diff --git a/CHANGELOG.md b/CHANGELOG.md index 90eadbb7..23e7c7ce 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,3 +1,15 @@ +### [v1.4.7](https://gitee.com/koogua/course-tencent-cloud/releases/v1.4.7)(2021-10-28) + +- 更新README.md +- 优化分页查询参数过滤 +- 优化后台学员添加和搜索 +- 优化后台学员课程过期管理 +- 增加编辑会员特权功能 +- 增加清空用户头像功能 +- 增加编辑器内站外图片自动保存到本地 +- 增加CSRF放行白名单 +- 完善订单|交易|退款序号 + ### [v1.4.6](https://gitee.com/koogua/course-tencent-cloud/releases/v1.4.6)(2021-10-18) - 完善首页文章缓存的获取条件 diff --git a/README.md b/README.md index 16c93aba..dda2a478 100644 --- a/README.md +++ b/README.md @@ -1,16 +1,15 @@ ## 酷瓜云课堂 -![酷瓜云网课GPL协议开源](https://images.gitee.com/uploads/images/2021/0520/091646_a94e4e7c_23592.png) +![酷瓜云网课GPL协议开源](https://portal-1255691183.file.myqcloud.com/img/content/60e7aea40966f.png) -### 项目介绍 +### 系统介绍 酷瓜云课堂，依托腾讯云基础服务架构，采用C扩展框架Phalcon开发，GPL-2.0开源协议，致力开源网课系统，开源网校系统，开源知识付费系统，开源在线教育系统。 -[![Gitee star](https://gitee.com/koogua/course-tencent-cloud/badge/star.svg?theme=gitee)](https://gitee.com/koogua/course-tencent-cloud) -[![Gitee fork](https://gitee.com/koogua/course-tencent-cloud/badge/fork.svg?theme=gitee)](https://gitee.com/koogua/course-tencent-cloud) -[![Github stars](https://img.shields.io/github/stars/xiaochong0302/course-tencent-cloud?logo=github)](https://github.com/xiaochong0302/course-tencent-cloud) -[![Github forks](https://img.shields.io/github/forks/xiaochong0302/course-tencent-cloud?logo=github)](https://github.com/xiaochong0302/course-tencent-cloud) -![GPL-2.0](https://img.shields.io/static/v1?label=license&message=GPL-2.0&color=blue) +![star](https://svg.hamm.cn/gitee.svg?user=koogua&project=course-tencent-cloud&type=star) +![fork](https://svg.hamm.cn/gitee.svg?user=koogua&project=course-tencent-cloud&type=fork) +![license](https://svg.hamm.cn/gitee.svg?user=koogua&project=course-tencent-cloud&type=license) +![release](https://svg.hamm.cn/gitee.svg?user=koogua&project=course-tencent-cloud&type=release) ### 系统功能 @@ -31,13 +30,13 @@ H5手机端演示： -![H5二维码](https://images.gitee.com/uploads/images/2021/1011/091358_05e79898_23592.png) +![H5二维码](https://portal-1255691183.file.myqcloud.com/img/content/616fc238895b7.png) 演示账号：13507083515 / 123456 微信公众号演示： -![公众号二维码](https://images.gitee.com/uploads/images/2021/1011/090813_3b88ecc3_23592.jpeg) +![公众号二维码](https://portal-1255691183.file.myqcloud.com/img/content/616f998270eca.png) 演示账号：13507083515 / 123456 @@ -79,16 +78,3 @@ Tips: 请用手机注册一个新账号，用户中心 -> 关注订阅，扫码 - [码云平台](https://gitee.com/koogua/course-tencent-cloud/issues) - [官方社区](https://koogua.com/community) - QQ交流群: 787363898 - -### 有阿里云版吗？ - -阿里云版规划中，之前阿里云服务过期未续费，所以腾讯云版本先出。 - -### 代码有加密吗？ - -所有代码都公开（授权代码除外，例如layim），没有所谓的商业版和付费插件。 - -### 开源助力 - -毫无保留的真开源不容易，不要吝啬您的赞许和鼓励，请给我们 **STAR** ！！！ - diff --git a/app/Http/Admin/Controllers/StudentController.php b/app/Http/Admin/Controllers/StudentController.php index c8470500..b846002f 100644 --- a/app/Http/Admin/Controllers/StudentController.php +++ b/app/Http/Admin/Controllers/StudentController.php @@ -24,7 +24,10 @@ class StudentController extends Controller $sourceTypes = $studentService->getSourceTypes(); + $xmCourses = $studentService->getXmCourses('all'); + $this->view->setVar('source_types', $sourceTypes); + $this->view->setVar('xm_courses', $xmCourses); } /** @@ -53,17 +56,11 @@ class StudentController extends Controller */ public function addAction() { - $courseId = $this->request->getQuery('course_id', 'int', 0); - $studentService = new StudentService(); - $course = null; + $xmCourses = $studentService->getXmCourses('charge'); - if ($courseId > 0) { - $course = $studentService->getCourse($courseId); - } - - $this->view->setVar('course', $course); + $this->view->setVar('xm_courses', $xmCourses); } /** diff --git a/app/Http/Admin/Controllers/UploadController.php b/app/Http/Admin/Controllers/UploadController.php index 57eda34b..268ec1a7 100644 --- a/app/Http/Admin/Controllers/UploadController.php +++ b/app/Http/Admin/Controllers/UploadController.php @@ -9,6 +9,7 @@ namespace App\Http\Admin\Controllers; use App\Services\MyStorage as StorageService; use App\Services\Vod as VodService; +use App\Validators\Validator as AppValidator; /** * @RoutePrefix("/admin/upload") @@ -16,6 +17,15 @@ use App\Services\Vod as VodService; class UploadController extends Controller { + public function initialize() + { + $authUser = $this->getAuthUser(); + + $validator = new AppValidator(); + + $validator->checkAuthUser($authUser->id); + } + /** * @Post("/icon/img", name="admin.upload.icon_img") */ @@ -100,6 +110,34 @@ class UploadController extends Controller return $this->jsonSuccess(['data' => $data]); } + /** + * @Post("/remote/img", name="admin.upload.remote_img") + */ + public function uploadRemoteImageAction() + { + $originalUrl = $this->request->getPost('url', ['trim', 'string']); + + $service = new StorageService(); + + $file = $service->uploadRemoteImage($originalUrl); + + $newUrl = $originalUrl; + + if ($file) { + $newUrl = $service->getImageUrl($file->path); + } + + /** + * 编辑器要求返回的数据结构 + */ + $data = [ + 'url' => $newUrl, + 'originalURL' => $originalUrl, + ]; + + return $this->jsonSuccess(['data' => $data]); + } + /** * @Post("/default/img", name="admin.upload.default_img") */ diff --git a/app/Http/Admin/Controllers/UserController.php b/app/Http/Admin/Controllers/UserController.php index 7877b6bf..f14b6e4c 100644 --- a/app/Http/Admin/Controllers/UserController.php +++ b/app/Http/Admin/Controllers/UserController.php @@ -90,6 +90,8 @@ class UserController extends Controller $account = $userService->getAccount($id); $adminRoles = $userService->getAdminRoles(); + $defaultAvatar = kg_cos_user_avatar_url(null); + if ($user->admin_role == RoleModel::ROLE_ROOT) { return $this->response->redirect(['for' => 'admin.user.list']); } @@ -97,6 +99,7 @@ class UserController extends Controller $this->view->setVar('user', $user); $this->view->setVar('account', $account); $this->view->setVar('admin_roles', $adminRoles); + $this->view->setVar('default_avatar', $defaultAvatar); } /** diff --git a/app/Http/Admin/Services/Course.php b/app/Http/Admin/Services/Course.php index 4c53af65..0cbf5d44 100644 --- a/app/Http/Admin/Services/Course.php +++ b/app/Http/Admin/Services/Course.php @@ -389,7 +389,10 @@ class Course extends Service } } - $items = $courseRepo->findAll(['published' => 1]); + $items = $courseRepo->findAll([ + 'published' => 1, + 'deleted' => 0, + ]); if ($items->count() == 0) return []; @@ -397,7 +400,7 @@ class Course extends Service foreach ($items as $item) { $result[] = [ - 'name' => sprintf('%s（¥%0.2f）', $item->title, $item->market_price), + 'name' => sprintf('%s - %s（¥%0.2f）', $item->id, $item->title, $item->market_price), 'value' => $item->id, 'selected' => in_array($item->id, $courseIds), ]; diff --git a/app/Http/Admin/Services/Package.php b/app/Http/Admin/Services/Package.php index e8ce12c4..adf44462 100644 --- a/app/Http/Admin/Services/Package.php +++ b/app/Http/Admin/Services/Package.php @@ -51,6 +51,7 @@ class Package extends Service 'model' => $model, 'free' => 0, 'published' => 1, + 'deleted' => 0, ]); if ($items->count() == 0) return []; @@ -59,7 +60,7 @@ class Package extends Service foreach ($items as $item) { $result[] = [ - 'name' => sprintf('%s（¥%0.2f）', $item->title, $item->market_price), + 'name' => sprintf('%s - %s（¥%0.2f）', $item->id, $item->title, $item->market_price), 'value' => $item->id, 'selected' => in_array($item->id, $courseIds), ]; diff --git a/app/Http/Admin/Services/Student.php b/app/Http/Admin/Services/Student.php index 7c80e3bb..a89fcc4c 100644 --- a/app/Http/Admin/Services/Student.php +++ b/app/Http/Admin/Services/Student.php @@ -24,6 +24,38 @@ use App\Validators\CourseUser as CourseUserValidator; class Student extends Service { + public function getXmCourses($scope = 'all') + { + $courseRepo = new CourseRepo(); + + $where = [ + 'published' => 1, + 'deleted' => 0, + ]; + + /** + * 过滤付费课程 + */ + if ($scope == 'charge') { + $where['free'] = 0; + } + + $items = $courseRepo->findAll($where); + + if ($items->count() == 0) return []; + + $result = []; + + foreach ($items as $item) { + $result[] = [ + 'name' => sprintf('%s - %s（¥%0.2f）', $item->id, $item->title, $item->market_price), + 'value' => $item->id, + ]; + } + + return $result; + } + public function getSourceTypes() { return CourseUserModel::sourceTypes(); @@ -51,6 +83,18 @@ class Student extends Service $params['role_type'] = CourseUserModel::ROLE_STUDENT; + $validator = new CourseUserValidator(); + + if (!empty($params['xm_course_id'])) { + $course = $validator->checkCourse($params['xm_course_id']); + $params['course_id'] = $course->id; + } + + if (!empty($params['xm_user_id'])) { + $user = $validator->checkUser($params['xm_user_id']); + $params['user_id'] = $user->id; + } + $sort = $pagerQuery->getSort(); $page = $pagerQuery->getPage(); $limit = $pagerQuery->getLimit(); @@ -95,15 +139,15 @@ class Student extends Service 'source_type' => CourseUserModel::SOURCE_IMPORT, ]; - $course = $validator->checkCourse($post['course_id']); - $user = $validator->checkUser($post['user_id']); + $course = $validator->checkCourse($post['xm_course_id']); + $user = $validator->checkUser($post['xm_user_id']); $expiryTime = $validator->checkExpiryTime($post['expiry_time']); $data['course_id'] = $course->id; $data['user_id'] = $user->id; $data['expiry_time'] = $expiryTime; - $validator->checkIfImported($post['course_id'], $post['user_id']); + $validator->checkIfImported($course->id, $user->id); $courseUser = new CourseUserModel(); diff --git a/app/Http/Admin/Services/Topic.php b/app/Http/Admin/Services/Topic.php index a299cb4c..5b336cb7 100644 --- a/app/Http/Admin/Services/Topic.php +++ b/app/Http/Admin/Services/Topic.php @@ -35,7 +35,10 @@ class Topic extends Service $courseRepo = new CourseRepo(); - $items = $courseRepo->findAll(['published' => 1]); + $items = $courseRepo->findAll([ + 'published' => 1, + 'deleted' => 0, + ]); if ($items->count() == 0) return []; @@ -43,7 +46,7 @@ class Topic extends Service foreach ($items as $item) { $result[] = [ - 'name' => sprintf('%s（¥%0.2f）', $item->title, $item->market_price), + 'name' => sprintf('%s - %s（¥%0.2f）', $item->id, $item->title, $item->market_price), 'value' => $item->id, 'selected' => in_array($item->id, $courseIds), ]; diff --git a/app/Http/Admin/Services/User.php b/app/Http/Admin/Services/User.php index 97d7f694..fdc20f23 100644 --- a/app/Http/Admin/Services/User.php +++ b/app/Http/Admin/Services/User.php @@ -162,6 +162,10 @@ class User extends Service $data = []; + if (isset($post['avatar'])) { + $data['avatar'] = $validator->checkAvatar($post['avatar']); + } + if (isset($post['name'])) { $data['name'] = $validator->checkName($post['name']); if ($post['name'] != $user->name) { diff --git a/app/Http/Admin/Views/student/add.volt b/app/Http/Admin/Views/student/add.volt index 8dd037f2..40dbcd56 100644 --- a/app/Http/Admin/Views/student/add.volt +++ b/app/Http/Admin/Views/student/add.volt @@ -2,22 +2,20 @@ {% block content %} - {% set course_id = course ? course.id : '' %} -
添加学员
- +
- +
- +
- +
@@ -37,6 +35,12 @@ {% endblock %} +{% block include_js %} + + {{ js_include('lib/xm-select.js') }} + +{% endblock %} + {% block inline_js %} + {% endblock %} \ No newline at end of file diff --git a/app/Http/Admin/Views/user/edit.volt b/app/Http/Admin/Views/user/edit.volt index 652e4e99..16477dc9 100644 --- a/app/Http/Admin/Views/user/edit.volt +++ b/app/Http/Admin/Views/user/edit.volt @@ -3,13 +3,25 @@ {% block content %} {% set lock_expiry_display = user.locked == 1 ? 'display:block': 'display:none' %} + {% set vip_expiry_display = user.vip == 1 ? 'display:block': 'display:none' %}
编辑用户
- + +
+ + + +
+
+ +
+
+
+
@@ -46,6 +58,25 @@
{% endif %} +
+ +
+ + +
+
+
+
+ +
+ {% if user.vip_expiry_time > 0 %} + + {% else %} + + {% endif %} +
+
+
@@ -121,11 +152,31 @@ var form = layui.form; var laydate = layui.laydate; + $('#clear-avatar').on('click', function () { + var defaultAvatar = $('input[name=default_avatar]').val(); + $('input[name=avatar]').val(defaultAvatar); + $('#avatar').attr('src', defaultAvatar); + }); + + laydate.render({ + elem: 'input[name=vip_expiry_time]', + type: 'datetime' + }); + laydate.render({ elem: 'input[name=lock_expiry_time]', type: 'datetime' }); + form.on('radio(vip)', function (data) { + var block = $('#vip-expiry-block'); + if (data.value === '1') { + block.show(); + } else { + block.hide(); + } + }); + form.on('radio(locked)', function (data) { var block = $('#lock-expiry-block'); if (data.value === '1') { diff --git a/app/Http/Home/Controllers/UploadController.php b/app/Http/Home/Controllers/UploadController.php index 1905951a..fc832cd6 100644 --- a/app/Http/Home/Controllers/UploadController.php +++ b/app/Http/Home/Controllers/UploadController.php @@ -46,27 +46,6 @@ class UploadController extends Controller return $this->jsonSuccess(['data' => $data]); } - /** - * @Post("/cover/img", name="home.upload.cover_img") - */ - public function uploadCoverImageAction() - { - $service = new StorageService(); - - $file = $service->uploadCoverImage(); - - if (!$file) { - return $this->jsonError(['msg' => '上传文件失败']); - } - - $data = [ - 'src' => $service->getImageUrl($file->path), - 'title' => $file->name, - ]; - - return $this->jsonSuccess(['data' => $data]); - } - /** * @Post("/content/img", name="home.upload.content_img") */ @@ -88,6 +67,34 @@ class UploadController extends Controller return $this->jsonSuccess(['data' => $data]); } + /** + * @Post("/remote/img", name="home.upload.remote_img") + */ + public function uploadRemoteImageAction() + { + $originalUrl = $this->request->getPost('url', ['trim', 'string']); + + $service = new StorageService(); + + $file = $service->uploadRemoteImage($originalUrl); + + $newUrl = $originalUrl; + + if ($file) { + $newUrl = $service->getImageUrl($file->path); + } + + /** + * 编辑器要求返回的数据结构 + */ + $data = [ + 'url' => $newUrl, + 'originalURL' => $originalUrl, + ]; + + return $this->jsonSuccess(['data' => $data]); + } + /** * @Post("/im/img", name="home.upload.im_img") */ diff --git a/app/Library/Paginator/Query.php b/app/Library/Paginator/Query.php index 9c34e892..abb4ab3f 100644 --- a/app/Library/Paginator/Query.php +++ b/app/Library/Paginator/Query.php @@ -60,7 +60,7 @@ class Query $params = $this->request->getQuery(); if ($params) { - foreach ($params as $key => $value) { + foreach ($params as $key => &$value) { $value = $this->filter->sanitize($value, ['trim', 'string']); if ($whitelist && !in_array($value, $whitelist)) { unset($params[$key]); diff --git a/app/Models/Order.php b/app/Models/Order.php index 2a0e236d..8f89eb57 100644 --- a/app/Models/Order.php +++ b/app/Models/Order.php @@ -173,7 +173,7 @@ class Order extends Model public function beforeCreate() { - $this->sn = date('YmdHis') . rand(1000, 9999); + $this->sn = $this->getOrderSn(); $this->create_time = time(); } @@ -247,4 +247,18 @@ class Order extends Model ]; } + protected function getOrderSn() + { + $sn = date('YmdHis') . rand(1000, 9999); + + $order = self::findFirst([ + 'conditions' => 'sn = :sn:', + 'bind' => ['sn' => $sn], + ]); + + if (!$order) return $sn; + + $this->getOrderSn(); + } + } diff --git a/app/Models/Refund.php b/app/Models/Refund.php index 2f68af7f..0b53e770 100644 --- a/app/Models/Refund.php +++ b/app/Models/Refund.php @@ -134,7 +134,7 @@ class Refund extends Model public function beforeCreate() { - $this->sn = date('YmdHis') . rand(1000, 9999); + $this->sn = $this->getRefundSn(); $this->create_time = time(); } @@ -171,4 +171,18 @@ class Refund extends Model ]; } + protected function getRefundSn() + { + $sn = date('YmdHis') . rand(1000, 9999); + + $order = self::findFirst([ + 'conditions' => 'sn = :sn:', + 'bind' => ['sn' => $sn], + ]); + + if (!$order) return $sn; + + $this->getRefundSn(); + } + } diff --git a/app/Models/Trade.php b/app/Models/Trade.php index 27a6ec1f..3d1148e5 100644 --- a/app/Models/Trade.php +++ b/app/Models/Trade.php @@ -131,7 +131,7 @@ class Trade extends Model public function beforeCreate() { - $this->sn = date('YmdHis') . rand(1000, 9999); + $this->sn = $this->getTradeSn(); $this->create_time = time(); } @@ -174,4 +174,18 @@ class Trade extends Model ]; } + protected function getTradeSn() + { + $sn = date('YmdHis') . rand(1000, 9999); + + $order = self::findFirst([ + 'conditions' => 'sn = :sn:', + 'bind' => ['sn' => $sn], + ]); + + if (!$order) return $sn; + + $this->getTradeSn(); + } + } diff --git a/app/Services/MyStorage.php b/app/Services/MyStorage.php index 157855e5..7c2c0d7c 100644 --- a/app/Services/MyStorage.php +++ b/app/Services/MyStorage.php @@ -181,12 +181,66 @@ class MyStorage extends Storage /** * 上传im文件 + * + * @return UploadModel|bool */ public function uploadImFile() { return $this->upload('/im/file/', self::MIME_FILE, UploadModel::TYPE_IM_FILE); } + /** + * @param string $url + * + * @return UploadModel|bool + */ + public function uploadRemoteImage($url) + { + $path = parse_url($url, PHP_URL_PATH); + $extension = pathinfo($path, PATHINFO_EXTENSION); + $originalName = pathinfo($path, PATHINFO_BASENAME); + + $fileName = $this->generateFileName($extension); + + $filePath = tmp_path($fileName); + + $contents = file_get_contents($url); + + if (file_put_contents($filePath, $contents) === false) { + return false; + } + + $keyName = "/img/content/{$fileName}"; + + $uploadPath = $this->putFile($keyName, $filePath); + + if (!$uploadPath) return false; + + $md5 = md5_file($filePath); + + $uploadRepo = new UploadRepo(); + + $upload = $uploadRepo->findByMd5($md5); + + if ($upload == false) { + + $upload = new UploadModel(); + + $upload->name = $originalName; + $upload->mime = mime_content_type($filePath); + $upload->size = filesize($filePath); + $upload->type = UploadModel::TYPE_CONTENT_IMG; + $upload->path = $uploadPath; + $upload->md5 = $md5; + + $upload->create(); + } + + unlink($filePath); + + return $upload; + } + /** * 上传文件 * diff --git a/app/Services/Storage.php b/app/Services/Storage.php index 148cd0d3..6aa1eaee 100644 --- a/app/Services/Storage.php +++ b/app/Services/Storage.php @@ -255,7 +255,9 @@ class Storage extends Service { $name = uniqid(); - return sprintf('%s%s.%s', $prefix, $name, $extension); + $dot = $extension ? '.' : ''; + + return sprintf('%s%s%s%s', $prefix, $name, $dot, $extension); } /** diff --git a/app/Validators/Account.php b/app/Validators/Account.php index 91a7b9de..b8ed0f0e 100644 --- a/app/Validators/Account.php +++ b/app/Validators/Account.php @@ -35,6 +35,8 @@ class Account extends Validator $account = $accountRepo->findByEmail($name); } elseif (CommonValidator::phone($name)) { $account = $accountRepo->findByPhone($name); + } elseif (CommonValidator::intNumber($name)) { + $account = $accountRepo->findById($name); } if (!$account) { diff --git a/app/Validators/CourseUser.php b/app/Validators/CourseUser.php index 67eb19d6..baeeb819 100644 --- a/app/Validators/CourseUser.php +++ b/app/Validators/CourseUser.php @@ -48,11 +48,15 @@ class CourseUser extends Validator return $validator->checkCourse($id); } - public function checkUser($id) + public function checkUser($name) { + $validator = new Account(); + + $account = $validator->checkAccount($name); + $validator = new User(); - return $validator->checkUser($id); + return $validator->checkUser($account->id); } public function checkExpiryTime($expiryTime) diff --git a/app/Validators/Security.php b/app/Validators/Security.php index d6fddd04..8387fc49 100644 --- a/app/Validators/Security.php +++ b/app/Validators/Security.php @@ -17,6 +17,12 @@ class Security extends Validator public function checkCsrfToken() { + $route = $this->router->getMatchedRoute(); + + if (in_array($route->getName(), $this->getCsrfWhitelist())) { + return; + } + $token = $this->request->getHeader('X-Csrf-Token'); $service = new CsrfTokenService(); @@ -50,4 +56,14 @@ class Security extends Validator } } + protected function getCsrfWhitelist() + { + return [ + 'admin.upload.content_img', + 'admin.upload.remote_img', + 'home.upload.content_img', + 'home.upload.remote_img', + ]; + } + } diff --git a/public/static/admin/js/vditor.js b/public/static/admin/js/vditor.js index 054e8fed..0cdd31fd 100644 --- a/public/static/admin/js/vditor.js +++ b/public/static/admin/js/vditor.js @@ -71,6 +71,7 @@ layui.use(['jquery'], function () { }, upload: { url: '/admin/upload/content/img', + linkToImgUrl: '/admin/upload/remote/img', max: 10 * 1024 * 1024, accept: 'image/*', headers: { diff --git a/public/static/home/js/vditor.js b/public/static/home/js/vditor.js index 3126b7fb..6704f3a7 100644 --- a/public/static/home/js/vditor.js +++ b/public/static/home/js/vditor.js @@ -71,6 +71,7 @@ layui.use(['jquery'], function () { }, upload: { url: '/upload/content/img', + linkToImgUrl: '/upload/remote/img', max: 10 * 1024 * 1024, accept: 'image/*', headers: {