账号密码封装类

桃扇骨 2022-04-08 17:28 301阅读 0赞

<?php
    /**
     * ZZY licence
     *
     * @copyright  Copyright (c) 2014-2021 ZZY Technologies Inc. (http://www.zzymtm.com)
     * @license  http://www.zzymtm.com/ ZZY licence
     *
     * 商家会员,登录注册流程
     */
    class sysshop_passport {
    
        public $sellerId = null;
    
        public $sellerName = null;
    
        public function __construct()
        {
            $this->app = app::get('sysshop');
            kernel::single('base_session')->start();
    
            pamAccount::setAuthType('sysshop');
            $this->sellerId = pamAccount::getAccountId();
        }
        /**
         * 根据企业账号ID，获取对应的企业登录名称
         *
         * @param int $sellerId
         *
         * @return array
         */
        public function getSellerNameByUid($Uid)
        {
            $accountShopModel = app::get('sysshop')->model('account');
            $sellerData = $accountShopModel->getRow('seller_id',array('user_id'=>$Uid));
            return $sellerData['seller_id'];
        }
    
        public function getCompanyNameByUid($Uid)
        {
            $companyModel = app::get('syscompany')->model('company');
            $companyData = $companyModel->getRow('company_id',array('user_id'=>$Uid));
            return $companyData['company_id'];
        }
    
        /**
         * 根据企业账号ID，获取对应的企业登录名称
         *
         * @param int $sellerId
         *
         * @return array
         */
        public function getSellerName($sellerId)
        {
            $accountShopModel = app::get('sysshop')->model('account');
            $sellerData = $accountShopModel->getRow('login_account',array('seller_id'=>$sellerId));
            return $sellerData['login_account'];
        }
    
        /**
         * 获取登录会员的信息
         *
         * @return array
         */
        public function getSellerData($sellerId="")
        {
            if( !$this->sellerData )
            {
                $accountShopModel = app::get('sysshop')->model('account');
                $sellerShopModel = app::get('sysshop')->model('seller');
                if(!$sellerId) $sellerId = pamAccount::getAccountId();
                $accountData = $accountShopModel->getRow('*',array('seller_id'=>$sellerId));
                $sellData = $sellerShopModel->getRow('*',array('seller_id'=>$sellerId));
                $this->sellerData = array_merge($accountData, $sellData);
                //$this->sellerData = $accountShopModel->getRow('*',array('seller_id'=>$sellerId));
            }
            return $this->sellerData;
        }
    
        /**
         * 获取当前用户的路由权限
         */
        public function getSellerPermission($sellerId=null)
        {
            $permissionData = [];
            $_sellerId = !empty($sellerId) ? $sellerId :  $this->sellerId;
            if( $_sellerId )
            {
                $objMdlSeller = app::get('sysshop')->model('seller');
                $result = $objMdlSeller->getRow('shop_id,role_id',array('seller_id'=>$_sellerId));
    
                if( $result['role_id'] )
                {
                    $data = app::get('sysshop')->model('roles')->getRow('workground', array('role_id'=>$result['role_id']));
                    $permissionIds = explode(',',$data['workground']);
    
                    foreach( $permissionIds as $permissionId )
                    {
                        $permissionData = array_merge($permissionData, config::get('permission.'.$permissionId.'.permission'));
                    }
                }
                else
                {
                    return false;//店主不需要判断权限，有所有权限
                }
            }
    
            $permissionData = array_merge($permissionData, config::get('permission.common.permission'));
            return $permissionData;
        }
    
        public function getShopId($sellerId)
        {
            if( !$this->shopId )
            {
                if(!$sellerId)
                {
                    return;
                }
                $objMdlSeller = app::get('sysshop')->model('seller');
                $result = $objMdlSeller->getRow('shop_id',array('seller_id'=>$sellerId));
                $this->shopId = $result['shop_id'];
            }
            return $this->shopId;
        }
    
        /**
         *  商家登录
         *
         * @param string  $loginAccount 用户名
         * @param string  $loginPassword 密码
         *
         * @return boole
         */
        public function login($loginAccount, $loginPassword)
        {
            $seller = $this->apiLogin($loginAccount, $loginPassword);
            pamAccount::setSession($seller['sellerId'], $seller['loginAccount']);
            return true;
        }
    
        /**
         *  商家登录
         *
         * @param string  $loginAccount 用户名
         * @param string  $loginPassword 密码
         *
         * @return boole
         */
        public function apiLogin($loginAccount, $loginPassword)
        {
            //检查数据安全
            $loginAccount = utils::_filter_input($loginAccount);
            $loginPassword = utils::_filter_input($loginPassword);
    
            //这里把手机号转成用户名
            if($this->__isMobile($loginAccount))
            {
                $loginAccount = $this->__changeMoblieToLoginName($loginAccount);
                if($loginAccount == '')
                    throw new LogicException(app::get('sysshop')->_('该用户未绑定手机或者手机号未验证'));
            }
            $sellerId = $this->__verifyLogin($loginAccount, $loginPassword);
    
            if( $sellerId )
            {
                $num = app::get('sysshop')->model('seller')->count(array('seller_id'=>$sellerId));
                if( !$num )
                {
                    throw new \LogicException(app::get('sysshop')->_('数据异常，请联系客服'));
                }
            }
    
            return ['sellerId'=>$sellerId, 'loginAccount'=>trim($loginAccount)];
        }
    
        /**
         * 验证登录的用户名和密码是否一致
         *
         * @param string $loginName 登录名
         * @param string $password  密码
         *
         * @return int $userId
         */
        private function __verifyLogin($loginName, $password )
        {
            if( empty($loginName) )
            {
                pamAccount::setLoginErrorCount();
                throw new \LogicException(app::get('sysshop')->_('请输入账号'));
            }
    
            //输入错误的账号，则直接返回错误
            try
            {
                $this->checkSignupAccount(trim($loginName), false);
            }
            catch( LogicException $e )
            {
                pamAccount::setLoginErrorCount();
                throw new \LogicException(app::get('sysuser')->_('用户名或密码错误'));
            }
    
            if( empty($password) )
            {
                pamAccount::setLoginErrorCount();
                throw new \LogicException(app::get('sysshop')->_('请输入密码'));
            }
    
            $filter = array('login_account'=>trim($loginName),'disabled'=>'0');
            $account = app::get('sysshop')->model('account')->getRow('seller_id,login_password',$filter);
            if(!$account || !pam_encrypt::check($password, $account['login_password']))
            {
                pamAccount::setLoginErrorCount();
                throw new \LogicException(app::get('sysuser')->_('用户名或密码错误'));
            }
    
            return $account['seller_id'];
        }
    
        /**
         * 新增一个商家用户，传入为验证过后的数据
         *
         * @param array $data 新增商家用户信息
         * @param bool $isSubAccount 是否为子帐号创建
         *
         * @return int userId
         */
        public function signupSeller($data, $isSubAccount=false,$isRunSid= false)
        {
            //检查数据安全
            $data = utils::_filter_input($data);
    
            $accountShopModel = app::get('sysshop')->model('account');
            $shopUserModel = app::get('sysshop')->model('seller');
    
            //检查注册账号合法性
            $this->checkSignupAccount(trim($data['login_account']) );
    
            //检查密码合法，是否一致
            $this->checkPassport($data['login_password'],$data['psw_confirm']);
    
    
            //检查基本的数据
            $this->checkSignup($data);
    
            $pamShopData = $this->__preAccountSeller($data);
    
            $db = app::get('sysshop')->database();
            $db->beginTransaction();
    
            try
            {
                if( !$sellerId = $accountShopModel->insert($pamShopData) )
                {
                    throw new \LogicException(app::get('sysshop')->_('注册失败'));
                }
    
                $sellerData = $this->__preSeller($sellerId, $data);
                if( !$shopUserModel->insert($sellerData) )
                {
                    throw new \LogicException(app::get('sysshop')->_('注册失败'));
                }
                $db->commit();
    
            }
            catch(\Excessive $e)
            {
                $db->rollback();
                throw $e;
            }
    
            if( $isRunSid )
            {
                return $sellerId;
            }
    
            if( !$isSubAccount )
            {
                pamAccount::setSession($sellerId, trim($data['login_account']));
            }
    
    
            return true;
        }
    
        private function __preAccountSeller($data)
        {
            $pamShopData['login_account'] = trim($data['login_account']);
            $pamShopData['createtime'] = $data['createtime'] ? $data['createtime'] : time();
            $pamShopData['modified_time'] = $data['modified_time'] ? $data['modified_time'] : time();
            $pamShopData['user_id'] = $data['user_id'] ? $data['user_id'] : null;
            $pamShopData['disabled'] = $data['disabled'] ? $data['disabled'] : 0;
            $loginPassword = pam_encrypt::make(trim($data['login_password']));
            $pamShopData['login_password'] = $loginPassword;
    
            return $pamShopData;
        }
    
        private function __preSeller($sellerId, $data)
        {
            $sellerData['seller_id'] = intval($sellerId);
            $sellerData['seller_type'] = !empty($data['seller_type']) ? $data['seller_type'] : '0';
            $sellerData['name'] = $data['name'];
            if( $data['shop_id'] && $data['seller_type'] == '1' )
            {
                $sellerData['shop_id'] = $data['shop_id'];
            }
            $sellerData['mobile'] = $data['mobile'];
            $sellerData['role_id'] = $data['role_id'] ? $data['role_id'] : 0;
            $sellerData['email'] = $data['email'];
            $sellerData['modified_time'] = time();
            $sellerData['auth_type'] = !empty($data['auth_type']) ? $data['auth_type'] : 'UNAUTH';
            $sellerData['logo'] = !empty($data['logo']) ? $data['logo'] : '';
            $sellerData['proportions'] = !empty($data['proportions']) ? $data['proportions'] : '';
            $sellerData['show_customer_phone'] = !empty($data['show_customer_phone']) ? $data['show_customer_phone'] : 0;
            return $sellerData;
        }
    
        /**
         * @brief 检查注册数据的合法性
         *
         * @param array  $data 注册表单提交的数据
         *
         * @return bool
         */
        public function checkSignup($data)
        {
            //检查数据安全
            $data = utils::_filter_input($data);
    
            if( empty($data['name']) || mb_strlen(trim($data['name']),'utf8') > 10 )
            {
                $msg = $this->app->_('联系人姓名必填且长度不能超过10个字');
                throw new \LogicException($msg);
            }
    
            /*if( empty($data['mobile']) || !$this->checkStrType($data['mobile'], 'mobile') )
            {
                if( $this->isExists($data['mobile'], 'mobile') )
                {
                    $msg = $this->app->_('该手机号已被注册，请重新换一个');
                    throw new \LogicException($msg);
                }
                $msg = $this->app->_('请输入正确的手机号码');
                throw new \LogicException($msg);
            }*/
    
           /* if( empty($data['email']) || !$this->checkStrType($data['email'], 'email') )
            {
                if( strlen( trim($data['email']) ) > 50 )
                {
                    $msg = $this->app->_('邮箱长度不能超过50个字符');
                    throw new \LogicException($msg);
                }
    
                if( $this->isExists($data['email'], 'email') )
                {
                    $msg = $this->app->_('该邮箱已被注册，请重新换一个');
                    throw new \LogicException($msg);
                }
                $msg = $this->app->_('请输入正确的邮箱');
                throw new \LogicException($msg);
            }*/
    
            return true;
        }
    
        /**
         * @brief 检查传入字符的是否为预想类型
         *
         * @param string $string 传入的字符
         * @param string $type   字符预想的类型
         *
         * @return string
         */
        public function checkStrType($string, $type)
        {
            if( $type == 'email' && strpos($string,'@') )
            {
                if( !preg_match("/^[a-z\d][a-z\d_.]*@[\w-]+(?:\.[a-z]{2,})+$/",$string) )
                {
                    throw new \LogicException(app::get('sysshop')->_('请输入正确的邮箱地址'));
                }
                return true;
            }
    
            if( $type == 'mobile' && preg_match("/^1[34578]{1}[0-9]{9}$/",$string) ) return true;
    
            return false;
        }
    
        /**
         * 检查密码是否合法，密码是否一致(注册，找回密码，修改密码)调用
         * @params string $password  密码
         * @params string $psw_confirm 确认密码
         *
         * @return bool
         */
        public function checkPassport($password, $psw_confirm){
            $passwdlen = strlen( trim($password) );
            if($passwdlen<6)
            {
                $msg = $this->app->_('密码长度不能小于6位');
                throw new \LogicException($msg);
            }
    
            if($passwdlen>20)
            {
                $msg = $this->app->_('密码长度不能大于20位');
                throw new \LogicException($msg);
            }
    
            if(preg_match("/^[a-z]*$/i", trim($password)) )
            {
                $msg = $this->app->_('密码不能为纯字母');
                throw new \LogicException($msg);
            }
    
            if(preg_match("/^[0-9]*$/i", trim($password)) )
            {
                $msg = $this->app->_('密码不能为纯数字');
                throw new \LogicException($msg);
            }
    
            if($password != $psw_confirm)
            {
                $msg = $this->app->_('输入的密码不一致');
                throw new \LogicException($msg);
            }
    
            return true;
        }//end function
    
        /**
         * @brief  验证传入注册账号的合法性
         *
         * @param $loginName
         *
         * @return bool
         */
        public function checkSignupAccount($loginName, $checkIsExists=true)
        {
            if( empty($loginName) )
            {
                throw new \LogicException(app::get('sysshop')->_('请输入用户名'));
            }
    
            if( mb_strlen(trim($loginName)) < 4 )
            {
                throw new \LogicException(app::get('sysshop')->_('登录账号最少4个字'));
            }
            /*else if( mb_strlen(trim($loginName)) > 30 )
            {
                throw new \LogicException(app::get('sysshop')->_('登录账号过长，请换一个重试'));
            }*/
    
            if( is_numeric($loginName) )
            {
                throw new \LogicException(app::get('sysshop')->_('登录账号不能全为数字'));
            }
    
            /*if(!preg_match('/^[^\x00-\x2d^\x2f^\x3a-\x3f]+$/i', trim($loginName)) )
            {
                throw new \LogicException(app::get('sysshop')->_('该登录账号包含非法字符'));
            }*/
    
            //判断账号是否存在
            if( $checkIsExists && $this->isExists($loginName,'account') )
            {
                throw new \LogicException(app::get('sysshop')->_('该账号已经被占用，请换一个重试'));
            }
    
            return true;
        }//end function
    
        /**
         * @brief 判断注册信息账号，手机号，邮箱是否已近注册
         *
         * @param string $str 验证字符串
         * @param string $type 验证类型 账号，手机号，邮箱
         *
         * @return bool true已存在 | false不存在
         */
        public function isExists($str, $type='account')
        {
            //检查数据安全
            $str = utils::_filter_input($str);
    
            if(empty($str)) return false;
    
            switch($type)
            {
                case 'account':
                    $accountShopModel = app::get('sysshop')->model('account');
                    $data = $accountShopModel->getRow('seller_id',array('login_account'=>trim($str)));
                    break;
                case 'mobile':
                    $sysshopModel = app::get('sysshop')->model('seller');
                    $data = $sysshopModel->getRow('seller_id',array('mobile'=>trim($str)));
                    break;
                case 'email':
                    $sysshopModel = app::get('sysshop')->model('seller');
                    $data = $sysshopModel->getRow('seller_id',array('email'=>trim($str)));
                    break;
            }
            return $data['seller_id'] ? true : false;
        }
    
        public function logout()
        {
            $this->sellerId = null;
            $this->sellerName = null;
            $this->shopId = null;
            $this->sellerData = null;
            kernel::single('base_session')->set_cookie_expires(0);
    
            parent::logout();
        }
    
        /**
         * @brief  商家密码修改
         *
         * @param array $data 商家密码
         *
         * @return int userId
         */
    
        public function modifyPwd($data)
        {
            //检查数据安全
            $data = utils::_filter_input($data);
            $accountShopModel = app::get('sysshop')->model('account');
            $filter = array('seller_id'=>pamAccount::getAccountId());
            $account = $accountShopModel->getRow('seller_id,login_password',$filter);
    
            if( !$account ) return false;
    
            //检查密码合法，是否一致
            $this->checkPassport($data['login_password'],$data['psw_confirm']);
    
            if(!pam_encrypt::check($data['login_password_old'], $account['login_password']))
            {
                throw new \LogicException(app::get('sysshop')->_('原密码填写错误，请重新填写!'));
            }
    
            $pamShopData['login_password'] = pam_encrypt::make($data['login_password']);
            $pamShopData['seller_id'] = $filter['seller_id'];
            $pamShopData['modified_time'] = time();
            if( !$sellerId = $accountShopModel->save($pamShopData) )
            {
                throw new \LogicException(app::get('sysshop')->_('修改失败'));
            }
            return true;
        }
    
        /**
         * @brief 后台商家重置密码
         *
         * @param int $sellerId 重置密码的seller_id
         * @param string $password 重置的新密码
         *
         * @return bool
         */
        public function resetPwd($sellerId, $data)
        {
            $data = utils::_filter_input($data);
            $accountShopModel = app::get('sysshop')->model('account');
            $filter = array('seller_id'=>$sellerId);
            $account = $accountShopModel->getRow('seller_id,login_password',$filter);
            if( !$account )
            {
                throw new \LogicException(app::get('sysshop')->_('修改失败'));
            }
    
            //检查密码合法，是否一致
            $this->checkPassport($data['login_password'],$data['psw_confirm']);
    
            $pamShopData['login_password'] = pam_encrypt::make(trim($data['login_password']));
            $pamShopData['seller_id'] = $sellerId;
            $pamShopData['modified_time'] = time();
            if( !$sellerId = $accountShopModel->save($pamShopData) )
            {
                throw new \LogicException(app::get('sysshop')->_('修改失败'));
            }
            return true;
        }
    
        /**
         * 安全中心验证登录密码
         * @param array $data 商家密码
         * @return bool
         * */
        public function checkPassword($data)
        {
            //检查数据安全
            $data = utils::_filter_input($data);
            $accountShopModel = app::get('sysshop')->model('account');
            $filter = array('seller_id'=>pamAccount::getAccountId());
            $account = $accountShopModel->getRow('seller_id,login_password',$filter);
    
            if(!pam_encrypt::check($data['login_password'], $account['login_password']))
            {
                throw new \LogicException(app::get('sysshop')->_('密码填写错误，请重新填写!'));
            }
    
            return true;
        }
    
        /**
         * 忘记密码模块获取验证信息
         *
         * @param array $data
         * @return array | bool
         * */
    
        public function getFindAuthInfo($data)
        {
            if(empty($data) || !is_array($data))
            {
                return false;
            }
    
            //检查数据安全
            $data = utils::_filter_input($data);
    
            //处理数据
            $filter = array();
            if(!isset($data['seller_type']))
            {
                $data['seller_type'] = '0';
            }
    
            if($data['mobile'])
            {
                $filter['mobile'] = trim($data['mobile']);
            }
    
            if($data['email'])
            {
                $filter['email'] = trim($data['email']);
            }
    
            $filter['seller_type'] = $data['seller_type'];
    
            //获取数据
            $sellerModel = app::get('sysshop')->model('seller');
            $authInfo = $sellerModel->getRow('seller_id,auth_type',$filter);
    
            return $authInfo;
        }
    
        /**
         * 商家安全中心认证信息判断
         *
         * @author Xiaodc
         * @access public
         * @param string $str 用户提交的手机号或邮箱
         * @param string $type 手机类型或邮箱类型
         * @param string $ac 用户操作类型，验证或修改
         * @return boolean
         */
        public function isAuthExits($str, $type, $ac = 'update')
        {
            $acArr = array('index', 'update');
            if(! in_array($ac, $acArr))
            {
                return false;
            }
    
            if($ac == 'update')
            {
                return $this->isExists($str, $type);
            }
    
            //检查数据安全
            $str = utils::_filter_input($str);
    
            if(empty($str)) return false;
    
            // 在验证的时候只验证店主
            $filter = array('seller_type' => '0');
            switch($type)
            {
                case 'mobile':
                    $sysshopModel = app::get('sysshop')->model('seller');
                    $filter['mobile'] = trim($str);
                    $data = $sysshopModel->getRow('seller_id', $filter);
                    break;
                case 'email':
                    $sysshopModel = app::get('sysshop')->model('seller');
                    $filter['email'] = trim($str);
                    $data = $sysshopModel->getRow('seller_id', $filter);
                    break;
            }
    
            $bool = false;
            if($data['seller_id'] && $data['seller_id'] != $this->sellerId)
            {
                $bool = true;
            }
    
            return $bool;
        }
    
        private function __isMobile($string)
        {
            if(preg_match("/^1[34578]{1}\d{9}$/",$string)){
                return true;
            }else{
                return false;
            }
    
        }
    
        private function __changeMoblieToLoginName($mobile)
        {
            $seller = app::get('sysshop')->model('seller')->getRow('seller_id,auth_type', ['mobile'=>$mobile, 'auth_type|in'=>['AUTH_MOBILE','AUTH_ALL']]);
            if(count($seller) == 0)
                return null;
            $account = app::get('sysshop')->model('account')->getRow('login_account', ['seller_id'=>$seller['seller_id']]);
            $loginname = $account['login_account'];
    
            return $loginname;
        }
    
    }