt') . '</th><th>' . esc_html__('备注', 'aksrt') . '</th><th>' . esc_html__('创建时间', 'aksrt') . '</th><th>' . esc_html__('操作', 'aksrt') . '</th>';
|
|
echo '</tr></thead><tbody>';
|
|
if (!$standalone) {
|
|
echo '<tr><td colspan="6">' . esc_html__('暂无独立邀请码', 'aksrt') . '</td></tr>';
|
|
}
|
|
$shown = 0;
|
|
foreach ($standalone as $entry) {
|
|
if ($shown >= 200) {
|
|
break;
|
|
}
|
|
$code = sanitize_key((string) ($entry['code'] ?? ''));
|
|
if ($code === '') {
|
|
continue;
|
|
}
|
|
$disabled = !empty($entry['disabled']);
|
|
$used = !empty($entry['used']) || !empty($entry['used_by']);
|
|
$status = $disabled ? __('已禁用', 'aksrt') : ($used ? __('已使用', 'aksrt') : __('可用', 'aksrt'));
|
|
echo '<tr>';
|
|
echo '<td><code>' . esc_html($code) . '</code></td>';
|
|
echo '<td>' . esc_html($status) . '</td>';
|
|
echo '<td>' . esc_html((string) ($entry['batch_id'] ?? '')) . '</td>';
|
|
echo '<td>' . esc_html((string) ($entry['note'] ?? '')) . '</td>';
|
|
echo '<td>' . esc_html((string) ($entry['created_at'] ?? '')) . '</td>';
|
|
echo '<td>';
|
|
if (!$disabled && !$used) {
|
|
echo '<form method="post" action="' . esc_url(admin_url('admin-post.php')) . '">';
|
|
echo '<input type="hidden" name="action" value="aksrt_users_disable_invite_code" />';
|
|
echo '<input type="hidden" name="code" value="' . esc_attr($code) . '" />';
|
|
wp_nonce_field('aksrt_users_disable_invite_code_' . $code);
|
|
submit_button(__('禁用', 'aksrt'), 'small', '', false);
|
|
echo '</form>';
|
|
} else {
|
|
echo '—';
|
|
}
|
|
echo '</td></tr>';
|
|
$shown++;
|
|
}
|
|
echo '</tbody></table>';
|
|
|
|
global $wpdb;
|
|
$rows = $wpdb->get_results(
|
|
"SELECT user_id, meta_value AS invite_code FROM {$wpdb->usermeta} WHERE meta_key = 'aksrt_invite_code' ORDER BY umeta_id DESC LIMIT 200",
|
|
ARRAY_A
|
|
);
|
|
|
|
echo '<h2>' . esc_html__('用户邀请码', 'aksrt') . '</h2>';
|
|
echo '<table class="wp-list-table widefat fixed striped"><thead><tr>';
|
|
echo '<th>' . esc_html__('用户', 'aksrt') . '</th><th>' . esc_html__('邀请码', 'aksrt') . '</th><th>' . esc_html__('邀请人数', 'aksrt') . '</th>';
|
|
echo '</tr></thead><tbody>';
|
|
if (!$rows) {
|
|
echo '<tr><td colspan="3">' . esc_html__('暂无用户邀请码', 'aksrt') . '</td></tr>';
|
|
}
|
|
$invite_table = class_exists('\AKSRT\Core\DBMigrator') ? \AKSRT\Core\DBMigrator::table('invite') : '';
|
|
foreach ((array) $rows as $row) {
|
|
$user_id = (int) ($row['user_id'] ?? 0);
|
|
$user = $user_id > 0 ? get_userdata($user_id) : null;
|
|
$count = 0;
|
|
if ($invite_table) {
|
|
$count = (int) $wpdb->get_var($wpdb->prepare(
|
|
"SELECT COUNT(*) FROM {$invite_table} WHERE inviter_id = %d",
|
|
$user_id
|
|
));
|
|
}
|
|
echo '<tr>';
|
|
echo '<td>' . ($user ? esc_html($user->display_name . ' (#' . $user_id . ')') : esc_html((string) $user_id)) . '</td>';
|
|
echo '<td><code>' . esc_html((string) ($row['invite_code'] ?? '')) . '</code></td>';
|
|
echo '<td>' . esc_html((string) $count) . '</td>';
|
|
echo '</tr>';
|
|
}
|
|
echo '</tbody></table></div>';
|
|
}
|
|
|
|
public function handle_batch_invite_codes(): void {
|
|
if (!current_user_can(self::CAPABILITY)) {
|
|
wp_die(esc_html__('权限不足', 'aksrt'));
|
|
}
|
|
check_admin_referer('aksrt_users_batch_invite_codes');
|
|
|
|
$count = isset($_POST['count']) ? max(1, min(100, (int) $_POST['count'])) : 10;
|
|
$length = isset($_POST['length']) ? max(4, min(12, (int) $_POST['length'])) : 6;
|
|
$prefix = isset($_POST['prefix']) ? sanitize_key((string) wp_unslash($_POST['prefix'])) : '';
|
|
$note = isset($_POST['note']) ? sanitize_textarea_field((string) wp_unslash($_POST['note'])) : '';
|
|
$batch = 'INV-' . gmdate('YmdHis') . '-' . wp_generate_password(4, false, false);
|
|
$alphabet = 'abcdefghjkmnpqrstuvwxyz23456789';
|
|
|
|
$codes = get_option('aksrt_standalone_invite_codes', []);
|
|
$codes = is_array($codes) ? array_values($codes) : [];
|
|
$existing = [];
|
|
foreach ($codes as $entry) {
|
|
$c = sanitize_key((string) ($entry['code'] ?? ''));
|
|
if ($c !== '') {
|
|
$existing[$c] = true;
|
|
}
|
|
}
|
|
|
|
global $wpdb;
|
|
$generated = [];
|
|
for ($i = 0; $i < $count; $i++) {
|
|
$code = '';
|
|
for ($attempt = 0; $attempt < 20; $attempt++) {
|
|
$candidate = $prefix;
|
|
for ($j = 0; $j < $length; $j++) {
|
|
$candidate .= $alphabet[random_int(0, strlen($alphabet) - 1)];
|
|
}
|
|
$candidate = sanitize_key($candidate);
|
|
if ($candidate === '' || isset($existing[$candidate])) {
|
|
continue;
|
|
}
|
|
$user_hit = $wpdb->get_var($wpdb->prepare(
|
|
"SELECT umeta_id FROM {$wpdb->usermeta} WHERE meta_key = 'aksrt_invite_code' AND meta_value = %s LIMIT 1",
|
|
$candidate
|
|
));
|
|
if ($user_hit) {
|
|
continue;
|
|
}
|
|
$code = $candidate;
|
|
break;
|
|
}
|
|
if ($code === '') {
|
|
continue;
|
|
}
|
|
$existing[$code] = true;
|
|
$codes[] = [
|
|
'code' => $code,
|
|
'created_at' => current_time('mysql'),
|
|
'used' => false,
|
|
'used_by' => 0,
|
|
'used_at' => '',
|
|
'disabled' => false,
|
|
'note' => $note,
|
|
'batch_id' => $batch,
|
|
'created_by' => get_current_user_id(),
|
|
];
|
|
$generated[] = $code;
|
|
}
|
|
|
|
update_option('aksrt_standalone_invite_codes', array_values($codes), false);
|
|
$ok = !empty($generated);
|
|
$this->redirect('aksrt_invite_codes', $ok ? 'invite_batch_ok' : 'invite_batch_failed', [
|
|
'aksrt_generated' => count($generated),
|
|
]);
|
|
}
|
|
|
|
public function handle_disable_invite_code(): void {
|
|
if (!current_user_can(self::CAPABILITY)) {
|
|
wp_die(esc_html__('权限不足', 'aksrt'));
|
|
}
|
|
$code = isset($_POST['code']) ? sanitize_key((string) wp_unslash($_POST['code'])) : '';
|
|
check_admin_referer('aksrt_users_disable_invite_code_' . $code);
|
|
|
|
$ok = false;
|
|
if ($code !== '') {
|
|
$codes = get_option('aksrt_standalone_invite_codes', []);
|
|
$codes = is_array($codes) ? $codes : [];
|
|
foreach ($codes as $i => $entry) {
|
|
if (sanitize_key((string) ($entry['code'] ?? '')) !== $code) {
|
|
continue;
|
|
}
|
|
$entry['disabled'] = true;
|
|
$codes[$i] = $entry;
|
|
$ok = true;
|
|
break;
|
|
}
|
|
if ($ok) {
|
|
update_option('aksrt_standalone_invite_codes', array_values($codes), false);
|
|
}
|
|
}
|
|
$this->redirect('aksrt_invite_codes', $ok ? 'invite_disabled' : 'invite_failed');
|
|
}
|
|
|
|
/* ------------------------------------------------------------------
|
|
* Verify
|
|
* ----------------------------------------------------------------*/
|
|
|
|
private function count_verify_status(string $status): int {
|
|
global $wpdb;
|
|
return (int) $wpdb->get_var($wpdb->prepare(
|
|
"SELECT COUNT(*) FROM {$wpdb->usermeta} WHERE meta_key = 'aksrt_user_verify_status' AND meta_value = %s",
|
|
$status
|
|
));
|
|
}
|
|
|
|
public function render_verify_page(): void {
|
|
$this->ensure_cap();
|
|
echo '<div class="wrap"><h1>' . esc_html__('身份认证', 'aksrt') . '</h1>';
|
|
$this->flash();
|
|
|
|
$status = isset($_GET['status']) ? sanitize_key((string) wp_unslash($_GET['status'])) : 'pending';
|
|
$page_num = max(1, (int) ($_GET['paged'] ?? 1));
|
|
$per_page = 20;
|
|
$offset = ($page_num - 1) * $per_page;
|
|
|
|
echo '<form method="get" style="margin:12px 0;">';
|
|
echo '<input type="hidden" name="page" value="aksrt_user_auth" />';
|
|
echo '<select name="status">';
|
|
foreach (['pending' => __('待审核', 'aksrt'), 'verified' => __('已通过', 'aksrt'), 'rejected' => __('已拒绝', 'aksrt'), '' => __('全部', 'aksrt')] as $key => $label) {
|
|
printf('<option value="%s"%s>%s</option>', esc_attr($key), selected($status, $key, false), esc_html($label));
|
|
}
|
|
echo '</select> ';
|
|
submit_button(__('筛选', 'aksrt'), 'secondary', '', false);
|
|
echo '</form>';
|
|
|
|
global $wpdb;
|
|
$where = "INNER JOIN {$wpdb->usermeta} status ON status.user_id = u.ID AND status.meta_key = 'aksrt_user_verify_status'";
|
|
$params = [];
|
|
$sql_where = '';
|
|
if ($status !== '') {
|
|
$sql_where = ' WHERE status.meta_value = %s';
|
|
$params[] = $status;
|
|
}
|
|
|
|
$count_sql = "SELECT COUNT(DISTINCT u.ID) FROM {$wpdb->users} u {$where}{$sql_where}";
|
|
$total = $params
|
|
? (int) $wpdb->get_var($wpdb->prepare($count_sql, $params))
|
|
: (int) $wpdb->get_var($count_sql);
|
|
|
|
$sql = "SELECT u.ID, u.display_name, u.user_email, u.user_registered, status.meta_value AS verify_status,
|
|
reason.meta_value AS verify_reason
|
|
FROM {$wpdb->users} u
|
|
{$where}
|
|
LEFT JOIN {$wpdb->usermeta} reason ON reason.user_id = u.ID AND reason.meta_key = 'aksrt_user_verify_reason'
|
|
{$sql_where}
|
|
ORDER BY u.user_registered DESC
|
|
LIMIT %d OFFSET %d";
|
|
$params[] = $per_page;
|
|
$params[] = $offset;
|
|
$items = $wpdb->get_results($wpdb->prepare($sql, $params), ARRAY_A);
|
|
$pages = max(1, (int) ceil(max(1, $total) / $per_page));
|
|
|
|
echo '<table class="wp-list-table widefat fixed striped"><thead><tr>';
|
|
echo '<th>ID</th><th>' . esc_html__('用户', 'aksrt') . '</th><th>' . esc_html__('邮箱', 'aksrt') . '</th><th>' . esc_html__('状态', 'aksrt') . '</th><th>' . esc_html__('备注', 'aksrt') . '</th><th>' . esc_html__('操作', 'aksrt') . '</th>';
|
|
echo '</tr></thead><tbody>';
|
|
if (!$items) {
|
|
echo '<tr><td colspan="6">' . esc_html__('暂无认证申请', 'aksrt') . '</td></tr>';
|
|
}
|
|
foreach ((array) $items as $row) {
|
|
$uid = (int) ($row['ID'] ?? 0);
|
|
$st = (string) ($row['verify_status'] ?? '');
|
|
echo '<tr>';
|
|
echo '<td>' . esc_html((string) $uid) . '</td>';
|
|
echo '<td>' . esc_html((string) ($row['display_name'] ?? '')) . '</td>';
|
|
echo '<td>' . esc_html((string) ($row['user_email'] ?? '')) . '</td>';
|
|
echo '<td>' . esc_html($st) . '</td>';
|
|
$apply = get_user_meta($uid, 'aksrt_user_verify_apply', true);
|
|
$apply = is_array($apply) ? $apply : [];
|
|
$type_labels = [];
|
|
if (class_exists('\AKSRT\User\AuthApply')) {
|
|
foreach ((array) \AKSRT\User\AuthApply::settings()['types'] as $type) {
|
|
$type_labels[(string) ($type['slug'] ?? '')] = (string) ($type['label'] ?? '');
|
|
}
|
|
}
|
|
echo '<td>';
|
|
if ($apply) {
|
|
$type_key = sanitize_key((string) ($apply['type'] ?? ''));
|
|
echo '<strong>' . esc_html((string) ($apply['name'] ?? '')) . '</strong>';
|
|
if ($type_key !== '') {
|
|
echo '<div><span class="dashicons dashicons-id" aria-hidden="true"></span> ' . esc_html($type_labels[$type_key] ?? $type_key) . '</div>';
|
|
}
|
|
if (!empty($apply['desc'])) {
|
|
echo '<div>' . esc_html((string) $apply['desc']) . '</div>';
|
|
}
|
|
if (!empty($apply['msg'])) {
|
|
echo '<div class="description">' . esc_html((string) $apply['msg']) . '</div>';
|
|
}
|
|
foreach ((array) ($apply['img'] ?? []) as $image_url) {
|
|
echo '<a href="' . esc_url((string) $image_url) . '" target="_blank" rel="noopener noreferrer"><img src="' . esc_url((string) $image_url) . '" alt="" style="width:56px;height:56px;object-fit:cover;margin:6px 6px 0 0;border-radius:4px;" /></a>';
|
|
}
|
|
}
|
|
if (!empty($row['verify_reason'])) {
|
|
echo '<div class="description">' . esc_html((string) $row['verify_reason']) . '</div>';
|
|
}
|
|
echo '</td>';
|
|
echo '<td>';
|
|
if ($st === 'pending') {
|
|
foreach (['verified' => __('通过', 'aksrt'), 'rejected' => __('拒绝', 'aksrt')] as $action => $label) {
|
|
echo '<form method="post" action="' . esc_url(admin_url('admin-post.php')) . '" style="display:inline-block;margin-right:4px;">';
|
|
echo '<input type="hidden" name="action" value="aksrt_users_review_verify" />';
|
|
echo '<input type="hidden" name="user_id" value="' . esc_attr((string) $uid) . '" />';
|
|
echo '<input type="hidden" name="status" value="' . esc_attr($action) . '" />';
|
|
wp_nonce_field('aksrt_users_review_verify_' . $uid);
|
|
if ($action === 'rejected') {
|
|
echo '<input type="text" name="note" placeholder="' . esc_attr__('拒绝原因', 'aksrt') . '" /> ';
|
|
}
|
|
submit_button($label, 'small', '', false);
|
|
echo '</form>';
|
|
}
|
|
} else {
|
|
echo '—';
|
|
}
|
|
echo '</td></tr>';
|
|
}
|
|
echo '</tbody></table>';
|
|
$this->pagination($pages, $page_num);
|
|
echo '</div>';
|
|
}
|
|
|
|
public function handle_review_verify(): void {
|
|
if (!current_user_can(self::CAPABILITY)) {
|
|
wp_die(esc_html__('权限不足', 'aksrt'));
|
|
}
|
|
$user_id = isset($_POST['user_id']) ? (int) $_POST['user_id'] : 0;
|
|
$status = isset($_POST['status']) ? sanitize_key((string) wp_unslash($_POST['status'])) : '';
|
|
$note = isset($_POST['note']) ? sanitize_textarea_field((string) wp_unslash($_POST['note'])) : '';
|
|
check_admin_referer('aksrt_users_review_verify_' . $user_id);
|
|
|
|
$ok = false;
|
|
if ($user_id > 0 && in_array($status, ['verified', 'rejected'], true) && get_userdata($user_id)) {
|
|
update_user_meta($user_id, 'aksrt_user_verify_status', $status);
|
|
update_user_meta($user_id, 'aksrt_user_verify_reviewed_at', current_time('mysql'));
|
|
update_user_meta($user_id, 'aksrt_user_verify_reviewer', get_current_user_id());
|
|
if ($note !== '') {
|
|
update_user_meta($user_id, 'aksrt_user_verify_reason', $note);
|
|
} elseif ($status === 'verified') {
|
|
delete_user_meta($user_id, 'aksrt_user_verify_reason');
|
|
}
|
|
// Promote apply payload to public auth info when approved.
|
|
if ($status === 'verified') {
|
|
$apply = get_user_meta($user_id, 'aksrt_user_verify_apply', true);
|
|
if (is_array($apply)) {
|
|
update_user_meta($user_id, 'aksrt_user_verify_info', [
|
|
'name' => (string) ($apply['name'] ?? ''),
|
|
'desc' => (string) ($apply['desc'] ?? ''),
|
|
'type' => (string) ($apply['type'] ?? ''),
|
|
'time' => current_time('Y-m-d H:i'),
|
|
]);
|
|
}
|
|
}
|
|
$log = get_option('aksrt_verify_review_log', []);
|
|
$log = is_array($log) ? $log : [];
|
|
$log[] = [
|
|
'user_id' => $user_id,
|
|
'status' => $status,
|
|
'reason' => $note,
|
|
'reviewer' => get_current_user_id(),
|
|
'time' => current_time('mysql'),
|
|
];
|
|
update_option('aksrt_verify_review_log', array_slice($log, -500), false);
|
|
$ok = true;
|
|
}
|
|
$this->redirect('aksrt_user_auth', $ok ? 'verify_updated' : 'verify_failed', ['status' => 'pending']);
|
|
}
|
|
|
|
/* ------------------------------------------------------------------
|
|
* Ban / reports
|
|
* ----------------------------------------------------------------*/
|
|
|
|
public function render_ban_page(): void {
|
|
$this->ensure_cap();
|
|
echo '<div class="wrap"><h1>' . esc_html__('举报&禁封', 'aksrt') . '</h1>';
|
|
$this->flash();
|
|
|
|
$tab = isset($_GET['tab']) ? sanitize_key((string) wp_unslash($_GET['tab'])) : 'reports';
|
|
echo '<h2 class="nav-tab-wrapper">';
|
|
printf('<a class="nav-tab%s" href="%s">%s</a>', $tab === 'reports' ? ' nav-tab-active' : '', esc_url(admin_url('users.php?page=aksrt_user_ban&tab=reports')), esc_html__('举报', 'aksrt'));
|
|
printf('<a class="nav-tab%s" href="%s">%s</a>', $tab === 'restrictions' ? ' nav-tab-active' : '', esc_url(admin_url('users.php?page=aksrt_user_ban&tab=restrictions')), esc_html__('禁封限制', 'aksrt'));
|
|
printf('<a class="nav-tab%s" href="%s">%s</a>', $tab === 'appeals' ? ' nav-tab-active' : '', esc_url(admin_url('users.php?page=aksrt_user_ban&tab=appeals')), esc_html__('禁封申诉', 'aksrt'));
|
|
echo '</h2>';
|
|
|
|
if ($tab === 'restrictions') {
|
|
$this->render_restrictions_tab();
|
|
} elseif ($tab === 'appeals') {
|
|
$this->render_appeals_tab();
|
|
} else {
|
|
$this->render_reports_tab();
|
|
}
|
|
echo '</div>';
|
|
}
|
|
|
|
private function render_reports_tab(): void {
|
|
if (!class_exists('\AKSRT\Messages\ReportCenter')) {
|
|
echo '<div class="notice notice-error"><p>' . esc_html__('举报中心未初始化。', 'aksrt') . '</p></div>';
|
|
return;
|
|
}
|
|
$status = isset($_GET['status']) ? sanitize_key((string) wp_unslash($_GET['status'])) : 'pending';
|
|
$svc = \AKSRT\Messages\ReportCenter::get_instance();
|
|
$counts = $svc->get_status_counts();
|
|
|
|
echo '<p>' . esc_html(sprintf(
|
|
/* translators: 1 pending 2 total */
|
|
__('待处理 %1$d / 共 %2$d', 'aksrt'),
|
|
(int) ($counts['pending'] ?? 0),
|
|
(int) ($counts['total'] ?? 0)
|
|
)) . '</p>';
|
|
|
|
echo '<form method="get" style="margin:12px 0;">';
|
|
echo '<input type="hidden" name="page" value="aksrt_user_ban" /><input type="hidden" name="tab" value="reports" />';
|
|
echo '<select name="status">';
|
|
foreach (['pending' => __('待处理', 'aksrt'), 'reviewing' => __('审核中', 'aksrt'), 'resolved' => __('已处理', 'aksrt'), 'dismissed' => __('已驳回', 'aksrt'), '' => __('全部', 'aksrt')] as $key => $label) {
|
|
printf('<option value="%s"%s>%s</option>', esc_attr($key), selected($status, $key, false), esc_html($label));
|
|
}
|
|
echo '</select> ';
|
|
submit_button(__('筛选', 'aksrt'), 'secondary', '', false);
|
|
echo '</form>';
|
|
|
|
$items = $svc->get_reports(['status' => $status, 'limit' => 50, 'offset' => 0]);
|
|
echo '<table class="wp-list-table widefat fixed striped"><thead><tr>';
|
|
echo '<th>ID</th><th>' . esc_html__('举报人', 'aksrt') . '</th><th>' . esc_html__('目标', 'aksrt') . '</th><th>' . esc_html__('原因', 'aksrt') . '</th><th>' . esc_html__('状态', 'aksrt') . '</th><th>' . esc_html__('时间', 'aksrt') . '</th><th>' . esc_html__('操作', 'aksrt') . '</th>';
|
|
echo '</tr></thead><tbody>';
|
|
if (!$items) {
|
|
echo '<tr><td colspan="7">' . esc_html__('暂无举报', 'aksrt') . '</td></tr>';
|
|
}
|
|
foreach ($items as $row) {
|
|
$id = (int) ($row['id'] ?? 0);
|
|
$st = (string) ($row['status'] ?? '');
|
|
$rid = (int) ($row['reporter_id'] ?? 0);
|
|
$ru = $rid > 0 ? get_userdata($rid) : null;
|
|
echo '<tr>';
|
|
echo '<td>' . esc_html((string) $id) . '</td>';
|
|
echo '<td>' . ($ru ? esc_html($ru->display_name) : esc_html((string) $rid)) . '</td>';
|
|
echo '<td>' . esc_html((string) ($row['target_type'] ?? '') . ' #' . (string) ($row['target_id'] ?? '')) . '</td>';
|
|
echo '<td>' . esc_html((string) ($row['reason'] ?? '')) . '</td>';
|
|
echo '<td>' . esc_html($st) . '</td>';
|
|
echo '<td>' . esc_html((string) ($row['created_at'] ?? '')) . '</td>';
|
|
echo '<td><form method="post" action="' . esc_url(admin_url('admin-post.php')) . '" style="display:flex;gap:4px;align-items:center;">';
|
|
echo '<input type="hidden" name="action" value="aksrt_users_update_report" />';
|
|
echo '<input type="hidden" name="report_id" value="' . esc_attr((string) $id) . '" />';
|
|
wp_nonce_field('aksrt_users_update_report_' . $id);
|
|
echo '<select name="new_status">';
|
|
foreach (['pending', 'reviewing', 'resolved', 'dismissed'] as $key) {
|
|
printf('<option value="%s"%s>%s</option>', esc_attr($key), selected($st, $key, false), esc_html($key));
|
|
}
|
|
echo '</select>';
|
|
echo '<input type="text" name="note" placeholder="' . esc_attr__('备注', 'aksrt') . '" />';
|
|
submit_button(__('更新', 'aksrt'), 'small', '', false);
|
|
echo '</form></td></tr>';
|
|
}
|
|
echo '</tbody></table>';
|
|
}
|
|
|
|
private function render_restrictions_tab(): void {
|
|
if (!class_exists('\AKSRT\User\Restriction')) {
|
|
echo '<div class="notice notice-error"><p>' . esc_html__('限制模块未初始化。', 'aksrt') . '</p></div>';
|
|
return;
|
|
}
|
|
$svc = \AKSRT\User\Restriction::get_instance();
|
|
$stats = $svc->get_stats();
|
|
echo '<p>' . esc_html(sprintf(
|
|
/* translators: 1 total 2 active 3 banned */
|
|
__('限制记录 %1$d · 生效中 %2$d · 封禁中 %3$d', 'aksrt'),
|
|
(int) ($stats['total'] ?? 0),
|
|
(int) ($stats['active'] ?? 0),
|
|
(int) ($stats['banned'] ?? 0)
|
|
)) . '</p>';
|
|
|
|
echo '<h2>' . esc_html__('添加限制', 'aksrt') . '</h2>';
|
|
echo '<form method="post" action="' . esc_url(admin_url('admin-post.php')) . '" style="margin-bottom:20px;display:flex;gap:8px;flex-wrap:wrap;align-items:end;">';
|
|
echo '<input type="hidden" name="action" value="aksrt_users_add_restriction" />';
|
|
wp_nonce_field('aksrt_users_add_restriction');
|
|
echo '<p><label>' . esc_html__('用户 ID', 'aksrt') . '<br><input type="number" name="user_id" min="1" required /></label></p>';
|
|
echo '<p><label>' . esc_html__('类型', 'aksrt') . '<br><select name="type">';
|
|
foreach (['warn' => __('警告', 'aksrt'), 'mute' => __('禁言', 'aksrt'), 'suspend' => __('停权', 'aksrt'), 'ban' => __('封禁', 'aksrt')] as $key => $label) {
|
|
printf('<option value="%s">%s</option>', esc_attr($key), esc_html($label));
|
|
}
|
|
echo '</select></label></p>';
|
|
echo '<p><label>' . esc_html__('范围', 'aksrt') . '<br><select name="scope">';
|
|
foreach (['global' => __('全局', 'aksrt'), 'forum' => __('论坛', 'aksrt'), 'shop' => __('商城', 'aksrt'), 'comment' => __('评论', 'aksrt')] as $key => $label) {
|
|
printf('<option value="%s">%s</option>', esc_attr($key), esc_html($label));
|
|
}
|
|
echo '</select></label></p>';
|
|
echo '<p><label>' . esc_html__('原因', 'aksrt') . '<br><input type="text" name="reason" class="regular-text" required /></label></p>';
|
|
submit_button(__('添加', 'aksrt'), 'primary', '', false);
|
|
echo '</form>';
|
|
|
|
global $wpdb;
|
|
$table = class_exists('\AKSRT\Core\DBMigrator') ? \AKSRT\Core\DBMigrator::table('user_restriction') : '';
|
|
if ($table === '') {
|
|
echo '<div class="notice notice-warning"><p>' . esc_html__('限制表不可用。', 'aksrt') . '</p></div>';
|
|
return;
|
|
}
|
|
$items = $wpdb->get_results("SELECT * FROM {$table} ORDER BY id DESC LIMIT 100", ARRAY_A);
|
|
echo '<table class="wp-list-table widefat fixed striped"><thead><tr>';
|
|
echo '<th>ID</th><th>' . esc_html__('用户', 'aksrt') . '</th><th>' . esc_html__('类型', 'aksrt') . '</th><th>' . esc_html__('范围', 'aksrt') . '</th><th>' . esc_html__('原因', 'aksrt') . '</th><th>' . esc_html__('过期', 'aksrt') . '</th><th>' . esc_html__('操作', 'aksrt') . '</th>';
|
|
echo '</tr></thead><tbody>';
|
|
if (!$items) {
|
|
echo '<tr><td colspan="7">' . esc_html__('暂无限制记录', 'aksrt') . '</td></tr>';
|
|
}
|
|
foreach ((array) $items as $row) {
|
|
$id = (int) ($row['id'] ?? 0);
|
|
$user_id = (int) ($row['user_id'] ?? 0);
|
|
$user = $user_id > 0 ? get_userdata($user_id) : null;
|
|
echo '<tr>';
|
|
echo '<td>' . esc_html((string) $id) . '</td>';
|
|
echo '<td>' . ($user ? esc_html($user->display_name) : esc_html((string) $user_id)) . '</td>';
|
|
echo '<td>' . esc_html((string) ($row['type'] ?? '')) . '</td>';
|
|
echo '<td>' . esc_html((string) ($row['scope'] ?? '')) . '</td>';
|
|
echo '<td>' . esc_html((string) ($row['reason'] ?? '')) . '</td>';
|
|
echo '<td>' . esc_html((string) ($row['expires_at'] ?? '—')) . '</td>';
|
|
echo '<td><form method="post" action="' . esc_url(admin_url('admin-post.php')) . '">';
|
|
echo '<input type="hidden" name="action" value="aksrt_users_remove_restriction" />';
|
|
echo '<input type="hidden" name="restriction_id" value="' . esc_attr((string) $id) . '" />';
|
|
wp_nonce_field('aksrt_users_remove_restriction_' . $id);
|
|
submit_button(__('移除', 'aksrt'), 'small', '', false);
|
|
echo '</form></td></tr>';
|
|
}
|
|
echo '</tbody></table>';
|
|
}
|
|
|
|
public function handle_update_report(): void {
|
|
if (!current_user_can(self::CAPABILITY)) {
|
|
wp_die(esc_html__('权限不足', 'aksrt'));
|
|
}
|
|
$id = isset($_POST['report_id']) ? (int) $_POST['report_id'] : 0;
|
|
$new_status = isset($_POST['new_status']) ? sanitize_key((string) wp_unslash($_POST['new_status'])) : '';
|
|
$note = isset($_POST['note']) ? sanitize_textarea_field((string) wp_unslash($_POST['note'])) : '';
|
|
check_admin_referer('aksrt_users_update_report_' . $id);
|
|
$ok = $id > 0 && class_exists('\AKSRT\Messages\ReportCenter') && \AKSRT\Messages\ReportCenter::get_instance()->update_status($id, $new_status, $note);
|
|
$this->redirect('aksrt_user_ban', $ok ? 'report_updated' : 'report_failed', ['tab' => 'reports']);
|
|
}
|
|
|
|
public function handle_add_restriction(): void {
|
|
if (!current_user_can(self::CAPABILITY)) {
|
|
wp_die(esc_html__('权限不足', 'aksrt'));
|
|
}
|
|
check_admin_referer('aksrt_users_add_restriction');
|
|
$user_id = isset($_POST['user_id']) ? (int) $_POST['user_id'] : 0;
|
|
$type = isset($_POST['type']) ? sanitize_key((string) wp_unslash($_POST['type'])) : 'warn';
|
|
$scope = isset($_POST['scope']) ? sanitize_key((string) wp_unslash($_POST['scope'])) : 'global';
|
|
$reason = isset($_POST['reason']) ? sanitize_text_field((string) wp_unslash($_POST['reason'])) : '';
|
|
$ok = false;
|
|
if ($user_id > 0 && $reason !== '' && class_exists('\AKSRT\User\Restriction')) {
|
|
$result = \AKSRT\User\Restriction::get_instance()->restrict($user_id, $type, $reason, $scope, '', get_current_user_id());
|
|
$ok = !empty($result['id']) || !empty($result['success']) || is_array($result);
|
|
}
|
|
$this->redirect('aksrt_user_ban', $ok ? 'restriction_added' : 'restriction_failed', ['tab' => 'restrictions']);
|
|
}
|
|
|
|
public function handle_remove_restriction(): void {
|
|
if (!current_user_can(self::CAPABILITY)) {
|
|
wp_die(esc_html__('权限不足', 'aksrt'));
|
|
}
|
|
$id = isset($_POST['restriction_id']) ? (int) $_POST['restriction_id'] : 0;
|
|
check_admin_referer('aksrt_users_remove_restriction_' . $id);
|
|
$ok = $id > 0 && class_exists('\AKSRT\User\Restriction') && \AKSRT\User\Restriction::get_instance()->remove_restriction($id);
|
|
$this->redirect('aksrt_user_ban', $ok ? 'restriction_removed' : 'restriction_failed', ['tab' => 'restrictions']);
|
|
}
|
|
|
|
|
|
private function render_appeals_tab(): void {
|
|
if (!class_exists('\AKSRT\User\BanAppeal')) {
|
|
echo '<div class="notice notice-error"><p>' . esc_html__('申诉模块未初始化。', 'aksrt') . '</p></div>';
|
|
return;
|
|
}
|
|
$status = isset($_GET['status']) ? sanitize_key((string) wp_unslash($_GET['status'])) : 'pending';
|
|
if (!in_array($status, ['pending', 'approved', 'rejected', 'all'], true)) {
|
|
$status = 'pending';
|
|
}
|
|
|
|
echo '<form method="get" style="margin:12px 0;">';
|
|
echo '<input type="hidden" name="page" value="aksrt_user_ban" /><input type="hidden" name="tab" value="appeals" />';
|
|
echo '<select name="status">';
|
|
foreach (['pending' => __('待处理', 'aksrt'), 'approved' => __('已通过', 'aksrt'), 'rejected' => __('已驳回', 'aksrt'), 'all' => __('全部', 'aksrt')] as $key => $label) {
|
|
printf('<option value="%s"%s>%s</option>', esc_attr($key), selected($status, $key, false), esc_html($label));
|
|
}
|
|
echo '</select> ';
|
|
submit_button(__('筛选', 'aksrt'), 'secondary', '', false);
|
|
echo '</form>';
|
|
|
|
$users = get_users([
|
|
'meta_key' => \AKSRT\User\BanAppeal::META_STATUS,
|
|
'meta_compare' => 'EXISTS',
|
|
'number' => 100,
|
|
'fields' => ['ID', 'display_name', 'user_login', 'user_email'],
|
|
'orderby' => 'ID',
|
|
'order' => 'DESC',
|
|
]);
|
|
|
|
echo '<table class="wp-list-table widefat fixed striped"><thead><tr>';
|
|
echo '<th>UID</th><th>' . esc_html__('用户', 'aksrt') . '</th><th>' . esc_html__('状态', 'aksrt') . '</th><th>' . esc_html__('类型', 'aksrt') . '</th><th>' . esc_html__('说明', 'aksrt') . '</th><th>' . esc_html__('提交时间', 'aksrt') . '</th><th>' . esc_html__('操作', 'aksrt') . '</th>';
|
|
echo '</tr></thead><tbody>';
|
|
$shown = 0;
|
|
foreach ($users as $u) {
|
|
$uid = (int) $u->ID;
|
|
$st = \AKSRT\User\BanAppeal::get_status($uid);
|
|
if ($st === '') {
|
|
continue;
|
|
}
|
|
if ($status !== 'all' && $st !== $status) {
|
|
continue;
|
|
}
|
|
$payload = \AKSRT\User\BanAppeal::get_payload($uid);
|
|
$shown++;
|
|
echo '<tr>';
|
|
echo '<td>' . esc_html((string) $uid) . '</td>';
|
|
echo '<td>' . esc_html($u->display_name . ' (' . $u->user_login . ')') . '<br><span class="description">' . esc_html($u->user_email) . '</span></td>';
|
|
echo '<td>' . esc_html($st) . '</td>';
|
|
echo '<td>' . esc_html((string) ($payload['reason_key'] ?? '—')) . '</td>';
|
|
echo '<td>' . esc_html((string) ($payload['reason'] ?? '')) . '</td>';
|
|
echo '<td>' . esc_html((string) ($payload['time'] ?? '—')) . '</td>';
|
|
echo '<td>';
|
|
if ($st === 'pending') {
|
|
echo '<form method="post" action="' . esc_url(admin_url('admin-post.php')) . '" style="display:flex;gap:6px;flex-wrap:wrap;align-items:center;">';
|
|
echo '<input type="hidden" name="action" value="aksrt_users_process_appeal" />';
|
|
echo '<input type="hidden" name="user_id" value="' . esc_attr((string) $uid) . '" />';
|
|
wp_nonce_field('aksrt_users_process_appeal_' . $uid);
|
|
echo '<input type="text" name="note" placeholder="' . esc_attr__('处理备注', 'aksrt') . '" class="regular-text" />';
|
|
echo '<button type="submit" name="decision" value="approve" class="button button-primary">' . esc_html__('通过并解封', 'aksrt') . '</button>';
|
|
echo '<button type="submit" name="decision" value="reject" class="button">' . esc_html__('驳回', 'aksrt') . '</button>';
|
|
echo '</form>';
|
|
} else {
|
|
echo '—';
|
|
}
|
|
echo '</td></tr>';
|
|
}
|
|
if ($shown < 1) {
|
|
echo '<tr><td colspan="7">' . esc_html__('暂无申诉', 'aksrt') . '</td></tr>';
|
|
}
|
|
echo '</tbody></table>';
|
|
}
|
|
|
|
public function handle_process_appeal(): void {
|
|
if (!current_user_can(self::CAPABILITY)) {
|
|
wp_die(esc_html__('权限不足', 'aksrt'));
|
|
}
|
|
$user_id = isset($_POST['user_id']) ? (int) $_POST['user_id'] : 0;
|
|
$decision = isset($_POST['decision']) ? sanitize_key((string) wp_unslash($_POST['decision'])) : '';
|
|
$note = isset($_POST['note']) ? sanitize_textarea_field((string) wp_unslash($_POST['note'])) : '';
|
|
check_admin_referer('aksrt_users_process_appeal_' . $user_id);
|
|
|
|
if ($user_id <= 0 || !in_array($decision, ['approve', 'reject'], true) || !class_exists('\AKSRT\User\BanAppeal')) {
|
|
$this->redirect('aksrt_user_ban', 'appeal_failed', ['tab' => 'appeals']);
|
|
}
|
|
|
|
$status = $decision === 'approve' ? 'approved' : 'rejected';
|
|
update_user_meta($user_id, \AKSRT\User\BanAppeal::META_STATUS, $status);
|
|
|
|
$payload = \AKSRT\User\BanAppeal::get_payload($user_id);
|
|
$payload['admin_note'] = $note;
|
|
$payload['handled_at'] = current_time('Y-m-d H:i');
|
|
$payload['handled_by'] = get_current_user_id();
|
|
$payload['decision'] = $status;
|
|
update_user_meta($user_id, \AKSRT\User\BanAppeal::META_PAYLOAD, $payload);
|
|
|
|
$history = get_user_meta($user_id, \AKSRT\User\BanAppeal::META_HISTORY, true);
|
|
$history = is_array($history) ? $history : [];
|
|
$history[] = $payload;
|
|
update_user_meta($user_id, \AKSRT\User\BanAppeal::META_HISTORY, array_slice($history, -30));
|
|
|
|
if ($decision === 'approve' && class_exists('\AKSRT\User\Restriction')) {
|
|
global $wpdb;
|
|
$table = class_exists('\AKSRT\Core\DBMigrator') ? \AKSRT\Core\DBMigrator::table('user_restriction') : '';
|
|
if ($table !== '') {
|
|
$wpdb->query($wpdb->prepare(
|
|
"UPDATE {$table} SET status = 'lifted', expires_at = %s WHERE user_id = %d AND type IN ('ban','suspend','mute')",
|
|
current_time('mysql'),
|
|
$user_id
|
|
));
|
|
}
|
|
$svc = \AKSRT\User\Restriction::get_instance();
|
|
if (method_exists($svc, 'clear_user_bans')) {
|
|
$svc->clear_user_bans($user_id);
|
|
} elseif (method_exists($svc, 'lift_ban')) {
|
|
$svc->lift_ban($user_id);
|
|
}
|
|
}
|
|
|
|
if (class_exists('\AKSRT\Messages\Message')) {
|
|
$msg = $decision === 'approve'
|
|
? __('你的禁封申诉已通过，限制已解除。', 'aksrt')
|
|
: __('你的禁封申诉未通过，可修改后重新提交。', 'aksrt');
|
|
if ($note !== '') {
|
|
$msg .= ' ' . sprintf(__('备注：%s', 'aksrt'), $note);
|
|
}
|
|
\AKSRT\Messages\Message::get_instance()->send(
|
|
$user_id,
|
|
'ban_appeal',
|
|
$msg,
|
|
[
|
|
'title' => $decision === 'approve' ? __('申诉通过', 'aksrt') : __('申诉驳回', 'aksrt'),
|
|
]
|
|
);
|
|
}
|
|
|
|
do_action('aksrt_ban_appeal_processed', $user_id, $decision, $note);
|
|
|
|
$this->redirect(
|
|
'aksrt_user_ban',
|
|
$decision === 'approve' ? 'appeal_approved' : 'appeal_rejected',
|
|
['tab' => 'appeals']
|
|
);
|
|
}
|
|
|
|
private function pagination(int $pages, int $page_num): void {
|
|
if ($pages <= 1) {
|
|
return;
|
|
}
|
|
echo '<div class="tablenav"><div class="tablenav-pages">';
|
|
echo paginate_links([
|
|
'base' => add_query_arg('paged', '%#%'),
|
|
'format' => '',
|
|
'prev_text' => '«',
|
|
'next_text' => '»',
|
|
'total' => $pages,
|
|
'current' => $page_num,
|
|
]);
|
|
echo '</div></div>';
|
|
}
|
|
}
|