youpaishidifu/Sdf1_login
1
1
Fork 0
Code Issues 15 Pull Requests Actions 1 Packages Projects Releases 13 Wiki Activity

修复PHP三个bug：1.changeVisitorRole支持三角色切换（admin/member/visitor）并允许领地主自由切换；2.token验证兼容POST；3.成员权限toggleMemberPerm DOM检测修正

Browse Source
This commit is contained in:
ypsdf1
2026-07-10 23:16:32 +08:00
parent a28083f4ca
commit eaeab955e3
2 changed files with 28 additions and 8 deletions
Download Patch File Download Diff File Expand all files Collapse all files
api/land_api.php
+21 -5
View File
@@ -1570,10 +1570,26 @@ function handleChangeVisitorRole($db, $playerName, $post) {
$currentRole = $permRow ? ($permRow['role'] ?? '') : '';
error_log("[领地权限][切换角色] land=$landName visitor=$visitor newRole=$newRole currentRole=$currentRole");
// 已授权玩家（管理员/成员）不能被强制降级为访客；仅允许把访客提升为 admin
if ($newRole === 'visitor' && ($currentRole === 'admin' || $currentRole === 'member')) {
error_log("[领地权限][切换角色] 拦截降级: $visitor 当前为 $currentRole，拒绝强制设为访客");
echo json_encode(['success' => false, 'error' => '已授权玩家(管理员/成员)不能通过切换访客角色降级，请通过成员管理手动处理']);
// ★ 领地主可自由切换任何角色（admin↔member↔visitor）
// 如果是访客且当前无记录，先插入一条
if (empty($currentRole) && $permRow === null) {
$stmtIns = $db->prepare("INSERT OR IGNORE INTO web_area_permissions (land_id, player_name, role, permissions, granted_at)
VALUES (:land_id, :player, :role, '', :now)");
$stmtIns->bindValue(':land_id', (int)$land['id'], SQLITE3_INTEGER);
$stmtIns->bindValue(':player', $visitor, SQLITE3_TEXT);
$stmtIns->bindValue(':role', $newRole, SQLITE3_TEXT);
$stmtIns->bindValue(':now', time(), SQLITE3_INTEGER);
$stmtIns->execute();
// 写入变更队列通知Java
$changeData = json_encode(['player' => $visitor, 'role' => $newRole, 'land_name' => $landName]);
$stmtC = $db->prepare("INSERT INTO web_admin_changes (change_type, target_id, target_name, change_data, created_at) VALUES ('perm_change', :id, :name, :data, :now)");
$stmtC->bindValue(':id', (int)$land['id'], SQLITE3_INTEGER);
$stmtC->bindValue(':name', $landName, SQLITE3_TEXT);
$stmtC->bindValue(':data', $changeData, SQLITE3_TEXT);
$stmtC->bindValue(':now', time(), SQLITE3_INTEGER);
$stmtC->execute();
$roleLabel = $newRole === 'admin' ? '管理员' : ($newRole === 'member' ? '成员' : '访客');
echo json_encode(['success' => true, 'message' => "已将 $visitor 设为$roleLabel"]);
return;
}
@@ -1596,7 +1612,7 @@ function handleChangeVisitorRole($db, $playerName, $post) {
$stmt3->bindValue(':now', $now, SQLITE3_INTEGER);
$stmt3->execute();
$roleLabel = $newRole === 'admin' ? '管理员' : '访客';
$roleLabel = $newRole === 'admin' ? '管理员' : ($newRole === 'member' ? '成员' : '访客');
echo json_encode(['success' => true, 'message' => "已将 $visitor 设为$roleLabel"]);
}
player.php
+7 -3
View File
@@ -3086,9 +3086,13 @@ async function addLandVisitor(landName) {
}
async function changeVisitorRole(landName, player, currentRole) {
const newRole = currentRole === 'admin' ? 'visitor' : 'admin';
const roleLabel = newRole === 'admin' ? '管理员' : '访客';
if (!await glassConfirm(`确定将 ${player} 设为${roleLabel}吗？${newRole === 'admin' ? '\n管理员将拥有领地管理权限！' : ''}`)) return;
// 三角色循环: visitor → admin → member → visitor
const roleOrder = ['visitor', 'admin', 'member'];
const roleLabels = {visitor: '访客', admin: '管理员', member: '成员'};
const nextIdx = (roleOrder.indexOf(currentRole) + 1) % roleOrder.length;
const newRole = roleOrder[nextIdx];
const roleLabel = roleLabels[newRole];
if (!await glassConfirm(`确定将 ${player} 设为${roleLabel}吗？${newRole === 'admin' ? '\n管理员将拥有领地管理权限！' : ''}${newRole === 'member' ? '\n成员将拥有独立权限控制。' : ''}`)) return;
try {
const url = new URL(API + 'land_api.php', location.href);
const body = new URLSearchParams();