query("SELECT COUNT(*) FROM messages WHERE status = 'approved'"); $totalMessages = (int)$countStmt->fetchColumn(); $totalPages = ceil($totalMessages / $perPage); $stmt = $db->prepare(" SELECT * FROM messages WHERE status = 'approved' ORDER BY created_at DESC LIMIT ? OFFSET ? "); $stmt->execute([$perPage, $offset]); $messages = $stmt->fetchAll(); // 处理留言提交 $messageSuccess = false; $messageError = ''; if ($_SERVER['REQUEST_METHOD'] === 'POST' && isset($_POST['message_content'])) { if (!verifyCsrfToken($_POST[CSRF_TOKEN_NAME] ?? '')) { $messageError = '安全验证失败，请刷新页面重试'; } else { $authorName = sanitizeInput($_POST['author_name'] ?? ''); $authorEmail = sanitizeInput($_POST['author_email'] ?? ''); $content = sanitizeInput($_POST['message_content'] ?? ''); if (empty($authorName) || empty($content)) { $messageError = '请填写昵称和留言内容'; } elseif (mb_strlen($content) < 2) { $messageError = '留言内容太短'; } elseif (mb_strlen($content) > 1000) { $messageError = '留言内容过长（最多1000字）'; } else { $autoApprove = getSetting('comment_auto_approve', '0') === '1'; $ins = $db->prepare(" INSERT INTO messages (author_name, author_email, content, status, ip, created_at) VALUES (?, ?, ?, ?, ?, NOW()) "); $ins->execute([ $authorName, $authorEmail, $content, $autoApprove ? 'approved' : 'pending', $_SERVER['REMOTE_ADDR'] ?? '' ]); if ($autoApprove) { $messageSuccess = true; $stmt->execute([$perPage, $offset]); $messages = $stmt->fetchAll(); } else { $messageSuccess = '审核中'; } } } } $pageTitle = '留言板'; $pageDesc = '在这里留下你想说的话'; include ROOT_PATH . '/includes/header.php'; ?>
chat_bubble_outline

留言板

这里是一个安静的角落，想说些什么都可以

留言成功！
留言已提交，等待审核后显示
person
email
forum

还没有留言，来做第一个留言的人吧