clerk.mod.php
6.52 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
<?php
function storex_clerk_permission_list() {
$data = array(
'mc' => array(
'title' => '快捷交易',
'permission' => 'mc_manage',
'items' => array(
array(
'title' => '积分充值',
'permission' => 'mc_credit1',
'icon' => 'fa fa-money',
'type' => 'modal',
'modal' => 'modal-trade',
'data' => 'credit1',
),
array(
'title' => '余额充值',
'permission' => 'mc_credit2',
'icon' => 'fa fa-cny',
'type' => 'modal',
'modal' => 'modal-trade',
'data' => 'credit2',
),
array(
'title' => '消费',
'permission' => 'mc_consume',
'icon' => 'fa fa-usd',
'type' => 'modal',
'modal' => 'modal-trade',
'data' => 'consume',
),
array(
'title' => '发放会员卡',
'permission' => 'mc_card',
'icon' => 'fa fa-credit-card',
'type' => 'modal',
'modal' => 'modal-trade',
'data' => 'card',
),
)
),
'stat' => array(
'title' => '数据统计',
'permission' => 'stat_manage',
'items' => array(
array(
'title' => '积分统计',
'permission' => 'stat_credit1',
'icon' => 'fa fa-bar-chart',
'type' => 'url',
'url' => './index.php?c=stat&a=credit1'
),
array(
'title' => '余额统计',
'permission' => 'stat_credit2',
'icon' => 'fa fa-bar-chart',
'type' => 'url',
'url' => './index.php?c=stat&a=credit2'
),
array(
'title' => '现金消费统计',
'permission' => 'stat_cash',
'icon' => 'fa fa-bar-chart',
'type' => 'url',
'url' => './index.php?c=stat&a=cash'
),
array(
'title' => '会员卡统计',
'permission' => 'stat_card',
'icon' => 'fa fa-bar-chart',
'type' => 'url',
'url' => './index.php?c=stat&a=card'
),
array(
'title' => '收银台收款统计',
'permission' => 'stat_paycenter',
'icon' => 'fa fa-bar-chart',
'type' => 'url',
'url' => './index.php?c=stat&a=paycenter'
),
)
),
'activity' => array(
'title' => '系统优惠券核销',
'permission' => 'activity_card_manage',
'items' => array(
array(
'title' => '折扣券核销',
'permission' => 'activity_consume_coupon',
'icon' => 'fa fa-money',
'type' => 'url',
'url' => './index.php?c=activity&a=consume&do=display&type=1'
),
array(
'title' => '代金券核销',
'permission' => 'activity_consume_token',
'icon' => 'fa fa-money',
'type' => 'url',
'url' => './index.php?c=activity&a=consume&do=display&type=2'
),
)
),
'wechat' => array(
'title' => '微信卡券核销',
'permission' => 'wechat_card_manage',
'items' => array(
array(
'title' => '卡券核销',
'permission' => 'wechat_consume',
'icon' => 'fa fa-money',
'type' => 'url',
'url' => './index.php?c=wechat&a=consume'
)
)
),
'paycenter' => array(
'title' => '收银台',
'permission' => 'paycenter_manage',
'items' => array(
array(
'title' => '微信刷卡收款',
'permission' => 'paycenter_wxmicro_pay',
'icon' => 'fa fa-money',
'type' => 'url',
'url' => './index.php?c=paycenter&a=wxmicro&do=pay'
)
)
),
);
return $data;
}
/**
* 获取单条用户信息，如果查询参数多于一个字段，则查询满足所有字段的用户
* PS:密码字段不要加密
* @param array $user_or_uid 要查询的用户字段，可以包括 uid, username, password, status
* @return array 完整的用户信息
*/
function storex_user_single($user_or_uid) {
$user = $user_or_uid;
if (empty($user)) {
return false;
}
if (is_numeric($user)) {
$user = array('uid' => $user);
}
if (!is_array($user)) {
return false;
}
$where = ' WHERE 1 ';
$params = array();
if (!empty($user['uid'])) {
$where .= ' AND `uid`=:uid';
$params[':uid'] = intval($user['uid']);
}
if (!empty($user['username'])) {
$where .= ' AND `username`=:username';
$params[':username'] = $user['username'];
}
if (!empty($user['email'])) {
$where .= ' AND `email`=:email';
$params[':email'] = $user['email'];
}
if (!empty($user['status'])) {
$where .= " AND `status`=:status";
$params[':status'] = intval($user['status']);
}
if (empty($params)) {
return false;
}
$sql = 'SELECT * FROM ' . tablename('users') . " $where LIMIT 1";
$record = pdo_fetch($sql, $params);
if (empty($record)) {
return false;
}
if (!empty($user['password'])) {
$password = user_hash($user['password'], $record['salt']);
if ($password != $record['password']) {
return false;
}
}
if($record['type'] == ACCOUNT_OPERATE_CLERK) {
$clerk = pdo_get('storex_activity_clerks', array('uid' => $record['uid']));
if(!empty($clerk)) {
$record['name'] = $clerk['name'];
$record['clerk_id'] = $clerk['id'];
$record['store_id'] = $clerk['storeid'];
$record['store_name'] = pdo_fetchcolumn('SELECT business_name FROM ' . tablename('storex_activity_stores') . ' WHERE id = :id', array(':id' => $clerk['storeid']));
$record['clerk_type'] = '3';
$record['uniacid'] = $clerk['uniacid'];
}
} else {
//clerk_type 操作人类型,1: 线上操作 2: 系统后台(公众号管理员和操作员) 3: 店员
$record['name'] = $user['username'];
$record['clerk_id'] = $user['uid'];
$record['store_id'] = 0;
$record['clerk_type'] = '2';
}
return $record;
}
function storex_user_permission_exist($uid = 0, $uniacid = 0) {
global $_W;
$uid = intval($uid) > 0 ? $uid : $_W['uid'];
$uniacid = intval($uniacid) > 0 ? $uniacid : $_W['uniacid'];
if($_W['role'] == 'founder' || $_W['role'] == 'manager') {
return true;
}
$is_exist = pdo_fetch('SELECT id FROM ' . tablename('storex_users_permission') . ' WHERE `uid`=:uid AND `uniacid`=:uniacid', array(':uid' => $uid, ':uniacid' => $uniacid));
if(empty($is_exist)) {
if($_W['role'] != 'clerk') {
return true;
} else {
return error(-1, '');
}
} else {
return error(-1, '');
}
}
/*
* 默认获取某个操作员对于某个公众号的权限
* $type => 'system' 获取系统菜单权限
* */
function storex_user_permission($type = 'system', $uid = 0, $uniacid = 0) {
global $_W;
$uid = empty($uid) ? $_W['uid'] : intval($uid);
$uniacid = empty($uniacid) ? $_W['uniacid'] : intval($uniacid);
$sql = 'SELECT `permission` FROM ' . tablename('users_permission') . ' WHERE `uid`=:uid AND `uniacid`=:uniacid AND `type`=:type';
$pars = array();
$pars[':uid'] = $uid;
$pars[':uniacid'] = $uniacid;
$pars[':type'] = $type;
$data = pdo_fetchcolumn($sql, $pars);
$permission = array();
if(!empty($data)) {
$permission = explode('|', $data);
}
return $permission;
}