['canSeeLog' => true], // 管理员可查看日志 'fahuo' => ['canSeeLog' => false] // 发货员不可查看日志 ]; // 银豹接口配置 $config = [ "host" => "https://area41-win.pospal.cn:443", "appID" => "2DD9C4426ED00E4D3338CEB8AD24CCA3", "appKey" => "647593296341423454", "apiVersion" => "v1" ]; // 业务变量初始化 $activeTab = 'query'; // 默认激活查询标签 $phone = ''; // 通用手机号 $customerUidCache = ''; // 会员UID缓存 $operateResult = null; // 操作结果 $queryResult = null; // 会员查询结果 $bindQueryResult = null; // 会员绑定查询结果 $couponRuleName = ''; // 优惠券规则名称 $couponRulesResult = null; // 优惠券规则查询结果 $memberCouponsResult = null; // 会员优惠券查询结果 $rechargeResult = null; // 会员充值记录查询结果 // 日志查询变量（仅管理员可见，默认30天） $logResult = null; $logStartDate = date('Y-m-d', strtotime('-30 days')); $logEndDate = date('Y-m-d'); $logType = ''; $logPage = 1; // ==================== 核心工具函数 ==================== /** * 初始化Session（安全配置） */ function initSession() { global $SESSION_STARTED; if (!$SESSION_STARTED && session_status() === PHP_SESSION_NONE) { // Session安全配置 ini_set('session.cookie_httponly', 1); // 禁止JS读取（防XSS） ini_set('session.cookie_samesite', 'Lax'); // 防CSRF ini_set('session.gc_maxlifetime', 3600); // 有效期1小时 ini_set('session.use_strict_mode', 1); // 拒绝无效Session ID session_start(); // 登录时重置Session ID（防固定攻击） if (isset($_POST['login_action']) && $_POST['login_action'] === 'login') { session_regenerate_id(true); } $SESSION_STARTED = true; } } /** * 生成CSRF令牌（防跨站请求伪造） */ function generateCsrfToken() { if (!isset($_SESSION['csrf_token'])) { $_SESSION['csrf_token'] = bin2hex(random_bytes(32)); } return $_SESSION['csrf_token']; } /** * 校验CSRF令牌 */ function verifyCsrfToken($token) { return isset($_SESSION['csrf_token']) && hash_equals($_SESSION['csrf_token'], $token); } /** * 权限校验函数 */ function checkPermission($requiredPermission, $currentPermissions) { $allowedPermissions = ['canSeeLog']; if (!in_array($requiredPermission, $allowedPermissions)) { writeSystemLog('error', "非法权限校验：{$requiredPermission}", $_SESSION['username'] ?? '未知'); return false; } return isset($currentPermissions[$requiredPermission]) && $currentPermissions[$requiredPermission] === true; } /** * 空值处理函数 */ function getValue($var, $default = '') { return isset($var) && $var !== null ? $var : $default; } // ==================== 日志管理核心函数 ==================== /** * 自动清理指定天数前的旧日志 * @param int $keepDays 保留天数（默认30天） */ function autoClearOldLogs($keepDays = 30) { $logDir = __DIR__ . '/system_logs/'; if (!is_dir($logDir)) return; // 计算保留起始时间（30天前0点） $keepTimestamp = strtotime("-{$keepDays} days", strtotime(date('Y-m-d'))); // 遍历日志文件并清理 $files = glob($logDir . 'sys_log_*.log'); foreach ($files as $file) { preg_match('/sys_log_(\d{8})\.log/', $file, $matches); if (isset($matches[1])) { $fileTimestamp = strtotime($matches[1]); if ($fileTimestamp < $keepTimestamp) { unlink($file); } } } } /** * 记录系统日志（自动清理30天前日志） * @param string $type 日志类型 * @param string $content 日志内容 * @param string $username 操作人 */ function writeSystemLog($type, $content, $username = '') { // 自动清理30天前日志 autoClearOldLogs(30); $logDir = __DIR__ . '/system_logs/'; if (!is_dir($logDir)) { mkdir($logDir, 0755, true); } $logFile = $logDir . 'sys_log_' . date('Ymd') . '.log'; $username = empty($username) ? ($_SESSION['username'] ?? '未知用户') : $username; $clientIp = $_SERVER['REMOTE_ADDR'] ?? '未知IP'; if (isset($_SERVER['HTTP_X_FORWARDED_FOR']) && !empty($_SERVER['HTTP_X_FORWARDED_FOR'])) { $clientIp = $_SERVER['HTTP_X_FORWARDED_FOR']; } $logLine = date('Y-m-d H:i:s') . '|' . $username . '|' . $clientIp . '|' . $type . '|' . $content . PHP_EOL; file_put_contents($logFile, $logLine, FILE_APPEND | LOCK_EX); } /** * 读取系统日志（默认30天） * @param string $startDate 开始日期 * @param string $endDate 结束日期 * @param string $logType 日志类型 * @param int $page 页码 * @param int $pageSize 每页条数 * @return array 日志数据 */ function readSystemLogs($startDate = '', $endDate = '', $logType = '', $page = 1, $pageSize = 20) { $logDir = __DIR__ . '/system_logs/'; $allLogs = []; // 默认30天范围 if (empty($startDate)) $startDate = date('Y-m-d', strtotime('-30 days')); if (empty($endDate)) $endDate = date('Y-m-d'); // 遍历日期范围日志 $currentDate = $startDate; while (strtotime($currentDate) <= strtotime($endDate)) { $logFile = $logDir . 'sys_log_' . str_replace('-', '', $currentDate) . '.log'; if (file_exists($logFile)) { $lines = explode(PHP_EOL, file_get_contents($logFile)); foreach ($lines as $line) { $line = trim($line); if (empty($line)) continue; $logParts = explode('|', $line, 5); if (count($logParts) < 5) continue; // 类型筛选 if (!empty($logType) && $logParts[3] != $logType) continue; $allLogs[] = [ 'time' => $logParts[0], 'user' => $logParts[1], 'ip' => $logParts[2], 'type' => $logParts[3], 'content' => $logParts[4] ]; } } $currentDate = date('Y-m-d', strtotime($currentDate . ' +1 day')); } // 倒序排序+分页 usort($allLogs, function($a, $b) { return strtotime($b['time']) - strtotime($a['time']); }); $total = count($allLogs); $totalPages = ceil($total / $pageSize); $page = max(1, min($page, $totalPages)); $offset = ($page - 1) * $pageSize; $pageLogs = array_slice($allLogs, $offset, $pageSize); return [ 'logs' => $pageLogs, 'total' => $total, 'page' => $page, 'pageSize' => $pageSize, 'totalPages' => $totalPages ]; } // ==================== 银豹接口核心函数 ==================== /** * 生成签名 */ function generateSignature($appKey, $requestBody) { return strtoupper(md5($appKey . $requestBody)); } /** * GZIP解压兼容函数 */ function gzipDecodeCompat($data) { if (function_exists('gzdecode')) return gzdecode($data); $flags = ord(substr($data, 3, 1)); $headerlen = 10; if ($flags & 4) { $unpack = unpack('v', substr($data, 10, 2)); $extralen = $unpack[1]; $headerlen += 2 + $extralen; } if ($flags & 8) $headerlen = strpos(substr($data, $headerlen), chr(0)) + $headerlen + 1; if ($flags & 16) $headerlen = strpos($data, chr(0), $headerlen) + 1; if ($flags & 2) $headerlen += 2; $uncompressed = gzinflate(substr($data, $headerlen)); return $uncompressed === false ? $data : $uncompressed; } /** * 通用POST请求函数 */ function sendPostRequest($url, $requestBody, $config) { $timestampMs = strval(round(microtime(true) * 1000)); $dataSignature = generateSignature($config['appKey'], $requestBody); if (!defined('CURLINFO_CONTENT_ENCODING')) { define('CURLINFO_CONTENT_ENCODING', 104); } $ch = curl_init(); curl_setopt_array($ch, [ CURLOPT_URL => $url, CURLOPT_RETURNTRANSFER => true, CURLOPT_POST => true, CURLOPT_POSTFIELDS => $requestBody, CURLOPT_FOLLOWLOCATION => true, CURLOPT_TIMEOUT => 30, CURLOPT_SSL_VERIFYPEER => false, CURLOPT_SSL_VERIFYHOST => false, CURLOPT_HTTPHEADER => [ 'User-Agent: openApi', 'Content-Type: application/json; charset=utf-8', 'accept-encoding: gzip,deflate', "time-stamp: {$timestampMs}", "data-signature: {$dataSignature}" ] ]); $response = curl_exec($ch); $httpCode = curl_getinfo($ch, CURLINFO_HTTP_CODE); $contentEncoding = curl_getinfo($ch, CURLINFO_CONTENT_ENCODING); $curlError = curl_error($ch); curl_close($ch); if ($curlError) { $username = $_SESSION['username'] ?? '未知用户'; writeSystemLog('error', "CURL错误：{$curlError} | URL：{$url}", $username); return ['status' => 'error', 'msg' => "请求错误: {$curlError}", 'raw' => '']; } // 解压GZIP响应 $uncompressedResponse = $response; if (!empty($response)) { $isGzip = (strtolower($contentEncoding) === 'gzip') || (substr($response, 0, 2) === "\x1f\x8b"); if ($isGzip) { $uncompressedResponse = gzipDecodeCompat($response); } } // 解析JSON $result = json_decode($uncompressedResponse, true); if (json_last_error() !== JSON_ERROR_NONE) { $username = $_SESSION['username'] ?? '未知用户'; writeSystemLog('error', "JSON解析失败：" . json_last_error_msg() . " | 原始数据：" . substr($uncompressedResponse, 0, 200), $username); return ['status' => 'error', 'msg' => "解析失败: " . json_last_error_msg(), 'raw' => $uncompressedResponse]; } return ['status' => 'success', 'data' => $result, 'httpCode' => $httpCode, 'raw' => $uncompressedResponse]; } /** * 查询会员（带缓存） */ function queryMemberByPhone($phone, $config, &$customerUidCache) { $postData = ["appId" => $config["appID"], "customerTel" => $phone]; $requestBody = json_encode($postData, JSON_UNESCAPED_UNICODE); $url = $config['host'] . "/pospal-api2/openapi/{$config['apiVersion']}/customerOpenapi/queryBytel"; $result = sendPostRequest($url, $requestBody, $config); $username = $_SESSION['username'] ?? '未知用户'; if ($result['status'] === 'success' && getValue($result['data']['status']) === 'success') { $members = getValue($result['data']['data'], []); if (!empty($members)) { $customerUidCache = getValue($members[0]['customerUid'], ''); writeSystemLog('query', "查询会员成功：手机号={$phone} | UID={$customerUidCache}", $username); return [ 'success' => true, 'data' => $members, 'uid' => $customerUidCache, 'msg' => "查询会员成功" ]; } else { $customerUidCache = ''; writeSystemLog('query', "查询会员无结果：手机号={$phone}", $username); return [ 'success' => false, 'data' => [], 'uid' => '', 'msg' => "手机号 {$phone} 未绑定会员" ]; } } $errorMsg = getValue($result['msg'], '接口异常'); $customerUidCache = ''; writeSystemLog('error', "查询会员失败：手机号={$phone} | 错误：{$errorMsg}", $username); return [ 'success' => false, 'data' => [], 'uid' => '', 'msg' => "查询失败: {$errorMsg}" ]; } /** * 根据会员号查询会员 * @param string $customerNum 会员号 * @param array $config 银豹接口配置 * @param string &$customerUidCache 会员UID缓存（引用传递） * @return array 查询结果，包含success、data、uid、msg字段 */ function queryMemberByNumber($customerNum, $config, &$customerUidCache) { // 构建请求参数 $postData = ["appId" => $config["appID"], "customerNum" => $customerNum]; $requestBody = json_encode($postData, JSON_UNESCAPED_UNICODE); $url = $config['host'] . "/pospal-api2/openapi/{$config['apiVersion']}/customerOpenapi/queryByNumber"; // 发送API请求 $result = sendPostRequest($url, $requestBody, $config); $username = $_SESSION['username'] ?? '未知用户'; // 处理API响应 if ($result['status'] === 'success' && getValue($result['data']['status']) === 'success') { $member = getValue($result['data']['data'], []); if (!empty($member)) { // 缓存会员UID $customerUidCache = getValue($member['customerUid'], ''); // 记录日志 writeSystemLog('query', "查询会员成功：会员号={$customerNum} | UID={$customerUidCache}", $username); // 返回成功结果 return [ 'success' => true, 'data' => [$member], // 保持与queryMemberByPhone函数返回格式一致 'uid' => $customerUidCache, 'msg' => "查询会员成功" ]; } else { // 会员不存在 $customerUidCache = ''; writeSystemLog('query', "查询会员无结果：会员号={$customerNum}", $username); return [ 'success' => false, 'data' => [], 'uid' => '', 'msg' => "会员号 {$customerNum} 不存在" ]; } } // API请求失败 $errorMsg = getValue($result['msg'], '接口异常'); $customerUidCache = ''; writeSystemLog('error', "查询会员失败：会员号={$customerNum} | 错误：{$errorMsg}", $username); return [ 'success' => false, 'data' => [], 'uid' => '', 'msg' => "查询失败: {$errorMsg}" ]; } /** * 修改会员手机号 * @param string $customerUid 会员在银豹系统的唯一标识 * @param string $newPhone 新手机号 * @param array $config 银豹接口配置 * @return array 修改结果，包含success和msg字段 */ function updateMemberPhone($customerUid, $newPhone, $config) { // 构建会员信息数据 $memberData = [ "customerUid" => $customerUid, "phone" => $newPhone ]; // 构建请求参数 $postData = ["appId" => $config["appID"], "customerInfo" => $memberData]; $requestBody = json_encode($postData, JSON_UNESCAPED_UNICODE); $url = $config['host'] . "/pospal-api2/openapi/{$config['apiVersion']}/customerOpenapi/updateBaseInfo"; // 发送API请求 $result = sendPostRequest($url, $requestBody, $config); $username = $_SESSION['username'] ?? '未知用户'; // 处理API响应 if ($result['status'] === 'success' && getValue($result['data']['status']) === 'success') { // 修改成功 writeSystemLog('update', "修改会员手机号成功：UID={$customerUid} | 新手机号={$newPhone}", $username); return [ 'success' => true, 'msg' => "修改手机号成功" ]; } else { // 修改失败 $errorMsg = getValue($result['msg'], getValue($result['data']['messages'][0] ?? '未知错误')); writeSystemLog('error', "修改会员手机号失败：UID={$customerUid} | 新手机号={$newPhone} | 错误：{$errorMsg}", $username); return [ 'success' => false, 'msg' => "修改失败: {$errorMsg}" ]; } } /** * 修改会员状态（启用/禁用） * @param string $customerUid 会员在银豹系统的唯一标识 * @param int $status 状态值，1为启用，0为禁用 * @param array $config 银豹接口配置 * @return array 修改结果，包含success和msg字段 */ function updateMemberStatus($customerUid, $status, $config) { // 构建会员信息数据 $memberData = [ "customerUid" => $customerUid, "enable" => $status ]; // 构建请求参数 $postData = ["appId" => $config["appID"], "customerInfo" => $memberData]; $requestBody = json_encode($postData, JSON_UNESCAPED_UNICODE); $url = $config['host'] . "/pospal-api2/openapi/{$config['apiVersion']}/customerOpenapi/updateBaseInfo"; // 发送API请求 $result = sendPostRequest($url, $requestBody, $config); $username = $_SESSION['username'] ?? '未知用户'; // 处理API响应 if ($result['status'] === 'success' && getValue($result['data']['status']) === 'success') { // 修改成功 $statusText = $status == 1 ? '启用' : '禁用'; writeSystemLog('update', "修改会员状态成功：UID={$customerUid} | 状态={$statusText}", $username); return [ 'success' => true, 'msg' => "会员{$statusText}成功" ]; } else { // 修改失败 $errorMsg = getValue($result['msg'], getValue($result['data']['messages'][0] ?? '未知错误')); $statusText = $status == 1 ? '启用' : '禁用'; writeSystemLog('error', "修改会员状态失败：UID={$customerUid} | 状态={$statusText} | 错误：{$errorMsg}", $username); return [ 'success' => false, 'msg' => "修改失败: {$errorMsg}" ]; } } /** * 查询优惠券规则 */ function getCouponRuleUid($ruleName, $config) { $postData = ["appId" => $config["appID"]]; $requestBody = json_encode($postData, JSON_UNESCAPED_UNICODE); $url = $config['host'] . "/pospal-api2/openapi/{$config['apiVersion']}/promotionOpenApi/queryCouponPromotions"; $result = sendPostRequest($url, $requestBody, $config); if ($result['status'] === 'success') { $responseData = getValue($result['data'], []); if (getValue($responseData['status']) === 'success') { $couponRules = getValue($responseData['data'], []); $ruleNames = []; foreach ($couponRules as $rule) { $ruleNameTmp = getValue($rule['name'], ''); $ruleNames[] = $ruleNameTmp; if (stripos($ruleNameTmp, $ruleName) !== false) { $couponUid = getValue($rule['promotionCouponUid'], ''); $validEndDate = getValue($rule['endDate'], '未知'); return [ 'success' => true, 'uid' => $couponUid, 'msg' => "找到规则：{$ruleNameTmp}（UID：{$couponUid}）", 'validEndDate' => !empty($validEndDate) ? substr($validEndDate, 0, 10) : '未知' ]; } } $ruleNameStr = implode(',', $ruleNames); return [ 'success' => false, 'uid' => '', 'msg' => "未找到「{$ruleName}」相关规则，可用规则：{$ruleNameStr}" ]; } else { $errorMsg = !empty($responseData['messages'][0]) ? $responseData['messages'][0] : '接口错误'; return ['success' => false, 'uid' => '', 'msg' => "查询失败: {$errorMsg}"]; } } $errorMsg = getValue($result['msg'], '网络异常'); return ['success' => false, 'uid' => '', 'msg' => "查询失败: {$errorMsg}"]; } /** * 查询可用优惠券规则（支持关键字模糊匹配） */ function getAllCouponRules($config, $keyword = '') { $postData = ["appId" => $config["appID"]]; $requestBody = json_encode($postData, JSON_UNESCAPED_UNICODE); $url = $config['host'] . "/pospal-api2/openapi/{$config['apiVersion']}/promotionOpenApi/queryCouponPromotions"; $result = sendPostRequest($url, $requestBody, $config); $username = $_SESSION['username'] ?? '未知用户'; if ($result['status'] === 'success') { $responseData = getValue($result['data'], []); if (getValue($responseData['status']) === 'success') { $couponRules = getValue($responseData['data'], []); // 过滤出可用的优惠券规则 $availableRules = array_filter($couponRules, function($rule) { return getValue($rule['enable'], 0) === 1; }); // 如果有关键字，进行模糊匹配 if (!empty($keyword)) { $availableRules = array_filter($availableRules, function($rule) use ($keyword) { $ruleName = getValue($rule['name'], ''); return stripos($ruleName, $keyword) !== false; }); } $ruleCount = count($availableRules); $logMsg = !empty($keyword) ? "根据关键字 '{$keyword}' 查询可用优惠券规则成功，共找到 {$ruleCount} 条规则" : "查询所有可用优惠券规则成功，共找到 {$ruleCount} 条规则"; writeSystemLog('query', $logMsg, $username); $msg = !empty($keyword) ? "查询成功，共找到 {$ruleCount} 条与 '{$keyword}' 相关的可用优惠券规则" : "查询成功，共找到 {$ruleCount} 条可用优惠券规则"; return [ 'success' => true, 'data' => $availableRules, 'msg' => $msg ]; } else { $errorMsg = !empty($responseData['messages'][0]) ? $responseData['messages'][0] : '接口错误'; writeSystemLog('error', "查询优惠券规则失败：{$errorMsg}", $username); return ['success' => false, 'data' => [], 'msg' => "查询失败: {$errorMsg}"]; } } $errorMsg = getValue($result['msg'], '网络异常'); writeSystemLog('error', "查询优惠券规则失败：{$errorMsg}", $username); return ['success' => false, 'data' => [], 'msg' => "查询失败: {$errorMsg}"]; } /** * 检查是否在30秒内已经发送过优惠券 */ function checkCouponSendLimit($phone) { $limitFile = __DIR__ . '/coupon_send_limit.json'; $limits = []; if (file_exists($limitFile)) { $content = file_get_contents($limitFile); if (!empty($content)) { $limits = json_decode($content, true); } } $currentTime = time(); $phoneKey = 'phone_' . $phone; if (isset($limits[$phoneKey])) { $lastSendTime = $limits[$phoneKey]; if ($currentTime - $lastSendTime < 30) { return false; // 30秒内已发送过 } } return true; // 可以发送 } /** * 记录优惠券发送时间 */ function recordCouponSendTime($phone) { $limitFile = __DIR__ . '/coupon_send_limit.json'; $limits = []; if (file_exists($limitFile)) { $content = file_get_contents($limitFile); if (!empty($content)) { $limits = json_decode($content, true); } } $currentTime = time(); $phoneKey = 'phone_' . $phone; $limits[$phoneKey] = $currentTime; // 清理过期记录（超过1小时的记录） foreach ($limits as $key => $time) { if (time() - $time > 3600) { unset($limits[$key]); } } file_put_contents($limitFile, json_encode($limits)); } /** * 生成唯一优惠券码 */ function generateUniqueCouponCode() { return 'COUP' . date('YmdHis') . rand(100000, 999999); } /** * 发放优惠券 */ function sendCouponToMember($customerUid, $couponRuleUid, $config, $ruleEndDate = '未知') { $couponCode = generateUniqueCouponCode(); $postData = [ "appId" => $config["appID"], "promotionCouponUid" => $couponRuleUid, "code" => $couponCode, "customerUid" => $customerUid ]; $requestBody = json_encode($postData, JSON_UNESCAPED_UNICODE); $url = $config['host'] . "/pospal-api/api/auth/openapi/promotion/addCouponcode/"; $result = sendPostRequest($url, $requestBody, $config); if ($result['status'] === 'success') { $responseData = getValue($result['data'], []); if (getValue($responseData['status']) === 'success') { $expiredDate = getValue($responseData['data']['codeExpiredDate'], ''); $finalExpiredDate = !empty($expiredDate) ? substr($expiredDate, 0, 10) : $ruleEndDate; return [ 'success' => true, 'code' => $couponCode, 'expiredDate' => $finalExpiredDate, 'msg' => "发放成功！\n券码：{$couponCode}\n有效期至：{$finalExpiredDate}" ]; } else { $errorMsg = !empty($responseData['messages'][0]) ? $responseData['messages'][0] : '接口错误'; return ['success' => false, 'code' => '', 'expiredDate' => '', 'msg' => "发放失败: {$errorMsg}"]; } } $errorMsg = getValue($result['msg'], '网络异常'); return ['success' => false, 'code' => '', 'expiredDate' => '', 'msg' => "发放失败: {$errorMsg}"]; } /** * 查询会员优惠券 */ function queryMemberCoupons($phone, $config, &$customerUidCache, $page = 1, $pageSize = 20) { // 先查询会员UID $memberResult = queryMemberByPhone($phone, $config, $customerUidCache); if (!$memberResult['success']) { return [ 'success' => false, 'data' => [], 'msg' => $memberResult['msg'] ]; } $customerUid = $customerUidCache; $username = $_SESSION['username'] ?? '未知用户'; // 调用查询会员优惠券API $postData = [ "appId" => $config["appID"], "customerUid" => $customerUid, "page" => $page, "pageSize" => $pageSize ]; $requestBody = json_encode($postData, JSON_UNESCAPED_UNICODE); $url = $config['host'] . "/pospal-api2/openapi/{$config['apiVersion']}/promotionOpenApi/queryCustomerCouponCodePage"; $result = sendPostRequest($url, $requestBody, $config); if ($result['status'] === 'success') { $responseData = getValue($result['data'], []); // 记录详细的响应数据 writeSystemLog('query', "查询会员优惠券API响应：手机号={$phone} | 响应数据：" . json_encode($responseData), $username); if (getValue($responseData['status']) === 'success') { // 优惠券数据在 result 字段中 $coupons = getValue($responseData['data']['result'], []); $totalCount = count($coupons); $totalPages = ceil($totalCount / $pageSize); // 检查优惠券数据 if (empty($coupons)) { writeSystemLog('info', "查询会员优惠券为空：手机号={$phone}", $username); } else { writeSystemLog('info', "查询会员优惠券成功：手机号={$phone} | UID={$customerUid} | 共找到 {$totalCount} 张优惠券", $username); } return [ 'success' => true, 'data' => $coupons, 'total' => $totalCount, 'page' => $page, 'pageSize' => $pageSize, 'totalPages' => $totalPages, 'msg' => "查询成功，共找到 {$totalCount} 张优惠券" ]; } else { $errorMsg = !empty($responseData['messages'][0]) ? $responseData['messages'][0] : '接口错误'; writeSystemLog('error', "查询会员优惠券失败：手机号={$phone} | UID={$customerUid} | 错误：{$errorMsg}", $username); return ['success' => false, 'data' => [], 'msg' => "查询失败: {$errorMsg}"]; } } $errorMsg = getValue($result['msg'], '网络异常'); writeSystemLog('error', "查询会员优惠券失败：手机号={$phone} | 错误：{$errorMsg} | 原始响应：" . $result['raw'], $username); return ['success' => false, 'data' => [], 'msg' => "查询失败: {$errorMsg}"]; } /** * 查询会员通用金额充值记录 * @param string $phone 会员手机号 * @param array $config 银豹接口配置 * @param string &$customerUidCache 会员UID缓存（引用传递） * @param int $page 页码 * @param int $pageSize 每页条数 * @return array 查询结果，包含success、data、total、page、pageSize、totalPages、msg字段 */ function queryMemberRechargeRecords($phone, $config, &$customerUidCache, $page = 1, $pageSize = 20) { // 先查询会员UID $memberResult = queryMemberByPhone($phone, $config, $customerUidCache); if (!$memberResult['success']) { return [ 'success' => false, 'data' => [], 'msg' => $memberResult['msg'] ]; } $customerUid = $customerUidCache; $username = $_SESSION['username'] ?? '未知用户'; // 调用查询会员充值日志API（使用专门的会员充值日志接口） $postData = [ "appId" => $config["appID"], "customerUid" => $customerUid ]; // 调试：打印请求参数 $username = $_SESSION['username'] ?? '未知用户'; writeSystemLog('debug', "充值记录查询请求参数：" . json_encode($postData), $username); $requestBody = json_encode($postData, JSON_UNESCAPED_UNICODE); $url = $config['host'] . "/pospal-api2/openapi/{$config['apiVersion']}/customerOpenApi/queryCustomerRechargeLog"; $result = sendPostRequest($url, $requestBody, $config); if ($result['status'] === 'success') { $responseData = getValue($result['data'], []); // 记录详细的响应数据 writeSystemLog('query', "查询会员充值记录API响应：手机号={$phone} | 响应数据：" . json_encode($responseData), $username); if (getValue($responseData['status']) === 'success') { // 获取充值记录数据（直接从data字段获取） $rechargeRecords = getValue($responseData['data'], []); // 映射字段名，确保与前端期望的格式一致 $mappedRecords = []; foreach ($rechargeRecords as $record) { $mappedRecords[] = [ 'amount' => $record['rechargeMoney'] ?? 0, 'createdDate' => $record['datetime'] ?? '', 'paymentMethod' => $record['payMethod'] ?? '', 'operator' => '系统', // API返回中没有操作人字段 'remarks' => "充值后余额：" . ($record['customerMoneyAfterRecharge'] ?? 0) . "元" ]; } $rechargeRecords = $mappedRecords; $totalCount = count($rechargeRecords); $totalPages = ceil($totalCount / $pageSize); // 检查充值记录数据 if (empty($rechargeRecords)) { writeSystemLog('info', "查询会员充值记录为空：手机号={$phone}", $username); } else { writeSystemLog('info', "查询会员充值记录成功：手机号={$phone} | UID={$customerUid} | 共找到 {$totalCount} 条记录", $username); } return [ 'success' => true, 'data' => $rechargeRecords, 'total' => $totalCount, 'page' => $page, 'pageSize' => $pageSize, 'totalPages' => $totalPages, 'msg' => "查询成功，共找到 {$totalCount} 条充值记录" ]; } else { $errorMsg = !empty($responseData['messages'][0]) ? $responseData['messages'][0] : '接口错误'; writeSystemLog('error', "查询会员充值记录失败：手机号={$phone} | UID={$customerUid} | 错误：{$errorMsg}", $username); return ['success' => false, 'data' => [], 'msg' => "查询失败: {$errorMsg}"]; } } $errorMsg = getValue($result['msg'], '网络异常'); writeSystemLog('error', "查询会员充值记录失败：手机号={$phone} | 错误：{$errorMsg} | 原始响应：" . $result['raw'], $username); return ['success' => false, 'data' => [], 'msg' => "查询失败: {$errorMsg}"]; } // ==================== 业务逻辑处理 ==================== // 初始化Session initSession(); // 登录验证 if ($_SERVER['REQUEST_METHOD'] === 'POST' && isset($_POST['login_action']) && $_POST['login_action'] === 'login') { // CSRF校验 if (!verifyCsrfToken($_POST['csrf_token'] ?? '')) { $loginError = '非法请求！'; } else { $username = trim($_POST['username'] ?? ''); $password = trim($_POST['password'] ?? ''); // 账号密码配置（建议迁移到独立配置文件） $validUsers = [ 'admin' => password_hash('blx123456', PASSWORD_DEFAULT), 'fahuo' => password_hash('blx123456', PASSWORD_DEFAULT) ]; if (isset($validUsers[$username]) && password_verify($password, $validUsers[$username])) { $_SESSION['logged_in'] = true; $_SESSION['username'] = $username; $_SESSION['permissions'] = $userPermissions[$username] ?? ['canSeeLog' => false]; $isLoggedIn = true; writeSystemLog('login', "登录成功", $username); } else { $loginError = '账号或密码错误！'; $isLoggedIn = false; writeSystemLog('login_error', "登录失败：账号={$username}", $username); } } } // 检查登录状态 if (isset($_SESSION['logged_in']) && $_SESSION['logged_in'] === true) { $isLoggedIn = true; } // 获取当前用户信息 $currentUser = $_SESSION['username'] ?? ''; $currentPermissions = $_SESSION['permissions'] ?? ['canSeeLog' => false]; $canSeeLog = checkPermission('canSeeLog', $currentPermissions); // 登出处理 if ($_SERVER['REQUEST_METHOD'] === 'POST' && isset($_POST['login_action']) && $_POST['login_action'] === 'logout') { // CSRF校验 if (verifyCsrfToken($_POST['csrf_token'] ?? '')) { $username = $_SESSION['username'] ?? '未知用户'; writeSystemLog('logout', "登出成功", $username); $_SESSION = []; if (ini_get("session.use_cookies")) { $params = session_get_cookie_params(); setcookie(session_name(), '', time() - 42000, $params["path"], $params["domain"], $params["secure"], $params["httponly"] ); } session_destroy(); $isLoggedIn = false; header("Location: " . $_SERVER['PHP_SELF']); exit; } else { $loginError = '非法请求！'; } } // 登录后业务处理 if ($isLoggedIn && $_SERVER['REQUEST_METHOD'] === 'POST') { // CSRF校验 if (!verifyCsrfToken($_POST['csrf_token'] ?? '')) { $operateResult = ['status' => 'error', 'msg' => '非法请求！']; } else { $phone = trim($_POST['phone'] ?? ''); $activeTab = trim($_POST['active_tab'] ?? 'query'); $username = $_SESSION['username'] ?? '未知用户'; // 日志查询（仅管理员） if ($canSeeLog && isset($_POST['action']) && $_POST['action'] === 'query_log') { $logStartDate = trim($_POST['log_start_date'] ?? $logStartDate); $logEndDate = trim($_POST['log_end_date'] ?? $logEndDate); $logType = trim($_POST['log_type'] ?? ''); $logPage = intval($_POST['log_page'] ?? 1); $logResult = readSystemLogs($logStartDate, $logEndDate, $logType, $logPage); } // ==================== 会员查询处理 ==================== /** * 处理会员查询请求 * 通过手机号查询会员信息 */ if (isset($_POST['action']) && $_POST['action'] === 'query') { $queryResult = queryMemberByPhone($phone, $config, $customerUidCache); } // ==================== 修改手机号处理 ==================== /** * 处理修改手机号请求 * 注意：此功能已迁移到会员绑定页面，此处保留代码仅为兼容历史操作 */ if (isset($_POST['action']) && $_POST['action'] === 'update_phone') { $newPhone = trim($_POST['new_phone'] ?? ''); if (empty($newPhone)) { $operateResult = ['status' => 'error', 'msg' => '新手机号不能为空！']; } elseif (!preg_match('/^1[3-9]\d{9}$/', $newPhone)) { $operateResult = ['status' => 'error', 'msg' => '请输入有效11位手机号！']; } else { if (empty($customerUidCache)) { $operateResult = ['status' => 'error', 'msg' => '请先查询会员信息！']; } else { $updateResult = updateMemberPhone($customerUidCache, $newPhone, $config); $operateResult = [ 'status' => $updateResult['success'] ? 'success' : 'error', 'msg' => $updateResult['msg'] ]; } } } // ==================== 会员绑定处理 ==================== /** * 处理会员绑定 - 查询会员 * 通过会员号查询会员信息，为后续修改手机号做准备 */ if (isset($_POST['action']) && $_POST['action'] === 'bind_query') { $customerNum = trim($_POST['customer_num'] ?? ''); if (empty($customerNum)) { $operateResult = ['status' => 'error', 'msg' => '会员号不能为空！']; } else { $bindQueryResult = queryMemberByNumber($customerNum, $config, $customerUidCache); if (!$bindQueryResult['success']) { $operateResult = ['status' => 'error', 'msg' => $bindQueryResult['msg']]; } } } /** * 处理会员绑定 - 修改手机号 * 在查询到会员信息后，修改会员的手机号 */ if (isset($_POST['action']) && $_POST['action'] === 'bind_update_phone') { $customerUid = trim($_POST['customer_uid'] ?? ''); $newPhone = trim($_POST['new_phone'] ?? ''); if (empty($customerUid)) { $operateResult = ['status' => 'error', 'msg' => '会员信息不存在，请先查询会员！']; } elseif (empty($newPhone)) { $operateResult = ['status' => 'error', 'msg' => '新手机号不能为空！']; } elseif (!preg_match('/^1[3-9]\d{9}$/', $newPhone)) { $operateResult = ['status' => 'error', 'msg' => '请输入有效11位手机号！']; } else { $updateResult = updateMemberPhone($customerUid, $newPhone, $config); $operateResult = [ 'status' => $updateResult['success'] ? 'success' : 'error', 'msg' => $updateResult['msg'] ]; } } // 发放优惠券 if (isset($_POST['action']) && $_POST['action'] === 'send_coupon') { $couponRuleName = trim($_POST['coupon_rule_name'] ?? ''); if (empty($phone)) { $operateResult = ['status' => 'error', 'msg' => '手机号不能为空！']; } elseif (!preg_match('/^1[3-9]\d{9}$/', $phone)) { $operateResult = ['status' => 'error', 'msg' => '请输入有效11位手机号！']; } elseif (empty($couponRuleName)) { $operateResult = ['status' => 'error', 'msg' => '优惠券规则名称不能为空！']; } elseif (!checkCouponSendLimit($phone)) { $operateResult = ['status' => 'error', 'msg' => '30秒内已发送过优惠券，请稍后再试！']; writeSystemLog('error', "发券失败：手机号={$phone} | 错误：30秒内已发送过优惠券", $username); } else { if (empty($customerUidCache)) { $checkResult = queryMemberByPhone($phone, $config, $customerUidCache); if (!$checkResult['success']) { $operateResult = ['status' => 'error', 'msg' => $checkResult['msg']]; $customerUidCache = ''; } } if (!empty($customerUidCache)) { $couponRuleResult = getCouponRuleUid($couponRuleName, $config); if (!$couponRuleResult['success']) { $operateResult = ['status' => 'error', 'msg' => $couponRuleResult['msg']]; writeSystemLog('error', "发券失败：手机号={$phone} | 规则={$couponRuleName} | 错误：{$couponRuleResult['msg']}", $username); } else { $sendResult = sendCouponToMember( $customerUidCache, $couponRuleResult['uid'], $config, $couponRuleResult['validEndDate'] ); $operateResult = [ 'status' => $sendResult['success'] ? 'success' : 'error', 'msg' => $sendResult['msg'] ]; if ($sendResult['success']) { recordCouponSendTime($phone); // 记录发送时间 writeSystemLog('coupon', "发券成功：手机号={$phone} | UID={$customerUidCache} | 规则={$couponRuleName} | 券码={$sendResult['code']} | 有效期至={$sendResult['expiredDate']}", $username); } else { writeSystemLog('error', "发券失败：手机号={$phone} | UID={$customerUidCache} | 规则={$couponRuleName} | 错误：{$sendResult['msg']}", $username); } } } else { $operateResult = ['status' => 'error', 'msg' => "手机号 {$phone} 会员不存在！"]; writeSystemLog('coupon', "发券失败：手机号={$phone}（不存在）", $username); } } } // 查询可用优惠券规则（支持关键字模糊匹配） if (isset($_POST['action']) && $_POST['action'] === 'query_coupon_rules') { $couponRuleKeyword = trim($_POST['coupon_rule_keyword'] ?? ''); $couponRulesResult = getAllCouponRules($config, $couponRuleKeyword); } // 查询会员优惠券 if (isset($_POST['action']) && $_POST['action'] === 'query_member_coupons') { $phone = trim($_POST['phone'] ?? ''); $page = intval($_POST['page'] ?? 1); $pageSize = 20; if (empty($phone)) { $memberCouponsResult = ['status' => 'error', 'msg' => '手机号不能为空！']; } elseif (!preg_match('/^1[3-9]\d{9}$/', $phone)) { $memberCouponsResult = ['status' => 'error', 'msg' => '请输入有效11位手机号！']; } else { $memberCouponsResult = queryMemberCoupons($phone, $config, $customerUidCache, $page, $pageSize); } } // 查询会员充值记录 if (isset($_POST['action']) && $_POST['action'] === 'query_member_recharge') { $phone = trim($_POST['phone'] ?? ''); $page = intval($_POST['page'] ?? 1); $pageSize = 20; if (empty($phone)) { $rechargeResult = ['status' => 'error', 'msg' => '手机号不能为空！']; } elseif (!preg_match('/^1[3-9]\d{9}$/', $phone)) { $rechargeResult = ['status' => 'error', 'msg' => '请输入有效11位手机号！']; } else { $rechargeResult = queryMemberRechargeRecords($phone, $config, $customerUidCache, $page, $pageSize); } } // 切换会员状态（启用/禁用） if (isset($_POST['action']) && $_POST['action'] === 'toggle_status') { $customerUid = trim($_POST['customer_uid'] ?? ''); $currentStatus = intval($_POST['current_status'] ?? 1); $phone = trim($_POST['phone'] ?? ''); if (empty($customerUid)) { $operateResult = ['status' => 'error', 'msg' => '会员信息不存在！']; } else { // 计算新状态（1变0，0变1） $newStatus = $currentStatus == 1 ? 0 : 1; $updateResult = updateMemberStatus($customerUid, $newStatus, $config); $operateResult = [ 'status' => $updateResult['success'] ? 'success' : 'error', 'msg' => $updateResult['msg'] ]; // 重新查询会员信息以更新界面 if ($updateResult['success'] && !empty($phone)) { $queryResult = queryMemberByPhone($phone, $config, $customerUidCache); } } } } } // 初始化日志查询（管理员默认显示30天） if ($isLoggedIn && $canSeeLog && $activeTab === 'log' && $logResult === null) { $logResult = readSystemLogs($logStartDate, $logEndDate, $logType, $logPage); } // ==================== 前端页面渲染 ==================== ?> 巴黎香平台发货系统
巴黎香平台发货系统 - 登录

巴黎香平台发货系统

会员查询
会员绑定
发优惠券
优惠券规则
会员优惠券
充值记录
系统日志

共找到 个会员：
$member): ?>

会员

会员UID：

会员号：

姓名：

手机号：

余额： 元

积分：

等级：

状态：

生日：

QQ：

邮箱：

地址：

备注：

创建日期：

是否赊账：

到期日期：

开卡门店：

部门：

扩展信息：

性别：

农历生日：

总积分：

信用额度： 元

信用期限： 天

昵称：

补贴金额： 元

微信信息：

OpenId：

类型：

会员绑定

查询会员成功：

会员信息

会员UID：

会员号：

姓名：

当前手机号：

余额： 元

积分：

等级：

状态：

生日：

QQ：

邮箱：

地址：

备注：

创建日期：

是否赊账：

到期日期：

开卡门店：

部门：

扩展信息：

性别：

农历生日：

总积分：

信用额度： 元

信用期限： 天

昵称：

补贴金额： 元

微信信息：

OpenId：

类型：

修改手机号

$rule): ?>

规则 ：

规则UID：

类型： '全场抵现券', 11 => '品类抵现券', 12 => '单品抵现券', 15 => '多品抵现券', 20 => '全场打折券', 21 => '品类打折券', 22 => '单品打折券', 23 => '单品特价券', 24 => '赠品提货券', 25 => '多品打折券', 30 => '免运费券' ]; echo $typeMap[$couponType] ?? '未知类型'; ?>

状态：

开始时间：

结束时间：

最低消费： 元

抵现金额： 元

折扣： 折

实体店可用：

网店可用：

会员专享：

0): ?>
$coupon): ?>

优惠券

券码：

状态：未使用

有效期至：

优惠券名称：

发放时间：

1): ?>
0): ?>
$record): ?>

充值记录

充值金额： 元

充值时间：

充值方式：

操作人：

备注：

1): ?>
时间 操作人 IP地址 日志类型 内容
暂无符合条件的日志记录