308 lines
8.2 KiB
PHP
308 lines
8.2 KiB
PHP
<?php
|
|
|
|
namespace Widget;
|
|
|
|
use Typecho\Common;
|
|
use Typecho\Cookie;
|
|
use Typecho\Db;
|
|
use Typecho\Db\Exception as DbException;
|
|
use Typecho\Widget;
|
|
use Typecho\Widget\Request;
|
|
use Typecho\Widget\Response;
|
|
|
|
if (!defined('__TYPECHO_ROOT_DIR__')) {
|
|
exit;
|
|
}
|
|
|
|
/**
|
|
* 当前登录用户
|
|
*
|
|
* @category typecho
|
|
* @package Widget
|
|
* @copyright Copyright (c) 2008 Typecho team (http://www.typecho.org)
|
|
* @license GNU General Public License 2.0
|
|
*/
|
|
class User extends Widget
|
|
{
|
|
/**
|
|
* 用户组
|
|
*
|
|
* @var array
|
|
*/
|
|
public $groups = [
|
|
'administrator' => 0,
|
|
'editor' => 1,
|
|
'contributor' => 2,
|
|
'subscriber' => 3,
|
|
'visitor' => 4
|
|
];
|
|
|
|
/**
|
|
* 全局选项
|
|
*
|
|
* @var Options
|
|
*/
|
|
protected $options;
|
|
|
|
/**
|
|
* 数据库对象
|
|
*
|
|
* @var Db
|
|
*/
|
|
protected $db;
|
|
|
|
/**
|
|
* 用户
|
|
*
|
|
* @var array
|
|
*/
|
|
private $user;
|
|
|
|
/**
|
|
* 是否已经登录
|
|
*
|
|
* @var boolean|null
|
|
*/
|
|
private $hasLogin = null;
|
|
|
|
/**
|
|
* 构造函数,初始化组件
|
|
*
|
|
* @param Request $request request对象
|
|
* @param Response $response response对象
|
|
* @param mixed $params 参数列表
|
|
* @throws DbException
|
|
*/
|
|
public function __construct(Request $request, Response $response, $params = null)
|
|
{
|
|
parent::__construct($request, $response, $params);
|
|
|
|
/** 初始化数据库 */
|
|
$this->db = Db::get();
|
|
$this->options = Options::alloc();
|
|
}
|
|
|
|
|
|
/**
|
|
* 执行函数
|
|
*
|
|
* @throws DbException
|
|
*/
|
|
public function execute()
|
|
{
|
|
if ($this->hasLogin()) {
|
|
$rows = $this->db->fetchAll($this->db->select()
|
|
->from('table.options')->where('user = ?', $this->user['uid']));
|
|
|
|
$this->push($this->user);
|
|
|
|
foreach ($rows as $row) {
|
|
$this->options->{$row['name']} = $row['value'];
|
|
}
|
|
|
|
//更新最后活动时间
|
|
$this->db->query($this->db
|
|
->update('table.users')
|
|
->rows(['activated' => $this->options->time])
|
|
->where('uid = ?', $this->user['uid']));
|
|
}
|
|
}
|
|
|
|
/**
|
|
* 判断用户是否已经登录
|
|
*
|
|
* @return boolean
|
|
* @throws DbException
|
|
*/
|
|
public function hasLogin(): ?bool
|
|
{
|
|
if (null !== $this->hasLogin) {
|
|
return $this->hasLogin;
|
|
} else {
|
|
$cookieUid = Cookie::get('__typecho_uid');
|
|
if (null !== $cookieUid) {
|
|
/** 验证登陆 */
|
|
$user = $this->db->fetchRow($this->db->select()->from('table.users')
|
|
->where('uid = ?', intval($cookieUid))
|
|
->limit(1));
|
|
|
|
$cookieAuthCode = Cookie::get('__typecho_authCode');
|
|
if ($user && Common::hashValidate($user['authCode'], $cookieAuthCode)) {
|
|
$this->user = $user;
|
|
return ($this->hasLogin = true);
|
|
}
|
|
|
|
$this->logout();
|
|
}
|
|
|
|
return ($this->hasLogin = false);
|
|
}
|
|
}
|
|
|
|
/**
|
|
* 用户登出函数
|
|
*
|
|
* @access public
|
|
* @return void
|
|
*/
|
|
public function logout()
|
|
{
|
|
$this->pluginHandle()->trigger($logoutPluggable)->logout();
|
|
if ($logoutPluggable) {
|
|
return;
|
|
}
|
|
|
|
Cookie::delete('__typecho_uid');
|
|
Cookie::delete('__typecho_authCode');
|
|
}
|
|
|
|
/**
|
|
* 以用户名和密码登录
|
|
*
|
|
* @access public
|
|
* @param string $name 用户名
|
|
* @param string $password 密码
|
|
* @param boolean $temporarily 是否为临时登录
|
|
* @param integer $expire 过期时间
|
|
* @return boolean
|
|
* @throws DbException
|
|
*/
|
|
public function login(string $name, string $password, bool $temporarily = false, int $expire = 0): bool
|
|
{
|
|
//插件接口
|
|
$result = $this->pluginHandle()->trigger($loginPluggable)->login($name, $password, $temporarily, $expire);
|
|
if ($loginPluggable) {
|
|
return $result;
|
|
}
|
|
|
|
/** 开始验证用户 **/
|
|
$user = $this->db->fetchRow($this->db->select()
|
|
->from('table.users')
|
|
->where((strpos($name, '@') ? 'mail' : 'name') . ' = ?', $name)
|
|
->limit(1));
|
|
|
|
if (empty($user)) {
|
|
return false;
|
|
}
|
|
|
|
$hashValidate = $this->pluginHandle()->trigger($hashPluggable)->hashValidate($password, $user['password']);
|
|
if (!$hashPluggable) {
|
|
if ('$P$' == substr($user['password'], 0, 3)) {
|
|
$hasher = new \PasswordHash(8, true);
|
|
$hashValidate = $hasher->CheckPassword($password, $user['password']);
|
|
} else {
|
|
$hashValidate = Common::hashValidate($password, $user['password']);
|
|
}
|
|
}
|
|
|
|
if ($user && $hashValidate) {
|
|
if (!$temporarily) {
|
|
$this->commitLogin($user, $expire);
|
|
}
|
|
|
|
/** 压入数据 */
|
|
$this->push($user);
|
|
$this->user = $user;
|
|
$this->hasLogin = true;
|
|
$this->pluginHandle()->loginSucceed($this, $name, $password, $temporarily, $expire);
|
|
|
|
return true;
|
|
}
|
|
|
|
$this->pluginHandle()->loginFail($this, $name, $password, $temporarily, $expire);
|
|
return false;
|
|
}
|
|
|
|
/**
|
|
* @param $user
|
|
* @param int $expire
|
|
* @throws DbException
|
|
*/
|
|
public function commitLogin(&$user, int $expire = 0)
|
|
{
|
|
$authCode = function_exists('openssl_random_pseudo_bytes') ?
|
|
bin2hex(openssl_random_pseudo_bytes(16)) : sha1(Common::randString(20));
|
|
$user['authCode'] = $authCode;
|
|
|
|
Cookie::set('__typecho_uid', $user['uid'], $expire);
|
|
Cookie::set('__typecho_authCode', Common::hash($authCode), $expire);
|
|
|
|
//更新最后登录时间以及验证码
|
|
$this->db->query($this->db
|
|
->update('table.users')
|
|
->expression('logged', 'activated')
|
|
->rows(['authCode' => $authCode])
|
|
->where('uid = ?', $user['uid']));
|
|
}
|
|
|
|
/**
|
|
* 只需要提供uid或者完整user数组即可登录的方法, 多用于插件等特殊场合
|
|
*
|
|
* @param int | array $uid 用户id或者用户数据数组
|
|
* @param boolean $temporarily 是否为临时登录，默认为临时登录以兼容以前的方法
|
|
* @param integer $expire 过期时间
|
|
* @return boolean
|
|
* @throws DbException
|
|
*/
|
|
public function simpleLogin($uid, bool $temporarily = true, int $expire = 0): bool
|
|
{
|
|
if (is_array($uid)) {
|
|
$user = $uid;
|
|
} else {
|
|
$user = $this->db->fetchRow($this->db->select()
|
|
->from('table.users')
|
|
->where('uid = ?', $uid)
|
|
->limit(1));
|
|
}
|
|
|
|
if (empty($user)) {
|
|
$this->pluginHandle()->simpleLoginFail($this);
|
|
return false;
|
|
}
|
|
|
|
if (!$temporarily) {
|
|
$this->commitLogin($user, $expire);
|
|
}
|
|
|
|
$this->push($user);
|
|
$this->user = $user;
|
|
$this->hasLogin = true;
|
|
|
|
$this->pluginHandle()->simpleLoginSucceed($this, $user);
|
|
return true;
|
|
}
|
|
|
|
/**
|
|
* 判断用户权限
|
|
*
|
|
* @access public
|
|
* @param string $group 用户组
|
|
* @param boolean $return 是否为返回模式
|
|
* @return boolean
|
|
* @throws DbException|Widget\Exception
|
|
*/
|
|
public function pass(string $group, bool $return = false): bool
|
|
{
|
|
if ($this->hasLogin()) {
|
|
if (array_key_exists($group, $this->groups) && $this->groups[$this->group] <= $this->groups[$group]) {
|
|
return true;
|
|
}
|
|
} else {
|
|
if ($return) {
|
|
return false;
|
|
} else {
|
|
//防止循环重定向
|
|
$this->response->redirect(defined('__TYPECHO_ADMIN__') ? $this->options->loginUrl .
|
|
(0 === strpos($this->request->getReferer(), $this->options->loginUrl) ? '' :
|
|
'?referer=' . urlencode($this->request->makeUriByRequest())) : $this->options->siteUrl, false);
|
|
}
|
|
}
|
|
|
|
if ($return) {
|
|
return false;
|
|
} else {
|
|
throw new Widget\Exception(_t('禁止访问'), 403);
|
|
}
|
|
}
|
|
}
|