257 lines
15 KiB
PHP
257 lines
15 KiB
PHP
<?php
|
|
|
|
namespace plugin\admin\app\controller;
|
|
|
|
use plugin\admin\app\common\Auth;
|
|
use plugin\admin\app\common\Util;
|
|
use plugin\admin\app\model\Admin;
|
|
use plugin\admin\app\model\AdminRole;
|
|
use support\exception\BusinessException;
|
|
use support\Request;
|
|
use support\Response;
|
|
use Throwable;
|
|
use Webman\Captcha\CaptchaBuilder;
|
|
use Webman\Captcha\PhraseBuilder;
|
|
|
|
/**
|
|
* 绠＄悊鍛樿处鎴? */
|
|
class AccountController extends Crud
|
|
{
|
|
/**
|
|
* 涓嶉渶瑕佺櫥褰曠殑鏂规硶
|
|
* @var string[]
|
|
*/
|
|
protected $noNeedLogin = ['login', 'logout', 'captcha', 'register', 'registerPage'];
|
|
|
|
/**
|
|
* 涓嶉渶瑕侀壌鏉冪殑鏂规硶
|
|
* @var string[]
|
|
*/
|
|
protected $noNeedAuth = ['info'];
|
|
|
|
/**
|
|
* @var Admin
|
|
*/
|
|
protected $model = null;
|
|
|
|
/**
|
|
* 鏋勯€犲嚱鏁? */
|
|
public function __construct()
|
|
{
|
|
$this->model = new Admin;
|
|
}
|
|
|
|
/**
|
|
* 璐︽埛璁剧疆
|
|
* @return Response
|
|
* @throws Throwable
|
|
*/
|
|
public function index()
|
|
{
|
|
return raw_view('account/index');
|
|
}
|
|
|
|
/**
|
|
* 鐧诲綍
|
|
* @param Request $request
|
|
* @return Response
|
|
* @throws BusinessException
|
|
*/
|
|
public function login(Request $request): Response
|
|
{
|
|
$this->checkDatabaseAvailable();
|
|
$captcha = $request->post('captcha', '');
|
|
if (strtolower($captcha) !== session('captcha-login')) {
|
|
return $this->json(1, '楠岃瘉鐮侀敊璇?);
|
|
}
|
|
$request->session()->forget('captcha-login');
|
|
$username = $request->post('username', '');
|
|
$password = $request->post('password', '');
|
|
if (!$username) {
|
|
return $this->json(1, '鐢ㄦ埛鍚嶄笉鑳戒负绌?);
|
|
}
|
|
$this->checkLoginLimit($username);
|
|
$admin = Admin::where('username', $username)->first();
|
|
if (!$admin || !Util::passwordVerify($password, $admin->password)) {
|
|
return $this->json(1, '璐︽埛涓嶅瓨鍦ㄦ垨瀵嗙爜閿欒');
|
|
}
|
|
if ($admin->status != 0) {
|
|
return $this->json(1, '褰撳墠璐︽埛鏆傛椂鏃犳硶鐧诲綍');
|
|
}
|
|
$admin->login_at = date('Y-m-d H:i:s');
|
|
$admin->save();
|
|
$this->removeLoginLimit($username);
|
|
$admin = $admin->toArray();
|
|
$session = $request->session();
|
|
$admin['password'] = md5($admin['password']);
|
|
$session->set('admin', $admin);
|
|
return $this->json(0, '鐧诲綍鎴愬姛', [
|
|
'nickname' => $admin['nickname'],
|
|
'token' => $request->sessionId(),
|
|
]);
|
|
}
|
|
|
|
/**
|
|
* 閫€鍑? * @param Request $request
|
|
* @return Response
|
|
*/
|
|
public function logout(Request $request): Response
|
|
{
|
|
$request->session()->delete('admin');
|
|
return $this->json(0);
|
|
}
|
|
|
|
/**
|
|
* 鑾峰彇鐧诲綍淇℃伅
|
|
* @param Request $request
|
|
* @return Response
|
|
*/
|
|
public function info(Request $request): Response
|
|
{
|
|
$admin = admin();
|
|
if (!$admin) {
|
|
return $this->json(1);
|
|
}
|
|
$info = [
|
|
'id' => $admin['id'],
|
|
'username' => $admin['username'],
|
|
'nickname' => $admin['nickname'],
|
|
'avatar' => $admin['avatar'],
|
|
'email' => $admin['email'],
|
|
'mobile' => $admin['mobile'],
|
|
'isSuperAdmin' => Auth::isSuperAdmin(),
|
|
'token' => $request->sessionId(),
|
|
];
|
|
return $this->json(0, 'ok', $info);
|
|
}
|
|
|
|
/**
|
|
* 鏇存柊
|
|
* @param Request $request
|
|
* @return Response
|
|
*/
|
|
public function update(Request $request): Response
|
|
{
|
|
$allow_column = [
|
|
'nickname' => 'nickname',
|
|
'avatar' => 'avatar',
|
|
'email' => 'email',
|
|
'mobile' => 'mobile',
|
|
];
|
|
|
|
$data = $request->post();
|
|
$update_data = [];
|
|
foreach ($allow_column as $key => $column) {
|
|
if (isset($data[$key])) {
|
|
$update_data[$column] = $data[$key];
|
|
}
|
|
}
|
|
if (isset($update_data['password'])) {
|
|
$update_data['password'] = Util::passwordHash($update_data['password']);
|
|
}
|
|
Admin::where('id', admin_id())->update($update_data);
|
|
$admin = admin();
|
|
unset($update_data['password']);
|
|
foreach ($update_data as $key => $value) {
|
|
$admin[$key] = $value;
|
|
}
|
|
$request->session()->set('admin', $admin);
|
|
return $this->json(0);
|
|
}
|
|
|
|
/**
|
|
* 淇敼瀵嗙爜
|
|
* @param Request $request
|
|
* @return Response
|
|
*/
|
|
public function password(Request $request): Response
|
|
{
|
|
$hash = Admin::find(admin_id())['password'];
|
|
$password = $request->post('password');
|
|
if (!$password) {
|
|
return $this->json(2, '瀵嗙爜涓嶈兘涓虹┖');
|
|
}
|
|
if ($request->post('password_confirm') !== $password) {
|
|
return $this->json(3, '涓ゆ瀵嗙爜杈撳叆涓嶄竴鑷?);
|
|
}
|
|
if (!Util::passwordVerify($request->post('old_password'), $hash)) {
|
|
return $this->json(1, '鍘熷瀵嗙爜涓嶆纭?);
|
|
}
|
|
$update_data = [
|
|
'password' => Util::passwordHash($password)
|
|
];
|
|
Admin::where('id', admin_id())->update($update_data);
|
|
return $this->json(0);
|
|
}
|
|
|
|
/**
|
|
* 楠岃瘉鐮? * @param Request $request
|
|
* @param string $type
|
|
* @return Response
|
|
*/
|
|
public function captcha(Request $request, string $type = 'login'): Response
|
|
{
|
|
$builder = new PhraseBuilder(4, 'abcdefghjkmnpqrstuvwxyzABCDEFGHJKMNPQRSTUVWXYZ');
|
|
$captcha = new CaptchaBuilder(null, $builder);
|
|
$captcha->build(120);
|
|
$request->session()->set("captcha-$type", strtolower($captcha->getPhrase()));
|
|
$img_content = $captcha->get();
|
|
return response($img_content, 200, ['Content-Type' => 'image/jpeg']);
|
|
}
|
|
|
|
/**
|
|
* 妫€鏌ョ櫥褰曢鐜囬檺鍒? * @param $username
|
|
* @return void
|
|
* @throws BusinessException
|
|
*/
|
|
protected function checkLoginLimit($username)
|
|
{
|
|
$limit_log_path = runtime_path() . '/login';
|
|
if (!is_dir($limit_log_path)) {
|
|
mkdir($limit_log_path, 0777, true);
|
|
}
|
|
$limit_file = $limit_log_path . '/' . md5($username) . '.limit';
|
|
$time = date('YmdH') . ceil(date('i')/5);
|
|
$limit_info = [];
|
|
if (is_file($limit_file)) {
|
|
$json_str = file_get_contents($limit_file);
|
|
$limit_info = json_decode($json_str, true);
|
|
}
|
|
|
|
if (!$limit_info || $limit_info['time'] != $time) {
|
|
$limit_info = [
|
|
'username' => $username,
|
|
'count' => 0,
|
|
'time' => $time
|
|
];
|
|
}
|
|
$limit_info['count']++;
|
|
file_put_contents($limit_file, json_encode($limit_info));
|
|
if ($limit_info['count'] >= 5) {
|
|
throw new BusinessException('鐧诲綍澶辫触娆℃暟杩囧锛岃5鍒嗛挓鍚庡啀璇?);
|
|
}
|
|
}
|
|
|
|
/**
|
|
* 瑙ｉ櫎鐧诲綍棰戠巼闄愬埗
|
|
* @param $username
|
|
* @return void
|
|
*/
|
|
protected function removeLoginLimit($username)
|
|
{
|
|
$limit_log_path = runtime_path() . '/login';
|
|
$limit_file = $limit_log_path . '/' . md5($username) . '.limit';
|
|
if (is_file($limit_file)) {
|
|
unlink($limit_file);
|
|
}
|
|
}
|
|
|
|
protected function checkDatabaseAvailable()
|
|
{
|
|
if (!config('plugin.admin.database')) {
|
|
throw new BusinessException('璇烽噸鍚痺ebman');
|
|
}
|
|
}
|
|
|
|
}
|