38320-vm/admin.php
2026-02-10 07:00:25 +00:00

250 lines
12 KiB
PHP

<?php
session_start();
require_once __DIR__ . '/db/config.php';
$pdo = db();
// Ensure user is admin
if (!isset($_SESSION['user_id'])) {
header('Location: index.php');
exit;
}
$stmt = $pdo->prepare("SELECT role FROM users WHERE id = ?");
$stmt->execute([$_SESSION['user_id']]);
$user = $stmt->fetch();
if ($user['role'] !== 'admin') {
die('Access Denied');
}
$action = $_GET['action'] ?? 'dashboard';
// Handle Actions
if ($_SERVER['REQUEST_METHOD'] === 'POST') {
if ($action === 'confirm_recharge') {
$id = $_POST['id'];
$pdo->beginTransaction();
$stmt = $pdo->prepare("SELECT * FROM recharges WHERE id = ? AND status = 'pending'");
$stmt->execute([$id]);
$recharge = $stmt->fetch();
if ($recharge) {
$stmt = $pdo->prepare("UPDATE recharges SET status = 'completed' WHERE id = ?");
$stmt->execute([$id]);
$stmt = $pdo->prepare("UPDATE users SET balance = balance + ? WHERE id = ?");
$stmt->execute([$recharge['amount'], $recharge['user_id']]);
}
$pdo->commit();
} elseif ($action === 'reject_recharge') {
$id = $_POST['id'];
$stmt = $pdo->prepare("UPDATE recharges SET status = 'rejected' WHERE id = ?");
$stmt->execute([$id]);
} elseif ($action === 'reply_support') {
$user_id = $_POST['user_id'];
$message = $_POST['message'];
$stmt = $pdo->prepare("INSERT INTO support_messages (user_id, sender, message) VALUES (?, 'admin', ?)");
$stmt->execute([$user_id, $message]);
} elseif ($action === 'update_settings') {
foreach ($_POST['settings'] as $key => $value) {
$stmt = $pdo->prepare("UPDATE settings SET setting_value = ? WHERE setting_key = ?");
$stmt->execute([$value, $key]);
}
}
}
// Fetch Data
$stats = [
'users' => $pdo->query("SELECT COUNT(*) FROM users")->fetchColumn(),
'pending_recharges' => $pdo->query("SELECT COUNT(*) FROM recharges WHERE status = 'pending'")->fetchColumn(),
'total_orders' => $pdo->query("SELECT COUNT(*) FROM sms_orders")->fetchColumn(),
];
$pending_recharges = $pdo->query("SELECT r.*, u.username FROM recharges r JOIN users u ON r.user_id = u.id WHERE r.status = 'pending' ORDER BY r.created_at DESC")->fetchAll();
$support_requests = $pdo->query("SELECT m.*, u.username FROM support_messages m JOIN users u ON m.user_id = u.id WHERE m.sender = 'user' AND m.id IN (SELECT MAX(id) FROM support_messages GROUP BY user_id) ORDER BY m.created_at DESC")->fetchAll();
$settings = $pdo->query("SELECT * FROM settings")->fetchAll(PDO::FETCH_KEY_PAIR);
?>
<!DOCTYPE html>
<html lang="zh-CN">
<head>
<meta charset="UTF-8">
<title>管理后台 - 全球接码</title>
<link href="https://cdn.jsdelivr.net/npm/bootstrap@5.3.0/dist/css/bootstrap.min.css" rel="stylesheet">
<link href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.0/css/all.min.css" rel="stylesheet">
<link href="https://fonts.googleapis.com/css2?family=Plus+Jakarta+Sans:wght@400;500;600;700&display=swap" rel="stylesheet">
<style>
:root {
--primary-color: #ff4d94;
--bg-light: #fff5f7;
--surface-light: #ffffff;
--text-main: #2d1a1e;
--text-muted: #8a6d71;
--border-color: #ffd1dc;
}
body { background-color: var(--bg-light); font-family: 'Plus Jakarta Sans', sans-serif; }
.sidebar {
width: 250px;
height: 100vh;
position: fixed;
background: var(--surface-light);
border-right: 2px solid var(--border-color);
color: var(--text-main);
padding: 30px 20px;
}
.main { margin-left: 250px; padding: 40px; }
.nav-link {
color: var(--text-muted);
font-weight: 600;
border-radius: 12px;
margin-bottom: 8px;
transition: all 0.3s;
}
.nav-link:hover, .nav-link.active {
background-color: var(--primary-color);
color: white;
box-shadow: 0 4px 12px rgba(255, 77, 148, 0.2);
}
.card {
background-color: var(--surface-light);
border: 2px solid var(--border-color);
border-radius: 20px;
box-shadow: 6px 6px 0px var(--border-color);
margin-bottom: 24px;
}
.btn-primary { background-color: var(--primary-color); border: none; border-radius: 10px; }
.btn-primary:hover { background-color: #ff1a75; }
.form-control { border: 2px solid var(--border-color); border-radius: 10px; }
.form-control:focus { border-color: var(--primary-color); box-shadow: none; }
.table { color: var(--text-main); }
</style>
</head>
<body>
<div class="sidebar">
<h4 class="fw-bold text-primary mb-4"><i class="fas fa-shield-alt me-2"></i>管理中心</h4>
<nav class="nav flex-column">
<a class="nav-link <?= $action === 'dashboard' ? 'active' : '' ?>" href="?action=dashboard"><i class="fas fa-chart-pie me-2"></i> 数据概览</a>
<a class="nav-link <?= $action === 'recharges' ? 'active' : '' ?>" href="?action=recharges"><i class="fas fa-receipt me-2"></i> 充值审核</a>
<a class="nav-link <?= $action === 'support' ? 'active' : '' ?>" href="?action=support"><i class="fas fa-comments me-2"></i> 客服消息</a>
<a class="nav-link <?= $action === 'settings' ? 'active' : '' ?>" href="?action=settings"><i class="fas fa-tools me-2"></i> 系统参数</a>
<hr class="text-muted">
<a class="nav-link" href="dashboard.php"><i class="fas fa-external-link-alt me-2"></i> 回到前台</a>
</nav>
</div>
<div class="main">
<div class="d-flex justify-content-between align-items-center mb-5">
<h2 class="fw-bold"><?= [
'dashboard' => '数据大盘',
'recharges' => '充值申请列表',
'support' => '用户咨询回复',
'settings' => '全局系统设置'
][$action] ?></h2>
<div class="text-muted small">系统时间: <?= date('Y-m-d H:i') ?></div>
</div>
<?php if ($action === 'dashboard'): ?>
<div class="row">
<div class="col-md-4">
<div class="card p-4 text-center">
<div class="text-muted mb-2">注册用户总量</div>
<h2 class="fw-bold text-primary"><?= $stats['users'] ?></h2>
</div>
</div>
<div class="col-md-4">
<div class="card p-4 text-center">
<div class="text-muted mb-2">待审核充值</div>
<h2 class="fw-bold text-warning"><?= $stats['pending_recharges'] ?></h2>
</div>
</div>
<div class="col-md-4">
<div class="card p-4 text-center">
<div class="text-muted mb-2">累计成交订单</div>
<h2 class="fw-bold text-success"><?= $stats['total_orders'] ?></h2>
</div>
</div>
</div>
<?php elseif ($action === 'recharges'): ?>
<div class="card p-4">
<div class="table-responsive">
<table class="table align-middle">
<thead>
<tr>
<th>用户名</th>
<th>申请金额</th>
<th>交易 TXID</th>
<th>提交时间</th>
<th>操作决策</th>
</tr>
</thead>
<tbody>
<?php foreach ($pending_recharges as $r): ?>
<tr>
<td class="fw-bold"><?= htmlspecialchars($r['username']) ?></td>
<td class="text-success fw-bold">$<?= $r['amount'] ?></td>
<td><code class="small text-muted"><?= htmlspecialchars($r['txid']) ?></code></td>
<td class="small"><?= $r['created_at'] ?></td>
<td>
<form method="POST" action="?action=confirm_recharge" class="d-inline">
<input type="hidden" name="id" value="<?= $r['id'] ?>">
<button class="btn btn-sm btn-success px-3">通过</button>
</form>
<form method="POST" action="?action=reject_recharge" class="d-inline">
<input type="hidden" name="id" value="<?= $r['id'] ?>">
<button class="btn btn-sm btn-outline-danger px-3">驳回</button>
</form>
</td>
</tr>
<?php endforeach; ?>
<?php if (empty($pending_recharges)): ?>
<tr><td colspan="5" class="text-center py-4 text-muted">暂无待处理充值</td></tr>
<?php endif; ?>
</tbody>
</table>
</div>
</div>
<?php elseif ($action === 'support'): ?>
<div class="row">
<?php foreach ($support_requests as $s): ?>
<div class="col-12">
<div class="card p-4">
<div class="d-flex justify-content-between mb-3">
<h5 class="fw-bold mb-0 text-primary"><?= htmlspecialchars($s['username']) ?></h5>
<span class="small text-muted"><?= $s['created_at'] ?></span>
</div>
<div class="p-3 rounded-3 mb-4" style="background-color: var(--bg-light); border: 1px solid var(--border-color);">
<?= htmlspecialchars($s['message']) ?>
</div>
<form method="POST" action="?action=reply_support">
<input type="hidden" name="user_id" value="<?= $s['user_id'] ?>">
<div class="input-group">
<input type="text" name="message" class="form-control" placeholder="输入回复内容..." required>
<button class="btn btn-primary px-4">发送回复</button>
</div>
</form>
</div>
</div>
<?php endforeach; ?>
<?php if (empty($support_requests)): ?>
<div class="col-12 text-center py-5 text-muted">暂无待回复消息</div>
<?php endif; ?>
</div>
<?php elseif ($action === 'settings'): ?>
<div class="card p-4">
<form method="POST" action="?action=update_settings">
<div class="row">
<?php foreach ($settings as $key => $val): ?>
<div class="col-md-6 mb-4">
<label class="form-label fw-bold"><?= $key ?></label>
<input type="text" name="settings[<?= $key ?>]" value="<?= htmlspecialchars($val) ?>" class="form-control p-3">
</div>
<?php endforeach; ?>
</div>
<div class="text-end mt-4">
<button class="btn btn-primary btn-lg px-5">保存所有系统参数</button>
</div>
</form>
</div>
<?php endif; ?>
</div>
</body>
</html>