he/DzzOffice
1
0
Fork 0
mirror of https://github.com/DzzXH/DzzOffice.git synced 2026-01-15 14:35:21 +08:00
Code Issues Actions Packages Projects Releases Wiki Activity

更新至V1.82.1，更新内容在笔记中查看

Browse Source
This commit is contained in:
小胡
2023-06-29 11:31:01 +08:00
Unverified
parent 633f3bb0e7
commit 3a721f1cb0
8 changed files with 90 additions and 65 deletions
Download Patch File Download Diff File Expand all files Collapse all files

136
user/sso/xhlogin.php
View File

@@ -1,66 +1,98 @@
<?php
if($_G['setting']['bbclosed']) showmessage(lang('site_closed_please_admin'));//判断站点是否关闭
if($_G['setting']['quick_login']){
$time=trim($_GET['time']);
$username = trim($_GET['username']);
$email= trim($_GET['email']);
$token= trim($_GET['token']);
if($email && $username && $token && $time){
if ($time < (time() - 5)) showmessage('验证时间已过期，请重新获取');
if ($time < (time() - 5)) {//验证时间已过期时
//写入日志
writelog('loginlog', '尝试XH通用登录失败，验证时间已过期');
showmessage('验证时间已过期，请重新获取');
return;
}
$key=$_G['setting']['quick_key'];
$md5=md5(''.$username.''.''.$email.''.''.$key.''.''.$time.'');
if (!($token === $md5)) {
showmessage('XH通用登录KAY不正确');
return;
}
//写入日志
writelog('loginlog', '尝试XH通用登录失败,XH通用登录KAY不正确');
showmessage('XH通用登录KAY不正确');
return;
}
if(($user=C::t('user')->fetch_by_username($username)) || ($user=C::t('user')->fetch_by_email($email))){//用户已经存在时
if ($user['adminid']) showmessage('为了安全，禁止管理员通过这种方式登录');
$idstring = explode('_', $user['emailsenddate']);
if ($idstring[0] == (time() - $idstring[1]) < 86400) {
dsetcookie('auth', authcode("{$user['password']}\t{$user['uid']}", 'ENCODE'), 0, 1, true);
if ($user['adminid']) {
//写入日志
writelog('loginlog', '管理员尝试XH通用登录失败');
showmessage('为了安全，禁止管理员通过这种方式登录');
return;
}
$result = getuserbyuid($user['uid'], 1);
if($result['status']>0){
//写入日志
writelog('loginlog', '尝试XH通用登录失败,此用户已停用');
showmessage('此用户已停用，请联系管理员');
}
//设置登录
setloginstatus($result, $_GET['cookietime'] ? 2592000 : 0);
if($_G['member']['lastip'] && $_G['member']['lastvisit']) {
dsetcookie('lip', $_G['member']['lastip'].','.$_G['member']['lastvisit']);
}
//记录登录
C::t('user_status')->update($_G['uid'], array('lastip' => $_G['clientip'], 'lastvisit' =>TIMESTAMP, 'lastactivity' => TIMESTAMP));
writelog('loginlog', 'XH通用登录成功');
showmessage('Login_success',$_G['siteurl']);
}else{
require_once libfile('function/user','','user');
if(!check_username($username)) showmessage(lang('user_name_sensitive'));
$password=$_G['setting']['quick_password'];
$user=uc_add_user($username, $password, $email);
$uid=$user['uid'];
if($uid<1) showmessage(lang('import_failure'));
$base = array(
'uid' => $uid,
'adminid' => 0,
'groupid' =>9,
'regdate' => TIMESTAMP,
'emailstatus' => 1,
);
if($_GET['mobile']){
if(!preg_match("/^\d+$/",$_GET['mobile'])){
}elseif(C::t('user')->fetch_by_phone($_GET['mobile']) ) {
}else{
$base['phone']=$_GET['mobile'];
}
}
if($_GET['weixinid']){
if(!preg_match("/^[a-zA-Z\d_]{5,}$/i",$_GET['weixinid'])){
}elseif(C::t('user')->fetch_by_weixinid($_GET['weixinid'])) {
}else{
$base['weixinid']=$_GET['weixinid'];
}
}
$sitename=$_G['setting']['sitename'];
C::t('user')->update($uid,$base);
//设置登录
$result = getuserbyuid($user['uid'], 1);
setloginstatus($result, $_GET['cookietime'] ? 2592000 : 0);
if($_G['member']['lastip'] && $_G['member']['lastvisit']) {
dsetcookie('lip', $_G['member']['lastip'].','.$_G['member']['lastvisit']);
}
//记录登录
C::t('user_status')->update($_G['uid'], array('lastip' => $_G['clientip'], 'lastvisit' =>TIMESTAMP, 'lastactivity' => TIMESTAMP));
writelog('loginlog', 'XH通用登录成功');
showmessage('Login_success',$_G['siteurl']);
}
}
showmessage('Login_success',$_G['siteurl']);
}else{
if($_G['setting']['bbclosed']) showmessage(lang('site_closed_please_admin'));//判断站点是否关闭
require_once libfile('function/user','','user');
if(!check_username($username)) showmessage(lang('user_name_sensitive'));
$password=$_G['setting']['quick_password'];
$user=uc_add_user($username, $password, $email);
$uid=$user['uid'];
if($uid<1) showmessage(lang('import_failure'));
$base = array(
'uid' => $uid,
'adminid' => 0,
'groupid' =>9,
'regdate' => TIMESTAMP,
'emailstatus' => 1,
);
if($_GET['mobile']){
if(!preg_match("/^\d+$/",$_GET['mobile'])){
}elseif(C::t('user')->fetch_by_phone($_GET['mobile']) ) {
}else{
$base['phone']=$_GET['mobile'];
}
}
if($_GET['weixinid']){
if(!preg_match("/^[a-zA-Z\d_]{5,}$/i",$_GET['weixinid'])){
}elseif(C::t('user')->fetch_by_weixinid($_GET['weixinid'])) {
}else{
$base['weixinid']=$_GET['weixinid'];
}
}
$sitename=$_G['setting']['sitename'];
C::t('user')->update($uid,$base);
$idstring = explode('_', $user['emailsenddate']);
if ($idstring[0] == (time() - $idstring[1]) < 86400) {
dsetcookie('auth', authcode("{$user['password']}\t{$user['uid']}", 'ENCODE'), 0, 1, true);
}
showmessage('Login_success',$_G['siteurl']);
}
}
}else{
}else{
//写入日志
writelog('loginlog', '尝试XH通用登录失败，未开启XH通用登录');
showmessage('未开启XH通用登录');
}