301 lines
9.5 KiB
PHP
301 lines
9.5 KiB
PHP
<?php
|
||
|
||
require dirname(__DIR__) . DIRECTORY_SEPARATOR . "init.php";
|
||
require_once(ROOTDIR . '/includes/clientfunctions.php');
|
||
|
||
// use Illuminate\Support\Str;
|
||
use WHMCS\Database\Capsule;
|
||
|
||
$state = $_SESSION['oauth_state'];
|
||
unset($_SESSION['oauth_state']);
|
||
if (!isset($_GET['state']) || $_GET['state'] !== $state) {
|
||
die("无法确保此请求是否安全。");
|
||
}
|
||
|
||
|
||
$moduleconfig = Capsule::table('tbladdonmodules')->where('module', 'LoliArtAccount')->get();
|
||
|
||
foreach ($moduleconfig as $key => $value) {
|
||
$config[$value->setting] = $value->value;
|
||
}
|
||
|
||
if ($_GET['code']) {
|
||
$url = $config['token_url'];
|
||
|
||
$fields = [
|
||
'grant_type' => 'authorization_code',
|
||
'client_id' => $config['client_id'],
|
||
'client_secret' => $config['client_secret'],
|
||
'redirect_uri' => $config['callback_uri'],
|
||
'code' => $_GET['code'],
|
||
];
|
||
|
||
|
||
$fields_string = http_build_query($fields);
|
||
$ch = curl_init();
|
||
curl_setopt($ch, CURLOPT_URL, $url);
|
||
curl_setopt($ch, CURLOPT_POST, true);
|
||
curl_setopt($ch, CURLOPT_POSTFIELDS, $fields_string);
|
||
curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
|
||
curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, 0);
|
||
curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, 0);
|
||
|
||
$result = curl_exec($ch);
|
||
|
||
$data = json_decode($result);
|
||
|
||
$ch = curl_init($config['user_info_url']);
|
||
|
||
|
||
$headers[] = 'Authorization: Bearer ' . $data->access_token;
|
||
|
||
|
||
curl_setopt($ch, CURLOPT_IPRESOLVE, CURL_IPRESOLVE_V4);
|
||
curl_setopt($ch, CURLOPT_RETURNTRANSFER, TRUE);
|
||
curl_setopt($ch, CURLOPT_HTTPHEADER, $headers);
|
||
curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, 0);
|
||
curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, 0);
|
||
$response = curl_exec($ch);
|
||
|
||
// exit($response);
|
||
$data = json_decode($response);
|
||
|
||
if (empty($data)) {
|
||
exit(curl_error($ch));
|
||
// die('<script>window.location.href="/dologin.php";</script>');
|
||
}
|
||
|
||
|
||
// // 验证 iso_code 是否为 CN
|
||
// $validate_ch = curl_init('https://www.lae.email/api/geoip?ip=' . $_SESSION['user_ip']);
|
||
// curl_setopt($validate_ch, CURLOPT_RETURNTRANSFER, TRUE);
|
||
// curl_setopt($validate_ch, CURLOPT_SSL_VERIFYPEER, 0);
|
||
// curl_setopt($validate_ch, CURLOPT_SSL_VERIFYHOST, 0);
|
||
// $validate_ch = json_decode(curl_exec($validate_ch));
|
||
|
||
// if (empty($validate_ch)) {
|
||
// die('Something went wrong, please contact us or try again later.');
|
||
// }
|
||
|
||
// // exit($validate_ch->iso_code == 'CN');
|
||
// if ($validate_ch->iso_code == 'CN') {
|
||
// // 如果用户的区域在 中国大陆，则将用户带去实名认证
|
||
// if (is_null($data->verified_at)) {
|
||
// die('<script>window.location.href="https://www.lae.email/zh-CN/real-name-authentication";</script>');
|
||
// }
|
||
// }
|
||
|
||
// 我不认为 WHMCS 国家代码这边设计的很合理，所以监测到HK和TW时，必须将他们强制修改为CN
|
||
|
||
// if ($validate_ch->iso_code == 'HK' || $validate_ch->iso_code == 'TW') {
|
||
// $validate_ch->iso_code = 'CN';
|
||
// }
|
||
|
||
|
||
|
||
$openID = Capsule::table('tblclients')->where('email', $data->email)->first()->id;
|
||
|
||
if ($openID) {
|
||
|
||
|
||
go_oauth_login($openID);
|
||
// //更新实名状态
|
||
// $realnameID = Capsule::table('tblclients_realname')->where('userid', $openID)->first()->id;
|
||
// if (!empty($realnameID)) {
|
||
// Capsule::table('tblclients_realname')->where('id', $realnameID)->update([
|
||
// 'userid' => $openID,
|
||
// 'verified_at' => $data->verified_at,
|
||
// 'real_name' => $data->real_name,
|
||
// ]);
|
||
// } else {
|
||
// Capsule::table('tblclients_realname')->insert([
|
||
// 'userid' => $openID,
|
||
// 'verified_at' => $data->verified_at,
|
||
// 'real_name' => $data->real_name,
|
||
// ]);
|
||
// }
|
||
} else {
|
||
//创建账户
|
||
$user_IP = ($_SERVER["HTTP_VIA"]) ? $_SERVER["HTTP_X_FORWARDED_FOR"] : $_SERVER["REMOTE_ADDR"];
|
||
$user_IP = ($user_IP) ? $user_IP : $_SERVER["REMOTE_ADDR"];
|
||
$command = 'AddClient';
|
||
$postData = [
|
||
'firstname' => 'LAE',
|
||
'lastname' => $data->name,
|
||
'email' => $data->email,
|
||
// 'address1' => $validate_ch->city . ' ' . $validate_ch->state_name,
|
||
// 'city' => $validate_ch->city,
|
||
// 'state' => $validate_ch->state_name,
|
||
// 'postcode' => $validate_ch->postal_code,
|
||
// 'country' => $validate_ch->iso_code,
|
||
'phonenumber' => $phonenumbers,
|
||
'password2' => oauth_random_str(10),
|
||
// 'clientip' => $validate_ch->ip,
|
||
'clientip' => $user_IP,
|
||
'noemail' => true,
|
||
'skipvalidation' => true,
|
||
// 'currency' => $_SESSION['switched_currency'] ?? $validate_ch->currency,
|
||
'currency' => $_SESSION['switched_currency'],
|
||
'language' => $_SESSION['Language'] ?? 'chinese'
|
||
];
|
||
|
||
// Client
|
||
|
||
$results = localAPI($command, $postData);
|
||
if ($results['result'] != 'success') {
|
||
// print_r($results);
|
||
// Capsule::table('tblusers')->where('id', $realnameID)->update([
|
||
// 'userid' => $openID,
|
||
// 'verified_at' => $data->verified_at,
|
||
// 'real_name' => $data->real_name,
|
||
// ]);
|
||
die("无法新增用户");
|
||
} else {
|
||
// Capsule::table('tblusers')->where('email', $data->email)->update([
|
||
// 'email_verified_at' => $data->verified_at,
|
||
// ]);
|
||
$user = Capsule::table('tblusers')->where('email', $data->email)->first();
|
||
// dd($user->id);
|
||
|
||
$hookParams = ["user_id" => $user->id, "client_id" => $results['clientid'], "userid" => $results['clientid']];
|
||
// dd($hookParams);
|
||
run_hook("ClientAreaRegister", $hookParams);
|
||
|
||
go_oauth_login($results['clientid']);
|
||
}
|
||
}
|
||
|
||
if ($_SESSION['redirect_url']) {
|
||
$redirect_url = $_SESSION['redirect_url'];
|
||
unset($_SESSION['redirect_url']);
|
||
|
||
header('Location: ' . $redirect_url);
|
||
} else {
|
||
header('Location: /clientarea.php');
|
||
}
|
||
}
|
||
|
||
|
||
function go_oauth_login($uid)
|
||
{
|
||
// 登陆
|
||
|
||
// 写入 SESSION UID
|
||
$_SESSION['uid'] = $uid;
|
||
|
||
// 获取 UID
|
||
$userinfo = Capsule::table('tblclients')->where('id', $uid)->first();
|
||
$username = $userinfo->firstname . ' ' . $userinfo->lastname;
|
||
|
||
// 取出值
|
||
$login_uid = $userinfo->id;
|
||
$login_pwd = $userinfo->password;
|
||
$language = $userinfo->language;
|
||
|
||
// 更新登录时间登录IP
|
||
$fullhost = gethostbyaddr($remote_ip);
|
||
|
||
if ($userinfo->firstname == '') {
|
||
$command = 'UpdateClient';
|
||
$postData = array(
|
||
'clientid' => $login_uid,
|
||
'firstname' => 'LAE',
|
||
);
|
||
|
||
$results = localAPI($command, $postData);
|
||
}
|
||
|
||
Capsule::table('tblclients')->where('id', $login_uid)->update([
|
||
'lastlogin' => time(),
|
||
'ip' => $remote_ip,
|
||
'host' => $fullhost,
|
||
]);
|
||
|
||
|
||
|
||
$_SESSION['uid'] = $login_uid;
|
||
if ($login_cid) {
|
||
$_SESSION['cid'] = $login_cid;
|
||
}
|
||
//仅支持8.1+
|
||
oauth_finishLogin($login_uid);
|
||
$hookParams = array('userid' => $login_uid);
|
||
$hookParams['contactid'] = $login_cid ? $login_cid : 0;
|
||
run_hook('ClientLogin', $hookParams);
|
||
// $loginsuccess = true;
|
||
return 1;
|
||
}
|
||
|
||
|
||
|
||
|
||
function oauth_getWHMCSversion()
|
||
{
|
||
//获取WHMCS当前版本
|
||
global $CONFIG;
|
||
return substr($GLOBALS["CONFIG"]["Version"], 0, 5);
|
||
}
|
||
function oauth_finishLogin($clientid)
|
||
{
|
||
//登录参数
|
||
$user = \WHMCS\User\Client::find($clientid);
|
||
$userData["email"] = $user->email;
|
||
if (oauth_isWhmcsVersionHigherOrEqual("8.0.0")) {
|
||
$login = oauth_authUserV8($user);
|
||
} else {
|
||
require ROOTDIR . "/includes/clientfunctions.php";
|
||
$login = oauth_authUserOther($userData);
|
||
}
|
||
}
|
||
function oauth_isWhmcsVersionHigherOrEqual($toCompare)
|
||
{
|
||
if (isset($GLOBALS["CONFIG"]["Version"])) {
|
||
$version = explode("-", $GLOBALS["CONFIG"]["Version"]);
|
||
return version_compare($version[0], $toCompare, ">=");
|
||
}
|
||
global $whmcs;
|
||
return version_compare($whmcs->getVersion()->getRelease(), $toCompare, ">=");
|
||
}
|
||
|
||
function oauth_authUserV8(\WHMCS\User\Client $client)
|
||
{
|
||
try {
|
||
$class = new \WHMCS\Authentication\AuthManager();
|
||
$result = $class->login($client->owner());
|
||
return true;
|
||
} catch (\Error $e) {
|
||
return false;
|
||
}
|
||
}
|
||
|
||
function oauth_authUserOther($userData)
|
||
{
|
||
$user = json_encode($userData);
|
||
$password = hash("md5", rand());
|
||
return validateClientLogin($user, $password);
|
||
}
|
||
|
||
|
||
|
||
function oauth_random_str($length, $type = 1)
|
||
{
|
||
if ($type == 1) {
|
||
|
||
// 密码字符集，可任意添加你需要的字符
|
||
$chars = 'abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ';
|
||
} else if ($type == 2) {
|
||
$chars = 'abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789';
|
||
} else if ($type == 3) {
|
||
$chars = '0123456789';
|
||
}
|
||
$str = '';
|
||
for ($i = 0; $i < $length; $i++) {
|
||
// 这里提供两种字符获取方式
|
||
// 第一种是使用 substr 截取$chars中的任意一位字符；
|
||
// 第二种是取字符数组 $chars 的任意元素
|
||
$str .= substr($chars, mt_rand(0, strlen($chars) - 1), 1);
|
||
// $str .= $chars[mt_rand(0, strlen($chars) - 1)];
|
||
}
|
||
return $str;
|
||
}
|