<?php
/**
 * 用戶驗證中心 登陸用戶處理
 *
 * @param string $username   - 用戶名
 * @param string $password   - 用戶原始密碼
 * @param boolean $remember   - 是否永久記住登陸賬號
 * @param boolean $alreadyEnc  - 傳入的密碼是否已經(jīng)經(jīng)過simpleEncPass加密過
 *
 * @return array  - integer $return['status'] 大于 0:返回用戶 ID，表示用戶登錄成功
 *                        -1:用戶不存在，或者被刪除
 *                        -2:密碼錯
 *                                                 -11：驗證碼錯誤
 *                     string $return['username']   : 用戶名
 *                     string $return['password']   : 密碼
 *                     string $return['email']    : Email
 */

static public function loginSSO($username, $password, $remember=false, $alreadyEnc=false) {
self::_init();
self::_removeLocalSid();
$ret = array();

//
//1. 處理傳入webservice接口的參數(shù)
//
$_params = array(
        'username' => $username,
        'password' => $alreadyEnc ? trim($password) : self::simpleEncPass(trim($password)),
        'ip'    => self::onlineip(),
        'siteFlag' => self::$site,
        'remember' => $remember
);
$_params['checksum'] = self::_getCheckSum($_params['username'] . $_params['password'] .
$_params['ip'] . $_params['siteFlag'] . $_params['remember']);

//
// 2.調(diào)用webservice接口，進行登陸處理
//
$aRet = self::_callSoap('loginUCenter', $_params);

if (intval($aRet['resultFlag']) > 0 && $aRet['sessID']) {
//成功登陸
//設(shè)置本地session id
self::_setLocalSid($aRet['sessID']);

//設(shè)置用戶中心的統(tǒng)一session id腳本路徑
self::$_synloginScript = urldecode($aRet['script']);

$ret = $aRet['userinfo'];
} else {

$ret['status'] = $aRet['resultFlag'];
}

return $ret;
}//end of function         

//b) 用戶驗證中心的webservice服務(wù)程序，接收到登陸驗證請求后，調(diào)用UCenter::loginUCenter()方法來處理登陸請求。
/**
* 用戶驗證中心 登陸用戶處理
*
* @param string $username
* @param string $password
* @param string $ip
* @param string $checksum
* @return array
*/
static public function loginUCenter($username, $password, $ip, $siteFlag, $remember=false) {
self::_init();
session_start();
$ret = array();
$arr_login_res   = login_user($username, $password, $ip);
$res_login     = $arr_login_res['status'];        //
$ret['resultFlag'] = $res_login;

if ($res_login < 1) {
//登陸失敗
} else {

//登陸成功
$_SESSION[self::$_ucSessKey] = $arr_login_res;

$_SESSION[self::$_ucSessKey]['salt'] =
self::_getUserPassSalt($_SESSION[self::$_ucSessKey]['username'], $_SESSION[self::$_ucSessKey]['password']);

$ret['userinfo'] = $_SESSION[self::$_ucSessKey];
$ret['sessID']  = session_id();    //生成全站的唯一session id，作為ticket全站通行

//
//合作中心站回調(diào)登陸接口(設(shè)置用戶中心的統(tǒng)一session id)
//
self::_createCoSitesInfo();
$uinfo = array();
$_timestamp = time();
$_rawCode = array(
            'action' => 'setSid',
            'sid'  => $ret['sessID'],
            'time'  => $_timestamp,
);
if ($remember) {
$uinfo = array(
                'remember' => 1,
                'username' => $username,
                'password' => $password
);
}

$ret['script'] = '';
$_rawStr = http_build_query(array_merge($_rawCode, $uinfo));

//
// 合作站點的全域cookie設(shè)置腳本地址
//
foreach ((array)self::$_coSitesInfo as $_siteInfo) {
$_code = self::authcode($_rawStr, 'ENCODE', $_siteInfo['key']);
$_src = $_siteInfo['url'] . '?code=' . $_code . '&time=' . $_timestamp;
$ret['script'] .= urlencode('');
}

//
// 記住已登陸戰(zhàn)
//
self::registerLoggedSite($siteFlag, $ret['sessID']);

unset($ret['userinfo']['salt']);
}

return $ret;
}

?>