AuthController.php 31 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663664665666667668669670671672673674675676677678679680681682683684685686687688689690691692693694695696697698699700701702703704705706707708709710711712713714715716717718719720721722723724725726727728729730731732733734735736737738739740741742743744745746747748749750751752753754755756757758759760761762763764765766767768769770771772773774775776777778779780781782783784785786787788789790791792793794795796797798799800801802803804805806807808809810811812813814815816817818819820821822823824825826827828829830831832833834835836837838839840
  1. <?php
  2. namespace App\Http\Controllers;
  3. use App\Components\Helpers;
  4. use App\Components\IPIP;
  5. use App\Components\QQWry;
  6. use App\Http\Models\Invite;
  7. use App\Http\Models\User;
  8. use App\Http\Models\UserLoginLog;
  9. use App\Http\Models\UserLabel;
  10. use App\Http\Models\UserSubscribe;
  11. use App\Http\Models\Verify;
  12. use App\Http\Models\VerifyCode;
  13. use App\Mail\activeUser;
  14. use App\Mail\resetPassword;
  15. use App\Mail\sendVerifyCode;
  16. use Illuminate\Http\Request;
  17. use Response;
  18. use Redirect;
  19. use Captcha;
  20. use Session;
  21. use Cache;
  22. use Auth;
  23. use Mail;
  24. use Hash;
  25. use Log;
  26. /**
  27. * 认证控制器
  28. *
  29. * Class AuthController
  30. *
  31. * @package App\Http\Controllers
  32. */
  33. class AuthController extends Controller
  34. {
  35. protected static $systemConfig;
  36. function __construct()
  37. {
  38. self::$systemConfig = Helpers::systemConfig();
  39. }
  40. // 登录
  41. public function login(Request $request)
  42. {
  43. if ($request->method() == 'POST') {
  44. $username = trim($request->get('username'));
  45. $password = trim($request->get('password'));
  46. $captcha = trim($request->get('captcha'));
  47. $remember = trim($request->get('remember'));
  48. if (empty($username) || empty($password)) {
  49. Session::flash('errorMsg', '请输入用户名和密码');
  50. return Redirect::back();
  51. }
  52. // 是否校验验证码
  53. if (self::$systemConfig['is_captcha']) {
  54. if (!Captcha::check($captcha)) {
  55. Session::flash('errorMsg', '验证码错误,请重新输入');
  56. return Redirect::back()->withInput();
  57. }
  58. }
  59. if (!Auth::attempt(['username' => $username, 'password' => $password], $remember)) {
  60. Session::flash('errorMsg', '用户名或密码错误');
  61. return Redirect::back()->withInput();
  62. } elseif (!Auth::user()->is_admin && Auth::user()->status < 0) {
  63. Session::flash('errorMsg', '账号已禁用');
  64. return Redirect::back();
  65. } elseif (Auth::user()->status == 0 && self::$systemConfig['is_active_register'] && Auth::user()->is_admin == 0) {
  66. Session::flash('errorMsg', '账号未激活,请点击<a href="/activeUser?username=' . Auth::user()->username . '" target="_blank"><span style="color:#000">【激活账号】</span></a>');
  67. return Redirect::back()->withInput();
  68. }
  69. // 登录送积分
  70. if (self::$systemConfig['login_add_score']) {
  71. if (!Cache::has('loginAddScore_' . md5($username))) {
  72. $score = mt_rand(self::$systemConfig['min_rand_score'], self::$systemConfig['max_rand_score']);
  73. $ret = User::query()->where('id', Auth::user()->id)->increment('score', $score);
  74. if ($ret) {
  75. $this->addUserScoreLog(Auth::user()->id, Auth::user()->score, Auth::user()->score + $score, $score, '登录送积分');
  76. // 登录多久后再登录可以获取积分
  77. $ttl = self::$systemConfig['login_add_score_range'] ? self::$systemConfig['login_add_score_range'] : 1440;
  78. Cache::put('loginAddScore_' . md5($username), '1', $ttl);
  79. Session::flash('successMsg', '欢迎回来,系统自动赠送您 ' . $score . ' 积分,您可以用它兑换流量');
  80. }
  81. }
  82. }
  83. // 写入登录日志
  84. $this->addUserLoginLog(Auth::user()->id, getClientIp());
  85. // 更新登录信息
  86. User::query()->where('id', Auth::user()->id)->update(['last_login' => time()]);
  87. // 根据权限跳转
  88. if (Auth::user()->is_admin) {
  89. return Redirect::to('admin');
  90. }
  91. return Redirect::to('/');
  92. } else {
  93. if (Auth::check()) {
  94. if (Auth::user()->is_admin) {
  95. return Redirect::to('admin');
  96. }
  97. return Redirect::to('/');
  98. }
  99. return Response::view('auth.login');
  100. }
  101. }
  102. // 退出
  103. public function logout(Request $request)
  104. {
  105. Auth::logout();
  106. return Redirect::to('login');
  107. }
  108. // 注册
  109. public function register(Request $request)
  110. {
  111. $cacheKey = 'register_times_' . md5(getClientIp()); // 注册限制缓存key
  112. if ($request->method() == 'POST') {
  113. $username = trim($request->get('username'));
  114. $password = trim($request->get('password'));
  115. $repassword = trim($request->get('repassword'));
  116. $captcha = trim($request->get('captcha'));
  117. $code = trim($request->get('code'));
  118. $verify_code = trim($request->get('verify_code'));
  119. $register_token = $request->get('register_token');
  120. $aff = intval($request->get('aff', 0));
  121. // 防止重复提交
  122. $session_register_token = Session::get('register_token');
  123. if (empty($register_token) || $register_token != $session_register_token) {
  124. Session::flash('errorMsg', '请勿重复请求,刷新一下页面再试试');
  125. return Redirect::back()->withInput();
  126. } else {
  127. Session::forget('register_token');
  128. }
  129. // 是否开启注册
  130. if (!self::$systemConfig['is_register']) {
  131. Session::flash('errorMsg', '系统维护,暂停注册');
  132. return Redirect::back();
  133. }
  134. if (empty($username)) {
  135. Session::flash('errorMsg', '请输入用户名');
  136. return Redirect::back()->withInput();
  137. } elseif (empty($password)) {
  138. Session::flash('errorMsg', '请输入密码');
  139. return Redirect::back()->withInput();
  140. } elseif (empty($repassword)) {
  141. Session::flash('errorMsg', '请重新输入密码');
  142. return Redirect::back()->withInput();
  143. } elseif (md5($password) != md5($repassword)) {
  144. Session::flash('errorMsg', '两次输入密码不一致,请重新输入');
  145. return Redirect::back()->withInput($request->except(['password', 'repassword']));
  146. } elseif (false === filter_var($username, FILTER_VALIDATE_EMAIL)) {
  147. Session::flash('errorMsg', '用户名必须是合法邮箱,请重新输入');
  148. return Redirect::back()->withInput();
  149. }
  150. // 校验域名邮箱是否在敏感词中
  151. $sensitiveWords = $this->sensitiveWords();
  152. $usernameSuffix = explode('@', $username); // 提取邮箱后缀
  153. if (in_array(strtolower($usernameSuffix[1]), $sensitiveWords)) {
  154. Session::flash('errorMsg', '邮箱含有敏感词,请重新输入');
  155. return Redirect::back()->withInput();
  156. }
  157. // 如果需要邀请注册
  158. if (self::$systemConfig['is_invite_register']) {
  159. // 必须使用邀请码
  160. if (self::$systemConfig['is_invite_register'] == 2 && empty($code)) {
  161. Session::flash('errorMsg', '请输入邀请码');
  162. return Redirect::back()->withInput();
  163. }
  164. // 校验邀请码合法性
  165. if (!empty($code)) {
  166. $codeEnable = Invite::query()->where('code', $code)->where('status', 0)->first();
  167. if (empty($codeEnable)) {
  168. Session::flash('errorMsg', '邀请码不可用,请更换邀请码后重试');
  169. return Redirect::back()->withInput($request->except(['code']));
  170. }
  171. }
  172. }
  173. // 如果开启注册发送验证码
  174. if (self::$systemConfig['is_verify_register']) {
  175. if (!$verify_code) {
  176. Session::flash('errorMsg', '请输入验证码');
  177. return Redirect::back()->withInput($request->except(['verify_code']));
  178. } else {
  179. $verifyCode = VerifyCode::query()->where('username', $username)->where('code', $verify_code)->where('status', 0)->first();
  180. if (!$verifyCode) {
  181. Session::flash('errorMsg', '验证码不合法,可能已过期,请重试');
  182. return Redirect::back()->withInput($request->except(['verify_code']));
  183. }
  184. $verifyCode->status = 1;
  185. $verifyCode->save();
  186. }
  187. } elseif (self::$systemConfig['is_captcha']) { // 是否校验验证码
  188. if (!Captcha::check($captcha)) {
  189. Session::flash('errorMsg', '验证码错误,请重新输入');
  190. return Redirect::back()->withInput($request->except(['captcha']));
  191. }
  192. }
  193. // 24小时内同IP注册限制
  194. if (self::$systemConfig['register_ip_limit']) {
  195. if (Cache::has($cacheKey)) {
  196. $registerTimes = Cache::get($cacheKey);
  197. if ($registerTimes >= self::$systemConfig['register_ip_limit']) {
  198. Session::flash('errorMsg', '系统已开启防刷机制,请勿频繁注册');
  199. return Redirect::back()->withInput($request->except(['code']));
  200. }
  201. }
  202. }
  203. // 校验用户名是否已存在
  204. $exists = User::query()->where('username', $username)->exists();
  205. if ($exists) {
  206. Session::flash('errorMsg', '用户名已存在,请更换用户名');
  207. return Redirect::back()->withInput();
  208. }
  209. // 获取可用端口
  210. $port = self::$systemConfig['is_rand_port'] ? Helpers::getRandPort() : Helpers::getOnlyPort();
  211. if ($port > self::$systemConfig['max_port']) {
  212. Session::flash('errorMsg', '用户已满,请联系管理员');
  213. return Redirect::back()->withInput();
  214. }
  215. // 获取aff
  216. $affArr = $this->getAff($code, $aff);
  217. $referral_uid = $affArr['referral_uid'];
  218. $transfer_enable = $referral_uid ? (self::$systemConfig['default_traffic'] + self::$systemConfig['referral_traffic']) * 1048576 : self::$systemConfig['default_traffic'] * 1048576;
  219. // 创建新用户
  220. $user = new User();
  221. $user->username = $username;
  222. $user->password = Hash::make($password);
  223. $user->port = $port;
  224. $user->passwd = makeRandStr();
  225. $user->vmess_id = createGuid();
  226. $user->transfer_enable = $transfer_enable;
  227. $user->method = Helpers::getDefaultMethod();
  228. $user->protocol = Helpers::getDefaultProtocol();
  229. $user->obfs = Helpers::getDefaultObfs();
  230. $user->enable_time = date('Y-m-d H:i:s');
  231. $user->expire_time = date('Y-m-d H:i:s', strtotime("+" . self::$systemConfig['default_days'] . " days"));
  232. $user->reg_ip = getClientIp();
  233. $user->referral_uid = $referral_uid;
  234. $user->save();
  235. // 注册失败,抛出异常
  236. if (!$user->id) {
  237. Session::flash('errorMsg', '注册失败,请联系管理员');
  238. return Redirect::back()->withInput();
  239. }
  240. // 生成订阅码
  241. $subscribe = new UserSubscribe();
  242. $subscribe->user_id = $user->id;
  243. $subscribe->code = Helpers::makeSubscribeCode();
  244. $subscribe->times = 0;
  245. $subscribe->save();
  246. // 注册次数+1
  247. if (Cache::has($cacheKey)) {
  248. Cache::increment($cacheKey);
  249. } else {
  250. Cache::put($cacheKey, 1, 1440); // 24小时
  251. }
  252. // 初始化默认标签
  253. if (strlen(self::$systemConfig['initial_labels_for_user'])) {
  254. $labels = explode(',', self::$systemConfig['initial_labels_for_user']);
  255. foreach ($labels as $label) {
  256. $userLabel = new UserLabel();
  257. $userLabel->user_id = $user->id;
  258. $userLabel->label_id = $label;
  259. $userLabel->save();
  260. }
  261. }
  262. // 更新邀请码
  263. if (self::$systemConfig['is_invite_register'] && $affArr['code_id']) {
  264. Invite::query()->where('id', $affArr['code_id'])->update(['fuid' => $user->id, 'status' => 1]);
  265. }
  266. // 清除邀请人Cookie
  267. \Cookie::unqueue('register_aff');
  268. if (self::$systemConfig['is_verify_register']) {
  269. if ($referral_uid) {
  270. $transfer_enable = self::$systemConfig['referral_traffic'] * 1048576;
  271. User::query()->where('id', $referral_uid)->increment('transfer_enable', $transfer_enable);
  272. User::query()->where('id', $referral_uid)->update(['status' => 1, 'enable' => 1]);
  273. }
  274. User::query()->where('id', $user->id)->update(['status' => 1, 'enable' => 1]);
  275. Session::flash('regSuccessMsg', '注册成功');
  276. } else {
  277. // 发送激活邮件
  278. if (self::$systemConfig['is_active_register']) {
  279. // 生成激活账号的地址
  280. $token = md5(self::$systemConfig['website_name'] . $username . microtime());
  281. $activeUserUrl = self::$systemConfig['website_url'] . '/active/' . $token;
  282. $this->addVerify($user->id, $token);
  283. try {
  284. Mail::to($username)->send(new activeUser($activeUserUrl));
  285. Helpers::addEmailLog($username, '注册激活', '请求地址:' . $activeUserUrl);
  286. } catch (\Exception $e) {
  287. Helpers::addEmailLog($username, '注册激活', '请求地址:' . $activeUserUrl, 0, $e->getMessage());
  288. }
  289. Session::flash('regSuccessMsg', '注册成功:激活邮件已发送,如未收到,请查看垃圾邮箱');
  290. } else {
  291. // 如果不需要激活,则直接给推荐人加流量
  292. if ($referral_uid) {
  293. $transfer_enable = self::$systemConfig['referral_traffic'] * 1048576;
  294. User::query()->where('id', $referral_uid)->increment('transfer_enable', $transfer_enable);
  295. User::query()->where('id', $referral_uid)->update(['status' => 1, 'enable' => 1]);
  296. }
  297. User::query()->where('id', $user->id)->update(['status' => 1, 'enable' => 1]);
  298. Session::flash('regSuccessMsg', '注册成功');
  299. }
  300. }
  301. return Redirect::to('login');
  302. } else {
  303. Session::put('register_token', makeRandStr(16));
  304. return Response::view('auth.register');
  305. }
  306. }
  307. // 重设密码页
  308. public function resetPassword(Request $request)
  309. {
  310. if ($request->method() == 'POST') {
  311. $username = trim($request->get('username'));
  312. // 校验账号合法性
  313. if (false === filter_var($username, FILTER_VALIDATE_EMAIL)) {
  314. Session::flash('errorMsg', '用户名必须是合法邮箱,请重新输入');
  315. return Redirect::back();
  316. }
  317. // 是否开启重设密码
  318. if (!self::$systemConfig['is_reset_password']) {
  319. Session::flash('errorMsg', '系统未开启重置密码功能,请联系管理员');
  320. return Redirect::back();
  321. }
  322. // 查找账号
  323. $user = User::query()->where('username', $username)->first();
  324. if (!$user) {
  325. Session::flash('errorMsg', '账号不存在,请重试');
  326. return Redirect::back();
  327. }
  328. // 24小时内重设密码次数限制
  329. $resetTimes = 0;
  330. if (Cache::has('resetPassword_' . md5($username))) {
  331. $resetTimes = Cache::get('resetPassword_' . md5($username));
  332. if ($resetTimes >= self::$systemConfig['reset_password_times']) {
  333. Session::flash('errorMsg', '同一个账号24小时内只能重设密码' . self::$systemConfig['reset_password_times'] . '次,请勿频繁操作');
  334. return Redirect::back();
  335. }
  336. }
  337. // 生成取回密码的地址
  338. $token = md5(self::$systemConfig['website_name'] . $username . microtime());
  339. $verify = new Verify();
  340. $verify->type = 1;
  341. $verify->user_id = $user->id;
  342. $verify->token = $token;
  343. $verify->status = 0;
  344. $verify->save();
  345. // 发送邮件
  346. $resetPasswordUrl = self::$systemConfig['website_url'] . '/reset/' . $token;
  347. $title = '重置密码';
  348. $content = '请求地址:' . $resetPasswordUrl;
  349. try {
  350. Mail::to($username)->send(new resetPassword($resetPasswordUrl));
  351. Helpers::addEmailLog($username, $title, $content);
  352. } catch (\Exception $e) {
  353. Helpers::addEmailLog($username, $title, $content, 0, $e->getMessage());
  354. }
  355. Cache::put('resetPassword_' . md5($username), $resetTimes + 1, 1440);
  356. Session::flash('successMsg', '重置成功,请查看邮箱');
  357. return Redirect::back();
  358. } else {
  359. return Response::view('auth.resetPassword');
  360. }
  361. }
  362. // 重设密码
  363. public function reset(Request $request, $token)
  364. {
  365. if ($request->method() == 'POST') {
  366. $password = trim($request->get('password'));
  367. $repassword = trim($request->get('repassword'));
  368. if (empty($token)) {
  369. return Redirect::to('login');
  370. } elseif (empty($password) || empty($repassword)) {
  371. Session::flash('errorMsg', '密码不能为空');
  372. return Redirect::back();
  373. } elseif (md5($password) != md5($repassword)) {
  374. Session::flash('errorMsg', '两次输入密码不一致,请重新输入');
  375. return Redirect::back();
  376. }
  377. // 校验账号
  378. $verify = Verify::query()->where('type', 1)->where('token', $token)->with('User')->first();
  379. if (empty($verify)) {
  380. return Redirect::to('login');
  381. } elseif ($verify->status == 1) {
  382. Session::flash('errorMsg', '该链接已失效');
  383. return Redirect::back();
  384. } elseif ($verify->user->status < 0) {
  385. Session::flash('errorMsg', '账号已被禁用');
  386. return Redirect::back();
  387. } elseif (Hash::check($password, $verify->user->password)) {
  388. Session::flash('errorMsg', '新旧密码一样,请重新输入');
  389. return Redirect::back();
  390. }
  391. // 更新密码
  392. $ret = User::query()->where('id', $verify->user_id)->update(['password' => Hash::make($password)]);
  393. if (!$ret) {
  394. Session::flash('errorMsg', '重设密码失败');
  395. return Redirect::back();
  396. }
  397. // 置为已使用
  398. $verify->status = 1;
  399. $verify->save();
  400. Session::flash('successMsg', '新密码设置成功,请自行登录');
  401. return Redirect::back();
  402. } else {
  403. if (empty($token)) {
  404. return Redirect::to('login');
  405. }
  406. $verify = Verify::query()->where('type', 1)->where('token', $token)->with('user')->first();
  407. if (empty($verify)) {
  408. return Redirect::to('login');
  409. } elseif (time() - strtotime($verify->created_at) >= 1800) {
  410. Session::flash('errorMsg', '该链接已过期');
  411. // 置为已失效
  412. $verify->status = 2;
  413. $verify->save();
  414. // 重新获取一遍verify
  415. $view['verify'] = Verify::query()->where('type', 1)->where('token', $token)->with('user')->first();
  416. return Response::view('auth.reset', $view);
  417. }
  418. $view['verify'] = $verify;
  419. return Response::view('auth.reset', $view);
  420. }
  421. }
  422. // 激活账号页
  423. public function activeUser(Request $request)
  424. {
  425. if ($request->method() == 'POST') {
  426. $username = trim($request->get('username'));
  427. // 是否开启账号激活
  428. if (!self::$systemConfig['is_active_register']) {
  429. Session::flash('errorMsg', '系统未开启账号激活功能,请联系管理员');
  430. return Redirect::back()->withInput();
  431. }
  432. // 查找账号
  433. $user = User::query()->where('username', $username)->first();
  434. if (!$user) {
  435. Session::flash('errorMsg', '账号不存在,请重试');
  436. return Redirect::back();
  437. } elseif ($user->status < 0) {
  438. Session::flash('errorMsg', '账号已禁止登陆,无需激活');
  439. return Redirect::back();
  440. } elseif ($user->status > 0) {
  441. Session::flash('errorMsg', '账号无需激活');
  442. return Redirect::back();
  443. }
  444. // 24小时内激活次数限制
  445. $activeTimes = 0;
  446. if (Cache::has('activeUser_' . md5($username))) {
  447. $activeTimes = Cache::get('activeUser_' . md5($username));
  448. if ($activeTimes >= self::$systemConfig['active_times']) {
  449. Session::flash('errorMsg', '同一个账号24小时内只能请求激活' . self::$systemConfig['active_times'] . '次,请勿频繁操作');
  450. return Redirect::back();
  451. }
  452. }
  453. // 生成激活账号的地址
  454. $token = md5(self::$systemConfig['website_name'] . $username . microtime());
  455. $verify = new Verify();
  456. $verify->type = 1;
  457. $verify->user_id = $user->id;
  458. $verify->token = $token;
  459. $verify->status = 0;
  460. $verify->save();
  461. // 发送邮件
  462. $activeUserUrl = self::$systemConfig['website_url'] . '/active/' . $token;
  463. $title = '重新激活账号';
  464. $content = '请求地址:' . $activeUserUrl;
  465. try {
  466. Mail::to($username)->send(new activeUser($activeUserUrl));
  467. Helpers::addEmailLog($username, $title, $content);
  468. } catch (\Exception $e) {
  469. Helpers::addEmailLog($username, $title, $content, 0, $e->getMessage());
  470. }
  471. Cache::put('activeUser_' . md5($username), $activeTimes + 1, 1440);
  472. Session::flash('successMsg', '激活邮件已发送,如未收到,请查看垃圾箱');
  473. return Redirect::back();
  474. } else {
  475. return Response::view('auth.activeUser');
  476. }
  477. }
  478. // 激活账号
  479. public function active(Request $request, $token)
  480. {
  481. if (empty($token)) {
  482. return Redirect::to('login');
  483. }
  484. $verify = Verify::query()->where('type', 1)->where('token', $token)->with('user')->first();
  485. if (empty($verify)) {
  486. return Redirect::to('login');
  487. } elseif (empty($verify->user)) {
  488. Session::flash('errorMsg', '该链接已失效');
  489. return Response::view('auth.active');
  490. } elseif ($verify->status == 1) {
  491. Session::flash('errorMsg', '该链接已失效');
  492. return Response::view('auth.active');
  493. } elseif ($verify->user->status != 0) {
  494. Session::flash('errorMsg', '该账号无需激活.');
  495. return Response::view('auth.active');
  496. } elseif (time() - strtotime($verify->created_at) >= 1800) {
  497. Session::flash('errorMsg', '该链接已过期');
  498. // 置为已失效
  499. $verify->status = 2;
  500. $verify->save();
  501. return Response::view('auth.active');
  502. }
  503. // 更新账号状态
  504. $ret = User::query()->where('id', $verify->user_id)->update(['status' => 1]);
  505. if (!$ret) {
  506. Session::flash('errorMsg', '账号激活失败');
  507. return Redirect::back();
  508. }
  509. // 置为已使用
  510. $verify->status = 1;
  511. $verify->save();
  512. // 账号激活后给邀请人送流量
  513. if ($verify->user->referral_uid) {
  514. $transfer_enable = self::$systemConfig['referral_traffic'] * 1048576;
  515. User::query()->where('id', $verify->user->referral_uid)->increment('transfer_enable', $transfer_enable);
  516. User::query()->where('id', $verify->user->referral_uid)->update(['enable' => 1]);
  517. }
  518. Session::flash('successMsg', '账号激活成功');
  519. return Response::view('auth.active');
  520. }
  521. // 发送注册验证码
  522. public function sendCode(Request $request)
  523. {
  524. $username = trim($request->get('username'));
  525. if (!$username) {
  526. return Response::json(['status' => 'fail', 'data' => '', 'message' => '请输入用户名']);
  527. }
  528. // 校验账号合法性
  529. if (false === filter_var($username, FILTER_VALIDATE_EMAIL)) {
  530. return Response::json(['status' => 'fail', 'data' => '', 'message' => '用户名必须是合法邮箱,请重新输入']);
  531. }
  532. // 校验域名邮箱是否在敏感词中
  533. $sensitiveWords = $this->sensitiveWords();
  534. $usernameSuffix = explode('@', $username); // 提取邮箱后缀
  535. if (in_array(strtolower($usernameSuffix[1]), $sensitiveWords)) {
  536. return Response::json(['status' => 'fail', 'data' => '', 'message' => '邮箱含有敏感词,请重新输入']);
  537. }
  538. $user = User::query()->where('username', $username)->first();
  539. if ($user) {
  540. return Response::json(['status' => 'fail', 'data' => '', 'message' => '用户已存在,无需注册,如果忘记密码请找回密码']);
  541. }
  542. // 是否开启注册发送验证码
  543. if (!self::$systemConfig['is_verify_register']) {
  544. return Response::json(['status' => 'fail', 'data' => '', 'message' => '系统未启用通过验证码注册']);
  545. }
  546. // 防刷机制
  547. if (Cache::has('send_verify_code_' . md5(getClientIP()))) {
  548. return Response::json(['status' => 'fail', 'data' => '', 'message' => '系统已开启防刷机制,请勿频繁请求']);
  549. }
  550. // 发送邮件
  551. $code = makeRandStr(6, true);
  552. $title = '发送注册验证码';
  553. $content = '验证码:' . $code;
  554. try {
  555. Mail::to($username)->send(new sendVerifyCode($code));
  556. Helpers::addEmailLog($username, $title, $content);
  557. } catch (\Exception $e) {
  558. Helpers::addEmailLog($username, $title, $content, 0, $e->getMessage());
  559. }
  560. $this->addVerifyCode($username, $code);
  561. Cache::put('send_verify_code_' . md5(getClientIP()), getClientIP(), 1);
  562. return Response::json(['status' => 'success', 'data' => '', 'message' => '验证码已发送']);
  563. }
  564. // 公开的邀请码列表
  565. public function free(Request $request)
  566. {
  567. $view['inviteList'] = Invite::query()->where('uid', 0)->where('status', 0)->paginate();
  568. return Response::view('auth.free', $view);
  569. }
  570. // 切换语言
  571. public function switchLang(Request $request, $locale)
  572. {
  573. Session::put("locale", $locale);
  574. return Redirect::back();
  575. }
  576. /**
  577. * 添加用户登录日志
  578. *
  579. * @param string $userId 用户ID
  580. * @param string $ip IP地址
  581. */
  582. private function addUserLoginLog($userId, $ip)
  583. {
  584. if (filter_var($ip, FILTER_VALIDATE_IP, FILTER_FLAG_IPV6)) {
  585. Log::info('识别到IPv6,尝试解析:' . $ip);
  586. $ipInfo = getIPv6($ip);
  587. } else {
  588. $ipInfo = QQWry::ip($ip); // 通过纯真IP库解析IPv4信息
  589. if (isset($ipInfo['error'])) {
  590. Log::info('无法识别IPv4,尝试使用IPIP的IP库解析:' . $ip);
  591. $ipip = IPIP::ip($ip);
  592. $ipInfo = [
  593. 'country' => $ipip['country_name'],
  594. 'province' => $ipip['region_name'],
  595. 'city' => $ipip['city_name']
  596. ];
  597. } else {
  598. // 判断纯真IP库获取的国家信息是否与IPIP的IP库获取的信息一致,不一致则用IPIP的(因为纯真IP库的非大陆IP准确率较低)
  599. $ipip = IPIP::ip($ip);
  600. if ($ipInfo['country'] != $ipip['country_name']) {
  601. $ipInfo['country'] = $ipip['country_name'];
  602. $ipInfo['province'] = $ipip['region_name'];
  603. $ipInfo['city'] = $ipip['city_name'];
  604. }
  605. }
  606. }
  607. if (empty($ipInfo) || empty($ipInfo['country'])) {
  608. Log::warning("获取IP信息异常:" . $ip);
  609. }
  610. $log = new UserLoginLog();
  611. $log->user_id = $userId;
  612. $log->ip = $ip;
  613. $log->country = $ipInfo['country'] ?? '';
  614. $log->province = $ipInfo['province'] ?? '';
  615. $log->city = $ipInfo['city'] ?? '';
  616. $log->county = $ipInfo['county'] ?? '';
  617. $log->isp = $ipInfo['isp'] ?? ($ipInfo['organization'] ?? '');
  618. $log->area = $ipInfo['area'] ?? '';
  619. $log->save();
  620. }
  621. /**
  622. * 获取AFF
  623. *
  624. * @param string $code 邀请码
  625. * @param string $aff URL中的aff参数
  626. *
  627. * @return array
  628. */
  629. private function getAff($code = '', $aff = '')
  630. {
  631. // 邀请人ID
  632. $referral_uid = 0;
  633. // 邀请码ID
  634. $code_id = 0;
  635. // 有邀请码先用邀请码,用谁的邀请码就给谁返利
  636. if ($code) {
  637. $inviteCode = Invite::query()->where('code', $code)->where('status', 0)->first();
  638. if ($inviteCode) {
  639. $referral_uid = $inviteCode->uid;
  640. $code_id = $inviteCode->id;
  641. }
  642. }
  643. // 没有用邀请码或者邀请码是管理员生成的,则检查cookie或者url链接
  644. if (!$referral_uid) {
  645. // 检查一下cookie里有没有aff
  646. $cookieAff = \Request::hasCookie('register_aff') ? \Request::cookie('register_aff') : 0;
  647. if ($cookieAff) {
  648. $affUser = User::query()->where('id', $cookieAff)->exists();
  649. $referral_uid = $affUser ? $cookieAff : 0;
  650. } elseif ($aff) { // 如果cookie里没有aff,就再检查一下请求的url里有没有aff,因为有些人的浏览器会禁用了cookie,比如chrome开了隐私模式
  651. $affUser = User::query()->where('id', $aff)->exists();
  652. $referral_uid = $affUser ? $aff : 0;
  653. }
  654. }
  655. return [
  656. 'referral_uid' => $referral_uid,
  657. 'code_id' => $code_id
  658. ];
  659. }
  660. // 写入生成激活账号验证记录
  661. private function addVerify($userId, $token)
  662. {
  663. $verify = new Verify();
  664. $verify->type = 1;
  665. $verify->user_id = $userId;
  666. $verify->token = $token;
  667. $verify->status = 0;
  668. $verify->save();
  669. }
  670. // 生成注册验证码
  671. private function addVerifyCode($username, $code)
  672. {
  673. $verify = new VerifyCode();
  674. $verify->username = $username;
  675. $verify->code = $code;
  676. $verify->status = 0;
  677. $verify->save();
  678. }
  679. }