HEX
Server: nginx/1.28.1
System: Linux 10-41-63-61 6.8.0-31-generic #31-Ubuntu SMP PREEMPT_DYNAMIC Sat Apr 20 00:40:06 UTC 2024 x86_64
User: www (1001)
PHP: 7.4.33
Disabled: passthru,exec,system,putenv,chroot,chgrp,chown,shell_exec,popen,proc_open,pcntl_exec,ini_alter,ini_restore,dl,openlog,syslog,readlink,symlink,popepassthru,pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,imap_open,apache_setenv
Upload Files
File: /www/wwwroot//douyin.fehss.com/application/admin/controller/Comment.php
<?php
// +----------------------------------------------------------------------
// | Description: 评论
// +----------------------------------------------------------------------
// | Author:  yykun
// +----------------------------------------------------------------------

namespace app\admin\controller;

use think\Request;
use think\Session;
use think\Hook;
use app\common\controller\Common;

class Comment extends Common
{
    /**
     * 用于判断权限
     * @permission 无限制
     * @allow 登录用户可访问
     * @other 其他根据系统设置
    **/    
    public function _initialize()
    {
        $action = [
            'permission'=>[''],  //不登录可访问
            'allow'=>['save','delete']  //需要登录才能访问          
        ];
        Hook::listen('check_auth',$action);
        $request = Request::instance();
        $a = strtolower($request->action());  
		$c = strtolower($request->controller()); 
		$m = strtolower($request->module()); 		
        if (!in_array($a, $action['permission'])) {
            parent::_initialize();
        }
    }

    //添加评论
    public function save()
    {
        $param = $this->param;
        $model = model('Comment');
        if ($param['task_id']) {
            $userInfo = $this->userInfo;
			$param['create_user_id'] = $userInfo['id']; 
            $flag = $model->createData($param);
            if ($flag) {
                return resultArray(['data'=>$flag]);
            } else {
                return resultArray(['error'=>$workModel->getError()]);
            }
        } else {
            return resultArray(['error'=>'参数错误']);
        }

    }

    //删除评论
    public function delete()
    {
        $param = $this->param;
        $commentModel = model('Comment');
        if ($param['comment_id']) {
            $userInfo   			 = $this->userInfo;
			$param['create_user_id'] = $userInfo['id']; 
            $flag = $commentModel->delDataById($param);
            if ($flag) {
                return resultArray(['data'=>'删除成功']);
            } else {
                return resultArray(['error'=>$commentModel->getError()]);
            }
        } else {
            return resultArray(['error'=>'参数错误']);
        }
    }   
}