mirror of
https://github.com/ZeroDream-CN/SakuraPanel.git
synced 2025-01-12 18:02:51 +08:00
370 lines
11 KiB
PHP
Executable File
370 lines
11 KiB
PHP
Executable File
<?php
|
||
namespace SakuraPanel;
|
||
|
||
use SakuraPanel;
|
||
|
||
class UserManager {
|
||
|
||
public function isLogged()
|
||
{
|
||
return (isset($_SESSION['user']) && !empty($_SESSION['user']));
|
||
}
|
||
|
||
public function doLogin($data)
|
||
{
|
||
if(empty($data['username']) || empty($data['password'])) {
|
||
return Array("status" => false, "message" => "请将信息填写完整");
|
||
}
|
||
|
||
if(!$this->checkUserName($data['username'])) {
|
||
return Array("status" => false, "message" => "用户名不合法");
|
||
}
|
||
|
||
// 获取用户的信息（以用户名）
|
||
$rs = $this->getInfoByUser($data['username']);
|
||
|
||
if(!$rs) {
|
||
|
||
// 获取用户的信息（以邮箱）
|
||
$rs = $this->getInfoByEmail($data['username']);
|
||
if(!$rs) {
|
||
return Array("status" => false, "message" => "用户名或密码错误");
|
||
}
|
||
}
|
||
|
||
if(!$this->checkPassword($data['password'], $rs['password'])) {
|
||
return Array("status" => false, "message" => "用户名或密码错误");
|
||
}
|
||
|
||
return Array("status" => true, "message" => "登录成功", "username" => $rs['username'], "email" => $rs['email']);
|
||
}
|
||
|
||
public function doRegister($data)
|
||
{
|
||
global $_config;
|
||
|
||
if(!$_config['register']['enable']) {
|
||
return Array("status" => false, "message" => "抱歉，本站暂不开放注册");
|
||
}
|
||
|
||
if(!isset($data['username']) || !isset($data['email']) || !isset($data['password']) ||
|
||
empty($data['username']) || empty($data['email']) || empty($data['password'])) {
|
||
return Array("status" => false, "message" => "请将信息填写完整");
|
||
}
|
||
|
||
if($_config['smtp']['enable']) {
|
||
if(!isset($data['verifycode']) || empty($data['verifycode'])) {
|
||
return Array("status" => false, "message" => "请输入验证码");
|
||
} else {
|
||
if(!isset($_SESSION['reg_verifycode']) || $_SESSION['reg_verifycode'] == "") {
|
||
return Array("status" => false, "message" => "验证码已失效，请重新获取邮件");
|
||
}
|
||
if(isset($_SESSION['reg_wait'])) {
|
||
if(time() - $_SESSION['reg_wait'] > 900) {
|
||
exit("验证码已失效，请重新获取邮件");
|
||
}
|
||
}
|
||
if($_SESSION['reg_email'] !== $data['email']) {
|
||
return Array("status" => false, "message" => "请重新验证该邮箱后才能注册");
|
||
}
|
||
if(Intval($_SESSION['reg_verifycode']) !== Intval($data['verifycode'])) {
|
||
return Array("status" => false, "message" => "验证码错误，请检查");
|
||
}
|
||
}
|
||
}
|
||
|
||
if(!$this->checkUserName($data['username'])) {
|
||
return Array("status" => false, "message" => "用户名不合法");
|
||
}
|
||
|
||
if($this->checkUserExist($data['username'])) {
|
||
return Array("status" => false, "message" => "该用户名已被注册");
|
||
}
|
||
|
||
if($this->checkEmailExist($data['email'])) {
|
||
return Array("status" => false, "message" => "该邮箱已被注册");
|
||
}
|
||
|
||
// 执行注册
|
||
$this->addUser($data['username'], $data['email'], $data['password']);
|
||
|
||
return Array("status" => true, "message" => "账号注册成功！");
|
||
}
|
||
|
||
public function resetPass($link)
|
||
{
|
||
$lk = Database::querySingleLine("findpass", Array("link" => $link));
|
||
if($lk) {
|
||
if(time() - $lk['time'] < 3600) {
|
||
$newpass = $this->getUserToken($lk['username']);
|
||
$password = $this->generatePassword($newpass);
|
||
$token = substr(md5(sha1(md5($lk['username']) . md5($password) . time() . mt_rand(0, 9999999))), 0, 16);
|
||
// 更新数据库
|
||
Database::update("users", Array("password" => $password), Array("username" => $lk['username']));
|
||
Database::update("tokens", Array("token" => $token), Array("username" => $lk['username']));
|
||
Database::delete("findpass", Array("link" => $link));
|
||
return true;
|
||
}
|
||
return false;
|
||
}
|
||
return false;
|
||
}
|
||
|
||
public function doFindpass($data)
|
||
{
|
||
global $_config;
|
||
|
||
if(!$_config['smtp']['enable']) {
|
||
return Array("status" => false, "message" => "本站未开启 SMTP 服务，请联系管理员");
|
||
}
|
||
|
||
if(isset($_SESSION['sendmail']) && time() - $_SESSION['sendmail'] <= 60) return Array("status" => false, "message" => "您操作的频率太高，请稍后再试");
|
||
if($data['username'] == "") return Array("status" => false, "message" => "请填写要找回密码的账号或邮箱");
|
||
|
||
$rs = $this->getInfoByUser($data['username']);
|
||
$link = sha1(md5($rs['username'] . $rs['password'] . time() . mt_rand(0, 9999999)) . md5(mt_rand(0, 9999999)));
|
||
$found = false;
|
||
|
||
if($rs) {
|
||
$this->sendFindpassEmail($rs['username'], $rs['email'], $link);
|
||
$found = true;
|
||
} else {
|
||
$rs = $this->getInfoByEmail($data['username']);
|
||
if($rs) {
|
||
$this->sendFindpassEmail($rs['username'], $rs['email'], $link);
|
||
$found = true;
|
||
}
|
||
}
|
||
|
||
if($found) {
|
||
$ms = Database::querySingleLine("findpass", Array("username" => $rs['username']));
|
||
if($ms) {
|
||
Database::delete("findpass", Array("username" => $rs['username']));
|
||
}
|
||
Database::insert("findpass", Array(
|
||
"username" => $rs['username'],
|
||
"link" => $link,
|
||
"time" => time()
|
||
));
|
||
}
|
||
|
||
$_SESSION['sendmail'] = time();
|
||
|
||
return Array("status" => true, "message" => "我们已经尝试了发送一封邮件到该账号的邮箱，请查收。");
|
||
}
|
||
|
||
public function sendFindpassEmail($username, $email, $link)
|
||
{
|
||
global $_config;
|
||
|
||
$type = SakuraPanel\Utils::isHttps() ? "https" : "http";
|
||
$token = $this->getUserToken($username);
|
||
$url = "{$type}://{$_SERVER['SERVER_NAME']}/?page=findpass&link={$link}";
|
||
$temp = @file_get_contents(ROOT . "/assets/email/findpass.html");
|
||
|
||
$temp = str_replace("{SITENAME}", $_config['sitename'], $temp);
|
||
$temp = str_replace("{SITEDESCRIPTION}", $_config['description'], $temp);
|
||
$temp = str_replace("{USERNAME}", $username, $temp);
|
||
$temp = str_replace("{TOKEN}", $token, $temp);
|
||
$temp = str_replace("{URL}", $url, $temp);
|
||
|
||
$smtp = new SakuraPanel\Smtp(
|
||
$_config['smtp']['host'],
|
||
$_config['smtp']['port'],
|
||
true,
|
||
$_config['smtp']['user'],
|
||
$_config['smtp']['pass']
|
||
);
|
||
|
||
$smtp->debug = false;
|
||
$smtp->sendMail($email, $_config['smtp']['mail'], "找回您的 {$_config['sitename']} 密码", $temp, "HTML");
|
||
}
|
||
|
||
public function sendRegisterEmail($email, $number)
|
||
{
|
||
global $_config;
|
||
|
||
$temp = @file_get_contents(ROOT . "/assets/email/welcome.html");
|
||
|
||
$temp = str_replace("{SITENAME}", $_config['sitename'], $temp);
|
||
$temp = str_replace("{SITEDESCRIPTION}", $_config['description'], $temp);
|
||
$temp = str_replace("{NUMBER}", $number, $temp);
|
||
|
||
$smtp = new SakuraPanel\Smtp(
|
||
$_config['smtp']['host'],
|
||
$_config['smtp']['port'],
|
||
true,
|
||
$_config['smtp']['user'],
|
||
$_config['smtp']['pass']
|
||
);
|
||
|
||
$smtp->debug = false;
|
||
$smtp->sendMail($email, $_config['smtp']['mail'], "验证您的 {$_config['sitename']} 账号", $temp, "HTML");
|
||
}
|
||
|
||
public function addUser($username, $email, $password, $group = "default", $status = 0)
|
||
{
|
||
global $_config;
|
||
|
||
// 生成密码和 Token
|
||
$password = $this->generatePassword($password);
|
||
$token = substr(md5(sha1(md5($username) . md5($password) . time() . mt_rand(0, 9999999))), 0, 16);
|
||
|
||
Database::insert("users", Array(
|
||
"id" => null,
|
||
"username" => $username,
|
||
"password" => $password,
|
||
"email" => $email,
|
||
"traffic" => $_config['register']['traffic'],
|
||
"proxies" => $_config['register']['proxies'],
|
||
"group" => $group,
|
||
"regtime" => time(),
|
||
"status" => $status,
|
||
));
|
||
|
||
Database::insert("tokens", Array(
|
||
"id" => null,
|
||
"username" => $username,
|
||
"token" => $token,
|
||
"status" => 0
|
||
));
|
||
}
|
||
|
||
public function updateUser($id, $data)
|
||
{
|
||
$rs = $this->getInfoById($id);
|
||
if(is_array($rs)) {
|
||
$result = Database::update("users", Array(
|
||
"traffic" => $data['traffic'],
|
||
"proxies" => $data['proxies'],
|
||
"group" => $data['group'],
|
||
"status" => $data['status']
|
||
), Array("id" => $id));
|
||
|
||
if($result !== true) {
|
||
return $result;
|
||
}
|
||
|
||
if(isset($data['inbound'], $data['outbound']) && SakuraPanel\Regex::isNumber($data['inbound']) && SakuraPanel\Regex::isNumber($data['outbound'])) {
|
||
$ls = Database::querySingleLine("limits", Array("username" => $rs['username']));
|
||
if($ls) {
|
||
$result = Database::update("limits", Array(
|
||
"inbound" => $data['inbound'],
|
||
"outbound" => $data['outbound']
|
||
), Array("username" => $rs['username']));
|
||
} else {
|
||
$result = Database::insert("limits", Array(
|
||
"username" => $rs['username'],
|
||
"inbound" => $data['inbound'],
|
||
"outbound" => $data['outbound']
|
||
));
|
||
}
|
||
} else {
|
||
$result = Database::delete("limits", Array("username" => $rs['username']));
|
||
}
|
||
|
||
return $result;
|
||
} else {
|
||
return false;
|
||
}
|
||
}
|
||
|
||
public function getTokensToUsers()
|
||
{
|
||
$rs = Database::toArray(Database::query("tokens", Array()));
|
||
$tokens = [];
|
||
for($i = 0;$i < count($rs);$i++) {
|
||
$tokens[$rs[$i][2]] = $rs[$i][1];
|
||
}
|
||
return $tokens;
|
||
}
|
||
|
||
public function getTotalUsers()
|
||
{
|
||
$rs = Database::toArray(Database::query("users", Array()));
|
||
return count($rs);
|
||
}
|
||
|
||
public function getInfoById($id)
|
||
{
|
||
return Database::querySingleLine("users", Array("id" => $id));
|
||
}
|
||
|
||
public function getInfoByUser($username)
|
||
{
|
||
return Database::querySingleLine("users", Array("username" => $username));
|
||
}
|
||
|
||
public function getInfoByEmail($email)
|
||
{
|
||
return Database::querySingleLine("users", Array("email" => $email));
|
||
}
|
||
|
||
public function checkUserExist($username)
|
||
{
|
||
return Database::querySingleLine("users", Array("username" => $username)) ? true : false;
|
||
}
|
||
|
||
public function checkUserName($username)
|
||
{
|
||
return preg_match("/^[A-Za-z0-9\_\-]{3,32}$/", $username) ? true : false;
|
||
}
|
||
|
||
public function checkEmailExist($email)
|
||
{
|
||
return Database::querySingleLine("users", Array("email" => $email)) ? true : false;
|
||
}
|
||
|
||
public function checkEmail($email)
|
||
{
|
||
return preg_match("/^\w[-\w.+]*@([A-Za-z0-9][-A-Za-z0-9]+\.)+[A-Za-z]{2,48}$/", $email) ? true : false;
|
||
}
|
||
|
||
public function checkPassword($password, $encrypted)
|
||
{
|
||
return password_verify($password, $encrypted);
|
||
}
|
||
|
||
public function generatePassword($password)
|
||
{
|
||
return password_hash($password, PASSWORD_BCRYPT);
|
||
}
|
||
|
||
public function getUserToken($username)
|
||
{
|
||
$rs = Database::querySingleLine("tokens", Array("username" => $username));
|
||
return $rs['token'] ?? false;
|
||
}
|
||
|
||
/**
|
||
*
|
||
* 这里返回的 type：0 表示无设置，默认 / 1 表示该用户有独立设定 / 2 表示该用户继承组设定
|
||
*
|
||
*/
|
||
public function getLimit($username)
|
||
{
|
||
$rs = Database::querySingleLine("limits", Array("username" => $username));
|
||
if($rs) {
|
||
return Array("inbound" => $rs['inbound'], "outbound" => $rs['outbound'], "type" => 1);
|
||
} else {
|
||
$us = Database::querySingleLine("users", Array("username" => $username));
|
||
if($us) {
|
||
$gs = Database::querySingleLine("groups", Array("name" => $us['group']));
|
||
if($gs) {
|
||
return Array("inbound" => $gs['inbound'], "outbound" => $gs['outbound'], "type" => 2);
|
||
}
|
||
}
|
||
return Array("inbound" => 1024, "outbound" => 1024, "type" => 0);
|
||
}
|
||
}
|
||
|
||
public function getTodayTraffic($username)
|
||
{
|
||
$rs = Database::querySingleLine("todaytraffic", Array("user" => $username));
|
||
if($rs) {
|
||
return $rs['traffic'];
|
||
} else {
|
||
return 0;
|
||
}
|
||
}
|
||
} |