<?php
/*
 * @copyright   Leyun internet Technology(Shanghai)Co.,Ltd
 * @license     http://www.dzzoffice.com/licenses/license.txt
 * @package     DzzOffice
 * @link        http://www.dzzoffice.com
 * @author      zyx(zyx@dzz.cc)
 */
if(!defined('IN_DZZ')) {
	exit('Access Denied');
} 
Hook::listen('email_chk',$_GET);
$navtitle=lang('Safety management').' - '.lang('myCountCenter');
Hook::listen('check_login');
$verify = C::t('user_verify')->fetch($_G['uid']);//验证信息
$do=trim($_GET['do']) ? trim($_GET['do']):'editpass';

$uid=intval($_G['uid']); 
$seccodecheck = $_G['setting']['seccodestatus'] & 4; 
$hook_qqbind_arr=array("uid"=>$uid); 
$member=C::t('user_profile')->get_userprofile_by_uid($_G['uid']); 
//$openid= C::t('user_qqconnect')->fetch_bindstatus_by_uid($uid);

if($do == 'editpass'){

    $strongpw = ($_G['setting']['strongpw']) ? json_encode($_G['setting']['strongpw']):'';
    if(isset($_GET['editpass'])){

        //验证提交是否合法，阻止外部非法提交
        chk_submitroule($type);

        //验证码
        if(!check_seccode( $_GET['seccodeverify'],$_GET['sechash'])){

            showTips(array('error'=>lang('submit_seccode_invalid')), $type);
        }
        //验证原密码
        $password0=$_GET['password0']; 
		if( md5(md5("").$member['salt'])!=$member['password']) {
			if(md5(md5($password0).$member['salt'])!=$member['password']){ 
				showTips(array('error'=>lang('password_error')), $type);
			}
		}  

        if($_GET['password'] && $_G['setting']['pwlength']) {
            if(strlen($_GET['password']) < $_G['setting']['pwlength']) {

                showTips(array('error'=>lang('profile_password_tooshort'),'pwlength'=>$_G['setting']['pwlength']), $type);
            }
        }

        //验证密码强度
        if($_GET['password'] && $_G['setting']['strongpw']) {
            $strongpw_str = array();
            if(in_array(1, $_G['setting']['strongpw']) && !preg_match("/\d+/", $_GET['password'])) {
                $strongpw_str[] = lang('strongpw_1');
            }
            if(in_array(2, $_G['setting']['strongpw']) && !preg_match("/[a-z]+/", $_GET['password'])) {
                $strongpw_str[] = lang('strongpw_2');
            }
            if(in_array(3, $_G['setting']['strongpw']) && !preg_match("/[A-Z]+/", $_GET['password'])) {
                $strongpw_str[] = lang('strongpw_3');
            }
            if(in_array(4, $_G['setting']['strongpw']) && !preg_match("/[^a-zA-z0-9]+/", $_GET['password'])) {
                $strongpw_str[] = lang('strongpw_4');
            }
            if($strongpw_str) {

                showTips(array('error'=>lang('password_weak').implode(',', $strongpw_str)), $type);

            }
        }

        if($_GET['password'] && $_GET['password'] !== $_GET['password2']) {

            showTips(array('error'=>lang('profile_passwd_notmatch')), $type);
        }
        $setarr=array();

        if($_GET['password']){

            $password = preg_match('/^\w{32}$/', $_GET['password']) ? $_GET['password'] : md5($_GET['password']);

            $password = md5($password.$member['salt']);
        }

        if($password && C::t('user')->update_password($_G['uid'],$password)){
            showTips(array('success'=>lang('update_password_success')), $type);
            exit();
        }
    }

}
elseif($do == 'login'){
	function get_log_files($logdir = '', $action = 'action') {
	$dir = opendir($logdir);
	$files = array();
	while($entry = readdir($dir)) {
		$files[] = $entry;
	}
	closedir($dir);

	if($files) {
		sort($files);
		$logfile = $action;
		$logfiles = array();
		$ym = '';
		foreach($files as $file) {
			if(strpos($file, $logfile) !== FALSE) {
				if(substr($file, 0, 6) != $ym) {
					$ym = substr($file, 0, 6);
				}
				$logfiles[$ym][] = $file;
			}
		}
		if($logfiles) {
			$lfs = array();
			foreach($logfiles as $ym => $lf) {
				$lastlogfile = $lf[0];
				unset($lf[0]);
				$lf[] = $lastlogfile;
				$lfs = array_merge($lfs, $lf);
			}
			return $lfs;
		}
		return array();
	}
	return array();
}
	!isset($_GET['page']) && $_GET['page']=1;
	$lpp = empty($_GET['lpp']) ? 20 : $_GET['lpp'];
	$checklpp = array();
	$checklpp[$lpp] = 'selected="selected"';
	$keyword = "uid=".$_G['uid'];
	$extrainput = '';
	$operation = "loginlog"; 
  $page = (isset($_GET['page'])) ? intval($_GET['page']) : 1;
  $start = ($page - 1) * $lpp;
  $gets = array(
    'mod' => MOD_NAME,
		'op' => $_GET['op'],
		'do' => $_GET['do']
  );
  $theurl = BASESCRIPT . "?" . url_implode($gets);
	$logdir = DZZ_ROOT.'./data/log/';
	$logfiles = get_log_files($logdir, $operation);
	 
	if($logfiles) $logfiles=array_reverse($logfiles);
	//error_reporting(E_ALL);
	$firstlogs = file( $logdir.$logfiles[0] ) ; 
	$firstlogsnum = count($firstlogs);
	$countlogfile=count($logfiles);
	 
	$logs = array();
	$jishu=4000;//每个日志文件最多行数
	$start = ($page - 1) * $lpp;
	$lastlog=$last_secondlog="";
	
	$newdata=array();
	foreach($logfiles as $k=>$v){
		$nowfilemaxnum=($jishu*($k+1))-($jishu-$firstlogsnum);
		$startnum=($nowfilemaxnum-$jishu)<=0?0:($nowfilemaxnum-$jishu+1); 
		$newdata[]=array("file"=>$v,"start"=>$startnum,"end"=>$nowfilemaxnum); 
	}
	//print_R($newdata);
	//查询当前分页数据位于哪个日志文件
	$lastlog=$last_secondlog="";
	foreach($newdata as $k=>$v){
		if( $start<=$v["end"]){
			$lastlog=$v;
			if( ($start+$lpp)<$v["end"]){
				 
			}else{
				if( isset($newdata[$k+1])){
					$last_secondlog=$newdata[$k+1];
				}
			}
			break;
		}
	}
	 
	$j=0; 
	for($i=$lastlog["start"];$i<$lastlog["end"];$i++){
		if(  $start<=($lastlog["start"]+$j) ){ 
			break;
		}
		$j++;
	}
	//获取数据开始
	$logs = file( $logdir.$lastlog["file"] );
	$logs = array_reverse($logs);
	foreach($logs as $key => $value) {
		if(!empty($keyword) && strpos($value, $keyword) === FALSE) {
		unset($logs[$key]);
		}
	}
	$count = count($logs);
	if( $lastlog["file"]!=$logfiles[0] ){
		$j++;
	}
	$logs = array_slice($logs, $j, $lpp);
	$onecountget = count($logs);
	 
	$jj=0;
	if( $last_secondlog ){
		for($i=$last_secondlog["start"];$i<$last_secondlog["end"];$i++){
			if( ($jj)>= ($lpp-$onecountget)  ){//$last_secondlog["start"] ){ 
				break;
			}
			$jj++;
		} 
	}
	 
	if($last_secondlog){
		$logs2 = file( $logdir.$last_secondlog["file"] );
		$logs2 = array_reverse($logs2);
		$end=$lpp-count($logs); 
		$logs2 = array_slice( $logs2, 0, $jj);
		$logs=array_merge($logs,$logs2);
	}
	$usergroup = array(); 
	foreach(C::t('usergroup')->range() as $group) {
		$usergroup[$group['groupid']] = $group['grouptitle'];
	}
	$list=array();
	foreach($logs as $k => $logrow) {
		$log = explode("\t", $logrow); 
		if(empty($log[1])) {
			continue;
		}
		$log[1] = dgmdate($log[1], 'y-n-j H:i:s');
		$log[2] = $log[2];
		$log[2] = ($log[2] != $_G['member']['username'] ? "<b>$log[2]</b>" : $log[2]);
		$log[3] = $usergroup[$log[3]];
		
		$list[$k]=$log;
	}
$multi = multi($count, $lpp, $page, $theurl,'pull-right');
}
elseif($do == 'changeemail'){

    $emailchange = $member['emailstatus'];

    $bindemail = isset($_GET['newemail']) ? $_GET['newemail']:'';

    if(!empty($bindemail)){

        if(C::t('user')->chk_email_by_uid($bindemail,$uid)){

            showTips(array('error'=>lang('profile_email_duplicate')),$type);
        }

        $idstring = random(6);

        $type = $_GET['returnType'];

        $confirmurl = C::t('shorturl')->getShortUrl("{$_G[siteurl]}user.php?mod=profile&op=password&do=changeemail&uid={$_G[uid]}&id=$idstring&email={$bindemail}");
        $sitename=$_G['setting']['sitename'];
        $email_bind_message = <<<EOT
      <p style="font-size:14px;color:#333; line-height:24px; margin:0;">尊敬的用户$member[username],您好！</p>
      <p style="line-height: 24px; margin: 6px 0px 0px; overflow-wrap: break-word; word-break: break-all;"><span style="color: rgb(51, 51, 51); font-size: 14px;">这封信是由 $sitename 发送的。您收到这封邮件，是由于在 $sitename 进行了Email 绑定操作，或修改 Email 绑定使用了这个邮箱地址。如果您不是 $sitename 的用户，或没有进行上述操作，请忽略这封邮件。您不需要退订或进行其他进一步的操作。</span></p>
      <p style="line-height: 24px; margin: 6px 0px 0px; overflow-wrap: break-word; word-break: break-all;"><span style="color: rgb(51, 51, 51); font-size: 14px;font-weight:bold;">邮箱绑定链接：</span></p>
      <p style="line-height: 24px; margin: 6px 0px 0px; overflow-wrap: break-word; word-break: break-all;"><span style="color: rgb(51, 51, 51); font-size: 12px;"><a href="$confirmurl" style="text-decoration-line: none; word-break: break-all; overflow-wrap: normal; color: rgb(51, 51, 51); font-size: 12px;" rel="noopener" target="_blank"><span style="color: rgb(0, 164, 255);">$confirmurl</span></a><span style="font-size: 12px; color: rgb(51, 51, 51);">,(如果上面不是链接形式，请将该地址手工粘贴到浏览器地址栏再访问)</span></p>
EOT;
        if(!sendmail("$member[username] <$bindemail>",'Email 绑定', $email_bind_message)) {

            runlog('sendmail', "$bindemail  发送失败");

            showTips(array('error'=>lang('setting_mail_send_error')),$type);

        }else{
            $updatearr = array("emailsenddate"=>$idstring.'_'.time());
            C::t('user')->update($uid,$updatearr);
            showTips(array('success'=>array('email'=>$bindemail)),$type);

        }

    }
}
//三方登录未设置密码时不需要输入原密码
$showoldpassword=1; 
if( md5(md5("").$member['salt'])==$member['password']) {
	$showoldpassword=0;
} 
include template('pass_safe');
exit();