westdc-zf1/application/module/Users/Member.php

<?php
namespace Users;

class Member
{
	var $ck='DCC3ER4T8L2EFX94OPDF';
	var $db;  //传入PDO对象
	var $mid; //会员ID
	
	public $scr; //cookie 安全码  $_COOKIE['scr']
	public $user;//cookie User   $_COOKIE['user']
	
	public $srpwd;//执行checkcookie后方可调用
	
	public $memberTable = "users";
	public $FieldUsername = "username";
	public $FieldPasword = "password";
	public $FieldLastlogin = "ts_last_login";
	public $FieldEmail = "email";
	public $FieldLastloginIp = "last_login_ip";
	public $GravatarEmailField = "gravatar_email";
	
	public $rootdomain = "";
	
	public $RoleMember = "member";

	function __construct()
	{
		if(empty($db))
		{
			$this->db = \Zend_Registry::get('db');
		}else{
			$this->db = $db;
		}
		
		$this->config = \Zend_Registry::get('config');
		
		if(!empty($_COOKIE['scr']))
		{
			$this->scr = $_COOKIE['scr'];
		}
		if(!empty($_COOKIE['user']))
		{
			$this->user= $_COOKIE['user'];
		}
		
		if(!isset($this->config->auth->domain) && !empty($this->config->auth->domain))
		{
			$this->rootdomain = $this->config->auth->domain;
		}
	}

	
	/**
	 * 检测cookie
	 */
	public function checkcookie()
	{
		$uname = $this->user;
	    $hash  = $this->scr;
	    
	    if(!empty($uname) && !empty($hash))
	    {
		    if (preg_match("/[<|>|#|$|%|^|*|(|)|{|}|'|\"|;|:]/i",$uname) || preg_match("/[<|>|#|$|%|^|*|(|)|{|}|'|\"|;|:]/i",$hash))
		    {
			     $this->mid=0;
			     return false;
		    }
		    else{
		    	$sql = "select {$this->FieldUsername} as userid,{$this->FieldPasword} as pwd from {$this->memberTable} where {$this->FieldUsername}='$uname'";
		    	$rs  = $this->db->query($sql);
		    	$row = $rs->fetch();
		    	$scr = $this->makescr($row['userid'],$row['pwd']);
		    	
		    	if($hash == $scr)
		    	{
		    		$this->srpwd=$row['pwd'];
		    		return true;
		    	}
		    	else {
		    		return false;
		    	}	
		    }//cookie安全
	    }else {
	    	return false;
	    }//exit
	}//function checkcookie
	
   /**
	* putcookie
	*
	* 登陆成功后放置cookie，包含安全码
	*
	* @param String $uname
	* @param String $pwd
	* @param Int 	$time
	*/
	public function putcookie($uname,$pwd,$time = 604800)
	{
		try {
		    $scrString = $this->makescr($uname,$pwd);//加密验证串:防止用户密码被盗；防止伪造cookie。
		    
		    if(!is_numeric($time))
		    {
		    	$time = 604800;
		    }
		    
			if(empty($this->rootdomain))
			{
				setcookie('user',$uname,time()+$time,'/');
				setcookie('scr',$scrString,time()+$time,'/');
			}else{
				setcookie('user',$uname,time()+$time,'/',$this->rootdomain);
				setcookie('scr',$scrString,time()+$time,'/',$this->rootdomain);
			}
		    
		    return true;
	    } catch (Exception $e) {
	    	return false;
	    } 

	}//function putcookie
	
	/**
	 * 生成安全码
	 * 
	 * @param String $u
	 * @param String $p
	 */
	public function makescr($u,$p)
	{
		return substr(md5($u.$p.$this->ck),3,20);
	}
	
	/**
	 * 清除cookie
	 */
	static function flushcookie()
	{
		setcookie('user','',time()-99999,'/');
		setcookie('scr','',time()-99999,'/');
	}
	
	public function getUser()
	{
		$sql = "SELECT * FROM ".$this->memberTable." m ORDER BY m.id DESC";
		$rs = $this->db->query($sql);
		return $rs->fetchAll();
	}

}