首页 / PHP / 登录认证

登录认证

内容导读

互联网集市收集整理的这篇技术教程文章主要介绍了登录认证，小编现在分享给大家，供广大互联网技能从业者学习和参考。文章包含12111字，纯文字阅读大概需要18分钟。

内容图文

<无详细内容>
  1. <?php
  2. /*
  3. *
  4. * @copyright 2011
  5. * @version $Id$
  6. * @access public
  7. * @property string $id
  8. * @property string $account
  9. * @property string $pwd
  10. * @property string $lastquesttime
  11. * @property string $lastip
  12. * @property int $regtime
  13. * @property int $accounttype
  14. * @property string $oldaccount
  15. * @property int $logintimes
  16. * @property string $currentIP
  17. * @property int $cid
  18. */
  19. class Resposity extends AdminActiveRecord {
  20. public $connectionPrefix = 'passport';
  21. protected $list = null;
  22. protected $passportConfig = null;
  23. public $oldaccount = '';
  24. /**
  25. * Returns the static model of the specified AR class.
  26. * @return Resposity the static model class
  27. */
  28. public static function model($className = __class__) {
  29. return parent::model ( $className );
  30. }
  32. /**
  33. * Modify it if you need.
  34. * @return mixed the primaryKey.
  35. */
  36. public function primaryKey() {
  37. return 'id';
  38. }
  40. /**
  41. * @return array validation rules for model attributes.
  42. */
  43. public function rules() {
  44. // NOTE: you should only define rules for those attributes that
  45. // will receive user inputs.s
  46. return array (
  47. array ('accounttype,cid', 'required' ),
  48. array ('accounttype', 'in', 'range' => array ('0', '1', '2', '3', '4', '5', '6', '7' ) ),
  49. array ('currentIP', 'ip')
  50. );
  51. }
  52. /**
  53. 根据主帐号获得用户信息
  54. **/
  55. protected function getUserInfoByMainAccount($account,$cid){
  56. $account=strtolower($account);
  57. $cacheKey = hash ( 'md5', $account.'^]'.$cid.'^]'.'0' );
  58. $user=UtilD::getCache('resposity',$cacheKey);
  59. if(is_array($user)){
  60. UtilD::clearNullOrEmptyValue ( $user );
  61. }else{
  62. $user=array();
  63. }
  64. if(count($user)){
  65. return $user;
  66. }else{
  67. $model = $this->find ( 'account=:account AND cid=:cid', array (':account' => $account,':cid' => $cid ) );
  68. if($model){
  69. $user=$model->getAttributes();
  70. unset($model);
  71. }
  72. UtilD::setCache('resposity',$cacheKey,$user);
  73. return $user;
  74. }
  75. }
  76. /**根据子帐号获得用户信息**/
  77. protected function getUserInfoByChildAccount($subaccount,$cid,$accounttype){
  78. if(!$this->validate(array('accounttype'), true)){
  79. return -1000;
  80. }
  81. $subaccount=strtolower($subaccount);
  82. $cacheKey = hash ( 'md5', $subaccount.'^]'.$cid.'^]'.$accounttype );
  83. $userAccounts=UtilD::getCache('resposity',$cacheKey);
  84. if(is_array($userAccounts)){
  85. UtilD::clearNullOrEmptyValue($userAccounts);
  86. }else{
  87. $userAccounts=array();
  88. }
  89. if(!count($userAccounts)){
  90. $accountRefer=new AccountRefer();
  91. $model=$accountRefer->find ( 'subaccount=:subaccount AND cid=:cid AND accounttype=:accounttype', array (':subaccount' => $subaccount,':cid' => $this->cid,':accounttype'=> $accounttype) );
  92. if($model){
  93. $userAccounts=$model->getAttributes();
  94. UtilD::setCache('resposity',$cacheKey,$userAccounts);
  95. }
  96. }
  97. if(isset($userAccounts['account'])){
  98. return $this->getUserInfoByMainAccount($userAccounts['account'],$userAccounts['cid']);
  99. }
  100. return array();
  101. }
  102. /**根据帐号类型获取用户数据**/
  103. public function getUserInfoByAccount(){
  104. if($this->accounttype==0){
  106. return $this->getUserInfoByMainAccount($this->account,$this->cid);
  107. }else{
  108. return $this->getUserInfoByChildAccount($this->account,$this->cid,$this->accounttype);
  109. }
  110. }
  111. /**
  112. * 通过主帐号获取子帐号
  113. */
  114. public function getSubAccountByMainAccount(){
  115. $c=new CDbCriteria();
  116. $c->addCondition('cid=:cid AND account=:account', 'AND');
  117. $c->params=array(':cid'=>$this->cid, ':account'=>$this->account);
  118. $refer=new AccountRefer();
  119. $result=$refer->getListByPage(1, 30, $c);
  120. $data=array();
  121. if($result['count']>0){
  122. foreach($result['data'] as $row){
  123. $data[$row['accounttype']]=$row['subaccount'];
  124. }
  125. }
  126. return $data;
  127. }
  128. /**
  129. 获得当前商户的操作等级
  130. 1 对自己添加的用户有完全权限，对其它机构添加的用户无权限
  131. 2 对自己添加的用户有完全权限，对accsessids指定机构的用户有查询权限
  132. **/
  133. public function getAccess(){
  134. if ($this->passportConfig === null) {
  135. $this->passportConfig = PassportConfig::model ()->getItemConfigById ( $this->cid );
  136. }
  137. $ip=Yii::app ()->request->getUserHostAddress();
  138. $ips=CJSON::decode($passportConfig['iprouters']);
  139. if(!in_array($ip,$ips)){
  140. throw new CHttpException(403, '您没有权限访问此页面！');
  141. }
  142. }
  143. /**修改名牌用户私有数据**/
  144. public function saveUserAttributes($tickets,array $attributes){
  145. try{
  146. $user=$this->getUserAttributes($tickets);
  147. if(empty($user) || !is_array($user)){
  148. return -1001;
  149. }
  150. $data=array();
  151. if($user[WebUserD::STORAGE_KEY]!=='[]'){
  152. $data=CJSON::decode($user[WebUserD::STORAGE_KEY]);
  153. }
  154. if(!is_array($data)){
  155. $data=array();
  156. }
  157. $attributes=array_change_key_case($attributes);
  158. foreach($attributes as $key=>$value){
  159. if(!is_array($value)){
  160. $data[$key]=$value;
  161. }else{
  162. if(!isset($data[$key])){
  163. $data[$key]=array();
  164. }
  165. $data[$key]=array_merge($data[$key],$attributes[$key]);
  166. }
  167. }
  168. $user[WebUserD::STORAGE_KEY]=CJSON::encode($data);
  169. $user['lastquesttime']=$_SERVER['REQUEST_TIME'];
  170. $user['data']=CJSON::encode($data);
  171. $this->setAttributes($user,false);
  172. !$this->currentIP && $this->currentIP='127.0.0.1';
  173. !$this->lastip && $this->lastip=$this->currentIP;
  176. !$this->logintimes && $this->logintimes = 0;
  177. $this->setIsNewRecord ( false );
  178. if($this->save()){
  179. UtilD::setCache('resposity', $tickets, $user);
  180. }else{
  181. return -1003;
  182. }
  183. }catch(Exception $ex){
  184. return -1004;
  185. }
  186. }
  187. /**修改帐号私有数据**/
  188. public function saveUserAttributesByName( array $attributes){
  189. $user=$this->getUserInfoByMainAccount($this->account,$this->cid);
  190. if(empty($user)){
  191. return -1001;
  192. }
  193. $cacheKey = hash ( 'md5', $user['account'].'^]'.$user['cid'].'^]'.'0' );
  194. return $this-> saveUserAttributes($cacheKey,$attributes);
  196. }
  197. /**
  198. @return array
  199. 根据令牌获得帐号全部数据
  200. **/
  201. public function getUserAttributes($tickets){
  202. $t = hash ( 'md5', $tickets . '&' . $this->currentIP . '&' . $this->accounttype . '&' . $this->cid );
  203. $ft=UtilD::getCache('resposity', $t);
  204. if (! $ft) {
  205. $ft = 0;
  206. } else {
  207. if ($ft > 4) { //如果1个ip 1分钟内连续5次获取失败
  208. return -1005;
  209. }
  210. }
  211. $user=UtilD::getCache('resposity',$tickets);
  212. if(!$user){
  213. $ft++;
  214. UtilD::setCache('resposity', $t,$ft,60);
  215. return -1001;
  216. }
  217. $user['lastquesttime']=$_SERVER['REQUEST_TIME'];
  218. UtilD::setCache('resposity',$tickets,$user);
  219. return $user;
  220. }
  221. /**添加主帐号**/
  222. public function add(){
  223. try{
  224. if($this->accounttype!=0){
  225. return -1000;
  226. }
  227. $this->account=strtolower($this->account);
  228. //检查主帐号是否存在
  229. $user=$this->getUserInfoByAccount();
  230. if(is_array($user) && count($user)){
  231. return -1006;
  232. }
  233. //开始保存数据
  234. $this->setIsNewRecord ( true );
  235. $this->lastquesttime=$_SERVER['REQUEST_TIME'];
  236. $this->regtime=$_SERVER['REQUEST_TIME'];
  237. $this->data='[]';
  238. $this->pwd=hash('sha256',$this->pwd);
  240. if(!$this->save()){
  241. return -1007;
  242. }else{
  243. $user=$this->getAttributes();
  244. $cacheKey = hash ( 'md5',$this->account.'^]'.$this->cid.'^]'.$this->accounttype );
  245. UtilD::setCache('resposity', $cacheKey, $user);
  246. }
  247. }catch(Exception $ex){
  248. return -1004;
  249. }
  250. }
  251. /**关联子帐号**/
  252. public function addChild($subaccount){
  253. try{
  254. //检查子是否有同名的帐号与主账号关联
  255. $subaccount=strtolower($subaccount);
  256. $user=$this->getUserInfoByChildAccount($subaccount,$this->cid,$this->accounttype);
  257. if($user){
  258. return -1008;
  259. }
  260. $user=$this->getUserInfoByMainAccount($this->account,$this->cid);
  261. if(!$user){
  262. return -1001;
  263. }
  264. //检查是否有类型的账号与主账号关联
  265. $accountRefer=new AccountRefer();
  266. $model=$accountRefer->find('pid=:pid AND cid=:cid AND accounttype=:accounttype', array (':pid'=>$user['id'],':cid'=>$this->cid,':accounttype'=>$this->accounttype));
  267. if($model){
  268. return -1009;
  269. }
  270. $this->account=strtolower($this->account);
  271. $accountRefer->cid=$this->cid;
  272. $accountRefer->setIsNewRecord ( true );
  273. $accountRefer->pid=$user['id'];
  274. $accountRefer->account=$user['account'];
  275. $accountRefer->subaccount=$subaccount;
  276. $accountRefer->accounttype=$this->accounttype;
  277. if($accountRefer->save()){
  278. $cacheKey = hash ( 'md5',$accountRefer->subaccount.'^]'.$accountRefer->cid.'^]'.$accountRefer->accounttype );
  279. UtilD::setCache('resposity', $cacheKey, $accountRefer->getAttributes());
  280. }else{
  281. return -1010;
  282. }
  283. }catch(Exception $ex){
  284. return -1004;
  285. }
  286. }
  287. /** 修改密码**/
  288. public function changePassword(){
  289. try{
  290. $user=$this->getUserInfoByAccount();//检查主帐号是否存在
  291. if(!$user){
  292. return -1001;
  293. }
  294. $this->setIsNewRecord ( false );
  295. $this->pwd=hash('sha256',$this->pwd);
  296. if($this->pwd!==$user['pwd']){
  297. $this->setIsNewRecord ( false );
  298. $user['pwd']=$this->pwd;
  299. $this->setAttributes($user,false);
  300. if($this->save()){
  301. $cacheKey = hash ( 'md5', $user['account'].'^]'.$user['cid'].'^]'.'0' );
  302. UtilD::setCache('resposity', $cacheKey, $user);
  303. }else{
  304. return -1011;
  305. }
  306. }
  307. }catch(Exception $ex){
  308. return -1004;
  309. }
  310. }
  311. /**修改子帐号**/
  312. public function repickAccount(){
  313. try{
  314. $accounts=$this->getUserInfoByChildAccount($this->oldaccount,$this->cid,$this->accounttype);
  315. if(!$accounts){
  316. return -1001;
  317. }
  318. $cacheKey = hash ( 'md5',$this->oldaccount.'^]'.$this->cid.'^]'.$this->accounttype );
  319. $user=UtilD::getCache('resposity', $cacheKey);
  320. if($this->oldaccount!==$this->account){
  321. $accountRefer=new AccountRefer();
  322. $accountRefer->setIsNewRecord ( false );
  323. $accountRefer->setAttributes($user,false);
  324. $accountRefer->subaccount=$this->account;
  325. if($accountRefer->save()){
  326. $user['subaccount']=$this->account;
  327. UtilD::setCache('resposity', $cacheKey,array());
  328. $cacheKey= hash ( 'md5',$user['subaccount'].'^]'.$this->cid.'^]'.$this->accounttype );
  329. UtilD::setCache('resposity', $cacheKey,$user);
  330. }else{
  331. return -1012;
  332. }
  333. }
  334. }catch(Exception $ex){
  335. return -1004;
  336. }
  337. }
  338. /**
  339. 删除主帐号
  340. **/
  341. public function deleteMainAccount(){
  342. try{
  343. $user=$this->getUserInfoByMainAccount($this->account,$this->cid);
  344. if(!$user){
  345. return -1001;
  346. }
  347. //检查是否有子帐号
  348. $accountRefer=new AccountRefer();
  349. $models=$accountRefer->findAll('pid=:pid', array (':pid'=>$user['id']));
  350. if(is_array($models)&&count($models)){
  351. foreach($models as $model){
  352. $k= hash ( 'md5', $model->subaccount.'^]'.$model->cid.'^]'.$model->accounttype );//删除子帐号缓存
  353. UtilD::setCache('resposity', $k,false);
  354. unset($model);
  355. }
  356. unset($models);
  357. }
  358. //删除主帐号缓存
  359. $cacheKey = hash ( 'md5', $this->account.'^]'.$this->cid.'^]'.'0' );
  360. if($this->deleteByPk($user['id'])){
  361. UtilD::setCache('resposity', $cacheKey,false);
  362. }else{
  363. return -1013;
  364. }
  365. }catch(Exception $ex){
  366. return -1004;
  367. }
  368. }
  369. /**删除子帐号**/
  370. public function deleteChildAccount(){
  371. try{
  372. $user=$this->getUserInfoByChildAccount($this->account,$this->cid,$this->accounttype);
  373. if(!$user){
  374. return -1014;
  375. }
  376. //删除缓存
  377. $cacheKey = hash ( 'md5', $this->account.'^]'.$this->cid.'^]'.$this->accounttype );
  378. $child=UtilD::getCache('resposity',$cacheKey);
  379. $accountRefer=new AccountRefer();
  380. if($accountRefer->deleteByPk($child['id'])){
  381. UtilD::setCache('resposity', $cacheKey,false);
  382. }else{
  383. return -1014;
  384. }
  385. }catch(Exception $ex){
  386. return -1004;
  387. }
  388. }
  389. public function login(){
  390. try{
  391. if(empty($this->currentIP)){
  392. return -1017;
  393. }
  394. $tickets=hash ( 'md5', $this->account.'^]'.$this->cid.'^]'.$this->accounttype );
  395. $t = hash ( 'md5', $tickets . '&' . $this->currentIP . '&' . $this->accounttype . '&' . $this->cid );
  396. $ft=UtilD::getCache('resposity', $t);
  397. if (! $ft) {
  398. $ft = 0;
  399. } else {
  400. if ($ft > 4) { //如果1个ip 1分钟内连续5次获取失败
  401. return -1015;
  402. }
  403. }
  404. $user=$this->getUserInfoByAccount();
  405. if(!$user){
  406. $ft++;
  407. UtilD::setCache('resposity', $t,$ft,60);
  408. return -1001;
  409. }
  410. $this->pwd=hash('sha256',$this->pwd);
  411. if($user['pwd']!==$this->pwd){
  412. $ft++;
  413. UtilD::setCache('resposity', $t,$ft,60);
  414. return -1016;
  415. }
  416. $tickets=hash ( 'md5', $user['account'].'^]'.$user['cid'].'^]'.'0' );
  417. //更新登录次数和最后请求时间
  418. if(!isset($user['currentIP'])){
  419. $user['currentIP']=$this->currentIP;
  420. }
  421. $user['lastip']=$user['currentIP'];
  422. $user['currentIP']=$this->currentIP;
  423. if(!isset($user['logintimes'])){
  424. $user['logintimes']=0;
  425. }
  426. $user['logintimes']++;
  427. $user['lastquesttime']=$_SERVER['REQUEST_TIME'];
  428. $this->setAttributes($user,false);
  429. if($this->save()){
  430. UtilD::setCache('resposity', $tickets,$user);
  431. return array('tickets'=>$tickets);
  432. }else{
  433. return -1017;
  434. }
  435. }catch(Exception $ex){
  436. return -1004;
  437. }
  438. }
  439. }

内容总结

以上是互联网集市为您收集整理的登录认证全部内容，希望文章能够帮你解决登录认证所遇到的程序开发问题。 如果觉得互联网集市技术教程内容还不错，欢迎将互联网集市网站推荐给程序员好友。

内容备注

版权声明：本文内容由互联网用户自发贡献，该文观点与技术仅代表作者本人。本站仅提供信息存储空间服务，不拥有所有权，不承担相关法律责任。如发现本站有涉嫌侵权/违法违规的内容， 请发送邮件至 gblab@vip.qq.com 举报，一经查实，本站将立刻删除。

内容手机端

扫描二维码推送至手机访问。

本文链接：https://qyyshop.com/info/164310.html

来源：【匿名】