1234567891011121314151617181920212223242526272829303132333435363738394041424344454647484950515253545556575859606162636465666768697071727374757677787980818283848586878889909192939495969798991001011021031041051061071081091101111121131141151161171181191201211221231241251261271281291301311321331341351361371381391401411421431441451461471481491501511521531541551561571581591601611621631641651661671681691701711721731741751761771781791801811821831841851861871881891901911921931941951961971981992002012022032042052062072082092102112122132142152162172182192202212222232242252262272282292302312322332342352362372382392402412422432442452462472482492502512522532542552562572582592602612622632642652662672682692702712722732742752762772782792802812822832842852862872882892902912922932942952962972982993003013023033043053063073083093103113123133143153163173183193203213223233243253263273283293303313323333343353363373383393403413423433443453463473483493503513523533543553563573583593603613623633643653663673683693703713723733743753763773783793803813823833843853863873883893903913923933943953963973983994004014024034044054064074084094104114124134144154164174184194204214224234244254264274284294304314324334344354364374384394404414424434444454464474484494504514524534544554564574584594604614624634644654664674684694704714724734744754764774784794804814824834844854864874884894904914924934944954964974984995005015025035045055065075085095105115125135145155165175185195205215225235245255265275285295305315325335345355365375385395405415425435445455465475485495505515525535545555565575585595605615625635645655665675685695705715725735745755765775785795805815825835845855865875885895905915925935945955965975985996006016026036046056066076086096106116126136146156166176186196206216226236246256266276286296306316326336346356366376386396406416426436446456466476486496506516526536546556566576586596606616626636646656666676686696706716726736746756766776786796806816826836846856866876886896906916926936946956966976986997007017027037047057067077087097107117127137147157167177187197207217227237247257267277287297307317327337347357367377387397407417427437447457467477487497507517527537547557567577587597607617627637647657667677687697707717727737747757767777787797807817827837847857867877887897907917927937947957967977987998008018028038048058068078088098108118128138148158168178188198208218228238248258268278288298308318328338348358368378388398408418428438448458468478488498508518528538548558568578588598608618628638648658668678688698708718728738748758768778788798808818828838848858868878888898908918928938948958968978988999009019029039049059069079089099109119129139149159169179189199209219229239249259269279289299309319329339349359369379389399409419429439449459469479489499509519529539549559569579589599609619629639649659669679689699709719729739749759769779789799809819829839849859869879889899909919929939949959969979989991000100110021003100410051006100710081009101010111012101310141015101610171018101910201021102210231024102510261027102810291030103110321033103410351036 |
- <?php
- namespace App\Http\Controllers;
- use App\Components\Helpers;
- use App\Components\IPIP;
- use App\Components\QQWry;
- use App\Mail\activeUser;
- use App\Mail\resetPassword;
- use App\Mail\sendVerifyCode;
- use App\Models\EmailFilter;
- use App\Models\Invite;
- use App\Models\User;
- use App\Models\UserLoginLog;
- use App\Models\Verify;
- use App\Models\VerifyCode;
- use App\Services\UserService;
- use Auth;
- use Cache;
- use Captcha;
- use Cookie;
- use Hash;
- use Illuminate\Http\RedirectResponse;
- use Illuminate\Http\Request;
- use Log;
- use Mail;
- use Redirect;
- use Response;
- use Session;
- use Str;
- use Validator;
- /**
- * 认证控制器
- *
- * Class AuthController
- *
- * @package App\Http\Controllers
- */
- class AuthController extends Controller
- {
- // 登录
- public function login(Request $request)
- {
- if ($request->isMethod('POST')) {
- $validator = Validator::make(
- $request->all(),
- [
- 'email' => 'required|email',
- 'password' => 'required',
- ],
- [
- 'email.required' => trans('auth.email_null'),
- 'password.required' => trans('auth.password_null'),
- ]
- );
- if ($validator->fails()) {
- return Redirect::back()->withInput()->withErrors(
- $validator->errors()
- );
- }
- $email = $request->input('email');
- $password = $request->input('password');
- $remember = $request->input('remember');
- // 是否校验验证码
- $captcha = $this->check_captcha($request);
- if ($captcha != false) {
- return $captcha;
- }
- // 验证账号并创建会话
- if ( ! Auth::attempt(
- ['email' => $email, 'password' => $password],
- $remember
- )) {
- return Redirect::back()->withInput()->withErrors(
- trans('auth.login_error')
- );
- }
- $user = Auth::getUser();
- if ( ! $user) {
- return Redirect::back()->withInput()->withErrors(
- trans('auth.login_error')
- );
- }
- // 校验普通用户账号状态
- if ( ! $user->is_admin) {
- if ($user->status < 0) {
- Auth::logout(); // 强制销毁会话,因为Auth::attempt的时候会产生会话
- return Redirect::back()->withInput()->withErrors(
- trans(
- 'auth.login_ban',
- ['email' => sysConfig('webmaster_email')]
- )
- );
- }
- if ($user->status == 0 && sysConfig('is_activate_account')) {
- Auth::logout(); // 强制销毁会话,因为Auth::attempt的时候会产生会话
- return Redirect::back()
- ->withInput()
- ->withErrors(
- trans(
- 'auth.active_tip'
- ) . '<a href="/activeUser?email=' . $email . '" target="_blank"><span style="color:#000">【' . trans(
- 'auth.active_account'
- ) . '】</span></a>'
- );
- }
- }
- // 写入登录日志
- $this->addUserLoginLog($user->id, getClientIp());
- // 更新登录信息
- Auth::getUser()->update(['last_login' => time()]);
- // 根据权限跳转
- if ($user->is_admin) {
- return Redirect::to('admin');
- }
- return Redirect::to('/');
- }
- if (Auth::check()) {
- if (Auth::getUser()->is_admin) {
- return Redirect::to('admin');
- }
- return Redirect::to('/');
- }
- return view('auth.login');
- }
- // 校验验证码
- private function check_captcha($request)
- {
- switch (sysConfig('is_captcha')) {
- case 1: // 默认图形验证码
- if ( ! Captcha::check($request->input('captcha'))) {
- return Redirect::back()->withInput()->withErrors(
- trans('auth.captcha_error')
- );
- }
- break;
- case 2: // Geetest
- $validator = Validator::make(
- $request->all(),
- [
- 'geetest_challenge' => 'required|geetest',
- ],
- [
- 'geetest' => trans('auth.captcha_fail'),
- ]
- );
- if ($validator->fails()) {
- return Redirect::back()->withInput()->withErrors(
- trans('auth.captcha_fail')
- );
- }
- break;
- case 3: // Google reCAPTCHA
- $validator = Validator::make(
- $request->all(),
- [
- 'g-recaptcha-response' => 'required|NoCaptcha',
- ]
- );
- if ($validator->fails()) {
- return Redirect::back()->withInput()->withErrors(
- trans('auth.captcha_fail')
- );
- }
- break;
- case 4: // hCaptcha
- $validator = Validator::make(
- $request->all(),
- [
- 'h-captcha-response' => 'required|HCaptcha',
- ]
- );
- if ($validator->fails()) {
- return Redirect::back()->withInput()->withErrors(
- trans('auth.captcha_fail')
- );
- }
- break;
- default: // 不启用验证码
- break;
- }
- return 0;
- }
- /**
- * 添加用户登录日志
- *
- * @param int $userId 用户ID
- * @param string $ip IP地址
- */
- private function addUserLoginLog(int $userId, string $ip): void
- {
- if (filter_var($ip, FILTER_VALIDATE_IP, FILTER_FLAG_IPV6)) {
- Log::info('识别到IPv6,尝试解析:' . $ip);
- $ipInfo = getIPInfo($ip);
- } else {
- $ipInfo = QQWry::ip($ip); // 通过纯真IP库解析IPv4信息
- if (isset($ipInfo['error'])) {
- Log::info('无法识别IPv4,尝试使用IPIP的IP库解析:' . $ip);
- $ipip = IPIP::ip($ip);
- $ipInfo = [
- 'country' => $ipip['country_name'],
- 'province' => $ipip['region_name'],
- 'city' => $ipip['city_name'],
- ];
- } else {
- // 判断纯真IP库获取的国家信息是否与IPIP的IP库获取的信息一致,不一致则用IPIP的(因为纯真IP库的非大陆IP准确率较低)
- $ipip = IPIP::ip($ip);
- if ($ipInfo['country'] != $ipip['country_name']) {
- $ipInfo['country'] = $ipip['country_name'];
- $ipInfo['province'] = $ipip['region_name'];
- $ipInfo['city'] = $ipip['city_name'];
- }
- }
- }
- if (empty($ipInfo) || empty($ipInfo['country'])) {
- Log::warning("获取IP信息异常:" . $ip);
- }
- $log = new UserLoginLog();
- $log->user_id = $userId;
- $log->ip = $ip;
- $log->country = $ipInfo['country'] ?? '';
- $log->province = $ipInfo['province'] ?? '';
- $log->city = $ipInfo['city'] ?? '';
- $log->county = $ipInfo['county'] ?? '';
- $log->isp = $ipInfo['isp'] ?? ($ipInfo['organization'] ?? '');
- $log->area = $ipInfo['area'] ?? '';
- $log->save();
- }
- // 退出
- public function logout(): RedirectResponse
- {
- Auth::logout();
- return Redirect::to('login');
- }
- // 注册
- public function register(Request $request)
- {
- $cacheKey = 'register_times_' . md5(getClientIp()); // 注册限制缓存key
- if ($request->isMethod('POST')) {
- $validator = Validator::make(
- $request->all(),
- [
- 'username' => 'required',
- 'email' => 'required|email|unique:user',
- 'password' => 'required|min:6',
- 'confirmPassword' => 'required|same:password',
- 'term' => 'accepted',
- ],
- [
- 'username.required' => trans('auth.email_null'),
- 'email.required' => trans('auth.email_null'),
- 'email.email' => trans(
- 'auth.email_legitimate'
- ),
- 'email.unique' => trans('auth.email_exist'),
- 'password.required' => trans('auth.password_null'),
- 'password.min' => trans('auth.password_limit'),
- 'confirmPassword.required' => trans(
- 'auth.confirm_password'
- ),
- 'confirmPassword.same' => trans('auth.password_same'),
- 'term.accepted' => trans('auth.unaccepted'),
- ]
- );
- if ($validator->fails()) {
- return Redirect::back()->withInput()->withErrors(
- $validator->errors()
- );
- }
- $username = $request->input('username');
- $email = $request->input('email');
- $password = $request->input('password');
- $register_token = $request->input('register_token');
- $code = $request->input('code');
- $verify_code = $request->input('verify_code');
- $aff = (int)$request->input('aff');
- // 防止重复提交
- if ($register_token !== Session::get('register_token')) {
- return Redirect::back()->withInput()->withErrors(
- trans('auth.repeat_request')
- );
- }
- Session::forget('register_token');
- // 是否开启注册
- if ( ! sysConfig('is_register')) {
- return Redirect::back()->withErrors(
- trans('auth.register_close')
- );
- }
- // 校验域名邮箱黑白名单
- if (sysConfig('is_email_filtering')) {
- $result = $this->emailChecker($email, 1);
- if ($result !== false) {
- return $result;
- }
- }
- // 如果需要邀请注册
- if (sysConfig('is_invite_register')) {
- // 校验邀请码合法性
- if ($code) {
- if (Invite::whereCode($code)->whereStatus(0)->doesntExist(
- )) {
- return Redirect::back()
- ->withInput($request->except(['code']))
- ->withErrors(trans('auth.code_error'));
- }
- } elseif (sysConfig('is_invite_register') == 2) { // 必须使用邀请码
- return Redirect::back()->withInput()->withErrors(
- trans('auth.code_null')
- );
- }
- }
- // 注册前发送激活码
- if (sysConfig('is_activate_account') == 1) {
- if ( ! $verify_code) {
- return Redirect::back()
- ->withInput(
- $request->except(['verify_code'])
- )
- ->withErrors(trans('auth.captcha_null'));
- }
- $verifyCode = VerifyCode::whereAddress($email)->whereCode(
- $verify_code
- )->whereStatus(0)->first();
- if ( ! $verifyCode) {
- return Redirect::back()
- ->withInput(
- $request->except(['verify_code'])
- )
- ->withErrors(trans('auth.captcha_overtime'));
- }
- $verifyCode->status = 1;
- $verifyCode->save();
- }
- // 是否校验验证码
- $captcha = $this->check_captcha($request);
- if ($captcha != false) {
- return $captcha;
- }
- // 24小时内同IP注册限制
- if (sysConfig('register_ip_limit') && Cache::has($cacheKey)) {
- $registerTimes = Cache::get($cacheKey);
- if ($registerTimes >= sysConfig('register_ip_limit')) {
- return Redirect::back()
- ->withInput($request->except(['code']))
- ->withErrors(trans('auth.register_anti'));
- }
- }
- // 获取可用端口
- $port = Helpers::getPort();
- if ($port > sysConfig('max_port')) {
- return Redirect::back()->withInput()->withErrors(
- trans('auth.register_close')
- );
- }
- // 获取aff
- $affArr = $this->getAff($code, $aff);
- $inviter_id = $affArr['inviter_id'];
- $transfer_enable = MB * ((int)sysConfig(
- 'default_traffic'
- ) + ($inviter_id ? (int)sysConfig('referral_traffic') : 0));
- // 创建新用户
- $uid = Helpers::addUser(
- $email,
- Hash::make($password),
- $transfer_enable,
- sysConfig('default_days'),
- $inviter_id
- );
- // 注册失败,抛出异常
- if ( ! $uid) {
- return Redirect::back()->withInput()->withErrors(
- trans('auth.register_fail')
- );
- }
- // 更新昵称
- User::find($uid)->update(['username' => $username]);
- // 注册次数+1
- if (Cache::has($cacheKey)) {
- Cache::increment($cacheKey);
- } else {
- Cache::put($cacheKey, 1, Day); // 24小时
- }
- // 更新邀请码
- if ($affArr['code_id'] && sysConfig('is_invite_register')) {
- Invite::find($affArr['code_id'])->update(
- ['invitee_id' => $uid, 'status' => 1]
- );
- }
- // 清除邀请人Cookie
- Cookie::unqueue('register_aff');
- // 注册后发送激活码
- if (sysConfig('is_activate_account') == 2) {
- // 生成激活账号的地址
- $token = $this->addVerifyUrl($uid, $email);
- $activeUserUrl = sysConfig('website_url') . '/active/' . $token;
- $logId = Helpers::addNotificationLog(
- '注册激活',
- '请求地址:' . $activeUserUrl,
- 1,
- $email
- );
- Mail::to($email)->send(new activeUser($logId, $activeUserUrl));
- Session::flash(
- 'regSuccessMsg',
- trans('auth.register_active_tip')
- );
- } else {
- // 则直接给推荐人加流量
- if ($inviter_id) {
- $referralUser = User::find($inviter_id);
- if ($referralUser && $referralUser->expired_at >= date(
- 'Y-m-d'
- )) {
- (new UserService($referralUser))->incrementData(
- sysConfig('referral_traffic') * MB
- );
- }
- }
- if (sysConfig('is_activate_account') == 1) {
- User::find($uid)->update(['status' => 1]);
- }
- Session::flash('regSuccessMsg', trans('auth.register_success'));
- }
- return Redirect::to('login')->withInput();
- }
- $view['emailList'] = sysConfig(
- 'is_email_filtering'
- ) != 2 ? false : EmailFilter::whereType(2)->get();
- Session::put('register_token', Str::random());
- return view('auth.register', $view);
- }
- //邮箱检查
- private function emailChecker($email, $returnType = 0)
- {
- $emailFilterList = $this->emailFilterList(
- sysConfig('is_email_filtering')
- );
- $emailSuffix = explode('@', $email); // 提取邮箱后缀
- switch (sysConfig('is_email_filtering')) {
- // 黑名单
- case 1:
- if (in_array(
- strtolower($emailSuffix[1]),
- $emailFilterList,
- true
- )) {
- if ($returnType) {
- return Redirect::back()->withErrors(
- trans('auth.email_banned')
- );
- }
- return Response::json(
- [
- 'status' => 'fail',
- 'message' => trans('auth.email_banned'),
- ]
- );
- }
- break;
- //白名单
- case 2:
- if ( ! in_array(
- strtolower($emailSuffix[1]),
- $emailFilterList,
- true
- )) {
- if ($returnType) {
- return Redirect::back()->withErrors(
- trans('auth.email_invalid')
- );
- }
- return Response::json(
- [
- 'status' => 'fail',
- 'message' => trans('auth.email_invalid'),
- ]
- );
- }
- break;
- default:
- if ($returnType) {
- return Redirect::back()->withErrors(
- trans('auth.email_invalid')
- );
- }
- return Response::json(
- [
- 'status' => 'fail',
- 'message' => trans('auth.email_invalid'),
- ]
- );
- }
- return false;
- }
- /**
- * 获取AFF
- *
- * @param string|null $code 邀请码
- * @param int|null $aff URL中的aff参数
- *
- * @return array
- */
- private function getAff($code = null, $aff = null): array
- {
- $data = ['inviter_id' => null, 'code_id' => 0];// 邀请人ID 与 邀请码ID
- // 有邀请码先用邀请码,用谁的邀请码就给谁返利
- if ($code) {
- $inviteCode = Invite::whereCode($code)->whereStatus(0)->first();
- if ($inviteCode) {
- $data['inviter_id'] = $inviteCode->inviter_id;
- $data['code_id'] = $inviteCode->id;
- }
- }
- // 没有用邀请码或者邀请码是管理员生成的,则检查cookie或者url链接
- if ( ! $data['inviter_id']) {
- // 检查一下cookie里有没有aff
- $cookieAff = \Request::hasCookie('register_aff') ? \Request::cookie(
- 'register_aff'
- ) : 0;
- if ($cookieAff) {
- $data['inviter_id'] = User::find($cookieAff) ? $cookieAff : 0;
- } elseif ($aff) { // 如果cookie里没有aff,就再检查一下请求的url里有没有aff,因为有些人的浏览器会禁用了cookie,比如chrome开了隐私模式
- $data['inviter_id'] = User::find($aff) ? $aff : 0;
- }
- }
- return $data;
- }
- // 生成申请的请求地址
- private function addVerifyUrl($uid, $email)
- {
- $token = md5(
- sysConfig('website_name') . $email . microtime()
- );
- $verify = new Verify();
- $verify->type = 1;
- $verify->user_id = $uid;
- $verify->token = $token;
- $verify->status = 0;
- $verify->save();
- return $token;
- }
- // 重设密码页
- public function resetPassword(Request $request)
- {
- if ($request->isMethod('POST')) {
- // 校验请求
- $validator = Validator::make(
- $request->all(),
- [
- 'email' => 'required|email',
- ],
- [
- 'email.required' => trans('auth.email_null'),
- 'email.email' => trans('auth.email_legitimate'),
- ]
- );
- if ($validator->fails()) {
- return Redirect::back()->withInput()->withErrors(
- $validator->errors()
- );
- }
- $email = $request->input('email');
- // 是否开启重设密码
- if ( ! sysConfig('is_reset_password')) {
- return Redirect::back()->withErrors(
- trans(
- 'auth.reset_password_close',
- ['email' => sysConfig('webmaster_email')]
- )
- );
- }
- // 查找账号
- $user = User::whereEmail($email)->first();
- if ( ! $user) {
- return Redirect::back()->withErrors(
- trans('auth.email_notExist')
- );
- }
- // 24小时内重设密码次数限制
- $resetTimes = 0;
- if (Cache::has('resetPassword_' . md5($email))) {
- $resetTimes = Cache::get('resetPassword_' . md5($email));
- if ($resetTimes >= sysConfig('reset_password_times')) {
- return Redirect::back()->withErrors(
- trans(
- 'auth.reset_password_limit',
- ['time' => sysConfig('reset_password_times')]
- )
- );
- }
- }
- // 生成取回密码的地址
- $token = $this->addVerifyUrl($user->id, $email);
- // 发送邮件
- $resetPasswordUrl = sysConfig('website_url') . '/reset/' . $token;
- $logId = Helpers::addNotificationLog(
- '重置密码',
- '请求地址:' . $resetPasswordUrl,
- 1,
- $email
- );
- Mail::to($email)->send(
- new resetPassword($logId, $resetPasswordUrl)
- );
- Cache::put('resetPassword_' . md5($email), $resetTimes + 1, Day);
- return Redirect::back()->with(
- 'successMsg',
- trans(
- 'auth.reset_password_success_tip'
- )
- );
- }
- return view('auth.resetPassword');
- }
- // 重设密码
- public function reset(Request $request, $token)
- {
- if ( ! $token) {
- return Redirect::to('login');
- }
- if ($request->isMethod('POST')) {
- $validator = Validator::make(
- $request->all(),
- [
- 'password' => 'required|min:6',
- 'confirmPassword' => 'required|same:password',
- ],
- [
- 'password.required' => trans('auth.password_null'),
- 'password.min' => trans('auth.password_limit'),
- 'confirmPassword.required' => trans('auth.password_null'),
- 'confirmPassword.min' => trans('auth.password_limit'),
- 'confirmPassword.same' => trans('auth.password_same'),
- ]
- );
- if ($validator->fails()) {
- return Redirect::back()->withInput()->withErrors(
- $validator->errors()
- );
- }
- $password = $request->input('password');
- // 校验账号
- $verify = Verify::type(1)->whereToken($token)->first();
- $user = $verify->user;
- if ( ! $verify) {
- return Redirect::to('login');
- }
- if ($verify->status == 1) {
- return Redirect::back()->withErrors(trans('auth.overtime'));
- }
- if ($user->status < 0) {
- return Redirect::back()->withErrors(trans('auth.email_banned'));
- }
- if (Hash::check($password, $verify->user->password)) {
- return Redirect::back()->withErrors(
- trans('auth.reset_password_same_fail')
- );
- }
- // 更新密码
- if ( ! $user->update(['password' => Hash::make($password)])) {
- return Redirect::back()->withErrors(
- trans('auth.reset_password_fail')
- );
- }
- // 置为已使用
- $verify->status = 1;
- $verify->save();
- return Redirect::to('login')->with(
- 'successMsg',
- trans('auth.reset_password_new')
- );
- }
- $verify = Verify::type(1)->whereToken($token)->first();
- if ( ! $verify) {
- return Redirect::to('login');
- }
- if (time() - strtotime($verify->created_at) >= 1800) {
- // 置为已失效
- $verify->status = 2;
- $verify->save();
- }
- // 重新获取一遍verify
- $view['verify'] = Verify::type(1)->whereToken($token)->first();
- return view('auth.reset', $view);
- }
- // 激活账号页
- public function activeUser(Request $request)
- {
- if ($request->isMethod('POST')) {
- $validator = Validator::make(
- $request->all(),
- [
- 'email' => 'required|email|exists:user,email',
- ],
- [
- 'email.required' => trans('auth.email_null'),
- 'email.email' => trans('auth.email_legitimate'),
- 'email.exists' => trans('auth.email_notExist'),
- ]
- );
- if ($validator->fails()) {
- return Redirect::back()->withInput()->withErrors(
- $validator->errors()
- );
- }
- $email = $request->input('email');
- // 是否开启账号激活
- if (sysConfig('is_activate_account') != 2) {
- return Redirect::back()->withInput()->withErrors(
- trans(
- 'auth.active_close',
- ['email' => sysConfig('webmaster_email')]
- )
- );
- }
- // 查找账号
- $user = User::whereEmail($email)->firstOrFail();
- if ($user->status < 0) {
- return Redirect::back()->withErrors(
- trans(
- 'auth.login_ban',
- ['email' => sysConfig('webmaster_email')]
- )
- );
- }
- if ($user->status > 0) {
- return Redirect::back()->withErrors(trans('auth.email_normal'));
- }
- // 24小时内激活次数限制
- $activeTimes = 0;
- if (Cache::has('activeUser_' . md5($email))) {
- $activeTimes = Cache::get('activeUser_' . md5($email));
- if ($activeTimes >= sysConfig('active_times')) {
- return Redirect::back()->withErrors(
- trans(
- 'auth.active_limit',
- ['time' => sysConfig('webmaster_email')]
- )
- );
- }
- }
- // 生成激活账号的地址
- $token = $this->addVerifyUrl($user->id, $email);
- // 发送邮件
- $activeUserUrl = sysConfig('website_url') . '/active/' . $token;
- $logId = Helpers::addNotificationLog(
- '激活账号',
- '请求地址:' . $activeUserUrl,
- 1,
- $email
- );
- Mail::to($email)->send(new activeUser($logId, $activeUserUrl));
- Cache::put('activeUser_' . md5($email), $activeTimes + 1, Day);
- return Redirect::back()->with(
- 'successMsg',
- trans('auth.register_active_tip')
- );
- }
- return view('auth.activeUser');
- }
- // 激活账号
- public function active($token)
- {
- if ( ! $token) {
- return Redirect::to('login');
- }
- $verify = Verify::type(1)->with('user')->whereToken($token)->first();
- $user = $verify->user;
- if ( ! $verify) {
- return Redirect::to('login');
- }
- if (empty($user)) {
- Session::flash('errorMsg', trans('auth.overtime'));
- return view('auth.active');
- }
- if ($verify->status > 0) {
- Session::flash('errorMsg', trans('auth.overtime'));
- return view('auth.active');
- }
- if ($user->status != 0) {
- Session::flash('errorMsg', trans('auth.email_normal'));
- return view('auth.active');
- }
- if (time() - strtotime($verify->created_at) >= 1800) {
- Session::flash('errorMsg', trans('auth.overtime'));
- // 置为已失效
- $verify->status = 2;
- $verify->save();
- return view('auth.active');
- }
- // 更新账号状态
- if ( ! $user->update(['status' => 1])) {
- Session::flash('errorMsg', trans('auth.active_fail'));
- return Redirect::back();
- }
- // 置为已使用
- $verify->status = 1;
- $verify->save();
- // 账号激活后给邀请人送流量
- $inviter = $user->inviter;
- if ($inviter) {
- (new UserService($inviter))->incrementData(
- sysConfig('referral_traffic') * MB
- );
- }
- Session::flash('successMsg', trans('auth.active_success'));
- return view('auth.active');
- }
- // 发送注册验证码
- public function sendCode(Request $request)
- {
- $validator = Validator::make(
- $request->all(),
- [
- 'email' => 'required|email|unique:user',
- ],
- [
- 'email.required' => trans('auth.email_null'),
- 'email.email' => trans('auth.email_legitimate'),
- 'email.unique' => trans('auth.email_exist'),
- ]
- );
- $email = $request->input('email');
- if ($validator->fails()) {
- return Response::json(
- [
- 'status' => 'fail',
- 'message' => $validator->getMessageBag()->first(),
- ]
- );
- }
- // 校验域名邮箱黑白名单
- if (sysConfig('is_email_filtering')) {
- $result = $this->emailChecker($email);
- if ($result !== false) {
- return $result;
- }
- }
- // 是否开启注册发送验证码
- if (sysConfig('is_activate_account') != 1) {
- return Response::json(
- ['status' => 'fail', 'message' => trans('auth.captcha_close')]
- );
- }
- // 防刷机制
- if (Cache::has('send_verify_code_' . md5(getClientIP()))) {
- return Response::json(
- ['status' => 'fail', 'message' => trans('auth.register_anti')]
- );
- }
- // 发送邮件
- $code = Str::random(6);
- $logId = Helpers::addNotificationLog(
- '发送注册验证码',
- '验证码:' . $code,
- 1,
- $email
- );
- Mail::to($email)->send(new sendVerifyCode($logId, $code));
- $this->addVerifyCode($email, $code);
- Cache::put(
- 'send_verify_code_' . md5(getClientIP()),
- getClientIP(),
- Minute
- );
- return Response::json(
- ['status' => 'success', 'message' => trans('auth.captcha_send')]
- );
- }
- // 生成注册验证码
- private function addVerifyCode($email, $code): void
- {
- $verify = new VerifyCode();
- $verify->address = $email;
- $verify->code = $code;
- $verify->status = 0;
- $verify->save();
- }
- // 公开的邀请码列表
- public function free()
- {
- $view['inviteList'] = Invite::whereInviterId(0)
- ->whereStatus(0)
- ->paginate();
- return view('auth.free', $view);
- }
- // 切换语言
- public function switchLang($locale): RedirectResponse
- {
- Session::put("locale", $locale);
- return Redirect::back();
- }
- }
|