ximushanyuan/addons/zh_jdgjb/admin/source/user/login.ctrl.php

<?php
/**
 * [WeEngine System] Copyright (c) 2014 WE7.CC
 * WeEngine is NOT a free software, it under the license terms, visited http://www.we7.cc/ for more details.
 */
defined('IN_IA') or exit('Access Denied');
define('IN_GW', true);
if(checksubmit() || $_W['isajax']) {
	_login($_GPC['referer']);
}

$setting = $_W['setting'];
template('user/login');
function _login($forward = '') {

	global $_GPC, $_W;
	load()->model('user');
	$member = array();
	$username = trim($_GPC['username']);
//	pdo_query('DELETE FROM'.tablename('users_failed_login'). ' WHERE lastupdate < :timestamp', array(':timestamp' => TIMESTAMP-300));
//	$failed = pdo_get('users_failed_login', array('username' => $username, 'ip' => CLIENT_IP));
//	if ($failed['count'] >= 5) {
//		message('输入密码错误次数超过5次，请在5分钟后再登录',referer(), 'info');
//	}
//	$verify = trim($_GPC['verify']);
//	if(empty($verify)) {
//		message('请输入验证码');
//	}
//	$result = checkcaptcha($verify);
//	if (empty($result)) {
//		message('输入验证码错误');
//	}
	if(empty($username)) {
		message('请输入要登录的用户名');
	}
	$member['username'] = $username;
	$member['password'] = $_GPC['password'];
	if(empty($member['password'])) {
		message('请输入密码');
	}
	$record = user_single($member);
	if(!empty($record)) {
		if($record['status'] == 1) {
			message('您的账号正在审核或是已经被系统禁止，请联系网站管理员解决！');
		}

		$account = pdo_fetch("SELECT * FROM " . tablename("zh_jdgjb_account") . " WHERE status=2 AND uid=:uid ORDER BY id DESC LIMIT 1", array(':uid' => $record['uid']));

		if (!empty($account)) {
			$storeid = $account['storeid'];
			$_W['uniacid'] = $account['weid'];
		} else {
			message('您的账号正在审核或是已经被系统禁止，请联系网站管理员解决！!!');
		}

		$founders = explode(',', $_W['config']['setting']['founder']);
		$_W['isfounder'] = in_array($record['uid'], $founders);
		if (empty($_W['isfounder'])) {
			if (!empty($record['endtime']) && $record['endtime'] < TIMESTAMP) {
				message('您的账号有效期限已过，请联系网站管理员解决！');
			}
		}
		if (!empty($_W['siteclose']) && empty($_W['isfounder'])) {
			message('站点已关闭，关闭原因：' . $_W['setting']['copyright']['reason']);
		}
		$cookie = array();
		$cookie['uid'] = $record['uid'];
		$cookie['lastvisit'] = $record['lastvisit'];
		$cookie['lastip'] = $record['lastip'];
		$cookie['hash'] = md5($record['password'] . $record['salt']);
		$session = base64_encode(json_encode($cookie));
		isetcookie('__session', $session, !empty($_GPC['rember']) ? 7 * 86400 : 0, true);
		$status = array();
		$status['uid'] = $record['uid'];
		$status['lastvisit'] = TIMESTAMP;
		$status['lastip'] = CLIENT_IP;
		user_update($status);

		$role = uni_permission($record['uid'], $_W['uniacid']);
		isetcookie('__uniacid', $_W['uniacid'], 7 * 86400);
		isetcookie('__uid', $record['uid'], 7 * 86400);

		if($_W['role'] == 'clerk' || $role == 'clerk') {
//				message('登陆成功', url('activity/desk', array('uniacid' => $record['uniacid'])), 'success');
//			message("欢迎回来！，{$record['username']}！", url('site/entry/stores', array('m' => 'wpdc', 'storeid' => $storeid, 'do' => 'start')), 'success');
		}

//		if(empty($forward)) {
//			$forward = $_GPC['forward'];
//		}
//		if(empty($forward)) {
//			$forward = './index.php?c=account&a=display';
//		}
//		if ($record['uid'] != $_GPC['__uid']) {
//			isetcookie('__uniacid', '', -7 * 86400);
//			isetcookie('__uid', '', -7 * 86400);
//		}
//		pdo_delete('users_failed_login', array('id' => $failed['id']));
//		message("欢迎回来，{$record['username']}。", $forward);

		$data = array(
			'lastvisit' => TIMESTAMP,
			'lastip' => CLIENT_IP,
		);
		pdo_update("zh_jdgjb_account", $data, array('id' => $record['id']));

		message("欢迎回来，{$record['username']}！", url('site/entry/stores', array('m' => 'zh_jdgjb', 'id' => $storeid,'uid'=>$record['uid'], 'do' => 'dlstatistics')), 'success');
	} else {
		if (empty($failed)) {
			pdo_insert('users_failed_login', array('ip' => CLIENT_IP, 'username' => $username, 'count' => '1', 'lastupdate' => TIMESTAMP));
		} else {
			pdo_update('users_failed_login', array('count' => $failed['count'] + 1, 'lastupdate' => TIMESTAMP), array('id' => $failed['id']));
		}
		message('登录失败，请检查您输入的用户名和密码！');
	}
}