【PHP】一个邮箱点击验证的完整示例

最新推荐文章于 2024-05-07 16:28:22 发布

zzoood

最新推荐文章于 2024-05-07 16:28:22 发布

阅读量435

点赞数 6

分类专栏： php 文章标签： php android 开发语言

本文链接：https://blog.csdn.net/q8688/article/details/135057536

版权

php 专栏收录该内容

55 篇文章 0 订阅

订阅专栏

1.效果展示

2.发送验证码

3.进行验证

以绑定邮箱为例，注册验证的话修改判断逻辑

1.效果展示

2.发送验证码

    /**
     * 发点击验证
     * 参数 email
     */
    public function sendClick(){
        $param = $this->request->post();
        // 邮箱email的validate规则验证，略...

        $user = $this->auth->getUser();
        // 防抖
        $key = md5('send_click'.json_encode($param));
        $lock = Cache::get($key);
        if ($lock){
            $this->error('请勿频繁请求');
        }
        Cache::set($key, 1, 60);
        
        // 邮箱是否已被占用
        $find = User::where(['email' => $param['email']])
            ->where('id', '<>', $user['id'])
            ->find();
        if($find){
            $this->error('该邮箱已被其他账号绑定');
        }

        // 发送邮件
        $from = '我的name';
        $arr['subject'] = '【'.$from.'】请查收你的验证信息';
        $url = request()->domain();
        $content = json_encode([
            'url' => $url,
            'user_id' => $user->id,
            'email' => $param['email'],
            'time' => time(),
        ]);
        // url中的+号需要转义为%2B，否则无法正确识别，并进行常规的AES加解密
        $params = urlencode(Aes::encrypt($content));
        $url = $url.'/xxx/click_verify/check/?params='.$params;

        // 格式化邮箱的确认页面
        $arr['message'] = $this->clickHtml($url);
        $obj = new Email();
        $result = $obj
            ->from('自己的邮箱地址', $from)
            ->to($param['email'])
            ->subject($arr['subject'])
            ->message($arr['message'])
            ->send();
        if (!$result) {
            return false;
        }
        if ($ret) {
            $this->success(__('发送成功'));
        } else {
            $this->error(__('发送失败，请检查短信配置是否正确'));
        }
    }
    /**
     * @param $url
     * @return string
     * 点击验证
     */
    public function clickHtml($url)
    {
        return <<<HTML
<!DOCTYPE html>
<html lang="en">

<head>
  <meta charset="UTF-8">
  <meta name="viewport" content="width=device-width, initial-scale=1.0">
  <title>电子邮件验证</title>
  <style>
    body {
      font-family: Arial, sans-serif;
      background-color: #f7f7f7;
      padding: 20px;
      text-align: center;
    }

    h1 {
      text-align: center;
      margin-bottom: 30px;
    }

    p {
      line-height: 1.5;
      color: #4a4a4a;
      text-align: center;
    }

    a {
      display: inline-block;
      padding: 10px 15px;
      border-radius: 5px;
      color: blue;
      text-decoration: none;
      margin-top: 30px;
      text-align: center;
    }

    a:hover {
      text-decoration: underline;
    }
  </style>
</head>

<body>
  <h1>电子邮件验证</h1>
  <p>感谢您在我们的网站上注册认证！请单击以下链接验证您的电子邮件地址：</p>
  <p style="color: blue">{$url}</p>
</body>

</html>
HTML;
    }

aes加密参考：【PHP】openssl_encrypt、openssl_decrypt对称加密解密-CSDN博客

3.进行验证

    public function check()
    {
        $param = $this->request->get('params');
        // 对参数进行验证
        $ret = $this->encry($param);
        if($ret['code'] == 0){
            $this->error($ret['msg']);
        }
        $array = $ret['array'];
        Db::startTrans();
        try {
            $user = User::where(['id' => $array['user_id']])->find();
            if($user['is_auth_email'] == 1){
                throw new \Exception('该账号已经认证邮箱，无需重复操作');
            }
            $user->is_auth_email = 1;
            $user->email = $array['email'];

            Creditscorelog::package($user, 'email_auth');

            $user->save();
            Db::commit();
        } catch (\Exception $e) {
            $this->error('验证失败：'.$e->getMessage());
        }
        $url = request()->domain();
        $this->success('验证成功', $url);
    }
    // 以下是验证的方法
    protected $noNeedUrl = ['www.taskpublish.com', 'www.52qzl.com'];
    /**
     * 验证
     */
    public function encry($param= []){
        if(empty($param)){
            return ['code' => 0,'msg' => '参数错误,验证失败'];
        }
        $domain = $_SERVER['HTTP_HOST'];
        if(!in_array($domain, $this->noNeedUrl)){
            return ['code' => 0,'msg' => '域名不在白名单中,验证失败'];
        }
        try {
            $ret = Aes::decrypt($param);
        } catch (\Exception $e) {
            return ['code' => 0,'msg' => $e->getMessage()];
        }
        $array = json_decode($ret, true);
        if(empty($array)){
            return ['code' => 0,'msg' => '参数错误,验证失败'];
        }
        if(time() - $array['time'] > 120){
            return ['code' => 0,'msg' => '验证超时,请重新发送'];
        }
        // 邮箱唯一性验证
        $find = User::where(['email' => $array['email']])
            ->where('id', '<>', $array['user_id'])
            ->find();
        if($find){
            return ['code' => 0,'msg' => '该邮箱已被其他账号绑定'];
        }
        return ['code' => 1,'array' => $array];
    }