WARFR（Work Registration & Authentication Framework）是一个专业的PPT作品原创信息登记系统，致力于保护原创作品，维护创作者权益。系统提供完整的作品登记、审核、管理和证书生成功能，支持中英文双语界面，为创作者提供便捷的作品保护服务。

1. 用户认证系统

多种登录方式

传统账号登录：支持用户名/邮箱+密码登录
InterEco UIA集成：支持通过InterEco统一身份认证系统登录
账号绑定：可将传统账号与InterEco账号绑定，实现多种登录方式无缝切换
安全验证
Cloudflare Turnstile：采用业界领先的人机验证技术，有效防止自动化攻击和垃圾注册
邮箱验证：注册时发送验证邮件，确保邮箱真实性
密码加密：使用函数进行密码加密存储
会话管理：安全的会话机制，支持自动登出和会话超时
2. 作品登记管理

作品信息登记
完整信息录入：支持作品标题、作者姓名、立项日期、发布日期、作品描述等信息
图片上传：支持封面图片和制作过程图片上传（JPG、PNG格式，最大5MB）
批量上传：最多可上传10张制作过程图片
实时预览：上传图片后可实时预览
作品审核流程
三级审核状态：待审核、已通过、未通过
审核通知：审核结果通过邮件通知用户
未通过原因：管理员可填写未通过原因，帮助用户改进作品
重新提交：未通过作品可修改后重新提交审核
3. 作品展示系统

作品详情页面
MS风格设计：采用现代化卡片式布局，视觉效果出色
响应式设计：完美适配桌面端和移动端
动态背景：作品封面作为页面背景，带渐变蒙版效果
毛玻璃效果：导航栏和内容区域采用毛玻璃效果
平滑动画：页面加载和切换采用非线性动画，提供流畅体验
证书生成
自动生成：审核通过后自动生成作品登记证书
唯一编号：每个作品分配唯一的登记号（OIC-XXXXXXXX格式）
打印友好：支持打印功能，生成纸质证书
分享功能：支持分享作品和证书链接
4. 个人中心

统计信息
作品统计：实时显示已通过、待审核、未通过作品数量
快速操作：一键跳转到作品登记页面
作品管理
标签页切换：按审核状态分类展示作品
快速操作：查看、编辑、删除作品
批量管理：支持批量上传和管理作品图片
状态追踪：实时查看作品审核进度
个人资料
资料编辑：支持修改用户名、邮箱等信息
账号绑定：绑定/解绑InterEco账号
头像上传：支持自定义用户头像
6. 多语言支持

双语界面
中英文切换：一键切换中文/英文界面
完整翻译：所有页面、按钮、提示信息均已翻译
语言记忆：系统记住用户选择的语言偏好
URL参数：支持通过URL参数指定语言
7. 邮件系统

邮件通知
注册验证：发送注册验证邮件
审核通知：作品审核结果通知
密码重置：发送密码重置链接
系统通知：重要系统消息通知
安全特性

1. 人机验证
Cloudflare Turnstile：采用最先进的人机验证技术
无感知验证：大部分情况下无需用户操作
智能识别：自动识别机器人和真实用户
防刷机制：有效防止批量注册和恶意攻击
2. 邮件安全
SMTP加密：使用SSL/TLS加密传输邮件
验证链接：包含加密token，防止链接被滥用
链接时效：验证链接有时效性，过期自动失效
一次性使用：验证链接仅可使用一次
3. 密码安全
强加密：使用bcrypt算法加密密码
密码强度：要求密码包含字母、数字和特殊字符
密码重置：安全的密码重置流程
密码修改：修改密码需验证当前密码
4. 会话安全
会话加密：使用加密的会话ID
会话超时：长时间不操作自动登出
IP绑定：会话与IP地址绑定，防止会话劫持
CSRF防护：防止跨站请求伪造攻击
5. 数据安全
SQL注入防护：使用预处理语句，防止SQL注入
XSS防护：输出数据时进行HTML转义
文件上传安全：限制文件类型和大小，防止恶意文件上传
数据备份：定期备份数据库，防止数据丢失
6. 访问控制
权限管理：基于角色的访问控制（RBAC）
页面保护：敏感页面需要登录和相应权限
操作日志：记录所有重要操作，便于审计
IP限制：支持限制特定IP访问
------EN------
WARFR（Work Registration & Authentication Framework）is a professional system for registering the originality of PPT works, dedicated to protecting original creations and safeguarding creators’ rights. The system offers comprehensive features for work registration, review, management, and certificate generation, with support for both Chinese and English interfaces, providing creators with convenient work protection services.
1. User Authentication System

Multiple Login Methods
Traditional Account Login: Supports login via username/email and password
InterEco UIA Integration: Supports login via the InterEco Unified Identity Authentication System
Account Linking: Allows linking of traditional accounts with InterEco accounts to enable seamless switching between login methods
Security Verification
Cloudflare Turnstile: Utilizes industry-leading human-machine verification technology to effectively prevent automated attacks and spam registrations
Email Verification: Sends a verification email during registration to ensure email authenticity
Password Encryption: Uses a hash function to securely store passwords
Session Management: Secure session mechanism supporting automatic logout and session timeouts
2. Work Registration Management

Work Information Registration
Complete Information Entry: Supports entry of work title, author name, project start date, release date, work description, and other details
Image Upload: Supports uploading cover images and production process images (JPG, PNG formats, max 5MB)
Batch Upload: Up to 10 production process images can be uploaded at once
Real-time Preview: Images can be previewed in real-time after upload
Work Review Process
Three-tier Review Status: Pending Review, Approved, Rejected
Review Notification: Review results are notified to users via email
Rejection Reason: Administrators can provide a reason for rejection to help users improve their work
Resubmission: Rejected works can be modified and resubmitted for review
3. Work Display System

Work Details Page
MS-Style Design: Features a modern card-based layout with outstanding visual appeal
Responsive Design: Perfectly adapts to both desktop and mobile devices
Dynamic Background: The work cover serves as the page background with a gradient overlay effect
Frosted Glass Effect: The navigation bar and content area feature a frosted glass effect
Smooth Animations: Non-linear animations for page loading and transitions provide a seamless experience
Certificate Generation
Automatic Generation: Work registration certificates are automatically generated upon approval
Unique ID: Each work is assigned a unique registration number (in OIC-XXXXXXXX format)
Print-Friendly: Supports printing to generate physical certificates
Share Feature: Supports sharing links to works and certificates
4. Personal Center

Statistics
Work Statistics: Real-time display of the number of approved, pending, and rejected works
Quick Actions: One-click navigation to the work registration page
Work Management
Tab Switching: Works are categorized and displayed by review status
Quick Actions: View, edit, and delete works
Batch Management: Supports batch uploading and managing work images
Status Tracking: View real-time progress of work reviews
Profile
Profile Editing: Supports modifying username, email, and other information
Account Linking: Link or unlink InterEco accounts
Profile Picture Upload: Supports custom user profile pictures
6. Multilingual Support

Bilingual Interface
Chinese-English Switch: One-click switching between Chinese and English interfaces
Full Translation: All pages, buttons, and prompts have been translated
Language Memory: The system remembers the user’s language preference
URL Parameters: Supports specifying the language via URL parameters
7. Email System

Email Notifications
Registration Verification: Sends registration verification emails
Review Notifications: Notifies users of review results
Password Reset: Sends password reset links
System Notifications: Sends important system messages
Security Features

1. Human Verification
Cloudflare Turnstile: Utilizes state-of-the-art human verification technology
Transparent Verification: Requires no user action in most cases
Smart Recognition: Automatically distinguishes between bots and real users
Anti-Spam Mechanism: Effectively prevents bulk registrations and malicious attacks
2. Email Security
SMTP Encryption: Uses SSL/TLS to encrypt email transmission
Verification Links: Contain encrypted tokens to prevent link abuse
Link Expiration: Verification links have a time limit and automatically expire
Single-Use: Verification links can only be used once
3. Password Security
Strong Encryption: Uses the bcrypt algorithm to encrypt passwords
Password Strength: Requires passwords to include letters, numbers, and special characters
Password Reset: Secure password reset process
Password Change: Password changes require verification of the current password
4. Session Security
Session Encryption: Uses encrypted session IDs
Session Timeout: Automatic logout after prolonged inactivity
IP Binding: Sessions are bound to IP addresses to prevent session hijacking
CSRF Protection: Prevents cross-site request forgery attacks
5. Data Security
SQL Injection Protection: Use prepared statements to prevent SQL injection
XSS Protection: HTML-escape output data
File Upload Security: Restrict file types and sizes to prevent malicious file uploads
Data Backup: Regularly back up the database to prevent data loss
6. Access Control
Permission Management: Role-Based Access Control (RBAC)
Page Protection: Require login and appropriate permissions for sensitive pages
Operation Logs: Log all critical operations for auditing purposes
IP Restrictions: Support restricting access from specific IP addresses

1. 用户认证系统

多种登录方式

安全验证

2. 作品登记管理

作品信息登记

作品审核流程

3. 作品展示系统

作品详情页面

证书生成

4. 个人中心

统计信息

作品管理

个人资料

6. 多语言支持

双语界面

7. 邮件系统

邮件通知

安全特性

1. 人机验证

2. 邮件安全

3. 密码安全

4. 会话安全

5. 数据安全

6. 访问控制

------EN------

1. User Authentication System

Multiple Login Methods

Security Verification

2. Work Registration Management

Work Information Registration

Work Review Process

3. Work Display System

Work Details Page

Certificate Generation

4. Personal Center

Statistics

Work Management

Profile

6. Multilingual Support

Bilingual Interface

7. Email System

Email Notifications

Security Features

1. Human Verification

2. Email Security

3. Password Security

4. Session Security

5. Data Security

6. Access Control