Base.php 19 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583
  1. <?php
  2. namespace Passport\Lib;
  3. use Dever;
  4. use Upload\Src\Lib\Img;
  5. use Dever\Routing\Uri;
  6. use Dever\Session\Oper as Save;
  7. use Dever\String\Encrypt;
  8. class Base
  9. {
  10. const NAME = 'passportv1';
  11. const CODE = 'code';
  12. const MCODE = 'mcode';
  13. protected $save;
  14. public function __construct()
  15. {
  16. $this->save = new Save(false, 'cookie');
  17. }
  18. public function wechat($data, $user = array(), $account, $system, $source_type, $source = false)
  19. {
  20. $uid = false;
  21. if (!$data['openid']) {
  22. Dever::alert('错误的openid');
  23. }
  24. if (!isset($user['username'])) {
  25. Dever::alert('用户名错误');
  26. }
  27. if (isset($user['sex'])) {
  28. if ($user['sex'] == 1) {
  29. $user['sex'] = 1;
  30. } elseif ($user['sex'] == 2) {
  31. $user['sex'] = 2;
  32. } else {
  33. $user['sex'] = 3;
  34. }
  35. }
  36. if (isset($user['country']) && $user['country'] && isset($user['province']) && $user['province'] && isset($user['city']) && $user['city']) {
  37. $user['area'] = $user['country'] .','. $user['province'] .','. $user['city'];
  38. }
  39. $info = Dever::load('passport/wechat-one', array('option_openid' => $data['openid']));
  40. if (!$info) {
  41. if (isset($data['unionid']) && $data['unionid']) {
  42. $info = Dever::load('passport/wechat-one', array('unionid' => $data['unionid']));
  43. if (!$info) {
  44. $uid = false;
  45. } else {
  46. $uid = $info['uid'];
  47. }
  48. $wechat['unionid'] = $data['unionid'];
  49. }
  50. if (!$uid) {
  51. $user['source_type'] = 'service';
  52. if ($system) {
  53. $user['system_id'] = $system;
  54. }
  55. if ($source_type) {
  56. $user['source_type'] = $source_type;
  57. }
  58. $uid = Dever::load('passport/user-insert', $user);
  59. } else {
  60. $user['where_id'] = $uid;
  61. Dever::load('passport/user-update', $user);
  62. }
  63. $wechat['access_token'] = $data['access_token'];
  64. $wechat['openid'] = $data['openid'];
  65. $wechat['expires_in'] = $data['expires_in'];
  66. $wechat['refresh_token'] = $data['refresh_token'];
  67. $wechat['account_id'] = $account;
  68. if ($system) {
  69. $wechat['system_id'] = $system;
  70. }
  71. $wechat['uid'] = $uid;
  72. $wechat['type'] = 2;
  73. if ($source_type == 'applet') {
  74. $wechat['type'] = 1;
  75. } elseif ($source_type == 'ios') {
  76. $wechat['type'] = 3;
  77. } elseif ($source_type == 'android') {
  78. $wechat['type'] = 4;
  79. }
  80. $id = Dever::load('passport/wechat-insert', $wechat);
  81. if (Dever::project('source') && isset($source) && $source && $source > 0) {
  82. Dever::load('source/lib/core')->saveUser($id, $uid, $source, 'oauth', $account);
  83. }
  84. } else {
  85. $uid = $info['uid'];
  86. if (isset($data['unionid']) && $data['unionid']) {
  87. $wechat['unionid'] = $data['unionid'];
  88. # 判断用户是否存在,是否需要合并
  89. $wechat['uid'] = $this->combine($uid, $data['unionid']);
  90. }
  91. $wechat['access_token'] = $data['access_token'];
  92. $wechat['openid'] = $data['openid'];
  93. $wechat['expires_in'] = $data['expires_in'];
  94. $wechat['refresh_token'] = $data['refresh_token'];
  95. $wechat['where_id'] = $info['id'];
  96. $wechat['account_id'] = $account;
  97. if ($system) {
  98. $wechat['system_id'] = $system;
  99. }
  100. $id = $info['id'];
  101. Dever::load('passport/wechat-update', $wechat);
  102. $user['where_id'] = $uid;
  103. //Dever::load('passport/user-update', $user);
  104. }
  105. $this->createUsername($uid, $user['username']);
  106. $user = Dever::load('passport/user-one', $uid);
  107. $this->save($user);
  108. $user['uid'] = $user['id'];
  109. $user['signature'] = Dever::login($user['id']);
  110. return $user;
  111. }
  112. /**
  113. * 更新用户信息 绑定用户手机号
  114. *
  115. * @return mixed
  116. */
  117. public function bind_mobile()
  118. {
  119. $uid = $this->check();
  120. //$code = Dever::input('mcode');
  121. $mobile = Dever::load('passport/reg')->checkMobileExists();
  122. //$mobile = Dever::input('mobile');
  123. if ($mobile && $uid) {
  124. $info = Dever::load('passport/user-one', array('mobile' => $mobile));
  125. if ($info && $info['bind'] == 1) {
  126. Dever::alert('该手机号已绑定');
  127. }
  128. $uid = $this->combine($uid, $mobile, 'mobile');
  129. $info = Dever::load('passport/user-one', $uid);
  130. $result['mobile'] = $mobile;
  131. if ($info) {
  132. $update['set_mobile'] = $mobile;
  133. $update['set_bind'] = 1;
  134. $update['where_id'] = $uid;
  135. Dever::load('passport/user-update', $update);
  136. $state = Dever::config('base', 'project')->regSendSms;
  137. if ($state) {
  138. Dever::setInput('skin', $state);
  139. $this->send($mobile, $uid);
  140. }
  141. } else {
  142. Dever::alert('无效的用户id,请重新登录');
  143. }
  144. }
  145. if (!$info['mobile']) {
  146. Dever::score($uid, 'bind_mobile', '绑定手机号');
  147. }
  148. $result['uid'] = $uid;
  149. $result['signature'] = Dever::login($uid);
  150. return $result;
  151. }
  152. public function createUsername($uid, $username, $update = false)
  153. {
  154. if (!$username || $username == '临时用户') {
  155. $username = $uid + 100000;
  156. $username = 'JM' . $username;
  157. if ($update) {
  158. Dever::db('passport/user')->update(array('where_id' => $uid, 'username' => $username));
  159. }
  160. }
  161. return $username;
  162. }
  163. # 合并用户
  164. public function combine($uid, $unionid, $col = 'unionid')
  165. {
  166. $cur = $uid;
  167. if ($col == 'mobile' || $col == 'id') {
  168. $user_wechat = Dever::load('passport/user-all', array($col => $unionid));
  169. } else {
  170. $user_wechat = Dever::load('passport/wechat-state', array($col => $unionid));
  171. }
  172. if ($user_wechat) {
  173. # 合并去
  174. $drop = array();
  175. $total = count($user_wechat);
  176. if ($total <= 1) {
  177. return $cur;
  178. }
  179. $new = false;
  180. foreach ($user_wechat as $k => $v) {
  181. if (!isset($v['uid'])) {
  182. $v['uid'] = $v['id'];
  183. $user = $v;
  184. } else {
  185. $user = Dever::db('passport/user')->one($v['uid']);
  186. }
  187. if (!$new) {
  188. if ($user['bind'] == 1 && !strstr($user['username'], '****')) {
  189. $new = $v['uid'];
  190. } elseif ($user['temp'] == 2 && $user['source_type'] == 'applet') {
  191. $new = $v['uid'];
  192. } elseif ($user['avatar']) {
  193. $new = $v['uid'];
  194. } elseif ($user['mobile']) {
  195. $new = $v['uid'];
  196. } elseif ($user['temp'] == 2) {
  197. $new = $v['uid'];
  198. } elseif ($v['uid'] < $cur) {
  199. $cur = $new = $v['uid'];
  200. } else {
  201. $drop[$v['uid']] = $v['uid'];
  202. }
  203. } else {
  204. $drop[$v['uid']] = $v['uid'];
  205. }
  206. }
  207. $cur = $new;
  208. if (Dever::input('test') == 1) {
  209. print_r($cur);
  210. print_r($drop);die;
  211. }
  212. $new = Dever::db('passport/user')->one($cur);
  213. if ($drop) {
  214. foreach ($drop as $k => $v) {
  215. if ($cur == $v) {
  216. unset($drop[$k]);
  217. continue;
  218. }
  219. $old = Dever::db('passport/user')->one($v);
  220. $update = array();
  221. if ($new['temp'] == 1) {
  222. $update['username'] = $old['username'];
  223. }
  224. if (strstr($new['username'], '****')) {
  225. $update['username'] = $old['username'];
  226. }
  227. if (!$new['avatar']) {
  228. $update['avatar'] = $old['avatar'];
  229. }
  230. if (!$new['mobile']) {
  231. $update['mobile'] = $old['mobile'];
  232. }
  233. if (!$new['area']) {
  234. $update['area'] = $old['area'];
  235. }
  236. if (isset($update) && $update) {
  237. $update['where_id'] = $cur;
  238. Dever::load('passport/user-update', $update);
  239. }
  240. }
  241. ksort($drop);
  242. $combine = array();
  243. $combine['status'] = 1;
  244. $combine['new_uid'] = $cur;
  245. $combine['old_uid'] = implode(',', $drop);
  246. $info = Dever::db('passport/combine')->one($combine);
  247. if (!$info) {
  248. Dever::db('passport/combine')->insert($combine);
  249. }
  250. Dever::load('passport/user-updates', array('set_state' => 2, 'where_id' => $combine['old_uid']));
  251. }
  252. }
  253. return $cur;
  254. }
  255. /**
  256. * 检测用户有效性
  257. *
  258. * @return mixed
  259. */
  260. public function check($state = true)
  261. {
  262. $signature = Dever::input('signature');
  263. $user = Dever::checkLogin($signature, $state);
  264. if ($state && !isset($user['uid'])) {
  265. Dever::alert('user error');
  266. }
  267. if (isset($user['uid']) && $user['uid']) {
  268. return $user['uid'];
  269. }
  270. return -1;
  271. }
  272. public function getToken($request = array())
  273. {
  274. return http_build_query(Dever::token($request));
  275. }
  276. public function getUrl($method, $request = array())
  277. {
  278. return Dever::proxy($method, $this->getToken($request));
  279. }
  280. protected function info()
  281. {
  282. $data = $this->save->get(self::NAME);
  283. return $data;
  284. }
  285. protected function code($code = false)
  286. {
  287. if ($code) {
  288. $save = $this->save->get(self::CODE);
  289. return $code == $save;
  290. }
  291. $code = new Code();
  292. $code->create();
  293. $this->save->add(self::CODE, $code->code, 600);
  294. }
  295. protected function mcode($mobile, $code = false)
  296. {
  297. if ($code) {
  298. $save = $this->save->get(self::MCODE);
  299. return $mobile . '_' . $code == $save;
  300. }
  301. $day = date('Ymd', time());
  302. # 检测当前手机号最新一次发送时间,不允许一分钟之内发送
  303. $param['option_day'] = $day;
  304. $param['option_mobile'] = $mobile;
  305. # 检测当前手机号今天已经发送多少验证码了
  306. $info = Dever::load('passport/code-total', $param);
  307. if ($info >= 1) {
  308. $check = Dever::load('passport/code-one', $param);
  309. if ($check) {
  310. if (time() - $check['cdate'] < Dever::config('base', 'project')->mobileCode['time']) {
  311. Dever::alert('请不要在一分钟之内申请多次验证码,请您稍后再试');
  312. }
  313. }
  314. }
  315. $total = Dever::config('base', 'project')->mobileCode['total'];
  316. if ($info >= $total) {
  317. Dever::alert('很抱歉,您已经申请获取验证码超过' . $total . '次,今天您已经无法获取验证码了,请您明天再来');
  318. }
  319. $code = new Code();
  320. $code->createM();
  321. # 记录当前的验证码
  322. $insert['add_mobile'] = $mobile;
  323. $insert['add_day'] = $day;
  324. $insert['add_code'] = $code->mcode;
  325. $id = Dever::load('passport/code-insert', $insert);
  326. # 启动发送
  327. $this->send($mobile, $insert['add_code'], $id);
  328. $this->save->add(self::MCODE, $mobile . '_' . $code->mcode, Dever::config('base', 'project')->mobileCode['timeout']);
  329. return $code->mcode;
  330. }
  331. public function send($mobile, $code, $id = false)
  332. {
  333. if (Dever::project('sms')) {
  334. $send['skin'] = 'code';
  335. $send['mobile'] = $mobile;
  336. $send['param'] = array
  337. (
  338. 'code' => $code
  339. );
  340. $send['param'] = Dever::json_encode($send['param']);
  341. return Dever::load('sms/api.send', $send);
  342. }
  343. $url = Dever::config('base', 'project')->mobileCode['url'];
  344. if (!$url) {
  345. return;
  346. }
  347. $content = Dever::config('base', 'project')->mobileCode['body'];
  348. $content = $this->replace($content, $mobile, $code);
  349. parse_str($content, $param);
  350. $type = Dever::config('base', 'project')->mobileCode['method'];
  351. $json = Dever::config('base', 'project')->mobileCode['json'];
  352. $header = Dever::config('base', 'project')->mobileCode['header'];
  353. return Dever::curl($url, $param, $type, $json, $header);
  354. }
  355. private function replace($content, $mobile = '', $code = '')
  356. {
  357. $skin = Dever::config('base', 'project')->mobileCode['skin'];
  358. $skin_key = Dever::input('skin', 'code');
  359. if (isset($skin[$skin_key])) {
  360. $skin = $skin[$skin_key];
  361. } else {
  362. $skin = array_shift($skin);
  363. }
  364. $config = array('{code}', '{mobile}', '{sign}', '{skin}', '{param}');
  365. $replace = array($code, $mobile, Dever::config('base', 'project')->mobileCode['sign'], $skin);
  366. return str_replace($config, $replace, $content);
  367. }
  368. protected function refer($state = false)
  369. {
  370. $refer = Dever::input('refer');
  371. $project = 'main';
  372. if ($refer) {
  373. $refer = Encrypt::decode($refer);
  374. /*
  375. $url = parse_url(Encrypt::decode($refer));
  376. $url['path'] = preg_replace('/^\//', '', $url['path']);
  377. if (!isset($url['query'])) {
  378. $url['query'] = '';
  379. }
  380. if (Uri::$type == '?') {
  381. $refer = Dever::url(str_replace($url['path'] . Uri::$type, '', $url['query']), $project);
  382. } else {
  383. $refer = Dever::url($url['path'] . '?' . $url['query'], $project);
  384. }
  385. */
  386. } else {
  387. $refer = Dever::url('home', $project);
  388. }
  389. $param = Dever::input('param');
  390. if ($param) {
  391. $refer .= '&' . $param;
  392. }
  393. if ($state) {
  394. return $refer;
  395. }
  396. Dever::out($refer);
  397. }
  398. protected function save($user)
  399. {
  400. if (is_numeric($user)) {
  401. $user = Dever::load('passport/user-one', $user);
  402. }
  403. if ($user && is_array($user)) {
  404. if (Dever::mobile()) {
  405. $time = 30;
  406. } else {
  407. $time = 7;
  408. }
  409. $this->save->add(self::NAME, $user, 3600 * 24 * $time);
  410. $user['signature'] = Dever::login($user['id']);
  411. if (Dever::config('base', 'project')->regAction) {
  412. Dever::load(Dever::config('base', 'project')->regAction, $user);
  413. }
  414. return $user;
  415. }
  416. }
  417. public function createRefer()
  418. {
  419. return 'refer=' . Encrypt::encode(Dever::url(false, 'main'));
  420. }
  421. protected function saveSex($sex)
  422. {
  423. if ($sex || $sex == 0) {
  424. $config_sex = Dever::config('base', 'project')->sex;
  425. if (isset($config_sex[$sex])) {
  426. $sex = $config_sex[$sex];
  427. } else {
  428. if ($sex == '男') {
  429. $sex = 1;
  430. } elseif ($sex == '女') {
  431. $sex = 2;
  432. } elseif ($sex == '未知') {
  433. $sex = 3;
  434. }
  435. }
  436. }
  437. return $sex;
  438. }
  439. protected function saveAvatar($value)
  440. {
  441. if (!$value) {
  442. return '';
  443. }
  444. $value = Dever::pic($value);
  445. $base = Dever::data();
  446. $date = explode('-', date("Y-m-d"));
  447. if (is_array($value)) {
  448. $user = $value[1];
  449. $value = $value[0];
  450. if (is_array($value)) {
  451. $name = md5($value['tmp_name'] . rand(0, 100) . microtime());
  452. $path = 'avatar/' . $date[0] . '/' . $date[1] . '/' . $date[2] . '/';
  453. $ext = '.jpg';
  454. $temp = Dever::path($base, $path . $name . $ext);
  455. move_uploaded_file($value['tmp_name'], $temp);
  456. $value = $temp;
  457. }
  458. }
  459. //$result = Dever::$global['host']['img'] . 'chead.jpg';
  460. if ($value) {
  461. # 裁图
  462. $handle = new Img();
  463. $size = '200_200_2';
  464. $user = isset($user) && $user ? $user : $this->init();
  465. if ($user && isset($user['id']) && $user['id']) {
  466. $name = md5($user['id']);
  467. } else {
  468. $name = md5($value . rand(0, 100) . microtime());
  469. }
  470. $path = 'avatar/' . $date[0] . '/' . $date[1] . '/' . $date[2] . '/';
  471. $ext = '.jpg';
  472. $file = Dever::path($base, $path . $name . $ext);
  473. $temp = $file . '.temp.jpg';
  474. //$value = Dever::curl($value);
  475. //file_put_contents($temp, file_get_contents($value));
  476. $file = $handle->thumb($value, $size, true, $file);
  477. if ($file) {
  478. $result = str_replace('/upload/', '/', Dever::config('host')->uploadRes . $path . $name . $ext);
  479. } else {
  480. $result = $value;
  481. }
  482. }
  483. return $result;
  484. }
  485. }