292 lines
12 KiB
PHP
Executable File
292 lines
12 KiB
PHP
Executable File
<?php
|
|
/*
|
|
* @link http://www.kalcaddle.com/
|
|
* @author warlee | e-mail:kalcaddle@qq.com
|
|
* @copyright warlee 2014.(Shanghai)Co.,Ltd
|
|
* @license http://kalcaddle.com/tools/licenses/license.txt
|
|
*/
|
|
|
|
class user extends Controller
|
|
{
|
|
private $user; //用户相关信息
|
|
private $auth; //用户所属组权限
|
|
private $notCheck;
|
|
function __construct(){
|
|
parent::__construct();
|
|
$this->tpl = TEMPLATE . 'user/';
|
|
if(!isset($_SESSION)){//避免session不可写导致循环跳转
|
|
$this->login("session write error!");
|
|
}else{
|
|
$this->user = &$_SESSION['kod_user'];
|
|
}
|
|
//不需要判断的action
|
|
$this->notCheck = array('loginFirst','login','logout','loginSubmit','checkCode','public_link');
|
|
}
|
|
|
|
/**
|
|
* 登录状态检测;并初始化数据状态
|
|
*/
|
|
public function loginCheck(){
|
|
if (ST == 'share') return true;//共享页面
|
|
if(in_array(ACT,$this->notCheck)){//不需要判断的action
|
|
return;
|
|
}else if($_SESSION['kod_login']===true && $_SESSION['kod_user']['name']!=''){
|
|
define('USER',USER_PATH.$this->user['name'].'/');
|
|
define('USER_TEMP',USER.'data/temp/');
|
|
define('USER_RECYCLE',USER.'recycle/');
|
|
if (!file_exists(USER)) {
|
|
$this->logout();
|
|
}
|
|
if ($this->user['role'] == 'root') {
|
|
define('MYHOME',USER.'home/');
|
|
define('HOME','');
|
|
$GLOBALS['web_root'] = WEB_ROOT;//服务器目录
|
|
$GLOBALS['is_root'] = 1;
|
|
}else{
|
|
define('MYHOME','/');
|
|
define('HOME',USER.'home/');
|
|
$GLOBALS['web_root'] = str_replace(WEB_ROOT,'',HOME);//从服务器开始到用户目录
|
|
$GLOBALS['is_root'] = 0;
|
|
}
|
|
$this->config['user_share_file'] = USER.'data/share.php'; // 收藏夹文件存放地址.
|
|
$this->config['user_fav_file'] = USER.'data/fav.php'; // 收藏夹文件存放地址.
|
|
$this->config['user_seting_file'] = USER.'data/config.php'; //用户配置文件
|
|
$this->config['user'] = fileCache::load($this->config['user_seting_file']);
|
|
if($this->config['user']['theme']==''){
|
|
$this->config['user'] = $this->config['setting_default'];
|
|
}
|
|
return;
|
|
}else if($_COOKIE['kod_name']!='' && $_COOKIE['kod_token']!=''){
|
|
$member = new fileCache(USER_SYSTEM.'member.php');
|
|
$user = $member->get($_COOKIE['kod_name']);
|
|
if (!is_array($user) || !isset($user['password'])) {
|
|
$this->logout();
|
|
}
|
|
if(md5($user['password'].get_client_ip()) == $_COOKIE['kod_token']){
|
|
session_start();//re start
|
|
$_SESSION['kod_login'] = true;
|
|
$_SESSION['kod_user']= $user;
|
|
setcookie('kod_name', $_COOKIE['kod_name'], time()+3600*24*365);
|
|
setcookie('kod_token',$_COOKIE['kod_token'],time()+3600*24*365); //密码的MD5值再次md5
|
|
header('location:'.get_url());
|
|
exit;
|
|
}
|
|
$this->logout();//session user数据不存在
|
|
}else{
|
|
if ($this->config['setting_system']['auto_login'] != '1') {
|
|
$this->logout();//不自动登录
|
|
}else{
|
|
if (!file_exists(USER_SYSTEM.'install.lock')) {
|
|
$this->display('install.html');exit;
|
|
}
|
|
header('location:./index.php?user/loginSubmit&name=guest&password=guest');
|
|
}
|
|
}
|
|
}
|
|
|
|
//临时文件访问
|
|
public function public_link(){
|
|
load_class('mcrypt');
|
|
$pass = $this->config['setting_system']['system_password'];
|
|
$path = Mcrypt::decode($this->in['fid'],$pass);//一天内解密有效
|
|
if (strlen($path) == 0) {
|
|
show_json($this->L['error'],false);
|
|
}
|
|
if (!file_exists($path)) {
|
|
show_tips($this->L['not_exists']);
|
|
}
|
|
file_put_out($path);
|
|
}
|
|
public function common_js(){
|
|
$basic_path = BASIC_PATH;
|
|
if (!$GLOBALS['is_root']) {
|
|
$basic_path = '/';//对非root用户隐藏所有地址
|
|
}
|
|
$the_config = array(
|
|
'lang' => LANGUAGE_TYPE,
|
|
'is_root' => $GLOBALS['is_root'],
|
|
'user_name' => $this->user['name'],
|
|
'web_root' => $GLOBALS['web_root'],
|
|
'web_host' => HOST,
|
|
'static_path' => STATIC_PATH,
|
|
'basic_path' => $basic_path,
|
|
'app_host' => APPHOST,
|
|
'myhome' => MYHOME,
|
|
'upload_max' => $this->config['settings']['upload_chunk_size'],
|
|
'version' => KOD_VERSION,
|
|
'version_desc' => $this->config['settings']['version_desc'],
|
|
|
|
'json_data' => "",
|
|
'theme' => $this->config['user']['theme'], //列表排序依照的字段
|
|
'list_type' => $this->config['user']['list_type'], //列表排序依照的字段
|
|
'sort_field' => $this->config['user']['list_sort_field'], //列表排序依照的字段
|
|
'sort_order' => $this->config['user']['list_sort_order'], //列表排序升序or降序
|
|
'musictheme' => $this->config['user']['musictheme'],
|
|
'movietheme' => $this->config['user']['movietheme']
|
|
);
|
|
|
|
if (!isset($GLOBALS['auth'])) {
|
|
$GLOBALS['auth'] = array();
|
|
}
|
|
$js = 'LNG='.json_encode($GLOBALS['L']).';';
|
|
$js .= 'AUTH='.json_encode($GLOBALS['auth']).';';
|
|
$js .= 'G='.json_encode($the_config).';';
|
|
header("Content-Type:application/javascript");
|
|
echo $js;
|
|
}
|
|
|
|
/**
|
|
* 登录view
|
|
*/
|
|
public function login($msg = ''){
|
|
if (!file_exists(USER_SYSTEM.'install.lock')) {
|
|
$this->display('install.html');exit;
|
|
}
|
|
$this->assign('msg',$msg);
|
|
if (is_wap()) {
|
|
$this->display('login_wap.html');
|
|
}else{
|
|
$this->display('login.html');
|
|
}
|
|
exit;
|
|
}
|
|
|
|
/**
|
|
* 首次登录
|
|
*/
|
|
public function loginFirst(){
|
|
touch(USER_SYSTEM.'install.lock');
|
|
header('location:./index.php?user/login');
|
|
exit;
|
|
}
|
|
/**
|
|
* 退出处理
|
|
*/
|
|
public function logout(){
|
|
session_start();
|
|
user_logout();
|
|
}
|
|
|
|
/**
|
|
* 登录数据提交处理
|
|
*/
|
|
public function loginSubmit(){
|
|
if(!isset($this->in['name']) || !isset($this->in['password'])) {
|
|
$msg = $this->L['login_not_null'];
|
|
}else{
|
|
//错误三次输入验证码
|
|
$name = rawurldecode($this->in['name']);
|
|
$password = rawurldecode($this->in['password']);
|
|
|
|
session_start();//re start 有新的修改后调用
|
|
if(need_check_code() && isset($_SESSION['code_error_time']) &&
|
|
intval($_SESSION['code_error_time']) >=3 &&
|
|
$_SESSION['check_code'] !== strtolower($this->in['check_code'])){
|
|
// pr($_SESSION['check_code'].'--'.strtolower($this->in['check_code']));exit;
|
|
$this->login($this->L['code_error']);
|
|
}
|
|
$member = new fileCache(USER_SYSTEM.'member.php');
|
|
$user = $member->get($name);
|
|
if ($user ===false){
|
|
$msg = $this->L['user_not_exists'];
|
|
}else if(md5($password)==$user['password']){
|
|
if($user['status'] == 0){//初始化app
|
|
$app = init_controller('app');
|
|
$app->init_app($user);
|
|
}
|
|
$_SESSION['kod_login'] = true;
|
|
$_SESSION['kod_user']= $user;
|
|
setcookie('kod_name', $user['name'], time()+3600*24*365);
|
|
if ($this->in['rember_password'] == '1') {
|
|
setcookie('kod_token',md5($user['password'].get_client_ip()),time()+3600*24*365);
|
|
}
|
|
header('location:./index.php');
|
|
return;
|
|
}else{
|
|
$msg = $this->L['password_error'];
|
|
}
|
|
$_SESSION['code_error_time'] = intval($_SESSION['code_error_time']) + 1;
|
|
}
|
|
$this->login($msg);
|
|
}
|
|
|
|
/**
|
|
* 修改密码
|
|
*/
|
|
public function changePassword(){
|
|
$password_now=$this->in['password_now'];
|
|
$password_new=$this->in['password_new'];
|
|
if (!$password_now && !$password_new)show_json($this->L['password_not_null'],false);
|
|
if ($this->user['password']==md5($password_now)){
|
|
$member_file = USER_SYSTEM.'member.php';
|
|
$sql=new fileCache(USER_SYSTEM.'member.php');
|
|
$this->user['password'] = md5($password_new);
|
|
$sql->update($this->user['name'],$this->user);
|
|
setcookie('kod_token',md5(md5($password_new)),time()+3600*24*365);
|
|
show_json('success');
|
|
}else {
|
|
show_json($this->L['old_password_error'],false);
|
|
}
|
|
}
|
|
|
|
/**
|
|
* 权限验证；统一入口检验
|
|
*/
|
|
public function authCheck(){
|
|
if (isset($GLOBALS['is_root']) && $GLOBALS['is_root'] == 1) return;
|
|
if (in_array(ACT,$this->notCheck)) return;
|
|
if (!array_key_exists(ST,$this->config['role_setting']) ) return;
|
|
if (!in_array(ACT,$this->config['role_setting'][ST]) &&
|
|
ST.':'.ACT != 'user:common_js') return;//输出处理过的权限
|
|
|
|
//有权限限制的函数
|
|
$key = ST.':'.ACT;
|
|
$group = new fileCache(USER_SYSTEM.'group.php');
|
|
$auth= $group->get($this->user['role']);
|
|
|
|
//向下版本兼容处理
|
|
//未定义；新版本首次使用默认开放的功能
|
|
if(!isset($auth['userShare:set'])){
|
|
$auth['userShare:set'] = 1;
|
|
}
|
|
if(!isset($auth['explorer:fileDownload'])){
|
|
$auth['explorer:fileDownload'] = 1;
|
|
}
|
|
//默认扩展功能 等价权限
|
|
$auth['user:common_js'] = 1;//权限数据配置后输出到前端
|
|
$auth['explorer:pathChmod'] = $auth['explorer:pathRname'];
|
|
$auth['explorer:pathDeleteRecycle'] = $auth['explorer:pathDelete'];
|
|
$auth['explorer:pathCopyDrag'] = $auth['explorer:pathCuteDrag'];
|
|
|
|
$auth['explorer:fileDownloadRemove']= $auth['explorer:fileDownload'];
|
|
$auth['explorer:zipDownload'] = $auth['explorer:fileDownload'];
|
|
$auth['explorer:fileProxy'] = $auth['explorer:fileDownload'];
|
|
$auth['editor:fileGet'] = $auth['explorer:fileDownload'];
|
|
$auth['explorer:officeView'] = $auth['explorer:fileDownload'];
|
|
$auth['explorer:officeSave'] = $auth['editor:fileSave'];
|
|
$auth['userShare:del'] = $auth['userShare:set'];
|
|
if ($auth[$key] != 1) show_json($this->L['no_permission'],false);
|
|
|
|
$GLOBALS['auth'] = $auth;//全局
|
|
//扩展名限制：新建文件&上传文件&重命名文件&保存文件&zip解压文件
|
|
$check_arr = array(
|
|
'mkfile' => $this->check_key('path'),
|
|
'pathRname' => $this->check_key('rname_to'),
|
|
'fileUpload'=> isset($_FILES['file']['name'])?$_FILES['file']['name']:'',
|
|
'fileSave' => $this->check_key('path')
|
|
);
|
|
if (array_key_exists(ACT,$check_arr) && !checkExt($check_arr[ACT])){
|
|
show_json($this->L['no_permission_ext'],false);
|
|
}
|
|
}
|
|
private function check_key($key){
|
|
return isset($this->in[$key])? rawurldecode($this->in[$key]):'';
|
|
}
|
|
|
|
public function checkCode() {
|
|
session_start();//re start
|
|
$code = rand_string(4);
|
|
$_SESSION['check_code'] = strtolower($code);
|
|
check_code($code);
|
|
}
|
|
} |