Initial project files: BESCMS full source

2026-08-13 23:37:46 +08:00
parent fa6cddb540
commit 2e26f85723
2166 changed files with 396625 additions and 0 deletions
@@ -0,0 +1,663 @@
+<?php namespace Phpcmf\Controllers;
+
+// 用户api
+class Api extends \Phpcmf\Common
+{
+
+    /**
+     * 会员关联字段数据读取
+     */
+    public function members() {
+
+        // 强制将模板设置为后台
+        \Phpcmf\Service::V()->admin();
+
+        $field = array(
+            'id' => array(
+                'ismain' => 1,
+                'name' => 'Uid',
+                'fieldname' => 'id',
+                'fieldtype' => 'Text',
+            ),
+            'username' => array(
+                'ismain' => 1,
+                'name' => dr_lang('账号'),
+                'fieldname' => 'username',
+                'fieldtype' => 'Text',
+            ),
+            'email' => array(
+                'ismain' => 1,
+                'name' => dr_lang('邮箱'),
+                'fieldname' => 'email',
+                'fieldtype' => 'Text',
+            ),
+            'phone' => array(
+                'ismain' => 1,
+                'name' => dr_lang('手机'),
+                'fieldname' => 'phone',
+                'fieldtype' => 'Text',
+            ),
+            'name' => array(
+                'ismain' => 1,
+                'name' => dr_lang('姓名'),
+                'fieldname' => 'name',
+                'fieldtype' => 'Text',
+            ),
+        );
+
+        $param = $data = \Phpcmf\Service::L('input')->get('', true);
+
+        $diy = dr_safe_filename($data['diy']);
+
+        if (IS_POST) {
+            $ids = \Phpcmf\Service::L('input')->get_post_ids();
+            if (!$ids) {
+                $this->_json(0, dr_lang('没有选择项'));
+            }
+            $id = [];
+            foreach ($ids as $i) {
+                $id[] = (int)$i;
+            }
+            $builder = \Phpcmf\Service::M()->db->table('member');
+            $builder->whereIn('id', $id);
+            $mylist = $builder->orderBy('id DESC')->get()->getResultArray();
+            if (!$mylist) {
+                $this->_json(0, dr_lang('没有相关数据'));
+            }
+            $name = dr_safe_filename(\Phpcmf\Service::L('input')->get('name'));
+            if (!$name) {
+                $this->_json(0, dr_lang('name参数不能为空'));
+            }
+
+            $ids = [];
+            foreach ($mylist as $t) {
+                $ids[] = $t['id'];
+            }
+
+            $file = \Phpcmf\Service::V()->code2php(
+                file_get_contents(is_file(MYPATH.'View/api_members_field_'.$diy.'.html') ? MYPATH.'View/api_members_field_'.$diy.'.html' : COREPATH.'View/api_members_field.html')
+            );
+            ob_start();
+            require $file;
+            $code = ob_get_clean();
+            $html = explode('<!--list-->', $code);
+
+            $this->_json(1, dr_lang('操作成功'), ['ids' => $ids, 'html' => $html[1]]);
+        }
+
+        $where = [];
+        if ($data['group']) {
+            // 指定用户组时
+            $ids = explode(',', (string)$data['group']);
+            if ($ids) {
+                $arr = [];
+                foreach ($ids as $gid) {
+                    $gid = intval($gid);
+                    if ($gid) {
+                        $arr[] = $gid;
+                    }
+                }
+                if ($arr) {
+                    $where[] = '`id` IN (select uid from `'.\Phpcmf\Service::M()->dbprefix('member_group_index').'` where gid in('.implode(',', $arr).'))';
+                }
+            }
+            $group = [];
+        } else {
+            $group = $this->member_cache['group'];
+        }
+
+        if ($data['search']) {
+            $gid = (int)$data['groupid'];
+            if ($gid) {
+                $where[] = '`id` IN (select uid from `'.\Phpcmf\Service::M()->dbprefix('member_group_index').'` where gid='.$gid.')';
+            }
+            $data['keyword'] = dr_safe_replace(urldecode($data['keyword']));
+            if (isset($data['keyword']) && $data['keyword'] && $data['field'] && isset($field[$data['field']])) {
+                $data['keyword'] = dr_safe_replace(urldecode($data['keyword']));
+                if ($data['field'] == 'id') {
+                    // id搜索
+                    $id = [];
+                    $ids = explode(',', $data['keyword']);
+                    foreach ($ids as $i) {
+                        $id[] = (int)$i;
+                    }
+                    $where[] = 'id in('.implode(',', $id).')';
+                } else {
+                    // 其他模糊搜索
+                    $where[] = $data['field'].' LIKE "%'.$data['keyword'].'%"';
+                }
+            }
+        }
+
+        $rules = $data;
+        $rules['page'] = '{page}';
+
+        \Phpcmf\Service::V()->assign([
+            'diy' => $data['diy'],
+            'where' => $where ? urlencode(implode(' AND ', $where)) : '',
+            'param' => $data,
+            'field' => $field,
+            'group' => $group,
+            'search' => dr_form_search_hidden(['search' => 1, 'is_iframe' => 1, 'diy' => $data['diy']]),
+            'urlrule' => '/index.php?s=module&c=api&m=related&'.http_build_query($rules),
+        ]);
+        if (is_file(MYPATH.'View/api_members_'.$diy.'.html')) {
+            \Phpcmf\Service::V()->display('api_members_'.$diy.'.html');
+        } else {
+            \Phpcmf\Service::V()->display('api_members.html');
+        }
+    }
+
+    /**
+     * 动态调用模板
+     */
+    public function template() {
+
+        $app = dr_safe_filename(\Phpcmf\Service::L('input')->get('app'));
+        $file = dr_safe_filename(\Phpcmf\Service::L('input')->get('name'));
+        $module = dr_safe_filename(\Phpcmf\Service::L('input')->get('module'));
+
+        $data = [
+            'app' => $app,
+            'file' => $file,
+            'module' => $module,
+        ];
+
+        if (!$file) {
+            $html = 'name不能为空';
+        } else {
+            if ($module) {
+                $this->_module_init($module);
+                \Phpcmf\Service::V()->module($module);
+            } elseif ($app) {
+                \Phpcmf\Service::V()->module($app);
+            }
+
+            \Phpcmf\Service::V()->assign(\Phpcmf\Service::L('input')->get('', true));
+            ob_start();
+            \Phpcmf\Service::V()->display($file);
+            $html = ob_get_contents();
+            ob_clean();
+
+            $data['call_value'] = \Phpcmf\Service::V()->call_value;
+        }
+
+        $this->_json(1, $html, $data);
+    }
+
+    /**
+     * 授权登录用户中心跳转
+     */
+    public function alogin() {
+
+        $code = \Phpcmf\Service::L('input')->get_cookie('admin_login_member');
+        if (!$code) {
+            if (isset($_COOKIE[SYS_KEY.'admin_login_member']) && $_COOKIE[SYS_KEY.'admin_login_member']) {
+                $code = $_COOKIE[SYS_KEY.'admin_login_member'];
+            } else {
+                $this->_msg(0, dr_lang('没有获取到cookie'));
+            }
+        }
+
+        $session = $this->session()->get('admin_login_member_code');
+        if (!$session) {
+            $this->_msg(0, dr_lang('没有获取到会话信息'));
+        }
+
+        list($uid, $adminid) = explode('-', $code);
+        $uid = (int)$uid;
+        if ($this->uid != $uid) {
+            $admin = \Phpcmf\Service::M()->table('member')->get((int)$adminid);
+            if ($session != md5($uid.$admin['id'].$admin['password'])) {
+                $this->_msg(0, dr_lang('会话信息不匹配'));
+            }
+        }
+
+        $url = dr_safe_url(urldecode(\Phpcmf\Service::L('input')->get('url')));
+        !$url && $url = MEMBER_URL;
+        dr_redirect($url);
+    }
+
+    /**
+     * 头像更新
+     */
+    public function avatar() {
+        \Phpcmf\Service::L('Thread')->cron(['action' => 'oauth_down_avatar', 'id' => intval(\Phpcmf\Service::L('input')->get('id')) ]);
+        exit;
+    }
+
+    /**
+     * 审核
+     */
+    public function verify() {
+
+        if (!$this->member) {
+            $this->_msg(0, dr_lang('账号未登录'));
+        }
+
+        // 获取返回页面
+        $url = dr_safe_url($_SERVER['HTTP_REFERER']);
+        (strpos($url, 'verify') !== false || !$url) && $url = MEMBER_URL;
+
+        if ($this->member['is_verify'] && !IS_XRDEV) {
+            if (IS_API_HTTP) {
+                $this->_json(0, dr_lang('此用户已经通过审核了'));
+            }
+            dr_redirect($url);
+            exit;
+        } elseif (!$this->member['is_verify'] && !$this->member_cache['register']['verify']) {
+            // 如果系统已经关闭了审核机制就自动通过
+            \Phpcmf\Service::M('member')->verify_member($this->member['uid']);
+            if (IS_API_HTTP) {
+                $this->_json(0, dr_lang('系统已经关闭了审核机制'));
+            }
+            dr_redirect($url);
+            exit;
+        } elseif ($this->member_cache['register']['verify'] == 'admin') {
+            $this->_msg(0, dr_lang('请等待管理员的审核'));
+        } elseif (!$this->member['email'] && !$this->member['phone']) {
+            // 手机邮箱都为空，表示从第三方登录注册的
+            $this->change();exit;
+        }
+
+        \Phpcmf\Service::V()->assign([
+            'post_url' => dr_member_url('api/verify_code', ['back' => urlencode($url)]),
+            'meta_title' => dr_lang('账号审核'),
+            'verify_url' => dr_member_url('api/'.$this->member_cache['register']['verify'].'_verify_code'),
+            'verify_name' => $this->member[$this->member_cache['register']['verify']],
+            'verify_type' => $this->member_cache['register']['verify'],
+        ]);
+        \Phpcmf\Service::V()->display('verify.html');
+    }
+
+    /**
+     * 审核时变更邮箱或者手机
+     */
+    public function change() {
+
+        if (!$this->member) {
+            $this->_msg(0, dr_lang('账号未登录'));
+        } elseif ($this->member['is_verify'] && !IS_XRDEV) {
+            if (IS_API_HTTP) {
+                $this->_json(0, dr_lang('此用户已经通过审核了'));
+            }
+            dr_redirect(MEMBER_URL);
+            exit;
+        } elseif (!$this->member['is_verify'] && !$this->member_cache['register']['verify']) {
+            // 如果系统已经关闭了审核机制就自动通过
+            \Phpcmf\Service::M('member')->verify_member($this->member['uid']);
+            if (IS_API_HTTP) {
+                $this->_json(0, dr_lang('系统已经关闭了审核机制'));
+            }
+            dr_redirect(MEMBER_URL);
+            exit;
+        } elseif ($this->member_cache['register']['verify'] == 'admin') {
+            $this->_msg(0, dr_lang('请等待管理员的审核'));
+        }
+
+        if (IS_POST) {
+            $value = dr_safe_replace(\Phpcmf\Service::L('input')->post('value'));
+            if (!\Phpcmf\Service::L('Form')->check_captcha('code')) {
+                $this->_json(0, dr_lang('图片验证码不正确'), ['field' => 'code']);
+            } elseif (empty($value)) {
+                $this->_json(0, dr_lang('新邮箱或者手机号码必须填写'));
+            } elseif ($this->member_cache['register']['verify'] == 'email' && !\Phpcmf\Service::L('Form')->check_email($value)) {
+                $this->_json(0, dr_lang('邮箱格式不正确'), ['field' => 'value']);
+            } elseif ($this->member_cache['register']['verify'] == 'phone' && !\Phpcmf\Service::L('Form')->check_phone($value)) {
+                $this->_json(0, dr_lang('手机号码格式不正确'), ['field' => 'value']);
+            } elseif ($this->member_cache['register']['verify'] == 'email' && \Phpcmf\Service::M()->db->table('member')->where('email', $value)->countAllResults()) {
+                $this->_json(0, dr_lang('邮箱%s已经注册',$value), ['field' => 'value']);
+            } elseif ($this->member_cache['register']['verify'] == 'phone' && \Phpcmf\Service::M()->db->table('member')->where('phone', $value)->countAllResults()) {
+                $this->_json(0, dr_lang('手机号码%s已经注册', $value), ['field' => 'value']);
+            }
+
+            $this->member['randcode'] = \Phpcmf\Service::L('Form')->get_rand_value();
+            \Phpcmf\Service::M()->db->table('member')->where('id', $this->uid)->update([
+                'randcode' => $this->member['randcode'],
+                $this->member_cache['register']['verify'] => $value
+            ]);
+
+            switch ($this->member_cache['register']['verify']) {
+
+                case 'phone':
+                    // 挂钩点 短信验证之前
+                    \Phpcmf\Hooks::trigger('member_send_phone_before', $value);
+                    \Phpcmf\Service::M('member')->sendsms_code($value, $this->member['randcode']);
+                    break;
+
+                case 'email':
+                    \Phpcmf\Service::M('member')->sendmail($value, dr_lang('注册邮件验证'), 'member_verify.html', $this->member);
+                    break;
+            }
+
+            $this->_json(1, dr_lang('信息已经变更'));
+        }
+
+        \Phpcmf\Service::V()->assign([
+            'post_url' => dr_member_url('api/verify_code'),
+            'meta_title' => dr_lang('账号审核信息变更'),
+            'verify_name' => $this->member[$this->member_cache['register']['verify']],
+            'verify_type' => $this->member_cache['register']['verify'],
+        ]);
+        \Phpcmf\Service::V()->display('change.html');
+    }
+
+    /**
+     * 邮件审核验证码
+     */
+    public function email_verify_code() {
+
+        if (!$this->member) {
+            $this->_msg(0, dr_lang('账号未登录'));
+        } elseif ($this->member['is_verify']) {
+            $this->_msg(0, dr_lang('此用户已经通过审核了'));
+        } elseif ($this->member_cache['register']['verify'] != 'email') {
+            $this->_msg(0, dr_lang('审核方式不正确'));
+        }
+
+        // 验证操作间隔
+        $name = 'member-verify-email-'.$this->uid;
+        if (\Phpcmf\Service::L('cache')->check_auth_data($name, 300)) {
+            $this->_json(0, dr_lang('已经发送稍后再试'));
+        }
+
+        $this->member['randcode'] = \Phpcmf\Service::L('Form')->get_rand_value();
+        \Phpcmf\Service::M()->db->table('member')->where('id', $this->member['id'])->update(['randcode' => $this->member['randcode']]);
+        $rt = \Phpcmf\Service::M('member')->sendmail($this->member['email'], dr_lang('注册邮件验证'), 'member_verify.html', $this->member);
+        if (!$rt['code']) {
+            $this->_json(0, dr_lang('邮件发送失败'));
+        }
+
+        \Phpcmf\Service::L('cache')->set_auth_data($name, $this->member['randcode']);
+		
+        $this->_json(1, dr_lang('验证码发送成功'));
+    }
+
+    /**
+     * 短信审核验证码
+     */
+    public function phone_verify_code() {
+
+        if (!$this->member) {
+            $this->_json(0, dr_lang('账号未登录'));
+        } elseif ($this->member['is_verify']) {
+            $this->_msg(0, dr_lang('此用户已经通过审核了'));
+        } elseif ($this->member_cache['register']['verify'] != 'phone') {
+            $this->_msg(0, dr_lang('审核方式不正确'));
+        }
+
+        // 验证操作间隔
+        $name = 'member-verify-phone-'.$this->uid;
+        if (\Phpcmf\Service::L('cache')->check_auth_data($name, defined('SYS_CACHE_SMS') && SYS_CACHE_SMS ? SYS_CACHE_SMS : 60)) {
+			$this->_json(0, dr_lang('已经发送稍后再试'));
+		} 
+
+        $this->member['randcode'] = \Phpcmf\Service::L('Form')->get_rand_value();
+        \Phpcmf\Service::M()->db->table('member')->where('id', $this->member['id'])->update(['randcode' => $this->member['randcode']]);
+        $rt = \Phpcmf\Service::M('member')->sendsms_code($this->member['phone'], $this->member['randcode']);
+        if (!$rt['code']) {
+            $this->_json(0, IS_DEV ? $rt['msg'] : dr_lang('发送失败'));
+        }
+
+        \Phpcmf\Service::L('cache')->set_auth_data($name, $this->member['randcode']);
+		
+        $this->_json(1, dr_lang('验证码发送成功'));
+    }
+
+
+    /**
+     * 验证审核验证码
+     */
+    public function verify_code() {
+
+        // 获取返回页面
+        $url = dr_safe_url($_GET['back'] ? urldecode((string)\Phpcmf\Service::L('input')->get('back')) : $_SERVER['HTTP_REFERER']);
+        strpos($url, 'login') !== false && $url = MEMBER_URL;
+
+        // 挂钩点 审核验证之前
+        \Phpcmf\Hooks::trigger('member_verify_before', $this->member);
+
+        if (!$this->member) {
+            $this->_json(0, dr_lang('账号未登录'));
+        } elseif ($this->member['is_verify']) {
+            $this->_json(1, dr_lang('已经验证成功'), ['url' => $url ? $url : MEMBER_URL]);
+        } elseif (!$this->member['randcode']) {
+            $this->_json(0, dr_lang('验证码已过期'));
+        } elseif (\Phpcmf\Service::L('input')->get('code') != $this->member['randcode']) {
+            $this->_json(0, dr_lang('验证码不正确'));
+        }
+
+        \Phpcmf\Service::M()->db->table('member')->where('id', $this->member['id'])->update(['randcode' => 0]);
+
+        \Phpcmf\Service::M('member')->verify_member($this->member['id']);
+        if ($this->member_cache['register']['verify'] == 'phone') {
+            \Phpcmf\Service::M()->db->table('member_data')->where('id', $this->member['uid'])->update(['is_mobile' => 1]);
+        } elseif ($this->member_cache['register']['verify'] == 'email') {
+            \Phpcmf\Service::M()->db->table('member_data')->where('id', $this->member['uid'])->update(['is_email' => 1]);
+        }
+
+        $this->_json(1, dr_lang('验证成功'), ['url' => $url ? $url : MEMBER_URL]);
+    }
+
+    /**
+     * 找回密码验证码
+     */
+    public function find_code() {
+
+		$code = dr_safe_replace(\Phpcmf\Service::L('input')->get('code'));
+        $value = dr_safe_replace(\Phpcmf\Service::L('input')->get('value'));
+        if (!$value) {
+            $this->_json(0, dr_lang('账号凭证不能为空'), ['field' => 'value']);
+        } elseif (!$code) {
+            $this->_json(0, dr_lang('图片验证码未填写'), ['field' => 'code']);
+        } elseif (!\Phpcmf\Service::L('Form')->check_captcha_value($code)) {
+            $this->_json(0, dr_lang('图片验证码不正确'), ['field' => 'code']);
+        }
+
+        // 验证操作间隔
+        $name = 'member-find-password-'.$value;
+        if (\Phpcmf\Service::L('cache')->check_auth_data($name, defined('SYS_CACHE_SMS') && SYS_CACHE_SMS ? SYS_CACHE_SMS : 60)) {
+			$this->_json(0, dr_lang('已经发送稍后再试'));
+		} 
+
+        if (strpos($value, '@') !== false) {
+            // 邮箱模式
+            $data = \Phpcmf\Service::M()->db->table('member')->where('email', $value)->get()->getRowArray();
+            if (!$data) {
+                $this->_json(0, dr_lang('账号凭证不存在'), ['field' => 'value']);
+            }
+            $data['randcode'] = $rand = \Phpcmf\Service::L('Form')->get_rand_value();
+            \Phpcmf\Service::M()->db->table('member')->where('id', $data['id'])->update(['randcode' => $rand]);
+            $rt = \Phpcmf\Service::M('member')->sendmail($value, dr_lang('找回密码'), 'member_find.html', $data);
+            if (!$rt['code']) {
+                $this->_json(0, dr_lang('邮件发送失败'));
+            }
+        } else {
+            // 手机
+            if (!\Phpcmf\Service::L('Form')->check_phone($value)) {
+                $this->_json(0, dr_lang('账号凭证格式不正确'), ['field' => 'value']);
+            }
+
+            // 挂钩点 短信验证之前
+            \Phpcmf\Hooks::trigger('member_send_phone_before', $value);
+
+            $data = \Phpcmf\Service::M()->db->table('member')->where('phone', $value)->get()->getRowArray();
+            if (!$data) {
+                $this->_json(0, dr_lang('账号凭证不存在'), ['field' => 'value']);
+            }
+            $rand = \Phpcmf\Service::L('Form')->get_rand_value();
+            \Phpcmf\Service::M()->db->table('member')->where('id', $data['id'])->update(['randcode' => $rand]);
+            $rt = \Phpcmf\Service::M('member')->sendsms_code($value, $rand);
+            if (!$rt['code']) {
+                $this->_json(0, IS_DEV ? $rt['msg'] : dr_lang('发送失败'));
+            }
+        }
+
+        \Phpcmf\Service::L('cache')->set_auth_data($name, $rand);
+		
+        $this->_json(1, dr_lang('验证码发送成功'));
+    }
+
+    /////////////////发送短信验证码部分////////////////////
+
+    /**
+     * 注册验证码
+     */
+    public function register_code() {
+
+        if (!defined('SYS_SMS_IMG_CODE') || SYS_SMS_IMG_CODE == 0) {
+            $code = dr_safe_replace(\Phpcmf\Service::L('input')->get('code'));
+            if (!$code) {
+                $this->_json(0, dr_lang('图片验证码未填写'), ['field' => 'code']);
+            } elseif (!\Phpcmf\Service::L('Form')->check_captcha_value($code)) {
+                $this->_json(0, dr_lang('图片验证码不正确'), ['field' => 'code']);
+            }
+        }
+
+        $value = trim(dr_safe_replace(\Phpcmf\Service::L('input')->get('id')));
+        if (!$value) {
+            $this->_json(0, dr_lang('信息未填写'));
+        }
+
+        if (strpos($value, '@') !== false) {
+            $email = $value;
+            $data = \Phpcmf\Service::M()->db->table('member')->where('email', $value)->get()->getRowArray();
+            if ($data) {
+                $this->_json(0, dr_lang('邮箱已经注册'), ['field' => 'email']);
+            }
+            $code = \Phpcmf\Service::L('Form')->get_rand_value();
+            $rt = \Phpcmf\Service::M('member')->sendmail($value, dr_lang('注册验证'), 'member_register_check.html', [
+                'code' => $code,
+                'randcode' => $code,
+            ]);
+            if (!$rt['code']) {
+                $this->_json(0, dr_lang('邮件发送失败'));
+            }
+
+            \Phpcmf\Service::L('Form')->set_mobile_code($email, $code);
+        } else {
+            $phone = $value;
+            if (!\Phpcmf\Service::L('Form')->check_phone($phone)) {
+                $this->_json(0, dr_lang('手机号码格式不正确'), ['field' => 'phone']);
+            } elseif (\Phpcmf\Service::M()->db->table('member')->where('phone', $phone)->countAllResults()) {
+                $this->_json(0, dr_lang('手机号码已经注册'), ['field' => 'phone']);
+            } elseif (\Phpcmf\Service::L('Form')->get_mobile_code($phone)) {
+                $this->_json(0, dr_lang('已经发送稍后再试')); // 验证操作间隔
+            }
+
+            // 挂钩点 短信验证之前
+            \Phpcmf\Hooks::trigger('member_send_phone_before', $phone);
+    
+            $code = \Phpcmf\Service::L('Form')->get_rand_value();
+            $rt = \Phpcmf\Service::M('member')->sendsms_code($phone, $code);
+            if (!$rt['code']) {
+                $this->_json(0, IS_DEV ? $rt['msg'] : dr_lang('发送失败'));
+            }
+    
+            \Phpcmf\Service::L('Form')->set_mobile_code($phone, $code);
+        }
+        
+		
+        $this->_json(1, dr_lang('验证码发送成功'));
+    }
+
+    /**
+     * 登录验证码
+     */
+    public function login_code() {
+
+        if (!defined('SYS_SMS_IMG_CODE') || SYS_SMS_IMG_CODE == 0) {
+            $code = dr_safe_replace(\Phpcmf\Service::L('input')->get('code'));
+            if (!$code) {
+                $this->_json(0, dr_lang('图片验证码未填写'), ['field' => 'code']);
+            } elseif (!\Phpcmf\Service::L('Form')->check_captcha_value($code)) {
+                $this->_json(0, dr_lang('图片验证码不正确'), ['field' => 'code']);
+            }
+        }
+
+        // 挂钩点 短信验证之前
+        \Phpcmf\Hooks::trigger('member_send_phone_before', $phone);
+
+        $phone = dr_safe_replace(\Phpcmf\Service::L('input')->get('id'));
+        if (!$phone) {
+            $this->_json(0, dr_lang('手机号码未填写'), ['field' => 'phone']);
+        } elseif (!\Phpcmf\Service::L('Form')->check_phone($phone)) {
+            $this->_json(0, dr_lang('手机号码格式不正确'), ['field' => 'phone']);
+        } elseif ($this->member_cache['login']['is_auto']
+            && !\Phpcmf\Service::M()->db->table('member')->where('phone', $phone)->countAllResults()) {
+            $this->_json(0, dr_lang('手机号码未注册'), ['field' => 'phone']);
+        } elseif (\Phpcmf\Service::L('Form')->get_mobile_code($phone)) {
+			$this->_json(0, dr_lang('已经发送稍后再试'));// 验证操作间隔
+		} 
+
+        $code = \Phpcmf\Service::L('Form')->get_rand_value();
+        $rt = \Phpcmf\Service::M('member')->sendsms_code($phone, $code);
+        if (!$rt['code']) {
+            $this->_json(0, IS_DEV ? $rt['msg'] : dr_lang('发送失败'));
+        }
+
+		\Phpcmf\Service::L('Form')->set_mobile_code($phone, $code);
+		
+        $this->_json(1, dr_lang('验证码发送成功'));
+    }
+
+    /**
+     * 发送验证码
+     */
+    public function send_code() {
+
+        $phone = dr_safe_replace(\Phpcmf\Service::L('input')->get('id'));
+        if (!$phone) {
+            $this->_json(0, dr_lang('手机号码未填写'), ['field' => 'phone']);
+        } elseif (!\Phpcmf\Service::L('Form')->check_phone($phone)) {
+            $this->_json(0, dr_lang('手机号码格式不正确'), ['field' => 'phone']);
+        }
+
+        // 挂钩点 短信验证之前
+        \Phpcmf\Hooks::trigger('send_phone_before', $phone);
+
+        if (!defined('SYS_SMS_IMG_CODE') || SYS_SMS_IMG_CODE == 0) {
+            $code = dr_safe_replace(\Phpcmf\Service::L('input')->get('code'));
+            if (!$code) {
+                $this->_json(0, dr_lang('图片验证码未填写'), ['field' => 'code']);
+            } elseif (!\Phpcmf\Service::L('Form')->check_captcha_value($code)) {
+                $this->_json(0, dr_lang('图片验证码不正确'), ['field' => 'code']);
+            }
+        }
+
+        // 验证操作间隔
+        if (\Phpcmf\Service::L('Form')->get_mobile_code($phone)) {
+            $this->_json(1, dr_lang('已经发送稍后再试'));
+        }
+
+        $code = \Phpcmf\Service::L('Form')->get_rand_value();
+        $rt = \Phpcmf\Service::M('member')->sendsms_code($phone, $code);
+        if (!$rt['code']) {
+            $this->_json(0, IS_DEV ? $rt['msg'] : dr_lang('发送失败'));
+        }
+
+		\Phpcmf\Service::L('Form')->set_mobile_code($phone, $code);
+		
+        $this->_json(1, dr_lang('验证码发送成功'));
+    }
+
+
+    /**
+     * 注册协议
+     */
+    public function protocol() {
+        \Phpcmf\Service::V()->display('protocol.html');
+    }
+
+    /**
+     * 登录状态
+     */
+    public function status() {
+        if ($this->member) {
+            $this->_json(1, 'ok', $this->member);
+        } else {
+            $this->_json(0, dr_lang('没有登录'));
+        }
+    }
+
+}