Login.php 12 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255
  1. <?php
  2. namespace app\inter\controller;
  3. use think\Controller;
  4. use think\Db;
  5. use think\Session;
  6. use think\Log;
  7. use think\Request;
  8. use think\Cache;
  9. use app\common\library\UUIDs;
  10. use app\common\library\Verify;
  11. use think\Validate;
  12. use app\common\library\send_message;
  13. class Login extends Controller
  14. {
  15. public function _initialize(){
  16. /*$admin = Cache::get('doctor');
  17. if($admin){
  18. //已经登陆过
  19. return json_encode(array('status'=>'fail','code'=>'1001','msg'=>'您已登陆,请勿重复登录'));
  20. }*/
  21. }
  22. /**
  23. * 医生登录
  24. *
  25. * @ApiTitle (医生登录)
  26. * @ApiSummary (医生登录)
  27. * @ApiSector (医生接口)
  28. * @ApiMethod (POST)
  29. * @ApiRoute (/inter/login/index)
  30. * @ApiHeaders (name="sign", type="string", required=true, description="请求头-校验key")
  31. * @ApiHeaders (name="nonce", type="string", required=true, description="请求头-随机数")
  32. * @ApiHeaders (name="timestamp", type=string, required=true, description="请求头-时间戳s")
  33. * @ApiParams (name="param", type="string", required=true, description="参数json字符串")
  34. * @ApiParams (name="param[userName]", type="string", sample="", description="用户账号<必填>")
  35. * @ApiParams (name="param[pwd]", type="string", sample="", description="用户密码<必填>")
  36. * @ApiParams (name="param[capture]", type="string", sample="", description="验证码<选填>")
  37. * @ApiReturnParams (name="status", type="integer", required=true, sample="0", description="返回码 fail 失败 ok成功"))
  38. * @ApiReturnParams (name="code", type="integer", required=true, sample="0", description="返回状态码")
  39. * @ApiReturnParams (name="info", type="string", required=true, sample="返回成功", description="返回信息")
  40. * @ApiReturnParams (name="sessionid", type="object", sample="{}", description="缓存的数据key")
  41. * @ApiReturn (data="
  42. {
  43. 'status': ok,
  44. 'code': '0000',
  45. 'sessionid': 'a17z7a7a8f9g9rh9d89jio',
  46. 'info' : ''
  47. }
  48. *")
  49. **/
  50. //登录功能
  51. public function index(){
  52. try{
  53. $param = $_REQUEST['param'];
  54. Verify::loginCheck($param);
  55. $sessionid = UUIDs::uuid16();
  56. log::record($sessionid);
  57. log::record($_REQUEST);
  58. if(!empty($param["captcha"])){
  59. //1. 获取到用户提交的验证码
  60. $captcha = $param["captcha"];
  61. //2. 将session中的验证码和用户提交的验证码进行核对,当成功时提示验证码正确,并销毁之前的session值,不成功则重新提交
  62. if(strtolower($_SESSION["captcha"]) == strtolower($captcha)){
  63. $_SESSION["captcha"] = "";
  64. }else{
  65. return json_encode(['status'=>'fail','code'=>'1002','msg'=>'验证码输入错误']);
  66. }
  67. }
  68. if(empty($param['userName'])){
  69. return json_encode(['status'=>'fail','code'=>'1100','msg'=>'用户名不能为空']);
  70. }
  71. if(empty($param['pwd'])){
  72. return json_encode(['status'=>'fail','code'=>'1101','msg'=>'密码不能为空']);
  73. }
  74. //医生信息
  75. $info = DB::table('doctors')->where('username',$param['userName'])->field('is_send_message,is_admin,message_push,id,exam_class,attachment,username,password,login_time,login_failure,realname,email,phone,doctor_title,institution_id,department_id,doctor_role,is_report')->find();
  76. log::record($info);
  77. if(!$info){
  78. return json_encode(['status'=>'fail','code'=>'1004','msg'=>'用户名'.$param['userName'].'或密码错误']);
  79. }
  80. if(md5($param['pwd']) != $info['password']) {
  81. //登录失败
  82. $time = date('Y-m-d', time());
  83. $datetime = strtotime($time);
  84. //上次登录时间-今日0点时间
  85. $t = $info['login_time'] - $datetime;
  86. if( $t < 0){
  87. //时间小于0 代表今日未进行登录 登录失败次数归0
  88. DB::table('doctors')->where('username',$param['userName'])->update(['login_failure'=>0]);
  89. }
  90. DB::table('doctors')->where('username',$param['userName'])->setInc('login_failure');
  91. return json_encode(['status'=>'fail','code'=>'1004','msg'=>'用户名'.$param['userName'].'或者密码错误','info'=>$info['login_failure']]);
  92. }
  93. if($info['is_send_message'] == "1") {
  94. $phone = $info['phone'];
  95. $code = rand('1000','9999');
  96. $handle_id = $phone.rand('10000000','99999999');
  97. Cache::set('sendcode_'.$phone,$code,600);
  98. Cache::set('sendcode_handle_id'.$handle_id, $phone, 600);
  99. $info = send_message::sendSms2UpDate($phone,$code);
  100. return json_encode(['status'=>'ok','code'=>'0000','need_code'=> true, 'phone' => $phone, 'hander_id' => $handle_id]);
  101. }
  102. //医生类
  103. $class_info = DB::table('doctor_class')->where('doctor_id',$info['id'])->cache(300)->find();
  104. $institution = DB::table('institution')->where('id',$info['institution_id'])->cache(300)->field('name')->find();
  105. $info['institution_name'] = $institution['name'];
  106. $info['doctor_class_info'] = $class_info;
  107. //医生权限菜单
  108. $sql = "SELECT m.id,m.name,m.url,m.parent_id,m.icon_name from menu as m,dr_cla_permission as d where d.type=1 and d.doctor_id='".$info['id']."' and d.pass=m.id order by m.ordernum ";
  109. $permission = DB::query($sql);
  110. $info['permission'] = $permission;
  111. //登录成功则失败次数清0
  112. DB::table('doctors')->where('username',$param['userName'])->update(['login_failure'=>0,'login_time'=>date('Y-m-d H:i:s')]);
  113. Cache::set($sessionid,$info,43200);
  114. log::record('----登录信息----');
  115. log::record(Cache::get($sessionid));
  116. log::record('----登录信息----');
  117. unset($info['password']);
  118. return json_encode(['status'=>'ok','code'=>'0000','info'=>$info,'sessionid'=>$sessionid]);
  119. }catch(\Exception $e){
  120. return json_encode(['status'=>'fail','code'=>'2000','msg'=>$e->getMessage()]);
  121. }
  122. }
  123. //再次发送短信
  124. public function send_message_again()
  125. {
  126. try{
  127. $param = $_REQUEST['param'];
  128. $handle_id = $param['handle_id'];
  129. $phone = Cache::get('sendcode_handle_id'.$handle_id);
  130. $code = Cache::get('sendcode_'.$phone);
  131. Cache::rm('sendcode_handle_id'.$handle_id);
  132. $info = send_message::sendSms2UpDate($phone,$code);
  133. $handle_id = $phone.rand('10000000','99999999');
  134. Cache::set('sendcode_handle_id'.$handle_id, $phone, 600);
  135. return json_encode(['status'=>'ok','code'=>'0000','info'=>$info,'handle_id'=>$handle_id]);
  136. }catch(\Exception $e){
  137. return json_encode(['status'=>'fail','code'=>'2000','msg'=>$e->getMessage()]);
  138. }
  139. }
  140. public function check_code()
  141. {
  142. try{
  143. $param = $_REQUEST['param'];
  144. $handle_id = $_REQUEST['handle_id'];
  145. $phone = Cache::get('sendcode_handle_id'.$handle_id);
  146. $code = $_REQUEST['code'];
  147. $check_code = Cache::get('sendcode_'.$phone);
  148. if($code != $check_code) {
  149. return json_encode(['status'=>'fail','code'=>'0090','msg'=>' 错误的验证码']);
  150. }
  151. //医生信息
  152. $info = DB::table('doctors')->where('phone',$phone)->field('is_send_message,is_admin,message_push,id,exam_class,attachment,username,password,login_time,login_failure,realname,email,phone,doctor_title,institution_id,department_id,doctor_role,is_report')->find();
  153. log::record($info);
  154. if(!$info){
  155. return json_encode(['status'=>'fail','code'=>'1004','msg'=>'用户不存在']);
  156. }
  157. //医生类
  158. $class_info = DB::table('doctor_class')->where('doctor_id',$info['id'])->cache(300)->find();
  159. $institution = DB::table('institution')->where('id',$info['institution_id'])->cache(300)->field('name')->find();
  160. $info['institution_name'] = $institution['name'];
  161. $info['doctor_class_info'] = $class_info;
  162. //医生权限菜单
  163. $sql = "SELECT m.id,m.name,m.url,m.parent_id,m.icon_name from menu as m,dr_cla_permission as d where d.type=1 and d.doctor_id='".$info['id']."' and d.pass=m.id order by m.ordernum ";
  164. $permission = DB::query($sql);
  165. $info['permission'] = $permission;
  166. //登录成功则失败次数清0
  167. DB::table('doctors')->where('username',$param['userName'])->update(['login_failure'=>0,'login_time'=>date('Y-m-d H:i:s')]);
  168. Cache::set($sessionid,$info,43200);
  169. log::record('----登录信息----');
  170. log::record(Cache::get($sessionid));
  171. log::record('----登录信息----');
  172. unset($info['password']);
  173. return json_encode(['status'=>'ok','code'=>'0000','info'=>$info,'sessionid'=>$sessionid]);
  174. }catch(\Exception $e){
  175. return json_encode(['status'=>'fail','code'=>'2000','msg'=>$e->getMessage()]);
  176. }
  177. }
  178. //发送短信
  179. public function send_message()
  180. {
  181. try{
  182. $sessionid = $_REQUEST['sessionid'];
  183. $doctor = Cache::get($sessionid);
  184. $phone = $doctor['phone'];
  185. $code = rand('1000','9999');
  186. Cache::set($phone,$code,600);
  187. $info = send_message::sendSms2UpDate($phone,$code);
  188. return json_encode(['status'=>'ok','code'=>'0000','info'=>$info,'sessionid'=>$sessionid]);
  189. }catch(\Exception $e){
  190. return json_encode(['status'=>'fail','code'=>'2000','msg'=>$e->getMessage()]);
  191. }
  192. }
  193. //注册功能
  194. public function register(){
  195. $param = $_REQUEST['param'];
  196. $info = DB::table('doctors')->where('username',$param['userName'])->find();
  197. if($info){
  198. return json_encode(['status'=>'fail','code'=>'1006']);
  199. }
  200. $dat = array();
  201. $dat['password'] = md5($param['pwd']);
  202. $dat['username'] = $param['userName'];
  203. $id = DB::table('doctors')->insertGetId($dat);
  204. $doctor_class = array();
  205. $doctor_class['doctor_class'] = $param['doctor_class'];
  206. $doctor_class['doctor_id'] = $id;
  207. $doctor_class['department_id'] = $param['second_department_id'];
  208. //医生类别表
  209. DB::table('doctor_class')->insert($doctor_class);
  210. if($id){
  211. return json_encode(['status'=>'ok','code'=>'0000']);
  212. }else{
  213. return json_encode(['status'=>'fail','code'=>'1005','msg'=>'注册失败']);
  214. }
  215. }
  216. //退出登录 清空session值
  217. public function signOut(){
  218. // Cache::rm('doctor');
  219. Cache::clear();
  220. return json_encode(['status'=>'ok','code'=>'0000']);
  221. }
  222. public function change(){
  223. $id = $_REQUEST['id'];
  224. $a = DB::table('exams')->where('id',$id)->update(['exam_status'=>'3']);
  225. if($a){
  226. echo '已更改';
  227. }else{
  228. echo '更改失败';
  229. }
  230. }
  231. }