2360 lines
90 KiB
PHP
2360 lines
90 KiB
PHP
<?php
|
||
|
||
namespace app\api\controller;
|
||
|
||
use app\common\controller\Api;
|
||
use app\common\library\Receipt;
|
||
use app\common\library\Ems;
|
||
use app\common\library\Sms;
|
||
use fast\Random;
|
||
use think\Config;
|
||
use think\Validate;
|
||
|
||
/**
|
||
* 用户安全接口
|
||
* @time 2026-04-29
|
||
* @name UserSecurity
|
||
* @description 用户安全相关API，含注册/登录/改密/改邮箱/重置密码/回执登录/二维码登录/密保问题等
|
||
* @lastUpdate v10.3.2 新增SMTP检测/密保登录/邮箱验证码登录/回执码注销(忘记密码场景); accountLookup返回昵称
|
||
*/
|
||
class UserSecurity extends Api
|
||
{
|
||
protected $noNeedLogin = ['login', 'mobilelogin', 'register', 'resetpwd', 'tokenLogin', 'receiptLogin', 'sendEms', 'checkEms', 'qrcodeGenerate', 'qrcodePoll', 'qrcodeCancel', 'secQuestions', 'accountLookup', 'checkSmtpStatus', 'secQuestionLogin', 'emailCodeLogin', 'sendDeletionCode', 'requestDeletionByReceipt'];
|
||
protected $noNeedRight = '*';
|
||
|
||
private static $rateLimitKey = 'api_rate_limit:';
|
||
private static $rateLimits = [
|
||
'login' => ['max' => 50, 'window' => 300],
|
||
'register' => ['max' => 30, 'window' => 3600],
|
||
'resetpwd' => ['max' => 20, 'window' => 3600],
|
||
'changepwd' => ['max' => 30, 'window' => 3600],
|
||
'changeemail' => ['max' => 30, 'window' => 3600],
|
||
'changemobile' => ['max' => 30, 'window' => 3600],
|
||
'sendEms' => ['max' => 30, 'window' => 300],
|
||
'tokenLogin' => ['max' => 80, 'window' => 300],
|
||
'receiptLogin' => ['max' => 50, 'window' => 300],
|
||
'requestDeletion' => ['max' => 5, 'window' => 3600],
|
||
'cancelDeletion' => ['max' => 10, 'window' => 3600],
|
||
'deletionStatus' => ['max' => 60, 'window' => 60],
|
||
'changeSecQuestion'=> ['max' => 20, 'window' => 3600],
|
||
'accountLookup' => ['max' => 20, 'window' => 3600],
|
||
'secQuestionLogin' => ['max' => 30, 'window' => 3600],
|
||
'emailCodeLogin' => ['max' => 30, 'window' => 3600],
|
||
'sendDeletionCode' => ['max' => 5, 'window' => 3600],
|
||
'requestDeletionByReceipt' => ['max' => 5, 'window' => 3600],
|
||
'checkSmtpStatus' => ['max' => 30, 'window' => 60],
|
||
];
|
||
|
||
private static $testMode = false;
|
||
|
||
private static $secQuestions = [
|
||
1 => '您母亲的姓名是？',
|
||
2 => '您的第一只宠物叫什么？',
|
||
3 => '您就读的小学名称是？',
|
||
4 => '您的出生地是？',
|
||
5 => '您最喜欢的电影是？',
|
||
6 => '您最好朋友的名字是？',
|
||
7 => '您父亲的姓名是？',
|
||
8 => '您的童年昵称是？',
|
||
];
|
||
|
||
public function _initialize()
|
||
{
|
||
parent::_initialize();
|
||
if (!Config::get('fastadmin.usercenter')) {
|
||
$this->error(__('User center already closed'));
|
||
}
|
||
self::$testMode = Config::get('test_mode') ?: false;
|
||
}
|
||
|
||
private function checkRateLimit($action)
|
||
{
|
||
if (!isset(self::$rateLimits[$action])) {
|
||
return true;
|
||
}
|
||
$config = self::$rateLimits[$action];
|
||
$key = self::$rateLimitKey . $action . ':' . $this->request->ip();
|
||
$cache = cache($key);
|
||
$count = $cache ? intval($cache) : 0;
|
||
if ($count >= $config['max']) {
|
||
$this->error('请求过于频繁，请稍后再试', null, ['retry_after' => $config['window']]);
|
||
}
|
||
cache($key, $count + 1, $config['window']);
|
||
return true;
|
||
}
|
||
|
||
private function sanitizeString($value, $maxLength = 255)
|
||
{
|
||
if (!is_string($value)) {
|
||
return '';
|
||
}
|
||
$value = trim($value);
|
||
$value = strip_tags($value);
|
||
$value = htmlspecialchars($value, ENT_QUOTES, 'UTF-8');
|
||
if (mb_strlen($value) > $maxLength) {
|
||
$value = mb_substr($value, 0, $maxLength);
|
||
}
|
||
return $value;
|
||
}
|
||
|
||
private function validateLength($value, $field, $min = 1, $max = 255)
|
||
{
|
||
$len = mb_strlen($value);
|
||
if ($len < $min || $len > $max) {
|
||
$this->error("{$field}长度须在{$min}-{$max}之间");
|
||
}
|
||
return true;
|
||
}
|
||
|
||
private function detectMaliciousInput($value)
|
||
{
|
||
$patterns = [
|
||
'/<script\b[^>]*>/i',
|
||
'/javascript\s*:/i',
|
||
'/on\w+\s*=/i',
|
||
'/union\s+select/i',
|
||
'/insert\s+into/i',
|
||
'/delete\s+from/i',
|
||
'/update\s+\w+\s+set/i',
|
||
'/drop\s+table/i',
|
||
'/\.\.[\/\\\\]/i',
|
||
'/eval\s*\(/i',
|
||
'/exec\s*\(/i',
|
||
'/system\s*\(/i',
|
||
];
|
||
foreach ($patterns as $pattern) {
|
||
if (preg_match($pattern, $value)) {
|
||
$this->error('输入内容包含非法字符');
|
||
}
|
||
}
|
||
return true;
|
||
}
|
||
|
||
private function isTestUser($userId)
|
||
{
|
||
if (!self::$testMode) {
|
||
return false;
|
||
}
|
||
$user = db('user')->where('id', $userId)->find();
|
||
return $user && isset($user['is_test']) && $user['is_test'] == 1;
|
||
}
|
||
|
||
private function verifyReceipt($action, $payloadStr)
|
||
{
|
||
$receipt = $this->request->post('receipt', '', 'trim');
|
||
$sig = $this->request->post('sig', '', 'trim');
|
||
$result = Receipt::verify($receipt, $sig, $action, $payloadStr);
|
||
if (!$result['valid']) {
|
||
$this->error($result['msg']);
|
||
}
|
||
return true;
|
||
}
|
||
|
||
/**
|
||
* @name 哈希密保答案
|
||
* @desc 将密保答案转为MD5哈希(小写去空格)
|
||
*/
|
||
private function hashSecAnswer($answer)
|
||
{
|
||
return md5(mb_strtolower(trim($answer), 'UTF-8'));
|
||
}
|
||
|
||
/**
|
||
* @name 验证密保答案
|
||
* @desc 验证用户密保答案是否正确
|
||
*/
|
||
private function verifySecAnswer($userId, $answer)
|
||
{
|
||
$user = db('user')->where('id', $userId)->find();
|
||
if (!$user || empty($user['sec_question']) || empty($user['sec_answer'])) {
|
||
$this->error('未设置密保问题，无法使用此验证方式');
|
||
}
|
||
$inputHash = $this->hashSecAnswer($answer);
|
||
if ($inputHash !== $user['sec_answer']) {
|
||
$this->error('密保答案不正确');
|
||
}
|
||
return true;
|
||
}
|
||
|
||
/**
|
||
* @name 多方式身份验证
|
||
* @desc 根据verify_method验证用户身份(password/sec_question/receipt)
|
||
* @param object $user 用户对象
|
||
* @param string $receiptAction 回执action类型
|
||
* @param string $receiptPayload 回执payload
|
||
*/
|
||
private function verifyIdentity($user, $receiptAction, $receiptPayload = '')
|
||
{
|
||
$method = $this->request->post('verify_method', 'password', 'trim');
|
||
|
||
switch ($method) {
|
||
case 'password':
|
||
$oldpassword = $this->request->post('oldpassword', '', 'trim');
|
||
if (!$oldpassword) {
|
||
$this->error('旧密码不能为空');
|
||
}
|
||
$this->validateLength($oldpassword, '旧密码', 6, 30);
|
||
$encryptPassword = $this->auth->getEncryptPassword($oldpassword, $user->salt);
|
||
if ($encryptPassword !== $user->password) {
|
||
$this->error('旧密码不正确');
|
||
}
|
||
break;
|
||
|
||
case 'sec_question':
|
||
$secAnswer = $this->request->post('sec_answer', '', 'trim');
|
||
if (!$secAnswer) {
|
||
$this->error('密保答案不能为空');
|
||
}
|
||
$this->verifySecAnswer($user->id, $secAnswer);
|
||
break;
|
||
|
||
case 'receipt':
|
||
if (!$this->isTestUser($user->id)) {
|
||
$this->verifyReceipt($receiptAction, $receiptPayload ?: strval($user->id));
|
||
}
|
||
break;
|
||
|
||
default:
|
||
$this->error('不支持的验证方式，可选: password/sec_question/receipt');
|
||
}
|
||
|
||
return true;
|
||
}
|
||
|
||
/**
|
||
* @name 获取预置密保问题列表
|
||
* @desc 返回系统预置的密保问题，无需登录
|
||
* @lastUpdate v10.1.0 新增
|
||
*/
|
||
public function secQuestions()
|
||
{
|
||
$questions = [];
|
||
foreach (self::$secQuestions as $id => $text) {
|
||
$questions[] = ['id' => $id, 'question' => $text];
|
||
}
|
||
$this->success('', ['questions' => $questions]);
|
||
}
|
||
|
||
/**
|
||
* @name 账号密码登录
|
||
* @desc 支持用户名/邮箱+密码登录，无需回执，登录后记录设备信息
|
||
* @lastUpdate v9.0.0 登录后记录设备信息和在线状态
|
||
*/
|
||
public function login()
|
||
{
|
||
$this->checkRateLimit('login');
|
||
$account = $this->request->post('account', '', 'trim');
|
||
$password = $this->request->post('password', '', 'trim');
|
||
if (!$account || !$password) {
|
||
$this->error(__('Invalid parameters'));
|
||
}
|
||
$this->validateLength($account, '账号', 2, 50);
|
||
$this->validateLength($password, '密码', 6, 30);
|
||
$this->detectMaliciousInput($account);
|
||
$ret = $this->auth->login($account, $password);
|
||
if ($ret) {
|
||
$this->recordLoginDevice($this->auth->id);
|
||
$this->updateOnlineStatus($this->auth->id);
|
||
$token = $this->auth->getToken();
|
||
$data = ['userinfo' => $this->auth->getUserinfo(), 'token' => $token];
|
||
$this->success(__('Logged in successful'), $data);
|
||
} else {
|
||
$this->error($this->auth->getError());
|
||
}
|
||
}
|
||
|
||
/**
|
||
* @name 回执登录
|
||
* @desc 客户端验证邮箱/手机后，用回执替代密码登录
|
||
* @lastUpdate v9.0.0 登录后记录设备信息和在线状态
|
||
*/
|
||
public function receiptLogin()
|
||
{
|
||
$this->checkRateLimit('receiptLogin');
|
||
$account = $this->request->post('account', '', 'trim');
|
||
$receipt = $this->request->post('receipt', '', 'trim');
|
||
$sig = $this->request->post('sig', '', 'trim');
|
||
|
||
if (!$account || !$receipt || !$sig) {
|
||
$this->error(__('Invalid parameters'));
|
||
}
|
||
$this->validateLength($account, '账号', 2, 100);
|
||
$this->detectMaliciousInput($account);
|
||
|
||
$result = Receipt::verifyFlexible($receipt, $sig, 'receipt_login', $account);
|
||
if (!$result['valid']) {
|
||
$this->error($result['msg']);
|
||
}
|
||
|
||
$user = null;
|
||
if (Validate::is($account, "email")) {
|
||
$user = \app\common\model\User::getByEmail($account);
|
||
} elseif (Validate::regex($account, "^1\d{10}$")) {
|
||
$user = \app\common\model\User::getByMobile($account);
|
||
} else {
|
||
$user = \app\common\model\User::getByUsername($account);
|
||
}
|
||
|
||
if (!$user) {
|
||
$this->error(__('User not found'));
|
||
}
|
||
if ($user->status != 'normal') {
|
||
$this->error(__('Account is locked'));
|
||
}
|
||
|
||
$ret = $this->auth->direct($user->id);
|
||
if ($ret) {
|
||
$this->recordLoginDevice($user->id);
|
||
$this->updateOnlineStatus($user->id);
|
||
$data = ['userinfo' => $this->auth->getUserinfo()];
|
||
$this->success(__('Logged in successful'), $data);
|
||
} else {
|
||
$this->error($this->auth->getError());
|
||
}
|
||
}
|
||
|
||
/**
|
||
* @name 手机号登录
|
||
* @desc 手机号+短信验证码登录，未注册自动注册
|
||
*/
|
||
public function mobilelogin()
|
||
{
|
||
$this->checkRateLimit('login');
|
||
$mobile = $this->request->post('mobile', '', 'trim');
|
||
$captcha = $this->request->post('captcha', '', 'trim');
|
||
if (!$mobile || !$captcha) {
|
||
$this->error(__('Invalid parameters'));
|
||
}
|
||
if (!Validate::regex($mobile, "^1\d{10}$")) {
|
||
$this->error(__('Mobile is incorrect'));
|
||
}
|
||
$this->validateLength($captcha, '验证码', 4, 6);
|
||
if (self::$testMode && $captcha === '888888') {
|
||
$verified = true;
|
||
} else {
|
||
$verified = false;
|
||
try {
|
||
$verified = Sms::check($mobile, $captcha, 'mobilelogin');
|
||
} catch (\Exception $e) {
|
||
$this->error('短信验证服务暂不可用，请使用邮箱登录');
|
||
}
|
||
}
|
||
if (!$verified) {
|
||
$this->error(__('Captcha is incorrect'));
|
||
}
|
||
$user = \app\common\model\User::getByMobile($mobile);
|
||
if ($user) {
|
||
if ($user->status != 'normal') {
|
||
$this->error(__('Account is locked'));
|
||
}
|
||
$ret = $this->auth->direct($user->id);
|
||
} else {
|
||
$ret = $this->auth->register($mobile, Random::alnum(), '', $mobile, []);
|
||
}
|
||
if ($ret) {
|
||
try { Sms::flush($mobile, 'mobilelogin'); } catch (\Exception $e) {}
|
||
$data = ['userinfo' => $this->auth->getUserinfo()];
|
||
$this->success(__('Logged in successful'), $data);
|
||
} else {
|
||
$this->error($this->auth->getError());
|
||
}
|
||
}
|
||
|
||
/**
|
||
* @name Token令牌登录
|
||
* @desc 使用已有Token直接登录
|
||
*/
|
||
public function tokenLogin()
|
||
{
|
||
$this->checkRateLimit('tokenLogin');
|
||
$token = $this->request->post('token', '', 'trim');
|
||
if (!$token) {
|
||
$this->error(__('Invalid parameters'));
|
||
}
|
||
$this->validateLength($token, 'Token', 10, 128);
|
||
$tokenInfo = \app\common\library\Token::get($token);
|
||
if (!$tokenInfo) {
|
||
$this->error('Token无效或已过期');
|
||
}
|
||
$ret = $this->auth->direct($tokenInfo['user_id']);
|
||
if ($ret) {
|
||
$data = ['userinfo' => $this->auth->getUserinfo()];
|
||
$this->success(__('Logged in successful'), $data);
|
||
} else {
|
||
$this->error($this->auth->getError());
|
||
}
|
||
}
|
||
|
||
/**
|
||
* @name 用户注册
|
||
* @desc 注册新用户，需回执验证(客户端已验证邮箱)，可选填密保问题/出生日期，注册赠送50积分+50金币
|
||
* @lastUpdate v10.3.1 新增birthday字段，自动判定未成年状态(COPPA/GDPR-K合规)
|
||
*/
|
||
public function register()
|
||
{
|
||
$this->checkRateLimit('register');
|
||
$username = $this->request->post('username', '', 'trim');
|
||
$password = $this->request->post('password', '', 'trim');
|
||
$email = $this->request->post('email', '', 'trim');
|
||
$mobile = $this->request->post('mobile', '', 'trim');
|
||
$mobileCode = $this->request->post('mobile_code', '', 'trim');
|
||
$secQuestion = $this->request->post('sec_question', 0, 'intval');
|
||
$secAnswer = $this->request->post('sec_answer', '', 'trim');
|
||
$birthday = $this->request->post('birthday', '', 'trim'); // 格式: YYYY-MM-DD
|
||
|
||
if (!$username || !$password || !$email) {
|
||
$this->error('用户名、密码和邮箱为必填项');
|
||
}
|
||
|
||
// 出生日期校验 (feat6 - COPPA/GDPR-K)
|
||
$isMinor = 0;
|
||
$ageData = null;
|
||
if ($birthday) {
|
||
$ageData = $this->calculateAge($birthday);
|
||
if (!$ageData['valid']) {
|
||
$this->error('出生日期格式无效，应为 YYYY-MM-DD');
|
||
}
|
||
if ($ageData['age'] < 0 || $ageData['age'] > 120) {
|
||
$this->error('出生日期不合理');
|
||
}
|
||
// COPPA: 13岁以下禁止注册; GDPR-K: 16岁以下需家长同意
|
||
if ($ageData['age'] < 14) {
|
||
$this->error('根据《儿童个人信息网络保护规定》及COPPA要求，14岁以下用户不得注册');
|
||
}
|
||
$isMinor = ($ageData['age'] < 18) ? 1 : 0;
|
||
}
|
||
$this->validateLength($username, '用户名', 3, 30);
|
||
$this->validateLength($password, '密码', 6, 30);
|
||
$this->detectMaliciousInput($username);
|
||
if (!preg_match('/^[a-zA-Z0-9_\x{4e00}-\x{9fa5}]+$/u', $username)) {
|
||
$this->error('用户名只能包含字母、数字、下划线和中文');
|
||
}
|
||
if (!Validate::is($email, "email")) {
|
||
$this->error(__('Email is incorrect'));
|
||
}
|
||
$this->validateLength($email, '邮箱', 5, 100);
|
||
|
||
if (\app\common\model\User::getByEmail($email)) {
|
||
$this->error('该邮箱已被注册');
|
||
}
|
||
|
||
$this->verifyReceipt('register', $email);
|
||
|
||
if ($mobile) {
|
||
if (!Validate::regex($mobile, "^1\d{10}$")) {
|
||
$this->error(__('Mobile is incorrect'));
|
||
}
|
||
if ($mobileCode) {
|
||
if (!Sms::check($mobile, $mobileCode, 'register')) {
|
||
$this->error(__('Captcha is incorrect'));
|
||
}
|
||
}
|
||
}
|
||
|
||
// 密保问题验证(先验证，但不放入$extend，注册成功后单独更新)
|
||
$secQuestionValid = false;
|
||
$secAnswerHash = '';
|
||
if ($secQuestion > 0 && $secAnswer) {
|
||
if (!isset(self::$secQuestions[$secQuestion])) {
|
||
$this->error('密保问题编号无效(1-8)');
|
||
}
|
||
$this->validateLength($secAnswer, '密保答案', 1, 50);
|
||
$secQuestionValid = true;
|
||
$secAnswerHash = $this->hashSecAnswer($secAnswer);
|
||
}
|
||
|
||
// 不再将sec_question/sec_answer放入$extend，避免字段不存在时User::create失败
|
||
// 保留$extend变量定义，便于后续扩展其他字段
|
||
$extend = [];
|
||
$ret = $this->auth->register($username, $password, $email, $mobile, $extend);
|
||
if ($ret) {
|
||
$userId = $this->auth->id;
|
||
|
||
// 注册后操作全部包裹在try-catch中，确保任何失败不影响注册结果
|
||
try {
|
||
// 1. 更新邮箱验证状态
|
||
$verification = db('user')->where('id', $userId)->value('verification');
|
||
$verification = $verification ? json_decode($verification, true) : [];
|
||
$verification['email'] = 1;
|
||
db('user')->where('id', $userId)->update(['verification' => json_encode($verification)]);
|
||
|
||
// 2. 单独更新密保问题(避免字段不存在导致注册整体失败)
|
||
if ($secQuestionValid) {
|
||
try {
|
||
db('user')->where('id', $userId)->update([
|
||
'sec_question' => $secQuestion,
|
||
'sec_answer' => $secAnswerHash,
|
||
]);
|
||
} catch (\Exception $e) {
|
||
// sec_question/sec_answer字段可能不存在(未执行迁移)，静默跳过
|
||
}
|
||
}
|
||
|
||
// 2.5 保存出生日期与未成年状态 (feat6 - COPPA/GDPR-K)
|
||
if ($birthday && $ageData) {
|
||
try {
|
||
db('user')->where('id', $userId)->update([
|
||
'birthday' => $birthday,
|
||
'is_minor' => $isMinor,
|
||
]);
|
||
} catch (\Exception $e) {
|
||
// birthday/is_minor字段可能不存在(未执行迁移)，静默跳过
|
||
\think\Log::record('保存birthday失败: ' . $e->getMessage(), 'debug');
|
||
}
|
||
}
|
||
|
||
// 3. 注册赠送50积分
|
||
$registerScore = 50;
|
||
$registerGold = 50;
|
||
$userBefore = db('user')->where('id', $userId)->find();
|
||
$scoreBefore = isset($userBefore['score']) ? intval($userBefore['score']) : 0;
|
||
db('user')->where('id', $userId)->setInc('score', $registerScore);
|
||
|
||
// 4. 注册赠送50金币(gold字段可能不存在，需容错)
|
||
$goldBefore = 0;
|
||
try {
|
||
if (isset($userBefore['gold'])) {
|
||
$goldBefore = intval($userBefore['gold']);
|
||
db('user')->where('id', $userId)->setInc('gold', $registerGold);
|
||
} else {
|
||
// gold字段不存在，尝试添加
|
||
try {
|
||
db('user')->where('id', $userId)->update(['gold' => $registerGold]);
|
||
} catch (\Exception $e2) {
|
||
// 字段确实不存在，跳过金币赠送
|
||
}
|
||
}
|
||
} catch (\Exception $e) {
|
||
// gold字段操作异常，跳过
|
||
}
|
||
|
||
// 5. 积分日志
|
||
try {
|
||
db('coin_log')->insert([
|
||
'user_id' => $userId,
|
||
'coin_type' => 'score',
|
||
'amount' => $registerScore,
|
||
'before' => $scoreBefore,
|
||
'after' => $scoreBefore + $registerScore,
|
||
'action' => 'register_reward',
|
||
'remark' => '新用户注册赠送积分',
|
||
'createtime' => time(),
|
||
]);
|
||
} catch (\Exception $e) {}
|
||
|
||
// 6. 金币日志
|
||
try {
|
||
db('coin_log')->insert([
|
||
'user_id' => $userId,
|
||
'coin_type' => 'gold',
|
||
'amount' => $registerGold,
|
||
'before' => $goldBefore,
|
||
'after' => $goldBefore + $registerGold,
|
||
'action' => 'register_reward',
|
||
'remark' => '新用户注册赠送金币',
|
||
'createtime' => time(),
|
||
]);
|
||
} catch (\Exception $e) {}
|
||
|
||
} catch (\Exception $e) {
|
||
// 注册后操作失败不影响注册结果，用户已创建成功
|
||
// 记录日志便于排查
|
||
try {
|
||
\think\Log::write('注册后操作异常(userId=' . $userId . '): ' . $e->getMessage(), 'error');
|
||
} catch (\Exception $logErr) {}
|
||
}
|
||
|
||
$token = $this->auth->getToken();
|
||
$data = ['userinfo' => $this->auth->getUserinfo(), 'token' => $token];
|
||
$this->success(__('Sign up successful'), $data);
|
||
} else {
|
||
$this->error($this->auth->getError());
|
||
}
|
||
}
|
||
|
||
/**
|
||
* @name 退出登录
|
||
* @desc 清除Token，退出登录状态
|
||
*/
|
||
public function logout()
|
||
{
|
||
if (!$this->request->isPost()) {
|
||
$this->error(__('Invalid parameters'));
|
||
}
|
||
$token = $this->request->header('token', '');
|
||
if ($token) {
|
||
\app\common\library\Token::delete($token);
|
||
}
|
||
$userId = $this->auth->id;
|
||
if ($userId) {
|
||
\app\common\library\Token::clear($userId);
|
||
}
|
||
$this->success(__('Logout successful'));
|
||
}
|
||
|
||
/**
|
||
* @name 修改密码
|
||
* @desc 修改密码，支持多种验证方式(password/sec_question/receipt)
|
||
* @lastUpdate v10.1.0 新增verify_method参数，支持密保/回执验证
|
||
*/
|
||
public function changepwd()
|
||
{
|
||
$this->checkRateLimit('changepwd');
|
||
$user = $this->auth->getUser();
|
||
$newpassword = $this->request->post('newpassword', '', 'trim');
|
||
|
||
if (!$newpassword) {
|
||
$this->error(__('Invalid parameters'));
|
||
}
|
||
$this->validateLength($newpassword, '新密码', 6, 30);
|
||
|
||
$this->verifyIdentity($user, 'changepwd', strval($user->id));
|
||
|
||
$ret = $this->auth->changepwd($newpassword, '', true);
|
||
if ($ret) {
|
||
$this->success(__('Change password successful'));
|
||
} else {
|
||
$this->error($this->auth->getError());
|
||
}
|
||
}
|
||
|
||
/**
|
||
* @name 重置密码
|
||
* @desc 通过回执验证重置密码(无需登录)，客户端已验证邮箱/手机
|
||
*/
|
||
public function resetpwd()
|
||
{
|
||
$this->checkRateLimit('resetpwd');
|
||
$type = $this->request->post("type", "email", 'trim');
|
||
$mobile = $this->request->post("mobile", '', 'trim');
|
||
$email = $this->request->post("email", '', 'trim');
|
||
$newpassword = $this->request->post("newpassword", '', 'trim');
|
||
|
||
if (!$newpassword) {
|
||
$this->error(__('Invalid parameters'));
|
||
}
|
||
$this->validateLength($newpassword, '新密码', 6, 30);
|
||
|
||
if ($type == 'mobile') {
|
||
if (!Validate::regex($mobile, "^1\d{10}$")) {
|
||
$this->error(__('Mobile is incorrect'));
|
||
}
|
||
$user = \app\common\model\User::getByMobile($mobile);
|
||
if (!$user) {
|
||
$this->error(__('User not found'));
|
||
}
|
||
$this->verifyReceipt('resetpwd', $mobile);
|
||
} else {
|
||
if (!Validate::is($email, "email")) {
|
||
$this->error(__('Email is incorrect'));
|
||
}
|
||
$user = \app\common\model\User::getByEmail($email);
|
||
if (!$user) {
|
||
$this->error(__('User not found'));
|
||
}
|
||
$this->verifyReceipt('resetpwd', $email);
|
||
}
|
||
|
||
$this->auth->direct($user->id);
|
||
$ret = $this->auth->changepwd($newpassword, '', true);
|
||
if ($ret) {
|
||
$this->success(__('Reset password successful'));
|
||
} else {
|
||
$this->error($this->auth->getError());
|
||
}
|
||
}
|
||
|
||
/**
|
||
* @name 修改邮箱
|
||
* @desc 修改邮箱，支持回执验证或密保验证
|
||
* @lastUpdate v10.1.0 新增verify_method=sec_question验证方式
|
||
*/
|
||
public function changeemail()
|
||
{
|
||
$this->checkRateLimit('changeemail');
|
||
$user = $this->auth->getUser();
|
||
$email = $this->request->post('email', '', 'trim');
|
||
|
||
if (!$email) {
|
||
$this->error(__('Invalid parameters'));
|
||
}
|
||
if (!Validate::is($email, "email")) {
|
||
$this->error(__('Email is incorrect'));
|
||
}
|
||
$this->validateLength($email, '邮箱', 5, 100);
|
||
|
||
if (\app\common\model\User::where('email', $email)->where('id', '<>', $user->id)->find()) {
|
||
$this->error(__('Email already exists'));
|
||
}
|
||
|
||
$method = $this->request->post('verify_method', 'receipt', 'trim');
|
||
if ($method === 'sec_question') {
|
||
$secAnswer = $this->request->post('sec_answer', '', 'trim');
|
||
if (!$secAnswer) {
|
||
$this->error('密保答案不能为空');
|
||
}
|
||
$this->verifySecAnswer($user->id, $secAnswer);
|
||
} else {
|
||
$this->verifyReceipt('changeemail', $email);
|
||
}
|
||
|
||
$verification = $user->verification;
|
||
$verification->email = 1;
|
||
$user->verification = $verification;
|
||
$user->email = $email;
|
||
$user->save();
|
||
$this->success();
|
||
}
|
||
|
||
/**
|
||
* @name 修改手机号
|
||
* @desc 修改手机号，支持回执验证或密保验证
|
||
* @lastUpdate v10.1.0 新增verify_method=sec_question验证方式
|
||
*/
|
||
public function changemobile()
|
||
{
|
||
$this->checkRateLimit('changemobile');
|
||
$user = $this->auth->getUser();
|
||
$mobile = $this->request->post('mobile', '', 'trim');
|
||
|
||
if (!$mobile) {
|
||
$this->error(__('Invalid parameters'));
|
||
}
|
||
if (!Validate::regex($mobile, "^1\d{10}$")) {
|
||
$this->error(__('Mobile is incorrect'));
|
||
}
|
||
|
||
if (\app\common\model\User::where('mobile', $mobile)->where('id', '<>', $user->id)->find()) {
|
||
$this->error(__('Mobile already exists'));
|
||
}
|
||
|
||
$method = $this->request->post('verify_method', 'receipt', 'trim');
|
||
if ($method === 'sec_question') {
|
||
$secAnswer = $this->request->post('sec_answer', '', 'trim');
|
||
if (!$secAnswer) {
|
||
$this->error('密保答案不能为空');
|
||
}
|
||
$this->verifySecAnswer($user->id, $secAnswer);
|
||
} else {
|
||
$this->verifyReceipt('changemobile', $mobile);
|
||
}
|
||
|
||
$verification = $user->verification;
|
||
$verification->mobile = 1;
|
||
$user->verification = $verification;
|
||
$user->mobile = $mobile;
|
||
$user->save();
|
||
$this->success();
|
||
}
|
||
|
||
/**
|
||
* @name 修改密保问题
|
||
* @desc 修改或设置密保问题，需验证身份(password/sec_question/receipt)
|
||
* @lastUpdate v10.1.0 新增
|
||
*/
|
||
public function changeSecQuestion()
|
||
{
|
||
$this->checkRateLimit('changeSecQuestion');
|
||
$user = $this->auth->getUser();
|
||
$secQuestion = $this->request->post('sec_question', 0, 'intval');
|
||
$secAnswer = $this->request->post('sec_answer', '', 'trim');
|
||
|
||
if ($secQuestion <= 0 || !$secAnswer) {
|
||
$this->error('密保问题和答案为必填项');
|
||
}
|
||
if (!isset(self::$secQuestions[$secQuestion])) {
|
||
$this->error('密保问题编号无效(1-8)');
|
||
}
|
||
$this->validateLength($secAnswer, '密保答案', 1, 50);
|
||
|
||
$this->verifyIdentity($user, 'changesecq', strval($user->id));
|
||
|
||
$answerHash = $this->hashSecAnswer($secAnswer);
|
||
db('user')->where('id', $user->id)->update([
|
||
'sec_question' => $secQuestion,
|
||
'sec_answer' => $answerHash,
|
||
]);
|
||
|
||
$this->success('密保问题设置成功', [
|
||
'sec_question' => $secQuestion,
|
||
'sec_question_text' => self::$secQuestions[$secQuestion],
|
||
]);
|
||
}
|
||
|
||
/**
|
||
* @name 发送邮箱验证码(保留兼容)
|
||
* @desc 保留接口兼容旧客户端，新客户端建议使用回执验证
|
||
*/
|
||
public function sendEms()
|
||
{
|
||
$this->checkRateLimit('sendEms');
|
||
$email = $this->request->post('email', '', 'trim');
|
||
$event = $this->request->post('event', 'register', 'trim');
|
||
|
||
if (!$email) {
|
||
$this->error('邮箱不能为空');
|
||
}
|
||
if (!Validate::is($email, "email")) {
|
||
$this->error(__('Email is incorrect'));
|
||
}
|
||
|
||
$allowedEvents = ['register', 'changepwd', 'resetpwd', 'changeemail', 'emaillogin'];
|
||
if (!in_array($event, $allowedEvents)) {
|
||
$this->error('无效的事件类型');
|
||
}
|
||
|
||
$last = Ems::get($email, $event);
|
||
if ($last && time() - $last['createtime'] < 60) {
|
||
$this->error(__('发送频繁'));
|
||
}
|
||
|
||
$userinfo = \app\common\model\User::getByEmail($email);
|
||
if ($event == 'register' && $userinfo) {
|
||
$this->error(__('已被注册'));
|
||
} elseif ($event == 'changeemail' && $userinfo) {
|
||
$this->error(__('已被占用'));
|
||
} elseif (in_array($event, ['changepwd', 'resetpwd', 'emaillogin']) && !$userinfo) {
|
||
// emaillogin允许未注册(会自动注册),此处不阻止
|
||
if ($event != 'emaillogin') {
|
||
$this->error(__('未注册'));
|
||
}
|
||
}
|
||
|
||
$ret = Ems::send($email, null, $event);
|
||
if ($ret) {
|
||
$this->success(__('发送成功'));
|
||
} else {
|
||
$this->error(__('发送失败'));
|
||
}
|
||
}
|
||
|
||
/**
|
||
* @name 校验邮箱验证码(保留兼容)
|
||
* @desc 保留接口兼容旧客户端
|
||
*/
|
||
public function checkEms()
|
||
{
|
||
$email = $this->request->post('email', '', 'trim');
|
||
$captcha = $this->request->post('captcha', '', 'trim');
|
||
$event = $this->request->post('event', 'register', 'trim');
|
||
|
||
if (!$email || !$captcha) {
|
||
$this->error(__('Invalid parameters'));
|
||
}
|
||
|
||
if (self::$testMode && $captcha === '888888') {
|
||
$this->success(__('验证码正确'));
|
||
}
|
||
|
||
$ret = Ems::check($email, $captcha, $event);
|
||
if ($ret) {
|
||
$this->success(__('验证码正确'));
|
||
} else {
|
||
$this->error(__('验证码不正确'));
|
||
}
|
||
}
|
||
|
||
/**
|
||
* @name 第三方登录
|
||
* @desc 第三方平台登录
|
||
*/
|
||
public function third()
|
||
{
|
||
$this->checkRateLimit('login');
|
||
$url = url('user/index');
|
||
$platform = $this->request->post("platform", '', 'trim');
|
||
$code = $this->request->post("code", '', 'trim');
|
||
$this->detectMaliciousInput($platform);
|
||
$this->detectMaliciousInput($code);
|
||
$config = get_addon_config('third');
|
||
if (!$config || !isset($config[$platform])) {
|
||
$this->error(__('Invalid parameters'));
|
||
}
|
||
$app = new \addons\third\library\Application($config);
|
||
$result = $app->{$platform}->getUserInfo(['code' => $code]);
|
||
if ($result) {
|
||
$loginret = \addons\third\library\Service::connect($platform, $result);
|
||
if ($loginret) {
|
||
$data = [
|
||
'userinfo' => $this->auth->getUserinfo(),
|
||
'thirdinfo' => $result
|
||
];
|
||
$this->success(__('Logged in successful'), $data);
|
||
}
|
||
}
|
||
$this->error(__('Operation failed'), $url);
|
||
}
|
||
|
||
/**
|
||
* @name 生成二维码
|
||
* @desc 生成二维码登录标识，返回code用于轮询
|
||
* @lastUpdate v9.0.0 新增
|
||
*/
|
||
public function qrcodeGenerate()
|
||
{
|
||
$code = md5(uniqid('qr', true) . mt_rand() . time());
|
||
$expireTime = time() + 300;
|
||
|
||
db('qrcode_login')->insert([
|
||
'code' => $code,
|
||
'status' => 'pending',
|
||
'user_id' => 0,
|
||
'token' => '',
|
||
'ip' => $this->request->ip(),
|
||
'expire_time' => $expireTime,
|
||
'createtime' => time(),
|
||
'updatetime' => time(),
|
||
]);
|
||
|
||
$this->success('二维码已生成', [
|
||
'code' => $code,
|
||
'expire_time' => $expireTime,
|
||
'expire_seconds' => 300,
|
||
'qrcode_url' => $this->request->domain() . '/qrcode?code=' . $code,
|
||
]);
|
||
}
|
||
|
||
/**
|
||
* @name 扫码确认
|
||
* @desc 已登录用户扫码后确认登录，需登录
|
||
* @lastUpdate v9.0.0 新增
|
||
*/
|
||
public function qrcodeConfirm()
|
||
{
|
||
$code = $this->request->post('code', '', 'trim');
|
||
if (!$code) {
|
||
$this->error('code必填');
|
||
}
|
||
|
||
$qr = db('qrcode_login')->where('code', $code)->find();
|
||
if (!$qr) {
|
||
$this->error('二维码不存在');
|
||
}
|
||
if ($qr['status'] !== 'pending' && $qr['status'] !== 'scanned') {
|
||
$this->error('二维码状态无效');
|
||
}
|
||
if ($qr['expire_time'] < time()) {
|
||
db('qrcode_login')->where('code', $code)->update(['status' => 'expired', 'updatetime' => time()]);
|
||
$this->error('二维码已过期');
|
||
}
|
||
|
||
$userId = $this->auth->id;
|
||
$deviceInfo = json_encode([
|
||
'ip' => $this->request->ip(),
|
||
'platform' => $this->request->post('platform', '', 'trim'),
|
||
'device_name' => $this->request->post('device_name', '', 'trim'),
|
||
'app_name' => $this->request->post('app_name', '', 'trim'),
|
||
]);
|
||
|
||
db('qrcode_login')->where('code', $code)->update([
|
||
'status' => 'confirmed',
|
||
'user_id' => $userId,
|
||
'device_info' => $deviceInfo,
|
||
'updatetime' => time(),
|
||
]);
|
||
|
||
$this->success('确认登录成功');
|
||
}
|
||
|
||
/**
|
||
* @name 轮询二维码状态
|
||
* @desc 客户端轮询二维码状态，confirmed时返回Token
|
||
* @lastUpdate v9.0.0 新增
|
||
*/
|
||
public function qrcodePoll()
|
||
{
|
||
$code = $this->request->param('code', '', 'trim');
|
||
if (!$code) {
|
||
$this->error('code必填');
|
||
}
|
||
|
||
$qr = db('qrcode_login')->where('code', $code)->find();
|
||
if (!$qr) {
|
||
$this->error('二维码不存在');
|
||
}
|
||
|
||
if ($qr['expire_time'] < time() && $qr['status'] !== 'confirmed') {
|
||
db('qrcode_login')->where('code', $code)->update(['status' => 'expired', 'updatetime' => time()]);
|
||
$this->success('', ['status' => 'expired', 'message' => '二维码已过期']);
|
||
}
|
||
|
||
if ($qr['status'] === 'pending') {
|
||
$this->success('', ['status' => 'pending', 'message' => '等待扫码']);
|
||
}
|
||
|
||
if ($qr['status'] === 'scanned') {
|
||
$this->success('', ['status' => 'scanned', 'message' => '已扫码，等待确认']);
|
||
}
|
||
|
||
if ($qr['status'] === 'expired') {
|
||
$this->success('', ['status' => 'expired', 'message' => '二维码已过期']);
|
||
}
|
||
|
||
if ($qr['status'] === 'cancelled') {
|
||
$this->success('', ['status' => 'cancelled', 'message' => '已取消']);
|
||
}
|
||
|
||
if ($qr['status'] === 'confirmed') {
|
||
$user = \app\common\model\User::get($qr['user_id']);
|
||
if (!$user || $user->status != 'normal') {
|
||
$this->error('用户异常');
|
||
}
|
||
|
||
$ret = $this->auth->direct($user->id);
|
||
if ($ret) {
|
||
$token = $this->auth->getToken();
|
||
db('qrcode_login')->where('code', $code)->update([
|
||
'token' => $token,
|
||
'updatetime' => time(),
|
||
]);
|
||
|
||
$this->recordLoginDevice($user->id);
|
||
$this->updateOnlineStatus($user->id);
|
||
|
||
$this->success('登录成功', [
|
||
'status' => 'confirmed',
|
||
'token' => $token,
|
||
'userinfo' => $this->auth->getUserinfo(),
|
||
]);
|
||
} else {
|
||
$this->error('登录失败');
|
||
}
|
||
}
|
||
|
||
$this->error('未知状态');
|
||
}
|
||
|
||
/**
|
||
* @name 申请账号注销
|
||
* @desc 用户提交注销申请，需回执验证(action=delete_account)，3天审核期
|
||
* @lastUpdate v9.2.0 新增
|
||
*/
|
||
public function requestDeletion()
|
||
{
|
||
$this->checkRateLimit('requestDeletion');
|
||
$user = $this->auth->getUser();
|
||
$reason = $this->request->post('reason', '', 'trim');
|
||
|
||
$this->verifyReceipt('delete_account', strval($user->id));
|
||
|
||
if ($reason) {
|
||
$reason = $this->sanitizeString($reason, 500);
|
||
}
|
||
|
||
$existing = db('user_deletion')
|
||
->where('user_id', $user->id)
|
||
->where('status', 0)
|
||
->find();
|
||
if ($existing) {
|
||
$statusMap = [0 => '待审核', 1 => '已通过(已注销)', 2 => '已拒绝', 3 => '已自动注销'];
|
||
$remain = $existing['auto_delete_time'] - time();
|
||
$countdown = '';
|
||
if ($remain > 0) {
|
||
$days = floor($remain / 86400);
|
||
$hours = floor(($remain % 86400) / 3600);
|
||
$countdown = "{$days}天{$hours}小时后自动注销";
|
||
} else {
|
||
$countdown = '即将自动注销';
|
||
}
|
||
$this->error('已存在待审核的注销申请', [
|
||
'id' => $existing['id'],
|
||
'status_text' => $statusMap[$existing['status']] ?? '未知',
|
||
'countdown' => $countdown,
|
||
]);
|
||
}
|
||
|
||
$threeDaysLater = time() + 3 * 24 * 3600;
|
||
$now = time();
|
||
|
||
$data = [
|
||
'user_id' => $user->id,
|
||
'username' => $user->username ?? $user->nickname ?? '',
|
||
'reason' => $reason ?: '用户主动申请注销',
|
||
'status' => 0,
|
||
'admin_id' => 0,
|
||
'admin_remark' => '',
|
||
'auto_delete_time' => $threeDaysLater,
|
||
'createtime' => $now,
|
||
'updatetime' => $now,
|
||
'deletetime' => null,
|
||
];
|
||
|
||
$result = db('user_deletion')->insertGetId($data);
|
||
if ($result) {
|
||
$remain = $threeDaysLater - time();
|
||
$days = floor($remain / 86400);
|
||
$hours = floor(($remain % 86400) / 3600);
|
||
$countdown = "{$days}天{$hours}小时后自动注销";
|
||
|
||
// 异步发送注销确认邮件 (防止他人冒用账号注销)
|
||
$this->sendDeletionNotificationAsync($user, $result, $threeDaysLater, $reason);
|
||
|
||
$this->success('注销申请已提交', [
|
||
'id' => $result,
|
||
'user_id' => $user->id,
|
||
'status' => 0,
|
||
'status_text' => '待审核',
|
||
'auto_delete_time' => $threeDaysLater,
|
||
'auto_delete_time_text' => date('Y-m-d H:i:s', $threeDaysLater),
|
||
'countdown' => $countdown,
|
||
'createtime_text' => date('Y-m-d H:i:s', $now),
|
||
]);
|
||
} else {
|
||
$this->error('提交失败，请稍后再试');
|
||
}
|
||
}
|
||
|
||
/**
|
||
* @name 异步发送注销确认邮件
|
||
* @desc 使用register_shutdown_function在响应发送后执行，不阻塞API响应
|
||
* @param object $user 用户对象
|
||
* @param int $deletionId 注销记录ID
|
||
* @param int $autoDeleteTime 自动注销时间戳
|
||
* @param string $reason 注销原因
|
||
* @lastUpdate v10.3.1 新增邮件通知功能
|
||
*/
|
||
private function sendDeletionNotificationAsync($user, $deletionId, $autoDeleteTime, $reason)
|
||
{
|
||
$email = $user->email ?? '';
|
||
if (!$email || !filter_var($email, FILTER_VALIDATE_EMAIL)) {
|
||
return;
|
||
}
|
||
|
||
// 捕获必要变量，在请求结束后异步发送
|
||
$username = $user->username ?? $user->nickname ?? '用户';
|
||
$autoDeleteText = date('Y-m-d H:i:s', $autoDeleteTime);
|
||
$requestTime = date('Y-m-d H:i:s', time());
|
||
$ip = $this->request->ip();
|
||
$reasonText = $reason ?: '用户主动申请注销';
|
||
$cancelUrl = Config::get('site.sitename') ? 'https://s2ss.com/agreements/privacy-rights.html?tab=delete' : '';
|
||
|
||
register_shutdown_function(function () use ($email, $username, $deletionId, $autoDeleteText, $requestTime, $ip, $reasonText, $cancelUrl) {
|
||
try {
|
||
$subject = '【闲言APP】账号注销申请已提交 - 请确认是否本人操作';
|
||
$body = <<<HTML
|
||
<!DOCTYPE html>
|
||
<html><head><meta charset="utf-8"></head><body style="font-family:-apple-system,sans-serif;max-width:560px;margin:0 auto;padding:20px;color:#333;">
|
||
<h2 style="color:#FF3B30;">⚠️ 账号注销申请确认</h2>
|
||
<p>您好 <strong>{$username}</strong>：</p>
|
||
<p>我们收到了针对您账号的注销申请。如果这是<strong style="color:#FF3B30;">您本人的操作</strong>，请忽略此邮件。</p>
|
||
<p>如果<strong style="color:#FF3B30;">不是您本人操作</strong>，请立即登录App或访问以下链接取消注销：</p>
|
||
<p style="margin:16px 0;"><a href="{$cancelUrl}" style="display:inline-block;background:#6C5CE7;color:#fff;padding:10px 24px;border-radius:8px;text-decoration:none;">取消注销申请</a></p>
|
||
<table style="width:100%;border-collapse:collapse;margin:20px 0;font-size:14px;">
|
||
<tr><td style="padding:8px 12px;border:1px solid #eee;background:#f9f9f9;">申请时间</td><td style="padding:8px 12px;border:1px solid #eee;">{$requestTime}</td></tr>
|
||
<tr><td style="padding:8px 12px;border:1px solid #eee;background:#f9f9f9;">注销原因</td><td style="padding:8px 12px;border:1px solid #eee;">{$reasonText}</td></tr>
|
||
<tr><td style="padding:8px 12px;border:1px solid #eee;background:#f9f9f9;">IP地址</td><td style="padding:8px 12px;border:1px solid #eee;">{$ip}</td></tr>
|
||
<tr><td style="padding:8px 12px;border:1px solid #eee;background:#f9f9f9;">自动注销时间</td><td style="padding:8px 12px;border:1px solid #eee;color:#FF3B30;">{$autoDeleteText}（3天后）</td></tr>
|
||
</table>
|
||
<div style="background:#FFF8E1;border-left:3px solid #FF9500;padding:12px 16px;margin:16px 0;border-radius:4px;">
|
||
<p style="margin:0;"><strong>⚠️ 注销后果：</strong>所有收藏、笔记、签到记录、积分、文章、会员权益等数据将被<strong>永久删除且不可恢复</strong>。</p>
|
||
</div>
|
||
<hr style="border:none;border-top:1px solid #eee;margin:20px 0;">
|
||
<p style="font-size:12px;color:#999;">此邮件由系统自动发送，请勿回复。如有疑问请联系 ad@avefs.com</p>
|
||
<p style="font-size:12px;color:#999;">© 2026 闲言APP · 弥勒市朋普镇微风暴网络科技工作室</p>
|
||
</body></html>
|
||
HTML;
|
||
|
||
$emailLib = \app\common\library\Email::instance();
|
||
$emailLib->to($email)->subject($subject)->message($body, true)->send();
|
||
} catch (\Exception $e) {
|
||
\think\Log::error('注销确认邮件发送失败: ' . $e->getMessage() . ' email=' . $email);
|
||
}
|
||
});
|
||
}
|
||
|
||
/**
|
||
* @name 清理过期注销记录
|
||
* @desc 删除6个月前的已完成注销记录(PIPL最小化保留原则)，username已哈希存储
|
||
* @lastUpdate v10.3.1 新增 - 注销记录保留期从2年缩短为6个月
|
||
*/
|
||
public function cleanupOldDeletionRecords()
|
||
{
|
||
$sixMonthsAgo = time() - 6 * 30 * 24 * 3600;
|
||
$count = db('user_deletion')
|
||
->where('status', 'in', [1, 3]) // 已通过或已自动注销
|
||
->where('deletetime', '<', $sixMonthsAgo)
|
||
->delete();
|
||
$this->success("已清理 {$count} 条过期注销记录");
|
||
}
|
||
|
||
/**
|
||
* @name 查询注销状态
|
||
* @desc 查询当前用户的注销申请状态
|
||
* @lastUpdate v9.2.0 新增
|
||
*/
|
||
public function deletionStatus()
|
||
{
|
||
$this->checkRateLimit('deletionStatus');
|
||
$user = $this->auth->getUser();
|
||
|
||
$record = db('user_deletion')
|
||
->where('user_id', $user->id)
|
||
->order('createtime desc')
|
||
->find();
|
||
|
||
if (!$record) {
|
||
$this->success('', ['has_pending' => false]);
|
||
}
|
||
|
||
$statusMap = [0 => '待审核', 1 => '已通过(已注销)', 2 => '已拒绝', 3 => '已自动注销'];
|
||
$record['status_text'] = $statusMap[$record['status']] ?? '未知';
|
||
$record['createtime_text'] = date('Y-m-d H:i:s', $record['createtime']);
|
||
$record['auto_delete_time_text'] = date('Y-m-d H:i:s', $record['auto_delete_time']);
|
||
|
||
$remain = $record['auto_delete_time'] - time();
|
||
if ($record['status'] == 0 && $remain > 0) {
|
||
$days = floor($remain / 86400);
|
||
$hours = floor(($remain % 86400) / 3600);
|
||
$record['countdown'] = "{$days}天{$hours}小时后自动注销";
|
||
} elseif ($record['status'] == 0) {
|
||
$record['countdown'] = '已超时，待自动注销';
|
||
} else {
|
||
$record['countdown'] = '-';
|
||
}
|
||
|
||
$this->success('', [
|
||
'has_pending' => $record['status'] == 0,
|
||
'id' => $record['id'],
|
||
'status' => $record['status'],
|
||
'status_text' => $record['status_text'],
|
||
'reason' => $record['reason'],
|
||
'auto_delete_time_text' => $record['auto_delete_time_text'],
|
||
'countdown' => $record['countdown'],
|
||
'createtime_text' => $record['createtime_text'],
|
||
]);
|
||
}
|
||
|
||
/**
|
||
* @name 取消注销申请
|
||
* @desc 用户取消待审核的注销申请
|
||
* @lastUpdate v9.2.0 新增
|
||
*/
|
||
public function cancelDeletion()
|
||
{
|
||
$this->checkRateLimit('cancelDeletion');
|
||
$user = $this->auth->getUser();
|
||
|
||
$record = db('user_deletion')
|
||
->where('user_id', $user->id)
|
||
->where('status', 0)
|
||
->find();
|
||
|
||
if (!$record) {
|
||
$this->error('没有待审核的注销申请');
|
||
}
|
||
|
||
$result = db('user_deletion')
|
||
->where('id', $record['id'])
|
||
->update([
|
||
'status' => 2,
|
||
'admin_remark' => '用户主动取消',
|
||
'updatetime' => time(),
|
||
]);
|
||
|
||
if ($result) {
|
||
$this->success('注销申请已取消');
|
||
} else {
|
||
$this->error('取消失败，请稍后再试');
|
||
}
|
||
}
|
||
|
||
/**
|
||
* @name 账号状态查询(应用外)
|
||
* @desc 无需登录的公开账号状态查询，满足GooglePlay应用外删除账号要求
|
||
* 返回5种状态: normal(正常)/blocked(封锁)/deleting(注销中)/deleted(已注销)/no_record(无记录)
|
||
* 使用回执验证(action=account_lookup, payload=account)防止账号枚举攻击
|
||
* @lastUpdate v10.3.0 新增 - 满足GooglePlay应用外账户管理要求
|
||
*/
|
||
public function accountLookup()
|
||
{
|
||
$this->checkRateLimit('accountLookup');
|
||
$account = $this->request->post('account', '', 'trim');
|
||
|
||
if (!$account) {
|
||
$this->error('账号不能为空');
|
||
}
|
||
$this->validateLength($account, '账号', 2, 100);
|
||
$this->detectMaliciousInput($account);
|
||
|
||
// 回执验证 - 防止账号枚举
|
||
$this->verifyReceipt('account_lookup', $account);
|
||
|
||
// 自动识别账号类型: 邮箱/手机号/用户名
|
||
$isEmail = filter_var($account, FILTER_VALIDATE_EMAIL) !== false;
|
||
$isMobile = preg_match('/^1[3-9]\d{9}$/', $account);
|
||
|
||
// 1. 查询user表
|
||
$userQuery = db('user');
|
||
if ($isEmail) {
|
||
$userQuery->where('email', $account);
|
||
} elseif ($isMobile) {
|
||
$userQuery->where('mobile', $account);
|
||
} else {
|
||
$userQuery->where('username', $account);
|
||
}
|
||
$user = $userQuery->find();
|
||
|
||
$statusMap = [
|
||
'normal' => '正常',
|
||
'blocked' => '封锁',
|
||
'deleting' => '注销中',
|
||
'deleted' => '已注销',
|
||
'no_record'=> '无记录',
|
||
];
|
||
|
||
// 2. 用户存在 - 检查是否在注销流程中
|
||
// 注意: 返回nickname(昵称)而非username(账号)，保护隐私
|
||
$nickname = isset($user['nickname']) && $user['nickname'] ? $user['nickname'] : '';
|
||
// 若昵称为空，使用username首尾字符+星号脱敏 (如 w***u)
|
||
$displayNickname = $nickname;
|
||
if (!$displayNickname && isset($user['username']) && $user['username']) {
|
||
$uname = $user['username'];
|
||
$len = mb_strlen($uname);
|
||
if ($len <= 2) {
|
||
$displayNickname = $uname[0] . '*';
|
||
} else {
|
||
$displayNickname = $uname[0] . str_repeat('*', min($len - 2, 5)) . $uname[$len - 1];
|
||
}
|
||
}
|
||
|
||
if ($user) {
|
||
$deletion = db('user_deletion')
|
||
->where('user_id', $user['id'])
|
||
->order('createtime desc')
|
||
->find();
|
||
|
||
if ($deletion) {
|
||
// 注销中(待审核)
|
||
if ($deletion['status'] == 0) {
|
||
$remain = $deletion['auto_delete_time'] - time();
|
||
$days = floor(max(0, $remain) / 86400);
|
||
$hours = floor(max(0, $remain) % 86400 / 3600);
|
||
$this->success('查询成功', [
|
||
'status' => 'deleting',
|
||
'status_text' => $statusMap['deleting'],
|
||
'nickname' => $displayNickname,
|
||
'has_pending_deletion' => true,
|
||
'auto_delete_time' => $deletion['auto_delete_time'],
|
||
'auto_delete_time_text' => date('Y-m-d H:i:s', $deletion['auto_delete_time']),
|
||
'countdown' => $remain > 0 ? "{$days}天{$hours}小时后自动注销" : '即将自动注销',
|
||
'createtime_text' => date('Y-m-d H:i:s', $deletion['createtime']),
|
||
'can_cancel' => true,
|
||
]);
|
||
}
|
||
// 已通过/已自动注销 - 但用户记录还在(理论上不应发生)
|
||
if (in_array($deletion['status'], [1, 3])) {
|
||
$this->success('查询成功', [
|
||
'status' => 'deleted',
|
||
'status_text' => $statusMap['deleted'],
|
||
'nickname' => $displayNickname,
|
||
'has_pending_deletion' => false,
|
||
'deletetime_text' => $deletion['deletetime'] ? date('Y-m-d H:i:s', $deletion['deletetime']) : date('Y-m-d H:i:s', $deletion['updatetime']),
|
||
]);
|
||
}
|
||
}
|
||
|
||
// 检查用户状态: normal/hidden
|
||
$userStatus = isset($user['status']) ? $user['status'] : 'normal';
|
||
if ($userStatus === 'hidden') {
|
||
$this->success('查询成功', [
|
||
'status' => 'blocked',
|
||
'status_text' => $statusMap['blocked'],
|
||
'nickname' => $displayNickname,
|
||
'has_pending_deletion' => false,
|
||
]);
|
||
}
|
||
|
||
$this->success('查询成功', [
|
||
'status' => 'normal',
|
||
'status_text' => $statusMap['normal'],
|
||
'nickname' => $displayNickname,
|
||
'has_pending_deletion' => false,
|
||
]);
|
||
}
|
||
|
||
// 3. 用户不存在 - 查询user_deletion表(可能已注销)
|
||
$deletionQuery = db('user_deletion');
|
||
if ($isEmail) {
|
||
// user_deletion表只存username, 邮箱无法直接匹配
|
||
$deletion = null;
|
||
} elseif ($isMobile) {
|
||
$deletion = null;
|
||
} else {
|
||
$deletion = $deletionQuery->where('username', $account)
|
||
->order('createtime desc')
|
||
->find();
|
||
}
|
||
|
||
if ($deletion) {
|
||
// 注销中(用户已无法登录但记录还在等待审核)
|
||
if ($deletion['status'] == 0) {
|
||
$remain = $deletion['auto_delete_time'] - time();
|
||
$days = floor(max(0, $remain) / 86400);
|
||
$hours = floor(max(0, $remain) % 86400 / 3600);
|
||
$this->success('查询成功', [
|
||
'status' => 'deleting',
|
||
'status_text' => $statusMap['deleting'],
|
||
'has_pending_deletion' => true,
|
||
'auto_delete_time_text' => date('Y-m-d H:i:s', $deletion['auto_delete_time']),
|
||
'countdown' => $remain > 0 ? "{$days}天{$hours}小时后自动注销" : '即将自动注销',
|
||
'can_cancel' => false,
|
||
]);
|
||
}
|
||
// 已注销
|
||
if (in_array($deletion['status'], [1, 3])) {
|
||
$this->success('查询成功', [
|
||
'status' => 'deleted',
|
||
'status_text' => $statusMap['deleted'],
|
||
'has_pending_deletion' => false,
|
||
'deletetime_text' => $deletion['deletetime'] ? date('Y-m-d H:i:s', $deletion['deletetime']) : date('Y-m-d H:i:s', $deletion['updatetime']),
|
||
]);
|
||
}
|
||
}
|
||
|
||
// 4. 真正无记录
|
||
$this->success('查询成功', [
|
||
'status' => 'no_record',
|
||
'status_text' => $statusMap['no_record'],
|
||
'has_pending_deletion' => false,
|
||
]);
|
||
}
|
||
|
||
/**
|
||
* @name 取消二维码
|
||
* @desc 取消二维码登录
|
||
* @lastUpdate v9.0.0 新增
|
||
*/
|
||
public function qrcodeCancel()
|
||
{
|
||
$code = $this->request->post('code', '', 'trim');
|
||
if (!$code) {
|
||
$this->error('code必填');
|
||
}
|
||
|
||
$qr = db('qrcode_login')->where('code', $code)->find();
|
||
if (!$qr) {
|
||
$this->error('二维码不存在');
|
||
}
|
||
|
||
db('qrcode_login')->where('code', $code)->update(['status' => 'cancelled', 'updatetime' => time()]);
|
||
|
||
$this->_notifyWsRelay($code, 'cancelled');
|
||
|
||
$this->success('已取消');
|
||
}
|
||
|
||
/**
|
||
* @name 记录登录设备
|
||
* @desc 登录成功后记录设备信息到user_device表
|
||
* @lastUpdate v9.0.0 新增
|
||
*/
|
||
private function recordLoginDevice($userId)
|
||
{
|
||
$deviceName = $this->request->post('device_name', '', 'trim');
|
||
$deviceModel = $this->request->post('device_model', '', 'trim');
|
||
$platform = $this->request->post('platform', '', 'trim');
|
||
$appName = $this->request->post('app_name', '', 'trim');
|
||
$deviceId = $this->request->post('device_id', '', 'trim');
|
||
$userAgent = $this->request->header('user-agent', '');
|
||
$ip = $this->request->ip();
|
||
$now = time();
|
||
|
||
$ipLocation = $this->queryIpLocation($ip);
|
||
|
||
if ($deviceId) {
|
||
$exists = db('user_device')->where('user_id', $userId)->where('device_id', $deviceId)->find();
|
||
if ($exists) {
|
||
$updateData = [
|
||
'device_name' => $deviceName ?: $exists['device_name'],
|
||
'device_model' => $deviceModel ?: $exists['device_model'],
|
||
'platform' => $platform ?: $exists['platform'],
|
||
'app_name' => $appName ?: $exists['app_name'],
|
||
'ip' => $ip,
|
||
'last_active_time' => $now,
|
||
'is_online' => 1,
|
||
'user_agent' => substr($userAgent, 0, 500),
|
||
'updatetime' => $now,
|
||
];
|
||
if ($ipLocation) {
|
||
if (!empty($ipLocation['city'])) $updateData['ip_city'] = $ipLocation['city'];
|
||
if (!empty($ipLocation['fw'])) $updateData['ip_range'] = $ipLocation['fw'];
|
||
}
|
||
db('user_device')->where('id', $exists['id'])->update($updateData);
|
||
return;
|
||
}
|
||
}
|
||
|
||
$insertData = [
|
||
'user_id' => $userId,
|
||
'device_name' => $deviceName,
|
||
'device_model' => $deviceModel,
|
||
'platform' => $platform,
|
||
'app_name' => $appName,
|
||
'ip' => $ip,
|
||
'device_id' => $deviceId ?: md5($userId . $ip . $userAgent . $now),
|
||
'last_active_time' => $now,
|
||
'is_online' => 1,
|
||
'user_agent' => substr($userAgent, 0, 500),
|
||
'createtime' => $now,
|
||
'updatetime' => $now,
|
||
];
|
||
if ($ipLocation) {
|
||
if (!empty($ipLocation['city'])) $insertData['ip_city'] = $ipLocation['city'];
|
||
if (!empty($ipLocation['fw'])) $insertData['ip_range'] = $ipLocation['fw'];
|
||
}
|
||
db('user_device')->insert($insertData);
|
||
}
|
||
|
||
/**
|
||
* @name 查询IP归属地
|
||
* @desc 使用纯真IP数据库查询IP归属地，返回city和fw
|
||
* @lastUpdate v9.2.0 新增，解决登录时ip_city为空问题
|
||
*/
|
||
private function queryIpLocation($ip)
|
||
{
|
||
if (!$ip || $ip === '127.0.0.1' || $ip === '0.0.0.0') {
|
||
return null;
|
||
}
|
||
try {
|
||
$ips = new \Net\Ips('./qqwry.dat');
|
||
$resolved = gethostbyname($ip);
|
||
if (!$resolved || $resolved === $ip) {
|
||
$resolved = $ip;
|
||
}
|
||
$fwq = $ips->Getlocation($resolved);
|
||
$city = strToUTF8($fwq['country'] . ' ' . $fwq['area']);
|
||
$fw = '';
|
||
$domain = preg_replace('/(\d+)\..*/', '\\1', $resolved);
|
||
if ('1' <= $domain && $domain <= '126') {
|
||
$fw = '1.0.0.1 - 126.155.255.254';
|
||
} elseif ('128' <= $domain && $domain <= '191') {
|
||
$fw = '128.0.0.1 - 191.255.255.254';
|
||
} elseif ('192' <= $domain && $domain <= '223') {
|
||
$fw = '192.0.0.1 - 223.255.255.254';
|
||
}
|
||
return ['city' => $city, 'fw' => $fw];
|
||
} catch (\Exception $e) {
|
||
return null;
|
||
}
|
||
}
|
||
|
||
/**
|
||
* @name 更新在线状态
|
||
* @desc 更新用户最后活跃时间和在线状态
|
||
* @lastUpdate v9.0.0 新增
|
||
*/
|
||
private function updateOnlineStatus($userId)
|
||
{
|
||
db('user')->where('id', $userId)->update([
|
||
'last_active_time' => time(),
|
||
'is_online' => 1,
|
||
]);
|
||
}
|
||
|
||
/**
|
||
* @name 通知WebSocket中继服务器
|
||
* @desc 二维码状态变更时，通过HTTP通知WebSocket中继服务器推送更新
|
||
* @lastUpdate v10.4.0 新增
|
||
*/
|
||
private function _notifyWsRelay($code, $status, $token = '')
|
||
{
|
||
try {
|
||
$wsRelayUrl = Config::get('qrcode_ws_relay_url') ?: 'http://127.0.0.1:9444';
|
||
$data = json_encode([
|
||
'code' => $code,
|
||
'status' => $status,
|
||
]);
|
||
if ($token) {
|
||
$data = json_encode([
|
||
'code' => $code,
|
||
'status' => $status,
|
||
'token' => $token,
|
||
]);
|
||
}
|
||
|
||
$ch = curl_init();
|
||
curl_setopt_array($ch, [
|
||
CURLOPT_URL => $wsRelayUrl . '/notify',
|
||
CURLOPT_POST => true,
|
||
CURLOPT_POSTFIELDS => $data,
|
||
CURLOPT_HTTPHEADER => ['Content-Type: application/json'],
|
||
CURLOPT_RETURNTRANSFER => true,
|
||
CURLOPT_TIMEOUT => 2,
|
||
CURLOPT_CONNECTTIMEOUT => 1,
|
||
]);
|
||
curl_exec($ch);
|
||
curl_close($ch);
|
||
} catch (\Exception $e) {
|
||
// 静默失败，不影响主流程
|
||
}
|
||
}
|
||
|
||
// ================================================================
|
||
// 隐私权管理增强 API (v10.3.1)
|
||
// ================================================================
|
||
|
||
/**
|
||
* @name 获取用户隐私偏好设置
|
||
* @desc 查询用户对各类数据处理的同意状态
|
||
* @lastUpdate v10.3.1 新增
|
||
*/
|
||
public function getConsents()
|
||
{
|
||
$this->checkRateLimit('deletionStatus');
|
||
$user = $this->auth->getUser();
|
||
|
||
$consentTypes = ['analytics', 'marketing', 'personalization', 'third_party_share'];
|
||
$defaults = ['analytics' => 1, 'marketing' => 1, 'personalization' => 1, 'third_party_share' => 0];
|
||
|
||
$records = db('user_consents')->where('user_id', $user->id)->select();
|
||
$map = [];
|
||
foreach ($records as $r) {
|
||
$map[$r['consent_type']] = intval($r['consent_value']);
|
||
}
|
||
|
||
$result = [];
|
||
foreach ($consentTypes as $type) {
|
||
$result[] = [
|
||
'type' => $type,
|
||
'value' => isset($map[$type]) ? $map[$type] : $defaults[$type],
|
||
'default' => $defaults[$type],
|
||
];
|
||
}
|
||
|
||
$this->success('', ['consents' => $result]);
|
||
}
|
||
|
||
/**
|
||
* @name 更新用户隐私偏好设置
|
||
* @desc 批量更新用户对各类数据处理的同意状态
|
||
* @lastUpdate v10.3.1 新增
|
||
*/
|
||
public function updateConsents()
|
||
{
|
||
$this->checkRateLimit('changeemail');
|
||
$user = $this->auth->getUser();
|
||
|
||
$consentsJson = $this->request->post('consents', '', 'trim');
|
||
if (!$consentsJson) {
|
||
$this->error('参数不能为空');
|
||
}
|
||
|
||
$consents = json_decode($consentsJson, true);
|
||
if (!is_array($consents)) {
|
||
$this->error('参数格式错误');
|
||
}
|
||
|
||
$allowedTypes = ['analytics', 'marketing', 'personalization', 'third_party_share'];
|
||
$now = time();
|
||
$ip = $this->request->ip();
|
||
$updated = 0;
|
||
|
||
foreach ($consents as $item) {
|
||
if (!isset($item['type']) || !in_array($item['type'], $allowedTypes)) {
|
||
continue;
|
||
}
|
||
$value = isset($item['value']) ? (intval($item['value']) ? 1 : 0) : 1;
|
||
|
||
$exists = db('user_consents')
|
||
->where('user_id', $user->id)
|
||
->where('consent_type', $item['type'])
|
||
->find();
|
||
|
||
if ($exists) {
|
||
db('user_consents')->where('id', $exists['id'])->update([
|
||
'consent_value' => $value,
|
||
'consent_source' => 'web',
|
||
'ip' => $ip,
|
||
'updatetime' => $now,
|
||
]);
|
||
} else {
|
||
db('user_consents')->insert([
|
||
'user_id' => $user->id,
|
||
'consent_type' => $item['type'],
|
||
'consent_value' => $value,
|
||
'consent_source'=> 'web',
|
||
'ip' => $ip,
|
||
'createtime' => $now,
|
||
'updatetime' => $now,
|
||
]);
|
||
}
|
||
$updated++;
|
||
}
|
||
|
||
$this->success("已更新 {$updated} 项隐私偏好设置");
|
||
}
|
||
|
||
/**
|
||
* @name 获取用户登录设备列表
|
||
* @desc 查询用户所有登录设备，含最后活跃时间和位置
|
||
* @lastUpdate v10.3.1 新增
|
||
*/
|
||
public function listDevices()
|
||
{
|
||
$this->checkRateLimit('deletionStatus');
|
||
$user = $this->auth->getUser();
|
||
|
||
$devices = db('user_device')
|
||
->where('user_id', $user->id)
|
||
->order('last_active_time desc')
|
||
->limit(20)
|
||
->select();
|
||
|
||
$result = [];
|
||
foreach ($devices as &$d) {
|
||
$d['last_active_text'] = $d['last_active_time'] ? date('Y-m-d H:i:s', $d['last_active_time']) : '-';
|
||
$d['is_current'] = ($d['ip'] === $this->request->ip()) ? 1 : 0;
|
||
$d['is_online_text'] = $d['is_online'] ? '在线' : '离线';
|
||
$result[] = [
|
||
'id' => $d['id'],
|
||
'device_name' => $d['device_name'] ?: '未知设备',
|
||
'device_model' => $d['device_model'] ?: '',
|
||
'platform' => $d['platform'] ?: '',
|
||
'app_name' => $d['app_name'] ?: '',
|
||
'ip' => $d['ip'] ?: '',
|
||
'ip_city' => $d['ip_city'] ?? '',
|
||
'device_id' => $d['device_id'] ?: '',
|
||
'last_active_time'=> $d['last_active_text'],
|
||
'is_online' => $d['is_online'],
|
||
'is_online_text' => $d['is_online_text'],
|
||
'is_current' => $d['is_current'],
|
||
];
|
||
}
|
||
|
||
$this->success('', ['devices' => $result, 'total' => count($result)]);
|
||
}
|
||
|
||
/**
|
||
* @name 远程登出设备
|
||
* @desc 撤销指定设备的登录状态，清除该设备的Token
|
||
* @lastUpdate v10.3.1 新增
|
||
*/
|
||
public function revokeDevice()
|
||
{
|
||
$this->checkRateLimit('cancelDeletion');
|
||
$user = $this->auth->getUser();
|
||
|
||
$deviceId = $this->request->post('device_id', '', 'trim');
|
||
$deviceDbId = $this->request->post('id', 0, 'intval');
|
||
|
||
if (!$deviceId && !$deviceDbId) {
|
||
$this->error('参数错误');
|
||
}
|
||
|
||
$query = db('user_device')->where('user_id', $user->id);
|
||
if ($deviceDbId) {
|
||
$query->where('id', $deviceDbId);
|
||
} else {
|
||
$query->where('device_id', $deviceId);
|
||
}
|
||
|
||
$device = $query->find();
|
||
if (!$device) {
|
||
$this->error('设备不存在');
|
||
}
|
||
|
||
// 标记设备为离线
|
||
db('user_device')->where('id', $device['id'])->update([
|
||
'is_online' => 0,
|
||
'updatetime' => time(),
|
||
]);
|
||
|
||
// 删除该设备关联的Token
|
||
try {
|
||
db('user_token')
|
||
->where('user_id', $user->id)
|
||
->whereLike('token', '%' . substr($device['device_id'] ?? '', 0, 8) . '%')
|
||
->delete();
|
||
} catch (\Exception $e) {}
|
||
|
||
$this->success('设备已登出');
|
||
}
|
||
|
||
/**
|
||
* @name 查询注销数据删除进度
|
||
* @desc 返回注销过程中各类数据的删除状态
|
||
* @lastUpdate v10.3.1 新增
|
||
*/
|
||
public function deletionProgress()
|
||
{
|
||
$this->checkRateLimit('deletionStatus');
|
||
$user = $this->auth->getUser();
|
||
|
||
$record = db('user_deletion')
|
||
->where('user_id', $user->id)
|
||
->order('createtime desc')
|
||
->find();
|
||
|
||
if (!$record) {
|
||
$this->success('', ['has_record' => false]);
|
||
}
|
||
|
||
$progress = [];
|
||
if (!empty($record['deletion_progress'])) {
|
||
$progress = json_decode($record['deletion_progress'], true) ?: [];
|
||
}
|
||
|
||
// 如果没有进度记录但状态已是已完成，生成默认进度
|
||
if (empty($progress) && in_array($record['status'], [1, 3])) {
|
||
$progress = [
|
||
['table' => 'user', 'name' => '账号主数据', 'status' => 'done'],
|
||
['table' => 'user_token', 'name' => '登录凭证', 'status' => 'done'],
|
||
['table' => 'user_device', 'name' => '设备记录', 'status' => 'done'],
|
||
['table' => 'user_favorite', 'name' => '收藏数据', 'status' => 'done'],
|
||
['table' => 'user_note', 'name' => '笔记数据', 'status' => 'done'],
|
||
['table' => 'user_signin', 'name' => '签到记录', 'status' => 'done'],
|
||
['table' => 'user_score_log', 'name' => '积分流水', 'status' => 'done'],
|
||
['table' => 'article', 'name' => '文章数据', 'status' => 'done'],
|
||
];
|
||
} elseif (empty($progress) && $record['status'] == 0) {
|
||
$progress = [
|
||
['table' => 'user', 'name' => '账号主数据', 'status' => 'pending'],
|
||
['table' => 'user_token', 'name' => '登录凭证', 'status' => 'pending'],
|
||
['table' => 'user_device', 'name' => '设备记录', 'status' => 'pending'],
|
||
['table' => 'user_favorite', 'name' => '收藏数据', 'status' => 'pending'],
|
||
['table' => 'user_note', 'name' => '笔记数据', 'status' => 'pending'],
|
||
['table' => 'user_signin', 'name' => '签到记录', 'status' => 'pending'],
|
||
['table' => 'user_score_log', 'name' => '积分流水', 'status' => 'pending'],
|
||
['table' => 'article', 'name' => '文章数据', 'status' => 'pending'],
|
||
];
|
||
}
|
||
|
||
$total = count($progress);
|
||
$done = count(array_filter($progress, function($p) { return ($p['status'] ?? '') === 'done'; }));
|
||
$percentage = $total > 0 ? round($done / $total * 100) : 0;
|
||
|
||
$statusMap = [0 => '待审核', 1 => '已通过(已注销)', 2 => '已拒绝', 3 => '已自动注销'];
|
||
|
||
$this->success('', [
|
||
'has_record' => true,
|
||
'status' => $record['status'],
|
||
'status_text' => $statusMap[$record['status']] ?? '未知',
|
||
'progress' => $progress,
|
||
'percentage' => $percentage,
|
||
'done_count' => $done,
|
||
'total_count' => $total,
|
||
'summary' => $record['deletion_summary'] ?? '',
|
||
'createtime_text' => date('Y-m-d H:i:s', $record['createtime']),
|
||
'deletetime_text' => $record['deletetime'] ? date('Y-m-d H:i:s', $record['deletetime']) : null,
|
||
]);
|
||
}
|
||
|
||
/**
|
||
* @name 计算年龄
|
||
* @desc 根据出生日期(YYYY-MM-DD)计算当前周岁年龄
|
||
* @lastUpdate v10.3.1 新增 (feat6)
|
||
* @param string $birthday 出生日期 YYYY-MM-DD
|
||
* @return array ['valid' => bool, 'age' => int]
|
||
*/
|
||
private function calculateAge($birthday)
|
||
{
|
||
if (!preg_match('/^(\d{4})-(\d{2})-(\d{2})$/', $birthday, $m)) {
|
||
return ['valid' => false, 'age' => 0];
|
||
}
|
||
$year = intval($m[1]);
|
||
$month = intval($m[2]);
|
||
$day = intval($m[3]);
|
||
if (!checkdate($month, $day, $year)) {
|
||
return ['valid' => false, 'age' => 0];
|
||
}
|
||
$now = getdate();
|
||
$age = $now['year'] - $year;
|
||
if ($now['mon'] < $month || ($now['mon'] == $month && $now['mday'] < $day)) {
|
||
$age--;
|
||
}
|
||
return ['valid' => true, 'age' => $age];
|
||
}
|
||
|
||
/**
|
||
* @name 查询家长控制状态
|
||
* @desc 返回当前用户的未成年状态、年龄、家长控制配置(COPPA/GDPR-K合规)
|
||
* @lastUpdate v10.3.1 新增 (feat6)
|
||
*/
|
||
public function parentalControlStatus()
|
||
{
|
||
$user = $this->auth->getUser();
|
||
$userRow = db('user')->where('id', $user->id)->find();
|
||
|
||
$birthday = $userRow['birthday'] ?? '';
|
||
$isMinor = intval($userRow['is_minor'] ?? 0);
|
||
$age = null;
|
||
if ($birthday) {
|
||
$ageData = $this->calculateAge($birthday);
|
||
if ($ageData['valid']) {
|
||
$age = $ageData['age'];
|
||
// 自动更新is_minor状态(若已成年需同步)
|
||
$newIsMinor = ($age < 18) ? 1 : 0;
|
||
if ($newIsMinor !== $isMinor) {
|
||
try {
|
||
db('user')->where('id', $user->id)->update(['is_minor' => $newIsMinor]);
|
||
$isMinor = $newIsMinor;
|
||
} catch (\Exception $e) {}
|
||
}
|
||
}
|
||
}
|
||
|
||
// 家长控制配置(默认值，后续可扩展为独立表存储)
|
||
$parentalConfig = [
|
||
'daily_limit_minutes' => $isMinor ? 120 : 0, // 未成年每日120分钟，成年无限制
|
||
'content_filter_level' => $isMinor ? 'strict' : 'off', // 内容过滤级别
|
||
'night_mode_enabled' => $isMinor ? true : false, // 夜间模式(22:00-06:00禁用)
|
||
'purchase_blocked' => $isMinor ? true : false, // 禁止消费
|
||
];
|
||
|
||
$this->success('', [
|
||
'has_birthday' => !empty($birthday),
|
||
'birthday' => $birthday,
|
||
'age' => $age,
|
||
'is_minor' => $isMinor,
|
||
'is_adult' => $isMinor ? 0 : 1,
|
||
'parental_control' => $parentalConfig,
|
||
'policy' => [
|
||
'min_age' => 14,
|
||
'adult_age' => 18,
|
||
'consent_age' => 16, // GDPR-K家长同意年龄
|
||
'description' => '14岁以下禁止注册，14-17岁需家长同意，18岁及以上为完全民事行为能力人',
|
||
],
|
||
]);
|
||
}
|
||
|
||
/**
|
||
* @name 更新出生日期
|
||
* @desc 已注册用户补充出生日期信息，自动更新未成年状态
|
||
* @lastUpdate v10.3.1 新增 (feat6)
|
||
*/
|
||
public function updateBirthday()
|
||
{
|
||
$this->checkRateLimit('changeemail');
|
||
$user = $this->auth->getUser();
|
||
$birthday = $this->request->post('birthday', '', 'trim');
|
||
|
||
if (!$birthday) {
|
||
$this->error('出生日期不能为空');
|
||
}
|
||
$ageData = $this->calculateAge($birthday);
|
||
if (!$ageData['valid']) {
|
||
$this->error('出生日期格式无效，应为 YYYY-MM-DD');
|
||
}
|
||
if ($ageData['age'] < 0 || $ageData['age'] > 120) {
|
||
$this->error('出生日期不合理');
|
||
}
|
||
if ($ageData['age'] < 14) {
|
||
$this->error('根据COPPA/GDPR-K要求，14岁以下用户不得使用本服务');
|
||
}
|
||
|
||
$isMinor = ($ageData['age'] < 18) ? 1 : 0;
|
||
try {
|
||
db('user')->where('id', $user->id)->update([
|
||
'birthday' => $birthday,
|
||
'is_minor' => $isMinor,
|
||
'updatetime'=> time(),
|
||
]);
|
||
} catch (\Exception $e) {
|
||
$this->error('保存失败，可能未执行数据库迁移: ' . $e->getMessage());
|
||
}
|
||
|
||
$this->success('出生日期已更新', [
|
||
'birthday' => $birthday,
|
||
'age' => $ageData['age'],
|
||
'is_minor' => $isMinor,
|
||
]);
|
||
}
|
||
|
||
// ============================================================
|
||
// v10.3.2 新增功能
|
||
// ============================================================
|
||
|
||
/**
|
||
* @name SMTP配置状态检测
|
||
* @desc 检测服务器SMTP邮件配置是否完整可用(不暴露敏感信息)
|
||
* @lastUpdate v10.3.2 新增
|
||
*/
|
||
public function checkSmtpStatus()
|
||
{
|
||
$this->checkRateLimit('checkSmtpStatus');
|
||
$site = Config::get('site') ?: [];
|
||
|
||
// 检查必要配置项
|
||
$host = isset($site['mail_smtp_host']) ? $site['mail_smtp_host'] : '';
|
||
$port = isset($site['mail_smtp_port']) ? $site['mail_smtp_port'] : '';
|
||
$user = isset($site['mail_smtp_user']) ? $site['mail_smtp_user'] : '';
|
||
$pass = isset($site['mail_smtp_pass']) ? $site['mail_smtp_pass'] : '';
|
||
$from = isset($site['mail_from']) ? $site['mail_from'] : '';
|
||
$mailType = isset($site['mail_type']) ? intval($site['mail_type']) : 0;
|
||
$verifyType = isset($site['mail_verify_type']) ? intval($site['mail_verify_type']) : 0;
|
||
|
||
$missing = [];
|
||
if (!$host) $missing[] = 'SMTP主机';
|
||
if (!$port) $missing[] = 'SMTP端口';
|
||
if (!$user) $missing[] = 'SMTP用户名';
|
||
if (!$pass) $missing[] = 'SMTP密码';
|
||
if (!$from) $missing[] = '发件邮箱';
|
||
if ($mailType == 0) $missing[] = '邮件功能未开启(mail_type=0)';
|
||
|
||
$isConfigured = empty($missing);
|
||
$secureMap = [0 => '无加密', 1 => 'TLS', 2 => 'SSL'];
|
||
$secure = $secureMap[$verifyType] ?? '未知';
|
||
|
||
// 尝试TCP连接检测(不发送邮件,只检测端口可达性)
|
||
$portReachable = false;
|
||
$connectError = '';
|
||
if ($isConfigured && $host && $port) {
|
||
// 使用fsockopen非阻塞检测
|
||
$fp = @fsockopen($host, intval($port), $errno, $errstr, 3);
|
||
if ($fp) {
|
||
$portReachable = true;
|
||
fclose($fp);
|
||
} else {
|
||
$connectError = $errstr ?: '连接超时';
|
||
}
|
||
}
|
||
|
||
$this->success('', [
|
||
'is_configured' => $isConfigured,
|
||
'is_enabled' => $mailType != 0,
|
||
'host' => $host ?: '(未配置)',
|
||
'port' => $port ?: '(未配置)',
|
||
'secure' => $secure,
|
||
'from_email' => $from ?: '(未配置)',
|
||
// 不返回密码等敏感信息
|
||
'has_password' => !empty($pass),
|
||
'has_username' => !empty($user),
|
||
'port_reachable' => $portReachable,
|
||
'connect_error' => $connectError,
|
||
'missing_items' => $missing,
|
||
'summary' => $isConfigured
|
||
? ($portReachable ? '✅ SMTP配置完整且端口可达' : '⚠️ SMTP配置完整但端口不可达: ' . $connectError)
|
||
: '❌ SMTP配置不完整, 缺失: ' . implode(', ', $missing),
|
||
]);
|
||
}
|
||
|
||
/**
|
||
* @name 密保问题登录
|
||
* @desc 用户通过账号+密保问题+答案登录(无需密码)
|
||
* @lastUpdate v10.3.2 新增 (支持忘记密码场景)
|
||
*/
|
||
public function secQuestionLogin()
|
||
{
|
||
$this->checkRateLimit('secQuestionLogin');
|
||
$account = $this->request->post('account', '', 'trim');
|
||
$secAnswer = $this->request->post('sec_answer', '', 'trim');
|
||
|
||
if (!$account || !$secAnswer) {
|
||
$this->error('账号和密保答案不能为空');
|
||
}
|
||
$this->validateLength($account, '账号', 2, 100);
|
||
$this->validateLength($secAnswer, '密保答案', 1, 100);
|
||
$this->detectMaliciousInput($account);
|
||
|
||
// 查找用户
|
||
$user = $this->findUserByAccount($account);
|
||
if (!$user) {
|
||
$this->error(__('User not found'));
|
||
}
|
||
if ($user->status != 'normal') {
|
||
$this->error(__('Account is locked'));
|
||
}
|
||
|
||
// 验证密保答案
|
||
if (empty($user->sec_question) || empty($user->sec_answer)) {
|
||
$this->error('该用户未设置密保问题,无法使用此登录方式');
|
||
}
|
||
$inputHash = $this->hashSecAnswer($secAnswer);
|
||
if ($inputHash !== $user->sec_answer) {
|
||
$this->error('密保答案不正确');
|
||
}
|
||
|
||
$ret = $this->auth->direct($user->id);
|
||
if ($ret) {
|
||
$this->recordLoginDevice($user->id);
|
||
$this->updateOnlineStatus($user->id);
|
||
$token = $this->auth->getToken();
|
||
$data = ['userinfo' => $this->auth->getUserinfo(), 'token' => $token];
|
||
$this->success(__('Logged in successful'), $data);
|
||
} else {
|
||
$this->error($this->auth->getError());
|
||
}
|
||
}
|
||
|
||
/**
|
||
* @name 邮件验证码登录
|
||
* @desc 用户通过邮箱+验证码登录(无需密码),未注册自动创建账号
|
||
* @lastUpdate v10.3.2 新增
|
||
*/
|
||
public function emailCodeLogin()
|
||
{
|
||
$this->checkRateLimit('emailCodeLogin');
|
||
$email = $this->request->post('email', '', 'trim');
|
||
$captcha = $this->request->post('captcha', '', 'trim');
|
||
|
||
if (!$email || !$captcha) {
|
||
$this->error('邮箱和验证码不能为空');
|
||
}
|
||
if (!filter_var($email, FILTER_VALIDATE_EMAIL)) {
|
||
$this->error('邮箱格式不正确');
|
||
}
|
||
$this->validateLength($captcha, '验证码', 4, 8);
|
||
|
||
// 校验验证码
|
||
if (self::$testMode && $captcha === '888888') {
|
||
$verified = true;
|
||
} else {
|
||
$verified = false;
|
||
try {
|
||
$verified = Ems::check($email, $captcha, 'emaillogin');
|
||
} catch (\Exception $e) {
|
||
$this->error('验证码服务暂不可用');
|
||
}
|
||
}
|
||
if (!$verified) {
|
||
$this->error('验证码不正确或已过期');
|
||
}
|
||
|
||
$user = \app\common\model\User::getByEmail($email);
|
||
if ($user) {
|
||
if ($user->status != 'normal') {
|
||
$this->error(__('Account is locked'));
|
||
}
|
||
$ret = $this->auth->direct($user->id);
|
||
} else {
|
||
// 邮箱未注册 - 自动注册
|
||
$username = 'user_' . substr(md5($email . time()), 0, 10);
|
||
$ret = $this->auth->register($username, Random::alnum(10), $email, '', []);
|
||
}
|
||
if ($ret) {
|
||
try { Ems::flush($email, 'emaillogin'); } catch (\Exception $e) {}
|
||
$this->recordLoginDevice($this->auth->id);
|
||
$this->updateOnlineStatus($this->auth->id);
|
||
$token = $this->auth->getToken();
|
||
$data = ['userinfo' => $this->auth->getUserinfo(), 'token' => $token];
|
||
$this->success(__('Logged in successful'), $data);
|
||
} else {
|
||
$this->error($this->auth->getError());
|
||
}
|
||
}
|
||
|
||
/**
|
||
* @name 发送注销回执码(忘记密码注销)
|
||
* @desc 用户填写账号+邮箱/密保答案验证身份后,系统生成注销回执码发送到注册邮箱
|
||
* 用户凭回执码可提交注销(无需登录),用于忘记密码场景
|
||
* @lastUpdate v10.3.2 新增
|
||
*/
|
||
public function sendDeletionCode()
|
||
{
|
||
$this->checkRateLimit('sendDeletionCode');
|
||
$account = $this->request->post('account', '', 'trim');
|
||
$verifyMethod = $this->request->post('verify_method', 'email', 'trim'); // email/sec_question
|
||
$emailInput = $this->request->post('email', '', 'trim');
|
||
$secAnswer = $this->request->post('sec_answer', '', 'trim');
|
||
|
||
if (!$account) {
|
||
$this->error('账号不能为空');
|
||
}
|
||
$this->validateLength($account, '账号', 2, 100);
|
||
$this->detectMaliciousInput($account);
|
||
|
||
$user = $this->findUserByAccount($account);
|
||
if (!$user) {
|
||
$this->error(__('User not found'));
|
||
}
|
||
|
||
// 验证身份
|
||
$userEmail = $user->email ?: '';
|
||
if ($verifyMethod === 'email') {
|
||
// 邮箱验证: 用户填写的邮箱必须与注册邮箱一致
|
||
if (!$emailInput) {
|
||
$this->error('请填写注册邮箱');
|
||
}
|
||
if (strtolower($emailInput) !== strtolower($userEmail)) {
|
||
$this->error('邮箱与账号不匹配');
|
||
}
|
||
} elseif ($verifyMethod === 'sec_question') {
|
||
// 密保验证: 校验密保答案
|
||
if (!$secAnswer) {
|
||
$this->error('请填写密保答案');
|
||
}
|
||
if (empty($user->sec_question) || empty($user->sec_answer)) {
|
||
$this->error('该用户未设置密保问题');
|
||
}
|
||
if ($this->hashSecAnswer($secAnswer) !== $user->sec_answer) {
|
||
$this->error('密保答案不正确');
|
||
}
|
||
} else {
|
||
$this->error('不支持的验证方式');
|
||
}
|
||
|
||
if (!$userEmail || !filter_var($userEmail, FILTER_VALIDATE_EMAIL)) {
|
||
$this->error('该账号未绑定有效邮箱,无法发送回执码,请联系客服');
|
||
}
|
||
|
||
// 检查是否已有进行中的注销申请
|
||
$existingDeletion = db('user_deletion')
|
||
->where('user_id', $user->id)
|
||
->where('status', 0)
|
||
->find();
|
||
if ($existingDeletion) {
|
||
$this->error('该账号已有进行中的注销申请,无需重复提交');
|
||
}
|
||
|
||
// 生成6位注销回执码(有效期30分钟)
|
||
$deletionCode = sprintf('%06d', mt_rand(100000, 999999));
|
||
$cacheKey = 'deletion_code:' . $user->id;
|
||
cache($cacheKey, json_encode([
|
||
'user_id' => $user->id,
|
||
'account' => $account,
|
||
'email' => $userEmail,
|
||
'code' => $deletionCode,
|
||
'createtime' => time(),
|
||
]), 1800); // 30分钟过期
|
||
|
||
// 异步发送邮件
|
||
$username = $user->username ?? $user->nickname ?? '用户';
|
||
register_shutdown_function(function () use ($userEmail, $username, $deletionCode) {
|
||
try {
|
||
$subject = '【闲言APP】账号注销回执码 - ' . $deletionCode;
|
||
$body = <<<HTML
|
||
<!DOCTYPE html>
|
||
<html>
|
||
<body style="font-family:-apple-system,BlinkMacSystemFont,sans-serif;background:#F2F2F7;padding:20px;">
|
||
<div style="max-width:520px;margin:0 auto;background:#FFF;border-radius:12px;padding:24px;">
|
||
<h2 style="color:#6C5CE7;margin:0 0 12px;">🔐 账号注销回执码</h2>
|
||
<p style="color:#1C1C1E;font-size:14px;">亲爱的 <strong>{$username}</strong>：</p>
|
||
<p style="color:#8E8E93;font-size:14px;">您正在进行账号注销操作。请使用以下回执码在注销页面完成注销提交：</p>
|
||
<div style="background:rgba(108,92,231,0.08);border-radius:8px;padding:16px;text-align:center;margin:16px 0;">
|
||
<span style="font-size:28px;font-weight:700;color:#6C5CE7;letter-spacing:4px;">{$deletionCode}</span>
|
||
</div>
|
||
<p style="color:#FF3B30;font-size:12px;">⚠️ 回执码有效期为30分钟，请尽快使用。</p>
|
||
<p style="color:#8E8E93;font-size:12px;">如非本人操作，请忽略此邮件，您的账号安全不受影响。</p>
|
||
<hr style="border:none;border-top:1px solid #E5E5EA;margin:16px 0;">
|
||
<p style="color:#AEAEB2;font-size:11px;">闲言APP隐私安全团队 · 此邮件由系统自动发送</p>
|
||
</div>
|
||
</body>
|
||
</html>
|
||
HTML;
|
||
$emailLib = \app\common\library\Email::instance();
|
||
$emailLib->to($userEmail)->subject($subject)->message($body, true)->send();
|
||
} catch (\Exception $e) {
|
||
\think\Log::error('注销回执码邮件发送失败: ' . $e->getMessage());
|
||
}
|
||
});
|
||
|
||
$this->success('注销回执码已发送到注册邮箱', [
|
||
'email_masked' => $this->maskEmail($userEmail),
|
||
'expires_in' => 1800,
|
||
]);
|
||
}
|
||
|
||
/**
|
||
* @name 凭回执码提交注销(无需登录)
|
||
* @desc 用户使用收到的注销回执码提交注销申请,用于忘记密码场景
|
||
* @lastUpdate v10.3.2 新增
|
||
*/
|
||
public function requestDeletionByReceipt()
|
||
{
|
||
$this->checkRateLimit('requestDeletionByReceipt');
|
||
$account = $this->request->post('account', '', 'trim');
|
||
$deletionCode = $this->request->post('deletion_code', '', 'trim');
|
||
$reason = $this->request->post('reason', '', 'trim');
|
||
|
||
if (!$account || !$deletionCode) {
|
||
$this->error('账号和注销回执码不能为空');
|
||
}
|
||
$this->validateLength($account, '账号', 2, 100);
|
||
$this->validateLength($deletionCode, '回执码', 6, 8);
|
||
$this->detectMaliciousInput($account);
|
||
|
||
$user = $this->findUserByAccount($account);
|
||
if (!$user) {
|
||
$this->error(__('User not found'));
|
||
}
|
||
|
||
// 校验回执码
|
||
$cacheKey = 'deletion_code:' . $user->id;
|
||
$cachedData = cache($cacheKey);
|
||
if (!$cachedData) {
|
||
$this->error('回执码已过期或不存在，请重新申请');
|
||
}
|
||
$codeData = json_decode($cachedData, true);
|
||
if (!$codeData || !isset($codeData['code']) || $codeData['code'] !== $deletionCode) {
|
||
$this->error('回执码不正确');
|
||
}
|
||
if (strtolower($codeData['email']) !== strtolower($user->email)) {
|
||
$this->error('账号信息不匹配');
|
||
}
|
||
|
||
// 检查是否已有进行中的注销申请
|
||
$existing = db('user_deletion')
|
||
->where('user_id', $user->id)
|
||
->where('status', 0)
|
||
->find();
|
||
if ($existing) {
|
||
$this->error('该账号已有进行中的注销申请');
|
||
}
|
||
|
||
// 创建注销申请
|
||
$autoDeleteDays = 15;
|
||
$autoDeleteTime = time() + $autoDeleteDays * 86400;
|
||
$deletionId = db('user_deletion')->insertGetId([
|
||
'user_id' => $user->id,
|
||
'username' => $user->username ?: $account,
|
||
'email' => $user->email ?: '',
|
||
'reason' => $this->sanitizeString($reason, 500),
|
||
'status' => 0,
|
||
'auto_delete_time' => $autoDeleteTime,
|
||
'createtime' => time(),
|
||
'updatetime' => time(),
|
||
'source' => 'web_receipt',
|
||
]);
|
||
|
||
// 清除回执码缓存
|
||
cache($cacheKey, null);
|
||
|
||
// 异步发送确认邮件
|
||
$this->sendDeletionNotificationAsync($user, $deletionId, $autoDeleteTime, $reason);
|
||
|
||
$this->success('注销申请已提交', [
|
||
'deletion_id' => $deletionId,
|
||
'auto_delete_time_text'=> date('Y-m-d H:i:s', $autoDeleteTime),
|
||
'countdown_days' => $autoDeleteDays,
|
||
'can_cancel' => true,
|
||
]);
|
||
}
|
||
|
||
/**
|
||
* @name 根据账号查找用户(内部辅助方法)
|
||
* @desc 支持用户名/邮箱/手机号查找
|
||
* @lastUpdate v10.3.2 新增
|
||
*/
|
||
private function findUserByAccount($account)
|
||
{
|
||
if (Validate::is($account, 'email')) {
|
||
return \app\common\model\User::getByEmail($account);
|
||
} elseif (Validate::regex($account, '^1[3-9]\\d{9}$')) {
|
||
return \app\common\model\User::getByMobile($account);
|
||
} else {
|
||
return \app\common\model\User::getByUsername($account);
|
||
}
|
||
}
|
||
|
||
/**
|
||
* @name 邮箱脱敏
|
||
* @desc 将邮箱地址中间部分替换为星号 (如 a***@example.com)
|
||
* @lastUpdate v10.3.2 新增
|
||
*/
|
||
private function maskEmail($email)
|
||
{
|
||
if (!$email || strpos($email, '@') === false) {
|
||
return $email;
|
||
}
|
||
list($local, $domain) = explode('@', $email, 2);
|
||
$localLen = strlen($local);
|
||
if ($localLen <= 1) {
|
||
return $local . '***@' . $domain;
|
||
} elseif ($localLen <= 3) {
|
||
return $local[0] . '***@' . $domain;
|
||
} else {
|
||
return substr($local, 0, 2) . str_repeat('*', min($localLen - 2, 5)) . '@' . $domain;
|
||
}
|
||
}
|
||
}
|