<?php

/*

 * 客户端被动接收phpsso服务端通知

 * 服务端通知内容:同步登陆、退出，同步积分设置、对换比率，同步添加、删除用户、修改用户密码，测试通信状态

 * 

 */

	defined('IN_PHPCMS') or exit('No permission resources.'); 



	$db = pc_base::load_model('member_model');

	

	$system = pc_base::load_config('system');

	define('APPID', $system['phpsso_appid']);

	$ps_api_url = $system['phpsso_api_url'];	//接口地址

	$ps_auth_key = $system['phpsso_auth_key'];	//加密密钥

	$ps_version = $system['phpsso_version'];

	

	pc_base::load_app_class('client', 'member', 0);

	$client = new client($ps_api_url, $ps_auth_key);

	$code = $_REQUEST['code'];

	

	parse_str($client->sys_auth($code, 'DECODE'), $arr);

	if(isset($arr['action'])) {

		$action = $arr['action'];

	} else {

		exit('0');

	}



	/**

	 * 测试通信状态

	 */

	if ($action == 'check_status') exit('1');

	

	/**

	 * 添加用户

	 */

	if ($action == 'member_add') {

		//验证

		if(isset($arr['password']) && !preg_match("/^[a-zA-Z0-9]{32}/", $arr['password'])) exit('0');

		if(isset($arr['random']) && !preg_match("/^[a-zA-Z0-9]{6}/", $arr['random'])) exit('0');

		if(isset($arr['username']) && !is_username($arr['username'])) exit('0');

		if(isset($arr['email']) && !is_email($arr['email'])) exit('0');

		if(isset($arr['regip']) && !preg_match("/^[\d\.]{7,15}/", $arr['regip'])) exit('0');

		$userinfo = array();

		$userinfo['phpssouid'] = isset($arr['uid']) ? intval($arr['uid']) : exit('0');

		$userinfo['encrypt'] = isset($arr['random']) ? $arr['random'] : exit('0');

		$userinfo['username'] = isset($arr['username']) ? $arr['username'] : exit('0');

		$userinfo['password'] = isset($arr['password']) ? $arr['password'] : exit('0');

		$userinfo['email'] = isset($arr['email']) ? $arr['email'] : '';

		$userinfo['regip'] = isset($arr['regip']) ? $arr['regip'] : '';

		$userinfo['regdate'] = $userinfo['lastdate'] = SYS_TIME;

		$userinfo['modelid'] = 10;

		$userinfo['groupid'] = 6;



		$userid = $db->insert($userinfo, 1);

		if($userid) {

			exit('1');

		} else {

			exit('0');

		}

	}

	

	/**

	 * 删除用户

	 */

	if ($action == 'member_delete') {

		$uidarr = $arr['uids'];

		$uidarr = array_map("intval",$uidarr);

		$where = to_sqls($uidarr, '', 'phpssouid');



		$status = $db->delete($where);

		if($status) {

			exit('1');

		} else {

			exit('0');

		}

		

	}

	

	/**

	 * 编辑用户

	 */

	if ($action == 'member_edit') {

		if(!isset($arr['uid'])) exit('0');

		$arr['uid'] = intval($arr['uid']);

		$userinfo = array();

		if(isset($arr['password'])) {

			if(!preg_match("/^[a-zA-Z0-9]{32}$/", $arr['password'])) exit('0');

			if(!preg_match("/^[a-zA-Z0-9]{6}$/", $arr['random'])) exit('0');

			$userinfo['password'] = $arr['password'];

			$userinfo['encrypt'] = $arr['random'];

		}

		if(isset($arr['email']) && !empty($arr['email'])) {

			if(!is_email($arr['email'])) exit('0');

			$userinfo['email'] = $arr['email'];

		}

		if(empty($userinfo)) exit('1');

		$status = $db->update($userinfo, array('phpssouid'=> $arr['uid']));

		if($status) {

			exit('1');

		} else {

			exit('0');

		}

	}

	

	/**

	 * 应用积分列表

	 */

	if ($action == 'credit_list') {

		$credit_list = pc_base::load_config('credit');

		echo $client->array2string($credit_list);

		exit;

	}

	

	/**

	 * 更新积分兑换规则

	 */

	if ($action == 'credit_update') {

		setcache('creditchange', $arr, 'member');

		exit('1');

	}

	

	/**

	 * 同步登陆

	 */

	if ($action == 'synlogin') {

		

		if(!isset($arr['uid'])) exit('0');

		$arr['uid'] = intval($arr['uid']);

		$phpssouid = $arr['uid'];

		$userinfo = $db->get_one(array('phpssouid'=>$phpssouid));

				

		if (!$userinfo) {

			//插入会员

			exit;

			$ps_userinfo = $client->ps_get_member_info($userid);

			$ps_userinfo = unserialize($ps_userinfo);



			if ($ps_userinfo['uid'] > 0) {

				require_once MOD_ROOT.'api/member_api.class.php';

				$member_api = new member_api();

				$arr_member['touserid'] = $ps_userinfo['uid'];

				$arr_member['registertime'] = TIME;

				$arr_member['lastlogintime'] = TIME;

				$arr_member['username'] = $ps_userinfo['username'];

				$arr_member['password'] = md5(PASSWORD_KEY.$password) ;

				$arr_member['email'] = $ps_userinfo['email'];

				$arr_member['modelid'] = 10;

				$member_api->add($arr_member);

				$userid = $member->get_userid($arr['username']);

				$userinfo = $member->get($userid);

			}



			$username = $ps_userinfo['username'];

		} else {

			$username = $userinfo['username'];

		}

		//执行本系统登陆操作

		$userid = $userinfo['userid'];

		$groupid = $userinfo['groupid'];

		$username = $userinfo['username'];

		$password = $userinfo['password'];

		$nickname = $userinfo['nickname'];

		$db->update(array('lastip'=>ip(), 'lastdate'=>SYS_TIME), array('userid'=>$userid));

		pc_base::load_sys_class('param', '', 0);

		

		if(!$cookietime) $get_cookietime = param::get_cookie('cookietime');

		$_cookietime = $cookietime ? intval($cookietime) : ($get_cookietime ? $get_cookietime : 0);

		$cookietime = $_cookietime ? TIME + $_cookietime : 0;

		

		$phpcms_auth = sys_auth($userid."\t".$password, 'ENCODE', get_auth_key('login'));

		header('P3P: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"');	

		param::set_cookie('auth', $phpcms_auth, $cookietime);

		param::set_cookie('_userid', $userid, $cookietime);

		param::set_cookie('_username', $username, $cookietime);

		param::set_cookie('_nickname', $nickname, $cookietime);

		param::set_cookie('_groupid', $groupid, $cookietime);

		param::set_cookie('cookietime', $_cookietime, $cookietime);

		exit('1');

	}

	

	/**

	 * 同步退出

	 */

	if ($action == 'synlogout') {

		header('P3P: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"');

		pc_base::load_sys_class('param', '', 0);

		param::set_cookie('auth', '');

		param::set_cookie('_userid', '');

		param::set_cookie('_username', '');

		param::set_cookie('_nickname', '');

		param::set_cookie('_groupid', '');

		param::set_cookie('cookietime', '');

		exit('1');

		//执行本系统退出操作

	}

	

	

	

	

	

	

?>