forked from manhere/QZone-Cloud-Like
/
ajax.php
111 lines (78 loc) · 2.45 KB
/
ajax.php
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
<?php
require_once('./Application/core.php');
$DB = new DB();
$DB->init();
if($_SESSION['uid']){
if($_GET['m']=="sid"){
if($_GET['u'] || $_GET['q']){
if(!ereg("^[0-9]*$",$_GET['q'])){ rtnmsg(3,"QQ号只允许数字");}
if(strlen($_GET['q']) < 5){ rtnmsg(3,"QQ号太短"); }
if(empty($_GET['sid'])){
rtnmsg(7,"您的URL中没有SID，请检查后重试。");
}
if(testsid($_GET['q'],$_GET['sid'])==false){
rtnmsg(7,"您的SID或QQ号错误。多点几次保存试试！");
}
$DB->Savesid($_SESSION['uid'],$_GET['q'],$_GET['sid']);
rtnmsg(0,"保存成功");
}else{
rtnmsg(1,"信息不完整");
}
}
}elseif($_GET['m']=="login"){
//登陆 START
if($_GET['u'] || $_GET['p']){
if(!ereg("^[0-9a-zA-Z\_]*$",$_GET['u'])){ rtnmsg(3,"用户名只允许字母，数字，下划线");}
$user = $DB->Query("tl_user","uname",$_GET['u']);
if(strlen($_GET['u']) < 4){ rtnmsg(3,"用户名太短"); }
if(!$user['id']){ rtnmsg(5,"用户不存在"); }
$pw = md5(md5(md5($_GET['p'])));
if($user['upass']!=$pw){ rtnmsg(5,"密码错误"); }
$_SESSION['uid'] = $user['id'];
$DB->Login($user['id']);
rtnmsg(0,"登陆成功");
}else{
rtnmsg(1,"信息不完整");
}
//登陆 END
}elseif($_GET['m']=="reg"){
//注册 START
if($_GET['u'] || $_GET['p'] || $_GET['v'] || $_GET['e'] ){
if(!ereg("^[0-9a-zA-Z\_]*$",$_GET['u'])){ rtnmsg(3,"用户名只允许字母，数字，下划线");}
$user = $DB->Query("tl_user","uname",$_GET['u']);
if (!filter_var($_GET['e'], FILTER_VALIDATE_EMAIL)) { rtnmsg(1,"邮箱错误"); }
if($_GET['v']!=$_SESSION['vcode']){ rtnmsg(2,"验证码错误"); }
if(strlen($_GET['u']) < 4){ rtnmsg(3,"用户名太短"); }
if($user['id']){ rtnmsg(5,"用户名已被使用"); }
$pw = md5(md5(md5($_GET['p'])));
$uid = $DB->Register($_GET['u'],$pw,$_GET['e']);
if($uid > 0 ){
$_SESSION['uid'] = $uid;
rtnmsg(0,"注册成功");
}else{
rtnmsg(6,"注册失败，未知错误。");
}
}else{
rtnmsg(1,"信息不完整");
}
//注册 END
}else{
rtnmsg(-1,"Access Denied");
}
function rtnmsg($code,$msg){
$_SESSION['vcode'] = "";
$rtn = array();
$rtn['code'] = $code;
$rtn['msg'] = $msg;
die(json_encode($rtn));
}
function testsid($qq,$sid){
$url = "http://ish.z.qq.com/infocenter_v2.jsp?B_UID=".$qq."&sid=".$sid."&g_ut=1";
$page = url_fetch($url);
if( strpos($page ,"赞")){
return true;
}else{
return false;
}
}
?>