WooYun.org

<?php
/**
 * 91外教用户注册信息
 * @author malh<malinghui@51talk.com>
 *
 */
include 'init.php';
//判断ip来源
$arr_return    = array();
$ip = getClientIP();
if (!in_array($ip, array('121.40.145.142', '112.124.41.101'))) {
	$arr_return['code'] = -2;
	$arr_return['url'] = '';
	$arr_return['msg'] = '非法请求';
	echo json_encode($arr_return);exit;
}
//实例化模型
$obj_user      = Load::loadModel("User");
$obj_stu_point = Load::loadModel("StuPoint");
$obj_storage   = new Storage('/logs/');
//接收参数
$data  = Http::post('data');
$token = Http::post('token');
//添加log日志
$file = '91/' . date('Y_m', time()) . '_reg_log.txt';
$obj_storage->write($file, $data . "\r\n", false);
//解析用户参数        
$data_arr = unserialize($data);
//安全token验证
$key       = '51talk';
$token_md5 = md5(md5($data) . $key);
if ($token_md5 != $token) {
	$arr_return['code'] = -2;
	$arr_return['url'] = '';
	$arr_return['msg'] = '签名错误';
	echo json_encode($arr_return);exit;
}
//验证用户信息
$fromurl       		   = explode(',', Http::cookie('from_url'));
$from                  = $data_arr['from'];//1.网站、2.wap
$userinfo['user_name'] = $data_arr['mail'];
$userinfo['password']  = $data_arr['password'];
$userinfo['mobile']    = $data_arr['phone'];
$userinfo['nickname']  = $data_arr['nickname'];
$userinfo['from_url']  = $fromurl[0];
$userinfo['key_word']  = Http::cookie('query_wd');
$userinfo['from_ip']   = $data_arr['ip'];
$userinfo['ext_id']    = Http::cookie('baihe_user_id', '');
$userinfo['register_from'] = 1001;
$obj_reg = new Model_Register($userinfo, $recommen_code);
//检查注册合法性
if (!$obj_reg->waiJiaoCheckReg()) {
	$arr_return['code'] = -1;
	$arr_return['url'] = $from >1 ? 'http://wap.51talk.com/login.php' : 'http://www.51talk.com/user/user_login.php';
	$arr_return['msg'] = $obj_reg->getMessage();
	echo json_encode($arr_return);exit;
}
$user_id = $obj_reg->doReg();
//执行注册
if (!$user_id) {
	$arr_return['code'] = -1;
	$arr_return['url'] = $from >1 ? 'http://wap.51talk.com/register.php' : 'http://www.51talk.com/user/user_register.php';
	$arr_return['msg'] = '注册时出现异常,请重新注册';
	echo json_encode($arr_return);exit;
}
$user_toke = encode($data_arr['mail'].'_'.$data_arr['password'].'_'.$from.'_'.time());
$arr_return['code'] = 1;
$arr_return['url'] = $from >1 ? 'http://www.51talk.com/wj_user_login.php?token='.$user_toke : 'http://www.51talk.com/wj_user_login.php?token='.$user_toke;
$arr_return['msg'] = '';
echo json_encode($arr_return);exit;