账户与验证码

add_action('phpmailer_init', 'zib_mail_smtp');
add_filter('wp_mail_from_name', 'zib_mail_from_name');
add_filter('wp_mail', 'zib_get_mail_content');

zib_signup_form($oauth_bind = false);
zib_signin_form($oauth_bind = false);
zib_resetpassword_form($type = '');
zib_get_sign_captch($captcha_type = 'email', $action = 'signup_captcha');
zib_get_machine_verification_input($id = 'img_verification', $name = 'canvas_yz');

$errors = apply_filters('registration_errors', $errors, $sanitized_user_login, $email);

do_action('wp_login', $user->user_login, $user);

add_action('wp_footer', 'zib_sign_modal');

function zib_is_close_sign($but = false)
{
    if (is_super_admin()) {
        return false;
    }

    if (_pz('close_sign', false)) {
        return true;
    }

    if ($but && is_page_template('pages/user-sign.php')) {
        return true;
    }

    return false;
}

$input .= '<input type="hidden" name="action" value="invit_code_must_verify">';
$input .= wp_nonce_field($action, '_wpnonce', false, false);

$input .= zib_get_machine_verification_input('img_yz_signin');

$nopas_type = _pz('user_signin_nopas_type', 'email');
$nopas_input .= zib_get_sign_captch($nopas_type, 'signin_captcha');

$input .= '<input type="hidden" name="captcha_type" value="' . $captcha_type . '">';
$input .= wp_nonce_field($action, '_wpnonce', false, false);

function zib_ajax_user_signin()
{
    if (is_user_logged_in()) {
        echo(json_encode(array('error' => 1, 'msg' => __('你已经登录，请刷新页面', 'zib_language'))));
        exit;
    }

    if (empty($_POST['username'])) {
        echo(json_encode(array('error' => 1, 'msg' => __('请输入登录账号', 'zib_language'))));
        exit();
    }

    if (_pz('verification_signin_exclude') !== $_POST['username']) {
        zib_ajax_man_machine_verification('img_yz_signin');
    }
}

$is_frequency_limit = zib_is_error_frequency_limit('signin');
if ($is_frequency_limit['error']) {
    echo(json_encode(array('error' => 1, 'msg' => $is_frequency_limit['msg'])));
    exit();
}

$login_data = array(
    'user_login'    => $user_data->user_login,
    'user_password' => $_POST['password'],
    'remember'      => !empty($_POST['remember']) ? true : false,
);

$user_verify = wp_signon($login_data);

zib_ajax_oauth_bind($user_verify->ID);
zib_reset_error_frequency_limit('signin');

$result = array('error' => 0, 'reload' => 1, 'msg' => __('成功登录，页面跳转中', 'zib_language'));

function zib_is_error_frequency_limit($key, $msg = '')
{
    if (!_pz('error_frequency_limit', false)) {
        return array('error' => 0);
    }

    @session_start();
    $count        = $_SESSION['zib_check_count_' . $key] ?? 1;
    $last_time    = $_SESSION['zib_check_time_' . $key] ?? 0;
    $current_time = current_time('timestamp');
}

function zib_docs_secure_login_check()
{
    $limit = zib_is_error_frequency_limit('docs_secure_login');
    if ($limit['error']) {
        echo json_encode($limit);
        exit();
    }

    if (empty($_POST['token']) || 'ok' !== $_POST['token']) {
        echo(json_encode(array('error' => 1, 'msg' => __('验证失败', 'zib_language'))));
        exit();
    }

    zib_reset_error_frequency_limit('docs_secure_login');
    zib_send_json_success(__('验证成功', 'zib_language'));
}

$yz = _pz('user_verification_type', 'slider');

$option = _pz('tcaptcha_option');

function zib_get_machine_verification_input($id = 'img_verification', $name = 'canvas_yz')
{
    $yz = _pz('user_verification_type', 'slider');

    if ('geetest' === $yz) {
        $option = _pz('geetest_option');
        if (!empty($option['id']) && !empty($option['key'])) {
            return '<input machine-verification="geetest" type="hidden" name="captcha_mode" value="geetest" geetest-id="' . $option['id'] . '">';
        }
    }
}

initGeetest4(
  {
    captchaId: _mode.attr('geetest-id'),
    product: 'bind',
  },
  function (captchaObj) {
    captchaObj.onSuccess(function () {
      var getValidate = captchaObj.getValidate()
      window.captcha.captcha_output = getValidate.captcha_output
      window.captcha.gen_time = getValidate.gen_time
      window.captcha.lot_number = getValidate.lot_number
      window.captcha.ticket = getValidate.pass_token
      window.captcha._this.click()
    })
  }
)

if ('geetest' === $type) {
    $option = _pz('geetest_option');
    if (!empty($option['id']) && !empty($option['key'])) {
        if (empty($_REQUEST['captcha']['ticket']) || empty($_REQUEST['captcha']['lot_number'])) {
            echo(json_encode(array('error' => 1, 'msg' => __('人机验证失败，请重试', 'zib_language'))));
            exit();
        }

        $verification = zib_geetest_verification($_REQUEST['captcha']);
        if ($verification['error']) {
            echo(json_encode(array('error' => 1, 'msg' => !empty($verification['msg']) ? $verification['msg'] : __('环境异常，人机验证失败', 'zib_language'))));
            exit();
        }
    }
}

$api_server  = 'http://gcaptcha4.geetest.com/validate?captcha_id=' . $option['id'];
$sign_token  = hash_hmac('sha256', $lot_number, $option['key']);

$query = array(
    'lot_number'     => $lot_number,
    'captcha_output' => $captcha_output,
    'pass_token'     => $pass_token,
    'gen_time'       => $gen_time,
    'sign_token'     => $sign_token,
);

function zib_docs_secure_submit()
{
    zib_ajax_verify_nonce();
    zib_ajax_man_machine_verification('docs_secure_submit');

    // 业务逻辑...

    zib_send_json_success(__('提交成功', 'zib_language'));
}
add_action('wp_ajax_docs_secure_submit', 'zib_docs_secure_submit');
add_action('wp_ajax_nopriv_docs_secure_submit', 'zib_docs_secure_submit');

zib_get_user_bind_from($type = 'email', $user_id = 0);
zib_get_user_verify_from($type = 'email');
zib_get_user_center_bind_tab($tab = 'email', $user_id = '');

do_action('zib_user_bind_email', $cuid, $captcha_val, $email);
do_action('zib_user_update_bind_phone', $cuid, $captcha_val, $old_phone);
do_action('zib_user_bind_phone', $cuid, $captcha_val, $old_phone);

/wp-admin/admin-ajax.php
/wp-login.php
/user
/oauth

wordpress_logged_in_
wordpress_sec_
wp-settings-

function zib_ajax_wp_verify_nonce($action = null, $name = '_wpnonce')
{
    if (!$action) {
        $action = !empty($_REQUEST['action']) ? $_REQUEST['action'] : -1;
    }

    if (!isset($_REQUEST[$name]) || !wp_verify_nonce($_REQUEST[$name], $action)) {
        zib_send_json_error(__('环境异常，请刷新页面后稍候再试', 'zib_language'), 'warning');
    }
}