WeixinService.php 11 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313
  1. <?php
  2. namespace App\Service\Weixin;
  3. use App\Model\Settings;
  4. use App\Service\Service;
  5. use Illuminate\Support\Facades\Log;
  6. use Illuminate\Support\Facades\Redis;
  7. class WeixinService extends Service
  8. {
  9. const wx_img = "app/public/wx_img/";
  10. public function getToken(){
  11. $config = config('qingyaoWx');
  12. $token_key = $config['redis_key'];
  13. $token = Redis::get($token_key);
  14. if(empty($token)){
  15. $url = sprintf($config['get_token'], $config['appid'], $config['appsecret']);
  16. $res = $this->curlOpen($url);
  17. $res = json_decode($res,true);
  18. if(isset($res['errmsg'])) return [false, $res['errmsg']];
  19. if(! isset($res['access_token'])) return [false, 'request error'];
  20. $token = $res['access_token'];
  21. $expire_time = $res['expires_in']-300;
  22. Redis::set($token_key,$token);
  23. Redis::expire($token_key, $expire_time);
  24. return [true,$token];
  25. }
  26. return [true, $token];
  27. }
  28. public function getPublicWxArticle($data){
  29. list($status, $msg) = $this->rule($data);
  30. if(! $status) {
  31. file_put_contents('record_ip.txt',date("Y-m-d H:i:s",time()).json_encode($data) . PHP_EOL."来源IP".$msg.PHP_EOL,8);
  32. return [false, 'IP未入白名单'];
  33. }
  34. list($status, $msg) = $this->getToken();
  35. if(! $status) return [false, $msg];
  36. $config = config('qingyaoWx');
  37. $url = sprintf($config['get_article'], $msg);
  38. $offset = empty($data['page_index']) ? 0 : $data['page_index'] - 1;
  39. $count = empty($data['page_size']) || $data['page_size'] > 10 ? 10 : $data['page_size'];
  40. $post = [
  41. 'offset' => $offset,
  42. 'count' => $count,
  43. 'no_content' => 0,
  44. ];
  45. $result = $this->curlOpen($url, ['post' => json_encode($post)]);
  46. $result = json_decode($result,true);
  47. if(isset($result['errmsg'])) return [false, $result['errmsg']];
  48. Log::channel('apiLog')->info('wxget', ["message" => $result]);
  49. return [true, ['data' => $result['item'] ?? [], 'total' => $result['total_count'], 'data_count' => $result['item_count']]];
  50. }
  51. public function getPublicWxArticleDetail($data){
  52. list($status, $msg) = $this->rule($data);
  53. if(! $status) {
  54. file_put_contents('record_ip.txt',date("Y-m-d H:i:s",time()).json_encode($data) . PHP_EOL."来源IP".$msg.PHP_EOL,8);
  55. return [false, 'IP未入白名单'];
  56. }
  57. if(empty($data['article_id'])) return [false, '文章ID不能为空'];
  58. list($status, $msg) = $this->getToken();
  59. if(! $status) return [false, $msg];
  60. $config = config('qingyaoWx');
  61. $url = sprintf($config['get_article_detail'], $msg);
  62. $post = [
  63. 'article_id' => $data['article_id'],
  64. ];
  65. $result = $this->curlOpen($url, ['post' => json_encode($post)]);
  66. $result = json_decode($result,true);
  67. if(isset($result['errmsg'])) return [false, $result['errmsg']];
  68. return [true, ['data' => $result['news_item'] ?? [] ]];
  69. }
  70. public function getPublicWxMaterial($data){
  71. list($status, $msg) = $this->rule($data);
  72. if(! $status) {
  73. file_put_contents('record_ip.txt',date("Y-m-d H:i:s",time()).json_encode($data) . PHP_EOL."来源IP".$msg.PHP_EOL,8);
  74. return [false, 'IP未入白名单'];
  75. }
  76. list($status, $msg) = $this->getToken();
  77. if(! $status) return [false, $msg];
  78. $config = config('qingyaoWx');
  79. $url = sprintf($config['get_material'], $msg);
  80. $offset = empty($data['page_index']) ? 1 : $data['page_index'] - 1;
  81. $count = empty($data['page_size']) || $data['page_size'] > 10 ? 10 : $data['page_size'];
  82. $post = [
  83. 'offset' => $offset,
  84. 'count' => $count,
  85. 'type' => 'news',
  86. ];
  87. $result = $this->curlOpen($url, ['post' => json_encode($post)]);
  88. $result = json_decode($result,true);
  89. if(isset($result['errmsg'])) return [false, $result['errmsg']];
  90. return [true, ['data' => $result['item'] ?? [], 'total' => $result['total_count'], 'data_count' => $result['item_count']]];
  91. }
  92. public function getPublicWxDraft($data){
  93. list($status, $msg) = $this->rule($data);
  94. if(! $status) {
  95. file_put_contents('record_ip.txt',date("Y-m-d H:i:s",time()).json_encode($data) . PHP_EOL."来源IP".$msg.PHP_EOL,8);
  96. return [false, 'IP未入白名单'];
  97. }
  98. list($status, $msg) = $this->getToken();
  99. if(! $status) return [false, $msg];
  100. $config = config('qingyaoWx');
  101. $url = sprintf($config['get_draft'], $msg);
  102. $offset = empty($data['page_index']) ? 1 : $data['page_index'] - 1;
  103. $count = empty($data['page_size']) || $data['page_size'] > 10 ? 10 : $data['page_size'];
  104. $post = [
  105. 'offset' => $offset,
  106. 'count' => $count,
  107. 'no_content' => 0,
  108. ];
  109. $result = $this->curlOpen($url, ['post' => json_encode($post)]);
  110. $result = json_decode($result,true);
  111. if(isset($result['errmsg'])) return [false, $result['errmsg']];
  112. return [true, ['data' => $result['item'] ?? [], 'total' => $result['total_count'], 'data_count' => $result['item_count']]];
  113. }
  114. public function getWxFile($data){
  115. list($status, $msg) = $this->rule($data);
  116. if(! $status) {
  117. file_put_contents('record_ip.txt',date("Y-m-d H:i:s",time()).json_encode($data) . PHP_EOL."来源IP".$msg.PHP_EOL,8);
  118. return [false, 'IP未入白名单'];
  119. }
  120. if(empty($data['wx_url'])) return [false, "URL不存在"];
  121. $header = ['Content-Type:application/json'];
  122. list($status,$msg) = $this->get_helper_for_img($data['wx_url'],$header);
  123. if(! $status) return [false, $msg];
  124. return [true, $msg];
  125. }
  126. public function rule($data){
  127. // 获取用户的IP地址
  128. $userIP = $_SERVER['REMOTE_ADDR'];
  129. // 获取设置的IP地址
  130. $allowedIPs = $this->allowedIPs();
  131. if(empty($allowedIPs)) return [false, $userIP];
  132. // 校验用户IP是否在允许的范围内
  133. $isValidIP = false;
  134. foreach ($allowedIPs as $allowedIP) {
  135. if (strpos($allowedIP, '/') !== false) {
  136. // IP段表示法校验
  137. list($subnet, $mask) = explode('/', $allowedIP);
  138. if ((ip2long($userIP) & ~((1 << (32 - $mask)) - 1)) == ip2long($subnet)) {
  139. $isValidIP = true;
  140. break;
  141. }
  142. } else {
  143. // 单个IP地址校验
  144. if ($allowedIP === $userIP) {
  145. $isValidIP = true;
  146. break;
  147. }
  148. }
  149. }
  150. return [$isValidIP, $userIP];
  151. }
  152. public function allowedIPs(){
  153. $allowedIPs = Settings::where('setting_name','allowedIPs')->first();
  154. if(empty($allowedIPs) || empty($allowedIPs->setting_value)) return [];
  155. return explode(',',$allowedIPs->setting_value);
  156. }
  157. public function get_helper_for_img($url,$header=[],$timeout = 20){
  158. $ch = curl_init();
  159. curl_setopt_array($ch, array(
  160. CURLOPT_URL => $url,
  161. CURLOPT_RETURNTRANSFER => true,
  162. CURLOPT_ENCODING => '',
  163. CURLOPT_MAXREDIRS => 10,
  164. CURLOPT_TIMEOUT => $timeout,
  165. CURLOPT_FOLLOWLOCATION => true,
  166. CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  167. CURLOPT_CUSTOMREQUEST => 'GET',
  168. CURLOPT_SSL_VERIFYPEER => false,
  169. CURLOPT_HTTPHEADER => $header,
  170. ));
  171. $r = curl_exec($ch);
  172. if ($r === false) {
  173. // 获取错误号
  174. $errorNumber = curl_errno($ch);
  175. // 获取错误信息
  176. $errorMessage = curl_error($ch);
  177. $message = "cURL Error #{$errorNumber}: {$errorMessage}";
  178. Log::channel('apiLog')->info('wx', ["message" => $message]);
  179. return [false, $message];
  180. }
  181. $httpCode = curl_getinfo($ch, CURLINFO_HTTP_CODE);
  182. curl_close($ch);
  183. // 检查是否为图片
  184. if (! $this->isImage($r)) return [false, "资源不是图片"];
  185. if ($httpCode == 200) {
  186. // 检查是否为图片
  187. list($status, $msg) = $this->getTemporaryUrl($r, $url);
  188. if(! $status) return [false, $msg];
  189. $img = $msg;
  190. } else {
  191. return [false, ''];
  192. }
  193. return [true, $img];
  194. }
  195. function isImage($data) {
  196. $imageInfo = getimagesizefromstring($data);
  197. return $imageInfo !== false;
  198. }
  199. //生成临时文件
  200. public function getTemporaryUrl($body,$url)
  201. {
  202. // 定义本地文件路径
  203. $name = md5($url) . '.jpg';
  204. $localFilePath = storage_path(self::wx_img . $name);
  205. // 写入文件前先检查文件是否存在
  206. if (! file_exists($localFilePath)) {
  207. // 检查目录是否存在,如果不存在则创建
  208. $directoryPath = dirname($localFilePath);
  209. if (!is_dir($directoryPath)) {
  210. // 设置目录权限,可以根据需要更改
  211. $mode = 0777;
  212. // 使用递归选项创建目录
  213. if (!mkdir($directoryPath, $mode, true)) {
  214. return [false, '目录创建失败'];
  215. }
  216. }
  217. file_put_contents($localFilePath, $body);
  218. }
  219. return [true, $name];
  220. }
  221. public function getArticle(){
  222. list($status, $msg) = $this->getToken();
  223. if(! $status) return [false, $msg];
  224. $config = config('qingyaoWx');
  225. $url = sprintf($config['get_article'], $msg);
  226. $offset = 0;
  227. $count = 20;
  228. $get_total = 0;
  229. do {
  230. $post = [
  231. 'offset' => $offset,
  232. 'count' => $count,
  233. 'no_content' => 0,
  234. ];
  235. $result = $this->curlOpen($url, ['post' => json_encode($post)]);
  236. $result = json_decode($result, true);
  237. Log::channel('apiLog')->info('wxget', ["message" => $result]);
  238. if (isset($result['errmsg'])) return [false, $result['errmsg']];
  239. $a = ['data' => $result['item'] ?? [], 'total' => $result['total_count'], 'data_count' => $result['item_count']];
  240. // 更新 offset
  241. $offset += 1;
  242. // 更新 total_count
  243. $get_total += $result['total_count'];
  244. // 检查是否还有更多数据
  245. $hasMore = isset($result['total_count']) && ($result['total_count'] > $get_total);
  246. } while ($hasMore);
  247. return [true, ''];
  248. }
  249. }