用戶註冊之短信驗證

一般咱們實名註冊用戶的時候，都會要求輸入手機號，而後獲取手機驗證碼，而後填到頁面，像下面這樣：

ok,如今來理一下思緒：

1.註冊頁面

由於這裏要說的是短信驗證，因此只貼出核心代碼，下面是手機號和短信驗證碼這兩部分的前端代碼片斷：

<div data-v-7cf0b24e="" class="lj_input_standard4">
    <span data-v-7cf0b24e="" id="left_span6">手機號</span>
    <span data-v-7cf0b24e="" id="asterisk_span6">*</span>
    <input v-model="phone" data-v-7cf0b24e="" id="myinput6" name="data[phone]" type="tel" maxlength="11" placeholder="請輸入手機號碼">
</div>
<div data-v-7cf0b24e="" class="lj_input_standard4">
    <span data-v-7cf0b24e="" id="left_span7">短信驗證碼</span>
    <span data-v-7cf0b24e="" id="asterisk_span7">*</span>
    <input data-v-7cf0b24e="" id="myinput7" name="data[code]" type="tel" placeholder="請輸入驗證碼">
    <div data-v-7cf0b24e="" class="lj_register_getvcode sendCode" id="sendCode" @click="send" 
     :class="{ login_code_gbb: (phone.length!==11 || wait) }">{{time}}</div>
</div>

這個頁面使用vue.js寫的，可是你不用先去了解vue.js再來看接下來的內容，so，繼續

上面就是表單的兩個字段：phone和code，@click=「send」設置了「獲取驗證碼」這個div的單擊事件爲send()；

//send方法
send: function() {
                if(app.phone.length!=11 || app.phone!=parseInt(app.phone) || app.wait) return;
                $.ajax({
                    url: '/?c=api&m=mobilecode&phone='+app.phone,
                    type: 'post',
                    dataType: 'json',
                    success: function(res) {
                        if( res.code ) {
                            app.timer();
                            layer.msg('發送成功');
                        } else {
                            layer.msg('發送失敗');
                        }
                    }
                });
            },

一樣的，你可能不懂vue的語法，可是你應該可以看懂：

獲取phone字段輸入的手機號（通過各類驗證以後），而且發起一個ajax請求，正如你看到的那樣，這個請求攜帶了手機號參數，

接下來，繼續看請求的接口究竟是怎麼處理的。

2.api接口

public function mobilecode() {
        $phone = $this->input->get("phone") =='' ? $this->input->post("phone") : $this->input->get("phone");
        if(!$phone){
            exit_json(0,'手機號爲空！');
        }
        if($_COOKIE['wait_time'] && $phone == $_SESSION['phone']){
            exit_json(0,'已經發送太短信了，請稍後再試！');
        }

        $randcode = rand('100000','999999');
        $_SESSION['randcode'] = $randcode;
        $_SESSION['phone'] = $phone;
        $this->load->library('mdysms');
        $res = $this->mdysms->sendSms($phone,['code'=>$randcode]);
       if($res->Code === 'OK'){
           //設置cookie
           setcookie("wait_time",1,50);
           $_SESSION['phone'] = $phone;
            //獲取方式
           exit_json(1,'短信發送成功!');
       }else{
           exit_json(0,'短信發送失敗!');
       }
    }

生成隨機驗證碼並存到服務端session中（把手機號也存到session是爲了作校驗防止同一手機號屢次註冊）；

加載類文件並執行sendSms方法（自定義類文件，用於將驗證碼和手機號以及必需參數傳給阿里短信服務的SDK方法）；

3.自定義類文件

這個類用於收集阿里短信服務SDK方法所需的全部參數，並調用AliSDK中的方法

require_once dirname(__FILE__).'/dysms/SignatureHelper.php';
require_once dirname(__FILE__).'/dysms/conf.inc.php';
use Aliyun\DySDKLite\SignatureHelper;
class Mdysms {
     public $conf;
     
     public function __construct()
     {
         $this->conf['accessKeyId'] = ACCESSKEYID;
         $this->conf['accessKeySecret'] = ACCESSKEYSECRET;
         $this->conf['signName'] = SignName;
         $this->conf['templateCode'] = TemplateCode;
     }

     public function sendSms($phoneNumbers, $param, $templateCode = FALSE, $signName = FALSE)
     {
        $params['TemplateParam'] = json_encode($param, JSON_UNESCAPED_UNICODE);
        $params['TemplateCode'] = $templateCode?$templateCode:$this->conf['templateCode'];
        $params['SignName'] = $signName?$signName:$this->conf['signName'];
        $params['PhoneNumbers'] = $phoneNumbers;

        $helper = new SignatureHelper();

        $resp = $helper->request(
            $this->conf['accessKeyId'],
            $this->conf['accessKeySecret'],
            "dysmsapi.aliyuncs.com",
            array_merge($params, array(
                "RegionId" => "cn-hangzhou",
                "Action" => "SendSms",
                "Version" => "2017-05-25"
            ))
        );
        return $resp;
     }
}

這些紅字常量是在conf.inc.php中定義的，是購買阿里短信服務時候獲取到的。那麼，這個request方法用到的參數以下：

accessKeyId-------------------購買短信通知服務獲取
accessKeySecret---------------購買短信通知服務獲取
signName----------------------購買短信通知服務獲取
templateCode------------------購買短信通知服務獲取
PhoneNumbers------------------手機號
TemplateParam-----------------在這裏就是隨機驗證碼
domain------------------------dysmsapi.aliyuncs.com
RegionId----------------------cn-hangzhou
Action------------------------SendSms
Version-----------------------2017-05-25

4.阿里雲的SDK（其實這個能夠無視）

<?php

namespace Aliyun\DySDKLite;

/**
 * 簽名助手 2017/11/19
 *
 * Class SignatureHelper
 */
class SignatureHelper {

    /**
     * 生成簽名併發起請求
     *
     * @param $accessKeyId string AccessKeyId (https://ak-console.aliyun.com/)
     * @param $accessKeySecret string AccessKeySecret
     * @param $domain string API接口所在域名
     * @param $params array API具體參數
     * @param $security boolean 使用https
     * @return bool|\stdClass 返回API接口調用結果，當發生錯誤時返回false
     */
    public function request($accessKeyId, $accessKeySecret, $domain, $params, $security=false) {
        $apiParams = array_merge(array (
            "SignatureMethod" => "HMAC-SHA1",
            "SignatureNonce" => uniqid(mt_rand(0,0xffff), true),
            "SignatureVersion" => "1.0",
            "AccessKeyId" => $accessKeyId,
            "Timestamp" => gmdate("Y-m-d\TH:i:s\Z"),
            "Format" => "JSON",
        ), $params);
        ksort($apiParams);

        $sortedQueryStringTmp = "";
        foreach ($apiParams as $key => $value) {
            $sortedQueryStringTmp .= "&" . $this->encode($key) . "=" . $this->encode($value);
        }

        $stringToSign = "GET&%2F&" . $this->encode(substr($sortedQueryStringTmp, 1));

        $sign = base64_encode(hash_hmac("sha1", $stringToSign, $accessKeySecret . "&",true));

        $signature = $this->encode($sign);

        $url = ($security ? 'https' : 'http')."://{$domain}/?Signature={$signature}{$sortedQueryStringTmp}";

        try {
            $content = $this->fetchContent($url);
            return json_decode($content);
        } catch( \Exception $e) {
            return false;
        }
    }

    private function encode($str)
    {
        $res = urlencode($str);
        $res = preg_replace("/\+/", "%20", $res);
        $res = preg_replace("/\*/", "%2A", $res);
        $res = preg_replace("/%7E/", "~", $res);
        return $res;
    }

    private function fetchContent($url) {
        $ch = curl_init();
        curl_setopt($ch, CURLOPT_URL, $url);
        curl_setopt($ch, CURLOPT_TIMEOUT, 5);
        curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
        curl_setopt($ch, CURLOPT_HTTPHEADER, array(
            "x-sdk-client" => "php/2.0.0"
        ));

        if(substr($url, 0,5) == 'https') {
            curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
            curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, false);
        }

        $rtn = curl_exec($ch);

        if($rtn === false) {
            trigger_error("[CURL_" . curl_errno($ch) . "]: " . curl_error($ch), E_USER_ERROR);
        }
        curl_close($ch);

        return $rtn;
    }
}