auth.php 5.3 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197
  1. <?php
  2. session_start(); // starts new or resumes existing session
  3. session_regenerate_id(true); // regenerates SESSIONID to prevent hijacking
  4. Doo::loadModel('users');
  5. Doo::loadModel('usession');
  6. Doo::loadModelAt('ausers', 'admin');
  7. Doo::loadClass('user');
  8. Doo::loadModel('uprofile');
  9. class Auth
  10. {
  11. private $users, $usession, $user, $uinfo, $ausers, $profile;
  12. public function __construct()
  13. {
  14. $this->users = new Users();
  15. $this->usession = new Usession();
  16. $this->user = new User();
  17. $this->ausers = new AUsers();
  18. $this->profile = new Uprofile();
  19. }
  20. private function __setcookie($key, $value)
  21. {
  22. setcookie($this->cookiePre . $key, $value, 0, '/', $this->siteUrl, 0);
  23. }
  24. public function login($uname, $upasswd)
  25. {
  26. $uinfo = $this->checkLogin($uname, $upasswd);
  27. if (isset($uinfo['uid'])) {
  28. $this->uinfo = $uinfo;
  29. return TRUE;
  30. } else {
  31. return FALSE;
  32. }
  33. }
  34. public function loginWithUserName($uname)
  35. {
  36. $uinfo = $this->checkLoginWithUserName($uname);
  37. if (isset($uinfo['uid'])) {
  38. $this->uinfo = $uinfo;
  39. return TRUE;
  40. } else {
  41. return FALSE;
  42. }
  43. }
  44. public function checkLoginWithUserName($uemail)
  45. {
  46. return $this->user->loginWithUserName($uemail);
  47. }
  48. public function getUinfo()
  49. {
  50. return $this->uinfo;
  51. }
  52. public function getUid()
  53. {
  54. if (isset($_SESSION['uid']) && $_SESSION['uid']) {
  55. return $_SESSION['uid'];
  56. } else {
  57. return FALSE;
  58. }
  59. }
  60. public function getUemail()
  61. {
  62. if (isset($_SESSION['uemail']) && $_SESSION['uemail']) {
  63. return $_SESSION['uemail'];
  64. } else {
  65. return 0;
  66. }
  67. }
  68. public function setUid($uid)
  69. {
  70. return $_SESSION['uid'] = $uid;
  71. }
  72. public function setVerifyMobile($array = array('mobile' => 0, 'code' => 0))
  73. {
  74. $_SESSION['verifymobile'] = $array;
  75. }
  76. public function getVerifyMobile()
  77. {
  78. if (isset($_SESSION['verifymobile']) && $_SESSION['verifymobile']) {
  79. return $_SESSION['verifymobile'];
  80. } else {
  81. return FALSE;
  82. }
  83. }
  84. public function setUemail($uemail)
  85. {
  86. return $_SESSION['uemail'] = $uemail;
  87. }
  88. public function getAvatar($uid)
  89. {
  90. // $dir1 = ceil($uid / 10000);
  91. // $dir2 = ceil($uid % 10000 / 1000);
  92. // $url = 'http://sso.smartcost.com.cn/' . 'data/avatar/' . $dir1 . '/' . $dir2 . '/' . $uid . '/';
  93. // $avatar = array('180' => $url . '180x180.jpg', '90' => $url . '90x90.jpg', '45' => $url . '45x45.jpg', '30' => $url . '30x30.jpg');
  94. // return $avatar;
  95. $valArray = $this->profile->getOne(array('where' => 'userid=?', 'param' => array($uid), 'asArray' => TRUE));
  96. return Doo::conf()->APP_URL . $valArray['avatar'];
  97. }
  98. public function checkLogin($uemail, $upasswd)
  99. {
  100. return $this->user->login($uemail, $upasswd);
  101. }
  102. public function logout()
  103. {
  104. session_destroy();
  105. setcookie('token', '-1', 0, '/', 'jl.local', FALSE, TRUE);
  106. }
  107. public function checkauth()
  108. {
  109. //TODO 启用SESSION变量避免重复查询数据库
  110. if (isset($_COOKIE['M0s5Yi_yn_k']) && isset($_COOKIE['M0s5Yi_yn_v'])) {
  111. $uname = $this->decryptCookie($_COOKIE['M0s5Yi_yn_k']);
  112. $passwd = $this->decryptCookie($_COOKIE['M0s5Yi_yn_v']);
  113. if ($uname && $passwd) {
  114. return TRUE;
  115. } else {
  116. return FALSE;
  117. }
  118. } else {
  119. return FALSE;
  120. }
  121. }
  122. function isLoggedIn()
  123. {
  124. if (isset($_SESSION['token']) && isset($_COOKIE['token'])) {
  125. if ($_SESSION['token'] != $_COOKIE['token']) {
  126. return TRUE;
  127. }
  128. }
  129. return FALSE;
  130. }
  131. public function getUname()
  132. {
  133. //TODO 启用SESSION变量避免重复查询数据库
  134. if (isset($_COOKIE['M0s5Yi_yn_k']) && isset($_COOKIE['M0s5Yi_yn_v'])) {
  135. $uname = $this->decryptCookie($_COOKIE['M0s5Yi_yn_k']);
  136. $passwd = $this->decryptCookie($_COOKIE['M0s5Yi_yn_v']);
  137. if ($uname && $passwd) {
  138. return $uname;
  139. } else {
  140. return FALSE;
  141. }
  142. } else {
  143. return FALSE;
  144. }
  145. }
  146. private function encryptCookie($value)
  147. {
  148. if (!$value) {
  149. return false;
  150. }
  151. $key = '290234lk23jk23djLHSWCs92s';
  152. $text = $value;
  153. $iv_size = mcrypt_get_iv_size(MCRYPT_RIJNDAEL_256, MCRYPT_MODE_ECB);
  154. $iv = mcrypt_create_iv($iv_size, MCRYPT_RAND);
  155. $crypttext = mcrypt_encrypt(MCRYPT_RIJNDAEL_256, $key, $text, MCRYPT_MODE_ECB, $iv);
  156. return trim(base64_encode($crypttext)); //encode for cookie
  157. }
  158. private function decryptCookie($value)
  159. {
  160. if (!$value) {
  161. return false;
  162. }
  163. $key = '290234lk23jk23djLHSWCs92s';
  164. $crypttext = base64_decode($value); //decode cookie
  165. $iv_size = mcrypt_get_iv_size(MCRYPT_RIJNDAEL_256, MCRYPT_MODE_ECB);
  166. $iv = mcrypt_create_iv($iv_size, MCRYPT_RAND);
  167. $decrypttext = mcrypt_decrypt(MCRYPT_RIJNDAEL_256, $key, $crypttext, MCRYPT_MODE_ECB, $iv);
  168. return trim($decrypttext);
  169. }
  170. }
  171. ?>