226 lines
7.1 KiB
PHP
226 lines
7.1 KiB
PHP
<?php
|
||
/* =================================================================================
|
||
* License: GPL-2.0 license
|
||
* Author: 众产® https://ciy.cn/code
|
||
* Version: 0.6.7
|
||
====================================================================================*/
|
||
/*
|
||
* 用户相关函数
|
||
* verifyfast 校验用户自动响应
|
||
* verifyuser 校验用户登录状态，超时用户自动续期
|
||
* nopower 访问数据库判断用户是否有权限
|
||
* filerecord 文件记录/短链
|
||
* savelog log信息记录到数据库log表
|
||
* savelogdb 增删改数据变更记录到数据库log表
|
||
* getcatas 从字典中读取 代码数组
|
||
* get/set config 从SaaS配置表中读写配置项
|
||
* get/set/del memvar 从SaaS内存表中读写变量
|
||
*/
|
||
|
||
$tokenfield = "ciyadm";
|
||
$tokensalt = "ast34h$3"; //做数据加解密时的加密因子，每个项目都不要相同。
|
||
$logpath = PATH_ROOT . 'log/';
|
||
|
||
function verifyfast() {
|
||
$rsuser = verifyuser();
|
||
if ($rsuser == null)
|
||
ciy_ouputJSON(errjson('请重新登录', 2));
|
||
return $rsuser;
|
||
}
|
||
function verifyuser() {
|
||
global $db;
|
||
global $tokensalt;
|
||
global $tokenfield;
|
||
if (isset($_SERVER['HTTP_' . strtoupper($tokenfield)]))
|
||
$ciyauth = $_SERVER['HTTP_' . strtoupper($tokenfield)];
|
||
else
|
||
$ciyauth = get('_' . $tokenfield);
|
||
$auth = json_decode(encrypt($ciyauth, 'D', $tokensalt), true);
|
||
if ($auth == null)
|
||
return null;
|
||
$csql = new \ciy\sql('zc_online'); //弃用redis集群
|
||
$csql->where('id', $auth['_o']);
|
||
$onlinerow = $db->getone($csql);
|
||
if (!is_array($onlinerow))
|
||
return null;
|
||
if ($onlinerow['user'] != $auth['id'])
|
||
return null;
|
||
if ($onlinerow['sid'] != $auth['_s'])
|
||
return null;
|
||
if ($onlinerow['usrchg'] == 9) {
|
||
$csql = new \ciy\sql('zc_admin');
|
||
$csql->where('id', $auth['id']);
|
||
$userrow = $db->getone($csql);
|
||
if (!is_array($userrow))
|
||
return null;
|
||
if ($userrow['stpstatus'] != 10)
|
||
return null;
|
||
}
|
||
if ($onlinerow['usrchg'] == 2) {
|
||
header($tokenfield . 're: true');
|
||
}
|
||
if ($onlinerow['exptimes'] > time())
|
||
return $auth;
|
||
$exp = time() + 86400;
|
||
$sid = randstr(10);
|
||
$auth['_s'] = $sid;
|
||
if ($db->execute('update zc_online set exptimes=?,sid=? where id=?', array($exp, $sid, $auth['_o'])) === false)
|
||
return null;
|
||
$authstr = json_encode($auth, JSON_PARTIAL_OUTPUT_ON_ERROR);
|
||
$enauth = encrypt($authstr, 'E', $tokensalt);
|
||
header($tokenfield . ': ' . $enauth);
|
||
return $auth;
|
||
}
|
||
//true无权限，false有权限
|
||
function nopower($db, $userid, $chkpower) {
|
||
$csql = new \ciy\sql('zc_admin');
|
||
$csql->where('id', $userid);
|
||
$csql->column('power');
|
||
$mepower = $db->get1($csql);
|
||
if (empty($mepower))
|
||
return true;
|
||
if (strlen($chkpower) < 3)
|
||
return true;
|
||
if($userid == 10)
|
||
return false;
|
||
$pows = explode('.', $mepower);
|
||
foreach ($pows as $p) {
|
||
if (empty($p))
|
||
continue;
|
||
if (strpos($chkpower, $p) !== 0)
|
||
continue;
|
||
return false;
|
||
}
|
||
return true;
|
||
}
|
||
function savelog($db, $userid, $types, $msg, $isrequest = false) {
|
||
if ($isrequest) {
|
||
$msg .= ' GET:';
|
||
foreach ($_GET as $key => $value)
|
||
$msg .= $key . '=' . $value . '&';
|
||
$msg .= ' POST:';
|
||
foreach ($_POST as $key => $value)
|
||
$msg .= $key . '=' . $value . '&';
|
||
$msg .= ' SERVER:';
|
||
foreach ($_SERVER as $key => $value)
|
||
$msg .= "\n" . $key . '=' . $value;
|
||
$msg .= ' JSON:' . file_get_contents('php://input');
|
||
}
|
||
$updata = array();
|
||
$updata['types'] = $types;
|
||
$updata['loguser'] = $userid;
|
||
$updata['logs'] = $msg;
|
||
$updata['readuser'] = 0;
|
||
$updata['addtimes'] = tostamp();
|
||
$updata['ip'] = getip();
|
||
$csql = new \ciy\sql('zc_log');
|
||
$db->insert($csql, $updata);
|
||
return false;
|
||
}
|
||
function savelogdb($db, $userid, $types, $oldrow, $newrow) {
|
||
savelog($db, $userid, $types, logdbstr($oldrow, $newrow), false);
|
||
}
|
||
function getconfig($db, $types, $defvalue = '') {
|
||
$csql = new \ciy\sql('zc_config');
|
||
$csql->where('types', $types);
|
||
$row = $db->getone($csql);
|
||
if (is_array($row))
|
||
return $row['params'];
|
||
return $defvalue;
|
||
}
|
||
function setconfig($db, $types, $value) {
|
||
$updata = array();
|
||
$updata['types'] = $types;
|
||
$updata['params'] = $value;
|
||
$csql = new \ciy\sql('zc_config');
|
||
$csql->where('types', $types);
|
||
if ($db->update($csql, $updata) === false)
|
||
return '操作数据库失败:' . $db->error;
|
||
return true;
|
||
}
|
||
function getcatas($db, $cbid, $table = 'zc_cata') {
|
||
if (is_numeric($cbid)) {
|
||
$cbid = (int)$cbid;
|
||
} else {
|
||
$csql = new \ciy\sql($table);
|
||
$csql->where('codeid', $cbid);
|
||
$csql->where('cbid=0');
|
||
$csql->column('id');
|
||
$cbid = (int)$db->get1($csql);
|
||
if ($cbid == 0)
|
||
return array();
|
||
}
|
||
$csql = new \ciy\sql($table);
|
||
$csql->where('cbid', $cbid)->order('csort,id');
|
||
$csql->column('codeid as id,name,upid,name,extdata');
|
||
$catarows = $db->get($csql);
|
||
// $delupid = true;
|
||
// $delextdata = false;
|
||
// foreach ($catarows as $catarow) {
|
||
// if ($catarow['upid'] > 0)
|
||
// $delupid = true;
|
||
// if (!empty($catarow['extdata']))
|
||
// $delextdata = true;
|
||
// }
|
||
// if ($delupid || $delextdata) {
|
||
// for ($i = 0; $i < count($catarows); $i++) {
|
||
// if ($delupid)
|
||
// unset($catarows[$i]['upid']);
|
||
// if ($delextdata)
|
||
// unset($catarows[$i]['extdata']);
|
||
// }
|
||
// }
|
||
return $catarows;
|
||
}
|
||
function getmemvar($db, $types, $defvalue = '') {
|
||
$csql = new \ciy\sql('zc_zmem_var');
|
||
$csql->where('types', $types);
|
||
$row = $db->getone($csql);
|
||
if (is_array($row))
|
||
return $row['params'];
|
||
return $defvalue;
|
||
}
|
||
function setmemvar($db, $types, $value) {
|
||
if (!$db)
|
||
return false;
|
||
$updata = array();
|
||
$updata['types'] = $types;
|
||
$updata['params'] = $value;
|
||
$csql = new \ciy\sql('zc_zmem_var');
|
||
$csql->where('types', $types);
|
||
$row = $db->getone($csql);
|
||
if (is_array($row)) {
|
||
$csql = new \ciy\sql('zc_zmem_var');
|
||
$csql->where('id', $row['id']);
|
||
if ($db->update($csql, $updata) === false)
|
||
return '操作数据库失败:' . $db->error;
|
||
} else {
|
||
if (is_array($value)) {
|
||
$ind = strpos($value[0], '+');
|
||
if ($ind === false) {
|
||
$updata['params'] = 1;
|
||
} else {
|
||
$updata['params'] = (int)substr($value[0], $ind + 1);
|
||
}
|
||
}
|
||
if ($db->insert($csql, $updata) === false)
|
||
return '新增数据库失败:' . $db->error;
|
||
}
|
||
return true;
|
||
}
|
||
function delmemvar($db, $types) {
|
||
$csql = new \ciy\sql('zc_zmem_var');
|
||
$csql->where('types', $types);
|
||
$db->delete($csql);
|
||
}
|
||
|
||
function addcats($cat, $val) {
|
||
$cats = explode(',', $cat);
|
||
$cats = array_filter($cats, function($value) {
|
||
return !empty($value);
|
||
});
|
||
if (!in_array($val, $cats))
|
||
$cats[] = $val;
|
||
return ',' . implode(',', $cats) . ',';
|
||
}
|