Base.php 19 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573
  1. <?php
  2. namespace Passport\Lib;
  3. use Dever;
  4. use Upload\Src\Lib\Img;
  5. use Dever\Routing\Uri;
  6. use Dever\Session\Oper as Save;
  7. use Dever\String\Encrypt;
  8. class Base
  9. {
  10. const NAME = 'dever_passport_v2';
  11. const CODE = 'dever_code';
  12. const MCODE = 'dever_mcode';
  13. protected $save;
  14. public function __construct()
  15. {
  16. $this->save = new Save(false, 'cookie');
  17. }
  18. public function wechat($data, $user = array(), $account, $system, $source_type, $source = false)
  19. {
  20. $uid = false;
  21. if (!$data['openid']) {
  22. Dever::alert('错误的openid');
  23. }
  24. if (!isset($user['username'])) {
  25. Dever::alert('用户名错误');
  26. }
  27. if (isset($user['sex'])) {
  28. if ($user['sex'] == 1) {
  29. $user['sex'] = 1;
  30. } elseif ($user['sex'] == 2) {
  31. $user['sex'] = 2;
  32. } else {
  33. $user['sex'] = 3;
  34. }
  35. }
  36. if (isset($user['country']) && $user['country'] && isset($user['province']) && $user['province'] && isset($user['city']) && $user['city']) {
  37. $user['area'] = $user['country'] .','. $user['province'] .','. $user['city'];
  38. }
  39. $info = Dever::load('passport/wechat-one', array('option_openid' => $data['openid']));
  40. if (!$info) {
  41. if (isset($data['unionid']) && $data['unionid']) {
  42. $info = Dever::load('passport/wechat-one', array('unionid' => $data['unionid']));
  43. if (!$info) {
  44. $uid = false;
  45. } else {
  46. $uid = $info['uid'];
  47. }
  48. $wechat['unionid'] = $data['unionid'];
  49. }
  50. if (!$uid) {
  51. $user['source_type'] = 'service';
  52. if ($system) {
  53. $user['system_id'] = $system;
  54. }
  55. if ($source_type) {
  56. $user['source_type'] = $source_type;
  57. }
  58. $uid = Dever::load('passport/user-insert', $user);
  59. } else {
  60. $user['where_id'] = $uid;
  61. Dever::load('passport/user-update', $user);
  62. }
  63. $wechat['access_token'] = $data['access_token'];
  64. $wechat['openid'] = $data['openid'];
  65. $wechat['expires_in'] = $data['expires_in'];
  66. $wechat['refresh_token'] = $data['refresh_token'];
  67. $wechat['account_id'] = $account;
  68. if ($system) {
  69. $wechat['system_id'] = $system;
  70. }
  71. $wechat['uid'] = $uid;
  72. $wechat['type'] = 2;
  73. if ($source_type == 'applet') {
  74. $wechat['type'] = 1;
  75. } elseif ($source_type == 'ios') {
  76. $wechat['type'] = 3;
  77. } elseif ($source_type == 'android') {
  78. $wechat['type'] = 4;
  79. }
  80. $id = Dever::load('passport/wechat-insert', $wechat);
  81. if (Dever::project('source') && isset($source) && $source && $source > 0) {
  82. Dever::load('source/lib/core')->saveUser($id, $uid, $source, 'oauth', $account);
  83. }
  84. } else {
  85. $uid = $info['uid'];
  86. if (isset($data['unionid']) && $data['unionid']) {
  87. $wechat['unionid'] = $data['unionid'];
  88. # 判断用户是否存在,是否需要合并
  89. $wechat['uid'] = $this->combine($uid, $data['unionid']);
  90. }
  91. $wechat['access_token'] = $data['access_token'];
  92. $wechat['openid'] = $data['openid'];
  93. $wechat['expires_in'] = $data['expires_in'];
  94. $wechat['refresh_token'] = $data['refresh_token'];
  95. $wechat['where_id'] = $info['id'];
  96. $wechat['account_id'] = $account;
  97. if ($system) {
  98. $wechat['system_id'] = $system;
  99. }
  100. $id = $info['id'];
  101. Dever::load('passport/wechat-update', $wechat);
  102. $user['where_id'] = $uid;
  103. Dever::load('passport/user-update', $user);
  104. }
  105. $this->createUsername($uid, $user['username']);
  106. $user = Dever::load('passport/user-one', $uid);
  107. $this->save($user);
  108. $user['uid'] = $user['id'];
  109. $user['signature'] = Dever::login($user['id']);
  110. return $user;
  111. }
  112. /**
  113. * 更新用户信息 绑定用户手机号
  114. *
  115. * @return mixed
  116. */
  117. public function bind_mobile()
  118. {
  119. $uid = $this->check();
  120. //$code = Dever::input('mcode');
  121. $mobile = Dever::load('passport/reg')->checkMobileExists();
  122. //$mobile = Dever::input('mobile');
  123. if ($mobile && $uid) {
  124. $info = Dever::load('passport/user-one', array('mobile' => $mobile));
  125. if ($info && $info['bind'] == 1) {
  126. Dever::alert('该手机号已绑定');
  127. }
  128. $uid = $this->combine($uid, $mobile, 'mobile');
  129. $info = Dever::load('passport/user-one', $uid);
  130. $result['mobile'] = $mobile;
  131. if ($info) {
  132. $update['set_mobile'] = $mobile;
  133. $update['set_bind'] = 1;
  134. $update['where_id'] = $uid;
  135. Dever::load('passport/user-update', $update);
  136. $state = Dever::config('base', 'project')->regSendSms;
  137. if ($state) {
  138. Dever::setInput('skin', $state);
  139. $this->send($mobile, $uid);
  140. }
  141. } else {
  142. Dever::alert('无效的用户id,请重新登录');
  143. }
  144. }
  145. if (!$info['mobile']) {
  146. Dever::score($uid, 'bind_mobile', '绑定手机号');
  147. }
  148. $result['uid'] = $uid;
  149. $result['signature'] = Dever::login($uid);
  150. return $result;
  151. }
  152. public function createUsername($uid, $username, $update = false)
  153. {
  154. if (!$username || $username == '临时用户') {
  155. $username = $uid + 100000;
  156. $username = 'JM' . $username;
  157. if ($update) {
  158. Dever::db('passport/user')->update(array('where_id' => $uid, 'username' => $username));
  159. }
  160. }
  161. return $username;
  162. }
  163. # 合并用户
  164. public function combine($uid, $unionid, $col = 'unionid')
  165. {
  166. $cur = $uid;
  167. if ($col == 'mobile' || $col == 'id') {
  168. $user_wechat = Dever::load('passport/user-all', array($col => $unionid));
  169. } else {
  170. $user_wechat = Dever::load('passport/wechat-state', array($col => $unionid));
  171. }
  172. if ($user_wechat) {
  173. # 合并去
  174. $drop = array();
  175. foreach ($user_wechat as $k => $v) {
  176. if (!isset($v['uid'])) {
  177. $v['uid'] = $v['id'];
  178. }
  179. $user = Dever::db('passport/user')->one($v['uid']);
  180. if (isset($user['bind']) && $user['bind'] == 1 && $cur != $v['uid']) {
  181. $drop[$cur] = $cur;
  182. $cur = $v['uid'];
  183. } elseif (isset($user['temp']) && $user['temp'] == 2 && $cur != $v['uid']) {
  184. $drop[$cur] = $cur;
  185. $cur = $v['uid'];
  186. } elseif (isset($user['avatar']) && $user['avatar'] && $cur != $v['uid']) {
  187. $drop[$cur] = $cur;
  188. $cur = $v['uid'];
  189. } else {
  190. if ($v['uid'] < $cur) {
  191. $drop[$cur] = $cur;
  192. $cur = $v['uid'];
  193. } elseif ($v['uid'] > $cur) {
  194. $drop[$v['uid']] = $v['uid'];
  195. }
  196. }
  197. }
  198. $test = Dever::input('test');
  199. if ($test == 1) {
  200. print_r($cur);
  201. print_r($drop);die;
  202. }
  203. if ($drop) {
  204. foreach ($drop as $k => $v) {
  205. if ($cur == $v) {
  206. unset($drop[$k]);
  207. continue;
  208. }
  209. $insert['new_uid'] = $cur;
  210. $insert['old_uid'] = $v;
  211. $info = Dever::db('passport/combine')->one($insert);
  212. if (!$info) {
  213. Dever::db('passport/combine')->insert($insert);
  214. }
  215. Dever::load('passport/user-update', array('set_state' => 2, 'where_id' => $v));
  216. Dever::load('passport/user-update', array('set_state' => 1, 'where_id' => $cur));
  217. $new = Dever::db('passport/user')->one($cur);
  218. $old = Dever::db('passport/user')->one($v);
  219. $update = array();
  220. if ($new['temp'] == 1) {
  221. $update['username'] = $old['username'];
  222. }
  223. if (strstr($new['username'], '****')) {
  224. $update['username'] = $old['username'];
  225. }
  226. if (!$new['avatar']) {
  227. $update['avatar'] = $old['avatar'];
  228. }
  229. if (!$new['area']) {
  230. $update['area'] = $old['area'];
  231. }
  232. if (isset($update) && $update) {
  233. $update['where_id'] = $cur;
  234. Dever::load('passport/user-update', $update);
  235. }
  236. }
  237. $combine = Dever::project('combine');
  238. if ($combine && $drop) {
  239. $drop = implode(',', $drop);
  240. Dever::load('combine/lib/core.handle?uid=' . $cur . '&drop=' . $drop);
  241. //Dever::daemon('lib/core.handle?uid=' . $cur . '&drop=' . $drop, 'combine');
  242. }
  243. }
  244. }
  245. return $cur;
  246. }
  247. /**
  248. * 检测用户有效性
  249. *
  250. * @return mixed
  251. */
  252. public function check($state = true)
  253. {
  254. $signature = Dever::input('signature');
  255. $user = Dever::loginResult($signature, $state);
  256. if ($state && !isset($user['uid'])) {
  257. Dever::alert('user error');
  258. }
  259. if (isset($user['uid']) && $user['uid']) {
  260. return $user['uid'];
  261. }
  262. return -1;
  263. }
  264. public function getToken($request = array())
  265. {
  266. return http_build_query(Dever::token($request));
  267. }
  268. public function getUrl($method, $request = array())
  269. {
  270. return Dever::proxy($method, $this->getToken($request));
  271. }
  272. protected function info()
  273. {
  274. $data = $this->save->get(self::NAME);
  275. return $data;
  276. }
  277. protected function code($code = false)
  278. {
  279. if ($code) {
  280. $save = $this->save->get(self::CODE);
  281. return $code == $save;
  282. }
  283. $code = new Code();
  284. $code->create();
  285. $this->save->add(self::CODE, $code->code, 600);
  286. }
  287. protected function mcode($mobile, $code = false)
  288. {
  289. if ($code) {
  290. $save = $this->save->get(self::MCODE);
  291. return $mobile . '_' . $code == $save;
  292. }
  293. $day = date('Ymd', time());
  294. # 检测当前手机号最新一次发送时间,不允许一分钟之内发送
  295. $param['option_day'] = $day;
  296. $param['option_mobile'] = $mobile;
  297. # 检测当前手机号今天已经发送多少验证码了
  298. $info = Dever::load('passport/code-total', $param);
  299. if ($info >= 1) {
  300. $check = Dever::load('passport/code-one', $param);
  301. if ($check) {
  302. if (time() - $check['cdate'] < Dever::config('base', 'project')->mobileCode['time']) {
  303. Dever::alert('请不要在一分钟之内申请多次验证码,请您稍后再试');
  304. }
  305. }
  306. }
  307. $total = Dever::config('base', 'project')->mobileCode['total'];
  308. if ($info >= $total) {
  309. Dever::alert('很抱歉,您已经申请获取验证码超过' . $total . '次,今天您已经无法获取验证码了,请您明天再来');
  310. }
  311. $code = new Code();
  312. $code->createM();
  313. # 记录当前的验证码
  314. $insert['add_mobile'] = $mobile;
  315. $insert['add_day'] = $day;
  316. $insert['add_code'] = $code->mcode;
  317. $id = Dever::load('passport/code-insert', $insert);
  318. # 启动发送
  319. $this->send($mobile, $insert['add_code'], $id);
  320. $this->save->add(self::MCODE, $mobile . '_' . $code->mcode, Dever::config('base', 'project')->mobileCode['timeout']);
  321. return $code->mcode;
  322. }
  323. public function send($mobile, $code, $id = false)
  324. {
  325. if (Dever::project('sms')) {
  326. $send['skin'] = 'code';
  327. $send['mobile'] = $mobile;
  328. $send['param'] = array
  329. (
  330. 'code' => $code
  331. );
  332. $send['param'] = Dever::json_encode($send['param']);
  333. return Dever::load('sms/api.send', $send);
  334. }
  335. $url = Dever::config('base', 'project')->mobileCode['url'];
  336. if (!$url) {
  337. return;
  338. }
  339. $content = Dever::config('base', 'project')->mobileCode['body'];
  340. $content = $this->replace($content, $mobile, $code);
  341. parse_str($content, $param);
  342. $type = Dever::config('base', 'project')->mobileCode['method'];
  343. $json = Dever::config('base', 'project')->mobileCode['json'];
  344. $header = Dever::config('base', 'project')->mobileCode['header'];
  345. return Dever::curl($url, $param, $type, $json, $header);
  346. }
  347. private function replace($content, $mobile = '', $code = '')
  348. {
  349. $skin = Dever::config('base', 'project')->mobileCode['skin'];
  350. $skin_key = Dever::input('skin', 'code');
  351. if (isset($skin[$skin_key])) {
  352. $skin = $skin[$skin_key];
  353. } else {
  354. $skin = array_shift($skin);
  355. }
  356. $config = array('{code}', '{mobile}', '{sign}', '{skin}', '{param}');
  357. $replace = array($code, $mobile, Dever::config('base', 'project')->mobileCode['sign'], $skin);
  358. return str_replace($config, $replace, $content);
  359. }
  360. protected function refer($state = false)
  361. {
  362. $refer = Dever::input('refer');
  363. $project = 'main';
  364. if ($refer) {
  365. $refer = Encrypt::decode($refer);
  366. /*
  367. $url = parse_url(Encrypt::decode($refer));
  368. $url['path'] = preg_replace('/^\//', '', $url['path']);
  369. if (!isset($url['query'])) {
  370. $url['query'] = '';
  371. }
  372. if (Uri::$type == '?') {
  373. $refer = Dever::url(str_replace($url['path'] . Uri::$type, '', $url['query']), $project);
  374. } else {
  375. $refer = Dever::url($url['path'] . '?' . $url['query'], $project);
  376. }
  377. */
  378. } else {
  379. $refer = Dever::url('home', $project);
  380. }
  381. $param = Dever::input('param');
  382. if ($param) {
  383. $refer .= '&' . $param;
  384. }
  385. if ($state) {
  386. return $refer;
  387. }
  388. Dever::out($refer);
  389. }
  390. protected function save($user)
  391. {
  392. if (is_numeric($user)) {
  393. $user = Dever::load('passport/user-one', $user);
  394. }
  395. if ($user && is_array($user)) {
  396. if (Dever::mobile()) {
  397. $time = 30;
  398. } else {
  399. $time = 7;
  400. }
  401. $this->save->add(self::NAME, $user, 3600 * 24 * $time);
  402. $user['signature'] = Dever::login($user['id']);
  403. if (Dever::config('base', 'project')->regAction) {
  404. Dever::load(Dever::config('base', 'project')->regAction, $user);
  405. }
  406. return $user;
  407. }
  408. }
  409. public function createRefer()
  410. {
  411. return 'refer=' . Encrypt::encode(Dever::url(false, 'main'));
  412. }
  413. protected function saveSex($sex)
  414. {
  415. if ($sex || $sex == 0) {
  416. $config_sex = Dever::config('base', 'project')->sex;
  417. if (isset($config_sex[$sex])) {
  418. $sex = $config_sex[$sex];
  419. } else {
  420. if ($sex == '男') {
  421. $sex = 1;
  422. } elseif ($sex == '女') {
  423. $sex = 2;
  424. } elseif ($sex == '未知') {
  425. $sex = 3;
  426. }
  427. }
  428. }
  429. return $sex;
  430. }
  431. protected function saveAvatar($value)
  432. {
  433. if (!$value) {
  434. return '';
  435. }
  436. $value = Dever::pic($value);
  437. $base = Dever::data();
  438. $date = explode('-', date("Y-m-d"));
  439. if (is_array($value)) {
  440. $user = $value[1];
  441. $value = $value[0];
  442. if (is_array($value)) {
  443. $name = md5($value['tmp_name'] . rand(0, 100) . microtime());
  444. $path = 'avatar/' . $date[0] . '/' . $date[1] . '/' . $date[2] . '/';
  445. $ext = '.jpg';
  446. $temp = Dever::path($base, $path . $name . $ext);
  447. move_uploaded_file($value['tmp_name'], $temp);
  448. $value = $temp;
  449. }
  450. }
  451. //$result = Dever::$global['host']['img'] . 'chead.jpg';
  452. if ($value) {
  453. # 裁图
  454. $handle = new Img();
  455. $size = '200_200_2';
  456. $user = isset($user) && $user ? $user : $this->init();
  457. if ($user && isset($user['id']) && $user['id']) {
  458. $name = md5($user['id']);
  459. } else {
  460. $name = md5($value . rand(0, 100) . microtime());
  461. }
  462. $path = 'avatar/' . $date[0] . '/' . $date[1] . '/' . $date[2] . '/';
  463. $ext = '.jpg';
  464. $file = Dever::path($base, $path . $name . $ext);
  465. $temp = $file . '.temp.jpg';
  466. //$value = Dever::curl($value);
  467. //file_put_contents($temp, file_get_contents($value));
  468. $file = $handle->thumb($value, $size, true, $file);
  469. if ($file) {
  470. $result = str_replace('/upload/', '/', Dever::config('host')->uploadRes . $path . $name . $ext);
  471. } else {
  472. $result = $value;
  473. }
  474. }
  475. return $result;
  476. }
  477. }