ProxyPanel/app/Http/Controllers/LoginController.php

<?php

namespace App\Http\Controllers;

use App\Http\Models\User;
use App\Http\Models\UserLoginLog;
use Illuminate\Http\Request;
use Response;
use Redirect;
use Captcha;
use Session;
use Cache;
use Log;

/**
 * 登录控制器
 * Class LoginController
 *
 * @package App\Http\Controllers
 */
class LoginController extends Controller
{
    // 登录页
    public function index(Request $request)
    {
        if ($request->method() == 'POST') {
            $username = trim($request->get('username'));
            $password = trim($request->get('password'));
            $captcha = trim($request->get('captcha'));

            if (empty($username) || empty($password)) {
                Session::flash('errorMsg', '请输入用户名和密码');

                return Redirect::back();
            }

            // 是否校验验证码
            if ($this->systemConfig['is_captcha']) {
                if (!Captcha::check($captcha)) {
                    Session::flash('errorMsg', '验证码错误，请重新输入');

                    return Redirect::back()->withInput();
                }
            }

            $user = User::query()->where('username', $username)->where('password', md5($password))->first();
            if (!$user) {
                Session::flash('errorMsg', '用户名或密码错误');

                return Redirect::back()->withInput();
            } elseif (!$user->is_admin && $user->status < 0) {
                Session::flash('errorMsg', '账号已禁用');

                return Redirect::back();
            } elseif ($user->status == 0 && $this->systemConfig['is_active_register'] && $user->is_admin == 0) {
                Session::flash('errorMsg', '账号未激活，请先<a href="/activeUser?username=' . $user->username . '" target="_blank"><span style="color:#000">【激活账号】</span></a>');

                return Redirect::back()->withInput();
            }

            // 更新登录信息
            $remember_token = "";
            if ($request->get('remember')) {
                $remember_token = makeRandStr(20);

                User::query()->where('id', $user->id)->update(['last_login' => time(), 'remember_token' => $remember_token]);
            } else {
                User::query()->where('id', $user->id)->update(['last_login' => time(), 'remember_token' => '']);
            }

            // 登录送积分
            if ($this->systemConfig['login_add_score']) {
                if (!Cache::has('loginAddScore_' . md5($username))) {
                    $score = mt_rand($this->systemConfig['min_rand_score'], $this->systemConfig['max_rand_score']);
                    $ret = User::query()->where('id', $user->id)->increment('score', $score);
                    if ($ret) {
                        $this->addUserScoreLog($user->id, $user->score, $user->score + $score, $score, '登录送积分');

                        // 登录多久后再登录可以获取积分
                        $ttl = $this->systemConfig['login_add_score_range'] ? $this->systemConfig['login_add_score_range'] : 1440;
                        Cache::put('loginAddScore_' . md5($username), '1', $ttl);

                        Session::flash('successMsg', '欢迎回来，系统自动赠送您 ' . $score . ' 积分，您可以用它兑换流量包');
                    }
                }
            }

            // 写入登录日志
            $this->addUserLoginLog($user->id, $request->getClientIp());

            // 重新取出用户信息
            $userInfo = User::query()->where('id', $user->id)->first();

            Session::put('user', $userInfo->toArray());

            // 根据权限跳转
            if ($user->is_admin) {
                return Redirect::to('admin')->cookie('remember', $remember_token, 36000);
            }

            return Redirect::to('/')->cookie('remember', $remember_token, 36000);
        } else {
            if ($request->cookie("remember")) {
                $u = User::query()->where("remember_token", $request->cookie("remember"))->first();
                if ($u) {
                    Session::put('user', $u->toArray());

                    if ($u->is_admin) {
                        return Redirect::to('admin');
                    }

                    return Redirect::to('/');
                }
            }

            $view['is_captcha'] = $this->systemConfig['is_captcha'];
            $view['is_register'] = $this->systemConfig['is_register'];
            $view['website_home_logo'] = $this->systemConfig['website_home_logo'];
            $view['website_analytics'] = $this->systemConfig['website_analytics'];
            $view['website_customer_service'] = $this->systemConfig['website_customer_service'];

            return Response::view('login', $view);
        }
    }

    // 退出
    public function logout(Request $request)
    {
        Session::flush();

        return Redirect::to('login')->cookie('remember', "", 36000);
    }

    // 添加用户登录日志
    private function addUserLoginLog($userId, $ip)
    {
        // 调用淘宝IP接口查询IP信息
        $ipInfo = $this->getIPInfo($ip);

        $log = new UserLoginLog();
        $log->user_id = $userId;
        $log->ip = $ip;
        $log->country = $ipInfo->country;
        $log->country_id = $ipInfo->country_id;
        $log->region = $ipInfo->region;
        $log->region_id = $ipInfo->region_id;
        $log->city = $ipInfo->city;
        $log->city_id = $ipInfo->city_id;
        $log->county = $ipInfo->county;
        $log->county_id = $ipInfo->county_id;
        $log->isp = $ipInfo->isp;
        $log->isp_id = $ipInfo->isp_id;
        $log->save();
    }

    // 获取IP信息
    private function getIPInfo($ip)
    {
        $url = 'http://ip.taobao.com/service/getIpInfo.php?ip=' . $ip;
        $result = $this->curlRequest($url);
        Log::info("登录获取IP信息：" . $result);
        $result = json_decode($result);
        if (!$result) {
            return false;
        }

        if ($result->code) {
            return false;
        }

        return $result->data;
    }

    // 发起一个CURL请求
    private function curlRequest($url, $data = [])
    {
        $ch = curl_init();
        curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
        curl_setopt($ch, CURLOPT_TIMEOUT, 500);
        // 为保证第三方服务器与微信服务器之间数据传输的安全性，所有微信接口采用https方式调用，必须使用下面2行代码打开ssl安全校验。
        // 如果在部署过程中代码在此处验证失败，请到 http://curl.haxx.se/ca/cacert.pem 下载新的证书判别文件。
        curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
        curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, false);
        curl_setopt($ch, CURLOPT_URL, $url);

        // 如果data有数据，则用POST请求
        if ($data) {
            curl_setopt($ch, CURLOPT_POST, 1);
            curl_setopt($ch, CURLOPT_POSTFIELDS, $data);
        }

        $res = curl_exec($ch);
        curl_close($ch);

        return $res;
    }
}