first commit

.env.sample

@@ -0,0 +1,11 @@
+[app]
+debug = false
+trace = false
+
+[database]
+hostname = 127.0.0.1
+database = yzncms
+username = root
+password = root
+hostport = 3306
+prefix = yzn_

.gitee/ISSUE_TEMPLATE.zh-CN.md

@@ -0,0 +1,21 @@
+## 使用环境
+* 系统版本：
+* PHP 版本：
+* MYSQL 版本：
+* 浏览器 版本：
+* 本地或线上：
+
+## 问题描述
+
+
+
+<!--
+【系统版本】
+请在config/version.php查看yzncms_version参数
+描述你的问题现象，报错**贴截图**粘贴或者贴具体信息，提供**必要的代码段**，感谢！
+
+【必看教程】
+开发遇到错误怎么办：https://blog.yzncms.com/shows/19/104.html
+伪静态(URL重写)： https://www.kancloud.cn/ken678/yzncms/1003231
+虚拟主机不支持绑定public的方法： https://www.kancloud.cn/ken678/yzncms/1003254
+-->

.gitee/ISSUE_TEMPLATE/bug.yml

@@ -0,0 +1,38 @@
+name: 😇 问题反馈
+description: 使用 Yzncms 过程中遇到的 Bug、异常或其他困惑。
+title: ""
+labels: ["bug"]
+body:
+  - type: checkboxes
+    attributes:
+        label: 议题条件
+        description: 在你开始之前，请花几分钟时间确保你已如实完成以下工作，以便让我们更高效地沟通。
+        options:
+          - label: 我确认已查看官方使用文档：[https://www.kancloud.cn/ken678/yzncms](https://www.kancloud.cn/ken678/yzncms ) ，但没有找到相关解决方案。
+            required: true
+          - label: 我确认已在 [Issues](https://gitee.com/ken678/YZNCMS/issues ) 中搜索过类似的问题，但没有找到相关解决方案。
+            required: true
+          - label: 我已点击左上角【[star](https://gitee.com/ken678/YZNCMS/issues/I4KXPX )】进行关注，请作者快马加鞭处理。
+            required: false
+  - type: input
+    attributes:
+        label: 版本号
+        placeholder: 请提供您所使用的 Yzncms 版本号
+    validations:
+      required: true
+  - type: textarea
+    attributes:
+      label: 问题描述
+      placeholder: 请提供尽可能详细的问题描述和具体操作步骤等信息，以便我们也能够更轻松地将问题复现。
+    validations:
+      required: true
+  - type: textarea
+    attributes:
+      label: 业务代码
+      placeholder: 提供与该问题对应的业务代码片段，以便我们更好地排查问题。
+    validations:
+      required: true
+  - type: textarea
+    attributes:
+      label: 其他补充
+      placeholder: 如截图等补充信息。

.gitee/ISSUE_TEMPLATE/config.yml

@@ -0,0 +1,5 @@
+blank_issues_enabled: false
+contact_links:
+  - name: 📄 阅读文档
+    url: https://www.kancloud.cn/ken678/yzncms
+    about: 建议你在创建 Issue 之前，仔细查阅 YznCMS 开发文档，以便对其有更深入的了解，和更好地分析问题。

.gitee/ISSUE_TEMPLATE/feature.yml

@@ -0,0 +1,19 @@
+name: 😄 功能建议
+description: 对 Yzncms 提出您的宝贵建议。
+title: ""
+labels: ["建议"]
+body:
+  - type: textarea
+    id: related-problem
+    attributes:
+      label: 建议内容
+      placeholder: 阐述提出该建议的出发点。
+    validations:
+      required: true
+  - type: textarea
+    id: desired-solution
+    attributes:
+      label: 解决方案
+      placeholder: 您希望看到什么样的解决方案？
+    validations:
+      required: true

.gitignore

@@ -0,0 +1,6 @@
+.idea
+.vscode
+*.log
+composer.lock
+/runtime/*
+/templates/

LICENSE.txt

@@ -0,0 +1,191 @@
+Apache License
+Version 2.0, January 2004
+http://www.apache.org/licenses/
+
+TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+1. Definitions.
+
+"License" shall mean the terms and conditions for use, reproduction, and
+distribution as defined by Sections 1 through 9 of this document.
+
+"Licensor" shall mean the copyright owner or entity authorized by the copyright
+owner that is granting the License.
+
+"Legal Entity" shall mean the union of the acting entity and all other entities
+that control, are controlled by, or are under common control with that entity.
+For the purposes of this definition, "control" means (i) the power, direct or
+indirect, to cause the direction or management of such entity, whether by
+contract or otherwise, or (ii) ownership of fifty percent (50%) or more of the
+outstanding shares, or (iii) beneficial ownership of such entity.
+
+"You" (or "Your") shall mean an individual or Legal Entity exercising
+permissions granted by this License.
+
+"Source" form shall mean the preferred form for making modifications, including
+but not limited to software source code, documentation source, and configuration
+files.
+
+"Object" form shall mean any form resulting from mechanical transformation or
+translation of a Source form, including but not limited to compiled object code,
+generated documentation, and conversions to other media types.
+
+"Work" shall mean the work of authorship, whether in Source or Object form, made
+available under the License, as indicated by a copyright notice that is included
+in or attached to the work (an example is provided in the Appendix below).
+
+"Derivative Works" shall mean any work, whether in Source or Object form, that
+is based on (or derived from) the Work and for which the editorial revisions,
+annotations, elaborations, or other modifications represent, as a whole, an
+original work of authorship. For the purposes of this License, Derivative Works
+shall not include works that remain separable from, or merely link (or bind by
+name) to the interfaces of, the Work and Derivative Works thereof.
+
+"Contribution" shall mean any work of authorship, including the original version
+of the Work and any modifications or additions to that Work or Derivative Works
+thereof, that is intentionally submitted to Licensor for inclusion in the Work
+by the copyright owner or by an individual or Legal Entity authorized to submit
+on behalf of the copyright owner. For the purposes of this definition,
+"submitted" means any form of electronic, verbal, or written communication sent
+to the Licensor or its representatives, including but not limited to
+communication on electronic mailing lists, source code control systems, and
+issue tracking systems that are managed by, or on behalf of, the Licensor for
+the purpose of discussing and improving the Work, but excluding communication
+that is conspicuously marked or otherwise designated in writing by the copyright
+owner as "Not a Contribution."
+
+"Contributor" shall mean Licensor and any individual or Legal Entity on behalf
+of whom a Contribution has been received by Licensor and subsequently
+incorporated within the Work.
+
+2. Grant of Copyright License.
+
+Subject to the terms and conditions of this License, each Contributor hereby
+grants to You a perpetual, worldwide, non-exclusive, no-charge, royalty-free,
+irrevocable copyright license to reproduce, prepare Derivative Works of,
+publicly display, publicly perform, sublicense, and distribute the Work and such
+Derivative Works in Source or Object form.
+
+3. Grant of Patent License.
+
+Subject to the terms and conditions of this License, each Contributor hereby
+grants to You a perpetual, worldwide, non-exclusive, no-charge, royalty-free,
+irrevocable (except as stated in this section) patent license to make, have
+made, use, offer to sell, sell, import, and otherwise transfer the Work, where
+such license applies only to those patent claims licensable by such Contributor
+that are necessarily infringed by their Contribution(s) alone or by combination
+of their Contribution(s) with the Work to which such Contribution(s) was
+submitted. If You institute patent litigation against any entity (including a
+cross-claim or counterclaim in a lawsuit) alleging that the Work or a
+Contribution incorporated within the Work constitutes direct or contributory
+patent infringement, then any patent licenses granted to You under this License
+for that Work shall terminate as of the date such litigation is filed.
+
+4. Redistribution.
+
+You may reproduce and distribute copies of the Work or Derivative Works thereof
+in any medium, with or without modifications, and in Source or Object form,
+provided that You meet the following conditions:
+
+You must give any other recipients of the Work or Derivative Works a copy of
+this License; and
+You must cause any modified files to carry prominent notices stating that You
+changed the files; and
+You must retain, in the Source form of any Derivative Works that You distribute,
+all copyright, patent, trademark, and attribution notices from the Source form
+of the Work, excluding those notices that do not pertain to any part of the
+Derivative Works; and
+If the Work includes a "NOTICE" text file as part of its distribution, then any
+Derivative Works that You distribute must include a readable copy of the
+attribution notices contained within such NOTICE file, excluding those notices
+that do not pertain to any part of the Derivative Works, in at least one of the
+following places: within a NOTICE text file distributed as part of the
+Derivative Works; within the Source form or documentation, if provided along
+with the Derivative Works; or, within a display generated by the Derivative
+Works, if and wherever such third-party notices normally appear. The contents of
+the NOTICE file are for informational purposes only and do not modify the
+License. You may add Your own attribution notices within Derivative Works that
+You distribute, alongside or as an addendum to the NOTICE text from the Work,
+provided that such additional attribution notices cannot be construed as
+modifying the License.
+You may add Your own copyright statement to Your modifications and may provide
+additional or different license terms and conditions for use, reproduction, or
+distribution of Your modifications, or for any such Derivative Works as a whole,
+provided Your use, reproduction, and distribution of the Work otherwise complies
+with the conditions stated in this License.
+
+5. Submission of Contributions.
+
+Unless You explicitly state otherwise, any Contribution intentionally submitted
+for inclusion in the Work by You to the Licensor shall be under the terms and
+conditions of this License, without any additional terms or conditions.
+Notwithstanding the above, nothing herein shall supersede or modify the terms of
+any separate license agreement you may have executed with Licensor regarding
+such Contributions.
+
+6. Trademarks.
+
+This License does not grant permission to use the trade names, trademarks,
+service marks, or product names of the Licensor, except as required for
+reasonable and customary use in describing the origin of the Work and
+reproducing the content of the NOTICE file.
+
+7. Disclaimer of Warranty.
+
+Unless required by applicable law or agreed to in writing, Licensor provides the
+Work (and each Contributor provides its Contributions) on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied,
+including, without limitation, any warranties or conditions of TITLE,
+NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A PARTICULAR PURPOSE. You are
+solely responsible for determining the appropriateness of using or
+redistributing the Work and assume any risks associated with Your exercise of
+permissions under this License.
+
+8. Limitation of Liability.
+
+In no event and under no legal theory, whether in tort (including negligence),
+contract, or otherwise, unless required by applicable law (such as deliberate
+and grossly negligent acts) or agreed to in writing, shall any Contributor be
+liable to You for damages, including any direct, indirect, special, incidental,
+or consequential damages of any character arising as a result of this License or
+out of the use or inability to use the Work (including but not limited to
+damages for loss of goodwill, work stoppage, computer failure or malfunction, or
+any and all other commercial damages or losses), even if such Contributor has
+been advised of the possibility of such damages.
+
+9. Accepting Warranty or Additional Liability.
+
+While redistributing the Work or Derivative Works thereof, You may choose to
+offer, and charge a fee for, acceptance of support, warranty, indemnity, or
+other liability obligations and/or rights consistent with this License. However,
+in accepting such obligations, You may act only on Your own behalf and on Your
+sole responsibility, not on behalf of any other Contributor, and only if You
+agree to indemnify, defend, and hold each Contributor harmless for any liability
+incurred by, or claims asserted against, such Contributor by reason of your
+accepting any such warranty or additional liability.
+
+END OF TERMS AND CONDITIONS
+
+APPENDIX: How to apply the Apache License to your work
+
+To apply the Apache License to your work, attach the following boilerplate
+notice, with the fields enclosed by brackets "{}" replaced with your own
+identifying information. (Don't include the brackets!) The text should be
+enclosed in the appropriate comment syntax for the file format. We also
+recommend that a file or class name and description of purpose be included on
+the same "printed page" as the copyright notice for easier identification within
+third-party archives.
+
+   Copyright 2018 御宅男
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+     http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.

README.md

@@ -0,0 +1,122 @@
+# YznCMS 后台开发框架
+### 系统基于ThinkPHP5.1的强大后端框架与Layui2.9.x轻量级的前端UI框架，承诺后台框架永久免费且商业授权无限制，更可移除前台版权信息，是个人和企业专享、高度自定义的理想后台管理系统选择。
+
+[![License](https://img.shields.io/badge/license-Apache%202-blue.svg)](https://gitee.com/ken678/YZNCMS/blob/master/LICENSE.txt)
+[![PHP Version Require](https://img.shields.io/badge/PHP-%3E%3D7.2.5-blue)](https://packagist.org/packages/yzncms/framework)
+[![Version](https://img.shields.io/badge/YznCMS-1.4.2-brightgreen.svg)](https://gitee.com/ken678/YZNCMS/)
+[![star](https://gitee.com/ken678/YZNCMS/badge/star.svg?theme=dark)](https://gitee.com/ken678/YZNCMS/stargazers)
+[![fork](https://gitee.com/ken678/YZNCMS/badge/fork.svg?theme=dark)](https://gitee.com/ken678/YZNCMS/members)
+
+## [插件版权]
+
+- 插件可用于个人或企业自营网站或应用或为客户定制开发
+- 插件(包含免费和付费插件)禁止二次转售，复制和传播等形式分发插件源码
+- 插件不限制域名，不限授权期限，不限建站数量！
+
+## [插件清单]
+
+|  名称 | 简介  |价格　　|
+|---|---|---|
+|在线命令|可在线执行一键生成CRUD、一键生成菜单等相关命令|免费|
+|内容管理系统|这是一个功能强大的内容管理！自定义模型，字段不在话下，支持近二十种类型字段|免费|
+|会员插件|系统必备的会员基础功能！含会员组，会员投稿等强大功能|免费|
+|自定义表单|这是一个cms必备的表单提交插件！字段都可以任意定义，同样支持近二十种类型字段|免费|
+|站内消息|会员与会员之间，会员与管理员之间消息发送，支持批量|免费|
+|支付插件|支持支付宝（支持个人）和微信支付的所有场景|免费|
+|接口文档|根据注释自动生成API文档|免费|
+|万能采集|简单的采集工具，可以自定义字段入库，网页数据采集和内容管理的神器！|免费|
+|友情链接|管理第三方网站的友情链接，很常用的必备插件|免费|
+|网站地图|sitemap网站地图让搜索引擎对您网站的更快、更完整地进行索引，为您进行网站推广带来极大的方便|免费|
+|网址聚合推送|百度站长+神马搜索推送|免费|
+|数据库备份|简单的数据库备份|免费|
+|多通道短信|发送支持目前市面20+家短信服务商,自动轮询选择可用的服务商|免费|
+|editormd编辑器|	editor.md编辑器|免费|
+|七牛云|附件上传到七牛云|免费|
+|阿里云OSS|附件上传到阿里云oss|免费|
+|腾讯云COS|附件上传到腾讯云cos|免费|
+|返回顶部|回到顶部美化，随机或指定显示，100款样式，每天一种换，天天都用新样式|免费|
+|邮箱插件|邮箱插件-by赛邮|免费|
+|会员签到|会员签到插件，含排行榜，补签，已日历方式呈现|免费|
+|第三方登录|QQ，微信和新浪等近十种第三方登录|免费|
+|中文分词|支持百度和讯飞分词|免费|
+|地图位置|支持百度、高德和天地图|免费|
+|智能人机验证|一款免费的智能无感手势验证码|免费|
+|数据转换|将phpcmsV9的数据结构转换为yzncms|免费|
+|数据转换|将dedecmsV5.7的数据结构转换为yzncms|免费|
+|后台登录背景|使用必应壁纸自定义后台登录背景图|免费|
+|邮箱发送|采用phpmailer的方式发送邮件|免费|
+|消息队列|基于think-queue的队列|免费|
+|快递查询插件|支持阿里云,聚合数据,快递100,快递鸟快递查询|免费|
+|地区插件|省市区三级联动|免费|
+|cms小程序|传统的cms展示类型小程序|付费|
+|即时通讯|类似百度商桥，快商通之类的客服多坐席即时聊天工具|付费|
+|评论插件|类似多说，一段JS即可调用的强大评论|付费|
+|会员推广|生成推广链接，后台生成邀请码注册|付费|
+|数据导出|支持任意表和关联表导出excel等格式|付费|
+|在线客服|近十种不同样式的QQ在线客服|付费|
+|安全检测|检测文件是否篡改或丢失|付费|
+|阿里云邮箱|阿里云的邮箱推送|付费|
+|百度收录查询|查询文章是否被百度收录|付费|
+|蜘蛛访问统计|查看主流搜索引擎的蜘蛛访问记录|付费|
+|敏感词检测|支持对CMS所有页面进行敏感词检测|付费|
+|内容收藏|用于会员对cms的内容进行收藏|付费|
+|迅搜全文检索|基于迅搜(Xunsearch)，支持百万以上全文数据检索|付费|
+|H5设计|H5端一键DIY拖拽式布局插件(支持各种小程序)|付费|
+|行为验证码|基于AJ-Captcha行为验证码，包含滑动拼图、文字点选两种方式|付费|
+|礼品卡提货系统|适用于公司节日福利发放礼品卡,大闸蟹等凭卡提货系统|付费|
+|IP归属地查询|根据IP离线定位库和高德API查询所属地|付费|
+|百度统计插件|免去百度登录，将百度统计接口集成至后台|付费|
+|消息通知|集合小程序,公众号模版消息,手机和邮箱通知|付费|
+|微信管理|管理微信公众号插件|付费|
+|在线投票系统|可快速创建微信H5或小程序投票网络投票活动的系统|付费|
+
+## [项目介绍]
+YznCMS(又名御宅男CMS)是基于最新TP5.1x框架和layui2.5x的后台管理系统。创立于2017年初，是一款完全免费开源的项目，他将是您轻松建站的首选利器。框架易于功能扩展，代码维护，方便二次开发，帮助开发者简单高效降低二次开发成本，满足专注业务深度开发的需求。
+- 手册地址：https://www.kancloud.cn/ken678/yzncms
+- 官方博客：http://blog.yzncms.com/
+- 视频教程：https://www.bilibili.com/video/av417106995 (即将重新录制)
+- 软件著作权编号：2020SR0038539
+
+## [环境要求]
+- WEB服务器：IIS/Apache/Nginx
+- PHP版本：php >= 7.2 (支持8.0,推荐7.3)
+- 数据库：MySQL >= 5.6 (需支持 innodb 引擎)
+
+
+## [常规安装]
+- 第一步：下载源码压缩包解压到你的项目根目录
+- 第二步：绑定到项目中的public目录为运行目录，ps:如果您的服务器不支持绑定目录，请查看public目录下的index.php和install.php代码注释，有详细具体操作
+- 第三步：访问[http://您的域名/install.php](http://www.yoursite.com/install.php)进行安装
+
+## [命令行安装]
+- 第一步：下载源码压缩包解压到你的项目根目录
+- 第二步：绑定到项目中的public目录为运行目录，ps:如果您的服务器不支持绑定目录，请查看public目录下的index.php代码注释，有详细具体操作
+- 第三步：进入目录  `cd yzncms`
+- 第四步：一键创建数据库并导入数据   `php think install -u 数据库用户名 -p 数据库密码`
+
+## [必看教程]
+- 伪静态(URL重写)： https://www.kancloud.cn/ken678/yzncms/1003231
+- 开发遇到错误怎么办？： https://www.kancloud.cn/ken678/yzncms/3090278
+
+> 更多的常见问题和教程见手册
+
+## [截图预览]
+![输入图片说明](https://foruda.gitee.com/images/1694497052659798394/3f1a677d_555541.gif "YZNCMS后台管理系统")
+![输入图片说明](https://foruda.gitee.com/images/1694497169122838821/13d1e4fd_555541.png "YZNCMS后台管理系统")
+
+## [友情捐赠]  
+![输入图片说明](https://images.gitee.com/uploads/images/2019/0110/175836_7cb23388_555541.jpeg "1547112799941_01.jpg")
+![输入图片说明](https://images.gitee.com/uploads/images/2019/0110/181152_57b5113e_555541.jpeg "mm_facetoface_collect_qrcode_1547113957376_01.jpg")
+
+## [联系我们]
+目前只支持以下条件才能添加QQ或者微信好友，其他理由如“我要拜师”，“我要学习，我有问题”等等一律谢绝添加
+- 有重大安全BUG漏洞(一般漏洞提交到issues)
+- 有建站等项目合作(需要发送详细需求)
+
+满足以上条件请发送邮箱至530765310@qq.com，备注理由，符合条件会主动添加你为好友
+
+## [版权信息]  
+YznCMS遵循[Apache2.0](https://www.apache.org/licenses/LICENSE-2.0.html)开源协议发布，并允许商业使用。  
+本项目包含的第三方源码和二进制文件之版权信息另行标注。  
+版权所有Copyright © 2017-2024 by Yzncms (https://www.yzncms.com)  
+All rights reserved。

addons/.gitkeep

@@ -0,0 +1 @@
+

application/.htaccess

@@ -0,0 +1 @@
+deny from all

application/admin/behavior/Adminlog.php

@@ -0,0 +1,26 @@
+<?php
+// +----------------------------------------------------------------------
+// | Yzncms [ 御宅男工作室 ]
+// +----------------------------------------------------------------------
+// | Copyright (c) 2018 http://yzncms.com All rights reserved.
+// +----------------------------------------------------------------------
+// | Licensed ( http://www.apache.org/licenses/LICENSE-2.0 )
+// +----------------------------------------------------------------------
+// | Author: 御宅男 <530765310@qq.com>
+// +----------------------------------------------------------------------
+
+// +----------------------------------------------------------------------
+// | 初始化配置
+// +----------------------------------------------------------------------
+namespace app\admin\behavior;
+
+class Adminlog
+{
+    public function run($params)
+    {
+        //只记录POST请求的日志
+        if (request()->isPost() && config('auto_record_admin_log')) {
+            \app\admin\model\Adminlog::record();
+        }
+    }
+}

application/admin/command/Crud/stubs/add.stub

@@ -0,0 +1,21 @@
+{extend name="index_layout"/}
+{block name="main"}
+<form class="layui-form" method="post">
+
+{%addList%}
+    <div class="layui-form-item layer-footer">
+        <div class="layui-input-block">
+            <button class="layui-btn" lay-submit="">立即提交</button>
+            <button type="reset" class="layui-btn layui-btn-primary">重置</button>
+        </div>
+    </div>
+</form>
+{/block}
+{block name="script"}
+<script type="text/javascript">
+layui.use('yznForm', function() {
+    var yznForm = layui.yznForm;
+    yznForm.bindevent($("form.layui-form"));
+});
+</script>
+{/block}

application/admin/command/Crud/stubs/controller.stub

@@ -0,0 +1,33 @@
+<?php
+
+namespace {%controllerNamespace%};
+
+use app\common\controller\Adminbase;
+
+/**
+ * {%tableComment%}
+ */
+class {%controllerName%} extends Adminbase
+{
+
+    /**
+     * {%modelName%}模型对象
+     * @var \{%modelNamespace%}\{%modelName%}
+     */
+    protected $modelClass = null;
+
+    protected function initialize()
+    {
+        parent::initialize();
+        $this->modelClass = new \{%modelNamespace%}\{%modelName%};
+{%controllerAssignList%}
+    }
+
+    /**
+     * 默认生成的控制器所继承的父类中有index/add/edit/del/multi五个基础方法、destroy/restore/recyclebin三个回收站方法
+     * 因此在当前控制器中可不用编写增删改查的代码,除非需要自己控制这部分逻辑
+     * 需要将application/admin/library/traits/Curd.php中对应的方法复制到当前控制器,然后进行修改
+     */
+
+{%controllerIndex%}
+}

application/admin/command/Crud/stubs/controllerindex.stub

@@ -0,0 +1,34 @@
+
+    /**
+     * 查看
+     */
+    public function index()
+    {
+        //当前是否为关联查询
+        $this->relationSearch = {%relationSearch%};
+        //设置过滤方法
+        $this->request->filter(['strip_tags', 'trim']);
+        if ($this->request->isAjax()) {
+            //如果发送的来源是Selectpage，则转发到Selectpage
+            if ($this->request->request('keyField')) {
+                return $this->selectpage();
+            }
+            [$page, $limit, $where, $sort, $order] = $this->buildTableParames();
+
+            $list = $this->modelClass
+                    {%relationWithList%}
+                    ->where($where)
+                    ->order($sort, $order)
+                    ->paginate($limit);
+
+            foreach ($list as $row) {
+                {%visibleFieldList%}
+                {%relationVisibleFieldList%}
+            }
+
+            $result = ["code" => 0, "count" => $list->total(), "data" => $list->items()];
+
+            return json($result);
+        }
+        return $this->fetch();
+    }

application/admin/command/Crud/stubs/edit.stub

@@ -0,0 +1,21 @@
+{extend name="index_layout"/}
+{block name="main"}
+<form class="layui-form" method="post">
+
+{%editList%}
+    <div class="layui-form-item layer-footer">
+        <div class="layui-input-block">
+            <button class="layui-btn" lay-submit="">立即提交</button>
+            <button type="reset" class="layui-btn layui-btn-primary">重置</button>
+        </div>
+    </div>
+</form>
+{/block}
+{block name="script"}
+<script type="text/javascript">
+layui.use('yznForm', function() {
+    var yznForm = layui.yznForm;
+    yznForm.bindevent($("form.layui-form"));
+});
+</script>
+{/block}

application/admin/command/Crud/stubs/html/checkbox.stub

@@ -0,0 +1,3 @@
+{foreach name="{%fieldList%}" item="vo"}
+            <input id="{%fieldName%}-{$key}" lay-skin="primary" name="{%fieldName%}" type="checkbox" title="{$vo}" value="{$key}" {in name="key" value="{%selectedValue%}"}checked{/in} />
+            {/foreach}

application/admin/command/Crud/stubs/html/fieldlist-template.stub

@@ -0,0 +1,21 @@
+            <table class="layui-form-field-label layui-table fieldlist" data-name="{%fieldName%}" data-id="{%field%}" data-template="true" data-tag="tr">
+                <tr>
+                    {%theadList%}
+                    <td width="90">操作</td>
+                </tr>
+                <tr>
+                   <td colspan="{%colspan%}"><button type="button" class="layui-btn btn-append">追加</button></td>
+                </tr>
+            </table>
+            <textarea name="{%fieldName%}" class="layui-textarea layui-hide" cols="30" rows="5">{%fieldValue%}</textarea>
+            <script type="text/html" id="{%field%}Tpl">
+                <tr class="layui-form-item rules-item">
+                    {{# layui.each(d.lists, function(index, item) { }}
+                    {%tbodyList%}
+                    <td>
+                       <button type="button" class="layui-btn layui-btn-danger btn-remove layui-btn-xs"><i class="iconfont icon-close"></i></button>
+                       <button type="button" class="layui-btn btn-dragsort layui-btn-xs"><i class="iconfont icon-yidong"></i></button>
+                   </td>
+                   {{# }); }}
+                </tr>
+            </script>

application/admin/command/Crud/stubs/html/fieldlist.stub

@@ -0,0 +1,18 @@
+<dl class="fieldlist" data-name="{%fieldName%}" data-id="{%field%}">
+                <dd>
+                    <ins>键名</ins>
+                    <ins>键值</ins>
+                </dd>
+                <dd><button type="button" class="layui-btn btn-append">追加</button></dd>
+                <textarea name="{%fieldName%}" class="layui-textarea layui-hide" cols="30" rows="5">{%fieldValue%}</textarea>
+            </dl>
+            <script type="text/html" id="{%field%}Tpl">
+                <dd class="layui-form-item rules-item">
+                    {{# layui.each(d.lists, function(index, item) { }}
+                    <input type="text" class="layui-input" name="{{item.name}}[{{item.index}}][key]" placeholder="键" value="{{item.key|| ''}}" />
+                    <input type="text" class="layui-input" name="{{item.name}}[{{item.index}}][value]" placeholder="值" value="{{item.value|| ''}}" />
+                    <button type="button" class="layui-btn layui-btn-danger btn-remove layui-btn-xs"><i class="iconfont icon-close"></i></button>
+                    <button type="button" class="layui-btn btn-dragsort layui-btn-xs"><i class="iconfont icon-yidong"></i></button>
+                    {{# }); }}
+                </dd>
+            </script>

application/admin/command/Crud/stubs/html/radio.stub

@@ -0,0 +1,3 @@
+{foreach name="{%fieldList%}" item="vo"}
+            <input id="{%fieldName%}-{$key}" name="{%fieldName%}" type="radio" value="{$key}" title="{$vo}" {in name="key" value="{%selectedValue%}"}checked{/in} />
+            {/foreach}

application/admin/command/Crud/stubs/html/select.stub

@@ -0,0 +1,5 @@
+<select {%attrStr%}>
+                {foreach name="{%fieldList%}" item="vo"}
+                    <option value="{$key}" {in name="key" value="{%selectedValue%}"}selected{/in}>{$vo}</option>
+                {/foreach}
+            </select>

application/admin/command/Crud/stubs/html/selects.stub

@@ -0,0 +1 @@
+<div class="form-selects" data-name="{%fieldName%}" data-id="{%field%}" data-value="{%selectedValue%}" data-list="{%fieldList%}"></div>

application/admin/command/Crud/stubs/html/switch.stub

@@ -0,0 +1,2 @@
+<input id="{%fieldName%}-0" name="{%fieldName%}" type="radio" value="1" title="ON" {eq name="{%fieldValue%}" value="1" }checked{/eq} />
+<input id="{%fieldName%}-1" name="{%fieldName%}" type="radio" value="0" title="OFF" {eq name="{%fieldValue%}" value="0" }checked{/eq} />

application/admin/command/Crud/stubs/index.stub

@@ -0,0 +1,47 @@
+{extend name="index_layout"/}
+{block name="main"}
+<div class="layui-card">
+    <div class="layui-card-header">{%tableComment%}</div>
+    <div class="layui-card-body">
+        <div class="layui-form">
+            <table class="layui-hide" id="currentTable" lay-filter="currentTable"
+                data-auth-add="{:$auth->check('{%controllerUrl%}/add')}" 
+                data-auth-edit="{:$auth->check('{%controllerUrl%}/edit')}"
+                data-auth-delete="{:$auth->check('{%controllerUrl%}/del')}"
+                data-auth-recyclebin="{:$auth->check('{%controllerUrl%}/recyclebin')}"
+                ></table>
+        </div>
+    </div>
+</div>
+{/block}
+{block name="script"}
+<script type="text/javascript">
+layui.use('yznTable', function() {
+    var table = layui.yznTable;
+
+    var init = {
+        table_elem: '#currentTable',
+        table_render_id: 'currentTable',
+        add_url: '{:url("add")}',
+        edit_url: '{:url("edit")}',
+        delete_url: '{:url("del")}',
+        modify_url: "{:url('multi')}",
+        recyclebin_url: "{:url('recyclebin')}",
+    };
+
+    table.render({
+        init: init,
+        toolbar: ['refresh', 'add', 'delete'{%recyclebinHtml%}],
+        url: '{:url("index")}',
+        cols: [
+            [
+               {%javascriptList%}
+            ]
+        ],
+        page: {}
+    });
+
+    yznTable.bindevent();
+});
+</script>
+{/block}

application/admin/command/Crud/stubs/mixins/checkbox.stub

@@ -0,0 +1,8 @@
+
+    public function {%methodName%}($value, $data)
+    {
+        $value = $value ?: ($data['{%field%}'] ?? '');
+        $valueArr = explode(',', $value);
+        $list = $this->{%listMethodName%}();
+        return implode(',', array_intersect_key($list, array_flip($valueArr)));
+    }

application/admin/command/Crud/stubs/mixins/datetime.stub

@@ -0,0 +1,6 @@
+
+    public function {%methodName%}($value, $data)
+    {
+        $value = $value ?: ($data['{%field%}'] ?? '');
+        return is_numeric($value) ? date("Y-m-d H:i:s", $value) : $value;
+    }

application/admin/command/Crud/stubs/mixins/modelrelationmethod-hasmany.stub

@@ -0,0 +1,5 @@
+
+    public function {%relationMethod%}s()
+    {
+        return $this->{%relationMode%}('{%relationClassName%}', '{%relationForeignKey%}', '{%relationPrimaryKey%}');
+    }

application/admin/command/Crud/stubs/mixins/modelrelationmethod.stub

@@ -0,0 +1,5 @@
+
+    public function {%relationMethod%}()
+    {
+        return $this->{%relationMode%}('{%relationClassName%}', '{%relationForeignKey%}', '{%relationPrimaryKey%}', [], 'LEFT');
+    }

application/admin/command/Crud/stubs/mixins/multiple.stub

@@ -0,0 +1,8 @@
+
+    public function {%methodName%}($value, $data)
+    {
+        $value = $value ?: ($data['{%field%}'] ?? '');
+        $valueArr = explode(',', $value);
+        $list = $this->{%listMethodName%}();
+        return implode(',', array_intersect_key($list, array_flip($valueArr)));
+    }

application/admin/command/Crud/stubs/mixins/radio.stub

@@ -0,0 +1,7 @@
+
+    public function {%methodName%}($value, $data)
+    {
+        $value = $value ?: ($data['{%field%}'] ?? '');
+        $list = $this->{%listMethodName%}();
+        return $list[$value] ?? '';
+    }

application/admin/command/Crud/stubs/mixins/select.stub

@@ -0,0 +1,7 @@
+
+    public function {%methodName%}($value, $data)
+    {
+        $value = $value ?: ($data['{%field%}'] ?? '');
+        $list = $this->{%listMethodName%}();
+        return $list[$value] ?? '';
+    }

application/admin/command/Crud/stubs/model.stub

@@ -0,0 +1,39 @@
+<?php
+
+namespace {%modelNamespace%};
+
+use think\Model;
+{%softDeleteClassPath%}
+
+class {%modelName%} extends Model
+{
+
+    {%softDelete%}
+
+    {%modelConnection%}
+
+    // 表名
+    protected ${%modelTableType%} = '{%modelTableTypeName%}';
+    
+    // 自动写入时间戳字段
+    protected $autoWriteTimestamp = {%modelAutoWriteTimestamp%};
+
+    // 定义时间戳字段名
+    protected $createTime = {%createTime%};
+    protected $updateTime = {%updateTime%};
+    protected $deleteTime = {%deleteTime%};
+
+    // 追加属性
+    protected $append = [
+{%appendAttrList%}
+    ];
+
+{%getEnumList%}
+
+{%getAttrList%}
+
+{%setAttrList%}
+
+{%relationMethodList%}
+
+}

application/admin/command/Crud/stubs/recyclebin.stub

@@ -0,0 +1,46 @@
+{extend name="index_layout"/}
+{block name="main"}
+<div class="layui-card">
+    <div class="layui-card-header">{%tableComment%}</div>
+    <div class="layui-card-body">
+        <div class="layui-form">
+            <table class="layui-hide" id="currentTable" lay-filter="currentTable"
+                data-auth-restore="{:$auth->check('{%controllerUrl%}/restore')}" 
+                data-auth-destroy="{:$auth->check('{%controllerUrl%}/destroy')}"
+                ></table>
+        </div>
+    </div>
+</div>
+{/block}
+{block name="script"}
+<script type="text/javascript">
+layui.use('yznTable', function() {
+    var table = layui.yznTable;
+
+    var init = {
+        table_elem: '#currentTable',
+        table_render_id: 'currentTable',
+        restore_url: '{:url("{%controllerUrl%}/restore")}',
+        destroy_url: '{:url("{%controllerUrl%}/destroy")}',
+        modify_url: "{:url('{%controllerUrl%}/multi')}",
+    };
+
+    table.render({
+        init: init,
+        toolbar: ['refresh', 'restore', 'destroy'],
+        url: '{:url("{%controllerUrl%}/recyclebin")}',
+        cols: [
+            [
+                { type: 'checkbox', fixed: 'left' },
+                { field: 'id', width: 70, title: 'ID' },{%recyclebinTitleJs%}
+                { field: '{%deleteTimeField%}', width: 160, title: '删除时间', search: 'range', templet: yznTable.formatter.datetime},
+                { fixed: 'right', width: 140, title: '操作', templet: yznTable.formatter.tool,operat: ['restore','destroy']}
+            ]
+        ],
+        page: {}
+    });
+
+    yznTable.bindevent();
+});
+</script>
+{/block}

application/admin/command/Crud/stubs/validate.stub

@@ -0,0 +1,29 @@
+<?php
+
+namespace {%validateNamespace%};
+
+use think\Validate;
+
+class {%validateName%} extends Validate
+{
+    /**
+     * 验证规则
+     */
+    protected $rule = [
+    ];
+
+    /**
+     * 提示消息
+     */
+    protected $message = [
+    ];
+    
+    /**
+     * 验证场景
+     */
+    protected $scene = [
+        'add'  => [],
+        'edit' => [],
+    ];
+    
+}

application/admin/command/Install.php

@@ -0,0 +1,270 @@
+<?php
+// +----------------------------------------------------------------------
+// | Yzncms [ 御宅男工作室 ]
+// +----------------------------------------------------------------------
+// | Copyright (c) 2018 http://yzncms.com All rights reserved.
+// +----------------------------------------------------------------------
+// | Licensed ( http://www.apache.org/licenses/LICENSE-2.0 )
+// +----------------------------------------------------------------------
+// | fastadmin: https://www.fastadmin.net/
+// +----------------------------------------------------------------------
+
+// +----------------------------------------------------------------------
+// | 安装主程序
+// +----------------------------------------------------------------------
+
+namespace app\admin\command;
+
+use PDO;
+use think\console\Command;
+use think\console\Input;
+use think\console\input\Option;
+use think\console\Output;
+use think\Db;
+use think\Exception;
+use think\facade\Config;
+use think\facade\Request;
+use think\facade\View;
+use util\File;
+use util\Random;
+
+class Install extends Command
+{
+    /**
+     * @var \think\Request Request 实例
+     */
+    protected $request;
+
+    protected function configure()
+    {
+        $config = Config::get('database.');
+        $this->setName('install')
+            ->addOption('hostname', 'a', Option::VALUE_OPTIONAL, 'mysql hostname', $config['hostname'])
+            ->addOption('hostport', 'o', Option::VALUE_OPTIONAL, 'mysql hostport', $config['hostport'])
+            ->addOption('database', 'd', Option::VALUE_OPTIONAL, 'mysql database', $config['database'])
+            ->addOption('prefix', 'r', Option::VALUE_OPTIONAL, 'table prefix', $config['prefix'])
+            ->addOption('username', 'u', Option::VALUE_OPTIONAL, 'mysql username', $config['username'])
+            ->addOption('password', 'p', Option::VALUE_OPTIONAL, 'mysql password', $config['password'])
+            ->addOption('force', 'f', Option::VALUE_OPTIONAL, 'force override', false)
+            ->setDescription('New installation of YznCMS');
+    }
+
+    /**
+     * 命令行安装
+     */
+    protected function execute(Input $input, Output $output)
+    {
+        define('INSTALL_PATH', APP_PATH . 'admin' . DS . 'command' . DS . 'Install' . DS);
+        // 覆盖安装
+        $force    = $input->getOption('force');
+        $hostname = $input->getOption('hostname');
+        $hostport = $input->getOption('hostport');
+        $database = $input->getOption('database');
+        $prefix   = $input->getOption('prefix');
+        $username = $input->getOption('username');
+        $password = $input->getOption('password');
+
+        $installLockFile = INSTALL_PATH . "install.lock";
+        if (is_file($installLockFile) && !$force) {
+            $output->error("\nYznCMS already installed!\nIf you need to reinstall again, use the parameter --force=true");
+            return false;
+        }
+        $adminUsername = 'admin';
+        $adminPassword = Random::alnum(10);
+        $adminEmail    = 'admin@admin.com';
+        try {
+            $this->installation($hostname, $hostport, $database, $username, $password, $prefix, $adminUsername, $adminPassword, $adminEmail);
+        } catch (\Exception $e) {
+            $output->error($e->getMessage());
+            return false;
+        }
+        $output->highlight("Admin url: http://www.yoursite.com/admin");
+        $output->highlight("Admin username: {$adminUsername}");
+        $output->highlight("Admin password: {$adminPassword}");
+        $output->info("Install Successed!");
+    }
+
+    /**
+     * PC端安装
+     */
+    public function index()
+    {
+        $this->request = Request::instance();
+
+        define('INSTALL_PATH', APP_PATH . 'admin' . DS . 'command' . DS . 'Install' . DS);
+
+        $installLockFile = INSTALL_PATH . "install.lock";
+
+        if (is_file($installLockFile)) {
+            echo '当前已经安装成功，如果需要重新安装，请手动移除install.lock文件';
+            exit;
+        }
+        $output = function ($code, $msg, $url = null, $data = null) {
+            return json(['code' => $code, 'msg' => $msg, 'url' => $url, 'data' => $data]);
+        };
+
+        if ($this->request->isPost()) {
+            $mysqlHostname = $this->request->post('mysqlHostname', '127.0.0.1');
+            $mysqlHostport = $this->request->post('mysqlHostport', '3306');
+            $hostArr       = explode(':', $mysqlHostname);
+            if (count($hostArr) > 1) {
+                $mysqlHostname = $hostArr[0];
+                $mysqlHostport = $hostArr[1];
+            }
+            $mysqlUsername             = $this->request->post('mysqlUsername', 'root');
+            $mysqlPassword             = $this->request->post('mysqlPassword', '');
+            $mysqlDatabase             = $this->request->post('mysqlDatabase', '');
+            $mysqlPrefix               = $this->request->post('mysqlPrefix', 'yzn_');
+            $adminUsername             = $this->request->post('adminUsername', 'admin');
+            $adminPassword             = $this->request->post('adminPassword', '');
+            $adminPasswordConfirmation = $this->request->post('adminPasswordConfirmation', '');
+            $adminEmail                = $this->request->post('adminEmail', 'admin@admin.com');
+
+            if ($adminPassword !== $adminPasswordConfirmation) {
+                return $output(0, '两次输入的密码不一致');
+            }
+            try {
+                $this->installation($mysqlHostname, $mysqlHostport, $mysqlDatabase, $mysqlUsername, $mysqlPassword, $mysqlPrefix, $adminUsername, $adminPassword, $adminEmail);
+            } catch (\PDOException $e) {
+                throw new Exception($e->getMessage());
+            } catch (\Exception $e) {
+                return $output(0, $e->getMessage());
+            }
+            return $output(1, '安装成功！', null);
+        }
+        $errInfo = '';
+        try {
+            $this->checkenv();
+        } catch (\Exception $e) {
+            $errInfo = $e->getMessage();
+        }
+        return view::fetch(INSTALL_PATH . "install.html", ['errInfo' => $errInfo]);
+    }
+
+    /**
+     * 执行安装
+     */
+    protected function installation($mysqlHostname, $mysqlHostport, $mysqlDatabase, $mysqlUsername, $mysqlPassword, $mysqlPrefix, $adminUsername, $adminPassword, $adminEmail = null)
+    {
+        $this->checkenv();
+
+        if ($mysqlDatabase == '') {
+            throw new Exception('请输入正确的数据库名');
+        }
+        if (!preg_match("/^\w{3,12}$/", $adminUsername)) {
+            throw new Exception('用户名只能由3-30位数字、字母、下划线组合');
+        }
+        if (!preg_match("/^[\S]{6,16}$/", $adminPassword)) {
+            throw new Exception('密码长度必须在6-30位之间，不能包含空格');
+        }
+        $weakPasswordArr = ['123456', '12345678', '123456789', '654321', '111111', '000000', 'password', 'qwerty', 'abc123', '1qaz2wsx'];
+        if (in_array($adminPassword, $weakPasswordArr)) {
+            throw new Exception('密码太简单，请重新输入');
+        }
+        $sql = file_get_contents(INSTALL_PATH . 'yzncms.sql');
+
+        $sql = str_replace("`yzn_", "`{$mysqlPrefix}", $sql);
+
+        // 先尝试能否自动创建数据库
+        $config = Config::get('database.');
+        try {
+            $pdo = new PDO("{$config['type']}:host={$mysqlHostname}" . ($mysqlHostport ? ";port={$mysqlHostport}" : ''), $mysqlUsername, $mysqlPassword);
+            $pdo->setAttribute(PDO::ATTR_ERRMODE, PDO::ERRMODE_EXCEPTION);
+            $pdo->query("CREATE DATABASE IF NOT EXISTS `{$mysqlDatabase}` CHARACTER SET utf8mb4 COLLATE utf8mb4_unicode_ci;");
+
+            // 连接install命令中指定的数据库
+            $instance = Db::connect([
+                'type'     => "{$config['type']}",
+                'hostname' => "{$mysqlHostname}",
+                'hostport' => "{$mysqlHostport}",
+                'database' => "{$mysqlDatabase}",
+                'username' => "{$mysqlUsername}",
+                'password' => "{$mysqlPassword}",
+                'prefix'   => "{$mysqlPrefix}",
+            ]);
+
+            // 查询一次SQL,判断连接是否正常
+            $instance->execute("SELECT 1");
+
+            $db = new PDO("{$config['type']}:dbname={$mysqlDatabase};host={$mysqlHostname}", $mysqlUsername, $mysqlPassword);
+            $db->setAttribute(PDO::ATTR_EMULATE_PREPARES, 0);
+            // 调用原生PDO对象进行批量查询
+            $db->exec($sql);
+        } catch (\PDOException $e) {
+            throw new Exception($e->getMessage());
+        }
+
+        // 数据库配置文件
+        $dbConfigFile = ROOT_PATH . 'config' . DS . 'database.php';
+        $dbConfigText = @file_get_contents($dbConfigFile);
+        $callback     = function ($matches) use ($mysqlHostname, $mysqlHostport, $mysqlUsername, $mysqlPassword, $mysqlDatabase, $mysqlPrefix) {
+            $field   = "mysql" . ucfirst($matches[1]);
+            $replace = $$field;
+            if ($matches[1] == 'hostport' && $mysqlHostport == 3306) {
+                $replace = '';
+            }
+            return "'{$matches[1]}'{$matches[2]}=>{$matches[3]}Env::get('database.{$matches[1]}', '{$replace}'),";
+        };
+        $dbConfigText = preg_replace_callback("/'(hostname|database|username|password|hostport|prefix)'(\s+)=>(\s+)Env::get\((.*)\)\,/", $callback, $dbConfigText);
+
+        // 检测能否成功写入数据库配置
+        $result = @file_put_contents($dbConfigFile, $dbConfigText);
+        if (!$result) {
+            throw new Exception('当前权限不足，无法写入文件 config/database.php');
+        }
+
+        // 设置新的Token随机密钥key
+        $oldTokenKey    = config('token.key');
+        $newTokenKey    = Random::alnum(32);
+        $coreConfigFile = ROOT_PATH . 'config' . DS . 'token.php';
+        $coreConfigText = @file_get_contents($coreConfigFile);
+        $coreConfigText = preg_replace("/'key'(\s+)=>(\s+)'{$oldTokenKey}'/", "'key'\$1=>\$2'{$newTokenKey}'", $coreConfigText);
+
+        $result = @file_put_contents($coreConfigFile, $coreConfigText);
+        if (!$result) {
+            throw new Exception('当前权限不足，无法写入文件 config/token.php');
+        }
+
+        // 变更默认管理员密码
+        $adminPassword = $adminPassword ? $adminPassword : Random::alnum(8);
+        $adminEmail    = $adminEmail ? $adminEmail : "admin@admin.com";
+        $newSalt       = substr(md5(uniqid(true)), 0, 6);
+        $newPassword   = md5(trim($adminPassword) . $newSalt);
+        $data          = ['username' => $adminUsername, 'email' => $adminEmail, 'password' => $newPassword, 'encrypt' => $newSalt];
+        $instance->name('admin')->where('username', 'admin')->update($data);
+
+        $installLockFile = INSTALL_PATH . "install.lock";
+        //检测能否成功写入lock文件
+        $result = @file_put_contents($installLockFile, 1);
+        if (!$result) {
+            throw new Exception('当前权限不足，无法写入文件 application/admin/command/Install/install.lock');
+        }
+        try {
+            //删除安装脚本
+            @unlink(ROOT_PATH . 'public' . DS . 'install.php');
+        } catch (\Exception $e) {
+
+        }
+        return true;
+    }
+
+    /**
+     * 检测环境
+     */
+    protected function checkenv()
+    {
+        //数据库配置文件
+        $dbConfigFile = ROOT_PATH . 'config' . DS . 'database.php';
+
+        if (version_compare(PHP_VERSION, '7.2.5', '<')) {
+            throw new Exception("当前版本" . PHP_VERSION . "过低，请使用PHP7.2.5以上版本");
+        }
+        if (!extension_loaded("PDO")) {
+            throw new Exception("当前未开启PDO，无法进行安装");
+        }
+        if (!File::is_really_writable($dbConfigFile)) {
+            throw new Exception("当前权限不足，无法写入文件 config/database.php");
+        }
+        return true;
+    }
+}

application/admin/command/Install/install.html

@@ -0,0 +1,272 @@
+<!DOCTYPE html>
+<html>
+
+<head>
+    <meta charset="utf-8">
+    <title>安装YznCMS后台程序</title>
+    <meta name="renderer" content="webkit">
+    <meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1">
+    <meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1">
+    <link rel="stylesheet" href="__STATIC__/libs/layui/css/layui.css" media="all">
+    <style type="text/css">
+    body {
+        text-align: center;
+        background-repeat: no-repeat;
+        background-color: #f1f4fd;
+        background-size: cover;
+        background-image: url(__STATIC__/admin/img/background01.svg);
+        margin: 0;
+        padding: 0;
+        line-height: 1.5;
+        -webkit-font-smoothing: antialiased;
+        -moz-osx-font-smoothing: grayscale;
+    }
+    body, input, button {
+        font-family: 'Source Sans Pro', 'Helvetica Neue', Helvetica, 'Microsoft Yahei', Arial, sans-serif;
+        font-size: 14px;
+        color: #7E96B3;
+    }
+    h2 {
+        margin-top: 20px;
+        font-size: 28px;
+        font-weight: normal;
+        color: #3C5675;
+        margin-bottom: 0
+    }
+    .content {
+        margin-top: 20px;
+    }
+    .content p {
+        margin: 20px;
+    }
+    .content form {
+        margin: 0 auto;
+        width: 500px;
+        margin-bottom: 20px;
+    }
+    .content form .bg {
+        margin-top: 20px;
+        background-color: #fff;
+        border: 1px solid #fff;
+        border-radius: 3px;
+        padding: 14px 14px;
+        box-shadow: 0 0 8px #cccccc;
+    }
+    .content form .layui-form-item:last-child {
+        margin-bottom: 0 !important;
+    }
+    .content form .layui-btn {
+        margin-top: 20px;
+    }
+    .content .layui-elem-field legend {
+        font-size: 16px;
+        color: #8a8a8a;
+    }
+    .content .tips {
+        float: left;
+        margin-top: 5px;
+        margin-bottom: 5px;
+        font-size: 12px;
+        color: #eca6a6
+    }
+    .content .admin-tips {
+        float: left;
+        margin-top: 5px;
+        margin-bottom: 5px;
+        font-size: 12px;
+        color: #eca6a6
+    }
+    .content .desc {
+        font-size: 16px;
+        color: #4E5465;
+        margin-bottom: 30px;
+    }
+    .content .desc a {
+        color: #07adeb;
+        margin-right: 10px;
+    }
+    .content .desc a:first-child {
+        margin-left: 10px;
+    }
+    #error, .error, #success, .success,  #warmtips, .warmtips{
+        color: #fff;
+        padding: 15px 20px;
+        border-radius: 4px;
+        margin-bottom: 20px;
+    }
+    #error a, .error a {
+        color: white;
+        text-decoration: underline;
+    }
+    #warmtips {
+        background: #ffcdcd;
+        font-size: 14px;
+        color: #e74c3c;
+    }
+    #warmtips a {
+        background: #ffffff7a;
+        display: block;
+        height: 30px;
+        line-height: 30px;
+        margin-top: 10px;
+        color: #e21a1a;
+        border-radius: 3px;
+    }
+    @media screen and (max-width:768px) {
+        .content form {
+            width: 95%;
+        }
+    }
+    </style>
+</head>
+
+<body>
+    <h2>安装YznCMS后台系统</h2>
+    <div class="content">
+        <p class="desc">
+            使用过程中遇到任何问题可参考
+            <a href="https://www.kancloud.cn/ken678/yzncms" target="_blank">文档教程</a>
+            <a href="https://www.bilibili.com/video/av417106995" target="_blank">视频教程</a>
+        </p>
+        <form class="layui-form layui-form-pane" action="">
+            {if $errInfo}
+            <div class="error layui-bg-red">
+                {$errInfo}
+            </div>
+            {/if}
+            <div id="error" class="layui-bg-red" style="display:none"></div>
+            <div id="success" class="layui-bg-cyan" style="display:none"></div>
+            <div id="warmtips" style="display:none"></div>
+            <div class="bg">
+                <div class="layui-form-item">
+                    <label class="layui-form-label">数据库地址</label>
+                    <div class="layui-input-block">
+                        <input class="layui-input" type="text" name="mysqlHostname" value="127.0.0.1" autocomplete="off" lay-verify="required" placeholder="请输入数据库地址">
+                    </div>
+                </div>
+                <div class="layui-form-item">
+                    <label class="layui-form-label">数据库名称</label>
+                    <div class="layui-input-block">
+                        <input class="layui-input" type="text" name="mysqlDatabase" value="" autocomplete="off" lay-verify="required" placeholder="请输入数据库名称">
+                    </div>
+                </div>
+                <div class="layui-form-item">
+                    <label class="layui-form-label">数据表前缀</label>
+                    <div class="layui-input-block">
+                        <input class="layui-input" type="text" name="mysqlPrefix" autocomplete="off" lay-verify="required" value="yzn_" placeholder="请输入数据表前缀">
+                    </div>
+                </div>
+                <div class="layui-form-item">
+                    <label class="layui-form-label">数据库账号</label>
+                    <div class="layui-input-block">
+                        <input class="layui-input" type="text" name="mysqlUsername" autocomplete="off" lay-verify="required" value="root" placeholder="请输入数据库账号">
+                    </div>
+                </div>
+                <div class="layui-form-item">
+                    <label class="layui-form-label">数据库密码</label>
+                    <div class="layui-input-block">
+                        <input class="layui-input" type="password" autocomplete="off" lay-verify="required" name="mysqlPassword" placeholder="请输入数据库密码">
+                    </div>
+                </div>
+                <div class="layui-form-item">
+                    <label class="layui-form-label">数据库端口</label>
+                    <div class="layui-input-block">
+                        <input class="layui-input" type="number" name="mysqlHostport" value="3306" autocomplete="off" lay-verify="required" placeholder="请输入数据库端口">
+                    </div>
+                </div>
+            </div>
+            <div class="bg">
+                <div class="layui-form-item">
+                    <label class="layui-form-label">管理员账号</label>
+                    <div class="layui-input-block">
+                        <input class="layui-input" name="adminUsername" autocomplete="off" lay-verify="required" value="admin" placeholder="请输入管理员账号"/>
+                    </div>
+                </div>
+                <div class="layui-form-item">
+                    <label class="layui-form-label">管理员邮箱</label>
+                    <div class="layui-input-block">
+                        <input class="layui-input" name="adminEmail" autocomplete="off" lay-verify="required" value="admin@admin.com" placeholder="请输入管理员邮箱"/>
+                    </div>
+                </div>
+                <div class="layui-form-item">
+                    <label class="layui-form-label">管理员密码</label>
+                    <div class="layui-input-block">
+                        <input class="layui-input" type="password" autocomplete="off" lay-verify="required" name="adminPassword" placeholder="请输入管理员密码">
+                    </div>
+                </div>
+                <div class="layui-form-item">
+                    <label class="layui-form-label">密码确认</label>
+                    <div class="layui-input-block">
+                        <input class="layui-input" type="password" autocomplete="off" lay-verify="required" name="adminPasswordConfirmation" placeholder="请输入密码确认">
+                    </div>
+                </div>
+            </div>
+            <div class="layui-form-item form-buttons">
+                <button class="layui-btn layui-btn-normal {:$errInfo?'layui-btn-disabled':''}" {:$errInfo?'disabled':''} lay-submit lay-filter="install">确定安装</button>
+            </div>
+        </form>
+    </div>
+    <script src="__STATIC__/libs/layui/layui.js" charset="utf-8"></script>
+    <script>
+    layui.use(['form', 'layer'], function() {
+        var $ = layui.jquery,
+            form = layui.form,
+            layer = layui.layer;
+
+            $(function () {
+                $('form :input:first').select();
+            })
+            form.on('submit(install)', function(data) {
+                if ($(this).hasClass('layui-btn-disabled')) {
+                    return false;
+                }
+                var $error = $("#error");
+                var $success = $("#success");
+                var $button = $('.layui-btn')
+                    .text("安装中...")
+                    .prop('disabled', true);
+                var _data = data.field;
+
+                $.ajax({
+                    url: "",
+                    type: "POST",
+                    dataType: "json",
+                    data: _data,
+                    success: function (ret) {
+                        if (ret.code == 1) {
+                            var data = ret.data;
+                            $error.hide();
+                            $("form .bg").remove();
+                            $button.remove();
+                            $success.text(ret.msg).show();
+
+                            $buttons = $("form .form-buttons");
+                            $("<a class='layui-btn layui-btn-normal' href='./'>访问首页</a>").appendTo($buttons);
+                            $("#warmtips").html("温馨提示：为了安全，请删除/public/install.php文件").show();
+                            var url = location.href.replace(/install\.php/, 'admin');
+                            $('<a class="layui-btn" href="' + url + '" id="btn-admin" style="background:#4e73df">' + "进入后台" + '</a>').appendTo($buttons);
+
+                            localStorage.setItem("fastep", "installed");
+                        } else {
+                            $error.show().text(ret.msg);
+                            $button.prop('disabled', false).text("点击安装");
+                            $("html,body").animate({
+                                scrollTop: 0
+                            }, 500);
+                        }
+                    },
+                    error: function (xhr) {
+                        $error.show().text(xhr.responseText);
+                        $button.prop('disabled', false).text("点击安装");
+                        $("html,body").animate({
+                            scrollTop: 0
+                        }, 500);
+                    }
+                });
+                return false;
+            });
+    });
+    </script>
+</body>
+
+</html>

application/admin/command/Install/yzncms.sql

@@ -0,0 +1,372 @@
+/*
+ YznCMS Install SQL
+ Date: 2024-02-05 09:17:57
+*/
+
+SET FOREIGN_KEY_CHECKS = 0;
+
+-- ----------------------------
+-- Table structure for `yzn_admin`
+-- ----------------------------
+DROP TABLE IF EXISTS `yzn_admin`;
+CREATE TABLE `yzn_admin` (
+  `id` smallint(3) unsigned NOT NULL AUTO_INCREMENT COMMENT '用户ID',
+  `username` varchar(20) DEFAULT NULL COMMENT '管理账号',
+  `password` varchar(32) DEFAULT NULL COMMENT '管理密码',
+  `roleid` tinyint(4) unsigned DEFAULT '0' COMMENT '规则ID',
+  `encrypt` varchar(6) DEFAULT NULL COMMENT '加密因子',
+  `nickname` varchar(16) NOT NULL COMMENT '昵称',
+  `last_login_time` int(10) unsigned DEFAULT NULL COMMENT '最后登录时间',
+  `login_failure` tinyint(1) unsigned NOT NULL DEFAULT '0' COMMENT '失败次数',
+  `create_time` int(10) unsigned DEFAULT NULL COMMENT '创建时间',
+  `update_time` int(10) unsigned DEFAULT NULL COMMENT '更新时间',
+  `last_login_ip` varchar(50) NOT NULL DEFAULT '' COMMENT '最后登录IP',
+  `email` varchar(40) DEFAULT NULL COMMENT '电子邮箱',
+  `mobile` varchar(11) DEFAULT '' COMMENT '手机号码',
+  `token` varchar(60) NOT NULL DEFAULT '' COMMENT 'Session标识',
+  `status` tinyint(2) NOT NULL DEFAULT '0' COMMENT '状态',
+  PRIMARY KEY (`id`),
+  KEY `username` (`username`)
+) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4 COLLATE utf8mb4_unicode_ci COMMENT='管理员表';
+
+-- ----------------------------
+-- Records of yzn_admin
+-- ----------------------------
+INSERT INTO `yzn_admin` VALUES (1, 'admin', '9724b5e6c56b95f5723009ef81961bfe', 1, 'Wo0bAa', '御宅男', 1546940765,0,1546940765,1546940765, '127.0.0.1', '530765310@qq.com', '', '',1);
+
+-- ----------------------------
+-- Table structure for `yzn_adminlog`
+-- ----------------------------
+DROP TABLE IF EXISTS `yzn_adminlog`;
+CREATE TABLE `yzn_adminlog` (
+  `id` int(10) unsigned NOT NULL AUTO_INCREMENT COMMENT 'ID',
+  `admin_id` int(10) unsigned NOT NULL DEFAULT '0' COMMENT '管理员ID',
+  `username` varchar(30) DEFAULT '' COMMENT '管理员名字',
+  `url` varchar(1500) DEFAULT '' COMMENT '操作页面',
+  `title` varchar(100) DEFAULT '' COMMENT '日志标题',
+  `content` longtext NOT NULL COMMENT '内容',
+  `ip` varchar(50) DEFAULT '' COMMENT 'IP',
+  `useragent` varchar(255) DEFAULT '' COMMENT 'User-Agent',
+  `create_time` int(10) unsigned DEFAULT NULL COMMENT '操作时间',
+  PRIMARY KEY (`id`),
+  KEY `name` (`username`)
+) ENGINE=InnoDB  DEFAULT CHARSET=utf8mb4 COLLATE utf8mb4_unicode_ci COMMENT='操作日志';
+
+-- ----------------------------
+-- Table structure for `yzn_attachment`
+-- ----------------------------
+DROP TABLE IF EXISTS `yzn_attachment`;
+CREATE TABLE `yzn_attachment` (
+  `id` int(11) unsigned NOT NULL AUTO_INCREMENT,
+  `category` varchar(50) DEFAULT '' COMMENT '类别',
+  `admin_id` smallint(3) unsigned NOT NULL DEFAULT '0' COMMENT '管理员id',
+  `user_id` mediumint(8) unsigned NOT NULL DEFAULT '0' COMMENT '用户id',
+  `name` varchar(100) NOT NULL DEFAULT '' COMMENT '文件名',
+  `path` varchar(255) NOT NULL DEFAULT '' COMMENT '文件路径',
+  `thumb` varchar(255) NOT NULL DEFAULT '' COMMENT '缩略图路径',
+  `url` varchar(255) NOT NULL DEFAULT '' COMMENT '文件链接',
+  `mime` varchar(100) NOT NULL DEFAULT '' COMMENT '文件mime类型',
+  `ext` varchar(4) NOT NULL DEFAULT '' COMMENT '文件类型',
+  `size` int(11) unsigned NOT NULL DEFAULT '0' COMMENT '文件大小',
+  `md5` varchar(32) NOT NULL DEFAULT '' COMMENT '文件md5',
+  `sha1` varchar(40) NOT NULL DEFAULT '' COMMENT 'sha1 散列值',
+  `driver` varchar(16) NOT NULL DEFAULT 'local' COMMENT '上传驱动',
+  `create_time` int(10) unsigned DEFAULT NULL COMMENT '上传时间',
+  `update_time` int(10) unsigned DEFAULT NULL COMMENT '更新时间',
+  `listorders` int(5) NOT NULL DEFAULT '100' COMMENT '排序',
+  `status` tinyint(2) NOT NULL DEFAULT '0' COMMENT '状态',
+  PRIMARY KEY (`id`)
+) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4 COLLATE utf8mb4_unicode_ci COMMENT='附件表';
+
+-- ----------------------------
+-- Table structure for `yzn_auth_group`
+-- ----------------------------
+DROP TABLE IF EXISTS `yzn_auth_group`;
+CREATE TABLE `yzn_auth_group` (
+  `id` mediumint(8) unsigned NOT NULL AUTO_INCREMENT COMMENT '用户组id,自增主键',
+  `parentid` mediumint(8) unsigned NOT NULL DEFAULT '0' COMMENT '父组别',
+  `title` varchar(20) NOT NULL DEFAULT '' COMMENT '用户组中文名称',
+  `description` varchar(80) NOT NULL DEFAULT '' COMMENT '描述信息',
+  `rules` text NOT NULL COMMENT '用户组拥有的规则id，多个规则 , 隔开',
+  `status` tinyint(2) NOT NULL DEFAULT '0' COMMENT '状态',
+  PRIMARY KEY (`id`)
+) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4 COLLATE utf8mb4_unicode_ci COMMENT='权限组表';
+
+-- ----------------------------
+-- Records of yzn_auth_group
+-- ----------------------------
+INSERT INTO `yzn_auth_group` VALUES (1, 0, '超级管理员', '拥有所有权限', '*', 1);
+INSERT INTO `yzn_auth_group` VALUES (2, 1, '编辑', '编辑', '', 1);
+
+-- ----------------------------
+-- Table structure for yzn_auth_rule
+-- ----------------------------
+DROP TABLE IF EXISTS `yzn_auth_rule`;
+CREATE TABLE `yzn_auth_rule` (
+  `id` mediumint(8) unsigned NOT NULL AUTO_INCREMENT COMMENT '规则id,自增主键',
+  `parentid` int(10) unsigned NOT NULL DEFAULT '0' COMMENT '父ID',
+  `name` varchar(100) DEFAULT '' COMMENT '规则名称',
+  `title` varchar(50) DEFAULT '' COMMENT '规则名称',
+  `icon` varchar(50) DEFAULT '' COMMENT '图标',
+  `url` varchar(255) DEFAULT '' COMMENT '规则URL',
+  `condition` varchar(255) DEFAULT '' COMMENT '条件',
+  `remark` varchar(255) DEFAULT '' COMMENT '备注',
+  `ismenu` tinyint(1) unsigned NOT NULL DEFAULT '0' COMMENT '是否为菜单',
+  `menutype` enum('_iframe','_blank','_layer') DEFAULT NULL COMMENT '菜单类型',
+  `extend` varchar(255) DEFAULT '' COMMENT '扩展属性',
+  `create_time` int(10) unsigned DEFAULT NULL COMMENT '创建时间',
+  `update_time` int(10) unsigned DEFAULT NULL COMMENT '更新时间',
+  `listorder` smallint(3) unsigned NOT NULL DEFAULT '0' COMMENT '排序',
+  `status` tinyint(2) NOT NULL DEFAULT '0' COMMENT '状态',
+  PRIMARY KEY (`id`),
+  UNIQUE KEY `name` (`name`) USING BTREE,
+  KEY `parentid` (`parentid`),
+  KEY `listorder` (`listorder`)
+) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4 COLLATE utf8mb4_unicode_ci COMMENT='节点表';
+
+-- ----------------------------
+-- Records of yzn_auth_rule
+-- ----------------------------
+INSERT INTO `yzn_auth_rule` VALUES (1, 0, 'general', '常规管理', 'iconfont icon-setup', '', '', '', 1, NULL, '', 1691377129, 1691377129, 999, 1);
+INSERT INTO `yzn_auth_rule` VALUES (2, 0, 'addons', '插件管理', 'iconfont icon-equalizer-line', '', '', '', 1, NULL, '', 1691377129, 1691377129, 777, 1);
+INSERT INTO `yzn_auth_rule` VALUES (4, 1, 'general.profile', '个人资料', 'iconfont icon-user-line', '', '', '', 1, NULL, '', 1691377129, 1691377129, 0, 1);
+INSERT INTO `yzn_auth_rule` VALUES (5, 4, 'general.profile/index', '查看', '', '', '', '', 0, NULL, '', 1691377129, 1691377129, 0, 1);
+INSERT INTO `yzn_auth_rule` VALUES (6, 4, 'general.profile/update', '资料更新', '', '', '', '', 0, NULL, '', 1691377129, 1691377129, 0, 1);
+INSERT INTO `yzn_auth_rule` VALUES (10, 1, 'general.config', '配置管理', 'iconfont icon-apartment', '', '', '', 1, NULL, '', 1691377129, 1691377129, 999, 1);
+INSERT INTO `yzn_auth_rule` VALUES (11, 1, 'general.config/setting', '网站设置', 'iconfont icon-setup', '', '', '', 1, NULL, '', 1691377129, 1691377129, 888, 1);
+INSERT INTO `yzn_auth_rule` VALUES (12, 28, 'auth.rule', '菜单管理', 'iconfont icon-other', '', '', '', 1, NULL, '', 1691377129, 1691377129, 666, 1);
+INSERT INTO `yzn_auth_rule` VALUES (13, 1, 'general.attachments', '附件管理', 'iconfont icon-accessory', '', '', '', 1, NULL, '', 1691377129, 1691377129, 666, 1);
+INSERT INTO `yzn_auth_rule` VALUES (14, 13, 'general.attachments/index', '查看', '', '', '', '', 0, NULL, '', 1691377129, 1691377129, 0, 1);
+INSERT INTO `yzn_auth_rule` VALUES (15, 13, 'general.attachments/del', '删除', '', '', '', '', 0, NULL, '', 1691377129, 1691377129, 0, 1);
+INSERT INTO `yzn_auth_rule` VALUES (16, 13, 'general.attachments/getUrlFile', '图片本地化', '', '', '', '', 0, NULL, '', 1691377129, 1691377129, 0, 1);
+INSERT INTO `yzn_auth_rule` VALUES (17, 13, 'general.attachments/select', '图片选择', '', '', '', '', 0, NULL, '', 1691377129, 1691377129, 0, 1);
+INSERT INTO `yzn_auth_rule` VALUES (18, 12, 'auth.rule/index', '查看', '', '', '', '', 0, NULL, '', 1691377129, 1691377129, 0, 1);
+INSERT INTO `yzn_auth_rule` VALUES (19, 12, 'auth.rule/add', '新增', '', '', '', '', 0, NULL, '', 1691377129, 1691377129, 0, 1);
+INSERT INTO `yzn_auth_rule` VALUES (20, 12, 'auth.rule/edit', '编辑', '', '', '', '', 0, NULL, '', 1691377129, 1691377129, 0, 1);
+INSERT INTO `yzn_auth_rule` VALUES (21, 12, 'auth.rule/del', '删除', '', '', '', '', 0, NULL, '', 1691377129, 1691377129, 0, 1);
+INSERT INTO `yzn_auth_rule` VALUES (22, 12, 'auth.rule/multi', '批量更新', '', '', '', '', 0, NULL, '', 1691377129, 1691377129, 0, 1);
+INSERT INTO `yzn_auth_rule` VALUES (23, 10, 'general.config/add', '新增', '', '', '', '', 0, NULL, '', 1691377129, 1691377129, 0, 1);
+INSERT INTO `yzn_auth_rule` VALUES (24, 10, 'general.config/edit', '编辑', '', '', '', '', 0, NULL, '', 1691377129, 1691377129, 0, 1);
+INSERT INTO `yzn_auth_rule` VALUES (25, 10, 'general.config/del', '删除', '', '', '', '', 0, NULL, '', 1691377129, 1691377129, 0, 1);
+INSERT INTO `yzn_auth_rule` VALUES (26, 10, 'general.config/multi', '批量更新', '', '', '', '', 0, NULL, '', 1691377129, 1691377129, 0, 1);
+INSERT INTO `yzn_auth_rule` VALUES (27, 10, 'general.config/index', '查看', '', '', '', '', 0, NULL, '', 1691377129, 1691377129, 0, 1);
+INSERT INTO `yzn_auth_rule` VALUES (28, 0, 'auth', '权限管理', 'iconfont icon-user-settings-line', '', '', '', 1, NULL, '', 1691377129, 1691377129, 888, 1);
+INSERT INTO `yzn_auth_rule` VALUES (29, 28, 'auth.manager', '管理员管理', 'iconfont icon-user-settings-line', '', '', '', 1, NULL, '', 1691377129, 1691377129, 999, 1);
+INSERT INTO `yzn_auth_rule` VALUES (30, 29, 'auth.manager/index', '查看', '', '', '', '', 0, NULL, '', 1691377129, 1691377129, 0, 1);
+INSERT INTO `yzn_auth_rule` VALUES (31, 29, 'auth.manager/edit', '编辑', '', '', '', '', 0, NULL, '', 1691377129, 1691377129, 0, 1);
+INSERT INTO `yzn_auth_rule` VALUES (32, 29, 'auth.manager/del', '删除', '', '', '', '', 0, NULL, '', 1691377129, 1691377129, 0, 1);
+INSERT INTO `yzn_auth_rule` VALUES (33, 29, 'auth.manager/add', '新增', '', '', '', '', 0, NULL, '', 1691377129, 1691377129, 0, 1);
+INSERT INTO `yzn_auth_rule` VALUES (34, 28, 'auth.adminlog', '管理日志', 'iconfont icon-history', '', '', '', 1, NULL, '', 1691377129, 1691377129, 888, 1);
+INSERT INTO `yzn_auth_rule` VALUES (35, 34, 'auth.adminlog/index', '查看', '', '', '', '', 0, NULL, '', 1691377129, 1691377129, 0, 1);
+INSERT INTO `yzn_auth_rule` VALUES (36, 34, 'auth.adminlog/deletelog', '删除', '', '', '', '', 0, NULL, '', 1691377129, 1691377129, 0, 1);
+INSERT INTO `yzn_auth_rule` VALUES (37, 28, 'auth.group', '角色管理', 'iconfont icon-user-shared-2-line', '', '', '', 1, NULL, '', 1691377129, 1691377129, 777, 1);
+INSERT INTO `yzn_auth_rule` VALUES (38, 37, 'auth.group/index', '查看', '', '', '', '', 0, NULL, '', 1691377129, 1691377129, 0, 1);
+INSERT INTO `yzn_auth_rule` VALUES (39, 37, 'auth.group/add', '新增', '', '', '', '', 0, NULL, '', 1691377129, 1691377129, 0, 1);
+INSERT INTO `yzn_auth_rule` VALUES (40, 37, 'auth.group/edit', '编辑', '', '', '', '', 0, NULL, '', 1691377129, 1691377129, 0, 1);
+INSERT INTO `yzn_auth_rule` VALUES (41, 37, 'auth.group/del', '删除', '', '', '', '', 0, NULL, '', 1691377129, 1691377129, 0, 1);
+INSERT INTO `yzn_auth_rule` VALUES (42, 37, 'auth.group/access', '访问授权', '', '', '', '', 0, NULL, '', 1691377129, 1691377129, 0, 1);
+INSERT INTO `yzn_auth_rule` VALUES (45, 2, 'addons/index', '查看', '', '', '', '', 0, NULL, '', 1691377129, 1691377129, 0, 1);
+INSERT INTO `yzn_auth_rule` VALUES (46, 2, 'addons/config', '配置', '', '', '', '', 0, NULL, '', 1691377129, 1691377129, 0, 1);
+INSERT INTO `yzn_auth_rule` VALUES (49, 2, 'addons/state', '禁用启用', '', '', '', '', 0, NULL, '', 1691377129, 1691377129, 0, 1);
+
+-- ----------------------------
+-- Table structure for `yzn_cache`
+-- ----------------------------
+DROP TABLE IF EXISTS `yzn_cache`;
+CREATE TABLE `yzn_cache` (
+  `id` int(10) NOT NULL AUTO_INCREMENT,
+  `key` varchar(100) NOT NULL DEFAULT '' COMMENT '缓存KEY值',
+  `name` varchar(100) NOT NULL DEFAULT '' COMMENT '名称',
+  `module` varchar(20) NOT NULL DEFAULT '' COMMENT '模块名称',
+  `model` varchar(30) NOT NULL DEFAULT '' COMMENT '模型名称',
+  `action` varchar(30) NOT NULL DEFAULT '' COMMENT '方法名',
+  `system` tinyint(1) NOT NULL DEFAULT '0' COMMENT '是否系统',
+  PRIMARY KEY (`id`),
+  KEY `ckey` (`key`)
+) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4 COLLATE utf8mb4_unicode_ci COMMENT='缓存列队表';
+
+-- ----------------------------
+-- Records of yzn_cache
+-- ----------------------------
+INSERT INTO `yzn_cache` VALUES (1, 'Model', '模型列表', 'admin', 'Models', 'model_cache', 1);
+INSERT INTO `yzn_cache` VALUES (2, 'ModelField', '模型字段', 'admin', 'ModelField', 'model_field_cache', 1);
+
+-- ----------------------------
+-- Table structure for `yzn_config`
+-- ----------------------------
+DROP TABLE IF EXISTS `yzn_config`;
+CREATE TABLE `yzn_config` (
+  `id` int(10) unsigned NOT NULL AUTO_INCREMENT COMMENT '配置ID',
+  `name` varchar(30) NOT NULL DEFAULT '' COMMENT '配置名称',
+  `type` varchar(32) NOT NULL DEFAULT '' COMMENT '配置类型',
+  `title` varchar(50) NOT NULL DEFAULT '' COMMENT '配置说明',
+  `group` varchar(32) NOT NULL DEFAULT '' COMMENT '配置分组',
+  `options` varchar(255) NOT NULL DEFAULT '' COMMENT '配置项',
+  `remark` varchar(100) NOT NULL DEFAULT '' COMMENT '配置说明',
+  `create_time` int(10) unsigned DEFAULT NULL COMMENT '创建时间',
+  `update_time` int(10) unsigned DEFAULT NULL COMMENT '更新时间',
+  `status` tinyint(2) NOT NULL DEFAULT '0' COMMENT '状态',
+  `value` text NULL COMMENT '配置值',
+  `visible` varchar(255) DEFAULT '' COMMENT '可见条件',
+  `extend` varchar(255) DEFAULT '' COMMENT '扩展属性',
+  `listorder` smallint(3) unsigned NOT NULL DEFAULT '0' COMMENT '排序',
+  PRIMARY KEY (`id`),
+  UNIQUE KEY `uk_name` (`name`),
+  KEY `type` (`type`),
+  KEY `group` (`group`)
+) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4 COLLATE utf8mb4_unicode_ci COMMENT='网站配置';
+
+-- ----------------------------
+-- Records of yzn_config
+-- ----------------------------
+INSERT INTO `yzn_config` VALUES (1, 'web_site_icp', 'text', '备案信息', 'base', '', '', 1551244923, 1551244971, 1, '', '', '',1);
+INSERT INTO `yzn_config` VALUES (2, 'web_site_statistics', 'textarea', '站点代码', 'base', '', '', 1551244957, 1551244957, 1, '','', '', 100);
+INSERT INTO `yzn_config` VALUES (3, 'config_group', 'array', '配置分组', 'system', '', '', 1494408414, 1494408414, 1, '{\"base\":\"基础\",\"system\":\"系统\",\"upload\":\"上传\",\"develop\":\"开发\"}','', '', 0);
+INSERT INTO `yzn_config` VALUES (4, 'theme', 'text', '主题风格', 'system', '', '', 1541752781, 1541756888, 1, 'default', '', '',1);
+INSERT INTO `yzn_config` VALUES (5, 'admin_forbid_ip', 'textarea', '后台禁止访问IP', 'system', '', '匹配IP段用\"*\"占位，如192.168.*.*，多个IP地址请用英文逗号\",\"分割', 1551244957, 1551244957, 1, '', '', '',2);
+INSERT INTO `yzn_config` VALUES (6, 'upload_image_size', 'text', '图片上传大小限制', 'upload', '', '0为不限制大小，单位：kb', 1540457656, 1552436075, 1, '0', '', '',2);
+INSERT INTO `yzn_config` VALUES (7, 'upload_image_ext', 'text', '允许上传图片后缀', 'upload', '', '多个后缀用逗号隔开，不填写则不限制类型', 1540457657, 1552436074, 1, 'gif,jpg,jpeg,bmp,png', '', '',1);
+INSERT INTO `yzn_config` VALUES (8, 'upload_file_size', 'text', '文件上传大小限制', 'upload', '', '0为不限制大小，单位：kb', 1540457658, 1552436078, 1, '0', '', '',3);
+INSERT INTO `yzn_config` VALUES (9, 'upload_file_ext', 'text', '允许上传文件后缀', 'upload', '', '多个后缀用逗号隔开，不填写则不限制类型', 1540457659, 1552436080, 1, 'doc,docx,xls,xlsx,ppt,pptx,pdf,wps,txt,rar,zip,gz,bz2,7z', '', '',4);
+INSERT INTO `yzn_config` VALUES (10, 'upload_driver', 'radio', '上传驱动', 'upload', 'local:本地', '图片或文件上传驱动', 1541752781, 1552436085, 1, 'local', '', '',9);
+INSERT INTO `yzn_config` VALUES (11, 'upload_thumb_water', 'switch', '添加水印', 'upload', '', '', 1552435063, 1552436080, 1, '0', '', '',5);
+INSERT INTO `yzn_config` VALUES (12, 'upload_thumb_water_pic', 'image', '水印图片', 'upload', '', '只有开启水印功能才生效', 1552435183, 1552436081, 1, '', '', '',6);
+INSERT INTO `yzn_config` VALUES (13, 'upload_thumb_water_position', 'radio', '水印位置', 'upload', '1:左上角\r\n2:上居中\r\n3:右上角\r\n4:左居中\r\n5:居中\r\n6:右居中\r\n7:左下角\r\n8:下居中\r\n9:右下角', '只有开启水印功能才生效', 1552435257, 1552436082, 1, '9', '', '',7);
+INSERT INTO `yzn_config` VALUES (14, 'upload_thumb_water_alpha', 'text', '水印透明度', 'upload', '', '请输入0~100之间的数字，数字越小，透明度越高', 1552435299, 1552436083, 1, '50', '', '',8);
+
+-- ----------------------------
+-- Table structure for `yzn_field_type`
+-- ----------------------------
+DROP TABLE IF EXISTS `yzn_field_type`;
+CREATE TABLE `yzn_field_type` (
+  `name` varchar(32) NOT NULL COMMENT '字段类型',
+  `title` varchar(64) NOT NULL DEFAULT '' COMMENT '中文类型名',
+  `listorder` int(4) NOT NULL DEFAULT '0' COMMENT '排序',
+  `default_define` varchar(128) NOT NULL DEFAULT '' COMMENT '默认定义',
+  `ifoption` tinyint(1) unsigned NOT NULL DEFAULT '0' COMMENT '是否需要设置选项',
+  `ifstring` tinyint(1) unsigned NOT NULL DEFAULT '0' COMMENT '是否自由字符',
+  PRIMARY KEY (`name`),
+  UNIQUE KEY `name` (`name`)
+) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4 COLLATE utf8mb4_unicode_ci COMMENT='字段类型表';
+
+-- ----------------------------
+-- Records of yzn_field_type
+-- ----------------------------
+INSERT INTO `yzn_field_type` VALUES ('text', '输入框', 1, 'varchar(255) NOT NULL', 0, 1);
+INSERT INTO `yzn_field_type` VALUES ('checkbox', '复选框', 2, 'varchar(32) NOT NULL', 1, 0);
+INSERT INTO `yzn_field_type` VALUES ('textarea', '多行文本', 3, 'varchar(255) NOT NULL', 0, 1);
+INSERT INTO `yzn_field_type` VALUES ('password', '密码', 4, 'varchar(255) NOT NULL', 0, 1);
+INSERT INTO `yzn_field_type` VALUES ('radio', '单选按钮', 5, 'char(10) NOT NULL', 1, 0);
+INSERT INTO `yzn_field_type` VALUES ('switch', '开关', 6, 'tinyint(2) UNSIGNED NOT NULL', 0, 0);
+INSERT INTO `yzn_field_type` VALUES ('array', '数组', 7, 'varchar(512) NOT NULL', 0, 0);
+INSERT INTO `yzn_field_type` VALUES ('select', '下拉框', 8, 'char(10) NOT NULL', 1, 0);
+INSERT INTO `yzn_field_type` VALUES ('selects', '下拉框(多选)', 9, 'varchar(32) NOT NULL', 1, 0);
+INSERT INTO `yzn_field_type` VALUES ('selectpage', '高级下拉框', 10, 'varchar(32) NOT NULL', 1, 0);
+INSERT INTO `yzn_field_type` VALUES ('image', '单张图', 11, 'varchar(255) NOT NULL', 0, 0);
+INSERT INTO `yzn_field_type` VALUES ('images', '多张图', 12, 'text NOT NULL', 0, 0);
+INSERT INTO `yzn_field_type` VALUES ('tags', '标签', 13, 'varchar(255) NOT NULL', 0, 1);
+INSERT INTO `yzn_field_type` VALUES ('number', '数字', 14, 'int(10) UNSIGNED NOT NULL', 0, 0);
+INSERT INTO `yzn_field_type` VALUES ('datetime', '日期和时间', 15, 'int(10) UNSIGNED NOT NULL', 0, 0);
+INSERT INTO `yzn_field_type` VALUES ('datetimerange', '日期和时间区间', 16, 'varchar(100) NOT NULL', 0, 0);
+INSERT INTO `yzn_field_type` VALUES ('Ueditor', '百度编辑器', 17, 'mediumtext NOT NULL', 0, 1);
+INSERT INTO `yzn_field_type` VALUES ('markdown', 'markdown编辑器', 18, 'mediumtext NOT NULL', 0, 1);
+INSERT INTO `yzn_field_type` VALUES ('files', '多文件', 19, 'text NOT NULL', 0, 0);
+INSERT INTO `yzn_field_type` VALUES ('file', '单文件', 20, 'varchar(255) NOT NULL', 0, 0);
+INSERT INTO `yzn_field_type` VALUES ('color', '颜色值', 21, 'varchar(7) NOT NULL', 0, 0);
+INSERT INTO `yzn_field_type` VALUES ('city', '城市地区', 22, 'varchar(255) NOT NULL', 0, 0);
+INSERT INTO `yzn_field_type` VALUES ('custom', '自定义', 23, 'text NOT NULL', 1, 0);
+
+-- ----------------------------
+-- Table structure for `yzn_model`
+-- ----------------------------
+DROP TABLE IF EXISTS `yzn_model`;
+CREATE TABLE `yzn_model` (
+  `id` smallint(5) unsigned NOT NULL AUTO_INCREMENT,
+  `module` varchar(15) NOT NULL  DEFAULT '' COMMENT '所属模块',
+  `name` varchar(30) NOT NULL DEFAULT '' COMMENT '模型名称',
+  `tablename` varchar(20) NOT NULL DEFAULT '' COMMENT '表名',
+  `description` varchar(100) NOT NULL DEFAULT '' COMMENT '描述',
+  `setting` text NOT NULL COMMENT '配置信息',
+  `type` tinyint(1) unsigned NOT NULL DEFAULT '1' COMMENT '模型类别：1-独立表，2-主附表',
+  `create_time` int(10) unsigned DEFAULT NULL COMMENT '添加时间',
+  `update_time` int(10) unsigned DEFAULT NULL COMMENT '更新时间',
+  `listorders` tinyint(3) NOT NULL DEFAULT '0' COMMENT '排序',
+  `status` tinyint(2) NOT NULL DEFAULT '0' COMMENT '状态',
+  PRIMARY KEY (`id`)
+) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4 COLLATE utf8mb4_unicode_ci COMMENT='模型列表';
+
+-- ----------------------------
+-- Table structure for `yzn_model_field`
+-- ----------------------------
+DROP TABLE IF EXISTS `yzn_model_field`;
+CREATE TABLE `yzn_model_field` (
+  `id` smallint(5) unsigned NOT NULL AUTO_INCREMENT,
+  `modelid` smallint(5) unsigned NOT NULL DEFAULT '0' COMMENT '模型ID',
+  `name` varchar(20) NOT NULL DEFAULT '' COMMENT '字段名',
+  `title` varchar(30) NOT NULL DEFAULT '' COMMENT '别名',
+  `remark` tinytext NULL COMMENT '字段提示',
+  `pattern` varchar(255) NOT NULL DEFAULT '' COMMENT '数据校验正则',
+  `errortips` varchar(255) NOT NULL DEFAULT '' COMMENT '数据校验未通过的提示信息',
+  `type` varchar(20) NOT NULL DEFAULT '' COMMENT '字段类型',
+  `extend` varchar(255) DEFAULT '' COMMENT '扩展信息',
+  `setting` mediumtext NULL COMMENT '字段配置',
+  `ifsystem` tinyint(1) unsigned NOT NULL DEFAULT '1' COMMENT '是否主表字段 1 是',
+  `iscore` tinyint(1) unsigned NOT NULL DEFAULT '0' COMMENT '是否内部字段',
+  `iffixed` tinyint(1) unsigned NOT NULL DEFAULT '0' COMMENT '是否固定不可修改',
+  `ifrequire` tinyint(1) unsigned NOT NULL DEFAULT '0' COMMENT '是否必填',
+  `ifsearch` tinyint(1) unsigned NOT NULL DEFAULT '0' COMMENT '作为搜索条件',
+  `isadd` tinyint(1) unsigned NOT NULL DEFAULT '0' COMMENT '在投稿中显示',
+  `create_time` int(10) unsigned DEFAULT NULL COMMENT '创建时间',
+  `update_time` int(10) unsigned DEFAULT NULL COMMENT '更新时间',
+  `listorder` smallint(5) unsigned NOT NULL DEFAULT '0' COMMENT '排序',
+  `status` tinyint(2) NOT NULL DEFAULT '0' COMMENT '状态',
+  PRIMARY KEY (`id`),
+  KEY `name` (`name`,`modelid`)
+) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4 COLLATE utf8mb4_unicode_ci COMMENT='模型字段列表';
+
+-- ----------------------------
+-- Table structure for `yzn_terms`
+-- ----------------------------
+DROP TABLE IF EXISTS `yzn_terms`;
+CREATE TABLE `yzn_terms` (
+  `id` bigint(20) unsigned NOT NULL AUTO_INCREMENT COMMENT '分类ID',
+  `parentid` smallint(5) NOT NULL DEFAULT '0' COMMENT '父ID',
+  `name` varchar(20) NOT NULL DEFAULT '' COMMENT '分类名称',
+  `module` varchar(15) NOT NULL DEFAULT '' COMMENT '所属模块',
+  `setting` mediumtext NULL COMMENT '相关配置信息',
+  PRIMARY KEY (`id`),
+  KEY `name` (`name`),
+  KEY `module` (`module`)
+) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4 COLLATE utf8mb4_unicode_ci COMMENT='分类表';
+
+-- ----------------------------
+-- Table structure for `yzn_sms`
+-- ----------------------------
+DROP TABLE IF EXISTS `yzn_sms`;
+CREATE TABLE `yzn_sms` (
+  `id` int(10) unsigned NOT NULL AUTO_INCREMENT COMMENT 'ID',
+  `event` varchar(30) NOT NULL DEFAULT '' COMMENT '事件',
+  `mobile` varchar(20) NOT NULL DEFAULT '' COMMENT '手机号',
+  `code` varchar(10) NOT NULL DEFAULT '' COMMENT '验证码',
+  `times` int(10) unsigned NOT NULL DEFAULT '0' COMMENT '验证次数',
+  `ip` varchar(50) NOT NULL DEFAULT '' COMMENT '操作IP',
+  `create_time` int(10) unsigned DEFAULT NULL COMMENT '创建时间',
+  PRIMARY KEY (`id`)
+) ENGINE=InnoDB  DEFAULT CHARSET=utf8mb4 COLLATE utf8mb4_unicode_ci COMMENT='短信验证码表';
+
+-- ----------------------------
+-- Table structure for `yzn_ems`
+-- ----------------------------
+DROP TABLE IF EXISTS `yzn_ems`;
+CREATE TABLE `yzn_ems` (
+  `id` int(10) unsigned NOT NULL AUTO_INCREMENT COMMENT 'ID',
+  `event` varchar(30) NOT NULL DEFAULT '' COMMENT '事件',
+  `email` varchar(100) NOT NULL DEFAULT '' COMMENT '邮箱',
+  `code` varchar(10) NOT NULL DEFAULT '' COMMENT '验证码',
+  `times` int(10) unsigned NOT NULL DEFAULT '0' COMMENT '验证次数',
+  `ip` varchar(50) NOT NULL DEFAULT '' COMMENT '操作IP',
+  `create_time` int(10) unsigned DEFAULT NULL COMMENT '创建时间',
+  PRIMARY KEY (`id`)
+) ENGINE=InnoDB  DEFAULT CHARSET=utf8mb4 COLLATE utf8mb4_unicode_ci COMMENT='邮箱验证码表';
+
+SET FOREIGN_KEY_CHECKS = 1;

application/admin/command/Menu.php

@@ -0,0 +1,276 @@
+<?php
+// +----------------------------------------------------------------------
+// | Yzncms [ 御宅男工作室 ]
+// +----------------------------------------------------------------------
+// | Copyright (c) 2018 http://yzncms.com All rights reserved.
+// +----------------------------------------------------------------------
+// | Licensed ( http://www.apache.org/licenses/LICENSE-2.0 )
+// +----------------------------------------------------------------------
+// | fastadmin: https://www.fastadmin.net/
+// +----------------------------------------------------------------------
+
+// +----------------------------------------------------------------------
+// | 菜单主程序
+// +----------------------------------------------------------------------
+
+namespace app\admin\command;
+
+use app\admin\model\AuthRule;
+use ReflectionClass;
+use ReflectionMethod;
+use think\console\Command;
+use think\console\Input;
+use think\console\input\Option;
+use think\console\Output;
+use think\Exception;
+use think\facade\Cache;
+use think\facade\Config;
+use think\Loader;
+
+class Menu extends Command
+{
+    protected $model = null;
+
+    protected function configure()
+    {
+        $this
+            ->setName('menu')
+            ->addOption('controller', 'c', Option::VALUE_REQUIRED | Option::VALUE_IS_ARRAY, 'controller name,use \'all-controller\' when build all menu', null)
+            ->addOption('delete', 'd', Option::VALUE_OPTIONAL, 'delete the specified menu', '')
+            ->addOption('force', 'f', Option::VALUE_OPTIONAL, 'force delete menu,without tips', null)
+            ->addOption('equal', 'e', Option::VALUE_OPTIONAL, 'the controller must be equal', null)
+            ->setDescription('Build auth menu from controller');
+        //要执行的controller必须一样，不适用模糊查询
+    }
+
+    protected function execute(Input $input, Output $output)
+    {
+        $this->model = new AuthRule();
+        $adminPath   = dirname(__DIR__) . DS;
+        //控制器名
+        $controller = $input->getOption('controller') ?: '';
+        if (!$controller) {
+            throw new Exception("please input controller name");
+        }
+        $force = $input->getOption('force');
+        //是否为删除模式
+        $delete = $input->getOption('delete');
+        //是否控制器完全匹配
+        $equal = $input->getOption('equal');
+
+        if ($delete) {
+            $ids  = [];
+            $list = $this->model->where(function ($query) use ($controller, $equal) {
+                foreach ($controller as $index => $item) {
+                    if (stripos($item, '_') !== false) {
+                        $item = Loader::parseName($item, 1);
+                    }
+                    if (stripos($item, '/') !== false) {
+                        $controllerArr = explode('/', $item);
+                        end($controllerArr);
+                        $key                 = key($controllerArr);
+                        $controllerArr[$key] = Loader::parseName($controllerArr[$key]);
+                    } else {
+                        $controllerArr = [Loader::parseName($item)];
+                    }
+                    $item = str_replace('_', '\_', implode('/', $controllerArr));
+                    if ($equal) {
+                        $query->whereOr('name', 'eq', $item);
+                    } else {
+                        $query->whereOr('name', 'like', strtolower($item) . "%");
+                    }
+                }
+            })->select();
+            foreach ($list as $k => $v) {
+                $output->warning($v->name);
+                $ids[] = $v->id;
+            }
+            if (!$ids) {
+                throw new Exception("There is no menu to delete");
+            }
+            if (!$force) {
+                $question = $output->confirm($input, "Are you sure you want to delete all those menu?  Type 'yes' to continue: ", false);
+                if (!$question) {
+                    throw new Exception("Operation is aborted!");
+                }
+            }
+            AuthRule::destroy($ids);
+
+            Cache::rm("__menu__");
+            $output->info("Delete Successed");
+            return;
+        }
+
+        foreach ($controller as $index => $item) {
+            if (stripos($item, '_') !== false) {
+                $item = Loader::parseName($item, 1);
+            }
+            if (stripos($item, '/') !== false) {
+                $controllerArr = explode('/', $item);
+                end($controllerArr);
+                $key                 = key($controllerArr);
+                $controllerArr[$key] = ucfirst($controllerArr[$key]);
+            } else {
+                $controllerArr = [ucfirst($item)];
+            }
+            $adminPath = dirname(__DIR__) . DS . 'controller' . DS . implode(DS, $controllerArr) . '.php';
+            if (!is_file($adminPath)) {
+                $output->error("controller not found");
+                return;
+            }
+            $this->importRule($item);
+        }
+
+        Cache::rm("__menu__");
+        $output->info("Build Successed!");
+    }
+
+    protected function importRule($controller)
+    {
+        $controller = str_replace('\\', '/', $controller);
+        if (stripos($controller, '/') !== false) {
+            $controllerArr = explode('/', $controller);
+            end($controllerArr);
+            $key                 = key($controllerArr);
+            $controllerArr[$key] = ucfirst($controllerArr[$key]);
+        } else {
+            $key           = 0;
+            $controllerArr = [ucfirst($controller)];
+        }
+        $classSuffix = Config::get('controller_suffix') ? ucfirst(Config::get('url_controller_layer')) : '';
+        $className   = "\\app\\admin\\controller\\" . implode("\\", $controllerArr) . $classSuffix;
+
+        $pathArr = $controllerArr;
+        array_unshift($pathArr, '', 'application', 'admin', 'controller');
+        $classFile    = ROOT_PATH . implode(DS, $pathArr) . $classSuffix . ".php";
+        $classContent = file_get_contents($classFile);
+        $uniqueName   = uniqid("YznCMS") . $classSuffix;
+        $classContent = str_replace("class " . $controllerArr[$key] . $classSuffix . " ", 'class ' . $uniqueName . ' ', $classContent);
+        $classContent = preg_replace("/namespace\s(.*);/", 'namespace ' . __NAMESPACE__ . ";", $classContent);
+
+        //临时的类文件
+        $tempClassFile = __DIR__ . DS . $uniqueName . ".php";
+        file_put_contents($tempClassFile, $classContent);
+
+        $className = "\\app\\admin\\command\\" . $uniqueName;
+
+        //删除临时文件
+        register_shutdown_function(function () use ($tempClassFile) {
+            if ($tempClassFile) {
+                //删除临时文件
+                @unlink($tempClassFile);
+            }
+        });
+
+        //反射机制调用类的注释和方法名
+        $reflector = new ReflectionClass($className);
+
+        //只匹配公共的方法
+        $methods = $reflector->getMethods(ReflectionMethod::IS_PUBLIC);
+
+        $classComment = $reflector->getDocComment();
+        //判断是否有启用软删除
+        $softDeleteMethods = ['destroy', 'restore', 'recyclebin'];
+        $withSofeDelete    = false;
+        $modelRegexArr     = ["/\\\$this\->model\s*=\s*model\(['|\"](\w+)['|\"]\);/", "/\\\$this\->model\s*=\s*new\s+([a-zA-Z\\\]+);/"];
+        $modelRegex        = preg_match($modelRegexArr[0], $classContent) ? $modelRegexArr[0] : $modelRegexArr[1];
+
+        preg_match_all($modelRegex, $classContent, $matches);
+        if (isset($matches[1]) && isset($matches[1][0]) && $matches[1][0]) {
+            \think\facade\Request::instance()->module('admin');
+            $model = model($matches[1][0]);
+            if (in_array('trashed', get_class_methods($model))) {
+                $withSofeDelete = true;
+            }
+        }
+        //忽略的类
+        if (stripos($classComment, "@internal") !== false) {
+            return;
+        }
+        preg_match_all('#(@.*?)\n#s', $classComment, $annotations);
+        $controllerIcon   = 'iconfont icon-other';
+        $controllerRemark = '';
+        //判断注释中是否设置了icon值
+        if (isset($annotations[1])) {
+            foreach ($annotations[1] as $tag) {
+                if (stripos($tag, '@icon') !== false) {
+                    $controllerIcon = substr($tag, stripos($tag, ' ') + 1);
+                }
+                if (stripos($tag, '@remark') !== false) {
+                    $controllerRemark = substr($tag, stripos($tag, ' ') + 1);
+                }
+            }
+        }
+        //过滤掉其它字符
+        $controllerTitle = trim(preg_replace(['/^\/\*\*(.*)[\n\r\t]/u', '/[\s]+\*\//u', '/\*\s@(.*)/u', '/[\s|\*]+/u'], '', $classComment));
+
+        //先导入菜单的数据
+        $pid = 0;
+        foreach ($controllerArr as $k => $v) {
+            $key = $k + 1;
+            //驼峰转下划线
+            $controllerNameArr = array_slice($controllerArr, 0, $key);
+            foreach ($controllerNameArr as &$val) {
+                $val = strtolower(trim(preg_replace("/[A-Z]/", "_\\0", $val), "_"));
+            }
+            unset($val);
+            $name      = implode('.', $controllerNameArr);
+            $title     = (!isset($controllerArr[$key]) ? $controllerTitle : '');
+            $icon      = (!isset($controllerArr[$key]) ? $controllerIcon : 'iconfont icon-other');
+            $remark    = (!isset($controllerArr[$key]) ? $controllerRemark : '');
+            $title     = $title ? $title : $v;
+            $rulemodel = $this->model->get(['name' => $name]);
+            if (!$rulemodel) {
+                $this->model
+                    ->data(['parentid' => $pid, 'name' => $name, 'title' => $title, 'icon' => $icon, 'remark' => $remark, 'ismenu' => 1, 'status' => 1])
+                    ->isUpdate(false)
+                    ->save();
+                $pid = $this->model->id;
+            } else {
+                $pid = $rulemodel->id;
+            }
+        }
+        $ruleArr = [];
+        foreach ($methods as $m => $n) {
+            //过滤特殊的类
+            if (in_array($n->name, ['initialize', '_empty', 'registerMiddleware']) || substr($n->name, 0, 2) == '__') {
+                continue;
+            }
+            //未启用软删除时过滤相关方法
+            if (!$withSofeDelete && in_array($n->name, $softDeleteMethods)) {
+                continue;
+            }
+            //只匹配符合的方法
+            if (!preg_match('/^(\w+)' . Config::get('action_suffix') . '/', $n->name, $matchtwo)) {
+                unset($methods[$m]);
+                continue;
+            }
+            $comment = $reflector->getMethod($n->name)->getDocComment();
+            //忽略的方法
+            if (stripos($comment, "@internal") !== false) {
+                continue;
+            }
+            //过滤掉其它字符
+            $comment = preg_replace(['/^\/\*\*(.*)[\n\r\t]/u', '/[\s]+\*\//u', '/\*\s@(.*)/u', '/[\s|\*]+/u'], '', $comment);
+
+            $title = $comment ? $comment : ucfirst($n->name);
+
+            //获取主键，作为AuthRule更新依据
+            $id = $this->getAuthRulePK($name . "/" . strtolower($n->name));
+
+            $ruleArr[] = ['id' => $id, 'parentid' => $pid, 'name' => $name . "/" . strtolower($n->name), 'icon' => 'iconfont icon-circle-line', 'title' => $title, 'ismenu' => 0, 'status' => 1];
+        }
+        $this->model->isUpdate(false)->saveAll($ruleArr);
+    }
+
+    //获取主键
+    protected function getAuthRulePK($name)
+    {
+        if (!empty($name)) {
+            $id = $this->model
+                ->where('name', $name)
+                ->value('id');
+            return $id ? $id : null;
+        }
+    }
+}

application/admin/common.php

@@ -0,0 +1,14 @@
+<?php
+// +----------------------------------------------------------------------
+// | Yzncms [ 御宅男工作室 ]
+// +----------------------------------------------------------------------
+// | Copyright (c) 2018 http://yzncms.com All rights reserved.
+// +----------------------------------------------------------------------
+// | Licensed ( http://www.apache.org/licenses/LICENSE-2.0 )
+// +----------------------------------------------------------------------
+// | Author: 御宅男 <530765310@qq.com>
+// +----------------------------------------------------------------------
+
+// +----------------------------------------------------------------------
+// | 后台函数文件
+// +----------------------------------------------------------------------

application/admin/controller/Addons.php

@@ -0,0 +1,398 @@
+<?php
+// +----------------------------------------------------------------------
+// | Yzncms [ 御宅男工作室 ]
+// +----------------------------------------------------------------------
+// | Copyright (c) 2018 http://yzncms.com All rights reserved.
+// +----------------------------------------------------------------------
+// | Licensed ( http://www.apache.org/licenses/LICENSE-2.0 )
+// +----------------------------------------------------------------------
+// | Author: 御宅男 <530765310@qq.com>
+// +----------------------------------------------------------------------
+
+// +----------------------------------------------------------------------
+// | 插件管理
+// +----------------------------------------------------------------------
+namespace app\admin\controller;
+
+use app\admin\model\Adminlog;
+use app\common\controller\Adminbase;
+use think\addons\AddonException;
+use think\addons\Service;
+use think\Db;
+use think\Exception;
+use think\facade\Config;
+
+class Addons extends Adminbase
+{
+    //初始化
+    protected function initialize()
+    {
+        parent::initialize();
+        if (!$this->auth->isAdministrator() && in_array($this->request->action(), ['install', 'uninstall', 'local'])) {
+            $this->error('非超级管理员禁止操作！');
+        }
+    }
+
+    //显示插件列表
+    public function index()
+    {
+        $type   = $this->request->param("type", 'online');
+        $limit  = $this->request->param("limit/d");
+        $page   = $this->request->param("page/d", 1);
+        $search = $this->request->param("search", '', 'strip_tags,htmlspecialchars');
+
+        if ($this->request->isAjax()) {
+            if ($type == 'local') {
+                $addons = get_addon_list();
+                if ($search) {
+                    $addons = array_filter($addons, function ($v) use ($search) {
+                        return stripos($v['name'], $search) !== false ||
+                        stripos($v['title'], $search) !== false ||
+                        stripos($v['description'], $search) !== false;
+                    });
+                }
+                $list = [];
+                foreach ($addons as $k => $v) {
+                    $config              = get_addon_config($v['name']);
+                    $v['config']         = $config ? 1 : 0;
+                    $addons[$k]['addon'] = $v;
+                }
+                $count = count($addons);
+                if ($limit) {
+                    $addons = array_slice($addons, ($page - 1) * $limit, $limit);
+                }
+                $result = ["code" => 0, "data" => $addons, 'count' => $count];
+            } else {
+                //在线插件
+                $list         = $this->getAddonList($search, $page, $limit);
+                $onlineaddons = $list['list'] ?? [];
+                $category     = $list['category'] ?? [];
+                $count        = $list['count'] ?? -1;
+                //本地插件
+                $addons = get_addon_list();
+                foreach ($addons as &$v) {
+                    $config      = get_addon_config($v['name']);
+                    $v['config'] = $config ? 1 : 0;
+                }
+                foreach ($onlineaddons as &$item) {
+                    $item['addon'] = $addons[$item['name']] ?? '';
+                }
+                $result = ["code" => 0, "data" => $onlineaddons, "category" => $category, 'count' => $count];
+            }
+
+            return json($result);
+        }
+        $this->assign([
+            'api_url' => config('api_url'),
+            'type'    => $type,
+        ]);
+        return $this->fetch();
+    }
+
+    /**
+     * 设置插件页面
+     */
+    public function config($name = null)
+    {
+        $name = $name ?: $this->request->get("name");
+        if (!$name) {
+            $this->error('参数不得为空！');
+        }
+        if (!preg_match('/^[a-zA-Z0-9]+$/', $name)) {
+            $this->error('插件名称不正确！');
+        }
+        if (!is_dir(ADDON_PATH . $name)) {
+            $this->error('目录不存在！');
+        }
+        $info   = get_addon_info($name);
+        $config = get_addon_fullconfig($name);
+        if (!$info) {
+            $this->error('配置不存在！');
+        }
+        if ($this->request->isPost()) {
+            $params = $this->request->post("config/a", [], 'trim');
+            if ($params) {
+                foreach ($config as $k => &$v) {
+                    if (isset($params[$v['name']])) {
+                        if ($v['type'] == 'array') {
+                            $params[$v['name']] = is_array($params[$v['name']]) ? $params[$v['name']] : (array) json_decode($params[$v['name']],
+                                true);
+                            $value = $params[$v['name']];
+                        } else {
+                            $value = is_array($params[$v['name']]) ? implode(',',
+                                $params[$v['name']]) : $params[$v['name']];
+                        }
+                        $v['value'] = $value;
+                    } elseif ($v['type'] == 'checkbox' && !isset($params[$v['name']])) {
+                        //单独处理多选框为空不传参
+                        $v['value'] = '';
+                    }
+                }
+                try {
+                    $addon = get_addon_instance($name);
+                    //插件自定义配置实现逻辑
+                    if (method_exists($addon, 'config')) {
+                        $addon->config($name, $config);
+                    } else {
+                        //更新配置文件
+                        set_addon_fullconfig($name, $config);
+                        Service::refresh();
+                    }
+                } catch (\Exception $e) {
+                    $this->error($e->getMessage());
+                }
+            }
+            $this->success('插件配置成功！');
+        }
+        $tips = [];
+        foreach ($config as $index => &$item) {
+            $item['extend'] = $item['extend'] ?? '';
+            if ($item['name'] == '__tips__') {
+                $tips = $item;
+                unset($config[$index]);
+            }
+        }
+        $this->assign('data', ['info' => $info, 'config' => $config, 'tips' => $tips]);
+        $configFile = ADDON_PATH . $name . DS . 'config.html';
+        $viewFile   = is_file($configFile) ? $configFile : '';
+        return $this->fetch($viewFile);
+    }
+
+    /**
+     * 禁用启用.
+     */
+    public function state()
+    {
+        $name   = $this->request->param('name');
+        $action = $this->request->param('action');
+        $force  = $this->request->post("force/d");
+        if (!$name) {
+            $this->error('参数不得为空！');
+        }
+        if (!preg_match('/^[a-zA-Z0-9]+$/', $name)) {
+            $this->error('插件名称不正确');
+        }
+        try {
+            $action = $action == 'enable' ? $action : 'disable';
+            //调用启用、禁用的方法
+            Service::$action($name, $force);
+        } catch (AddonException $e) {
+            $this->result($e->getData(), $e->getCode(), $e->getMessage());
+        } catch (\Exception $e) {
+            $this->error($e->getMessage());
+        }
+        $this->success('操作成功');
+    }
+
+    /**
+     * 安装插件
+     */
+    public function install()
+    {
+        Adminlog::setTitle('插件安装');
+        $name  = $this->request->param('name');
+        $force = $this->request->param("force/d");
+        if (empty($name)) {
+            $this->error('请选择需要安装的插件！');
+        }
+        if (!preg_match('/^[a-zA-Z0-9]+$/', $name)) {
+            $this->error('插件标识错误！');
+        }
+        $info = [];
+        try {
+            $uid     = $this->request->post("uid");
+            $token   = $this->request->post("token");
+            $version = $this->request->post("version");
+            $extend  = [
+                'uid'            => $uid,
+                'token'          => $token,
+                'version'        => $version,
+                'yzncms_version' => Config::get('version.yzncms_version'),
+            ];
+            $info = Service::install($name, $force, $extend);
+        } catch (AddonException $e) {
+            $this->result($e->getData(), $e->getCode(), $e->getMessage());
+        } catch (\Exception $e) {
+            $this->error($e->getMessage());
+        }
+        $this->success('插件安装成功！清除浏览器缓存和框架缓存后生效！', '', ['addon' => $info]);
+    }
+
+    /**
+     * 卸载插件
+     */
+    public function uninstall()
+    {
+        Adminlog::setTitle('插件卸载');
+        $name       = $this->request->param('name');
+        $force      = $this->request->param("force/d");
+        $droptables = $this->request->param("droptables/d");
+        if (empty($name)) {
+            $this->error('请选择需要安装的插件！');
+        }
+        if (!preg_match('/^[a-zA-Z0-9]+$/', $name)) {
+            $this->error('插件标识错误！');
+        }
+        //只有开启调试且为超级管理员才允许删除相关数据库
+        $tables = [];
+        if ($droptables && Config::get("app_debug") && $this->auth->isAdministrator()) {
+            $tables = get_addon_tables($name);
+        }
+        try {
+            Service::uninstall($name, $force);
+            if ($tables) {
+                //$prefix = Config::get('database.prefix');
+                //删除插件关联表
+                foreach ($tables as $table) {
+                    Db::execute("DROP TABLE IF EXISTS `{$table}`");
+                }
+            }
+        } catch (AddonException $e) {
+            $this->result($e->getData(), $e->getCode(), $e->getMessage());
+        } catch (\Exception $e) {
+            $this->error($e->getMessage());
+        }
+        $this->success('插件卸载成功！清除浏览器缓存和框架缓存后生效！');
+    }
+
+    /**
+     * 本地上传
+     */
+    public function local()
+    {
+        Adminlog::setTitle('插件上传安装');
+        if (!Config::get("app_debug")) {
+            $this->error('本地上传安装需要开启调试模式！');
+        }
+        $file = $this->request->file('file');
+        try {
+            $info = Service::local($file);
+        } catch (AddonException $e) {
+            $this->result($e->getData(), $e->getCode(), $e->getMessage());
+        } catch (\Exception $e) {
+            $this->error($e->getMessage());
+        }
+        $this->success('插件安装成功！清除浏览器缓存和框架缓存后生效！', '', ['addon' => $info]);
+    }
+
+    /**
+     * 更新插件
+     */
+    public function upgrade()
+    {
+        $name        = $this->request->param('name');
+        $addonTmpDir = ROOT_PATH . 'runtime' . DS . 'addons' . DS;
+        if (empty($name)) {
+            $this->error('请选择需要安装的插件！');
+        }
+        if (!preg_match('/^[a-zA-Z0-9]+$/', $name)) {
+            $this->error('插件标识错误！');
+        }
+        if (!is_dir($addonTmpDir)) {
+            @mkdir($addonTmpDir, 0755, true);
+        }
+        $info = [];
+        try {
+            $info    = get_addon_info($name);
+            $uid     = $this->request->post("uid");
+            $token   = $this->request->post("token");
+            $version = $this->request->post("version");
+            $extend  = [
+                'uid'            => $uid,
+                'token'          => $token,
+                'version'        => $version,
+                'oldversion'     => $info['version'] ?? '',
+                'yzncms_version' => Config::get('version.yzncms_version'),
+            ];
+            //调用更新的方法
+            $info = Service::upgrade($name, $extend);
+        } catch (AddonException $e) {
+            $this->result($e->getData(), $e->getCode(), $e->getMessage());
+        } catch (Exception $e) {
+            $this->error($e->getMessage());
+        }
+        $this->success('升级成功', '', ['addon' => $info]);
+    }
+
+    /**
+     * 测试数据
+     */
+    public function testdata()
+    {
+        Adminlog::setTitle('插件导入测试数据');
+        $name = $this->request->post("name");
+        if (empty($name)) {
+            $this->error('请选择需要安装的插件！');
+        }
+        if (!preg_match("/^[a-zA-Z0-9]+$/", $name)) {
+            $this->error('插件标识错误！');
+        }
+
+        try {
+            Service::runSQL($name, 'testdata');
+        } catch (AddonException $e) {
+            $this->result($e->getData(), $e->getCode(), $e->getMessage());
+        } catch (Exception $e) {
+            $this->error($e->getMessage(), $e->getCode());
+        }
+        $this->success('导入成功');
+    }
+
+    /**
+     * 检测
+     */
+    public function isbuy()
+    {
+        $name    = $this->request->post("name");
+        $uid     = $this->request->post("uid");
+        $token   = $this->request->post("token");
+        $version = $this->request->post("version");
+        $extend  = [
+            'uid'            => $uid,
+            'token'          => $token,
+            'version'        => $version,
+            'yzncms_version' => Config::get('version.yzncms_version'),
+        ];
+        try {
+            $result = Service::isBuy($name, $extend);
+        } catch (Exception $e) {
+            $this->error($e->getMessage());
+        }
+        return json($result);
+    }
+
+    /**
+     * 获取插件相关表
+     */
+    public function get_table_list()
+    {
+        $name = $this->request->post("name");
+        if (!preg_match("/^[a-zA-Z0-9]+$/", $name)) {
+            $this->error('插件标识错误！');
+        }
+        $tables = get_addon_tables($name);
+        //$prefix = Config::get('database.prefix');
+        $tables = array_values($tables);
+        $this->success('', null, ['tables' => $tables]);
+    }
+
+    protected function getAddonList($search, $page, $limit)
+    {
+        $params = [
+            'uid'         => $this->request->param('uid/d'),
+            'token'       => $this->request->param('token'),
+            'category_id' => $this->request->param('category_id/d'),
+            'version'     => Config::get('version.yzncms_version'),
+            'page'        => $page,
+            'limit'       => $limit,
+            'search'      => $search,
+        ];
+        $json = [];
+        try {
+            $json = Service::addons($params);
+        } catch (\Exception $e) {
+
+        }
+        return $json;
+    }
+}

application/admin/controller/Ajax.php

@@ -0,0 +1,328 @@
+<?php
+// +----------------------------------------------------------------------
+// | Yzncms [ 御宅男工作室 ]
+// +----------------------------------------------------------------------
+// | Copyright (c) 2018 http://yzncms.com All rights reserved.
+// +----------------------------------------------------------------------
+// | Licensed ( http://www.apache.org/licenses/LICENSE-2.0 )
+// +----------------------------------------------------------------------
+// | Author: 御宅男 <530765310@qq.com>
+// +----------------------------------------------------------------------
+
+// +----------------------------------------------------------------------
+// | 后台常用ajax
+// +----------------------------------------------------------------------
+namespace app\admin\controller;
+
+use app\admin\model\Adminlog;
+use app\common\controller\Adminbase;
+use app\common\exception\UploadException;
+use app\common\library\Upload as UploadLib;
+use Exception;
+use think\Db;
+use think\Response;
+
+class Ajax extends Adminbase
+{
+    protected $noNeedRight = ['*'];
+
+    //编辑器初始配置
+    private $editorConfig = [
+        /* 上传图片配置项 */
+        "imageActionName"         => "uploadimage", /* 执行上传图片的action名称 */
+        "imageFieldName"       => "upfile", /* 提交的图片表单名称 */
+        "imageMaxSize"     => 2048000, /* 上传大小限制，单位B */
+        "imageAllowFiles" => [".png", ".jpg", ".jpeg", ".gif", ".bmp"], /* 上传图片格式显示 */
+        "imageCompressEnable" => true, /* 是否压缩图片,默认是true */
+        "imageCompressBorder" => 1600, /* 图片压缩最长边限制 */
+        "imageInsertAlign" => "none", /* 插入的图片浮动方式 */
+        "imageUrlPrefix" => "", /* 图片访问路径前缀 */
+        'imagePathFormat' => '',
+        /* 涂鸦图片上传配置项 */
+        "scrawlActionName"        => "uploadscrawl", /* 执行上传涂鸦的action名称 */
+        "scrawlFieldName"      => "upfile", /* 提交的图片表单名称 */
+        'scrawlPathFormat' => '',
+        "scrawlMaxSize"           => 2048000, /* 上传大小限制，单位B */
+        'scrawlUrlPrefix'      => '',
+        'scrawlInsertAlign'       => 'none',
+        /* 截图工具上传 */
+        "snapscreenActionName"    => "uploadimage", /* 执行上传截图的action名称 */
+        'snapscreenPathFormat' => '',
+        'snapscreenUrlPrefix'     => '',
+        'snapscreenInsertAlign'   => 'none',
+        /* 抓取远程图片配置 */
+        'catcherLocalDomain'      => ['127.0.0.1', 'localhost', 'img.baidu.com'],
+        "catcherActionName"       => "catchimage", /* 执行抓取远程图片的action名称 */
+        'catcherFieldName'     => 'source',
+        'catcherPathFormat'       => '',
+        'catcherUrlPrefix'        => '',
+        'catcherMaxSize'          => 0,
+        'catcherAllowFiles'       => ['.png', '.jpg', '.jpeg', '.gif', '.bmp'],
+        /* 上传视频配置 */
+        "videoActionName"         => "uploadvideo", /* 执行上传视频的action名称 */
+        "videoFieldName"       => "upfile", /* 提交的视频表单名称 */
+        'videoPathFormat'  => '',
+        'videoUrlPrefix'          => '',
+        'videoMaxSize'            => 0,
+        'videoAllowFiles'         => [".flv", ".swf", ".mkv", ".avi", ".rm", ".rmvb", ".mpeg", ".mpg", ".ogg", ".ogv", ".mov", ".wmv", ".mp4", ".webm", ".mp3", ".wav", ".mid"],
+        /* 上传文件配置 */
+        "fileActionName"          => "uploadfile", /* controller里,执行上传视频的action名称 */
+        'fileFieldName'        => 'upfile',
+        'filePathFormat'          => '',
+        'fileUrlPrefix'           => '',
+        'fileMaxSize'             => 0,
+        'fileAllowFiles'          => [".flv", ".swf"],
+        /* 列出指定目录下的图片 */
+        "imageManagerActionName"  => "listimage", /* 执行图片管理的action名称 */
+        'imageManagerListPath' => '',
+        'imageManagerListSize'    => 20,
+        'imageManagerUrlPrefix'   => '',
+        'imageManagerInsertAlign' => 'none',
+        'imageManagerAllowFiles'  => ['.png', '.jpg', '.jpeg', '.gif', '.bmp'],
+        /* 列出指定目录下的文件 */
+        "fileManagerActionName"   => "listfile", /* 执行文件管理的action名称 */
+        'fileManagerListPath'  => '',
+        'fileManagerUrlPrefix'    => '',
+        'fileManagerListSize'     => '',
+        'fileManagerAllowFiles'   => [".flv", ".swf"],
+    ];
+
+    protected function initialize()
+    {
+        parent::initialize();
+        //图片上传大小和类型
+        $this->editorConfig['imageMaxSize'] = $this->editorConfig['catcherMaxSize'] = 0 == config('site.upload_image_size') ? 1024 * 1024 * 1024 : config('site.upload_image_size') * 1024;
+        if (!empty(config('site.upload_image_ext'))) {
+            $imageallowext = parse_attr(config('site.upload_image_ext'));
+            foreach ($imageallowext as $k => $rs) {
+                $imageallowext[$k] = ".{$rs}";
+            }
+            $this->editorConfig['imageAllowFiles'] = $imageallowext;
+        }
+
+        //附件上传大小和类型
+        $this->editorConfig['fileMaxSize'] = $this->editorConfig['videoMaxSize'] = 0 == config('site.upload_file_size') ? 1024 * 1024 * 1024 : config('site.upload_file_size') * 1024;
+        if (!empty(config('site.upload_file_ext'))) {
+            $fileallowext = parse_attr(config('site.upload_file_ext'));
+            foreach ($fileallowext as $k => $rs) {
+                $fileallowext[$k] = ".{$rs}";
+            }
+            $this->editorConfig['fileAllowFiles'] = $fileallowext;
+        }
+    }
+
+    //过滤内容的敏感词
+    public function filterWord($content)
+    {
+        $content = $this->request->post('content');
+        // 获取感词库文件路径
+        $wordFilePath = ROOT_PATH . 'data/words.txt';
+        $handle       = \util\SensitiveHelper::init()->setTreeByFile($wordFilePath);
+        $word         = $handle->getBadWord($content);
+        if ($word) {
+            $this->error('内容包含违禁词！', null, $word);
+        } else {
+            $this->success('内容没有违禁词！');
+        }
+    }
+
+    /**
+     * 生成后缀图标
+     */
+    public function icon()
+    {
+        $suffix                  = $this->request->request("suffix", 'file');
+        $data                    = build_suffix_image($suffix);
+        $header                  = ['Content-Type' => 'image/svg+xml'];
+        $offset                  = 30 * 60 * 60 * 24; // 缓存一个月
+        $header['Cache-Control'] = 'public';
+        $header['Pragma']        = 'cache';
+        $header['Expires']       = gmdate("D, d M Y H:i:s", time() + $offset) . " GMT";
+        $response                = Response::create($data, '', 200, $header);
+        return $response;
+    }
+
+    /**
+     * 读取省市区数据,联动列表
+     */
+    public function area()
+    {
+        $params = $this->request->get("row/a");
+        if (!empty($params)) {
+            $province = $params['province'] ?? null;
+            $city     = $params['city'] ?? null;
+        } else {
+            $province = $this->request->get('province');
+            $city     = $this->request->get('city');
+        }
+        $where        = ['pid' => 0, 'level' => 1];
+        $provincelist = null;
+        if ($province !== null) {
+            $where['pid']   = $province;
+            $where['level'] = 2;
+            if ($city !== null) {
+                $where['pid']   = $city;
+                $where['level'] = 3;
+            }
+        }
+        $provincelist = Db::name('area')->where($where)->field('id as value,name')->select();
+        $this->success('', '', $provincelist);
+    }
+
+    public function upload($dir = '', $from = '')
+    {
+        Adminlog::setTitle('附件上传');
+        if ($dir == '') {
+            return json([
+                'code'    => 0,
+                'msg'     => '没有指定上传目录',
+                'state'   => '没有指定上传目录', //兼容百度
+                'message' => '没有指定上传目录', //兼容editormd
+            ]);
+        }
+        $chunkid = $this->request->post("chunkid");
+        if ($chunkid) {
+            if (!config('chunking')) {
+                return json([
+                    'code' => 0,
+                    'msg'  => '未开启分片上传功能',
+                ]);
+            }
+            //分片
+            $action     = $this->request->post("action");
+            $chunkindex = $this->request->post("chunkindex/d", 0);
+            $chunkcount = $this->request->post("chunkcount/d", 1);
+            $filename   = $this->request->post("filename");
+            $method     = $this->request->method(true);
+            if ($action == 'merge') {
+                $attachment = null;
+                //合并分片文件
+                try {
+                    $upload     = new UploadLib();
+                    $attachment = $upload->merge($chunkid, $chunkcount, $filename, $dir, $from);
+                } catch (UploadException $e) {
+                    return json([
+                        'code'    => 0,
+                        'msg'     => $e->getMessage(),
+                        'state'   => $e->getMessage(), //兼容百度
+                        'message' => $e->getMessage(), //兼容editormd
+                    ]);
+                }
+                return $attachment;
+            } elseif ($method == 'clean') {
+                //删除冗余的分片文件
+                try {
+                    $upload = new UploadLib();
+                    $upload->clean($chunkid);
+                } catch (UploadException $e) {
+                    return json([
+                        'code'    => 0,
+                        'msg'     => $e->getMessage(),
+                        'state'   => $e->getMessage(), //兼容百度
+                        'message' => $e->getMessage(), //兼容editormd
+                    ]);
+                }
+                return json(['code' => 1]);
+            } else {
+                //上传分片文件
+                $file = $this->request->file('file');
+                try {
+                    $upload = new UploadLib($file);
+                    $upload->chunk($chunkid, $chunkindex, $chunkcount);
+                } catch (UploadException $e) {
+                    return json([
+                        'code'    => 0,
+                        'msg'     => $e->getMessage(),
+                        'state'   => $e->getMessage(), //兼容百度
+                        'message' => $e->getMessage(), //兼容editormd
+                    ]);
+                }
+                return json(['code' => 1]);
+            }
+        }
+        // 获取附件数据
+        switch ($from) {
+            case 'editormd':
+                $file_input_name = 'editormd-image-file';
+                break;
+            case 'ueditor':
+                $file_input_name = 'upfile';
+                break;
+            default:
+                $file_input_name = 'file';
+        }
+        $attachment = null;
+
+        try {
+            //默认普通上传文件
+            $file = $this->request->file($file_input_name);
+            if ($from == 'ueditor') {
+                return $this->ueditor($file);
+            }
+            $upload     = new UploadLib($file);
+            $attachment = $upload->upload($dir);
+        } catch (UploadException | Exception $e) {
+            return json([
+                'code'    => 0,
+                'msg'     => $e->getMessage(),
+                'state'   => $e->getMessage(), //兼容百度
+                'message' => $e->getMessage(), //兼容editormd
+            ]);
+        }
+        return $attachment;
+    }
+
+    private function ueditor($file)
+    {
+        $action = $this->request->get('action');
+        switch ($action) {
+            /* 获取配置信息 */
+            case 'config':
+                $result = $this->editorConfig;
+                break;
+            /* 上传图片 */
+            case 'uploadimage':
+                $upload = new UploadLib($file);
+                return $upload->upload('images', 'ueditor');
+                break;
+            /* 上传涂鸦 */
+            case 'uploadscrawl':
+                $upload = new UploadLib($file);
+                return $upload->upload('images', 'ueditor_scrawl');
+                break;
+            /* 上传视频 */
+            case 'uploadvideo':
+                $upload = new UploadLib($file);
+                return $upload->upload('videos', 'ueditor');
+                break;
+            /* 上传附件 */
+            case 'uploadfile':
+                $upload = new UploadLib($file);
+                return $upload->upload('files', 'ueditor');
+                break;
+            /* 列出图片
+            /*case 'listimage':
+            return $this->showFileList('listimage');
+            break;
+            列出附件
+            case 'listfile':
+            return $this->showFileList('listfile');
+            break;*/
+            default:
+                $result = [
+                    'state' => '请求地址出错',
+                ];
+                break;
+        }
+        /* 输出结果 */
+        if (isset($_GET["callback"])) {
+            if (preg_match("/^[\w_]+$/", $_GET["callback"])) {
+                return htmlspecialchars($_GET["callback"]) . '(' . $result . ')';
+            } else {
+                return json(['state' => 'callback参数不合法']);
+            }
+        } else {
+            return json($result);
+        }
+    }
+}

application/admin/controller/Index.php

@@ -0,0 +1,127 @@
+<?php
+// +----------------------------------------------------------------------
+// | Yzncms [ 御宅男工作室 ]
+// +----------------------------------------------------------------------
+// | Copyright (c) 2018 http://yzncms.com All rights reserved.
+// +----------------------------------------------------------------------
+// | Licensed ( http://www.apache.org/licenses/LICENSE-2.0 )
+// +----------------------------------------------------------------------
+// | Author: 御宅男 <530765310@qq.com>
+// +----------------------------------------------------------------------
+
+// +----------------------------------------------------------------------
+// | 后台首页
+// +----------------------------------------------------------------------
+namespace app\admin\controller;
+
+use app\admin\model\Adminlog;
+use app\common\controller\Adminbase;
+use think\addons\Service;
+use think\facade\Cache;
+use think\facade\Hook;
+use util\File;
+
+class Index extends Adminbase
+{
+    protected $noNeedLogin = ['login'];
+    protected $noNeedRight = ['index', 'cache', 'logout'];
+
+    //初始化
+    protected function initialize()
+    {
+        parent::initialize();
+        //移除HTML标签
+        $this->request->filter('trim,strip_tags,htmlspecialchars');
+    }
+
+    //后台首页
+    public function index()
+    {
+        if ($this->request->isPost()) {
+            return json($this->auth->getSidebar());
+        }
+        return $this->fetch();
+    }
+
+    //登录判断
+    public function login()
+    {
+        $url = $this->request->get('url', 'admin/index/index', 'url_clean');
+        if ($this->auth->isLogin()) {
+            $this->success("你已经登录，无需重复登录", $url);
+        }
+        //保持会话有效时长，单位:小时
+        $keeyloginhours = 24;
+        if ($this->request->isPost()) {
+            $data      = $this->request->post();
+            $keeplogin = $this->request->post('keeplogin');
+            $rule      = [
+                'verify|验证码'   => 'require|captcha',
+                'username|用户名' => 'require|alphaDash|length:3,20',
+                'password|密码'  => 'require|length:3,20',
+                '__token__'    => 'require|token',
+            ];
+            $result = $this->validate($data, $rule);
+            Adminlog::setTitle('登录');
+            if (true !== $result) {
+                $this->error($result, $url, ['token' => $this->request->token()]);
+            }
+            if ($this->auth->login($data['username'], $data['password'], $keeplogin ? $keeyloginhours * 3600 : 0)) {
+                Hook::listen("admin_login_after", $this->request);
+                $this->success('恭喜您，登陆成功', $url);
+            } else {
+                $msg = $this->auth->getError();
+                $msg = $msg ?: '用户名或者密码错误!';
+                $this->error($msg, $url, ['token' => $this->request->token()]);
+            }
+        }
+        if ($this->auth->autologin()) {
+            $this->redirect($url);
+        }
+        Hook::listen("admin_login_init", $this->request);
+        $this->assign('keeyloginhours', $keeyloginhours);
+        return $this->fetch();
+    }
+
+    //手动退出登录
+    public function logout()
+    {
+        if ($this->auth->logout()) {
+            Hook::listen("admin_logout_after", $this->request);
+            $this->success('注销成功！', url("admin/index/login"));
+        }
+    }
+
+    //缓存更新
+    public function cache()
+    {
+        try {
+            $type = $this->request->request("type");
+            switch ($type) {
+                case 'all':
+                case 'data':
+                    File::del_dir(ROOT_PATH . 'runtime' . DS . 'cache');
+                    Cache::clear();
+                    if ($type == 'data') {
+                        break;
+                    }
+
+                case 'template':
+                    File::del_dir(ROOT_PATH . 'runtime' . DS . 'temp');
+                    if ($type == 'template') {
+                        break;
+                    }
+                case 'addons':
+                    // 插件缓存
+                    Service::refresh();
+                    if ($type == 'addons') {
+                        break;
+                    }
+            }
+        } catch (\Exception $e) {
+            $this->error($e->getMessage());
+        }
+        Hook::listen("wipecache_after");
+        $this->success('清理缓存');
+    }
+}

application/admin/controller/Main.php

@@ -0,0 +1,66 @@
+<?php
+// +----------------------------------------------------------------------
+// | Yzncms [ 御宅男工作室 ]
+// +----------------------------------------------------------------------
+// | Copyright (c) 2018 http://yzncms.com All rights reserved.
+// +----------------------------------------------------------------------
+// | Licensed ( http://www.apache.org/licenses/LICENSE-2.0 )
+// +----------------------------------------------------------------------
+// | Author: 御宅男 <530765310@qq.com>
+// +----------------------------------------------------------------------
+
+// +----------------------------------------------------------------------
+// | 后台欢迎页
+// +----------------------------------------------------------------------
+namespace app\admin\controller;
+
+use app\common\controller\Adminbase;
+use think\Db;
+
+class Main extends Adminbase
+{
+    protected $noNeedRight = ['index'];
+    //欢迎首页
+    public function index()
+    {
+        if (IS_ROOT && $this->auth->password == encrypt_password('admin', $this->auth->encrypt)) {
+            $this->assign('default_pass', 1);
+        }
+        $this->assign('sys_info', $this->get_sys_info());
+        return $this->fetch();
+    }
+
+    //phpinfo信息 按需显示在前台
+    protected function get_sys_info()
+    {
+        //$sys_info['os'] = PHP_OS; //操作系统
+        $sys_info['ip']           = GetHostByName($_SERVER['SERVER_NAME']); //服务器IP
+        $sys_info['web_server']   = $_SERVER['SERVER_SOFTWARE']; //服务器环境
+        $sys_info['phpv']         = phpversion(); //php版本
+        $sys_info['fileupload']   = @ini_get('file_uploads') ? ini_get('upload_max_filesize') : 'unknown'; //文件上传限制
+        $sys_info['memory_limit'] = ini_get('memory_limit'); //最大占用内存
+        //$sys_info['set_time_limit'] = function_exists("set_time_limit") ? true : false; //最大执行时间
+        //$sys_info['zlib'] = function_exists('gzclose') ? 'YES' : 'NO'; //Zlib支持
+        //$sys_info['safe_mode'] = (boolean) ini_get('safe_mode') ? 'YES' : 'NO'; //安全模式
+        //$sys_info['timezone'] = function_exists("date_default_timezone_get") ? date_default_timezone_get() : "no_timezone";
+        //$sys_info['curl'] = function_exists('curl_init') ? 'YES' : 'NO'; //Curl支持
+        //$sys_info['max_ex_time'] = @ini_get("max_execution_time") . 's';
+        $sys_info['domain']          = $_SERVER['HTTP_HOST']; //域名
+        $sys_info['remaining_space'] = function_exists('disk_free_space') ? round((disk_free_space(".") / (1024 * 1024)), 2) . 'M' : '未知'; //剩余空间
+        //$sys_info['user_ip'] = $_SERVER['REMOTE_ADDR']; //用户IP地址
+        $sys_info['beijing_time'] = gmdate("Y年n月j日 H:i:s", time() + 8 * 3600); //北京时间
+        $sys_info['time']         = date("Y年n月j日 H:i:s"); //服务器时间
+        //$sys_info['web_directory'] = $_SERVER["DOCUMENT_ROOT"]; //网站目录
+        $mysqlinfo                 = Db::query("SELECT VERSION() as version");
+        $sys_info['mysql_version'] = $mysqlinfo[0]['version'];
+        if (function_exists("gd_info")) {
+            //GD库版本
+            $gd                 = gd_info();
+            $sys_info['gdinfo'] = $gd['GD Version'];
+        } else {
+            $sys_info['gdinfo'] = "未知";
+        }
+        return $sys_info;
+    }
+
+}

application/admin/controller/auth/Adminlog.php

@@ -0,0 +1,76 @@
+<?php
+// +----------------------------------------------------------------------
+// | Yzncms [ 御宅男工作室 ]
+// +----------------------------------------------------------------------
+// | Copyright (c) 2018 http://yzncms.com All rights reserved.
+// +----------------------------------------------------------------------
+// | Licensed ( http://www.apache.org/licenses/LICENSE-2.0 )
+// +----------------------------------------------------------------------
+// | Author: 御宅男 <530765310@qq.com>
+// +----------------------------------------------------------------------
+
+// +----------------------------------------------------------------------
+// | 日志首页
+// +----------------------------------------------------------------------
+namespace app\admin\controller\auth;
+
+use app\admin\model\Adminlog as AdminlogModel;
+use app\common\controller\Adminbase;
+
+class Adminlog extends Adminbase
+{
+    protected $modelClass       = null;
+    protected $childrenAdminIds = [];
+
+    protected function initialize()
+    {
+        parent::initialize();
+        $this->modelClass       = new AdminlogModel;
+        $this->childrenAdminIds = $this->auth->getChildrenAdminIds(true);
+    }
+
+    //删除一个月前的操作日志
+    public function deletelog()
+    {
+        AdminlogModel::where('create_time', '<= time', time() - (86400 * 30))->delete();
+        $this->success("删除日志成功！");
+    }
+
+    /**
+     * 详情
+     */
+    public function detail($id)
+    {
+        $row = $this->modelClass->get($id);
+        if (!$row) {
+            $this->error('记录未找到');
+        }
+        if (!$this->auth->isAdministrator()) {
+            if (!$row['admin_id'] || !in_array($row['admin_id'], $this->childrenAdminIds)) {
+                $this->error('你没有权限访问');
+            }
+        }
+        $this->assign("row", $row->toArray());
+        return $this->fetch();
+    }
+
+    //添加
+    public function add()
+    {
+        $this->error();
+    }
+
+    //编辑
+    public function edit()
+    {
+        $this->error();
+    }
+
+    //批量更新
+    public function multi()
+    {
+        // 管理员禁止批量操作
+        $this->error();
+    }
+
+}

application/admin/controller/auth/Group.php

@@ -0,0 +1,281 @@
+<?php
+// +----------------------------------------------------------------------
+// | Yzncms [ 御宅男工作室 ]
+// +----------------------------------------------------------------------
+// | Copyright (c) 2007 http://yzncms.com All rights reserved.
+// +----------------------------------------------------------------------
+// | Licensed ( http://www.apache.org/licenses/LICENSE-2.0 )
+// +----------------------------------------------------------------------
+// | Author: fastadmin: https://www.fastadmin.net/
+// +----------------------------------------------------------------------
+namespace app\admin\Controller\auth;
+
+use app\admin\model\AuthGroup as AuthGroupModel;
+use app\common\controller\Adminbase;
+use think\Db;
+use util\Tree;
+
+/**
+ * 权限管理控制器
+ */
+class Group extends Adminbase
+{
+    //当前登录管理员所有子组别
+    protected $childrenGroupIds = [];
+    //当前组别列表数据
+    protected $grouplist   = [];
+    protected $groupdata   = [];
+    protected $noNeedRight = [];
+
+    protected function initialize()
+    {
+        parent::initialize();
+        $this->modelClass = new AuthGroupModel;
+
+        $this->childrenGroupIds = $this->auth->getChildrenGroupIds(true);
+
+        $groupList = AuthGroupModel::where('id', 'in', $this->childrenGroupIds)->select()->toArray();
+
+        Tree::instance()->init($groupList);
+        $groupList = [];
+        if ($this->auth->isAdministrator()) {
+            $groupList = Tree::instance()->getTreeList(Tree::instance()->getTreeArray(0), 'title');
+        } else {
+            $groups   = $this->auth->getGroups();
+            $groupIds = [];
+            foreach ($groups as $m => $n) {
+                if (in_array($n['id'], $groupIds) || in_array($n['parentid'], $groupIds)) {
+                    continue;
+                }
+                $groupList = array_merge($groupList, Tree::instance()->getTreeList(Tree::instance()->getTreeArray($n['parentid']), 'title'));
+                foreach ($groupList as $index => $item) {
+                    $groupIds[] = $item['id'];
+                }
+            }
+        }
+
+        $groupName = [];
+        foreach ($groupList as $k => $v) {
+            $groupName[$v['id']] = $v['title'];
+        }
+        $this->grouplist = $groupList;
+        $this->groupdata = $groupName;
+        $this->assign('groupdata', $this->groupdata);
+    }
+
+    //权限管理首页
+    public function index()
+    {
+        if ($this->request->isAjax()) {
+            $list   = $this->grouplist;
+            $total  = count($list);
+            $result = ["code" => 0, "count" => $total, "data" => $list];
+            return json($result);
+        } else {
+            return $this->fetch();
+        }
+    }
+
+    //创建管理员用户组
+    public function add()
+    {
+        if ($this->request->isPost()) {
+            $this->token();
+            $params = $this->request->post("row/a", [], 'strip_tags');
+            $result = $this->validate($params, 'app\admin\validate\AuthGroup');
+            if (true !== $result) {
+                return $this->error($result);
+            }
+            if (!in_array($params['parentid'], $this->childrenGroupIds)) {
+                $this->error('父组别超出权限范围');
+            }
+            $parentmodel = AuthGroupModel::get($params['parentid']);
+            if (!$parentmodel) {
+                $this->error('父组别未找到');
+            }
+            if ($params) {
+                $this->modelClass->create($params);
+                $this->success('新增成功');
+            }
+            $this->error('参数不能为空');
+        }
+        return $this->fetch();
+
+    }
+
+    //编辑管理员用户组
+    public function edit()
+    {
+        $id = $this->request->param('id/d');
+        if (!in_array($id, $this->childrenGroupIds)) {
+            $this->error('你没有权限访问!');
+        }
+        $row = $this->modelClass->get($id);
+        if (!$row) {
+            $this->error('记录未找到');
+        }
+        if ($this->request->isPost()) {
+            $this->token();
+            $params = $this->request->post("row/a", [], 'strip_tags');
+            //父节点不能是非权限内节点
+            if (!in_array($params['parentid'], $this->childrenGroupIds)) {
+                $this->error('父组别超出权限范围');
+            }
+            // 父节点不能是它自身的子节点或自己本身
+            if (in_array($params['parentid'], Tree::instance()->getChildrenIds($row->id, true))) {
+                $this->error('父角色不能是自身！');
+            }
+            $params['rules'] = explode(',', $params['rules']);
+
+            $parentmodel = AuthGroupModel::get($params['parentid']);
+            if (!$parentmodel) {
+                $this->error('父组别未找到');
+            }
+
+            // 父级别的规则节点
+            $parentrules = explode(',', $parentmodel->rules);
+            // 当前组别的规则节点
+            $currentrules = $this->auth->getRuleIds();
+            $rules        = $params['rules'];
+            // 如果父组不是超级管理员则需要过滤规则节点,不能超过父组别的权限
+            $rules = in_array('*', $parentrules) ? $rules : array_intersect($parentrules, $rules);
+            // 如果当前组别不是超级管理员则需要过滤规则节点,不能超当前组别的权限
+            $rules           = in_array('*', $currentrules) ? $rules : array_intersect($currentrules, $rules);
+            $params['rules'] = implode(',', $rules);
+            if ($params) {
+                Db::startTrans();
+                try {
+                    $row->save($params);
+                    $children_auth_groups = model("AuthGroup")->all(['id' => ['in', implode(',', (Tree::instance()->getChildrenIds($row->id)))]]);
+                    $childparams          = [];
+                    foreach ($children_auth_groups as $key => $children_auth_group) {
+                        $childparams[$key]['id']    = $children_auth_group->id;
+                        $childparams[$key]['rules'] = implode(',', array_intersect(explode(',', $children_auth_group->rules), $rules));
+                    }
+                    model("AuthGroup")->saveAll($childparams);
+                    Db::commit();
+                } catch (Exception $e) {
+                    Db::rollback();
+                    $this->error($e->getMessage());
+                }
+                $this->success('编辑成功');
+            }
+            $this->error('参数不能为空');
+        }
+        $this->assign("data", $row);
+        return $this->fetch();
+    }
+
+    //访问授权页面
+    public function access()
+    {
+        $id  = $this->request->param('id/d');
+        $pid = $this->request->param('pid/d');
+        if (!in_array($id, $this->childrenGroupIds)) {
+            $this->error('你没有权限访问!');
+        }
+        $row = $this->modelClass->get($id);
+        if (!$row) {
+            $this->error('记录未找到');
+        }
+        if ($this->request->isPost()) {
+            $this->token();
+            $params          = $this->request->post("row/a", [], 'strip_tags');
+            $params['rules'] = explode(',', $params['rules']);
+
+            $parentmodel = $this->modelClass->get($params['parentid']);
+            if (!$parentmodel) {
+                $this->error('父组别未找到');
+            }
+            // 父级别的规则节点
+            $parentrules = explode(',', $parentmodel->rules);
+            // 当前组别的规则节点
+            $currentrules = $this->auth->getRuleIds();
+            $rules        = $params['rules'];
+            // 如果父组不是超级管理员则需要过滤规则节点,不能超过父组别的权限
+            $rules = in_array('*', $parentrules) ? $rules : array_intersect($parentrules, $rules);
+            // 如果当前组别不是超级管理员则需要过滤规则节点,不能超当前组别的权限
+            $rules = in_array('*', $currentrules) ? $rules : array_intersect($currentrules, $rules);
+            Db::startTrans();
+            try {
+                $row->rules = implode(',', $rules);
+                $row->save();
+                $children_auth_groups = model("AuthGroup")->all(['id' => ['in', implode(',', (Tree::instance()->getChildrenIds($row->id)))]]);
+                $childparams          = [];
+                foreach ($children_auth_groups as $key => $children_auth_group) {
+                    $childparams[$key]['id']    = $children_auth_group->id;
+                    $childparams[$key]['rules'] = implode(',', array_intersect(explode(',', $children_auth_group->rules), $rules));
+                }
+                model("AuthGroup")->saveAll($childparams);
+                Db::commit();
+            } catch (Exception $e) {
+                Db::rollback();
+                $this->error($e->getMessage());
+            }
+            $this->success('编辑成功');
+        }
+        $parentGroupModel = $this->modelClass->get($pid);
+
+        $ruleList = model('AuthRule')->order('listorder', 'desc')->order('id', 'asc')->select()->toArray();
+        //读取父类角色所有节点列表
+        $parentRuleList = [];
+        if (in_array('*', explode(',', $parentGroupModel->rules))) {
+            $parentRuleList = $ruleList;
+        } else {
+            $parentRuleIds = explode(',', $parentGroupModel->rules);
+            foreach ($ruleList as $k => $v) {
+                if (in_array($v['id'], $parentRuleIds)) {
+                    $parentRuleList[] = $v;
+                }
+            }
+        }
+
+        $ruleTree  = new Tree();
+        $groupTree = new Tree();
+        //当前所有正常规则列表
+        $ruleTree->init($parentRuleList);
+        //角色组列表
+        $groupTree->init(model('AuthGroup')->where('id', 'in', $this->childrenGroupIds)->select()->toArray());
+
+        //读取当前角色下规则ID集合
+        $adminRuleIds = $this->auth->getRuleIds();
+        //是否是超级管理员
+        $superadmin = $this->auth->isAdministrator();
+        //当前拥有的规则ID集合
+        $currentRuleIds = explode(',', $row->rules);
+        $parentRuleList = $ruleTree->getTreeList($ruleTree->getTreeArray(0), 'name');
+        /*$hasChildrens = [];
+        foreach ($parentRuleList as $k => $v) {
+        if ($v['haschild']) {
+        $hasChildrens[] = $v['id'];
+        }
+        }*/
+        $parentRuleIds = array_map(function ($item) {
+            return $item['id'];
+        }, $parentRuleList);
+        $nodeList = [];
+        foreach ($parentRuleList as $k => $v) {
+            if (!$superadmin && !in_array($v['id'], $adminRuleIds)) {
+                continue;
+            }
+            if ($v['parentid'] && !in_array($v['parentid'], $parentRuleIds)) {
+                continue;
+            }
+            //$ischeck = in_array($v['id'], $currentRuleIds) && !in_array($v['id'], $hasChildrens);
+            $ischeck    = in_array($v['id'], $currentRuleIds);
+            $nodeList[] = ['id' => $v['id'], 'parentid' => $v['parentid'], 'name' => $v['title'], 'checked' => $ischeck];
+        }
+        //dump($nodeList);
+        $this->assign('nodeList', json_encode($nodeList));
+        $this->assign("data", $row);
+        return $this->fetch();
+    }
+
+    //批量更新
+    public function multi()
+    {
+        // 管理员禁止批量操作
+        $this->error();
+    }
+
+}

application/admin/controller/auth/Manager.php

@@ -0,0 +1,205 @@
+<?php
+// +----------------------------------------------------------------------
+// | Yzncms [ 御宅男工作室 ]
+// +----------------------------------------------------------------------
+// | Copyright (c) 2007 http://yzncms.com All rights reserved.
+// +----------------------------------------------------------------------
+// | Licensed ( http://www.apache.org/licenses/LICENSE-2.0 )
+// +----------------------------------------------------------------------
+// | Author: 御宅男 <530765310@qq.com>
+// +----------------------------------------------------------------------
+namespace app\admin\controller\auth;
+
+use app\admin\model\AdminUser as Admin_User;
+use app\admin\model\AuthGroup as AuthGroupModel;
+use app\common\controller\Adminbase;
+use util\Tree;
+
+/**
+ * 管理员管理
+ */
+class Manager extends Adminbase
+{
+    protected $searchFields     = 'id,username,nickname';
+    protected $childrenGroupIds = [];
+    protected $childrenAdminIds = [];
+    protected function initialize()
+    {
+        parent::initialize();
+        $this->modelClass = new Admin_User;
+
+        $this->childrenAdminIds = $this->auth->getChildrenAdminIds(true);
+        $this->childrenGroupIds = $this->auth->getChildrenGroupIds(true);
+
+        $groupList = AuthGroupModel::where('id', 'in', $this->childrenGroupIds)->select()->toArray();
+        Tree::instance()->init($groupList);
+        $groupdata = [];
+        if ($this->auth->isAdministrator()) {
+            $result = Tree::instance()->getTreeList(Tree::instance()->getTreeArray(0), 'title');
+            foreach ($result as $k => $v) {
+                $groupdata[$v['id']] = $v['title'];
+            }
+        } else {
+            $result = [];
+            $groups = $this->auth->getGroups();
+            foreach ($groups as $m => $n) {
+                $childlist = Tree::instance()->getTreeList(Tree::instance()->getTreeArray($n['id']), 'title');
+                //$temp = [];
+                foreach ($childlist as $k => $v) {
+                    $groupdata[$v['id']] = $v['title'];
+                }
+                //$result[$n['title']] = $temp;
+            }
+            //$groupdata = $result;
+        }
+        $this->assign('groupdata', $groupdata);
+    }
+
+    /**
+     * 管理员管理列表
+     */
+    public function index()
+    {
+        if ($this->request->isAjax()) {
+            //如果发送的来源是Selectpage，则转发到Selectpage
+            if ($this->request->request('keyField')) {
+                return $this->selectpage();
+            }
+            list($page, $limit, $where, $sort, $order) = $this->buildTableParames();
+
+            $childrenGroupIds = $this->childrenGroupIds;
+            $groupName        = AuthGroupModel::where('id', 'in', $childrenGroupIds)
+                ->column('id,title');
+
+            $list = $this->modelClass
+                ->where($where)
+                ->where('id', 'in', $this->childrenAdminIds)
+                ->field(['password', 'salt', 'token'], true)
+                ->order($sort, $order)
+                ->paginate($limit);
+
+            foreach ($list as $k => &$v) {
+                $v['groups']      = $groupName[$v['roleid']] ?? '未知';
+            }
+            unset($v);
+            $result = ["code" => 0, 'count' => $list->total(), "data" => $list->items()];
+            return json($result);
+        }
+        return $this->fetch();
+    }
+
+    /**
+     * 添加管理员
+     */
+    public function add()
+    {
+        if ($this->request->isPost()) {
+            $this->token();
+            $params             = $this->request->post('');
+            $result             = $this->validate($params, 'AdminUser.insert');
+            $passwordinfo       = encrypt_password($params['password']); //对密码进行处理
+            $params['password'] = $passwordinfo['password'];
+            $params['encrypt']  = $passwordinfo['encrypt'];
+            if (true !== $result) {
+                return $this->error($result);
+            }
+            if (!in_array($params['roleid'], $this->childrenGroupIds)) {
+                $this->error('没有权限操作！');
+            }
+            try {
+                $this->modelClass->save($params);
+            } catch (\Exception $e) {
+                $this->error($e->getMessage());
+            }
+            $this->success("添加成功！", url('index'));
+        }
+        return $this->fetch();
+    }
+
+    /**
+     * 管理员编辑
+     */
+    public function edit()
+    {
+        $id  = $this->request->param('id/d', 0);
+        $row = $this->modelClass->get($id);
+        if (!$row) {
+            $this->error('记录未找到');
+        }
+        if (!in_array($row->id, $this->childrenAdminIds)) {
+            $this->error('没有权限操作！');
+        }
+        if ($this->request->isPost()) {
+            $this->token();
+            $params = $this->request->post('');
+            $result = $this->validate($params, 'AdminUser.update');
+            if (true !== $result) {
+                return $this->error($result);
+            }
+            if (!in_array($params['roleid'], $this->childrenGroupIds)) {
+                $this->error('没有权限操作！');
+            }
+            //密码为空，表示不修改密码
+            if (isset($params['password']) && $params['password']) {
+                $passwordinfo       = encrypt_password($params['password']); //对密码进行处理
+                $params['encrypt']  = $passwordinfo['encrypt'];
+                $params['password'] = $passwordinfo['password'];
+
+            } else {
+                unset($params['password'], $params['encrypt']);
+            }
+            try {
+                $row->allowField(true)->save($params);
+            } catch (\Exception $e) {
+                $this->error($e->getMessage());
+            }
+            $this->success("修改成功！");
+        }
+        $this->assign("data", $row);
+        return $this->fetch();
+    }
+
+    /**
+     * 管理员删除
+     */
+    public function del()
+    {
+        if (false === $this->request->isPost()) {
+            $this->error('未知参数');
+        }
+        $id = $this->request->param('id/d');
+        if (empty($id)) {
+            $this->error('请指定需要删除的用户ID！');
+        }
+        if ($id == 1) {
+            $this->error('禁止对超级管理员执行该操作！');
+        }
+        $ids = array_intersect($this->childrenAdminIds, array_filter(explode(',', $id)));
+
+        $adminList = $this->modelClass->where('id', 'in', $ids)->where('roleid', 'in', $this->childrenGroupIds)->select();
+        if ($adminList) {
+            $deleteIds = [];
+            foreach ($adminList as $k => $v) {
+                $deleteIds[] = $v->id;
+            }
+            $deleteIds = array_values(array_diff($deleteIds, [$this->auth->id]));
+            if ($deleteIds) {
+                try {
+                    $this->modelClass->destroy($deleteIds);
+                } catch (\Exception $e) {
+                    $this->error($e->getMessage());
+                }
+                $this->success("删除成功！");
+            }
+        }
+        $this->error('没有权限删除！');
+    }
+
+    //批量更新.
+    public function multi()
+    {
+        // 管理员禁止批量操作
+        $this->error();
+    }
+
+}

application/admin/controller/auth/Rule.php

@@ -0,0 +1,166 @@
+<?php
+// +----------------------------------------------------------------------
+// | Yzncms [ 御宅男工作室 ]
+// +----------------------------------------------------------------------
+// | Copyright (c) 2018 http://yzncms.com All rights reserved.
+// +----------------------------------------------------------------------
+// | Licensed ( http://www.apache.org/licenses/LICENSE-2.0 )
+// +----------------------------------------------------------------------
+// | Author: 御宅男 <530765310@qq.com>
+// +----------------------------------------------------------------------
+
+// +----------------------------------------------------------------------
+// | 后台菜单管理
+// +----------------------------------------------------------------------
+namespace app\admin\controller\auth;
+
+use app\admin\model\AuthRule as AuthRuleModel;
+use app\common\controller\Adminbase;
+use think\Db;
+use think\facade\Cache;
+use util\Tree;
+
+class Rule extends Adminbase
+{
+    protected $modelClass = null;
+
+    protected function initialize()
+    {
+        parent::initialize();
+        $this->modelClass = new AuthRuleModel;
+    }
+
+    //后台菜单首页
+    public function index()
+    {
+        if ($this->request->isAjax()) {
+            $ruleList   = AuthRuleModel::order('listorder DESC,id ASC')->select()->toArray();
+            $tree       = new Tree();
+            $tree->icon = ['', '', ''];
+            $tree->nbsp = '';
+            $tree->init($ruleList);
+            $list   = $tree->getTreeArray(0);
+            $total  = count($list);
+            $result = ["code" => 0, "count" => $total, "data" => $list];
+            return json($result);
+        }
+        return $this->fetch();
+    }
+
+    //新增
+    public function add()
+    {
+        if ($this->request->isPost()) {
+            $this->token();
+            $params = $this->request->post("row/a", [], 'strip_tags');
+            if ($params) {
+                if (!$params['ismenu'] && !$params['parentid']) {
+                    $this->error('非菜单规则节点必须有父级');
+                }
+                $params['icon'] = $params['icon'] ? 'iconfont ' . $params['icon'] : '';
+                $result         = $this->validate($params, 'app\admin\validate\AuthRule');
+                if (true !== $result) {
+                    $this->error($result);
+                }
+                try {
+                    $result = $this->modelClass->save($params);
+                } catch (\Exception $e) {
+                    $this->error($e->getMessage());
+                }
+                $this->success('新增成功');
+            }
+            $this->error('参数不能为空');
+        }
+        $tree     = new Tree();
+        $parentid = $this->request->param('parentid/d', 0);
+        $ruleList = AuthRuleModel::where('ismenu', 1)->order('listorder DESC,id ASC')->select()->toArray();
+        $tree->init($ruleList);
+        $select_categorys = $tree->getTree(0, '', $parentid);
+        $this->assign("select_categorys", $select_categorys);
+        return $this->fetch();
+    }
+
+    //编辑
+    public function edit()
+    {
+        $id  = $this->request->param('id/d', 0);
+        $row = $this->modelClass->get($id);
+        if (!$row) {
+            $this->error('记录未找到');
+        }
+        if ($this->request->isPost()) {
+            $this->token();
+            $params = $this->request->post("row/a", [], 'strip_tags');
+            if ($params) {
+                if (!$params['ismenu'] && !$params['parentid']) {
+                    $this->error('非菜单规则节点必须有父级');
+                }
+                if ($params['parentid'] == $row['id']) {
+                    $this->error('父级不能是它自己');
+                }
+                if ($params['parentid'] != $row['parentid']) {
+                    $childrenIds = Tree::instance()->init(AuthRuleModel::select()->toArray())->getChildrenIds($row['id']);
+                    if (in_array($params['parentid'], $childrenIds)) {
+                        $this->error('父级不能是它的子级');
+                    }
+                }
+                $params['icon'] = $params['icon'] ? 'iconfont ' . $params['icon'] : '';
+                $result         = $this->validate($params, 'app\admin\validate\AuthRule');
+                if (true !== $result) {
+                    $this->error($result);
+                }
+                try {
+                    $result = $row->save($params);
+                } catch (\Exception $e) {
+                    $this->error($e->getMessage());
+                }
+                $this->success('编辑成功');
+            }
+            $this->error('参数不能为空');
+        }
+        $tree     = new Tree();
+        $result   = AuthRuleModel::where('ismenu', 1)->order('listorder DESC,id ASC')->select()->toArray();
+        $ruleList = [];
+        foreach ($result as $r) {
+            $r['selected'] = $r['id'] == $row->parentid ? 'selected' : '';
+            $ruleList[]    = $r;
+        }
+
+        $tree->init($ruleList);
+        $select_categorys = $tree->getTree(0, '', $row->parentid);
+        $this->assign("select_categorys", $select_categorys);
+        $this->view->assign("data", $row);
+        return $this->fetch();
+    }
+
+    //删除
+    public function del()
+    {
+        if (false === $this->request->isPost()) {
+            $this->error('未知参数');
+        }
+        $ids = $this->request->param('id/a', null);
+        if (empty($ids)) {
+            $this->error('参数错误！');
+        }
+        if (!is_array($ids)) {
+            $ids = [0 => $ids];
+        }
+        if ($ids) {
+            // 必须将结果集转换为数组
+            $ruleList = \think\Db::name("auth_rule")->field('id,parentid')->order('listorder DESC,id ASC')->select();
+            Tree::instance()->init($ruleList);
+            $delIds = [];
+            foreach ($ids as $k => $v) {
+                $delIds = array_merge($delIds, Tree::instance()->getChildrenIds($v, true));
+            }
+            $delIds = array_unique($delIds);
+            $count  = $this->modelClass->where('id', 'in', $delIds)->delete();
+            if ($count) {
+                Cache::rm('__menu__');
+                $this->success("操作成功！");
+            }
+        }
+        $this->error('没有数据删除！');
+    }
+}

application/admin/controller/general/Attachments.php

@@ -0,0 +1,191 @@
+<?php
+// +----------------------------------------------------------------------
+// | Yzncms [ 御宅男工作室 ]
+// +----------------------------------------------------------------------
+// | Copyright (c) 2018 http://yzncms.com All rights reserved.
+// +----------------------------------------------------------------------
+// | Licensed ( http://www.apache.org/licenses/LICENSE-2.0 )
+// +----------------------------------------------------------------------
+// | Author: 御宅男 <530765310@qq.com>
+// +----------------------------------------------------------------------
+
+// +----------------------------------------------------------------------
+// | 附件上传处理类
+// +----------------------------------------------------------------------
+namespace app\admin\controller\general;
+
+use app\common\controller\Adminbase;
+use app\common\model\Attachment as AttachmentModel;
+use think\facade\Hook;
+
+class Attachments extends Adminbase
+{
+    private $uploadUrl      = '';
+    protected $searchFields = 'id,name';
+
+    protected function initialize()
+    {
+        parent::initialize();
+        $this->modelClass = new AttachmentModel;
+        $this->uploadUrl  = config('public_url') . 'uploads/';
+    }
+
+    /**
+     * 查看
+     */
+    public function index()
+    {
+        if ($this->request->isAjax()) {
+            $mimetypeQuery = [];
+            $allGet        = $this->request->request();
+            $filterArr     = isset($allGet['filter']) ? (array) json_decode($allGet['filter'], true) : [];
+            if (isset($filterArr['mime']) && preg_match("/(\/|\,|\*)/", $filterArr['mime'])) {
+                $mimetype      = $filterArr['mime'];
+                $filterArr     = array_diff_key($filterArr, ['mime' => '']);
+                $mimetypeQuery = function ($query) use ($mimetype) {
+                    $mimetypeArr = array_filter(explode(',', $mimetype));
+                    foreach ($mimetypeArr as $index => $item) {
+                        $query->whereOr('mime', 'like', '%' . str_replace("/*", "/", $item) . '%');
+                    }
+                };
+            }
+            $allGet['filter'] = json_encode($filterArr);
+            $this->request->withGet($allGet);
+
+            [$page, $limit, $where, $sort, $order] = $this->buildTableParames();
+
+            $count = $this->modelClass
+                ->where($where)
+                ->where($mimetypeQuery)
+                ->order($sort, $order)
+                ->count();
+
+            $data = $this->modelClass
+                ->where($where)
+                ->where($mimetypeQuery)
+                ->order($sort, $order)
+                ->page($page, $limit)
+                ->select();
+            $result = ["code" => 0, 'count' => $count, 'data' => $data];
+            return json($result);
+        }
+        return $this->fetch();
+    }
+
+    //附件选择
+    public function select()
+    {
+        if ($this->request->isAjax()) {
+            return $this->index();
+        }
+        $mimetype = $this->request->get('mimetype/s', '');
+        $mimetype = substr($mimetype, -1) === '/' ? $mimetype . '*' : $mimetype;
+        $this->assign('mimetype', $mimetype);
+        return $this->fetch();
+    }
+
+    public function cropper()
+    {
+        return $this->fetch();
+    }
+
+    //附件删除
+    public function del()
+    {
+        if (false === $this->request->isPost()) {
+            $this->error('未知参数');
+        }
+        $ids = $this->request->param('id/a', null);
+        if (empty($ids)) {
+            $this->error('请选择需要删除的附件！');
+        }
+        if (!is_array($ids)) {
+            $ids = [0 => $ids];
+        }
+        $isAdministrator = $this->auth->isAdministrator();
+        Hook::add('upload_delete', function ($params) {
+            if ($params['driver'] == 'local') {
+                $attachmentFile = ROOT_PATH . '/public' . $params['path'];
+                if (is_file($attachmentFile)) {
+                    @unlink($attachmentFile);
+                }
+            }
+        });
+        $attachmentlist = AttachmentModel::where('id', 'in', $ids)->select();
+        foreach ($attachmentlist as $attachment) {
+            Hook::listen("upload_delete", $attachment);
+            $attachment->delete();
+        }
+        $this->success('文件删除成功~');
+    }
+
+    /**
+     * html代码远程图片本地化
+     * @param string $content html代码
+     * @param string $type 文件类型
+     */
+    public function getUrlFile()
+    {
+        $content = $this->request->post('content');
+        $type    = $this->request->post('type');
+        $urls    = [];
+        $urls    = \util\GetImgSrc::srcList($content);
+        $urls    = array_filter(array_map(function ($val) {
+            //http开头验证
+            if (strpos($val, "http") === 0) {
+                return $val;
+            }
+        }, $urls));
+
+        $file_info = [
+            'admin_id' => $this->auth->id,
+            'thumb'    => '',
+        ];
+        foreach ($urls as $vo) {
+            $vo   = trim(urldecode($vo));
+            $host = parse_url($vo, PHP_URL_HOST);
+            if ($host != $_SERVER['HTTP_HOST']) {
+                //当前域名下的文件不下载
+                $fileExt = strrchr($vo, '.'); //$fileExt = '.jpg';非正常后缀图片可以强制设置图片后缀进行抓取下载
+                if (!in_array($fileExt, ['.jpg', '.gif', '.png', '.bmp', '.jpeg', '.tiff'])) {
+                    exit($content);
+                }
+                //图片是否合法
+                $imgInfo = getimagesize($vo);
+                if (!$imgInfo || !isset($imgInfo[0]) || !isset($imgInfo[1])) {
+                    exit($content);
+                }
+                $filename = ROOT_PATH . 'public' . DS . 'uploads' . DS . 'temp' . DS . md5($vo) . $fileExt;
+                if (http_down($vo, $filename) !== false) {
+                    $file_info['md5'] = hash_file('md5', $filename);
+                    if ($file_exists = AttachmentModel::get(['md5' => $file_info['md5']])) {
+                        unlink($filename);
+                        $localpath = $file_exists['path'];
+                    } else {
+                        $file_info['sha1'] = hash_file('sha1', $filename);
+                        $file_info['size'] = filesize($filename);
+                        $file_info['mime'] = mime_content_type($filename);
+
+                        $fpath    = $type . DS . date('Ymd');
+                        $savePath = ROOT_PATH . 'public' . DS . 'uploads' . DS . $fpath;
+                        if (!is_dir($savePath)) {
+                            mkdir($savePath, 0755, true);
+                        }
+                        $fname             = DS . md5(microtime(true)) . $fileExt;
+                        $file_info['name'] = substr(htmlspecialchars(strip_tags($vo)), 0, 100);
+                        $file_info['path'] = $this->uploadUrl . str_replace(DS, '/', $fpath . $fname);
+                        $file_info['ext']  = ltrim($fileExt, ".");
+
+                        if (rename($filename, $savePath . $fname)) {
+                            AttachmentModel::create($file_info);
+                            $localpath = $file_info['path'];
+                        }
+                    }
+                    $content = str_replace($vo, $localpath, $content);
+                }
+            }
+        }
+        exit($content);
+    }
+
+}

application/admin/controller/general/Config.php

@@ -0,0 +1,233 @@
+<?php
+// +----------------------------------------------------------------------
+// | Yzncms [ 御宅男工作室 ]
+// +----------------------------------------------------------------------
+// | Copyright (c) 2018 http://yzncms.com All rights reserved.
+// +----------------------------------------------------------------------
+// | Licensed ( http://www.apache.org/licenses/LICENSE-2.0 )
+// +----------------------------------------------------------------------
+// | Author: 御宅男 <530765310@qq.com>
+// +----------------------------------------------------------------------
+
+// +----------------------------------------------------------------------
+// | 系统配置
+// +----------------------------------------------------------------------
+namespace app\admin\controller\general;
+
+use app\admin\model\Config as ConfigModel;
+use app\common\controller\Adminbase;
+use think\Db;
+
+class Config extends Adminbase
+{
+    protected function initialize()
+    {
+        parent::initialize();
+        $filepath = APP_PATH . 'admin' . DS . "view" . DS . 'custom' . DS;
+        $custom   = str_replace($filepath . DS, '', glob($filepath . DS . 'custom*'));
+
+        $this->assign('custom', $custom);
+        $this->assign('groupArray', config('site.config_group'));
+        $this->modelClass = new ConfigModel;
+    }
+
+    //配置首页
+    public function index($group = 'base')
+    {
+        if ($this->request->isAjax()) {
+            $list = $this->modelClass->view('config')
+                ->where('group', $group)
+                ->view('field_type', 'title as ftitle', 'field_type.name=config.type', 'LEFT')
+                ->order('listorder,id desc')
+                ->select();
+
+            return json(["code" => 0, "data" => $list]);
+        } else {
+            $this->assign('group', $group);
+            return $this->fetch();
+        }
+    }
+
+    //配置设置
+    public function setting($group = 'base')
+    {
+        if ($this->request->isPost()) {
+            $this->token();
+            $data = $this->request->post('row/a');
+            // 查询该分组下所有的配置项名和类型
+            $items = ConfigModel::where('group', $group)->where('status', 1)->column('name,type');
+            foreach ($items as $name => $type) {
+                //查看是否赋值
+                if (!isset($data[$name])) {
+                    switch ($type) {
+                        // 开关
+                        case 'switch':
+                            $data[$name] = 0;
+                            break;
+                        case 'checkbox':
+                            $data[$name] = '';
+                            break;
+                    }
+                } else {
+                    // 如果值是数组则转换成字符串，适用于复选框等类型
+                    if (is_array($data[$name])) {
+                        $data[$name] = implode(',', $data[$name]);
+                    }
+                    switch ($type) {
+                        // 开关
+                        case 'switch':
+                            $data[$name] = 1;
+                            break;
+                    }
+                }
+                //数据格式验证
+                if (!empty($data[$name]) && in_array($type, ['number']) && !\think\facade\Validate::isNumber($data[$name])) {
+                    return $this->error("'" . $name . "'格式错误~");
+                }
+                if (isset($data[$name])) {
+                    ConfigModel::where(['name' => $name])->setField('value', $data[$name]);
+                }
+            }
+            try {
+                ConfigModel::refreshFile();
+            } catch (Exception $e) {
+                $this->error($e->getMessage());
+            }
+            return $this->success('设置更新成功');
+        } else {
+            $configList = ConfigModel::where('group', $group)
+                ->where('status', 1)
+                ->order('listorder,id desc')
+                ->select();
+            foreach ($configList as &$value) {
+                $value['fieldArr'] = 'row';
+                if ($value['type'] == 'custom') {
+                    if ($value['options'] != '') {
+                        $tpar             = explode(".", $value['options'], 2);
+                        $value['options'] = $this->fetch('admin@custom/' . $tpar[0], ['vo' => $value])->getContent();
+                        unset($tpar);
+                    }
+                } elseif ($value['options'] != '') {
+                    $value['options'] = parse_attr($value['options']);
+                }
+                if ($value['type'] == 'checkbox') {
+                    $value['value'] = empty($value['value']) ? [] : explode(',', $value['value']);
+                }
+                if ($value['type'] == 'datetime') {
+                    $value['value'] = empty($value['value']) ? date('Y-m-d H:i:s') : $value['value'];
+                }
+                if ($value['type'] == 'Ueditor') {
+                    $value['value'] = htmlspecialchars_decode($value['value']);
+                }
+            }
+            $this->assign([
+                'fieldList' => $configList,
+                'group'     => $group,
+            ]);
+            return $this->fetch();
+        }
+    }
+
+    //新增配置
+    public function add()
+    {
+        $groupType = $this->request->param('groupType', 'base');
+        if ($this->request->isPost()) {
+            $this->token();
+            $params = $this->request->post("row/a");
+            if ($params) {
+                $result = $this->validate($params, 'app\admin\validate\Config');
+                if (true !== $result) {
+                    return $this->error($result);
+                }
+                try {
+                    $res = $this->modelClass->create($params);
+                } catch (Exception $e) {
+                    $this->error($e->getMessage());
+                }
+                if ($res !== false) {
+                    try {
+                        ConfigModel::refreshFile();
+                    } catch (Exception $e) {
+                        $this->error($e->getMessage());
+                    }
+                    $this->success('新增成功');
+                } else {
+                    $this->error($this->modelClass->getError());
+                }
+            }
+            $this->error('参数不能为空');
+        }
+        $fieldType = Db::name('field_type')->order('listorder')->column('name,title,ifstring');
+        $this->assign([
+            'fieldType' => $fieldType,
+            'groupType' => $groupType,
+        ]);
+        return $this->fetch();
+
+    }
+
+    //编辑配置
+    public function edit()
+    {
+        $id  = $this->request->param('id/d');
+        $row = $this->modelClass->get($id);
+        if (!$row) {
+            $this->error('记录未找到');
+        }
+        if ($this->request->isPost()) {
+            $this->token();
+            $params = $this->request->post("row/a");
+            if ($params) {
+                $result = $this->validate($params, 'app\admin\validate\Config');
+                if (true !== $result) {
+                    return $this->error($result);
+                }
+                try {
+                    $res = $row->save($params);
+                } catch (Exception $e) {
+                    $this->error($e->getMessage());
+                }
+                if ($res !== false) {
+                    try {
+                        ConfigModel::refreshFile();
+                    } catch (Exception $e) {
+                        $this->error($e->getMessage());
+                    }
+                    $this->success('编辑成功');
+                } else {
+                    $this->error($row->getError());
+                }
+            }
+            $this->error('参数不能为空');
+        }
+        $fieldType = Db::name('field_type')->order('listorder')->column('name,title,ifstring');
+        $this->assign([
+            'data'      => $row,
+            'id'        => $id,
+            'fieldType' => $fieldType,
+        ]);
+        return $this->fetch();
+    }
+
+    //删除配置
+    public function del()
+    {
+        if (false === $this->request->isPost()) {
+            $this->error('未知参数');
+        }
+        $id  = $this->request->param('id/d');
+        $row = ConfigModel::find($id);
+        if ($row) {
+            try {
+                $row->delete();
+                ConfigModel::refreshFile();
+            } catch (Exception $e) {
+                $this->error($e->getMessage());
+            }
+            $this->success("操作成功！");
+        } else {
+            $this->error('配置不存在');
+        }
+    }
+}

application/admin/controller/general/Profile.php

@@ -0,0 +1,87 @@
+<?php
+// +----------------------------------------------------------------------
+// | Yzncms [ 御宅男工作室 ]
+// +----------------------------------------------------------------------
+// | Copyright (c) 2018 http://yzncms.com All rights reserved.
+// +----------------------------------------------------------------------
+// | Licensed ( http://www.apache.org/licenses/LICENSE-2.0 )
+// +----------------------------------------------------------------------
+// | Author: 御宅男 <530765310@qq.com>
+// +----------------------------------------------------------------------
+
+// +----------------------------------------------------------------------
+// | 个人资料
+// +----------------------------------------------------------------------
+namespace app\admin\controller\general;
+
+use app\admin\model\Adminlog as AdminlogModel;
+use app\admin\model\AdminUser;
+use app\common\controller\Adminbase;
+use think\facade\Session;
+use think\facade\Validate;
+
+class Profile extends Adminbase
+{
+
+    public function index()
+    {
+        if ($this->request->isAjax()) {
+            $this->modelClass                      = new AdminlogModel;
+            [$page, $limit, $where, $sort, $order] = $this->buildTableParames();
+            $count                                 = $this->modelClass
+                ->where($where)
+                ->where('admin_id', (int) $this->auth->id)
+                ->order($sort, $order)
+                ->count();
+            $list = $this->modelClass
+                ->where($where)
+                ->where('admin_id', (int) $this->auth->id)
+                ->order($sort, $order)
+                ->page($page, $limit)
+                ->select();
+
+            $result = ["code" => 0, 'count' => $count, 'data' => $list];
+            return json($result);
+        }
+        return $this->fetch();
+    }
+
+    //更新个人信息
+    public function update()
+    {
+        if ($this->request->isPost()) {
+            $this->token();
+            $params       = $this->request->post();
+            $params['id'] = $this->auth->id;
+            $rule         = [
+                'email|邮箱'  => 'require|email|unique:admin',
+                'mobile|手机' => 'mobile|unique:admin',
+            ];
+
+            $result = $this->validate($params, $rule);
+            if (true !== $result) {
+                $this->error($result);
+            }
+            if (isset($params['password']) && $params['password']) {
+                if (!Validate::regex($params['password'], "/^[\S]{6,16}$/")) {
+                    $this->error('密码长度必须在6-16位之间，不能包含空格');
+                }
+                $data               = encrypt_password($params['password']);
+                $params['encrypt']  = $data['encrypt'];
+                $params['password'] = $data['password'];
+            } else {
+                unset($params['password'], $params['encrypt']);
+            }
+            if ($params) {
+                $admin = AdminUser::get($this->auth->id);
+                $admin->save($params);
+                //因为个人资料面板读取的Session显示，修改自己资料后同时更新Session
+                Session::set("admin", $admin->toArray());
+                Session::set("admin.safecode", $this->auth->getEncryptSafecode($admin));
+                $this->success('修改成功！');
+            }
+            $this->error();
+        }
+        return;
+    }
+}

application/admin/library/traits/Curd.php

@@ -0,0 +1,355 @@
+<?php
+// +----------------------------------------------------------------------
+// | Yzncms [ 御宅男工作室 ]
+// +----------------------------------------------------------------------
+// | Copyright (c) 2018 http://yzncms.com All rights reserved.
+// +----------------------------------------------------------------------
+// | Licensed ( http://www.apache.org/licenses/LICENSE-2.0 )
+// +----------------------------------------------------------------------
+// | Author: 御宅男 <530765310@qq.com>
+// +----------------------------------------------------------------------
+
+// +----------------------------------------------------------------------
+// | Trait Curd
+// +----------------------------------------------------------------------
+namespace app\admin\library\traits;
+
+use Exception;
+use think\Db;
+use think\exception\PDOException;
+use think\exception\ValidateException;
+
+trait Curd
+{
+    /**
+     * 排除前台提交过来的字段
+     * @param $params
+     * @return array
+     */
+    protected function preExcludeFields($params)
+    {
+        if (is_array($this->excludeFields)) {
+            foreach ($this->excludeFields as $field) {
+                if (key_exists($field, $params)) {
+                    unset($params[$field]);
+                }
+            }
+        } else {
+            if (key_exists($this->excludeFields, $params)) {
+                unset($params[$this->excludeFields]);
+            }
+        }
+        return $params;
+    }
+
+    /**
+     * 查看
+     */
+    public function index()
+    {
+        if ($this->request->isAjax()) {
+            //如果发送的来源是Selectpage，则转发到Selectpage
+            if ($this->request->request('keyField')) {
+                return $this->selectpage();
+            }
+            [$page, $limit, $where, $sort, $order] = $this->buildTableParames();
+
+            $count = $this->modelClass
+                ->where($where)
+                ->order($sort, $order)
+                ->count();
+
+            $data = $this->modelClass
+                ->where($where)
+                ->order($sort, $order)
+                ->page($page, $limit)
+                ->select();
+            $result = ["code" => 0, 'count' => $count, 'data' => $data];
+            return json($result);
+        }
+        return $this->fetch();
+    }
+
+    /**
+     * 回收站
+     */
+    public function recyclebin()
+    {
+        if ($this->request->isAjax()) {
+            [$page, $limit, $where, $sort, $order] = $this->buildTableParames();
+
+            $count = $this->modelClass
+                ->onlyTrashed()
+                ->where($where)
+                ->order($sort, $order)
+                ->count();
+
+            $data = $this->modelClass
+                ->onlyTrashed()
+                ->where($where)
+                ->order($sort, $order)
+                ->page($page, $limit)
+                ->select();
+            $result = ["code" => 0, 'count' => $count, 'data' => $data];
+            return json($result);
+        }
+        return $this->fetch();
+
+    }
+
+    /**
+     * 添加
+     */
+    public function add()
+    {
+        if ($this->request->isPost()) {
+            $params = $this->request->post("row/a");
+            if ($params) {
+                $params = $this->preExcludeFields($params);
+
+                if ($this->dataLimit && $this->dataLimitFieldAutoFill) {
+                    $params[$this->dataLimitField] = $this->auth->id;
+                }
+                $result = false;
+                Db::startTrans();
+                try {
+                    //是否采用模型验证
+                    if ($this->modelValidate) {
+                        $name     = str_replace("\\model\\", "\\validate\\", get_class($this->modelClass));
+                        $validate = is_bool($this->modelValidate) ? ($this->modelSceneValidate ? $name . '.add' : $name) : $this->modelValidate;
+                        $this->validateFailException(true)->validate($params, $validate);
+                    }
+                    $result = $this->modelClass->allowField(true)->save($params);
+                    Db::commit();
+                } catch (ValidateException | PDOException | Exception $e) {
+                    Db::rollback();
+                    $this->error($e->getMessage());
+                }
+                if ($result !== false) {
+                    $this->success('新增成功');
+                } else {
+                    $this->error('未插入任何行');
+                }
+            }
+            $this->error('参数不能为空');
+        }
+        return $this->fetch();
+    }
+
+    /**
+     * 编辑
+     */
+    public function edit()
+    {
+        $id  = $this->request->param('id/d', 0);
+        $row = $this->modelClass->get($id);
+        if (!$row) {
+            $this->error('记录未找到');
+        }
+        $adminIds = $this->getDataLimitAdminIds();
+        if (is_array($adminIds)) {
+            if (!in_array($row[$this->dataLimitField], $adminIds)) {
+                $this->error('你没有权限访问');
+            }
+        }
+        if ($this->request->isPost()) {
+            $params = $this->request->post("row/a");
+            if ($params) {
+                $params = $this->preExcludeFields($params);
+                $result = false;
+                Db::startTrans();
+                try {
+                    //是否采用模型验证
+                    if ($this->modelValidate) {
+                        $name     = str_replace("\\model\\", "\\validate\\", get_class($this->modelClass));
+                        $validate = is_bool($this->modelValidate) ? ($this->modelSceneValidate ? $name . '.edit' : $name) : $this->modelValidate;
+                        $this->validateFailException(true)->validate($params, $validate);
+                    }
+                    $result = $row->allowField(true)->save($params);
+                    Db::commit();
+                } catch (ValidateException | PDOException | Exception $e) {
+                    Db::rollback();
+                    $this->error($e->getMessage());
+                }
+                if ($result !== false) {
+                    $this->success('修改成功');
+                } else {
+                    $this->error('未更新任何行');
+                }
+            }
+            $this->error('参数不能为空');
+        }
+        $this->view->assign("data", $row);
+        return $this->fetch();
+    }
+
+    /**
+     * 删除
+     */
+    public function del()
+    {
+        if (false === $this->request->isPost()) {
+            $this->error('未知参数');
+        }
+        $ids = $this->request->param('id/a', null);
+        if (empty($ids)) {
+            $this->error('参数错误！');
+        }
+        if (!is_array($ids)) {
+            $ids = [0 => $ids];
+        }
+        $pk       = $this->modelClass->getPk();
+        $adminIds = $this->getDataLimitAdminIds();
+        $where    = [];
+        if (is_array($adminIds)) {
+            $where[] = [$this->dataLimitField, 'in', $adminIds];
+        }
+        $where[] = [$pk, 'in', $ids];
+        $list    = $this->modelClass->where($where)->select();
+        $count   = 0;
+        Db::startTrans();
+        try {
+            foreach ($list as $k => $v) {
+                $count += $v->delete();
+            }
+            Db::commit();
+        } catch (PDOException | Exception $e) {
+            Db::rollback();
+            $this->error($e->getMessage());
+        }
+        if ($count) {
+            $this->success("操作成功！");
+        }
+        $this->error('没有数据删除！');
+    }
+
+    /**
+     * 真实删除
+     */
+    public function destroy()
+    {
+        if (false === $this->request->isPost()) {
+            $this->error('未知参数');
+        }
+        $ids = $this->request->param('id/a', null);
+        if ($ids && !is_array($ids)) {
+            $ids = [0 => $ids];
+        }
+        $pk       = $this->modelClass->getPk();
+        $adminIds = $this->getDataLimitAdminIds();
+        $where    = [];
+        if (is_array($adminIds)) {
+            $where[] = [$this->dataLimitField, 'in', $adminIds];
+        }
+        if ($ids) {
+            $where[] = [$pk, 'in', $ids];
+        }
+        $count = 0;
+        Db::startTrans();
+        try {
+            $list = $this->modelClass->onlyTrashed()->where($where)->select();
+            foreach ($list as $item) {
+                $count += $item->delete(true);
+            }
+            Db::commit();
+        } catch (PDOException | Exception $e) {
+            Db::rollback();
+            $this->error($e->getMessage());
+        }
+        if ($count) {
+            $this->success("操作成功！");
+        }
+        $this->error('没有数据删除！');
+    }
+
+    /**
+     * 还原
+     */
+    public function restore()
+    {
+        if (false === $this->request->isPost()) {
+            $this->error('未知参数');
+        }
+        $ids = $this->request->param('id/a', null);
+        if ($ids && !is_array($ids)) {
+            $ids = [0 => $ids];
+        }
+        $pk       = $this->modelClass->getPk();
+        $adminIds = $this->getDataLimitAdminIds();
+        $where    = [];
+        if (is_array($adminIds)) {
+            $where[] = [$this->dataLimitField, 'in', $adminIds];
+        }
+        if ($ids) {
+            $where[] = [$pk, 'in', $ids];
+        }
+        $count = 0;
+        Db::startTrans();
+        try {
+            $list = $this->modelClass->onlyTrashed()->where($where)->select();
+            foreach ($list as $item) {
+                $count += $item->restore();
+            }
+            Db::commit();
+        } catch (PDOException | Exception $e) {
+            Db::rollback();
+            $this->error($e->getMessage());
+        }
+        if ($count) {
+            $this->success("操作成功！");
+        }
+        $this->error('未更新任何行');
+    }
+
+    /**
+     * 批量更新
+     */
+    public function multi()
+    {
+        if (false === $this->request->isPost()) {
+            $this->error('未知参数');
+        }
+        $ids = $this->request->param('id/a', null);
+        if (empty($ids)) {
+            $this->error('参数错误！');
+        }
+        if (!is_array($ids)) {
+            $ids = [0 => $ids];
+        }
+        $value = $this->request->param('value/d', 0);
+        if ($this->request->has('param')) {
+            $param = $this->request->param('param/s');
+            $param = $this->auth->isAdministrator() ? $param : (in_array($param, (is_array($this->multiFields) ? $this->multiFields : explode(',', $this->multiFields))) ? $param : '');
+            if ($param) {
+                $pk       = $this->modelClass->getPk();
+                $adminIds = $this->getDataLimitAdminIds();
+                $where    = [];
+                if (is_array($adminIds)) {
+                    $where[] = [$this->dataLimitField, 'in', $adminIds];
+                }
+                $where[] = [$pk, 'in', $ids];
+                $count   = 0;
+                Db::startTrans();
+                try {
+                    $list = $this->modelClass->where($where)->select();
+                    foreach ($list as $item) {
+                        $item->{$param} = $value;
+                        $count += $item->save();
+                    }
+                    Db::commit();
+                } catch (Exception $e) {
+                    Db::rollback();
+                    $this->error($e->getMessage());
+                }
+                if ($count) {
+                    $this->success("操作成功！");
+                }
+                $this->error('未更新任何行');
+            } else {
+                $this->error('你没有权限操作！');
+            }
+        }
+        $this->error('Param参数不能为空');
+    }
+
+}

application/admin/model/AdminUser.php

@@ -0,0 +1,42 @@
+<?php
+// +----------------------------------------------------------------------
+// | Yzncms [ 御宅男工作室 ]
+// +----------------------------------------------------------------------
+// | Copyright (c) 2018 http://yzncms.com All rights reserved.
+// +----------------------------------------------------------------------
+// | Licensed ( http://www.apache.org/licenses/LICENSE-2.0 )
+// +----------------------------------------------------------------------
+// | Author: 御宅男 <530765310@qq.com>
+// +----------------------------------------------------------------------
+
+// +----------------------------------------------------------------------
+// | 后台用户管理
+// +----------------------------------------------------------------------
+namespace app\admin\model;
+
+use think\Model;
+
+class AdminUser extends Model
+{
+    // 自动写入时间戳
+    protected $autoWriteTimestamp = true;
+    // 设置当前模型对应的完整数据表名称
+    protected $name   = 'admin';
+    protected $insert = ['status' => 1];
+
+    public function getLastLoginTimeAttr($value)
+    {
+        return date('Y-m-d H:i:s', $value);
+    }
+
+    public static function init()
+    {
+        self::beforeWrite(function ($row) {
+            $changed = $row->getChangedData();
+            //如果修改了用户或或密码则需要重新登录
+            if (isset($changed['username']) || isset($changed['password']) || isset($changed['salt'])) {
+                $row->token = '';
+            }
+        });
+    }
+}

application/admin/model/Adminlog.php

@@ -0,0 +1,120 @@
+<?php
+// +----------------------------------------------------------------------
+// | Yzncms [ 御宅男工作室 ]
+// +----------------------------------------------------------------------
+// | Copyright (c) 2018 http://yzncms.com All rights reserved.
+// +----------------------------------------------------------------------
+// | Licensed ( http://www.apache.org/licenses/LICENSE-2.0 )
+// +----------------------------------------------------------------------
+// | Author: 御宅男 <530765310@qq.com>
+// +----------------------------------------------------------------------
+
+// +----------------------------------------------------------------------
+// | 后台用户管理
+// +----------------------------------------------------------------------
+namespace app\admin\model;
+
+use app\admin\service\User;
+use think\Loader;
+use think\Model;
+
+class Adminlog extends Model
+{
+    protected $autoWriteTimestamp = true;
+    protected $updateTime         = false;
+
+    //自定义日志标题
+    protected static $title = '';
+    //自定义日志内容
+    protected static $content = '';
+    //忽略的链接正则列表
+    protected static $ignoreRegex = [
+        '/^(.*)\/(selectpage|index|logout)$/i',
+    ];
+
+    public static function setTitle($title)
+    {
+        self::$title = $title;
+    }
+
+    public static function setContent($content)
+    {
+        self::$content = $content;
+    }
+
+    public static function setIgnoreRegex($regex = [])
+    {
+        $regex             = is_array($regex) ? $regex : [$regex];
+        self::$ignoreRegex = array_merge(self::$ignoreRegex, $regex);
+    }
+
+    /**
+     * 记录日志
+     * @param string $title
+     * @param string $content
+     */
+    public static function record($title = '', $content = '')
+    {
+        $auth     = User::instance();
+        $admin_id = $auth->isLogin() ? $auth->id : 0;
+        $username = $auth->isLogin() ? $auth->username : '未知';
+
+        // 设置过滤函数
+        request()->filter('trim,strip_tags,htmlspecialchars');
+
+        $controllername = Loader::parseName(request()->controller());
+        $actionname     = strtolower(request()->action());
+        $path           = $controllername . '/' . $actionname;
+        if (self::$ignoreRegex) {
+            foreach (self::$ignoreRegex as $index => $item) {
+                if (preg_match($item, $path)) {
+                    return;
+                }
+            }
+        }
+        $content = $content ?: self::$content;
+        if (!$content) {
+            $content = request()->param('', null);
+            $content = self::getPureContent($content);
+        }
+        $title = $title ?: self::$title;
+        if (!$title) {
+            $controllerTitle = AuthRule::where('name', $controllername)->value('title');
+            $title           = AuthRule::where('name', $path)->value('title');
+            $title           = $title ?: '未知' . '(' . $actionname . ')';
+            $title           = $controllerTitle ? ($controllerTitle . '-' . $title) : $title;
+        }
+        self::create([
+            'title'     => $title,
+            'content'   => !is_scalar($content) ? json_encode($content, JSON_UNESCAPED_UNICODE) : $content,
+            'url'       => substr(xss_clean(strip_tags(request()->url())), 0, 1500),
+            'admin_id'  => $admin_id,
+            'username'  => $username,
+            'useragent' => substr(request()->server('HTTP_USER_AGENT'), 0, 255),
+            'ip'        => xss_clean(strip_tags(request()->ip())),
+        ]);
+    }
+
+    /**
+     * 获取已屏蔽关键信息的数据
+     * @param $content
+     * @return false|string
+     */
+    protected static function getPureContent($content)
+    {
+        if (!is_array($content)) {
+            return $content;
+        }
+        foreach ($content as $index => &$item) {
+            if (preg_match("/(password|salt|token)/i", $index)) {
+                $item = "***";
+            } else {
+                if (is_array($item)) {
+                    $item = self::getPureContent($item);
+                }
+            }
+        }
+        return $content;
+    }
+
+}

application/admin/model/AuthGroup.php

@@ -0,0 +1,64 @@
+<?php
+// +----------------------------------------------------------------------
+// | Yzncms [ 御宅男工作室 ]
+// +----------------------------------------------------------------------
+// | Copyright (c) 2007 http://yzncms.com All rights reserved.
+// +----------------------------------------------------------------------
+// | Licensed ( http://www.apache.org/licenses/LICENSE-2.0 )
+// +----------------------------------------------------------------------
+// | Author: 御宅男 <530765310@qq.com>
+// +----------------------------------------------------------------------
+
+namespace app\admin\model;
+
+use think\Db;
+use think\Exception;
+use think\Model;
+
+/**
+ * 用户组模型类
+ * Class AuthGroupModel
+ */
+class AuthGroup extends Model
+{
+    protected static $roleList = [];
+
+    public static function init()
+    {
+        self::beforeDelete(function ($row) {
+            if ($row->id == 1) {
+                throw new Exception("超级管理员角色不能被删除！");
+            }
+            $admin = Db::name('Admin')->where('roleid', $row->id)->find();
+            if ($admin) {
+                throw new Exception("该角色下有管理员！");
+            }
+            //子角色列表
+            $child = explode(',', self::getArrchildid($row->id));
+            if (count($child) > 1) {
+                throw new Exception("该角色下有子角色，请删除子角色才可以删除！");
+            }
+        });
+    }
+
+    /**
+     * 通过递归的方式获取该角色下的全部子角色
+     * @param type $id
+     * @return string
+     */
+    public static function getArrchildid($id)
+    {
+        if (empty(self::$roleList)) {
+            self::$roleList = self::order(["id" => "desc"])->column('*', 'id');
+        }
+        $arrchildid = $id;
+        if (is_array(self::$roleList)) {
+            foreach (self::$roleList as $k => $cat) {
+                if ($cat['parentid'] && $k != $id && $cat['parentid'] == $id) {
+                    $arrchildid .= ',' . self::getArrchildid($k);
+                }
+            }
+        }
+        return $arrchildid;
+    }
+}

application/admin/model/AuthRule.php

@@ -0,0 +1,34 @@
+<?php
+// +----------------------------------------------------------------------
+// | Yzncms [ 御宅男工作室 ]
+// +----------------------------------------------------------------------
+// | Copyright (c) 2007 http://yzncms.com All rights reserved.
+// +----------------------------------------------------------------------
+// | Licensed ( http://www.apache.org/licenses/LICENSE-2.0 )
+// +----------------------------------------------------------------------
+// | Author: 御宅男 <530765310@qq.com>
+// +----------------------------------------------------------------------
+
+namespace app\admin\Model;
+
+use think\Model;
+use think\facade\Cache;
+
+/**
+ * 权限规则模型
+ */
+class AuthRule extends Model
+{
+    const RULE_URL = 1;
+    const RULE_MAIN = 2; //主菜单
+
+    // 自动写入时间戳
+    protected $autoWriteTimestamp = true;
+
+    protected static function init()
+    {
+        self::afterWrite(function ($row) {
+            Cache::rm('__menu__');
+        });
+    }
+}

application/admin/model/Config.php

@@ -0,0 +1,98 @@
+<?php
+// +----------------------------------------------------------------------
+// | Yzncms [ 御宅男工作室 ]
+// +----------------------------------------------------------------------
+// | Copyright (c) 2018 http://yzncms.com All rights reserved.
+// +----------------------------------------------------------------------
+// | Licensed ( http://www.apache.org/licenses/LICENSE-2.0 )
+// +----------------------------------------------------------------------
+// | Author: 御宅男 <530765310@qq.com>
+// +----------------------------------------------------------------------
+
+// +----------------------------------------------------------------------
+// | 后台配置模型
+// +----------------------------------------------------------------------
+namespace app\admin\model;
+
+use think\Model;
+
+class Config extends Model
+{
+    // 追加属性
+    protected $append = [
+        'extend_html',
+    ];
+
+    // 自动写入时间戳
+    protected $autoWriteTimestamp = true;
+
+    public function getExtendHtmlAttr($value, $data)
+    {
+        $result = preg_replace_callback("/\{([a-zA-Z]+)\}/", function ($matches) use ($data) {
+            if (isset($data[$matches[1]])) {
+                return $data[$matches[1]];
+            }
+        }, $data['extend']);
+        return $result;
+    }
+
+    /**
+     * 刷新配置文件
+     */
+    public static function refreshFile()
+    {
+        $configs    = self::where('status', 1)->column('name,value,type,options');
+        $newConfigs = [];
+        foreach ($configs as $key => $value) {
+            if ($value['options'] != '') {
+                $value['options'] = parse_attr($value['options']);
+            }
+            switch ($value['type']) {
+                case 'array':
+                    $newConfigs[$key] = (array) json_decode($value['value'], true);
+                    break;
+                case 'select':
+                case 'radio':
+                    $newConfigs[$key] = $value['value'];
+                    if (isset($value['options'][$value['value']])) {
+                        $newConfigs[$key . '_text'] = $value['options'][$value['value']];
+                    } else {
+                        $newConfigs[$key . '_text'] = $value['value'];
+                    }
+                    //$newConfigs[$key] = isset($value['options'][$value['value']]) ? ['key' => $value['value'], 'value' => $value['options'][$value['value']]] : ['key' => $value['value'], 'value' => $value['value']];
+                    break;
+                case 'selects':
+                case 'checkbox':
+                    if (empty($value['value'])) {
+                        $newConfigs[$key] = [];
+                    } else {
+                        $valueArr = explode(',', $value['value']);
+                        foreach ($valueArr as $v) {
+                            if (isset($value['options'][$v])) {
+                                $newConfigs[$key][$v] = $value['options'][$v];
+                            } elseif ($v) {
+                                $newConfigs[$key][$v] = $v;
+                            }
+                        }
+                    }
+                    break;
+                case 'files':
+                case 'images':
+                    $newConfigs[$key] = empty($value['value']) ? [] : explode(',', $value['value']);
+                    break;
+                case 'Ueditor':
+                    $newConfigs[$key] = htmlspecialchars_decode($value['value']);
+                    break;
+                default:
+                    $newConfigs[$key] = $value['value'];
+                    break;
+            }
+        }
+        file_put_contents(
+            ROOT_PATH . 'config' . DS . 'site.php',
+            '<?php' . "\n\nreturn " . var_export_short($newConfigs) . ";\n"
+        );
+        return true;
+    }
+
+}

application/admin/model/ModelField.php

@@ -0,0 +1,49 @@
+<?php
+// +----------------------------------------------------------------------
+// | Yzncms [ 御宅男工作室 ]
+// +----------------------------------------------------------------------
+// | Copyright (c) 2018 http://yzncms.com All rights reserved.
+// +----------------------------------------------------------------------
+// | Licensed ( http://www.apache.org/licenses/LICENSE-2.0 )
+// +----------------------------------------------------------------------
+// | Author: 御宅男 <530765310@qq.com>
+// +----------------------------------------------------------------------
+
+// +----------------------------------------------------------------------
+// | 字段模型
+// +----------------------------------------------------------------------
+namespace app\admin\model;
+
+use think\Db;
+use think\Model;
+
+/**
+ * 字段模型
+ */
+class ModelField extends Model
+{
+
+    //生成模型字段缓存
+    public function model_field_cache()
+    {
+        $cache     = array();
+        $modelList = Db::name("Model")->select();
+        foreach ($modelList as $info) {
+            $data      = Db::name("ModelField")->where(array("modelid" => $info['id'], "status" => 1))->order('listorder DESC, id DESC')->select();
+            $fieldList = array();
+            if (!empty($data) && is_array($data)) {
+                foreach ($data as $rs) {
+                    //扩展配置
+                    if (!empty($rs['setting'])) {
+                        $rs = array_merge($rs, unserialize($rs['setting']));
+                    }
+                    $fieldList[$rs['name']] = $rs;
+                }
+            }
+            $cache[$info['id']] = $fieldList;
+        }
+        cache('ModelField', $cache);
+        return $cache;
+    }
+
+}

application/admin/model/Models.php

@@ -0,0 +1,60 @@
+<?php
+// +----------------------------------------------------------------------
+// | Yzncms [ 御宅男工作室 ]
+// +----------------------------------------------------------------------
+// | Copyright (c) 2018 http://yzncms.com All rights reserved.
+// +----------------------------------------------------------------------
+// | Licensed ( http://www.apache.org/licenses/LICENSE-2.0 )
+// +----------------------------------------------------------------------
+// | Author: 御宅男 <530765310@qq.com>
+// +----------------------------------------------------------------------
+
+// +----------------------------------------------------------------------
+// | 模型模型
+// +----------------------------------------------------------------------
+namespace app\admin\model;
+
+use think\Db;
+use \think\Model;
+
+/**
+ * 模型
+ */
+class Models extends Model
+{
+    protected $name = 'model';
+
+    /**
+     * 根据模型类型取得数据用于缓存
+     * @param type $type
+     * @return type
+     */
+    public function getModelAll($type = null, $module = null)
+    {
+        $where = array('status' => 1);
+        if (!is_null($type)) {
+            $where['type'] = $type;
+        }
+        if (!is_null($module)) {
+            $where['module'] = $module;
+        }
+        $data = Db::name('Model')->where($where)->select();
+        $Cache = array();
+        foreach ($data as $v) {
+            $Cache[$v['id']] = $v;
+        }
+        return $Cache;
+    }
+
+    /**
+     * 生成模型缓存，以模型ID为下标的数组
+     * @return boolean
+     */
+    public function model_cache()
+    {
+        $data = $this->getModelAll();
+        cache('Model', $data);
+        return $data;
+    }
+
+}

application/admin/service/User.php

@@ -0,0 +1,407 @@
+<?php
+// +----------------------------------------------------------------------
+// | Yzncms [ 御宅男工作室 ]
+// +----------------------------------------------------------------------
+// | Copyright (c) 2018 http://yzncms.com All rights reserved.
+// +----------------------------------------------------------------------
+// | Licensed ( http://www.apache.org/licenses/LICENSE-2.0 )
+// +----------------------------------------------------------------------
+// | Author: 御宅男 <530765310@qq.com>
+// +----------------------------------------------------------------------
+
+// +----------------------------------------------------------------------
+// |  后台用户服务
+// +----------------------------------------------------------------------
+namespace app\admin\service;
+
+use app\admin\model\AdminUser;
+use think\Db;
+use think\facade\Config;
+use think\facade\Cookie;
+use think\facade\Request;
+use think\facade\Session;
+use util\Random;
+use util\Tree;
+
+class User extends \libs\Auth
+{
+    //当前登录会员详细信息
+    protected $error   = '';
+    protected $logined = false; //登录状态
+
+    public function __construct()
+    {
+        parent::__construct();
+    }
+
+    public function __get($name)
+    {
+        return Session::get('admin.' . $name);
+    }
+
+    /**
+     * 取出当前管理员所拥有权限的分组.
+     *
+     * @param bool $withself 是否包含当前所在的分组
+     *
+     * @return array
+     */
+    public function getChildrenGroupIds($withself = false)
+    {
+        //取出当前管理员所有的分组
+        $groups   = $this->getGroups();
+        $groupIds = [];
+        foreach ($groups as $k => $v) {
+            $groupIds[] = $v['id'];
+        }
+        $originGroupIds = $groupIds;
+        foreach ($groups as $k => $v) {
+            if (in_array($v['parentid'], $originGroupIds)) {
+                $groupIds = array_diff($groupIds, [$v['id']]);
+                unset($groups[$k]);
+            }
+        }
+        // 取出所有分组
+        $groupList = \app\admin\model\AuthGroup::where('status', 1)->select()->toArray();
+        $objList   = [];
+        foreach ($groups as $k => $v) {
+            if ($v['rules'] === '*') {
+                $objList = $groupList;
+                break;
+            }
+            // 取出包含自己的所有子节点
+            $childrenList = Tree::instance()->init($groupList)->getChildren($v['id'], true);
+            $obj          = Tree::instance()->init($childrenList)->getTreeArray($v['parentid']);
+            $objList      = array_merge($objList, Tree::instance()->getTreeList($obj, 'title'));
+        }
+        $childrenGroupIds = [];
+        foreach ($objList as $k => $v) {
+            $childrenGroupIds[] = $v['id'];
+        }
+        if (!$withself) {
+            $childrenGroupIds = array_diff($childrenGroupIds, $groupIds);
+        }
+        return $childrenGroupIds;
+    }
+
+    public function check($name, $uid = '', $mode = 'url', $relation = 'or')
+    {
+        $uid = $uid ? $uid : $this->id;
+        return parent::check($name, $uid, $mode, $relation);
+    }
+
+    /**
+     * 取出当前管理员所拥有权限的管理员.
+     *
+     * @param bool $withself 是否包含自身
+     *
+     * @return array
+     */
+    public function getChildrenAdminIds($withself = false)
+    {
+        $childrenAdminIds = [];
+        if (!$this->isAdministrator()) {
+            $groupIds         = $this->getChildrenGroupIds(false);
+            $childrenAdminIds = Db::name('Admin')->where('roleid', 'in', $groupIds)->column('id');
+        } else {
+            //超级管理员拥有所有人的权限
+            $childrenAdminIds = Db::name('Admin')->column('id');
+        }
+        if ($withself) {
+            if (!in_array($this->id, $childrenAdminIds)) {
+                $childrenAdminIds[] = $this->id;
+            }
+        } else {
+            $childrenAdminIds = array_diff($childrenAdminIds, [$this->id]);
+        }
+        return $childrenAdminIds;
+    }
+
+    public function getGroups($uid = null)
+    {
+        $uid = is_null($uid) ? $this->id : $uid;
+        return parent::getGroups($uid);
+    }
+
+    public function getAuthList($uid = null)
+    {
+        $uid = is_null($uid) ? $this->id : $uid;
+        return parent::getAuthList($uid);
+    }
+
+    public function getRuleIds($uid = null)
+    {
+        $uid = is_null($uid) ? $this->id : $uid;
+        return parent::getRuleIds($uid);
+    }
+
+    /**
+     * 用户登录
+     * @param string $username 用户名
+     * @param string $password 密码
+     * @return bool|mixed
+     */
+    public function login($username = '', $password = '', $keeptime = 0)
+    {
+        $username = trim($username);
+        $password = trim($password);
+        $admin    = AdminUser::get(['username' => $username]);
+        if (!$admin) {
+            $this->setError('用户名不正确');
+            return false;
+        }
+        if ($admin['status'] !== 1) {
+            $this->setError('管理员已经被禁止登录');
+            return false;
+        }
+        if (Config::get('login_failure_retry') && $admin->login_failure >= 10 && time() - $admin->getData('update_time') < 86400) {
+            $this->setError('请于1天后再尝试登录');
+            return false;
+        }
+        if ($admin->password != encrypt_password($password, $admin->encrypt)) {
+            $admin->login_failure++;
+            $admin->save();
+            $this->setError('密码不正确');
+            return false;
+        }
+        $admin->login_failure   = 0;
+        $admin->last_login_time = time();
+        $admin->last_login_ip   = request()->ip();
+        $admin->token           = Random::uuid();
+        $admin->save();
+        Session::set("admin", $admin->toArray());
+        Session::set("admin.safecode", $this->getEncryptSafecode($admin));
+        $this->keeplogin($admin, $keeptime);
+        return true;
+    }
+
+    /**
+     * 刷新保持登录的Cookie
+     *
+     * @param int $keeptime
+     * @return  boolean
+     */
+    protected function keeplogin($admin, $keeptime = 0)
+    {
+        if ($keeptime) {
+            $expiretime = time() + $keeptime;
+            $key        = $this->getKeeploginKey($admin, $keeptime, $expiretime);
+            Cookie::set('keeplogin', implode('|', [$admin['id'], $keeptime, $expiretime, $key]), $keeptime);
+            return true;
+        }
+        return false;
+    }
+
+    /**
+     * 自动登录
+     * @return boolean
+     */
+    public function autologin()
+    {
+        $keeplogin = Cookie::get('keeplogin');
+        if (!$keeplogin) {
+            return false;
+        }
+        list($id, $keeptime, $expiretime, $key) = explode('|', $keeplogin);
+        if ($id && $keeptime && $expiretime && $key && $expiretime > time()) {
+            $admin = AdminUser::get($id);
+            if (!$admin || !$admin->token) {
+                return false;
+            }
+            //token有变更
+            if ($key != $this->getKeeploginKey($admin, $keeptime, $expiretime)) {
+                return false;
+            }
+            $ip = request()->ip();
+            //IP有变动
+            if ($admin->last_login_ip != $ip) {
+                return false;
+            }
+            Session::set("admin", $admin->toArray());
+            Session::set("admin.safecode", $this->getEncryptSafecode($admin));
+            //刷新自动登录的时效
+            $this->keeplogin($admin, $keeptime);
+            return true;
+        } else {
+            return false;
+        }
+    }
+
+    /**
+     * 检验用户是否已经登陆
+     * @return boolean 失败返回false，成功返回当前登陆用户基本信息
+     */
+    public function isLogin()
+    {
+        if ($this->logined) {
+            return true;
+        }
+        $admin = Session::get('admin');
+        if (!$admin) {
+            return false;
+        }
+        $my = AdminUser::get($admin['id']);
+        if (!$my) {
+            return false;
+        }
+        //校验安全码，可用于判断关键信息发生了变更需要重新登录
+        if (!isset($admin['safecode']) || $this->getEncryptSafecode($my) !== $admin['safecode']) {
+            $this->logout();
+            return false;
+        }
+        //判断是否同一时间同一账号只能在一个地方登录
+        if (Config::get('login_unique')) {
+            if ($my['token'] != $admin['token']) {
+                $this->logout();
+                return false;
+            }
+        }
+        //判断管理员IP是否变动
+        if (Config::get('loginip_check')) {
+            if (!isset($admin['last_login_ip']) || $admin['last_login_ip'] != request()->ip()) {
+                $this->logout();
+                return false;
+            }
+        }
+        $this->logined = true;
+        return true;
+    }
+
+    /**
+     * 检查当前用户是否超级管理员
+     * @return boolean
+     */
+    public function isAdministrator()
+    {
+        return in_array('*', $this->getRuleIds()) ? true : false;
+    }
+
+    /**
+     * 获取自动登录Key
+     * @param $params
+     * @param $keeptime
+     * @param $expiretime
+     * @return string
+     */
+    public function getKeeploginKey($params, $keeptime, $expiretime)
+    {
+        $key = md5(md5($params['id']) . md5($keeptime) . md5($expiretime) . $params['token'] . Config::get('token.key'));
+        return $key;
+    }
+
+    /**
+     * 获取加密后的安全码
+     * @param $params
+     * @return string
+     */
+    public function getEncryptSafecode($params)
+    {
+        return md5(md5($params['username']) . md5(substr($params['password'], 0, 6)) . Config::get('token.key'));
+    }
+
+    /**
+     * 检测当前控制器和方法是否匹配传递的数组
+     *
+     * @param array $arr 需要验证权限的数组
+     * @return bool
+     */
+    public function match($arr = [])
+    {
+        $request = Request::instance();
+        $arr     = is_array($arr) ? $arr : explode(',', $arr);
+        if (!$arr) {
+            return false;
+        }
+
+        $arr = array_map('strtolower', $arr);
+        // 是否存在
+        if (in_array(strtolower($request->action()), $arr) || in_array('*', $arr)) {
+            return true;
+        }
+
+        // 没找到匹配
+        return false;
+    }
+
+    /**
+     * 注销登录
+     */
+    public function logout()
+    {
+        $admin = AdminUser::get(intval($this->id));
+        if ($admin) {
+            $admin->token = '';
+            $admin->save();
+        }
+        $this->logined = false; //重置登录状态
+        Session::delete("admin");
+        Cookie::delete("keeplogin");
+        return true;
+    }
+
+    public function getSidebar()
+    {
+        $module = request()->module();
+        // 读取管理员当前拥有的权限节点
+        $userRule = $this->getAuthList();
+        // 必须将结果集转换为数组
+        $ruleList = \app\admin\model\AuthRule::where('status', 1)
+            ->where('ismenu', 1)
+            ->order('listorder', 'desc')
+            ->cache("__menu__")
+            ->select()->toArray();
+        $indexRuleList = \app\admin\model\AuthRule::where('status', 1)
+            ->where('ismenu', 0)
+            ->where('name', 'like', '%/index')
+            ->column('name,parentid');
+        $pidArr = array_unique(array_filter(array_column($ruleList, 'parentid')));
+        foreach ($ruleList as $k => &$v) {
+            if (!in_array($v['name'], $userRule)) {
+                unset($ruleList[$k]);
+                continue;
+            }
+            $indexRuleName = $v['name'] . '/index';
+            if (isset($indexRuleList[$indexRuleName]) && !in_array($indexRuleName, $userRule)) {
+                unset($ruleList[$k]);
+                continue;
+            }
+            $v['openType'] = $v['menutype']; //兼容前端
+            $v['type']     = $v['ismenu']; //兼容前端
+            $v['href']     = isset($v['url']) && $v['url'] ? $v['url'] : '/' . $module . '/' . $v['name'];
+            $v['href']     = preg_match("/^((?:[a-z]+:)?\/\/|data:image\/)(.*)/i", $v['href']) ? $v['href'] : url($v['href']);
+        }
+        $lastArr    = array_unique(array_filter(array_column($ruleList, 'parentid')));
+        $pidDiffArr = array_diff($pidArr, $lastArr);
+        foreach ($ruleList as $index => $item) {
+            if (in_array($item['id'], $pidDiffArr)) {
+                unset($ruleList[$index]);
+            }
+        }
+        // 构造菜单数据
+        Tree::instance()->init($ruleList);
+        return Tree::instance()->getTreeArray(0);
+    }
+
+    /**
+     * 获取错误信息
+     * @access public
+     * @return mixed
+     */
+    public function getError()
+    {
+        return $this->error ? $this->error : '';
+    }
+
+    /**
+     * 设置错误信息
+     *
+     * @param string $error 错误信息
+     * @return Auth
+     */
+    public function setError($error)
+    {
+        $this->error = $error;
+        return $this;
+    }
+
+}

application/admin/tags.php

@@ -0,0 +1,18 @@
+<?php
+// +----------------------------------------------------------------------
+// | ThinkPHP [ WE CAN DO IT JUST THINK ]
+// +----------------------------------------------------------------------
+// | Copyright (c) 2006~2018 http://thinkphp.cn All rights reserved.
+// +----------------------------------------------------------------------
+// | Licensed ( http://www.apache.org/licenses/LICENSE-2.0 )
+// +----------------------------------------------------------------------
+// | Author: liu21st <liu21st@gmail.com>
+// +----------------------------------------------------------------------
+
+// 应用行为扩展定义文件
+return [
+    // 应用结束
+    'app_end' => [
+        'app\\admin\\behavior\\Adminlog',
+    ],
+];

application/admin/validate/AdminUser.php

@@ -0,0 +1,44 @@
+<?php
+// +----------------------------------------------------------------------
+// | Yzncms [ 御宅男工作室 ]
+// +----------------------------------------------------------------------
+// | Copyright (c) 2018 http://yzncms.com All rights reserved.
+// +----------------------------------------------------------------------
+// | Licensed ( http://www.apache.org/licenses/LICENSE-2.0 )
+// +----------------------------------------------------------------------
+// | Author: 御宅男 <530765310@qq.com>
+// +----------------------------------------------------------------------
+
+// +----------------------------------------------------------------------
+// | 登录验证
+// +----------------------------------------------------------------------
+namespace app\admin\validate;
+
+use think\Validate;
+
+class AdminUser extends Validate
+{
+
+    //定义验证规则
+    protected $rule = [
+        'username|用户名' => 'unique:admin|require|alphaDash|length:3,20',
+        'password|密码'  => 'require|length:3,20|confirm',
+        'email|邮箱'     => 'email|unique:admin',
+        'mobile|手机'    => 'mobile|unique:admin',
+        'roleid|权限组'   => 'require',
+    ];
+
+    // 登录验证场景定义
+    public function sceneUpdate()
+    {
+        return $this->only(['username', 'password', 'email', 'mobile', 'roleid'])
+            ->remove('password', 'require');
+    }
+
+    //定义验证场景
+    protected $scene = [
+        'insert' => ['username', 'password', 'email', 'roleid', 'mobile'],
+
+    ];
+
+}

application/admin/validate/AuthGroup.php

@@ -0,0 +1,36 @@
+<?php
+// +----------------------------------------------------------------------
+// | Yzncms [ 御宅男工作室 ]
+// +----------------------------------------------------------------------
+// | Copyright (c) 2007 http://yzncms.com All rights reserved.
+// +----------------------------------------------------------------------
+// | Licensed ( http://www.apache.org/licenses/LICENSE-2.0 )
+// +----------------------------------------------------------------------
+// | Author: 御宅男 <530765310@qq.com>
+// +----------------------------------------------------------------------
+namespace app\admin\validate;
+
+use \think\Validate;
+
+/**
+ * 用户组验证器
+ */
+class AuthGroup extends Validate
+{
+    //定义验证规则
+    protected $rule = [
+        'title' => 'require',
+
+    ];
+
+    //定义验证提示
+    protected $message = [
+        'title.require' => '用户组名称不得为空',
+
+    ];
+
+    //定义验证场景
+    protected $scene = [
+
+    ];
+}

application/admin/validate/AuthRule.php

@@ -0,0 +1,27 @@
+<?php
+// +----------------------------------------------------------------------
+// | Yzncms [ 御宅男工作室 ]
+// +----------------------------------------------------------------------
+// | Copyright (c) 2007 http://yzncms.com All rights reserved.
+// +----------------------------------------------------------------------
+// | Licensed ( http://www.apache.org/licenses/LICENSE-2.0 )
+// +----------------------------------------------------------------------
+// | Author: 御宅男 <530765310@qq.com>
+// +----------------------------------------------------------------------
+namespace app\admin\validate;
+
+use think\Validate;
+
+/**
+ * 菜单验证器
+ */
+class AuthRule extends Validate
+{
+    //定义验证规则
+    protected $rule = [
+        'parentid|上级菜单'  => 'require|number',
+        'name|规则'       => 'require|unique:AuthRule',
+        'title|标题'       => 'require',
+    ];
+
+}

application/admin/validate/Config.php

@@ -0,0 +1,29 @@
+<?php
+// +----------------------------------------------------------------------
+// | Yzncms [ 御宅男工作室 ]
+// +----------------------------------------------------------------------
+// | Copyright (c) 2018 http://yzncms.com All rights reserved.
+// +----------------------------------------------------------------------
+// | Licensed ( http://www.apache.org/licenses/LICENSE-2.0 )
+// +----------------------------------------------------------------------
+// | Author: 御宅男 <530765310@qq.com>
+// +----------------------------------------------------------------------
+
+// +----------------------------------------------------------------------
+// | 登录验证
+// +----------------------------------------------------------------------
+namespace app\admin\validate;
+
+use think\Validate;
+
+class Config extends Validate
+{
+    //定义验证规则
+    protected $rule = [
+        'group|配置分组' => 'require',
+        'type|配置类型' => 'require|alpha',
+        'title|配置标题' => 'require|chsAlphaNum',
+        'name|配置名称' => 'require|regex:^[a-zA-Z]\w{0,39}$|unique:config',
+        'listorder|排序' => 'number',
+    ];
+}

application/admin/view/addons/config.html

@@ -0,0 +1,132 @@
+{extend name="admin@index_layout"/}
+{block name="main"}
+<form class="layui-form" action="" method="post" data-field="config">
+    {if $data.tips  && $data.tips.value}
+    <div class="alert alert-info-light" style="margin-bottom:10px;">
+        {if $data.tips.title}
+        <b>{$data.tips.title}</b><br>
+        {/if}
+        {$data.tips.value|raw}
+    </div>
+    {/if}
+
+    {foreach name="data['config']" item="form" key="o_key"}
+    <div data-favisible="{$form.visible|default=''}">
+        <div class="layui-form-item">
+            <label class="layui-form-label">{$form.title}</label>
+            {switch name="form.type"}
+                {case value="text"}
+                <div class="layui-input-block">
+                    <input {$form.extend|raw} type="text" name="config[{$form.name}]" placeholder="请输入{$form.title}" autocomplete="off" class="layui-input" value="{$form.value}">
+                </div>
+                {/case}
+
+                {case value="password"}
+                <div class="layui-input-block">
+                    <input {$form.extend|raw} type="password" name="config[{$form.name}]" placeholder="请输入{$form.title}" autocomplete="off" class="layui-input" value="{$form.value}">
+                </div>
+                {/case}
+
+                {case value="array"}
+                <dl {$form.extend|raw} class="layui-input-block fieldlist" data-name="config[{$form.name}]" data-id="{$form.name}">
+                    <dd>
+                        <ins>键名</ins>
+                        <ins>键值</ins>
+                    </dd>
+                    <dd><button type="button" class="layui-btn btn-append">追加</button></dd>
+                    <textarea name="config[{$form.name}]" class="layui-textarea layui-hide">{$form.value|json_encode}</textarea>
+                </dl>
+                <script type="text/html" id="{$form.name}Tpl">
+                    <dd class="layui-form-item rules-item">
+                    {{# layui.each(d.lists, function(index, item) { }}
+                	    <input type="text" class="layui-input" name="{{item.name}}[{{item.index}}][key]" placeholder="键" value="{{item.key|| ''}}" />
+                	    <input type="text" class="layui-input" name="{{item.name}}[{{item.index}}][value]" placeholder="值" value="{{item.value|| ''}}" />
+                	    <button type="button" class="layui-btn layui-btn-danger btn-remove layui-btn-xs"><i class="iconfont icon-close"></i></button>
+                	    <button type="button" class="layui-btn btn-dragsort layui-btn-xs"><i class="iconfont icon-yidong"></i></button>
+                    {{# }); }}
+                    </dd>
+                </script>
+                {/case}
+
+                {case value="checkbox"}
+                <div class="layui-input-block">
+                    {foreach name="form.options" item="opt" key="opt_k"}
+                    <input type="checkbox" name="config[{$form.name}][]" lay-skin="primary" title="{$opt}" value="{$opt_k}" {in name="opt_k" value="$form.value|default=''"} checked{/in}>
+                    {/foreach}
+                </div>
+                {/case}
+
+                {case value="radio"}
+                <div class="layui-input-block">
+                    {foreach name="form.options" item="opt" key="opt_k"}
+                    <input type="radio" name="config[{$form.name}]" value="{$opt_k}" title="{$opt}" {eq name="form.value" value="$opt_k"} checked{/eq}>
+                    {/foreach}
+                </div>
+                {/case}
+
+                {case value="select"}
+                <div class="layui-input-block">
+                    <select name="config[{$form.name}]">
+                        <option value=""></option>
+                        {foreach name="form.options" item="opt" key="opt_k"}
+                        <option value="{$opt_k}" {eq name="form.value" value="$opt_k"}selected{/eq}>{$opt}</option>
+                        {/foreach}
+                    </select>
+                </div>
+                {/case}
+
+                {case value="textarea"}
+                <div class="layui-input-block">
+                    <textarea {$form.extend|raw} placeholder="请输入{$form.title}" class="layui-textarea" name="config[{$form.name}]">{$form.value}</textarea>
+                </div>
+                {/case}
+
+                {case value="image" break="0"}{/case}
+                {case value="images"}
+                <div class="layui-input-block">
+                    <div class="layui-col-xs4">
+                        <input type="text" name="config[{$form.name}]"  id="c-{$form.name}" value="{$form.value|default=''}" class="layui-input">
+                    </div>
+                    <button type="button" class="layui-btn faupload" id="faupload-{$form.name}" data-multiple="{$form.type=='image'?'false':'true'}" data-input-id="c-{$form.name}" data-preview-id="p-{$form.name}" data-type="image"><i class="layui-icon layui-icon-upload"></i> 上传</button><button type="button" class="layui-btn fachoose" data-multiple="{$form.type=='image'?'false':'true'}" data-input-id="c-{$form.name}" id="fachoose-c-{$form.name}"><i class="iconfont icon-other"></i> 选择</button>
+                    <ul class="layui-row list-inline plupload-preview" id="p-{$form.name}"></ul>
+                </div>
+                {/case}
+
+                {case value="file" break="0"}{/case}
+                {case value="files"}
+                <div class="layui-input-block">
+                    <div class="layui-col-xs4">
+                        <input type="text" name="config[{$form.name}]"  id="c-{$form.name}" value="{$form.value|default=''}" class="layui-input">
+                    </div>
+                    <button type="button" class="layui-btn faupload" id="faupload-{$form.name}" data-multiple="{$form.type=='file'?'false':'true'}" data-input-id="c-{$form.name}" data-preview-id="p-{$form.name}" data-type="file"><i class="layui-icon layui-icon-upload"></i> 上传</button>
+                </div>
+                {/case}
+
+                {case value="Ueditor"}
+                <div class="layui-input-block">
+                    <script {$form.extend|raw} type="text/plain" class="js-ueditor" id="{$form.name}" name="config[{$form.name}]">{$form.value|raw}</script>
+                </div>
+                {/case}
+            {/switch}
+            {if isset($form.tip) && $form.tip}<div class="layui-form-mid no-float layui-word-aux">{$form.tip|raw}</div>{/if}
+        </div>
+    </div>
+    {/foreach}
+
+    <div class="layui-form-item layer-footer">
+        <div class="layui-input-block">
+            <button class="layui-btn" lay-submit data-refresh="false">立即提交</button>
+            <button type="reset" class="layui-btn layui-btn-primary">重置</button>
+        </div>
+    </div>
+</form>
+{/block}
+{block name="script"}
+<script type="text/javascript">
+layui.use('yznForm', function() {
+    var yznForm = layui.yznForm;
+
+    yznForm.bindevent($("form.layui-form"));
+});
+</script>
+{/block}

application/admin/view/addons/index.html

@@ -0,0 +1,688 @@
+{extend name="admin@index_layout"/}
+{block name="main"}
+<style type="text/css">
+.releasetips {position: relative;}
+.releasetips i {display: block;background: #f00;border-radius: 50%;width: 0.3em;height: 0.3em;top: 0px;right: -8px;position: absolute;box-shadow: 0px 0px 2px #f11414;}
+</style>
+<div class="alert alert-info-light">
+    <b>温馨提示</b><br>
+    1、插件在线安装，升级和购买需要注册YznCMS官网账号,请点击下方【会员信息】，点击【注册】按钮<br>
+    2、点击插件名称可查看详情，截图和日志等信息
+</div>
+{if $type=='online'}
+<div class="layui-tab layui-tab-card" lay-filter="tabswitch" style="box-shadow: none;">
+    <ul class="layui-tab-title nav-category">
+        <li class="layui-this" data-id="">全部</li>
+    </ul>
+</div>
+{/if}
+<input type="hidden" name="category_id" value="0">
+<div class="layui-card">
+    <div class="layui-card-header">插件管理</div>
+    <div class="layui-card-body">
+        <table class="layui-hide" id="currentTable" lay-filter="currentTable"></table>
+    </div>
+</div>
+
+<script type="text/html" id="titleTpl">
+    <div>
+    {{#  if(d.url){ }}
+        {{#  if(d.name != 'recommend' ){ }}
+        <a href="javascript:;" data-open="{{d.url}}" lay-tips="查看插件介绍和帮助" title="插件详情">{{= d.title }}</a>
+        {{#  } else { }}
+        <a href="{{= d.url}}" target="_blank" lay-tips="查看插件介绍和帮助">{{= d.title }}</a>
+        {{#  } }}
+    {{#  } else { }}
+        <a href="javascript:;">{{= d.title }}</a>
+    {{#  } }}
+    </div>
+</script>
+
+<script type="text/html" id="operateTpl">
+{{#  if(d.addon){ }}
+    {{# if(d.addon.version!=d.version){ }}
+        {{# if(typeof d.releaselist !="undefined" && d.releaselist.length>1){ }}
+        <a class="layui-btn layui-btn-xs layui-btn-normal" data-name="{{d.name}}" data-version="{{d.version}}" data-title="{{d.title}}"  data-value="{{= JSON.stringify(d.releaselist)}}" lay-event="upgrade">升级 <i class="layui-icon layui-icon-down"></i></a>
+        {{# }else if(typeof d.releaselist !="undefined" && d.releaselist.length>0){ }}
+        <a class="layui-btn layui-btn-xs layui-btn-normal btn-upgrade" data-name="{{d.name}}" data-version="{{d.version}}" data-title="{{d.title}}">升级</a>
+        {{#  } }}
+    {{#  } }}
+
+    {{#  if(d.addon.config == 1 ){ }}
+    <a class="layui-btn layui-btn-xs" data-open='{:url("config")}?name={{d.name}}' title="插件设置 -【{{d.title}}】">设置</a>
+    {{#  } }}
+
+    <a class="layui-btn layui-btn-xs layui-btn-danger btn-uninstall" data-name="{{d.name}}" data-status="{{d.addon.status}}"  data-title="确定卸载【{{d.title}}】，进行该操作？" confirm>卸载</a>
+{{#  } else { }}
+    {{# if(typeof d.releaselist !="undefined" && d.releaselist.length>1){ }}
+    <a class="layui-btn layui-btn-xs" data-name="{{d.name}}" data-version="{{d.version}}" data-title="确定安装【{{d.title}}】，进行该操作？"  data-value="{{= JSON.stringify(d.releaselist)}}" lay-event="install">安装 <i class="layui-icon layui-icon-down"></i></a>
+    {{# }else if(typeof d.releaselist !="undefined" && d.releaselist.length>0){ }}
+    <a class="layui-btn layui-btn-xs btn-install" data-name="{{d.name}}" data-version="{{d.version}}" data-title="确定安装【{{d.title}}】，进行该操作？">安装</a>
+    {{#  } }}
+
+    {{# if(d.button){ }}
+        <a href="{{d.url}}" class="layui-btn layui-btn-xs layui-btn-normal" target="_blank">
+            {{d.button}}
+        </a>
+    {{#  } }}
+{{#  } }}
+</script>
+
+<script id="statusTpl" type="text/html">
+{{#  if(d.addon){ }}
+    <input type="checkbox" value="{{= d.id }}" title="启用|禁用" lay-skin="switch" lay-filter="templet-status" data-name="{{d.name}}" data-action="{{= d.addon.status == 1 ? "disable" : "enable"}}" {{= d.addon.status == 1 ? "checked" : "" }}>
+{{#  } }} 
+</script>
+
+<script id="conflicttpl" type="text/html">
+    <div class="alert alert-danger-light">
+        <strong>温馨提示</strong><br>
+        此插件中发现和现有系统中部分文件发现冲突！以下文件将会被影响，请备份好相关文件后再继续操作
+    </div>
+    <table class="layui-table">
+        <thead>
+        <tr>
+            <th>#</th>
+            <th>文件</th>
+        </tr>
+        </thead>
+        <tbody>
+        {{# for(var i=0;i < d.list.conflictlist.length;i++){ }}
+        <tr>
+            <th scope="row">{{i+1}}</th>
+            <td>{{d.list.conflictlist[i]}}</td>
+        </tr>
+        {{#  }; }}
+        </tbody>
+    </table>
+</script>
+
+<script id="uninstalltpl" type="text/html">
+    <div class="">
+        <div class="">{{ d.title }}
+            <p class="text-danger">卸载将会删除所有插件文件且不可找回!!! </p>
+            {if config('app_debug')}
+            <p class="text-danger"><input type="checkbox" name="droptables" id="droptables" data-name="{{ d.name }}"/> 删除所有插件相关数据表且不可找回!!! </p>
+            {/if}
+            <p class="text-danger">如有重要数据请备份后再操作!!!</p>
+        </div>
+    </div>
+</script>
+
+<script id="logintpl" type="text/html">
+    <div>
+        <form class="layui-form">
+            <div class="alert alert-danger-light">
+                <strong>温馨提示</strong><br/>此处登录账号为<a href="https://www.yzncms.com" target="_blank">Yzncms官网账号</a>
+            </div>
+            <div class="layui-form-item">
+                <div class="layui-input-wrap">
+                    <div class="layui-input-prefix">
+                      <i class="layui-icon layui-icon-username"></i>
+                    </div>
+                    <input type="text" class="layui-input" id="inputAccount" value="" autocomplete="off" placeholder="你的手机号、用户名或邮箱">
+
+                </div>
+            </div>
+            <div class="layui-form-item">
+                <div class="layui-input-wrap">
+                    <div class="layui-input-prefix">
+                      <i class="layui-icon layui-icon-password"></i>
+                    </div>
+                    <input type="password" class="layui-input" id="inputPassword" value="" autocomplete="off" lay-affix="eye" placeholder="你的密码">
+
+                </div>
+            </div>
+        </form>
+    </div>
+</script>
+
+<script id="userinfotpl" type="text/html">
+    <div>
+        <form class="form-horizontal form-userinfo">
+            <div class="alert alert-dismissable alert-info-light">
+                <strong>温馨提示</strong><br/>你好！{{d.username}}<br />当前你已经登录，将同步保存你的购买记录
+            </div>
+        </form>
+    </div>
+</script>
+{/block}
+{block name="script"}
+<script>
+layui.use(['yznTable','table','laytpl','yzn','notice','element','dropdown','form','yznUpload'], function() {
+    var yznTable = layui.yznTable,
+        $ = layui.$,
+        table = layui.table,
+        laytpl = layui.laytpl,
+        yzn = layui.yzn,
+        notice = layui.notice,
+        element = layui.element,
+        dropdown = layui.dropdown,
+        form = layui.form,
+        yznUpload = layui.yznUpload;
+
+    var init = {
+        table_elem: '#currentTable',
+        table_render_id: 'currentTable',
+        layFilter: 'currentTable_LayFilter',
+    };
+
+    var area = [$(window).width() > 800 ? '800px' : '95%', $(window).height() > 600 ? '600px' : '95%'];
+
+    var switch_local = function () {
+        layer.confirm('插件市场暂不可用，是否切换到本地插件？', {
+            title: '温馨提示',
+            btn: ['切换到本地插件', '重新尝试加载']
+        }, function (index) {
+            layer.close(index);
+            $(".btn-switch[data-type='local']")[0].click();
+        }, function (index) {
+            layer.close(index);
+            table.reload(init.table_render_id);
+        });
+        return false;
+    };
+
+    yznTable.render({
+        init: init,
+        toolbar: ['refresh',
+            [{
+                html:'<a id="faupload-addon" class="layui-btn layui-btn-sm faupload" data-url="{:url("local")}" data-chunking="false" data-mimetype="zip" data-multiple="false"><i class="iconfont icon-upload-fill"></i>&nbsp;本地安装</a>'
+             },{
+                html:'<a class="layui-btn {if $type=='online'}layui-btn-normal{else}layui-btn-primary layui-border-blue{/if} layui-btn-sm btn-switch" data-type="all" href="{:url("index")}" style="margin-left: 10px !important;"><i class="iconfont icon-other"></i>&nbsp;全部</a>'
+             },{
+                html:'<a class="layui-btn {if $type=='local'}layui-btn-normal{else}layui-btn-primary layui-border-blue{/if} layui-btn-sm btn-switch" data-type="local" href="{:url("index",["type"=>"local"])}"><i class="iconfont icon-manage"></i>&nbsp;本地插件</a>'
+             },{
+                html:'<a class="layui-btn layui-bg-black layui-btn-sm btn-userinfo" style="margin-left: 10px !important;" href="javascript:;"><i class="iconfont icon-user-line"></i>&nbsp;会员信息</a>'
+             }
+            ],
+        ],
+        url: '{:url("index",["type"=>$type])}',
+        css :'.layui-table-tool-temp{padding-right: 85px;}',
+        showSearch:false,
+        cols: [
+            [
+                { field: 'title', width: 200, title: '名称',templet: '#titleTpl'},
+                { field: 'name', width: 150, title: '标识' },
+                { field: 'description', title: '描述' },
+                { field: 'author', width: 90, title: '作者' },
+                {if $type == 'online'}
+                { field: 'price', width: 95, title: '价格' , templet: function(d){
+                    if (isNaN(d.price)) {
+                        return d.price;
+                    }
+                    return parseFloat(d.price) == 0 ? '<span class="text-success">' + '免费' + '</span>' : '<span class="text-danger">￥' + d.price + '</span>';
+                }},
+                { field: 'downloads', width: 90, title: '下载' },
+                {/if}
+                { field: 'version', width: 80, title: '版本',templet: function(d){
+                    return d.addon && d.addon.version != d.version ? '<a href="javascript:;"><span class="releasetips text-primary" lay-tips="发现新版本:'+d.version+'">' + d.addon.version + '<i></i></span></a>' : d.version;
+                }},
+                { field: 'status', width: 90, title: '状态', templet: '#statusTpl' },
+                { fixed: 'right', width: 180, title: '操作', templet: '#operateTpl' }
+            ]
+        ],
+        page: {limit:20},
+        before(){
+          let userinfo = yzn.cache.getStorage('yzncms_userinfo');
+
+          this.where.uid = userinfo ? userinfo.id : '';
+          this.where.token = userinfo ? userinfo.token : '';
+          this.where.category_id = $('input[name="category_id"]').val();
+        },
+        done: function(res, curr, count){
+            if (res && typeof res.category != 'undefined' && $(".nav-category li").length == 1) {
+                $.each(res.category, function (i, j) {
+                    $("<li data-id='" + j.id + "'>" + j.title + "</li>").insertAfter($(".nav-category li:first"));
+                });
+            }
+            if(count==-1){
+                switch_local();
+            }
+            yznUpload.api.upload("#faupload-addon", function (data, ret) {
+                //上传完毕回调
+                var addon = data.addon;
+                var testdata = data.addon.testdata;
+                operate(addon.name, 'enable', false, function (data, ret) {
+                    layer.alert('安装成功！清除浏览器缓存和框架缓存后生效！' + (testdata ? '<br>你还可以继续导入测试数据！' : ""), {
+                        btn: testdata ? ['导入测试数据', '暂不导入'] : ['确定'],
+                        title:'温馨提示',
+                        yes: function (index) {
+                            if (testdata) {
+                                yzn.request.post({
+                                    url: '{:url("testdata")}',
+                                    data: {
+                                        name: addon.name,
+                                    }
+                                }, function (data,res) {
+                                    layer.close(index);
+                                    yzn.msg.success(res.msg);
+                                });
+                            } else {
+                                layer.close(index);
+                            }
+                        },
+                        icon: 1
+                    });
+                });  
+                return false;
+            }, function (data, ret) {
+                if (ret.msg && ret.msg.match(/(login|登录)/g)) {
+                    return layer.alert(ret.msg, {
+                        title: '温馨提示',
+                        btn: ['立即登录'],
+                        yes: function (index, layero) {
+                            $(".btn-userinfo").trigger("click");
+                        }
+                    });
+                }
+            })
+        }
+    });
+
+    yznTable.bindevent();
+
+    // 检测是否登录
+    $(document).on("mousedown", "#faupload-addon", function (e) {
+        if(!isLogin()) return
+    });
+
+
+    table.on('tool('+init.layFilter+')', function(obj){
+        var that = this;
+        jsondata = $(this).data('value');
+        var name = $(this).data("name");
+        var title = $(this).data("title");
+        const arr = jsondata.map(({id, version}) => ({ id, title: version }))
+
+        dropdown.render({
+            elem: that,
+            show: true, // 外部事件触发即显示
+            data: arr,
+            click: function(data, othis){
+
+                if(!isLogin()) return
+
+                if(obj.event === 'install'){
+                    yzn.msg.confirm(title, function(index){
+                        install(name, data.title, false);
+                    });
+                }
+                if(obj.event === 'upgrade'){
+                    layer.confirm('确认升级<b>《'+title+'》</b>？<p class="text-danger">1、请务必做好代码和数据库备份！备份！备份！<br>2、升级后如出现冗余数据，请根据需要移除即可!<br>3、不建议在生产环境升级，请在本地完成升级测试</p>如有重要数据请备份后再操作！', function (index, layero) {
+                        upgrade(name, data.title);
+                    });
+                }
+            }
+        })
+    })
+
+
+    element.on('tab(tabswitch)', function(data){
+      var value = $(this).data("id");
+      $('input[name="category_id"]').val(value);
+      table.reload(init.table_render_id);
+    });
+
+    // 会员信息
+    $(document).on("click", ".btn-userinfo", function (e, name, version) {
+        var that = this;
+        var area = [$(window).width() > 800 ? '500px' : '95%', $(window).height() > 600 ? '400px' : '95%'];
+        var userinfo = yzn.cache.getStorage('yzncms_userinfo');
+        if (!userinfo) {
+            layer.open({
+                content: laytpl($("#logintpl").html()).render({}),
+                zIndex: 99,
+                area: area,
+                title: '登录',
+                resize: false,
+                btn: ['登录', '注册'],
+                yes: function (index, layero) {
+                    yzn.request.post({
+                        url: '{$api_url}/member/login',
+                        type: 'post',
+                        data: {
+                            account: $("#inputAccount", layero).val(),
+                            password: $("#inputPassword", layero).val(),
+                        }
+                    }, function (data, ret) {
+                        yzn.cache.setStorage('yzncms_userinfo',data.userinfo);
+                        layer.closeAll();
+                        layer.alert(ret.msg, {title: '温馨提示', icon: 1});
+                        return false;
+                    }, function (data, ret) {
+                        notice.error({ message: ret.msg });
+                    });
+                },
+                btn2: function () {
+                    return false;
+                },
+                success: function (layero, index) {
+                    this.checkEnterKey = function (event) {
+                        if (event.keyCode === 13) {
+                            $(".layui-layer-btn0").trigger("click");
+                            return false;
+                        }
+                    };
+                    $(document).on('keydown', this.checkEnterKey);
+                    $(".layui-layer-btn1", layero).prop("href", "https://www.yzncms.com/member/index/register.html").prop("target", "_blank");
+                },
+                end: function () {
+                    $(document).off('keydown', this.checkEnterKey);
+                }
+            });
+        } else {
+            yzn.request.post({
+                url: '{$api_url}/member/index',
+                data: {
+                    uid: userinfo.id,
+                    token: userinfo.token,
+                }
+            }, function (data) {
+                layer.open({
+                    content: laytpl($("#userinfotpl").html()).render(userinfo),
+                    area: area,
+                    title: '会员信息',
+                    resize: false,
+                    btn: ['退出登录', '关闭'],
+                    yes: function () {
+                        yzn.request.post({
+                            url: '{$api_url}/member/logout',
+                            data: {uid: userinfo.id, token: userinfo.token}
+                        }, function (data, ret) {
+                            yzn.cache.setStorage('yzncms_userinfo','');
+                            layer.closeAll();
+                            layer.alert(ret.msg, {title: '温馨提示', icon: 0});
+                        }, function (data, ret) {
+                            yzn.cache.setStorage('yzncms_userinfo','');
+                            layer.closeAll();
+                            layer.alert(ret.msg, {title: '温馨提示', icon: 0});
+                        });
+                    }
+                });
+                return false;
+            }, function (data) {
+                yzn.cache.setStorage('yzncms_userinfo','');
+                $(that).trigger('click');
+                return false;
+            });
+
+        }
+    });
+
+    var install = function (name, version, force) {
+        var userinfo = yzn.cache.getStorage('yzncms_userinfo');
+        var uid = userinfo ? userinfo.id : 0;
+        var token = userinfo ? userinfo.token : '';
+        yzn.request.post({
+            url: '{:url("install")}',
+            data: {
+                name: name,
+                force: force ? 1 : 0,
+                uid: uid,
+                token: token,
+                version: version
+            },
+        }, function(data,res) {
+            layer.closeAll();
+            layer.alert('安装成功！清除浏览器缓存和框架缓存后生效！' + (data.addon.testdata ? '<br>你还可以继续导入测试数据！' : ""), {
+                btn: data.addon.testdata ? ['导入测试数据', '暂不导入'] : ['确定'],
+                title:'温馨提示',
+                yes: function (index) {
+                    if (data.addon.testdata) {
+                        yzn.request.post({
+                            url: '{:url("testdata")}',
+                            data: {
+                                name: name,
+                            }
+                        }, function (data,res) {
+                            layer.close(index);
+                            yzn.msg.success(res.msg);
+                        });
+                    } else {
+                        layer.close(index);
+                    }
+                    table.reload(init.table_render_id);
+                },
+                icon: 1
+            });
+        },function(data,res) {
+            var area = [$(window).width() > 650 ? '650px' : '95%', $(window).height() > 710 ? '710px' : '95%'];
+            if (res && res.code === -2) {
+                layer.closeAll();
+                yzn.open('立即支付' , res.data.payurl,'','', {
+                    area: area,
+                    end: function () {
+                        yzn.request.post({
+                            url: '{:url("isbuy")}',
+                            data: {
+                                name: name,
+                                force: force ? 1 : 0,
+                                uid: uid,
+                                token: token,
+                                version: version
+                            }
+                        }, function () {
+                            top.layer.alert('购买成功！请点击继续安装按钮完成安装！', {
+                                btn: ['继续安装'],
+                                title: '温馨提示',
+                                icon: 1,
+                                yes: function (index) {
+                                    top.layer.close(index);
+                                    install(name, version);
+                                }
+                            });
+                            return false;
+                        }, function () {
+                            console.log('已取消');
+                            return false;
+                        });
+                    }
+                });
+            }else if (res && res.code === -3) {
+                //插件目录发现影响全局的文件
+                layer.open({
+                    content: laytpl($("#conflicttpl").html()).render({list:res.data}),
+                    shade: 0.8,
+                    area: area,
+                    title:'温馨提示',
+                    btn: ['继续操作', '取消'],
+                    end: function () {
+
+                    },
+                    yes: function () {
+                        install(name, version, true);
+                    }
+                });
+            } else if (res && res.code === 401) {
+                yzn.cache.setStorage('yzncms_userinfo','');
+                layer.alert('登录已经失效，请重新登录后操作！', {
+                    title: '温馨提示',
+                    btn: ['立即登录'],
+                    yes: function (index, layero) {
+                        $(".btn-userinfo").trigger("click");
+                    },
+                });
+            } else {
+                layer.alert(res.msg, {title: '温馨提示', icon: 0});
+            }
+            return false;
+        })
+    }
+
+    var uninstall = function (name, force, droptables) {
+        yzn.request.post({
+            url: '{:url("uninstall")}',
+            data: {name: name, force: force ? 1 : 0, droptables: droptables ? 1 : 0}
+        }, function (data,res) {
+            layer.closeAll();
+            yzn.msg.success(res.msg);
+            table.reload(init.table_render_id);
+        }, function (data,res) {
+            if (res && res.code === -3) {
+                //插件目录发现影响全局的文件
+                layer.open({
+                    content: laytpl($("#conflicttpl").html()).render({list:res.data}),
+                    shade: 0.8,
+                    area: area,
+                    title:'温馨提示',
+                    btn: ['继续操作', '取消'],
+                    end: function () {
+
+                    },
+                    yes: function () {
+                        uninstall(name, true, droptables);
+                    }
+                });
+            } else {
+                layer.alert(res.msg, {title: '温馨提示', icon: 0});
+            }
+            return false;
+        });
+    };
+
+    // 点击升级
+    $(document).on("click", ".btn-upgrade", function () {
+        var name = $(this).data('name');
+        var version = $(this).data("version");
+        var title = $(this).data("title");
+
+        if(!isLogin()) return
+
+        layer.confirm('确认升级<b>《'+title+'》</b>？<p class="text-danger">1、请务必做好代码和数据库备份！备份！备份！<br>2、升级后如出现冗余数据，请根据需要移除即可!<br>3、不建议在生产环境升级，请在本地完成升级测试</p>如有重要数据请备份后再操作！', function (index, layero) {
+            upgrade(name, version);
+        });
+    });
+
+    var upgrade = function (name, version) {
+        var userinfo = yzn.cache.getStorage('yzncms_userinfo');
+        var uid = userinfo ? userinfo.id : 0;
+        var token = userinfo ? userinfo.token : '';
+
+        yzn.request.post({
+            url: '{:url("upgrade")}',
+            data: {
+                name: name,
+                uid: uid,
+                token: token,
+                version: version
+            }
+        }, function (data, ret) {
+            table.reload(init.table_render_id);
+            notice.success({ message: ret.msg });
+            layer.closeAll();
+        }, function (data, ret) {
+            layer.alert(ret.msg, {title: '温馨提示'});
+            return false;
+        });
+    };
+
+    var operate = function (name, action, force, success) {
+        yzn.request.post({
+            url: '{:url("state")}',
+            data: {name: name, action: action, force: force ? 1 : 0}
+        }, function(data,res) {
+            layer.closeAll();
+            if (typeof success === 'function') {
+                success(res);
+            }
+            table.reload(init.table_render_id);
+            return false;   
+        }, function(data,res) {
+            if (res && res.code === -3) {
+                //插件目录发现影响全局的文件
+                layer.open({
+                    content: laytpl($("#conflicttpl").html()).render({list:res.data}),
+                    shade: 0.8,
+                    area: area,
+                    title:'温馨提示',
+                    btn: ['继续操作', '取消'],
+                    end: function () {
+
+                    },
+                    yes: function () {
+                        operate(name, action, true, success);
+                    }
+                });
+            } else {
+                layer.alert(res.msg, {title: '温馨提示', icon: 0});
+            }
+        })
+    };
+
+    var isLogin = function (){
+        var userinfo = yzn.cache.getStorage('yzncms_userinfo');
+        var uid = userinfo ? userinfo.id : 0;
+
+        if (parseInt(uid) === 0) {
+            layer.alert('你当前未登录Yzncms，请登录后操作！', {
+                title: '温馨提示',
+                btn: ['立即登录'],
+                yes: function (index, layero) {
+                    $(".btn-userinfo").trigger("click");
+                },
+            });
+            return false;
+        }
+        return true;
+    }
+
+    var tables = [];
+    $(document).on("click", "#droptables", function () {
+        if ($(this).prop("checked")) {
+            yzn.request.post({
+                url: '{:url("get_table_list")}',
+                async: false,
+                data: {name: $(this).data("name")}
+            }, function (res) {
+                tables = res.tables;
+                return false;
+            });
+            var html;
+            html = tables.length > 0 ? '<div class="alert alert-warning-light droptablestips" style="max-width:480px;max-height:300px;overflow-y: auto;">以下插件数据表将会被删除：<br>' + tables.join("<br>") + '<br>注意：部分插件还同时会删除演示数据和关联表等</div>'
+                : '<div class="alert alert-warning-light droptablestips">注意：部分插件还同时会删除演示数据和关联表等</div>';
+            $(html).insertAfter($(this).closest("p"));
+        } else {
+            $(".droptablestips").remove();
+        }
+        $(window).resize();
+    });
+
+    // 点击安装
+    $(document).on("click", ".btn-install", function () {
+        var name = $(this).data("name");
+        var title = $(this).data("title");
+        var version = $(this).data("version");
+        
+        if(!isLogin()) return
+
+        yzn.msg.confirm(title, function(index){
+            install(name, version, false);
+        });
+    });
+    
+    // 点击启用/禁用
+    form.on('switch(templet-status)', function (obj) {
+        var name = $(this).data("name");
+        var action = $(this).data("action");
+        $(this).trigger('click');
+        form.render('checkbox');
+        operate(name, action, false);
+    })
+
+    // 点击卸载
+    $(document).on("click", ".btn-uninstall", function () {
+        var name = $(this).data('name');
+        var title = $(this).data('title');
+        if ($(this).data('status') == 1) {
+            layer.alert('请先禁用插件再进行卸载', {icon: 7});
+            return false;
+        }
+        yzn.msg.confirm(laytpl($("#uninstalltpl").html()).render({name:name,title:title}), function (index, layero) {
+            uninstall(name, false, $("input[name='droptables']", layero).prop("checked"));
+        });
+    });
+
+});
+</script>
+{/block}

application/admin/view/auth/adminlog/detail.html

@@ -0,0 +1,27 @@
+{extend name="index_layout"/}
+{block name="main"}
+<table class="layui-table">
+    <colgroup>
+        <col width="150">
+        <col width="150">
+        <col>
+    </colgroup>
+    <thead>
+        <tr>
+            <th>标题</th>
+            <th>内容</th>
+        </tr>
+    </thead>
+    <tbody>
+    {volist name="row" id="vo"}
+    <tr>
+        <td>{$key}</td>
+        <td>{$vo}</td>
+    </tr>
+    {/volist}
+    </tbody>
+</table>
+<div class="layui-hide layer-footer">
+    <button type="reset" class="layui-btn btn-close" onclick="layer.closeAll();">关闭</button>
+</div>
+{/block}

application/admin/view/auth/adminlog/index.html

@@ -0,0 +1,66 @@
+{extend name="index_layout"/}
+{block name="main"}
+<div class="layui-card">
+    <div class="layui-card-header">管理日志</div>
+    <div class="layui-card-body">
+        <table class="layui-hide" id="currentTable" lay-filter="currentTable" data-auth-delete="{:$auth->check('auth.adminlog/deletelog')}"></table>
+    </div>
+</div>
+{/block}
+{block name="script"}
+<script>
+layui.use(['yznTable','util'], function() {
+    var table = layui.yznTable,
+        util = layui.util;
+
+    var init = {
+        table_elem: '#currentTable',
+        table_render_id: 'currentTable',
+        delete_url: "{:url('deletelog')}",
+        detail_url: "{:url('detail')}",
+    };
+
+    table.render({
+        init: init,
+        toolbar: ['refresh',
+            [{
+                text: '删除一个月前日志',
+                url: init.delete_url,
+                method: 'request',
+                auth: 'delete',
+                icon: 'iconfont icon-trash',
+                class: 'layui-btn layui-btn-sm layui-btn-danger',
+                extend: 'data-table="currentTable"',
+            }]
+        ],
+        url: '{:url("index")}',
+        cols: [
+            [
+                { field: 'id', width: 80, title: 'ID', sort: true },
+                { field: 'username', width: 120, title: '用户名' },
+                { field: 'title', title: '标题', searchOp: 'like'  },
+                { field: 'url', title: '操作URL' },
+                { field: 'ip', width: 120, title: 'IP' },
+                { field: 'useragent', width: 120, title: 'Browser',templet:function(d){
+                        return '<span>' + util.escape(d.useragent.split(" ")[0]) + '</span>';
+                    }
+                },
+                { field: 'create_time', width: 180, title: '时间', search: 'range' },
+                { width:90, title: '操作',templet: yznTable.formatter.tool,operat: [
+                    [{
+                        text: '详情',
+                        url: init.detail_url,
+                        method: 'open',
+                        icon: 'iconfont icon-zoom-in-line',
+                        class: 'layui-btn layui-btn-xs layui-btn-normal',
+                    }],
+                ]}
+            ]
+        ],
+        page: {}
+    });
+
+    yznTable.bindevent();
+});
+</script>
+{/block}

application/admin/view/auth/group/access.html

@@ -0,0 +1,93 @@
+{extend name="index_layout"/}
+{block name="main"}
+<form class="layui-form" method="post">
+    <div class="zTreeDemoBackground left">
+        <ul class="ztree" style="margin-left: 5px;margin-top:5px; padding: 0;">
+            <li><a title="全部展开、折叠 "><span class="button ico_open"></span><span id="ztree_expandAll">全部展开、折叠 </span></a> </li>
+        </ul>
+        <ul id="treeDemo" class="ztree"></ul>
+    </div>
+    {:token()}
+    <input type="hidden" name="row[rules]" value="" />
+    <input type="hidden" name="row[id]" value="{$data.id}" />
+    <input type="hidden" name="row[parentid]" value="{$data.parentid}">
+    <div class="layui-form-item layer-footer">
+        <div class="">
+            <button class="layui-btn" lay-submit>立即提交</button>
+        </div>
+    </div>
+</form>
+{/block}
+{block name="script"}
+<script>
+layui.use(['jquery', 'ztree','yznForm'], function() {
+    var $ = layui.$,
+        yznForm = layui.yznForm;
+    //配置
+    var setting = {
+        //设置 zTree 的节点上是否显示 checkbox / radio
+        check: {
+            enable: true,
+            chkboxType: { "Y": "ps", "N": "ps" }
+        },
+        data: {
+            simpleData: {
+                enable: true,
+                idKey: "id",
+                pIdKey: "parentid",
+            }
+        },
+        callback: {
+            beforeClick: function(treeId, treeNode) {
+                if (treeNode.isParent) {
+                    zTree.expandNode(treeNode);
+                    return false;
+                } else {
+                    return true;
+                }
+            },
+            /*onClick: function(event, treeId, treeNode) {
+                //栏目ID
+                var catid = treeNode.catid;
+                //保存当前点击的栏目ID
+                setCookie('tree_catid', catid, 1);
+            }*/
+        }
+    };
+    //节点数据
+    var zNodes = {$nodeList|raw};
+    //zTree对象
+    var zTree = null;
+    $(document).ready(function() {
+        $.fn.zTree.init($("#treeDemo"), setting, zNodes);
+        zTree = $.fn.zTree.getZTreeObj("treeDemo");
+        zTree.expandAll(true);
+        $("#ztree_expandAll").click(function() {
+            if ($(this).data("open")) {
+                zTree.expandAll(false);
+                $(this).data("open", false);
+            } else {
+                zTree.expandAll(true);
+                $(this).data("open", true);
+            }
+        });
+    });
+
+    $('.layui-btn').click(function() {
+        _form = $('.layui-form');
+        //处理被选中的数据
+        _form.find('input[name="rules"]').val("");
+        var nodes = zTree.getCheckedNodes(true);
+        var str = "";
+        $.each(nodes, function(i, value) {
+            if (str != "") {
+                str += ",";
+            }
+            str += value.id;
+        });
+        _form.find('input[name="row[rules]"]').val(str);
+        yznForm.bindevent($("form.layui-form"));
+    })
+});
+</script>
+{/block}

application/admin/view/auth/group/add.html

@@ -0,0 +1,46 @@
+{extend name="index_layout"/}
+{block name="main"}
+<form class="layui-form" method="post">
+    {:token()}
+    <div class="layui-form-item">
+        <label class="layui-form-label">父级</label>
+        <div class="layui-input-block">
+            {:Form::select('row[parentid]',$groupdata,0,["lay-verify"=>"required"])}
+        </div>
+    </div>
+    <div class="layui-form-item">
+        <label class="layui-form-label">权限组</label>
+        <div class="layui-input-block">
+            <input type="text" name="row[title]" lay-verify="required" autocomplete="off" placeholder="权限组" class="layui-input" value="">
+        </div>
+    </div>
+    <input type="hidden" name="row[rules]" value="">
+    <div class="layui-form-item">
+        <label class="layui-form-label">描述</label>
+        <div class="layui-input-block">
+            <textarea name="row[description]" placeholder="权限的相关描述" class="layui-textarea"></textarea>
+        </div>
+    </div>
+    <div class="layui-form-item">
+        <label class="layui-form-label">状态</label>
+        <div class="layui-input-block">
+            <input type="radio" name="row[status]" value="1" title="正常" checked>
+            <input type="radio" name="row[status]" value="0" title="禁用">
+        </div>
+    </div>
+    <div class="layui-form-item layer-footer">
+        <div class="layui-input-block">
+            <button class="layui-btn" lay-submit>立即提交</button>
+            <button type="reset" class="layui-btn layui-btn-primary">重置</button>
+        </div>
+    </div>
+</form>
+{/block}
+{block name="script"}
+<script type="text/javascript">
+layui.use('yznForm', function() {
+    var yznForm = layui.yznForm;
+    yznForm.bindevent($("form.layui-form"));
+});
+</script>
+{/block}

application/admin/view/auth/group/edit.html

@@ -0,0 +1,46 @@
+{extend name="index_layout"/}
+{block name="main"}
+<form class="layui-form" method="post">
+    {:token()}
+    <div class="layui-form-item">
+        <label class="layui-form-label">父级</label>
+        <div class="layui-input-block">
+            {:Form::select('row[parentid]',$groupdata,$data['parentid'],["lay-verify"=>"required"])}
+        </div>
+    </div>
+    <div class="layui-form-item">
+        <label class="layui-form-label">权限组</label>
+        <div class="layui-input-block">
+            <input type="text" name="row[title]" lay-verify="required" autocomplete="off" placeholder="权限组" class="layui-input" value="{$data.title}">
+        </div>
+    </div>
+    <div class="layui-form-item">
+        <label class="layui-form-label">描述</label>
+        <div class="layui-input-block">
+            <textarea name="row[description]" placeholder="权限的相关描述" class="layui-textarea">{$data.description}</textarea>
+        </div>
+    </div>
+    <input type="hidden" name="row[rules]" value="{$data.rules}">
+    <div class="layui-form-item">
+        <label class="layui-form-label">状态</label>
+        <div class="layui-input-block">
+            <input type="radio" name="row[status]" value="1" title="正常" {eq name="data.status" value="1" }checked{/eq}>
+            <input type="radio" name="row[status]" value="0" title="禁用" {eq name="data.status" value="0" }checked{/eq}>
+        </div>
+    </div>
+    <div class="layui-form-item layer-footer">
+        <div class="layui-input-block">
+            <button class="layui-btn" lay-submit>立即提交</button>
+            <button type="reset" class="layui-btn layui-btn-primary">重置</button>
+        </div>
+    </div>
+</form>
+{/block}
+{block name="script"}
+<script type="text/javascript">
+layui.use('yznForm', function() {
+    var yznForm = layui.yznForm;
+    yznForm.bindevent($("form.layui-form"));
+});
+</script>
+{/block}

application/admin/view/auth/group/index.html

@@ -0,0 +1,60 @@
+{extend name="index_layout"/}
+{block name="main"}
+<div class="layui-card">
+    <div class="layui-card-header">角色管理</div>
+    <div class="layui-card-body">
+        <div class="layui-form">
+            <table class="layui-hide" id="currentTable" lay-filter="currentTable"
+            data-auth-add="{:$auth->check('auth.group/add')}"
+            data-auth-edit="{:$auth->check('auth.group/edit')}"
+            data-auth-delete="{:$auth->check('auth.group/del')}" ></table>
+            <script type="text/html" id="authTool">
+                {{#  if(d.id == {$userInfo.roleid}){ }}
+                <a class="layui-btn layui-btn-xs layui-btn-danger layui-btn-disabled">不可操作</a>
+                {{#  } else { }}
+                <a class="layui-btn layui-btn-xs {:$auth->check('auth.group/access')?'':'layui-hide'}" data-open='{:url("access")}?id={{d.id}}&pid={{d.parentid}}' title="访问授权">访问授权</a>
+                {{#  } }}
+            </script>
+        </div>
+    </div>
+</div>
+{/block}
+{block name="script"}
+<script>
+layui.use('yznTable', function() {
+    var table = layui.yznTable;
+
+    var init = {
+        table_elem: '#currentTable',
+        table_render_id: 'currentTable',
+        add_url: "{:url('add')}",
+        edit_url: "{:url('edit')}",
+        delete_url: "{:url('del')}",
+    };
+
+    table.render({
+        init: init,
+        toolbar: ['refresh','add'],
+        url: '{:url("index")}',
+        search:false,
+        cols: [
+            [
+                { field: 'title',width: 200, title: '授权',templet: '#authTool' },
+                { field: 'title', width: 200, align: 'left', title: '权限组'},
+                { field: 'description', title: '描述' },
+                { field: 'status', width: 80,title: '状态',templet: yznTable.formatter.status,selectList:{0:'禁用',1:'正常'},search:false},
+                { width:100, title: '操作',templet: function (d){
+                    if(d.id=={$userInfo.roleid}){
+                        return '<a class="layui-btn layui-btn-xs layui-btn-danger layui-btn-disabled">不可操作</a>';
+                    }else{
+                        return yznTable.formatter.tool.call(this,d,this);
+                    }
+                },operat: ['edit','delete']}
+            ]
+        ],
+    });
+
+    yznTable.bindevent();
+});
+</script>
+{/block}

application/admin/view/auth/manager/add.html

@@ -0,0 +1,62 @@
+{extend name="index_layout"/}
+{block name="main"}
+<form class="layui-form" method="post">
+    {:token()}
+    <div class="layui-form-item">
+        <label class="layui-form-label">用户名</label>
+        <div class="layui-input-block">
+            <input type="text" name="username" lay-verify="required" autocomplete="off" placeholder="用户名" class="layui-input">
+        </div>
+    </div>
+    <div class="layui-form-item">
+        <label class="layui-form-label">密码</label>
+        <div class="layui-input-block">
+            <input type="password" name="password" lay-verify="required" autocomplete="off" placeholder="密码" class="layui-input">
+        </div>
+    </div>
+    <div class="layui-form-item">
+        <label class="layui-form-label">确认密码</label>
+        <div class="layui-input-block">
+            <input type="password" name="password_confirm" lay-verify="required" autocomplete="off" placeholder="确认密码" class="layui-input">
+        </div>
+    </div>
+    <div class="layui-form-item">
+        <label class="layui-form-label">邮箱</label>
+        <div class="layui-input-block">
+            <input type="text" name="email" lay-verify="required|email" autocomplete="off" placeholder="邮箱" class="layui-input">
+        </div>
+    </div>
+    <div class="layui-form-item">
+        <label class="layui-form-label">手机</label>
+        <div class="layui-input-block">
+            <input type="text" name="mobile" autocomplete="off" placeholder="手机" class="layui-input">
+        </div>
+    </div>
+    <div class="layui-form-item">
+        <label class="layui-form-label">真实姓名</label>
+        <div class="layui-input-block">
+            <input type="text" name="nickname" autocomplete="off" placeholder="真实姓名" class="layui-input">
+        </div>
+    </div>
+    <div class="layui-form-item">
+        <label class="layui-form-label">权限组</label>
+        <div class="layui-input-block">
+             {:Form::select('roleid',$groupdata,'',["lay-verify"=>"required"])}
+        </div>
+    </div>
+    <div class="layui-form-item layer-footer">
+        <div class="layui-input-block">
+            <button class="layui-btn" lay-submit="">立即提交</button>
+            <button type="reset" class="layui-btn layui-btn-primary">重置</button>
+        </div>
+    </div>
+</form>
+{/block}
+{block name="script"}
+<script type="text/javascript">
+layui.use('yznForm', function() {
+    var yznForm = layui.yznForm;
+    yznForm.bindevent($("form.layui-form"));
+});
+</script>
+{/block}

application/admin/view/auth/manager/edit.html

@@ -0,0 +1,64 @@
+{extend name="index_layout"/}
+{block name="main"}
+<form class="layui-form" method="post">
+    <input type="hidden" name="id" value="{$data.id}" />
+    {:token()}
+    <div class="layui-form-item">
+        <label class="layui-form-label">用户名</label>
+        <div class="layui-input-block">
+            <input type="text" name="username" lay-verify="required" autocomplete="off" placeholder="用户名" class="layui-input" value="{$data.username}">
+        </div>
+    </div>
+    <div class="layui-form-item">
+        <label class="layui-form-label">密码</label>
+        <div class="layui-input-inline">
+            <input type="password" name="password" autocomplete="off" placeholder="密码" class="layui-input">
+        </div>
+        <div class="layui-form-mid layui-word-aux">不修改留空即可。</div>
+    </div>
+    <div class="layui-form-item">
+        <label class="layui-form-label">确认密码</label>
+        <div class="layui-input-block">
+            <input type="password" name="password_confirm" autocomplete="off" placeholder="确认密码" class="layui-input">
+        </div>
+    </div>
+    <div class="layui-form-item">
+        <label class="layui-form-label">邮箱</label>
+        <div class="layui-input-block">
+            <input type="text" name="email" lay-verify="required|email" autocomplete="off" placeholder="邮箱" class="layui-input" value="{$data.email}">
+        </div>
+    </div>
+    <div class="layui-form-item">
+        <label class="layui-form-label">手机</label>
+        <div class="layui-input-block">
+            <input type="text" name="mobile" autocomplete="off" placeholder="手机" class="layui-input" value="{$data.mobile}">
+        </div>
+    </div>
+    <div class="layui-form-item">
+        <label class="layui-form-label">真实姓名</label>
+        <div class="layui-input-block">
+            <input type="text" name="nickname" autocomplete="off" placeholder="真实姓名" class="layui-input" value="{$data.nickname}">
+        </div>
+    </div>
+    <div class="layui-form-item">
+        <label class="layui-form-label">权限组</label>
+        <div class="layui-input-block">
+            {:Form::select('roleid',$groupdata,$data['roleid'],["lay-verify"=>"required"])}
+        </div>
+    </div>
+    <div class="layui-form-item layer-footer">
+        <div class="layui-input-block">
+            <button class="layui-btn" lay-submit="">立即提交</button>
+            <button type="reset" class="layui-btn layui-btn-primary">重置</button>
+        </div>
+    </div>
+</form>
+{/block}
+{block name="script"}
+<script type="text/javascript">
+layui.use('yznForm', function() {
+    var yznForm = layui.yznForm;
+    yznForm.bindevent($("form.layui-form"));
+});
+</script>
+{/block}

application/admin/view/auth/manager/index.html

@@ -0,0 +1,57 @@
+{extend name="index_layout"/}
+{block name="main"}
+<div class="layui-card">
+    <div class="layui-card-header">管理员管理</div>
+    <div class="layui-card-body">
+        <div class="layui-form">
+            <table class="layui-hide" id="currentTable" lay-filter="currentTable"
+                data-auth-add="{:$auth->check('auth.manager/add')}" 
+                data-auth-edit="{:$auth->check('auth.manager/edit')}"
+                data-auth-delete="{:$auth->check('auth.manager/del')}"></table>
+        </div>
+    </div>
+</div>
+{/block}
+{block name="script"}
+<script type="text/javascript">
+layui.use('yznTable', function() {
+    var table = layui.yznTable;
+
+    var init = {
+        table_elem: '#currentTable',
+        table_render_id: 'currentTable',
+        add_url: '{:url("add")}',
+        edit_url: '{:url("edit")}',
+        delete_url: '{:url("del")}',
+    };
+
+    table.render({
+        init: init,
+        toolbar: ['refresh','add'],
+        url: '{:url("index")}',
+        cols: [
+            [
+                { field: 'id', width: 80, title: 'ID'},
+                { field: 'username', width: 80, title: '登录名', searchOp: 'like' },
+                { field: 'groups', width: 120, title: '所属角色', search:false},
+                { field: 'last_login_ip', title: '最后登录IP', searchOp: 'like'  },
+                { field: 'last_login_time', width: 200, title: '最后登录时间', search: 'range' },
+                { field: 'email',width: 200, title: '邮箱', searchOp: 'like'  },
+                { field: 'mobile',width: 200, title: '手机', searchOp: 'like'  },
+                { field: 'nickname', title: '真实姓名', searchOp: 'like'  },
+                { width:100, title: '操作',templet: function (d){
+                    if(d.id=={$userInfo.id}){
+                        return '<a class="layui-btn layui-btn-xs layui-btn-danger layui-btn-disabled">不可操作</a>';
+                    }else{
+                        return yznTable.formatter.tool.call(this,d,this);
+                    }
+                },operat: ['edit','delete']}
+            ]
+        ],
+        page: {}
+    });
+
+    yznTable.bindevent();
+});
+</script>
+{/block}

application/admin/view/auth/rule/add.html

@@ -0,0 +1,136 @@
+{extend name="index_layout"/}
+{block name="main"}
+<form class="layui-form" method="post">
+    {:token()}
+    <div class="layui-form-item">
+        <label class="layui-form-label">菜单</label>
+        <div class="layui-input-block">
+            <input type="radio" name="row[ismenu]" value="1" title="是" checked lay-filter="ismenu">
+            <input type="radio" name="row[ismenu]" value="0" title="否" lay-filter="ismenu">
+        </div>
+    </div>
+    <div class="layui-form-item">
+        <label class="layui-form-label">上级菜单</label>
+        <div class="layui-input-block">
+            <select name="row[parentid]" lay-verify="required">
+                <option value="0">作为一级菜单</option>
+                {$select_categorys|raw}
+            </select>
+        </div>
+    </div>
+    <div class="layui-form-item">
+        <label class="layui-form-label">规则</label>
+        <div class="layui-input-block">
+            <input type="text" name="row[name]" lay-verify="required" autocomplete="off"  data-placeholder-node="控制器/方法名,如果有目录请使用 目录名.控制器名/方法名" data-placeholder-menu="父级菜单无需匹配控制器和方法,子级菜单请使用控制器名" class="layui-input">
+        </div>
+    </div>
+    <div class="layui-form-item">
+        <label class="layui-form-label">标题</label>
+        <div class="layui-input-block">
+            <input type="text" name="row[title]" lay-verify="required" autocomplete="off" placeholder="标题" class="layui-input">
+        </div>
+    </div>
+    <div class="layui-form-item" data-type="menu">
+        <label class="layui-form-label">URL</label>
+        <div class="layui-input-block">
+            <input type="text" name="row[url]" autocomplete="off" placeholder="url" class="layui-input">
+        </div>
+    </div>
+    <div class="layui-form-item">
+        <label class="layui-form-label">图标</label>
+        <div class="layui-input-block">
+            <input type="text" id="iconPicker" lay-filter="iconPicker" class="hide" name="row[icon]">
+        </div>
+    </div>
+    <div class="layui-form-item">
+        <label class="layui-form-label">规则条件</label>
+        <div class="layui-input-block">
+            <textarea name="row[condition]" placeholder="规则条件" class="layui-textarea"></textarea>
+        </div>
+    </div>
+    </div>
+    <div class="layui-form-item">
+        <label class="layui-form-label">菜单类型</label>
+        <div class="layui-input-block">
+            <input type="radio" name="row[menutype]" value="_iframe" title="选项卡(默认)" checked>
+            <input type="radio" name="row[menutype]" value="_blank" title="链接">
+        </div>
+    </div>
+    <div class="layui-form-item">
+        <label class="layui-form-label">扩展属性</label>
+        <div class="layui-input-block">
+            <textarea name="row[extend]" placeholder="扩展属性" class="layui-textarea"></textarea>
+        </div>
+    </div>
+    <div class="layui-form-item">
+        <label class="layui-form-label">备注</label>
+        <div class="layui-input-block">
+            <textarea name="row[remark]" placeholder="备注" class="layui-textarea"></textarea>
+        </div>
+    </div>
+    <div class="layui-form-item">
+        <label class="layui-form-label">显示排序</label>
+        <div class="layui-input-block">
+            <input type="text" name="row[listorder]" autocomplete="off" placeholder="显示排序" class="layui-input" value="0">
+        </div>
+    </div>
+    <div class="layui-form-item">
+        <label class="layui-form-label">是否显示</label>
+        <div class="layui-input-block">
+            <input type="radio" name="row[status]" value="1" title="显示" checked>
+            <input type="radio" name="row[status]" value="0" title="隐藏">
+        </div>
+    </div>
+    <div class="layui-form-item layer-footer">
+        <div class="layui-input-block">
+            <button class="layui-btn" lay-submit="">立即提交</button>
+            <button type="reset" class="layui-btn layui-btn-primary">重置</button>
+        </div>
+    </div>
+</form>
+{/block}
+{block name="script"}
+<script type="text/javascript">
+layui.use(['iconPicker', 'form', 'layer','yznForm'], function() {
+    var iconPicker = layui.iconPicker,
+        form = layui.form,
+        layer = layui.layer,
+        $ = layui.$,
+        yznForm = layui.yznForm;
+        yznForm.bindevent($("form.layui-form"));
+        iconPicker.render({
+            elem: '#iconPicker4',
+            type: 'fontClass'
+        });
+
+        iconPicker.render({
+            // 选择器，推荐使用input
+            elem: '#iconPicker',
+            // 数据类型：fontClass/unicode，推荐使用fontClass
+            type: 'fontClass',
+            // 是否开启搜索：true/false，默认true
+            search: true,
+            // 是否开启分页：true/false，默认true
+            page: true,
+            // 每页显示数量，默认12
+            limit: 12,
+            // 点击回调
+            click: function (data) {
+                //console.log(data);
+            },
+            // 渲染成功后的回调
+            success: function(d) {
+                //console.log(d);
+            }
+        });
+
+        form.on('radio(ismenu)', function(data){
+            var name = $("input[name='row[name]']");
+            var ismenu = data.value == 1;
+            name.prop("placeholder", ismenu ? name.data("placeholder-menu") : name.data("placeholder-node"));
+            $('div[data-type="menu"]').toggleClass("layui-hide", !ismenu);
+        })
+        $("input[name='row[ismenu]']:checked").next().trigger("click");
+});
+</script>
+{/block}

application/admin/view/auth/rule/edit.html

@@ -0,0 +1,136 @@
+{extend name="index_layout"/}
+{block name="main"}
+<form class="layui-form" method="post">
+    {:token()}
+    <div class="layui-form-item">
+        <label class="layui-form-label">菜单</label>
+        <div class="layui-input-block">
+            <input type="radio" name="row[ismenu]" value="1" title="是" {if $data.ismenu==1}checked{/if}>
+            <input type="radio" name="row[ismenu]" value="0" title="否" {if $data.ismenu==0}checked{/if}>
+        </div>
+    </div>
+    <div class="layui-form-item">
+        <label class="layui-form-label">上级菜单</label>
+        <div class="layui-input-block">
+            <select name="row[parentid]" lay-verify="required">
+                <option value="0">作为一级菜单</option>
+                {$select_categorys|raw}
+            </select>
+        </div>
+    </div>
+    <div class="layui-form-item">
+        <label class="layui-form-label">规则</label>
+        <div class="layui-input-block">
+            <input type="text" name="row[name]" lay-verify="required" autocomplete="off"  data-placeholder-node="控制器/方法名,如果有目录请使用 目录名.控制器名/方法名" data-placeholder-menu="父级菜单无需匹配控制器和方法,子级菜单请使用控制器名" class="layui-input" value="{$data.name}">
+        </div>
+    </div>
+    <div class="layui-form-item">
+        <label class="layui-form-label">标题</label>
+        <div class="layui-input-block">
+            <input type="text" name="row[title]" lay-verify="required" autocomplete="off" placeholder="标题" class="layui-input" value="{$data.title}">
+        </div>
+    </div>
+    <div class="layui-form-item" data-type="menu">
+        <label class="layui-form-label">URL</label>
+        <div class="layui-input-block">
+            <input type="text" name="row[url]" autocomplete="off" placeholder="url" class="layui-input" value="{$data.url}">
+        </div>
+    </div>
+    <div class="layui-form-item">
+        <label class="layui-form-label">图标</label>
+        <div class="layui-input-block">
+            <input type="text" id="iconPicker" lay-filter="iconPicker" class="hide" value="{$data.icon}" name="row[icon]">
+        </div>
+    </div>
+    <div class="layui-form-item">
+        <label class="layui-form-label">规则条件</label>
+        <div class="layui-input-block">
+            <textarea name="row[condition]" placeholder="规则条件" class="layui-textarea">{$data.condition}</textarea>
+        </div>
+    </div>
+    <div class="layui-form-item">
+        <label class="layui-form-label">菜单类型</label>
+        <div class="layui-input-block">
+            <input type="radio" name="row[menutype]" value="_iframe" title="选项卡(默认)" {if $data.menutype=="iframe"}checked{/if}>
+            <input type="radio" name="row[menutype]" value="_blank" title="链接" {if $data.menutype=="blank"}checked{/if}>
+        </div>
+    </div>
+    <div class="layui-form-item">
+        <label class="layui-form-label">扩展属性</label>
+        <div class="layui-input-block">
+            <textarea name="row[extend]" placeholder="扩展属性" class="layui-textarea">{$data.extend}</textarea>
+        </div>
+    </div>
+    <div class="layui-form-item">
+        <label class="layui-form-label">备注</label>
+        <div class="layui-input-block">
+            <textarea name="row[remark]" placeholder="备注" class="layui-textarea">{$data.remark}</textarea>
+        </div>
+    </div>
+    <div class="layui-form-item">
+        <label class="layui-form-label">显示排序</label>
+        <div class="layui-input-block">
+            <input type="text" name="row[listorder]" autocomplete="off" placeholder="显示排序" class="layui-input" value="{$data.listorder}">
+        </div>
+    </div>
+    <div class="layui-form-item">
+        <label class="layui-form-label">是否显示</label>
+        <div class="layui-input-block">
+            <input type="radio" name="row[status]" value="1" title="显示" {if $data.status==1}checked{/if}>
+            <input type="radio" name="row[status]" value="0" title="隐藏" {if $data.status==0}checked{/if}>
+        </div>
+    </div>
+    <input type="hidden" name="row[id]" value="{$data.id}" />
+    <div class="layui-form-item layer-footer">
+        <div class="layui-input-block">
+            <button class="layui-btn" lay-submit="">立即提交</button>
+            <button type="reset" class="layui-btn layui-btn-primary">重置</button>
+        </div>
+    </div>
+</form>
+{/block}
+{block name="script"}
+<script type="text/javascript">
+layui.use(['iconPicker', 'form', 'layer','yznForm'], function() {
+    var iconPicker = layui.iconPicker,
+        form = layui.form,
+        layer = layui.layer,
+        $ = layui.$,
+        yznForm = layui.yznForm;
+        yznForm.bindevent($("form.layui-form"));
+        iconPicker.render({
+            elem: '#iconPicker4',
+            type: 'fontClass'
+        });
+
+        iconPicker.render({
+            // 选择器，推荐使用input
+            elem: '#iconPicker',
+            // 数据类型：fontClass/unicode，推荐使用fontClass
+            type: 'fontClass',
+            // 是否开启搜索：true/false，默认true
+            search: true,
+            // 是否开启分页：true/false，默认true
+            page: true,
+            // 每页显示数量，默认12
+            limit: 12,
+            // 点击回调
+            click: function (data) {
+                //console.log(data);
+            },
+            // 渲染成功后的回调
+            success: function(d) {
+                //console.log(d);
+            }
+        });
+
+        form.on('radio(ismenu)', function(data){
+            var name = $("input[name='row[name]']");
+            var ismenu = data.value == 1;
+            name.prop("placeholder", ismenu ? name.data("placeholder-menu") : name.data("placeholder-node"));
+            $('div[data-type="menu"]').toggleClass("layui-hide", !ismenu);
+        })
+        $("input[name='row[ismenu]']:checked").next().trigger("click");
+});
+</script>
+{/block}

application/admin/view/auth/rule/index.html

@@ -0,0 +1,83 @@
+{extend name="index_layout"/}
+{block name="main"}
+<div class="layui-card">
+    <div class="layui-card-header">菜单管理</div>
+    <div class="layui-card-body">
+        <div class="layui-form">
+            <table class="layui-hide" id="currentTable" lay-filter="currentTable"></table>
+        </div>
+    </div>
+</div>
+<script type="text/html" id="toolbarDemo">
+    <div class="layui-table-tool-temp">
+        <button class="layui-btn layui-btn-sm yzn-btn-primary" data-table-refresh="currentTable"><i class="iconfont icon-shuaxin1"></i></button>
+        <button class="layui-btn layui-btn-sm {:$auth->check('auth.rule/add')?'':'layui-hide'}" data-open="{:url('add')}" title="添加"><i class="iconfont icon-add"></i>&nbsp;新增后台菜单</button>
+        <button class="layui-btn layui-btn-sm layui-btn-normal" id="openAll"><i class="iconfont icon-add"></i>&nbsp;展开或折叠全部</button>
+    </div>
+</script>
+<script type="text/html" id="barTool">
+    <a data-open='{:url("add")}?parentid={{ d.id }}' class="layui-btn layui-btn-xs layui-btn-normal {:$auth->check('auth.rule/add')?'':'layui-hide'}" title="添加">添加</a>
+    <a data-open='{:url("edit")}?id={{ d.id }}' class="layui-btn layui-btn-xs {:$auth->check('auth.rule/edit')?'':'layui-hide'}" title="编辑"><i class='iconfont icon-brush_fill'></i></a>
+    <a href='{:url("del")}?id={{ d.id }}' class="layui-btn layui-btn-danger layui-btn-xs layui-tr-del {:$auth->check('auth.rule/del')?'':'layui-hide'}"><i class='iconfont icon-trash_fill'></i></a>
+</script>
+{/block}
+{block name="script"}
+<script>
+layui.use(['table', 'yznTable','treeTable'], function() {
+    var $ = layui.$,
+        tableId = 'currentTable',
+        yznTable = layui.yznTable;
+     var treeTable = layui.treeTable;
+
+    var init = {
+        table_elem: '#currentTable',
+        table_render_id: 'currentTable',
+        modify_url:'{:url("multi")}',
+    };
+
+    treeTable.render({
+        init: init,
+        id: tableId,
+        elem: init.table_elem,
+        toolbar: '#toolbarDemo',
+        url: "{:url('index')}",
+        tree: {
+            customName: {
+                children:'childlist',
+                pid:'parentid',
+                name:'title'
+            },
+            view:{
+                showIcon:false
+            }
+        },
+        escape:false,
+        // @todo 不直接使用yznTable.render(); 进行表格初始化, 需要使用 yznTable.formatCols(); 方法格式化`cols`列数据
+        cols: yznTable.formatCols([
+            [
+                { field: 'listorder', width: 60, title: '排序', edit: 'text' },
+                { field: 'id', width: 60, title: 'ID' },
+                { field: 'title', align: 'left', title: '菜单名称', },
+                { width: 80, title: '图标', align: 'center', templet: "<div><i class='iconfont {{d.icon}}'></i></div>" },
+                { field: 'name', width: 200, title: '规则' },
+                { field: 'status', align: 'center', width: 120, title: '状态', unresize: true ,templet: yznTable.formatter.switch,tips:"显示|隐藏"},
+                { fixed: 'right', align: 'center', width: 140, title: '操作', toolbar: '#barTool' }
+            ]
+        ], init),
+    });
+
+    $('body').on('click', '#openAll', function() {
+        var that = this;
+        var show = $("i", that).hasClass("icon-add");
+        treeTable.expandAll(tableId, show);
+        $("i", that).toggleClass("icon-add", !show);
+        $("i", that).toggleClass("icon-min", show);
+    })
+
+    yznTable.listenSwitch({filter: 'status', url: init.modify_url});
+    yznTable.listenEdit(init, 'currentTable', init.table_render_id, false);
+    yznTable.bindevent();
+
+});
+</script>
+{/block}

application/admin/view/custom/.gitkeep

@@ -0,0 +1 @@
+

application/admin/view/general/attachments/cropper.html

@@ -0,0 +1,387 @@
+<!doctype html>
+<html lang="en">
+
+<head>
+    <meta charset="UTF-8">
+    <meta name="viewport" content="width=device-width, user-scalable=no, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0">
+    <meta http-equiv="X-UA-Compatible" content="ie=edge">
+    <title>图片剪裁</title>
+    <link rel="stylesheet" href="__STATIC__/libs/layui/css/layui.css">
+    <link rel="stylesheet" href="__STATIC__/libs/cropper/cropper.min.css">
+    <link rel="stylesheet" href="__STATIC__/libs/cropper/main.css">
+    <link rel="stylesheet" href="__STATIC__/common/font/iconfont.css">
+    <style type="text/css">
+    .layui-btn-group+.layui-btn-group {margin-left: 0px;}
+    .layui-container {width: 100% !important;}
+    .modal-body {width: 300px;}
+    .modal-body canvas {width: 100%;}
+    </style>
+</head>
+
+<body style="padding: 10px;">
+    <div class="layui-container" style="overflow: hidden;">
+        <div class="layui-row layui-col-space10">
+            <div class="layui-col-md8 layui-col-sm8">
+                <div class="img-container">
+                    <img id="image" src="{$Think.get.url}" alt="Picture">
+                </div>
+            </div>
+            <div class="layui-col-md4 layui-col-sm4">
+                <div class="docs-preview clearfix">
+                    <div class="img-preview preview-lg"></div>
+                    <div class="img-preview preview-md"></div>
+                    <div class="img-preview preview-sm"></div>
+                    <div class="img-preview preview-xs"></div>
+                </div>
+                <div class="docs-data layui-form layui-form-pane">
+                    <div class="layui-form-item">
+                        <label class="layui-form-label" style="width: 60px;">宽度</label>
+                        <div class="layui-input-inline" style="width: 80px;">
+                            <input type="text" id="dataWidth" class="layui-input">
+                        </div>
+                        <div class="layui-form-mid layui-word-aux">PX</div>
+                    </div>
+                    <div class="layui-form-item">
+                        <label class="layui-form-label" style="width: 60px;">高度</label>
+                        <div class="layui-input-inline" style="width: 80px;">
+                            <input type="text" id="dataHeight" class="layui-input">
+                        </div>
+                        <div class="layui-form-mid layui-word-aux">PX</div>
+                    </div>
+                </div>
+                <div class="docs-toggles">
+                    <div class="layui-btn-group">
+                        <button type="button" class="layui-btn layui-btn-sm" data-name="aspectRatio" value="1.7777777777777777">16:9</button>
+                        <button type="button" class="layui-btn layui-btn-sm" data-name="aspectRatio" value="1.3333333333333333">4:3</button>
+                        <button type="button" class="layui-btn layui-btn-sm" data-name="aspectRatio" value="1">1:1</button>
+                        <button type="button" class="layui-btn layui-btn-sm" data-name="aspectRatio" value="0.6666666666666666">2:3</button>
+                        <button type="button" class="layui-btn layui-btn-sm" data-name="aspectRatio" value="NaN">自由</button>
+                    </div>
+                </div>
+            </div>
+        </div>
+        <div class="layui-row docs-buttons" style="text-align: center;">
+            <div class="layui-col-md10 layui-col-sm10">
+                <div class="layui-btn-group">
+                    <button type="button" class="layui-btn layui-btn-sm" data-method="setDragMode" data-option="move"><i class="iconfont icon-yidong"></i></button>
+                    <button type="button" class="layui-btn layui-btn-sm" data-method="setDragMode" data-option="crop"><i class="iconfont icon-tailor"></i></button>
+                </div>
+                <div class="layui-btn-group">
+                    <button type="button" class="layui-btn layui-btn-sm" data-method="zoom" data-option="0.1"><i class="iconfont icon-fullscreen"></i></button>
+                    <button type="button" class="layui-btn layui-btn-sm" data-method="zoom" data-option="-0.1"><i class="iconfont icon-narrow"></i></button>
+                </div>
+                <div class="layui-btn-group">
+                    <button type="button" class="layui-btn layui-btn-sm" data-method="move" data-option="-10" data-second-option="0"><i class="iconfont icon-leftarrow"></i></button>
+                    <button type="button" class="layui-btn layui-btn-sm" data-method="move" data-option="10" data-second-option="0"><i class="iconfont icon-Rightarrow"></i></button>
+                    <button type="button" class="layui-btn layui-btn-sm" data-method="move" data-option="0" data-second-option="-10"><i class="iconfont icon-rising"></i></button>
+                    <button type="button" class="layui-btn layui-btn-sm" data-method="move" data-option="0" data-second-option="10"><i class="iconfont icon-falling"></i></button>
+                </div>
+                <div class="layui-btn-group">
+                    <button type="button" class="layui-btn layui-btn-sm" data-method="rotate" data-option="-45"><i class="iconfont icon-undo-alt"></i></button>
+                    <button type="button" class="layui-btn layui-btn-sm" data-method="rotate" data-option="45"><i class="iconfont icon-redo-alt"></i></button>
+                </div>
+                <div class="layui-btn-group">
+                    <button type="button" class="layui-btn layui-btn-sm" data-method="scaleX" data-option="-1"><i class="iconfont icon-arrows-alt-h"></i></button>
+                    <button type="button" class="layui-btn layui-btn-sm" data-method="scaleY" data-option="-1"><i class="iconfont icon-fa-arrows-alt-v"></i></button>
+                </div>
+                <div class="layui-btn-group" style="position: relative;">
+                    <input type="file" class="sr-only" id="inputImage" name="file" accept=".jpg,.jpeg,.png,.gif,.bmp,.tiff" style="opacity:0;position: absolute;left: 37px;width: 37px;height: 30px; padding: 0;overflow: hidden;white-space: nowrap;border: 0;">
+                    <button type="button" class="layui-btn layui-btn-sm" data-method="reset"><i class="iconfont icon-shuaxin1"></i></button>
+                    <button type="button" class="layui-btn layui-btn-sm"><i class="iconfont icon-cloud-upload"></i></button>
+                    <button type="button" class="layui-btn layui-btn-sm getCroppedCanvas" data-method="getCroppedCanvas"><i class="iconfont icon-cloud-download"></i></button>
+                </div>
+            </div>
+            <div id="getCroppedCanvasModal" style="display: none;">
+                <div class="modal-content" style="padding: 20px;">
+                    <h5 style="font-size: 16px;line-height: 2;">已剪裁</h5>
+                    <div class="modal-body"></div>
+                    <a href="javascript:;" type="button" class="layui-btn layui-btn-sm layui-btn-fluid" id="download" download="cropped.jpg">下载图片</a>
+                </div>
+            </div>
+            <div class="layui-col-md2 layui-col-sm2">
+                <button type="button" class="layui-btn layui-btn-sm layui-btn-normal btn-submit">确定</button>
+                <button type="button" class="layui-btn layui-btn-sm layui-btn-danger btn-cancel">取消</button>
+            </div>
+        </div>
+    </div>
+    <script src="__STATIC__/libs/jquery/jquery.min.js"></script>
+    <script src="__STATIC__/libs/layui/layui.js"></script>
+    <script src="__STATIC__/libs/cropper/cropper.min.js"></script>
+    <script type="text/javascript">
+    layui.use(['layer', 'jquery'], function() {
+
+        var $ = layui.jquery,
+            layer = layui.layer;
+        var console = window.console || { log: function() {} };
+        var URL = window.URL || window.webkitURL;
+        var $image = $('#image');
+        var $download = $('#download');
+        /*var $dataX = $('#dataX');
+        var $dataY = $('#dataY');*/
+        var $dataHeight = $('#dataHeight');
+        var $dataWidth = $('#dataWidth');
+        /*var $dataRotate = $('#dataRotate');
+        var $dataScaleX = $('#dataScaleX');
+        var $dataScaleY = $('#dataScaleY');*/
+        var options = {
+            aspectRatio: 16 / 9,
+            preview: '.img-preview',
+            crop: function(e) {
+                /*$dataX.val(Math.round(e.detail.x));
+                $dataY.val(Math.round(e.detail.y));*/
+                $dataHeight.val(Math.round(e.detail.height));
+                $dataWidth.val(Math.round(e.detail.width));
+                /*$dataRotate.val(e.detail.rotate);
+                $dataScaleX.val(e.detail.scaleX);
+                $dataScaleY.val(e.detail.scaleY);*/
+            }
+        };
+        var originalImageURL = $image.attr('src');
+        var uploadedImageName = 'cropped.jpg';
+        var uploadedImageType = 'image/jpeg';
+        var uploadedImageURL;
+
+        // Cropper
+        $image.cropper(options);
+
+        $(document).on("click", ".getCroppedCanvas", function() {
+            layer.open({
+                type: 1,
+                title: false,
+                area: '340px',
+                content: $('#getCroppedCanvasModal')
+            });
+        })
+
+        function doUpload(filename, fileobj, index) {
+            var formData = new FormData();
+            formData.append(filename, fileobj);
+            $.ajax({
+                url: '{:url("admin/ajax/upload", ["dir" => "images", "module" => "admin"])}',
+                type: 'POST',
+                data: formData,
+                cache: false,
+                async: false,
+                contentType: false,
+                processData: false,
+                success: function(res) {
+                    if (res.code == 1) {
+                        var arr = parent.$("#layui-layer" + index).data("arr");
+                        var input = parent.$("#" + arr[0]);
+                        input.val(input.val().replace(arr[1], res.path)).attr('data-original', res.path).trigger("change");
+                    } else {
+                        console.log(res);
+                    }
+                },
+                error: function(res) {
+                    console.log(res);
+                }
+            });
+        }
+
+        function dataURLtoFile(dataurl) {
+             var arr = dataurl.split(','),
+                 mime = arr[0].match(/:(.*?);/)[1],
+                 bstr = atob(arr[1]),
+                 n = bstr.length,
+                 u8arr = new Uint8Array(n);
+             while (n--) {
+                 u8arr[n] = bstr.charCodeAt(n);
+             }
+             var urlArr = originalImageURL.split('.');
+             var suffix = 'png';
+             originalImageURL = urlArr.join('');
+             var filename = originalImageURL.substr(originalImageURL.lastIndexOf('/') + 1);
+             var exp = new RegExp("\\." + suffix + "$", "i");
+             filename = exp.test(filename) ? filename : filename + "." + suffix;
+             return new File([u8arr], filename, { type: mime });
+         }
+
+
+        $(document).on("click", ".btn-submit", function() {
+            var dataUrl = $image.cropper('getCroppedCanvas').toDataURL('image/png');
+            //console.log(dataUrl);
+            var index = parent.layer.getFrameIndex(window.name); //获取窗口索引
+            doUpload('file', dataURLtoFile(dataUrl), index);
+            parent.layer.close(index);
+        });
+
+        //取消事件
+        $(document).on("click", ".btn-cancel", function() {
+            var index = parent.layer.getFrameIndex(window.name); //获取窗口索引
+            parent.layer.close(index);
+        });
+
+        // Buttons
+        if (!$.isFunction(document.createElement('canvas').getContext)) {
+            $('button[data-method="getCroppedCanvas"]').prop('disabled', true);
+        }
+
+        if (typeof document.createElement('cropper').style.transition === 'undefined') {
+            $('button[data-method="rotate"]').prop('disabled', true);
+            $('button[data-method="scale"]').prop('disabled', true);
+        }
+
+        // Download
+        /*if (typeof $download[0].download === 'undefined') {
+            $download.addClass('disabled');
+        }*/
+
+        // 选择比例
+        $('.docs-toggles').on('click', 'button', function() {
+            var $this = $(this);
+            var name = $this.data('name');
+            var type = $this.prop('type');
+            var cropBoxData;
+            var canvasData;
+            if (!$image.data('cropper')) {
+                return;
+            }
+            options[name] = $this.val();
+            $image.cropper('destroy').cropper(options);
+        });
+
+        // 按钮组操作
+        $('.docs-buttons').on('click', '[data-method]', function() {
+            var $this = $(this);
+            var data = $this.data();
+            var cropper = $image.data('cropper');
+            var cropped;
+            var $target;
+            var result;
+
+            if ($this.prop('disabled') || $this.hasClass('disabled')) {
+                return;
+            }
+
+            if (cropper && data.method) {
+                data = $.extend({}, data); // Clone a new one
+                if (typeof data.target !== 'undefined') {
+                    $target = $(data.target);
+                    if (typeof data.option === 'undefined') {
+                        try {
+                            data.option = JSON.parse($target.val());
+                        } catch (e) {
+                            console.log(e.message);
+                        }
+                    }
+                }
+                cropped = cropper.cropped;
+                switch (data.method) {
+                    case 'rotate':
+                        if (cropped && options.viewMode > 0) {
+                            $image.cropper('clear');
+                        }
+                        break;
+                    case 'getCroppedCanvas':
+                        if (uploadedImageType === 'image/jpeg') {
+                            if (!data.option) {
+                                data.option = {};
+                            }
+                            data.option.fillColor = '#fff';
+                        }
+                        break;
+                }
+                result = $image.cropper(data.method, data.option, data.secondOption);
+                switch (data.method) {
+                    case 'rotate':
+                        if (cropped && options.viewMode > 0) {
+                            $image.cropper('crop');
+                        }
+                        break;
+                    case 'scaleX':
+                    case 'scaleY':
+                        $(this).data('option', -data.option);
+                        break;
+                    case 'getCroppedCanvas':
+                        if (result) {
+                            // Bootstrap's Modal
+                            $('#getCroppedCanvasModal').find('.modal-body').html(result);
+                            if (!$download.hasClass('disabled')) {
+                                download.download = uploadedImageName;
+                                $download.attr('href', result.toDataURL(uploadedImageType));
+                            }
+                        }
+                        break;
+                    case 'destroy':
+                        if (uploadedImageURL) {
+                            URL.revokeObjectURL(uploadedImageURL);
+                            uploadedImageURL = '';
+                            $image.attr('src', originalImageURL);
+                        }
+                        break;
+                }
+                if ($.isPlainObject(result) && $target) {
+                    try {
+                        $target.val(JSON.stringify(result));
+                    } catch (e) {
+                        console.log(e.message);
+                    }
+                }
+            }
+        });
+
+        // 键盘支持
+        $(document.body).on('keydown', function(e) {
+            if (e.target !== this || !$image.data('cropper') || this.scrollTop > 300) {
+                return;
+            }
+            switch (e.which) {
+                case 37:
+                    e.preventDefault();
+                    $image.cropper('move', -1, 0);
+                    break;
+                case 38:
+                    e.preventDefault();
+                    $image.cropper('move', 0, -1);
+                    break;
+                case 39:
+                    e.preventDefault();
+                    $image.cropper('move', 1, 0);
+                    break;
+                case 40:
+                    e.preventDefault();
+                    $image.cropper('move', 0, 1);
+                    break;
+            }
+        });
+
+        // 上传图片
+        var $inputImage = $('#inputImage');
+
+        if (URL) {
+            $inputImage.change(function() {
+                var files = this.files;
+                var file;
+
+                if (!$image.data('cropper')) {
+                    return;
+                }
+
+                if (files && files.length) {
+                    file = files[0];
+
+                    if (/^image\/\w+$/.test(file.type)) {
+                        uploadedImageName = file.name;
+                        uploadedImageType = file.type;
+
+                        if (uploadedImageURL) {
+                            URL.revokeObjectURL(uploadedImageURL);
+                        }
+
+                        uploadedImageURL = URL.createObjectURL(file);
+                        $image.cropper('destroy').attr('src', uploadedImageURL).cropper(options);
+                        $inputImage.val('');
+                    } else {
+                        window.alert('Please choose an image file.');
+                    }
+                }
+            });
+        } else {
+            $inputImage.prop('disabled', true).parent().addClass('disabled');
+        }
+    })
+    </script>
+</body>
+
+</html>

application/admin/view/general/attachments/index.html

@@ -0,0 +1,55 @@
+{extend name="admin@index_layout"/}
+{block name="main"}
+<div class="layui-card">
+    <div class="layui-card-header">附件管理</div>
+    <div class="layui-card-body">
+        <table class="layui-hide" id="currentTable" lay-filter="currentTable" data-auth-delete="{:$auth->check('general.attachments/del')}"></table>
+    </div>
+</div>
+<script type="text/html" id="picTpl">
+  {{#  if(d.mime.indexOf("image") > -1){ }}
+    <img style="max-width:80px; max-height:30px;" src="{{d.path}}" data-image="{{d.name}}">
+  {{#  } else { }}
+    <img style="max-width:80px; max-height:30px;" src="{:url('admin/ajax/icon')}?suffix={{d.ext}}">
+  {{#  } }}
+</script>
+{/block}
+{block name="script"}
+<script>
+layui.use('yznTable', function() {
+    var table = layui.yznTable;
+
+    var init = {
+        table_elem: '#currentTable',
+        table_render_id: 'currentTable',
+        delete_url: '{:url("del")}',
+    };
+
+    table.render({
+        init: init,
+        elem: init.table_elem,
+        toolbar: ['refresh','delete'],
+        url: '{:url("index")}',
+        cols: [
+            [
+                { type: 'checkbox', fixed: 'left' },
+                { field: 'id', width: 80, title: 'ID', sort: true },
+                { field: 'admin_id', width: 80, title: '用户',hide:true,addClass: "selectpage", extend: "data-source='admin/auth.manager/index' data-field='username'" },
+                { field: 'name', title: '名称', searchOp: 'like' },
+                { field: 'path', width: 100, align: "center",title: '图片', search: false, templet: '#picTpl' },
+                { field: 'path', width: 450, align: "center", title: '物理路径', templet: '<div><a class="layui-btn layui-btn layui-btn-xs" href="{{d.path}}" target="_blank">{{d.path}}</a></div>', searchOp: 'like' },
+                { field: 'size', width: 100, title: '大小', sort: true },
+                { field: 'ext', width: 100, title: '类型', searchOp: 'like' },
+                { field: 'mime', width: 120, title: 'Mime类型' ,selectList:{'image/*':'图片','audio/*':'音频','video/*':'视频','text/*':'文档','application/*':'应用','zip,rar,7z,tar':'压缩包'},extend:"lay-search lay-creatable"},
+                { field: 'driver', width: 100, title: '存储引擎', searchOp: 'like' },
+                { field: 'create_time', width: 180, title: '上传时间', search: 'range' },
+                { width:60, title: '操作',templet: yznTable.formatter.tool,operat: ['delete']}
+            ]
+        ],
+        page: {}
+    });
+
+    yznTable.bindevent();
+});
+</script>
+{/block}

application/admin/view/general/attachments/select.html

@@ -0,0 +1,90 @@
+{extend name="admin@index_layout"/}
+{block name="main"}
+<table class="layui-hide" id="dataTable" lay-filter="dataTable"></table>
+<script type="text/html" id="barTool">
+    <a data-href='{{d.path}}' class="layui-btn layui-btn-danger layui-btn-xs btn-chooseone"><i class="iconfont icon-right"></i> 选择</a>
+</script>
+<script type="text/html" id="picTpl">
+    {{#  if(d.mime.indexOf("image") > -1){ }}
+    <img style="max-width:80px; max-height:30px;" src="{{d.path}}" data-image="{{d.name}}">
+  {{#  } else { }}
+    <img style="max-width:80px; max-height:30px;" src="{:url('admin/ajax/icon')}?suffix={{d.ext}}">
+  {{#  } }}
+</script>
+{/block}
+{block name="script"}
+<script>
+layui.use(['yznTable','yzn','table','yznForm','yznUpload'], function() {
+    var yznTable = layui.yznTable,
+        yzn = layui.yzn,
+        yznForm = layui.yznForm,
+        yznUpload = layui.yznUpload,
+        table =layui.table;
+    var multiple = {$Think.get.multiple};
+    var urlArr = [];
+
+    var init = {};
+
+    yznTable.render({
+        init: init,
+        id: 'dataTable',
+        toolbar: ['refresh'
+        , [{
+            html: '<button type="button" class="layui-btn layui-btn-sm faupload" data-multiple="false" data-type="{$mimetype}"><i class="layui-icon layui-icon-upload"></i> 上传</button>'
+        }]
+        {if $Think.get.multiple == "true"}
+        , [{
+            html: '<a class="layui-btn layui-btn-danger layui-btn-sm btn-choose-multi"><i class="iconfont icon-right"></i> 选择</a>'
+        }]
+        {/if}
+        ],
+        elem: '#dataTable',
+        url: '{:url("index")}',
+        cols: [
+            [
+                {if $Think.get.multiple == "true"}
+                { type: 'checkbox', fixed: 'left' },
+                {/if}
+                { field: 'id', width: 60, title: 'ID', sort: true },
+                { field: 'name', title: '名称' },
+                { field: 'path', width: 100, align: "center", title: '图片', search: false, templet: '#picTpl' },
+                { field: 'size', width: 100, title: '大小', sort: true },
+                { field: 'mime', width: 120, title: 'Mime类型' },
+                { field: 'create_time', width: 160, title: '上传时间', search: 'range' },
+                { fixed: 'right', width: 85, title: '操作', toolbar: '#barTool' }
+            ]
+        ],
+        page: {},
+        done: function(res, curr, count){
+            yznUpload.api.upload('.faupload', function () {
+                $("[data-table-refresh]").trigger("click");
+            });
+        }
+    });
+
+    yznTable.bindevent();
+
+    table.on('checkbox(dataTable_LayFilter)', function(obj){
+        urlArr = [];
+        var checkStatus = table.checkStatus('dataTable').data;
+        for (var i = 0; i < checkStatus.length; i++) {
+            urlArr.push(checkStatus[i]['path']);
+        }
+    });
+
+    //选择单个
+    $(document).on('click', '.btn-chooseone', function() {
+        var that = $(this),
+        index = that.parents('tr').eq(0).data('index'),
+        tr = $('.layui-table-body').find('tr[data-index="' + index + '"]'),
+        href = !that.attr('data-href') ? that.attr('href') : that.attr('data-href');
+        yzn.close({ url: href, multiple: multiple});
+    });
+
+    // 选中多个 todo翻页失效
+    $(document).on("click", ".btn-choose-multi", function () {
+        yzn.close({ url: urlArr.join(","), multiple: multiple});
+    });
+});
+</script>
+{/block}

application/admin/view/general/config/add.html

@@ -0,0 +1,165 @@
+{extend name="index_layout"/}
+{block name="main"}
+<form class="layui-form" method="post">
+    {:token()}
+    <div class="layui-form-item">
+        <label class="layui-form-label">分组</label>
+        <div class="layui-input-block">
+            <select name="row[group]" lay-verify="required">
+                <option value=""></option>
+                {volist name="groupArray" id="vo"}
+                <option value="{$key}" {eq name="key" value="$groupType"}selected{/eq}>{$vo}[{$key}]</option>
+                {/volist}
+            </select>
+        </div>
+    </div>
+    <div class="layui-form-item">
+        <label class="layui-form-label">配置类型</label>
+        <div class="layui-input-block">
+            <select name="row[type]" lay-filter="fieldType" lay-verify="required">
+                <option value=""></option>
+                {volist name="fieldType" id="vo"}
+                <option value="{$vo.name}" {eq name="vo.name" value="text"}selected{/eq}>{$vo.title}[{$vo.name}]</option>
+                {/volist}
+            </select>
+        </div>
+    </div>
+    <div class="layui-form-item">
+        <label class="layui-form-label">配置标题</label>
+        <div class="layui-input-inline">
+            <input type="text" name="row[title]" lay-verify="required" autocomplete="off" placeholder="字段中文标题" class="layui-input">
+        </div>
+        <div class="layui-form-mid layui-word-aux">一般由中文组成，仅用于显示</div>
+    </div>
+    <div class="layui-form-item">
+        <label class="layui-form-label">配置名称</label>
+        <div class="layui-input-block">
+            <input type="text" name="row[name]" lay-verify="required" autocomplete="off" placeholder="字段英文名称" class="layui-input">
+        </div>
+        <div class="layui-form-mid no-float layui-word-aux">英文字母和下划线组成，如 <code>web_site_title</code></div>
+    </div>
+    <div class="layui-form-item layui-form-text">
+        <label class="layui-form-label">配置默认值</label>
+        <div class="layui-input-block">
+            <textarea name="row[value]" placeholder="未指定值时默认插入字段的值" class="layui-textarea"></textarea>
+        </div>
+        <div class="layui-form-mid no-float layui-word-aux">配置类型为<code>数组</code>时请按如下格式填写：
+            <br>{"键名1":"键值1","键名2":"键值2"}</div>
+    </div>
+    <div class="layui-form-item layui-form-text" id="options" style="display: none;">
+    </div>
+    <div class="layui-form-item">
+        <label class="layui-form-label">可见条件</label>
+        <div class="layui-input-inline">
+            <input type="text" name="row[visible]" autocomplete="off" placeholder="可见条件" class="layui-input">
+        </div>
+    </div>
+    <div class="layui-form-item layui-form-text">
+        <label class="layui-form-label">拓展属性</label>
+        <div class="layui-input-block">
+            <textarea name="row[extend]" placeholder="填写拓展属性" class="layui-textarea"></textarea>
+        </div>
+        <div class="layui-form-mid no-float layui-word-aux">如：data-field="{name}"，扩展属性支持{id}、{name}、{group}、{title}、{value}替换</div>
+    </div>
+    <div class="layui-form-item layui-form-text">
+        <label class="layui-form-label">配置备注</label>
+        <div class="layui-input-block">
+            <textarea name="row[remark]" placeholder="填写配置说明" class="layui-textarea"></textarea>
+        </div>
+    </div>
+    <div class="layui-form-item">
+        <label class="layui-form-label">排序</label>
+        <div class="layui-input-block">
+            <input type="number" name="row[listorder]" autocomplete="off" placeholder="只能是正整数" class="layui-input" value="100">
+        </div>
+    </div>
+    <div class="layui-form-item">
+        <label class="layui-form-label">状态</label>
+            <div class="layui-input-block">
+                <input type="radio" name="row[status]" value="1" title="显示" checked>
+                <input type="radio" name="row[status]" value="0" title="隐藏">
+            </div>
+    </div>
+    <div class="layui-form-item layer-footer">
+        <div class="layui-input-block">
+            <button class="layui-btn" lay-submit="">立即提交</button>
+            <button type="reset" class="layui-btn layui-btn-primary">重置</button>
+        </div>
+    </div>
+</form>
+<div id="options1" style="display: none;">
+    <label class="layui-form-label">配置项</label>
+    <div class="layui-input-block">
+        <textarea name="row[options]" placeholder="键值:键名
+键值:键名
+键值:键名
+....." class="layui-textarea"></textarea>
+    </div>
+    <div class="layui-form-mid no-float layui-word-aux">如：
+        <br>1:北京
+        <br>2:上海
+        <br>3:广东
+    </div>
+</div>
+<div id="options2" style="display: none;">
+    <label class="layui-form-label">配置项</label>
+    <div class="layui-input-block">
+        <textarea name="row[options]" placeholder="url:提供数据源的URL地址
+field:列表显示读取的字段,默认[name]
+key:列表选中后渲染的字段,默认[id]
+pagination:是否开启分页,默认[true]
+limit:分页大小,默认[10]
+multiple:是否支持多选,默认[false]
+max:最多可选择数量
+order:排序字段，默认[id]" class="layui-textarea"></textarea>
+    </div>
+    <div class="layui-form-mid no-float layui-word-aux">如：
+<br>url:admin/auth.manager/index
+<br>field:username
+<br>key:id
+<br>pagination:true
+<br>limit:10
+<br>multiple:true
+<br>max:20
+<br>order:id
+    </div>
+</div>
+<div id="options3" style="display: none;">
+    <label class="layui-form-label">自定义模板</label>
+    <div class="layui-input-block">
+        <select name="row[options]">
+            <option value="custom.html" selected>默认模板:custom.html</option>
+            {volist name="custom" id="vo"}
+            <option value="{$vo}">{$vo}</option>
+            {/volist}
+        </select>
+    </div>
+    <div class="layui-form-mid no-float layui-word-aux">新增模板以custom_xx.html形式<br>模板位于application/admin/view/custom目录下</div>
+</div>
+{/block}
+{block name="script"}
+<script type="text/javascript">
+layui.use(['form','yznForm'], function() {
+    var form = layui.form,
+    yznForm = layui.yznForm;
+
+    form.on('select(fieldType)', function(data) {
+        if (data.value == 'checkbox' || data.value == 'select' || data.value == 'selects' || data.value == 'radio' || data.value == 'selectpage' || data.value == 'custom') {
+            if (data.value == 'selectpage') {
+                $('#options').html($('#options2').html());
+            }else if(data.value == 'custom'){
+                $('#options').html($('#options3').html()); 
+            }else{
+                $('#options').html($('#options1').html());   
+            }
+            $('#options').show();
+            form.render();
+        }else{
+            $('#options').hide();
+        }
+    });
+
+    yznForm.bindevent($("form.layui-form"));
+});
+</script>
+{/block}

application/admin/view/general/config/edit.html

@@ -0,0 +1,207 @@
+{extend name="index_layout"/}
+{block name="main"}
+<form class="layui-form" method="post">
+    {:token()}
+    <div class="layui-form-item">
+        <label class="layui-form-label">分组</label>
+        <div class="layui-input-block">
+            <select name="row[group]" lay-verify="required">
+                <option value=""></option>
+                {volist name="groupArray" id="vo"}
+                <option value="{$key}" {if $data.group==$key}selected{/if}>{$vo}[{$key}]</option>
+                {/volist}
+            </select>
+        </div>
+    </div>
+    <div class="layui-form-item">
+        <label class="layui-form-label">配置类型</label>
+        <div class="layui-input-block">
+            <select name="row[type]" lay-filter="fieldType" lay-verify="required">
+                <option value=""></option>
+                {volist name="fieldType" id="vo"}
+                <option value="{$vo.name}" {if $data.type==$vo.name}selected{/if}>{$vo.title}[{$vo.name}]</option>
+                {/volist}
+            </select>
+        </div>
+    </div>
+    <div class="layui-form-item">
+        <label class="layui-form-label">配置标题</label>
+        <div class="layui-input-inline">
+            <input type="text" name="row[title]" lay-verify="required" value="{$data.title}" autocomplete="off" placeholder="字段中文标题" class="layui-input">
+        </div>
+        <div class="layui-form-mid layui-word-aux">一般由中文组成，仅用于显示</div>
+    </div>
+    <div class="layui-form-item">
+        <label class="layui-form-label">配置名称</label>
+        <div class="layui-input-block">
+            <input type="text" name="row[name]" lay-verify="required" value="{$data.name}" autocomplete="off" placeholder="字段英文名称" class="layui-input">
+        </div>
+        <div class="layui-form-mid no-float layui-word-aux">英文字母和下划线组成，如 <code>web_site_title</code></div>
+    </div>
+    <div class="layui-form-item layui-form-text">
+        <label class="layui-form-label">配置默认值</label>
+        <div class="layui-input-block">
+            <textarea name="row[value]" placeholder="未指定值时默认插入字段的值" class="layui-textarea">{$data.value}</textarea>
+        </div>
+        <div class="layui-form-mid no-float layui-word-aux">配置类型为<code>数组</code>时请按如下格式填写：
+            <br>{"键名1":"键值1","键名2":"键值2"}</div>
+    </div>
+    <div class="layui-form-item layui-form-text" id="options" {if $data.type !== 'custom' && $data.type !== 'checkbox' &&  $data.type !== 'select' &&  $data.type !== 'selects' && $data.type !== 'radio' && $data.type !== 'selectpage' } style="display: none;" {/if}>
+        {if $data.type == 'custom'}
+        <label class="layui-form-label">自定义模板</label>
+        <div class="layui-input-block">
+            <select name="row[options]">
+                <option value="custom.html">默认模板:custom.html</option>
+                {volist name="custom" id="vo"}
+                <option value="{$vo}" {if $data.options==$vo}selected{/if}>{$vo}</option>
+                {/volist}
+            </select>
+        </div>
+        <div class="layui-form-mid no-float layui-word-aux">新增模板以custom_xx.html形式<br>模板位于application/admin/view/custom目录下</div>
+        {else}
+        <label class="layui-form-label">配置项</label>
+        <div class="layui-input-block">
+            <textarea name="row[options]" placeholder="{if $data.type !== 'selectpage'}
+键值:键名
+键值:键名
+键值:键名
+.....
+{else}
+url:提供数据源的URL地址
+field:列表显示读取的字段,默认[name]
+key:列表选中后渲染的字段,默认[id]
+pagination:是否开启分页,默认[true]
+limit:分页大小,默认[10]
+multiple:是否支持多选,默认[false]
+max:最多可选择数量
+order:排序字段，默认[id]
+{/if}
+" class="layui-textarea">{$data.options}</textarea>
+        </div>
+        <div class="layui-form-mid no-float layui-word-aux">如：
+            {if $data.type !== 'selectpage'}
+<br>1:北京
+<br>2:上海
+<br>3:广东
+            {else}
+<br>url:admin/auth.manager/index
+<br>field:username
+<br>key:id
+<br>pagination:true
+<br>limit:10
+<br>multiple:true
+<br>max:20
+<br>order:id
+            {/if}
+        </div>
+        {/if}
+    </div>
+    <div class="layui-form-item">
+        <label class="layui-form-label">可见条件</label>
+        <div class="layui-input-inline">
+            <input type="text" name="row[visible]" autocomplete="off" placeholder="可见条件" class="layui-input" value="{$data.visible}">
+        </div>
+    </div>
+    <div class="layui-form-item layui-form-text">
+        <label class="layui-form-label">拓展属性</label>
+        <div class="layui-input-block">
+            <textarea name="row[extend]" placeholder="填写拓展属性" class="layui-textarea">{$data.extend}</textarea>
+        </div>
+        <div class="layui-form-mid no-float layui-word-aux">如：data-field="{name}"，扩展属性支持{id}、{name}、{group}、{title}、{value}替换</div>
+    </div>
+    <div class="layui-form-item layui-form-text">
+        <label class="layui-form-label">配置备注</label>
+        <div class="layui-input-block">
+            <textarea name="row[remark]" placeholder="填写配置说明" class="layui-textarea">{$data.remark}</textarea>
+        </div>
+    </div>
+    <div class="layui-form-item">
+        <label class="layui-form-label">排序</label>
+        <div class="layui-input-block">
+            <input type="number" name="row[listorder]" autocomplete="off" placeholder="只能是正整数" class="layui-input" value="{$data.listorder}">
+        </div>
+    </div>
+    <input type="hidden" name="row[id]" value="{$id}">
+    <div class="layui-form-item layer-footer">
+        <div class="layui-input-block">
+            <button class="layui-btn" lay-submit="">立即提交</button>
+            <button type="reset" class="layui-btn layui-btn-primary">重置</button>
+        </div>
+    </div>
+</form>
+<div id="options1" style="display: none;">
+    <label class="layui-form-label">配置项</label>
+    <div class="layui-input-block">
+        <textarea name="row[options]" placeholder="键值:键名
+键值:键名
+键值:键名
+....." class="layui-textarea"></textarea>
+    </div>
+    <div class="layui-form-mid no-float layui-word-aux">如：
+        <br>1:北京
+        <br>2:上海
+        <br>3:广东
+    </div>
+</div>
+<div id="options2" style="display: none;">
+    <label class="layui-form-label">配置项</label>
+    <div class="layui-input-block">
+        <textarea name="row[options]" placeholder="url:提供数据源的URL地址
+field:列表显示读取的字段,默认[name]
+key:列表选中后渲染的字段,默认[id]
+pagination:是否开启分页,默认[true]
+limit:分页大小,默认[10]
+multiple:是否支持多选,默认[false]
+max:最多可选择数量
+order:排序字段，默认[id]" class="layui-textarea"></textarea>
+    </div>
+    <div class="layui-form-mid no-float layui-word-aux">如：
+<br>url:admin/auth.manager/index
+<br>field:username
+<br>key:id
+<br>pagination:true
+<br>limit:10
+<br>multiple:true
+<br>max:20
+<br>order:id
+    </div>
+</div>
+<div id="options3" style="display: none;">
+    <label class="layui-form-label">自定义模板</label>
+    <div class="layui-input-block">
+        <select name="row[options]">
+            <option value="custom.html" selected>默认模板:custom.html</option>
+            {volist name="custom" id="vo"}
+            <option value="{$vo}">{$vo}</option>
+            {/volist}
+        </select>
+    </div>
+    <div class="layui-form-mid no-float layui-word-aux">新增模板以custom_xx.html形式<br>模板位于application/admin/view/custom目录下</div>
+</div>
+{/block}
+{block name="script"}
+<script type="text/javascript">
+layui.use(['form','yznForm'], function() {
+    var form = layui.form,
+    yznForm = layui.yznForm;
+
+    form.on('select(fieldType)', function(data) {
+        if (data.value == 'checkbox' || data.value == 'select' || data.value == 'selects' || data.value == 'radio' || data.value == 'selectpage' || data.value == 'custom') {
+            if (data.value == 'selectpage') {
+                $('#options').html($('#options2').html());
+            }else if(data.value == 'custom'){
+                $('#options').html($('#options3').html());   
+            }else{
+                $('#options').html($('#options1').html());   
+            }
+            $('#options').show();
+            form.render();
+        }else{
+            $('#options').hide();
+        }
+    });
+
+    yznForm.bindevent($("form.layui-form"));
+});
+</script>
+{/block}

application/admin/view/general/config/index.html

@@ -0,0 +1,73 @@
+{extend name="index_layout"/}
+{block name="main"}
+<div class="layui-card">
+    <div class="layui-card-body">
+        <div class="layui-tab layui-tab-card">
+            <ul class="layui-tab-title">
+                {volist name="$groupArray" id="vo"}
+                <li class="{if $key==$group}layui-this{/if}"><a href="{:url('index',['group'=>$key])}">{$vo}</a></li>
+                {/volist}
+            </ul>
+            <div class="layui-tab-content">
+                <table class="layui-hide" id="currentTable" lay-filter="currentTable" data-auth-add="{:$auth->check('general.config/add')}"></table>
+            </div>
+        </div>
+    </div>
+</div>
+<script type="text/html" id="barTool">
+    {{# if(d.type=='radio' || d.type=='select'){ }}
+    <a href='javascript:;' class="layui-btn layui-btn-xs copy" data-clipboard-text="{literal}键：{:config('site.{{d.name}}')} 值：{:config('site.{{d.name}}_text')}{/literal}">代码调用</a>
+    {{# } else if(d.type=='checkbox' || d.type=='array' || d.type=='images' || d.type=='files' || d.type == 'selects'){ }}
+    <a href='javascript:;' class="layui-btn layui-btn-xs copy" data-clipboard-text="{literal}{volist name=&quot;:config('site.{{d.name}}')&quot; id='vo'}  键：{$key}  值：{$vo} <br> {/volist}{/literal}">代码调用</a>
+    {{# } else { }}
+    <a href='javascript:;' class="layui-btn layui-btn-xs copy" data-clipboard-text="{literal}{:config('site.{{d.name}}')}{/literal}">代码调用</a>
+    {{# } }}
+    <a data-open='{:url("edit")}?id={{ d.id }}' title="编辑" class="layui-btn layui-btn-xs {:$auth->check('general.config/edit')?'':'layui-hide'}"><i class='iconfont icon-brush_fill'></i></a>
+    <a href='{:url("del")}?id={{ d.id }}' class="layui-btn layui-btn-danger layui-btn-xs layui-tr-del {:$auth->check('general.config/del')?'':'layui-hide'}"><i class='iconfont icon-trash_fill'></i></a>
+</script>
+{/block}
+{block name="script"}
+<script>
+layui.use(['yznTable','clipboard'], function() {
+    var table = layui.yznTable,
+        $ = layui.$,
+        form = layui.form,
+        clipboard =  layui.clipboard;
+
+    var init = {
+        table_elem: '#currentTable',
+        table_render_id: 'currentTable',
+        add_url: "{:url('add',['groupType'=>$group])}",
+        modify_url:'{:url("multi")}',
+    };
+
+    table.render({
+        init: init,
+        toolbar: ['refresh','add'],
+        url: '{:url("index",["group"=>$group])}',
+        search:false,
+        cols: [
+            [
+                { field: 'listorder', width: 70, title: '排序', edit: 'text' },
+                { field: 'name',align: "left", title: '名称' },
+                { field: 'title',align: "left", title: '标题' },
+                { field: 'ftitle', width: 150, title: '类型' },
+                { field: 'update_time', width: 200, title: '更新时间'},
+                { field: 'status', title: '状态', width: 100, unresize: true,templet: yznTable.formatter.switch },
+                { fixed: 'right', width: 160, title: '操作', toolbar: '#barTool' }
+            ]
+        ],
+    });
+
+    yznTable.bindevent();
+
+    var clipboard = new clipboard('.copy');
+    clipboard.on('success', function(e) {
+        layer.msg("复制成功",{ icon: 1});
+    });
+    clipboard.on('error', function(e) {
+        layer.msg("复制失败！请手动调用",{ icon: 2});
+    });
+});
+</script>
+{/block}

application/admin/view/general/config/setting.html

@@ -0,0 +1,208 @@
+{extend name="index_layout"/}
+{block name="main"}
+<div class="layui-card">
+    <div class="layui-card-body">
+        <div class="layui-tab layui-tab-card">
+            <ul class="layui-tab-title">
+                {volist name="groupArray" id="vo"}
+                <li class="{if $key==$group}layui-this{/if}"><a href="{:url('setting',['group'=>$key])}">{$vo}</a></li>
+                {/volist}
+            </ul>
+            <div class="layui-tab-content">
+                <form class="layui-form" method="post">
+                    {:token()}
+
+                    {volist name="fieldList" id="vo"}
+                    <div data-favisible="{$vo.visible|default=''}">
+                        <div class="layui-form-item">
+                            <label class="layui-form-label {if condition="isset($vo.ifrequire) AND $vo.ifrequire"}layui-form-item-required{/if}">{$vo.title}</label>
+                            {switch name="vo.type"}
+                                {case value="text"}
+                                <div class="layui-input-block">
+                                    <input {$vo.extend_html|raw} type="text" name="{$vo.fieldArr}[{$vo.name}]" placeholder="请输入{$vo.title}" autocomplete="off" class="layui-input" value="{$vo.value}">
+                                </div>
+                                {/case}
+
+                                {case value="password"}
+                                <div class="layui-input-block">
+                                    <input {$vo.extend_html|raw} type="password" name="{$vo.fieldArr}[{$vo.name}]" placeholder="请输入{$vo.title}" autocomplete="off" class="layui-input" value="{$vo.value}" lay-affix="eye">
+                                </div>
+                                {/case}
+
+                                {case value="tags"}
+                                <div class="layui-input-block">
+                                    <input {$vo.extend_html|raw} type="text" name="{$vo.fieldArr}[{$vo.name}]" class="layui-input form-tags tags-{$vo.name}" value="{$vo.value}" data-remark="{$vo.remark|default='输入回车键确认'}">
+                                </div>
+                                {/case}
+
+                                {case value="number"}
+                                <div class="layui-input-block">
+                                    <input {$vo.extend_html|raw} type="number" name="{$vo.fieldArr}[{$vo.name}]" placeholder="请输入{$vo.title}" autocomplete="off" lay-affix="number" class="layui-input" value="{$vo.value}">
+                                </div>
+                                {/case}
+
+                                {case value="switch"}
+                                <div class="layui-input-block">
+                                    <input type="checkbox" name="{$vo.fieldArr}[{$vo.name}]" lay-skin="switch" lay-text="ON|OFF" value="{$vo['value']}" {if 1==$vo[ 'value' ]}checked='' {/if}>
+                                </div>
+                                {/case}
+
+                                {case value="array"}
+                                <dl {$vo.extend_html|raw} class="layui-input-block fieldlist" data-name="{$vo.fieldArr}[{$vo.name}]" data-id="{$vo.name}">
+                                    <dd>
+                                        <ins>键名</ins>
+                                        <ins>键值</ins>
+                                    </dd>
+                                    <dd><button type="button" class="layui-btn btn-append">追加</button></dd>
+                                    <textarea name="{$vo.fieldArr}[{$vo.name}]" class="layui-textarea layui-hide">{$vo.value}</textarea>
+                                </dl>
+                                <script type="text/html" id="{$vo.name}Tpl">
+                                    <dd class="layui-form-item rules-item">
+                                        {{# layui.each(d.lists, function(index, item) { }}
+                                        <input type="text" class="layui-input" name="{{item.name}}[{{item.index}}][key]" placeholder="键" value="{{item.key|| ''}}" />
+                                        <input type="text" class="layui-input" name="{{item.name}}[{{item.index}}][value]" placeholder="值" value="{{item.value|| ''}}" />
+                                        <button type="button" class="layui-btn layui-btn-danger btn-remove layui-btn-xs"><i class="iconfont icon-close"></i></button>
+                                        <button type="button" class="layui-btn btn-dragsort layui-btn-xs"><i class="iconfont icon-yidong"></i></button>
+                                        {{# }); }}
+                                    </dd>
+                                </script>
+                                {/case}
+
+                                {case value="checkbox"}
+                                <div class="layui-input-block">
+                                    {volist name="vo.options" id="v"}
+                                    <input  type="checkbox" name="{$vo.fieldArr}[{$vo.name}][]" lay-skin="primary" title="{$v}" value="{$key}" {if in_array($key,$vo[ 'value' ])}checked{/if}>
+                                    {/volist}
+                                </div>
+                                {/case}
+
+                                {case value="radio"}
+                                <div class="layui-input-block">
+                                    {volist name="vo.options" id="v"}
+                                    <input type="radio" name="{$vo.fieldArr}[{$vo.name}]" value="{$key}" title="{$v}" {if $key==$vo [ 'value' ]}checked='' {/if}> {/volist}
+                                </div>
+                                {/case}
+
+                                {case value="select"}
+                                <div class="layui-input-block">
+                                    <select name="{$vo.fieldArr}[{$vo.name}]">
+                                        <option value=""></option>
+                                        {volist name="vo.options" id="v"}
+                                        <option value="{$key}" {if $key==$vo[ 'value' ]}selected="" {/if}>{$v}</option>
+                                        {/volist}
+                                    </select>
+                                </div>
+                                {/case}
+
+                                {case value="selects"}
+                                <div class="layui-input-block">
+                                    <div {$vo.extend_html|raw} class="form-selects" data-name="{$vo.fieldArr}[{$vo.name}]" data-id="{$vo.name}" data-value="{$vo.value}" data-list="{$vo.options|json_encode}"></div>
+                                </div>
+                                {/case}
+
+                                {case value="selectpage"}
+                                <div class="layui-input-block">
+                                    <input {$vo.extend_html|raw} class="form-control layui-input selectpage" type="text" name="{$vo.fieldArr}[{$vo.name}]" data-source="{$vo.options.url|url}" data-multiple="{$vo.options.multiple|default='false'}" data-field="{$vo.options.field|default='name'}" data-primary-key="{$vo.options.key|default='id'}" data-max-select-limit="{$vo.options.max|default='20'}" data-pagination="{$vo.options.pagination|default='true'}" data-page-size="{$vo.options.limit|default='10'}" data-order-by="{$vo.options.order|default='id'}"  value="{$vo.value}">
+                                </div>
+                                {/case}
+
+                                {case value="color"}
+                                <div class="layui-input-block">
+                                    <div class="layui-input-inline" style="width: 120px;">
+                                        <input {$vo.extend_html|raw} type="text" name="{$vo.fieldArr}[{$vo.name}]" value="{$vo.value}" placeholder="请选择颜色" class="layui-input test-form-input" id="c-{$vo.name}">
+                                    </div>
+                                    <div class="layui-inline" style="left: -11px;">
+                                        <div class="colorpicker" data-input-id="c-{$vo.name}"></div>
+                                    </div>
+                                </div>
+                                {/case}
+
+                                {case value="datetime"}
+                                <div class="layui-input-block">
+                                    <input {$vo.extend_html|raw} type="text" class="layui-input datetime" name="{$vo.fieldArr}[{$vo.name}]" placeholder="请输入{$vo.title}" value="{$vo.value}">
+                                </div>
+                                {/case}
+
+                                {case value="datetimerange"}
+                                <div class="layui-input-block">
+                                    <input {$vo.extend_html|raw} type="text" class="layui-input datetime" name="{$vo.fieldArr}[{$vo.name}]" placeholder="请输入{$vo.title}" value="{$vo.value}" data-date-range="-">
+                                </div>
+                                {/case}
+
+                                {case value="textarea"}
+                                <div class="layui-input-block">
+                                    <textarea {$vo.extend_html|raw} placeholder="请输入{$vo.title}" class="layui-textarea" name="{$vo.fieldArr}[{$vo.name}]">{$vo.value}</textarea>
+                                </div>
+                                {/case}
+
+                                {case value="image" break="0"}{/case}
+                                {case value="images"}
+                                <div class="layui-input-block">
+                                    <div class="layui-col-xs4">
+                                        <input type="text" name="{$vo.fieldArr}[{$vo.name}]"  id="c-{$vo.name}" value="{$vo.value|default=''}" class="layui-input">
+                                    </div>
+                                    <button type="button" class="layui-btn faupload" id="faupload-{$vo.name}" data-multiple="{$vo.type=='image'?'false':'true'}" data-input-id="c-{$vo.name}" data-preview-id="p-{$vo.name}" data-type="image"><i class="layui-icon layui-icon-upload"></i> 上传</button><button type="button" class="layui-btn fachoose" data-multiple="{$vo.type=='image'?'false':'true'}" data-mimetype="image" data-input-id="c-{$vo.name}" id="fachoose-c-{$vo.name}"><i class="iconfont icon-other"></i> 选择</button>
+                                    <ul class="layui-row list-inline plupload-preview" id="p-{$vo.name}"></ul>
+                                </div>
+                                {/case}
+
+                                {case value="file" break="0"}{/case}
+                                {case value="files"}
+                                <div class="layui-input-block">
+                                    <div class="layui-col-xs4">
+                                        <input type="text" name="{$vo.fieldArr}[{$vo.name}]"  id="c-{$vo.name}" value="{$vo.value|default=''}" class="layui-input">
+                                    </div>
+                                    <button type="button" class="layui-btn faupload" id="faupload-{$vo.name}" data-multiple="{$vo.type=='file'?'false':'true'}" data-input-id="c-{$vo.name}" data-preview-id="p-{$vo.name}" data-type="file"><i class="layui-icon layui-icon-upload"></i> 上传</button><button type="button" class="layui-btn fachoose" data-multiple="{$vo.type=='file'?'false':'true'}" data-mimetype="file" data-input-id="c-{$vo.name}" id="fachoose-c-{$vo.name}"><i class="iconfont icon-other"></i> 选择</button>
+                                </div>
+                                {/case}
+
+                                {case value="Ueditor"}
+                                <div class="layui-input-block">
+                                    <script {$vo.extend_html|raw} type="text/plain" class="js-ueditor" id="{$vo.name}" name="{$vo.fieldArr}[{$vo.name}]">{$vo.value|raw}</script>
+                                </div>
+                                <div class="{$vo.name}_attr editor_tool" style="margin-left: 140px;">
+                                    <a class="layui-btn layui-btn-sm" id="{$vo.name}grabimg" style="margin-top: 4px;">图片本地化</a>
+                                    <a class="layui-btn layui-btn-sm" id="{$vo.name}filterword" style="margin-top: 4px;">检测违禁词</a>
+                                </div>
+                                {/case}
+
+                                {case value="city"}
+                                <div class="layui-input-block">
+                                    <input {$vo.extend_html|raw} type="text" autocomplete="on" class="layui-input" name="{$vo.fieldArr}[{$vo.name}]" id="{$vo.name}" value="{$vo.value}" data-toggle="city-picker" placeholder="请选择"/>
+                                </div>
+                                {/case}
+
+                                {case value="custom"}
+                                   {$vo.options|raw}
+                                {/case}
+
+                                {case value="markdown"}
+                                    {:hook('markdown',$vo)}
+                                {/case}
+                            {/switch}
+                            {if $vo.remark}<div class="layui-form-mid no-float layui-word-aux">{$vo.remark|raw}</div>{/if}
+                        </div>
+                    </div>
+                    {/volist}
+
+                    {if count($fieldList)}
+                    <div class="layui-form-item layer-footer">
+                        <div class="layui-input-block">
+                            <button class="layui-btn" lay-submit data-refresh="false">立即提交</button>
+                        </div>
+                    </div>
+                    {/if}
+                </form>
+            </div>
+        </div>
+    </div>
+</div>
+{/block}
+{block name="script"}
+<script type="text/javascript">
+layui.use('yznForm', function() {
+    var yznForm = layui.yznForm;
+    yznForm.bindevent($("form.layui-form"));
+});
+</script>
+{/block}

application/admin/view/general/profile/index.html

@@ -0,0 +1,106 @@
+{extend name="index_layout"/}
+{block name="main"}
+<style type="text/css">
+.admin-info {padding: 50px 20px 35px 20px; }
+.admin-info .photo {display: block; width: 130px; height: 130px; margin: 0 auto; border-radius: 50%; }
+.admin-info .photo img {display: block; width: 100%; height: 100%; border: none; border-radius: 50%; }
+.layui-user {display: block; width: 100%; height: 30px; line-height: 30px; text-align: center; padding-top: 15px; color: #333; font-size: 16px; }
+.login-time {display: block; width: 100%; height: 30px; line-height: 30px; text-align: center; font-size: 14px; color: #666777; }
+</style>
+<div class="layui-row layui-col-space20">
+    <div class="layui-col-sm4 layui-col-md3 layui-col-lg3">
+        <div class="layui-card">
+            <div class="layui-card-header">个人资料</div>
+            <div class="layui-card-body">
+                <div class="admin-info">
+                    <div class="photo">
+                        <img id="avatar" src="__STATIC__/admin/img/avatar.png">
+                    </div>
+                    <h3 class="layui-user">{$userInfo.email}</h3>
+                    <p class="login-time">上次登录：<?php if($userInfo['last_login_time'] > 0) { echo $userInfo['last_login_time'];} else { echo '--';}?></p>
+                </div>
+                <form class="layui-form" method="post">
+                    {:token()}
+                    <div class="layui-form-item">
+                        <label class="layui-form-label">用户名</label>
+                        <div class="layui-input-inline">
+                            <input type="text" autocomplete="off" placeholder="用户名" class="layui-input layui-disabled" value="{$userInfo.username}" disabled>
+                        </div>
+                    </div>
+                    <div class="layui-form-item">
+                        <label class="layui-form-label">密码</label>
+                        <div class="layui-input-inline">
+                            <input type="password" name="password" autocomplete="off" placeholder="不修改留空即可" class="layui-input">
+                        </div>
+                    </div>
+                    <div class="layui-form-item">
+                        <label class="layui-form-label">邮箱</label>
+                        <div class="layui-input-inline">
+                            <input type="text" name="email" lay-verify="required|email" autocomplete="off" placeholder="邮箱" class="layui-input" value="{$userInfo.email}">
+                        </div>
+                    </div>
+                    <div class="layui-form-item">
+                        <label class="layui-form-label">手机</label>
+                        <div class="layui-input-inline">
+                            <input type="text" name="mobile" autocomplete="off" placeholder="手机" class="layui-input" value="{$userInfo.mobile}">
+                        </div>
+                    </div>
+                    <div class="layui-form-item">
+                        <label class="layui-form-label">真实姓名</label>
+                        <div class="layui-input-inline">
+                            <input type="text" name="nickname" autocomplete="off" placeholder="真实姓名" class="layui-input" value="{$userInfo.nickname}">
+                        </div>
+                    </div>
+                    <div class="layui-form-item layer-footer">
+                        <div class="layui-input-block">
+                            <button class="layui-btn" lay-submit="{:url('update')}" data-refresh="false">立即提交</button>
+                            <button type="reset" class="layui-btn layui-btn-primary">重置</button>
+                        </div>
+                    </div>
+                </form>
+            </div>
+        </div>
+    </div>
+    <div class="layui-col-sm8 layui-col-md9 layui-col-lg9">
+        <div class="layui-card">
+            <div class="layui-card-header">操作日志</div>
+            <div class="layui-card-body">
+                <table class="layui-hide" id="currentTable" lay-filter="currentTable"></table>
+            </div>
+        </div>
+    </div>
+</div>
+{/block}
+{block name="script"}
+<script>
+layui.use(['yznTable','yznForm'], function() {
+    var table = layui.yznTable,
+    yznForm=layui.yznForm;
+
+    yznForm.bindevent($("form.layui-form"));
+
+    var init = {
+        table_elem: '#currentTable',
+        table_render_id: 'currentTable',
+    };
+
+    table.render({
+        init: init,
+        toolbar: ['refresh'],
+        url: '{:url("index")}',
+        cols: [
+            [
+                { field: 'id', width: 80, title: 'ID', sort: true },
+                { field: 'title', title: '标题' },
+                { field: 'url', title: '操作URL' },
+                { field: 'create_time', width: 180, title: '时间', search: 'range' },
+                { field: 'ip', width: 120, title: 'IP' },
+            ]
+        ],
+        page: {}
+    });
+
+    yznTable.bindevent();
+});
+</script>
+{/block}

application/admin/view/index/index.html

@@ -0,0 +1 @@
+{extend name="layout"/}

application/admin/view/index/login.html

@@ -0,0 +1,122 @@
+<!DOCTYPE html>
+<html lang="en">
+
+<head>
+    <meta charset="UTF-8">
+    <meta name="renderer" content="webkit">
+    <meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1">
+    <meta name="viewport" content="width=device-width, initial-scale=1.0, minimum-scale=1.0, maximum-scale=1.0, user-scalable=0">
+    <title>登录</title>
+    <link rel="stylesheet" type="text/css" href="__STATIC__/libs/layui/css/layui.css" />
+    <script language="JavaScript">
+        <!--
+    if(top!=self)
+    if(self!=top) top.location=self.location;
+//-->
+</script>
+    <style type="text/css">
+    body {background-repeat: no-repeat; background-color: #f1f4fd; background-size: cover; background-image: url(__STATIC__/admin/img/bg.png); }
+    ::-webkit-input-placeholder {color: #999;}
+    ::-moz-placeholder {color: #999;}
+    :-ms-input-placeholder {color: #999;}
+    .login-main {width: 400px;margin: auto !important;margin-top: 140px !important; -webkit-box-sizing: border-box; -moz-box-sizing: border-box; -o-box-sizing: border-box; box-sizing: border-box; background: #fff; -webkit-border-radius: 2px; -moz-border-radius: 2px; border-radius: 2px; box-shadow:0 0 30px rgb(0 0 0 / 10%);overflow: hidden;}
+    .login-main .layui-elip{margin-bottom: 15px;height: 117px; background-color: #148be4;font-size: 30px; font-weight: 400; font-stretch: normal; letter-spacing: 0; color: #fff; line-height: 117px; text-align: center; overflow: hidden; -webkit-transform: rotate(0); -moz-transform: rotate(0); -ms-transform: rotate(0); -o-transform: rotate(0); transform: rotate(0); }
+    .login-main .layui-elip span.version {font-size: 12px; }
+    .login-main .layui-elip .bg1 {display: inline-block; width: 74px; height: 74px; background: #fff; opacity: .1; border-radius: 0 74px 0 0; position: absolute; left: 0; top: 43px; }
+    .login-main .layui-elip .bg2 {display: inline-block; width: 94px; height: 94px; background: #fff; opacity: .1; border-radius: 50%; position: absolute; right: -16px; top: -16px; }
+    .login-main .login-container{padding: 0 20px 20px;}
+    .login-main form .verify-box input {display: inline-block; width: 60%; }
+    .login-main form .verify-box img {display: inline-block; margin-left: 2%; width: 36%; height: 38px; }
+    .login-main .layui-form-checkbox[lay-skin=primary] i {border-color: #1e9fff!important; color: #fff !important;background: #fff}
+    .login-main .layui-form-checked[lay-skin=primary] i {border-color: #1e9fff!important;background-color: #1e9fff;color: #fff;}
+    .login-main .layui-form-checkbox[lay-skin=primary]:hover i {border-color: #1e9fff; color: #fff; }
+    @media screen and (max-width: 450px) {
+        body{height: 100vh;}
+        .login-main {width: 300px; margin: -150px 0 0 -150px; }
+        .login-main .layui-elip {height: 90px; line-height: 90px; }
+        .login-main .layui-elip {font-size: 20px; }
+    }
+    </style>
+    {:hook('admin_login_style')}
+</head>
+
+<body>
+    <div id="mydiv">
+        <div class="login-main">
+            <div class="layui-elip">YZNCMS管理系统&nbsp;<span class="version">v{$Think.config.version.yzncms_version}</span><span class="bg1"></span><span class="bg2"></span></div>
+            <form class="layui-form" action="{:url('login')}">
+                <!--@AdminLoginFormBegin-->
+                {:token()}
+                <div class="login-container">
+                    <div class="layui-form-item">
+                        <div class="layui-input-wrap">
+                            <div class="layui-input-prefix">
+                                <i class="layui-icon layui-icon-username"></i>
+                            </div>
+                            <input type="text" name="username" lay-verify="required" autocomplete="off" placeholder="账号" class="layui-input" lay-affix="clear">
+                        </div>
+                    </div>
+                    <div class="layui-form-item">
+                        <div class="layui-input-wrap">
+                            <div class="layui-input-prefix">
+                                <i class="layui-icon layui-icon-password"></i>
+                            </div>
+                            <input type="password" name="password" lay-verify="required" autocomplete="off" placeholder="密码" class="layui-input" lay-affix="eye">
+                        </div>
+                    </div>
+                    <!--@CaptchaBegin-->
+                    <div class="layui-form-item">
+                        <div class="layui-input-wrap verify-box">
+                            <div class="layui-input-prefix">
+                                <i class="layui-icon layui-icon-vercode"></i>
+                            </div>
+                            <input type="text" name="verify" lay-verify="required" placeholder="验证码" autocomplete="off" class="layui-input">
+                            <img id="verify" src="{:captcha_src()}" alt="验证码" class="captcha">
+                        </div>
+                    </div>
+                    <!--@CaptchaEnd-->
+                    {if $keeyloginhours>0}
+                    <div class="layui-form-item" lay-tips="设定会话有效时长为{$keeyloginhours}小时">
+                        <input type="checkbox" name="keeplogin" title="保持会话" lay-skin="primary">
+                    </div>
+                    {/if}
+                    <div class="layui-form-item login-btn">
+                        <button class="layui-btn layui-btn-normal layui-btn-fluid" lay-submit>登录</button>
+                    </div>
+                </div>
+                <!--@AdminLoginFormEnd-->
+            </form>
+        </div>
+    </div>
+    <script type="text/javascript" src="__STATIC__/libs/layui/layui.js"></script>
+    <script src="__STATIC__/libs/jquery/jquery.min.js"></script>
+    {include file='layui' /}
+    <script type="text/javascript">
+    layui.use(['form', 'layer', 'yznForm'], function() {
+        var form = layui.form,
+            layer = layui.layer,
+            yznForm = layui.yznForm;
+
+        yznForm.bindevent($(".layui-form"),'', function(data,res) {
+            layer.msg('登入成功', {
+                offset: '15px',
+                icon: 1,
+                time: 1000
+            }, function() {
+                window.location.href = res.url;
+            });
+            return false;
+        }, function(res) {
+            $("#verify").click();
+        });
+    });
+    //刷新验证码
+    $("#verify").click(function() {
+        var verifyimg = $("#verify").attr("src");
+        $("#verify").attr("src", verifyimg.replace(/\?.*$/, '') + '?' + Math.random());
+    });
+    </script>
+    {:hook('admin_login_form')}
+</body>
+
+</html>

application/admin/view/index_layout.html

@@ -0,0 +1,33 @@
+<!DOCTYPE html>
+<html>
+
+<head>
+    <meta charset="utf-8">
+    <meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1">
+    <title>YZNCMS后台管理系统</title>
+    <meta name="author" content="YZNCMS">
+    <link rel="stylesheet" href="__STATIC__/libs/layui/css/layui.css">
+    <link rel="stylesheet" href="__STATIC__/admin/css/admin.css?v={$Think.config.version.yzncms_release}">
+    <link rel="stylesheet" href="__STATIC__/common/font/iconfont.css?v={$Think.config.version.yzncms_release}">
+    <script src="__STATIC__/libs/layui/layui.js"></script>
+    <script src="__STATIC__/libs/jquery/jquery.min.js"></script>
+    <script type="text/javascript">
+    //全局变量
+    var GV = {
+        'site':{$site|raw|json_encode},
+        'image_upload_url': '{$image_upload_url ? $image_upload_url : url("admin/ajax/upload", ["dir" => "images"])}',
+        'file_upload_url': '{$file_upload_url ? $file_upload_url : url("admin/ajax/upload", ["dir" => "files"])}',
+        'attachment_select_url': '{$attachment_select_url ? $attachment_select_url : url("general.attachments/select")}',
+    };
+    </script>
+</head>
+
+<body class="childrenBody {:defined('IS_DIALOG') && IS_DIALOG ? 'is-dialog' : ''}">
+    {block name="main"}主内容{/block}
+    {block name="layui"}
+    {include file='admin@layui' /}
+    {/block}
+    {block name="script"}{/block}
+</body>
+
+</html>

application/admin/view/inputItem.html

@@ -0,0 +1,176 @@
+{volist name="fieldList" id="vo"}
+    <div data-favisible="{$vo.visible|default=''}">
+        <div class="layui-form-item">
+            {if $vo.type!='hidden'}<label class="layui-form-label {if condition="isset($vo.ifrequire) AND $vo.ifrequire"}layui-form-item-required{/if}">{$vo.title}</label>{/if}
+            {switch name="vo.type"}
+                {case value="hidden"}
+                {if $vo.value}<input type="hidden" class="form-control" name="{$vo.fieldArr}[{$vo.name}]"  value="{$vo.value}">{/if}
+                {/case}
+
+                {case value="text"}
+                <div class="layui-input-block">
+                    <input type="text" name="{$vo.fieldArr}[{$vo.name}]" placeholder="请输入{$vo.title}" autocomplete="off" class="layui-input" value="{$vo.value}">
+                </div>
+                {/case}
+
+                {case value="password"}
+                <div class="layui-input-block">
+                    <input type="password" name="{$vo.fieldArr}[{$vo.name}]" placeholder="请输入{$vo.title}" autocomplete="off" class="layui-input" value="{$vo.value}" lay-affix="eye">
+                </div>
+                {/case}
+
+                {case value="tags"}
+                <div class="layui-input-block">
+                    <input type="text" name="{$vo.fieldArr}[{$vo.name}]" class="layui-input form-tags tags-{$vo.name}" value="{$vo.value}" data-remark="{$vo.remark|default='输入回车键确认'}">
+                </div>
+                {/case}
+
+                {case value="number"}
+                <div class="layui-input-block">
+                    <input type="number" name="{$vo.fieldArr}[{$vo.name}]" placeholder="请输入{$vo.title}" autocomplete="off" lay-affix="number" class="layui-input" value="{$vo.value}">
+                </div>
+                {/case}
+
+                {case value="switch"}
+                <div class="layui-input-block">
+                    <input type="checkbox" name="{$vo.fieldArr}[{$vo.name}]" lay-skin="switch" lay-text="ON|OFF" value="{$vo['value']}" {if 1==$vo[ 'value' ]}checked='' {/if}>
+                </div> 
+                {/case}
+
+                {case value="array"}
+                <dl class="layui-input-block fieldlist" data-name="{$vo.fieldArr}[{$vo.name}]" data-id="{$vo.name}">
+                    <dd>
+                        <ins>键名</ins>
+                        <ins>键值</ins>
+                    </dd>
+                    <dd><button type="button" class="layui-btn btn-append">追加</button></dd>
+                    <textarea name="{$vo.fieldArr}[{$vo.name}]" class="layui-textarea layui-hide">{$vo.value}</textarea>
+                </dl>
+                <script type="text/html" id="{$vo.name}Tpl">
+                    <dd class="layui-form-item rules-item">
+                        {{# layui.each(d.lists, function(index, item) { }}
+                        <input type="text" class="layui-input" name="{{item.name}}[{{item.index}}][key]" placeholder="键" value="{{item.key|| ''}}" />
+                        <input type="text" class="layui-input" name="{{item.name}}[{{item.index}}][value]" placeholder="值" value="{{item.value|| ''}}" />
+                        <button type="button" class="layui-btn layui-btn-danger btn-remove layui-btn-xs"><i class="iconfont icon-close"></i></button>
+                        <button type="button" class="layui-btn btn-dragsort layui-btn-xs"><i class="iconfont icon-yidong"></i></button>
+                        {{# }); }}
+                    </dd>
+                </script>
+                {/case}
+
+                {case value="checkbox"}
+                <div class="layui-input-block">
+                    {volist name="vo.options" id="v"}
+                    <input type="checkbox" name="{$vo.fieldArr}[{$vo.name}][]" lay-skin="primary" title="{$v}" value="{$key}" {if in_array($key,$vo[ 'value' ])}checked{/if}>
+                    {/volist}
+                </div>
+                {/case}
+
+                {case value="radio"}
+                <div class="layui-input-block">
+                    {volist name="vo.options" id="v"}
+                    <input type="radio" name="{$vo.fieldArr}[{$vo.name}]" value="{$key}" title="{$v}" {if $key==$vo [ 'value' ]}checked='' {/if}> {/volist}
+                </div>
+                {/case}
+
+                {case value="select"}
+                <div class="layui-input-block">
+                    <select name="{$vo.fieldArr}[{$vo.name}]">
+                        <option value=""></option>
+                        {volist name="vo.options" id="v"}
+                        <option value="{$key}" {if $key==$vo[ 'value' ]}selected="" {/if}>{$v}</option>
+                        {/volist}
+                    </select>
+                </div>
+                {/case}
+
+                {case value="selects"}
+                <div class="layui-input-block">
+                    <div class="form-selects" data-name="{$vo.fieldArr}[{$vo.name}]" data-id="{$vo.name}" data-value="{$vo.value}" data-list="{$vo.options|json_encode}"></div>
+                </div>
+                {/case}
+
+                {case value="selectpage"}
+                <div class="layui-input-block">
+                    <input class="form-control layui-input selectpage" type="text" name="{$vo.fieldArr}[{$vo.name}]" data-source="{$vo.options.url|url}" data-multiple="{$vo.options.multiple|default='false'}" data-field="{$vo.options.field|default='name'}" data-primary-key="{$vo.options.key|default='id'}" data-max-select-limit="{$vo.options.max|default='20'}" data-pagination="{$vo.options.pagination|default='true'}" data-page-size="{$vo.options.limit|default='10'}" data-order-by="{$vo.options.order|default='id'}"  value="{$vo.value}">
+                </div>
+                {/case}
+
+                {case value="color"}
+                <div class="layui-input-block">
+                    <div class="layui-input-inline" style="width: 120px;">
+                        <input type="text" name="{$vo.fieldArr}[{$vo.name}]" value="{$vo.value}" placeholder="请选择颜色" class="layui-input test-form-input" id="c-{$vo.name}">
+                    </div>
+                    <div class="layui-inline" style="left: -11px;">
+                        <div class="colorpicker" data-input-id="c-{$vo.name}"></div>
+                    </div>
+                </div>
+                {/case}
+
+                {case value="datetime"}
+                <div class="layui-input-block">
+                    <input type="text" class="layui-input datetime" name="{$vo.fieldArr}[{$vo.name}]" placeholder="请输入{$vo.title}" value="{$vo.value}">
+                </div>
+                {/case}
+
+                {case value="datetimerange"}
+                <div class="layui-input-block">
+                    <input type="text" class="layui-input datetime" name="{$vo.fieldArr}[{$vo.name}]" placeholder="请输入{$vo.title}" value="{$vo.value}" data-date-range="-">
+                </div>
+                {/case}
+
+                {case value="textarea"}
+                <div class="layui-input-block">
+                    <textarea placeholder="请输入{$vo.title}" class="layui-textarea" name="{$vo.fieldArr}[{$vo.name}]">{$vo.value}</textarea>
+                </div>
+                {/case}
+
+                {case value="image" break="0"}{/case}
+                {case value="images"}
+                <div class="layui-input-block">
+                    <div class="layui-col-xs4">
+                        <input type="text" name="{$vo.fieldArr}[{$vo.name}]"  id="c-{$vo.name}" value="{$vo.value|default=''}" class="layui-input">
+                    </div>
+                    <button type="button" class="layui-btn faupload" id="faupload-{$vo.name}" data-multiple="{$vo.type=='image'?'false':'true'}" data-input-id="c-{$vo.name}" data-preview-id="p-{$vo.name}" data-type="image"><i class="layui-icon layui-icon-upload"></i> 上传</button><button type="button" class="layui-btn fachoose" data-multiple="{$vo.type=='image'?'false':'true'}" data-mimetype="image" data-input-id="c-{$vo.name}" id="fachoose-c-{$vo.name}"><i class="iconfont icon-other"></i> 选择</button>
+                    <ul class="layui-row list-inline plupload-preview" id="p-{$vo.name}"></ul>
+                </div>
+                {/case}
+
+                {case value="file" break="0"}{/case}
+                {case value="files"}
+                <div class="layui-input-block">
+                    <div class="layui-col-xs4">
+                        <input type="text" name="{$vo.fieldArr}[{$vo.name}]"  id="c-{$vo.name}" value="{$vo.value|default=''}" class="layui-input">
+                    </div>
+                    <button type="button" class="layui-btn faupload" id="faupload-{$vo.name}" data-multiple="{$vo.type=='file'?'false':'true'}" data-input-id="c-{$vo.name}" data-preview-id="p-{$vo.name}" data-type="file"><i class="layui-icon layui-icon-upload"></i> 上传</button><button type="button" class="layui-btn fachoose" data-multiple="{$vo.type=='file'?'false':'true'}" data-mimetype="file" data-input-id="c-{$vo.name}" id="fachoose-c-{$vo.name}"><i class="iconfont icon-other"></i> 选择</button>
+                </div>
+                {/case}
+
+                {case value="Ueditor"}
+                <div class="layui-input-block">
+                    <script type="text/plain" class="js-ueditor" id="{$vo.name}" name="{$vo.fieldArr}[{$vo.name}]">{$vo.value|raw}</script>
+                </div>
+                <div class="{$vo.name}_attr editor_tool" style="margin-left: 140px;">
+                    <a class="layui-btn layui-btn-sm" id="{$vo.name}grabimg" style="margin-top: 4px;">图片本地化</a>
+                    <a class="layui-btn layui-btn-sm" id="{$vo.name}filterword" style="margin-top: 4px;">检测违禁词</a>
+                </div>
+                {/case}
+
+                {case value="city"}
+                <div class="layui-input-block">
+                    <input type="text" autocomplete="on" class="layui-input" name="{$vo.fieldArr}[{$vo.name}]" id="{$vo.name}" value="{$vo.value}" data-toggle="city-picker" placeholder="请选择"/>
+                </div>
+                {/case}
+
+                {case value="custom"}
+                   {$vo.options|raw}
+                {/case}
+
+                {case value="markdown"}
+                    {:hook('markdown',$vo)}
+                {/case}
+            {/switch}
+            {if $vo.remark}<div class="layui-form-mid no-float layui-word-aux">{$vo.remark|raw}</div>{/if}
+        </div>
+    </div>
+{/volist}

application/admin/view/layout.html

@@ -0,0 +1,212 @@
+<!DOCTYPE html>
+<html>
+
+<head>
+    <meta charset="utf-8">
+    <meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1">
+    <title>YZNCMS后台管理系统</title>
+    <meta name="author" content="YZNCMS">
+    <link rel="stylesheet" href="__STATIC__/libs/layui/css/layui.css">
+    <!-- 布 局 样 式 -->
+    <link rel="stylesheet" href="__STATIC__/admin/css/global.css?v={$Think.config.version.yzncms_release}" />
+    <link rel="stylesheet" href="__STATIC__/common/font/iconfont.css?v={$Think.config.version.yzncms_release}">
+    <script type="text/javascript">
+    //全局变量
+    var GV = {
+        'site':{$site|raw|json_encode}
+    };
+    </script>
+</head>
+<!-- 结 构 代 码 -->
+<body class="layui-layout-body pear-admin">
+    <!-- 布 局 框 架 -->
+    <div class="layui-layout layui-layout-admin">
+        <!-- 顶 部 样 式 -->
+        <div class="layui-header">
+            <!-- 菜 单 顶 部 -->
+            <div class="layui-logo">
+                <!-- 图 标 -->
+                <div class="logo"><i class="layui-icon layui-icon-component"></i></div>
+                <!-- 标 题 -->
+                <span class="title">YznCMS后台</span>
+            </div>
+            <!-- 顶 部 左 侧 功 能 -->
+            <ul class="layui-nav layui-layout-left">
+                <li class="collapse layui-nav-item"><a href="#" class="layui-icon layui-icon-shrink-right"></a></li>
+                <li class="refresh layui-nav-item"><a href="#" class="layui-icon layui-icon-refresh-1" loading=600></a></li>
+            </ul>
+            <!-- 多 系 统 菜 单 -->
+            <div id="control" class="layui-layout-control"></div>
+            <!-- 顶 部 右 侧 菜 单 -->
+            <ul class="layui-nav layui-layout-right">
+                <li class="layui-nav-item layui-hide-xs"><a href="{$Think.ROOT_URL}" target="_blank" class="layui-icon layui-icon-website"></a></li>
+                <!-- <li class="layui-nav-item layui-hide-xs"><a href="#" class="menuSearch layui-icon layui-icon-search"></a></li> -->
+                <li class="layui-nav-item layui-hide-xs"><a href="#" class="fullScreen layui-icon layui-icon-screen-full"></a></li>
+                <li class="layui-nav-item"><a href="javascript:;"><i class="iconfont icon-trash" title="清空缓存"></i></a>
+                        <dl class="layui-nav-child" id="deletecache">
+                            <dd><a href="javascript:;" data-type="all">一键清理缓存<span class="layui-badge-dot"></span></a></dd>
+                            <hr>
+                            <dd><a href="javascript:;" data-type="data">清理数据缓存</a></dd>
+                            <dd><a href="javascript:;" data-type="template">清理模板缓存</a></dd>
+                            <dd><a href="javascript:;" data-type="addons">清理插件缓存</a></dd>
+                        </dl>
+                </li>
+                <li class="layui-nav-item user">
+                    <!-- 头 像 -->
+                    <a href="javascript:;"><img src="__STATIC__/admin/img/avatar.png" class="layui-nav-img userAvatar" width="35" height="35">{$userInfo.username}</a>
+                    <!-- 功 能 菜 单 -->
+                    <dl class="layui-nav-child">
+                        <dd><a user-menu-url="{:url('general.profile/index')}" user-menu-id="3" user-menu-title="个人资料"><i class="iconfont icon-user-line"></i>&nbsp;个人资料</a></dd>
+                        <dd><a href="javascript:void(0);" class="logout"><i class="iconfont icon-logout-box-r-line"></i>&nbsp;注销登录</a></dd>
+                    </dl>
+                </li>
+                <!-- 主 题 配 置 -->
+                <li class="layui-nav-item setting"><a href="#" class="layui-icon layui-icon-more-vertical"></a></li>
+            </ul>
+        </div>
+        <!-- 侧 边 区 域 -->
+        <div class="layui-side layui-bg-black">
+            <!-- 菜 单 顶 部 -->
+            <div class="layui-logo">
+                <!-- 图 标 -->
+                <div class="logo"><i class="layui-icon layui-icon-component"></i></div>
+                <!-- 标 题 -->
+                <span class="title">YznCMS后台</span>
+            </div>
+            <!-- 菜 单 内 容 -->
+            <div class="layui-side-scroll">
+                <div class="sider-search menuSearch">
+                    <div class="search-input">
+                        <span class="search-text">搜索菜单</span>
+                        <div class="search-icon"><i class="layui-icon layui-icon-search"></i></div>
+                    </div>
+                </div>
+                <div id="sideMenu"></div>
+            </div>
+        </div>
+        <!-- 视 图 页 面 -->
+        <div class="layui-body">
+            <!-- 内 容 页 面 -->
+            <div id="content"></div>
+        </div>
+        <!-- 页脚 -->
+        <div class="layui-footer layui-text">
+            <span class="left">
+                <strong>Copyright © 2017-{:date("Y")}&nbsp;<a href="https://www.yzncms.com/">YznCMS</a>.</strong>&nbsp;All rights reserved.
+
+            </span>
+            <span class="center"></span>
+            <span class="right">
+                <b>Version</b>&nbsp;{$Think.config.version.yzncms_version}
+            </span>
+        </div>
+        <!-- 遮 盖 层 -->
+        <div class="pear-cover"></div>
+        <!-- 加 载 动 画 -->
+        <div class="loader-main">
+            <!-- 动 画 对 象 -->
+            <div class="loader"></div>
+        </div>
+    </div>
+    <!-- 移 动 端 便 捷 操 作 -->
+    <div class="pear-collapsed-pe collapse">
+        <a href="#" class="layui-icon layui-icon-shrink-right"></a>
+    </div>
+    <!-- 依 赖 脚 本 -->
+    <script src="__STATIC__/libs/layui/layui.js"></script>
+    <script type="text/javascript">
+    layui.config({
+       base: '__STATIC__/libs/layui_exts/'
+    }).extend({
+       admin: "pear/admin",           // 框架布局组件
+       tab: "pear/tab",               // 多选项卡组件
+       menu: "pear/menu",             // 数据菜单组件
+       frame: "pear/frame",           // 内容页面组件
+       theme: "pear/theme",           // 主题转换
+       fullscreen:"pear/fullscreen",  // 全屏组件
+    }).use(['layer', 'theme'], function () {
+        layui.theme.changeTheme(window, false);
+    })
+
+    layui.use(['admin'], function() {
+        var admin = layui.admin;
+        var $ = layui.jquery;
+
+        admin.render({
+            "menu": {
+                "data": "{:url('index')}",
+                "method": "POST",
+                "accordion": true,
+                "collapse": false,
+                "control": false,//菜单模式 false 为常规菜单，true 为多系统菜单
+                "select": 0,
+                "async": true
+            }, 
+            "tab": {
+                "enable": true,
+                "keepState": true,
+                "session": true,
+                "preload": true,
+                "max": "10", 
+                "index": {
+                    "id": 0,
+                    "href":"{:url('main/index')}",
+                    "title": "首页"
+                }
+            }, 
+            "theme": {
+                "defaultColor": "2",
+                "defaultMenu": "dark-theme",
+                "defaultHeader": "light-theme",
+                "allowCustom": true,
+                "banner": false
+            },
+            "colors": [
+                    {"id": "1", "color": "#2d8cf0", "second": "#ecf5ff"}, 
+                    {"id": "2", "color": "#36b368", "second": "#f0f9eb"}, 
+                    {"id": "3", "color": "#f6ad55", "second": "#fdf6ec"}, 
+                    {"id": "4", "color": "#f56c6c", "second": "#fef0f0"}, 
+                    {"id": "5", "color": "#3963bc", "second": "#ecf5ff"}
+                ], 
+            "other": {
+                "keepLoad": "1200",
+                "autoHead": false,
+                "footer": false
+            }
+        });
+
+        // 登出逻辑 
+        admin.logout(function(){
+            location.href = "{:url('admin/index/logout')}";
+            // 注销逻辑 返回 true / false
+            return true;
+        })
+
+        //清除缓存
+        $('body').on('click', "dl#deletecache dd a", function() {
+            $.ajax({
+                url: "{:url('admin/index/cache')}",
+                dataType: 'json',
+                data: { type: $(this).data("type") },
+                cache: false,
+                success: function(res) {
+                    if (res.code == 1) {
+                        var index = layer.msg('清除缓存中，请稍候', { icon: 16, time: false, shade: 0.8 });
+                        setTimeout(function() {
+                            layer.close(index);
+                            layer.msg("缓存清除成功！");
+                        }, 1000);
+                    }else{
+                        layer.msg('清除缓存失败');
+                    }
+                },
+                error: function() {
+                    layer.msg('清除缓存失败');
+                }
+            });
+        });
+    })
+    </script>
+</body>
+
+</html>

application/admin/view/layui.html

@@ -0,0 +1,27 @@
+<script type="text/javascript">
+layui.config({
+	version: '{$Think.config.version.yzncms_release}',
+	base: '__STATIC__/libs/layui_exts/'
+}).extend({
+	yzn: 'yzn/yzn',
+	yznForm: 'yznForm/yznForm',
+	tab: "pear/tab",               // 多选项卡组件
+	yznUpload: 'yznUpload/yznUpload',
+	yznTable: 'yznTable/yznTable',
+	clipboard: 'clipboard/clipboard.min',
+	notice: 'notice/notice.min',
+	iconPicker: 'iconPicker/iconPicker.min',
+	ztree: 'ztree/ztree',
+	dragsort: 'dragsort/dragsort.min',
+	tagsinput: 'tagsinput/tagsinput',
+	xmSelect: 'xmSelect/xm-select',
+	selectPage: 'selectPage/selectpage.min',
+	echarts: 'echarts/echarts',
+	echartsTheme: 'echarts/echartsTheme',
+	citypicker: 'citypicker/city-picker',
+	dropzone: 'dropzone/dropzone.min',
+	ueditor: 'ueditor/ueditor.min',
+	cxselect: 'cxselect/cxselect',
+	addons: 'addons',
+});
+</script>

application/admin/view/main/index.html

@@ -0,0 +1,159 @@
+{extend name="index_layout"/}
+{block name="main"}
+{notempty name="default_pass"}
+<div class="alert alert-danger-light">
+    安全提示：超级管理员默认密码未修改，建议马上修改。
+</div>
+{/notempty}
+{if $Think.config.app_debug}
+<div class="alert alert-danger-light">
+    安全提示：当前网站【调试模式】开启中，强烈建议在正式部署后关闭调试模式
+</div>
+{/if}
+{if $Think.config.app_trace}
+<div class="alert alert-danger-light">
+    安全提示：当前网站【Trace调试】开启中，强烈建议在正式部署后关闭Trace调试
+</div>
+{/if}
+<div class="alert alert-success-light">
+    <div id="nowTime"></div>
+</div>
+<div class="layui-row layui-col-space10 panel_box">
+    <div class="panel layui-col-xs12 layui-col-sm6 layui-col-md4 layui-col-lg3">
+        <a href="https://www.kancloud.cn/ken678/yzncms/352683" target="_blank">
+            <div class="panel_icon yzn-bg-blue">
+                <i class="layui-icon layui-icon-read layui-anim"></i>
+            </div>
+            <div class="panel_word">
+                <span>文档</span>
+                <cite>使用手册</cite>
+            </div>
+        </a>
+    </div>
+    <div class="panel layui-col-xs12 layui-col-sm6 layui-col-md4 layui-col-lg3">
+        <a href="https://gitee.com/ken678/YZNCMS" target="_blank">
+            <div class="panel_icon yzn-bg-orange">
+                <i class="layui-icon layui-icon-fonts-code layui-anim"></i>
+            </div>
+            <div class="panel_word">
+                <span>代码</span>
+                <cite>下载链接</cite>
+            </div>
+        </a>
+    </div>
+    <div class="panel layui-col-xs12 layui-col-sm6 layui-col-md4 layui-col-lg3">
+        <a href="http://blog.yzncms.com" target="_blank">
+            <div class="panel_icon yzn-bg-green">
+                <i class="layui-icon layui-icon-survey layui-anim"></i>
+            </div>
+            <div class="panel_word">
+                <span>博客</span>
+                <cite>技术分享</cite>
+            </div>
+        </a>
+    </div>
+    <div class="panel layui-col-xs12 layui-col-sm6 layui-col-md4 layui-col-lg3">
+        <a href="javascript:;">
+            <div class="panel_icon yzn-bg-purple">
+                <i class="layui-icon layui-icon-log layui-anim"></i>
+            </div>
+            <div class="panel_word">
+                <span class="loginTime">
+                    <?php if($userInfo['last_login_time'] > 0) { echo $userInfo['last_login_time'];} else { echo '--';}?></span>
+                <cite>上次登录时间</cite>
+            </div>
+        </a>
+    </div>
+</div>
+<div class="layui-row layui-col-space10">
+    <div class="layui-col-lg12 layui-col-md12">
+        <div class="layui-card">
+            <div class="layui-card-header" style="border-bottom: 1px solid #eee;">版本信息</div>
+            <div class="layui-card-body">
+                <table class="layui-table magt0" lay-even>
+                    <colgroup>
+                        <col width="10%">
+                        <col width="40%">
+                        <col width="10%">
+                        <col width="40%">
+                    </colgroup>
+                    <tbody>
+                        <tr>
+                            <td>当前版本</td>
+                            <td class="version">yzncms v{$Think.config.version.yzncms_version}</td>
+                            <td>ThinkPHP版本</td>
+                            <td class="version">{$Think.VERSION}</td>
+                        </tr>
+                        <tr>
+                            <td>PHP 版本</td>
+                            <td>{$sys_info.phpv}</td>
+                            <td>数据库版本</td>
+                            <td>{$sys_info.mysql_version}</td>
+                        </tr>
+                        <tr>
+                            <td>服务器域名/IP</td>
+                            <td>{$sys_info.domain} [ {$sys_info.ip} ]</td>
+                            <td>服务器环境</td>
+                            <td class="server">{$sys_info.web_server}</td>
+                        </tr>
+                        <tr>
+                            <td>服务器时间</td>
+                            <td>{$sys_info.time}</td>
+                            <td>剩余空间</td>
+                            <td>{$sys_info.remaining_space}</td>
+                        </tr>
+                        <tr>
+                            <td>最大上传限制</td>
+                            <td>{$sys_info.fileupload}</td>
+                            <td>最大占用内存</td>
+                            <td>{$sys_info.memory_limit}</td>
+                        </tr>
+                    </tbody>
+                </table>
+            </div>
+        </div>
+    </div>
+</div>
+{/block}
+{block name="script"}
+<script type="text/javascript">
+//获取系统时间
+var newDate = '';
+getLangDate();
+//值小于10时，在前面补0
+function dateFilter(date) {
+    if (date < 10) { return "0" + date; }
+    return date;
+}
+
+function getLangDate() {
+    var dateObj = new Date(); //表示当前系统时间的Date对象
+    var year = dateObj.getFullYear(); //当前系统时间的完整年份值
+    var month = dateObj.getMonth() + 1; //当前系统时间的月份值
+    var date = dateObj.getDate(); //当前系统时间的月份中的日
+    var day = dateObj.getDay(); //当前系统时间中的星期值
+    var weeks = ["星期日", "星期一", "星期二", "星期三", "星期四", "星期五", "星期六"];
+    var week = weeks[day]; //根据星期值，从数组中获取对应的星期字符串
+    var hour = dateObj.getHours(); //当前系统时间的小时值
+    var minute = dateObj.getMinutes(); //当前系统时间的分钟值
+    var second = dateObj.getSeconds(); //当前系统时间的秒钟值
+    var timeValue = "" + ((hour >= 12) ? (hour >= 18) ? "晚上" : "下午" : "上午"); //当前时间属于上午、晚上还是下午
+    newDate = dateFilter(year) + "年" + dateFilter(month) + "月" + dateFilter(date) + "日 " + " " + dateFilter(hour) + ":" + dateFilter(minute) + ":" + dateFilter(second);
+    document.getElementById("nowTime").innerHTML = "亲爱的{$userInfo.username}，" + timeValue + "好！ 欢迎使用YznCMS v{$Think.config.version.yzncms_version},当前时间为： " + newDate + "　" + week;
+    setTimeout("getLangDate()", 1000);
+}
+
+layui.use(['jquery'], function() {
+    var $ = layui.jquery;
+    //icon动画
+    $(".panel a").hover(function() {
+        $(this).find(".layui-anim").addClass("layui-anim-scaleSpring");
+    }, function() {
+        $(this).find(".layui-anim").removeClass("layui-anim-scaleSpring");
+    })
+    $(".panel a").click(function() {
+        parent.addTab($(this));
+    })
+})
+</script>
+{/block}

application/api/config/app.php

@@ -0,0 +1,17 @@
+<?php
+// +----------------------------------------------------------------------
+// | ThinkPHP [ WE CAN DO IT JUST THINK ]
+// +----------------------------------------------------------------------
+// | Copyright (c) 2006~2018 http://thinkphp.cn All rights reserved.
+// +----------------------------------------------------------------------
+// | Licensed ( http://www.apache.org/licenses/LICENSE-2.0 )
+// +----------------------------------------------------------------------
+// | Author: liu21st <liu21st@gmail.com>
+// +----------------------------------------------------------------------
+
+// +----------------------------------------------------------------------
+// | api设置
+// +----------------------------------------------------------------------
+return [
+    'exception_handle' => '\\app\\api\\library\\ExceptionHandle',
+];

application/api/controller/Ems.php

@@ -0,0 +1,92 @@
+<?php
+// +----------------------------------------------------------------------
+// | Yzncms [ 御宅男工作室 ]
+// +----------------------------------------------------------------------
+// | Copyright (c) 2018 http://yzncms.com All rights reserved.
+// +----------------------------------------------------------------------
+// | Licensed ( http://www.apache.org/licenses/LICENSE-2.0 )
+// +----------------------------------------------------------------------
+// | fastadmin: https://www.fastadmin.net/
+// +----------------------------------------------------------------------
+
+// +----------------------------------------------------------------------
+// | 邮箱验证码接口
+// +----------------------------------------------------------------------
+namespace app\api\controller;
+
+use app\common\controller\Api;
+use app\common\library\Ems as Emslib;
+use app\member\model\Member;
+use think\facade\Hook;
+use think\facade\Validate;
+
+/**
+ * @title 邮箱验证码接口
+ * @controller api\controller\Ems
+ * @group base
+ */
+class Ems extends Api
+{
+    /**
+     * @title 发送验证码
+     * @desc 最基础的接口注释写法
+     * @author 御宅男
+     * @url /api/Ems/send
+     * @method GET
+     * @tag 邮箱 验证码
+     * @param name:email type:string require:1 desc:邮箱
+     * @param name:event type:string require:1 desc:事件名称
+     * @return name:data type:array ref:definitions\dictionary
+     */
+    public function send()
+    {
+        $email = $this->request->request("email");
+        $event = $this->request->request("event");
+        $event = $event ? $event : 'register';
+
+        if (!$email || !Validate::isEmail($email)) {
+            $this->error('邮箱格式不正确！');
+        }
+        $last = Emslib::get($email, $event);
+        if ($last && time() - $last['create_time'] < 60) {
+            $this->error('发送频繁');
+        }
+        if ($event) {
+            $userinfo = Member::getByEmail($email);
+            if ($event == 'register' && $userinfo) {
+                $this->error('已被注册');
+            } elseif (in_array($event, ['changeemail']) && $userinfo) {
+                $this->error('已被占用');
+            } elseif (in_array($event, ['changepwd', 'resetpwd', 'actemail']) && !$userinfo) {
+                $this->error('未注册');
+            }
+        }
+        if (!Hook::get('ems_send')) {
+            $this->error('请在后台插件管理安装邮箱验证插件');
+        }
+        $ret = Emslib::send($email, null, $event);
+        if ($ret) {
+            $this->success('发送成功');
+        } else {
+            $this->error('发送失败');
+        }
+    }
+
+    /**
+     * @title 检测验证码
+     * @desc 最基础的接口注释写法
+     * @author 御宅男
+     * @url /api/Ems/check
+     * @method GET
+     * @tag 邮箱 验证码
+     * @param name:email type:string require:1 desc:邮箱
+     * @param name:event type:string require:1 desc:事件名称
+     * @param name:captcha type:string require:1 desc:验证码
+     * @return name:data type:array ref:definitions\dictionary
+     */
+    public function check()
+    {
+
+    }
+
+}

application/api/controller/Sms.php

@@ -0,0 +1,98 @@
+<?php
+// +----------------------------------------------------------------------
+// | Yzncms [ 御宅男工作室 ]
+// +----------------------------------------------------------------------
+// | Copyright (c) 2018 http://yzncms.com All rights reserved.
+// +----------------------------------------------------------------------
+// | Licensed ( http://www.apache.org/licenses/LICENSE-2.0 )
+// +----------------------------------------------------------------------
+// | fastadmin: https://www.fastadmin.net/
+// +----------------------------------------------------------------------
+
+// +----------------------------------------------------------------------
+// | 手机短信接口
+// +----------------------------------------------------------------------
+namespace app\api\controller;
+
+use app\common\controller\Api;
+use app\common\library\Sms as Smslib;
+use app\member\model\Member;
+use think\facade\Hook;
+use think\facade\Validate;
+
+/**
+ * @title 手机短信接口
+ * @controller api\controller\Sms
+ * @group base
+ */
+class Sms extends Api
+{
+
+    /**
+     * @title 发送验证码
+     * @desc 最基础的接口注释写法
+     * @author 御宅男
+     * @url /api/Sms/send
+     * @method GET
+     * @tag 手机 验证码
+     * @param name:mobile type:string require:1 desc:手机号
+     * @param name:event type:string require:1 desc:事件名称
+     * @return name:data type:array ref:definitions\dictionary
+     */
+    public function send()
+    {
+        $mobile = $this->request->request("mobile");
+        $event  = $this->request->request("event");
+        $event  = $event ? $event : 'register';
+
+        if (!$mobile || !Validate::isMobile($mobile)) {
+            $this->error('手机号不正确');
+        }
+        $last = Smslib::get($mobile, $event);
+        if ($last && time() - $last['create_time'] < 60) {
+            $this->error('发送频繁');
+        }
+        $ipSendTotal = \app\common\model\Sms::where(['ip' => $this->request->ip()])->whereTime('create_time', '-1 hours')->count();
+        if ($ipSendTotal >= 5) {
+            $this->error('发送频繁');
+        }
+        if ($event) {
+            $userinfo = Member::getByMobile($mobile);
+            if ($event == 'register' && $userinfo) {
+                $this->error('已被注册');
+            } elseif (in_array($event, ['changemobile']) && $userinfo) {
+                $this->error('已被占用');
+            } elseif (in_array($event, ['changepwd', 'resetpwd']) && !$userinfo) {
+                $this->error('未注册');
+            }
+        }
+        if (!Hook::get('sms_send')) {
+            $this->error('请在后台插件管理安装短信验证插件');
+        }
+        $ret = Smslib::send($mobile, null, $event);
+        if ($ret) {
+            $this->success('发送成功');
+        } else {
+            $this->error('发送失败');
+        }
+
+    }
+
+    /**
+     * @title 检测验证码
+     * @desc 最基础的接口注释写法
+     * @author 御宅男
+     * @url /api/Sms/check
+     * @method GET
+     * @tag 手机 验证码
+     * @param name:mobile type:string require:1 desc:手机号
+     * @param name:event type:string require:1 desc:事件名称
+     * @param name:captcha type:string require:1 desc:验证码
+     * @return name:data type:array ref:definitions\dictionary
+     */
+    public function check()
+    {
+
+    }
+
+}

application/api/library/ExceptionHandle.php

@@ -0,0 +1,38 @@
+<?php
+
+namespace app\api\library;
+
+use Exception;
+use think\exception\Handle;
+use think\facade\Config;
+
+/**
+ * 自定义API模块的错误显示
+ */
+class ExceptionHandle extends Handle
+{
+
+    public function render(Exception $e)
+    {
+        // 在生产环境下返回code信息
+        if (!Config::get('app_debug')) {
+            $statuscode = $code = 500;
+            $msg = 'An error occurred';
+            // 验证异常
+            if ($e instanceof \think\exception\ValidateException) {
+                $code = 0;
+                $statuscode = 200;
+                $msg = $e->getError();
+            }
+            // Http异常
+            if ($e instanceof \think\exception\HttpException) {
+                $statuscode = $code = $e->getStatusCode();
+            }
+            return json(['code' => $code, 'msg' => $msg, 'time' => time(), 'data' => null], $statuscode);
+        }
+
+        //其它此交由系统处理
+        return parent::render($e);
+    }
+
+}