ps_api_url = $ps_api_url; $this->ps_auth_key = $ps_auth_key; $this->ps_vsersion = $ps_vsersion; } /** * 用户注册 * @param string $username 用户名 * @param string $password 密码 * @param string $email email * @param string $regip 注册ip * @param string $random 密码随机数 * @return int {-1:用户名已经存在 ;-2:email已存在;-3:email格式错误;-4:用户名禁止注册;-5:邮箱禁止注册;int(uid):成功} */ public function ps_member_register($username, $password, $email, $regip = '', $random = '') { if (!$this->_is_email($email)) { return -3; } return $this->_ps_send('register', array('username' => $username, 'password' => $password, 'email' => $email, 'regip' => $regip, 'random' => $random)); } /** * 用户登陆 * @param string $username 用户名 * @param string $password 密码 * @param int $isemail email * @return int {-2;密码错误;-1:用户名不存在;array(userinfo):用户信息} */ public function zhsso_member_login($username, $password, $isemail = 0) { if ($isemail == 1) { if (!$this->_is_email($username)) { return -3; } $return = $this->_ps_send('login', array('email' => $username, 'userpasswd' => $password)); } else if($isemail == 2 ) { if (!$this->_is_mobile($username)) { return -3; } $return = $this->_ps_send('login', array('mobile' => $username, 'userpasswd' => $password)); } else { $return = $this->_ps_send('login', array('username' => $username, 'userpasswd' => $password)); } return $return; } /** * 获取用户信息通过COOKIE UID */ public function zhsso_getuserinfo_by_uid($uid=0) { return $this->_ps_send('getuserinfo', array('uid' => $uid)); } public function zhsso_checkauth($auth="") { return $this->_ps_send('checkauth', array('auth' => $auth)); } /** * 同步登陆 * @param string $uid * @return string javascript用户同步登陆js */ public function ps_member_synlogin($uid) { $uid = intval($uid); return $this->_ps_send('synlogin', array('uid' => $uid)); } /** * 同步退出 * @param string $uid * @return string javascript用户同步退出js */ public function ps_member_synlogout() { return $this->_ps_send('synlogout', array()); } /** * 编辑用户 * @param string $username 用户名 * @param string $email email * @param string $password 旧密码 * @param string $newpassword 新密码 * @param int $uid phpsso用户uid * @param string $random 密码随机数 * @return int {-1:用户不存在;-2:旧密码错误;-3:email已经存在 ;-4:email格式错误;1:成功;0:未作修改} */ public function zhsso_member_edit($uid = '', $password = '', $newpassword = '', $useranswer = '') { /// if ($email && !$this->_is_email($email)) { // return -4; // } // TODO:增加判断输出返回值 return $this->_ps_send('edit', array('uid' => $uid, 'password' => $password, 'newpassword' => $newpassword, 'useranswer' => $useranswer)); } public function setPayWay($uid, $idcards, $alipay, $tenpay) { return $this->_ps_send('payway', array('uid' => $uid, 'idbank' => $idcards, 'alipay' => $alipay, 'tenpay' => $tenpay)); } /** * 删除用户头像 * @param int $uid phpsso用户uid * @return int {1:成功;0:失败} */ public function ps_deleteavatar($uid) { return $this->_ps_send('deleteavatar', array('uid' => $uid)); } /** * 获取用户信息 * @param $mix 用户id/用户名/email * @param $type {1:用户id;2:用户名;3:email} * @return $mix {-1:用户不存在;userinfo:用户信息} */ public function ps_get_member_info($mix, $type = 1) { if ($type == 1) { $userinfo = $this->_ps_send('getuserinfo', array('uid' => $mix)); } elseif ($type == 2) { $userinfo = $this->_ps_send('getuserinfo', array('username' => $mix)); } elseif ($type == 3) { if (!$this->_is_email($mix)) { return -4; } $userinfo = $this->_ps_send('getuserinfo', array('email' => $mix)); } if ($userinfo) { return $userinfo; } else { return -1; } } function url_exists($url) { $h = get_headers($url); if (!$h || !isset($h[0])) return false; $status = $h[0]; return preg_match("/.*200\s{1}OK/i", $status) ? true : false; } /** * 删除用户 * @param mix {1:用户id;2:用户名;3:email} 如果是用户id可以为数组 * @return int {-1:用户不存在;1:删除成功} */ public function ps_delete_member($mix, $type = 1) { if ($type == 1) { $res = $this->_ps_send('delete', array('uid' => $mix)); } elseif ($type == 2) { $res = $this->_ps_send('delete', array('username' => $mix)); } elseif ($type == 3) { if (!$this->_is_email($mix)) { return -4; } $res = $this->_ps_send('delete', array('email' => $mix)); } return $res; } /** * 检查用户是否可以注册 * @param string $username * @return int {-4:用户名禁止注册;-1:用户名已经存在 ;1:成功} */ public function ps_checkname($username) { return $this->_ps_send('checkname', array('username' => $username)); } /** * 检查邮箱是否可以注册 * @param string $email * @return int {-1:email已经存在 ;-5:邮箱禁止注册;1:成功} */ public function ps_checkemail($email) { return $this->_ps_send('checkemail', array('email' => $email)); } /** * 获取应用列表信息 */ public function zhsso_getuserinfo() { $uid = $this->authcode($_COOKIE[Doo::conf()->COOKIEPRE_WK . '_userid']); return $this->_ps_send('getuserinfo', array('uid' => $uid)); } /** * 获取积分兑换比例列表 */ public function ps_getcreditlist() { return $this->_ps_send('getcredit', array()); } /** * 兑换积分 * 用于何其他应用之间积分兑换 * @param int $uid phpssouid * @param int $from 本系统积分类型id * @param int $toappid 目标系统应用appid * @param int $to 目标系统积分类型id * @param int $credit 本系统扣除积分数 * @return bool {1:成功;0:失败} */ public function ps_changecredit($uid, $from, $toappid, $to, $credit) { return $this->_ps_send('changecredit', array('uid' => $uid, 'from' => $from, 'toappid' => $toappid, 'to' => $to, 'credit' => $credit)); } /** * 根据phpsso uid获取头像url * @param int $uid 用户id * @return array 四个尺寸用户头像数组 */ public function ps_getavatar($uid) { $dir1 = ceil($uid / 10000); $dir2 = ceil($uid % 10000 / 1000); $url = $this->ps_api_url . 'data/avatar/' . $dir1 . '/' . $dir2 . '/' . $uid . '/'; $avatar = array('180' => $url . '180x180.jpg', '90' => $url . '90x90.jpg', '45' => $url . '45x45.jpg', '30' => $url . '30x30.jpg'); return $avatar; } /** * 获取上传头像flash的html代码 * @param int $uid 用户id */ public function ps_getavatar_upload_html($uid) { $auth_data = $this->authcode($uid, 'ENCODE'); // echo $auth_data; // list($a, $encodestr) = explode('=', $auth_data); $upurl = base64_encode($this->ps_api_url . 'api/uploadavatar/' . rawurlencode($auth_data)); // $upurl = base64_encode($this->ps_api_url . '/index.php?m=phpsso&c=index&a=uploadavatar&auth_data=' . $auth_data); $str = << EOF; return $str; } /** * 字符串加密、解密函数 * * * @param string $txt 字符串 * @param string $operation ENCODE为加密,DECODE为解密,可选参数,默认为ENCODE, * @param string $key 密钥:数字、字母、下划线 * @param string $expiry 过期时间 * @return string */ function sys_auth($string, $operation = 'ENCODE', $key = '', $expiry = 0) { $key_length = 4; $key = md5($key != '' ? $key : $this->ps_auth_key); $fixedkey = hash('md5', $key); $egiskeys = md5(substr($fixedkey, 16, 16)); $runtokey = $key_length ? ($operation == 'ENCODE' ? substr(hash('md5', microtime(true)), -$key_length) : substr($string, 0, $key_length)) : ''; $keys = hash('md5', substr($runtokey, 0, 16) . substr($fixedkey, 0, 16) . substr($runtokey, 16) . substr($fixedkey, 16)); $string = $operation == 'ENCODE' ? sprintf('%010d', $expiry ? $expiry + time() : 0) . substr(md5($string . $egiskeys), 0, 16) . $string : base64_decode(substr($string, $key_length)); $i = 0; $result = ''; $string_length = strlen($string); for ($i = 0; $i < $string_length; $i++) { $result .= chr(ord($string{$i}) ^ ord($keys{$i % 32})); } if ($operation == 'ENCODE') { return $runtokey . str_replace('=', '', base64_encode($result)); } else { if ((substr($result, 0, 10) == 0 || substr($result, 0, 10) - time() > 0) && substr($result, 10, 16) == substr(md5(substr($result, 26) . $egiskeys), 0, 16)) { return substr($result, 26); } else { return ''; } } } /** * 获取应用列表信息 */ public function zhsso_getUserbyName($uname) { return $this->_ps_send('getuserinfo', array('username' => $uname)); } /** * 将数组转换为字符串 * * @param array $data 数组 * @param bool $isformdata 如果为0,则不使用new_stripslashes处理,可选参数,默认为1 * @return string 返回字符串,如果,data为空,则返回空 */ public function array2string($data, $isformdata = 1) { if ($data == '') return ''; if ($isformdata) $data = new_stripslashes($data); return var_export($data, TRUE); } public function auth_data($data) { $s = $sep = ''; // foreach ($data as $k => $v) { // if (is_array($v)) { // $s2 = $sep2 = ''; // foreach ($v as $k2 => $v2) { // $s2 .= "$sep2{$k}[$k2]=" . $this->_ps_stripslashes($v2); // $sep2 = '&'; // } // $s .= $sep . $s2; // } else { // $s .= "$sep$k=" . $this->_ps_stripslashes($v); // } // $sep = '&'; // } $s = http_build_query($data); $auth_s = 'data=' . urlencode($this->authcode($s, 'ENCODE')); return $auth_s; } /** * 发送数据 * @param $action 操作 * @param $data 数据 */ private function _ps_send($action, $data = null) { return $this->_ps_post($this->ps_api_url . "api/" . $action, 500000, $this->auth_data($data)); } /** * post数据 * @param string $url post的url * @param int $limit 返回的数据的长度 * @param string $post post数据,字符串形式username='dalarge'&password='123456' * @param string $cookie 模拟 cookie,字符串形式username='dalarge'&password='123456' * @param string $ip ip地址 * @param int $timeout 连接超时时间 * @param bool $block 是否为阻塞模式 * @return string 返回字符串 */ private function _ps_post($url, $limit = 0, $post = '', $cookie = '', $ip = '', $timeout = 15, $block = true) { $return = ''; $matches = parse_url($url); $host = $matches['host']; // $path = $matches['path'] ? $matches['path'] . ($matches['query'] ? '?' . $matches['query'] : '') : '/'; $path = $matches['path'] ? $matches['path'] : '/'; $port = !empty($matches['port']) ? $matches['port'] : 80; $siteurl = $this->_get_url(); if ($post) { $out = "POST $path HTTP/1.1\r\n"; $out .= "Accept: */*\r\n"; $out .= "Referer: " . $siteurl . "\r\n"; $out .= "Accept-Language: zh-cn\r\n"; $out .= "Content-Type: application/x-www-form-urlencoded\r\n"; $out .= "User-Agent: $_SERVER[HTTP_USER_AGENT]\r\n"; $out .= "Host: $host\r\n"; $out .= 'Content-Length: ' . strlen($post) . "\r\n"; $out .= "Connection: Close\r\n"; $out .= "Cache-Control: no-cache\r\n"; $out .= "Cookie: $cookie\r\n\r\n"; $out .= $post; } else { $out = "GET $path HTTP/1.1\r\n"; $out .= "Accept: */*\r\n"; $out .= "Referer: " . $siteurl . "\r\n"; $out .= "Accept-Language: zh-cn\r\n"; $out .= "User-Agent: $_SERVER[HTTP_USER_AGENT]\r\n"; $out .= "Host: $host\r\n"; $out .= "Connection: Close\r\n"; $out .= "Cookie: $cookie\r\n\r\n"; } $fp = @fsockopen(($ip ? $ip : $host), $port, $errno, $errstr, $timeout); if (!$fp) return ''; stream_set_blocking($fp, $block); stream_set_timeout($fp, $timeout); @fwrite($fp, $out); $status = stream_get_meta_data($fp); if ($status['timed_out']) return ''; while (!feof($fp)) { if (($header = @fgets($fp)) && ($header == "\r\n" || $header == "\n")) break; } $stop = false; while (!feof($fp) && !$stop) { $data = fread($fp, ($limit == 0 || $limit > 8192 ? 8192 : $limit)); $return .= $data; if ($limit) { $limit -= strlen($data); $stop = $limit <= 0; } } @fclose($fp); //部分虚拟主机返回数值有误,暂不确定原因,过滤返回数据格式 $return_arr = explode("\n", $return); if (isset($return_arr[1])) { $return = trim($return_arr[1]); } unset($return_arr); return $return; } /** * 过滤字符串 * @param $string */ private function _ps_stripslashes($string) { !defined('MAGIC_QUOTES_GPC') && define('MAGIC_QUOTES_GPC', get_magic_quotes_gpc()); if (MAGIC_QUOTES_GPC) { return stripslashes($string); } else { return $string; } } /** * 获取当前页面完整URL地址 */ private function _get_url() { $sys_protocal = isset($_SERVER['SERVER_PORT']) && $_SERVER['SERVER_PORT'] == '443' ? 'https://' : 'http://'; $php_self = $_SERVER['PHP_SELF'] ? $this->_safe_replace($_SERVER['PHP_SELF']) : $this->_safe_replace($_SERVER['SCRIPT_NAME']); $path_info = isset($_SERVER['PATH_INFO']) ? $this->_safe_replace($_SERVER['PATH_INFO']) : ''; $relate_url = isset($_SERVER['REQUEST_URI']) ? $this->_safe_replace($_SERVER['REQUEST_URI']) : $php_self . (isset($_SERVER['QUERY_STRING']) ? '?' . $this->_safe_replace($_SERVER['QUERY_STRING']) : $path_info); return $sys_protocal . (isset($_SERVER['HTTP_HOST']) ? $_SERVER['HTTP_HOST'] : '') . $relate_url; } /** * 安全过滤函数 * * @param $string * @return string */ private function _safe_replace($string) { $string = str_replace('%20', '', $string); $string = str_replace('%27', '', $string); $string = str_replace('%2527', '', $string); $string = str_replace('*', '', $string); $string = str_replace('"', '"', $string); $string = str_replace("'", '', $string); $string = str_replace('"', '', $string); $string = str_replace(';', '', $string); $string = str_replace('<', '<', $string); $string = str_replace('>', '>', $string); $string = str_replace("{", '', $string); $string = str_replace('}', '', $string); $string = str_replace('\\', '', $string); return $string; } /** * 金额增加 * @param string $userid 用户唯一标示符 * @param string $m 操作金额 * @param int $appid 应用程序ID,标示操作来源{wenku,ask} * @return int {0;金额增加失败;1:金额增加成功;} */ public function zhsso_member_madd($userid, $m, $appid) { if (empty($userid) || empty($m) || empty($appid)) return false; return $this->_ps_send('madd', array('uid' => $userid, 'bank' => $m, 'appid' => $appid)); } /** * 获取充值订单数据 * @param unknown_type $userid */ public function getPayOrder($userid) { if (empty($userid)) return false; return $this->_ps_send('getPayOrder', array('uid' => $userid)); } /** * 金额减少 * @param string $userid 用户唯一标示符 * @param string $m 操作金额 * @param int $appid 应用程序ID,标示操作来源{wenku,ask} * @return int {-1;金额不够减;0;金额减少失败;1:金额减少成功;} */ public function zhsso_member_msub($userid, $m, $appid) { if (empty($userid) || empty($m) || empty($appid)) return false; return $this->_ps_send('msub', array('uid' => $userid, 'bank' => $m, 'appid' => $appid)); } /** * 判断email格式是否正确 * @param $string email */ private function _is_email($email) { return strlen($email) > 6 && preg_match("/^[\w\-\.]+@[\w\-\.]+(\.\w+)+$/", $email); } /** * 判断手机格式是否正确 * @param $string email */ private function _is_mobile($mobile) { if(preg_match("/^1[34578]{1}\d{9}$/",$mobile)){ return TRUE; } else { return FALSE; } } /** * 判断email格式是否正确 * @param $string email */ public function getUserName() { $username = self::get_cookie('_username'); if ($username) { return $username; } else { return FALSE; } } /** * 判断email格式是否正确 * @param $string email */ public function getAuth() { $auth = self::get_cookie('auth'); if ($auth) { return $auth; } else { return FALSE; } } /** * 判断email格式是否正确 * @param $string email */ public function getUserID() { $userid = self::get_cookie('_userid'); if ($userid) { return $userid; } else { return FALSE; } } public function get_cookie($var, $default = '') { $varvar = COOKIEPRE_WD . $var; return isset($_COOKIE[$varvar]) ? $this->authcode($_COOKIE[$varvar]) : $default; } /** * * 网络传输、cookie加密函数 * @param type $string * @param type $operation * @param type $key * @param type $expiry * @return string */ function authcode($string, $operation = 'DECODE', $key = '', $expiry = 0) { $ckey_length = 4; $key = md5($key != '' ? $key : AUTHKEY); $keya = md5(substr($key, 0, 16)); $keyb = md5(substr($key, 16, 16)); $keyc = $ckey_length ? ($operation == 'DECODE' ? substr($string, 0, $ckey_length) : substr(md5(microtime()), -$ckey_length)) : ''; $cryptkey = $keya . md5($keya . $keyc); $key_length = strlen($cryptkey); $string = $operation == 'DECODE' ? base64_decode(substr($string, $ckey_length)) : sprintf('%010d', $expiry ? $expiry + time() : 0) . substr(md5($string . $keyb), 0, 16) . $string; $string_length = strlen($string); $result = ''; $box = range(0, 255); $rndkey = array(); for ($i = 0; $i <= 255; $i++) { $rndkey[$i] = ord($cryptkey[$i % $key_length]); } for ($j = $i = 0; $i < 256; $i++) { $j = ($j + $box[$i] + $rndkey[$i]) % 256; $tmp = $box[$i]; $box[$i] = $box[$j]; $box[$j] = $tmp; } for ($a = $j = $i = 0; $i < $string_length; $i++) { $a = ($a + 1) % 256; $j = ($j + $box[$a]) % 256; $tmp = $box[$a]; $box[$a] = $box[$j]; $box[$j] = $tmp; $result .= chr(ord($string[$i]) ^ ($box[($box[$a] + $box[$j]) % 256])); } if ($operation == 'DECODE') { if ((substr($result, 0, 10) == 0 || substr($result, 0, 10) - time() > 0) && substr($result, 10, 16) == substr(md5(substr($result, 26) . $keyb), 0, 16)) { return substr($result, 26); } else { return ''; } } else { return $keyc . str_replace('=', '', base64_encode($result)); } } public function logoutz() { // header('P3P: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"'); setcookie(Doo::conf()->COOKIEPRE_WK . 'auth', '', 0, '/', 'localhost', 0); setcookie(Doo::conf()->COOKIEPRE_WK . '_username', '', 0, '/', 'localhost', 0); setcookie(Doo::conf()->COOKIEPRE_WK . '_userid', '', 0, '/', 'localhost', 0); } } ?>