AuthController.php 24 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663664665666667668669670671672673674675676677678679680681682683684685686687688689690691692693694695696697698699700701702703704705706707708709710711712713714715716717718719720721722723724725726727728729730731732733734735736737738739740741742743744745746747748749750751752753754755756757758759760761762763764765766767768769770771772773
  1. <?php
  2. namespace App\Http\Controllers;
  3. use App\Components\Helpers;
  4. use App\Components\IPIP;
  5. use App\Components\QQWry;
  6. use App\Http\Models\Invite;
  7. use App\Http\Models\SensitiveWords;
  8. use App\Http\Models\User;
  9. use App\Http\Models\UserLabel;
  10. use App\Http\Models\UserLoginLog;
  11. use App\Http\Models\UserSubscribe;
  12. use App\Http\Models\Verify;
  13. use App\Http\Models\VerifyCode;
  14. use App\Mail\activeUser;
  15. use App\Mail\resetPassword;
  16. use App\Mail\sendVerifyCode;
  17. use Auth;
  18. use Cache;
  19. use Captcha;
  20. use Cookie;
  21. use Hash;
  22. use Illuminate\Http\Request;
  23. use Log;
  24. use Mail;
  25. use Redirect;
  26. use Response;
  27. use Session;
  28. use Validator;
  29. /**
  30. * 认证控制器
  31. *
  32. * Class AuthController
  33. *
  34. * @package App\Http\Controllers
  35. */
  36. class AuthController extends Controller
  37. {
  38. protected static $systemConfig;
  39. function __construct()
  40. {
  41. self::$systemConfig = Helpers::systemConfig();
  42. }
  43. // 登录
  44. public function login(Request $request)
  45. {
  46. if($request->isMethod('POST')){
  47. $this->validate($request, [
  48. 'email' => 'required',
  49. 'password' => 'required'
  50. ], [
  51. 'email.required' => trans('auth.email_null'),
  52. 'password.required' => trans('auth.password_null')
  53. ]);
  54. $email = $request->input('email');
  55. $captcha = $request->input('captcha');
  56. $password = $request->input('password');
  57. $remember = $request->input('remember');
  58. // 是否校验验证码
  59. switch(self::$systemConfig['is_captcha']){
  60. case 1: // 默认图形验证码
  61. if(!Captcha::check($captcha)){
  62. return Redirect::back()->withInput()->withErrors(trans('auth.captcha_error'));
  63. }
  64. break;
  65. case 2: // Geetest
  66. $result = $this->validate($request, [
  67. 'geetest_challenge' => 'required|geetest'
  68. ], [
  69. 'geetest' => trans('auth.captcha_fail')
  70. ]);
  71. if(!$result){
  72. return Redirect::back()->withInput()->withErrors(trans('auth.fail_captcha'));
  73. }
  74. break;
  75. case 3: // Google reCAPTCHA
  76. $result = $this->validate($request, [
  77. 'g-recaptcha-response' => 'required|NoCaptcha'
  78. ]);
  79. if(!$result){
  80. return Redirect::back()->withInput()->withErrors(trans('auth.fail_captcha'));
  81. }
  82. break;
  83. default: // 不启用验证码
  84. break;
  85. }
  86. // 验证账号并创建会话
  87. if(!Auth::attempt(['email' => $email, 'password' => $password], $remember)){
  88. return Redirect::back()->withInput()->withErrors(trans('auth.login_error'));
  89. }
  90. // 校验普通用户账号状态
  91. if(!Auth::user()->is_admin){
  92. if(Auth::user()->status < 0){
  93. Auth::logout(); // 强制销毁会话,因为Auth::attempt的时候会产生会话
  94. return Redirect::back()->withInput()->withErrors(trans('auth.login_ban', ['email' => self::$systemConfig['webmaster_email']]));
  95. }elseif(Auth::user()->status == 0 && (self::$systemConfig['is_active_register'] || self::$systemConfig['is_verify_register'])){
  96. Auth::logout(); // 强制销毁会话,因为Auth::attempt的时候会产生会话
  97. return Redirect::back()->withInput()->withErrors(trans('auth.active_tip').'<a href="/activeUser?email='.$email.'" target="_blank"><span style="color:#000">【'.trans('auth.active_account').'】</span></a>');
  98. }
  99. }
  100. // 写入登录日志
  101. $this->addUserLoginLog(Auth::user()->id, getClientIp());
  102. // 更新登录信息
  103. User::uid()->update(['last_login' => time()]);
  104. // 根据权限跳转
  105. if(Auth::user()->is_admin){
  106. return Redirect::to('admin');
  107. }
  108. return Redirect::to('/');
  109. }else{
  110. if(Auth::check()){
  111. if(Auth::user()->is_admin){
  112. return Redirect::to('admin');
  113. }
  114. return Redirect::to('/');
  115. }
  116. return Response::view('auth.login');
  117. }
  118. }
  119. /**
  120. * 添加用户登录日志
  121. *
  122. * @param string $userId 用户ID
  123. * @param string $ip IP地址
  124. */
  125. private function addUserLoginLog($userId, $ip)
  126. {
  127. if(filter_var($ip, FILTER_VALIDATE_IP, FILTER_FLAG_IPV6)){
  128. Log::info('识别到IPv6,尝试解析:'.$ip);
  129. $ipInfo = getIPv6($ip);
  130. }else{
  131. $ipInfo = QQWry::ip($ip); // 通过纯真IP库解析IPv4信息
  132. if(isset($ipInfo['error'])){
  133. Log::info('无法识别IPv4,尝试使用IPIP的IP库解析:'.$ip);
  134. $ipip = IPIP::ip($ip);
  135. $ipInfo = [
  136. 'country' => $ipip['country_name'],
  137. 'province' => $ipip['region_name'],
  138. 'city' => $ipip['city_name']
  139. ];
  140. }else{
  141. // 判断纯真IP库获取的国家信息是否与IPIP的IP库获取的信息一致,不一致则用IPIP的(因为纯真IP库的非大陆IP准确率较低)
  142. $ipip = IPIP::ip($ip);
  143. if($ipInfo['country'] != $ipip['country_name']){
  144. $ipInfo['country'] = $ipip['country_name'];
  145. $ipInfo['province'] = $ipip['region_name'];
  146. $ipInfo['city'] = $ipip['city_name'];
  147. }
  148. }
  149. }
  150. if(empty($ipInfo) || empty($ipInfo['country'])){
  151. Log::warning("获取IP信息异常:".$ip);
  152. }
  153. $log = new UserLoginLog();
  154. $log->user_id = $userId;
  155. $log->ip = $ip;
  156. $log->country = $ipInfo['country'] ?? '';
  157. $log->province = $ipInfo['province'] ?? '';
  158. $log->city = $ipInfo['city'] ?? '';
  159. $log->county = $ipInfo['county'] ?? '';
  160. $log->isp = $ipInfo['isp'] ?? ($ipInfo['organization'] ?? '');
  161. $log->area = $ipInfo['area'] ?? '';
  162. $log->save();
  163. }
  164. // 退出
  165. public function logout()
  166. {
  167. Auth::logout();
  168. return Redirect::to('login');
  169. }
  170. // 注册
  171. public function register(Request $request)
  172. {
  173. $cacheKey = 'register_times_'.md5(getClientIp()); // 注册限制缓存key
  174. if($request->isMethod('POST')){
  175. $this->validate($request, [
  176. 'username' => 'required',
  177. 'email' => 'required|email|unique:user',
  178. 'password' => 'required|min:6',
  179. 'confirmPassword' => 'required|same:password',
  180. 'term' => 'accepted'
  181. ], [
  182. 'username.required' => trans('auth.email_null'),
  183. 'email.required' => trans('auth.email_null'),
  184. 'email.email' => trans('auth.email_legitimate'),
  185. 'email.unique' => trans('auth.email_exist'),
  186. 'password.required' => trans('auth.password_null'),
  187. 'password.min' => trans('auth.password_limit'),
  188. 'confirmPassword.required' => trans('auth.confirm_password'),
  189. 'confirmPassword.same' => trans('auth.password_same'),
  190. 'term.accepted' => trans('auth.unaccepted')
  191. ]);
  192. $username = $request->input('username');
  193. $email = $request->input('email');
  194. $password = $request->input('password');
  195. $register_token = $request->input('register_token');
  196. $code = $request->input('code');
  197. $verify_code = $request->input('verify_code');
  198. $captcha = $request->input('captcha');
  199. $aff = intval($request->input('aff'));
  200. // 防止重复提交
  201. if($register_token != Session::get('register_token')){
  202. return Redirect::back()->withInput()->withErrors(trans('auth.repeat_request'));
  203. }else{
  204. Session::forget('register_token');
  205. }
  206. // 是否开启注册
  207. if(!self::$systemConfig['is_register']){
  208. return Redirect::back()->withErrors(trans('auth.register_close'));
  209. }
  210. // 校验域名邮箱黑白名单
  211. if(self::$systemConfig['sensitiveType']){
  212. // 校验域名邮箱是否在黑名单中
  213. $sensitiveWords = $this->sensitiveWords(1);
  214. $emailSuffix = explode('@', $email); // 提取邮箱后缀
  215. if(in_array(strtolower($emailSuffix[1]), $sensitiveWords)){
  216. return Redirect::back()->withInput()->withErrors(trans('auth.email_banned'));
  217. }
  218. }else{
  219. $sensitiveWords = $this->sensitiveWords(2);
  220. $emailSuffix = explode('@', $email); // 提取邮箱后缀
  221. if(!in_array(strtolower($emailSuffix[1]), $sensitiveWords)){
  222. return Redirect::back()->withInput()->withErrors(trans('auth.email_invalid'));
  223. }
  224. }
  225. // 如果需要邀请注册
  226. if(self::$systemConfig['is_invite_register']){
  227. // 必须使用邀请码
  228. if(self::$systemConfig['is_invite_register'] == 2 && !$code){
  229. return Redirect::back()->withInput()->withErrors(trans('auth.code_null'));
  230. }
  231. // 校验邀请码合法性
  232. if($code){
  233. $codeEnable = Invite::query()->where('code', $code)->where('status', 0)->doesntExist();
  234. if($codeEnable){
  235. return Redirect::back()->withInput($request->except(['code']))->withErrors(trans('auth.code_error'));
  236. }
  237. }
  238. }
  239. // 如果开启注册发送验证码
  240. if(self::$systemConfig['is_verify_register']){
  241. if(!$verify_code){
  242. return Redirect::back()->withInput($request->except(['verify_code']))->withErrors(trans('auth.captcha_null'));
  243. }else{
  244. $verifyCode = VerifyCode::query()->where('address', $email)->where('code', $verify_code)->where('status', 0)->firstOrFail();
  245. if(!$verifyCode){
  246. return Redirect::back()->withInput($request->except(['verify_code']))->withErrors(trans('auth.captcha_overtime'));
  247. }
  248. $verifyCode->status = 1;
  249. $verifyCode->save();
  250. }
  251. }
  252. // 是否校验验证码
  253. switch(self::$systemConfig['is_captcha']){
  254. case 1: // 默认图形验证码
  255. if(!Captcha::check($captcha)){
  256. return Redirect::back()->withInput()->withErrors(trans('auth.captcha_error'));
  257. }
  258. break;
  259. case 2: // Geetest
  260. $result = $this->validate($request, [
  261. 'geetest_challenge' => 'required|geetest'
  262. ], [
  263. 'geetest' => trans('auth.captcha_fail')
  264. ]);
  265. if(!$result){
  266. return Redirect::back()->withInput()->withErrors(trans('auth.captcha_fail'));
  267. }
  268. break;
  269. case 3: // Google reCAPTCHA
  270. $result = $this->validate($request, [
  271. 'g-recaptcha-response' => 'required|NoCaptcha'
  272. ]);
  273. if(!$result){
  274. return Redirect::back()->withInput()->withErrors(trans('auth.captcha_fail'));
  275. }
  276. break;
  277. default: // 不启用验证码
  278. break;
  279. }
  280. // 24小时内同IP注册限制
  281. if(self::$systemConfig['register_ip_limit']){
  282. if(Cache::has($cacheKey)){
  283. $registerTimes = Cache::get($cacheKey);
  284. if($registerTimes >= self::$systemConfig['register_ip_limit']){
  285. return Redirect::back()->withInput($request->except(['code']))->withErrors(trans('auth.register_anti'));
  286. }
  287. }
  288. }
  289. // 获取可用端口
  290. $port = self::$systemConfig['is_rand_port']? Helpers::getRandPort() : Helpers::getOnlyPort();
  291. if($port > self::$systemConfig['max_port']){
  292. return Redirect::back()->withInput()->withErrors(trans('auth.register_close'));
  293. }
  294. // 获取aff
  295. $affArr = $this->getAff($code, $aff);
  296. $referral_uid = $affArr['referral_uid'];
  297. $transfer_enable = 1048576*(self::$systemConfig['default_traffic']+($referral_uid? self::$systemConfig['referral_traffic'] : 0));
  298. // 创建新用户
  299. $uid = Helpers::addUser($email, Hash::make($password), $transfer_enable, self::$systemConfig['default_days'], $referral_uid);
  300. // 注册失败,抛出异常
  301. if(!$uid){
  302. return Redirect::back()->withInput()->withErrors(trans('auth.register_fail'));
  303. }
  304. // 更新昵称
  305. User::query()->whereKey($uid)->update(['username' => $username]);
  306. // 生成订阅码
  307. $subscribe = new UserSubscribe();
  308. $subscribe->user_id = $uid;
  309. $subscribe->code = Helpers::makeSubscribeCode();
  310. $subscribe->times = 0;
  311. $subscribe->save();
  312. // 注册次数+1
  313. if(Cache::has($cacheKey)){
  314. Cache::increment($cacheKey);
  315. }else{
  316. Cache::put($cacheKey, 1, 86400); // 24小时
  317. }
  318. // 初始化默认标签
  319. if(strlen(self::$systemConfig['initial_labels_for_user'])){
  320. $labels = explode(',', self::$systemConfig['initial_labels_for_user']);
  321. foreach($labels as $label){
  322. $userLabel = new UserLabel();
  323. $userLabel->user_id = $uid;
  324. $userLabel->label_id = $label;
  325. $userLabel->save();
  326. }
  327. }
  328. // 更新邀请码
  329. if(self::$systemConfig['is_invite_register'] && $affArr['code_id']){
  330. Invite::query()->where('id', $affArr['code_id'])->update(['fuid' => $uid, 'status' => 1]);
  331. }
  332. // 清除邀请人Cookie
  333. Cookie::unqueue('register_aff');
  334. // 邮箱验证码关闭情况下,发送激活邮件
  335. if(!self::$systemConfig['is_verify_register'] && self::$systemConfig['is_active_register']){
  336. // 生成激活账号的地址
  337. $token = $this->addVerifyUrl($uid, $email);
  338. $activeUserUrl = self::$systemConfig['website_url'].'/active/'.$token;
  339. $logId = Helpers::addEmailLog($email, '注册激活', '请求地址:'.$activeUserUrl);
  340. Mail::to($email)->send(new activeUser($logId, $activeUserUrl));
  341. Session::flash('regSuccessMsg', trans('auth.register_active_tip'));
  342. }else{
  343. // 则直接给推荐人加流量
  344. if($referral_uid){
  345. $referralUser = User::query()->where('id', $referral_uid)->first();
  346. if($referralUser){
  347. if($referralUser->expire_time >= date('Y-m-d')){
  348. User::query()->where('id', $referral_uid)->increment('transfer_enable', self::$systemConfig['referral_traffic']*1048576);
  349. }
  350. }
  351. }
  352. User::query()->where('id', $uid)->update(['status' => 1, 'enable' => 1]);
  353. Session::flash('regSuccessMsg', trans('auth.register_success'));
  354. }
  355. return Redirect::to('login')->withInput();
  356. }else{
  357. $view['emailList'] = self::$systemConfig['sensitiveType']? NULL : SensitiveWords::query()->where('type', 2)->get();
  358. Session::put('register_token', makeRandStr(16));
  359. return Response::view('auth.register', $view);
  360. }
  361. }
  362. /**
  363. * 获取AFF
  364. *
  365. * @param string $code 邀请码
  366. * @param int $aff URL中的aff参数
  367. *
  368. * @return array
  369. */
  370. private function getAff($code = '', $aff = NULL)
  371. {
  372. // 邀请人ID
  373. $referral_uid = 0;
  374. // 邀请码ID
  375. $code_id = 0;
  376. // 有邀请码先用邀请码,用谁的邀请码就给谁返利
  377. if($code){
  378. $inviteCode = Invite::query()->where('code', $code)->where('status', 0)->first();
  379. if($inviteCode){
  380. $referral_uid = $inviteCode->uid;
  381. $code_id = $inviteCode->id;
  382. }
  383. }
  384. // 没有用邀请码或者邀请码是管理员生成的,则检查cookie或者url链接
  385. if(!$referral_uid){
  386. // 检查一下cookie里有没有aff
  387. $cookieAff = \Request::hasCookie('register_aff')? \Request::cookie('register_aff') : 0;
  388. if($cookieAff){
  389. $affUser = User::query()->where('id', $cookieAff)->exists();
  390. $referral_uid = $affUser? $cookieAff : 0;
  391. }elseif($aff){ // 如果cookie里没有aff,就再检查一下请求的url里有没有aff,因为有些人的浏览器会禁用了cookie,比如chrome开了隐私模式
  392. $affUser = User::query()->where('id', $aff)->exists();
  393. $referral_uid = $affUser? $aff : 0;
  394. }
  395. }
  396. return [
  397. 'referral_uid' => $referral_uid,
  398. 'code_id' => $code_id
  399. ];
  400. }
  401. // 生成申请的请求地址
  402. private function addVerifyUrl($uid, $email)
  403. {
  404. $token = md5(self::$systemConfig['website_name'].$email.microtime());
  405. $verify = new Verify();
  406. $verify->type = 1;
  407. $verify->user_id = $uid;
  408. $verify->token = $token;
  409. $verify->status = 0;
  410. $verify->save();
  411. return $token;
  412. }
  413. // 重设密码页
  414. public function resetPassword(Request $request)
  415. {
  416. if($request->isMethod('POST')){
  417. // 校验请求
  418. $this->validate($request, [
  419. 'email' => 'required|email'
  420. ], [
  421. 'email.required' => trans('auth.email_null'),
  422. 'email.email' => trans('auth.email_legitimate')
  423. ]);
  424. $email = $request->input('email');
  425. // 是否开启重设密码
  426. if(!self::$systemConfig['is_reset_password']){
  427. return Redirect::back()->withErrors(trans('auth.reset_password_close', ['email' => self::$systemConfig['webmaster_email']]));
  428. }
  429. // 查找账号
  430. $user = User::query()->where('email', $email)->first();
  431. if(!$user){
  432. return Redirect::back()->withErrors(trans('auth.email_notExist'));
  433. }
  434. // 24小时内重设密码次数限制
  435. $resetTimes = 0;
  436. if(Cache::has('resetPassword_'.md5($email))){
  437. $resetTimes = Cache::get('resetPassword_'.md5($email));
  438. if($resetTimes >= self::$systemConfig['reset_password_times']){
  439. return Redirect::back()->withErrors(trans('auth.reset_password_limit', ['time' => self::$systemConfig['reset_password_times']]));
  440. }
  441. }
  442. // 生成取回密码的地址
  443. $token = $this->addVerifyUrl($user->id, $email);
  444. // 发送邮件
  445. $resetPasswordUrl = self::$systemConfig['website_url'].'/reset/'.$token;
  446. $logId = Helpers::addEmailLog($email, '重置密码', '请求地址:'.$resetPasswordUrl);
  447. Mail::to($email)->send(new resetPassword($logId, $resetPasswordUrl));
  448. Cache::put('resetPassword_'.md5($email), $resetTimes+1, 86400);
  449. return Redirect::back()->with('successMsg', trans('auth.reset_password_success_tip'));
  450. }else{
  451. return Response::view('auth.resetPassword');
  452. }
  453. }
  454. // 重设密码
  455. public function reset(Request $request, $token)
  456. {
  457. if(!$token){
  458. return Redirect::to('login');
  459. }
  460. if($request->isMethod('POST')){
  461. $this->validate($request, [
  462. 'password' => 'required|min:6',
  463. 'confirmPassword' => 'required|same:password'
  464. ], [
  465. 'password.required' => trans('auth.password_null'),
  466. 'password.min' => trans('auth.password_limit'),
  467. 'confirmPassword.required' => trans('auth.password_null'),
  468. 'confirmPassword.min' => trans('auth.password_limit'),
  469. 'confirmPassword.same' => trans('auth.password_same'),
  470. ]);
  471. $password = $request->input('password');
  472. // 校验账号
  473. $verify = Verify::type(1)->with('user')->where('token', $token)->first();
  474. if(!$verify){
  475. return Redirect::to('login');
  476. }elseif($verify->status == 1){
  477. return Redirect::back()->withErrors(trans('auth.overtime'));
  478. }elseif($verify->user->status < 0){
  479. return Redirect::back()->withErrors(trans('auth.email_banned'));
  480. }elseif(Hash::check($password, $verify->user->password)){
  481. return Redirect::back()->withErrors(trans('auth.reset_password_same_fail'));
  482. }
  483. // 更新密码
  484. $ret = User::query()->where('id', $verify->user_id)->update(['password' => Hash::make($password)]);
  485. if(!$ret){
  486. return Redirect::back()->withErrors(trans('auth.reset_password_fail'));
  487. }
  488. // 置为已使用
  489. $verify->status = 1;
  490. $verify->save();
  491. return Redirect::back()->with('successMsg', trans('auth.reset_password_new'));
  492. }else{
  493. $verify = Verify::type(1)->where('token', $token)->first();
  494. if(!$verify){
  495. return Redirect::to('login');
  496. }elseif(time()-strtotime($verify->created_at) >= 1800){
  497. // 置为已失效
  498. $verify->status = 2;
  499. $verify->save();
  500. }
  501. // 重新获取一遍verify
  502. $view['verify'] = Verify::type(1)->where('token', $token)->first();
  503. return Response::view('auth.reset', $view);
  504. }
  505. }
  506. // 激活账号页
  507. public function activeUser(Request $request)
  508. {
  509. if($request->isMethod('POST')){
  510. $this->validate($request, [
  511. 'email' => 'required|email|exists:user,email'
  512. ], [
  513. 'email.required' => trans('auth.email_null'),
  514. 'email.email' => trans('auth.email_legitimate'),
  515. 'email.exists' => trans('auth.email_notExist')
  516. ]);
  517. $email = $request->input('email');
  518. // 是否开启账号激活
  519. if(!self::$systemConfig['is_active_register']){
  520. return Redirect::back()->withInput()->withErrors(trans('auth.active_close', ['email' => self::$systemConfig['webmaster_email']]));
  521. }
  522. // 查找账号
  523. $user = User::query()->where('email', $email)->first();
  524. if($user->status < 0){
  525. return Redirect::back()->withErrors(trans('auth.login_ban', ['email' => self::$systemConfig['webmaster_email']]));
  526. }elseif($user->status > 0){
  527. return Redirect::back()->withErrors(trans('auth.email_normal'));
  528. }
  529. // 24小时内激活次数限制
  530. $activeTimes = 0;
  531. if(Cache::has('activeUser_'.md5($email))){
  532. $activeTimes = Cache::get('activeUser_'.md5($email));
  533. if($activeTimes >= self::$systemConfig['active_times']){
  534. return Redirect::back()->withErrors(trans('auth.active_limit', ['time' => self::$systemConfig['webmaster_email']]));
  535. }
  536. }
  537. // 生成激活账号的地址
  538. $token = $this->addVerifyUrl($user->id, $email);
  539. // 发送邮件
  540. $activeUserUrl = self::$systemConfig['website_url'].'/active/'.$token;
  541. $logId = Helpers::addEmailLog($email, '激活账号', '请求地址:'.$activeUserUrl);
  542. Mail::to($email)->send(new activeUser($logId, $activeUserUrl));
  543. Cache::put('activeUser_'.md5($email), $activeTimes+1, 86400);
  544. return Redirect::back()->with('successMsg', trans('auth.register_active_tip'));
  545. }else{
  546. return Response::view('auth.activeUser');
  547. }
  548. }
  549. // 激活账号
  550. public function active($token)
  551. {
  552. if(!$token){
  553. return Redirect::to('login');
  554. }
  555. $verify = Verify::type(1)->with('user')->where('token', $token)->first();
  556. if(!$verify){
  557. return Redirect::to('login');
  558. }elseif(empty($verify->user)){
  559. Session::flash('errorMsg', trans('auth.overtime'));
  560. return Response::view('auth.active');
  561. }elseif($verify->status > 0){
  562. Session::flash('errorMsg', trans('auth.overtime'));
  563. return Response::view('auth.active');
  564. }elseif($verify->user->status != 0){
  565. Session::flash('errorMsg', trans('auth.email_normal'));
  566. return Response::view('auth.active');
  567. }elseif(time()-strtotime($verify->created_at) >= 1800){
  568. Session::flash('errorMsg', trans('auth.overtime'));
  569. // 置为已失效
  570. $verify->status = 2;
  571. $verify->save();
  572. return Response::view('auth.active');
  573. }
  574. // 更新账号状态
  575. $ret = User::query()->where('id', $verify->user_id)->update(['status' => 1]);
  576. if(!$ret){
  577. Session::flash('errorMsg', trans('auth.active_fail'));
  578. return Redirect::back();
  579. }
  580. // 置为已使用
  581. $verify->status = 1;
  582. $verify->save();
  583. // 账号激活后给邀请人送流量
  584. if($verify->user->referral_uid){
  585. $transfer_enable = self::$systemConfig['referral_traffic']*1048576;
  586. User::query()->where('id', $verify->user->referral_uid)->increment('transfer_enable', $transfer_enable, ['enable' => 1]);
  587. }
  588. Session::flash('successMsg', trans('auth.active_success'));
  589. return Response::view('auth.active');
  590. }
  591. // 发送注册验证码
  592. public function sendCode(Request $request)
  593. {
  594. $validator = Validator::make($request->all(), [
  595. 'email' => 'required|email|unique:user'
  596. ], [
  597. 'email.required' => trans('auth.email_null'),
  598. 'email.email' => trans('auth.email_legitimate'),
  599. 'email.unique' => trans('auth.email_exist')
  600. ]);
  601. $email = $request->input('email');
  602. if($validator->fails()){
  603. return Response::json(['status' => 'fail', 'data' => '', 'message' => $validator->getMessageBag()->first()]);
  604. }
  605. // 校验域名邮箱黑白名单
  606. if(self::$systemConfig['sensitiveType']){
  607. // 校验域名邮箱是否在黑名单中
  608. $sensitiveWords = $this->sensitiveWords(1);
  609. $emailSuffix = explode('@', $email); // 提取邮箱后缀
  610. if(in_array(strtolower($emailSuffix[1]), $sensitiveWords)){
  611. return Response::json(['status' => 'fail', 'data' => '', 'message' => trans('auth.email_banned')]);
  612. }
  613. }else{
  614. $sensitiveWords = $this->sensitiveWords(2);
  615. $emailSuffix = explode('@', $email); // 提取邮箱后缀
  616. if(!in_array(strtolower($emailSuffix[1]), $sensitiveWords)){
  617. return Response::json(['status' => 'fail', 'data' => '', 'message' => trans('auth.email_invalid')]);
  618. }
  619. }
  620. // 是否开启注册发送验证码
  621. if(!self::$systemConfig['is_verify_register']){
  622. return Response::json(['status' => 'fail', 'data' => '', 'message' => trans('auth.captcha_close')]);
  623. }
  624. // 防刷机制
  625. if(Cache::has('send_verify_code_'.md5(getClientIP()))){
  626. return Response::json(['status' => 'fail', 'data' => '', 'message' => trans('auth.register_anti')]);
  627. }
  628. // 发送邮件
  629. $code = makeRandStr(6, TRUE);
  630. $logId = Helpers::addEmailLog($email, '发送注册验证码', '验证码:'.$code);
  631. Mail::to($email)->send(new sendVerifyCode($logId, $code));
  632. $this->addVerifyCode($email, $code);
  633. Cache::put('send_verify_code_'.md5(getClientIP()), getClientIP(), 60);
  634. return Response::json(['status' => 'success', 'data' => '', 'message' => trans('auth.captcha_send')]);
  635. }
  636. // 生成注册验证码
  637. private function addVerifyCode($email, $code)
  638. {
  639. $verify = new VerifyCode();
  640. $verify->address = $email;
  641. $verify->code = $code;
  642. $verify->status = 0;
  643. $verify->save();
  644. }
  645. // 公开的邀请码列表
  646. public function free()
  647. {
  648. $view['inviteList'] = Invite::query()->where('uid', 0)->where('status', 0)->paginate();
  649. return Response::view('auth.free', $view);
  650. }
  651. // 切换语言
  652. public function switchLang($locale)
  653. {
  654. Session::put("locale", $locale);
  655. return Redirect::back();
  656. }
  657. }