mirror of
https://github.com/DzzXH/DzzOffice.git
synced 2026-01-22 18:26:48 +08:00
315 lines
10 KiB
PHP
315 lines
10 KiB
PHP
<?php
|
|
/*
|
|
* @copyright Leyun internet Technology(Shanghai)Co.,Ltd
|
|
* @license http://www.dzzoffice.com/licenses/license.txt
|
|
* @package DzzOffice
|
|
* @link http://www.dzzoffice.com
|
|
* @author zyx(zyx@dzz.cc)
|
|
*/
|
|
if(!defined('IN_DZZ')) {
|
|
exit('Access Denied');
|
|
}
|
|
Hook::listen('email_chk',$_GET);
|
|
$navtitle=lang('Safety management').' - '.lang('myCountCenter');
|
|
Hook::listen('check_login');
|
|
$verify = C::t('user_verify')->fetch($_G['uid']);//验证信息
|
|
$do=trim($_GET['do']) ? trim($_GET['do']):'editpass';
|
|
|
|
$uid=intval($_G['uid']);
|
|
$seccodecheck = $_G['setting']['seccodestatus'] & 4;
|
|
$hook_qqbind_arr=array("uid"=>$uid);
|
|
$member=C::t('user_profile')->get_userprofile_by_uid($_G['uid']);
|
|
//$openid= C::t('user_qqconnect')->fetch_bindstatus_by_uid($uid);
|
|
|
|
if($do == 'editpass'){
|
|
|
|
$strongpw = ($_G['setting']['strongpw']) ? json_encode($_G['setting']['strongpw']):'';
|
|
if(isset($_GET['editpass'])){
|
|
|
|
//验证提交是否合法，阻止外部非法提交
|
|
chk_submitroule($type);
|
|
|
|
//验证码
|
|
if(!check_seccode( $_GET['seccodeverify'],$_GET['sechash'])){
|
|
|
|
showTips(array('error'=>lang('submit_seccode_invalid')), $type);
|
|
}
|
|
//验证原密码
|
|
$password0=$_GET['password0'];
|
|
if( md5(md5("").$member['salt'])!=$member['password']) {
|
|
if(md5(md5($password0).$member['salt'])!=$member['password']){
|
|
showTips(array('error'=>lang('password_error')), $type);
|
|
}
|
|
}
|
|
|
|
if($_GET['password'] && $_G['setting']['pwlength']) {
|
|
if(strlen($_GET['password']) < $_G['setting']['pwlength']) {
|
|
|
|
showTips(array('error'=>lang('profile_password_tooshort'),'pwlength'=>$_G['setting']['pwlength']), $type);
|
|
}
|
|
}
|
|
|
|
//验证密码强度
|
|
if($_GET['password'] && $_G['setting']['strongpw']) {
|
|
$strongpw_str = array();
|
|
if(in_array(1, $_G['setting']['strongpw']) && !preg_match("/\d+/", $_GET['password'])) {
|
|
$strongpw_str[] = lang('strongpw_1');
|
|
}
|
|
if(in_array(2, $_G['setting']['strongpw']) && !preg_match("/[a-z]+/", $_GET['password'])) {
|
|
$strongpw_str[] = lang('strongpw_2');
|
|
}
|
|
if(in_array(3, $_G['setting']['strongpw']) && !preg_match("/[A-Z]+/", $_GET['password'])) {
|
|
$strongpw_str[] = lang('strongpw_3');
|
|
}
|
|
if(in_array(4, $_G['setting']['strongpw']) && !preg_match("/[^a-zA-z0-9]+/", $_GET['password'])) {
|
|
$strongpw_str[] = lang('strongpw_4');
|
|
}
|
|
if($strongpw_str) {
|
|
|
|
showTips(array('error'=>lang('password_weak').implode(',', $strongpw_str)), $type);
|
|
|
|
}
|
|
}
|
|
|
|
if($_GET['password'] && $_GET['password'] !== $_GET['password2']) {
|
|
|
|
showTips(array('error'=>lang('profile_passwd_notmatch')), $type);
|
|
}
|
|
$setarr=array();
|
|
|
|
if($_GET['password']){
|
|
|
|
$password = preg_match('/^\w{32}$/', $_GET['password']) ? $_GET['password'] : md5($_GET['password']);
|
|
|
|
$password = md5($password.$member['salt']);
|
|
}
|
|
|
|
if($password && C::t('user')->update_password($_G['uid'],$password)){
|
|
showTips(array('success'=>lang('update_password_success')), $type);
|
|
exit();
|
|
}
|
|
}
|
|
|
|
}
|
|
elseif($do == 'login'){
|
|
function get_log_files($logdir = '', $action = 'action') {
|
|
$dir = opendir($logdir);
|
|
$files = array();
|
|
while($entry = readdir($dir)) {
|
|
$files[] = $entry;
|
|
}
|
|
closedir($dir);
|
|
|
|
if($files) {
|
|
sort($files);
|
|
$logfile = $action;
|
|
$logfiles = array();
|
|
$ym = '';
|
|
foreach($files as $file) {
|
|
if(strpos($file, $logfile) !== FALSE) {
|
|
if(substr($file, 0, 6) != $ym) {
|
|
$ym = substr($file, 0, 6);
|
|
}
|
|
$logfiles[$ym][] = $file;
|
|
}
|
|
}
|
|
if($logfiles) {
|
|
$lfs = array();
|
|
foreach($logfiles as $ym => $lf) {
|
|
$lastlogfile = $lf[0];
|
|
unset($lf[0]);
|
|
$lf[] = $lastlogfile;
|
|
$lfs = array_merge($lfs, $lf);
|
|
}
|
|
return $lfs;
|
|
}
|
|
return array();
|
|
}
|
|
return array();
|
|
}
|
|
!isset($_GET['page']) && $_GET['page']=1;
|
|
$lpp = empty($_GET['lpp']) ? 20 : $_GET['lpp'];
|
|
$checklpp = array();
|
|
$checklpp[$lpp] = 'selected="selected"';
|
|
$keyword = "uid=".$_G['uid'];
|
|
$extrainput = '';
|
|
$operation = "loginlog";
|
|
$page = (isset($_GET['page'])) ? intval($_GET['page']) : 1;
|
|
$start = ($page - 1) * $lpp;
|
|
$gets = array(
|
|
'mod' => MOD_NAME,
|
|
'op' => $_GET['op'],
|
|
'do' => $_GET['do']
|
|
);
|
|
$theurl = CURSCRIPT . "?" . url_implode($gets);
|
|
$logdir = DZZ_ROOT.'./data/log/';
|
|
$logfiles = get_log_files($logdir, $operation);
|
|
|
|
if($logfiles) $logfiles=array_reverse($logfiles);
|
|
//error_reporting(E_ALL);
|
|
$firstlogs = file( $logdir.$logfiles[0] ) ;
|
|
$firstlogsnum = count($firstlogs);
|
|
$countlogfile=count($logfiles);
|
|
|
|
$logs = array();
|
|
$jishu=4000;//每个日志文件最多行数
|
|
$start = ($page - 1) * $lpp;
|
|
$lastlog=$last_secondlog="";
|
|
|
|
$newdata=array();
|
|
foreach($logfiles as $k=>$v){
|
|
$nowfilemaxnum=($jishu*($k+1))-($jishu-$firstlogsnum);
|
|
$startnum=($nowfilemaxnum-$jishu)<=0?0:($nowfilemaxnum-$jishu+1);
|
|
$newdata[]=array("file"=>$v,"start"=>$startnum,"end"=>$nowfilemaxnum);
|
|
}
|
|
//print_R($newdata);
|
|
//查询当前分页数据位于哪个日志文件
|
|
$lastlog=$last_secondlog="";
|
|
foreach($newdata as $k=>$v){
|
|
if( $start<=$v["end"]){
|
|
$lastlog=$v;
|
|
if( ($start+$lpp)<$v["end"]){
|
|
|
|
}else{
|
|
if( isset($newdata[$k+1])){
|
|
$last_secondlog=$newdata[$k+1];
|
|
}
|
|
}
|
|
break;
|
|
}
|
|
}
|
|
|
|
$j=0;
|
|
for($i=$lastlog["start"];$i<$lastlog["end"];$i++){
|
|
if( $start<=($lastlog["start"]+$j) ){
|
|
break;
|
|
}
|
|
$j++;
|
|
}
|
|
//获取数据开始
|
|
$logs = file( $logdir.$lastlog["file"] );
|
|
$logs = array_reverse($logs);
|
|
foreach($logs as $key => $value) {
|
|
if(!empty($keyword) && strpos($value, $keyword) === FALSE) {
|
|
unset($logs[$key]);
|
|
}
|
|
}
|
|
$count = count($logs);
|
|
if( $lastlog["file"]!=$logfiles[0] ){
|
|
$j++;
|
|
}
|
|
$logs = array_slice($logs, $j, $lpp);
|
|
$onecountget = count($logs);
|
|
|
|
$jj=0;
|
|
if( $last_secondlog ){
|
|
for($i=$last_secondlog["start"];$i<$last_secondlog["end"];$i++){
|
|
if( ($jj)>= ($lpp-$onecountget) ){//$last_secondlog["start"] ){
|
|
break;
|
|
}
|
|
$jj++;
|
|
}
|
|
}
|
|
|
|
if($last_secondlog){
|
|
$logs2 = file( $logdir.$last_secondlog["file"] );
|
|
$logs2 = array_reverse($logs2);
|
|
$end=$lpp-count($logs);
|
|
$logs2 = array_slice( $logs2, 0, $jj);
|
|
$logs=array_merge($logs,$logs2);
|
|
}
|
|
$usergroup = array();
|
|
foreach(C::t('usergroup')->range() as $group) {
|
|
$usergroup[$group['groupid']] = $group['grouptitle'];
|
|
}
|
|
$list=array();
|
|
foreach($logs as $k => $logrow) {
|
|
$log = explode("\t", $logrow);
|
|
if(empty($log[1])) {
|
|
continue;
|
|
}
|
|
$log[1] = dgmdate($log[1], 'y-n-j H:i:s');
|
|
$log[2] = $log[2];
|
|
$log[2] = ($log[2] != $_G['member']['username'] ? "<b>$log[2]</b>" : $log[2]);
|
|
$log[3] = $usergroup[$log[3]];
|
|
|
|
$list[$k]=$log;
|
|
}
|
|
$multi = multi($count, $lpp, $page, $theurl,'pull-right');
|
|
}
|
|
elseif($do == 'changeemail'){
|
|
|
|
$emailchange = $member['emailstatus'];
|
|
|
|
$bindemail = isset($_GET['newemail']) ? $_GET['newemail']:'';
|
|
|
|
if(!empty($bindemail)){
|
|
|
|
if(C::t('user')->chk_email_by_uid($bindemail,$uid)){
|
|
|
|
showTips(array('error'=>lang('profile_email_duplicate')),$type);
|
|
}
|
|
|
|
$idstring = random(6);
|
|
|
|
$type = $_GET['returnType'];
|
|
|
|
$confirmurl = C::t('shorturl')->getShortUrl("{$_G[siteurl]}user.php?mod=profile&op=password&do=changeemail&uid={$_G[uid]}&id=$idstring&email={$bindemail}");
|
|
$sitename=$_G['setting']['sitename'];
|
|
$email_bind_message = <<<EOT
|
|
<p style="font-size:14px;color:#333; line-height:24px; margin:0;">尊敬的用户$member[username],您好！</p>
|
|
<p style="line-height: 24px; margin: 6px 0px 0px; overflow-wrap: break-word; word-break: break-all;"><span style="color: rgb(51, 51, 51); font-size: 14px;">这封信是由 $sitename 发送的。您收到这封邮件，是由于在 $sitename 进行了Email 绑定操作，或修改 Email 绑定使用了这个邮箱地址。如果您不是 $sitename 的用户，或没有进行上述操作，请忽略这封邮件。您不需要退订或进行其他进一步的操作。</span></p>
|
|
<p style="line-height: 24px; margin: 6px 0px 0px; overflow-wrap: break-word; word-break: break-all;"><span style="color: rgb(51, 51, 51); font-size: 14px;font-weight:bold;">邮箱绑定链接：</span></p>
|
|
<p style="line-height: 24px; margin: 6px 0px 0px; overflow-wrap: break-word; word-break: break-all;"><span style="color: rgb(51, 51, 51); font-size: 12px;"><a href="$confirmurl" style="text-decoration-line: none; word-break: break-all; overflow-wrap: normal; color: rgb(51, 51, 51); font-size: 12px;" rel="noopener" target="_blank"><span style="color: rgb(0, 164, 255);">$confirmurl</span></a><span style="font-size: 12px; color: rgb(51, 51, 51);">,(如果上面不是链接形式，请将该地址手工粘贴到浏览器地址栏再访问)</span></p>
|
|
EOT;
|
|
if(!sendmail("$member[username] <$bindemail>",'Email 绑定', $email_bind_message)) {
|
|
|
|
runlog('sendmail', "$bindemail 发送失败");
|
|
|
|
showTips(array('error'=>lang('setting_mail_send_error')),$type);
|
|
|
|
}else{
|
|
$updatearr = array("emailsenddate"=>$idstring.'_'.time());
|
|
C::t('user')->update($uid,$updatearr);
|
|
showTips(array('success'=>array('email'=>$bindemail)),$type);
|
|
|
|
}
|
|
|
|
}
|
|
}
|
|
elseif ($do == 'bindqq'){//绑定qq
|
|
|
|
@session_start();
|
|
|
|
if($_G['setting']['qq_login']!='1'){
|
|
|
|
showTips(array('lang'=>lang('qq_login_closed'),'referer'=>$_G['siteurl']),'html');
|
|
}
|
|
|
|
require_once DZZ_ROOT."./user/qqlogin/api_qqlogin/qqConnectAPI.php";
|
|
|
|
$inurl = $_SERVER["HTTP_REFERER"]; //来路
|
|
|
|
$_SESSION['bindqq'] = true;
|
|
|
|
$_SESSION['bind_ref'] = $inurl;
|
|
|
|
$qc = new QC();
|
|
|
|
$qc->qq_login();
|
|
|
|
}elseif ($do == 'unbindqq') {//取消qq绑定
|
|
|
|
if(C::t('user_qqconnect')->delete($_GET['openid'])){
|
|
showmessage(lang('qq_unbind_success'), dreferer(), array(), array('alert' => 'right'));
|
|
}else{
|
|
showmessage(lang('qq_unbind_failed'), dreferer(), array(), array('alert' => 'right'));
|
|
}
|
|
}
|
|
//三方登录未设置密码时不需要输入原密码
|
|
$showoldpassword=1;
|
|
if( md5(md5("").$member['salt'])==$member['password']) {
|
|
$showoldpassword=0;
|
|
}
|
|
include template('pass_safe');
|
|
exit(); |