<?php
/**
* 接口基类文件
* author : php小组
*/
namespace Home\Controller;
use Think\FlException;
use Think\Controller;
use Think\Model;
class BaseController extends Controller{
protected $isCheck = true;//是否开启签名校验
protected $islimit = false;//是否开启接口访问次数限制
protected $isiplimit = false;//是否开启ip白名单
public function __construct(){
ob_end_clean();
header('Access-Control-Allow-Origin: *');
header("Access-Control-Allow-Headers: Origin, X-Requested-With,Pragma,User-Agent, Content-Type, Accept,token,sign,timestamp,version,source,sign");
header('Access-Control-Allow-Methods:POST');
$this->run();
}
//执行
public function run(){
$logs_model = D('Logs');//日志模型
$ask_auth_model = D('Askauth'); //请求授权校验模型
//调用默认response
$result=get_object_vars($ask_auth_model->getResponse());
//接受header参数--系统参数
$systemParam=$ask_auth_model->getAllHeadersParam();
//接受data数据--业务参数
$data =I("post.data");
$privatekey = C('apiKey_img');
try {
//参数判断
if(empty($systemParam['token']) || empty($systemParam['timestamp']) || empty($systemParam['version']) || empty($systemParam['sign']) || $systemParam['source']==='' ){
E("200000","参数错误");
}
if(empty($data)){
E("200001","参数错误");
}
if(empty($privatekey)){
E("200002","参数错误".$systemParam['token']);
}
$token = $systemParam['token'];//服务端分配的标识(不同客户端需使用不同的标识)
$timestamp = $systemParam['timestamp'];//时间戳，UTC时间，以北京时间东八区（+8）为准
$version = $systemParam['version'];//版本号
$sign = $systemParam['sign'];//签名
$source = $systemParam['source'];//来源(0安卓、1ios、2H5、3pc、4php 、5 java )
$data = json_decode(htmlspecialchars_decode($data),true);//业务参数json格式
if(empty($data)){
E("200003","data解析失败");
}
if($this->isCheck){//授权
$auth_result = $ask_auth_model->checkAuth($source,$data,$token,$timestamp,$version,$privatekey,$sign);
if($auth_result === false){
E("200006",'验签失败');
}
}
if($this->isiplimit){//开启ip白名单校验
//ip白名单校验
$ip_check_result= $ask_auth_model->illegalip();
if($ip_check_result == '2'){
E("200007",'非法的IP地址！');
}
}
//时间校验
$expire_second=C('expire_second');
$timestamp_t=$timestamp+$expire_second;
if($timestamp_t<time()){
E("200008",'请求已经过期');
}
if($this->islimit){//开启限制
//接口访问次数限制
$as_count_result= $ask_auth_model->ask_count();
if($as_count_result == '2'){
E("200009",'休息一下在访问吧！');
}
}
}catch (FlException $ex) {
$curCode=$ex->getErrorCode();
$curmsg=$ex->getMessage();
// todo add log
$return_data = ['status'=>'1','errorCode'=>$curCode,'msg'=>$curmsg,"result"=>null];
$source = empty($source)? '':$source;
$logs_model->Write_Log('请求error',$systemParam,$return_data,$from=$source);
$this->ajaxReturn($return_data);exit;
}
}
//请求成功，插入日志
public function api_log($return_data){
$logs_model = D('Logs');//日志模型
$ask_auth_model = D('Askauth'); //请求授权校验模型
//接受header参数--系统参数
$systemParam=$ask_auth_model->getAllHeadersParam();
$source = $systemParam['source'];//来源(0安卓、1ios、2H5、3pc、4php 、5 java )
$logs_model->Write_Log('success',$systemParam,$return_data,$from=$source);
}
/**********************************************************************/
}
?>
<?php
namespace Home\Controller;
use Think\Controller;
use Think\Model;
class UploadController extends BaseController {
public function index(){
$data = array('msg' =>"加载成功！" , 'status'=>'0','result'=>null);
$this->ajaxReturn($data);
}
/****
* 图片上传: 单图 from_data
* service_type --业务类型--必传：
* 1 前台 - 用户头像
* 2 管理后台 - 广告图片
* 3 管理后台 - 商品图片
* 4 管理管理后台 - 商品详情
* 5 前台 - 打款凭证(大额订单)
* 6 管理后台 - icon图标
* 7 前台 - 店铺logo
* 8 管理后台 - APP开屏广告
* 9 店铺二维码 - 前台
******/
public function file_one(){
$data = I("post.data");
$data = json_decode(htmlspecialchars_decode($data),true);//业务参数json格式
if(empty($data['service_type']) ){
//必传字段为空
$data = array('status' => '1','errorCode' => '300100', 'msg' =>"请选择业务类型",'result'=>null);
$this->ajaxReturn($data);
}
if(empty($_FILES['file_name'])){//请选择你要上传得文件
$data = array('status' => '1','errorCode' => '300101', 'msg' =>"请选择你要上传得文件",'result'=>null);
$this->ajaxReturn($data);
}
$ext = $data['ext'];
$receivename = $data['receivename'];
$service_type = $data['service_type'];
$size_check = false; //是否开启尺寸验证
$file_type = array('jpg', 'gif', 'png', 'jpeg','tmp');
$file_maxSize = '5242880'; //5M
$file_width = '100';
$file_height = '100';
switch ($service_type) {
case '1': //用户头像
$folder_path ="/server/user/";
$file_maxSize = '13631488'; //13M
break;
case '2': //广告图片: 文件命名不能带有ad ： 小米会屏蔽
$folder_path ="/server/billboard/"; break;
case '3': //商品图片
$folder_path ="/server/goods/"; break;
case '4': //商品详情
$folder_path ="/server/detail/"; break;
case '5': //打款凭证(大额订单)
$folder_path ="/server/large/";
$file_maxSize='13631488'; //13M
break;
case '6': //icon图标
$folder_path ="/server/icon/"; break;
case '7': //店铺logo 前台
$folder_path ="/server/store/"; break;
case '8': //APP开屏广告
$folder_path ="/server/peacock/"; break;
case '9': //店铺二维码
$folder_path ="/server/qrcode/"; break;
case '10': //商品分类
$folder_path ="/server/goodcate/"; break;
case '11': //商品品牌
$folder_path ="/server/goodbrand/"; break;
case '12': //提现附件
$folder_path ="/server/annexes/"; break;
case '13': //富文本编辑器
$folder_path ="/server/text/"; break;
default:
$folder_path ='';break;
}
$Upload_model = D('Upload');
$result = $Upload_model->upload_put_img('file_name',$size_check,$file_type,$file_maxSize,$file_width,$file_height,$folder_path,$service_type,$ext,$receivename);
if($result['status'] == '1'){
$status = '1';
$errorCode = '300102';
$msg = $result['msg'];
$result = null;
}else{
$status = '0';
$errorCode = '0';
$msg = '操作成功！';
$result = array(
'filepath'=>$result['filepath'],
'fileview'=>$result['fileview']
);
}
$return_data = array('status'=>$status,'errorCode'=>$errorCode,'msg'=>$msg,'result'=>$result);
//写入请求日志
$this->api_log($return_data);
$this->ajaxReturn($return_data);
}
}
<?php
namespace Home\Model;
use Think\Model;
/****
* 请求授权模型
*/
class AskauthModel extends Model
{
Protected $autoCheckFields = false;
/**
* @title 签名函数
* @param $paramArr 系统参数
* @param $token TOKEN
* @return string 返回签名
*/
public function createSign ($paramArr,$apiKey) {
ksort($paramArr);
$sign='';
foreach ($paramArr as $key => $val) {
if ($key != '' && $val != '') {
$sign .= $key."=".$val."&";
}
}
$sign=rtrim($sign,"&");
$sign.=$apiKey;
$sign=strtolower($sign); //转为小写
$sign = md5($sign);
return $sign;
}
/**
* @title 校验
* @param $source TOKEN
* @param $data TOKEN
* @param $token TOKEN
* @param $timestamp TOKEN
* @param $version TOKEN
* @param $privatekey TOKEN
* @param $sign TOKEN
*/
public function checkAuth($source,$data,$token,$timestamp,$version,$privatekey,$sign){
if($source==2){
$datas=stripslashes(json_encode($data, JSON_UNESCAPED_UNICODE));
}else{
$datas=json_encode($data, JSON_UNESCAPED_UNICODE);
}
//系统参数
$paramArr=array(
'token'=>$token,
'timestamp'=>$timestamp,
'version'=>$version,
'source'=>$source,
'data'=>$datas,
);
//按规则拼接为字符串
$str = $this->createSign($paramArr,$privatekey);
// print_r($paramArr);
// print_r($str);
// echo "---";
// echo $sign;
// exit;
if($str !== $sign){
return false;
}
return true;
}
/**
* 获取所有 以 HTTP开头的header参数
* @return array
*/
public function getAllHeadersParam(){
$headers = array();
foreach($_SERVER as $key=>$value){
if(substr($key, 0, 5)==='HTTP_'){
$key = substr($key, 5);
$key = str_replace('_', ' ', $key);
$key = str_replace(' ', '-', $key);
$key = strtolower($key);
$headers[$key] = $value;
}
}
return $headers;
}
/**
* @desc 返回respon
*/
public function getResponse(){
$statsEntity=array(
"status"=>0,
"errorCode"=>0,
"msg"=>"成功",
"result"=>null
);
return $statsEntity;
}
/**
* 非法IP限制访问
* @param array $config
* @return void
*/
public function illegalip(){
$remote_ip = sys_get_client_ip();
$array_ip_allow = C('ip_allow');
if(in_array($remote_ip, $array_ip_allow)){
return 1; //true
}
return 2; //false
}
//限制请求接口次数
public function ask_count(){
$client_ip = sys_get_client_ip();
$ask_url = sys_GetCurUrl();
$limit_num = C('api_ask_limit'); //限制次数
$limit_time = C('api_ask_time'); //有效时间内,单位：秒
$now_time = time();
$youxiao_time = $now_time - $limit_time;
$ipwhere['creatime'] = array('EGT',date('Y-m-d H:i:s',$youxiao_time));
$ipwhere['ip_name'] = $client_ip;
$ipwhere['ask_url'] = $ask_url;
$check_result = M('log_ip_ask')->where($ipwhere)->count();
if($check_result !=='0'){
if($check_result >= $limit_num){
return 2; //false 已经超出了限制次数
}
}
//执行插入
$add_data = array(
'ip_name'=>$client_ip,
'ask_url'=>$ask_url,
'creatime'=>date('Y-m-d H:i:s',time())
);
$result = M('log_ip_ask')->data($add_data)->add();
if($result){
return 1; //true
}else{
return 3; //true
}
}
}
<?php
namespace Home\Model;
use Think\Model;
/****
* 操作日志
*/
class LogsModel extends Model
{
Protected $autoCheckFields = false;
/**
* 写入日志
*
* @param type $message 状态信息： 成功还是失败
* @param type $param 请求参数
* @param type $return 返回参数
* @param type $from 来源
*
* @return boolean
*/
public function Write_Log($message,$systemParam,$return_data,$from) {
$from=$this->source($from);
if(empty($message) || empty($systemParam) || empty($return_data) || empty($from) ){
return false;
}
$log_arr = array(
'message' => $message,
'create_time' => date('Y-m-d H:i:s'),
'ask_ip' => sys_get_client_ip(),
'ask_from' => $from,
'ask_content'=>json_encode($systemParam),
'return_content'=>json_encode($return_data),
);
$log_resulet = M("log_system")->data($log_arr)->add();
if ($log_resulet){
return true;
}else{
return false;
}
}
//请求来源判定
private function source($source){
switch ($source){
case '0':$result='android';break;
case '1':$result='ios';break;
case '2':$result='H5';break;
case '3':$result='pc';break;
case '4':$result='php';break;
case '5':$result='java';break;
default: $result='other';
}
return $result;
}
}
