<?php
|
|
define('IN_ECS', true);
|
|
require(dirname(__FILE__) . '/includes/init.php');
|
include_once('includes/cls_json.php');
|
|
|
|
if (!isset($_REQUEST['step']))
|
{
|
$_REQUEST['step'] = "";
|
}
|
|
$result = array('error' => 0, 'message' => '');
|
$json = new JSON;
|
|
$mobile = trim($_POST['mobile']);
|
$old_log = '';
|
if(file_exists("request.log")){
|
$old_log = file_get_contents("request.log");
|
}
|
$log = "ip=".real_ip()." mobile=".$mobile." time=".date('Y-m-d H:i:s',time())."\r\n";
|
$new_log = $old_log.$log;
|
file_put_contents("request.log",$new_log);
|
|
$denied_log = '';
|
if(file_exists("denied.log")){
|
$denied_log = file_get_contents("denied.log");
|
}
|
|
$ip_array = explode(",", $denied_log);
|
|
if(in_array(real_ip(), $ip_array)) {
|
$result['error'] = 6;
|
$result['message'] = '频率过快';
|
die($json->encode($result));
|
}
|
|
|
$count = $db->getOne("SELECT COUNT(id) FROM " . $ecs->table('verifycode') ." WHERE getip='" . real_ip() . "' AND dateline>'" . gmtime() ."'-120");
|
|
if ($count >= 5 && !stristr($denied_log, $_G['clientip']))
|
{
|
$log = real_ip().",";
|
$new_log = $denied_log.$log;
|
file_put_contents("denied.log",$new_log);
|
|
$result['error'] = 6;
|
$result['message'] = '频率过快';
|
die($json->encode($result));
|
}
|
|
if ($_REQUEST['step'] == 'getverifycode')
|
{
|
require(dirname(__FILE__) . '/send.php');
|
//require(dirname(__FILE__) . '/includes/lib_sms.php');
|
|
/* 是否开启手机短信验证 */
|
if($_CFG['sms_register'] == '0') {
|
$result['error'] = 1;
|
$result['message'] = '客户注册发送手机验证码未开启';
|
die($json->encode($result));
|
}
|
|
/* 提交的手机号是否正确 */
|
//if (!ismobile($mobile))
|
// {
|
// $result['error'] = 2;
|
// $result['message'] = '手机号不正确';
|
// die($json->encode($result));
|
// }
|
/* 提交的手机号是否已经注册帐号 */
|
$sql = "SELECT COUNT(user_id) FROM " . $ecs->table('users') ." WHERE mobile_phone = '$mobile'";
|
|
if ($db->getOne($sql) > 0)
|
{
|
$result['error'] = 3;
|
$result['message'] = '手机号已经被注册，请重新输入！';
|
die($json->encode($result));
|
}
|
|
|
/* 获取验证码请求是否获取过 */
|
$sql = "SELECT COUNT(id) FROM " . $ecs->table('verifycode') ." WHERE status=1 AND getip='" . real_ip() . "' AND dateline>'" . gmtime() ."'-"."60";
|
|
if ($db->getOne($sql) > 0)
|
{
|
$result['error'] = 4;
|
$result['message'] = '每个ip每120秒只能获取一次验证码';
|
die($json->encode($result));
|
}
|
$shuzi = "0123456789";
|
$verifycode = mc_random(6,$shuzi);
|
|
$smarty->assign('user_mobile', $mobile);
|
$smarty->assign('verify_code', $verifycode);
|
|
$content = '您好，您的验证码'.$verifycode.';';
|
/* 发送注册手机短信验证 */
|
$ret = sendSMS($mobile, $content);
|
|
$db->query("delete from ".$ecs->table('verifycode')." where mobile='$mobile'");
|
|
//插入获取验证码数据记录
|
$sql = "INSERT INTO " . $ecs->table('verifycode') . "(mobile, getip, verifycode, dateline) VALUES ('" . $mobile . "', '" . real_ip() . "', '$verifycode', '" . gmtime() ."')";
|
$db->query($sql);
|
|
$result['error'] = 0;
|
$result['message'] = '发送手机验证码成功';
|
die($json->encode($result));
|
// }
|
// else
|
// {
|
// $result['error'] = 5;
|
// $result['message'] = '发送手机验证码失败';
|
// die($json->encode($result));
|
// }
|
}
|
|
function mc_random($length,$char_str = 'abcdefghijklmnopqrstuvwxyz0123456789'){
|
$hash='';
|
$chars = $char_str;
|
$max=strlen($chars);
|
for($i=0;$i<$length;$i++){
|
$hash .=substr($chars,(rand(0,1000)%$max),1);
|
}
|
return $hash;
|
}
|
|
?>
|
