後臺登錄頁login.phpphp
<?php //1.鏈接數據庫 (建立一個數據庫,建立數據表 test_admin) //id, adminuser, adminpass, created_at, login_at, login_ip require '../db.func.php'; require '../tools.func.php'; // POST提交 if (!empty($_POST['adminuser'])) { //2.查詢用戶名和密碼是否正確 adminuser adminpass $prefix = getDBPrefix(); $adminuser = htmlentities($_POST['adminuser']); $adminpass = md5(htmlentities($_POST['adminpass'])); $sql = "SELECT id, adminuser FROM {$prefix}admin WHERE adminuser = '$adminuser' AND adminpass = '$adminpass'"; $res = queryOne($sql); if ($res) { //3.寫入session setSession('admin', ['adminuser' => $adminuser, 'id' => $res['id']] ); $login_at = date('Y-m-d H:i:s'); $ip = $_SERVER['REMOTE_ADDR'] == '::1' ? '127.0.0.1' : $_SERVER['REMOTE_ADDR']; $login_ip = ip2long($ip); $sql = "UPDATE {$prefix}admin SET login_at = '$login_at', login_ip = '$login_ip' WHERE id = '{$res['id']}'"; execute($sql); //4.跳轉到index.php header('location: index.php'); } else { setInfo('用戶名或者密碼錯誤'); } } ?> <!doctype html> <html> <head> <title>商城</title> <!-- Required meta tags --> <meta charset="utf-8"> <meta content="width=device-width, initial-scale=1.0, maximum-scale=1.0, user-scalable=0" name="viewport" /> <meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1" /> <!-- Fonts and icons --> <link rel="stylesheet" type="text/css" href="assets/css/googlefonts.css?family=Roboto:300,400,500,700|Roboto+Slab:400,700|Material+Icons" /> <link rel="stylesheet" href="https://maxcdn.bootstrapcdn.com/font-awesome/latest/css/font-awesome.min.css"> <!-- Material Kit CSS --> <link href="assets/css/material-dashboard.css?v=2.1.1" rel="stylesheet" /> </head> <body> <div class="wrapper "> <div> <div> <div class="container" style="width: 50%;margin-top: 250px;"> <div class="row"> <div class="col-md-12"> <div class="col-md-12"> <div class="card"> <div class="card-header card-header-primary"> <h4 class="card-title">登陸</h4> <p class="card-category">以管理員身份登陸後臺</p> </div> <div class="card-body"> <p><?php if (hasInfo()) echo getInfo(); ?></p> <form action="login.php" method="post"> <div class="row"> <div class="col-md-12"> <div class="form-group"> <label class="bmd-label-floating">用戶名</label> <input type="text" name="adminuser" class="form-control"> </div> </div> </div> <div class="row"> <div class="col-md-12"> <div class="form-group"> <label class="bmd-label-floating">密碼</label> <input type="password" name="adminpass" class="form-control"> </div> </div> </div> <button type="submit" class="btn btn-primary pull-right">登陸</button> <div class="clearfix"></div> </form> </div> </div> </div> </div> </div> </div> </div> </div> </div> <script src="assets/js/core/jquery.min.js"></script> <script src="assets/js/core/popper.min.js"></script> <script src="assets/js/core/bootstrap-material-design.min.js"></script> </body> </html>
數據庫結構shop.sqlcss
/* Navicat Premium Data Transfer Source Server : 127.0.0.1 Source Server Type : MySQL Source Server Version : 80012 Source Host : localhost:3306 Source Schema : shop Target Server Type : MySQL Target Server Version : 80012 File Encoding : 65001 Date: 26/01/2019 10:13:57 */ SET NAMES utf8mb4; SET FOREIGN_KEY_CHECKS = 0; -- ---------------------------- -- Table structure for test_admin -- ---------------------------- DROP TABLE IF EXISTS `test_admin`; CREATE TABLE `test_admin` ( `id` int(10) unsigned NOT NULL AUTO_INCREMENT, `adminuser` varchar(50) NOT NULL DEFAULT '', `adminpass` char(32) NOT NULL DEFAULT '', `created_at` varchar(255) NOT NULL DEFAULT '', `login_at` varchar(255) NOT NULL DEFAULT '' , `login_ip` bigint(20) NOT NULL DEFAULT '0', PRIMARY KEY (`id`) ) ENGINE=InnoDB AUTO_INCREMENT=2 DEFAULT CHARSET=utf8; -- ---------------------------- -- Records of test_admin -- ---------------------------- BEGIN; INSERT INTO `test_admin` VALUES (1, 'admin', '0192023a7bbd73250516f069df18b500', '2019-01-23 20:21:03', '2019-01-24 12:56:48', 2130706433); COMMIT; -- ---------------------------- -- Table structure for test_cart -- ---------------------------- DROP TABLE IF EXISTS `test_cart`; CREATE TABLE `test_cart` ( `id` int(10) unsigned NOT NULL AUTO_INCREMENT, `price` decimal(10,2) unsigned NOT NULL DEFAULT '0.00', `quantity` int(10) unsigned NOT NULL DEFAULT '0', `products` text, `uid` int(10) unsigned NOT NULL DEFAULT '0', `created_at` varchar(255) NOT NULL DEFAULT '' , PRIMARY KEY (`id`) ) ENGINE=InnoDB AUTO_INCREMENT=3 DEFAULT CHARSET=utf8; -- ---------------------------- -- Records of test_cart -- ---------------------------- BEGIN; INSERT INTO `test_cart` VALUES (2, 21700.00, 3, '{\"3\":{\"quantity\":2,\"product\":{\"id\":\"3\",\"name\":\"Macbook Pro\",\"price\":\"8800.00\",\"code\":\"88888888\",\"description\":\"Macbook Pro\"}},\"4\":{\"quantity\":1,\"product\":{\"id\":\"4\",\"name\":\"\\u534e\\u4e3a\\u624b\\u673a\",\"price\":\"4100.00\",\"code\":\"929868123123123\",\"description\":\"\\u5546\\u54c1\\u63cf\\u8ff0\\uff1a\\r\\n\\r\\n\\u8fd9\\u662f\\u534e\\u4e3a\\u624b\\u673a\"}}}', 5, '2019-01-24 10:53:24'); COMMIT; -- ---------------------------- -- Table structure for test_order -- ---------------------------- DROP TABLE IF EXISTS `test_order`; CREATE TABLE `test_order` ( `id` int(10) unsigned NOT NULL AUTO_INCREMENT, `price` decimal(10,2) unsigned NOT NULL DEFAULT '0.00', `quantity` int(10) unsigned NOT NULL DEFAULT '0', `products` text, `uid` int(10) unsigned NOT NULL DEFAULT '0', `created_at` varchar(255) NOT NULL DEFAULT '' , PRIMARY KEY (`id`) ) ENGINE=InnoDB AUTO_INCREMENT=2 DEFAULT CHARSET=utf8; -- ---------------------------- -- Records of test_order -- ---------------------------- BEGIN; INSERT INTO `test_order` VALUES (1, 17600.00, 2, '{\"3\":{\"quantity\":2,\"product\":{\"id\":\"3\",\"name\":\"Macbook Pro\",\"price\":\"8800.00\",\"code\":\"88888888\",\"description\":\"Macbook Pro\"}}}', 5, '2019-01-24 12:46:33'); COMMIT; -- ---------------------------- -- Table structure for test_product -- ---------------------------- DROP TABLE IF EXISTS `test_product`; CREATE TABLE `test_product` ( `id` int(10) unsigned NOT NULL AUTO_INCREMENT, `name` varchar(200) NOT NULL DEFAULT '', `code` varchar(100) NOT NULL DEFAULT '', `description` text, `stock` int(10) unsigned NOT NULL DEFAULT '0', `price` decimal(10,2) unsigned NOT NULL DEFAULT '0.00', `created_at` varchar(255) NOT NULL DEFAULT '' , PRIMARY KEY (`id`) ) ENGINE=InnoDB AUTO_INCREMENT=5 DEFAULT CHARSET=utf8; -- ---------------------------- -- Records of test_product -- ---------------------------- BEGIN; INSERT INTO `test_product` VALUES (3, 'Macbook Pro', '88888888', 'Macbook Pro', 99, 8800.00, '2019-01-24 00:19:28'); INSERT INTO `test_product` VALUES (4, '華爲手機', '929868123123123', '商品描述:\r\n\r\n這是華爲手機', 99, 4100.00, '2019-01-24 00:31:28'); COMMIT; -- ---------------------------- -- Table structure for test_user -- ---------------------------- DROP TABLE IF EXISTS `test_user`; CREATE TABLE `test_user` ( `id` int(10) unsigned NOT NULL AUTO_INCREMENT, `username` varchar(100) NOT NULL DEFAULT '', `password` char(32) NOT NULL DEFAULT '', `name` varchar(100) NOT NULL DEFAULT '', `age` tinyint(3) unsigned NOT NULL DEFAULT '0', `email` varchar(100) NOT NULL DEFAULT '', `phone` varchar(20) NOT NULL DEFAULT '', `created_at` varchar(255) NOT NULL DEFAULT '' , PRIMARY KEY (`id`) ) ENGINE=InnoDB AUTO_INCREMENT=6 DEFAULT CHARSET=utf8; -- ---------------------------- -- Records of test_user -- ---------------------------- BEGIN; INSERT INTO `test_user` VALUES (3, 'zhangsan', '4297f44b13955235245b2497399d7a93', '張三', 28, '965794175@qq.com', '13200000000', '2019-01-23 23:54:34'); INSERT INTO `test_user` VALUES (4, 'wangwu', '4297f44b13955235245b2497399d7a93', '', 0, 'wangwu@test.com', '', '2019-01-24 09:21:45'); INSERT INTO `test_user` VALUES (5, 'zhaoliu', '4297f44b13955235245b2497399d7a93', '', 0, 'zhaoliu@test.com', '', '2019-01-24 09:35:05'); COMMIT; SET FOREIGN_KEY_CHECKS = 1;
配置數據庫文件config.phphtml
<?php /** * Created by PhpStorm. * Date: 2019/1/23 * Time: 20:22 */ date_default_timezone_set('PRC'); return [ 'DB_HOST' => '127.0.0.1', 'DB_PORT' => '3306', 'DB_USER' => 'root', 'DB_PASS' => '123456', 'DB_NAME' => 'test_shop', 'DB_PREFIX' => 'test_', 'DB_CHARSET' => 'utf8', ];
操做數據庫函數db.func.phpmysql
<?php function connect() { $config = require dirname(__FILE__) . '/config.php'; $mysqli = @mysqli_connect( $config['DB_HOST'] . ':' . $config['DB_PORT'], $config['DB_USER'], $config['DB_PASS'], $config['DB_NAME'] ) or die('Connect Error: ' . mysqli_connect_errno() . '-' . mysqli_connect_error()); mysqli_set_charset($mysqli, $config['DB_CHARSET']); return $mysqli; } function queryOne($sql) { $mysqli = connect(); $result = mysqli_query($mysqli, $sql); $data = []; if ($result && mysqli_num_rows($result) > 0) { $data = mysqli_fetch_assoc($result); } return $data; } function query($sql) { $mysqli = connect(); $result = mysqli_query($mysqli, $sql); $data = []; if ($result && mysqli_num_rows($result) > 0) { while ($res = mysqli_fetch_assoc($result)) { $data[] = $res; } } return $data; } function getDBPrefix() { $config = require dirname(__FILE__) . '/config.php'; return $config['DB_PREFIX']; } function execute($sql) { $mysqli = connect(); mysqli_query($mysqli, $sql); return mysqli_affected_rows($mysqli) > 0; }
公共函數文件tools.func.phpjquery
<?php /** * Created by PhpStorm. * Date: 2019/1/23 * Time: 20:31 */ function setSession($key, $data, $prefix = '') { session_id() || @session_start(); if (!empty($prefix)) { $_SESSION[$prefix][$key] = $data; } else { $_SESSION[$key] = $data; } } function getSession($key, $prefix = '') { session_id() || @session_start(); if (!empty($prefix)) { return isset($_SESSION[$prefix][$key]) ? $_SESSION[$prefix][$key] : []; } else { return isset($_SESSION[$key]) ? $_SESSION[$key] : []; } } function deleteSession($key, $prefix = '') { session_id() || @session_start(); if (!empty($prefix)) { $_SESSION[$prefix][$key] = null; } else { $_SESSION[$key] = null; } } function setInfo($info) { setSession('info', $info, 'system'); } function getInfo() { $info = getSession('info', 'system'); deleteSession('info', 'system'); return $info; } function hasInfo() { return !empty(getSession('info', 'system')); }
判斷是否有登錄權限auth.phpsql
<?php /** * Created by PhpStorm. * Date: 2019/1/23 * Time: 22:07 */ if (empty(getSession('adminuser', 'admin'))) { header('location: login.php'); exit; }
登錄成功後進入後臺首頁index.phpchrome
<?php require '../db.func.php'; require '../tools.func.php'; require 'auth.php'; //1.查詢數據庫 test_admin //2.寫sql語句 $prefix = getDBPrefix(); $sql = "SELECT id,adminuser,created_at,login_at,login_ip FROM {$prefix}admin ORDER BY created_at DESC"; $data = query($sql); //3.遍歷數據 require 'header.php'; ?> <div class="row"> <div class="col-md-12"> <div class="card"> <div class="card-header card-header-primary"> <h4 class="card-title ">全部管理員</h4> <p class="card-category"> 控制檯全部管理員列表</p> </div> <div class="card-body"> <div class="table-responsive"> <table class="table table-hover"> <thead class=" text-primary"> <th> ID </th> <th> 用戶名 </th> <th> 建立時間 </th> <th> 最後登陸時間 </th> <th> 最後登陸IP </th> </thead> <tbody> <?php foreach ($data as $admin): ?> <tr> <td> <?php echo $admin['id']; ?> </td> <td> <?php echo $admin['adminuser']; ?> </td> <td> <?php echo $admin['created_at']; ?> </td> <td> <?php echo $admin['login_at']; ?> </td> <td> <?php echo long2ip($admin['login_ip']); ?> </td> </tr> <?php endforeach; ?> </tbody> </table> </div> </div> </div> </div> </div> <?php require 'footer.php'; ?>
header.php數據庫
<?php $script = basename($_SERVER['SCRIPT_FILENAME']); // 控制檯 index.php admin_edit.php // 用戶管理 users.php user_add.php user_edit.php // 商品管理 products.php product_add.php product_edit.php ?> <!doctype html> <html> <head> <title>商城</title> <!-- Required meta tags --> <meta charset="utf-8"> <meta content="width=device-width, initial-scale=1.0, maximum-scale=1.0, user-scalable=0" name="viewport"/> <meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1"/> <!-- Fonts and icons --> <link rel="stylesheet" type="text/css" href="assets/css/googlefonts.css?family=Roboto:300,400,500,700|Roboto+Slab:400,700|Material+Icons"/> <link rel="stylesheet" href="https://maxcdn.bootstrapcdn.com/font-awesome/latest/css/font-awesome.min.css"> <!-- Material Kit CSS --> <link href="assets/css/material-dashboard.css?v=2.1.1" rel="stylesheet"/> </head> <body> <div class="wrapper "> <div class="sidebar" data-color="purple" data-background-color="white"> <div class="logo"> <a href="index.php" class="simple-text logo-normal"> 商城 </a> </div> <div class="sidebar-wrapper"> <ul class="nav"> <li class="nav-item <?php echo substr($script, 0, 5) == 'index' || substr($script, 0, 5) == 'admin' ? 'active' : ''; ?>"> <a class="nav-link" href="index.php"> <i class="material-icons">dashboard</i> <p>控制檯</p> </a> </li> <li class="nav-item <?php echo substr($script, 0, 4) == 'user' ? 'active' : ''; ?>"> <a class="nav-link" href="users.php"> <i class="material-icons">person</i> <p>用戶管理</p> </a> </li> <li class="nav-item <?php echo substr($script, 0, 7) == 'product' ? 'active' : ''; ?>"> <a class="nav-link" href="products.php"> <i class="material-icons">library_books</i> <p>商品管理</p> </a> </li> <li class="nav-item <?php echo substr($script, 0, 4) == 'cart' ? 'active' : ''; ?>"> <a class="nav-link" href="carts.php"> <i class="material-icons">shopping_cart</i> <p>購物車管理</p> </a> </li> <li class="nav-item <?php echo substr($script, 0, 5) == 'order' ? 'active' : ''; ?>"> <a class="nav-link" href="orders.php"> <i class="material-icons">list</i> <p>訂單管理</p> </a> </li> <!-- your sidebar here --> </ul> </div> </div> <div class="main-panel"> <!-- Navbar --> <nav class="navbar navbar-expand-lg navbar-transparent navbar-absolute fixed-top "> <div class="container-fluid"> <div class="navbar-wrapper"> <a class="navbar-brand" href="index.php">控制檯</a> </div> <div class="collapse navbar-collapse justify-content-end"> <ul class="navbar-nav"> <li class="nav-item dropdown"> <a class="nav-link" href="#" id="navbarDropdownProfile" data-toggle="dropdown" aria-haspopup="true" aria-expanded="false"> <i class="material-icons">person</i> <p class="d-lg-none d-md-block"> 管理員 </p> </a> <div class="dropdown-menu dropdown-menu-right" aria-labelledby="navbarDropdownProfile"> <a class="dropdown-item" href="admin_edit.php">編輯</a> <div class="dropdown-divider"></div> <a class="dropdown-item" href="logout.php">退出</a> </div> </li> <!-- your navbar here --> </ul> </div> </div> </nav> <!-- End Navbar --> <div class="content"> <div class="container-fluid">
footer.phpbootstrap
</div> </div> </div> </div> <script src="assets/js/core/jquery.min.js"></script> <script src="assets/js/core/popper.min.js"></script> <script src="assets/js/core/bootstrap-material-design.min.js"></script> </body> </html>
管理員帳號密碼修改admin_edit.phpsession
<?php require '../tools.func.php'; require 'auth.php'; require '../db.func.php'; $current_user = getSession('admin'); //1.判斷是否爲post提交 if (!empty($_POST['adminpass'])) { //2.驗證新密碼和確認密碼是否一致 $adminpass = md5(htmlentities($_POST['adminpass'])); $newpass = htmlentities($_POST['newpass']); $confirmpass = htmlentities($_POST['confirmpass']); if ($newpass != $confirmpass) { setInfo('兩次密碼輸入不一致'); } else { //3.驗證舊密碼是否正確 (查詢數據庫 用id,adminpass) $prefix = getDBPrefix(); $sql = "SELECT id FROM {$prefix}admin WHERE id = '{$current_user['id']}' AND adminpass = '$adminpass' "; $res = queryOne($sql); //4.更新數據表 imooc_admin adminpass if ($res) { $pass = md5($newpass); $sql = "UPDATE {$prefix}admin SET adminpass = '$pass' WHERE id = '{$current_user['id']}'"; if (execute($sql)) { setInfo('修改密碼成功'); } else { setInfo('修改密碼失敗'); } } else { setInfo('舊密碼不正確!'); } } //5.顯示結果到頁面 } require 'header.php'; ?> <div class="row"> <div class="col-md-12"> <div class="card"> <div class="card-header card-header-primary"> <h4 class="card-title">修改密碼</h4> <p class="card-category">修改當前管理員密碼</p> </div> <div class="card-body"> <?php if (hasInfo()) echo getInfo(); ?> <form action="admin_edit.php" method="post"> <div class="row"> <div class="col-md-12"> <div class="form-group"> <label class="bmd-label-floating">用戶名</label> <input type="text" disabled name="adminuser" value="<?php echo $current_user['adminuser']; ?>" class="form-control"> </div> </div> </div> <div class="row"> <div class="col-md-12"> <div class="form-group"> <label class="bmd-label-floating">舊密碼</label> <input type="password" name="adminpass" class="form-control"> </div> </div> </div> <div class="row"> <div class="col-md-12"> <div class="form-group"> <label class="bmd-label-floating">新密碼</label> <input type="password" name="newpass" class="form-control"> </div> </div> </div> <div class="row"> <div class="col-md-12"> <div class="form-group"> <label class="bmd-label-floating">確認密碼</label> <input type="password" name="confirmpass" class="form-control"> </div> </div> </div> <button type="submit" class="btn btn-primary pull-right">修改</button> <div class="clearfix"></div> </form> </div> </div> </div> </div> <?php require 'footer.php'; ?>
管理員後臺登出logout.php
<?php /** * Created by PhpStorm. * Date: 2019/1/23 * Time: 22:06 */ // 1. 刪除當前登陸用戶的session require '../tools.func.php'; deleteSession('admin'); header('location: login.php');
用戶列表顯示users.php
<?php require '../db.func.php'; require '../tools.func.php'; require 'auth.php'; // 1. 寫sql查詢 $prefix = getDBPrefix(); $sql = "SELECT id, username, age, name, email, phone, created_at FROM {$prefix}user ORDER BY created_at DESC"; // 2. 執行查詢 $res = query($sql); // 3. 遍歷結果 require 'header.php'; ?> <div class="row"> <div class="col-md-12"> <div class="card"> <div class="card-header card-header-primary"> <div class="row"> <div class="col-10"> <h4 class="card-title ">全部用戶</h4> <p class="card-category"> 用戶列表</p> </div> <div class="col-2"> <a href="user_add.php" class="btn btn-round btn-info" style="margin-left: 20px;">添加用戶</a> </div> </div> </div> <div class="card-body"> <p><?php if (hasInfo()) echo getInfo(); ?></p> <div class="table-responsive"> <table class="table table-hover"> <thead class=" text-primary"> <th> ID </th> <th> 用戶名 </th> <th> 姓名 </th> <th> 年齡 </th> <th> 郵箱 </th> <th> 聯繫電話 </th> <th> 註冊時間 </th> <th> 操做 </th> </thead> <tbody> <?php foreach ($res as $user): ?> <tr> <td> <?php echo $user['id']; ?> </td> <td> <?php echo $user['username']; ?> </td> <td> <?php echo $user['name']; ?> </td> <td> <?php echo $user['age']; ?> </td> <td> <?php echo $user['email']; ?> </td> <td> <?php echo $user['phone']; ?> </td> <td> <?php echo $user['created_at']; ?> </td> <td> <a href="user_edit.php?id=<?php echo $user['id']; ?>">編輯</a> | <a href="user_del.php?id=<?php echo $user['id']; ?>">刪除</a> </td> </tr> <?php endforeach; ?> </tbody> </table> </div> </div> </div> </div> </div> <?php require 'footer.php'; ?>
添加用戶user_add.php
<?php require '../tools.func.php'; require '../db.func.php'; require 'auth.php'; if (!empty($_POST['username'])) { // 1. 接收post數據 $username = htmlentities($_POST['username']); $password = htmlentities($_POST['password']); $confirmpass = htmlentities($_POST['confirmpass']); $name = htmlentities($_POST['name']); $age = htmlentities($_POST['age']); $email = htmlentities($_POST['email']); $phone = htmlentities($_POST['phone']); $created_at = date('Y-m-d H:i:s'); $prefix = getDBPrefix(); // 2. 驗證密碼輸入是否一致 if ($password != $confirmpass) { setInfo('兩次密碼輸入不一致'); } else { $password = md5($password); // 3. 寫sql語句 $sql = "INSERT INTO {$prefix}user(username, password, age, name, email, phone, created_at) VALUES('$username', '$password', '$age', '$name', '$email', '$phone', '$created_at')"; // 4. 執行添加,若是成功,顯示成功信息 if (execute($sql)) { setInfo('添加成功'); } else { setInfo('添加失敗'); } } } require 'header.php'; ?> <div class="row"> <div class="col-md-12"> <div class="card"> <div class="card-header card-header-primary"> <h4 class="card-title">添加用戶</h4> <p class="card-category">添加一個用戶</p> </div> <div class="card-body"> <?php if (hasInfo()) echo getInfo(); ?> <form action="user_add.php" method="post"> <div class="row"> <div class="col-md-4"> <div class="form-group"> <label class="bmd-label-floating">用戶名</label> <input type="text" name="username" class="form-control"> </div> </div> <div class="col-md-4"> <div class="form-group"> <label class="bmd-label-floating">密碼</label> <input type="password" name="password" class="form-control"> </div> </div> <div class="col-md-4"> <div class="form-group"> <label class="bmd-label-floating">確認密碼</label> <input type="password" name="confirmpass" class="form-control"> </div> </div> </div> <div class="row"> <div class="col-md-6"> <div class="form-group"> <label class="bmd-label-floating">姓名</label> <input type="text" name="name" class="form-control"> </div> </div> <div class="col-md-6"> <div class="form-group"> <label class="bmd-label-floating">年齡</label> <input type="number" name="age" class="form-control"> </div> </div> </div> <div class="row"> <div class="col-md-12"> <div class="form-group"> <label class="bmd-label-floating">聯繫電話</label> <input type="text" name="phone" class="form-control"> </div> </div> </div> <div class="row"> <div class="col-md-12"> <div class="form-group"> <label class="bmd-label-floating">電子郵箱</label> <input type="email" name="email" class="form-control"> </div> </div> </div> <button type="submit" class="btn btn-primary pull-right">添加用戶</button> <div class="clearfix"></div> </form> </div> </div> </div> </div> <?php require 'footer.php'; ?>
修改用戶信息user_edit.php
<?php require '../db.func.php'; require '../tools.func.php'; require 'auth.php'; // 1. 接收id $id = intval($_GET['id']); if (empty($id)) { header('location: users.php'); } // 2. 根據id查詢用戶 $prefix = getDBPrefix(); $sql = "SELECT id,username,age,email,phone,name FROM {$prefix}user WHERE id = '$id'"; $current_user = queryOne($sql); if (empty($current_user)) { header('location: users.php'); } // 3. 將查詢出的用戶的數據放入到表單當中 // 4. 判斷是否爲post提交 if (!empty($_POST['name'])) { // 5. 接收post數據 $name = htmlentities($_POST['name']); $age = htmlentities($_POST['age']); $email = htmlentities($_POST['email']); $phone = htmlentities($_POST['phone']); // 6. 更新數據記錄 $sql = "UPDATE {$prefix}user SET name = '$name', age = '$age', email = '$email', phone = '$phone' WHERE id = '$id'"; if (execute($sql)) { $current_user = array_merge($current_user, $_POST); setInfo('更新成功'); } else { setInfo('更新失敗'); } // 7. 顯示結果 } require 'header.php'; ?> <div class="row"> <div class="col-md-12"> <div class="card"> <div class="card-header card-header-primary"> <h4 class="card-title">修改用戶</h4> <p class="card-category">修改一個用戶</p> </div> <div class="card-body"> <?php if (hasInfo()) echo getInfo(); ?> <form action="user_edit.php?id=<?php echo $id; ?>" method="post"> <div class="row"> <div class="col-md-12"> <div class="form-group"> <label class="bmd-label-floating">用戶名</label> <input type="text" name="username" value="<?php echo $current_user['username']; ?>" disabled class="form-control"> </div> </div> </div> <div class="row"> <div class="col-md-6"> <div class="form-group"> <label class="bmd-label-floating">姓名</label> <input type="text" name="name" value="<?php echo $current_user['name']; ?>" class="form-control"> </div> </div> <div class="col-md-6"> <div class="form-group"> <label class="bmd-label-floating">年齡</label> <input type="number" name="age" value="<?php echo $current_user['age']; ?>" class="form-control"> </div> </div> </div> <div class="row"> <div class="col-md-12"> <div class="form-group"> <label class="bmd-label-floating">聯繫電話</label> <input type="text" name="phone" value="<?php echo $current_user['phone']; ?>" class="form-control"> </div> </div> </div> <div class="row"> <div class="col-md-12"> <div class="form-group"> <label class="bmd-label-floating">電子郵箱</label> <input type="email" name="email" value="<?php echo $current_user['email']; ?>" class="form-control"> </div> </div> </div> <button type="submit" class="btn btn-primary pull-right">更新信息</button> <div class="clearfix"></div> </form> </div> </div> </div> </div> <?php require 'footer.php'; ?>
刪除用戶user_del.php
<?php /** * Created by PhpStorm. * Date: 2019/1/24 * Time: 10:49 */ require '../db.func.php'; require '../tools.func.php'; require 'auth.php'; // 1. 接收id $id = intval($_GET['id']); // 2. 從數據庫當中刪除對應的數據 $prefix = getDBPrefix(); $sql = "DELETE FROM {$prefix}user WHERE id = '$id'"; if (execute($sql)) { setInfo('刪除成功'); } else { setInfo('刪除失敗'); } // 3. 跳回到列表頁 header('location: users.php');
商品列表products.php
<?php require '../tools.func.php'; require 'auth.php'; require '../db.func.php'; $prefix = getDBPrefix(); $sql = "SELECT * FROM {$prefix}product ORDER BY created_at DESC "; $data = query($sql); require 'header.php'; ?> <div class="row"> <div class="col-md-12"> <div class="card"> <div class="card-header card-header-primary"> <div class="row"> <div class="col-10"> <h4 class="card-title ">全部商品</h4> <p class="card-category"> 全部商品列表</p> </div> <div class="col-2"> <a href="product_add.php" class="btn btn-round btn-info" style="margin-left: 20px;">添加商品</a> </div> </div> </div> <div class="card-body"> <div class="table-responsive"> <table class="table table-hover" style="table-layout:fixed; "> <thead class=" text-primary"> <th width="5%"> ID </th> <th> 商品編號 </th> <th> 商品名稱 </th> <th> 商品描述 </th> <th> 商品庫存 </th> <th> 商品單價 </th> <th> 商品上架時間 </th> <th> 編輯 </th> </thead> <tbody> <?php foreach ($data as $pro): ?> <tr> <td> <?php echo $pro['id']; ?> </td> <td> <?php echo $pro['code']; ?> </td> <td> <?php echo $pro['name']; ?> </td> <td> <?php echo mb_substr($pro['description'], 0, 8, 'utf-8') . '...'; ?> </td> <td> <?php echo $pro['stock']; ?> </td> <td> <?php echo $pro['price']; ?> </td> <td> <?php echo $pro['created_at']; ?> </td> <td> <a href="#">編輯</a> | <a href="#">刪除</a> </td> </tr> <?php endforeach; ?> </tbody> </table> </div> </div> </div> </div> </div> <?php require 'footer.php'; ?>
添加商品product_add.php
<?php require '../tools.func.php'; require 'auth.php'; require '../db.func.php'; // 1. 判斷是否爲post提交 if (!empty($_POST['name'])) { // 2. 接收post數據 $name = htmlentities($_POST['name']); $code = htmlentities($_POST['code']); $price = doubleval($_POST['price']); $stock = intval($_POST['stock']); $description = htmlentities($_POST['description']); $created_at = date('Y-m-d H:i:s'); // 3. 寫sql語句 $prefix = getDBPrefix(); $sql = "INSERT INTO {$prefix}product(name, code, price, stock, description, created_at) VALUES('$name', '$code', '$price', '$stock', '$description', '$created_at')"; // 4. 執行插入 if (execute($sql)) { setInfo('添加成功'); } else { setInfo('添加失敗'); } // 5. 顯示結果 } require 'header.php'; ?> <div class="row"> <div class="col-md-12"> <div class="card"> <div class="card-header card-header-primary"> <h4 class="card-title">添加商品</h4> <p class="card-category">添加一個商品</p> </div> <div class="card-body"> <?php if (hasInfo()) echo getInfo(); ?> <form action="product_add.php" method="post"> <div class="row"> <div class="col-md-6"> <div class="form-group"> <label class="bmd-label-floating">商品名稱</label> <input type="text" name="name" class="form-control"> </div> </div> <div class="col-md-6"> <div class="form-group"> <label class="bmd-label-floating">商品單價</label> <input type="number" name="price" class="form-control"> </div> </div> </div> <div class="row"> <div class="col-md-6"> <div class="form-group"> <label class="bmd-label-floating">商品庫存</label> <input type="number" name="stock" class="form-control"> </div> </div> <div class="col-md-6"> <div class="form-group"> <label class="bmd-label-floating">商品編號</label> <input type="text" name="code" class="form-control"> </div> </div> </div> <div class="row"> <div class="col-md-12"> <div class="form-group"> <label>商品描述</label> <div class="form-group bmd-form-group"> <textarea name="description" class="form-control" rows="5"></textarea> </div> </div> </div> </div> <button type="submit" class="btn btn-primary pull-right">添加商品</button> <div class="clearfix"></div> </form> </div> </div> </div> </div> <?php require 'footer.php'; ?>
購物車列表頁carts.php
<?php require '../tools.func.php'; require '../db.func.php'; require 'auth.php'; $prefix = getDBPrefix(); $sql = "SELECT id, price, quantity, uid, created_at FROM {$prefix}cart ORDER BY created_at DESC"; $back_cart_data = []; $cart = query($sql); foreach ($cart as $c) { $sql = "SELECT username FROM {$prefix}user WHERE id = '{$c['uid']}'"; $user = queryOne($sql); $c['username'] = $user['username']; $back_cart_data[] = $c; } require 'header.php'; ?> <div class="row"> <div class="col-md-12"> <div class="card"> <div class="card-header card-header-primary"> <div class="row"> <div class="col-12"> <h4 class="card-title ">全部購物車</h4> <p class="card-category"> 全部購物車列表</p> </div> </div> </div> <div class="card-body"> <div class="table-responsive"> <table class="table table-hover"> <thead class=" text-primary"> <th> ID </th> <th> 購物車用戶 </th> <th> 商品總量 </th> <th> 購物車總價 </th> <th> 添加時間 </th> <th> 編輯 </th> </thead> <tbody> <?php foreach ($back_cart_data as $cart): ?> <tr> <td> <?php echo $cart['id']; ?> </td> <td> <?php echo $cart['username']; ?> </td> <td> <?php echo $cart['quantity']; ?> </td> <td> <?php echo $cart['price']; ?> </td> <td> <?php echo $cart['created_at']; ?> </td> <td> <a href="">刪除</a> </td> </tr> <?php endforeach; ?> </tbody> </table> </div> </div> </div> </div> </div> <?php require 'footer.php'; ?>
訂單列表orders.php
<?php require '../tools.func.php'; require 'auth.php'; require '../db.func.php'; $prefix = getDBPrefix(); $sql = "SELECT id, uid, price, quantity, created_at FROM {$prefix}order ORDER BY created_at DESC"; $orders = query($sql); require 'header.php'; ?> <div class="row"> <div class="col-md-12"> <div class="card"> <div class="card-header card-header-primary"> <div class="row"> <div class="col-12"> <h4 class="card-title ">全部訂單</h4> <p class="card-category"> 全部訂單列表</p> </div> </div> </div> <div class="card-body"> <div class="table-responsive"> <table class="table table-hover"> <thead class=" text-primary"> <th> ID </th> <th> 下單用戶 </th> <th> 訂單價格 </th> <th> 訂單商品數量 </th> <th> 下單時間 </th> </thead> <tbody> <?php foreach($orders as $order): ?> <tr> <td> <?php echo $order['id']; ?> </td> <td> <?php echo $order['uid']; ?> </td> <td> <?php echo $order['price']; ?> </td> <td> <?php echo $order['quantity']; ?> </td> <td> <?php echo $order['created_at']; ?> </td> </tr> <?php endforeach; ?> </tbody> </table> </div> </div> </div> </div> </div> <?php require 'footer.php'; ?>