- server.js: fix getSiteName() returning string when not installed causing 'getSiteName(...).then is not a function' crash on homepage (deploy blocker) - server.js: auto-load business routes after install completes (no restart needed), HTML cache keyed by api_key - install: validate db name/email/password, trigger route loading after complete - app.js: fix forgot/reset/verify pages rendering HomePage (missing page mapping) - verify.js: support URL token auto-verification for external registration links - auth: new email_code template for 6-digit code, reset_password template (forgot-password was using verify_email template) - upload.js: fix MP4 magic-bytes check using undefined buf variable - tickets.js: status enum validation, anonymous submission rate limit - security.js: XSS whitelist preserves email template HTML, strips scripts, blocks javascript:/data: hrefs; CORS reject returns 403 - bans.js: allow clearing reason/duration, status enum validation - users.js: fix req.user.role ReferenceError in create user modal - home.js: tracking results now have detail view button - .gitignore: ignore data/ (db credentials), logs, session files, temp scripts
192 lines
9.6 KiB
JavaScript
192 lines
9.6 KiB
JavaScript
const App = {
|
|
navItems: [
|
|
{ id: 'dashboard', label: '控制台', icon: 'fa-chart-simple', roles: ['owner','admin','player'] },
|
|
{ id: 'tickets-create', label: '提交工单', icon: 'fa-plus-circle', roles: ['player'] },
|
|
{ id: 'bans', label: '封禁列表', icon: 'fa-ban', roles: ['owner','admin','player'] },
|
|
{ id: 'unclaimed', label: '待处理工单', icon: 'fa-inbox', roles: ['owner','admin'] },
|
|
{ id: 'users', label: '用户管理', icon: 'fa-users', roles: ['owner'] },
|
|
{ id: 'servers', label: '服务器管理', icon: 'fa-server', roles: ['owner'] },
|
|
{ id: 'polls', label: '投票', icon: 'fa-poll', roles: ['owner'] },
|
|
{ id: 'features', label: '更新内容', icon: 'fa-lightbulb', roles: ['owner'] },
|
|
{ id: 'notifications', label: '通知配置', icon: 'fa-bell', roles: ['owner'] },
|
|
{ id: 'templates', label: '邮件模板', icon: 'fa-envelope', roles: ['owner'] },
|
|
{ id: 'settings', label: '系统设置', icon: 'fa-cog', roles: ['owner'] },
|
|
{ id: 'export', label: '数据导出', icon: 'fa-download', roles: ['owner'] },
|
|
],
|
|
|
|
async init() {
|
|
if (window.__SITE_NAME__) {
|
|
document.getElementById('site-title').textContent = window.__SITE_NAME__;
|
|
document.getElementById('sidebar-title').textContent = window.__SITE_NAME__ || '举报系统';
|
|
}
|
|
try { const s = await API.get('/install/status'); if (!s.installed) { location.hash = '#/install'; return; } } catch { location.hash = '#/install'; return; }
|
|
this._footerLoaded = false;
|
|
window.addEventListener('hashchange', () => this.route());
|
|
window.onerror = (msg, url, line, col, err) => {
|
|
console.error('JS Error:', msg, url, line, col);
|
|
const el = document.getElementById('sidebar-nav');
|
|
if (el) el.insertAdjacentHTML('beforeend', '<div style="color:red;font-size:10px;padding:8px">Error: ' + String(msg).substring(0,80) + '</div>');
|
|
};
|
|
document.getElementById('modal-close-btn').onclick = () => this.closeModal();
|
|
document.addEventListener('click', (e) => {
|
|
const btn = e.target.closest('[data-action]');
|
|
if (!btn) return;
|
|
const parts = btn.dataset.action.split(':');
|
|
const target = window[parts[0]];
|
|
if (target && target[parts[1]]) target[parts[1]](...parts.slice(2));
|
|
});
|
|
this.route();
|
|
},
|
|
|
|
async loadFooter() {
|
|
if (!Auth.isAdmin() || this._footerLoaded) return;
|
|
this._footerLoaded = true;
|
|
try {
|
|
const s = await API.get('/settings/settings');
|
|
const cr = document.getElementById('footer-copyright');
|
|
const icp = document.getElementById('footer-icp');
|
|
if (cr && s.copyright) cr.innerHTML = s.copyright.value;
|
|
if (icp && s.icp && s.icp.value) icp.innerHTML = `<a href="https://beian.miit.gov.cn" target="_blank">${s.icp.value}</a>`;
|
|
} catch {}
|
|
},
|
|
|
|
afterLogin() { location.hash = '#/dashboard'; },
|
|
logout() { Auth.logout(); },
|
|
closeModal() { document.getElementById('modal-overlay').classList.add('hidden'); },
|
|
navigate(page, param) { location.hash = `#/${page}` + (param ? `/${param}` : ''); },
|
|
|
|
route() {
|
|
const hash = location.hash || '#/home';
|
|
const parts = hash.replace('#/', '').split('/');
|
|
const page = parts[0];
|
|
const param = parts.slice(1).join('/');
|
|
|
|
if (page === 'verify') {
|
|
this.showPublic('verify');
|
|
return;
|
|
}
|
|
|
|
if (page === 'install') { this.showPublic('install'); return; }
|
|
if (page === 'home') { this.showPublic('home', param); return; }
|
|
if (page === 'login' || page === 'register' || page === 'forgot' || page === 'reset') { this.showPublic(page); return; }
|
|
if (!Auth.logged()) { location.hash = '#/login'; return; }
|
|
|
|
this.showLayout();
|
|
const sidebarPage = (page === 'tickets' && param.startsWith('create')) ? 'tickets-create' : page;
|
|
this.renderSidebar(sidebarPage);
|
|
|
|
switch (page) {
|
|
case 'dashboard': this.renderMain('控制台', Dashboard, param); break;
|
|
case 'unclaimed': this.renderMain('待处理工单', UnclaimedPage, param); break;
|
|
case 'tickets-create': App.navigate('tickets','create'); break;
|
|
case 'tickets':
|
|
if (param.startsWith('create')) {
|
|
const q = new URLSearchParams((location.hash.split('?')[1] || ''));
|
|
document.getElementById('page-title').textContent = '创建工单';
|
|
document.getElementById('page-actions').innerHTML = '<button class="btn btn-o btn-sm" data-action="App:navigate:tickets"><i class="fas fa-arrow-left"></i> 返回</button>';
|
|
TicketCreate.render(document.getElementById('page-content'), { type: q.get('type') || 'report', prefill: { game_name: Auth.user()?.game_name, game_uid: Auth.user()?.game_uid }, backLink: "App.navigate('tickets')" });
|
|
} else this.renderMain('工单列表', TicketsPage, param);
|
|
break;
|
|
case 'ticket': this.renderMain('工单详情', TicketDetail, param); break;
|
|
case 'tracking': this.renderMain('追踪工单', TrackingPage, param); break;
|
|
case 'users': this.renderMain('用户管理', UsersPage, param); break;
|
|
case 'notifications': this.renderMain('通知配置', NotificationsPage, param); break;
|
|
case 'templates': this.renderMain('邮件模板', TemplatesPage, param); break;
|
|
case 'settings': this.renderMain('系统设置', SettingsPage, param); break;
|
|
case 'export': this.renderMain('数据导出', ExportPage, param); break;
|
|
case 'polls': this.renderMain('投票', PollsPage, param); break;
|
|
case 'features': this.renderMain('更新内容', FeaturesPage, param); break;
|
|
case 'feature': this.renderMain('更新详情', FeatureDetail, param); break;
|
|
case 'servers': this.renderMain('服务器管理', ServersPage, param); break;
|
|
case 'bans': this.renderMain('封禁列表', BansPage, param); break;
|
|
default: this.renderMain('控制台', Dashboard, param);
|
|
}
|
|
},
|
|
|
|
showPublic(page, param) {
|
|
document.getElementById('main-layout').classList.add('hidden');
|
|
const pub = document.getElementById('public-page');
|
|
pub.classList.remove('hidden');
|
|
document.getElementById('top-bar').classList.remove('hidden');
|
|
this.updateTopAuth();
|
|
const comp = page === 'login' ? LoginPage : page === 'register' ? RegisterPage : page === 'install' ? InstallPage : page === 'forgot' ? ForgotPage : page === 'reset' ? ResetPage : page === 'verify' ? VerifyPage : HomePage;
|
|
comp.render(param).then(html => { pub.innerHTML = html; if (comp.mount) comp.mount(param); }).catch(() => {
|
|
pub.innerHTML = '<div class="pub-card"><div class="logo"><i class="fas fa-exclamation-triangle" style="color:var(--d)"></i><h2>加载失败</h2><p>请刷新页面重试</p></div></div>';
|
|
});
|
|
},
|
|
|
|
updateTopAuth() {
|
|
const el = document.getElementById('top-auth');
|
|
if (Auth.logged()) {
|
|
const u = Auth.user();
|
|
el.innerHTML = `<span class="tm ts">${U.esc(u.game_name||u.username)}</span>
|
|
${Auth.isAdmin() ? `<a href="#/dashboard" class="btn btn-p btn-sm"><i class="fas fa-chart-simple"></i> 控制台</a>` : ''}
|
|
${Auth.isAdmin() ? `<a href="#/unclaimed" class="btn btn-o btn-sm">待处理</a>` : ''}
|
|
${Auth.isOwner() ? `<a href="#/polls" class="btn btn-o btn-sm"><i class="fas fa-poll"></i></a>` : ''}
|
|
<button class="btn btn-o btn-sm" onclick="App.logout()"><i class="fas fa-sign-out-alt"></i> 退出</button>`;
|
|
} else {
|
|
el.innerHTML = `<a href="#/login" class="btn btn-o btn-sm"><i class="fas fa-sign-in-alt"></i> 登录</a><a href="#/register" class="btn btn-p btn-sm"><i class="fas fa-user-plus"></i> 注册</a>`;
|
|
el.style.display = 'flex';
|
|
}
|
|
},
|
|
|
|
showLayout() {
|
|
document.getElementById('top-bar').classList.add('hidden');
|
|
document.getElementById('public-page').classList.add('hidden');
|
|
document.getElementById('main-layout').classList.remove('hidden');
|
|
const u = Auth.user();
|
|
document.getElementById('user-info').innerHTML = `<div class="dt"><div class="nm">${U.esc(u.game_name||u.username)}</div></div>`;
|
|
document.getElementById('sidebar-logout').onclick = () => App.logout();
|
|
this.loadFooter();
|
|
},
|
|
|
|
renderSidebar(current) {
|
|
const u = Auth.user();
|
|
const nav = document.getElementById('sidebar-nav');
|
|
nav.innerHTML = this.navItems
|
|
.filter(i => i.roles.includes(u.role))
|
|
.map(i => `<div class="nav-item ${current===i.id?'active':''}" data-nav="${i.id}"><i class="fas ${i.icon}"></i><span>${i.label}</span></div>`).join('');
|
|
nav.querySelectorAll('.nav-item').forEach(el => {
|
|
el.addEventListener('click', () => App.navigate(el.dataset.nav));
|
|
});
|
|
},
|
|
|
|
async renderMain(title, page, param) {
|
|
document.getElementById('page-title').textContent = title;
|
|
document.getElementById('page-actions').innerHTML = '';
|
|
const ct = document.getElementById('page-content');
|
|
ct.innerHTML = await page.render(param);
|
|
if (page.mount) await page.mount(param);
|
|
}
|
|
};
|
|
|
|
document.addEventListener('DOMContentLoaded', () => App.init());
|
|
window.App = App;
|
|
window.Dashboard = Dashboard;
|
|
window.TicketsPage = TicketsPage;
|
|
window.TicketDetail = TicketDetail;
|
|
window.TicketCreate = TicketCreate;
|
|
window.TrackingPage = TrackingPage;
|
|
window.UnclaimedPage = UnclaimedPage;
|
|
window.UsersPage = UsersPage;
|
|
window.TemplatesPage = TemplatesPage;
|
|
window.NotificationsPage = NotificationsPage;
|
|
window.SettingsPage = SettingsPage;
|
|
window.ExportPage = ExportPage;
|
|
window.PollsPage = PollsPage;
|
|
window.FeaturesPage = FeaturesPage;
|
|
window.FeatureDetail = FeatureDetail;
|
|
window.ServersPage = ServersPage;
|
|
window.BansPage = BansPage;
|
|
window.LoginPage = LoginPage;
|
|
window.RegisterPage = RegisterPage;
|
|
window.HomePage = HomePage;
|
|
window.InstallPage = InstallPage;
|
|
window.ForgotPage = ForgotPage;
|
|
window.ResetPage = ResetPage;
|
|
window.VerifyPage = VerifyPage;
|
|
window.U = U;
|
|
window.Auth = Auth;
|
|
window.API = API;
|
|
window.App = App;
|