getName(); $pathInfo = str_replace('.' . $request->ext(), '', $request->pathInfo()); $action = explode('/', $pathInfo)[0]; //var_dump($pathInfo);exit; if ($pathInfo == '' || $action == '') { redirect('/admin/index/index.html')->send(); exit; } //验证用户登录 if ($action !== 'login') { $session_admin = get_config('app.session_admin'); if (!Session::has($session_admin)) { if ($request->isAjax()) { return to_assign(404, '请先登录'); } else { redirect('/admin/login/index.html')->send(); exit; } } // 验证用户访问权限 if ($action !== 'index' && $action !== 'api') { if (!$this->checkAuth($controller, $pathInfo, $action, Session::get($session_admin)['id'])) { if ($request->isAjax()) { return to_assign(202, '你没有权限,请联系超级管理员！'); } else { echo '

您没有权限,请联系超级管理员

';exit; } } } } return $next($request); } /** * 验证用户访问权限 * @DateTime 2020-12-21 * @param string $controller 当前访问控制器 * @param string $action 当前访问方法 * @param string $uid 当前用户id * @return [type] */ protected function checkAuth($controller, $pathInfo, $action, $uid) { //Cache::delete('RulesSrc' . $uid); if (!Cache::get('RulesSrc' . $uid) || !Cache::get('RulesSrc0')) { //用户所在权限组及所拥有的权限 // 执行查询 $user_groups = Db::name('AdminGroupAccess') ->alias('a') ->join("AdminGroup g", "a.group_id=g.id", 'LEFT') ->where("a.uid='{$uid}' and g.status='1'") ->select() ->toArray(); $groups = $user_groups ?: []; $ids = []; //保存用户所属用户组设置的所有权限规则id foreach ($groups as $g) { $ids = array_merge($ids, explode(',', trim($g['rules'], ','))); } $ids = array_unique($ids); //读取所有权限规则 $rules_all = Db::name('AdminRule')->field('src')->select(); //读取用户组所有权限规则 $rules = Db::name('AdminRule')->where('id', 'in', $ids)->field('src')->select(); //循环规则，判断结果。 $auth_list_all = []; $auth_list = []; foreach ($rules_all as $rule_all) { $auth_list_all[] = strtolower($rule_all['src']); } foreach ($rules as $rule) { $auth_list[] = strtolower($rule['src']); } //规则列表结果保存到Cache Cache::tag('adminRules')->set('RulesSrc0', $auth_list_all, 36000); Cache::tag('adminRules')->set('RulesSrc' . $uid, $auth_list, 36000); } else { $auth_list_all = Cache::get('RulesSrc0'); $auth_list = Cache::get('RulesSrc' . $uid); } $pathUrl = $controller . '/' . $pathInfo; if (!in_array($pathUrl, $auth_list) && !in_array($pathUrl, $auth_list_all)) { return false; } else { return true; } } }