dz论坛登录注册-dz论坛第三方登录注册

hanx23

1. <?php
   
2. define('NOROBOT', FALSE);
   
3. define('ADMINSCRIPT', basename(__FILE__));
   
4. define('CURSCRIPT', 'admin');
   
5. define('HOOKTYPE', 'hookscript');
   
6. define('APPTYPEID', 0);
   
7. //define('CURMODULE', $mod);
   
8. 
   
9. require './source/class/class_core.php';
   
10. 
    
11. $discuz = C::app();
    
12. $discuz->init();
    
13. 
    
14. require libfile('function/member');
    
15. require libfile('class/member');
    
16. runhooks();
    
17. 
    
18. //解密
    
19. function decode($data)
    
20. {
    
21.     $res =  base64_decode($data);
    
22.     return  explode('1234568899',$res)[1];
    
23. }
    
24. 
    
25. $newusername = trim($_GET['newusername']);
    
26. $newpassword = decode(trim($_GET['newpassword']));
    
27. $newemail = isset($_GET['newemail'])? strtolower(trim($_GET['newemail'])):$newusername.'@xxx.com';
    
28. 
    
29. if(!$newusername || !$newemail)
    
30. {
    
31.     showmessage('您目前未登录居利家网，暂时以游客身份只读访问论坛');
    
32. }
    
33. 
    
34. // 以下几句防止第3方伪造
    
35. $time= (int)($_GET["time"]);
    
36. $curdate= time();
    
37. $str= 'Pwa8R7M4S0yXTOXiIKYhFLrqAyeRkSpm';
    
38. $seckey= $time.$newusername.$str;
    
39. $seckey=  md5($seckey);
    
40. if($curdate-$time>1200 || $seckey!=$_GET['code'])
    
41. {
    
42.     showmessage('submit_invalid');
    
43. }
    
44. 
    
45. $_G['uid']='';
    
46. $userid=C::t('common_member')->fetch_uid_by_username($newusername);
    
47. $_SERVER['REQUEST_METHOD'] = 'POST';//注册需要模拟POST防止2次校验不通过
    
48. $_GET['formhash'] = formhash();// 防止 2次校验不通过
    
49. $_G['group']['seccode']='';// 防止 2次校验不通过
    
50. 
    
51. if(!$userid){// 没有找到对应用户则调用注册
    
52.     $_GET['regsubmit']='yes';
    
53.     $_GET['infloat']='yes';
    
54.     $_GET['lssubmit']='yes';
    
55.     $ctl_obj = new register_ctl();
    
56.     $ctl_obj->setting = $_G['setting'];
    
57.     $ctl_obj->template = 'member/register';
    
58. 
    
59.     $_GET[''.$ctl_obj->setting['reginput']['username']]=$newusername;
    
60.     $_GET[''.$ctl_obj->setting['reginput']['password']]= $newpassword;
    
61.     $_GET[''.$ctl_obj->setting['reginput']['password2']]= $newpassword;
    
62.     $_GET[''.$ctl_obj->setting['reginput']['email']] =$newemail;
    
63. 
    
64.     $ctl_obj->on_register();
    
65. }
    
66. 
    
67. //uc_user_synlogout();
    
68. $_G['groupid'] = $_G['member']['groupid'] = 7;
    
69. $_G['uid'] = $_G['member']['uid'] = 0;
    
70. $_G['username'] = $_G['member']['username'] = $_G['member']['password'] = '';
    
71. 
    
72. // 登陆
    
73. $_GET['loginsubmit']='yes';
    
74. $_GET['lssubmit']='';
    
75. $_GET['username']=$newusername;
    
76. $_GET['password']= $newpassword;
    
77. $ctl_obj = new logging_ctl();
    
78. $ctl_obj->setting = $_G['setting'];
    
79. $ctl_obj->template = 'member/login';
    
80. $ctl_obj->on_login();
    
81. 
    
82. //调用
    
83. $url = 'http://www.xxx.cn/addorlogin.php?';
    
84. $url.'newusername='.$username.'&newpassword='.$password.'&time='.$time.'&code='.$code;
    
85. 
    
86. ?>

复制代码