Files

664 lines
26 KiB
PHP

<?php namespace Phpcmf\Controllers;
// 用户api
class Api extends \Phpcmf\Common
{
/**
* 会员关联字段数据读取
*/
public function members() {
// 强制将模板设置为后台
\Phpcmf\Service::V()->admin();
$field = array(
'id' => array(
'ismain' => 1,
'name' => 'Uid',
'fieldname' => 'id',
'fieldtype' => 'Text',
),
'username' => array(
'ismain' => 1,
'name' => dr_lang('账号'),
'fieldname' => 'username',
'fieldtype' => 'Text',
),
'email' => array(
'ismain' => 1,
'name' => dr_lang('邮箱'),
'fieldname' => 'email',
'fieldtype' => 'Text',
),
'phone' => array(
'ismain' => 1,
'name' => dr_lang('手机'),
'fieldname' => 'phone',
'fieldtype' => 'Text',
),
'name' => array(
'ismain' => 1,
'name' => dr_lang('姓名'),
'fieldname' => 'name',
'fieldtype' => 'Text',
),
);
$param = $data = \Phpcmf\Service::L('input')->get('', true);
$diy = dr_safe_filename($data['diy']);
if (IS_POST) {
$ids = \Phpcmf\Service::L('input')->get_post_ids();
if (!$ids) {
$this->_json(0, dr_lang('没有选择项'));
}
$id = [];
foreach ($ids as $i) {
$id[] = (int)$i;
}
$builder = \Phpcmf\Service::M()->db->table('member');
$builder->whereIn('id', $id);
$mylist = $builder->orderBy('id DESC')->get()->getResultArray();
if (!$mylist) {
$this->_json(0, dr_lang('没有相关数据'));
}
$name = dr_safe_filename(\Phpcmf\Service::L('input')->get('name'));
if (!$name) {
$this->_json(0, dr_lang('name参数不能为空'));
}
$ids = [];
foreach ($mylist as $t) {
$ids[] = $t['id'];
}
$file = \Phpcmf\Service::V()->code2php(
file_get_contents(is_file(MYPATH.'View/api_members_field_'.$diy.'.html') ? MYPATH.'View/api_members_field_'.$diy.'.html' : COREPATH.'View/api_members_field.html')
);
ob_start();
require $file;
$code = ob_get_clean();
$html = explode('<!--list-->', $code);
$this->_json(1, dr_lang('操作成功'), ['ids' => $ids, 'html' => $html[1]]);
}
$where = [];
if ($data['group']) {
// 指定用户组时
$ids = explode(',', (string)$data['group']);
if ($ids) {
$arr = [];
foreach ($ids as $gid) {
$gid = intval($gid);
if ($gid) {
$arr[] = $gid;
}
}
if ($arr) {
$where[] = '`id` IN (select uid from `'.\Phpcmf\Service::M()->dbprefix('member_group_index').'` where gid in('.implode(',', $arr).'))';
}
}
$group = [];
} else {
$group = $this->member_cache['group'];
}
if ($data['search']) {
$gid = (int)$data['groupid'];
if ($gid) {
$where[] = '`id` IN (select uid from `'.\Phpcmf\Service::M()->dbprefix('member_group_index').'` where gid='.$gid.')';
}
$data['keyword'] = dr_safe_replace(urldecode($data['keyword']));
if (isset($data['keyword']) && $data['keyword'] && $data['field'] && isset($field[$data['field']])) {
$data['keyword'] = dr_safe_replace(urldecode($data['keyword']));
if ($data['field'] == 'id') {
// id搜索
$id = [];
$ids = explode(',', $data['keyword']);
foreach ($ids as $i) {
$id[] = (int)$i;
}
$where[] = 'id in('.implode(',', $id).')';
} else {
// 其他模糊搜索
$where[] = $data['field'].' LIKE "%'.$data['keyword'].'%"';
}
}
}
$rules = $data;
$rules['page'] = '{page}';
\Phpcmf\Service::V()->assign([
'diy' => $data['diy'],
'where' => $where ? urlencode(implode(' AND ', $where)) : '',
'param' => $data,
'field' => $field,
'group' => $group,
'search' => dr_form_search_hidden(['search' => 1, 'is_iframe' => 1, 'diy' => $data['diy']]),
'urlrule' => '/index.php?s=module&c=api&m=related&'.http_build_query($rules),
]);
if (is_file(MYPATH.'View/api_members_'.$diy.'.html')) {
\Phpcmf\Service::V()->display('api_members_'.$diy.'.html');
} else {
\Phpcmf\Service::V()->display('api_members.html');
}
}
/**
* 动态调用模板
*/
public function template() {
$app = dr_safe_filename(\Phpcmf\Service::L('input')->get('app'));
$file = dr_safe_filename(\Phpcmf\Service::L('input')->get('name'));
$module = dr_safe_filename(\Phpcmf\Service::L('input')->get('module'));
$data = [
'app' => $app,
'file' => $file,
'module' => $module,
];
if (!$file) {
$html = 'name不能为空';
} else {
if ($module) {
$this->_module_init($module);
\Phpcmf\Service::V()->module($module);
} elseif ($app) {
\Phpcmf\Service::V()->module($app);
}
\Phpcmf\Service::V()->assign(\Phpcmf\Service::L('input')->get('', true));
ob_start();
\Phpcmf\Service::V()->display($file);
$html = ob_get_contents();
ob_clean();
$data['call_value'] = \Phpcmf\Service::V()->call_value;
}
$this->_json(1, $html, $data);
}
/**
* 授权登录用户中心跳转
*/
public function alogin() {
$code = \Phpcmf\Service::L('input')->get_cookie('admin_login_member');
if (!$code) {
if (isset($_COOKIE[SYS_KEY.'admin_login_member']) && $_COOKIE[SYS_KEY.'admin_login_member']) {
$code = $_COOKIE[SYS_KEY.'admin_login_member'];
} else {
$this->_msg(0, dr_lang('没有获取到cookie'));
}
}
$session = $this->session()->get('admin_login_member_code');
if (!$session) {
$this->_msg(0, dr_lang('没有获取到会话信息'));
}
list($uid, $adminid) = explode('-', $code);
$uid = (int)$uid;
if ($this->uid != $uid) {
$admin = \Phpcmf\Service::M()->table('member')->get((int)$adminid);
if ($session != md5($uid.$admin['id'].$admin['password'])) {
$this->_msg(0, dr_lang('会话信息不匹配'));
}
}
$url = dr_safe_url(urldecode(\Phpcmf\Service::L('input')->get('url')));
!$url && $url = MEMBER_URL;
dr_redirect($url);
}
/**
* 头像更新
*/
public function avatar() {
\Phpcmf\Service::L('Thread')->cron(['action' => 'oauth_down_avatar', 'id' => intval(\Phpcmf\Service::L('input')->get('id')) ]);
exit;
}
/**
* 审核
*/
public function verify() {
if (!$this->member) {
$this->_msg(0, dr_lang('账号未登录'));
}
// 获取返回页面
$url = dr_safe_url($_SERVER['HTTP_REFERER']);
(strpos($url, 'verify') !== false || !$url) && $url = MEMBER_URL;
if ($this->member['is_verify'] && !IS_XRDEV) {
if (IS_API_HTTP) {
$this->_json(0, dr_lang('此用户已经通过审核了'));
}
dr_redirect($url);
exit;
} elseif (!$this->member['is_verify'] && !$this->member_cache['register']['verify']) {
// 如果系统已经关闭了审核机制就自动通过
\Phpcmf\Service::M('member')->verify_member($this->member['uid']);
if (IS_API_HTTP) {
$this->_json(0, dr_lang('系统已经关闭了审核机制'));
}
dr_redirect($url);
exit;
} elseif ($this->member_cache['register']['verify'] == 'admin') {
$this->_msg(0, dr_lang('请等待管理员的审核'));
} elseif (!$this->member['email'] && !$this->member['phone']) {
// 手机邮箱都为空,表示从第三方登录注册的
$this->change();exit;
}
\Phpcmf\Service::V()->assign([
'post_url' => dr_member_url('api/verify_code', ['back' => urlencode($url)]),
'meta_title' => dr_lang('账号审核'),
'verify_url' => dr_member_url('api/'.$this->member_cache['register']['verify'].'_verify_code'),
'verify_name' => $this->member[$this->member_cache['register']['verify']],
'verify_type' => $this->member_cache['register']['verify'],
]);
\Phpcmf\Service::V()->display('verify.html');
}
/**
* 审核时变更邮箱或者手机
*/
public function change() {
if (!$this->member) {
$this->_msg(0, dr_lang('账号未登录'));
} elseif ($this->member['is_verify'] && !IS_XRDEV) {
if (IS_API_HTTP) {
$this->_json(0, dr_lang('此用户已经通过审核了'));
}
dr_redirect(MEMBER_URL);
exit;
} elseif (!$this->member['is_verify'] && !$this->member_cache['register']['verify']) {
// 如果系统已经关闭了审核机制就自动通过
\Phpcmf\Service::M('member')->verify_member($this->member['uid']);
if (IS_API_HTTP) {
$this->_json(0, dr_lang('系统已经关闭了审核机制'));
}
dr_redirect(MEMBER_URL);
exit;
} elseif ($this->member_cache['register']['verify'] == 'admin') {
$this->_msg(0, dr_lang('请等待管理员的审核'));
}
if (IS_POST) {
$value = dr_safe_replace(\Phpcmf\Service::L('input')->post('value'));
if (!\Phpcmf\Service::L('Form')->check_captcha('code')) {
$this->_json(0, dr_lang('图片验证码不正确'), ['field' => 'code']);
} elseif (empty($value)) {
$this->_json(0, dr_lang('新邮箱或者手机号码必须填写'));
} elseif ($this->member_cache['register']['verify'] == 'email' && !\Phpcmf\Service::L('Form')->check_email($value)) {
$this->_json(0, dr_lang('邮箱格式不正确'), ['field' => 'value']);
} elseif ($this->member_cache['register']['verify'] == 'phone' && !\Phpcmf\Service::L('Form')->check_phone($value)) {
$this->_json(0, dr_lang('手机号码格式不正确'), ['field' => 'value']);
} elseif ($this->member_cache['register']['verify'] == 'email' && \Phpcmf\Service::M()->db->table('member')->where('email', $value)->countAllResults()) {
$this->_json(0, dr_lang('邮箱%s已经注册',$value), ['field' => 'value']);
} elseif ($this->member_cache['register']['verify'] == 'phone' && \Phpcmf\Service::M()->db->table('member')->where('phone', $value)->countAllResults()) {
$this->_json(0, dr_lang('手机号码%s已经注册', $value), ['field' => 'value']);
}
$this->member['randcode'] = \Phpcmf\Service::L('Form')->get_rand_value();
\Phpcmf\Service::M()->db->table('member')->where('id', $this->uid)->update([
'randcode' => $this->member['randcode'],
$this->member_cache['register']['verify'] => $value
]);
switch ($this->member_cache['register']['verify']) {
case 'phone':
// 挂钩点 短信验证之前
\Phpcmf\Hooks::trigger('member_send_phone_before', $value);
\Phpcmf\Service::M('member')->sendsms_code($value, $this->member['randcode']);
break;
case 'email':
\Phpcmf\Service::M('member')->sendmail($value, dr_lang('注册邮件验证'), 'member_verify.html', $this->member);
break;
}
$this->_json(1, dr_lang('信息已经变更'));
}
\Phpcmf\Service::V()->assign([
'post_url' => dr_member_url('api/verify_code'),
'meta_title' => dr_lang('账号审核信息变更'),
'verify_name' => $this->member[$this->member_cache['register']['verify']],
'verify_type' => $this->member_cache['register']['verify'],
]);
\Phpcmf\Service::V()->display('change.html');
}
/**
* 邮件审核验证码
*/
public function email_verify_code() {
if (!$this->member) {
$this->_msg(0, dr_lang('账号未登录'));
} elseif ($this->member['is_verify']) {
$this->_msg(0, dr_lang('此用户已经通过审核了'));
} elseif ($this->member_cache['register']['verify'] != 'email') {
$this->_msg(0, dr_lang('审核方式不正确'));
}
// 验证操作间隔
$name = 'member-verify-email-'.$this->uid;
if (\Phpcmf\Service::L('cache')->check_auth_data($name, 300)) {
$this->_json(0, dr_lang('已经发送稍后再试'));
}
$this->member['randcode'] = \Phpcmf\Service::L('Form')->get_rand_value();
\Phpcmf\Service::M()->db->table('member')->where('id', $this->member['id'])->update(['randcode' => $this->member['randcode']]);
$rt = \Phpcmf\Service::M('member')->sendmail($this->member['email'], dr_lang('注册邮件验证'), 'member_verify.html', $this->member);
if (!$rt['code']) {
$this->_json(0, dr_lang('邮件发送失败'));
}
\Phpcmf\Service::L('cache')->set_auth_data($name, $this->member['randcode']);
$this->_json(1, dr_lang('验证码发送成功'));
}
/**
* 短信审核验证码
*/
public function phone_verify_code() {
if (!$this->member) {
$this->_json(0, dr_lang('账号未登录'));
} elseif ($this->member['is_verify']) {
$this->_msg(0, dr_lang('此用户已经通过审核了'));
} elseif ($this->member_cache['register']['verify'] != 'phone') {
$this->_msg(0, dr_lang('审核方式不正确'));
}
// 验证操作间隔
$name = 'member-verify-phone-'.$this->uid;
if (\Phpcmf\Service::L('cache')->check_auth_data($name, defined('SYS_CACHE_SMS') && SYS_CACHE_SMS ? SYS_CACHE_SMS : 60)) {
$this->_json(0, dr_lang('已经发送稍后再试'));
}
$this->member['randcode'] = \Phpcmf\Service::L('Form')->get_rand_value();
\Phpcmf\Service::M()->db->table('member')->where('id', $this->member['id'])->update(['randcode' => $this->member['randcode']]);
$rt = \Phpcmf\Service::M('member')->sendsms_code($this->member['phone'], $this->member['randcode']);
if (!$rt['code']) {
$this->_json(0, IS_DEV ? $rt['msg'] : dr_lang('发送失败'));
}
\Phpcmf\Service::L('cache')->set_auth_data($name, $this->member['randcode']);
$this->_json(1, dr_lang('验证码发送成功'));
}
/**
* 验证审核验证码
*/
public function verify_code() {
// 获取返回页面
$url = dr_safe_url($_GET['back'] ? urldecode((string)\Phpcmf\Service::L('input')->get('back')) : $_SERVER['HTTP_REFERER']);
strpos($url, 'login') !== false && $url = MEMBER_URL;
// 挂钩点 审核验证之前
\Phpcmf\Hooks::trigger('member_verify_before', $this->member);
if (!$this->member) {
$this->_json(0, dr_lang('账号未登录'));
} elseif ($this->member['is_verify']) {
$this->_json(1, dr_lang('已经验证成功'), ['url' => $url ? $url : MEMBER_URL]);
} elseif (!$this->member['randcode']) {
$this->_json(0, dr_lang('验证码已过期'));
} elseif (\Phpcmf\Service::L('input')->get('code') != $this->member['randcode']) {
$this->_json(0, dr_lang('验证码不正确'));
}
\Phpcmf\Service::M()->db->table('member')->where('id', $this->member['id'])->update(['randcode' => 0]);
\Phpcmf\Service::M('member')->verify_member($this->member['id']);
if ($this->member_cache['register']['verify'] == 'phone') {
\Phpcmf\Service::M()->db->table('member_data')->where('id', $this->member['uid'])->update(['is_mobile' => 1]);
} elseif ($this->member_cache['register']['verify'] == 'email') {
\Phpcmf\Service::M()->db->table('member_data')->where('id', $this->member['uid'])->update(['is_email' => 1]);
}
$this->_json(1, dr_lang('验证成功'), ['url' => $url ? $url : MEMBER_URL]);
}
/**
* 找回密码验证码
*/
public function find_code() {
$code = dr_safe_replace(\Phpcmf\Service::L('input')->get('code'));
$value = dr_safe_replace(\Phpcmf\Service::L('input')->get('value'));
if (!$value) {
$this->_json(0, dr_lang('账号凭证不能为空'), ['field' => 'value']);
} elseif (!$code) {
$this->_json(0, dr_lang('图片验证码未填写'), ['field' => 'code']);
} elseif (!\Phpcmf\Service::L('Form')->check_captcha_value($code)) {
$this->_json(0, dr_lang('图片验证码不正确'), ['field' => 'code']);
}
// 验证操作间隔
$name = 'member-find-password-'.$value;
if (\Phpcmf\Service::L('cache')->check_auth_data($name, defined('SYS_CACHE_SMS') && SYS_CACHE_SMS ? SYS_CACHE_SMS : 60)) {
$this->_json(0, dr_lang('已经发送稍后再试'));
}
if (strpos($value, '@') !== false) {
// 邮箱模式
$data = \Phpcmf\Service::M()->db->table('member')->where('email', $value)->get()->getRowArray();
if (!$data) {
$this->_json(0, dr_lang('账号凭证不存在'), ['field' => 'value']);
}
$data['randcode'] = $rand = \Phpcmf\Service::L('Form')->get_rand_value();
\Phpcmf\Service::M()->db->table('member')->where('id', $data['id'])->update(['randcode' => $rand]);
$rt = \Phpcmf\Service::M('member')->sendmail($value, dr_lang('找回密码'), 'member_find.html', $data);
if (!$rt['code']) {
$this->_json(0, dr_lang('邮件发送失败'));
}
} else {
// 手机
if (!\Phpcmf\Service::L('Form')->check_phone($value)) {
$this->_json(0, dr_lang('账号凭证格式不正确'), ['field' => 'value']);
}
// 挂钩点 短信验证之前
\Phpcmf\Hooks::trigger('member_send_phone_before', $value);
$data = \Phpcmf\Service::M()->db->table('member')->where('phone', $value)->get()->getRowArray();
if (!$data) {
$this->_json(0, dr_lang('账号凭证不存在'), ['field' => 'value']);
}
$rand = \Phpcmf\Service::L('Form')->get_rand_value();
\Phpcmf\Service::M()->db->table('member')->where('id', $data['id'])->update(['randcode' => $rand]);
$rt = \Phpcmf\Service::M('member')->sendsms_code($value, $rand);
if (!$rt['code']) {
$this->_json(0, IS_DEV ? $rt['msg'] : dr_lang('发送失败'));
}
}
\Phpcmf\Service::L('cache')->set_auth_data($name, $rand);
$this->_json(1, dr_lang('验证码发送成功'));
}
/////////////////发送短信验证码部分////////////////////
/**
* 注册验证码
*/
public function register_code() {
if (!defined('SYS_SMS_IMG_CODE') || SYS_SMS_IMG_CODE == 0) {
$code = dr_safe_replace(\Phpcmf\Service::L('input')->get('code'));
if (!$code) {
$this->_json(0, dr_lang('图片验证码未填写'), ['field' => 'code']);
} elseif (!\Phpcmf\Service::L('Form')->check_captcha_value($code)) {
$this->_json(0, dr_lang('图片验证码不正确'), ['field' => 'code']);
}
}
$value = trim(dr_safe_replace(\Phpcmf\Service::L('input')->get('id')));
if (!$value) {
$this->_json(0, dr_lang('信息未填写'));
}
if (strpos($value, '@') !== false) {
$email = $value;
$data = \Phpcmf\Service::M()->db->table('member')->where('email', $value)->get()->getRowArray();
if ($data) {
$this->_json(0, dr_lang('邮箱已经注册'), ['field' => 'email']);
}
$code = \Phpcmf\Service::L('Form')->get_rand_value();
$rt = \Phpcmf\Service::M('member')->sendmail($value, dr_lang('注册验证'), 'member_register_check.html', [
'code' => $code,
'randcode' => $code,
]);
if (!$rt['code']) {
$this->_json(0, dr_lang('邮件发送失败'));
}
\Phpcmf\Service::L('Form')->set_mobile_code($email, $code);
} else {
$phone = $value;
if (!\Phpcmf\Service::L('Form')->check_phone($phone)) {
$this->_json(0, dr_lang('手机号码格式不正确'), ['field' => 'phone']);
} elseif (\Phpcmf\Service::M()->db->table('member')->where('phone', $phone)->countAllResults()) {
$this->_json(0, dr_lang('手机号码已经注册'), ['field' => 'phone']);
} elseif (\Phpcmf\Service::L('Form')->get_mobile_code($phone)) {
$this->_json(0, dr_lang('已经发送稍后再试')); // 验证操作间隔
}
// 挂钩点 短信验证之前
\Phpcmf\Hooks::trigger('member_send_phone_before', $phone);
$code = \Phpcmf\Service::L('Form')->get_rand_value();
$rt = \Phpcmf\Service::M('member')->sendsms_code($phone, $code);
if (!$rt['code']) {
$this->_json(0, IS_DEV ? $rt['msg'] : dr_lang('发送失败'));
}
\Phpcmf\Service::L('Form')->set_mobile_code($phone, $code);
}
$this->_json(1, dr_lang('验证码发送成功'));
}
/**
* 登录验证码
*/
public function login_code() {
if (!defined('SYS_SMS_IMG_CODE') || SYS_SMS_IMG_CODE == 0) {
$code = dr_safe_replace(\Phpcmf\Service::L('input')->get('code'));
if (!$code) {
$this->_json(0, dr_lang('图片验证码未填写'), ['field' => 'code']);
} elseif (!\Phpcmf\Service::L('Form')->check_captcha_value($code)) {
$this->_json(0, dr_lang('图片验证码不正确'), ['field' => 'code']);
}
}
// 挂钩点 短信验证之前
\Phpcmf\Hooks::trigger('member_send_phone_before', $phone);
$phone = dr_safe_replace(\Phpcmf\Service::L('input')->get('id'));
if (!$phone) {
$this->_json(0, dr_lang('手机号码未填写'), ['field' => 'phone']);
} elseif (!\Phpcmf\Service::L('Form')->check_phone($phone)) {
$this->_json(0, dr_lang('手机号码格式不正确'), ['field' => 'phone']);
} elseif ($this->member_cache['login']['is_auto']
&& !\Phpcmf\Service::M()->db->table('member')->where('phone', $phone)->countAllResults()) {
$this->_json(0, dr_lang('手机号码未注册'), ['field' => 'phone']);
} elseif (\Phpcmf\Service::L('Form')->get_mobile_code($phone)) {
$this->_json(0, dr_lang('已经发送稍后再试'));// 验证操作间隔
}
$code = \Phpcmf\Service::L('Form')->get_rand_value();
$rt = \Phpcmf\Service::M('member')->sendsms_code($phone, $code);
if (!$rt['code']) {
$this->_json(0, IS_DEV ? $rt['msg'] : dr_lang('发送失败'));
}
\Phpcmf\Service::L('Form')->set_mobile_code($phone, $code);
$this->_json(1, dr_lang('验证码发送成功'));
}
/**
* 发送验证码
*/
public function send_code() {
$phone = dr_safe_replace(\Phpcmf\Service::L('input')->get('id'));
if (!$phone) {
$this->_json(0, dr_lang('手机号码未填写'), ['field' => 'phone']);
} elseif (!\Phpcmf\Service::L('Form')->check_phone($phone)) {
$this->_json(0, dr_lang('手机号码格式不正确'), ['field' => 'phone']);
}
// 挂钩点 短信验证之前
\Phpcmf\Hooks::trigger('send_phone_before', $phone);
if (!defined('SYS_SMS_IMG_CODE') || SYS_SMS_IMG_CODE == 0) {
$code = dr_safe_replace(\Phpcmf\Service::L('input')->get('code'));
if (!$code) {
$this->_json(0, dr_lang('图片验证码未填写'), ['field' => 'code']);
} elseif (!\Phpcmf\Service::L('Form')->check_captcha_value($code)) {
$this->_json(0, dr_lang('图片验证码不正确'), ['field' => 'code']);
}
}
// 验证操作间隔
if (\Phpcmf\Service::L('Form')->get_mobile_code($phone)) {
$this->_json(1, dr_lang('已经发送稍后再试'));
}
$code = \Phpcmf\Service::L('Form')->get_rand_value();
$rt = \Phpcmf\Service::M('member')->sendsms_code($phone, $code);
if (!$rt['code']) {
$this->_json(0, IS_DEV ? $rt['msg'] : dr_lang('发送失败'));
}
\Phpcmf\Service::L('Form')->set_mobile_code($phone, $code);
$this->_json(1, dr_lang('验证码发送成功'));
}
/**
* 注册协议
*/
public function protocol() {
\Phpcmf\Service::V()->display('protocol.html');
}
/**
* 登录状态
*/
public function status() {
if ($this->member) {
$this->_json(1, 'ok', $this->member);
} else {
$this->_json(0, dr_lang('没有登录'));
}
}
}