server/game2006api
5
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

1

Browse Source
This commit is contained in:
aozhiwei 2022-02-22 16:53:08 +08:00
parent 9244aa93e4
commit 44675ca7b6
1 changed files with 55 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

56
webapp/controller/MarketController.class.php
View File

@ -27,6 +27,8 @@ const PRESALE_PREPARE = 1;
const PRESALE_STARTED = 2; const PRESALE_STARTED = 2;
const PRESALE_SOLD_OUT = 3; const PRESALE_SOLD_OUT = 3;
const TOKEN_SALT = 'B8E6BD4F-FD7B-E2B8-6688-80A2D8632064';
class MarketController extends BaseController { class MarketController extends BaseController {
private function isTestMode() private function isTestMode()
@ -191,6 +193,7 @@ class MarketController extends BaseController {
public function buyBox() public function buyBox()
{ {
$token = getReqVal('token', '');
$type = getReqVal('type', ''); $type = getReqVal('type', '');
$buyerAddress = getReqVal('buyer_address', ''); $buyerAddress = getReqVal('buyer_address', '');
$price = getReqVal('price', ''); $price = getReqVal('price', '');
@ -199,6 +202,10 @@ class MarketController extends BaseController {
$signature = getReqVal('signature', ''); $signature = getReqVal('signature', '');
$gameId = 2006; $gameId = 2006;
$funcId = 1; $funcId = 1;
if (!$this->isValidToken($buyerAddress, $token)) {
myself()->_rspErr(100, 'invalid token');
return;
}
$this->buyBoxVerifySignature( $this->buyBoxVerifySignature(
$buyerAddress, $buyerAddress,
$type, $type,
@ -322,7 +329,14 @@ class MarketController extends BaseController {
public function queryOrder() public function queryOrder()
{ {
$token = getReqVal('token', '');
$account = getReqVal('account', '');
$orderId = getReqVal('order_id', ''); $orderId = getReqVal('order_id', '');
if (!$this->isValidToken($account, $token)) {
myself()->_rspErr(100, 'invalid token');
return;
}
$orderDb = BoxOrder::findByOrderId($orderId); $orderDb = BoxOrder::findByOrderId($orderId);
if ($orderDb) { if ($orderDb) {
if (!$orderDb['done']) { if (!$orderDb['done']) {
@ -350,6 +364,11 @@ class MarketController extends BaseController {
public function getNftList() public function getNftList()
{ {
$account = getReqVal('account', ''); $account = getReqVal('account', '');
$token = getReqVal('token', '');
if (!$this->isValidToken($account, $token)) {
myself()->_rspErr(100, 'invalid token');
return;
}
$nftDbList = Nft::getNftList($account); $nftDbList = Nft::getNftList($account);
$nftList = array(); $nftList = array();
foreach ($nftDbList as $nftDb) { foreach ($nftDbList as $nftDb) {
@ -364,7 +383,13 @@ class MarketController extends BaseController {
public function getNftDetail() public function getNftDetail()
{ {
$account = getReqVal('account', ''); $account = getReqVal('account', '');
$token = getReqVal('token', '');
$tokenId = getReqVal('token_id', ''); $tokenId = getReqVal('token_id', '');
if (!$this->isValidToken($account, $token)) {
myself()->_rspErr(100, 'invalid token');
return;
}
$nftDb = Nft::getNft($tokenId); $nftDb = Nft::getNft($tokenId);
if (!$nftDb) { if (!$nftDb) {
myself()->_rspErr(1, 'nft not exists'); myself()->_rspErr(1, 'nft not exists');
@ -507,7 +532,7 @@ class MarketController extends BaseController {
return; return;
} else { } else {
myself()->_rspData(array( myself()->_rspData(array(
'token' => '' 'token' => $this->genToken($account, $nonce)
)); ));
} }
} }
@ -527,4 +552,33 @@ class MarketController extends BaseController {
return $web3ServiceCluster[rand() % count($web3ServiceCluster)]; return $web3ServiceCluster[rand() % count($web3ServiceCluster)];
} }
private function genToken($account, $nonce)
{
$data = array(
'account' => $account,
'rand' => uniqid(),
'nonce' => $nonce,
'createtime' => myself()->_getNowTime(),
);
$data['sign'] = md5(TOKEN_SALT . $data['account'] . $data['rand'] . $data['nonce'] . $data['createtime']);
return base64_encode(json_encode($data));
}
private function isValidToken($account, $token)
{
$deToken = base64_decode($token);
if (empty($data)) {
return false;
}
if (empty($account)) {
return false;
}
$data = json_decode($deToken);
$sign = md5(TOKEN_SALT . $data['account'] . $data['rand'] . $data['nonce'] . $data['createtime']);
if ($sign == $data['sign']) {
return phpcommon\isSameAccount($sign['account'], $account);
}
return false;
}
} }