User.php 21 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624
  1. <?php
  2. namespace app\api\controller;
  3. use app\common\controller\Api;
  4. use app\common\library\Ems;
  5. use app\common\library\Sms;
  6. use app\common\model\Order as OrderModel;
  7. use app\common\model\Users as UserModel;
  8. use fast\Random;
  9. use think\Cache;
  10. use think\Config;
  11. use think\Db;
  12. use think\Env;
  13. use think\Exception;
  14. use think\Hook;
  15. use think\Validate;
  16. /**
  17. * 会员接口
  18. */
  19. class User extends Api
  20. {
  21. protected $noNeedLogin = ['login', 'register', 'find_pwd_send_sms', 'verify_code', 'reset_pwd'];
  22. protected $noNeedRight = '*';
  23. public function _initialize()
  24. {
  25. parent::_initialize();
  26. if (!Config::get('fastadmin.usercenter')) {
  27. $this->error(__('User center already closed'));
  28. }
  29. }
  30. /**
  31. * 会员中心
  32. */
  33. public function index()
  34. {
  35. $user = $this->auth->getUser();
  36. $data['code'] = $user['code'];//今日已做任务
  37. $data['mobile'] = $user['mobile'];
  38. $data['balance'] = $user['freeze'] < 0 ? $user['freeze']: $user['balance'];
  39. $data['avatar'] = $user['avatar'];
  40. $data['bonus_sum'] = $user['bonus_sum'];
  41. $data['order_num'] = (new OrderModel())
  42. ->where('user_id', $user['id'])
  43. ->where('status', OrderModel::Success)
  44. ->count();
  45. $data['invite_link'] = Env::get('app.invite_domain') . '/?i=' . $user['invitation_code'];
  46. $data['invitation_code'] = $user['invitation_code'];
  47. if(empty($user['invitation_code'])){
  48. //生成邀请码
  49. $data['invitation_code'] = (new UserModel())->setInvitationCode($user['id']);
  50. }
  51. $this->success('', $data);
  52. }
  53. /**
  54. * 会员登录
  55. *
  56. * @ApiMethod (POST)
  57. * @param string $account 账号
  58. * @param string $password 密码
  59. */
  60. public function login()
  61. {
  62. $code = $this->request->post('code');
  63. $mobile = $this->request->post('mobile');
  64. $pwd = $this->request->post('pwd');
  65. if (!$code || !$mobile || !$pwd) {
  66. $this->error(__('Invalid parameters'));
  67. }
  68. $ret = $this->auth->login($code, $mobile, $pwd);
  69. if ($ret) {
  70. $data = ['userinfo' => $this->auth->getUserinfo()];
  71. $this->success(__('Logged in successful'), $data);
  72. } else {
  73. $this->error($this->auth->getError());
  74. }
  75. }
  76. /**
  77. * 重置密码
  78. *
  79. * @ApiMethod (POST)
  80. * @param string $mobile 手机号
  81. * @param string $newpassword 新密码
  82. * @param string $captcha 验证码
  83. */
  84. public function change_login_pwd()
  85. {
  86. $old_pwd = $this->request->post("old_pwd", '', null);
  87. $new_pwd = $this->request->post("new_pwd", '', null);
  88. $confirm_pwd = $this->request->post("confirm_pwd", '', null);
  89. $rule = [
  90. 'old_pwd' => 'require|regex:\S{6,30}',
  91. 'new_pwd' => 'require|regex:\S{6,30}',
  92. 'confirm_pwd' => 'require|regex:\S{6,30}|confirm:new_pwd',
  93. ];
  94. $msg = [
  95. 'old_pwd.regex' => __('Password must be 6 to 30 characters'),
  96. 'new_pwd.regex' => __('Password must be 6 to 30 characters'),
  97. 'new_pwd.confirm' => __('Password and confirm password don\'t match')
  98. ];
  99. $data = [
  100. 'old_pwd' => $old_pwd,
  101. 'new_pwd' => $new_pwd,
  102. 'confirm_pwd' => $confirm_pwd,
  103. ];
  104. $field = [
  105. 'old_pwd' => __('旧密码'),
  106. 'new_pwd' => __('新密码'),
  107. 'confirm_pwd' => __('新密码')
  108. ];
  109. $validate = new Validate($rule, $msg, $field);
  110. $result = $validate->check($data);
  111. if (!$result) {
  112. $this->error(__($validate->getError()));
  113. }
  114. $ret = $this->auth->changepwd($new_pwd, $old_pwd);
  115. if ($ret) {
  116. $this->success(__('Reset password successful'));
  117. } else {
  118. $this->error($this->auth->getError());
  119. }
  120. }
  121. /**
  122. * 发送重置密码短信验证码
  123. * @return void
  124. */
  125. public function reset_fund_pwd_sms()
  126. {
  127. $login_pwd = $this->request->post("login_pwd", '', null);
  128. $user = $this->auth->getUser();
  129. if ($user->login_pwd != $this->auth->getEncryptPassword($login_pwd, $user->salt)) {
  130. $this->error(__('Password is incorrect'));
  131. }
  132. (new \app\api\controller\Sms())->send_international_sms($user['code'], $user['mobile'], 'rest_fund_pwd');
  133. }
  134. /**
  135. * 重置资金密码
  136. *
  137. * @ApiMethod (POST)
  138. * @param string $mobile 手机号
  139. * @param string $newpassword 新密码
  140. * @param string $captcha 验证码
  141. */
  142. public function reset_fund_pwd()
  143. {
  144. $login_pwd = $this->request->post("login_pwd", '', null);
  145. $new_pwd = $this->request->post("new_pwd", '', null);
  146. $confirm_pwd = $this->request->post("confirm_pwd", '', null);
  147. $captcha = $this->request->post("captcha");
  148. $rule = [
  149. 'login_pwd' => 'require|regex:\S{6,30}',
  150. 'new_pwd' => 'require|regex:\S{6,30}',
  151. 'confirm_pwd' => 'require|regex:\S{6,30}|confirm:new_pwd',
  152. ];
  153. $msg = [
  154. 'login_pwd.regex' => __('Password must be 6 to 30 characters'),
  155. 'new_pwd.regex' => __('Password must be 6 to 30 characters'),
  156. 'new_pwd.confirm' => __('Password and confirm password don\'t match')
  157. ];
  158. $data = [
  159. 'login_pwd' => $login_pwd,
  160. 'new_pwd' => $new_pwd,
  161. 'confirm_pwd' => $confirm_pwd,
  162. ];
  163. $field = [
  164. 'login_pwd' => __('登录密码'),
  165. 'new_pwd' => __('新资金密码'),
  166. 'confirm_pwd' => __('新密码')
  167. ];
  168. $validate = new Validate($rule, $msg, $field);
  169. $result = $validate->check($data);
  170. if (!$result) {
  171. $this->error(__($validate->getError()));
  172. }
  173. if (empty($captcha)) {
  174. $this->error(__('Invalid parameters'));
  175. }
  176. $user = $this->auth->getUser();
  177. //验证手机验证码
  178. $ret = (new \app\api\controller\Sms())->check($user['code'],$user['mobile'], $captcha, 'rest_fund_pwd');
  179. if (!$ret) {
  180. $this->error(__('Captcha is incorrect'));
  181. }
  182. $res = (new \app\common\model\Users())
  183. ->where('id', $user['id'])
  184. ->update([
  185. 'fund_pwd' => md5($new_pwd)
  186. ]);
  187. if($res){
  188. $this->success(__('资金密码重置成功'));
  189. }
  190. $this->error(__('资金密码重置失败'));
  191. }
  192. /**
  193. * 找回密码发送验证码
  194. * @return void
  195. * @throws \think\Exception
  196. */
  197. public function find_pwd_send_sms()
  198. {
  199. $code = $this->request->post('country_code');
  200. $mobile = $this->request->post('mobile');
  201. $captcha = $this->request->post('captcha');
  202. $token = $this->request->post('token', ip2long($this->request->ip()));
  203. // $id = $this->request->ip();
  204. if(!captcha_check($captcha,$token)){
  205. $this->error(__('验证码错误'));
  206. };
  207. $user = UserModel::getByCodeAndMobile($code,$mobile);
  208. if(empty($user)){
  209. $this->error(__('手机号码不存在'));
  210. }
  211. if($user['is_lock']){
  212. $this->error(__('账号锁定'));
  213. }
  214. (new \app\api\controller\Sms())->send_international_sms($user['code'], $user['mobile'], 'find_pwd');
  215. }
  216. public function verify_code()
  217. {
  218. $country_code = $this->request->post('country_code');
  219. $mobile = $this->request->post('mobile');
  220. $code = $this->request->post('code');
  221. $verify = (new \app\api\controller\Sms())->check($country_code, $mobile, $code, 'find_pwd');
  222. if($verify){
  223. $token = uniqid();
  224. Cache::set($token, ['code' => $country_code, 'mobile' => $mobile], 60 * 10);//临时token缓存10分钟
  225. $this->success('', $token);
  226. }
  227. $this->error(__('手机验证码错误'));
  228. }
  229. public function reset_pwd()
  230. {
  231. $code = $this->request->post('country_code');
  232. $mobile = $this->request->post('mobile');
  233. $new_pwd = $this->request->post("new_pwd", '', null);
  234. $confirm_pwd = $this->request->post("confirm_pwd", '', null);
  235. $rule = [
  236. 'country_code' => 'require',
  237. 'mobile' => 'require|regex:^1\d{10}$',
  238. 'new_pwd' => 'require|regex:\S{6,30}',
  239. 'confirm_pwd' => 'require|regex:\S{6,30}|confirm:new_pwd',
  240. ];
  241. $msg = [
  242. 'mobile.regex' => __('Mobile is incorrect'),
  243. 'new_pwd.regex' => __('Password must be 6 to 30 characters'),
  244. 'new_pwd.confirm' => __('Password and confirm password don\'t match')
  245. ];
  246. $data = [
  247. 'country_code' => $code,
  248. 'mobile' => $mobile,
  249. 'new_pwd' => $new_pwd,
  250. 'confirm_pwd' => $confirm_pwd,
  251. ];
  252. $field = [
  253. 'country_code' => __('区号'),
  254. 'mobile' => __('手机号码'),
  255. 'new_pwd' => __('新资金密码'),
  256. 'confirm_pwd' => __('新密码')
  257. ];
  258. $validate = new Validate($rule, $msg, $field);
  259. $result = $validate->check($data);
  260. if (!$result) {
  261. $this->error(__($validate->getError()));
  262. }
  263. Db::startTrans();
  264. try {
  265. $salt = Random::alnum();
  266. $new_password = $this->auth->getEncryptPassword($new_pwd, $salt);
  267. UserModel::where('mobile', $mobile)->where('code', $code)
  268. ->update([
  269. 'login_pwd' => $new_password,
  270. 'salt' => $salt
  271. ]);
  272. Db::commit();
  273. } catch (Exception $e) {
  274. Db::rollback();
  275. $this->error($e->getMessage());
  276. }
  277. $this->success('');
  278. }
  279. /**
  280. * 提现信息
  281. *
  282. */
  283. public function withdraw_info()
  284. {
  285. $user = $this->auth->getUser();
  286. $withdraw_info = UserModel::getAgentWithdrawInfoByAgentId($user['agent_id']);
  287. $resdata['usdt']['is_open'] = $withdraw_info['usdt'];
  288. $resdata['bank']['is_open'] = $withdraw_info['bank'];
  289. if($withdraw_info['usdt']){
  290. $resdata['usdt']['address'] = $user['usdt_address'];
  291. }
  292. if($withdraw_info['bank']){
  293. $resdata['bank']['real_name'] = $resdata['bank']['bank_name'] = $resdata['bank']['bank_card'] = '';
  294. $bank_info = json_decode($user['bank_info'], true);
  295. if(!empty($bank_info)){
  296. $resdata['bank']['real_name'] = $bank_info['real_name'];
  297. $resdata['bank']['bank_name'] = $bank_info['bank_name'];
  298. $resdata['bank']['bank_card'] = $bank_info['bank_card'];
  299. }
  300. }
  301. $this->success('', $resdata);
  302. }
  303. /**
  304. * 提现信息修改
  305. *
  306. */
  307. public function withdraw_change()
  308. {
  309. $user = $this->auth->getUser();
  310. $fund_pwd = $this->request->post("fund_pwd", '', null);
  311. if(md5($fund_pwd) != $user['fund_pwd']){
  312. $this->error(__('资金密码有误'));
  313. }
  314. $updata = [];
  315. $withdraw_info = UserModel::getAgentWithdrawInfoByAgentId($user['agent_id']);
  316. if($withdraw_info['usdt']){
  317. $updata['usdt_address'] = $this->request->post("usdt_address", '', null);
  318. }
  319. if($withdraw_info['bank']){
  320. $bank_info['real_name'] = $this->request->post("real_name", '', null);
  321. $bank_info['bank_name'] = $this->request->post("bank_name", '', null);
  322. $bank_info['bank_card'] = $this->request->post("bank_card", '', null);
  323. $updata['bank_info'] = json_encode($bank_info);
  324. }
  325. //dump($updata);
  326. (new UserModel())->where('id', $user['id'])->update($updata);
  327. $this->success(__('完成'));
  328. }
  329. /**
  330. * 注册会员
  331. *
  332. * @ApiMethod (POST)
  333. * @param string $username 用户名
  334. * @param string $password 密码
  335. * @param string $email 邮箱
  336. * @param string $mobile 手机号
  337. * @param string $code 验证码
  338. */
  339. public function register()
  340. {
  341. //$username = $this->request->post('username');
  342. //$email = $this->request->post('email');
  343. $code = $this->request->post('code');
  344. $mobile = $this->request->post('mobile');
  345. $pwd = $this->request->post('pwd');
  346. $confirm_pwd = $this->request->post('confirm_pwd');
  347. $invitation_code = $this->request->post('invitation_code');
  348. if (!$code || !$mobile || !$pwd || !$confirm_pwd || !$invitation_code) {
  349. $this->error(__('Invalid parameters'));
  350. }
  351. if ($pwd != $confirm_pwd) {
  352. $this->error(__('确认密码不一致'));
  353. }
  354. // if ($email && !Validate::is($email, "email")) {
  355. // $this->error(__('Email is incorrect'));
  356. // }
  357. if ($mobile && !Validate::regex($mobile, "^\d{8,11}$")) {
  358. $this->error(__('Mobile is incorrect'));
  359. }
  360. // $ret = Sms::check($mobile, $code, 'register');
  361. // if (!$ret) {
  362. // $this->error(__('Captcha is incorrect'));
  363. // }
  364. $ret = $this->auth->register($code, $mobile, $pwd, $invitation_code);
  365. if ($ret) {
  366. $data = ['userinfo' => $this->auth->getUserinfo()];
  367. $this->success(__('Sign up successful'), $data);
  368. } else {
  369. $this->error($this->auth->getError());
  370. }
  371. }
  372. /**
  373. * 退出登录
  374. * @ApiMethod (POST)
  375. */
  376. public function logout()
  377. {
  378. if (!$this->request->isPost()) {
  379. $this->error(__('Invalid parameters'));
  380. }
  381. $this->auth->logout();
  382. $this->success(__('Logout successful'));
  383. }
  384. /**
  385. * 修改会员个人信息
  386. *
  387. * @ApiMethod (POST)
  388. * @param string $avatar 头像地址
  389. * @param string $username 用户名
  390. * @param string $nickname 昵称
  391. * @param string $bio 个人简介
  392. */
  393. public function profile()
  394. {
  395. $user = $this->auth->getUser();
  396. $username = $this->request->post('username');
  397. $nickname = $this->request->post('nickname');
  398. $bio = $this->request->post('bio');
  399. $avatar = $this->request->post('avatar', '', 'trim,strip_tags,htmlspecialchars');
  400. if ($username) {
  401. $exists = \app\common\model\Users::where('username', $username)->where('id', '<>', $this->auth->id)->find();
  402. if ($exists) {
  403. $this->error(__('Username already exists'));
  404. }
  405. $user->username = $username;
  406. }
  407. if ($nickname) {
  408. $exists = \app\common\model\Users::where('nickname', $nickname)->where('id', '<>', $this->auth->id)->find();
  409. if ($exists) {
  410. $this->error(__('Nickname already exists'));
  411. }
  412. $user->nickname = $nickname;
  413. }
  414. $user->bio = $bio;
  415. $user->avatar = $avatar;
  416. $user->save();
  417. $this->success();
  418. }
  419. /**
  420. * 修改邮箱
  421. *
  422. * @ApiMethod (POST)
  423. * @param string $email 邮箱
  424. * @param string $captcha 验证码
  425. */
  426. public function changeemail()
  427. {
  428. $user = $this->auth->getUser();
  429. $email = $this->request->post('email');
  430. $captcha = $this->request->post('captcha');
  431. if (!$email || !$captcha) {
  432. $this->error(__('Invalid parameters'));
  433. }
  434. if (!Validate::is($email, "email")) {
  435. $this->error(__('Email is incorrect'));
  436. }
  437. if (\app\common\model\Users::where('email', $email)->where('id', '<>', $user->id)->find()) {
  438. $this->error(__('Email already exists'));
  439. }
  440. $result = Ems::check($email, $captcha, 'changeemail');
  441. if (!$result) {
  442. $this->error(__('Captcha is incorrect'));
  443. }
  444. $verification = $user->verification;
  445. $verification->email = 1;
  446. $user->verification = $verification;
  447. $user->email = $email;
  448. $user->save();
  449. Ems::flush($email, 'changeemail');
  450. $this->success();
  451. }
  452. /**
  453. * 修改手机号
  454. *
  455. * @ApiMethod (POST)
  456. * @param string $mobile 手机号
  457. * @param string $captcha 验证码
  458. */
  459. public function changemobile()
  460. {
  461. $user = $this->auth->getUser();
  462. $mobile = $this->request->post('mobile');
  463. $captcha = $this->request->post('captcha');
  464. if (!$mobile || !$captcha) {
  465. $this->error(__('Invalid parameters'));
  466. }
  467. if (!Validate::regex($mobile, "^1\d{10}$")) {
  468. $this->error(__('Mobile is incorrect'));
  469. }
  470. if (\app\common\model\Users::where('mobile', $mobile)->where('id', '<>', $user->id)->find()) {
  471. $this->error(__('Mobile already exists'));
  472. }
  473. $result = Sms::check($mobile, $captcha, 'changemobile');
  474. if (!$result) {
  475. $this->error(__('Captcha is incorrect'));
  476. }
  477. $verification = $user->verification;
  478. $verification->mobile = 1;
  479. $user->verification = $verification;
  480. $user->mobile = $mobile;
  481. $user->save();
  482. Sms::flush($mobile, 'changemobile');
  483. $this->success();
  484. }
  485. /**
  486. * 第三方登录
  487. *
  488. * @ApiMethod (POST)
  489. * @param string $platform 平台名称
  490. * @param string $code Code码
  491. */
  492. public function third()
  493. {
  494. $url = url('user/index');
  495. $platform = $this->request->post("platform");
  496. $code = $this->request->post("code");
  497. $config = get_addon_config('third');
  498. if (!$config || !isset($config[$platform])) {
  499. $this->error(__('Invalid parameters'));
  500. }
  501. $app = new \addons\third\library\Application($config);
  502. //通过code换access_token和绑定会员
  503. $result = $app->{$platform}->getUserInfo(['code' => $code]);
  504. if ($result) {
  505. $loginret = \addons\third\library\Service::connect($platform, $result);
  506. if ($loginret) {
  507. $data = [
  508. 'userinfo' => $this->auth->getUserinfo(),
  509. 'thirdinfo' => $result
  510. ];
  511. $this->success(__('Logged in successful'), $data);
  512. }
  513. }
  514. $this->error(__('Operation failed'), $url);
  515. }
  516. /**
  517. * 重置密码
  518. *
  519. * @ApiMethod (POST)
  520. * @param string $mobile 手机号
  521. * @param string $newpassword 新密码
  522. * @param string $captcha 验证码
  523. */
  524. public function resetpwd()
  525. {
  526. $type = $this->request->post("type", "mobile");
  527. $mobile = $this->request->post("mobile");
  528. $email = $this->request->post("email");
  529. $newpassword = $this->request->post("newpassword");
  530. $captcha = $this->request->post("captcha");
  531. if (!$newpassword || !$captcha) {
  532. $this->error(__('Invalid parameters'));
  533. }
  534. //验证Token
  535. if (!Validate::make()->check(['newpassword' => $newpassword], ['newpassword' => 'require|regex:\S{6,30}'])) {
  536. $this->error(__('Password must be 6 to 30 characters'));
  537. }
  538. if ($type == 'mobile') {
  539. if (!Validate::regex($mobile, "^1\d{10}$")) {
  540. $this->error(__('Mobile is incorrect'));
  541. }
  542. $user = \app\common\model\Users::getByMobile($mobile);
  543. if (!$user) {
  544. $this->error(__('User not found'));
  545. }
  546. $ret = Sms::check($mobile, $captcha, 'resetpwd');
  547. if (!$ret) {
  548. $this->error(__('Captcha is incorrect'));
  549. }
  550. Sms::flush($mobile, 'resetpwd');
  551. } else {
  552. if (!Validate::is($email, "email")) {
  553. $this->error(__('Email is incorrect'));
  554. }
  555. $user = \app\common\model\Users::getByEmail($email);
  556. if (!$user) {
  557. $this->error(__('User not found'));
  558. }
  559. $ret = Ems::check($email, $captcha, 'resetpwd');
  560. if (!$ret) {
  561. $this->error(__('Captcha is incorrect'));
  562. }
  563. Ems::flush($email, 'resetpwd');
  564. }
  565. //模拟一次登录
  566. $this->auth->direct($user->id);
  567. $ret = $this->auth->changepwd($newpassword, '', true);
  568. if ($ret) {
  569. $this->success(__('Reset password successful'));
  570. } else {
  571. $this->error($this->auth->getError());
  572. }
  573. }
  574. }