153 lines
4.7 KiB
PHP
153 lines
4.7 KiB
PHP
|
|
<?php
|
|||
|
|
// +----------------------------------------------------------------------
|
|||
|
|
// | CRMEB [ CRMEB赋能开发者,助力企业发展 ]
|
|||
|
|
// +----------------------------------------------------------------------
|
|||
|
|
// | Copyright (c) 2016~2026 https://www.crmeb.com All rights reserved.
|
|||
|
|
// +----------------------------------------------------------------------
|
|||
|
|
// | Licensed CRMEB并不是自由软件,未经许可不能去掉CRMEB相关版权
|
|||
|
|
// +----------------------------------------------------------------------
|
|||
|
|
// | Author: CRMEB Team <admin@crmeb.com>
|
|||
|
|
// +----------------------------------------------------------------------
|
|||
|
|
|
|||
|
|
namespace app\services\system\admin;
|
|||
|
|
|
|||
|
|
|
|||
|
|
use app\services\BaseServices;
|
|||
|
|
use crmeb\services\CacheService;
|
|||
|
|
use think\exception\ValidateException;
|
|||
|
|
|
|||
|
|
/**
|
|||
|
|
* 密码、登录次数验证
|
|||
|
|
* Class AdminAuthServices
|
|||
|
|
* @package app\services\system\admin
|
|||
|
|
*/
|
|||
|
|
class LoginAuthServices extends BaseServices
|
|||
|
|
{
|
|||
|
|
|
|||
|
|
/**
|
|||
|
|
* 验证登录账号是否需要锁定
|
|||
|
|
* @param string $account
|
|||
|
|
* @param string $type
|
|||
|
|
* @return bool
|
|||
|
|
*/
|
|||
|
|
public function checkErrorLock(string $account, string $type = 'admin')
|
|||
|
|
{
|
|||
|
|
$loginErrorNum = $this->getErrorNum($account, $type);
|
|||
|
|
if ($loginErrorNum >= (int)sys_config('system_login_error_num', 3)) {
|
|||
|
|
throw new ValidateException('您输入的错误次数较多,已被暂时锁定,请稍后再试');
|
|||
|
|
}
|
|||
|
|
return true;
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
/**
|
|||
|
|
* 获取登录错误次数
|
|||
|
|
* @param string $account
|
|||
|
|
* @param string $type
|
|||
|
|
* @return int
|
|||
|
|
*/
|
|||
|
|
public function getErrorNum(string $account, string $type = 'admin')
|
|||
|
|
{
|
|||
|
|
$errorKey = 'system_' . $type . '_login_error_num_' . $account;
|
|||
|
|
/** @var CacheService $cacheServices */
|
|||
|
|
$cacheServices = app()->make(CacheService::class);
|
|||
|
|
return (int)$cacheServices->get($errorKey);
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
/**
|
|||
|
|
* 设置登录错误次数缓存
|
|||
|
|
* @param string $account
|
|||
|
|
* @param string $type
|
|||
|
|
* @return bool
|
|||
|
|
*/
|
|||
|
|
public function setErrorNum(string $account, string $type = 'admin')
|
|||
|
|
{
|
|||
|
|
$errorKey = 'system_' . $type . '_login_error_num_' . $account;
|
|||
|
|
$lockTime = (int)sys_config('system_login_lock_time', 5);
|
|||
|
|
/** @var CacheService $cacheServices */
|
|||
|
|
$cacheServices = app()->make(CacheService::class);
|
|||
|
|
$loginErrorNum = $this->getErrorNum($account, $type);
|
|||
|
|
$cacheServices::set($errorKey, $loginErrorNum + 1, $lockTime);
|
|||
|
|
return true;
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
/**
|
|||
|
|
* 验证输入密码
|
|||
|
|
* @param string $password
|
|||
|
|
* @return bool
|
|||
|
|
*/
|
|||
|
|
public function validatePassword(string $password)
|
|||
|
|
{
|
|||
|
|
$type = (int)sys_config('system_password_type', 3);
|
|||
|
|
$length = (int)sys_config('system_password_length', 3);
|
|||
|
|
if (!$this->checkPassword($password, $type, $length)) {
|
|||
|
|
throw new ValidateException($this->getMessage($type, $length));
|
|||
|
|
}
|
|||
|
|
return true;
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
/**
|
|||
|
|
* 验证登录密码
|
|||
|
|
* @param string $password
|
|||
|
|
* @param int $type
|
|||
|
|
* @param int $length
|
|||
|
|
* @return false|int
|
|||
|
|
*/
|
|||
|
|
function checkPassword(string $password, int $type = 3, int $length = 6)
|
|||
|
|
{
|
|||
|
|
switch ($type) {
|
|||
|
|
case 1:// 纯数字
|
|||
|
|
$regex = '/^\d{' . $length . ',}$/';
|
|||
|
|
break;
|
|||
|
|
case 2:// 纯字母
|
|||
|
|
$regex = '/^[A-Za-z]{' . $length . ',}$/';
|
|||
|
|
break;
|
|||
|
|
case 3:// 数字 + 纯字母
|
|||
|
|
$regex = '/^(?=.*[A-Za-z])(?=.*\d)[A-Za-z\d]{' . $length . ',}$/';
|
|||
|
|
break;
|
|||
|
|
case 4:// 数字 + 纯字母 + 特殊符号
|
|||
|
|
// 使用 [\W_] 匹配所有特殊字符和下划线
|
|||
|
|
$regex = '/^(?=.*[A-Za-z])(?=.*\d)(?=.*[\W_])[A-Za-z\d\W_]{' . $length . ',}$/';
|
|||
|
|
break;
|
|||
|
|
default:
|
|||
|
|
$regex = '/^(?=.*[A-Za-z])(?=.*\d)[A-Za-z\d]{' . $length . ',}$/';
|
|||
|
|
break;
|
|||
|
|
}
|
|||
|
|
return preg_match($regex, $password);
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
|
|||
|
|
/**
|
|||
|
|
* 获取验证密码提示语
|
|||
|
|
* @param int $type
|
|||
|
|
* @param int $length
|
|||
|
|
* @return string
|
|||
|
|
*/
|
|||
|
|
public function getMessage(int $type = 3, int $length = 6)
|
|||
|
|
{
|
|||
|
|
switch ($type) {
|
|||
|
|
case 1://纯数字
|
|||
|
|
$desc = '纯数字';
|
|||
|
|
break;
|
|||
|
|
case 2://纯字母
|
|||
|
|
$desc = '纯字母';
|
|||
|
|
break;
|
|||
|
|
case 3://数字+纯字母
|
|||
|
|
$desc = '数字+纯字母';
|
|||
|
|
break;
|
|||
|
|
case 4://数字+纯字母+特殊符号
|
|||
|
|
$desc = '数字+纯字母+特殊符号';
|
|||
|
|
break;
|
|||
|
|
default:
|
|||
|
|
$desc = '数字+纯字母';
|
|||
|
|
break;
|
|||
|
|
}
|
|||
|
|
return '密码必须由:' . $desc . '组成,最小' . $length . '位';
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
}
|