KodExplorer/controller/user.class.php

<?php
/*
* @link http://www.kalcaddle.com/
* @author warlee | e-mail:kalcaddle@qq.com
* @copyright warlee 2014.(Shanghai)Co.,Ltd
* @license http://kalcaddle.com/tools/licenses/license.txt
*/

class user extends Controller
{
	private $user;	//用户相关信息
    private $auth;  //用户所属组权限
    /**
     * 构造函数
     */
    function __construct()
	{
        parent::__construct();
		$this->tpl	= TEMPLATE  . 'user/';
		$this->user = &$_SESSION['user'];
    }

    /**
     * api方式访问,最高权限
     */
    public function authApi(){
        if (!REMOTE_OPEN) return;
        if (isset($_GET['auth_key'])){
            if(md5(md5($this->in['auth_key'])) == REMOTE_KEY) {
                session_start();//记录session 写入文件
                $_SESSION['isLogin'] = true;
                $this->user['role'] = 'root';

            }else{
                show_json('error',false);
            }
        }
    }

	/**
     * 登陆状态检测;并初始化数据状态
     */
	public function loginCheck()
    {
        $this->authApi();//api方式验证
        if($_SESSION['isLogin'] === true){
            define('USER',USER_PATH.$this->user['name'].'/');
            if ($this->user['role'] == 'root') {
                define('MYHOME',USER.'home/');
                define('HOME','');
                $GLOBALS['web_root'] = WEB_ROOT;//服务器目录
                $GLOBALS['is_root'] = 1;
            }else{
                define('MYHOME','/');
                define('HOME',USER.'home/');
                $GLOBALS['web_root'] = str_replace(WEB_ROOT,'',HOME);//从服务器开始到用户目录
                $GLOBALS['is_root'] = 0;
            }
            $this->config['user_fav_file']     = USER.'data/fav.php';    // 收藏夹文件存放地址.
            $this->config['user_seting_file']  = USER.'data/config.php'; //用户配置文件
            $this->config['user']  = fileCache::load($this->config['user_seting_file']);
            return;
        }else if(ACT == 'loginSubmit' || ACT=='checkCode'){//登陆提交判断;或者获取验证码
            return;
        }else if(isset($_COOKIE['kod_name']) && isset($_COOKIE['kod_token'])){
            $member = new fileCache($this->config['system_file']['member']);
            $user = $member->get($_COOKIE['kod_name']);
            if(md5($user['password'].get_client_ip()) == $_COOKIE['kod_token']){
                
                $_SESSION['isLogin'] = true;
                $_SESSION['user']= $user;
                setcookie('kod_name', $_COOKIE['kod_name'], time()+3600*24*365); 
                setcookie('kod_token',$_COOKIE['kod_token'],time()+3600*24*365); //密码的MD5值再次md5
                header('location:'.get_url());
                return;
            }
        }
        $this->login();
    }

    /**
     * 登陆view
     */
    public function login($msg = '')
    {
        $this->assign('msg',$msg);
    	$this->display('login.html');
        exit;
    }
	/**
     * 登陆数据提交处理
     */
	public function loginSubmit()
    {
        $name = $this->in['name'];
		if(empty($name) || empty($this->in['password'])) {
            $msg = $this->L['login_not_null'];
		}else{
            //错误三次输入验证码
            session_start();//re start
            if(intval($_SESSION['code_error_time']) >=3 && 
                $_SESSION['check_code'] !== strtolower($this->in['check_code'])){
                $this->login($this->L['code_error']);
            }
            $member = new fileCache($this->config['system_file']['member']);
            $user = $member->get($name);
            if ($user ===false){
                $msg = $this->L['user_not_exists'];
                $_SESSION['code_error_time'] = intval($_SESSION['code_error_time']) + 1;
            }else if(md5($this->in['password'])==$user['password']){
                if($user['status'] == 0){//初始化app
                    $this->init_app($user);
                }
                $group  = new fileCache($this->config['system_file']['group']);
                $_SESSION['isLogin'] = true;
                $_SESSION['user']= $user;
                if ($this->in['rember_password'] == 'on') {
                    setcookie('kod_name', $user['name'], time()+3600*24*365);
                    setcookie('kod_token',md5($user['password'].get_client_ip()), time()+3600*24*365);
                }
                header('location:./');
                return;
            }else{
                $_SESSION['code_error_time'] = intval($_SESSION['code_error_time']) + 1;
                $msg = $this->L['password_error'];
            }
		}
        $this->login($msg);
    }

	/**
     * 退出处理
     */
    public function logout()
    {
        session_start();
        setcookie('kod_name', null, time()-3600); 
        setcookie('kod_token', null, time()-3600); 
		session_destroy();
		header('location:./?user/login');
    }

	/**
     * 修改密码
     */
    public function changePassword()
    {
        $password_now=$this->in['password_now'];
        $password_new=$this->in['password_new'];
        if (!$password_now && !$password_new)show_json($this->L['password_not_null'],false);
        if ($this->user['password']==md5($password_now)){
            $sql=new fileCache($this->config['system_file']['member']);
            $this->user['password'] = md5($password_new);
            $sql->update($this->user['name'],$this->user);
            setcookie('kod_token',md5(md5($password_new)),time()+3600*24*365);
            show_json('success');
        }else {
            show_json($this->L['old_password_error'],false);
        }
    }

    /**
     * 权限验证；统一入口检验
     */
    public function authCheck(){
        if ($GLOBALS['is_root'] == 1) return;
        if(ACT == 'loginSubmit' || ACT=='checkCode') return;
        if (!array_key_exists(ST,$this->config['role_setting']) ){
            return;
        }else{
            if (!in_array(ACT,$this->config['role_setting'][ST])){
                return;
            }else{
                //有权限限制的函数
                $key = ST.':'.ACT;
                $group  = new fileCache($this->config['system_file']['group']);
                $GLOBALS['auth'] = $auth   = $group->get($this->user['role']);
                if ($auth[$key] !== 1) {
                    show_json($this->L['no_permission'],false);
                }
                //扩展名限制：新建文件&上传文件&重命名文件&保存文件&zip解压文件
                $check_arr = array(
                    'mkfile'    =>  $this->in['path'],
                    'pathRname' =>  $this->in['rname_to'],
                    'fileUpload'=>  $_FILES['file']['name'],
                    'fileSave'  =>  $this->in['path'],
                );

                if (array_key_exists(ACT,$check_arr)){
                    $ext = get_path_ext($check_arr[ACT]);
                    $ext_arr = explode('|',$auth['ext_not_allow']);
                    if (in_array($ext,$ext_arr)){
                        show_json($this->L['no_permission_ext'],false);
                    } 
                }                
            }
        }
        return;
    }


    public function checkCode() {
        session_start();//re start
        header("Content-type: image/png");
        $fontsize = 18;$len = 4;
        $width = 70;$height=27;
        $im = @imagecreatetruecolor($width, $height) or die("create image error!");
        $background_color = imagecolorallocate($im, 255, 255, 255);
        imagefill($im, 0, 0, $background_color);  
        for ($i = 0; $i < 2000; $i++) {//获取随机淡色            
            $line_color = imagecolorallocate($im, mt_rand(180,255),mt_rand(160, 255),mt_rand(100, 255));
            imageline($im,mt_rand(0,$width),mt_rand(0,$height), //画直线
                mt_rand(0,$width), mt_rand(0,$height),$line_color);
            imagearc($im,mt_rand(0,$width),mt_rand(0,$height), //画弧线
                mt_rand(0,$width), mt_rand(0,$height), $height, $width,$line_color);
        }
        $border_color = imagecolorallocate($im, 160, 160, 160);   
        imagerectangle($im, 0, 0, $width-1, $height-1, $border_color);//画矩形，边框颜色200,200,200
        
        $str = "ABCDEFGHJKMNPQRSTUVWXYZabcdefghjkmnpqrstuvwxyz23456789";
        $code = '';
        for ($i = 0; $i < $len; $i++) {//写入随机字串
            $current = $str[mt_rand(0, strlen($str)-1)];
            $text_color = imagecolorallocate($im,mt_rand(30, 140),mt_rand(30,140),mt_rand(30,140));
            imagechar($im,10,$i*$fontsize+6,rand(1,$height/3),$current,$text_color);
            $code.= $current;
        }
        imagepng($im);//显示图
        imagedestroy($im);//销毁图片
        $_SESSION['check_code'] = strtolower($code);
    }

    /**
     * 用户app初始化
     */
    private function init_app($user) {
        $sql=new fileCache($this->config['system_file']['apps']);
        $list = $sql->get();
        $desktop = USER_PATH.$user['name'].'/home/desktop/';
        foreach ($list as $key => $data) {
            $path = iconv_system($desktop.$key.'.oexe');
            unset($data['name']);
            unset($data['desc']);
            unset($data['group']);
            file_put_contents($path, json_encode($data));
        }
        $user['status'] = 1;
        $member = new fileCache($this->config['system_file']['member']);
        $member->update($user['name'],$user);
    }
}