SysUser.php 3.2 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110
  1. <?php
  2. namespace app\model;
  3. // 引入框架内置类
  4. use think\facade\Request;
  5. use think\facade\Session;
  6. use app\model\SysLoginFail;
  7. use app\model\SysLogin;
  8. use app\model\Base;
  9. class SysUser extends Base
  10. {
  11. protected $pk = 'userid';
  12. public function sysRole()
  13. {
  14. return $this->belongsTo('SysRole', 'roleid')->bind(['rolename' => 'name']);
  15. }
  16. public static function queryList()
  17. {
  18. return self::field('userid,roleid,username,nickname,truename,email,status,per_time,per_ip,login_num,create_time')->with('sysRole')->select();
  19. }
  20. public function getUsernames($role_id = null)
  21. {
  22. if ($role_id == null) {
  23. return $this->column('id, username');
  24. } else {
  25. $data = $this->where('role_id', $role_id)->column('username');
  26. if ($data) {
  27. return implode(',', $data);
  28. } else {
  29. return null;
  30. }
  31. }
  32. }
  33. public static function checkLogin()
  34. {
  35. $ip = Request::ip();
  36. $time = time();
  37. $datetime = date('Y-m-d H:i:s', $time);
  38. if (!SysLoginFail::checkIp($ip, $time)) {
  39. return json(['code' => 1, 'msg' => '登录次数超过10次, 请等1小时后再试']);
  40. }
  41. $username = Request::param("username", '', 'strip_tags');
  42. $password = Request::param("password", '', 'strip_tags');
  43. if (!$username || !$password) {
  44. return json(['code' => 1, 'msg' => '用户名/密码/验证码不能为空']);
  45. }
  46. if (false === Request::checkToken('__token__')) {
  47. return json(['error' => 1, 'msg' => '验证有误']);
  48. }
  49. $info = self::where('username', $username)->find();
  50. if (!$info) {
  51. SysLoginFail::saveFail($ip, $time);
  52. return json(['code' => 2, 'msg' => '用户名/密码不正确1']);
  53. }
  54. if (md5($password . $info->salt) != $info->password) {
  55. // 记录失败
  56. SysLoginFail::saveFail($ip, $time);
  57. SysLogin::record($info->userid, $info->username, $datetime, $ip, 1);
  58. return json(['code' => 2, 'msg' => '用户名/密码不正确']);
  59. }
  60. if ($info->status == 1) {
  61. // 更新登录IP,登录时间和更新次数
  62. $perTime = $info->per_time;
  63. $perIp = $info->per_ip;
  64. $info->per_time = date('Y-m-d H:i:s', $time);
  65. $info->per_ip = $ip;
  66. $info->login_num += 1;
  67. $info->save();
  68. Session::set('adminuser', [
  69. 'userid' => $info->userid,
  70. 'username' => $info->username,
  71. 'perTime' => $perTime,
  72. 'perIp' => $perIp,
  73. 'nickname' => $info->nickname,
  74. 'avatar' => $info->avatar,
  75. 'loginNum' => $info->loginNum,
  76. 'roleid' => $info->roleid
  77. ]);
  78. // 记录登录
  79. SysLogin::record($info->userid, $info->username, $datetime, $ip);
  80. return json(['code' => 0, 'msg' => '登录成功']);
  81. } else {
  82. // 记录失败
  83. SysLogin::record($info->userid, $info->username, $datetime, $ip, 1);
  84. return json(['code' => 2, 'msg' => '用户已被禁用!']);
  85. }
  86. }
  87. }