WooYun.org

public function sendsmsAction(){


            $this->_helper->viewRenderer->setNoRender();


            $userip = $_SERVER["REMOTE_ADDR"];


            $pid = $_REQUEST['pid'];


            $phone = $_REQUEST['phone'];


            $lan = $_REQUEST['lan'];


            $curtime = $_REQUEST['curtime'];


            $passport = $_REQUEST['passport'];


            $password = "auto!^**wwkeypss";


	    $json = array(array('code'=>'1', 'msg'=>'申请成功,直接发送短信'),array('code'=>'2', 'msg'=>'申请成功,返回帐号'),array('code'=>'3', 'msg'=>'申请成功,返回帐号和密码'),array('code'=>'-1', 'msg'=>'登陆失败'),array('code'=>'-2', 'msg'=>'非法的手机号'),array('code'=>'-3', 'msg'=>'非法的mac地址'),array('code'=>'-4', 'msg'=>'非法>的校验位'));


            $value = md5($pid.$phone.$curtime.$password);





            if($passport!=$value){


                $rt = json_encode($json[6]);


                echo $rt ;


                die;


            }





            $getsmsurl = "**.**.**.**/portal/regbycustomer?idtype=1&idnum=$phone";


            $f = fopen($getsmsurl, "r");


            if($f){


                    $smscode=fread($f,60);


                    $result = substr($smscode,10,1);


//                      var_dump($smscode);echo "</br>";


//                  var_dump($result);


                    if($result == 1){


                        $rt = json_encode($json[0]);


                        echo $rt;


                    }


            }








    }

public function ajaxloginAction()


    {


        $this->_helper->viewRenderer->setNoRender();


        $user=trim($_POST['user']);


        $password=trim($_POST['password']);


	$mac=$_SESSION["usermac"];


	$userIp = $_SERVER['REMOTE_ADDR'];


	$userip = $_SERVER["REMOTE_ADDR"];


        if ('' == $user) {


            echo -4;//账号不能为空


            return;


        }


        if ('' == $password) {


            echo -5;//密码不能为空


            return;


        }


        //require_once '../application/models/Login/Standard.php';


        require_once '../application/models/Remote/DataValidation.php';


        $login=new Models_Remote_DataValidation();


        $rs=$login->checkLogin($user, $password);


        //echo $rs;// -1:用户名，密码不对,-2:用户帐号使用时间已到期,正值：剩余上网时间


	$len=strlen($rs);


	if($len > 10)


	{


		echo 0;


		fopen("http://".REMOTE_ADDRESS."/portal/macinsacct?mac=$mac&user=$user&pass=$password", "r");


		


		error_log("user==================================".$user);


		$i=0;


		for($i=0;$i<3;$i++)


		{


			$rt=$this->test();


			error_log("bras rt=$rt");


			





			if(0==$rt)


			{


				$sendurlcn = "**.**.**.**/portal/sendloginauth?ip=$userip&username=$user&msgtype=2";


                        try{


                                fopen ( $sendurlcn, "r" );


                        }catch(Exception $e){





			}





			break;


			}





			


			break;








		}


		if(0==$rt)


		{


			


			$cookiewu=$_COOKIE['loginwu'];


			$cookiewp=$_COOKIE['loginwp'];


			if ($cookiewu && $cookiewp){


				


			}else{


				$loginuser = $user;


				$loginpass = $password;


				$sendurlcn = "**.**.**.**/portal/getregtime?username=$user";


				$f = fopen ( $sendurlcn, "r" );


				if($f){


					$name=fread($f,80);


					$logintimescj = $name;


				}else{


// 					$username = $user;


				}


				setcookie("loginwu","$loginuser",time()+3600*4);


				setcookie("loginwp","$loginpass",time()+3600*4);


				setcookie("loginwt","$logintimescj",time()+3600*4);


			}


			error_log("user=================loginsuccess============".$user);


			echo  $rt;


		}


		elseif(2==$rt)


		{


			echo "1";


			error_log("重复登陆，直接跳转!");


		}


		else


		{


			echo "-3";


			error_log("login fail !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!");


		}


		


	}else


	{


		echo $rs;


		error_log("login failed rt=$rt\n");


	}


    }

function updateConf($username, $pass, $server){


		if(!file_exists("api/config.inc.php")) return "文件smsdemo/api/config.inc.php 不存在！";


		if(!is_writable("api/config.inc.php")) return "文件smsdemo/api/config.inc.php 不可写！请检查文件属性！";


		$fd = fopen("api/config.inc.php","w");


		if(!$fd) return "文件smsdemo/api/config.inc.php 打不开, 请检查文件属性！";


		$line = '<? '."\n".


				'/** '."\n".


				' * 这是配置文件 '.


				' * $'."vcpserver		SCP服务器地址，测试服务器为**.**.**.**，正式服务器为**.**.**.** "."\n".


				' * $'."vcpserverport	SCP服务器，在测试环境和真实环境，使用的接口均为20001 "."\n".


				' * $'."vcpsuser		时代互联提供的真实短信用户或测试用户 "."\n".


				' * $'."vcppassword		 时代互联提供的真实短信用户密码或测试用户密码 "."\n".


				' * '."\n".


				' * **.**.**.**,Inc. http://**.**.**.** '."\n".


				'**/ '."\n".


				'$'.'vcpserver="'.$server.'"; '."\n".


				'$'.'vcpserverport="20001"; '."\n".


				'$'.'vcpuser="'.$username.'"; '."\n".


				'$'.'vcppassword="'.$pass.'"; '."\n".


				'?> '."\n";


		if(fwrite($fd, $line)===FALSE) return "文件smsdemo/api/config.inc.php 写入失败！请检查文件属性！";


		fclose($fd);


		return "1";


	}