ajax_profile.php 23 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506
  1. <?php
  2. namespace app\index;
  3. use app\qiniuoss\Qiniuoss;
  4. use app\aliyunoss\Aliyunoss;
  5. class ajax_profile extends BaseUser
  6. {
  7. function initialize()
  8. {
  9. parent::initialize();
  10. $this->ajax_header();
  11. $this->userlogined or reJSON("请先登录后再操作!", 404);
  12. }
  13. function send_sms()
  14. {
  15. $_var_0 = SafeRequest("phone", "post");
  16. $_var_1 = rand_code();
  17. $_var_2 = "in_send_sms";
  18. empty($_COOKIE[$_var_2]) or reJSON("请等待 60 秒后再重新获取", 404);
  19. $_var_3 = db("user")->where("in_mobile", $_var_0)->value("in_userid");
  20. if ($_var_3) {
  21. reJSON("新手机号已被占用,请更改", 404);
  22. }
  23. $_var_4 = "您的操作验证码是:" . $_var_1 . ",为了保证您的账户安全,请勿向任何人提供此验证码。";
  24. $_var_5 = send_sms($_var_0, $_var_4);
  25. if (!$_var_5) {
  26. reJSON("抱歉,验证码未能发送成功!", 404);
  27. } else {
  28. $_var_6 = array("in_mobile" => $_var_0, "in_code" => $_var_1, "in_ip" => getonlineip(), "in_addtime" => date("Y-m-d H:i:s"));
  29. db("mobile")->insert($_var_6);
  30. setcookie($_var_2, "have", time() + 30, IN_PATH);
  31. reJSON("验证码发送成功,请注意查收!", 200);
  32. }
  33. }
  34. function changeremote()
  35. {
  36. $_var_7 = SafeRequest("id", "get");
  37. $_var_8 = SafeRequest("remote", "get");
  38. if ($_var_7) {
  39. $_var_9 = db("appid")->where("in_id", $_var_7)->find();
  40. if ($_var_9["in_sign_type"] == 2) {
  41. $_var_10 = $_var_8 ? "开启成功" : "关闭成功";
  42. } elseif ($_var_9["in_sign_type"] == 0) {
  43. if ($_var_8) {
  44. $_var_11 = IN_REMOTE == 1 ? new Qiniuoss() : new Aliyunoss();
  45. $_var_10 = "开启成功";
  46. if (is_file(IN_ATTACHMENT_PATH . $_var_9["in_app"]) && !$_var_11->file_exists($_var_9["in_app"])) {
  47. if ($_var_9["in_size"] < 20480) {
  48. $_var_12 = $_var_11->upload($_var_9["in_app"], IN_ATTACHMENT_PATH . $_var_9["in_app"]);
  49. } else {
  50. $_var_10 = "开启成功,需重新上传应用";
  51. }
  52. }
  53. $_var_8 = IN_REMOTE;
  54. } else {
  55. $_var_11 = $_var_9["remote"] == 1 ? new Qiniuoss() : new Aliyunoss();
  56. $_var_10 = "关闭成功";
  57. if (is_file(IN_ATTACHMENT_PATH . $_var_9["in_app"])) {
  58. if (filesize(IN_ATTACHMENT_PATH . $_var_9["in_app"]) < 1024) {
  59. @unlink(IN_ATTACHMENT_PATH . $_var_9["in_app"]);
  60. }
  61. }
  62. if (!is_file(IN_ATTACHMENT_PATH . $_var_9["in_app"]) && $_var_11->file_exists($_var_9["in_app"])) {
  63. if ($_var_9["in_size"] < 20480) {
  64. $_var_12 = saveRemoteFile(getapp($_var_7, 1), IN_ATTACHMENT_PATH, $_var_9["in_app"]);
  65. } else {
  66. $_var_10 = "关闭成功,需重新上传应用";
  67. }
  68. }
  69. }
  70. }
  71. $_var_12 = db("appid")->where("in_id", $_var_7)->update(["remote" => $_var_8, "in_deduct" => getDeduct($_var_9["in_size"], $_var_8)]);
  72. $_var_13 = db("app")->where("in_appid", $_var_7)->order("in_id desc")->value("in_id");
  73. db("app")->where("in_id", $_var_13)->update(["remote" => $_var_8]);
  74. reJSON($_var_10, 200);
  75. }
  76. reJSON("未授权", 200);
  77. }
  78. function changein_super()
  79. {
  80. $_var_14 = SafeRequest("id", "get");
  81. $_var_15 = SafeRequest("in_super", "get");
  82. if ($_var_14) {
  83. $_var_16 = db("appid")->where("in_id", $_var_14)->value("in_private");
  84. if ($this->user[($_var_16 ? "prv_" : "") . "device_num"] < 1 && $_var_15) {
  85. // reJSON("请先购买" . ($_var_16 ? "私有" : "公有") . "设备", 200);
  86. }
  87. $_var_17 = db("appid")->where("in_id", $_var_14)->update(["in_super" => $_var_15]);
  88. if ($_var_17 && $_var_15) {
  89. $_var_18 = db("appid")->where("in_id", $_var_14)->find();
  90. $_var_19 = IN_ATTACHMENT_PATH . $_var_18["in_app"];
  91. if (!is_file($_var_19)) {
  92. $_var_17 = saveRemoteFile(getapp($_var_14, 1), IN_ATTACHMENT_PATH, $_var_18["in_app"]);
  93. }
  94. }
  95. reJSON("修改成功", 200);
  96. }
  97. reJSON("未授权", 200);
  98. }
  99. function setStatus()
  100. {
  101. $_var_20 = bees_decrypt(SafeRequest("id", "post"));
  102. $_var_21 = SafeRequest("status", "post");
  103. $_var_22 = db("appid")->where("in_id", $_var_20)->update(["in_applock" => $_var_21]);
  104. $_var_23 = $_var_21 ? "下架" : "上架";
  105. reJSON($_var_22 ? $_var_23 . "成功" : $_var_23 . "失败");
  106. }
  107. function del()
  108. {
  109. $_var_24 = bees_decrypt(SafeRequest("id", "post"));
  110. $_var_25 = db("appid")->where("in_id", $_var_24)->find();
  111. $_var_25 or reJSON("版本记录不存在!", 404);
  112. $_var_25["in_uid"] == $this->userid or reJSON("不是您的应用!", 404);
  113. $_var_26 = db("app")->where("in_uid", $this->userid)->where("in_appid", $_var_24)->select();
  114. foreach ($_var_26 as $_var_27) {
  115. db("app")->where("in_id", $_var_27["in_id"])->delete();
  116. db("user")->where("in_userid", $_var_27["in_uid"])->dec("in_spaceuse", $_var_27["in_size"])->update();
  117. $_var_28 = str_replace(array(".ipa", ".apk", ".mobileconfig"), "", $_var_27["in_app"]);
  118. if ($_var_27["remote"]) {
  119. $_var_29 = $_var_27["remote"] == 1 ? new Qiniuoss() : new Aliyunoss();
  120. $_var_29->delete($_var_27["in_app"]);
  121. }
  122. @unlink(IN_ATTACHMENT_PATH . $_var_28 . ".mobileprovision");
  123. @unlink(IN_ATTACHMENT_PATH . $_var_27["in_app"]);
  124. $_var_27["in_sign_type"] && @destroyDir(IN_IPADIR_PATH . $_var_27["in_app"]);
  125. }
  126. if ($_var_25["in_form"] == "iOS") {
  127. $_var_30 = db("super_sign")->where("app_id", $_var_24)->select();
  128. foreach ($_var_30 as $_var_27) {
  129. if ($_var_27["remote"]) {
  130. $_var_29 = $_var_25["remote"] == 1 ? new Qiniuoss() : new Aliyunoss();
  131. $_var_29->delete($_var_27["ipa_path"]);
  132. }
  133. @unlink(IN_UPLOADS_PATH . "ios_mobileprovision/" . $_var_27["udid"] . ".mobileprovision");
  134. @unlink(IN_ROOT . $_var_27["plist_path"]);
  135. @unlink(IN_ROOT . $_var_27["ipa_path"]);
  136. }
  137. db("super_sign")->where("app_id", $_var_24)->delete();
  138. }
  139. @unlink(IN_IMAGES_PATH . "app/" . $_var_25["in_icon"]);
  140. if ($_var_25["in_sign_type"] == 1 && IN_SIGNMETHOD) {
  141. $_var_31 = http_build_query(["site" => $_SERVER["HTTP_HOST"], "secret" => IN_SECRET, "aid" => db("sign")->where("in_aid", $_var_24)->value("api_aid")]);
  142. $_var_32 = IN_API . "/open/apps/del?" . $_var_31;
  143. $_var_33 = file_get_contents($_var_32);
  144. }
  145. db("appid")->where("in_id", $_var_24)->delete();
  146. db("downhistory")->where("appid", $_var_24)->delete();
  147. db("salt")->where("in_aid", $_var_24)->delete();
  148. db("signlog")->where("in_aid", $_var_24)->delete();
  149. db("appid")->where(array("in_id" => $_var_25["in_kid"]))->update(array("in_kid" => 0));
  150. reJSON("删除成功!", 200);
  151. }
  152. function setUseHistory()
  153. {
  154. $_var_34 = bees_decrypt(SafeRequest("id", "post"));
  155. $_var_35 = bees_decrypt(SafeRequest("app_id", "post"));
  156. $_var_36 = SafeRequest("desc", "post");
  157. $_var_37 = db("app")->where("in_id", $_var_34)->where("in_appid", $_var_35)->where("in_uid", $this->userid)->find();
  158. $_var_37 or reJSON("版本记录不存在!", 404);
  159. db("appid")->where("in_id", $_var_35)->update(["in_name" => $_var_37["in_name"], "in_size" => $_var_37["in_size"], "in_mnvs" => $_var_37["in_mnvs"], "in_bid" => $_var_37["in_bid"], "in_bsvs" => $_var_37["in_bsvs"], "in_bvs" => $_var_37["in_bvs"], "in_app" => $_var_37["in_app"], "in_originalName" => $_var_37["in_originalName"], "in_updatetime" => time(), "remote" => $_var_37["remote"]]);
  160. db("app")->where("in_appid", $_var_35)->update(["in_release" => 0]);
  161. db("app")->where("in_id", $_var_34)->update(["in_release" => 1]);
  162. reJSON("发布成功!", 200);
  163. }
  164. function delHistory()
  165. {
  166. $_var_38 = bees_decrypt(SafeRequest("id", "post"));
  167. $_var_39 = bees_decrypt(SafeRequest("app_id", "post"));
  168. $_var_40 = db("app")->where("in_id", $_var_38)->where("in_appid", $_var_39)->where("in_uid", $this->userid)->find();
  169. $_var_40 or reJSON("版本记录不存在!", 404);
  170. db("app")->where("in_id", $_var_38)->delete();
  171. db("user")->where("in_userid", $_var_40["in_uid"])->dec("in_spaceuse", $_var_40["in_size"])->update();
  172. $_var_41 = str_replace(array(".ipa", ".apk", ".mobileconfig"), "", $_var_40["in_app"]);
  173. if ($_var_40["remote"]) {
  174. $_var_42 = $_var_40["remote"] == 1 ? new Qiniuoss() : new Aliyunoss();
  175. $_var_42->delete($_var_40["in_app"]);
  176. }
  177. @unlink(IN_ATTACHMENT_PATH . $_var_41 . ".mobileprovision");
  178. @unlink(IN_ATTACHMENT_PATH . $_var_40["in_app"]);
  179. $_var_40["in_sign_type"] && @destroyDir(IN_IPADIR_PATH . $_var_40["in_app"]);
  180. reJSON("删除成功!", 200);
  181. }
  182. function getHistory()
  183. {
  184. $_var_43 = bees_decrypt(SafeRequest("id", "get"));
  185. $_var_44 = bees_decrypt(SafeRequest("app_id", "get"));
  186. $_var_45 = db("app")->where("in_id", $_var_43)->where("in_appid", $_var_44)->where("in_uid", $this->userid)->find();
  187. $_var_45 or reJSON("版本记录不存在!", 404);
  188. $_var_46 = array("desc" => $_var_45["in_desc"]);
  189. reJSON($_var_46, 200);
  190. }
  191. function updateHistory()
  192. {
  193. $_var_47 = bees_decrypt(SafeRequest("id", "post"));
  194. $_var_48 = bees_decrypt(SafeRequest("app_id", "post"));
  195. $_var_49 = SafeRequest("desc", "post");
  196. $_var_50 = db("app")->where("in_id", $_var_47)->where("in_appid", $_var_48)->where("in_uid", $this->userid)->find();
  197. $_var_50 or reJSON("版本记录不存在!", 404);
  198. db("app")->where(array("in_id" => $_var_47))->update(array("in_desc" => $_var_49));
  199. reJSON("修改成功", 200);
  200. }
  201. function edit()
  202. {
  203. $_var_51 = bees_decrypt(SafeRequest("id", "post"));
  204. $_var_52 = SafeRequest("url", "post");
  205. $_var_53 = unescape(SafeRequest("app_name", "post"));
  206. $_var_54 = SafeRequest("icon", "post");
  207. $_var_55 = SafeRequest("show_guide", "post");
  208. $_var_56 = SafeRequest("password", "post");
  209. $_var_57 = SafeRequest("limit_num", "post");
  210. $_var_58 = SafeRequest("qq", "post");
  211. $_var_59 = SafeRequest("appstore_url", "post");
  212. $_var_60 = SafeRequest("remark", "post");
  213. $_var_61 = SafeRequest("app_intro", "post", 1);
  214. $_var_62 = SafeRequest("template_language", "post");
  215. $_var_63 = SafeRequest("template", "post");
  216. $_var_64 = SafeRequest("in_private", "post");
  217. $_var_65 = SafeRequest("in_use_auth_code", "post");
  218. $_var_66 = SafeRequest("in_captcha", "post");
  219. $_var_67 = SafeRequest("auth_code_dispense_url", "post");
  220. $_var_68 = db("appid")->where("in_id", $_var_51)->find();
  221. $_var_68 or reJSON("应用不存在或已被删除!", -2);
  222. $_var_68["in_uid"] == $this->userid or reJSON("您不能编辑别人的应用!", -3);
  223. in_array($_var_52, array("data", "source", "static")) and reJSON("短链地址不规范!");
  224. is_numeric($_var_52) and reJSON("短链地址不能为纯数字!", -4);
  225. $_var_69 = db("appid")->where("in_link", $_var_52)->where("in_id", "<>", $_var_51)->value("in_id");
  226. $_var_52 and $_var_69 and reJSON("短链地址已被占用!", -5);
  227. if (!empty($_FILES)) {
  228. $_var_70 = stristr($_var_68["in_icon"], "/") ? substr(strrchr($_var_68["in_icon"], "/"), 1) : $_var_68["in_icon"];
  229. $_var_71 = pathinfo($_FILES["icon"]["name"]);
  230. if (in_array(strtolower($_var_71["extension"]), array("jpg", "jpeg", "gif", "png"))) {
  231. $_var_72 = IN_IMAGES_PATH . "app/" . $_var_70;
  232. @move_uploaded_file($_FILES["icon"]["tmp_name"], $_var_72);
  233. db("appid")->where("in_id", $_var_51)->update(["in_icon" => $_var_70]);
  234. }
  235. }
  236. $_var_73 = db("appid")->where("in_id", $_var_51)->update(["in_name" => $_var_53, "in_link" => $_var_52, "in_tutorial" => $_var_55, "in_apppwd" => $_var_56, "in_applimit" => $_var_57, "in_contact" => $_var_58, "in_appstore" => $_var_59, "in_remark" => $_var_60, "in_appintro" => $_var_61, "template_language" => $_var_62, "template" => $_var_63, "in_private" => $_var_64, "in_use_auth_code" => $_var_65, "auth_code_dispense_url" => $_var_67, "in_captcha" => $_var_66]);
  237. reJSON("修改成功", 200);
  238. }
  239. function info()
  240. {
  241. $_var_74 = SafeRequest("mobile", "get");
  242. $_var_75 = SafeRequest("qq", "get");
  243. $_var_76 = unescape(SafeRequest("firm", "get"));
  244. $_var_77 = unescape(SafeRequest("job", "get"));
  245. db("user")->where(array("in_userid" => $this->userid))->update(array("in_mobile" => $_var_74, "in_qq" => $_var_75, "in_firm" => $_var_76, "in_job" => $_var_77));
  246. echo "1";
  247. }
  248. function pwd()
  249. {
  250. $_var_78 = password(SafeRequest("oldpassword", "post"));
  251. $_var_79 = SafeRequest("password", "post");
  252. $_var_80 = SafeRequest("repassword", "post");
  253. if ($_var_78 != $this->user["in_userpassword"]) {
  254. reJSON("当前密码有误,请重试!", 404);
  255. }
  256. if (!$_var_79) {
  257. reJSON("新密码不能为空", 404);
  258. }
  259. if (!$_var_80) {
  260. reJSON("请再次确认新密码", 404);
  261. }
  262. if ($_var_79 != $_var_80) {
  263. reJSON("两次输入的密码不一致", 404);
  264. }
  265. db("user")->where(array("in_userid" => $this->userid))->update(array("in_userpassword" => password($_var_79)));
  266. reJSON("恭喜,密码修改成功!", 200);
  267. }
  268. function send_verify()
  269. {
  270. $_var_81 = SafeRequest("code", "post");
  271. $_var_82 = SafeRequest("email", "post");
  272. $_var_83 = unescape(SafeRequest("real_nick", "post"));
  273. $_var_84 = SafeRequest("real_card", "post");
  274. $_var_85 = SafeRequest("card_front", "post");
  275. $_var_86 = SafeRequest("card_back", "post");
  276. $_var_87 = SafeRequest("card_hand", "post");
  277. if (IN_SMS && !$this->user["in_mobile"]) {
  278. reJSON("请先绑定手机号!", 404);
  279. }
  280. if (!$_var_83 || !$_var_84 || !$_var_85 || !$_var_86 || !$_var_87) {
  281. reJSON("资料填写不完整!", 404);
  282. }
  283. db("user")->where("in_userid", $this->userid)->update(["in_nick" => $_var_83, "in_card" => $_var_84, "in_imgzm" => $_var_85, "in_imgfm" => $_var_86, "in_imgsc" => $_var_87, "in_verify" => 2, "in_type" => 1]);
  284. $_var_88 = IN_NAME . "实名认证待审核通知!";
  285. $_var_89 = "有新的实名认证信息需要审核<br>注册邮箱:" . $_var_82 . "<br>姓名:" . $_var_83 . "<br>提交时间:" . date("Y-m-d H:i:s");
  286. send_email(IN_MAIL, $_var_88, $_var_89);
  287. reJSON("提交成功!", 200);
  288. }
  289. function send_verify_qiye()
  290. {
  291. $_var_90 = unescape(SafeRequest("real_name", "post"));
  292. $_var_91 = SafeRequest("idcard", "post");
  293. $_var_92 = SafeRequest("card_enterprise", "post");
  294. $_var_93 = SafeRequest("code", "post");
  295. $_var_94 = SafeRequest("email", "post");
  296. $_var_95 = SafeRequest("card_front", "post");
  297. $_var_96 = SafeRequest("card_back", "post");
  298. $_var_97 = SafeRequest("card_hand", "post");
  299. if (IN_SMS && !$this->user["in_mobile"]) {
  300. reJSON("请先绑定手机号!", 404);
  301. }
  302. if (!$_var_95 || !$_var_96 || !$_var_97 || !$_var_90 || !$_var_91 || !$_var_92) {
  303. reJSON("资料填写不完整!", 404);
  304. }
  305. db("user")->where("in_userid", $this->userid)->update(["in_nameqy" => $_var_90, "in_cardqy" => $_var_91, "in_imgqy" => $_var_92, "in_imgzm" => $_var_95, "in_imgfm" => $_var_96, "in_imgsc" => $_var_97, "in_verify" => 2, "in_type" => 2]);
  306. $_var_98 = IN_NAME . "实名认证待审核通知!";
  307. $_var_99 = "有新的实名认证信息需要审核<br>注册邮箱:" . $_var_94 . "<br>公司名称:" . $_var_90 . "<br>提交时间:" . date("Y-m-d H:i:s");
  308. send_email(IN_MAIL, $_var_98, $_var_99);
  309. reJSON("提交成功!", 200);
  310. }
  311. function add_space()
  312. {
  313. $_var_100 = intval(SafeRequest("mb", "get"));
  314. $_var_100 > 0 or exit("-2");
  315. $_var_101 = $_var_100 * IN_SPACEPOINTS;
  316. $this->user["in_points"] < $_var_101 and exit("-3");
  317. db("user")->where("in_userid", $this->userid)->inc("in_spacetotal", $_var_100 * 1048576)->dec("in_points", $_var_101)->update();
  318. echo "1";
  319. }
  320. function each_del()
  321. {
  322. $_var_102 = bees_decrypt(SafeRequest("aid", "post"));
  323. $_var_103 = db("appid")->where("in_id", $_var_102)->find();
  324. $_var_103["in_uid"] == $this->userid or reJSON("您不能解除别人的应用!", 404);
  325. db("appid")->where("in_id", "in", [$_var_102, $_var_103["in_kid"]])->update(["in_kid" => 0]);
  326. reJSON("解除合并成功!", 200);
  327. }
  328. function each_add()
  329. {
  330. $_var_104 = bees_decrypt(SafeRequest("aid", "post"));
  331. $_var_105 = bees_decrypt(SafeRequest("kid", "post"));
  332. $_var_106 = db("appid")->where("in_id", $_var_104)->find();
  333. $_var_106 or reJSON("应用不存在或已被删除!", 404);
  334. $_var_106["in_uid"] == $this->userid or reJSON("您不能合并别人的应用!", 404);
  335. db("appid")->where("in_id", $_var_105)->value("in_uid") == $this->userid or reJSON("您不能合并别人的应用!", 404);
  336. db("appid")->where("in_id", $_var_105)->value("in_form") == $_var_106["in_form"] and reJSON("应用平台一致,不能合并!", 404);
  337. db("appid")->where(array("in_id" => $_var_104))->update(array("in_kid" => $_var_105));
  338. db("appid")->where(array("in_id" => $_var_105))->update(array("in_kid" => $_var_104));
  339. reJSON("合并成功!", 200);
  340. }
  341. function high_speed()
  342. {
  343. $_var_107 = intval(SafeRequest("id", "get"));
  344. $_var_108 = db("app")->where("in_id", $_var_107)->find();
  345. $_var_108 or exit("-2");
  346. $_var_108["in_uid"] == $this->userid or exit("-3");
  347. IN_SPEEDPOINTS > 0 or exit("-4");
  348. $this->user["in_points"] < IN_SPEEDPOINTS and exit("-5");
  349. db("user")->where("in_userid", $this->userid)->dec("in_points", IN_SPEEDPOINTS)->update();
  350. db("app")->where("in_id", $_var_107)->update(["in_highspeed" => 1]);
  351. echo "1";
  352. }
  353. function remove_ad()
  354. {
  355. $_var_109 = intval(SafeRequest("id", "get"));
  356. $_var_110 = db("app")->where("in_id", $_var_109)->find();
  357. $_var_110 or exit("-2");
  358. $_var_110["in_uid"] == $this->userid or exit("-3");
  359. IN_ADPOINTS > 0 or exit("-4");
  360. $this->user["in_points"] < IN_ADPOINTS and exit("-5");
  361. db("user")->where("in_userid", $this->userid)->dec("in_points", IN_ADPOINTS)->update();
  362. db("app")->where("in_id", $_var_109)->update(["in_removead" => 1]);
  363. echo "1";
  364. }
  365. function reemail()
  366. {
  367. $_var_111 = SafeRequest("email", "post");
  368. $_var_112 = SafeRequest("password", "post");
  369. if (!$_var_112) {
  370. reJSON("请输入账号密码", 404);
  371. }
  372. $_var_113 = SafeRequest("code", "post");
  373. $_var_114 = SafeRequest("remail", "post");
  374. if (!db("user")->where("in_userid", $this->userid)->where("in_userpassword", password($_var_112))->count()) {
  375. reJSON("您输入的账号密码错误", 404);
  376. }
  377. if (!$_var_114) {
  378. reJSON("请输入新邮箱", 404);
  379. }
  380. if ($_var_111 == $_var_114) {
  381. reJSON("邮箱没有变化", 404);
  382. }
  383. if (!preg_match("/^([a-zA-Z0-9_\\.\\-])+\\@(([a-zA-Z0-9\\-])+\\.)+([a-zA-Z0-9]{2,4})+\$/", $_var_114)) {
  384. reJSON("邮箱格式有误,请更改", 404);
  385. }
  386. if (db("user")->where("in_mail", $_var_114)->value("in_userid")) {
  387. reJSON("新邮箱已被占用,请更改", 404);
  388. }
  389. if (!check_mailcode($_var_114, $_var_113, $this->userid)) {
  390. reJSON("邮件码有误,请更改!", 404);
  391. }
  392. db("user")->where("in_userid", $this->userid)->update(["in_mail" => $_var_114]);
  393. reJSON("恭喜,邮箱修改成功,请刷新!", 200);
  394. }
  395. function rephone()
  396. {
  397. $_var_115 = SafeRequest("password", "post");
  398. $_var_116 = password($_var_115);
  399. $_var_117 = SafeRequest("phone", "post");
  400. $_var_118 = SafeRequest("code", "post");
  401. if ($_var_116 != $this->user["in_userpassword"]) {
  402. reJSON("当前密码有误,请重试!", 404);
  403. }
  404. if ($this->user["in_mobile"] == $_var_117) {
  405. reJSON("手机号没有变化", 404);
  406. }
  407. $_var_119 = db("mobile")->where("in_mobile", $_var_117)->where("in_code", $_var_118)->value("in_id");
  408. if (!$_var_119) {
  409. reJSON("验证码有误,请更改!", 404);
  410. }
  411. if (db("user")->where("in_mobile", $_var_117)->count()) {
  412. reJSON("手机号已被占用,请更改", 404);
  413. }
  414. db("user")->where("in_userid", $this->userid)->update(["in_mobile" => $_var_117]);
  415. reJSON("恭喜,手机号修改成功,请刷新!", 200);
  416. }
  417. function bind_mobile()
  418. {
  419. $_var_120 = SafeRequest("phone", "post");
  420. $_var_121 = SafeRequest("code", "post");
  421. if ($this->user["in_mobile"] == $_var_120) {
  422. reJSON("手机号没有变化", 404);
  423. }
  424. $_var_122 = db("mobile")->where("in_mobile", $_var_120)->where("in_code", $_var_121)->value("in_id");
  425. if (!$_var_122) {
  426. reJSON("验证码有误,请更改!", 404);
  427. }
  428. if (db("user")->where("in_mobile", $_var_120)->count()) {
  429. reJSON("手机号已被占用,请更改", 404);
  430. }
  431. db("user")->where(array("in_userid" => $this->userid))->update(array("in_mobile" => $_var_120));
  432. reJSON("手机号绑定成功!", 200);
  433. }
  434. function cleanStatistics()
  435. {
  436. $_var_123 = bees_decrypt(SafeRequest("appId", "post"));
  437. $_var_124 = db("appid")->where("in_id", $_var_123)->find();
  438. $_var_124["in_uid"] == $this->userid or reJSON("您不能操作别人的应用!", 404);
  439. db("downhistory")->where("appid", $_var_123)->where("uid", $_var_124["in_uid"])->delete();
  440. reJSON("已清空下载记录!", 200);
  441. }
  442. function imageBase64()
  443. {
  444. $_var_125 = SafeRequest("content", "post");
  445. $_var_126 = SafeRequest("prefix", "post");
  446. if (preg_match("/^(data:\\s*image\\/(\\w+);base64,)/", $_var_125, $_var_127)) {
  447. $_var_128 = str_replace($_var_127[1], "", $_var_125);
  448. $_var_128 = base64_decode($_var_128);
  449. $_var_129 = $_var_127[2];
  450. if (in_array(strtolower($_var_129), array("pjpeg", "jpeg", "jpg", "gif", "bmp", "png"))) {
  451. $_var_130 = date("dHis") . rand(2, pow(2, 24)) . "." . $_var_129;
  452. $_var_131 = IN_IMAGES_PATH . $_var_126;
  453. $_var_132 = date("Y") . "/" . date("m") . "/" . date("d");
  454. creatdir($_var_131 . "/" . $_var_132);
  455. $_var_133 = $_var_131 . "/" . $_var_132 . "/" . $_var_130;
  456. try {
  457. file_put_contents($_var_133, $_var_128);
  458. $_var_134 = IN_PATH . "data/image/" . $_var_126 . "/" . $_var_132 . "/" . $_var_130;
  459. $_var_135 = array("domain" => $_SERVER["HTTP_HOST"], "key" => $_var_134);
  460. reJSON($_var_135, 200);
  461. } catch (Exception $_var_136) {
  462. reJSON("上传出错!", 404);
  463. }
  464. }
  465. }
  466. reJSON("上传出错!", 404);
  467. }
  468. function pay()
  469. {
  470. $_var_137 = SafeRequest("discount_id", "post");
  471. $_var_138 = SafeRequest("pay_type", "post");
  472. $_var_139 = SafeRequest("sign_id", "post") ?: 0;
  473. $_var_139 = is_numeric($_var_139) ? $_var_139 : bees_decrypt($_var_139);
  474. if (!$_var_137 || !$_var_138) {
  475. reJSON("参数错误!", 404);
  476. }
  477. $_var_140 = "";
  478. $_var_141 = create_order_no($this->userid);
  479. $_var_142 = db("item")->where("id", $_var_137)->where("status", 1)->find();
  480. if (!$_var_142) {
  481. reJSON("商品套餐已下架!", 404);
  482. }
  483. $_var_143 = $_var_142["name"] . " " . $_var_142["note"];
  484. $_var_144 = $_var_142["price"];
  485. $_var_145 = $_var_142["number"];
  486. if ($_var_142["type"] == 2) {
  487. $_var_146 = db("user")->where("in_userid", $this->userid)->find();
  488. if ($_var_146["in_svip"] != $_var_142["number"]) {
  489. $_var_140 = "由于会员等级的变更,之前若有剩余时间,会自动进行换算。";
  490. if ($_var_146["in_svip"] > $_var_142["number"] && $_var_146["in_viptime"] > time()) {
  491. reJSON("您的会员未到期,暂不支持会员等级降级!", 404);
  492. }
  493. }
  494. } elseif ($_var_142["type"] == 3) {
  495. $_var_143 = $_var_139 . "-" . $_var_143;
  496. }
  497. $_var_147 = array("in_uid" => $this->userid, "in_uname" => $this->user["in_username"], "pay_id" => $_var_141, "pay_tag" => $_var_143, "pay_points" => $_var_145, "pay_money" => $_var_144, "pay_type" => $_var_138, "pay_param" => $_var_142["type"], "pay_status" => 1, "item_id" => $_var_137, "creat_time" => time());
  498. db("paylog")->insert($_var_147);
  499. $_var_148 = "/index/to_pay?trade_id=" . $_var_141 . "&pay_type=" . $_var_138;
  500. $_var_149 = array("trade_id" => $_var_141, "pay_type" => $_var_138, "url" => $_var_148);
  501. reJSON($_var_149, 200, $_var_140);
  502. }
  503. }