104 lines
3.4 KiB
PHP
104 lines
3.4 KiB
PHP
|
<?php
|
|||
|
|
@session_start();
|
|||
|
|
|
|||
|
|
function httpGet($url, $header = ''){
|
|||
|
|
if(empty($header)){
|
|||
|
|
$header = array('Content-Type: application/json;charset=utf-8');
|
|||
|
|
}
|
|||
|
|
$user_agent = "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/33.0.1750.146 Safari/537.36";
|
|||
|
|
|
|||
|
|
$ch = curl_init();//初始化
|
|||
|
|
curl_setopt($ch, CURLOPT_URL, $url);//设置访问网页的URL
|
|||
|
|
curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);//执行之后不直接打印出来（只是下载，不显示不打印）
|
|||
|
|
curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, FALSE);
|
|||
|
|
curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, FALSE);
|
|||
|
|
curl_setopt($ch, CURLOPT_HEADER, 0);
|
|||
|
|
if($header != 'no_header'){
|
|||
|
|
curl_setopt($ch, CURLOPT_HTTPHEADER, $header);
|
|||
|
|
curl_setopt($ch, CURLOPT_USERAGENT,$user_agent);
|
|||
|
|
}
|
|||
|
|
$content = curl_exec($ch);//执行
|
|||
|
|
curl_close($ch);//关闭curl
|
|||
|
|
return $content;
|
|||
|
|
}
|
|||
|
|
function check_form($str) {
|
|||
|
|
$farr = array(
|
|||
|
|
"/\s+/", //过滤多余空白
|
|||
|
|
//过滤 <script>等可能引入恶意内容或恶意改变显示布局的代码,如果不需要插入flash等,还可以加入<object>的过滤
|
|||
|
|
"/<(\/?)(script|i?frame|style|html|body|title|link|meta|\?|\%)([^>]*?)>/isU",
|
|||
|
|
"/(<[^>]*)on[a-zA-Z]+\s*=([^>]*>)/isU",//过滤javascript的on事件
|
|||
|
|
);
|
|||
|
|
$tarr = array(
|
|||
|
|
" ",
|
|||
|
|
"＜\1\2\3＞",//如果要直接清除不安全的标签，这里可以留空
|
|||
|
|
"\1\2",
|
|||
|
|
);
|
|||
|
|
$str = preg_replace($farr, $tarr, $str);
|
|||
|
|
//$str = addslashes($str); //
|
|||
|
|
return addslashes($str);
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
// 获取参数 type,token
|
|||
|
|
|
|||
|
|
$query = check_form($_GET['query']);
|
|||
|
|
$token = check_form($_GET['token']);
|
|||
|
|
|
|||
|
|
$host = "https://yzms.fsecity.com";
|
|||
|
|
//$host = "http://127.0.0.1:9021";
|
|||
|
|
$apiUrl = $host . "/api/Dishes/noticelist?token=".$token;
|
|||
|
|
|
|||
|
|
$userInfo = httpGet($apiUrl);
|
|||
|
|
$userInfo = json_decode($userInfo, 1);
|
|||
|
|
|
|||
|
|
if(empty($userInfo)){
|
|||
|
|
echo "<script src='./js/jweixin-1.3.2.js'></script>
|
|||
|
|
<script>
|
|||
|
|
function returnApplet() {
|
|||
|
|
alert('token解析失败')
|
|||
|
|
wx.miniProgram.redirectTo({url: '../index/index'});
|
|||
|
|
}
|
|||
|
|
if (!window.WeixinJSBridge || !WeixinJSBridge.invoke) {
|
|||
|
|
document.addEventListener('WeixinJSBridgeReady', returnApplet, false)
|
|||
|
|
} else {
|
|||
|
|
returnApplet()
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
</script>";
|
|||
|
|
exit;
|
|||
|
|
}
|
|||
|
|
$user = $userInfo['data']['user'];
|
|||
|
|
if(empty($user)){
|
|||
|
|
echo "<script src='./js/jweixin-1.3.2.js'></script>
|
|||
|
|
<script>
|
|||
|
|
function returnApplet() {
|
|||
|
|
alert('获取用户信息失败')
|
|||
|
|
wx.miniProgram.redirectTo({url: '../index/index'});
|
|||
|
|
}
|
|||
|
|
if (!window.WeixinJSBridge || !WeixinJSBridge.invoke) {
|
|||
|
|
document.addEventListener('WeixinJSBridgeReady', returnApplet, false)
|
|||
|
|
} else {
|
|||
|
|
returnApplet()
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
</script>";
|
|||
|
|
exit;
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
?>
|
|||
|
|
<script type="text/javascript" src="js/jquery.min.js?v=<?=filemtime('js/jquery.min.js')?>" charset="utf-8"></script>
|
|||
|
|
<script type="text/javascript" src="js/light7.js?v=<?= filemtime('js/light7.js') ?>" charset="utf-8"></script>
|
|||
|
|
<script>
|
|||
|
|
|
|||
|
|
var user = '<?=json_encode($user)?>';
|
|||
|
|
$.cookie('user', user, {
|
|||
|
|
expires: 365,
|
|||
|
|
});
|
|||
|
|
$.caesarCache('user', user);
|
|||
|
|
//alert("<?php //=$host?>///m/index.html?tourl=<?php //=$query?>//")
|
|||
|
|
|
|||
|
|
window.location.replace("<?=$host?>/m/index.html?tourl=<?=$query?>");
|
|||
|
|
</script>
|
|||
|
|
|
|||
|
|
|
|||
|
|
|