215 lines
8.5 KiB
PHP
215 lines
8.5 KiB
PHP
<?php
|
|
session_start();
|
|
require_once __DIR__ . '/../db/config.php';
|
|
|
|
$action = $_GET['action'] ?? '';
|
|
|
|
if ($action === 'upload_image' || (isset($_POST['action']) && $_POST['action'] === 'upload_image')) {
|
|
if (!isset($_FILES['file'])) {
|
|
echo json_encode(['success' => false, 'error' => 'No file uploaded']);
|
|
exit;
|
|
}
|
|
|
|
$file = $_FILES['file'];
|
|
$ext = pathinfo($file['name'], PATHINFO_EXTENSION);
|
|
$allowed = ['jpg', 'jpeg', 'png', 'gif', 'webp'];
|
|
|
|
if (!in_array(strtolower($ext), $allowed)) {
|
|
echo json_encode(['success' => false, 'error' => 'Invalid file type']);
|
|
exit;
|
|
}
|
|
|
|
$filename = time() . '_' . uniqid() . '.' . $ext;
|
|
$targetDir = __DIR__ . '/../assets/images/chat/';
|
|
if (!is_dir($targetDir)) {
|
|
mkdir($targetDir, 0777, true);
|
|
}
|
|
|
|
$targetPath = $targetDir . $filename;
|
|
if (move_uploaded_file($file['tmp_name'], $targetPath)) {
|
|
$imageUrl = '/assets/images/chat/' . $filename;
|
|
|
|
$message = '<img src="' . $imageUrl . '" class="img-fluid rounded cursor-pointer" style="max-width: 100%; max-height: 250px; object-fit: contain; margin: 5px 0;" onclick="window.open(\'' . $imageUrl . '\')">';
|
|
|
|
if (isset($_SESSION['admin_id'])) {
|
|
$user_id = $_POST['user_id'] ?? 0;
|
|
$ip = $_POST['ip_address'] ?? '';
|
|
$sender = 'admin';
|
|
$admin_id = $_SESSION['admin_id'];
|
|
$stmt = db()->prepare("INSERT INTO messages (user_id, admin_id, sender, message, ip_address) VALUES (?, ?, ?, ?, ?)");
|
|
$stmt->execute([$user_id, $admin_id, $sender, $message, $ip]);
|
|
} else {
|
|
$user_id = $_SESSION['user_id'] ?? 0;
|
|
$ip = getRealIP();
|
|
$stmt = db()->prepare("INSERT INTO messages (user_id, sender, message, ip_address) VALUES (?, ?, ?, ?)");
|
|
$stmt->execute([$user_id, 'user', $message, $ip]);
|
|
}
|
|
|
|
echo json_encode(['success' => true, 'url' => $imageUrl]);
|
|
} else {
|
|
echo json_encode(['success' => false, 'error' => 'Failed to move uploaded file']);
|
|
}
|
|
exit;
|
|
}
|
|
|
|
if ($action === 'get_messages') {
|
|
$user_id = $_SESSION['user_id'] ?? 0;
|
|
$target_user_id = $_GET['user_id'] ?? $user_id;
|
|
$target_ip = $_GET['ip'] ?? getRealIP();
|
|
|
|
// If admin is requesting, we use the provided user_id and ip
|
|
if (isset($_SESSION['admin_id'])) {
|
|
$stmt = db()->prepare("SELECT * FROM messages WHERE (user_id = ? AND user_id != 0) OR (user_id = 0 AND ip_address = ?) ORDER BY created_at ASC");
|
|
$stmt->execute([$target_user_id, $target_ip]);
|
|
} else {
|
|
// User requesting their own messages
|
|
$stmt = db()->prepare("SELECT * FROM messages WHERE (user_id = ? AND user_id != 0) OR (user_id = 0 AND ip_address = ?) ORDER BY created_at ASC");
|
|
$stmt->execute([$user_id, getRealIP()]);
|
|
}
|
|
|
|
$messages = $stmt->fetchAll();
|
|
echo json_encode($messages);
|
|
exit;
|
|
}
|
|
|
|
if ($action === 'send_message') {
|
|
$message = $_POST['message'] ?? '';
|
|
if (!$message) exit(json_encode(['success' => false]));
|
|
|
|
$user_id = $_SESSION['user_id'] ?? 0;
|
|
$ip = getRealIP();
|
|
|
|
$stmt = db()->prepare("INSERT INTO messages (user_id, sender, message, ip_address) VALUES (?, ?, ?, ?)");
|
|
$stmt->execute([$user_id, 'user', $message, $ip]);
|
|
$newId = db()->lastInsertId();
|
|
echo json_encode(['success' => true, 'id' => $newId]);
|
|
exit;
|
|
}
|
|
|
|
if ($action === 'admin_send') {
|
|
$message = $_POST['message'] ?? '';
|
|
$user_id = $_POST['user_id'] ?? 0;
|
|
$target_ip = $_POST['ip_address'] ?? '';
|
|
|
|
if (!$message) exit(json_encode(['success' => false]));
|
|
|
|
$admin_id = $_SESSION['admin_id'] ?? 1;
|
|
$sender = 'admin';
|
|
|
|
$stmt = db()->prepare("INSERT INTO messages (user_id, admin_id, sender, message, ip_address) VALUES (?, ?, ?, ?, ?)");
|
|
$stmt->execute([$user_id, $admin_id, $sender, $message, $target_ip]);
|
|
$newId = db()->lastInsertId();
|
|
echo json_encode(['success' => true, 'id' => $newId]);
|
|
exit;
|
|
}
|
|
|
|
if ($action === 'ping') {
|
|
$user_id = $_SESSION['user_id'] ?? 0;
|
|
$ip = getRealIP();
|
|
$user_time = $_GET['user_time'] ?? '';
|
|
$stmt = db()->prepare("INSERT INTO chat_visitors (user_id, ip_address, user_time) VALUES (?, ?, ?) ON DUPLICATE KEY UPDATE last_ping = CURRENT_TIMESTAMP, user_time = ?");
|
|
$stmt->execute([$user_id, $ip, $user_time, $user_time]);
|
|
echo json_encode(['success' => true]);
|
|
exit;
|
|
}
|
|
|
|
if ($action === 'admin_get_all') {
|
|
$stmt = db()->query("
|
|
SELECT
|
|
v.user_id,
|
|
v.ip_address,
|
|
CASE WHEN m.message LIKE '<img%' THEN '[图片]' ELSE COALESCE(m.message, '用户已进入聊天室') END as message,
|
|
COALESCE(m.created_at, v.last_activity) as created_at,
|
|
CASE WHEN u.email LIKE '%@user.byro' THEN u.username ELSE COALESCE(u.email, u.username) END as username,
|
|
u.uid,
|
|
r.remark,
|
|
v.user_time
|
|
FROM (
|
|
SELECT
|
|
user_id,
|
|
MAX(ip_address) as ip_address,
|
|
MAX(last_activity) as last_activity,
|
|
MAX(user_time) as user_time
|
|
FROM (
|
|
SELECT user_id, ip_address, MAX(created_at) as last_activity, NULL as user_time FROM messages GROUP BY user_id, ip_address
|
|
UNION
|
|
SELECT user_id, ip_address, MAX(last_ping) as last_activity, MAX(user_time) as user_time FROM chat_visitors GROUP BY user_id, ip_address
|
|
) t1
|
|
GROUP BY user_id, (CASE WHEN user_id = 0 THEN ip_address ELSE '0' END)
|
|
) v
|
|
LEFT JOIN (
|
|
SELECT m1.* FROM messages m1
|
|
INNER JOIN (
|
|
SELECT MAX(id) as max_id FROM messages GROUP BY user_id, (CASE WHEN user_id = 0 THEN ip_address ELSE '0' END)
|
|
) m2 ON m1.id = m2.max_id
|
|
) m ON (v.user_id = m.user_id AND (v.user_id != 0 OR v.ip_address = m.ip_address))
|
|
LEFT JOIN users u ON (v.user_id = u.id AND v.user_id != 0)
|
|
LEFT JOIN chat_remarks r ON (v.user_id = r.user_id AND (v.user_id != 0 OR v.ip_address = r.ip_address))
|
|
WHERE v.last_activity > DATE_SUB(NOW(), INTERVAL 48 HOUR)
|
|
ORDER BY created_at DESC
|
|
");
|
|
echo json_encode($stmt->fetchAll());
|
|
exit;
|
|
}
|
|
|
|
if ($action === 'save_remark') {
|
|
if (!isset($_SESSION['admin_id'])) exit(json_encode(['success' => false, 'error' => 'Unauthorized']));
|
|
|
|
$user_id = $_POST['user_id'] ?? 0;
|
|
$ip = $_POST['ip_address'] ?? '';
|
|
$remark = $_POST['remark'] ?? '';
|
|
|
|
$stmt = db()->prepare("INSERT INTO chat_remarks (user_id, ip_address, remark) VALUES (?, ?, ?) ON DUPLICATE KEY UPDATE remark = ?");
|
|
$stmt->execute([$user_id, $ip, $remark, $remark]);
|
|
|
|
echo json_encode(['success' => true]);
|
|
exit;
|
|
}
|
|
|
|
if ($action === 'get_remark') {
|
|
if (!isset($_SESSION['admin_id'])) exit(json_encode(['success' => false, 'error' => 'Unauthorized']));
|
|
|
|
$user_id = $_GET['user_id'] ?? 0;
|
|
$ip = $_GET['ip'] ?? '';
|
|
|
|
$stmt = db()->prepare("SELECT remark FROM chat_remarks WHERE user_id = ? AND ip_address = ?");
|
|
$stmt->execute([$user_id, $ip]);
|
|
$remark = $stmt->fetchColumn() ?: '';
|
|
|
|
echo json_encode(['success' => true, 'remark' => $remark]);
|
|
exit;
|
|
}
|
|
|
|
if ($action === 'admin_delete_user') {
|
|
if (!isset($_SESSION['admin_id'])) exit(json_encode(['success' => false, 'error' => 'Unauthorized']));
|
|
$user_id = $_POST['user_id'] ?? 0;
|
|
$ip = $_POST['ip_address'] ?? '';
|
|
|
|
if ($user_id != 0) {
|
|
$stmt = db()->prepare("DELETE FROM messages WHERE user_id = ?");
|
|
$stmt->execute([$user_id]);
|
|
$stmt = db()->prepare("DELETE FROM chat_visitors WHERE user_id = ?");
|
|
$stmt->execute([$user_id]);
|
|
$stmt = db()->prepare("DELETE FROM chat_remarks WHERE user_id = ?");
|
|
$stmt->execute([$user_id]);
|
|
} else {
|
|
$stmt = db()->prepare("DELETE FROM messages WHERE user_id = 0 AND ip_address = ?");
|
|
$stmt->execute([$ip]);
|
|
$stmt = db()->prepare("DELETE FROM chat_visitors WHERE user_id = 0 AND ip_address = ?");
|
|
$stmt->execute([$ip]);
|
|
$stmt = db()->prepare("DELETE FROM chat_remarks WHERE user_id = 0 AND ip_address = ?");
|
|
$stmt->execute([$ip]);
|
|
}
|
|
echo json_encode(['success' => true]);
|
|
exit;
|
|
}
|
|
|
|
if ($action === 'admin_recall_message') {
|
|
if (!isset($_SESSION['admin_id'])) exit(json_encode(['success' => false, 'error' => 'Unauthorized']));
|
|
$message_id = $_POST['message_id'] ?? 0;
|
|
$stmt = db()->prepare("DELETE FROM messages WHERE id = ? AND sender = 'admin'");
|
|
$stmt->execute([$message_id]);
|
|
echo json_encode(['success' => true]);
|
|
exit;
|
|
}
|