280 lines
9.1 KiB
PHP
280 lines
9.1 KiB
PHP
<?php
|
|
namespace app\index\controller;
|
|
|
|
use think\Controller;
|
|
use app\index\model\Users;
|
|
use think\facade\Redirect;
|
|
use \think\facade\Log;
|
|
use \think\facade\Cache;
|
|
use PHPMailer\PHPMailer\PHPMailer;
|
|
use think\Response;
|
|
|
|
class UserController extends BaseController
|
|
{
|
|
/**
|
|
* 用户登录
|
|
*
|
|
* @return \think\Response
|
|
*/
|
|
public function login()
|
|
{
|
|
if ($this->request->isPost()) {
|
|
$data = $this->request->post();
|
|
|
|
try {
|
|
// 验证数据
|
|
$validate = validate([
|
|
'account' => 'require|email',
|
|
'password' => 'require'
|
|
]);
|
|
|
|
if (!$validate->check($data)) {
|
|
return json(['code' => 1, 'msg' => $validate->getError()]);
|
|
}
|
|
|
|
// 查询用户
|
|
$user = Users::where('account', $data['account'])->find();
|
|
if (!$user) {
|
|
return json(['code' => 1, 'msg' => '用户不存在']);
|
|
}
|
|
|
|
// 验证密码
|
|
if ($user->password !== md5($data['password'])) {
|
|
return json(['code' => 1, 'msg' => '密码错误']);
|
|
}
|
|
|
|
// 登录成功,设置session
|
|
session('user_id', $user->id);
|
|
session('user_name', $user->name);
|
|
session('user_avatar', $user->avatar ?? '/static/images/avatar.png');
|
|
|
|
// 记录登录日志
|
|
Log::record('用户登录成功:' . $user->account, 'info');
|
|
|
|
return json(['code' => 0, 'msg' => '登录成功']);
|
|
|
|
} catch (\Exception $e) {
|
|
return json(['code' => 1, 'msg' => '登录失败:' . $e->getMessage()]);
|
|
}
|
|
}
|
|
|
|
return view('login');
|
|
}
|
|
|
|
/**
|
|
* 用户注册
|
|
*
|
|
* @return \think\Response
|
|
*/
|
|
public function register()
|
|
{
|
|
if ($this->request->isPost()) {
|
|
$data = $this->request->post();
|
|
|
|
try {
|
|
// 验证数据
|
|
$validate = validate([
|
|
'account' => 'require|email|unique:users',
|
|
'code' => 'require|number|length:6',
|
|
'password' => 'require|min:6|max:20',
|
|
'repassword' => 'require|confirm:password'
|
|
], [
|
|
'account.require' => '账户不能为空',
|
|
'account.email' => '邮箱格式不正确',
|
|
'account.unique' => '该邮箱已注册',
|
|
'code.require' => '验证码不能为空',
|
|
'code.number' => '验证码必须为数字',
|
|
'code.length' => '验证码长度必须为6位',
|
|
'password.require' => '密码不能为空',
|
|
'password.min' => '密码长度不能小于6个字符',
|
|
'password.max' => '密码长度不能超过20个字符',
|
|
'repassword.require' => '确认密码不能为空',
|
|
'repassword.confirm' => '两次输入的密码不一致'
|
|
]);
|
|
|
|
if (!$validate->check($data)) {
|
|
return json(['code' => 1, 'msg' => $validate->getError()]);
|
|
}
|
|
|
|
// 验证邮箱验证码
|
|
$emailCode = cache('email_code_' . $data['account']);
|
|
if (!$emailCode || $emailCode != $data['code']) {
|
|
return json(['code' => 1, 'msg' => '验证码错误或已过期']);
|
|
}
|
|
|
|
// 创建用户
|
|
$user = new Users;
|
|
$user->account = $data['account'];
|
|
$user->password = md5($data['password']);
|
|
$user->name = $this->generateRandomName();
|
|
$user->create_time = time();
|
|
$user->save();
|
|
|
|
// 清除验证码缓存
|
|
cache('email_code_' . $data['account'], null);
|
|
|
|
return json(['code' => 0, 'msg' => '注册成功']);
|
|
|
|
} catch (\Exception $e) {
|
|
return json(['code' => 1, 'msg' => '注册失败:' . $e->getMessage()]);
|
|
}
|
|
}
|
|
|
|
return view('register');
|
|
}
|
|
|
|
/**
|
|
* 退出登录
|
|
*
|
|
* @return \think\Response
|
|
*/
|
|
public function logout()
|
|
{
|
|
// 增加日志记录,记录用户退出登录操作
|
|
Log::record('用户退出登录', 'info');
|
|
|
|
// 销毁当前会话中的所有数据
|
|
session(null);
|
|
|
|
// 清除缓存中的用户信息
|
|
Cache::tag('user_cache')->clear();
|
|
|
|
// 清除cookie
|
|
cookie('user_id', null);
|
|
cookie('user_name', null);
|
|
cookie('user_avatar', null);
|
|
cookie('expire_time', null);
|
|
cookie('is_auto_login', null);
|
|
cookie('auto_login_attempted', null);
|
|
|
|
// 返回成功状态
|
|
return json(['code' => 0, 'msg' => '退出成功']);
|
|
}
|
|
|
|
// 生成随机用户名
|
|
private function generateRandomName()
|
|
{
|
|
return '云朵_' . mt_rand(100000, 999999);
|
|
}
|
|
|
|
// 发送短信验证码
|
|
public function sendSmsCode()
|
|
{
|
|
if ($this->request->isPost()) {
|
|
$phone = $this->request->post('phone');
|
|
|
|
// 验证手机号
|
|
$validate = validate([
|
|
'phone' => 'require|mobile|unique:user'
|
|
], [
|
|
'phone.require' => '手机号不能为空',
|
|
'phone.mobile' => '手机号格式不正确',
|
|
'phone.unique' => '该手机号已注册'
|
|
]);
|
|
|
|
if (!$validate->check(['phone' => $phone])) {
|
|
return json(['code' => 0, 'msg' => $validate->getError()]);
|
|
}
|
|
|
|
// 生成6位随机验证码
|
|
$code = mt_rand(100000, 999999);
|
|
|
|
// 这里应该调用短信服务商API发送验证码
|
|
// 示例代码,实际使用时需要替换为真实的短信发送逻辑
|
|
try {
|
|
// TODO: 调用短信服务商API发送验证码
|
|
// $result = sendSms($phone, $code);
|
|
|
|
// 将验证码保存到缓存,有效期5分钟
|
|
cache('sms_code_' . $phone, $code, 300);
|
|
|
|
return json(['code' => 1, 'msg' => '验证码发送成功']);
|
|
} catch (\Exception $e) {
|
|
return json(['code' => 0, 'msg' => '验证码发送失败:' . $e->getMessage()]);
|
|
}
|
|
}
|
|
|
|
return json(['code' => 0, 'msg' => '非法请求']);
|
|
}
|
|
|
|
// 微信授权回调
|
|
public function wechatCallback()
|
|
{
|
|
$code = $this->request->get('code');
|
|
if (!$code) {
|
|
return json(['code' => 0, 'msg' => '微信授权失败']);
|
|
}
|
|
|
|
try {
|
|
// 这里应该调用微信API获取用户信息
|
|
// 示例代码,实际使用时需要替换为真实的微信API调用逻辑
|
|
// $wechatUser = getWechatUserInfo($code);
|
|
|
|
// 模拟获取到的微信用户信息
|
|
$wechatUser = [
|
|
'openid' => 'test_openid_' . time(),
|
|
'nickname' => '微信用户',
|
|
'avatar' => ''
|
|
];
|
|
|
|
// 检查用户是否已注册
|
|
$user = Users::where('openid', $wechatUser['openid'])->find();
|
|
if ($user) {
|
|
// 已注册,直接登录
|
|
session('user_id', $user->id);
|
|
return json(['code' => 1, 'msg' => '登录成功']);
|
|
}
|
|
|
|
// 未注册,返回注册所需信息
|
|
return json([
|
|
'code' => 2,
|
|
'msg' => '需要注册',
|
|
'data' => $wechatUser
|
|
]);
|
|
} catch (\Exception $e) {
|
|
return json(['code' => 0, 'msg' => '微信授权失败:' . $e->getMessage()]);
|
|
}
|
|
}
|
|
|
|
// 发送邮箱验证码
|
|
public function sendEmailCode()
|
|
{
|
|
// 设置响应头
|
|
header('Content-Type: application/json; charset=utf-8');
|
|
|
|
if (!$this->request->isPost()) {
|
|
return json(['code' => 1, 'msg' => '请求方法无效']);
|
|
}
|
|
|
|
$email = $this->request->post('account');
|
|
if (empty($email)) {
|
|
return json(['code' => 1, 'msg' => '邮箱不能为空']);
|
|
}
|
|
|
|
// 验证邮箱格式
|
|
if (!filter_var($email, FILTER_VALIDATE_EMAIL)) {
|
|
return json(['code' => 1, 'msg' => '邮箱格式不正确']);
|
|
}
|
|
|
|
// 检查邮箱是否已注册
|
|
$exists = Users::where('account', $email)->find();
|
|
if ($exists) {
|
|
return json(['code' => 1, 'msg' => '该邮箱已注册']);
|
|
}
|
|
|
|
// 生成6位随机验证码
|
|
$code = mt_rand(100000, 999999);
|
|
|
|
// 发送验证码邮件
|
|
$result = parent::sendEmail($email, "您的注册验证码是:{$code},有效期为5分钟。", '注册验证码');
|
|
|
|
if ($result === '发送成功') { // 修改这里的判断条件
|
|
// 将验证码存入缓存,有效期5分钟
|
|
cache('email_code_' . $email, $code, 300);
|
|
return json(['code' => 0, 'msg' => '验证码已发送']);
|
|
} else {
|
|
return json(['code' => 1, 'msg' => '发送失败:' . $result]);
|
|
}
|
|
}
|
|
}
|