<?php
/**
 * admin/visits.php —— 访问信息
 * 访问日志查询（精简 / 完整两种模式 + IP / 关键词筛选 + 分页）与 IP 黑名单管理。
 * 黑名单命中规则后前台与后台（含登录页）请求均被直接拒绝（与前台同一风控提示页）。
 */
$P = '../';
require_once __DIR__ . '/_guard.php';

$pdo = db();

function settings_set(string $key, string $value): void
{
    $st = db()->prepare('INSERT INTO settings (key, value) VALUES (?, ?)
                         ON CONFLICT(key) DO UPDATE SET value = excluded.value');
    $st->execute([$key, $value]);
}

/* 批量删除黑名单（按 id 列表），同步清除单 IP 规则的风控计数；返回删除条数 */
function bl_delete_ids(PDO $pdo, array $ids): int
{
    $ids = array_values(array_unique(array_filter(array_map('intval', $ids), function ($v) { return $v > 0; })));
    if (!$ids) return 0;
    $ph = implode(',', array_fill(0, count($ids), '?'));
    $st = $pdo->prepare('SELECT rule FROM ip_blacklist WHERE id IN (' . $ph . ')');
    $st->execute($ids);
    $rules = $st->fetchAll();
    $pdo->prepare('DELETE FROM ip_blacklist WHERE id IN (' . $ph . ')')->execute($ids);
    foreach ($rules as $r) {
        if (filter_var((string)$r['rule'], FILTER_VALIDATE_IP, FILTER_FLAG_IPV4)) {
            risk_clear_for_ip((string)$r['rule']);
        }
    }
    return count($rules);
}

/* ---------- POST：黑名单增删 / 清空日志 / 风控规则 ---------- */
$msgKind = '';
$msgText = '';
$banChanged = false;
if ($_SERVER['REQUEST_METHOD'] === 'POST') {
    if (!csrf_verify()) {
        $msgKind = 'err';
        $msgText = '安全校验失败，请刷新页面重试。';
    } else {
        $act = (string)($_POST['act'] ?? '');
        switch ($act) {
            case 'ban_add':
                $rule = trim((string)($_POST['rule'] ?? ''));
                $note = trim((string)($_POST['note'] ?? ''));
                if ($rule === '') {
                    $msgKind = 'err';
                    $msgText = '请填写要拦截的 IP / 网段。';
                    break;
                }
                $parsed = blacklist_parse_rule($rule);
                if (!$parsed[0]) {
                    $msgKind = 'err';
                    $msgText = $parsed[3];
                    break;
                }
                $st = $pdo->prepare('INSERT INTO ip_blacklist (rule, note, created_at, source) VALUES (?,?,?,?)');
                $st->execute([$rule, $note, date('Y-m-d H:i:s'), 'manual']);
                $banChanged = true;
                $msgKind = 'ok';
                $msgText = '黑名单规则已添加，匹配的访问将立即被拒绝。';
                break;
            case 'ban_del':
                $id = max(0, (int)($_POST['id'] ?? 0));
                if ($id > 0) {
                    $bs = $pdo->prepare('SELECT rule FROM ip_blacklist WHERE id = ? LIMIT 1');
                    $bs->execute([$id]);
                    $brow = $bs->fetch();
                    $pdo->prepare('DELETE FROM ip_blacklist WHERE id = ?')->execute([$id]);
                    // 解封单 IP 时同步清除其风控计数，避免“刚解封又被历史计数封回”
                    if ($brow && filter_var((string)$brow['rule'], FILTER_VALIDATE_IP, FILTER_FLAG_IPV4)) {
                        risk_clear_for_ip((string)$brow['rule']);
                    }
                    $banChanged = true;
                    $msgKind = 'ok';
                    $msgText = '黑名单规则已移除。';
                } else {
                    $msgKind = 'err';
                    $msgText = '无效的黑名单记录。';
                }
                break;
            case 'log_clear':
                @file_put_contents(ACCESS_LOG_FILE, '', LOCK_EX);
                $msgKind = 'ok';
                $msgText = '访问日志已清空（data/vistors.log）。';
                break;
            case 'risk_save':
                $clip = function ($v, $d) { $raw = trim((string)($v ?? '')); $x = ($raw === '') ? (int)$d : (int)$raw; return max(1, min(1000000, $x)); };
                settings_set('risk_login_on', isset($_POST['r_login_on']) ? '1' : '0');
                settings_set('risk_login_n', (string)$clip($_POST['r_login_n'] ?? null, 10));
                settings_set('risk_404_on',  isset($_POST['r_404_on']) ? '1' : '0');
                settings_set('risk_404_n',   (string)$clip($_POST['r_404_n'] ?? null, 100));
                settings_set('risk_rate_on', isset($_POST['r_rate_on']) ? '1' : '0');
                settings_set('risk_rate_n',  (string)$clip($_POST['r_rate_n'] ?? null, 120));
                settings_set('risk_tip_main', trim((string)($_POST['r_tip_main'] ?? '')));
                settings_set('risk_tip_sub',  trim((string)($_POST['r_tip_sub'] ?? '')));
                $msgKind = 'ok';
                $msgText = '风控规则已保存并即时生效。';
                break;
            case 'risk_clear':
                risk_clear_all();
                $msgKind = 'ok';
                $msgText = '全部风险计数已清空（黑名单本身不受影响）。';
                break;
            case 'ban_batch':
                $n = bl_delete_ids($pdo, (array)($_POST['bid'] ?? []));
                $banChanged = true;
                $msgKind = $n > 0 ? 'ok' : 'err';
                $msgText = $n > 0 ? '已批量移除 ' . $n . ' 条黑名单规则（对应单 IP 计数已清除）。' : '未勾选任何需要移除的规则。';
                break;
            case 'ban_clear_auto':
                $rows = $pdo->query("SELECT rule FROM ip_blacklist WHERE source = 'auto'")->fetchAll();
                $cnt = count($rows);
                $pdo->exec("DELETE FROM ip_blacklist WHERE source = 'auto'");
                foreach ($rows as $r) {
                    if (filter_var((string)$r['rule'], FILTER_VALIDATE_IP, FILTER_FLAG_IPV4)) {
                        risk_clear_for_ip((string)$r['rule']);
                    }
                }
                blacklist_rules(true);
                $banChanged = true;
                $msgKind = 'ok';
                $msgText = '已一键移除全部风控自动封禁（共 ' . $cnt . ' 条），相关 IP 风控计数已同步清除。';
                break;
            case 'ban_clear_all':
                $pdo->exec('DELETE FROM ip_blacklist');
                risk_clear_all();
                blacklist_rules(true);
                $banChanged = true;
                $msgKind = 'ok';
                $msgText = '已清空全部黑名单，风险计数一并清零。';
                break;
            default:
                $msgKind = 'err';
                $msgText = '未知操作。';
        }
    }
}

/* ---------- 概要统计（数据来源：data/vistors.log） ---------- */
$entries = visitors_entries();
$statTotal = count($entries);
$ipSet = [];
foreach ($entries as $e) {
    $ipSet[$e['ip']] = 1;
}
$statIps = count($ipSet);
$statToday = 0;
$todayStart = date('Y-m-d 00:00:00');
foreach ($entries as $e) {
    if ($e['created_at'] >= $todayStart) {
        $statToday++;
    }
}
function vis_scalar(PDO $pdo, string $sql): int
{
    $v = $pdo->query($sql)->fetchColumn();
    return (int)$v;
}
$statBan = vis_scalar($pdo, 'SELECT COUNT(*) FROM ip_blacklist');

/* ---------- 筛选与分页 ---------- */
$mode = (string)($_GET['mode'] ?? 'full');
if (!in_array($mode, ['full', 'compact'], true)) {
    $mode = 'full';
}
$ipF = trim((string)($_GET['ip'] ?? ''));
$q   = trim((string)($_GET['q'] ?? ''));
$ipF = substr($ipF, 0, 64);
$q   = substr($q, 0, 100);
$page    = max(1, (int)($_GET['page'] ?? 1));
$perPage = 30;

// entries 已按新→旧排列，内存中过滤 / 聚合后分页
$logs = [];
$total = 0;
$totalPages = 1;
if ($mode === 'compact') {
    // 精简模式：按 IP 聚合（最近访问时间 / IP / 访问次数），首次出现即该 IP 最新一条
    $grp = [];
    $order = [];
    foreach ($entries as $e) {
        if ($ipF !== '' && stripos($e['ip'], $ipF) === false) continue;
        if ($q !== '' && stripos($e['url'], $q) === false && stripos($e['method'], $q) === false) continue;
        if (!isset($grp[$e['ip']])) {
            $grp[$e['ip']] = ['ip' => $e['ip'], 'last_at' => $e['created_at'], 'cnt' => 0];
            $order[] = $e['ip'];
        }
        $grp[$e['ip']]['cnt']++;
    }
    $all = [];
    foreach ($order as $ip) {
        $all[] = $grp[$ip];
    }
    $total = count($all);
    $totalPages = max(1, (int)ceil($total / $perPage));
    if ($page > $totalPages) {
        $page = $totalPages;
    }
    $off  = ($page - 1) * $perPage;
    $logs = array_slice($all, $off, $perPage);
} else {
    // 完整模式：逐条明细
    $all = [];
    foreach ($entries as $e) {
        if ($ipF !== '' && stripos($e['ip'], $ipF) === false) continue;
        if ($q !== '' && stripos($e['url'], $q) === false && stripos($e['method'], $q) === false) continue;
        $all[] = $e;
    }
    $total = count($all);
    $totalPages = max(1, (int)ceil($total / $perPage));
    if ($page > $totalPages) {
        $page = $totalPages;
    }
    $off  = ($page - 1) * $perPage;
    $logs = array_slice($all, $off, $perPage);
}

/* ---------- 链接工具（保留当前筛选参数） ---------- */
function vis_url(array $ov): string
{
    $p = $_GET;
    foreach ($ov as $k => $v) {
        if ($v === null || $v === '') {
            unset($p[$k]);
        } else {
            $p[$k] = $v;
        }
    }
    if (!$p) {
        return 'visits.php';
    }
    return 'visits.php?' . http_build_query($p);
}

/* ---------- 当前访问者信息（用于黑名单自查提示） ---------- */
$curIp = client_ip();
if ($curIp === '') {
    $curIp = '未知';
}
$curHit = null;
if ($curIp !== '未知') {
    if ($banChanged) {
        blacklist_rules(true);
    }
    $curHit = blacklist_ip_hit($curIp);
}

/* ---------- 自动风控规则配置与当前 IP 计数 ---------- */
$rcfg = risk_rule_cfg();
$curRisk = ($curIp !== '未知') ? risk_row($curIp) : null;

/* ---------- 黑名单规则（直接读表展示，便于核对备注与来源） ---------- */
$banRows = $pdo->query('SELECT id, rule, note, created_at, source FROM ip_blacklist ORDER BY id DESC')->fetchAll();
$banAutoCount = 0;
foreach ($banRows as $b) {
    if (((string)($b['source'] ?? 'manual')) === 'auto') $banAutoCount++;
}

layout_head('访问信息');
admin_topbar('visits');
?>
<main class="page-main">
  <div class="wrap page-body">
    <h2 style="margin-bottom:6px">访问信息</h2>
    <p class="tip">记录访客对本站的动态请求（含后台），完整模式逐条展示访问明细，精简模式按 IP 汇总次数；黑名单 / 自动风控对所有访问统一生效，命中即返回 403 风控提示页，后台与登录页不例外。</p>

    <?php if ($msgText !== ''): ?>
      <script>window.hpToastMsg = <?= json_encode(['kind' => $msgKind === 'ok' ? 'ok' : 'err', 'text' => $msgText], JSON_UNESCAPED_UNICODE | JSON_HEX_TAG | JSON_HEX_APOS | JSON_HEX_QUOT | JSON_HEX_AMP); ?>;</script>
    <?php endif; ?>

    <!-- 概要统计 -->
    <div class="fieldset-card">
      <div class="fs-title">访问概况</div>
      <div class="vis-stats">
        <div class="vis-stat"><b><?= $statTotal ?></b><span>累计访问</span></div>
        <div class="vis-stat"><b><?= $statIps ?></b><span>独立 IP</span></div>
        <div class="vis-stat"><b><?= $statToday ?></b><span>今日访问</span></div>
        <div class="vis-stat"><b><?= $statBan ?></b><span>黑名单规则</span></div>
      </div>
      <form method="post" data-confirm="确认清空全部访问日志？此操作不可恢复。" style="margin-top:14px">
        <?= csrf_field() ?><input type="hidden" name="act" value="log_clear">
        <button type="submit" class="btn btn-sm btn-danger">清空访问日志</button>
        <span class="tip" style="margin-left:8px">日志按行追加写入 <code>data/vistors.log</code>（制表符分隔：时间 / IP / 请求方式 / 响应码 / URL），完整保留不设上限；可自行归档或删除该文件。</span>
      </form>
    </div>

    <!-- 筛选 + 日志列表 -->
    <div class="fieldset-card">
      <div class="fs-title">访问记录<?= $mode === 'compact' ? '（精简模式：按 IP 汇总）' : '（完整模式：逐条明细）' ?></div>
      <form method="get" class="v-filter">
        <select name="mode" title="展示模式" onchange="this.form.submit()">
          <option value="full"<?= $mode === 'full' ? ' selected' : '' ?>>完整模式（逐条明细）</option>
          <option value="compact"<?= $mode === 'compact' ? ' selected' : '' ?>>精简模式（仅时间 / IP / 次数）</option>
        </select>
        <input type="text" name="ip" value="<?= he($ipF) ?>" placeholder="按 IP 筛选，支持模糊（如 203.0）">
        <input type="text" name="q" class="w-s" value="<?= he($q) ?>" placeholder="关键词：地址 / 请求方式">
        <button type="submit" class="btn btn-primary">筛选</button>
        <a class="btn" href="visits.php">重置</a>
      </form>

      <?php if ($logs): ?>
        <div class="tip" style="margin:10px 0 6px">
          共命中 <?= $total ?> <?= $mode === 'compact' ? '个 IP' : '条记录' ?>；
          当前第 <?= $page ?> / <?= $totalPages ?> 页，每页 <?= $perPage ?> 条。
        </div>
        <div class="v-scroll">
          <?php if ($mode === 'compact'): ?>
            <table class="v-tbl">
              <thead>
                <tr><th>最近访问时间</th><th>IP 地址</th><th>访问次数</th></tr>
              </thead>
              <tbody>
                <?php foreach ($logs as $r): ?>
                  <tr>
                    <td class="v-nowrap"><?= he((string)$r['last_at']) ?></td>
                    <td class="v-nowrap"><?= he((string)$r['ip']) ?></td>
                    <td><b><?= (int)$r['cnt'] ?></b> 次</td>
                  </tr>
                <?php endforeach; ?>
              </tbody>
            </table>
          <?php else: ?>
            <table class="v-tbl">
              <thead>
                <tr>
                  <th>访问时间</th><th>IP 地址</th><th>请求方式</th><th>访问 URL</th><th>响应码</th>
                </tr>
              </thead>
              <tbody>
                <?php foreach ($logs as $r): ?>
                  <tr>
                    <td class="v-nowrap"><?= he((string)$r['created_at']) ?></td>
                    <td class="v-nowrap"><?= he((string)$r['ip']) ?></td>
                    <td><span class="v-tag"><?= he((string)$r['method']) ?></span></td>
                    <td><?= he((string)$r['url']) ?></td>
                    <td class="v-nowrap"><?php
                        $code = (int)$r['status'];
                        $cls  = ($code >= 200 && $code < 300) ? 'good' : (($code >= 300 && $code < 400) ? 'info' : (($code >= 400 && $code < 500) ? 'warn' : 'bad'));
                        ?><span class="v-tag <?= $cls ?>"><?= $code ?></span>
                    </td>
                  </tr>
                <?php endforeach; ?>
              </tbody>
            </table>
          <?php endif; ?>
        </div>

        <?php if ($totalPages > 1): ?>
          <div class="pager">
            <span class="pg-info">共 <?= $total ?> 条</span>
            <?php if ($page > 1): ?><a class="btn btn-sm" href="<?= he(vis_url(['page' => $page - 1])) ?>">← 上一页</a><?php endif; ?>
            <?php
              $win = 2;
              $start = max(1, $page - $win);
              $end   = min($totalPages, $page + $win);
              if ($start > 1) echo '<span class="tip">…</span>';
              for ($p = $start; $p <= $end; $p++) {
                  if ($p === $page) {
                      echo '<span class="btn btn-sm btn-primary">' . $p . '</span>';
                  } else {
                      echo '<a class="btn btn-sm" href="' . he(vis_url(['page' => $p])) . '">' . $p . '</a>';
                  }
              }
              if ($end < $totalPages) echo '<span class="tip">…</span>';
            ?>
            <?php if ($page < $totalPages): ?><a class="btn btn-sm" href="<?= he(vis_url(['page' => $page + 1])) ?>">下一页 →</a><?php endif; ?>
          </div>
        <?php endif; ?>
      <?php else: ?>
        <div class="err-msg" style="margin-top:12px"><?= ($ipF !== '' || $q !== '') ? '该筛选条件下暂无访问记录，可点击「重置」查看全部。' : '还没有访问记录，访问站点前台页面后将在这里实时展示。' ?></div>
      <?php endif; ?>
    </div>

    <!-- 自动风控规则 -->
    <div class="fieldset-card">
      <div class="fs-title">自动风控规则<span class="tip" style="font-weight:400">（达到阈值自动加入黑名单；命中前台与后台均返回 403 风控提示页，提示文案可在下方自定义）</span></div>
      <form method="post">
        <?= csrf_field() ?><input type="hidden" name="act" value="risk_save">
        <div style="display:flex;flex-wrap:wrap;align-items:center;gap:10px;margin:9px 0">
          <label class="seg-check" style="min-width:148px"><input type="checkbox" name="r_login_on" value="1"<?= $rcfg['login_fail']['on'] ? ' checked' : '' ?>> 后台登录失败封禁</label>
          <span class="tip">失败次数 ≥ <input type="number" name="r_login_n" min="1" max="1000000" value="<?= (int)$rcfg['login_fail']['n'] ?>" style="width:96px;padding:4px 8px;border:1px solid var(--line-2);border-radius:8px;background:var(--card);color:inherit"> 次 → 永久封禁（建议 5-20）</span>
        </div>
        <div style="display:flex;flex-wrap:wrap;align-items:center;gap:10px;margin:9px 0">
          <label class="seg-check" style="min-width:148px"><input type="checkbox" name="r_404_on" value="1"<?= $rcfg['not_found']['on'] ? ' checked' : '' ?>> 前台 404 封禁</label>
          <span class="tip">累计次数 ≥ <input type="number" name="r_404_n" min="1" max="1000000" value="<?= (int)$rcfg['not_found']['n'] ?>" style="width:96px;padding:4px 8px;border:1px solid var(--line-2);border-radius:8px;background:var(--card);color:inherit"> 次 → 永久封禁（建议 50-300）</span>
        </div>
        <div style="display:flex;flex-wrap:wrap;align-items:center;gap:10px;margin:9px 0">
          <label class="seg-check" style="min-width:148px"><input type="checkbox" name="r_rate_on" value="1"<?= $rcfg['rate']['on'] ? ' checked' : '' ?>> 请求频率封禁</label>
          <span class="tip">60 秒内 ≥ <input type="number" name="r_rate_n" min="1" max="1000000" value="<?= (int)$rcfg['rate']['n'] ?>" style="width:96px;padding:4px 8px;border:1px solid var(--line-2);border-radius:8px;background:var(--card);color:inherit"> 次 → 永久封禁（多人共用出口 IP 时建议关闭）</span>
        </div>
        <p class="tip" style="margin:8px 0 6px">计数方式：404 与登录失败只要发生即累计（规则关闭也照常计数，便于后台观察）；规则启用且达到阈值时自动封禁，保存后即时生效。自动封禁在黑名单中标注“风控自动”，可随时移除解封（解封时同步清除该 IP 计数）。</p>
        <div style="display:flex;flex-wrap:wrap;align-items:center;gap:10px;margin:0 0 8px">
          <span class="tip" style="min-width:148px">主提示（留空=默认）</span>
          <input type="text" name="r_tip_main" maxlength="100" value="<?= he((string)$rcfg['_tip']['raw_main']) ?>" placeholder="例：您触发了本站风控，请稍后再访问" title="黑名单命中时提示页的大号主文案" style="flex:1 1 300px;min-width:260px;padding:6px 10px;border:1px solid var(--line-2);border-radius:8px;background:var(--card);color:inherit">
        </div>
        <div style="display:flex;flex-wrap:wrap;align-items:center;gap:10px;margin:0 0 12px">
          <span class="tip" style="min-width:148px">次行说明（留空=默认）</span>
          <input type="text" name="r_tip_sub" maxlength="200" value="<?= he((string)$rcfg['_tip']['raw_sub']) ?>" placeholder="例：如为正常访问，请稍后重试；若频繁误判，请联系站点管理员处理。" title="主提示下方的次要说明文案" style="flex:1 1 300px;min-width:260px;padding:6px 10px;border:1px solid var(--line-2);border-radius:8px;background:var(--card);color:inherit">
        </div>
        <button type="submit" class="btn btn-primary">保存风控规则</button>
      </form>
      <form method="post" data-confirm="确认清空全部风险计数？各 IP 将从 0 重新累计，不影响已封禁的黑名单。" style="margin-top:14px">
        <?= csrf_field() ?><input type="hidden" name="act" value="risk_clear">
        <button type="submit" class="btn btn-sm">清空全部风险计数</button>
        <?php if ($curRisk): ?>
          <span class="tip" style="margin-left:8px">当前访问 IP（<?= he($curIp) ?>）计数：登录失败 <?= (int)$curRisk['login_fail'] ?> 次 · 404 <?= (int)$curRisk['not_found'] ?> 次<?php if ($rcfg['rate']['on']): ?> · 本分钟请求 <?= (int)$curRisk['rate_count'] ?> 次<?php endif; ?></span>
        <?php endif; ?>
      </form>
    </div>

    <!-- IP 黑名单 -->
    <div class="fieldset-card">
      <div class="fs-title">IP 黑名单（全站拦截前台与后台，命中统一返回 403 风控提示页）</div>
      <form method="post" class="v-filter">
        <?= csrf_field() ?><input type="hidden" name="act" value="ban_add">
        <input type="text" name="rule" required placeholder="如：203.0.113.7 / 203.0.113.0/24 / 203.0.113.*" style="flex:1 1 260px;max-width:420px">
        <input type="text" name="note" placeholder="备注（可选，如：恶意扫描器）" style="flex:1 1 220px;max-width:340px">
        <button type="submit" class="btn btn-primary">加入黑名单</button>
      </form>
      <p class="tip" style="margin:10px 0 2px">
        支持三种写法：单个 IP、CIDR 网段（如 <code>203.0.113.0/24</code>）、星号通配段（如 <code>203.0.113.*</code> 或 <code>192.168.*.*</code>）；
        目前仅按 IPv4 匹配。黑名单即时生效且不受「站长提示」开关影响，命中 IP 的<strong>前台与后台（含登录页）访问一律被拒绝</strong>。如需解除，请从未被封禁的网络进入后台移除该规则，或直接在 data/homepage.db 的 ip_blacklist 表中删除记录。
      </p>
      <div style="margin:6px 0 10px">
        <?php if ($curHit): ?>
          <span class="vis-warn-tip">当前访问 IP：<?= he($curIp) ?> —— 命中规则「<?= he($curHit['rule']) ?>」（<?= ($curHit['note'] !== '') ? he((string)$curHit['note']) : '无备注' ?>），全站（前台与后台）访问将被拦截</span>
        <?php else: ?>
          <span class="vis-ok-tip">当前访问 IP：<?= he($curIp) ?> —— 未命中任何黑名单规则</span>
        <?php endif; ?>
      </div>

      <?php if ($banRows): ?>
        <div style="display:flex;flex-wrap:wrap;align-items:center;gap:10px;margin:8px 0 4px">
          <form method="post" id="blBatchForm" data-confirm="确认移除选中的黑名单规则？对应单 IP 风控计数将同步清除。">
            <?= csrf_field() ?><input type="hidden" name="act" value="ban_batch">
            <label class="tip" style="display:inline-flex;align-items:center;gap:4px;cursor:pointer;margin:0 4px 0 0"><input type="checkbox" id="blCheckAll"> 全选</label>
            <button type="submit" class="btn btn-sm btn-danger" id="blBatchBtn" disabled>移除选中（0）</button>
          </form>
          <?php if ($banAutoCount > 0): ?>
            <form method="post" data-confirm="确认一键移除全部风控自动封禁（共 <?= $banAutoCount ?> 条）？相关 IP 风控计数将同步清除。">
              <?= csrf_field() ?><input type="hidden" name="act" value="ban_clear_auto">
              <button type="submit" class="btn btn-sm">一键移除风控自动（<?= $banAutoCount ?>）</button>
            </form>
          <?php endif; ?>
          <form method="post" data-confirm="确认清空全部黑名单？全部风险计数将一并清零。">
            <?= csrf_field() ?><input type="hidden" name="act" value="ban_clear_all">
            <button type="submit" class="btn btn-sm btn-danger">清空全部</button>
          </form>
        </div>
        <?php foreach ($banRows as $b): ?>
          <div class="bl-row">
            <label class="tip" style="display:inline-flex;align-items:center;margin:0" title="勾选后可在上方批量移除"><input type="checkbox" form="blBatchForm" class="js-bl-check" name="bid[]" value="<?= (int)$b['id'] ?>"></label>
            <code class="bl-rule"><?= he((string)$b['rule']) ?></code>
            <?php if (((string)($b['source'] ?? 'manual')) === 'auto'): ?>
              <span class="v-tag warn" style="min-width:0">风控自动</span>
            <?php else: ?>
              <span class="v-tag info" style="min-width:0">手动</span>
            <?php endif; ?>
            <span class="bl-note"><?= $b['note'] !== '' ? he((string)$b['note']) : '<span class="tip">（无备注）</span>' ?></span>
            <span class="bl-time"><?= he((string)$b['created_at']) ?></span>
            <form method="post" data-confirm="确认移除黑名单规则「<?= he((string)$b['rule']) ?>」？">
              <?= csrf_field() ?><input type="hidden" name="act" value="ban_del"><input type="hidden" name="id" value="<?= (int)$b['id'] ?>">
              <button type="submit" class="btn btn-sm btn-danger">移除</button>
            </form>
          </div>
        <?php endforeach; ?>
      <?php else: ?>
        <p class="tip" style="margin:6px 0 0">尚未配置黑名单规则。启用上方「自动风控」后，异常 IP 会自动记录到这里；也可在下方手动添加规则。</p>
      <?php endif; ?>
    </div>
  </div>
</main>

<?php layout_theme_fab(); ?>
<script src="../assets/js/common.js"></script>
<script>
(function () {
    var all = document.getElementById('blCheckAll');
    var btn = document.getElementById('blBatchBtn');
    var boxes = Array.prototype.slice.call(document.querySelectorAll('.js-bl-check'));
    if (!all || !btn || !boxes.length) return;
    function refresh() {
        var n = boxes.filter(function (c) { return c.checked; }).length;
        btn.disabled = n === 0;
        btn.textContent = '移除选中（' + n + '）';
        all.checked = n > 0 && n === boxes.length;
    }
    all.addEventListener('change', function () {
        boxes.forEach(function (c) { c.checked = all.checked; });
        refresh();
    });
    boxes.forEach(function (c) { c.addEventListener('change', refresh); });
})();
</script>
</body>
</html>