当前位置：首页 > PHP

php实现积分商城

2026-01-30 07:16:52PHP

实现积分商城的基本功能

积分商城通常包括用户积分管理、商品兑换、订单处理等核心模块。以下是一个基于PHP的实现方案：

数据库设计

创建必要的数据库表结构：

-- 用户表
CREATE TABLE users (
    id INT PRIMARY KEY AUTO_INCREMENT,
    username VARCHAR(50) NOT NULL,
    points INT DEFAULT 0
);

-- 商品表
CREATE TABLE products (
    id INT PRIMARY KEY AUTO_INCREMENT,
    name VARCHAR(100) NOT NULL,
    description TEXT,
    price INT NOT NULL, -- 兑换所需积分
    stock INT NOT NULL,
    image VARCHAR(255)
);

-- 订单表
CREATE TABLE orders (
    id INT PRIMARY KEY AUTO_INCREMENT,
    user_id INT NOT NULL,
    product_id INT NOT NULL,
    quantity INT NOT NULL,
    total_points INT NOT NULL,
    status ENUM('pending', 'completed', 'cancelled') DEFAULT 'pending',
    created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP,
    FOREIGN KEY (user_id) REFERENCES users(id),
    FOREIGN KEY (product_id) REFERENCES products(id)
);

用户积分管理

实现用户积分的增减功能：

// 增加积分
function addPoints($userId, $points) {
    $sql = "UPDATE users SET points = points + ? WHERE id = ?";
    $stmt = $pdo->prepare($sql);
    $stmt->execute([$points, $userId]);
}

// 减少积分
function deductPoints($userId, $points) {
    $sql = "UPDATE users SET points = points - ? WHERE id = ?";
    $stmt = $pdo->prepare($sql);
    $stmt->execute([$points, $userId]);
}

商品兑换流程

处理用户兑换商品的逻辑：

function exchangeProduct($userId, $productId, $quantity) {
    // 获取商品信息
    $product = $pdo->query("SELECT * FROM products WHERE id = $productId")->fetch();

    // 获取用户积分
    $user = $pdo->query("SELECT points FROM users WHERE id = $userId")->fetch();

    $totalPoints = $product['price'] * $quantity;

    // 检查库存和积分
    if ($product['stock'] < $quantity) {
        return "库存不足";
    }

    if ($user['points'] < $totalPoints) {
        return "积分不足";
    }

    // 开始事务
    $pdo->beginTransaction();

    try {
        // 扣除积分
        deductPoints($userId, $totalPoints);

        // 减少库存
        $pdo->exec("UPDATE products SET stock = stock - $quantity WHERE id = $productId");

        // 创建订单
        $sql = "INSERT INTO orders (user_id, product_id, quantity, total_points) VALUES (?, ?, ?, ?)";
        $stmt = $pdo->prepare($sql);
        $stmt->execute([$userId, $productId, $quantity, $totalPoints]);

        $pdo->commit();
        return "兑换成功";
    } catch (Exception $e) {
        $pdo->rollBack();
        return "兑换失败: " . $e->getMessage();
    }
}

后台管理功能

实现商品和订单管理：

// 添加商品
function addProduct($name, $description, $price, $stock, $image) {
    $sql = "INSERT INTO products (name, description, price, stock, image) VALUES (?, ?, ?, ?, ?)";
    $stmt = $pdo->prepare($sql);
    $stmt->execute([$name, $description, $price, $stock, $image]);
}

// 更新订单状态
function updateOrderStatus($orderId, $status) {
    $sql = "UPDATE orders SET status = ? WHERE id = ?";
    $stmt = $pdo->prepare($sql);
    $stmt->execute([$status, $orderId]);
}

前端展示

创建简单的商品展示页面：

// 获取商品列表
$products = $pdo->query("SELECT * FROM products WHERE stock > 0")->fetchAll();

foreach ($products as $product) {
    echo "<div class='product'>";
    echo "<img src='{$product['image']}' alt='{$product['name']}'>";
    echo "<h3>{$product['name']}</h3>";
    echo "<p>{$product['description']}</p>";
    echo "<p>所需积分: {$product['price']}</p>";
    echo "<p>库存: {$product['stock']}</p>";
    echo "<button onclick='exchange({$product['id']})'>兑换</button>";
    echo "</div>";
}

安全性考虑

实现必要的安全措施：

// 防止SQL注入
$stmt = $pdo->prepare("SELECT * FROM users WHERE id = ?");
$stmt->execute([$_GET['id']]);

// CSRF防护
session_start();
$token = bin2hex(random_bytes(32));
$_SESSION['csrf_token'] = $token;

// 在表单中添加
echo "<input type='hidden' name='csrf_token' value='$token'>";

// 验证CSRF
if ($_POST['csrf_token'] !== $_SESSION['csrf_token']) {
    die("CSRF验证失败");
}