接上一节：基于yii2的blog系统开发10-控制台命令程序的创建和执行：

第十八步：创建自定义小部件

1.在frontend/目录下新建文件夹components，在该文件夹下新建HelloWidget.php文件：

<?php
namespace app\components;
use yii\base\Widget;
use yii\helpers\Html;

class HelloWidget extends Widget
{
    public $mes;
    public function init()
    {
        parent::init();
        if($this->mes==null)
        {
            $this->mes = "hello";
        }
    }

    public function run()
    {
        return Html::encode($this->mes);
    }
}

2.在视图页面引用：

use frontend\components\HelloWidget;
<?= HelloWidget::widget(['mes'=>'hi,lq'])?>

接上一篇：基于yii2的blog系统开发9-授权ACF&RBAC：

第十七步 控制台命令程序的创建和执行

1.在console/controllers/目录下新建HelloController.php:

<?php
namespace console\controllers;
use Yii;
use yii\console\Controller;
class HelloController extends Controller
{
    public function actionIndex()
    {
       echo "hello console!\n";
    }
}

2.在项目目录下执行 ./yii 控制器名/action函数名 即可执行该函数

root@debian:/opt/lampp/htdocs/dev/advanced# ./yii hello/index
hello console!
root@debian:/opt/lampp/htdocs/dev/advanced# 

3.带参数的控制台程序：

public function actionHello($name)
    {
        echo "hello".$name."\n";
        //./yii hello/hello haha
    }

    public function actionHelloArray(array $names)
    {
        var_dump($names);
        /*
        root@debian:/opt/lampp/htdocs/dev/advanced# ./yii hello/hello-array haha,qi,a  
        array(3) {
          [0]=>
          string(4) "haha"
          [1]=>
          string(2) "qi"
          [2]=>
          string(1) "a"
        }
        */
    }

4.带选项的控制台程序：

<?php
namespace console\controllers;
use Yii;
use yii\console\Controller;
class HelloController extends Controller
{


//选项
    public $rev;
    public function options($actionID)
    {
        return ['rev'];
    }
    public function optionAliases()
    {
        return ['r'=>'rev'];
    }

    public function actionChoose()
    {
        if($this->rev==1){echo "1\n";}
        else{echo "2\n";}
    }
    /*
    *
    root@debian:/opt/lampp/htdocs/dev/advanced# ./yii hello/choose -r=1
1
root@debian:/opt/lampp/htdocs/dev/advanced# ./yii hello/choose -r=2
2
root@debian:/opt/lampp/htdocs/dev/advanced# ./yii hello/choose --rev=2
2
root@debian:/opt/lampp/htdocs/dev/advanced# ./yii hello/choose --rev=1
1
*/
    //选项end

    public function actionIndex()
    {
       echo "hello console!\n";
    }

    public function actionHello($name)
    {
        echo "hello".$name."\n";
        //./yii hello/hello haha
    }

    public function actionHelloArray(array $names)
    {
        var_dump($names);
    }

    //./yii hello/send 发邮件mailer
    public function actionSend(){
       // return "sendmail";
        $mail= Yii::$app->mailer->compose();
        $mail->setFrom('7138784@qq.com');   
        $mail->setTo('nbllq@qq.com'); 
        $mail->setSubject("mail-test");  
        //$mail->setTextBody('txtxtxtx');   //发布纯文字文本
        $mail->setHtmlBody("<br>askme");    //发布可以带html标签的文本
        if($mail->send())  
            return "success";  
        else  
            return "fail"; 
    }



}

接上一节 基于yii2的blog系统开发8:
视频地址：https://v.youku.com/v_show/id_XMTgwODg1NzIzMg==.html
高级模版自动生成的User模型里面没有加email验证规则，建议用gii重新生成比对下，把相应代码补全.
在yii2中提供两种授权管理途径
(1)ACF存取控制授权(较为简单，适合访客权限设置简单的情景)
(2)RBAC基于角色的存取授权控制(较为复杂，适合博客，论坛等大型网站)

第十五步 ACF授权

acf即存取控制过滤器,控制器里引用：
use yii\filters\AccessControl
改写behaviors方法：

public function behaviors()
 {
     return [
        'access'=>[
          'class' => AccessControl::className(),
            //允许未登录的游客访问action ID为 index login的action
          'rules' => [
                [
                  'actions' => ['index','login'],
                   'allow' => true,
                   'roles' => ['?'],//？表示未登录的游客
                ],
              //只允许已经登录的用户访问action ID为contact about的action 其他禁止
                    [
                   'actions' => ['contact','about'],
                   'allow' => true,
                   'roles' => ['@'],// @表示已经登录的用户
                ]
                 ],
            ],
           ];
 }

更多详细设置参考：
https://blog.csdn.net/aozeahj/article/details/52404755

第十六步 RBAC授权

1.修改common/config/main.php:

<?php
return [
    'aliases' => [
        '@bower' => '@vendor/bower-asset',
        '@npm'   => '@vendor/npm-asset',
    ],
    'vendorPath' => dirname(dirname(__DIR__)) . '/vendor',
    'components' => [
        'cache' => [
            'class' => 'yii\caching\FileCache',
        ],
        //添加这个代码
        'authManager'=>[
            'class'=>'yii\rbac\DbManager',
        ],
    ],

];

2.在项目根目录执行命令，在数据库创建四张rbac的表：

./yii migrate --migrationPath=@yii/rbac/migrations

3.在console/controllers/下新建RbacController.php文件，主要目的为利用authManager组件的api来创建授权表的初始数据：

<?php
namespace console\controllers;
use Yii;
use yii\console\Controller;
class RbacController extends Controller
{
    public function actionInit()
    {
        $auth = Yii::$app->authManager;
        // 添加 "createPost" 权限
        $createPost = $auth->createPermission('createPost');
        $createPost->description = '新增文章';
        $auth->add($createPost);
        // 添加 "updatePost" 权限
        $updatePost = $auth->createPermission('updatePost');
        $updatePost->description = '修改文章';
        $auth->add($updatePost);
        // 添加 "deletePost" 权限
        $deletePost = $auth->createPermission('deletePost');
        $deletePost->description = '删除文章';
        $auth->add($deletePost);

        // 添加 "approveComment" 权限
        $approveComment = $auth->createPermission('approveComment');
        $approveComment->description = '审核评论';
        $auth->add($approveComment);

        // 添加 "postadmin" 角色并赋予 "updatePost" “deletePost” “createPost”
        $postAdmin = $auth->createRole('postAdmin');
        $postAdmin->description = '文章管理员';
        $auth->add($postAdmin);
        $auth->addChild($postAdmin, $updatePost);
        $auth->addChild($postAdmin, $createPost);
        $auth->addChild($postAdmin, $deletePost);

        // 添加 "postOperator" 角色并赋予  “deletePost” 
        $postOperator = $auth->createRole('postOperator');
        $postOperator->description = '文章操作员';
        $auth->add($postOperator);
        $auth->addChild($postOperator, $deletePost);

        // 添加 "commentAuditor" 角色并赋予  “approveComment”
        $commentAuditor = $auth->createRole('commentAuditor');
        $commentAuditor->description = '评论审核员';
        $auth->add($commentAuditor);
        $auth->addChild($commentAuditor, $approveComment);
        // 添加 "admin" 角色并赋予所有其他角色拥有的权限
        $admin = $auth->createRole('admin');
        $admin->description = '系统管理员';
        $auth->add($admin);
        $auth->addChild($admin, $postAdmin);
        $auth->addChild($admin, $commentAuditor);


        // 为用户指派角色。其中 1 和 2 是由 IdentityInterface::getId() 返回的id （译者注：user表的id）
        // 通常在你的 User 模型中实现这个函数。
        $auth->assign($admin, 1);
        $auth->assign($postAdmin, 2);
        $auth->assign($postOperator, 3);
        $auth->assign($commentAuditor, 4);
    }
}

在项目目录下执行命令：
./yii rbac/init
这样数据库里面就有数据了

4.在控制器中执行权限检查，以backend/controllers/PostController.php为例：

use yii\web\ForbiddenHttpException;
public function actionCreate()
    {
        if(!Yii::$app->user->can('createPost')){
            throw new ForbiddenHttpException('对不起，您没有该操作的权限');
        }
        $model = new Post();

        if ($model->load(Yii::$app->request->post()) && $model->save()) {
            return $this->redirect(['view', 'id' => $model->id]);
        }

        return $this->render('create', [
            'model' => $model,
        ]);
    }

5.写个界面给管理员用户分配权限，主要就是对对应四张表进行crud即可

5.1 backend/views/adminusesr下新建授权页面sq.php:

<?php
use yii\helpers\Html;
use yii\widgets\ActiveForm;
?>

<div class="adminuser-form">
    <?php $form = ActiveForm::begin(); ?>   
<!--?= Html::checkboxList('roles', '选中值数组',['value'=>'label']) ?-->
  <?= Html::checkboxList('roles', $a1,$a2) ?>   
    <div class="form-group">
        <?= Html::submitButton('保存', ['class' => 'btn btn-success']) ?>
    </div>
    <?php ActiveForm::end(); ?>
</div>

5.2 用gii生成auth_assignment，auth_item的模型类，然后在backend/controllers/adminusesrController.php中添加权限管理的action，注意这里的函数名和index视图中的权限管理按钮名称对应：

use yii\helpers\ArrayHelper;
public function actionQxgl($id)
    {

        $y1=AuthAssignment::find()->select(['item_name'])->where(['user_id' => $id])->all();
        $y2=yii::$app->db->createCommand("select name,description from auth_item where type=1")->query();

        $a1 = array();
        foreach($y1 as $i){
            //VarDumper::dump($i);exit(0);
            array_push($a1,$i->item_name);
        }

        $a2 = ArrayHelper::map($y2,'name','description');


        if(isset($_POST['roles']))
        {
            AuthAssignment::deleteAll('user_id=:id',[':id'=>$id]);
            $newr=$_POST['roles'];
            $len=count($newr);
            for($i=0;$i<$len;$i++){
                $t = new AuthAssignment();
                $t->item_name=$newr[$i];
                $t->user_id=$id;
                $t->created_at=time();
                $t->save();
            }

            return $this->redirect(["index"]);
        }

        return $this->render('sq', ['id'=>$id,
            'a1' => $a1,'a2' => $a2,
        ]);
    }

接上一篇：基于yii2的blog系统开发7-评论审核：

第十四步 用户认证

高级模版装好以后，前端frontend的用户认证就已经完成了

常用代码说明：
//检测当前用户身份
$identity = Yii::$app->user->identity;

//获取用户id，未认证用户为Null
$id = Yii::$app->user->id;

//判断当前用户是否是游客
$isGuest = Yii::$app->user->isGuest;

//将当前用户的身份登记到yii\web\User。根据设置用session或cookie记录用户身份，用户的认证状态将在整个会话中得以维持。
Yii::$app->user->login($identity);

//注销用户
Yii::$app->user->logout();

后端用户认证

前端用户的默认认证类是User，对应前端用户的user表，后端用户表是adminuser，而后端用户的默认模版安装的认证类还是user显然就不对了，所以这儿

1.修改backend/config/main.php:

'identityClass' => 'common\models\Adminuser',

另外，要实现后端用户认证可以参考前端用户认证代码来改。

2.修改common/models/Adminuser.php:

<?php

namespace common\models;

use Yii;
use yii\web\IdentityInterface;
/**
 * This is the model class for table "adminuser".
 *
 * @property int $id
 * @property string $username
 * @property string $nickname
 * @property string $password
 * @property string $email
 * @property string|null $profile
 * @property string $auth_key
 * @property string $password_hash
 * @property string|null $password_reset_token
 *
 * @property Post[] $posts
 */
class Adminuser extends \yii\db\ActiveRecord implements IdentityInterface
{
    /**
     * {@inheritdoc}
     */
    public static function tableName()
    {
        return 'adminuser';
    }

    /**
     * {@inheritdoc}
     */
    public function rules()
    {
        return [
            [['username', 'nickname', 'password', 'email', 'auth_key', 'password_hash'], 'required'],
            [['profile'], 'string'],
            [['username', 'nickname', 'password', 'email'], 'string', 'max' => 128],
            [['auth_key'], 'string', 'max' => 32],
            [['password_hash', 'password_reset_token'], 'string', 'max' => 255],
        ];
    }

    /**
     * {@inheritdoc}
     */
    public function attributeLabels()
    {
        return [
            'id' => 'ID',
            'username' => 'Username',
            'nickname' => 'Nickname',
            'password' => 'Password',
            'email' => 'Email',
            'profile' => 'Profile',
            'auth_key' => 'Auth Key',
            'password_hash' => 'Password Hash',
            'password_reset_token' => 'Password Reset Token',
        ];
    }

    /**
     * @return \yii\db\ActiveQuery
     */
    public function getPosts()
    {
        return $this->hasMany(Post::className(), ['author_id' => 'id']);
    }

    /**
     * {@inheritdoc}
     */
    public static function findIdentity($id)
    {
        return static::findOne(['id' => $id]);
    }

    /**
     * {@inheritdoc}
     */
    public static function findIdentityByAccessToken($token, $type = null)
    {
        throw new NotSupportedException('"findIdentityByAccessToken" is not implemented.');
    }

    /**
     * Finds user by username
     *
     * @param string $username
     * @return static|null
     */
    public static function findByUsername($username)
    {
        return static::findOne(['username' => $username]);
    }

    /**
     * Finds user by password reset token
     *
     * @param string $token password reset token
     * @return static|null
     */
    public static function findByPasswordResetToken($token)
    {
        if (!static::isPasswordResetTokenValid($token)) {
            return null;
        }

        return static::findOne([
            'password_reset_token' => $token,
           // 'status' => self::STATUS_ACTIVE,
        ]);
    }

    /**
     * Finds user by verification email token
     *
     * @param string $token verify email token
     * @return static|null
     */
    public static function findByVerificationToken($token) {
        return static::findOne([
            'verification_token' => $token,
           // 'status' => self::STATUS_INACTIVE
        ]);
    }

    /**
     * Finds out if password reset token is valid
     *
     * @param string $token password reset token
     * @return bool
     */
    public static function isPasswordResetTokenValid($token)
    {
        if (empty($token)) {
            return false;
        }

        $timestamp = (int) substr($token, strrpos($token, '_') + 1);
        $expire = Yii::$app->params['user.passwordResetTokenExpire'];
        return $timestamp + $expire >= time();
    }

    /**
     * {@inheritdoc}
     */
    public function getId()
    {
        return $this->getPrimaryKey();
    }

    /**
     * {@inheritdoc}
     */
    public function getAuthKey()
    {
        return $this->auth_key;
    }

    /**
     * {@inheritdoc}
     */
    public function validateAuthKey($authKey)
    {
        return $this->getAuthKey() === $authKey;
    }

    /**
     * Validates password
     *
     * @param string $password password to validate
     * @return bool if password provided is valid for current user
     */
    public function validatePassword($password)
    {
        return Yii::$app->security->validatePassword($password, $this->password_hash);
    }

    /**
     * Generates password hash from password and sets it to the model
     *
     * @param string $password
     */
    public function setPassword($password)
    {
        $this->password_hash = Yii::$app->security->generatePasswordHash($password);
    }

    /**
     * Generates "remember me" authentication key
     */
    public function generateAuthKey()
    {
        $this->auth_key = Yii::$app->security->generateRandomString();
    }

    /**
     * Generates new password reset token
     */
    public function generatePasswordResetToken()
    {
        $this->password_reset_token = Yii::$app->security->generateRandomString() . '_' . time();
    }

    /**
     * Generates new token for email verification
     */
    public function generateEmailVerificationToken()
    {
        $this->verification_token = Yii::$app->security->generateRandomString() . '_' . time();
    }

    /**
     * Removes password reset token
     */
    public function removePasswordResetToken()
    {
        $this->password_reset_token = null;
    }
}

3.修改backend/controllers/siteController.php:

LoginForm已经被前端用了，所以这儿用一个新的BackLoginForm

use common\models\BackLoginForm;
public function actionLogin()
{...
$model = new BackLoginForm();
...
}

4.把common/models/LoginForm.php拷贝一份，重新命名为BackLoginForm.php并修改对应代码：

class BackLoginForm extends Model
{
 public function attributeLabels()
    {
        return [
            'username' => '用户名',
            'password' => '密码',
            'rememberMe'=>'记住密码',
        ];
    }

 protected function getUser()
    {
        if ($this->_user === null) {
            $this->_user = Adminuser::findByUsername($this->username);
        }

        return $this->_user;
    }
}

5.汉化视图backend/views/site/login.php：