private function check()
{
if (!is_numeric($_GET['callback']) || !preg_match('/^[a-z]+$/', $_GET['type'])) {
trigger_error('captcha parameter error', E_USER_ERROR);
}
$code = new \min\inc\captcha();
if (true === $code->checkcode($_GET['code'], $_GET['type'])) {
app::response(1);
}
}
private function dologin()
{
if (!isset($_SESSION)) {
app::session_init(true);
}
if (empty($_POST['loginname']) || empty($_POST['loginpwd'])) {
app::usrerror(0, '用户名或密码不能为空');
} elseif (validate('quotes', $_POST['loginname'])) {
app::usrerror(0, '用户名或密码错误');
} else {
$cache_error_key = '{loginerror:}' . $_POST['loginname'];
$code_ok = true;
$miss = $this->showcaptcha($cache_error_key);
if (1 === $miss['show']) {
$code = new \min\inc\captcha();
$code_ok = $code->checkcode($_POST['code'], 'login');
}
if (true === $code_ok) {
$service = app::service('account');
if (1 === $miss['cache']) {
$cache = app::cache('loginerror')->connect();
$result = $cache->get(md5($_POST['loginname']));
}
if (!isset($result) || false == $result) {
$result = $service->checkpwd($_POST['loginname']);
}
if (false === $result) {
trigger_error('系统忙，请重试', E_USER_ERROR);
} elseif (null == $result) {
$result['holder'] = 1;
} elseif (isset($result['pwd']) && password_verify($_POST['loginpwd'], $result['pwd'])) {
$service->inituser($result);
if (1 == $miss['cache']) {
$cache->delete($cache_error_key, md5($_POST['loginname']));
unset($_SESSION['loginerror']);
}
app::response(1);
}
if (0 === $miss['cache']) {
$cache = app::cache('loginerror')->connect();
$cache->set(md5($_POST['loginname']), $result, 1200);
}
$loginerror = $cache->incr($cache_error_key);
if (1 == $loginerror) {
$cache->setTimeout($cache_error_key, 7200);
}
// 需要显示验证码 code =2
isset($_SESSION['loginerror']) ? $_SESSION['loginerror']++ : ($_SESSION['loginerror'] = 1);
$status = 2 < $loginerror || 7 < $_SESSION['loginerror'] ? 101 : 0;
app::usrerror($status, '用户名或密码错误');
}
}
}