PageRenderTime 43ms CodeModel.GetById 18ms RepoModel.GetById 0ms app.codeStats 0ms

/e/class/qmemberfun.php

https://github.com/westeast/xwdede
PHP | 282 lines | 251 code | 11 blank | 20 comment | 28 complexity | 3c1c950ef3f6ca98979749c07381f177 MD5 | raw file
    

  1. <?php

    2. 

  2. //加密

    3. 

  3. function QMReturnCheckPass($userid,$username,$email,$ecms=1){

    4. 

  4. 	global $phome_cookieckrnd;

    5. 

  5. 	$r['rnd']=make_password(12);

    6. 

  6. 	$r['dotime']=time();

    7. 

  7. 	$r['checkpass']=md5(md5($r['rnd'].'-'.$userid.'-'.$r['dotime'].'-'.$ecms).$phome_cookieckrnd);

    8. 

  8. 	$r['ecms']=$ecms;

    9. 

  9. 	return $r;

    10. 

  10. }

    11. 

  11. 

    12. 

  12. //验证

    13. 

  13. function QMReturnCheckThePass($ckuserid,$ckpass,$cktime,$authstr,$ecms=1){

    14. 

  14. 	global $empire,$dbtbpre,$phome_cookieckrnd,$public_r;

    15. 

  15. 	$f=$ecms==2?'acttime':'getpasstime';

    16. 

  16. 	$time=time();

    17. 

  17. 	$pr=$empire->fetch1("select ".$f." from {$dbtbpre}enewspublic limit 1");

    18. 

  18. 	$ar=explode('||',$authstr);

    19. 

  19. 	if($cktime>$time||$time-$cktime>$pr[$f]*3600||$ar[0]!=$cktime)

    20. 

  20. 	{

    21. 

  21. 		printerror('GPOutTime',$public_r['newsurl'],1);

    22. 

  22. 	}

    23. 

  23. 	$pass=md5(md5($ar[2].'-'.$ckuserid.'-'.$ar[0].'-'.$ar[1]).$phome_cookieckrnd);

    24. 

  24. 	if($pass!=$ckpass)

    25. 

  25. 	{

    26. 

  26. 		printerror('GPErrorPass',$public_r['newsurl'],1);

    27. 

  27. 	}

    28. 

  28. }

    29. 

  29. 

    30. 

  30. //替换邮件内容变量

    31. 

  31. function QMRepEmailtext($userid,$username,$email,$pageurl,$title,$text){

    32. 

  32. 	global $empire,$dbtbpre,$public_r;

    33. 

  33. 	$date=date("Y-m-d");

    34. 

  34. 	$r[text]=str_replace('[!--pageurl--]',$pageurl,$text);

    35. 

  35. 	$r[text]=str_replace('[!--username--]',$username,$r[text]);

    36. 

  36. 	$r[text]=str_replace('[!--email--]',$email,$r[text]);

    37. 

  37. 	$r[text]=str_replace('[!--date--]',$date,$r[text]);

    38. 

  38. 	$r[text]=str_replace('[!--sitename--]',$public_r[sitename],$r[text]);

    39. 

  39. 	$r[text]=str_replace('[!--news.url--]',$public_r[newsurl],$r[text]);

    40. 

  40. 	$r[title]=str_replace('[!--pageurl--]',$pageurl,$title);

    41. 

  41. 	$r[title]=str_replace('[!--username--]',$username,$r[title]);

    42. 

  42. 	$r[title]=str_replace('[!--email--]',$email,$r[title]);

    43. 

  43. 	$r[title]=str_replace('[!--date--]',$date,$r[title]);

    44. 

  44. 	$r[title]=str_replace('[!--sitename--]',$public_r[sitename],$r[title]);

    45. 

  45. 	$r[title]=str_replace('[!--news.url--]',$public_r[newsurl],$r[title]);

    46. 

  46. 	return $r;

    47. 

  47. }

    48. 

  48. 

    49. 

  49. //--------------- 取回密码 --------------

    50. 

  50. 

    51. 

  51. //发送取回密码邮件

    52. 

  52. function SendGetPasswordEmail($add){

    53. 

  53. 	global $empire,$dbtbpre,$public_r,$user_tablename,$user_username,$user_userid,$user_email;

    54. 

  54. 	if(!$public_r['opengetpass'])

    55. 

  55. 	{

    56. 

  56. 		printerror('CloseGetPassword','',1);

    57. 

  57. 	}

    58. 

  58. 	$username=trim($add[username]);

    59. 

  59. 	$email=trim($add[email]);

    60. 

  60. 	if(!$username||!$email)

    61. 

  61. 	{

    62. 

  62. 		printerror("EmptyGetPassword","history.go(-1)",1);

    63. 

  63. 	}

    64. 

  64. 	//验证码

    65. 

  65. 	$key=$add['key'];

    66. 

  66. 	$keyvname='checkgetpasskey';

    67. 

  67. 	ecmsCheckShowKey($keyvname,$key,1);

    68. 

  68. 	$username=RepPostVar($username);

    69. 

  69. 	$email=RepPostStr($email);

    70. 

  70. 	if(!chemail($email))

    71. 

  71. 	{

    72. 

  72. 		printerror("EmailFail","history.go(-1)",1);

    73. 

  73. 	}

    74. 

  74. 	//编码转换

    75. 

  75. 	$utfusername=doUtfAndGbk($username,0);

    76. 

  76. 	$ur=$empire->fetch1("select ".$user_userid.",".$user_username.",".$user_email." from {$user_tablename} where ".$user_username."='$utfusername' limit 1");

    77. 

  77. 	$utfemail=doUtfAndGbk($ur[$user_email],1);

    78. 

  78. 	if(!$ur[$user_userid]||$utfemail!=$email)

    79. 

  79. 	{

    80. 

  80. 		printerror("ErrorGPUsername","history.go(-1)",1);

    81. 

  81. 	}

    82. 

  82. 	$passr=QMReturnCheckPass($ur[$user_userid],$username,$email,1);

    83. 

  83. 	$authstr=$passr['dotime'].'||'.$passr['ecms'].'||'.$passr['rnd'];

    84. 

  84. 	$sql=DoUpdateMemberAuthstr($ur[$user_userid],$authstr);

    85. 

  85. 	$url=eReturnDomainSiteUrl().'e/member/GetPassword/getpass.php?id='.$ur[$user_userid].'&cc='.$passr[checkpass].'&tt='.$passr['dotime'];

    86. 

  86. 	//发送邮件

    87. 

  87. 	$pr=$empire->fetch1("select getpasstext,getpasstitle from {$dbtbpre}enewspublic limit 1");

    88. 

  88. 	@include(ECMS_PATH.'e/class/SendEmail.inc.php');

    89. 

  89. 	$textr=QMRepEmailtext($ur[$user_userid],$username,$email,$url,$pr['getpasstitle'],$pr['getpasstext']);

    90. 

  90. 	$sm=EcmsToSendMail($email,$textr['title'],$textr['text']);

    91. 

  91. 	ecmsEmptyShowKey($keyvname);//清空验证码

    92. 

  92. 	printerror("SendGetPasswordEmailSucess",$public_r['newsurl'],1);

    93. 

  93. }

    94. 

  94. 

    95. 

  95. //接收验证信息

    96. 

  96. function CheckGetPassword($add,$ecms=1){

    97. 

  97. 	global $empire,$dbtbpre,$public_r,$user_tablename,$user_username,$user_userid,$user_email,$user_checked,$user_group;

    98. 

  98. 	$r['id']=(int)$add['id'];

    99. 

  99. 	$r['tt']=(int)$add['tt'];

    100. 

  100. 	$r['cc']=RepPostVar($add['cc']);

    101. 

  101. 	if(!$r[id]||!$r[tt]||!$r[cc])

    102. 

  102. 	{

    103. 

  103. 		printerror('GPErrorPass',$public_r['newsurl'],1);

    104. 

  104. 	}

    105. 

  105. 	$ur=$empire->fetch1("select ".$user_userid.",".$user_username.",".$user_checked.",".$user_group." from {$user_tablename} where ".$user_userid."='$r[id]' limit 1");

    106. 

  106. 	if(empty($ur[$user_userid]))

    107. 

  107. 	{

    108. 

  108. 		printerror('GPErrorPass',$public_r['newsurl'],1);

    109. 

  109. 	}

    110. 

  110. 	$addur=$empire->fetch1("select authstr from {$dbtbpre}enewsmemberadd where userid='$r[id]' limit 1");

    111. 

  111. 	if(!$addur['authstr'])

    112. 

  112. 	{

    113. 

  113. 		printerror('GPErrorPass',$public_r['newsurl'],1);

    114. 

  114. 	}

    115. 

  115. 	QMReturnCheckThePass($r['id'],$r['cc'],$r['tt'],$addur['authstr'],$ecms);

    116. 

  116. 	$r['username']=$ur[$user_username];

    117. 

  117. 	$r['checked']=$ur[$user_checked];

    118. 

  118. 	$r['groupid']=$ur[$user_group];

    119. 

  119. 	return $r;

    120. 

  120. }

    121. 

  121. 

    122. 

  122. //修改密码

    123. 

  123. function DoGetPassword($add){

    124. 

  124. 	global $empire,$dbtbpre,$public_r,$user_tablename,$user_username,$user_userid,$user_email,$user_password,$user_dopass,$user_salt,$user_saltnum;

    125. 

  125. 	if(!$public_r['opengetpass'])

    126. 

  126. 	{

    127. 

  127. 		printerror('CloseGetPassword','',1);

    128. 

  128. 	}

    129. 

  129. 	$r=CheckGetPassword($add,1);

    130. 

  130. 	$password=RepPostVar($add['newpassword']);

    131. 

  131. 	$add['renewpassword']=RepPostVar($add['renewpassword']);

    132. 

  132. 	if($password!=$add['renewpassword'])

    133. 

  133. 	{

    134. 

  134. 		printerror('NotRepassword','',1);

    135. 

  135. 	}

    136. 

  136. 	//密码

    137. 

  137. 	$sa='';

    138. 

  138. 	if(empty($user_dopass))//单重md5

    139. 

  139. 	{

    140. 

  140. 		$password=md5($password);

    141. 

  141. 	}

    142. 

  142. 	elseif($user_dopass==2)//双重md5

    143. 

  143. 	{

    144. 

  144. 		$salt=make_password($user_saltnum);

    145. 

  145. 		$password=md5(md5($password).$salt);

    146. 

  146. 		$sa=",".$user_salt."='$salt'";

    147. 

  147. 	}

    148. 

  148. 	elseif($user_dopass==3)//16位md5

    149. 

  149. 	{

    150. 

  150. 		$password=substr(md5($password),8,16);

    151. 

  151. 	}

    152. 

  152. 	$sql=$empire->query("update {$user_tablename} set ".$user_password."='$password'".$sa." where ".$user_userid."='$r[id]'");

    153. 

  153. 	$usql=$empire->query("update {$dbtbpre}enewsmemberadd set authstr='' where userid='$r[id]'");

    154. 

  154. 	printerror('GetPasswordSuccess',$public_r['newsurl'],1);

    155. 

  155. }

    156. 

  156. 

    157. 

  157. 

    158. 

  158. //--------------- 帐号激活 --------------

    159. 

  159. 

    160. 

  160. //发送激活帐号邮件

    161. 

  161. function SendActUserEmail($userid,$username,$email){

    162. 

  162. 	global $empire,$dbtbpre,$public_r,$user_tablename,$user_username,$user_userid,$user_email;

    163. 

  163. 	$passr=QMReturnCheckPass($userid,$username,$email,2);

    164. 

  164. 	$authstr=$passr['dotime'].'||'.$passr['ecms'].'||'.$passr['rnd'];

    165. 

  165. 	$sql=DoUpdateMemberAuthstr($userid,$authstr);

    166. 

  166. 	$url=eReturnDomainSiteUrl().'e/enews/?enews=DoActUser&id='.$userid.'&cc='.$passr[checkpass].'&tt='.$passr['dotime'];

    167. 

  167. 	//发送邮件

    168. 

  168. 	$pr=$empire->fetch1("select acttext,acttitle from {$dbtbpre}enewspublic limit 1");

    169. 

  169. 	@include(ECMS_PATH.'e/class/SendEmail.inc.php');

    170. 

  170. 	$textr=QMRepEmailtext($userid,$username,$email,$url,$pr['acttitle'],$pr['acttext']);

    171. 

  171. 	$sm=EcmsToSendMail($email,$textr['title'],$textr['text']);

    172. 

  172. 	printerror("SendActUserEmailSucess",$public_r['newsurl'],1);

    173. 

  173. }

    174. 

  174. 

    175. 

  175. //激活帐号

    176. 

  176. function DoActUser($add){

    177. 

  177. 	global $empire,$dbtbpre,$public_r,$user_tablename,$user_username,$user_userid,$user_checked;

    178. 

  178. 	$r=CheckGetPassword($add,2);

    179. 

  179. 	if(!$r['checked'])

    180. 

  180. 	{

    181. 

  181. 		$checked=ReturnGroupChecked($r[groupid]);

    182. 

  182. 		if($checked)

    183. 

  183. 		{

    184. 

  184. 			$sql=$empire->query("update {$user_tablename} set ".$user_checked."=1 where ".$user_userid."='$r[id]'");

    185. 

  185. 		}

    186. 

  186. 	}

    187. 

  187. 	$usql=$empire->query("update {$dbtbpre}enewsmemberadd set authstr='' where userid='$r[id]'");

    188. 

  188. 	printerror('ActUserSuccess',$public_r['newsurl'],1);

    189. 

  189. }

    190. 

  190. 

    191. 

  191. //重新发送帐号激活邮件

    192. 

  192. function DoRegSend($add){

    193. 

  193. 	global $empire,$dbtbpre,$public_r,$user_tablename,$user_username,$user_userid,$user_email,$user_password,$user_dopass,$user_salt,$user_checked;

    194. 

  194. 	if($public_r['regacttype']!=1)

    195. 

  195. 	{

    196. 

  196. 		printerror('CloseRegAct','',1);

    197. 

  197. 	}

    198. 

  198. 	$username=trim($add[username]);

    199. 

  199. 	$password=trim($add[password]);

    200. 

  200. 	$email=trim($add[email]);

    201. 

  201. 	$newemail=trim($add[newemail]);

    202. 

  202. 	if(!$username||!$password||!$email)

    203. 

  203. 	{

    204. 

  204. 		printerror("EmptyRegAct","history.go(-1)",1);

    205. 

  205. 	}

    206. 

  206. 	//验证码

    207. 

  207. 	$key=$add['key'];

    208. 

  208. 	$keyvname='checkregsendkey';

    209. 

  209. 	ecmsCheckShowKey($keyvname,$key,1);

    210. 

  210. 	$username=RepPostVar($username);

    211. 

  211. 	$password=RepPostVar($password);

    212. 

  212. 	$username=RepPostStr($username);

    213. 

  213. 	$email=RepPostStr($email);

    214. 

  214. 	$newemail=RepPostStr($newemail);

    215. 

  215. 	if(!chemail($email))

    216. 

  216. 	{

    217. 

  217. 		printerror("EmailFail","history.go(-1)",1);

    218. 

  218. 	}

    219. 

  219. 	if($newemail)

    220. 

  220. 	{

    221. 

  221. 		if(!chemail($newemail))

    222. 

  222. 		{

    223. 

  223. 			printerror("EmailFail","history.go(-1)",1);

    224. 

  224. 		}

    225. 

  225. 		$sendemail=$newemail;

    226. 

  226. 	}

    227. 

  227. 	else

    228. 

  228. 	{

    229. 

  229. 		$sendemail=$email;

    230. 

  230. 	}

    231. 

  231. 	//编码转换

    232. 

  232. 	$utfusername=doUtfAndGbk($username,0);

    233. 

  233. 	$password=doUtfAndGbk($password,0);

    234. 

  234. 	//密码

    235. 

  235. 	if(empty($user_dopass))//单重md5

    236. 

  236. 	{

    237. 

  237. 		$password=md5($password);

    238. 

  238. 	}

    239. 

  239. 	if($user_dopass==3)//16位md5

    240. 

  240. 	{

    241. 

  241. 		$password=substr(md5($password),8,16);

    242. 

  242. 	}

    243. 

  243. 	//双重md5

    244. 

  244. 	$num=0;

    245. 

  245. 	if($user_dopass==2)

    246. 

  246. 	{

    247. 

  247. 	    $ur=$empire->fetch1("select ".$user_userid.",".$user_salt.",".$user_password." from ".$user_tablename." where ".$user_username."='$utfusername' limit 1");

    248. 

  248. 		$password=md5(md5($password).$ur[$user_salt]);

    249. 

  249. 		$num=0;

    250. 

  250. 		if($password==$ur[$user_password])

    251. 

  251. 		{$num=1;}

    252. 

  252. 		if(empty($ur[$user_userid]))

    253. 

  253. 		{$num=0;}

    254. 

  254.     }

    255. 

  255. 	else

    256. 

  256. 	{

    257. 

  257. 		$num=$empire->gettotal("select count(*) as total from ".$user_tablename." where ".$user_username."='$utfusername' and ".$user_password."='".$password."' limit 1");

    258. 

  258. 	}

    259. 

  259. 	if(!$num)

    260. 

  260. 	{

    261. 

  261. 		printerror("ErrorRegActUser","history.go(-1)",1);

    262. 

  262. 	}

    263. 

  263. 	$r=$empire->fetch1("select * from ".$user_tablename." where ".$user_username."='$utfusername' limit 1");

    264. 

  264. 	$utfemail=doUtfAndGbk($r[$user_email],1);

    265. 

  265. 	if(!$r[$user_userid]||$utfemail!=$email)

    266. 

  266. 	{

    267. 

  267. 		printerror("ErrorRegActUser","history.go(-1)",1);

    268. 

  268. 	}

    269. 

  269. 	if($r[$user_checked])

    270. 

  270. 	{

    271. 

  271. 		printerror("HaveRegActUser",'',1);

    272. 

  272. 	}

    273. 

  273. 	$addr=$empire->fetch1("select userid,authstr from {$dbtbpre}enewsmemberadd where userid='".$r[$user_userid]."' limit 1");

    274. 

  274. 	$ar=explode('||',$addr['authstr']);

    275. 

  275. 	if(!$addr['userid']||!$addr['authstr']||$ar[1]!=2)

    276. 

  276. 	{

    277. 

  277. 		printerror("HaveRegActUser",'',1);

    278. 

  278. 	}

    279. 

  279. 	ecmsEmptyShowKey($keyvname);//清空验证码

    280. 

  280. 	SendActUserEmail($r[$user_userid],$username,$sendemail);

    281. 

  281. }

    282. 

  282. ?>
    283.