PHP uni_user_permission_check函數代碼示例

<?php

/**
 * [Weizan System] Copyright (c) 2014 012WZ.COM
 * Weizan is NOT a free software, it under the license terms, visited http://www.012wz.com/ for more details.
 */
defined('IN_IA') or exit('Access Denied');
uni_user_permission_check('wechat_manage');
$dos = array('display', 'location_post', 'logo', 'location_list', 'location_view', 'location_del', 'whitelist', 'location_edit', 'export', 'location_sync');
$do = in_array($do, $dos) ? $do : 'logo';
$acid = $_W['acid'];
if ($do == 'logo') {
    $coupon_setting = pdo_fetch('SELECT * FROM ' . tablename('coupon_setting') . ' WHERE uniacid = :aid AND acid = :acid', array(':aid' => $_W['uniacid'], ':acid' => $acid));
    if (checksubmit('submit')) {
        $_GPC['logo'] = trim($_GPC['logo']);
        empty($_GPC['logo']) && message('請上傳商戶logo', referer(), 'info');
        $data = array('uniacid' => $_W['uniacid'], 'acid' => $acid, 'logourl' => $_GPC['logo']);
        if (empty($coupon_setting)) {
            pdo_insert('coupon_setting', $data);
        } else {
            pdo_update('coupon_setting', $data, array('uniacid' => $_W['uniacid']));
        }
        message('上傳商戶LOGO成功', referer(), 'success');
    }
}
if ($do == 'location_post') {
    if (checksubmit('submit')) {
        $data['business_name'] = trim($_GPC['business_name']) ? urlencode(trim($_GPC['business_name'])) : message('門店名稱不能為空');
        $data['branch_name'] = urlencode(trim($_GPC['branch_name']));
        $cate = array();
        $in_cate = array();

<?php

/**
 * [Weizan System] Copyright (c) 2014 012WZ.COM
 * Weizan is NOT a free software, it under the license terms, visited http://www.012wz.com/ for more details.
 */
defined('IN_IA') or exit('Access Denied');
uni_user_permission_check('mc_member');
$dos = array('display', 'post', 'del', 'add', 'group');
$do = in_array($do, $dos) ? $do : 'display';
load()->model('mc');
if ($do == 'display') {
    $_W['page']['title'] = '會員列表 - 會員 - 會員中心';
    $groups = mc_groups();
    $pindex = max(1, intval($_GPC['page']));
    $psize = 50;
    $condition = '';
    $starttime = empty($_GPC['createtime']['start']) ? strtotime('-90 days') : strtotime($_GPC['createtime']['start']);
    $endtime = empty($_GPC['createtime']['end']) ? TIMESTAMP + 86399 : strtotime($_GPC['createtime']['end']) + 86399;
    $condition .= " AND createtime >= {$starttime} AND createtime <= {$endtime}";
    $condition .= empty($_GPC['username']) ? '' : " AND (( `realname` LIKE '%" . trim($_GPC['username']) . "%' ) OR ( `nickname` LIKE '%" . trim($_GPC['username']) . "%' ) OR ( `mobile` LIKE '%" . trim($_GPC['username']) . "%' )) ";
    $condition .= intval($_GPC['groupid']) > 0 ? " AND `groupid` = '" . intval($_GPC['groupid']) . "'" : '';
    if (checksubmit('export_submit', true)) {
        $sql = "SELECT uid, uniacid, groupid, realname, nickname, email, mobile, credit1, credit2, credit6, createtime  FROM " . tablename('mc_members') . " WHERE uniacid = '{$_W['uniacid']}' " . $condition . " ORDER BY createtime";
        $list = pdo_fetchall($sql);
        $header = array('uid' => 'UID', 'realname' => '姓名', 'groupid' => '會員組', 'mobile' => '手機', 'email' => '郵箱', 'credit1' => '積分', 'credit2' => '餘額', 'createtime' => '注冊時間');
        $keys = array_keys($header);
        $html = "";
        foreach ($header as $li) {
            $html .= $li . "\t ,";
        }

<?php

/**
 * [WeEngine System] Copyright (c) 2014 WE7.CC
 * WeEngine is NOT a free software, it under the license terms, visited http://www.we7.cc/ for more details.
 */
defined('IN_IA') or exit('Access Denied');
uni_user_permission_check('platform_special');
$dos = array('display', 'set', 'cancel', 'message', 'search_key');
$do = !empty($_GPC['do']) && in_array($do, $dos) ? $do : 'display';
load()->model('reply');
load()->model('account');
$_W['account']['modules'] = uni_modules();
if ($_W['isajax']) {
    if ($do == 'search_key') {
        $condition = '';
        $key_word = trim($_GPC['key_word']);
        if (!empty($key_word)) {
            $condition = " AND content LIKE '%{$key_word}%' ";
        }
        $data = pdo_fetchall('SELECT content FROM ' . tablename('rule_keyword') . " WHERE (uniacid = 0 OR uniacid = :uniacid) AND status != 0 " . $condition . ' ORDER BY uniacid DESC,displayorder DESC LIMIT 100', array(':uniacid' => $_W['uniacid']));
        $exit_da = array();
        if (!empty($data)) {
            foreach ($data as $da) {
                $exit_da[] = $da['content'];
            }
        }
        exit(json_encode($exit_da));
    }
    exit('error');
}

<?php

/**
 * [WEIZAN System] Copyright (c) 2015 012WZ.COM
 * WeiZan is NOT a free software, it under the license terms, visited http://www.012wz.com/ for more details.
 */
defined('IN_IA') or exit('Access Denied');
$_W['page']['title'] = '常用接入服務 - 常用接入服務 - 高級功能';
uni_user_permission_check('platform_service');
load()->model('module');
load()->model('reply');
$m = module_fetch('userapi');
$cfg = $m['config'];
$ds = reply_search("`uniacid` = 0 AND module = 'userapi' AND `status`=1");
$apis = array();
foreach ($ds as $row) {
    $apis[$row['id']] = $row;
}
if ($_W['ispost'] && $_W['isajax']) {
    $rids = explode(',', $_GPC['rids']);
    if (is_array($rids)) {
        $cfg = array();
        foreach ($rids as $rid) {
            if (!empty($apis[$rid])) {
                $cfg[intval($rid)] = true;
            }
        }
        $module = WeUtility::createModule('userapi');
        $module->saveSettings($cfg);
    }
    exit;

<?php

/**
 * [WeEngine System] Copyright (c) 2014 WE7.CC
 * WeEngine is NOT a free software, it under the license terms, visited http://www.we7.cc/ for more details.
 */
defined('IN_IA') or exit('Access Denied');
$dos = array('display', 'setting', 'shortcut', 'enable', 'form');
$do = !empty($_GPC['do']) ? $_GPC['do'] : 'display';
if ($do != 'setting') {
    uni_user_permission_check('profile_module');
}
$modulelist = uni_modules(false);
if (empty($modulelist)) {
    message('沒有可用功能.');
}
if ($do == 'display') {
    $_W['page']['title'] = '模塊列表 - 公眾號選項';
    $setting = uni_setting($_W['uniacid'], array('shortcuts'));
    $shortcuts = $setting['shortcuts'];
    if (!empty($modulelist)) {
        foreach ($modulelist as $i => &$module) {
            if (!empty($_W['setting']['permurls']['modules']) && !in_array($module['name'], $_W['setting']['permurls']['modules'])) {
                unset($modulelist[$i]);
                continue;
            }
            $module['shortcut'] = !empty($shortcuts[$module['name']]);
            $module['official'] = empty($module['issystem']) && (strexists($module['author'], 'WeEngine Team') || strexists($module['author'], '微擎團隊'));
            if ($module['issystem']) {
                $path = '../framework/builtin/' . $module['name'];
            } else {

<?php

/**
 * [WeEngine System] Copyright (c) 2014 WE7.CC
 * WeEngine is NOT a free software, it under the license terms, visited http://www.we7.cc/ for more details.
 */
defined('IN_IA') or exit('Access Denied');
uni_user_permission_check('mc_material_display');
$_W['page']['title'] = '永久素材-微信素材';
$dos = array('image', 'del', 'export', 'news', 'down', 'list', 'purview', 'modal', 'send');
$do = in_array($do, $dos) ? $do : 'list';
if ($do == 'down') {
    load()->func('file');
    set_time_limit(0);
    $acc = WeAccount::create();
    if (is_error($acc)) {
        message($acc, '', 'ajax');
    }
    $post = $_GPC['__input'];
    $type = $types = $post['type'];
    $pindex = max(1, intval($post['page']));
    $psize = 15;
    $offset = ($pindex - 1) * $psize;
    $result = $acc->batchGetMaterial($type, $offset, $psize);
    if (is_error($result)) {
        message($result, '', 'ajax');
    }
    if ($result['item_count'] == 0 || count($result['data']) == 0) {
        message(error(-2, $result['total_count']), '', 'ajax');
    }
    $fail = array();

<?php

/**
 * [WeEngine System] Copyright (c) 2014 WE7.CC
 * WeEngine is NOT a free software, it under the license terms, visited http://www.we7.cc/ for more details.
 */
defined('IN_IA') or exit('Access Denied');
uni_user_permission_check('mc_tplnotice');
$_W['page']['title'] = '會員微信通知-會員中心';
$dos = array('set');
$do = in_array($do, $dos) ? $do : 'set';
if ($do == 'set') {
    if (checksubmit()) {
        $data = array('type' => trim($_GPC['type']), 'recharge' => trim($_GPC['recharge']), 'credit1' => trim($_GPC['credit1']), 'credit2' => trim($_GPC['credit2']), 'group' => trim($_GPC['group']), 'nums_plus' => trim($_GPC['nums_plus']), 'nums_times' => trim($_GPC['nums_times']), 'times_plus' => trim($_GPC['times_plus']), 'times_times' => trim($_GPC['times_times']));
        $data = iserializer($data);
        pdo_update('uni_settings', array('tplnotice' => $data), array('uniacid' => $_W['uniacid']));
        message('設置通知模板成功', referer(), 'success');
    }
    $setting = uni_setting($_W['uniacid'], '*', true);
    $tpl = $setting['tplnotice'];
    if (!is_array($tpl)) {
        $tpl = array();
    }
    template('mc/tplnotice');
}

<?php

/**
 * [WeEngine System] Copyright (c) 2014 WE7.CC
 * WeEngine is NOT a free software, it under the license terms, visited http://www.we7.cc/ for more details.
 */
defined('IN_IA') or exit('Access Denied');
uni_user_permission_check('mc_trade');
$_W['page']['title'] = '會員交易-會員管理';
$dos = array('consume', 'user', 'modal', 'clerk', 'credit', 'card', 'cardsn', 'tpl');
$do = in_array($do, $dos) ? $do : 'tpl';
load()->model('mc');
if ($do == 'clerk') {
    $clerk = pdo_get('activity_coupon_password', array('uniacid' => $_W['uniacid'], 'password' => trim($_GPC['password'])));
    if (empty($clerk)) {
        exit(json_encode(array('valid' => false)));
    } else {
        exit(json_encode(array('valid' => true)));
    }
}
if ($do == 'user') {
    $type = trim($_GPC['type']);
    if (!in_array($type, array('uid', 'mobile'))) {
        $type = 'mobile';
    }
    $username = trim($_GPC['username']);
    $data = pdo_getall('mc_members', array('uniacid' => $_W['uniacid'], $type => $username));
    if (empty($data)) {
        exit(json_encode(array('error' => 'empty', 'message' => '沒有找到對應用戶')));
    } elseif (count($data) > 1) {
        exit(json_encode(array('error' => 'not-unique', 'message' => '用戶不唯一,請重新輸入用戶信息')));

<?php

/**
 * [WeEngine System] Copyright (c) 2014 WE7.CC
 * WeEngine is NOT a free software, it under the license terms, visited http://www.we7.cc/ for more details.
 */
defined('IN_IA') or exit('Access Denied');
$type = $do;
$do = $_GPC['foo'];
$m = $_GPC['m'];
uni_user_permission_check('platform_nav_' . $do, true, 'nav');
$dos = array('post', 'delete', 'saves', 'display');
$do = in_array($do, $dos) ? $do : 'display';
$types = array('home' => array('name' => 'home', 'title' => '首頁', 'visiable' => true, 'position' => 1), 'profile' => array('name' => 'profile', 'title' => '個人中心', 'visiable' => true, 'position' => 2));
$type = array_key_exists($type, $types) ? $types[$type] : $types['home'];
$titles = array('home' => '微站首頁導航圖標', 'profile' => '個人中心功能條目');
$_W['page']['title'] = $titles[$type['name']];
$setting = uni_setting($_W['uniacid'], 'default_site');
$default_site = intval($setting['default_site']);
load()->model('module');
$modules = uni_modules();
if (!empty($m)) {
    $module = module_fetch($m);
    if (empty($module)) {
        message('訪問錯誤.');
    }
}
if ($do != 'display') {
    define('FRAME', 'site');
    $frames = buildframes(array(FRAME));
    $frames = $frames[FRAME];

<?php

/**
 * [WEIZAN System] Copyright (c) 2015 012WZ.COM
 * WeiZan is NOT a free software, it under the license terms, visited http://www.012wz.com/ for more details.
 */
defined('IN_IA') or exit('Access Denied');
uni_user_permission_check('profile_payment');
$_W['page']['title'] = '支付參數 - 公眾號選項';
$setting = uni_setting($_W['uniacid'], array('payment', 'recharge'));
$pay = $setting['payment'];
$recharge = $setting['recharge'];
if (!is_array($pay)) {
    $pay = array();
}
if ($_W['ispost']) {
    $credit = array_elements(array('switch'), $_GPC['credit']);
    $credit['switch'] = $credit['switch'] == 'true';
    $card = array_elements(array('switch'), $_GPC['card']);
    $card['switch'] = intval($card['switch']);
    $alipay = array_elements(array('switch', 'account', 'partner', 'secret'), $_GPC['alipay']);
    $alipay['switch'] = $alipay['switch'] == 'true';
    $alipay['account'] = trim($alipay['account']);
    $alipay['partner'] = trim($alipay['partner']);
    $alipay['secret'] = trim($alipay['secret']);
    $delivery = array_elements(array('switch'), $_GPC['delivery']);
    $delivery['switch'] = $delivery['switch'] == 'true';
    $line = array_elements(array('switch'), $_GPC['line']);
    $line['switch'] = $line['switch'] == 'true';
    if ($alipay['switch'] && (empty($alipay['account']) || empty($alipay['partner']) || empty($alipay['secret']))) {
        message('請輸入完整的支付寶接口信息.');

<?php

/**
 * [WEIZAN System] Copyright (c) 2015 012WZ.COM
 * WeiZan is NOT a free software, it under the license terms, visited http://www.012wz.com/ for more details.
 */
load()->model('reply');
load()->model('module');
$dos = array('display', 'post', 'delete');
$do = in_array($do, $dos) ? $do : 'display';
$m = $_GPC['m'];
if (empty($m)) {
    message('錯誤訪問.');
}
uni_user_permission_check('platform_reply_' . $m, true, 'reply');
$module = module_fetch($m);
if (empty($module) || empty($module['isrulefields'])) {
    message('訪問無權限.');
}
if (!in_array($m, $sysmods)) {
    define('FRAME', 'ext');
    $types = module_types();
    define('ACTIVE_FRAME_URL', url('home/welcome/ext', array('m' => $m)));
    $frames = buildframes(array(FRAME), $m);
    $frames = $frames[FRAME];
}
$_W['page']['title'] = $module['title'];
load()->model('extension');
if (ext_module_checkupdate($module['name'])) {
    message('係統檢測到該模塊有更新，請點擊“<a href="' . url('extension/module/upgrade', array('m' => $m)) . '">更新模塊</a>”後繼續使用！', '', 'error');
}

<?php

/**
 * [Weizan System] Copyright (c) 2014 012WZ.COM
 * Weizan is NOT a free software, it under the license terms, visited http://www.012wz.com/ for more details.
 */
defined('IN_IA') or exit('Access Denied');
uni_user_permission_check('activity_offline');
$dos = array('introduce', 'clerk', 'post', 'del', 'edit', 'verify');
$do = in_array($do, $dos) ? $do : 'introduce';
$_W['page']['title'] = '功能說明 - 門店營銷參數 - 會員營銷';
if ($do == 'introduce') {
    template('activity/offline');
    exit;
}
if ($do == 'clerk') {
    $pindex = max(1, intval($_GPC['page']));
    $psize = 30;
    $limit = 'ORDER BY id DESC LIMIT ' . ($pindex - 1) * $psize . ", {$psize}";
    $total = pdo_fetchcolumn("SELECT COUNT(*) FROM " . tablename('activity_coupon_password') . " WHERE uniacid = :uniacid ", array(':uniacid' => $_W['uniacid']));
    $list = pdo_fetchall("SELECT * FROM " . tablename('activity_coupon_password') . " WHERE uniacid = :uniacid {$limit}", array(':uniacid' => $_W['uniacid']));
    $pager = pagination($total, $pindex, $psize);
    $stores = pdo_getall('activity_stores', array('uniacid' => $_W['uniacid']), array('id', 'business_name', 'branch_name'), 'id');
}
if ($do == 'edit') {
    $id = intval($_GPC['id']);
    if ($id > 0) {
        $sql = 'SELECT * FROM ' . tablename('activity_coupon_password') . " WHERE id = :id AND uniacid = :uniacid";
        $clerk = pdo_fetch($sql, array(':id' => $id, ':uniacid' => $_W['uniacid']));
        if (empty($clerk)) {
            message('店員不存在', referer(), 'error');

                        $accounts[$account['acid']] = $account['name'];
                    }
                }
            }
        }
    }
    $oauth = pdo_fetchcolumn('SELECT `oauth` FROM ' . tablename('uni_settings') . ' WHERE `uniacid` = :uniacid LIMIT 1', array(':uniacid' => $_W['uniacid']));
    $oauth = iunserializer($oauth) ? iunserializer($oauth) : array();
    if (checksubmit('submit')) {
        $host = rtrim($_GPC['host'], '/');
        if (!empty($host) && !preg_match('/^http(s)?:\\/\\//', $host)) {
            $host = 'http://' . $host;
        }
        $data = array('host' => $host, 'account' => intval($_GPC['oauth']));
        pdo_update('uni_settings', array('oauth' => iserializer($data)), array('uniacid' => $_W['uniacid']));
        cache_delete("unisetting:{$_W['uniacid']}");
        message('設置公眾平台oAuth成功', referer(), 'success');
    }
}
if ($do == 'sync') {
    uni_user_permission_check('mc_passport_sync');
    $_W['page']['title'] = '更新粉絲信息 - 公眾號選項';
    $setting = uni_setting($_W['uniacid'], array('sync'));
    $sync = $setting['sync'];
    if (checksubmit('submit')) {
        pdo_update('uni_settings', array('sync' => intval($_GPC['sync'])), array('uniacid' => $_W['uniacid']));
        cache_delete("unisetting:{$_W['uniacid']}");
        message('更新設置成功', referer(), 'success');
    }
}
template('mc/passport');

<?php

/**
 * [WeEngine System] Copyright (c) 2014 WE7.CC
 * WeEngine is NOT a free software, it under the license terms, visited http://www.we7.cc/ for more details.
 */
defined('IN_IA') or exit('Access Denied');
uni_user_permission_check('profile_notify');
$row = pdo_fetchcolumn("SELECT `notify` FROM " . tablename('uni_settings') . " WHERE uniacid = :uniacid", array(':uniacid' => $_W['uniacid']));
$notify = iunserializer($row);
if (!is_array($notify)) {
    $notify['sms'] = array();
    $notify['sms']['balance'] = 0;
    $notify['sms']['signature'] = '係統默認';
    $notify['mail'] = array();
}
$dos = array('mail', 'sms', 'wechat');
$do = in_array($do, $dos) ? $do : 'mail';
$_W['page']['title'] = 'APP通知 - 通知參數 - 通知中心';
if ($do == 'mail') {
    $_W['page']['title'] = '郵件通知 - 通知參數 - 通知中心';
    if (checksubmit('submit')) {
        $notify['mail'] = array('username' => $_GPC['username'], 'password' => $_GPC['password'], 'smtp' => $_GPC['smtp'], 'sender' => $_GPC['sender'], 'signature' => $_GPC['signature']);
        $row = array();
        $row['notify'] = iserializer($notify);
        pdo_update('uni_settings', $row, array('uniacid' => $_W['uniacid']));
        if (!empty($_GPC['testsend']) && !empty($_GPC['receiver'])) {
            load()->func('communication');
            $result = ihttp_email($_GPC['receiver'], $_W['account']['name'] . '驗證郵件' . date('Y-m-d H:i:s'), '如果您收到這封郵件則表示您係統的發送郵件配置成功！');
            if (is_error($result)) {
                message($result['message']);

    uni_user_permission_check('site_editor_page');
    $page = max(1, intval($_GPC['page']));
    $pagesize = 20;
    $list = pdo_fetchall("SELECT * FROM " . tablename('site_page') . " WHERE type = '1' AND uniacid = :uniacid LIMIT " . ($page - 1) * $pagesize . ',' . $pagesize, array(':uniacid' => $_W['uniacid']));
    if (!empty($list)) {
        foreach ($list as &$row) {
            $row['params'] = json_decode($row['params'], true);
        }
        unset($row);
    }
    $total = pdo_fetchcolumn("SELECT COUNT(*) FROM " . tablename('site_page') . " WHERE type = '1'");
    $pager = pagination($total, $page, $pagesize);
    template('site/editor');
} elseif ($do == 'uc') {
    $_W['page']['title'] = '會員中心 - 微站功能';
    uni_user_permission_check('site_editor_uc');
    if (!empty($_GPC['wapeditor'])) {
        $params = $_GPC['wapeditor']['params'];
        if (empty($params)) {
            message('請您先設計手機端頁麵.', '', 'error');
        }
        $params = json_decode(html_entity_decode(urldecode($params)), true);
        if (empty($params)) {
            message('請您先設計手機端頁麵.', '', 'error');
        }
        $page = $params[0];
        $html = htmlspecialchars_decode($_GPC['wapeditor']['html'], ENT_QUOTES);
        $data = array('uniacid' => $_W['uniacid'], 'multiid' => '0', 'title' => $page['params']['title'], 'description' => $page['params']['description'], 'type' => 3, 'status' => 1, 'params' => json_encode($params), 'html' => $html, 'createtime' => TIMESTAMP);
        $id = pdo_fetchcolumn("SELECT id FROM " . tablename('site_page') . " WHERE uniacid = :uniacid AND type = '3'", array(':uniacid' => $_W['uniacid']));
        if (empty($id)) {
            pdo_insert('site_page', $data);