|
|
@@ -0,0 +1,683 @@
|
|
|
+<?php
|
|
|
+
|
|
|
+class client {
|
|
|
+
|
|
|
+ private $ps_api_url, $ps_auth_key, $ps_vsersion;
|
|
|
+
|
|
|
+ /**
|
|
|
+ * 析构函数
|
|
|
+ * @param $ps_api_url 接口域名
|
|
|
+ * @param $ps_auth_key 加密密匙
|
|
|
+ */
|
|
|
+ public function __construct($ps_api_url = '127.0.0.1', $ps_auth_key = '', $ps_vsersion = '1') {
|
|
|
+ $this->ps_api_url = $ps_api_url;
|
|
|
+ $this->ps_auth_key = $ps_auth_key;
|
|
|
+ $this->ps_vsersion = $ps_vsersion;
|
|
|
+ }
|
|
|
+
|
|
|
+ /**
|
|
|
+ * 用户注册
|
|
|
+ * @param string $username 用户名
|
|
|
+ * @param string $password 密码
|
|
|
+ * @param string $email email
|
|
|
+ * @param string $regip 注册ip
|
|
|
+ * @param string $random 密码随机数
|
|
|
+ * @return int {-1:用户名已经存在 ;-2:email已存在;-3:email格式错误;-4:用户名禁止注册;-5:邮箱禁止注册；int(uid):成功}
|
|
|
+ */
|
|
|
+ public function ps_member_register($username, $password, $email, $regip = '', $random = '') {
|
|
|
+ if (!$this->_is_email($email)) {
|
|
|
+ return -3;
|
|
|
+ }
|
|
|
+
|
|
|
+ return $this->_ps_send('register', array('username' => $username, 'password' => $password, 'email' => $email, 'regip' => $regip, 'random' => $random));
|
|
|
+ }
|
|
|
+
|
|
|
+ /**
|
|
|
+ * 用户移动端注册
|
|
|
+ * @param string $username 用户名
|
|
|
+ * @param string $password 密码
|
|
|
+ * @param string $mobile mobile
|
|
|
+ * @param string $regip 注册ip
|
|
|
+ * @param string $random 密码随机数
|
|
|
+ * @return int {-1:用户名已经存在 ;-2:mobile已存在;-3:mobile格式错误;-4:用户名禁止注册;-5:手机禁止注册；int(uid):成功}
|
|
|
+ */
|
|
|
+ public function ps_member_mobile_register($username, $password, $mobile, $regip = '', $random = '') {
|
|
|
+ if (!$this->_is_mobile($mobile)) {
|
|
|
+ return -3;
|
|
|
+ }
|
|
|
+
|
|
|
+ return $this->_ps_send('mobileregister', array('username' => $username, 'password' => $password, 'mobile' => $mobile, 'regip' => $regip, 'random' => $random));
|
|
|
+ }
|
|
|
+
|
|
|
+ /**
|
|
|
+ * 用户登陆
|
|
|
+ * @param string $username 用户名
|
|
|
+ * @param string $password 密码
|
|
|
+ * @param int $isemail email
|
|
|
+ * @return int {-2;密码错误;-1:用户名不存在;array(userinfo):用户信息}
|
|
|
+ */
|
|
|
+ public function zhsso_member_login($username, $password, $isemail = 0) {
|
|
|
+ if ($isemail) {
|
|
|
+ if (!$this->_is_email($username)) {
|
|
|
+ return -3;
|
|
|
+ }
|
|
|
+ $return = $this->_ps_send('login', array('email' => $username, 'password' => $password));
|
|
|
+ } else {
|
|
|
+ $return = $this->_ps_send('login', array('username' => $username, 'userpasswd' => $password));
|
|
|
+ }
|
|
|
+ return $return;
|
|
|
+ }
|
|
|
+
|
|
|
+ /**
|
|
|
+ * 同步登陆
|
|
|
+ * @param string $uid
|
|
|
+ * @return string javascript用户同步登陆js
|
|
|
+ */
|
|
|
+ public function ps_member_synlogin($uid) {
|
|
|
+ $uid = intval($uid);
|
|
|
+ return $this->_ps_send('synlogin', array('uid' => $uid));
|
|
|
+ }
|
|
|
+
|
|
|
+ /**
|
|
|
+ * 同步退出
|
|
|
+ * @param string $uid
|
|
|
+ * @return string javascript用户同步退出js
|
|
|
+ */
|
|
|
+ public function ps_member_synlogout() {
|
|
|
+ return $this->_ps_send('synlogout', array());
|
|
|
+ }
|
|
|
+
|
|
|
+ /**
|
|
|
+ * 编辑用户
|
|
|
+ * @param string $username 用户名
|
|
|
+ * @param string $email email
|
|
|
+ * @param string $password 旧密码
|
|
|
+ * @param string $newpassword 新密码
|
|
|
+ * @param int $uid phpsso用户uid
|
|
|
+ * @param string $random 密码随机数
|
|
|
+ * @return int {-1:用户不存在;-2:旧密码错误;-3:email已经存在 ;-4:email格式错误;1:成功;0:未作修改}
|
|
|
+ */
|
|
|
+ public function zhsso_member_edit($uid = '', $password = '', $newpassword = '', $useranswer = '') {
|
|
|
+/// if ($email && !$this->_is_email($email)) {
|
|
|
+// return -4;
|
|
|
+// }
|
|
|
+ // TODO:增加判断输出返回值
|
|
|
+ return $this->_ps_send('edit', array('uid' => $uid, 'password' => $password, 'newpassword' => $newpassword, 'useranswer' => $useranswer));
|
|
|
+ }
|
|
|
+
|
|
|
+ public function setPayWay($uid, $idcards, $alipay, $tenpay) {
|
|
|
+ return $this->_ps_send('payway', array('uid' => $uid, 'idbank' => $idcards, 'alipay' => $alipay, 'tenpay' => $tenpay));
|
|
|
+ }
|
|
|
+
|
|
|
+ /**
|
|
|
+ * 删除用户头像
|
|
|
+ * @param int $uid phpsso用户uid
|
|
|
+ * @return int {1:成功;0:失败}
|
|
|
+ */
|
|
|
+ public function ps_deleteavatar($uid) {
|
|
|
+ return $this->_ps_send('deleteavatar', array('uid' => $uid));
|
|
|
+ }
|
|
|
+
|
|
|
+ /**
|
|
|
+ * 获取用户信息
|
|
|
+ * @param $mix 用户id/用户名/email
|
|
|
+ * @param $type {1:用户id;2:用户名;3:email}
|
|
|
+ * @return $mix {-1:用户不存在;userinfo:用户信息}
|
|
|
+ */
|
|
|
+ public function ps_get_member_info($mix, $type = 1) {
|
|
|
+ if ($type == 1) {
|
|
|
+ $userinfo = $this->_ps_send('getuserinfo', array('uid' => $mix));
|
|
|
+ } elseif ($type == 2) {
|
|
|
+ $userinfo = $this->_ps_send('getuserinfo', array('username' => $mix));
|
|
|
+ } elseif ($type == 3) {
|
|
|
+ if (!$this->_is_email($mix)) {
|
|
|
+ return -4;
|
|
|
+ }
|
|
|
+ $userinfo = $this->_ps_send('getuserinfo', array('email' => $mix));
|
|
|
+ }
|
|
|
+ if ($userinfo) {
|
|
|
+ return $userinfo;
|
|
|
+ } else {
|
|
|
+ return -1;
|
|
|
+ }
|
|
|
+ }
|
|
|
+
|
|
|
+ /**
|
|
|
+ * 删除用户
|
|
|
+ * @param mix {1:用户id;2:用户名;3:email} 如果是用户id可以为数组
|
|
|
+ * @return int {-1:用户不存在;1:删除成功}
|
|
|
+ */
|
|
|
+ public function ps_delete_member($mix, $type = 1) {
|
|
|
+ if ($type == 1) {
|
|
|
+ $res = $this->_ps_send('delete', array('uid' => $mix));
|
|
|
+ } elseif ($type == 2) {
|
|
|
+ $res = $this->_ps_send('delete', array('username' => $mix));
|
|
|
+ } elseif ($type == 3) {
|
|
|
+ if (!$this->_is_email($mix)) {
|
|
|
+ return -4;
|
|
|
+ }
|
|
|
+ $res = $this->_ps_send('delete', array('email' => $mix));
|
|
|
+ }
|
|
|
+ return $res;
|
|
|
+ }
|
|
|
+
|
|
|
+ /**
|
|
|
+ * 检查用户是否可以注册
|
|
|
+ * @param string $username
|
|
|
+ * @return int {-4：用户名禁止注册;-1:用户名已经存在 ;1:成功}
|
|
|
+ */
|
|
|
+ public function ps_checkname($username) {
|
|
|
+ return $this->_ps_send('checkname', array('username' => $username));
|
|
|
+ }
|
|
|
+
|
|
|
+ /**
|
|
|
+ * 检查邮箱是否可以注册
|
|
|
+ * @param string $email
|
|
|
+ * @return int {-1:email已经存在 ;-5:邮箱禁止注册;1:成功}
|
|
|
+ */
|
|
|
+ public function ps_checkemail($email) {
|
|
|
+ return $this->_ps_send('checkemail', array('email' => $email));
|
|
|
+ }
|
|
|
+
|
|
|
+ /**
|
|
|
+ * 获取用户信息通过COOKIE UID
|
|
|
+ */
|
|
|
+ public function zhsso_getuserinfo() {
|
|
|
+ $uid = $this->authcode($_COOKIE[Doo::conf()->COOKIEPRE_WK . '_userid']);
|
|
|
+ return $this->_ps_send('getuserinfo', array('uid' => $uid));
|
|
|
+ }
|
|
|
+
|
|
|
+ /**
|
|
|
+ * 获取应用列表信息
|
|
|
+ */
|
|
|
+ public function zhsso_getUserbyName($uname) {
|
|
|
+ return $this->_ps_send('getuserinfo', array('username' => $uname));
|
|
|
+ }
|
|
|
+
|
|
|
+ /**
|
|
|
+ * 获取积分兑换比例列表
|
|
|
+ */
|
|
|
+ public function ps_getcreditlist() {
|
|
|
+ return $this->_ps_send('getcredit', array());
|
|
|
+ }
|
|
|
+
|
|
|
+ /**
|
|
|
+ * 兑换积分
|
|
|
+ * 用于何其他应用之间积分兑换
|
|
|
+ * @param int $uid phpssouid
|
|
|
+ * @param int $from 本系统积分类型id
|
|
|
+ * @param int $toappid 目标系统应用appid
|
|
|
+ * @param int $to 目标系统积分类型id
|
|
|
+ * @param int $credit 本系统扣除积分数
|
|
|
+ * @return bool {1:成功;0:失败}
|
|
|
+ */
|
|
|
+ public function ps_changecredit($uid, $from, $toappid, $to, $credit) {
|
|
|
+ return $this->_ps_send('changecredit', array('uid' => $uid, 'from' => $from, 'toappid' => $toappid, 'to' => $to, 'credit' => $credit));
|
|
|
+ }
|
|
|
+
|
|
|
+ /**
|
|
|
+ * 根据phpsso uid获取头像url
|
|
|
+ * @param int $uid 用户id
|
|
|
+ * @return array 四个尺寸用户头像数组
|
|
|
+ */
|
|
|
+ public function ps_getavatar($uid) {
|
|
|
+ $dir1 = ceil($uid / 10000);
|
|
|
+ $dir2 = ceil($uid % 10000 / 1000);
|
|
|
+ $url = $this->ps_api_url . 'data/avatar/' . $dir1 . '/' . $dir2 . '/' . $uid . '/';
|
|
|
+ $avatar = array('180' => $url . '180x180.jpg', '90' => $url . '90x90.jpg', '45' => $url . '45x45.jpg', '30' => $url . '30x30.jpg');
|
|
|
+ return $avatar;
|
|
|
+ }
|
|
|
+
|
|
|
+ /**
|
|
|
+ * 获取上传头像flash的html代码
|
|
|
+ * @param int $uid 用户id
|
|
|
+ */
|
|
|
+ public function ps_getavatar_upload_html($uid) {
|
|
|
+ $auth_data = $this->authcode($uid, 'ENCODE');
|
|
|
+// echo $auth_data;
|
|
|
+// list($a, $encodestr) = explode('=', $auth_data);
|
|
|
+ $upurl = base64_encode($this->ps_api_url . 'api/uploadavatar/' . rawurlencode($auth_data));
|
|
|
+// $upurl = base64_encode($this->ps_api_url . '/index.php?m=phpsso&c=index&a=uploadavatar&auth_data=' . $auth_data);
|
|
|
+ $str = <<<EOF
|
|
|
+ <div id="phpsso_uploadavatar_flash"></div>
|
|
|
+ <script language="javascript" type="text/javascript" src="{$this->ps_api_url}global/js/swfobject.js"></script>
|
|
|
+ <script type="text/javascript">
|
|
|
+ var flashvars = {
|
|
|
+ 'upurl':"{$upurl}&callback=return_avatar&"
|
|
|
+ };
|
|
|
+ var params = {
|
|
|
+ 'align':'middle',
|
|
|
+ 'play':'true',
|
|
|
+ 'loop':'false',
|
|
|
+ 'scale':'showall',
|
|
|
+ 'wmode':'window',
|
|
|
+ 'devicefont':'true',
|
|
|
+ 'id':'Main',
|
|
|
+ 'bgcolor':'#ffffff',
|
|
|
+ 'name':'Main',
|
|
|
+ 'allowscriptaccess':'always'
|
|
|
+ };
|
|
|
+ var attributes = {
|
|
|
+
|
|
|
+ };
|
|
|
+ swfobject.embedSWF("{$this->ps_api_url}global/swf/main.swf", "phpsso_uploadavatar_flash", "490", "434", "9.0.0","{$this->ps_api_url}global/swf/expressInstall.swf", flashvars, params, attributes);
|
|
|
+
|
|
|
+ function return_avatar(data) {
|
|
|
+ if(data == 1) {
|
|
|
+ window.location.reload();
|
|
|
+ }
|
|
|
+ }
|
|
|
+ </script>
|
|
|
+EOF;
|
|
|
+ return $str;
|
|
|
+ }
|
|
|
+
|
|
|
+ /**
|
|
|
+ * 字符串加密、解密函数
|
|
|
+ *
|
|
|
+ *
|
|
|
+ * @param string $txt 字符串
|
|
|
+ * @param string $operation ENCODE为加密，DECODE为解密，可选参数，默认为ENCODE，
|
|
|
+ * @param string $key 密钥：数字、字母、下划线
|
|
|
+ * @param string $expiry 过期时间
|
|
|
+ * @return string
|
|
|
+ */
|
|
|
+ function sys_auth($string, $operation = 'ENCODE', $key = '', $expiry = 0) {
|
|
|
+ $key_length = 4;
|
|
|
+ $key = md5($key != '' ? $key : $this->ps_auth_key);
|
|
|
+ $fixedkey = hash('md5', $key);
|
|
|
+ $egiskeys = md5(substr($fixedkey, 16, 16));
|
|
|
+ $runtokey = $key_length ? ($operation == 'ENCODE' ? substr(hash('md5', microtime(true)), -$key_length) : substr($string, 0, $key_length)) : '';
|
|
|
+ $keys = hash('md5', substr($runtokey, 0, 16) . substr($fixedkey, 0, 16) . substr($runtokey, 16) . substr($fixedkey, 16));
|
|
|
+ $string = $operation == 'ENCODE' ? sprintf('%010d', $expiry ? $expiry + time() : 0) . substr(md5($string . $egiskeys), 0, 16) . $string : base64_decode(substr($string, $key_length));
|
|
|
+
|
|
|
+ $i = 0;
|
|
|
+ $result = '';
|
|
|
+ $string_length = strlen($string);
|
|
|
+ for ($i = 0; $i < $string_length; $i++) {
|
|
|
+ $result .= chr(ord($string{$i}) ^ ord($keys{$i % 32}));
|
|
|
+ }
|
|
|
+ if ($operation == 'ENCODE') {
|
|
|
+ return $runtokey . str_replace('=', '', base64_encode($result));
|
|
|
+ } else {
|
|
|
+ if ((substr($result, 0, 10) == 0 || substr($result, 0, 10) - time() > 0) && substr($result, 10, 16) == substr(md5(substr($result, 26) . $egiskeys), 0, 16)) {
|
|
|
+ return substr($result, 26);
|
|
|
+ } else {
|
|
|
+ return '';
|
|
|
+ }
|
|
|
+ }
|
|
|
+ }
|
|
|
+
|
|
|
+ /**
|
|
|
+ * 将数组转换为字符串
|
|
|
+ *
|
|
|
+ * @param array $data 数组
|
|
|
+ * @param bool $isformdata 如果为0，则不使用new_stripslashes处理，可选参数，默认为1
|
|
|
+ * @return string 返回字符串，如果，data为空，则返回空
|
|
|
+ */
|
|
|
+ public function array2string($data, $isformdata = 1) {
|
|
|
+ if ($data == '')
|
|
|
+ return '';
|
|
|
+ if ($isformdata)
|
|
|
+ $data = new_stripslashes($data);
|
|
|
+ return var_export($data, TRUE);
|
|
|
+ }
|
|
|
+
|
|
|
+ public function auth_data($data) {
|
|
|
+ $s = $sep = '';
|
|
|
+// foreach ($data as $k => $v) {
|
|
|
+// if (is_array($v)) {
|
|
|
+// $s2 = $sep2 = '';
|
|
|
+// foreach ($v as $k2 => $v2) {
|
|
|
+// $s2 .= "$sep2{$k}[$k2]=" . $this->_ps_stripslashes($v2);
|
|
|
+// $sep2 = '&';
|
|
|
+// }
|
|
|
+// $s .= $sep . $s2;
|
|
|
+// } else {
|
|
|
+// $s .= "$sep$k=" . $this->_ps_stripslashes($v);
|
|
|
+// }
|
|
|
+// $sep = '&';
|
|
|
+// }
|
|
|
+ $s = http_build_query($data);
|
|
|
+ $auth_s = 'data=' . urlencode($this->authcode($s, 'ENCODE'));
|
|
|
+ return $auth_s;
|
|
|
+ }
|
|
|
+
|
|
|
+ /**
|
|
|
+ * 发送数据
|
|
|
+ * @param $action 操作
|
|
|
+ * @param $data 数据
|
|
|
+ */
|
|
|
+ private function _ps_send($action, $data = null) {
|
|
|
+ return $this->_ps_post($this->ps_api_url . "api/" . $action, 500000, $this->auth_data($data));
|
|
|
+ }
|
|
|
+
|
|
|
+ /**
|
|
|
+ * post数据
|
|
|
+ * @param string $url post的url
|
|
|
+ * @param int $limit 返回的数据的长度
|
|
|
+ * @param string $post post数据，字符串形式username='dalarge'&password='123456'
|
|
|
+ * @param string $cookie 模拟 cookie，字符串形式username='dalarge'&password='123456'
|
|
|
+ * @param string $ip ip地址
|
|
|
+ * @param int $timeout 连接超时时间
|
|
|
+ * @param bool $block 是否为阻塞模式
|
|
|
+ * @return string 返回字符串
|
|
|
+ */
|
|
|
+ private function _ps_post($url, $limit = 0, $post = '', $cookie = '', $ip = '', $timeout = 15, $block = true) {
|
|
|
+ $return = '';
|
|
|
+ $matches = parse_url($url);
|
|
|
+ $host = $matches['host'];
|
|
|
+// $path = $matches['path'] ? $matches['path'] . ($matches['query'] ? '?' . $matches['query'] : '') : '/';
|
|
|
+ $path = $matches['path'] ? $matches['path'] : '/';
|
|
|
+ $port = !empty($matches['port']) ? $matches['port'] : 80;
|
|
|
+ $siteurl = $this->_get_url();
|
|
|
+ if ($post) {
|
|
|
+ $out = "POST $path HTTP/1.1\r\n";
|
|
|
+ $out .= "Accept: */*\r\n";
|
|
|
+ $out .= "Referer: " . $siteurl . "\r\n";
|
|
|
+ $out .= "Accept-Language: zh-cn\r\n";
|
|
|
+ $out .= "Content-Type: application/x-www-form-urlencoded\r\n";
|
|
|
+ $out .= "User-Agent: $_SERVER[HTTP_USER_AGENT]\r\n";
|
|
|
+ $out .= "Host: $host\r\n";
|
|
|
+ $out .= 'Content-Length: ' . strlen($post) . "\r\n";
|
|
|
+ $out .= "Connection: Close\r\n";
|
|
|
+ $out .= "Cache-Control: no-cache\r\n";
|
|
|
+ $out .= "Cookie: $cookie\r\n\r\n";
|
|
|
+ $out .= $post;
|
|
|
+ } else {
|
|
|
+ $out = "GET $path HTTP/1.1\r\n";
|
|
|
+ $out .= "Accept: */*\r\n";
|
|
|
+ $out .= "Referer: " . $siteurl . "\r\n";
|
|
|
+ $out .= "Accept-Language: zh-cn\r\n";
|
|
|
+ $out .= "User-Agent: $_SERVER[HTTP_USER_AGENT]\r\n";
|
|
|
+ $out .= "Host: $host\r\n";
|
|
|
+ $out .= "Connection: Close\r\n";
|
|
|
+ $out .= "Cookie: $cookie\r\n\r\n";
|
|
|
+ }
|
|
|
+ $fp = @fsockopen(($ip ? $ip : $host), $port, $errno, $errstr, $timeout);
|
|
|
+ if (!$fp)
|
|
|
+ return '';
|
|
|
+
|
|
|
+ stream_set_blocking($fp, $block);
|
|
|
+ stream_set_timeout($fp, $timeout);
|
|
|
+ @fwrite($fp, $out);
|
|
|
+ $status = stream_get_meta_data($fp);
|
|
|
+
|
|
|
+ if ($status['timed_out'])
|
|
|
+ return '';
|
|
|
+ while (!feof($fp)) {
|
|
|
+ if (($header = @fgets($fp)) && ($header == "\r\n" || $header == "\n"))
|
|
|
+ break;
|
|
|
+ }
|
|
|
+
|
|
|
+ $stop = false;
|
|
|
+ while (!feof($fp) && !$stop) {
|
|
|
+ $data = fread($fp, ($limit == 0 || $limit > 8192 ? 8192 : $limit));
|
|
|
+ $return .= $data;
|
|
|
+ if ($limit) {
|
|
|
+ $limit -= strlen($data);
|
|
|
+ $stop = $limit <= 0;
|
|
|
+ }
|
|
|
+ }
|
|
|
+ @fclose($fp);
|
|
|
+
|
|
|
+ //部分虚拟主机返回数值有误，暂不确定原因，过滤返回数据格式
|
|
|
+ $return_arr = explode("\n", $return);
|
|
|
+ if (isset($return_arr[1])) {
|
|
|
+ $return = trim($return_arr[1]);
|
|
|
+ }
|
|
|
+ unset($return_arr);
|
|
|
+
|
|
|
+ return $return;
|
|
|
+ }
|
|
|
+
|
|
|
+ /**
|
|
|
+ * 过滤字符串
|
|
|
+ * @param $string
|
|
|
+ */
|
|
|
+ private function _ps_stripslashes($string) {
|
|
|
+ !defined('MAGIC_QUOTES_GPC') && define('MAGIC_QUOTES_GPC', get_magic_quotes_gpc());
|
|
|
+ if (MAGIC_QUOTES_GPC) {
|
|
|
+ return stripslashes($string);
|
|
|
+ } else {
|
|
|
+ return $string;
|
|
|
+ }
|
|
|
+ }
|
|
|
+
|
|
|
+ /**
|
|
|
+ * 获取当前页面完整URL地址
|
|
|
+ */
|
|
|
+ private function _get_url() {
|
|
|
+ $sys_protocal = isset($_SERVER['SERVER_PORT']) && $_SERVER['SERVER_PORT'] == '443' ? 'https://' : 'http://';
|
|
|
+ $php_self = $_SERVER['PHP_SELF'] ? $this->_safe_replace($_SERVER['PHP_SELF']) : $this->_safe_replace($_SERVER['SCRIPT_NAME']);
|
|
|
+ $path_info = isset($_SERVER['PATH_INFO']) ? $this->_safe_replace($_SERVER['PATH_INFO']) : '';
|
|
|
+ $relate_url = isset($_SERVER['REQUEST_URI']) ? $this->_safe_replace($_SERVER['REQUEST_URI']) : $php_self . (isset($_SERVER['QUERY_STRING']) ? '?' . $this->_safe_replace($_SERVER['QUERY_STRING']) : $path_info);
|
|
|
+ return $sys_protocal . (isset($_SERVER['HTTP_HOST']) ? $_SERVER['HTTP_HOST'] : '') . $relate_url;
|
|
|
+ }
|
|
|
+
|
|
|
+ /**
|
|
|
+ * 安全过滤函数
|
|
|
+ *
|
|
|
+ * @param $string
|
|
|
+ * @return string
|
|
|
+ */
|
|
|
+ private function _safe_replace($string) {
|
|
|
+ $string = str_replace('%20', '', $string);
|
|
|
+ $string = str_replace('%27', '', $string);
|
|
|
+ $string = str_replace('%2527', '', $string);
|
|
|
+ $string = str_replace('*', '', $string);
|
|
|
+ $string = str_replace('"', '"', $string);
|
|
|
+ $string = str_replace("'", '', $string);
|
|
|
+ $string = str_replace('"', '', $string);
|
|
|
+ $string = str_replace(';', '', $string);
|
|
|
+ $string = str_replace('<', '<', $string);
|
|
|
+ $string = str_replace('>', '>', $string);
|
|
|
+ $string = str_replace("{", '', $string);
|
|
|
+ $string = str_replace('}', '', $string);
|
|
|
+ $string = str_replace('\\', '', $string);
|
|
|
+ return $string;
|
|
|
+ }
|
|
|
+
|
|
|
+ /**
|
|
|
+ * 判断email格式是否正确
|
|
|
+ * @param $string email
|
|
|
+ */
|
|
|
+ private function _is_email($email) {
|
|
|
+ return strlen($email) > 6 && preg_match("/^[\w\-\.]+@[\w\-\.]+(\.\w+)+$/", $email);
|
|
|
+ }
|
|
|
+
|
|
|
+ /**
|
|
|
+ * 判断email格式是否正确
|
|
|
+ * @param $string email
|
|
|
+ */
|
|
|
+ public function getUserName() {
|
|
|
+ $username = self::get_cookie('_username');
|
|
|
+ if ($username) {
|
|
|
+ return $username;
|
|
|
+ } else {
|
|
|
+ return FALSE;
|
|
|
+ }
|
|
|
+ }
|
|
|
+
|
|
|
+ /**
|
|
|
+ * 判断email格式是否正确
|
|
|
+ * @param $string email
|
|
|
+ */
|
|
|
+ public function getAuth() {
|
|
|
+ $auth = self::get_cookie('auth');
|
|
|
+ if ($auth) {
|
|
|
+ return $auth;
|
|
|
+ } else {
|
|
|
+ return FALSE;
|
|
|
+ }
|
|
|
+ }
|
|
|
+
|
|
|
+ /**
|
|
|
+ * 判断email格式是否正确
|
|
|
+ * @param $string email
|
|
|
+ */
|
|
|
+ public function getUserID() {
|
|
|
+ $userid = self::get_cookie('_userid');
|
|
|
+ if ($userid) {
|
|
|
+ return $userid;
|
|
|
+ } else {
|
|
|
+ return FALSE;
|
|
|
+ }
|
|
|
+ }
|
|
|
+
|
|
|
+ public function get_cookie($var, $default = '') {
|
|
|
+ $varvar = Doo::conf()->COOKIEPRE_WK . $var;
|
|
|
+ return isset($_COOKIE[$varvar]) ? $this->authcode($_COOKIE[$varvar], 'DECODE') : $default;
|
|
|
+ }
|
|
|
+
|
|
|
+ /**
|
|
|
+ *
|
|
|
+ * 网络传输、cookie加密函数
|
|
|
+ * @param type $string
|
|
|
+ * @param type $operation
|
|
|
+ * @param type $key
|
|
|
+ * @param type $expiry
|
|
|
+ * @return string
|
|
|
+ */
|
|
|
+ function authcode($string, $operation = 'DECODE', $key = '', $expiry = 0) {
|
|
|
+ $ckey_length = 4;
|
|
|
+ $key = md5($key != '' ? $key : Doo::conf()->AUTHKEY);
|
|
|
+ $keya = md5(substr($key, 0, 16));
|
|
|
+ $keyb = md5(substr($key, 16, 16));
|
|
|
+ $keyc = $ckey_length ? ($operation == 'DECODE' ? substr($string, 0, $ckey_length) : substr(md5(microtime()), -$ckey_length)) : '';
|
|
|
+
|
|
|
+ $cryptkey = $keya . md5($keya . $keyc);
|
|
|
+ $key_length = strlen($cryptkey);
|
|
|
+
|
|
|
+ $string = $operation == 'DECODE' ? base64_decode(substr($string, $ckey_length)) : sprintf('%010d', $expiry ? $expiry + time() : 0) . substr(md5($string . $keyb), 0, 16) . $string;
|
|
|
+ $string_length = strlen($string);
|
|
|
+
|
|
|
+ $result = '';
|
|
|
+ $box = range(0, 255);
|
|
|
+
|
|
|
+ $rndkey = array();
|
|
|
+ for ($i = 0; $i <= 255; $i++) {
|
|
|
+ $rndkey[$i] = ord($cryptkey[$i % $key_length]);
|
|
|
+ }
|
|
|
+
|
|
|
+ for ($j = $i = 0; $i < 256; $i++) {
|
|
|
+ $j = ($j + $box[$i] + $rndkey[$i]) % 256;
|
|
|
+ $tmp = $box[$i];
|
|
|
+ $box[$i] = $box[$j];
|
|
|
+ $box[$j] = $tmp;
|
|
|
+ }
|
|
|
+
|
|
|
+ for ($a = $j = $i = 0; $i < $string_length; $i++) {
|
|
|
+ $a = ($a + 1) % 256;
|
|
|
+ $j = ($j + $box[$a]) % 256;
|
|
|
+ $tmp = $box[$a];
|
|
|
+ $box[$a] = $box[$j];
|
|
|
+ $box[$j] = $tmp;
|
|
|
+ $result .= chr(ord($string[$i]) ^ ($box[($box[$a] + $box[$j]) % 256]));
|
|
|
+ }
|
|
|
+
|
|
|
+ if ($operation == 'DECODE') {
|
|
|
+ if ((substr($result, 0, 10) == 0 || substr($result, 0, 10) - time() > 0) && substr($result, 10, 16) == substr(md5(substr($result, 26) . $keyb), 0, 16)) {
|
|
|
+ return substr($result, 26);
|
|
|
+ } else {
|
|
|
+ return '';
|
|
|
+ }
|
|
|
+ } else {
|
|
|
+ return $keyc . str_replace('=', '', base64_encode($result));
|
|
|
+ }
|
|
|
+ }
|
|
|
+
|
|
|
+ public function logoutz() {
|
|
|
+// header('P3P: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"');
|
|
|
+ setcookie(Doo::conf()->COOKIEPRE_WK . 'auth', '', 0, '/', Doo::conf()->APP_URL, 0);
|
|
|
+ setcookie(Doo::conf()->COOKIEPRE_WK . '_username', '', 0, '/', Doo::conf()->APP_URL, 0);
|
|
|
+ setcookie(Doo::conf()->COOKIEPRE_WK . '_userid', '', 0, '/', Doo::conf()->APP_URL, 0);
|
|
|
+ }
|
|
|
+
|
|
|
+ /**
|
|
|
+ * 用户登陆
|
|
|
+ * @param string $username 用户名
|
|
|
+ * @param string $password 密码
|
|
|
+ * @param int $isemail email
|
|
|
+ * @return int {-2;密码错误;-1:用户名不存在;array(userinfo):用户信息}
|
|
|
+ */
|
|
|
+ public function ps_member_login($username, $password, $isemail = 0) {
|
|
|
+ if ($isemail) {
|
|
|
+ if (!$this->_is_email($username)) {
|
|
|
+ return -3;
|
|
|
+ }
|
|
|
+ $return = $this->_ps_send('login', array('email' => $username, 'password' => $password));
|
|
|
+ } else {
|
|
|
+ $return = $this->_ps_send('login', array('username' => $username, 'password' => $password));
|
|
|
+ }
|
|
|
+ return $return;
|
|
|
+ }
|
|
|
+
|
|
|
+// public function wksetcookit($username, $password, $isemail = 0) {
|
|
|
+// setcookie(Doo::conf()->COOKIEPRE_WK . 'auth', $client->authcode($ObjUserInfo[0]->id . "\t" . $this->clientIP(), 'ENCODE'), 0, '/', '192.168.1.140', 0);
|
|
|
+// setcookie(Doo::conf()->COOKIEPRE_WK . '_userid', $client->authcode($ObjUserInfo[0]->id, 'ENCODE'), 0, '/', '192.168.1.140', 0);
|
|
|
+// setcookie(Doo::conf()->COOKIEPRE_WK . '_username', $client->authcode($ObjUserInfo[0]->username, 'ENCODE'), 0, '/', '192.168.1.140', 0);
|
|
|
+// }
|
|
|
+
|
|
|
+ /**
|
|
|
+ * 用户登陆
|
|
|
+ * @param string $username 用户名
|
|
|
+ * @param string $password 密码
|
|
|
+ * @param int $isemail email
|
|
|
+ * @return int {-2;密码错误;-1:用户名不存在;array(userinfo):用户信息}
|
|
|
+ */
|
|
|
+ public function zhsso_member_bank($userid) {
|
|
|
+ if (empty($userid))
|
|
|
+ return false;
|
|
|
+ return $this->_ps_send('getBank', array('uid' => $userid));
|
|
|
+ }
|
|
|
+
|
|
|
+ /**
|
|
|
+ * 金额增加
|
|
|
+ * @param string $userid 用户唯一标示符
|
|
|
+ * @param string $m 操作金额
|
|
|
+ * @param int $appid 应用程序ID，标示操作来源{wenku,ask}
|
|
|
+ * @return int {0;金额增加失败;1:金额增加成功;}
|
|
|
+ */
|
|
|
+ public function zhsso_member_madd($userid, $m, $appid) {
|
|
|
+ if (empty($userid) || empty($m) || empty($appid))
|
|
|
+ return false;
|
|
|
+ return $this->_ps_send('madd', array('uid' => $userid, 'bank' => $m, 'appid' => $appid));
|
|
|
+ }
|
|
|
+
|
|
|
+ /**
|
|
|
+ * 金额减少
|
|
|
+ * @param string $userid 用户唯一标示符
|
|
|
+ * @param string $m 操作金额
|
|
|
+ * @param int $appid 应用程序ID，标示操作来源{wenku,ask}
|
|
|
+ * @return int {-1;金额不够减;0;金额减少失败;1:金额减少成功;}
|
|
|
+ */
|
|
|
+ public function zhsso_member_msub($userid, $m, $appid) {
|
|
|
+ if (empty($userid) || empty($m) || empty($appid))
|
|
|
+ return false;
|
|
|
+ return $this->_ps_send('msub', array('uid' => $userid, 'bank' => $m, 'appid' => $appid));
|
|
|
+ }
|
|
|
+
|
|
|
+
|
|
|
+ /**
|
|
|
+ * 发送微信公众号信息
|
|
|
+ * @param string $user 联系人 必填
|
|
|
+ * @param string $msg 内容 必填
|
|
|
+ * @param string $type 类型 可选，默认是图文
|
|
|
+ * @param string $title 图文标题 不选定text时必填
|
|
|
+ * @param string $url 图文链接 不选定text时必填
|
|
|
+ * @return int {-1:联系人（微信id）为空 ;-2:内容为空;-3:不选定text时标题为空;-4:不选定text时链接为空;-5:发送失败;1:发送成功}
|
|
|
+ */
|
|
|
+ public function SendMsg($user,$msg,$type='',$title='',$url=''){
|
|
|
+ if (empty($user) || empty($msg))
|
|
|
+ return false;
|
|
|
+ if($type != 'text'){
|
|
|
+ if (empty($title) || empty($url))
|
|
|
+ return false;
|
|
|
+ }
|
|
|
+ return $this->_ps_send('sendmsg', array('user' => $user, 'msg' => $msg, 'type' => $type, 'title' => $title, 'url' => $url));
|
|
|
+ }
|
|
|
+
|
|
|
+}
|
|
|
+
|
|
|
+?>
|
