UserController.php 18 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430
  1. <?php
  2. namespace App\Controllers\Admin;
  3. use App\Controllers\AdminController;
  4. use App\Models\{
  5. User,
  6. Shop,
  7. Bought,
  8. DetectBanLog
  9. };
  10. use App\Services\{
  11. Auth,
  12. Mail,
  13. Config
  14. };
  15. use App\Utils\{
  16. GA,
  17. Hash,
  18. Tools,
  19. Cookie
  20. };
  21. use Exception;
  22. use Ramsey\Uuid\Uuid;
  23. use Slim\Http\{
  24. Request,
  25. Response
  26. };
  27. class UserController extends AdminController
  28. {
  29. /**
  30. * @param Request $request
  31. * @param Response $response
  32. * @param array $args
  33. */
  34. public function index($request, $response, $args)
  35. {
  36. $table_config['total_column'] = array(
  37. 'op' => '操作',
  38. 'querys' => '查询',
  39. 'id' => 'ID',
  40. 'user_name' => '用户名',
  41. 'remark' => '备注',
  42. 'email' => '邮箱',
  43. 'money' => '金钱',
  44. 'im_type' => '联络方式类型',
  45. 'im_value' => '联络方式详情',
  46. 'node_group' => '群组',
  47. 'expire_in' => '账户过期时间',
  48. 'class' => '等级',
  49. 'class_expire' => '等级过期时间',
  50. 'passwd' => '连接密码',
  51. 'port' => '连接端口',
  52. 'method' => '加密方式',
  53. 'protocol' => '连接协议',
  54. 'obfs' => '混淆方式',
  55. 'obfs_param' => '混淆参数',
  56. 'online_ip_count' => '在线IP数',
  57. 'last_ss_time' => '上次使用时间',
  58. 'used_traffic' => '已用流量/GB',
  59. 'enable_traffic' => '总流量/GB',
  60. 'last_checkin_time' => '上次签到时间',
  61. 'today_traffic' => '今日流量',
  62. 'enable' => '是否启用',
  63. 'reg_date' => '注册时间',
  64. 'reg_ip' => '注册IP',
  65. 'auto_reset_day' => '自动重置流量日',
  66. 'auto_reset_bandwidth' => '自动重置流量/GB',
  67. 'ref_by' => '邀请人ID',
  68. 'ref_by_user_name' => '邀请人用户名',
  69. 'top_up' => '累计充值'
  70. );
  71. $table_config['default_show_column'] = array('op', 'id', 'user_name', 'remark', 'email');
  72. $table_config['ajax_url'] = 'user/ajax';
  73. return $response->write(
  74. $this->view()
  75. ->assign('shops', Shop::orderBy('name')->get())
  76. ->assign('table_config', $table_config)
  77. ->display('admin/user/index.tpl')
  78. );
  79. }
  80. /**
  81. * @param Request $request
  82. * @param Response $response
  83. * @param array $args
  84. */
  85. public function createNewUser($request, $response, $args)
  86. {
  87. # 需要一个 userEmail
  88. $email = $request->getParam('userEmail');
  89. $email = trim($email);
  90. $email = strtolower($email);
  91. $money = (int) trim($request->getParam('userMoney'));
  92. $shop_id = (int) $request->getParam('userShop');
  93. $user = User::where('email', $email)->first();
  94. if ($user != null) {
  95. return $response->withJson([
  96. 'ret' => 0,
  97. 'msg' => '邮箱已经被注册了'
  98. ]);
  99. }
  100. // do reg user
  101. $user = new User();
  102. $current_timestamp = time();
  103. $pass = Tools::genRandomChar();
  104. $user->user_name = $email;
  105. $user->email = $email;
  106. $user->pass = Hash::passwordHash($pass);
  107. $user->passwd = Tools::genRandomChar(16);
  108. $user->uuid = Uuid::uuid3(Uuid::NAMESPACE_DNS, $email . '|' . $current_timestamp);
  109. $user->port = Tools::getAvPort();
  110. $user->t = 0;
  111. $user->u = 0;
  112. $user->d = 0;
  113. $user->method = Config::getconfig('Register.string.defaultMethod');
  114. $user->protocol = Config::getconfig('Register.string.defaultProtocol');
  115. $user->protocol_param = Config::getconfig('Register.string.defaultProtocol_param');
  116. $user->obfs = Config::getconfig('Register.string.defaultObfs');
  117. $user->obfs_param = Config::getconfig('Register.string.defaultObfs_param');
  118. $user->forbidden_ip = $_ENV['reg_forbidden_ip'];
  119. $user->forbidden_port = $_ENV['reg_forbidden_port'];
  120. $user->im_type = 2;
  121. $user->im_value = $email;
  122. $user->transfer_enable = Tools::toGB((int) Config::getconfig('Register.string.defaultTraffic'));
  123. $user->invite_num = (int) Config::getconfig('Register.string.defaultInviteNum');
  124. $user->auto_reset_day = $_ENV['reg_auto_reset_day'];
  125. $user->auto_reset_bandwidth = $_ENV['reg_auto_reset_bandwidth'];
  126. $user->money = ($money != -1 ? $money : 0);
  127. $user->class_expire = date('Y-m-d H:i:s', time() + (int) Config::getconfig('Register.string.defaultClass_expire') * 3600);
  128. $user->class = (int) Config::getconfig('Register.string.defaultClass');
  129. $user->node_connector = (int) Config::getconfig('Register.string.defaultConn');
  130. $user->node_speedlimit = (int) Config::getconfig('Register.string.defaultSpeedlimit');
  131. $user->expire_in = date('Y-m-d H:i:s', time() + (int) Config::getconfig('Register.string.defaultExpire_in') * 86400);
  132. $user->reg_date = date('Y-m-d H:i:s');
  133. $user->reg_ip = $_SERVER['REMOTE_ADDR'];
  134. $user->theme = $_ENV['theme'];
  135. $groups = explode(',', $_ENV['random_group']);
  136. $user->node_group = $groups[array_rand($groups)];
  137. $ga = new GA();
  138. $secret = $ga->createSecret();
  139. $user->ga_token = $secret;
  140. $user->ga_enable = 0;
  141. if ($user->save()) {
  142. $res['ret'] = 1;
  143. $res['msg'] = '新用户注册成功 用户名: ' . $email . ' 随机初始密码: ' . $pass;
  144. $res['email_error'] = 'success';
  145. if ($shop_id > 0) {
  146. $shop = Shop::find($shop_id);
  147. if ($shop != null) {
  148. $bought = new Bought();
  149. $bought->userid = $user->id;
  150. $bought->shopid = $shop->id;
  151. $bought->datetime = time();
  152. $bought->renew = 0;
  153. $bought->coupon = '';
  154. $bought->price = $shop->price;
  155. $bought->save();
  156. $shop->buy($user);
  157. } else {
  158. $res['msg'] .= '<br/>但是套餐添加失败了,原因是套餐不存在';
  159. }
  160. }
  161. $user->addMoneyLog($user->money);
  162. $subject = $_ENV['appName'] . '-新用户注册通知';
  163. $to = $user->email;
  164. $text = '您好,管理员已经为您生成账户,用户名: ' . $email . ',登录密码为:' . $pass . ',感谢您的支持。 ';
  165. try {
  166. Mail::send($to, $subject, 'newuser.tpl', [
  167. 'user' => $user, 'text' => $text,
  168. ], []);
  169. } catch (Exception $e) {
  170. $res['email_error'] = $e->getMessage();
  171. }
  172. return $response->withJson($res);
  173. }
  174. return $response->withJson([
  175. 'ret' => 0,
  176. 'msg' => '未知错误'
  177. ]);
  178. }
  179. /**
  180. * @param Request $request
  181. * @param Response $response
  182. * @param array $args
  183. */
  184. public function edit($request, $response, $args)
  185. {
  186. $user = User::find($args['id']);
  187. return $response->write(
  188. $this->view()
  189. ->assign('edit_user', $user)
  190. ->display('admin/user/edit.tpl')
  191. );
  192. }
  193. /**
  194. * @param Request $request
  195. * @param Response $response
  196. * @param array $args
  197. */
  198. public function update($request, $response, $args)
  199. {
  200. $id = $args['id'];
  201. $user = User::find($id);
  202. $email1 = $user->email;
  203. $user->email = $request->getParam('email');
  204. $email2 = $request->getParam('email');
  205. $passwd = $request->getParam('passwd');
  206. if ($request->getParam('pass') != '') {
  207. $user->pass = Hash::passwordHash($request->getParam('pass'));
  208. $user->clean_link();
  209. }
  210. $user->auto_reset_day = $request->getParam('auto_reset_day');
  211. $user->auto_reset_bandwidth = $request->getParam('auto_reset_bandwidth');
  212. $origin_port = $user->port;
  213. $user->port = $request->getParam('port');
  214. $user->addMoneyLog($request->getParam('money') - $user->money);
  215. $user->passwd = $request->getParam('passwd');
  216. $user->protocol = $request->getParam('protocol');
  217. $user->protocol_param = $request->getParam('protocol_param');
  218. $user->obfs = $request->getParam('obfs');
  219. $user->obfs_param = $request->getParam('obfs_param');
  220. $user->is_multi_user = $request->getParam('is_multi_user');
  221. $user->transfer_enable = Tools::toGB($request->getParam('transfer_enable'));
  222. $user->invite_num = $request->getParam('invite_num');
  223. $user->method = $request->getParam('method');
  224. $user->node_speedlimit = $request->getParam('node_speedlimit');
  225. $user->node_connector = $request->getParam('node_connector');
  226. $user->enable = $request->getParam('enable');
  227. $user->is_admin = $request->getParam('is_admin');
  228. $user->ga_enable = $request->getParam('ga_enable');
  229. $user->node_group = $request->getParam('group');
  230. $user->ref_by = $request->getParam('ref_by');
  231. $user->remark = $request->getParam('remark');
  232. $user->money = $request->getParam('money');
  233. $user->class = $request->getParam('class');
  234. $user->class_expire = $request->getParam('class_expire');
  235. $user->expire_in = $request->getParam('expire_in');
  236. $user->forbidden_ip = str_replace(PHP_EOL, ',', $request->getParam('forbidden_ip'));
  237. $user->forbidden_port = str_replace(PHP_EOL, ',', $request->getParam('forbidden_port'));
  238. // 手动封禁
  239. $ban_time = (int) $request->getParam('ban_time');
  240. if ($ban_time > 0) {
  241. $user->enable = 0;
  242. $end_time = date('Y-m-d H:i:s');
  243. $user->last_detect_ban_time = $end_time;
  244. $DetectBanLog = new DetectBanLog();
  245. $DetectBanLog->user_name = $user->user_name;
  246. $DetectBanLog->user_id = $user->id;
  247. $DetectBanLog->email = $user->email;
  248. $DetectBanLog->detect_number = '0';
  249. $DetectBanLog->ban_time = $ban_time;
  250. $DetectBanLog->start_time = strtotime('1989-06-04 00:05:00');
  251. $DetectBanLog->end_time = strtotime($end_time);
  252. $DetectBanLog->all_detect_number = $user->all_detect_number;
  253. $DetectBanLog->save();
  254. }
  255. if (!$user->save()) {
  256. return $response->withJson([
  257. 'ret' => 0,
  258. 'msg' => '修改失败'
  259. ]);
  260. }
  261. return $response->withJson([
  262. 'ret' => 1,
  263. 'msg' => '修改成功'
  264. ]);
  265. }
  266. /**
  267. * @param Request $request
  268. * @param Response $response
  269. * @param array $args
  270. */
  271. public function delete($request, $response, $args)
  272. {
  273. $user = User::find((int) $request->getParam('id'));
  274. if (!$user->kill_user()) {
  275. return $response->withJson([
  276. 'ret' => 0,
  277. 'msg' => '删除失败'
  278. ]);
  279. }
  280. return $response->withJson([
  281. 'ret' => 1,
  282. 'msg' => '删除成功'
  283. ]);
  284. }
  285. /**
  286. * @param Request $request
  287. * @param Response $response
  288. * @param array $args
  289. */
  290. public function changetouser($request, $response, $args)
  291. {
  292. $userid = $request->getParam('userid');
  293. $adminid = $request->getParam('adminid');
  294. $user = User::find($userid);
  295. $admin = User::find($adminid);
  296. $expire_in = time() + 60 * 60;
  297. if (!$admin->is_admin || !$user || !Auth::getUser()->isLogin) {
  298. return $response->withJson([
  299. 'ret' => 0,
  300. 'msg' => '非法请求'
  301. ]);
  302. }
  303. Cookie::set([
  304. 'uid' => $user->id,
  305. 'email' => $user->email,
  306. 'key' => Hash::cookieHash($user->pass, $expire_in),
  307. 'ip' => md5($_SERVER['REMOTE_ADDR'] . $_ENV['key'] . $user->id . $expire_in),
  308. 'expire_in' => $expire_in,
  309. 'old_uid' => Cookie::get('uid'),
  310. 'old_email' => Cookie::get('email'),
  311. 'old_key' => Cookie::get('key'),
  312. 'old_ip' => Cookie::get('ip'),
  313. 'old_expire_in' => Cookie::get('expire_in'),
  314. 'old_local' => $request->getParam('local'),
  315. ], $expire_in);
  316. return $response->withJson([
  317. 'ret' => 1,
  318. 'msg' => '切换成功'
  319. ]);
  320. }
  321. /**
  322. * @param Request $request
  323. * @param Response $response
  324. * @param array $args
  325. */
  326. public function ajax($request, $response, $args)
  327. {
  328. $query = User::getTableDataFromAdmin(
  329. $request,
  330. static function (&$order_field) {
  331. if ($order_field == 'used_traffic') {
  332. $order_field = 'u + d';
  333. } elseif ($order_field == 'enable_traffic') {
  334. $order_field = 'transfer_enable';
  335. } elseif ($order_field == 'today_traffic') {
  336. $order_field = 'u + d - last_day_t';
  337. } elseif ($order_field == 'querys') {
  338. $order_field = 'id';
  339. }
  340. }
  341. );
  342. $data = [];
  343. foreach ($query['datas'] as $value) {
  344. /** @var User $value */
  345. $tempdata['op'] = '' .
  346. '<a class="btn btn-brand" href="/admin/user/' . $value->id . '/edit">编辑</a>' .
  347. '<a class="btn btn-brand-accent" id="delete" href="javascript:void(0);" onClick="delete_modal_show(\'' . $value->id . '\')">删除</a>' .
  348. '<a class="btn btn-brand" id="changetouser" href="javascript:void(0);" onClick="changetouser_modal_show(\'' . $value->id . '\')">切换为该用户</a>';
  349. $tempdata['querys'] = '' .
  350. '<a class="btn btn-brand" href="/admin/user/' . $value->id . '/bought">套餐</a>' .
  351. '<a class="btn btn-brand" href="/admin/user/' . $value->id . '/code">充值</a>' .
  352. '<a class="btn btn-brand" href="/admin/user/' . $value->id . '/sublog">订阅</a>' .
  353. '<a class="btn btn-brand" href="/admin/user/' . $value->id . '/detect">审计</a>' .
  354. '<a class="btn btn-brand" href="/admin/user/' . $value->id . '/login">登录</a>';
  355. $tempdata['id'] = $value->id;
  356. $tempdata['user_name'] = $value->user_name;
  357. $tempdata['remark'] = $value->remark;
  358. $tempdata['email'] = $value->email;
  359. $tempdata['money'] = $value->money;
  360. $tempdata['im_type'] = $value->im_type();
  361. $tempdata['im_value'] = $value->im_value();
  362. $tempdata['node_group'] = $value->node_group;
  363. $tempdata['expire_in'] = $value->expire_in;
  364. $tempdata['class'] = $value->class;
  365. $tempdata['class_expire'] = $value->class_expire;
  366. $tempdata['passwd'] = $value->passwd;
  367. $tempdata['port'] = $value->port;
  368. $tempdata['method'] = $value->method;
  369. $tempdata['protocol'] = $value->protocol;
  370. $tempdata['obfs'] = $value->obfs;
  371. $tempdata['obfs_param'] = $value->obfs_param;
  372. $tempdata['online_ip_count'] = $value->online_ip_count();
  373. $tempdata['last_ss_time'] = $value->lastSsTime();
  374. $tempdata['used_traffic'] = Tools::flowToGB($value->u + $value->d);
  375. $tempdata['enable_traffic'] = Tools::flowToGB($value->transfer_enable);
  376. $tempdata['last_checkin_time'] = $value->lastCheckInTime();
  377. $tempdata['today_traffic'] = $value->TodayusedTraffic();
  378. $tempdata['enable'] = $value->enable == 1 ? '可用' : '禁用';
  379. $tempdata['reg_date'] = $value->reg_date;
  380. $tempdata['reg_ip'] = $value->reg_ip;
  381. $tempdata['auto_reset_day'] = $value->auto_reset_day;
  382. $tempdata['auto_reset_bandwidth'] = $value->auto_reset_bandwidth;
  383. $tempdata['ref_by'] = $value->ref_by;
  384. $tempdata['ref_by_user_name'] = $value->ref_by_user_name();
  385. $tempdata['top_up'] = $value->get_top_up();
  386. $data[] = $tempdata;
  387. }
  388. return $response->withJson([
  389. 'draw' => $request->getParam('draw'),
  390. 'recordsTotal' => User::count(),
  391. 'recordsFiltered' => $query['count'],
  392. 'data' => $data,
  393. ]);
  394. }
  395. }