mirror of
https://gitee.com/ShopeX/OMS
synced 2026-04-29 12:05:37 +08:00
258 lines
8.6 KiB
PHP
Executable File
258 lines
8.6 KiB
PHP
Executable File
<?php
|
||
/**
|
||
* Copyright 2012-2026 ShopeX (https://www.shopex.cn)
|
||
*
|
||
* Licensed under the Apache License, Version 2.0 (the "License");
|
||
* you may not use this file except in compliance with the License.
|
||
* You may obtain a copy of the License at
|
||
*
|
||
* http://www.apache.org/licenses/LICENSE-2.0
|
||
*
|
||
* Unless required by applicable law or agreed to in writing, software
|
||
* distributed under the License is distributed on an "AS IS" BASIS,
|
||
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||
* See the License for the specific language governing permissions and
|
||
* limitations under the License.
|
||
*/
|
||
|
||
class ome_service_login {
|
||
|
||
/**
|
||
* 分销王登录回写地址
|
||
* @param Array $msg
|
||
*/
|
||
public function b2b_login_error($msg) {
|
||
$server_name = trim($_SERVER['SERVER_NAME']);
|
||
if(stristr($server_name,B2B_TG_URL)) {
|
||
$arr = array('msg'=>$msg,'url'=>$server_name);
|
||
$arr = json_encode($arr);
|
||
$arr = base64_encode($arr);
|
||
header('location: '.B2B_API_URL.'?act=loginFail&msg='.$arr);
|
||
exit;
|
||
}
|
||
}
|
||
|
||
public function signErrorReturn($params) {
|
||
|
||
if ($params['visitor_role'] == 'taobao') {
|
||
|
||
header("location: http://fuwu.taobao.com/service/my_service.htm");
|
||
exit;
|
||
} else {
|
||
|
||
return false;
|
||
}
|
||
}
|
||
|
||
public function realLogin($params, $type) {
|
||
|
||
// 如果是分销王登录
|
||
if($params['login_from']=='b2b') {
|
||
$account_id = $this->check_name($params['visitor_nick'],$params['visitor_pwd']);
|
||
if (!$account_id) {
|
||
$this->b2b_login_error('帐号或密码错误');
|
||
return false;
|
||
}
|
||
}else{
|
||
$account_id = $this->check_name($params['visitor_nick']);
|
||
|
||
//用户不存在则新建
|
||
//if (!$account_id) {
|
||
// $account_id = $this->insert_user($params, $type);
|
||
//}
|
||
}
|
||
|
||
if ($account_id) {
|
||
|
||
kernel::single('base_session')->start();
|
||
$_SESSION['account'][$type] = $account_id;
|
||
$_SESSION['login_time'] = time();
|
||
$_SESSION['needChangePassword'] = null;
|
||
$_SESSION['login_trust'] = true;
|
||
if ($params['visitor_role'] == 'taobao') {
|
||
|
||
app::get('omestart')->setConf('tb_session', $params['top_session']);
|
||
app::get('omestart')->setConf('tb_nick', $params['visitor_nick']);
|
||
app::get('omestart')->setConf('tb_uid', $params['visitor_id']);
|
||
}
|
||
|
||
$users = app::get('desktop')->model('users');
|
||
|
||
$aUser = $users->dump($account_id, '*');
|
||
$sdf['lastlogin'] = $_SESSION['login_time'] ? $_SESSION['login_time'] : time();
|
||
$sdf['logincount'] = $aUser['logincount'] + 1;
|
||
$users->update($sdf, array('user_id' => $account_id));
|
||
|
||
return true;
|
||
}
|
||
|
||
return false;
|
||
}
|
||
|
||
/**
|
||
* 检查_name
|
||
* @param mixed $login_name login_name
|
||
* @param mixed $login_password login_password
|
||
* @return mixed 返回验证结果
|
||
*/
|
||
public function check_name($login_name=null,$login_password=null) {
|
||
|
||
$account = app::get('pam')->model('account');
|
||
if($login_password!='') {
|
||
$row = $account->getList('account_id', array('login_name' => $login_name,'login_password' => $login_password));
|
||
}else{
|
||
$row = $account->getList('account_id', array('login_name' => $login_name));
|
||
}
|
||
|
||
if ($row)
|
||
return $row[0]['account_id'];
|
||
else
|
||
return false;
|
||
}
|
||
|
||
/**
|
||
* insert_user
|
||
* @param mixed $params 参数
|
||
* @param mixed $type type
|
||
* @return mixed 返回值
|
||
*/
|
||
public function insert_user($params, $type) {
|
||
|
||
if (!$params)
|
||
return false;
|
||
|
||
//[huishang]用户不存在时,使用传过来的登录密码
|
||
if($params['login_from']=='huishang'){
|
||
$login_password = $params['visitor_pwd'];
|
||
}else{
|
||
$login_password = md5(DB_PASSWORD);
|
||
}
|
||
|
||
$account = array(
|
||
'pam_account' => array(
|
||
'login_name' => $params['visitor_nick'],
|
||
'login_password' => $login_password,
|
||
'account_type' => $type,
|
||
'createtime' => time(),
|
||
),
|
||
'name' => $params['visitor_nick'],
|
||
'super' => 1,
|
||
'status' => 1
|
||
);
|
||
if (app::get('desktop')->model('users')->save($account)) {
|
||
|
||
return $account['pam_account']['account_id'];
|
||
} else {
|
||
|
||
return false;
|
||
}
|
||
}
|
||
|
||
/**
|
||
* login
|
||
* @param mixed $params 参数
|
||
* @return mixed 返回值
|
||
*/
|
||
public function login($params=null) {
|
||
if (!$params)
|
||
return false;
|
||
|
||
// SaaS 功能已禁用，密钥已删除
|
||
// SAAS 登录功能不再可用
|
||
if (isset($params['saas_params']) || isset($params['saas_sign']) || isset($params['saas_ts'])) {
|
||
$this->b2b_login_error('SAAS 登录功能已禁用');
|
||
return false;
|
||
}
|
||
|
||
// 以下代码已禁用（原 SAAS 登录逻辑）
|
||
// 由于密钥已删除，SAAS 相关功能无法使用
|
||
/*
|
||
$sign = strtoupper(md5(SASS_APP_KEY . $params['saas_params'] . $params['saas_ts'] . SAAS_SECRE_KEY));
|
||
|
||
// begin分销王登录
|
||
if($params['login_from']=='b2b') {
|
||
$sign = strtoupper(md5(B2B_APP_KEY . $params['saas_params'] . $params['saas_ts'] . B2B_SECRE_KEY));
|
||
}elseif($params['login_from']=='huishang'){
|
||
//汇尚免登
|
||
$sign = strtoupper(md5(HUISHANG_APP_KEY . $params['saas_params'] . $params['saas_ts'] . HUISHANG_SECRE_KEY));
|
||
}
|
||
// end
|
||
|
||
$saasParams = base64_decode($params['saas_params']);
|
||
$saasParams = @explode('&', $saasParams);
|
||
|
||
foreach ((array) $saasParams as $param) {
|
||
|
||
if (strpos($param, '=') === false) {
|
||
|
||
$key = $param;
|
||
$value = '';
|
||
} else {
|
||
$pos = strpos($param, '=');
|
||
$key = substr($param, 0, $pos);
|
||
$value = substr($param, $pos + 1, strlen($param) - $pos);
|
||
}
|
||
|
||
$sParams[$key] = $value;
|
||
}
|
||
|
||
if ($sign != $params['saas_sign']) {
|
||
//检验不通过
|
||
$this->b2b_login_error('签名错误');
|
||
return $this->signErrorReturn($sParams);
|
||
} else {
|
||
|
||
// begin 如果是分销王登录，必须输入帐号和密码
|
||
if($params['login_from']=='b2b') {
|
||
if (trim($sParams['visitor_nick'])=='' || trim($sParams['visitor_pwd'])=='') {
|
||
$this->b2b_login_error('帐号和密码不能为空');
|
||
return $this->signErrorReturn($sParams);
|
||
}
|
||
$sParams['login_from']='b2b';
|
||
}
|
||
elseif($params['login_from']=='huishang')
|
||
{
|
||
//[huishang]免登必须输入用户名(密码不会验证有效性,当用户不存在时,会保存密码)
|
||
if (trim($sParams['visitor_nick'])=='' || trim($sParams['visitor_pwd'])=='') {
|
||
$this->b2b_login_error('免登帐号和密码不能为空');
|
||
|
||
//die('Error：免登帐号和密码不能为空!');
|
||
|
||
return $this->signErrorReturn($sParams);
|
||
}
|
||
|
||
$sParams['login_from'] = 'huishang';
|
||
}
|
||
// end
|
||
|
||
if (is_array($saasParams) && !empty($saasParams)) {
|
||
if (abs(time() - $params['saas_ts']) > 86400) {
|
||
//检查时间，已经过了有效期
|
||
$this->b2b_login_error('登录超时');
|
||
return $this->signErrorReturn($sParams);
|
||
} else {
|
||
|
||
if (trim($sParams['server_name']) != trim($_SERVER['SERVER_NAME'])) {
|
||
$this->b2b_login_error('网址不匹配');
|
||
return $this->signErrorReturn($sParams);
|
||
} else {
|
||
|
||
return $this->realLogin($sParams, $params['type']);
|
||
}
|
||
}
|
||
} else {
|
||
if (trim($sParams['server_name']) != trim($_SERVER['SERVER_NAME'])) {
|
||
|
||
return $this->signErrorReturn($sParams);
|
||
} else {
|
||
|
||
$sParams['visitor_nick'] = 'admin';
|
||
return $this->realLogin($sParams, $params['type']);
|
||
}
|
||
}
|
||
}
|
||
*/
|
||
}
|
||
|
||
}
|