251 lines
9.3 KiB
PHP
251 lines
9.3 KiB
PHP
<?php
|
||
/*
|
||
* @link http://www.kalcaddle.com/
|
||
* @author warlee | e-mail:kalcaddle@qq.com
|
||
* @copyright warlee 2014.(Shanghai)Co.,Ltd
|
||
* @license http://kalcaddle.com/tools/licenses/license.txt
|
||
*/
|
||
|
||
class user extends Controller
|
||
{
|
||
private $user; //用户相关信息
|
||
private $auth; //用户所属组权限
|
||
/**
|
||
* 构造函数
|
||
*/
|
||
function __construct()
|
||
{
|
||
parent::__construct();
|
||
$this->tpl = TEMPLATE . 'user/';
|
||
$this->user = &$_SESSION['user'];
|
||
}
|
||
|
||
/**
|
||
* api方式访问,最高权限
|
||
*/
|
||
public function authApi(){
|
||
if (!REMOTE_OPEN) return;
|
||
if (isset($_GET['auth_key'])){
|
||
if(md5(md5($this->in['auth_key'])) == REMOTE_KEY) {
|
||
session_start();//记录session 写入文件
|
||
$_SESSION['isLogin'] = true;
|
||
$this->user['role'] = 'root';
|
||
|
||
}else{
|
||
show_json('error',false);
|
||
}
|
||
}
|
||
}
|
||
|
||
/**
|
||
* 登陆状态检测;并初始化数据状态
|
||
*/
|
||
public function loginCheck()
|
||
{
|
||
$this->authApi();//api方式验证
|
||
if($_SESSION['isLogin'] === true){
|
||
define('USER',USER_PATH.$this->user['name'].'/');
|
||
if ($this->user['role'] == 'root') {
|
||
define('MYHOME',USER.'home/');
|
||
define('HOME','');
|
||
$GLOBALS['web_root'] = WEB_ROOT;//服务器目录
|
||
$GLOBALS['is_root'] = 1;
|
||
}else{
|
||
define('MYHOME','/');
|
||
define('HOME',USER.'home/');
|
||
$GLOBALS['web_root'] = str_replace(WEB_ROOT,'',HOME);//从服务器开始到用户目录
|
||
$GLOBALS['is_root'] = 0;
|
||
}
|
||
$this->config['user_fav_file'] = USER.'data/fav.php'; // 收藏夹文件存放地址.
|
||
$this->config['user_seting_file'] = USER.'data/config.php'; //用户配置文件
|
||
$this->config['user'] = fileCache::load($this->config['user_seting_file']);
|
||
return;
|
||
}else if(ACT == 'loginSubmit' || ACT=='checkCode'){//登陆提交判断;或者获取验证码
|
||
return;
|
||
}else if(isset($_COOKIE['kod_name']) && isset($_COOKIE['kod_token'])){
|
||
$member = new fileCache($this->config['system_file']['member']);
|
||
$user = $member->get($_COOKIE['kod_name']);
|
||
if(md5($user['password'].get_client_ip()) == $_COOKIE['kod_token']){
|
||
|
||
$_SESSION['isLogin'] = true;
|
||
$_SESSION['user']= $user;
|
||
setcookie('kod_name', $_COOKIE['kod_name'], time()+3600*24*365);
|
||
setcookie('kod_token',$_COOKIE['kod_token'],time()+3600*24*365); //密码的MD5值再次md5
|
||
header('location:'.get_url());
|
||
return;
|
||
}
|
||
}
|
||
$this->login();
|
||
}
|
||
|
||
/**
|
||
* 登陆view
|
||
*/
|
||
public function login($msg = '')
|
||
{
|
||
$this->assign('msg',$msg);
|
||
$this->display('login.html');
|
||
exit;
|
||
}
|
||
/**
|
||
* 登陆数据提交处理
|
||
*/
|
||
public function loginSubmit()
|
||
{
|
||
$name = $this->in['name'];
|
||
if(empty($name) || empty($this->in['password'])) {
|
||
$msg = $this->L['login_not_null'];
|
||
}else{
|
||
//错误三次输入验证码
|
||
session_start();//re start
|
||
if(intval($_SESSION['code_error_time']) >=3 &&
|
||
$_SESSION['check_code'] !== strtolower($this->in['check_code'])){
|
||
$this->login($this->L['code_error']);
|
||
}
|
||
$member = new fileCache($this->config['system_file']['member']);
|
||
$user = $member->get($name);
|
||
if ($user ===false){
|
||
$msg = $this->L['user_not_exists'];
|
||
$_SESSION['code_error_time'] = intval($_SESSION['code_error_time']) + 1;
|
||
}else if(md5($this->in['password'])==$user['password']){
|
||
if($user['status'] == 0){//初始化app
|
||
$this->init_app($user);
|
||
}
|
||
$group = new fileCache($this->config['system_file']['group']);
|
||
$_SESSION['isLogin'] = true;
|
||
$_SESSION['user']= $user;
|
||
if ($this->in['rember_password'] == 'on') {
|
||
setcookie('kod_name', $user['name'], time()+3600*24*365);
|
||
setcookie('kod_token',md5($user['password'].get_client_ip()), time()+3600*24*365);
|
||
}
|
||
header('location:./');
|
||
return;
|
||
}else{
|
||
$_SESSION['code_error_time'] = intval($_SESSION['code_error_time']) + 1;
|
||
$msg = $this->L['password_error'];
|
||
}
|
||
}
|
||
$this->login($msg);
|
||
}
|
||
|
||
/**
|
||
* 退出处理
|
||
*/
|
||
public function logout()
|
||
{
|
||
session_start();
|
||
setcookie('kod_name', null, time()-3600);
|
||
setcookie('kod_token', null, time()-3600);
|
||
session_destroy();
|
||
header('location:./?user/login');
|
||
}
|
||
|
||
/**
|
||
* 修改密码
|
||
*/
|
||
public function changePassword()
|
||
{
|
||
$password_now=$this->in['password_now'];
|
||
$password_new=$this->in['password_new'];
|
||
if (!$password_now && !$password_new)show_json($this->L['password_not_null'],false);
|
||
if ($this->user['password']==md5($password_now)){
|
||
$sql=new fileCache($this->config['system_file']['member']);
|
||
$this->user['password'] = md5($password_new);
|
||
$sql->update($this->user['name'],$this->user);
|
||
setcookie('kod_token',md5(md5($password_new)),time()+3600*24*365);
|
||
show_json('success');
|
||
}else {
|
||
show_json($this->L['old_password_error'],false);
|
||
}
|
||
}
|
||
|
||
/**
|
||
* 权限验证；统一入口检验
|
||
*/
|
||
public function authCheck(){
|
||
if ($GLOBALS['is_root'] == 1) return;
|
||
if(ACT == 'loginSubmit' || ACT=='checkCode') return;
|
||
if (!array_key_exists(ST,$this->config['role_setting']) ){
|
||
return;
|
||
}else{
|
||
if (!in_array(ACT,$this->config['role_setting'][ST])){
|
||
return;
|
||
}else{
|
||
//有权限限制的函数
|
||
$key = ST.':'.ACT;
|
||
$group = new fileCache($this->config['system_file']['group']);
|
||
$GLOBALS['auth'] = $auth = $group->get($this->user['role']);
|
||
if ($auth[$key] !== 1) {
|
||
show_json($this->L['no_permission'],false);
|
||
}
|
||
//扩展名限制：新建文件&上传文件&重命名文件&保存文件&zip解压文件
|
||
$check_arr = array(
|
||
'mkfile' => $this->in['path'],
|
||
'pathRname' => $this->in['rname_to'],
|
||
'fileUpload'=> $_FILES['file']['name'],
|
||
'fileSave' => $this->in['path'],
|
||
);
|
||
|
||
if (array_key_exists(ACT,$check_arr)){
|
||
$ext = get_path_ext($check_arr[ACT]);
|
||
$ext_arr = explode('|',$auth['ext_not_allow']);
|
||
if (in_array($ext,$ext_arr)){
|
||
show_json($this->L['no_permission_ext'],false);
|
||
}
|
||
}
|
||
}
|
||
}
|
||
return;
|
||
}
|
||
|
||
|
||
public function checkCode() {
|
||
session_start();//re start
|
||
header("Content-type: image/png");
|
||
$fontsize = 18;$len = 4;
|
||
$width = 70;$height=27;
|
||
$im = @imagecreatetruecolor($width, $height) or die("create image error!");
|
||
$background_color = imagecolorallocate($im, 255, 255, 255);
|
||
imagefill($im, 0, 0, $background_color);
|
||
for ($i = 0; $i < 2000; $i++) {//获取随机淡色
|
||
$line_color = imagecolorallocate($im, mt_rand(180,255),mt_rand(160, 255),mt_rand(100, 255));
|
||
imageline($im,mt_rand(0,$width),mt_rand(0,$height), //画直线
|
||
mt_rand(0,$width), mt_rand(0,$height),$line_color);
|
||
imagearc($im,mt_rand(0,$width),mt_rand(0,$height), //画弧线
|
||
mt_rand(0,$width), mt_rand(0,$height), $height, $width,$line_color);
|
||
}
|
||
$border_color = imagecolorallocate($im, 160, 160, 160);
|
||
imagerectangle($im, 0, 0, $width-1, $height-1, $border_color);//画矩形，边框颜色200,200,200
|
||
|
||
$str = "ABCDEFGHJKMNPQRSTUVWXYZabcdefghjkmnpqrstuvwxyz23456789";
|
||
$code = '';
|
||
for ($i = 0; $i < $len; $i++) {//写入随机字串
|
||
$current = $str[mt_rand(0, strlen($str)-1)];
|
||
$text_color = imagecolorallocate($im,mt_rand(30, 140),mt_rand(30,140),mt_rand(30,140));
|
||
imagechar($im,10,$i*$fontsize+6,rand(1,$height/3),$current,$text_color);
|
||
$code.= $current;
|
||
}
|
||
imagepng($im);//显示图
|
||
imagedestroy($im);//销毁图片
|
||
$_SESSION['check_code'] = strtolower($code);
|
||
}
|
||
|
||
/**
|
||
* 用户app初始化
|
||
*/
|
||
private function init_app($user) {
|
||
$sql=new fileCache($this->config['system_file']['apps']);
|
||
$list = $sql->get();
|
||
$desktop = USER_PATH.$user['name'].'/home/desktop/';
|
||
foreach ($list as $key => $data) {
|
||
$path = iconv_system($desktop.$key.'.oexe');
|
||
unset($data['name']);
|
||
unset($data['desc']);
|
||
unset($data['group']);
|
||
file_put_contents($path, json_encode($data));
|
||
}
|
||
$user['status'] = 1;
|
||
$member = new fileCache($this->config['system_file']['member']);
|
||
$member->update($user['name'],$user);
|
||
}
|
||
} |