|
|
<?php
|
|
|
namespace Admin\Controller;
|
|
|
|
|
|
use User\Api\UserApi;
|
|
|
use Com\Wechat;
|
|
|
use Com\WechatAuth;
|
|
|
|
|
|
/**
|
|
|
* 后台首页控制器
|
|
|
* @author 麦当苗儿 <zuojiazi@vip.qq.com>
|
|
|
*/
|
|
|
class PublicController extends \Think\Controller
|
|
|
{
|
|
|
|
|
|
/**
|
|
|
* 后台用户登录
|
|
|
* @author 麦当苗儿 <zuojiazi@vip.qq.com>
|
|
|
*/
|
|
|
public function login($username = null, $password = null, $verify = null)
|
|
|
{
|
|
|
if (IS_POST) {
|
|
|
/* 检测验证码 TODO: */
|
|
|
if (!check_verify($verify)) {
|
|
|
$this->error('验证码输入错误！');
|
|
|
}
|
|
|
|
|
|
/* 调用UC登录接口登录 */
|
|
|
$User = new UserApi;
|
|
|
$uid = $User->login($username, $password);
|
|
|
if (0 < $uid) { //UC登录成功
|
|
|
/* 登录用户 */
|
|
|
$Member = D('Member');
|
|
|
if ($Member->login($uid)) { //登录用户
|
|
|
//TODO:跳转到登录前页面
|
|
|
$this->success('登录成功！', U('Index/index'));
|
|
|
} else {
|
|
|
|
|
|
$this->error($Member->getError());
|
|
|
}
|
|
|
|
|
|
} else { //登录失败
|
|
|
switch ($uid) {
|
|
|
case -1:
|
|
|
$error = '账户或密码错误！';
|
|
|
break; //系统级别禁用
|
|
|
case -2:
|
|
|
$error = '账户或密码错误！';
|
|
|
break;
|
|
|
default:
|
|
|
$error = '未知错误！';
|
|
|
break; // 0-接口参数错误（调试阶段使用）
|
|
|
}
|
|
|
$this->error($error);
|
|
|
}
|
|
|
} else {
|
|
|
if (is_login()) {
|
|
|
$this->redirect('Index/index');
|
|
|
} else {
|
|
|
/* 读取数据库中的配置 */
|
|
|
$config = S('DB_CONFIG_DATA');
|
|
|
if (!$config) {
|
|
|
$config = D('Config')->lists();
|
|
|
S('DB_CONFIG_DATA', $config);
|
|
|
}
|
|
|
C($config); //添加配置
|
|
|
|
|
|
$this->display();
|
|
|
}
|
|
|
}
|
|
|
}
|
|
|
|
|
|
/**
|
|
|
* 后台用户登录
|
|
|
* @author 麦当苗儿 <zuojiazi@vip.qq.com>
|
|
|
*/
|
|
|
public function cp_login($mobile = null, $verify = null)
|
|
|
{
|
|
|
if (IS_POST) {
|
|
|
/* 检测验证码 TODO: */
|
|
|
|
|
|
$this->checksafecode($mobile, $verify, false);
|
|
|
$promote = M('promote', 'tab_')->where([
|
|
|
'mobile_phone' => $mobile,
|
|
|
'level' => 1,
|
|
|
])->find();
|
|
|
if ($promote) {
|
|
|
/* 记录登录SESSION和COOKIES */
|
|
|
$cp_auth = array(
|
|
|
'user_id' => $promote['id'],
|
|
|
'account' => $promote['account'],
|
|
|
'mobile_phone' => $promote['mobile_phone'],
|
|
|
'nickname' => $promote['nickname'],
|
|
|
'username' => $promote['nickname'] ?: $promote['account'],
|
|
|
'company_id' => $promote['company_id'],
|
|
|
);
|
|
|
$session_name = 'cp_user_auth';
|
|
|
if (I('auto_login')) {
|
|
|
$expireTime = 60*60*24*30;//自动登录一个月
|
|
|
ini_set('session.gc_maxlifetime', $expireTime);
|
|
|
ini_set('session.cookie_lifetime', $expireTime);
|
|
|
session($session_name, $cp_auth);
|
|
|
session($session_name.'_sign', data_auth_sign($cp_auth));
|
|
|
session($session_name.'_expire', time());
|
|
|
} else {
|
|
|
session($session_name, $cp_auth);
|
|
|
session($session_name.'_sign', data_auth_sign($cp_auth));
|
|
|
}
|
|
|
$uid = $promote['id'];
|
|
|
} else {
|
|
|
$partner = M('partner', 'tab_')->where(['link_phone' => $mobile,])->find();
|
|
|
if ($partner) {
|
|
|
/* 记录登录SESSION和COOKIES */
|
|
|
$cp_auth = array(
|
|
|
'user_id' => $partner['id'],
|
|
|
'account' => $partner['link_phone'],
|
|
|
'mobile_phone' => $partner['link_phone'],
|
|
|
'nickname' => $partner['link_man'],
|
|
|
'company_id' => $partner['id'],
|
|
|
'username' => $partner['link_man'] ?: $partner['account'],
|
|
|
);
|
|
|
$session_name = 'cp_user_auth';
|
|
|
if (I('auto_login')) {
|
|
|
$expireTime = 60*60*24*30;//自动登录一个月
|
|
|
ini_set('session.gc_maxlifetime', $expireTime);
|
|
|
ini_set('session.cookie_lifetime', $expireTime);
|
|
|
session($session_name, $cp_auth);
|
|
|
session($session_name.'_sign', data_auth_sign($cp_auth));
|
|
|
session($session_name.'_expire', time());
|
|
|
} else {
|
|
|
session($session_name, $cp_auth);
|
|
|
session($session_name.'_sign', data_auth_sign($cp_auth));
|
|
|
}
|
|
|
|
|
|
$uid = $partner['id'];
|
|
|
}
|
|
|
}
|
|
|
|
|
|
if (0 < $uid) { //UC登录成功
|
|
|
/* 登录用户 */
|
|
|
$this->success('登录成功！', U('VerifyBill/index'));
|
|
|
} else { //登录失败
|
|
|
$this->error('该账号没有权限登录对账系统');
|
|
|
}
|
|
|
} else {
|
|
|
if (session('cp_user_auth')) {
|
|
|
$this->redirect('VerifyBill/index');
|
|
|
} else {
|
|
|
/* 读取数据库中的配置 */
|
|
|
$config = S('DB_CONFIG_DATA');
|
|
|
if (!$config) {
|
|
|
$config = D('Config')->lists();
|
|
|
S('DB_CONFIG_DATA', $config);
|
|
|
}
|
|
|
C($config); //添加配置
|
|
|
|
|
|
$this->display();
|
|
|
}
|
|
|
}
|
|
|
}
|
|
|
|
|
|
public function cp_logout()
|
|
|
{
|
|
|
session('cp_user_auth', null);
|
|
|
session('cp_user_auth_sign', null);
|
|
|
$this->redirect('cp_login');
|
|
|
}
|
|
|
|
|
|
/* 退出登录 */
|
|
|
public function logout()
|
|
|
{
|
|
|
if (is_login()) {
|
|
|
D('Member')->logout();
|
|
|
session('user_auth', null);
|
|
|
session('user_auth_sign', null);
|
|
|
session('user_auth_promote_ids', null);
|
|
|
cookie('think_language', Null);
|
|
|
// $this->success('退出成功！', U('login'));
|
|
|
$this->ajaxReturn(array('status' => 1, 'msg' => '退出成功！'));
|
|
|
} else {
|
|
|
$this->redirect('login');
|
|
|
}
|
|
|
}
|
|
|
|
|
|
public function checkVerify()
|
|
|
{
|
|
|
$verify = $_POST['verify'];
|
|
|
if (!check_verify($verify)) {
|
|
|
$this->ajaxReturn(array('status' => 0, 'msg' => '验证码输入错误！'));
|
|
|
}
|
|
|
}
|
|
|
|
|
|
public function verify()
|
|
|
{
|
|
|
$config = array(
|
|
|
'seKey' => 'ThinkPHP.CN', //验证码加密密钥
|
|
|
'fontSize' => 22, // 验证码字体大小(px)
|
|
|
'imageH' => 50, // 验证码图片高度
|
|
|
'imageW' => 180, // 验证码图片宽度
|
|
|
'length' => 4, // 验证码位数
|
|
|
'fontttf' => '4.ttf', // 验证码字体，不设置随机获取
|
|
|
);
|
|
|
ob_clean();
|
|
|
$verify = new \Think\Verify($config);
|
|
|
$verify->codeSet = '0123456789';
|
|
|
$verify->entry(1);
|
|
|
}
|
|
|
|
|
|
public function get_openid()
|
|
|
{
|
|
|
$appid = C('wechat.appid');
|
|
|
$appsecret = C('wechat.appsecret');
|
|
|
$result = auto_get_access_token(RUNTIME_PATH . '/access_token_validity.txt');
|
|
|
if ($result['is_validity']) {
|
|
|
session('token', $result['access_token']);
|
|
|
$auth = new WechatAuth($appid, $appsecret, $result['access_token']);
|
|
|
} else {
|
|
|
$auth = new WechatAuth($appid, $appsecret);
|
|
|
$token = $auth->getAccessToken();
|
|
|
$token['expires_in_validity'] = time() + $token['expires_in'];
|
|
|
wite_text(json_encode($token), RUNTIME_PATH . '/access_token_validity.txt');
|
|
|
session('token', $token['access_token']);
|
|
|
}
|
|
|
$scene_id = sp_random_num(4) . '0';
|
|
|
$ticket = $auth->qrcodeCreate($scene_id, 120);//10分钟
|
|
|
if ($ticket['errcode']) {
|
|
|
$return = array('status' => 0, 'data' => '获取ticket失败！');
|
|
|
} else {
|
|
|
$qrcode = $auth->showqrcode($ticket['ticket']);
|
|
|
$return = array('status' => 1, 'data' => $qrcode, 'token' => $scene_id);
|
|
|
}
|
|
|
$this->ajaxReturn($return);
|
|
|
}
|
|
|
|
|
|
public function wite_token()
|
|
|
{
|
|
|
$appid = C('wechat.appid');
|
|
|
$appsecret = C('wechat.appsecret');
|
|
|
$auth = new WechatAuth($appid, $appsecret);
|
|
|
$token = $auth->getAccessToken();
|
|
|
$token['expires_in_validity'] = time() + $token['expires_in'];
|
|
|
wite_text(json_encode($token), RUNTIME_PATH . '/access_token_validity.txt');
|
|
|
session('token', $token['access_token']);
|
|
|
$this->get_openid();
|
|
|
}
|
|
|
|
|
|
/** * 第三方微信扫码登陆 * */
|
|
|
public function wechat_qrcode_login($state = 1)
|
|
|
{
|
|
|
if (empty(session("user_auth.user_id")) && !is_weixin()) {
|
|
|
$appid = C('weixin_login.appid');
|
|
|
$appsecret = C('weixin_login.appsecret');
|
|
|
$auth = new WechatAuth($appid, $appsecret);
|
|
|
$result = auto_get_access_token(RUNTIME_PATH . '/qr_access_token_validity.txt');
|
|
|
if ($result['is_validity']) {
|
|
|
session('token', $result['access_token']);
|
|
|
} else {
|
|
|
$token = $auth->getAccessToken();
|
|
|
$token['expires_in_validity'] = time() + $token['expires_in'];
|
|
|
wite_text(json_encode($token), RUNTIME_PATH . '/qr_access_token_validity.txt');
|
|
|
session('token', $token['access_token']);
|
|
|
}
|
|
|
$redirect_uri = "http://" . $_SERVER['HTTP_HOST'] . "/admin.php/Public/wechat_login_callback";
|
|
|
redirect($auth->getQrconnectURL($redirect_uri, $state));
|
|
|
}
|
|
|
}
|
|
|
|
|
|
public function wechat_login_callback()
|
|
|
{
|
|
|
if ($host && $_GET['state'] != $_SERVER['HTTP_HOST']) {
|
|
|
$url = 'http://' . $_GET['state'] . '/admin.php/Public/wechat_login_callback?' . http_build_query($_GET);
|
|
|
Header("Location: $url");
|
|
|
exit;
|
|
|
}
|
|
|
if (is_weixin()) {
|
|
|
$appid = C('wechat.appid');
|
|
|
$appsecret = C('wechat.appsecret');
|
|
|
} else {
|
|
|
$appid = C('weixin_login.appid');
|
|
|
$appsecret = C('weixin_login.appsecret');
|
|
|
}
|
|
|
$auth = new WechatAuth($appid, $appsecret);
|
|
|
$token = $auth->getAccessToken("code", $_GET['code']);
|
|
|
if (isset($_GET['auto_get_openid'])) {
|
|
|
if (base64_decode($_GET['auto_get_openid']) != 'auto_get_openid') {
|
|
|
die('非法操作！');
|
|
|
} else {
|
|
|
session('admin_wechat_token', array('openid' => $token['openid']));
|
|
|
session('admin_openid', $token['openid']);
|
|
|
}
|
|
|
}
|
|
|
$Member = D('UcenterMember');
|
|
|
$admin = $Member->where(array('admin_openid' => $token['openid']))->find();
|
|
|
if ($admin == '') {
|
|
|
$this->error("微信未绑定管理员账号！");
|
|
|
} else {
|
|
|
$User = new UserApi;
|
|
|
$uid = $User->login($admin['username'], $admin['password']);
|
|
|
if (0 < $uid) { //UC登录成功
|
|
|
/* 登录用户 */
|
|
|
$Member = D('Member');
|
|
|
if ($Member->login($uid)) { //登录用户
|
|
|
//TODO:跳转到登录前页面
|
|
|
$this->success('登录成功！', U('Index/index'));
|
|
|
} else {
|
|
|
$this->error($Member->getError());
|
|
|
}
|
|
|
|
|
|
} else { //登录失败
|
|
|
switch ($uid) {
|
|
|
case -1:
|
|
|
$error = '用户不存在或被禁用！';
|
|
|
break; //系统级别禁用
|
|
|
case -2:
|
|
|
$error = '密码错误！';
|
|
|
break;
|
|
|
default:
|
|
|
$error = '未知错误！';
|
|
|
break; // 0-接口参数错误（调试阶段使用）
|
|
|
}
|
|
|
$this->error($error);
|
|
|
}
|
|
|
}
|
|
|
}
|
|
|
|
|
|
|
|
|
public function zh_cn()
|
|
|
{
|
|
|
cookie('think_language', 'zh-cn');
|
|
|
$this->ajaxReturn(['status' => 1]);
|
|
|
}
|
|
|
|
|
|
|
|
|
public function en_us()
|
|
|
{
|
|
|
cookie('think_language', 'en-us');
|
|
|
$this->ajaxReturn(['status' => 1]);
|
|
|
}
|
|
|
|
|
|
/**
|
|
|
* 发动手机验证码
|
|
|
*/
|
|
|
public function telsafecode($phone = '', $delay = 10, $flag = true)
|
|
|
{
|
|
|
$result = R('Common/Sms/send_sms_code', array($phone, $delay, false));
|
|
|
|
|
|
if ($result['code'] == 200) {
|
|
|
$data['status'] = 1;
|
|
|
$data['data'] = $result['data'];
|
|
|
} else {
|
|
|
$data['status'] = 0;
|
|
|
}
|
|
|
|
|
|
$data['msg'] = $result['msg'];
|
|
|
|
|
|
echo json_encode($data);
|
|
|
exit;
|
|
|
}
|
|
|
|
|
|
/**
|
|
|
* 手机安全码验证
|
|
|
* @param bool $flag true 用于直接异步请求 false 用于方法调用
|
|
|
* @param [type] $vcode [description]
|
|
|
*/
|
|
|
public function checksafecode($phone, $vcode, $flag = true)
|
|
|
{
|
|
|
$result = R('Common/Sms/verify_sms_code', array($phone, $vcode, false));
|
|
|
|
|
|
if ($result['code'] == 200) {
|
|
|
$data['status'] = 1;
|
|
|
if ($flag) {
|
|
|
echo json_encode($data);
|
|
|
exit;
|
|
|
}
|
|
|
} else {
|
|
|
$data['status'] = 0;
|
|
|
$data['msg'] = $result['msg'];
|
|
|
echo json_encode($data);
|
|
|
exit;
|
|
|
}
|
|
|
}
|
|
|
|
|
|
}
|