' . '' . '服务器出错了' . '
' . '

服务器出错了

' . '

程序在页面渲染之前就中断了，所以刚才看到的是空白页。' . '原因已经写入服务器上的 ' . 'data/php_fatal.log，把这个文件的内容发给开发者就能直接定位。

' . '

另外请确认站点目录下的 data 文件夹' . '可写（755），否则聊天记录与登录状态都无法保存。

' . '
'; } } register_shutdown_function('chat_fatal_guard'); } // 会话 Cookie 加固：HttpOnly 让脚本读不到会话（XSS 无法直接窃取会话）， // SameSite=Lax 大幅降低跨站伪造请求的成功率，HTTPS 下自动带 Secure。 // 注意：SameSite 是缓解手段，不能替代 CSRF 令牌（见下方 POST 来源校验）。 if (session_status() === PHP_SESSION_NONE) { $__https = (!empty($_SERVER['HTTPS']) && strtolower($_SERVER['HTTPS']) !== 'off') || (($_SERVER['HTTP_X_FORWARDED_PROTO'] ?? '') === 'https'); // 让会话真正"记得住"： // 1) Cookie 给 30 天有效期。原来是 lifetime=0（浏览器级），关掉浏览器登录就没了； // 2) 服务端会话文件默认闲置 24 分钟就被 PHP 回收（session.gc_maxlifetime）， // 这是"用着用着突然要重新登录"的主因，这里一并拉长； // 3) 会话文件放进 data/sessions/ 独立目录，避免共享主机上被别人的回收策略清掉。 $__sessDir = __DIR__ . '/data/sessions'; if (!is_dir($__sessDir)) @mkdir($__sessDir, 0755, true); if (is_dir($__sessDir) && is_writable($__sessDir)) session_save_path($__sessDir); @ini_set('session.gc_maxlifetime', (string)(30 * 86400)); // Cookie 参数写法要兼容旧 PHP：数组形式是 PHP 7.3 才支持的， // 老主机上会报警告并且参数完全不生效（表现为登录状态存不住）。 if (PHP_VERSION_ID >= 70300) { session_set_cookie_params([ 'lifetime' => 30 * 86400, 'path' => '/', 'httponly' => true, 'secure' => $__https, 'samesite' => 'Lax', ]); } else { // 7.3 以下拿不到 SameSite，退回位置参数；跨站请求由代码里的 POST 来源校验兜住 session_set_cookie_params(30 * 86400, '/', '', $__https, true); } session_start(); } define('DATA_DIR', __DIR__ . '/data/'); define('USERS_FILE', DATA_DIR . 'users.json'); // 账号附加信息（目前只存注册时间）。users.json 里存的是密码哈希，动它的结构风险太大， // 所以注册时间单独放一个文件，"可见起点"就从这里取。 define('USER_META_FILE', DATA_DIR . 'user_meta.json'); define('MESSAGES_FILE', DATA_DIR . 'messages.json'); define('ONLINE_FILE', DATA_DIR . 'online.json'); define('AVATARS_FILE', DATA_DIR . 'avatars.json'); define('ROOMS_FILE', DATA_DIR . 'rooms.json'); define('GROUPS_FILE', DATA_DIR . 'groups.json'); define('FRIENDS_FILE', DATA_DIR . 'friends.json'); define('FRIEND_REQ_FILE', DATA_DIR . 'friend_requests.json'); define('UNREAD_FILE', DATA_DIR . 'unread.json'); define('NOTES_FILE', DATA_DIR . 'notes.json'); define('PINS_FILE', DATA_DIR . 'pins.json'); define('DELETED_FILE', DATA_DIR . 'deleted.json'); define('AVATAR_UPDATED_FILE', DATA_DIR . 'avatar_updates.json'); define('STATUS_FILE', DATA_DIR . 'statuses.json'); define('AVATAR_DIR', __DIR__ . '/avatars/'); define('GROUP_AVATAR_DIR', __DIR__ . '/group_avatars/'); define('UPLOAD_DIR', __DIR__ . '/uploads/'); define('FILES_DIR', __DIR__ . '/files/'); define('CHUNK_DIR', __DIR__ . '/chunks/'); define('LOG_FILE', DATA_DIR . 'logs.json'); define('BAN_FILE', DATA_DIR . 'banned.json'); define('GROUP_BAN_FILE', DATA_DIR . 'group_bans.json'); define('SENSITIVE_FILE', DATA_DIR . 'sensitive_words.json'); define('GROUP_FILES_FILE', DATA_DIR . 'group_files.json'); // 历史附件补录的一次性标记：存在即表示已经补录过，避免每次打开群文件都扫一遍消息库 define('GROUP_FILES_INDEX_FLAG', DATA_DIR . 'group_files_indexed.flag'); define('SIGNINS_FILE', DATA_DIR . 'signins.json'); define('STICKERS_FILE', DATA_DIR . 'stickers.json'); define('STICKERS_DIR', __DIR__ . '/stickers/'); define('GROUP_MUTES_FILE', DATA_DIR . 'group_mutes.json'); define('NOTICE_FILE', DATA_DIR . 'notice.json'); define('ADMIN_FILE', DATA_DIR . 'admin_config.json'); define('IP_FILE', DATA_DIR . 'ips.json'); define('TYPING_FILE', DATA_DIR . 'typing.json'); define('PROFILES_FILE', DATA_DIR . 'profiles.json'); define('BLACKLIST_FILE', DATA_DIR . 'blacklist.json'); define('CALLS_FILE', DATA_DIR . 'calls.json'); define('CHAT_BG_FILE', DATA_DIR . 'chat_bgs.json'); define('SITE_CONFIG_FILE', DATA_DIR . 'site_config.json'); define('IP_BAN_FILE', DATA_DIR . 'ip_bans.json'); define('KICKS_FILE', DATA_DIR . 'kicks.json'); define('CLIENT_ERR_FILE', DATA_DIR . 'client_errors.json'); // 浏览器侧错误上报（排查线上问题用） define('ONLINE_TTL', 60); define('RECALL_TIME_LIMIT', 120); define('MAX_IMAGE_SIZE', 10 * 1024 * 1024); define('MAX_FILE_SIZE', 50 * 1024 * 1024); define('MAX_MESSAGES', 2000); define('SYSTEM_MSG_TTL', 360); define('CHUNK_BYTES', 4 * 1024 * 1024); // 分块上传时每块的大小（字节），配合浏览器大文件切片使用 // ===== 通话（信令）生命周期参数 ===== // 说明：通话记录保存在 calls.json。任何一条非 ended 的记录都会"占线"， // 因此必须有明确的生命周期边界，否则刷新/断网/关标签会留下永久占线的僵尸记录。 define('CALL_RING_TIMEOUT', 45); // 响铃超过该秒数未接听 → timeout define('CALL_PEER_TIMEOUT', 75); // 参与者超过该秒数没有轮询（心跳丢失）→ disconnect // 取值需容忍浏览器后台标签页的定时器节流（1 次/分钟）， // 否则"通话中切到别的标签页"会被误判掉线 define('CALL_MAX_DURATION', 3 * 3600); // 单通电话硬上限，防止异常情况下永久占线 define('CALL_ENDED_TTL', 600); // ended 记录保留时长，之后清理，避免文件无界增长 define('CALL_MAX_CANDIDATES', 80); // 单通电话保留的最大 ICE 候选数（背压上限） // 持久登录与单设备登录的存储（都在 data/ 下，已被目录级 .htaccess 挡住直接访问） define('AUTH_SESSIONS_FILE', DATA_DIR . 'auth_sessions.json'); // 每个账号当前唯一的活跃会话 define('AUTH_TOKENS_FILE', DATA_DIR . 'auth_tokens.json'); // 长期登录凭据（只存校验子的哈希） define('REMEMBER_COOKIE', 'chat_remember'); define('REMEMBER_DAYS', 30); /* 是否强制"同一账号只能一台设备在线"。 * true = 单设备版（默认）：在别处登录会把旧设备挤下线 * false = 多设备版：同一账号可在多台设备同时在线，互不影响 * 两种行为共用同一套代码，改这一行即可切换，其余逻辑都会跟着走。 */ define('ENFORCE_SINGLE_SESSION', false); // 多设备版：同一账号可多台设备同时在线 foreach ([DATA_DIR, AVATAR_DIR, GROUP_AVATAR_DIR, UPLOAD_DIR, FILES_DIR, CHUNK_DIR] as $dir) { if (!is_dir($dir) && !@mkdir($dir, 0755, true)) { http_response_code(500); echo json_encode(['error' => '无法创建目录: ' . $dir]); exit; } } $defaults = [ USERS_FILE => '{}', USER_META_FILE => '{}', MESSAGES_FILE => '[]', ONLINE_FILE => '{}', AVATARS_FILE => '{}', ROOMS_FILE => '{}', GROUPS_FILE => '{}', FRIENDS_FILE => '{}', FRIEND_REQ_FILE => '[]', UNREAD_FILE => '{}', NOTES_FILE => '{}', PINS_FILE => '{}', DELETED_FILE => '[]', AVATAR_UPDATED_FILE => '{}', STATUS_FILE => '{}', LOG_FILE => '[]', BAN_FILE => '{}', GROUP_BAN_FILE => '{}', SENSITIVE_FILE => '[]', GROUP_FILES_FILE => '{}', SIGNINS_FILE => '{}', STICKERS_FILE => '[]', GROUP_MUTES_FILE => '{}', NOTICE_FILE => 'null', IP_FILE => '{}', TYPING_FILE => '{}', PROFILES_FILE => '{}', BLACKLIST_FILE => '{}', CALLS_FILE => '{}', CHAT_BG_FILE => '{}', SITE_CONFIG_FILE => '{"registration":true}', IP_BAN_FILE => '{}', KICKS_FILE => '{}', AUTH_SESSIONS_FILE => '{}', AUTH_TOKENS_FILE => '{}' ]; foreach ($defaults as $file => $val) { if (!file_exists($file)) file_put_contents($file, $val, LOCK_EX); } /* ---------------- 数据目录保护 ---------------- * data/ 里是全部私聊正文（messages.json）、账号（users.json）、群与好友关系。 * 只要 Web 服务器允许直连，别人猜到 URL 就能把整包数据下载走 —— 程序里所有的登录与 * 权限校验都会被绕过。这里在数据目录落一份 .htaccess（同时兼容 Apache 2.2 / 2.4） * 加一个空白 index.html，把"直接下载文件"和"列目录"一起挡住。 * 注意：nginx 不读 .htaccess，需要在站点配置里补 * location ^~ /data/ { deny all; } * 已经存在的 .htaccess 不会被覆盖，方便自行调整规则。 */ if (!function_exists('protectSecretDir')) { function protectSecretDir($dir) { $base = rtrim($dir, '/\\') . DIRECTORY_SEPARATOR; $ht = $base . '.htaccess'; if (!file_exists($ht)) { $rule = "# 禁止直接访问：本目录存放聊天记录与账号数据，仅允许 PHP 读写\n" . "\n Require all denied\n\n" . "\n Order allow,deny\n Deny from all\n\n" . "Options -Indexes\n"; @file_put_contents($ht, $rule, LOCK_EX); } $idx = $base . 'index.html'; if (!file_exists($idx)) @file_put_contents($idx, '', LOCK_EX); } } protectSecretDir(DATA_DIR); /* 致命错误兜底已上移到文件最前面（chat_fatal_guard）。 * 这里的注册已移除，避免同一个致命错误被记录两次； * 上移的原因见文件开头的说明：放在这里会漏掉"会话初始化阶段"就崩掉的情况。 */ $rooms = json_decode(file_get_contents(ROOMS_FILE), true) ?: []; if (!isset($rooms['公共聊天'])) { $rooms['公共聊天'] = ['type' => 'channel', 'created_by' => 'system', 'created_at' => time()]; file_put_contents(ROOMS_FILE, json_encode($rooms, JSON_UNESCAPED_UNICODE), LOCK_EX); } /** * 刷新在线状态。这里是全站最热的写入点（几乎每个请求都会经过），所以做了两件事： * 1) 节流：同一用户 + 同一房间 3 秒内只落盘一次。原来每个请求都要加排他锁重写这个文件， * 叠加 2.5 秒一次的轮询和多个在线用户就会互相排队；请求在锁上堆积久了会被服务器 * 直接切断连接（浏览器报 ERR_CONNECTION_CLOSED，用户看到的就是聊天界面突然空白）。 * 2) 清理：过期条目原来只增不减，文件会随历史用户数无限膨胀，每次读写都要全量解码，越用越慢。 */ function updateOnline($file, $username, $room = '公共聊天') { $now = time(); // 先做一次不加锁的普通读：绝大多数请求只是因为"刚刚写过"而可以直接返回，不必再动文件 $data = json_decode(@file_get_contents($file), true); if (!is_array($data)) $data = []; $prev = $data[$username] ?? null; $prevTs = is_array($prev) ? intval($prev['time'] ?? 0) : intval($prev); $prevRoom = is_array($prev) ? (string)($prev['room'] ?? '') : ''; if ($prevTs > 0 && ($now - $prevTs) < 3 && $prevRoom === (string)$room) return; $fp = fopen($file, 'c+'); if (!$fp) return; flock($fp, LOCK_EX); // 锁内以磁盘内容为准再合并一次，避免并发请求把别人的状态覆盖掉 $disk = json_decode(stream_get_contents($fp), true); if (!is_array($disk)) $disk = []; $disk[$username] = ['time' => $now, 'room' => $room]; foreach ($disk as $u => $v) { $t = is_array($v) ? intval($v['time'] ?? 0) : intval($v); if ($now - $t > 300) unset($disk[$u]); // 5 分钟没动静的直接从文件里清掉 } ftruncate($fp, 0); rewind($fp); fwrite($fp, json_encode($disk, JSON_UNESCAPED_UNICODE)); fflush($fp); flock($fp, LOCK_UN); fclose($fp); } function getOnlineUsers($file) { $data = json_decode(@file_get_contents($file), true) ?: []; $now = time(); $active = []; foreach ($data as $u => $v) { $t = is_array($v) ? ($v['time'] ?? 0) : (int)$v; if ($now - $t <= ONLINE_TTL) { $active[$u] = is_array($v) ? $v : ['time' => $t, 'room' => '公共聊天']; } } return $active; } function getPMRoom($u1, $u2) { $arr = [$u1, $u2]; sort($arr); return 'pm:' . $arr[0] . ':' . $arr[1]; } /** 私聊房间名统一收口成 pm:A:B（字典序）。 * 前端本来用的是 getPMRoomName()，但客户端一旦按"我:对方"的顺序拼房间名 * （重连后按状态恢复、或第三方页面直接拼字符串都会这样）， * 写进去的是 pm:bob:alice，读取却按 pm:alice:bob 精确匹配， * 用户看到的就是"我明明发出去了，对方却说没收到"。这里两种顺序都归到同一个房间。 */ function canonicalRoom($room) { $room = (string)$room; if (strpos($room, 'pm:') !== 0) return $room; $parts = explode(':', substr($room, 3)); if (count($parts) !== 2) return $room; if ($parts[0] === '' || $parts[1] === '') return $room; $arr = [$parts[0], $parts[1]]; sort($arr); return 'pm:' . $arr[0] . ':' . $arr[1]; } /** php.ini 里的 2M / 8M / 512K 写法转字节数（-1 视为不限） */ function iniBytes($v) { $v = trim((string)$v); if ($v === '') return 0; if ($v === '-1') return -1; $unit = strtolower(substr($v, -1)); $num = (float)$v; if ($unit === 'g') $num *= 1024 * 1024 * 1024; elseif ($unit === 'm') $num *= 1024 * 1024; elseif ($unit === 'k') $num *= 1024; return (int)$num; } function bytesText($bytes) { $bytes = (float)$bytes; foreach ([' B', ' KB', ' MB', ' GB'] as $u) { if ($bytes < 1024) return round($bytes, $bytes < 10 ? 1 : 0) . $u; $bytes /= 1024; } return round($bytes, 1) . ' TB'; } /** 上传失败原因翻译。 * PHP 只给一个错误码，原来一律回"图片上传失败/文件上传失败"，用户看到的是一句没有信息量的话： * 虚拟主机默认 upload_max_filesize=2M、post_max_size=8M，手机原图、压缩包一传就超， * 客户会直接判定"这功能坏了"。这里把服务器的真实上限读出来，告诉他差多少、找谁改。 */ function uploadFailMsg($field, $label) { $err = isset($_FILES[$field]['error']) ? intval($_FILES[$field]['error']) : UPLOAD_ERR_NO_FILE; $umi = iniBytes(ini_get('upload_max_filesize')); $pmi = iniBytes(ini_get('post_max_size')); $cap = 0; foreach ([$umi, $pmi] as $x) { if ($x > 0 && ($cap === 0 || $x < $cap)) $cap = $x; } $capText = $cap > 0 ? bytesText($cap) : '未知'; if ($err === UPLOAD_ERR_INI_SIZE || $err === UPLOAD_ERR_FORM_SIZE) { return $label . '太大：服务器单次上传上限只有 ' . $capText . '。请让站长把 php.ini 里的 upload_max_filesize 和 post_max_size 调大（例如都设成 64M），' . '或者先把文件压缩一下再传。'; } if ($err === UPLOAD_ERR_PARTIAL) return $label . '只传了一半就断了（网络不稳定），请重新上传。'; if ($err === UPLOAD_ERR_NO_TMP_DIR) return '服务器没有可写的临时目录（upload_tmp_dir），请联系站长。'; if ($err === UPLOAD_ERR_CANT_WRITE) return '服务器写临时文件失败（磁盘满或权限不足），请联系站长。'; if ($err === UPLOAD_ERR_EXTENSION) return $label . '被服务器上的 PHP 扩展拦截了，请联系站长。'; // $_FILES 里啥都没有：多半是整个请求体超过 post_max_size，PHP 在脚本执行前就把数据丢了 $clen = intval($_SERVER['CONTENT_LENGTH'] ?? 0); if ($clen > 0 && $pmi > 0 && $clen > $pmi) { return $label . '太大：本次 ' . bytesText($clen) . '，服务器 post_max_size 只有 ' . bytesText($pmi) . '。请让站长把 post_max_size 调大（不能小于 upload_max_filesize），或先压缩再传。'; } return $label . '上传失败（没有收到文件数据），请重试。'; } /** * 用 GD 把上传图片缩放/重编码到 $destPath。 * 返回输出文件扩展名（jpg/png/webp）；返回 null 表示未压缩（调用方应原样保存）。 * 未安装 GD、动画 GIF、超大图、小图小文件等场景一律返回 null，保证零风险回退。 */ /* ===== 频率限制 ===== * 基于文件的滑动窗口计数，用于发消息、上报等高频入口。 * 键由调用方拼好（已含用户名/IP），各入口互不影响。 * 注意：这是"防脚本刷接口"级别的限速，阈值取得宽松，不能影响正常用户。 */ function rateLimit($key, $limit, $windowSec) { $file = DATA_DIR . 'rate_limits.json'; $now = time(); $all = []; if (is_file($file)) { $raw = @file_get_contents($file); if ($raw !== false && $raw !== '') { $d = json_decode($raw, true); if (is_array($d)) $all = $d; } } $hits = isset($all[$key]) && is_array($all[$key]) ? $all[$key] : []; $fresh = []; foreach ($hits as $t) { if (($now - intval($t)) < $windowSec) $fresh[] = intval($t); } if (count($fresh) >= $limit) return false; $fresh[] = $now; $all[$key] = $fresh; // 顺手清理 1 小时前的键，避免文件无界增长 foreach ($all as $k => $v) { if (!is_array($v)) { unset($all[$k]); continue; } $keep = []; foreach ($v as $t) { if (($now - intval($t)) < 3600) $keep[] = intval($t); } if (!$keep) unset($all[$k]); else $all[$k] = $keep; } if (count($all) > 500) $all = array_slice($all, -500, null, true); @file_put_contents($file, json_encode($all), LOCK_EX); return true; } /* ===== SVG 安全清洗 ===== * SVG 是 XML，可以内嵌 I18NJS; } function areFriends($u1, $u2) { $friends = json_decode(file_get_contents(FRIENDS_FILE), true) ?: []; return in_array($u2, $friends[$u1] ?? []); } function writeLog($user, $action, $detail = '') { $logs = json_decode(@file_get_contents(LOG_FILE), true); if (!is_array($logs)) $logs = []; // detail 里会带文件名、群名等外部输入，先清洗：非法字节会让 json_encode 失败， // 而写入 false 会把整份日志清空（和群文件清单是同一个坑） $logs[] = [ 'time' => time(), 'user' => cleanUtf8($user ?: 'system'), 'action' => cleanUtf8($action), 'detail' => mb_substr(cleanUtf8($detail), 0, 300), 'ip' => clientIp() ]; if (count($logs) > 8000) $logs = array_slice($logs, -8000); saveJson(LOG_FILE, $logs); } function ipv4From($ip) { if (filter_var($ip, FILTER_VALIDATE_IP, FILTER_FLAG_IPV4)) return $ip; if (strpos($ip, '::ffff:') === 0) { $tail = substr($ip, 7); if (filter_var($tail, FILTER_VALIDATE_IP, FILTER_FLAG_IPV4)) return $tail; } return null; } function clientIp() { $cands = []; foreach (['HTTP_CF_CONNECTING_IP', 'HTTP_X_REAL_IP', 'HTTP_X_FORWARDED_FOR'] as $h) { if (!empty($_SERVER[$h])) { foreach (explode(',', $_SERVER[$h]) as $p) { $p = trim($p); if (filter_var($p, FILTER_VALIDATE_IP)) $cands[] = $p; } } } if (!empty($_SERVER['REMOTE_ADDR']) && filter_var($_SERVER['REMOTE_ADDR'], FILTER_VALIDATE_IP)) $cands[] = $_SERVER['REMOTE_ADDR']; foreach ($cands as $c) { $v4 = ipv4From($c); if ($v4) return $v4; } return $cands[0] ?? '未知'; } function recordIp($user) { if ($user === '') return; $ips = json_decode(@file_get_contents(IP_FILE), true) ?: []; $ips[$user] = ['ip' => clientIp(), 'time' => time()]; @file_put_contents(IP_FILE, json_encode($ips, JSON_UNESCAPED_UNICODE), LOCK_EX); } function isBanned($user) { $banned = json_decode(@file_get_contents(BAN_FILE), true) ?: []; return $banned[$user] ?? null; } function removeBan($user) { $banned = json_decode(@file_get_contents(BAN_FILE), true) ?: []; if (isset($banned[$user])) unset($banned[$user]); @file_put_contents(BAN_FILE, json_encode($banned, JSON_UNESCAPED_UNICODE), LOCK_EX); } function isGroupBanned($gname) { $gban = json_decode(@file_get_contents(GROUP_BAN_FILE), true) ?: []; return $gban[$gname] ?? null; } /** * 附件 url（群文件与消息里的图片/文件通用）-> 磁盘路径。 * 只接受 "uploads/单层文件名" 或 "files/单层文件名"，名字里只要出现斜杠 * （含 ../ 这类）一律拒绝，从根上堵住目录穿越。 */ function groupFileDiskPath($url, $mustExist = true) { $url = (string)$url; if (strpos($url, 'uploads/') === 0) { $dir = UPLOAD_DIR; $rel = substr($url, 8); } elseif (strpos($url, 'files/') === 0) { $dir = FILES_DIR; $rel = substr($url, 6); } else return null; if ($rel === '' || $rel !== basename($rel)) return null; $path = $dir . $rel; if ($mustExist && !is_file($path)) return null; return $path; } /** * 把外部输入清洗成合法 UTF-8。 * 文件名、消息内容这些都会原样进 JSON，只要里面混了非法字节（某些系统上传的文件名 * 不是 UTF-8），json_encode 会直接返回 false。而 false 交给 file_put_contents 写下去 * 就是空字符串 —— 整个文件被清空，比如整群的群文件清单会一次性消失。 */ function cleanUtf8($s) { $s = (string)$s; if ($s === '' || mb_check_encoding($s, 'UTF-8')) return $s; $out = @iconv('UTF-8', 'UTF-8//IGNORE', $s); if ($out === false) $out = preg_replace('/[\x80-\xFF]/', '', $s); return (string)$out; } /** * 安全落盘 JSON：编码失败直接拒绝写，写入走"临时文件 + rename"原子替换。 * 原来直接 file_put_contents($f, json_encode($d)) 有两个隐患： * 1) json_encode 失败时写入空内容，把原文件整个清掉（数据不可恢复）； * 2) 写到一半被中断（超时、磁盘满）会留下半截 JSON，读出来是空。 * 返回 true/false，调用方必须检查 —— 否则"上传成功"只是假象。 */ function saveJson($path, $data) { $json = json_encode($data, JSON_UNESCAPED_UNICODE); if ($json === false) return false; $tmp = $path . '.' . getmypid() . '.tmp'; if (@file_put_contents($tmp, $json, LOCK_EX) === false) { @unlink($tmp); return false; } if (!@rename($tmp, $path)) { // 少数环境不允许在目录里改名（例如目录只给了文件写权限），退回直接覆盖写： // 失去原子性，但总好过功能直接不可用 @unlink($tmp); return @file_put_contents($path, $json, LOCK_EX) !== false; } return true; } /** * 读取消息库，失败时返回 null（与"确实是空"区分开）。 * 写消息用的是"flock + ftruncate + rewind + fwrite"的就地改写，清空与写回之间存在 * 极短的空窗；而这里是普通读、不拿锁，正好撞进空窗就会读到空内容或半截 JSON， * json_decode 直接失败 —— 表现就是"某一次轮询聊天记录全空"，用户看到消息整片消失。 * 空窗只有几十微秒，所以失败后短暂等待再重试一次几乎必定成功； * 真连读两次都不行，才返回 null 让调用方决定怎么办，而不是把故障放大成空列表。 */ function loadMessagesOrNull() { for ($i = 0; $i < 2; $i++) { $raw = @file_get_contents(MESSAGES_FILE); if ($raw !== false && $raw !== '') { $d = json_decode($raw, true); if (is_array($d)) return $d; } if ($i === 0) usleep(15000); // 15ms，足够跨过写入空窗 } return null; } function loadMessages() { $d = loadMessagesOrNull(); return is_array($d) ? $d : []; } /** * group_files.json 的写入统一入口：先用独立的 .lock 文件互斥，再做"读-改-写"。 * 为什么不用 flock 锁数据文件本身：落盘是"写临时文件 + rename"的原子替换， * rename 之后旧句柄指向的是旧 inode，等在锁上的写者会拿旧内容覆盖别人的更新。 * 回调返回数组则写回，返回 null 表示这次不改动。 */ function withGroupFilesLock(callable $mutator) { $lock = @fopen(GROUP_FILES_FILE . '.lock', 'c'); if (!$lock) return false; if (!flock($lock, LOCK_EX)) { fclose($lock); return false; } $all = json_decode(@file_get_contents(GROUP_FILES_FILE), true); if (!is_array($all)) $all = []; $next = null; try { $next = $mutator($all); } catch (Throwable $e) { $next = null; } $ok = ($next === null) ? true : saveJson(GROUP_FILES_FILE, $next); flock($lock, LOCK_UN); fclose($lock); return $ok; } /** * 把群聊里发出的附件登记到群文件清单：图片进"群相册"，文件进"群文件"。 * 以前群文件清单只收录从"群文件弹窗"上传的东西，所以大家在群里发的照片、 * 文件在群文件/群相册里根本看不到，都以为是丢了。 * 同一个 url 只登记一次（重发、编辑都不会产生重复条目）；这里失败不影响消息本身已发出。 */ function archiveGroupAttachment($groupName, $user, $image, $file, $fileName, $fileSize) { $groupName = (string)$groupName; if ($groupName === '') return false; $entries = []; if ($image !== '') { $entries[] = ['name' => cleanUtf8(basename($image)), 'url' => $image, 'size' => 0, 'type' => 'image']; } if ($file !== '') { $name = $fileName !== '' ? $fileName : basename($file); $entries[] = ['name' => cleanUtf8($name), 'url' => $file, 'size' => intval($fileSize), 'type' => 'file']; } if (!$entries) return true; $added = 0; $ok = withGroupFilesLock(function ($all) use ($groupName, $user, $entries, &$added) { if (!isset($all[$groupName]) || !is_array($all[$groupName])) $all[$groupName] = []; $exist = []; foreach ($all[$groupName] as $f) { if (isset($f['url'])) $exist[(string)$f['url']] = true; } foreach ($entries as $e) { if (isset($exist[$e['url']])) continue; // 已经收录过，不重复登记 $e['user'] = $user; $e['time'] = time(); $all[$groupName][] = $e; $exist[$e['url']] = true; $added++; } if ($added === 0) return null; // 没有新东西，不必写盘 if (count($all[$groupName]) > 200) $all[$groupName] = array_slice($all[$groupName], -200); return $all; }); if (!$ok) writeLog($user, 'group_archive_fail', $groupName . ' / 群聊附件归档失败'); return $ok; } /** * 一次性补录：把历史群聊消息里的附件补进群文件清单。 * 以前群文件只收录"从群文件弹窗上传"的东西，所以大家在群里发过的照片、文件全都不在清单里。 * 上线这个改动后只对"新发的"生效，这里把已经在消息里的也补上，新旧内容都能看到。 * 只做一次（用标记文件），否则每次打开清单都要扫一遍消息库。 */ function rebuildGroupFilesOnce() { $flag = GROUP_FILES_INDEX_FLAG; if (file_exists($flag)) return; $messages = loadMessagesOrNull(); // 读不到就先别往下走：这个函数一旦执行完就会打标记，之后再也不会补录。 // 若因一次读取失败就把标记打上，历史附件将永久进不了群文件清单。 if (!is_array($messages)) return; $count = 0; withGroupFilesLock(function ($all) use ($messages, &$count) { $exist = []; foreach ($all as $g => $list) { if (!is_array($list)) continue; foreach ($list as $f) { if (isset($f['url'])) $exist[$g . '|' . $f['url']] = true; } } foreach ($messages as $m) { $room = (string)($m['room'] ?? ''); if (strpos($room, 'group:') !== 0) continue; $g = substr($room, 6); if ($g === '') continue; $img = (string)($m['image'] ?? ''); $fl = (string)($m['file'] ?? ''); $items = []; if ($img !== '') $items[] = ['name'=>cleanUtf8(basename($img)), 'url'=>$img, 'size'=>0, 'type'=>'image']; if ($fl !== '') $items[] = ['name'=>cleanUtf8((string)($m['file_name'] ?? '') !== '' ? $m['file_name'] : basename($fl)), 'url'=>$fl, 'size'=>intval($m['file_size'] ?? 0), 'type'=>'file']; foreach ($items as $it) { $key = $g . '|' . $it['url']; if (isset($exist[$key])) continue; if (!isset($all[$g]) || !is_array($all[$g])) $all[$g] = []; $it['user'] = (string)($m['username'] ?? ''); $it['time'] = intval($m['timestamp'] ?? 0); $all[$g][] = $it; $exist[$key] = true; $count++; } } if ($count === 0) return null; foreach ($all as $g => $list) { if (is_array($list) && count($list) > 200) $all[$g] = array_slice($list, -200); } return $all; }); // 标记文件同时留一份结果，方便排查"怎么没补上" @file_put_contents($flag, date('Y-m-d H:i:s') . ' 补录附件 ' . $count . ' 个（消息 ' . count($messages) . ' 条）' . PHP_EOL, LOCK_EX); } /** * 在"成员/管理员"这类名单里查人。 * 统一把两边转成字符串再比较：名单的写入路径有好几条（建群、邀请、申请通过、 * 免申请加入、设置管理员），而纯数字用户名（例如"123"）经过 JSON 往返后有可能变成整数。 * 一旦类型不一致，严格比较就会把同一个人判成"不在名单里"——表现是群文件列不出来、 * 下载被拒、踢人时提示"对方不在群中"，但上传却是好的（那条路径用的是宽松比较）， * 所以看起来像"时好时坏"，很难定位。 */ function listHasUser($list, $user) { if (!is_array($list)) return false; $user = (string)$user; foreach ($list as $m) { if (is_scalar($m) && (string)$m === $user) return true; } return false; } function isGroupMember($group, $user) { if (!is_array($group)) return false; return listHasUser($group['members'] ?? [], $user); } /** * 群文件条目查询 + 成员鉴权。返回该文件在清单里的记录（含原始文件名）， * 不是群成员、或 url 不在这个群的清单里，都返回 null。 */ function groupFileEntry($groupName, $url, $user) { $groupName = (string)$groupName; $url = (string)$url; if ($groupName === '' || $url === '') return null; $groups = json_decode(@file_get_contents(GROUPS_FILE), true) ?: []; if (!is_array($groups) || !isGroupMember($groups[$groupName] ?? null, $user)) return null; $all = json_decode(@file_get_contents(GROUP_FILES_FILE), true) ?: []; foreach (($all[$groupName] ?? []) as $f) { if (($f['url'] ?? '') === $url) return $f; } return null; } // 群文件下载响应头：中文名走 filename*（RFC 5987），同时给一个 ASCII 兜底名 function sendGroupFileHeaders($name, $size, $mime = 'application/octet-stream') { while (ob_get_level()) { ob_end_clean(); } $ascii = preg_replace('/[^\x20-\x7e]/', '_', (string)$name); $ascii = str_replace(['"', '\\'], '_', $ascii); if ($ascii === '' || trim($ascii, '_') === '') $ascii = 'download'; header('Content-Type: ' . $mime); if ($size > 0) header('Content-Length: ' . $size); header('Content-Disposition: attachment; filename="' . $ascii . '"; filename*=UTF-8\'\'' . rawurlencode((string)$name)); header('Cache-Control: no-store'); } // 房间访问控制：私聊必须是参与者、群聊必须是成员。通过返回 null，否则返回 [code, msg]。 function roomAccessError($room, $user) { $room = (string)$room; if (strpos($room, 'pm:') === 0) { $parts = explode(':', substr($room, 3)); if (count($parts) !== 2 || !in_array($user, $parts, true)) return ['code'=>'room_denied', 'msg'=>'无权访问该会话']; } elseif (strpos($room, 'group:') === 0) { $gName = substr($room, 6); $groups = json_decode(@file_get_contents(GROUPS_FILE), true) ?: []; if (!isGroupMember($groups[$gName] ?? null, $user)) return ['code'=>'room_denied', 'msg'=>'你不在该群中']; } return null; } /** * 头像 URL 附带版本号（取头像文件的修改时间）。 * 头像文件名是固定的（avatars/avatar_用户名.ext、group_avatars/group_md5.ext）， * 换头像时 URL 不变，浏览器就会拿缓存里的旧图：表现就是"会话列表还是旧头像、 * 消息区却已经是新的"，后台看到的那张也跟聊天室对不上。 * 所有对外下发头像的地方统一走这里，URL 随文件一变就自然绕开缓存。 */ function avatarUrl($path) { $path = (string)$path; if ($path === '') return $path; // 只认自己目录下的相对路径，避免这个函数被用来探测任意文件 if (strpos($path, 'avatars/') !== 0 && strpos($path, 'group_avatars/') !== 0) return $path; if (strpos($path, '..') !== false) return $path; $abs = __DIR__ . '/' . $path; if (!is_file($abs)) return $path; return $path . '?t=' . (int)@filemtime($abs); } /* ===== 消息可见性（对齐 QQ / 微信）===== * 规则一句话：**你只能看到"你进来之后"的消息**。 * - 群聊：从加入该群的时间开始可见（群主可打开 history_visible 放开这条限制） * - 公共聊天等频道：从注册时间开始可见 * - 私聊：只有双方的消息，不存在"别人的历史"，不限制 * 所有"没有记录"的情况一律返回 0 = 不限制 —— 上线时老账号、老群成员都没有时间戳， * 必须让它们保持原样，否则老用户会突然看不到自己的聊天记录。 */ function getUserRegisteredAt($user) { $meta = json_decode(@file_get_contents(USER_META_FILE), true) ?: []; return intval($meta[(string)$user]['registered_at'] ?? 0); } // 记录注册时间（每次注册都重写）。只被 register 调用，而 register 会先拒绝已存在的用户名， // 所以同名账号再次注册只可能是"旧账号已被删除"——那就该按新账号重新计时， // 不能让它继承旧账号的起点去翻旧聊天记录。 function markUserRegistered($user, $ts = null) { $u = (string)$user; if ($u === '') return; $meta = json_decode(@file_get_contents(USER_META_FILE), true) ?: []; $meta[$u] = ['registered_at' => $ts !== null ? intval($ts) : time()]; @file_put_contents(USER_META_FILE, json_encode($meta, JSON_UNESCAPED_UNICODE), LOCK_EX); } // 房间的"可见起点"时间戳，0 表示不做限制 function roomVisibleFrom($room, $user) { $room = (string)$room; if (strpos($room, 'pm:') === 0) return 0; if (strpos($room, 'group:') === 0) { $gName = substr($room, 6); $groups = json_decode(@file_get_contents(GROUPS_FILE), true) ?: []; $info = $groups[$gName] ?? null; if (!is_array($info)) return 0; if (!empty($info['history_visible'])) return 0; // 群主放开了历史 return intval($info['joined_at'][$user] ?? 0); } return getUserRegisteredAt($user); } /** * 把一组文件（[['path'=>..,'name'=>..], ..]）发给浏览器：多个打成一个 zip，单个直接输出。 * 服务器没装 zip 扩展时退回"只发第一个"，至少不会让用户面对一个点了没反应的按钮。 */ function sendFilesAsArchive($picked, $zipBase) { if (empty($picked)) { http_response_code(404); echo '没有可下载的文件'; return; } if (count($picked) === 1 || !class_exists('ZipArchive')) { $one = $picked[0]; sendGroupFileHeaders($one['name'], filesize($one['path'])); readfile($one['path']); return; } $tmp = tempnam(sys_get_temp_dir(), 'fzip'); $zip = new ZipArchive(); if ($zip->open($tmp, ZipArchive::OVERWRITE) !== true) { http_response_code(500); echo '打包失败，请稍后重试'; return; } $used = []; foreach ($picked as $f) { $n = $f['name']; $ext = pathinfo($n, PATHINFO_EXTENSION); $base = pathinfo($n, PATHINFO_FILENAME); $i = 1; // 同名文件在 zip 里会互相覆盖，这里加序号区分 while (isset($used[$n])) { $n = $base . '(' . (++$i) . ')' . ($ext !== '' ? '.' . $ext : ''); } $used[$n] = true; $zip->addFile($f['path'], $n); } $zip->close(); $zipName = $zipBase . '_' . date('Ymd_His') . '.zip'; sendGroupFileHeaders($zipName, filesize($tmp), 'application/zip'); readfile($tmp); @unlink($tmp); } function filterSensitive($text) { $words = json_decode(@file_get_contents(SENSITIVE_FILE), true) ?: []; if (!is_array($words) || empty($words)) return $text; foreach ($words as $w) { $w = trim((string)$w); if ($w === '') continue; $len = mb_strlen($w); $mask = str_repeat('*', $len); $text = str_ireplace($w, $mask, $text); } return $text; } // 群禁言：返回 群名 => [用户名 => until]，until=0 表示永久 function getGroupMutes($groupName) { $all = json_decode(@file_get_contents(GROUP_MUTES_FILE), true) ?: []; if (!is_array($all)) $all = []; $mutes = $all[$groupName] ?? []; return is_array($mutes) ? $mutes : []; } function getGroupMute($groupName, $username) { $m = getGroupMutes($groupName); if (!isset($m[$username])) return 0; $until = intval($m[$username]); if ($until === 0) return 0; // 0 表示永久禁言 if ($until <= time()) { // 过期自动清除 unset($m[$username]); $all = json_decode(@file_get_contents(GROUP_MUTES_FILE), true) ?: []; $all[$groupName] = $m; file_put_contents(GROUP_MUTES_FILE, json_encode($all, JSON_UNESCAPED_UNICODE), LOCK_EX); return 0; } return $until; } // 在消息文件中以独占锁追加一条消息并返回新 id；$data 通常不含 id function appendMessageLocked($data) { $fp = fopen(MESSAGES_FILE, 'c+'); if (!$fp) return 0; flock($fp, LOCK_EX); $msgs = json_decode(stream_get_contents($fp), true) ?: []; $maxId = 0; foreach ($msgs as $m) { if (isset($m['id']) && $m['id'] > $maxId) $maxId = $m['id']; } $data['id'] = $maxId + 1; $msgs[] = $data; if (count($msgs) > MAX_MESSAGES) $msgs = array_slice($msgs, -MAX_MESSAGES); ftruncate($fp, 0); rewind($fp); fwrite($fp, json_encode($msgs, JSON_UNESCAPED_UNICODE)); fflush($fp); flock($fp, LOCK_UN); fclose($fp); return $data['id']; } function getUnreadCounts($user) { $unread = json_decode(file_get_contents(UNREAD_FILE), true) ?: []; return $unread[$user] ?? []; } function incrementUnread($sender, $room) { $online = getOnlineUsers(ONLINE_FILE); $unread = json_decode(file_get_contents(UNREAD_FILE), true) ?: []; $changed = false; foreach ($online as $u => $info) { if ($u === $sender) continue; $currentRoom = $info['room'] ?? '公共聊天'; if ($currentRoom !== $room) { if (!isset($unread[$u])) $unread[$u] = []; if (!isset($unread[$u][$room])) $unread[$u][$room] = 0; $unread[$u][$room]++; $changed = true; } } if ($changed) { file_put_contents(UNREAD_FILE, json_encode($unread, JSON_UNESCAPED_UNICODE), LOCK_EX); } } // @全体成员：给群里所有不在本群房间的成员增加未读，实现全群提醒 function atAllNotify($groupName, $sender) { $groups = json_decode(file_get_contents(GROUPS_FILE), true) ?: []; if (!isset($groups[$groupName])) return; $members = $groups[$groupName]['members'] ?? []; $room = 'group:' . $groupName; $online = getOnlineUsers(ONLINE_FILE); $unread = json_decode(file_get_contents(UNREAD_FILE), true) ?: []; $changed = false; foreach ($members as $m) { if ($m === $sender) continue; $cur = $online[$m]['room'] ?? ''; if ($cur === $room) continue; if (!isset($unread[$m])) $unread[$m] = []; if (!isset($unread[$m][$room])) $unread[$m][$room] = 0; $unread[$m][$room]++; $changed = true; } if ($changed) file_put_contents(UNREAD_FILE, json_encode($unread, JSON_UNESCAPED_UNICODE), LOCK_EX); } // 语音通话辅助：默认房间（私聊）与房间校验 function callDefaultRoom($u1, $u2) { $arr = [$u1, $u2]; sort($arr); return 'pm:' . $arr[0] . ':' . $arr[1]; } function callRoomValid($room, $from, $to) { if (strpos($room, 'pm:') === 0) { $parts = explode(':', $room); $p1 = (string)($parts[1] ?? ''); $p2 = (string)($parts[2] ?? ''); return ($p1 === $from && $p2 === $to) || ($p1 === $to && $p2 === $from); } if (strpos($room, 'group:') === 0) { $gName = substr($room, 6); $groups = json_decode(@file_get_contents(GROUPS_FILE), true) ?: []; $members = $groups[$gName]['members'] ?? []; return in_array($from, $members) && in_array($to, $members); } return false; } // 向聊天房间注入通话气泡（type=call） function addCallMessage($room, $actor, $event, $peer, $duration = 0, $type = 'voice') { if ($room === '' || !is_string($room)) return; $dur = max(0, intval($duration)); $kind = ($type === 'video') ? '视频通话' : '语音通话'; switch ($event) { case 'start': $text = $actor . ' 发起了' . $kind; break; case 'reject': $text = $actor . ' 拒绝了' . $kind; break; case 'cancel': $text = $actor . ' 取消了' . $kind; break; case 'end': $text = $actor . ' 挂断了' . $kind . ($dur > 0 ? '（时长 ' . gmdate('i:s', $dur) . '）' : ''); break; case 'timeout':$text = $actor . ' 未接听'; break; case 'noanswer': $text = '通话未接通'; break; default: return; } appendMessageLocked([ 'room' => $room, 'type' => 'call', 'username' => 'system', 'message' => $text, 'time' => date('H:i:s'), 'timestamp' => time(), 'call_event'=> $event, 'call_type' => $type ]); incrementUnread($actor, $room); } // ===== 通话生命周期治理 ===== // 记录参与者心跳：每一次 get_call / signal / respond 都刷新，用于判断对端是否还在线。 function callTouch(&$c, $user, $now = null) { if ($now === null) $now = time(); if (!isset($c['seen']) || !is_array($c['seen'])) $c['seen'] = []; $c['seen'][$user] = $now; $c['last_activity'] = $now; } // 结束一条通话记录（幂等），必要时注入聊天结束气泡 function callEnd(&$c, $reason) { if (($c['status'] ?? '') === 'ended') return false; $room = (string)($c['room'] ?? ''); $c['status'] = 'ended'; $c['end_reason'] = $reason; // 记录结束时刻：ended 记录的保留时长必须从"结束"开始算。 // 否则通话时长本身超过 TTL 的那通电话，记录会在结束的同一刻被回收， // 对端就永远读不到终态，界面会一直挂在通话中。 $c['ended_at'] = time(); if ($room !== '' && empty($c['bubble']) && in_array($reason, ['timeout','disconnect'], true)) { $c['bubble'] = true; addCallMessage($room, $c['from'] ?? 'system', $reason === 'timeout' ? 'timeout' : 'noanswer', $c['to'] ?? '', 0, $c['type'] ?? 'voice'); } return true; } /** * 清理并回收通话记录。这是修复"永久占线"的关键： * 1) ringing 超时 → timeout * 2) 参与者心跳丢失 → disconnect（刷新/关标签/断网/息屏都会触发） * 3) 超过硬上限 → timeout * 4) 已结束的记录 超过 TTL 后物理删除（防止文件无界增长） * 返回本次是否有改动（调用方据此决定是否落盘）。 */ function sweepCalls(array &$calls) { $now = time(); $changed = false; foreach ($calls as $id => &$c) { $status = $c['status'] ?? 'ended'; if ($status === 'ended') { $endedAt = intval($c['ended_at'] ?? 0); if ($endedAt <= 0) $endedAt = intval($c['ts'] ?? 0); // 兼容没有 ended_at 的旧记录 if ($now - $endedAt > CALL_ENDED_TTL) { unset($calls[$id]); $changed = true; } continue; } $ts = intval($c['ts'] ?? 0); // 1) 响铃超时 if ($status === 'ringing' && ($now - $ts) > CALL_RING_TIMEOUT) { callEnd($c, 'timeout'); $changed = true; continue; } // 3) 硬上限 if (($now - intval($c['accepted_at'] ?? $ts)) > CALL_MAX_DURATION) { callEnd($c, 'timeout'); $changed = true; continue; } // 2) 心跳丢失：只对已建立的连接判定，避免响铃阶段误杀（响铃由 ringing 超时兜底） if ($status === 'accepted') { $seen = is_array($c['seen'] ?? null) ? $c['seen'] : []; foreach ([$c['from'] ?? '', $c['to'] ?? ''] as $u) { if ($u === '') continue; $last = intval($seen[$u] ?? 0); // 从未上报过心跳时，以 ts 为基准，给足一轮宽限期 $base = $last > 0 ? $last : intval($c['accepted_at'] ?? $ts); if (($now - $base) > CALL_PEER_TIMEOUT) { callEnd($c, 'disconnect'); $changed = true; break; } } } } unset($c); return $changed; } // 单条通话的候选背压：只保留最近 N 条，避免 calls.json 无限膨胀 function callTrimCandidates(&$c) { if (!isset($c['candidates']) || !is_array($c['candidates'])) { $c['candidates'] = []; return; } $n = count($c['candidates']); if ($n > CALL_MAX_CANDIDATES) $c['candidates'] = array_slice($c['candidates'], $n - CALL_MAX_CANDIDATES); } // 判断某用户是否被"活跃通话"占用（僵尸记录已在 sweep 中回收，这里只认真实占线） function callBusyOwner(array $calls, $user) { foreach ($calls as $id => $c) { if (($c['status'] ?? '') === 'ended') continue; if (($c['from'] ?? '') === $user || ($c['to'] ?? '') === $user) return $id; } return null; } /* ---- 通话握手码：邀请码 / 回执码 ---- * 语义： * 邀请码 invite_code —— 主叫发起时生成，标识"这一通电话"的凭证；被叫接听界面会自动录入。 * 回执码 receipt_code —— 被叫接听时生成，自动回传给主叫，表示"我已接受这通邀请"。 * 约束： * 1) 两个码都由服务端生成，客户端只负责展示，不接受客户端上传的码； * 2) 同一通电话内码恒定不变，重复 accept 只返回既有值，不重新生成（幂等）； * 3) 通话结束后一律不再下发（callHandshakeCodes 直接返回 null），避免旧码被复用。 * 说明：码的授权作用仅限"展示 + 人工核对"。真正的权限判定始终按 from/to 身份做， * 因此即使极小概率出现重码，也不会导致通话被他人插入。 * 字母表去掉了 0/O/1/I/L 等易混字符，方便肉眼核对。 */ function genCallCode() { $alphabet = '23456789ABCDEFGHJKMNPQRSTUVWXYZ'; $max = strlen($alphabet) - 1; $code = ''; for ($i = 0; $i < 6; $i++) $code .= $alphabet[random_int(0, $max)]; return $code; } // 取出该通话的邀请码/回执码；ended 之后一律返回 null，避免旧码被复用 function callHandshakeCodes(array $c) { if (($c['status'] ?? '') === 'ended') return ['invite_code' => null, 'receipt_code' => null]; return [ 'invite_code' => $c['invite_code'] ?? null, 'receipt_code' => $c['receipt_code'] ?? null ]; } // 取出"对端发来、且序号大于客户端游标"的 ICE 候选，同时返回最新游标（增量下发，可安全截断） // 取出该通话里"对端"上报的摄像头/麦克风开关。 // WebRTC 不会把"对端关了摄像头"告诉本端（本端只会收到黑帧，track 依然是 live 且未静音）， // 所以这个状态必须由对端主动上报，见 call_signal 的 state 分支。 function callPeerMedia(array $c, $me) { $peer = (($c['from'] ?? '') === $me) ? ($c['to'] ?? '') : ($c['from'] ?? ''); $m = $c['media'][$peer] ?? null; if (!is_array($m)) return null; return ['cam' => !empty($m['cam']), 'mic' => !empty($m['mic'])]; } function callPickCandidates(array $c, $me, $since) { $out = []; $next = $since; foreach (($c['candidates'] ?? []) as $cd) { $seq = intval($cd['seq'] ?? 0); if ($seq > $next) $next = $seq; if (($cd['from'] ?? '') === $me) continue; if ($seq <= $since) continue; $out[] = ['seq'=>$seq, 'c'=>$cd['candidate'] ?? null]; } return [$out, $next]; } /** * 组装前端 RTCPeerConnection 的 ICE 配置。 * 公网 STUN 只能做地址发现；双方处于对称 NAT / 运营商级 NAT / 公司防火墙时， * 必须经由 TURN 中继转发媒体才能接通——这是"外地朋友打不通、一直卡在连接中"的根因。 * TURN 由后台"安全设置 → 通话中继"配置，写入 data/site_config.json 的 ice_servers。 */ function getIceConfigForClient() { $cfg = json_decode(@file_get_contents(SITE_CONFIG_FILE), true) ?: []; $servers = [[ 'urls' => [ 'stun:stun.miwifi.com:3478', 'stun:stun.chat.bilibili.com:3478', 'stun:stun1.l.google.com:19302', 'stun:stun2.l.google.com:19302', 'stun:stun.cloudflare.com:3478' ] ]]; foreach (($cfg['ice_servers'] ?? []) as $s) { if (!is_array($s)) continue; if (empty($s['enabled'])) continue; $urls = $s['urls'] ?? ''; if (is_string($urls)) $urls = preg_split('/[\s,]+/', $urls, -1, PREG_SPLIT_NO_EMPTY); if (!is_array($urls)) continue; $ok = []; foreach ($urls as $u) { $u = trim((string)$u); if ($u !== '' && preg_match('#^(stun|stuns|turn|turns):#i', $u)) $ok[] = $u; } if (!$ok) continue; $entry = ['urls' => array_values($ok)]; if (isset($s['username']) && $s['username'] !== '') $entry['username'] = (string)$s['username']; if (isset($s['credential']) && $s['credential'] !== '') $entry['credential'] = (string)$s['credential']; $servers[] = $entry; } return ['iceCandidatePoolSize' => 4, 'iceServers' => $servers]; } // 聊天设置：文本字数限制（max_chars，0=无限制）+ 界面主题（theme.accent 主题色 / theme.bg 背景色） // 由后台"聊天设置"页写入 data/site_config.json，前端页面加载时注入 JS/CSS 生效。 function getChatSettingsForClient() { $cfg = json_decode(@file_get_contents(SITE_CONFIG_FILE), true) ?: []; $max = isset($cfg['max_chars']) ? intval($cfg['max_chars']) : 100; $max = max(0, min(5000, $max)); return [ 'max_chars' => $max, 'theme' => is_array($cfg['theme'] ?? null) ? $cfg['theme'] : [] ]; } // 依据主题配置生成 :root CSS 变量覆盖块；未配置主题时返回空串（保持默认配色） function buildThemeCss() { $t = getChatSettingsForClient()['theme']; $accent = strtolower(trim((string)($t['accent'] ?? ''))); if ($accent === '' || !preg_match('/^#[0-9a-f]{6}$/', $accent)) return ''; $r = hexdec(substr($accent, 1, 2)); $g = hexdec(substr($accent, 3, 2)); $b = hexdec(substr($accent, 5, 2)); // accent2 自动加深约 10%，保持 hover 层次 $a2 = '#' . str_pad(dechex(max(0, (int)($r * 0.9))), 2, '0', STR_PAD_LEFT) . str_pad(dechex(max(0, (int)($g * 0.9))), 2, '0', STR_PAD_LEFT) . str_pad(dechex(max(0, (int)($b * 0.9))), 2, '0', STR_PAD_LEFT); $css = ':root{--accent:' . $accent . ';--accent2:' . $a2 . ';--accent-rgb:' . $r . ',' . $g . ',' . $b . ';--accent-glow:rgba(' . $r . ',' . $g . ',' . $b . ',0.1);--accent-strong:rgba(' . $r . ',' . $g . ',' . $b . ',0.12);'; $bg = strtolower(trim((string)($t['bg'] ?? ''))); if ($bg !== '' && preg_match('/^#[0-9a-f]{6}$/', $bg)) $css .= '--bg:' . $bg . ';'; return $css . '}'; } // 签到 / 积分 / 经验 / 等级 相关的读写辅助函数已随等级系统下架一并移除。 // data/signins.json 仍保留在服务器上（内容未删除），日后恢复玩法时可直接读回。 /* ==================== 持久登录 与 单设备登录 ==================== * 要解决两件事： * 1) 以前关掉浏览器、或闲置一会儿就要重新登录（会话 Cookie 是浏览器级 + 服务端会话 24 分钟被回收）； * 2) 同一账号可以在多台设备同时在线。现在改成"后登录的顶掉先登录的"。 * * 凭据按最小权限、可撤销原则设计： * - 长期凭据是"选择子:校验子"两段随机串，磁盘上只存校验子的哈希，文件泄露也无法直接登录； * - 每次用凭据自动登录都轮换校验子（一次性），旧值再次出现即视为泄露，整条凭据作废； * - 退出登录、管理员强制下线、封号、修改密码都会吊销凭据，堵住"被踢了却靠记住登录继续进来"。 */ /** 账号会话表必须整体加锁：两台设备同时登录时，谁后写入谁才是唯一活跃会话。 * 不加锁会出现两边都认为自己在线（都刚写完自己的 sid），单设备约束就失效了。 */ function withAuthSessionsLock(callable $fn) { $lockFile = AUTH_SESSIONS_FILE . '.lock'; $fp = @fopen($lockFile, 'c'); if (!$fp) { return $fn(authJsonRead(AUTH_SESSIONS_FILE), false); } @flock($fp, LOCK_EX); try { $all = authJsonRead(AUTH_SESSIONS_FILE); $out = $fn($all, true); if (is_array($out)) saveJson(AUTH_SESSIONS_FILE, $out); // 回调返回 null = 本次无需落盘 return $out; } finally { @flock($fp, LOCK_UN); @fclose($fp); } } function authJsonRead($file) { $d = json_decode(@file_get_contents($file), true); return is_array($d) ? $d : []; } function authTokenHash($validator) { return hash('sha256', $validator); } /** 记住登录 Cookie：HttpOnly 防脚本读取，SameSite=Lax 降低跨站携带，HTTPS 下带 Secure。 * 同样要兼容 PHP 7.3 以下（数组形式在旧版本上会失败，导致"记住我"静默失效）。 */ function setRememberCookie($value, $maxAge) { $secure = (!empty($_SERVER['HTTPS']) && strtolower($_SERVER['HTTPS']) !== 'off') || (($_SERVER['HTTP_X_FORWARDED_PROTO'] ?? '') === 'https'); $expires = $maxAge > 0 ? time() + $maxAge : time() - 3600; if (PHP_VERSION_ID >= 70300) { setcookie(REMEMBER_COOKIE, $value, [ 'expires' => $expires, 'path' => '/', 'httponly' => true, 'secure' => $secure, 'samesite' => 'Lax', ]); } else { setcookie(REMEMBER_COOKIE, $value, $expires, '/', '', $secure, true); } } /** 签发长期凭据，返回 "选择子:校验子"（只有它能登录，磁盘上留的是哈希）。 */ function issueRememberToken($user, $sid) { try { $selector = bin2hex(random_bytes(9)); $validator = bin2hex(random_bytes(32)); } catch (Throwable $e) { $selector = substr(hash('sha256', uniqid('sel', true)), 0, 18); $validator = hash('sha256', uniqid('val', true)); } $tokens = authJsonRead(AUTH_TOKENS_FILE); $now = time(); foreach ($tokens as $k => $t) { if (intval($t['expires'] ?? 0) < $now) unset($tokens[$k]); } // 清过期，避免文件无界增长 $tokens[$selector] = [ 'user' => (string)$user, 'hash' => authTokenHash($validator), 'sid' => (string)$sid, 'created' => $now, 'expires' => $now + REMEMBER_DAYS * 86400, 'ua' => substr(hash('sha256', $_SERVER['HTTP_USER_AGENT'] ?? ''), 0, 16), ]; if (!saveJson(AUTH_TOKENS_FILE, $tokens)) return ''; return $selector . ':' . $validator; } /** 吊销某账号的全部长期凭据（被强制下线、封号、改密码时调用）。 */ function revokeRememberTokens($user) { if ($user === '') return; $tokens = authJsonRead(AUTH_TOKENS_FILE); $changed = false; foreach ($tokens as $k => $t) { if (($t['user'] ?? '') === (string)$user) { unset($tokens[$k]); $changed = true; } } if ($changed) saveJson(AUTH_TOKENS_FILE, $tokens); setRememberCookie('', 0); } /** 只吊销"本机这一个浏览器"的长期凭据（退出登录时用）。 * 按当前 Cookie 里的选择子精确定位，因此退出登录不会连带注销其它设备上的登录 —— * 多设备版下这点尤其重要；单设备版本来也只有一个凭据，效果相同。 */ function revokeMyRememberToken() { $raw = (string)($_COOKIE[REMEMBER_COOKIE] ?? ''); if ($raw !== '' && strpos($raw, ':') !== false) { $selector = explode(':', $raw, 2)[0]; if ($selector !== '') { $tokens = authJsonRead(AUTH_TOKENS_FILE); if (isset($tokens[$selector])) { unset($tokens[$selector]); saveJson(AUTH_TOKENS_FILE, $tokens); } } } setRememberCookie('', 0); } /** 建立登录态：轮换会话 ID（防会话固定），并把"本次会话"标记出来。 */ function authBeginSession($user) { if (session_status() === PHP_SESSION_ACTIVE) @session_regenerate_id(true); $_SESSION['username'] = $user; $_SESSION['sid'] = (string)session_id(); return $_SESSION['sid']; } /** 登录成功时登记"我就是这个账号当前唯一的活跃会话"，返回被顶掉的旧会话（用于日志）。 */ function authRegisterActiveSession($user, $sid) { $prev = null; withAuthSessionsLock(function ($all) use ($user, $sid, &$prev) { $old = $all[$user] ?? null; if (is_array($old) && ($old['sid'] ?? '') !== '' && ($old['sid'] ?? '') !== $sid) $prev = $old; $all[$user] = [ 'sid' => (string)$sid, 'ip' => clientIp(), 'ua' => mb_substr($_SERVER['HTTP_USER_AGENT'] ?? '', 0, 120), 'login_at' => time(), 'last_seen'=> time(), 'prev_sid' => $prev ? (string)($prev['sid'] ?? '') : '', 'prev_ip' => $prev ? (string)($prev['ip'] ?? '') : '', ]; return $all; }); return $prev; } /** * 单设备约束的强制点：每次已登录请求都核对"我这个会话是否还是该账号的活跃会话"。 * 返回 null 表示正常；返回数组则表示已被别处登录顶掉。 * 兼容性：升级前建立的老会话没有 sid，第一次请求会被接管成为活跃会话 —— * 这样上线新版本不会把正在聊天的用户一次性踢下线。 */ function authCheckActiveSession($user) { $sid = (string)($_SESSION['sid'] ?? ''); $bad = null; withAuthSessionsLock(function ($all) use ($user, $sid, &$bad) { $rec = $all[$user] ?? null; if (!is_array($rec) || ($rec['sid'] ?? '') === '') { $use = $sid !== '' ? $sid : (string)session_id(); $_SESSION['sid'] = $use; $all[$user] = [ 'sid' => $use, 'ip' => clientIp(), 'ua' => mb_substr($_SERVER['HTTP_USER_AGENT'] ?? '', 0, 120), 'login_at' => time(), 'last_seen' => time(), 'prev_sid' => '', 'prev_ip' => '', ]; return $all; } if ($sid !== '' && $sid !== (string)$rec['sid']) { $bad = $rec; return null; } if ($sid === '') $_SESSION['sid'] = (string)$rec['sid']; // 活跃时间最多 1 分钟落盘一次：轮询 2.5 秒一次，每次写会让会话表长期被占 if (time() - intval($rec['last_seen'] ?? 0) < 60) return null; $all[$user]['last_seen'] = time(); return $all; }); return $bad; } /** * 用长期凭据自动登录（浏览器重开、或服务端会话文件被回收后依然保持登录）。 * 校验：选择子 → 校验子哈希 → 有效期 → 仍是该账号活跃会话 → 轮换校验子并顺延。 * 任一步失败都按未登录处理，并清掉这份已不可信的 Cookie。 */ function authTryRememberLogin() { if (isset($_SESSION['username'])) return; $raw = (string)($_COOKIE[REMEMBER_COOKIE] ?? ''); if ($raw === '' || strpos($raw, ':') === false) return; list($selector, $validator) = explode(':', $raw, 2); if ($selector === '' || $validator === '') { setRememberCookie('', 0); return; } $tokens = authJsonRead(AUTH_TOKENS_FILE); $t = $tokens[$selector] ?? null; if (!is_array($t)) { setRememberCookie('', 0); return; } // 哈希不匹配：可能是伪造，也可能是"已轮换过的旧值"被重放 —— 两种情况都作废整条凭据 if (!hash_equals((string)($t['hash'] ?? ''), authTokenHash($validator))) { unset($tokens[$selector]); saveJson(AUTH_TOKENS_FILE, $tokens); setRememberCookie('', 0); writeLog((string)($t['user'] ?? ''), 'remember_invalid', '长期登录凭据校验失败，已作废该凭据'); return; } if (intval($t['expires'] ?? 0) < time()) { unset($tokens[$selector]); saveJson(AUTH_TOKENS_FILE, $tokens); setRememberCookie('', 0); return; } $user = (string)($t['user'] ?? ''); $users = json_decode(@file_get_contents(USERS_FILE), true) ?: []; if ($user === '' || !isset($users[$user])) { unset($tokens[$selector]); saveJson(AUTH_TOKENS_FILE, $tokens); setRememberCookie('', 0); return; } // 单设备版才需要这道校验：凭据对应的会话必须仍是该账号的活跃会话， // 否则说明已在别的设备上登录过，本机不该再自动登录。 // 多设备版必须跳过 —— 否则在另一台设备登录后，本机的"记住登录"就会失效。 if (ENFORCE_SINGLE_SESSION) { $stillActive = false; withAuthSessionsLock(function ($all) use ($user, $t, &$stillActive) { $rec = $all[$user] ?? null; if (is_array($rec) && ($rec['sid'] ?? '') !== '' && (string)$rec['sid'] === (string)($t['sid'] ?? '')) { $stillActive = true; } return null; }); if (!$stillActive) { unset($tokens[$selector]); saveJson(AUTH_TOKENS_FILE, $tokens); setRememberCookie('', 0); writeLog($user, 'remember_superseded', '长期登录凭据已被其他设备登录取代，本机清退'); return; } } try { $newValidator = bin2hex(random_bytes(32)); } catch (Throwable $e) { $newValidator = hash('sha256', uniqid('val', true)); } $tokens[$selector]['hash'] = authTokenHash($newValidator); $tokens[$selector]['expires'] = time() + REMEMBER_DAYS * 86400; // 滑动顺延 saveJson(AUTH_TOKENS_FILE, $tokens); authBeginSession($user); $_SESSION['sid'] = (string)($t['sid'] ?? ''); // 沿用原 sid，单设备约束继续成立 setRememberCookie($selector . ':' . $newValidator, REMEMBER_DAYS * 86400); writeLog($user, 'remember_login', '使用长期登录凭据自动登录'); } // 自动登录必须在任何动作分发与页面输出之前完成，否则"记住登录"就只在刷新页面时生效 authTryRememberLogin(); if (isset($_GET['action'])) { header('Content-Type: application/json; charset=utf-8'); if ($_GET['action'] === 'register') { $siteCfg = json_decode(@file_get_contents(SITE_CONFIG_FILE), true) ?: []; if (empty($siteCfg['registration'])) { http_response_code(403); echo json_encode(['error'=>'管理员已关闭新用户注册', 'code'=>'reg_closed']); exit; } $username = trim($_POST['username'] ?? ''); $password = trim($_POST['password'] ?? ''); $confirm = trim($_POST['confirm'] ?? ''); if ($username === '' || $password === '') { http_response_code(400); echo json_encode(['error'=>'用户名和密码不能为空']); exit; } if (mb_strlen($username) > 20) { http_response_code(400); echo json_encode(['error'=>'用户名最多20个字符']); exit; } if (strlen($password) < 6) { http_response_code(400); echo json_encode(['error'=>'密码至少6位']); exit; } if ($password !== $confirm) { http_response_code(400); echo json_encode(['error'=>'两次密码不一致']); exit; } $users = json_decode(file_get_contents(USERS_FILE), true) ?: []; if (isset($users[$username])) { http_response_code(400); echo json_encode(['error'=>'用户名已存在']); exit; } $users[$username] = password_hash($password, PASSWORD_DEFAULT); file_put_contents(USERS_FILE, json_encode($users, JSON_UNESCAPED_UNICODE), LOCK_EX); // 注册时间就是这位用户在公共聊天里的"可见起点"：他看不到注册之前的聊天记录 markUserRegistered($username); // 注册即登录：同样登记活跃会话并签发长期凭据，避免"刚注册完又被登出" $sid = authBeginSession($username); authRegisterActiveSession($username, $sid); $tok = issueRememberToken($username, $sid); if ($tok !== '') setRememberCookie($tok, REMEMBER_DAYS * 86400); session_write_close(); recordIp($username); writeLog($username, 'register', '注册新账号'); echo json_encode(['success'=>true]); exit; } // CSRF 纵深防御：所有状态变更（POST）校验来源域名，拒绝来自其他站点的请求。 // 与 Cookie 的 SameSite=Lax 叠加，覆盖老旧浏览器不支持 SameSite 的情况。 // 未携带 Origin/Referer 时放行，避免误伤正常客户端。 if (($_SERVER['REQUEST_METHOD'] ?? 'GET') === 'POST') { $__host = $_SERVER['HTTP_HOST'] ?? ''; $__src = ($_SERVER['HTTP_ORIGIN'] ?? '') !== '' ? $_SERVER['HTTP_ORIGIN'] : ($_SERVER['HTTP_REFERER'] ?? ''); if ($__src !== '' && $__host !== '') { $__srcHost = parse_url($__src, PHP_URL_HOST); $__hostOnly = preg_replace('/:\d+$/', '', $__host); if ($__srcHost && strcasecmp($__srcHost, $__hostOnly) !== 0) { writeLog('', 'csrf_blocked', '跨站 POST 被拒绝，来源：' . mb_substr($__src, 0, 120)); http_response_code(403); echo json_encode(['error'=>'请求来源不被允许', 'code'=>'csrf']); exit; } } } if ($_GET['action'] === 'login') { $username = trim($_POST['username'] ?? ''); $password = trim($_POST['password'] ?? ''); if ($username === '' || $password === '') { http_response_code(400); echo json_encode(['error'=>'请输入用户名和密码']); exit; } // 登录限速：同一 IP + 用户名 连续失败 5 次则锁定 10 分钟，遏制暴力破解（原先可无限次尝试） $attFile = DATA_DIR . 'login_attempts.json'; $attempts = json_decode(@file_get_contents($attFile), true) ?: []; $ak = clientIp() . '|' . mb_strtolower($username); $rec = $attempts[$ak] ?? ['n' => 0, 'ts' => 0]; if ((time() - intval($rec['ts'])) >= 600) $rec = ['n' => 0, 'ts' => 0]; // 窗口已过，重置计数 if (intval($rec['n']) >= 5) { $left = (int)ceil((600 - (time() - intval($rec['ts']))) / 60); writeLog($username, 'login_ratelimited', '登录尝试过多，剩余锁定约 ' . $left . ' 分钟'); http_response_code(429); echo json_encode(['error'=>'尝试次数过多，请约 ' . $left . ' 分钟后再试']); exit; } $users = json_decode(file_get_contents(USERS_FILE), true) ?: []; if (!isset($users[$username]) || !password_verify($password, $users[$username])) { $rec['n'] = intval($rec['n']) + 1; $rec['ts'] = time(); $attempts[$ak] = $rec; $cut = time() - 86400; // 清理 1 天前的记录，避免文件无限增长 foreach ($attempts as $k => $v) { if (intval($v['ts'] ?? 0) < $cut) unset($attempts[$k]); } @file_put_contents($attFile, json_encode($attempts, JSON_UNESCAPED_UNICODE), LOCK_EX); writeLog($username, 'login_fail', '用户名或密码错误'); http_response_code(400); echo json_encode(['error'=>'用户名或密码错误']); exit; } $ban = isBanned($username); if ($ban) { writeLog($username, 'login_blocked', '账号已被封禁：' . ($ban['reason'] ?? '')); http_response_code(403); echo json_encode(['error'=>'账号已被封禁：' . ($ban['reason'] ?? '无')]); exit; } if (isset($attempts[$ak])) { unset($attempts[$ak]); @file_put_contents($attFile, json_encode($attempts, JSON_UNESCAPED_UNICODE), LOCK_EX); } // 会话固定防护（authBeginSession 内部会轮换会话 ID）+ 单设备登录： // 把本次会话登记为该账号的活跃会话；单设备版下这会让之前那台设备的会话随即失效 $sid = authBeginSession($username); $prev = authRegisterActiveSession($username, $sid); if ($prev) { // 多设备版不会真的把旧会话踢掉，日志里必须说清楚，否则排查时会被误导 writeLog($username, ENFORCE_SINGLE_SESSION ? 'session_replaced_other' : 'login_another_device', (ENFORCE_SINGLE_SESSION ? '新登录顶掉旧会话，旧会话来自 ' : '另一台设备登录，旧会话来自 ') . ($prev['ip'] ?? '') . '（' . ($prev['ua'] ?? '') . '）'); } // "记住我"：签发可轮换、可撤销的长期凭据； // 不勾选时只清掉"本机这个浏览器"的旧凭据 —— // 不能吊销该账号全部凭据，否则你在其它设备上的"记住登录"会被这次登录顺手废掉。 if (!empty($_POST['remember'])) { $tok = issueRememberToken($username, $sid); if ($tok !== '') setRememberCookie($tok, REMEMBER_DAYS * 86400); } else { revokeMyRememberToken(); } session_write_close(); recordIp($username); writeLog($username, 'login', '登录成功'); echo json_encode(['success'=>true]); exit; } if ($_GET['action'] === 'logout') { $lu = (string)($_SESSION['username'] ?? ''); writeLog($lu, 'logout', '退出登录'); // 只吊销本机这个浏览器的长期凭据：既保证"退出后不会被自动登录回来"， // 又不会把你在其它设备上的登录一并注销（多设备版尤其重要）。 revokeMyRememberToken(); // 会话登记表里若正好是我这条就清掉；别处的新登录不能被我的退出请求误删 $mySid = (string)($_SESSION['sid'] ?? ''); if ($lu !== '' && $mySid !== '') { withAuthSessionsLock(function ($all) use ($lu, $mySid) { if (isset($all[$lu]) && (string)($all[$lu]['sid'] ?? '') === $mySid) { unset($all[$lu]); return $all; } return null; }); } $_SESSION = []; session_destroy(); echo json_encode(['success'=>true]); exit; } if (!isset($_SESSION['username'])) { http_response_code(403); echo json_encode(['error'=>'请先登录']); exit; } $currentUser = $_SESSION['username']; // 已封禁用户在每次受保护操作前统一拦截 $ban = isBanned($currentUser); if ($ban) { session_write_close(); revokeRememberTokens($currentUser); // 封号必须连带吊销长期凭据，否则"记住登录"会一直把他带回来 http_response_code(403); echo json_encode(['error'=>'账号已被封禁：' . ($ban['reason'] ?? '无'), 'code'=>'banned']); exit; } // IP 封禁拦截（每次受保护操作） $ipNow = clientIp(); $ipBans = json_decode(@file_get_contents(IP_BAN_FILE), true) ?: []; if ($ipNow !== '' && isset($ipBans[$ipNow])) { session_write_close(); http_response_code(403); echo json_encode(['error'=>'您的IP已被封禁：' . ($ipBans[$ipNow]['reason'] ?? '无'), 'code'=>'ip_banned']); exit; } // 强制下线：命中踢出记录则销毁会话，且为一次性（踢出后自动清除，可重新登录） $kicks = json_decode(@file_get_contents(KICKS_FILE), true) ?: []; if (isset($kicks[$currentUser])) { unset($kicks[$currentUser]); @file_put_contents(KICKS_FILE, json_encode($kicks, JSON_UNESCAPED_UNICODE), LOCK_EX); // 同时吊销长期凭据：不吊销的话，被踢的设备下一次请求就会被自动登录回来，等于踢了个寂寞 revokeRememberTokens($currentUser); $kicksMine = (string)($_SESSION['sid'] ?? ''); withAuthSessionsLock(function ($all) use ($currentUser, $kicksMine) { if (isset($all[$currentUser]) && (string)($all[$currentUser]['sid'] ?? '') === $kicksMine) { unset($all[$currentUser]); return $all; } return null; }); $_SESSION = []; session_destroy(); http_response_code(403); echo json_encode(['error'=>'您已被管理员强制下线', 'code'=>'kicked']); exit; } // 单设备登录：若我这个会话已被别处的新登录顶掉，立刻退出并说明原因。 // 多设备版（ENFORCE_SINGLE_SESSION=false）整段跳过，允许同一账号同时在线。 if (ENFORCE_SINGLE_SESSION) { $replacedBy = authCheckActiveSession($currentUser); if ($replacedBy) { writeLog($currentUser, 'session_replaced', '本会话已被其他设备的新登录顶下线，来源 ' . ($replacedBy['ip'] ?? '')); $_SESSION = []; session_destroy(); setRememberCookie('', 0); // 本机这份凭据已失效，直接清掉，避免反复尝试 http_response_code(403); echo json_encode(['error'=>'该账号已在其他设备登录，你已被下线', 'code'=>'session_replaced']); exit; } } if ($_GET['action'] === 'upload_avatar') { session_write_close(); if (!isset($_FILES['avatar']) || $_FILES['avatar']['error'] !== UPLOAD_ERR_OK) { http_response_code(400); echo json_encode(['error'=>uploadFailMsg('avatar', '头像')]); exit; } $file = $_FILES['avatar']; $allowed = ['image/jpeg', 'image/png', 'image/gif', 'image/webp']; $mime = ''; if (function_exists('finfo_open')) { $finfo = finfo_open(FILEINFO_MIME_TYPE); $mime = finfo_file($finfo, $file['tmp_name']); finfo_close($finfo); } else { $mime = $file['type']; if (empty($mime)) { $ext = strtolower(pathinfo($file['name'], PATHINFO_EXTENSION)); $map = ['jpg'=>'image/jpeg','jpeg'=>'image/jpeg','png'=>'image/png','gif'=>'image/gif','webp'=>'image/webp']; $mime = $map[$ext] ?? ''; } } if (!in_array($mime, $allowed)) { http_response_code(400); echo json_encode(['error'=>'仅支持JPG/PNG/GIF/WebP']); exit; } $extMap = ['image/jpeg'=>'jpg','image/png'=>'png','image/gif'=>'gif','image/webp'=>'webp']; $ext = $extMap[$mime]; $base = 'avatar_' . $currentUser; // 自动压缩：头像统一缩到 256x256 内，返回 null 时保持原图 $tmpOut = AVATAR_DIR . $base . '_tmp.' . $ext; $outExt = @compressImageTo($file['tmp_name'], $tmpOut, 256, 256, 82); if ($outExt !== null) { @unlink($file['tmp_name']); $filename = $base . '.' . $outExt; $dest = AVATAR_DIR . $filename; if (!@copy($tmpOut, $dest)) { @unlink($tmpOut); http_response_code(500); echo json_encode(['error'=>'保存失败']); exit; } @unlink($tmpOut); } else { @unlink($tmpOut); $filename = $base . '.' . $ext; $dest = AVATAR_DIR . $filename; if (!@move_uploaded_file($file['tmp_name'], $dest)) { http_response_code(500); echo json_encode(['error'=>'保存失败']); exit; } stripImageMetadata($dest, $mime); } foreach (['jpg','png','gif','webp'] as $oldExt) { $oldFile = AVATAR_DIR . 'avatar_' . $currentUser . '.' . $oldExt; if ($oldFile !== $dest && file_exists($oldFile)) @unlink($oldFile); } $avatars = json_decode(file_get_contents(AVATARS_FILE), true) ?: []; $avatars[$currentUser] = 'avatars/' . $filename; file_put_contents(AVATARS_FILE, json_encode($avatars, JSON_UNESCAPED_UNICODE), LOCK_EX); $avatarUpdates = json_decode(file_get_contents(AVATAR_UPDATED_FILE), true) ?: []; $avatarUpdates[$currentUser] = time(); file_put_contents(AVATAR_UPDATED_FILE, json_encode($avatarUpdates, JSON_UNESCAPED_UNICODE), LOCK_EX); writeLog($currentUser, 'upload_avatar', '更换头像'); echo json_encode(['success'=>true, 'avatar_url'=>'avatars/'.$filename]); exit; } // 恢复默认头像：清掉自定义头像记录与文件，前端回落到"灰白人像剪影"占位 if ($_GET['action'] === 'reset_avatar') { session_write_close(); $root = realpath(AVATAR_DIR); foreach (['jpg','png','gif','webp'] as $ext) { $f = AVATAR_DIR . 'avatar_' . $currentUser . '.' . $ext; // 路径收敛：确认待删文件确实落在头像目录内，避免用户名里的特殊字符导致越界删除 $dir = realpath(dirname($f)); if ($root === false || $dir === false || strpos($dir, $root) !== 0) continue; if (is_file($f)) @unlink($f); } $avatars = json_decode(@file_get_contents(AVATARS_FILE), true) ?: []; unset($avatars[$currentUser]); file_put_contents(AVATARS_FILE, json_encode($avatars, JSON_UNESCAPED_UNICODE), LOCK_EX); $avatarUpdates = json_decode(@file_get_contents(AVATAR_UPDATED_FILE), true) ?: []; $avatarUpdates[$currentUser] = time(); file_put_contents(AVATAR_UPDATED_FILE, json_encode($avatarUpdates, JSON_UNESCAPED_UNICODE), LOCK_EX); writeLog($currentUser, 'reset_avatar', '恢复默认头像'); echo json_encode(['success'=>true]); exit; } if ($_GET['action'] === 'upload_group_avatar') { session_write_close(); if (!isset($_FILES['avatar']) || $_FILES['avatar']['error'] !== UPLOAD_ERR_OK) { http_response_code(400); echo json_encode(['error'=>uploadFailMsg('avatar', '群头像')]); exit; } $file = $_FILES['avatar']; $allowed = ['image/jpeg', 'image/png', 'image/gif', 'image/webp']; $mime = ''; if (function_exists('finfo_open')) { $finfo = finfo_open(FILEINFO_MIME_TYPE); $mime = finfo_file($finfo, $file['tmp_name']); finfo_close($finfo); } else { $mime = $file['type']; if (empty($mime)) { $ext = strtolower(pathinfo($file['name'], PATHINFO_EXTENSION)); $map = ['jpg'=>'image/jpeg','jpeg'=>'image/jpeg','png'=>'image/png','gif'=>'image/gif','webp'=>'image/webp']; $mime = $map[$ext] ?? ''; } } if (!in_array($mime, $allowed)) { http_response_code(400); echo json_encode(['error'=>'仅支持JPG/PNG/GIF/WebP']); exit; } $extMap = ['image/jpeg'=>'jpg','image/png'=>'png','image/gif'=>'gif','image/webp'=>'webp']; $ext = $extMap[$mime]; $groupId = trim($_POST['group'] ?? ''); if ($groupId === '') { $groupId = 'tmp_' . uniqid(); } $base = 'group_' . md5($groupId); // 自动压缩：群头像统一缩到 256x256 内，返回 null 时保持原图 $tmpOut = GROUP_AVATAR_DIR . $base . '_tmp.' . $ext; $outExt = @compressImageTo($file['tmp_name'], $tmpOut, 256, 256, 82); if ($outExt !== null) { @unlink($file['tmp_name']); $filename = $base . '.' . $outExt; $dest = GROUP_AVATAR_DIR . $filename; if (!@copy($tmpOut, $dest)) { @unlink($tmpOut); http_response_code(500); echo json_encode(['error'=>'保存失败']); exit; } @unlink($tmpOut); } else { @unlink($tmpOut); $filename = $base . '.' . $ext; $dest = GROUP_AVATAR_DIR . $filename; if (!@move_uploaded_file($file['tmp_name'], $dest)) { http_response_code(500); echo json_encode(['error'=>'保存失败']); exit; } stripImageMetadata($dest, $mime); } echo json_encode(['success'=>true, 'avatar_url'=>'group_avatars/'.$filename, 'tmp_id'=>$groupId]); exit; } if ($_GET['action'] === 'get_avatar') { $user = trim($_GET['user'] ?? ''); $avatars = json_decode(file_get_contents(AVATARS_FILE), true) ?: []; echo json_encode(['avatar'=>$avatars[$user] ?? null]); exit; } if ($_GET['action'] === 'online') { session_write_close(); updateOnline(ONLINE_FILE, $currentUser, $_GET['room'] ?? '公共聊天'); $online = getOnlineUsers(ONLINE_FILE); echo json_encode(['online'=>count($online), 'users'=>array_keys($online)]); exit; } if ($_GET['action'] === 'get_status') { $statuses = json_decode(file_get_contents(STATUS_FILE), true) ?: []; echo json_encode(['statuses'=>$statuses]); exit; } if ($_GET['action'] === 'set_status') { $status = trim($_POST['status'] ?? ''); $statuses = json_decode(file_get_contents(STATUS_FILE), true) ?: []; if ($status === '') { unset($statuses[$currentUser]); } else { $statuses[$currentUser] = mb_substr($status, 0, 30); } file_put_contents(STATUS_FILE, json_encode($statuses, JSON_UNESCAPED_UNICODE), LOCK_EX); echo json_encode(['success'=>true, 'status'=>$statuses[$currentUser] ?? '']); exit; } if ($_GET['action'] === 'upload_chat_image') { session_write_close(); if (!isset($_FILES['image']) || $_FILES['image']['error'] !== UPLOAD_ERR_OK) { http_response_code(400); echo json_encode(['error'=>uploadFailMsg('image', '图片')]); exit; } $file = $_FILES['image']; if ($file['size'] > MAX_IMAGE_SIZE) { http_response_code(400); echo json_encode(['error'=>'图片不能超过10MB']); exit; } $allowed = ['image/jpeg','image/png','image/gif','image/webp']; $mime = ''; if (function_exists('finfo_open')) { $finfo = finfo_open(FILEINFO_MIME_TYPE); $mime = finfo_file($finfo, $file['tmp_name']); finfo_close($finfo); } else { $mime = $file['type']; } if (!in_array($mime, $allowed)) { http_response_code(400); echo json_encode(['error'=>'仅支持JPG/PNG/GIF/WebP']); exit; } $extMap = ['image/jpeg'=>'jpg','image/png'=>'png','image/gif'=>'gif','image/webp'=>'webp']; $ext = $extMap[$mime]; $base = uniqid('img_', true); // 自动压缩：聊天图片统一缩到 1920x1920 内，返回 null 时保持原图 $tmpOut = UPLOAD_DIR . $base . '_tmp.' . $ext; $outExt = @compressImageTo($file['tmp_name'], $tmpOut, 1920, 1920, 82); if ($outExt !== null) { @unlink($file['tmp_name']); $filename = $base . '.' . $outExt; $dest = UPLOAD_DIR . $filename; if (!@copy($tmpOut, $dest)) { @unlink($tmpOut); http_response_code(500); echo json_encode(['error'=>'保存失败']); exit; } @unlink($tmpOut); } else { @unlink($tmpOut); $filename = $base . '.' . $ext; $dest = UPLOAD_DIR . $filename; if (!@move_uploaded_file($file['tmp_name'], $dest)) { http_response_code(500); echo json_encode(['error'=>'保存失败']); exit; } stripImageMetadata($dest, $mime); } echo json_encode(['success'=>true, 'image_url'=>'uploads/'.$filename]); exit; } if ($_GET['action'] === 'upload_voice') { session_write_close(); if (!isset($_FILES['voice']) || $_FILES['voice']['error'] !== UPLOAD_ERR_OK) { http_response_code(400); echo json_encode(['error'=>uploadFailMsg('voice', '语音')]); exit; } $file = $_FILES['voice']; if ($file['size'] > 20 * 1024 * 1024) { http_response_code(400); echo json_encode(['error'=>'语音不能超过20MB']); exit; } $mime = $file['type']; $allowed = ['audio/webm','audio/ogg','audio/mp4','audio/mpeg','audio/wav','audio/x-wav','video/webm']; if (!in_array($mime, $allowed)) { http_response_code(400); echo json_encode(['error'=>'不支持的语音格式']); exit; } $extMap = ['audio/webm'=>'webm','video/webm'=>'webm','audio/ogg'=>'ogg','audio/mp4'=>'m4a','audio/mpeg'=>'mp3','audio/wav'=>'wav','audio/x-wav'=>'wav']; $ext = $extMap[$mime] ?? 'webm'; $filename = uniqid('voice_', true) . '.' . $ext; $dest = UPLOAD_DIR . $filename; if (!@move_uploaded_file($file['tmp_name'], $dest)) { http_response_code(500); echo json_encode(['error'=>'保存失败']); exit; } $duration = max(1, min(300, intval($_POST['duration'] ?? 0))); writeLog($currentUser, 'upload_voice', $filename . ' (' . $duration . 's)'); echo json_encode(['success'=>true, 'voice_url'=>'uploads/'.$filename, 'duration'=>$duration]); exit; } if ($_GET['action'] === 'get_stickers') { $stickers = []; $files = @glob(STICKERS_DIR . '*.svg'); if ($files) { foreach ($files as $f) { $stickers[] = ['url' => 'stickers/' . basename($f), 'type' => 'builtin']; } } $userStk = json_decode(@file_get_contents(STICKERS_FILE), true) ?: []; if (is_array($userStk)) { foreach ($userStk as $s) { if (is_array($s) && isset($s['url'])) { $stickers[] = ['id' => $s['id'] ?? '', 'url' => $s['url'], 'type' => 'user', 'user' => $s['user'] ?? '']; } } } echo json_encode(['success'=>true, 'stickers'=>$stickers]); exit; } if ($_GET['action'] === 'upload_sticker') { session_write_close(); if (!isset($_FILES['sticker']) || $_FILES['sticker']['error'] !== UPLOAD_ERR_OK) { http_response_code(400); echo json_encode(['error'=>uploadFailMsg('sticker', '表情')]); exit; } $file = $_FILES['sticker']; if ($file['size'] > 5 * 1024 * 1024) { http_response_code(400); echo json_encode(['error'=>'表情不能超过5MB']); exit; } $mime = ''; if (function_exists('finfo_open')) { $finfo = finfo_open(FILEINFO_MIME_TYPE); $mime = finfo_file($finfo, $file['tmp_name']); finfo_close($finfo); } else { $mime = $file['type']; } $allowed = ['image/png','image/jpeg','image/gif','image/webp','image/svg+xml']; if (!in_array($mime, $allowed)) { http_response_code(400); echo json_encode(['error'=>'仅支持图片格式']); exit; } $extMap = ['image/png'=>'png','image/jpeg'=>'jpg','image/gif'=>'gif','image/webp'=>'webp','image/svg+xml'=>'svg']; $ext = $extMap[$mime]; $base = 'stk_' . uniqid(); // 自动压缩：表情统一缩到 512x512 内（SVG/动画GIF等自动保持原图） $tmpOut = UPLOAD_DIR . $base . '_tmp.' . $ext; $outExt = @compressImageTo($file['tmp_name'], $tmpOut, 512, 512, 90); if ($outExt !== null) { @unlink($file['tmp_name']); $filename = $base . '.' . $outExt; $dest = UPLOAD_DIR . $filename; if (!@copy($tmpOut, $dest)) { @unlink($tmpOut); http_response_code(500); echo json_encode(['error'=>'保存失败']); exit; } @unlink($tmpOut); } else { @unlink($tmpOut); $filename = $base . '.' . $ext; $dest = UPLOAD_DIR . $filename; if ($ext === 'svg') { // SVG 不能原样落盘：先做安全清洗。否则用户直接访问 /uploads/xxx.svg 时， // 里面的脚本会在同源下执行，就是一个存储型 XSS。 $clean = sanitizeSvg(@file_get_contents($file['tmp_name'])); @unlink($file['tmp_name']); if ($clean === null || @file_put_contents($dest, $clean, LOCK_EX) === false) { http_response_code(400); echo json_encode(['error'=>'SVG 不合法或包含不安全内容']); exit; } } elseif (!@move_uploaded_file($file['tmp_name'], $dest)) { http_response_code(500); echo json_encode(['error'=>'保存失败']); exit; } if ($ext !== 'svg') stripImageMetadata($dest, $mime); } $list = json_decode(@file_get_contents(STICKERS_FILE), true) ?: []; if (!is_array($list)) $list = []; $newItem = ['id' => uniqid(), 'user' => $currentUser, 'url' => 'uploads/' . $filename, 'time' => time()]; $list[] = $newItem; file_put_contents(STICKERS_FILE, json_encode($list, JSON_UNESCAPED_UNICODE), LOCK_EX); writeLog($currentUser, 'upload_sticker', $filename); echo json_encode(['success'=>true, 'sticker'=>$newItem]); exit; } if ($_GET['action'] === 'delete_sticker') { $id = trim($_POST['id'] ?? ''); $list = json_decode(@file_get_contents(STICKERS_FILE), true) ?: []; if (is_array($list)) { $list = array_values(array_filter($list, function($s) use ($id, $currentUser) { return !(is_array($s) && ($s['id'] ?? '') === $id && ($s['user'] ?? '') === $currentUser); })); file_put_contents(STICKERS_FILE, json_encode($list, JSON_UNESCAPED_UNICODE), LOCK_EX); } writeLog($currentUser, 'delete_sticker', $id); echo json_encode(['success'=>true]); exit; } if ($_GET['action'] === 'upload_file') { session_write_close(); if (!isset($_FILES['file']) || $_FILES['file']['error'] !== UPLOAD_ERR_OK) { http_response_code(400); echo json_encode(['error'=>uploadFailMsg('file', '文件')]); exit; } $file = $_FILES['file']; if ($file['size'] > MAX_FILE_SIZE) { http_response_code(400); echo json_encode(['error'=>'文件不能超过50MB']); exit; } $filename = preg_replace('/[^\w\.\-]/u', '_', $file['name']); $filename = time() . '_' . $filename; $dest = FILES_DIR . $filename; if (!@move_uploaded_file($file['tmp_name'], $dest)) { http_response_code(500); echo json_encode(['error'=>'保存失败']); exit; } writeLog($currentUser, 'upload_file', $filename . ' (' . $file['size'] . 'B)'); echo json_encode(['success'=>true, 'file_url'=>'files/'.$filename, 'file_name'=>$file['name'], 'file_size'=>$file['size']]); exit; } // 大文件分块上传：浏览器把文件切成小块，逐块 POST，前端可显示真实进度条，从而支持几 GB 甚至更大的文件 if ($_GET['action'] === 'upload_chunk') { session_write_close(); $uploadId = preg_replace('/[^A-Za-z0-9]/', '', $_POST['upload_id'] ?? ''); $index = intval($_POST['index'] ?? 0); $total = max(1, intval($_POST['total'] ?? 1)); $name = $_POST['name'] ?? 'file'; if ($uploadId === '') { http_response_code(400); echo json_encode(['error'=>'参数错误']); exit; } if (!isset($_FILES['chunk']) || $_FILES['chunk']['error'] !== UPLOAD_ERR_OK) { http_response_code(400); echo json_encode(['error'=>'分块数据缺失']); exit; } if (!is_dir(CHUNK_DIR) && !@mkdir(CHUNK_DIR, 0755, true)) { http_response_code(500); echo json_encode(['error'=>'无法创建上传目录']); exit; } $part = CHUNK_DIR . $uploadId . '.part'; $data = file_get_contents($_FILES['chunk']['tmp_name']); if ($data === false) { http_response_code(400); echo json_encode(['error'=>'读取分块失败']); exit; } $f = @fopen($part, 'ab'); if (!$f) { http_response_code(500); echo json_encode(['error'=>'写入失败']); exit; } fwrite($f, $data); fclose($f); if ($index >= $total - 1) { $san = preg_replace('/[^\w\.\-]/u', '_', $name); $san = mb_substr($san, 0, 200); $filename = time() . '_' . $san; $dest = FILES_DIR . $filename; if (!@rename($part, $dest)) { @unlink($part); http_response_code(500); echo json_encode(['error'=>'文件保存失败']); exit; } $size = filesize($dest); writeLog($currentUser, 'upload_file_chunked', $filename . ' (' . $size . 'B)'); echo json_encode(['success'=>true, 'file_url'=>'files/'.$filename, 'file_name'=>$name, 'file_size'=>$size]); exit; } echo json_encode(['success'=>true, 'chunk'=>($index + 1), 'total'=>$total]); exit; } // 群文件 / 群相册：共享到群的文件（type=file 存 files/，type=image 存 uploads/） if ($_GET['action'] === 'upload_group_file') { session_write_close(); $groupName = trim($_POST['group'] ?? ''); $type = ($_POST['type'] ?? 'file') === 'image' ? 'image' : 'file'; if ($groupName === '') { http_response_code(400); echo json_encode(['error'=>'参数错误']); exit; } $groups = json_decode(file_get_contents(GROUPS_FILE), true) ?: []; if (!isset($groups[$groupName])) { http_response_code(400); echo json_encode(['error'=>'群不存在']); exit; } if (!isGroupMember($groups[$groupName] ?? null, $currentUser)) { http_response_code(403); echo json_encode(['error'=>'仅群成员可上传']); exit; } if (!isset($_FILES['file']) || $_FILES['file']['error'] !== UPLOAD_ERR_OK) { http_response_code(400); echo json_encode(['error'=>uploadFailMsg('file', '文件')]); exit; } $file = $_FILES['file']; if ($file['size'] > MAX_FILE_SIZE) { http_response_code(400); echo json_encode(['error'=>'文件不能超过50MB']); exit; } // 文件名会原样进 JSON：先清洗成合法 UTF-8， // 否则非法字节会让 json_encode 失败，进而把整个群文件清单写成空文件 $origName = cleanUtf8($file['name']); if ($origName === '') $origName = 'file'; $ext = strtolower(pathinfo($origName, PATHINFO_EXTENSION)); $isImg = $type === 'image' || in_array($ext, ['jpg','jpeg','png','gif','webp','bmp','svg']); $san = preg_replace('/[^\w\.\-]/u', '_', $origName); $san = mb_substr((string)$san, 0, 200); if ($san === '') $san = 'file'; $filename = time() . '_' . mt_rand(100, 999) . '_' . $san; $dest = $isImg ? (UPLOAD_DIR . $filename) : (FILES_DIR . $filename); if (!@move_uploaded_file($file['tmp_name'], $dest)) { http_response_code(500); echo json_encode(['error'=>'保存失败']); exit; } if ($isImg) stripImageMetadata($dest, mimeFromImageExt($ext)); $url = $isImg ? ('uploads/' . $filename) : ('files/' . $filename); $total = 0; $countBefore = 0; $ok = withGroupFilesLock(function ($all) use ($groupName, $origName, $url, $isImg, $file, $currentUser, &$total, &$countBefore) { if (!isset($all[$groupName]) || !is_array($all[$groupName])) $all[$groupName] = []; $countBefore = count($all[$groupName]); $all[$groupName][] = ['name'=>$origName, 'url'=>$url, 'size'=>intval($file['size']), 'type'=>$isImg?'image':'file', 'user'=>$currentUser, 'time'=>time()]; if (count($all[$groupName]) > 200) $all[$groupName] = array_slice($all[$groupName], -200); $total = count($all[$groupName]); return $all; }); // 必须检查写入结果：以前不管成没成都返回 success， // 清单没写进去时用户看到"上传成功"，列表里却什么都没有 if (!$ok) { @unlink($dest); writeLog($currentUser, 'upload_group_file_fail', $groupName . ' / 清单写入失败 / 原条目数=' . $countBefore); http_response_code(500); echo json_encode(['error'=>'文件清单写入失败，请重试']); exit; } writeLog($currentUser, 'upload_group_file', $groupName . ' / ' . $origName . ' / 现有' . $total . '个'); echo json_encode(['success'=>true, 'count'=>$total]); exit; } if ($_GET['action'] === 'get_group_files') { session_write_close(); $groupName = trim($_GET['group'] ?? ''); if ($groupName === '') { http_response_code(400); echo json_encode(['error'=>'参数错误']); exit; } // 群文件列表也要鉴权：否则任何登录用户知道群名就能列出该群的文件 $groups = json_decode(@file_get_contents(GROUPS_FILE), true) ?: []; if (!isGroupMember($groups[$groupName] ?? null, $currentUser)) { writeLog($currentUser, 'room_denied', '越权读取群文件：' . $groupName); http_response_code(403); echo json_encode(['error'=>'你不在该群中']); exit; } $all = json_decode(@file_get_contents(GROUP_FILES_FILE), true); if (!is_array($all)) { // 清单读不出来（空文件/损坏）时留一条记录：否则"群文件列表一直空"完全没有线索 writeLog($currentUser, 'group_files_unreadable', '群文件清单无法解析，已按空处理：' . $groupName); $all = []; } $list = $all[$groupName] ?? []; if (!is_array($list)) $list = []; // 首次访问群文件时补录一遍历史附件（把大家在群里发过的照片/文件补进清单）。 // 标记文件存在后这里只多一次 file_exists，开销可忽略。 if (!file_exists(GROUP_FILES_INDEX_FLAG)) { rebuildGroupFilesOnce(); $all = json_decode(@file_get_contents(GROUP_FILES_FILE), true); if (!is_array($all)) $all = []; $list = $all[$groupName] ?? []; if (!is_array($list)) $list = []; } $list = array_reverse($list); echo json_encode(['files'=>$list]); exit; } if ($_GET['action'] === 'delete_group_file') { session_write_close(); $groupName = trim($_POST['group'] ?? ''); $url = trim($_POST['url'] ?? ''); if ($groupName === '' || $url === '') { http_response_code(400); echo json_encode(['error'=>'参数错误']); exit; } $groups = json_decode(file_get_contents(GROUPS_FILE), true) ?: []; $isOwner = isset($groups[$groupName]) && ($groups[$groupName]['created_by'] ?? '') === $currentUser; $isAdmin = listHasUser($groups[$groupName]['admins'] ?? [], $currentUser); $found = null; $ok = withGroupFilesLock(function ($all) use ($groupName, $url, $currentUser, $isOwner, $isAdmin, &$found) { $list = $all[$groupName] ?? []; if (!is_array($list)) $list = []; $newList = []; foreach ($list as $f) { if (($f['url'] ?? '') === $url && (($f['user'] ?? '') === $currentUser || $isOwner || $isAdmin)) { $found = $f; continue; } $newList[] = $f; } if (!$found) return null; // 文件不存在或无权删：不改动任何数据 $all[$groupName] = $newList; return $all; }); if (!$found) { http_response_code(403); echo json_encode(['error'=>'无权删除该文件']); exit; } if (!$ok) { http_response_code(500); echo json_encode(['error'=>'保存失败，请重试']); exit; } if (strpos($url, 'files/') === 0) @unlink(FILES_DIR . substr($url, 6)); if (strpos($url, 'uploads/') === 0) @unlink(UPLOAD_DIR . substr($url, 8)); writeLog($currentUser, 'delete_group_file', $groupName . ' / ' . ($found['name'] ?? $url)); echo json_encode(['success'=>true]); exit; } // 批量删除群文件：一次请求处理多个 url，逐条做权限判断 // （群主/管理员可删全部，普通成员只能删自己上传的），返回成功与无权的条数 if ($_GET['action'] === 'batch_delete_group_file') { session_write_close(); $groupName = trim($_POST['group'] ?? ''); $urls = $_POST['urls'] ?? []; if (!is_array($urls)) $urls = [$urls]; $urls = array_values(array_unique(array_filter(array_map('strval', $urls)))); if ($groupName === '' || empty($urls)) { http_response_code(400); echo json_encode(['error'=>'请先选择要删除的文件']); exit; } if (count($urls) > 200) { http_response_code(400); echo json_encode(['error'=>'一次最多删除 200 个文件']); exit; } $groups = json_decode(file_get_contents(GROUPS_FILE), true) ?: []; if (!isGroupMember($groups[$groupName] ?? null, $currentUser)) { http_response_code(403); echo json_encode(['error'=>'你不在该群中']); exit; } $isOwner = ($groups[$groupName]['created_by'] ?? '') === $currentUser; $isAdmin = listHasUser($groups[$groupName]['admins'] ?? [], $currentUser); $targets = array_flip($urls); $deleted = 0; $denied = 0; $removedFiles = []; $ok = withGroupFilesLock(function ($all) use ($groupName, $targets, $currentUser, $isOwner, $isAdmin, &$deleted, &$denied, &$removedFiles) { $list = $all[$groupName] ?? []; if (!is_array($list)) $list = []; $newList = []; foreach ($list as $f) { $u = $f['url'] ?? ''; if (isset($targets[$u])) { if (($f['user'] ?? '') === $currentUser || $isOwner || $isAdmin) { $deleted++; $removedFiles[] = [$u, $f['name'] ?? '']; continue; // 从清单里摘掉 } $denied++; } $newList[] = $f; } if ($deleted === 0) return null; // 一个都没删成，不必写盘 $all[$groupName] = $newList; return $all; }); if ($deleted > 0 && !$ok) { http_response_code(500); echo json_encode(['error'=>'保存失败，请重试']); exit; } // 磁盘文件在锁外删，避免把慢 IO 压在清单锁上 foreach ($removedFiles as $rf) { $p = groupFileDiskPath($rf[0], false); if ($p) @unlink($p); } foreach ($removedFiles as $rf) writeLog($currentUser, 'delete_group_file', $groupName . ' / ' . $rf[1]); echo json_encode(['success'=>true, 'deleted'=>$deleted, 'denied'=>$denied]); exit; } // 群文件下载（单个）：由 PHP 输出文件流，而不是让浏览器直接取 files/ 静态路径。 // 好处：静态目录被服务器禁止访问时仍可下载（"能上传不能下载"通常就是这个原因）， // 并且下载请求也走成员鉴权。 if ($_GET['action'] === 'download_group_file') { session_write_close(); $groupName = trim($_GET['group'] ?? $_POST['group'] ?? ''); $url = trim($_GET['url'] ?? $_POST['url'] ?? ''); $entry = groupFileEntry($groupName, $url, $currentUser); if ($entry === null) { writeLog($currentUser, 'download_denied', '越权下载群文件：' . $groupName . ' / ' . $url); http_response_code(403); echo '无权下载该文件'; exit; } $path = groupFileDiskPath($url, true); if ($path === null) { http_response_code(404); echo '文件不存在或已被删除'; exit; } $name = $entry['name'] ?? basename($path); sendGroupFileHeaders($name, filesize($path)); readfile($path); exit; } // 群文件下载（批量）：打包成一个 zip 返回。服务器没装 zip 扩展时退回单文件直传， // 至少不会卡在一个点了没反应的按钮上。 if ($_GET['action'] === 'download_group_files') { session_write_close(); $groupName = trim($_POST['group'] ?? ''); $urls = $_POST['urls'] ?? []; if (!is_array($urls)) $urls = [$urls]; $urls = array_values(array_unique(array_filter(array_map('strval', $urls)))); if ($groupName === '' || empty($urls)) { http_response_code(400); echo '请先选择要下载的文件'; exit; } if (count($urls) > 200) { http_response_code(400); echo '一次最多下载 200 个文件'; exit; } $picked = []; foreach ($urls as $u) { $entry = groupFileEntry($groupName, $u, $currentUser); if ($entry === null) continue; $p = groupFileDiskPath($u, true); if ($p === null) continue; $picked[] = ['path'=>$p, 'name'=>($entry['name'] ?? basename($p))]; } if (empty($picked)) { http_response_code(404); echo '所选文件均不存在或无权下载'; exit; } sendFilesAsArchive($picked, '群文件'); exit; } // 下载消息里的附件（图片/文件）。只接受消息 id + 房间，附件路径一律由服务端按 id 回查 // messages.json 得到——如果让客户端直接传路径，任何人都能构造请求把任意文件拖下来。 if ($_GET['action'] === 'download_message_files') { session_write_close(); $room = canonicalRoom(trim($_POST['room'] ?? '')); $ids = $_POST['ids'] ?? []; if (!is_array($ids)) $ids = [$ids]; $ids = array_values(array_unique(array_filter(array_map('intval', $ids)))); if ($room === '' || empty($ids)) { http_response_code(400); echo '请先选择带附件的消息'; exit; } if (count($ids) > 200) { http_response_code(400); echo '一次最多下载 200 条消息的附件'; exit; } $accErr = roomAccessError($room, $currentUser); if ($accErr !== null) { writeLog($currentUser, 'room_denied', '越权下载消息附件：' . $room); http_response_code(403); echo $accErr['msg']; exit; } $messages = loadMessages(); $want = array_flip($ids); $picked = []; foreach ($messages as $m) { $mid = $m['id'] ?? 0; if (!isset($want[$mid])) continue; if (($m['room'] ?? '') !== $room) continue; $ts = (int)($m['timestamp'] ?? 0); if (!empty($m['image'])) { $p = groupFileDiskPath($m['image'], true); if ($p) { // 图片在磁盘上是 时间戳_随机数_原名，名字不直观，换成"图片_时间.扩展名" $ext = pathinfo($p, PATHINFO_EXTENSION); $picked[] = ['path'=>$p, 'name'=>('图片_' . ($ts > 0 ? date('Ymd_His', $ts) : $mid) . ($ext !== '' ? '.' . $ext : '.jpg'))]; } } if (!empty($m['file'])) { $p = groupFileDiskPath($m['file'], true); if ($p) $picked[] = ['path'=>$p, 'name'=>($m['file_name'] ?? basename($p))]; } } if (empty($picked)) { http_response_code(404); echo '所选消息里没有可下载的附件'; exit; } sendFilesAsArchive($picked, '聊天文件'); exit; } // 输入状态：心跳写入 + 查询，用于"对方正在输入…"提示 if ($_GET['action'] === 'set_typing') { session_write_close(); $room = canonicalRoom(trim($_POST['room'] ?? '公共聊天')); if ($room === '') $room = '公共聊天'; $all = json_decode(@file_get_contents(TYPING_FILE), true) ?: []; if (!isset($all[$room]) || !is_array($all[$room])) $all[$room] = []; $all[$room][$currentUser] = time(); foreach ($all as $r => $users) { foreach ($users as $u => $t) { if (time() - $t > 8) unset($all[$r][$u]); } if (empty($all[$r])) unset($all[$r]); } file_put_contents(TYPING_FILE, json_encode($all, JSON_UNESCAPED_UNICODE), LOCK_EX); echo json_encode(['success'=>true]); exit; } if ($_GET['action'] === 'get_typing') { session_write_close(); $room = canonicalRoom(trim($_GET['room'] ?? '公共聊天')); $all = json_decode(@file_get_contents(TYPING_FILE), true) ?: []; $users = []; foreach (($all[$room] ?? []) as $u => $t) { if ($u !== $currentUser && time() - $t <= 6) $users[] = $u; } echo json_encode(['users'=>$users]); exit; } // 消息转发：把某条消息复制到目标房间，并标记"转发自" if ($_GET['action'] === 'forward_message') { session_write_close(); $msgId = intval($_POST['msg_id'] ?? 0); $srcRoom = canonicalRoom(trim($_POST['src_room'] ?? '')); $targetRoom = canonicalRoom(trim($_POST['target_room'] ?? '')); // 多选批量转发走 msg_ids（逗号分隔）。单次上限 50 条：转发接口是写文件的， // 不设上限等于给了一个"一条请求写满整个聊天记录"的口子。 $msgIds = []; if (trim((string)($_POST['msg_ids'] ?? '')) !== '') { foreach (explode(',', (string)$_POST['msg_ids']) as $one) { $one = intval(trim($one)); if ($one > 0) $msgIds[] = $one; } $msgIds = array_slice(array_values(array_unique($msgIds)), 0, 50); } elseif ($msgId > 0) { $msgIds[] = $msgId; } if (!$msgIds || $srcRoom === '' || $targetRoom === '') { http_response_code(400); echo json_encode(['error'=>'参数错误']); exit; } // 源房间必须是自己有权访问的：否则只要猜消息 id，就能把别人私聊里的内容转发出来 $srcErr = roomAccessError($srcRoom, $currentUser); if ($srcErr !== null) { writeLog($currentUser, 'room_denied', '越权转发：' . $srcRoom); http_response_code(403); echo json_encode(['error'=>'无权读取该会话的消息', 'code'=>'room_denied']); exit; } // 只能转发"自己看得到"的消息：新成员不能靠转发绕过入群前的可见性限制 $srcVisibleFrom = roomVisibleFrom($srcRoom, $currentUser); $messages = loadMessages(); $origMap = []; foreach ($messages as $m) { $mid = intval($m['id'] ?? 0); if ($mid <= 0 || !in_array($mid, $msgIds, true) || ($m['room'] ?? '') !== $srcRoom) continue; if ($srcVisibleFrom > 0 && intval($m['timestamp'] ?? 0) < $srcVisibleFrom) continue; $origMap[$mid] = $m; } if (!$origMap) { http_response_code(404); echo json_encode(['error'=>'原消息不存在或不在你的可见范围内']); exit; } // 保持用户勾选顺序，跳过已撤回的；整批都不可转发时明确报错，不做静默成功 $origList = []; foreach ($msgIds as $mid) { if (isset($origMap[$mid]) && ($origMap[$mid]['type'] ?? '') !== 'recalled') $origList[] = $origMap[$mid]; } if (!$origList) { http_response_code(400); echo json_encode(['error'=>'已撤回的消息无法转发']); exit; } if (strpos($targetRoom, 'pm:') === 0) { $parts = explode(':', $targetRoom); $pmUser = ($parts[1] === $currentUser) ? ($parts[2] ?? '') : ($parts[1] ?? ''); $friends = json_decode(file_get_contents(FRIENDS_FILE), true) ?: []; if (!in_array($pmUser, $friends[$currentUser] ?? [])) { http_response_code(400); echo json_encode(['error'=>'对方还不是你的好友']); exit; } } if (strpos($targetRoom, 'group:') === 0) { $gName = substr($targetRoom, 6); if (isGroupBanned($gName)) { http_response_code(400); echo json_encode(['error'=>'该群已被封禁，无法转发']); exit; } $groups = json_decode(file_get_contents(GROUPS_FILE), true) ?: []; if (!isGroupMember($groups[$gName] ?? null, $currentUser)) { http_response_code(403); echo json_encode(['error'=>'你不在该群中，无法转发']); exit; } } $fp = fopen(MESSAGES_FILE, 'c+'); if (!$fp) { http_response_code(500); echo json_encode(['error'=>'服务器错误']); exit; } flock($fp, LOCK_EX); $all = json_decode(stream_get_contents($fp), true) ?: []; $maxId = 0; foreach ($all as $m) { if (isset($m['id']) && $m['id'] > $maxId) $maxId = $m['id']; } $newId = $maxId + 1; $newIds = []; foreach ($origList as $orig) { $id = $newId++; $all[] = [ 'id' => $id, 'room' => $targetRoom, 'username' => $currentUser, 'message' => filterSensitive(mb_substr($orig['message'] ?? '', 0, 500)), 'image' => $orig['image'] ?? null, 'file' => $orig['file'] ?? null, 'file_name' => $orig['file_name'] ?? null, 'file_size' => $orig['file_size'] ?? null, 'voice' => $orig['voice'] ?? null, 'forward' => ['from_user' => $orig['username'] ?? '', 'from_room' => $srcRoom], 'time' => date('H:i:s'), 'timestamp' => time() ]; $newIds[] = $id; } if (count($all) > MAX_MESSAGES) $all = array_slice($all, -MAX_MESSAGES); ftruncate($fp, 0); rewind($fp); fwrite($fp, json_encode($all, JSON_UNESCAPED_UNICODE)); fflush($fp); flock($fp, LOCK_UN); fclose($fp); updateOnline(ONLINE_FILE, $currentUser, $targetRoom); // 未读按"条"计，批量转发 N 条就要加 N 次，否则侧栏角标会比实际少 foreach ($newIds as $_) incrementUnread($currentUser, $targetRoom); writeLog($currentUser, 'forward_message', $srcRoom . ' -> ' . $targetRoom . ' #' . implode(',', $newIds)); echo json_encode(['success'=>true, 'id'=>$newIds[0], 'ids'=>$newIds, 'count'=>count($newIds)]); exit; } // 资料卡装扮：个性签名 / 头像框 / 主页背景 $FRAMES = ['none','gold','blue','green','red','rainbow','purple']; if ($_GET['action'] === 'save_profile') { session_write_close(); $signature = trim($_POST['signature'] ?? ''); $frame = trim($_POST['frame'] ?? 'none'); $bg = trim($_POST['bg'] ?? 'none'); if (!in_array($frame, $FRAMES)) $frame = 'none'; if ($bg !== 'none' && strpos($bg, 'uploads/') !== 0 && !in_array($bg, ['light','dark','blue','grad1','grad2','grad3'])) $bg = 'none'; $signature = mb_substr($signature, 0, 60); $all = json_decode(@file_get_contents(PROFILES_FILE), true) ?: []; $p = $all[$currentUser] ?? []; $p['signature'] = $signature; $p['frame'] = $frame; $p['bg'] = $bg; $all[$currentUser] = $p; file_put_contents(PROFILES_FILE, json_encode($all, JSON_UNESCAPED_UNICODE), LOCK_EX); writeLog($currentUser, 'save_profile', '签名/头像框/背景 更新'); echo json_encode(['success'=>true, 'profile'=>$p]); exit; } if ($_GET['action'] === 'get_profile') { session_write_close(); $target = trim($_GET['user'] ?? $currentUser); $all = json_decode(@file_get_contents(PROFILES_FILE), true) ?: []; $p = $all[$target] ?? []; $avatars = json_decode(@file_get_contents(AVATARS_FILE), true) ?: []; echo json_encode([ 'user'=>$target, 'signature'=>$p['signature'] ?? '', 'frame'=>$p['frame'] ?? 'none', 'bg'=>$p['bg'] ?? 'none', 'avatar'=>isset($avatars[$target]) ? avatarUrl($avatars[$target]) : null ]); exit; } if ($_GET['action'] === 'upload_profile_bg') { session_write_close(); if (!isset($_FILES['bg']) || $_FILES['bg']['error'] !== UPLOAD_ERR_OK) { http_response_code(400); echo json_encode(['error'=>uploadFailMsg('bg', '背景图')]); exit; } $f = $_FILES['bg']; if ($f['size'] > MAX_IMAGE_SIZE) { http_response_code(400); echo json_encode(['error'=>'图片不能超过10MB']); exit; } $ext = strtolower(pathinfo($f['name'], PATHINFO_EXTENSION)); if (!in_array($ext, ['jpg','jpeg','png','gif','webp'])) $ext = 'png'; $base = 'bg_' . time() . '_' . mt_rand(100,999); // 自动压缩：资料背景统一缩到 1920x1920 内，返回 null 时保持原图 $tmpOut = UPLOAD_DIR . $base . '_tmp.' . $ext; $outExt = @compressImageTo($f['tmp_name'], $tmpOut, 1920, 1920, 82); if ($outExt !== null) { @unlink($f['tmp_name']); $filename = $base . '.' . $outExt; if (!@copy($tmpOut, UPLOAD_DIR . $filename)) { @unlink($tmpOut); http_response_code(500); echo json_encode(['error'=>'保存失败']); exit; } @unlink($tmpOut); } else { @unlink($tmpOut); $filename = $base . '.' . $ext; if (!@move_uploaded_file($f['tmp_name'], UPLOAD_DIR . $filename)) { http_response_code(500); echo json_encode(['error'=>'保存失败']); exit; } } stripImageMetadata(UPLOAD_DIR . $filename, mimeFromImageExt($ext)); echo json_encode(['success'=>true, 'url'=>'uploads/' . $filename]); exit; } // 黑名单：拉黑后双方都无法互发私聊消息 if ($_GET['action'] === 'set_blacklist') { session_write_close(); $target = trim($_POST['target'] ?? ''); $action = ($_POST['action'] ?? '') === 'remove' ? 'remove' : 'add'; if ($target === '' || $target === $currentUser) { http_response_code(400); echo json_encode(['error'=>'参数错误']); exit; } $all = json_decode(@file_get_contents(BLACKLIST_FILE), true) ?: []; $list = $all[$currentUser] ?? []; if ($action === 'add') { if (!in_array($target, $list)) $list[] = $target; } else { $list = array_values(array_diff($list, [$target])); } $all[$currentUser] = $list; file_put_contents(BLACKLIST_FILE, json_encode($all, JSON_UNESCAPED_UNICODE), LOCK_EX); writeLog($currentUser, 'blacklist_' . $action, $target); echo json_encode(['success'=>true, 'list'=>$list]); exit; } if ($_GET['action'] === 'get_blacklist') { session_write_close(); $all = json_decode(@file_get_contents(BLACKLIST_FILE), true) ?: []; echo json_encode(['list'=>$all[$currentUser] ?? []]); exit; } // 语音/视频通话：通过服务器交换信令（WebRTC） if ($_GET['action'] === 'start_call') { session_write_close(); $to = trim($_POST['to'] ?? ''); $room = trim($_POST['room'] ?? ''); $type = ($_POST['type'] ?? 'voice') === 'video' ? 'video' : 'voice'; $attempt = max(1, intval($_POST['attempt'] ?? 1)); // 第几次尝试发起（客户端重连可见性） if ($to === '' || $to === $currentUser) { http_response_code(400); echo json_encode(['error'=>'参数错误']); exit; } if ($room === '') $room = callDefaultRoom($currentUser, $to); if (!callRoomValid($room, $currentUser, $to)) { http_response_code(400); echo json_encode(['error'=>'通话房间无效']); exit; } $users = json_decode(@file_get_contents(USERS_FILE), true) ?: []; if (!isset($users[$to])) { http_response_code(400); echo json_encode(['error'=>'用户不存在']); exit; } $fp = @fopen(CALLS_FILE, 'c+'); if (!$fp) { http_response_code(503); echo json_encode(['error'=>'服务繁忙，请稍后重试', 'code'=>'busy_io']); exit; } flock($fp, LOCK_EX); $calls = json_decode(stream_get_contents($fp), true); if (!is_array($calls)) $calls = []; // 先回收僵尸记录（响铃超时/心跳丢失/超硬上限/过期已结束），再判断占线 sweepCalls($calls); $now = time(); $busyMe = callBusyOwner($calls, $currentUser); $busyPeer = callBusyOwner($calls, $to); if ($busyMe !== null) { ftruncate($fp, 0); rewind($fp); fwrite($fp, json_encode($calls, JSON_UNESCAPED_UNICODE)); fflush($fp); flock($fp, LOCK_UN); fclose($fp); http_response_code(409); echo json_encode(['error'=>'您有未结束的通话，请先挂断后再试', 'code'=>'busy_self']); exit; } if ($busyPeer !== null) { ftruncate($fp, 0); rewind($fp); fwrite($fp, json_encode($calls, JSON_UNESCAPED_UNICODE)); fflush($fp); flock($fp, LOCK_UN); fclose($fp); http_response_code(409); echo json_encode(['error'=>$to . ' 正在通话中，请稍后再拨', 'code'=>'busy_peer']); exit; } $callId = 'call_' . $now . '_' . mt_rand(1000, 9999); // 邀请码在发起这一刻就定下来，并随通话记录一起持久化； // 对方接听界面会自动录入它，无需任何手工复制粘贴。 $calls[$callId] = ['from'=>$currentUser, 'to'=>$to, 'type'=>$type, 'status'=>'ringing', 'ts'=>$now, 'room'=>$room, 'end_reason'=>null, 'offer'=>null, 'answer'=>null, 'candidates'=>[], 'seen'=>[], 'attempt'=>$attempt, 'invite_code'=>genCallCode(), 'receipt_code'=>null]; callTouch($calls[$callId], $currentUser, $now); ftruncate($fp, 0); rewind($fp); fwrite($fp, json_encode($calls, JSON_UNESCAPED_UNICODE)); fflush($fp); flock($fp, LOCK_UN); fclose($fp); writeLog($currentUser, 'call_start', $type . ' → ' . $to . ' @ ' . $room); // 在聊天界面注入"发起通话"气泡 addCallMessage($room, $currentUser, 'start', $to, 0, $type); echo json_encode(['success'=>true, 'call_id'=>$callId, 'invite_code'=>$calls[$callId]['invite_code']]); exit; } if ($_GET['action'] === 'get_call') { session_write_close(); $now = time(); // 只返回"本轮新增"的 ICE 候选：客户端带上已消费到的序号（游标），避免每 800ms 重放全量候选 $since = max(0, intval($_GET['cand_since'] ?? 0)); $fp = @fopen(CALLS_FILE, 'c+'); // 读不到文件时显式返回错误，客户端据此跳过本轮，而不是误判为"通话已结束" if (!$fp) { echo json_encode(['error'=>'busy', 'mine'=>null, 'incoming'=>null]); exit; } flock($fp, LOCK_EX); $calls = json_decode(stream_get_contents($fp), true); if (!is_array($calls)) $calls = []; $changed = sweepCalls($calls); $mine = null; $incoming = null; $mineEnded = null; $incomingEnded = null; foreach ($calls as $id => &$c) { $isEnded = (($c['status'] ?? '') === 'ended'); // 心跳最多每 5 秒落盘一次，避免 800ms 轮询变成高频磁盘写 if (($c['from'] ?? '') === $currentUser) { if ($isEnded) { if (!$mineEnded) $mineEnded = $id; } elseif (!$mine) { $mine = $id; if (($now - intval($c['seen'][$currentUser] ?? 0)) >= 5) { callTouch($c, $currentUser, $now); $changed = true; } } } if (($c['to'] ?? '') === $currentUser) { if ($isEnded) { if (!$incomingEnded) $incomingEnded = $id; } elseif (!$incoming) { $incoming = $id; if (($now - intval($c['seen'][$currentUser] ?? 0)) >= 5) { callTouch($c, $currentUser, $now); $changed = true; } } } } unset($c); // 没有活跃记录、只剩刚结束的记录时，也要把"已结束"回报给参与者。 // 以前这里直接跳过 ended 记录，导致对端挂断后本端收不到任何终态信号， // 界面就一直停在通话中（被叫侧尤其明显：它没有任何别的收尾路径）。 if (!$mine && $mineEnded) $mine = $mineEnded; if (!$incoming && $incomingEnded) $incoming = $incomingEnded; $out = ['mine'=>null, 'incoming'=>null]; if ($mine) { $c = $calls[$mine]; $out['mine'] = array_merge(['call_id'=>$mine, 'status'=>$c['status'], 'type'=>$c['type'], 'peer'=>$c['to'], 'room'=>(string)($c['room'] ?? ''), 'end_reason'=>$c['end_reason'] ?? null, 'peer_seen'=>intval(($c['seen'][$c['to']] ?? 0) ? ($now - $c['seen'][$c['to']]) : -1)], callHandshakeCodes($c)); $pm = callPeerMedia($c, $currentUser); if ($pm !== null) $out['mine']['peer_media'] = $pm; // 已结束的记录不再下发信令：客户端会先按终态收尾，不需要也不应再处理 SDP if (($c['status'] ?? '') !== 'ended') { if (($c['answer'] ?? null) !== null) $out['answer'] = $c['answer']; list($cands, $next) = callPickCandidates($c, $currentUser, $since); if (count($cands)) $out['candidates'] = $cands; if ($next > 0) $out['cand_next'] = $next; } } if ($incoming) { $c = $calls[$incoming]; $out['incoming'] = array_merge(['call_id'=>$incoming, 'status'=>$c['status'], 'type'=>$c['type'], 'peer'=>$c['from'], 'room'=>(string)($c['room'] ?? ''), 'end_reason'=>$c['end_reason'] ?? null, 'peer_seen'=>intval(($c['seen'][$c['from']] ?? 0) ? ($now - $c['seen'][$c['from']]) : -1)], callHandshakeCodes($c)); $pm = callPeerMedia($c, $currentUser); if ($pm !== null) $out['incoming']['peer_media'] = $pm; if (($c['status'] ?? '') !== 'ended') { if (($c['offer'] ?? null) !== null) $out['offer'] = $c['offer']; list($cands, $next) = callPickCandidates($c, $currentUser, $since); if (count($cands)) $out['candidates'] = $cands; if ($next > 0) $out['cand_next'] = $next; } } if ($changed) { ftruncate($fp, 0); rewind($fp); fwrite($fp, json_encode($calls, JSON_UNESCAPED_UNICODE)); fflush($fp); } flock($fp, LOCK_UN); fclose($fp); echo json_encode($out); exit; } if ($_GET['action'] === 'respond_call') { session_write_close(); $callId = trim($_POST['call_id'] ?? ''); $action = $_POST['action'] ?? ''; if (!in_array($action, ['accept','reject','cancel','end'])) { http_response_code(400); echo json_encode(['error'=>'参数错误']); exit; } $fp = @fopen(CALLS_FILE, 'c+'); if (!$fp) { http_response_code(503); echo json_encode(['error'=>'服务繁忙，请稍后重试', 'code'=>'busy_io']); exit; } flock($fp, LOCK_EX); $calls = json_decode(stream_get_contents($fp), true); if (!is_array($calls)) $calls = []; sweepCalls($calls); // 先回收僵尸记录：过期的响铃不能"接听" if (!isset($calls[$callId])) { flock($fp, LOCK_UN); fclose($fp); http_response_code(400); echo json_encode(['error'=>'通话不存在', 'code'=>'gone']); exit; } $c = &$calls[$callId]; $room = (string)($c['room'] ?? ''); $handshake = null; // 仅 accept 时回填：把两个码一起返回给接听方 if ($action === 'accept') { if ($c['to'] !== $currentUser) { http_response_code(403); echo json_encode(['error'=>'无权限']); exit; } if (($c['status'] ?? '') === 'ended') { http_response_code(400); echo json_encode(['error'=>'通话已结束', 'code'=>'gone']); exit; } // 老记录可能没有邀请码，补发一个（只补一次，幂等） if (empty($c['invite_code'])) $c['invite_code'] = genCallCode(); // 回执码只生成一次：客户端重试 accept 时必须拿到同一个码， // 否则主叫端会看到回执码跳变，无法确认握手到底完成没有 if (empty($c['receipt_code'])) $c['receipt_code'] = genCallCode(); $c['status'] = 'accepted'; $c['accepted_at'] = time(); // 记录接通时间，用于服务端计算通话时长 callTouch($c, $currentUser); $handshake = callHandshakeCodes($c); } elseif ($action === 'reject') { if ($c['to'] !== $currentUser) { http_response_code(403); echo json_encode(['error'=>'无权限']); exit; } $was = $c['status'] ?? ''; $c['status'] = 'ended'; $c['end_reason'] = 'reject'; $c['ended_at'] = time(); // 同一通电话只注入一次结束气泡，避免双方同时挂断时重复 if ($was !== 'ended' && empty($c['bubble'])) { $c['bubble'] = true; addCallMessage($room, $currentUser, 'reject', $c['from'], 0, $c['type'] ?? 'voice'); } } else { if ($c['from'] !== $currentUser && $c['to'] !== $currentUser) { http_response_code(403); echo json_encode(['error'=>'无权限']); exit; } $was = $c['status'] ?? ''; $c['status'] = 'ended'; $c['ended_at'] = time(); if ($action === 'cancel') { $c['end_reason'] = 'cancel'; if ($was !== 'ended' && empty($c['bubble'])) { $c['bubble'] = true; addCallMessage($room, $currentUser, 'cancel', $c['to'], 0, $c['type'] ?? 'voice'); } } else { $c['end_reason'] = 'end'; if ($was !== 'ended' && empty($c['bubble'])) { $c['bubble'] = true; // 优先按服务端接通时间计算时长，避免客户端计时残留导致时长错误 $dur = 0; if (!empty($c['accepted_at'])) $dur = max(0, time() - intval($c['accepted_at'])); if ($dur <= 0) $dur = intval($_POST['duration'] ?? 0); addCallMessage($room, $currentUser, 'end', $c['to'], $dur, $c['type'] ?? 'voice'); } } } ftruncate($fp, 0); rewind($fp); fwrite($fp, json_encode($calls, JSON_UNESCAPED_UNICODE)); fflush($fp); flock($fp, LOCK_UN); fclose($fp); writeLog($currentUser, 'call_' . $action, $callId); echo json_encode(array_merge(['success'=>true], is_array($handshake) ? $handshake : [])); exit; } if ($_GET['action'] === 'call_signal') { session_write_close(); $callId = trim($_POST['call_id'] ?? ''); $kind = $_POST['kind'] ?? ''; // 信令是短连接下的"半可靠通道"：写入失败必须显式失败，客户端才能重发 $fp = @fopen(CALLS_FILE, 'c+'); if (!$fp) { http_response_code(503); echo json_encode(['error'=>'服务繁忙，请稍后重试', 'code'=>'busy_io']); exit; } flock($fp, LOCK_EX); $calls = json_decode(stream_get_contents($fp), true); if (!is_array($calls)) $calls = []; if (!isset($calls[$callId])) { flock($fp, LOCK_UN); fclose($fp); http_response_code(400); echo json_encode(['error'=>'通话不存在', 'code'=>'gone']); exit; } $c = &$calls[$callId]; if (($c['status'] ?? '') === 'ended') { flock($fp, LOCK_UN); fclose($fp); http_response_code(400); echo json_encode(['error'=>'通话已结束', 'code'=>'gone']); exit; } if ($kind === 'offer') { if ($c['from'] !== $currentUser) { http_response_code(403); echo json_encode(['error'=>'无权限']); exit; } $c['offer'] = json_decode($_POST['sdp'] ?? '{}', true); $c['offer_at'] = time(); } elseif ($kind === 'answer') { if ($c['to'] !== $currentUser) { http_response_code(403); echo json_encode(['error'=>'无权限']); exit; } $c['answer'] = json_decode($_POST['sdp'] ?? '{}', true); $c['answer_at'] = time(); } elseif ($kind === 'candidate') { if ($c['from'] !== $currentUser && $c['to'] !== $currentUser) { http_response_code(403); echo json_encode(['error'=>'无权限']); exit; } $cand = json_decode($_POST['candidate'] ?? '{}', true); if (is_array($cand) && !empty($cand['candidate'])) { $c['cand_seq'] = intval($c['cand_seq'] ?? 0) + 1; $c['candidates'][] = ['from'=>$currentUser, 'seq'=>$c['cand_seq'], 'candidate'=>$cand]; callTrimCandidates($c); // 背压：候选不设上限会让 calls.json 无界增长 } } elseif ($kind === 'state') { // 摄像头/麦克风开关是"带外状态"：WebRTC 不会把"我关了摄像头"通知对端， // 对端只会收到黑帧、track 也不会变成 muted。所以必须由本端主动上报， // 服务端只负责按参与者存储并转发给对端（见 callPeerMedia）。 if ($c['from'] !== $currentUser && $c['to'] !== $currentUser) { http_response_code(403); echo json_encode(['error'=>'无权限']); exit; } if (!isset($c['media']) || !is_array($c['media'])) $c['media'] = []; // 只能写自己的状态：键用当前登录用户，客户端无法伪造对端的开关 $c['media'][$currentUser] = [ 'cam' => (($_POST['cam'] ?? '0') === '1'), 'mic' => (($_POST['mic'] ?? '0') === '1'), 'at' => time() ]; } else { http_response_code(400); echo json_encode(['error'=>'参数错误']); exit; } callTouch($c, $currentUser); ftruncate($fp, 0); rewind($fp); fwrite($fp, json_encode($calls, JSON_UNESCAPED_UNICODE)); fflush($fp); flock($fp, LOCK_UN); fclose($fp); echo json_encode(['success'=>true, 'cand_seq'=>intval($c['cand_seq'] ?? 0)]); exit; } // 聊天背景：每个用户对每个聊天单独设置 $CHAT_BGS = ['none','light','blue','green','dark','grad1','grad2','grad3']; if ($_GET['action'] === 'save_chat_bg') { session_write_close(); $room = canonicalRoom(trim($_POST['room'] ?? '')); $bg = trim($_POST['bg'] ?? 'none'); if ($room === '') { http_response_code(400); echo json_encode(['error'=>'参数错误']); exit; } if ($bg !== 'none' && strpos($bg, 'uploads/') !== 0 && !in_array($bg, $CHAT_BGS)) $bg = 'none'; $all = json_decode(@file_get_contents(CHAT_BG_FILE), true) ?: []; $rooms = $all[$currentUser] ?? []; if ($bg === 'none') unset($rooms[$room]); else $rooms[$room] = $bg; $all[$currentUser] = $rooms; file_put_contents(CHAT_BG_FILE, json_encode($all, JSON_UNESCAPED_UNICODE), LOCK_EX); writeLog($currentUser, 'chat_bg', $room . ' → ' . $bg); echo json_encode(['success'=>true]); exit; } if ($_GET['action'] === 'get_chat_bg') { session_write_close(); $room = canonicalRoom(trim($_GET['room'] ?? '')); $all = json_decode(@file_get_contents(CHAT_BG_FILE), true) ?: []; echo json_encode(['bg'=>$all[$currentUser][$room] ?? 'none']); exit; } if ($_GET['action'] === 'upload_chat_bg') { session_write_close(); if (!isset($_FILES['bg']) || $_FILES['bg']['error'] !== UPLOAD_ERR_OK) { http_response_code(400); echo json_encode(['error'=>uploadFailMsg('bg', '聊天背景')]); exit; } $f = $_FILES['bg']; if ($f['size'] > MAX_IMAGE_SIZE) { http_response_code(400); echo json_encode(['error'=>'图片不能超过10MB']); exit; } $ext = strtolower(pathinfo($f['name'], PATHINFO_EXTENSION)); if (!in_array($ext, ['jpg','jpeg','png','gif','webp'])) $ext = 'png'; $base = 'cbg_' . time() . '_' . mt_rand(100,999); // 自动压缩：聊天背景统一缩到 1920x1920 内，返回 null 时保持原图 $tmpOut = UPLOAD_DIR . $base . '_tmp.' . $ext; $outExt = @compressImageTo($f['tmp_name'], $tmpOut, 1920, 1920, 82); if ($outExt !== null) { @unlink($f['tmp_name']); $filename = $base . '.' . $outExt; if (!@copy($tmpOut, UPLOAD_DIR . $filename)) { @unlink($tmpOut); http_response_code(500); echo json_encode(['error'=>'保存失败']); exit; } @unlink($tmpOut); } else { @unlink($tmpOut); $filename = $base . '.' . $ext; if (!@move_uploaded_file($f['tmp_name'], UPLOAD_DIR . $filename)) { http_response_code(500); echo json_encode(['error'=>'保存失败']); exit; } } stripImageMetadata(UPLOAD_DIR . $filename, mimeFromImageExt($ext)); echo json_encode(['success'=>true, 'url'=>'uploads/' . $filename]); exit; } // 获取全局公告（后台发送的站内公告，所有人可见）；notices 为历史列表（最新在前） if ($_GET['action'] === 'get_global_notice') { session_write_close(); $n = json_decode(@file_get_contents(NOTICE_FILE), true); if (isset($n['text'])) $n = [$n]; // 兼容旧的单条对象格式 if (!is_array($n)) $n = []; echo json_encode(['notice'=>isset($n[0]) ? $n[0] : null, 'notices'=>$n]); exit; } // 群成员（含群主）随时可把其他用户拉进已经存在的群，模仿 QQ/微信的拉人逻辑 if ($_GET['action'] === 'add_group_members') { $groupName = trim($_POST['group'] ?? ''); $members = json_decode($_POST['members'] ?? '[]', true) ?: []; if ($groupName === '') { http_response_code(400); echo json_encode(['error'=>'参数错误']); exit; } $groups = json_decode(file_get_contents(GROUPS_FILE), true) ?: []; if (!isset($groups[$groupName])) { http_response_code(400); echo json_encode(['error'=>'群不存在']); exit; } if (!isGroupMember($groups[$groupName] ?? null, $currentUser)) { http_response_code(403); echo json_encode(['error'=>'仅群成员可邀请']); exit; } $users = json_decode(file_get_contents(USERS_FILE), true) ?: []; $added = []; foreach ($members as $m) { $m = (string)$m; if ($m === '' || $m === $currentUser) continue; if (!isset($users[$m])) continue; if (!isGroupMember($groups[$groupName] ?? null, $m)) { $groups[$groupName]['members'][] = $m; // 入群时间 = 这位成员在本群的"可见起点"，他看不到入群之前的聊天记录 $groups[$groupName]['joined_at'][$m] = time(); $added[] = $m; } } file_put_contents(GROUPS_FILE, json_encode($groups, JSON_UNESCAPED_UNICODE), LOCK_EX); if ($added) { writeLog($currentUser, 'add_group_members', $groupName . ' 邀请 ' . implode('、', $added)); $grRoom = 'group:' . $groupName; $msg = [ 'room' => $grRoom, 'username' => 'system', 'type' => 'system', 'message' => $currentUser . ' 邀请了 ' . implode('、', $added) . ' 加入群聊', 'time' => date('H:i:s'), 'timestamp' => time() ]; appendMessageLocked($msg); } echo json_encode(['success'=>true, 'added'=>$added]); exit; } if ($_GET['action'] === 'get_avatar_updates') { $since = intval($_GET['since'] ?? 0); $updates = json_decode(file_get_contents(AVATAR_UPDATED_FILE), true) ?: []; $result = []; foreach ($updates as $user => $ts) { if ($ts > $since) $result[$user] = $ts; } echo json_encode(['updates'=>$result]); exit; } if ($_GET['action'] === 'get_all_users') { session_write_close(); ob_start(); try { $users = json_decode(@file_get_contents(USERS_FILE), true) ?: []; $online = getOnlineUsers(ONLINE_FILE); $avatars = json_decode(@file_get_contents(AVATARS_FILE), true) ?: []; $friends = json_decode(@file_get_contents(FRIENDS_FILE), true) ?: []; $myFriends = is_array($friends) ? ($friends[$currentUser] ?? []) : []; $frReqs = json_decode(@file_get_contents(FRIEND_REQ_FILE), true) ?: []; $result = []; if (is_array($users)) { foreach ($users as $uname => $pwd) { $uname = (string)$uname; if ($uname === $currentUser) continue; $isFriend = in_array($uname, $myFriends); $reqSent = false; $reqReceived = false; if (is_array($frReqs)) { foreach ($frReqs as $req) { if (!is_array($req)) continue; if (($req['status'] ?? 'pending') !== 'pending') continue; if (($req['from'] ?? '') === $currentUser && ($req['to'] ?? '') === $uname) $reqSent = true; if (($req['from'] ?? '') === $uname && ($req['to'] ?? '') === $currentUser) $reqReceived = true; } } $result[] = [ 'name' => $uname, 'online' => isset($online[$uname]), 'avatar' => isset($avatars[$uname]) ? avatarUrl($avatars[$uname]) : null, 'is_friend' => $isFriend, 'request_sent' => $reqSent, 'request_received' => $reqReceived, ]; } } shuffle($result); ob_clean(); echo json_encode(['users'=>$result, 'myself'=>$currentUser]); } catch (Throwable $e) { ob_clean(); echo json_encode(['users'=>[], 'myself'=>$currentUser, 'error'=>$e->getMessage()]); } exit; } if ($_GET['action'] === 'get_rooms') { session_write_close(); updateOnline(ONLINE_FILE, $currentUser, $_GET['room'] ?? '公共聊天'); $rooms = json_decode(file_get_contents(ROOMS_FILE), true) ?: []; $groups = json_decode(file_get_contents(GROUPS_FILE), true) ?: []; $users = json_decode(file_get_contents(USERS_FILE), true) ?: []; $friends = json_decode(file_get_contents(FRIENDS_FILE), true) ?: []; $frReqs = json_decode(file_get_contents(FRIEND_REQ_FILE), true) ?: []; $online = getOnlineUsers(ONLINE_FILE); $avatars = json_decode(file_get_contents(AVATARS_FILE), true) ?: []; $unread = getUnreadCounts($currentUser); $notes = json_decode(file_get_contents(NOTES_FILE), true) ?: []; $pins = json_decode(file_get_contents(PINS_FILE), true) ?: []; $myNotes = $notes[$currentUser] ?? []; $myPins = $pins[$currentUser] ?? []; $myFriends = $friends[$currentUser] ?? []; $channels = []; foreach ($rooms as $name => $info) { if ($info['type'] === 'channel') { $channels[] = ['name'=>$name, 'type'=>'channel', 'unread'=>$unread[$name] ?? 0]; } } $channelOnline = []; foreach ($online as $u => $oinfo) { $r = $oinfo['room'] ?? '公共聊天'; if (!isset($channelOnline[$r])) $channelOnline[$r] = 0; $channelOnline[$r]++; } $friendList = []; foreach ($myFriends as $fname) { $pmRoom = getPMRoom($currentUser, $fname); $friendList[] = [ 'name' => $fname, 'type' => 'friend', 'online' => isset($online[$fname]), 'avatar' => isset($avatars[$fname]) ? avatarUrl($avatars[$fname]) : null, 'unread' => $unread[$pmRoom] ?? 0, 'note' => $myNotes[$fname] ?? null, 'pinned' => in_array($fname, $myPins) ]; } $groupList = []; $gbanList = json_decode(@file_get_contents(GROUP_BAN_FILE), true) ?: []; foreach ($groups as $gname => $ginfo) { if (isGroupMember($ginfo, $currentUser)) { $grRoom = 'group:' . $gname; $members = $ginfo['members'] ?? []; $gOnline = 0; foreach ($members as $m) { if (isset($online[$m])) $gOnline++; } $gban = $gbanList[$gname] ?? null; $groupList[] = ['name'=>$gname, 'type'=>'group', 'group_id'=>$ginfo['group_id'] ?? '', 'members'=>$ginfo['members'], 'member_count'=>count($members), 'online_count'=>$gOnline, 'request_count'=>count($ginfo['requests'] ?? []), 'join_mode'=>$ginfo['join_mode'] ?? 'apply', 'history_visible'=>!empty($ginfo['history_visible']), 'created_by'=>$ginfo['created_by'] ?? '', 'unread'=>$unread[$grRoom] ?? 0, 'avatar'=>$ginfo['avatar'] ?? null, 'banned'=>$gban ? true : false, 'ban_reason'=>$gban['reason'] ?? '', 'pinned_msg'=>$ginfo['pinned_msg'] ?? null, 'announcement'=>$ginfo['announcement'] ?? null, 'admins'=>$ginfo['admins'] ?? []]; } } $pendingReqs = []; foreach ($frReqs as $req) { if ($req['to'] === $currentUser && (!isset($req['status']) || $req['status'] === 'pending')) { $pendingReqs[] = ['from'=>$req['from'], 'time'=>$req['time'] ?? 0]; } } echo json_encode([ 'channels' => $channels, 'friends' => $friendList, 'groups' => $groupList, 'pending_requests' => $pendingReqs, 'online_count' => count($online), 'online_users' => array_keys($online), 'channel_online' => $channelOnline ]); exit; } if ($_GET['action'] === 'search_users') { $q = trim($_GET['q'] ?? ''); $users = json_decode(file_get_contents(USERS_FILE), true) ?: []; $groups = json_decode(file_get_contents(GROUPS_FILE), true) ?: []; $friends = json_decode(file_get_contents(FRIENDS_FILE), true) ?: []; $frReqs = json_decode(file_get_contents(FRIEND_REQ_FILE), true) ?: []; $online = getOnlineUsers(ONLINE_FILE); $avatars = json_decode(file_get_contents(AVATARS_FILE), true) ?: []; $myFriends = $friends[$currentUser] ?? []; $results = []; foreach ($users as $uname => $pwd) { $uname = (string)$uname; if ($uname === $currentUser) continue; if ($q !== '' && mb_stripos($uname, $q) === false) continue; $isFriend = in_array($uname, $myFriends); $reqSent = false; $reqReceived = false; foreach ($frReqs as $req) { if (($req['status'] ?? 'pending') !== 'pending') continue; if ($req['from'] === $currentUser && $req['to'] === $uname) $reqSent = true; if ($req['from'] === $uname && $req['to'] === $currentUser) $reqReceived = true; } $results[] = [ 'name' => $uname, 'online' => isset($online[$uname]), 'avatar' => isset($avatars[$uname]) ? avatarUrl($avatars[$uname]) : null, 'is_friend' => $isFriend, 'request_sent' => $reqSent, 'request_received' => $reqReceived ]; } // 支持按群名/群号搜索群（含自己已加入的群，群主可搜到自己的群） $groupResults = []; $gbanList = json_decode(@file_get_contents(GROUP_BAN_FILE), true) ?: []; foreach ($groups as $gname => $ginfo) { $gid = (string)($ginfo['group_id'] ?? ''); if ($q !== '' && mb_stripos($gname, $q) === false && mb_stripos($gid, $q) === false) continue; $members = $ginfo['members'] ?? []; $gOnline = 0; foreach ($members as $m) { if (isset($online[$m])) $gOnline++; } $gban = $gbanList[$gname] ?? null; $groupResults[] = [ 'name' => $gname, 'group_id' => $gid, 'created_by' => $ginfo['created_by'] ?? '', 'member_count' => count($members), 'online_count' => $gOnline, 'is_member' => listHasUser($members, $currentUser), 'avatar' => isset($ginfo['avatar']) ? avatarUrl($ginfo['avatar']) : null, 'banned' => $gban ? true : false, 'ban_reason' => $gban['reason'] ?? '' ]; } echo json_encode(['users'=>$results, 'groups'=>$groupResults]); exit; } if ($_GET['action'] === 'send_friend_request') { $target = trim($_POST['target'] ?? ''); if ($target === '' || $target === $currentUser) { http_response_code(400); echo json_encode(['error'=>'无效的用户']); exit; } $users = json_decode(file_get_contents(USERS_FILE), true) ?: []; if (!isset($users[$target])) { http_response_code(400); echo json_encode(['error'=>'用户不存在']); exit; } $friends = json_decode(file_get_contents(FRIENDS_FILE), true) ?: []; if (in_array($target, $friends[$currentUser] ?? [])) { http_response_code(400); echo json_encode(['error'=>'已经是好友']); exit; } $reqs = json_decode(file_get_contents(FRIEND_REQ_FILE), true) ?: []; foreach ($reqs as $r) { if (($r['status'] ?? 'pending') === 'pending' && $r['from'] === $currentUser && $r['to'] === $target) { http_response_code(400); echo json_encode(['error'=>'已发送过好友请求']); exit; } if (($r['status'] ?? 'pending') === 'pending' && $r['from'] === $target && $r['to'] === $currentUser) { $r['status'] = 'accepted'; if (!isset($friends[$currentUser])) $friends[$currentUser] = []; if (!isset($friends[$target])) $friends[$target] = []; if (!in_array($target, $friends[$currentUser])) $friends[$currentUser][] = $target; if (!in_array($currentUser, $friends[$target])) $friends[$target][] = $currentUser; file_put_contents(FRIENDS_FILE, json_encode($friends, JSON_UNESCAPED_UNICODE), LOCK_EX); file_put_contents(FRIEND_REQ_FILE, json_encode($reqs, JSON_UNESCAPED_UNICODE), LOCK_EX); echo json_encode(['success'=>true, 'auto_accepted'=>true]); exit; } } $reqs[] = ['from'=>$currentUser, 'to'=>$target, 'time'=>time(), 'status'=>'pending']; file_put_contents(FRIEND_REQ_FILE, json_encode($reqs, JSON_UNESCAPED_UNICODE), LOCK_EX); echo json_encode(['success'=>true]); exit; } if ($_GET['action'] === 'get_friend_requests') { $reqs = json_decode(file_get_contents(FRIEND_REQ_FILE), true) ?: []; $incoming = []; foreach ($reqs as $r) { if ($r['to'] === $currentUser && ($r['status'] ?? 'pending') === 'pending') { $incoming[] = $r; } } echo json_encode(['requests'=>$incoming]); exit; } if ($_GET['action'] === 'accept_friend_request') { $from = trim($_POST['from'] ?? ''); $reqs = json_decode(file_get_contents(FRIEND_REQ_FILE), true) ?: []; $found = false; foreach ($reqs as &$r) { if ($r['from'] === $from && $r['to'] === $currentUser && ($r['status'] ?? 'pending') === 'pending') { $r['status'] = 'accepted'; $found = true; break; } } if (!$found) { http_response_code(400); echo json_encode(['error'=>'请求不存在']); exit; } $friends = json_decode(file_get_contents(FRIENDS_FILE), true) ?: []; if (!isset($friends[$currentUser])) $friends[$currentUser] = []; if (!isset($friends[$from])) $friends[$from] = []; if (!in_array($from, $friends[$currentUser])) $friends[$currentUser][] = $from; if (!in_array($currentUser, $friends[$from])) $friends[$from][] = $currentUser; file_put_contents(FRIENDS_FILE, json_encode($friends, JSON_UNESCAPED_UNICODE), LOCK_EX); file_put_contents(FRIEND_REQ_FILE, json_encode($reqs, JSON_UNESCAPED_UNICODE), LOCK_EX); writeLog($currentUser, 'accept_friend', '与 ' . $from . ' 成为好友'); echo json_encode(['success'=>true]); exit; } if ($_GET['action'] === 'reject_friend_request') { $from = trim($_POST['from'] ?? ''); $reqs = json_decode(file_get_contents(FRIEND_REQ_FILE), true) ?: []; foreach ($reqs as &$r) { if ($r['from'] === $from && $r['to'] === $currentUser && ($r['status'] ?? 'pending') === 'pending') { $r['status'] = 'rejected'; break; } } file_put_contents(FRIEND_REQ_FILE, json_encode($reqs, JSON_UNESCAPED_UNICODE), LOCK_EX); echo json_encode(['success'=>true]); exit; } if ($_GET['action'] === 'cancel_friend_request') { $target = trim($_POST['target'] ?? ''); $reqs = json_decode(file_get_contents(FRIEND_REQ_FILE), true) ?: []; foreach ($reqs as &$r) { if ($r['from'] === $currentUser && $r['to'] === $target && ($r['status'] ?? 'pending') === 'pending') { $r['status'] = 'cancelled'; break; } } file_put_contents(FRIEND_REQ_FILE, json_encode($reqs, JSON_UNESCAPED_UNICODE), LOCK_EX); echo json_encode(['success'=>true]); exit; } if ($_GET['action'] === 'get_unread') { $unread = getUnreadCounts($currentUser); $friends = json_decode(file_get_contents(FRIENDS_FILE), true) ?: []; $groups = json_decode(file_get_contents(GROUPS_FILE), true) ?: []; $myFriends = $friends[$currentUser] ?? []; $validUnread = []; foreach ($unread as $room => $count) { if (strpos($room, 'pm:') === 0) { $parts = explode(':', $room); $other = $parts[1] === $currentUser ? ($parts[2] ?? '') : ($parts[1] ?? ''); if ($other && in_array($other, $myFriends)) { $validUnread[$room] = $count; } } elseif (strpos($room, 'group:') === 0) { $gname = substr($room, 6); if (isset($groups[$gname]) && isGroupMember($groups[$gname], $currentUser)) { $validUnread[$room] = $count; } } else { $validUnread[$room] = $count; } } $total = array_sum($validUnread); echo json_encode(['unread'=>$validUnread, 'total'=>(int)$total]); exit; } if ($_GET['action'] === 'mark_read') { // 未读数是以"归一化后的房间名"为键写入的，这里必须同样归一化， // 否则用 pm:bob:alice 去清 pm:alice:bob 的未读会一直清不掉。 $room = canonicalRoom(trim($_POST['room'] ?? '')); if ($room === '') { http_response_code(400); echo json_encode(['error'=>'参数错误']); exit; } $unread = json_decode(file_get_contents(UNREAD_FILE), true) ?: []; if (isset($unread[$currentUser][$room])) { $unread[$currentUser][$room] = 0; file_put_contents(UNREAD_FILE, json_encode($unread, JSON_UNESCAPED_UNICODE), LOCK_EX); } echo json_encode(['success'=>true]); exit; } if ($_GET['action'] === 'create_group') { $groupName = trim($_POST['name'] ?? ''); $members = json_decode($_POST['members'] ?? '[]', true) ?: []; $avatar = trim($_POST['avatar'] ?? ''); if ($groupName === '') { http_response_code(400); echo json_encode(['error'=>'群名称不能为空']); exit; } if (!listHasUser($members, $currentUser)) $members[] = $currentUser; $groups = json_decode(file_get_contents(GROUPS_FILE), true) ?: []; if (isset($groups[$groupName])) { http_response_code(400); echo json_encode(['error'=>'群名称已存在']); exit; } // 自动生成唯一 6 位数字群号（类似 QQ 群号） do { $gid = (string)mt_rand(100000, 999999); $dup = false; foreach ($groups as $g) { if (($g['group_id'] ?? '') === $gid) { $dup = true; break; } } } while ($dup); // 初始成员（含群主）的入群时间就是群的创建时间，因此他们能看到群里的全部消息 $createdAt = time(); $joinedAt = []; foreach ($members as $m) { $joinedAt[$m] = $createdAt; } $groups[$groupName] = ['members'=>$members, 'created_by'=>$currentUser, 'created_at'=>$createdAt, 'group_id'=>$gid, 'join_mode'=>'apply', 'joined_at'=>$joinedAt]; if ($avatar !== '' && strpos($avatar, 'group_avatars/') === 0) { $groups[$groupName]['avatar'] = $avatar; } file_put_contents(GROUPS_FILE, json_encode($groups, JSON_UNESCAPED_UNICODE), LOCK_EX); writeLog($currentUser, 'create_group', $groupName . ' / 群号:' . $gid . ' / 成员:' . implode('、', $members)); echo json_encode(['success'=>true, 'group'=>$groupName, 'group_id'=>$gid]); exit; } if ($_GET['action'] === 'set_group_avatar') { $groupName = trim($_POST['group'] ?? ''); $avatar = trim($_POST['avatar'] ?? ''); if ($groupName === '') { http_response_code(400); echo json_encode(['error'=>'参数错误']); exit; } $groups = json_decode(file_get_contents(GROUPS_FILE), true) ?: []; if (!isset($groups[$groupName])) { http_response_code(400); echo json_encode(['error'=>'群不存在']); exit; } if (($groups[$groupName]['created_by'] ?? '') !== $currentUser) { http_response_code(403); echo json_encode(['error'=>'仅群主可修改']); exit; } $groups[$groupName]['avatar'] = $avatar; file_put_contents(GROUPS_FILE, json_encode($groups, JSON_UNESCAPED_UNICODE), LOCK_EX); echo json_encode(['success'=>true]); exit; } // checkin / get_user_meta / get_rank 三个接口已随等级系统一并下架。 // data/signins.json 中的数据保留未删，日后若要恢复等级玩法可直接复用。 if ($_GET['action'] === 'get_messages') { session_write_close(); $room = canonicalRoom(trim($_GET['room'] ?? '公共聊天')); // ================= 房间访问控制（关键安全校验，不可省略）================= // 私聊房间名是可预测的（pm:用户A:用户B），群聊房间名是 group:群名。 // 原先只按房间名过滤，任何登录用户只要猜出房间名就能读到别人的私聊与未加入群的消息； // 更严重的是下面"标记已读"的写入会顺带篡改他人的未读状态。 // 这里与上传/转发/邀请等接口保持一致，统一按参与者/成员身份鉴权。 if (strpos($room, 'pm:') === 0) { $pmParts = explode(':', substr($room, 3)); if (count($pmParts) !== 2 || !in_array($currentUser, $pmParts, true)) { writeLog($currentUser, 'room_denied', '越权读取私聊：' . $room); http_response_code(403); echo json_encode(['error'=>'无权访问该会话', 'code'=>'room_denied']); exit; } } elseif (strpos($room, 'group:') === 0) { $gName = substr($room, 6); $groupsAll = json_decode(@file_get_contents(GROUPS_FILE), true) ?: []; if (!isGroupMember($groupsAll[$gName] ?? null, $currentUser)) { writeLog($currentUser, 'room_denied', '越权读取群聊：' . $gName); http_response_code(403); echo json_encode(['error'=>'你不在该群中', 'code'=>'room_denied']); exit; } } updateOnline(ONLINE_FILE, $currentUser, $room); $lastId = intval($_GET['last_id'] ?? 0); // 读取带重试：写侧是"清空+写回"的就地改写，撞上空窗时这里会解出空内容， // 于是那一次轮询返回 0 条消息、界面消息整片消失。loadMessages() 会跨过这个空窗。 $messages = loadMessages(); // 私聊已读/未读：谁在查看这个私聊房间，谁的消息就被标记已读；同时返回我发出且已被对方读过的消息 id。 // 关键：只有"确实还有对方的未读消息"时才去动文件。 // 原来是每次请求都 fopen + 排他锁 + 全量解码 + 重写整个消息库（哪怕一条都不用改）， // 私聊里 2.5 秒一次的轮询会把全站消息文件长期占住，其它请求全排在这把锁后面， // 堆积久了被服务器切断连接 —— 这就是"聊天界面突然空白"的直接原因。 $readIds = []; if (strpos($room, 'pm:') === 0) { $needMark = false; foreach ($messages as $m) { if (($m['room'] ?? '') !== $room) continue; if (($m['username'] ?? '') === $currentUser) { if (!empty($m['read'])) $readIds[] = $m['id']; } elseif (empty($m['read'])) { $needMark = true; } } if ($needMark) { $fp = fopen(MESSAGES_FILE, 'c+'); if ($fp) { flock($fp, LOCK_EX); $all = json_decode(stream_get_contents($fp), true); if (!is_array($all)) $all = []; $ch = false; foreach ($all as &$mm) { if (($mm['room'] ?? '') === $room && ($mm['username'] ?? '') !== $currentUser && empty($mm['read'])) { $mm['read'] = true; $ch = true; } } unset($mm); if ($ch) { ftruncate($fp, 0); rewind($fp); fwrite($fp, json_encode($all, JSON_UNESCAPED_UNICODE)); fflush($fp); } flock($fp, LOCK_UN); fclose($fp); } } } $newMessages = []; $maxId = $lastId; // 可见起点：早于这个时间的消息不下发（新用户/新群成员看不到"自己进来之前"的聊天记录）。 // 0 表示不限制，老账号走这条分支，行为和以前完全一致。 $visibleFrom = roomVisibleFrom($room, $currentUser); // 增量同步（撤回/编辑/回应）也走同一个可见起点：编辑后的正文一旦下发， // 就等于把"入群前的内容"直接泄露出去了，所以这里不能省。 $visibleMsg = function ($msg) use ($visibleFrom) { return $visibleFrom <= 0 || intval($msg['timestamp'] ?? 0) >= $visibleFrom; }; // 倒序遍历，消息按 id 递增排列，遇到 <= lastId 的就可以停了 for ($i = count($messages) - 1; $i >= 0; $i--) { $msg = $messages[$i]; $msgRoom = $msg['room'] ?? '公共聊天'; if (!isset($msg['id'])) continue; if ($msg['id'] <= $lastId) break; if ($msgRoom !== $room) continue; // 水位（返回给客户端的 last_id）要取该房间真实的最新 id，不能受可见性影响： // 否则被过滤掉的消息会让客户端一直从旧位置重复请求同一段内容 if ($msg['id'] > $maxId) $maxId = $msg['id']; if ($visibleFrom > 0 && intval($msg['timestamp'] ?? 0) < $visibleFrom) continue; $newMessages[] = $msg; } $newMessages = array_reverse($newMessages); // 为消息补充头像框（等级角标已随等级系统下架，这里不再读取 signins.json） $frameCache = []; $profiles = json_decode(@file_get_contents(PROFILES_FILE), true) ?: []; foreach ($newMessages as &$nm) { $u = (string)($nm['username'] ?? ''); if ($u !== '' && !isset($frameCache[$u])) { $frameCache[$u] = ($profiles[$u]['frame'] ?? 'none') ?: 'none'; } $nm['frame'] = $frameCache[$u] ?? 'none'; } unset($nm); $deletedAll = json_decode(file_get_contents(DELETED_FILE), true) ?: []; $deletedIds = []; $now = time(); foreach ($deletedAll as $d) { if ($now - ($d['ts'] ?? 0) < SYSTEM_MSG_TTL) { $deletedIds[] = $d['id']; } } $recalledSince = intval($_GET['recalled_since'] ?? 0); $recalledMessages = []; foreach ($messages as $msg) { $msgRoom = $msg['room'] ?? '公共聊天'; if ($msgRoom === $room && ($msg['type'] ?? '') === 'recalled' && ($msg['recalled_at'] ?? 0) > $recalledSince && $visibleMsg($msg)) { $recalledMessages[] = ['id'=>$msg['id'], 'message'=>$msg['message'], 'time'=>$msg['time']]; } } $editedSince = intval($_GET['edited_since'] ?? 0); $editedMessages = []; foreach ($messages as $msg) { $msgRoom = $msg['room'] ?? '公共聊天'; if ($msgRoom === $room && ($msg['edited_at'] ?? 0) > $editedSince && $visibleMsg($msg)) { $editedMessages[] = ['id'=>$msg['id'], 'message'=>$msg['message'] ?? '', 'edited_at'=>$msg['edited_at'] ?? 0]; } } // 表情回应增量：谁点了回应都会写 reacted_at，其它在线客户端据此把回应同步到已渲染的气泡上 // （包含"最后一个回应被取消"的情况：reactions 为空也要下发，让客户端清除徽章） $reactSince = intval($_GET['reactions_since'] ?? 0); $reactionUpdates = []; foreach ($messages as $msg) { $msgRoom = $msg['room'] ?? '公共聊天'; if ($msgRoom === $room && ($msg['reacted_at'] ?? 0) > $reactSince && $visibleMsg($msg)) { $reactionUpdates[] = ['id'=>$msg['id'], 'reactions'=>$msg['reactions'] ?? []]; } } $avatarSince = intval($_GET['avatar_since'] ?? 0); $avatarUpdates = json_decode(file_get_contents(AVATAR_UPDATED_FILE), true) ?: []; $newAvatarUpdates = []; foreach ($avatarUpdates as $user => $ts) { if ($ts > $avatarSince) { $avatars = json_decode(file_get_contents(AVATARS_FILE), true) ?: []; $newAvatarUpdates[$user] = $avatars[$user] ?? null; } } $online = getOnlineUsers(ONLINE_FILE); echo json_encode([ 'messages'=>$newMessages, 'last_id'=>$maxId, 'online'=>count($online), 'users'=>array_keys($online), 'visible_from'=>$visibleFrom, // 0 = 不限；>0 时客户端可说明"早于此时刻的记录不显示" 'deleted_ids'=>$deletedIds, 'recalled_messages'=>$recalledMessages, 'edited_messages'=>$editedMessages, 'reaction_updates'=>$reactionUpdates, 'reactions_since'=>time(), 'read_ids'=>$readIds, 'avatar_updates'=>$newAvatarUpdates, 'avatar_ts'=>time() ]); exit; } if ($_GET['action'] === 'report_error') { session_write_close(); // 客户端错误上报：以前排查线上问题只能靠用户截图，现在浏览器侧的报错会自己落到服务端。 // 限流 + 长度上限，避免这里被当成"随便写文件"的口子。 $ip = clientIp(); if (!rateLimit('cerr:' . $ip, 30, 60)) { http_response_code(429); echo json_encode(['error'=>'too many']); exit; } $raw = file_get_contents('php://input'); if ($raw === false || strlen($raw) > 20000) { http_response_code(400); echo json_encode(['error'=>'bad']); exit; } $in = json_decode($raw, true); if (!is_array($in)) { http_response_code(400); echo json_encode(['error'=>'bad']); exit; } $cut = function ($s, $n) { return mb_substr((string)$s, 0, $n); }; $rec = [ 'at' => time(), 'user' => $currentUser, 'ip' => $ip, 'kind' => $cut($in['kind'] ?? 'error', 20), 'msg' => $cut($in['msg'] ?? '', 300), 'src' => $cut($in['src'] ?? '', 300), 'line' => intval($in['line'] ?? 0), 'stack' => $cut($in['stack'] ?? '', 2000), 'url' => $cut($in['url'] ?? '', 300), 'ua' => $cut($_SERVER['HTTP_USER_AGENT'] ?? '', 200), ]; $list = json_decode((string)@file_get_contents(CLIENT_ERR_FILE), true); if (!is_array($list)) $list = []; // 同一条错误重复出现时只保留最新一条（更新时间戳），避免同类错误把列表刷满 $sig = md5($rec['kind'] . '|' . $rec['msg'] . '|' . $rec['line']); $list = array_values(array_filter($list, function ($r) use ($sig) { return ($r['sig'] ?? '') !== $sig; })); $rec['sig'] = $sig; array_unshift($list, $rec); if (count($list) > 200) $list = array_slice($list, 0, 200); @file_put_contents(CLIENT_ERR_FILE, json_encode($list), LOCK_EX); echo json_encode(['success' => true]); exit; } if ($_GET['action'] === 'send_message') { session_write_close(); // 发消息限速：同一用户 60 秒内最多 40 条。阈值刻意宽松， // 正常聊天碰不到，但脚本刷屏/灌水会被挡住。 if (!rateLimit('send:' . $currentUser, 40, 60)) { http_response_code(429); echo json_encode(['error' => '发送太频繁了，缓一下再发']); exit; } $message = trim($_POST['message'] ?? ''); $room = canonicalRoom(trim($_POST['room'] ?? '公共聊天')); $quote = trim($_POST['quote'] ?? ''); $image = trim($_POST['image'] ?? ''); $file = trim($_POST['file'] ?? ''); $fileName = trim($_POST['file_name'] ?? ''); $fileSize = trim($_POST['file_size'] ?? ''); $voice = trim($_POST['voice'] ?? ''); $voiceDuration = max(1, min(300, intval($_POST['voice_duration'] ?? 0))); // 声纹包络：客户端采集的一串 0-9 数字（每位=一个采样点的响度档位）。 // 可选字段：只校验长度与字符集，非法或超长直接丢弃，不影响语音本身发出。 $voiceWave = trim($_POST['voice_wave'] ?? ''); if ($voiceWave !== '' && !preg_match('/^[0-9]{1,64}$/', $voiceWave)) $voiceWave = ''; if ($message === '' && $image === '' && $file === '' && $voice === '') { http_response_code(400); echo json_encode(['error'=>'消息不能为空']); exit; } if ($image !== '' && strpos($image, 'uploads/') !== 0) { http_response_code(400); echo json_encode(['error'=>'图片路径无效']); exit; } if ($file !== '' && strpos($file, 'files/') !== 0) { http_response_code(400); echo json_encode(['error'=>'文件路径无效']); exit; } if ($voice !== '' && strpos($voice, 'uploads/') !== 0) { http_response_code(400); echo json_encode(['error'=>'语音路径无效']); exit; } if (strpos($room, 'pm:') === 0) { $parts = explode(':', $room); $pmUser = ($parts[1] === $currentUser) ? ($parts[2] ?? '') : ($parts[1] ?? ''); $friends = json_decode(file_get_contents(FRIENDS_FILE), true) ?: []; $myFriends = $friends[$currentUser] ?? []; if (!in_array($pmUser, $myFriends)) { http_response_code(400); echo json_encode(['error'=>'对方还不是你的好友，无法发送消息', 'code'=>'not_friend']); exit; } $bl = json_decode(@file_get_contents(BLACKLIST_FILE), true) ?: []; if (in_array($pmUser, $bl[$currentUser] ?? [])) { http_response_code(400); echo json_encode(['error'=>'你已拉黑对方，无法发送消息', 'code'=>'blacklisted']); exit; } if (in_array($currentUser, $bl[$pmUser] ?? [])) { http_response_code(400); echo json_encode(['error'=>'对方已将你拉黑，无法发送消息', 'code'=>'blocked_by']); exit; } } if (strpos($room, 'group:') === 0) { $gName = substr($room, 6); $gBan = isGroupBanned($gName); if ($gBan) { http_response_code(400); echo json_encode(['error'=>'该群已被封禁，无法发送消息', 'code'=>'group_banned', 'reason'=>$gBan['reason'] ?? '']); exit; } $muteUntil = getGroupMute($gName, $currentUser); if ($muteUntil !== 0) { $remain = $muteUntil > 0 ? $muteUntil - time() : -1; $msg = $remain < 0 ? '你已被永久禁言，无法发言' : '你已被禁言，剩余 ' . ceil($remain / 60) . ' 分钟'; http_response_code(400); echo json_encode(['error'=>$msg, 'code'=>'muted', 'mute_until'=>$muteUntil]); exit; } } $quoteData = null; if ($quote !== '') { $decoded = json_decode($quote, true); if (is_array($decoded) && isset($decoded['id'], $decoded['username'], $decoded['message'])) $quoteData = $decoded; } // 文本字数限制：后台"聊天设置"配置，0=无限制（技术保护上限 5000），>0 时超限直接拒绝、不截断 $cfg = json_decode(@file_get_contents(SITE_CONFIG_FILE), true) ?: []; $maxChars = isset($cfg['max_chars']) ? max(0, min(5000, intval($cfg['max_chars']))) : 100; if ($maxChars > 0 && mb_strlen($message) > $maxChars) { http_response_code(400); echo json_encode(['error' => '消息超过字数限制（最多 ' . $maxChars . ' 个字），请精简后重试', 'code' => 'too_long', 'max' => $maxChars]); exit; } $message = filterSensitive(mb_substr($message, 0, $maxChars > 0 ? $maxChars : 5000)); $fp = fopen(MESSAGES_FILE, 'c+'); if (!$fp) { http_response_code(500); echo json_encode(['error'=>'服务器错误']); exit; } flock($fp, LOCK_EX); $messages = json_decode(stream_get_contents($fp), true) ?: []; $maxId = 0; foreach ($messages as $m) { if (isset($m['id']) && $m['id'] > $maxId) $maxId = $m['id']; } $newId = $maxId + 1; // 语音对象按需拼装：wave 是后加的可选字段，没有就不写， // 老消息/老客户端依旧只有 url+duration，读取端缺字段会自动回退。 $voicePayload = null; if ($voice !== '') { $voicePayload = ['url'=>$voice, 'duration'=>$voiceDuration]; if ($voiceWave !== '') $voicePayload['wave'] = $voiceWave; } $newMsg = [ 'id' => $newId, 'room' => $room, 'username' => $currentUser, 'message' => $message, 'image' => $image ?: null, 'file' => $file ?: null, 'file_name' => $file ? $fileName : null, 'file_size' => $file ? $fileSize : null, 'voice' => $voicePayload, 'quote' => $quoteData, 'time' => date('H:i:s'), 'timestamp' => time() ]; $messages[] = $newMsg; if (count($messages) > MAX_MESSAGES) $messages = array_slice($messages, -MAX_MESSAGES); ftruncate($fp, 0); rewind($fp); fwrite($fp, json_encode($messages, JSON_UNESCAPED_UNICODE)); fflush($fp); flock($fp, LOCK_UN); fclose($fp); // 群里发的图片/文件同时归档进群文件清单（图片进"群相册"）。 // 否则大家在群里发的照片、文件在群文件/群相册里根本看不到，都以为是丢了。 if (strpos($room, 'group:') === 0 && ($image !== '' || $file !== '')) { archiveGroupAttachment(substr($room, 6), $currentUser, $image, $file, $fileName, $fileSize); } updateOnline(ONLINE_FILE, $currentUser, $room); incrementUnread($currentUser, $room); // @全体成员：消息包含 @全体成员 时提醒群内所有不在本群房间的成员 if (strpos($room, 'group:') === 0 && $message !== '' && mb_strpos($message, '@全体成员') !== false) { atAllNotify(substr($room, 6), $currentUser); } // 等级系统已下架：不再每条消息读写一次 signins.json（省掉热路径上的一次文件 IO） writeLog($currentUser, 'send_message', $room . ' / ' . ($file ? '文件:' . $fileName : ($image ? '图片' : ($voice ? '语音:' . $voiceDuration . 's' : mb_substr($message, 0, 60))))); echo json_encode(['success'=>true, 'id'=>$newId]); exit; } if ($_GET['action'] === 'toggle_reaction') { session_write_close(); $room = canonicalRoom(trim($_POST['room'] ?? '公共聊天')); $id = intval($_POST['id'] ?? 0); $emoji = trim($_POST['emoji'] ?? ''); if ($id <= 0 || $emoji === '' || mb_strlen($emoji) > 8) { http_response_code(400); echo json_encode(['error'=>'参数错误']); exit; } // 与 send_message 相同的房间鉴权：私聊必须是参与者，群聊必须是成员 if (strpos($room, 'pm:') === 0) { $pmParts = explode(':', substr($room, 3)); if (count($pmParts) !== 2 || !in_array($currentUser, $pmParts, true)) { http_response_code(403); echo json_encode(['error'=>'无权操作该会话']); exit; } } elseif (strpos($room, 'group:') === 0) { $gName = substr($room, 6); $groupsAll = json_decode(@file_get_contents(GROUPS_FILE), true) ?: []; if (!isGroupMember($groupsAll[$gName] ?? null, $currentUser)) { http_response_code(403); echo json_encode(['error'=>'你不在该群中']); exit; } } if (!rateLimit('react:' . $currentUser, 60, 60)) { http_response_code(429); echo json_encode(['error'=>'操作太频繁了，缓一下再试']); exit; } $fp = fopen(MESSAGES_FILE, 'c+'); if (!$fp) { http_response_code(500); echo json_encode(['error'=>'服务器错误']); exit; } flock($fp, LOCK_EX); $messages = json_decode(stream_get_contents($fp), true) ?: []; $found = false; $reactions = []; foreach ($messages as &$m) { if (($m['id'] ?? 0) === $id && ($m['room'] ?? '') === $room) { // 已撤回/系统消息不允许回应 if (($m['type'] ?? '') === 'recalled' || ($m['type'] ?? '') === 'system') { flock($fp, LOCK_UN); fclose($fp); http_response_code(400); echo json_encode(['error'=>'该消息不能回应']); exit; } $found = true; $reactions = is_array($m['reactions'] ?? null) ? $m['reactions'] : []; // 每个用户对同一表情只能回应一次：存在就移除（取消回应），不存在就加上 $list = isset($reactions[$emoji]) && is_array($reactions[$emoji]) ? $reactions[$emoji] : []; $idx = array_search($currentUser, $list, true); if ($idx === false) { $list[] = $currentUser; } else { array_splice($list, $idx, 1); } if (empty($list)) unset($reactions[$emoji]); else $reactions[$emoji] = array_values($list); if (empty($reactions)) unset($m['reactions']); else $m['reactions'] = $reactions; // 无论增删都刷新 reacted_at，让其它客户端能同步"最后一个回应被取消"的变化 $m['reacted_at'] = time(); break; } } unset($m); if (!$found) { flock($fp, LOCK_UN); fclose($fp); http_response_code(404); echo json_encode(['error'=>'消息不存在或已不在当前房间']); exit; } ftruncate($fp, 0); rewind($fp); fwrite($fp, json_encode($messages, JSON_UNESCAPED_UNICODE)); fflush($fp); flock($fp, LOCK_UN); fclose($fp); writeLog($currentUser, 'toggle_reaction', $room . ' / msg#' . $id . ' / ' . $emoji); echo json_encode(['success'=>true, 'reactions'=>$reactions]); exit; } if ($_GET['action'] === 'delete_message') { session_write_close(); $room = trim($_POST['room'] ?? '公共聊天'); $id = intval($_POST['id'] ?? 0); if ($id <= 0) { http_response_code(400); echo json_encode(['error'=>'无效ID']); exit; } $fp = fopen(MESSAGES_FILE, 'c+'); if (!$fp) { http_response_code(500); echo json_encode(['error'=>'服务器错误']); exit; } flock($fp, LOCK_EX); $messages = json_decode(stream_get_contents($fp), true) ?: []; $found = false; $newMessages = []; $msgTimestamp = 0; $recalledId = 0; foreach ($messages as $msg) { if ($msg['id'] == $id && $msg['username'] === $currentUser) { $found = true; $msgTimestamp = $msg['timestamp'] ?? 0; $msg['type'] = 'recalled'; $msg['message'] = "{$currentUser} 撤回了一条消息"; $msg['recalled_by'] = $currentUser; $msg['recalled_at'] = time(); // 注意：绝不能把原文/原图/原文件留在消息对象里。 // 这些字段会随 get_messages 一起下发给房间里所有人， // "撤回"看起来生效了，实际原文还在客户端手里（一抓包就看到）。 unset($msg['image'], $msg['file'], $msg['file_name'], $msg['file_size'], $msg['quote'], $msg['voice']); $recalledId = $msg['id']; $newMessages[] = $msg; continue; } $newMessages[] = $msg; } if ($found) { ftruncate($fp, 0); rewind($fp); fwrite($fp, json_encode($newMessages, JSON_UNESCAPED_UNICODE)); fflush($fp); flock($fp, LOCK_UN); fclose($fp); echo json_encode(['success'=>true, 'recalled_id'=>$recalledId, 'recall_msg'=>"{$currentUser} 撤回了一条消息"]); } else { flock($fp, LOCK_UN); fclose($fp); http_response_code(403); echo json_encode(['error'=>'无权撤回']); exit; } exit; } if ($_GET['action'] === 'delete_friend') { $target = trim($_POST['target'] ?? ''); if ($target === '') { http_response_code(400); echo json_encode(['error'=>'参数错误']); exit; } $friends = json_decode(file_get_contents(FRIENDS_FILE), true) ?: []; if (!in_array($target, $friends[$currentUser] ?? [])) { http_response_code(400); echo json_encode(['error'=>'不是好友']); exit; } $friends[$currentUser] = array_values(array_diff($friends[$currentUser], [$target])); if (isset($friends[$target])) { $friends[$target] = array_values(array_diff($friends[$target], [$currentUser])); } file_put_contents(FRIENDS_FILE, json_encode($friends, JSON_UNESCAPED_UNICODE), LOCK_EX); $notes = json_decode(file_get_contents(NOTES_FILE), true) ?: []; if (isset($notes[$currentUser][$target])) unset($notes[$currentUser][$target]); file_put_contents(NOTES_FILE, json_encode($notes, JSON_UNESCAPED_UNICODE), LOCK_EX); $pmRoom = getPMRoom($currentUser, $target); $unread = json_decode(file_get_contents(UNREAD_FILE), true) ?: []; if (isset($unread[$currentUser][$pmRoom])) unset($unread[$currentUser][$pmRoom]); if (isset($unread[$target][$pmRoom])) unset($unread[$target][$pmRoom]); file_put_contents(UNREAD_FILE, json_encode($unread, JSON_UNESCAPED_UNICODE), LOCK_EX); writeLog($currentUser, 'delete_friend', '删除好友 ' . $target); echo json_encode(['success'=>true]); exit; } if ($_GET['action'] === 'set_note') { $target = trim($_POST['target'] ?? ''); $note = trim($_POST['note'] ?? ''); if ($target === '') { http_response_code(400); echo json_encode(['error'=>'参数错误']); exit; } $friends = json_decode(file_get_contents(FRIENDS_FILE), true) ?: []; if (!in_array($target, $friends[$currentUser] ?? [])) { http_response_code(400); echo json_encode(['error'=>'不是好友']); exit; } $notes = json_decode(file_get_contents(NOTES_FILE), true) ?: []; if (!isset($notes[$currentUser])) $notes[$currentUser] = []; if ($note === '') { unset($notes[$currentUser][$target]); } else { $notes[$currentUser][$target] = $note; } file_put_contents(NOTES_FILE, json_encode($notes, JSON_UNESCAPED_UNICODE), LOCK_EX); echo json_encode(['success'=>true]); exit; } if ($_GET['action'] === 'toggle_pin') { $target = trim($_POST['target'] ?? ''); if ($target === '') { http_response_code(400); echo json_encode(['error'=>'参数错误']); exit; } $friends = json_decode(file_get_contents(FRIENDS_FILE), true) ?: []; if (!in_array($target, $friends[$currentUser] ?? [])) { http_response_code(400); echo json_encode(['error'=>'不是好友']); exit; } $pins = json_decode(file_get_contents(PINS_FILE), true) ?: []; if (!isset($pins[$currentUser])) $pins[$currentUser] = []; if (in_array($target, $pins[$currentUser])) { $pins[$currentUser] = array_values(array_diff($pins[$currentUser], [$target])); } else { $pins[$currentUser][] = $target; } file_put_contents(PINS_FILE, json_encode($pins, JSON_UNESCAPED_UNICODE), LOCK_EX); echo json_encode(['success'=>true, 'pinned'=>in_array($target, $pins[$currentUser])]); exit; } if ($_GET['action'] === 'get_group_info') { $groupName = trim($_GET['group'] ?? ''); if ($groupName === '') { http_response_code(400); echo json_encode(['error'=>'参数错误']); exit; } $groups = json_decode(file_get_contents(GROUPS_FILE), true) ?: []; if (!isset($groups[$groupName])) { http_response_code(400); echo json_encode(['error'=>'群不存在']); exit; } $ginfo = $groups[$groupName]; $requests = []; foreach (($ginfo['requests'] ?? []) as $ru => $rinfo) { // 兼容新旧两种存储格式：新格式为 用户名=>['time'=>..]，旧格式为纯用户名列表 if (is_array($rinfo)) { $requests[] = ['user'=>(string)$ru, 'time'=>$rinfo['time'] ?? 0]; } else { $requests[] = ['user'=>(string)$rinfo, 'time'=>0]; } } echo json_encode([ 'name'=>$groupName, 'group_id'=>$ginfo['group_id'] ?? '', 'members'=>$ginfo['members'], 'created_by'=>$ginfo['created_by'] ?? '', 'created_at'=>$ginfo['created_at'] ?? 0, 'join_mode'=>$ginfo['join_mode'] ?? 'apply', 'admins'=>$ginfo['admins'] ?? [], 'titles'=>$ginfo['titles'] ?? (object)[], 'mutes'=>getGroupMutes($groupName), 'requests'=>$requests, 'pinned_msg'=>$ginfo['pinned_msg'] ?? null, 'announcement'=>$ginfo['announcement'] ?? null, 'is_member'=>isGroupMember($ginfo, $currentUser), 'is_creator'=>($ginfo['created_by'] ?? '') === $currentUser, 'is_admin'=>listHasUser($ginfo['admins'] ?? [], $currentUser), 'my_mute'=>getGroupMute($groupName, $currentUser) ]); exit; } if ($_GET['action'] === 'kick_member') { $groupName = trim($_POST['group'] ?? ''); $target = trim($_POST['target'] ?? ''); if ($groupName === '' || $target === '') { http_response_code(400); echo json_encode(['error'=>'参数错误']); exit; } $groups = json_decode(file_get_contents(GROUPS_FILE), true) ?: []; if (!isset($groups[$groupName])) { http_response_code(400); echo json_encode(['error'=>'群不存在']); exit; } if (($groups[$groupName]['created_by'] ?? '') !== $currentUser) { http_response_code(403); echo json_encode(['error'=>'仅群主可踢人']); exit; } if ($target === $currentUser) { http_response_code(400); echo json_encode(['error'=>'不能踢自己']); exit; } $groups[$groupName]['members'] = array_values(array_diff($groups[$groupName]['members'], [$target])); unset($groups[$groupName]['joined_at'][$target]); // 入群时间一起清掉：重新进群要重新计时 file_put_contents(GROUPS_FILE, json_encode($groups, JSON_UNESCAPED_UNICODE), LOCK_EX); writeLog($currentUser, 'kick_member', $groupName . ' 踢出 ' . $target); echo json_encode(['success'=>true]); exit; } if ($_GET['action'] === 'set_group_admin') { $groupName = trim($_POST['group'] ?? ''); $target = trim($_POST['target'] ?? ''); $makeAdmin = $_POST['make'] === '1'; if ($groupName === '' || $target === '') { http_response_code(400); echo json_encode(['error'=>'参数错误']); exit; } $groups = json_decode(file_get_contents(GROUPS_FILE), true) ?: []; if (!isset($groups[$groupName])) { http_response_code(400); echo json_encode(['error'=>'群不存在']); exit; } if (($groups[$groupName]['created_by'] ?? '') !== $currentUser) { http_response_code(403); echo json_encode(['error'=>'仅群主可设置管理员']); exit; } if ($target === $currentUser) { http_response_code(400); echo json_encode(['error'=>'不能对自己操作']); exit; } if (!listHasUser($groups[$groupName]['members'] ?? [], $target)) { http_response_code(400); echo json_encode(['error'=>'对方不在群中']); exit; } $admins = $groups[$groupName]['admins'] ?? []; if (!is_array($admins)) $admins = []; if ($makeAdmin) { if (!in_array($target, $admins)) $admins[] = $target; } else { $admins = array_values(array_diff($admins, [$target])); } $groups[$groupName]['admins'] = $admins; file_put_contents(GROUPS_FILE, json_encode($groups, JSON_UNESCAPED_UNICODE), LOCK_EX); writeLog($currentUser, $makeAdmin ? 'set_admin' : 'unset_admin', $groupName . ' / ' . $target); echo json_encode(['success'=>true, 'admins'=>$admins]); exit; } if ($_GET['action'] === 'set_group_title') { $groupName = trim($_POST['group'] ?? ''); $target = trim($_POST['target'] ?? ''); $title = trim($_POST['title'] ?? ''); if ($groupName === '' || $target === '') { http_response_code(400); echo json_encode(['error'=>'参数错误']); exit; } $groups = json_decode(file_get_contents(GROUPS_FILE), true) ?: []; if (!isset($groups[$groupName])) { http_response_code(400); echo json_encode(['error'=>'群不存在']); exit; } if (($groups[$groupName]['created_by'] ?? '') !== $currentUser) { http_response_code(403); echo json_encode(['error'=>'仅群主可设置头衔']); exit; } if (!listHasUser($groups[$groupName]['members'] ?? [], $target)) { http_response_code(400); echo json_encode(['error'=>'对方不在群中']); exit; } $titles = $groups[$groupName]['titles'] ?? []; if (!is_array($titles)) $titles = []; if ($title === '') unset($titles[$target]); else $titles[$target] = mb_substr($title, 0, 20); $groups[$groupName]['titles'] = $titles; file_put_contents(GROUPS_FILE, json_encode($groups, JSON_UNESCAPED_UNICODE), LOCK_EX); writeLog($currentUser, 'set_title', $groupName . ' / ' . $target . ' = ' . $title); echo json_encode(['success'=>true, 'titles'=>$titles]); exit; } if ($_GET['action'] === 'mute_group_member') { $groupName = trim($_POST['group'] ?? ''); $target = trim($_POST['target'] ?? ''); $action = $_POST['act'] === 'unmute' ? 'unmute' : 'mute'; if ($groupName === '' || $target === '') { http_response_code(400); echo json_encode(['error'=>'参数错误']); exit; } $groups = json_decode(file_get_contents(GROUPS_FILE), true) ?: []; if (!isset($groups[$groupName])) { http_response_code(400); echo json_encode(['error'=>'群不存在']); exit; } $isCreator = ($groups[$groupName]['created_by'] ?? '') === $currentUser; $isAdmin = listHasUser($groups[$groupName]['admins'] ?? [], $currentUser); if (!$isCreator && !$isAdmin) { http_response_code(403); echo json_encode(['error'=>'仅群主或管理员可禁言']); exit; } if ($target === ($groups[$groupName]['created_by'] ?? '')) { http_response_code(400); echo json_encode(['error'=>'不能禁言群主']); exit; } if (!listHasUser($groups[$groupName]['members'] ?? [], $target)) { http_response_code(400); echo json_encode(['error'=>'对方不在群中']); exit; } $all = json_decode(@file_get_contents(GROUP_MUTES_FILE), true) ?: []; if (!is_array($all)) $all = []; if (!isset($all[$groupName])) $all[$groupName] = []; if ($action === 'unmute') { unset($all[$groupName][$target]); $msg = '已解除禁言'; } else { $minutes = max(0, intval($_POST['minutes'] ?? 0)); $all[$groupName][$target] = $minutes > 0 ? time() + $minutes * 60 : 0; $msg = $minutes > 0 ? "已禁言 {$minutes} 分钟" : '已永久禁言'; } file_put_contents(GROUP_MUTES_FILE, json_encode($all, JSON_UNESCAPED_UNICODE), LOCK_EX); writeLog($currentUser, $action === 'mute' ? 'mute_member' : 'unmute_member', $groupName . ' / ' . $target . ($action === 'mute' ? ' / ' . ($minutes ?? 0) . 'min' : '')); echo json_encode(['success'=>true, 'message'=>$msg, 'mutes'=>$all[$groupName]]); exit; } if ($_GET['action'] === 'leave_group') { $groupName = trim($_POST['group'] ?? ''); if ($groupName === '') { http_response_code(400); echo json_encode(['error'=>'参数错误']); exit; } $groups = json_decode(file_get_contents(GROUPS_FILE), true) ?: []; if (!isset($groups[$groupName])) { http_response_code(400); echo json_encode(['error'=>'群不存在']); exit; } $groups[$groupName]['members'] = array_values(array_diff($groups[$groupName]['members'], [$currentUser])); unset($groups[$groupName]['joined_at'][$currentUser]); // 退群后重新加入，可见起点重新计算 if (empty($groups[$groupName]['members'])) { unset($groups[$groupName]); } file_put_contents(GROUPS_FILE, json_encode($groups, JSON_UNESCAPED_UNICODE), LOCK_EX); $grRoom = 'group:' . $groupName; $unread = json_decode(file_get_contents(UNREAD_FILE), true) ?: []; if (isset($unread[$currentUser][$grRoom])) unset($unread[$currentUser][$grRoom]); file_put_contents(UNREAD_FILE, json_encode($unread, JSON_UNESCAPED_UNICODE), LOCK_EX); echo json_encode(['success'=>true]); exit; } if ($_GET['action'] === 'delete_group') { $groupName = trim($_POST['group'] ?? ''); if ($groupName === '') { http_response_code(400); echo json_encode(['error'=>'参数错误']); exit; } $groups = json_decode(file_get_contents(GROUPS_FILE), true) ?: []; if (!isset($groups[$groupName])) { http_response_code(400); echo json_encode(['error'=>'群不存在']); exit; } if (($groups[$groupName]['created_by'] ?? '') !== $currentUser) { http_response_code(403); echo json_encode(['error'=>'仅群主可删除群']); exit; } unset($groups[$groupName]); file_put_contents(GROUPS_FILE, json_encode($groups, JSON_UNESCAPED_UNICODE), LOCK_EX); $gban = json_decode(@file_get_contents(GROUP_BAN_FILE), true) ?: []; if (isset($gban[$groupName])) { unset($gban[$groupName]); @file_put_contents(GROUP_BAN_FILE, json_encode($gban, JSON_UNESCAPED_UNICODE), LOCK_EX); } echo json_encode(['success'=>true]); exit; } if ($_GET['action'] === 'join_group') { $groupName = trim($_POST['group'] ?? ''); if ($groupName === '') { http_response_code(400); echo json_encode(['error'=>'参数错误']); exit; } $groups = json_decode(file_get_contents(GROUPS_FILE), true) ?: []; if (!isset($groups[$groupName])) { http_response_code(400); echo json_encode(['error'=>'群不存在']); exit; } if (isGroupBanned($groupName)) { http_response_code(400); echo json_encode(['error'=>'该群已被封禁，无法加入']); exit; } if (listHasUser($groups[$groupName]['members'] ?? [], $currentUser)) { http_response_code(400); echo json_encode(['error'=>'你已在群中']); exit; } if (($groups[$groupName]['join_mode'] ?? 'apply') === 'free') { $groups[$groupName]['members'][] = $currentUser; $groups[$groupName]['joined_at'][$currentUser] = time(); // 入群时间 = 可见起点 file_put_contents(GROUPS_FILE, json_encode($groups, JSON_UNESCAPED_UNICODE), LOCK_EX); writeLog($currentUser, 'join_group', $groupName . '（免申请直接入群）'); echo json_encode(['success'=>true, 'joined'=>true]); exit; } $groups[$groupName]['requests'][$currentUser] = ['time'=>time()]; file_put_contents(GROUPS_FILE, json_encode($groups, JSON_UNESCAPED_UNICODE), LOCK_EX); writeLog($currentUser, 'apply_group', $groupName); echo json_encode(['success'=>true, 'joined'=>false, 'applied'=>true]); exit; } if ($_GET['action'] === 'handle_group_request') { $groupName = trim($_POST['group'] ?? ''); $target = trim($_POST['target'] ?? ''); $action = trim($_POST['action'] ?? ''); if ($groupName === '' || $target === '' || !in_array($action, ['approve', 'reject'])) { http_response_code(400); echo json_encode(['error'=>'参数错误']); exit; } $groups = json_decode(file_get_contents(GROUPS_FILE), true) ?: []; if (!isset($groups[$groupName])) { http_response_code(400); echo json_encode(['error'=>'群不存在']); exit; } if (($groups[$groupName]['created_by'] ?? '') !== $currentUser) { http_response_code(403); echo json_encode(['error'=>'仅群主可处理申请']); exit; } if ($action === 'approve') { if (!listHasUser($groups[$groupName]['members'] ?? [], $target)) { $groups[$groupName]['members'][] = $target; $groups[$groupName]['joined_at'][$target] = time(); // 通过申请的这一刻起才可见群消息 } } unset($groups[$groupName]['requests'][$target]); file_put_contents(GROUPS_FILE, json_encode($groups, JSON_UNESCAPED_UNICODE), LOCK_EX); writeLog($currentUser, 'group_request_' . $action, $groupName . ' / ' . $target); echo json_encode(['success'=>true]); exit; } if ($_GET['action'] === 'set_group_join_mode') { $groupName = trim($_POST['group'] ?? ''); $mode = trim($_POST['mode'] ?? ''); if ($groupName === '' || !in_array($mode, ['free', 'apply'])) { http_response_code(400); echo json_encode(['error'=>'参数错误']); exit; } $groups = json_decode(file_get_contents(GROUPS_FILE), true) ?: []; if (!isset($groups[$groupName])) { http_response_code(400); echo json_encode(['error'=>'群不存在']); exit; } if (($groups[$groupName]['created_by'] ?? '') !== $currentUser) { http_response_code(403); echo json_encode(['error'=>'仅群主可设置']); exit; } $groups[$groupName]['join_mode'] = $mode; file_put_contents(GROUPS_FILE, json_encode($groups, JSON_UNESCAPED_UNICODE), LOCK_EX); writeLog($currentUser, 'set_group_join_mode', $groupName . ' / ' . $mode); echo json_encode(['success'=>true]); exit; } // 群主开关：新成员能否看到"入群之前"的群聊记录。默认禁止，与 QQ 群的默认行为一致。 if ($_GET['action'] === 'set_group_history_visible') { $groupName = trim($_POST['group'] ?? ''); $visible = ($_POST['visible'] ?? '0') === '1'; if ($groupName === '') { http_response_code(400); echo json_encode(['error'=>'参数错误']); exit; } $groups = json_decode(file_get_contents(GROUPS_FILE), true) ?: []; if (!isset($groups[$groupName])) { http_response_code(400); echo json_encode(['error'=>'群不存在']); exit; } if (($groups[$groupName]['created_by'] ?? '') !== $currentUser) { http_response_code(403); echo json_encode(['error'=>'仅群主可设置']); exit; } $groups[$groupName]['history_visible'] = $visible; file_put_contents(GROUPS_FILE, json_encode($groups, JSON_UNESCAPED_UNICODE), LOCK_EX); writeLog($currentUser, 'set_group_history_visible', $groupName . ' / ' . ($visible ? '允许' : '禁止') . '新成员查看入群前记录'); echo json_encode(['success'=>true, 'history_visible'=>$visible]); exit; } if ($_GET['action'] === 'change_password') { $old = $_POST['old'] ?? ''; $new = $_POST['new'] ?? ''; $confirm = $_POST['confirm'] ?? ''; $users = json_decode(file_get_contents(USERS_FILE), true) ?: []; if (!isset($users[$currentUser]) || !password_verify($old, $users[$currentUser])) { http_response_code(400); echo json_encode(['error'=>'原密码错误']); exit; } if (strlen($new) < 6) { http_response_code(400); echo json_encode(['error'=>'新密码至少6位']); exit; } if ($new !== $confirm) { http_response_code(400); echo json_encode(['error'=>'两次密码不一致']); exit; } $users[$currentUser] = password_hash($new, PASSWORD_DEFAULT); file_put_contents(USERS_FILE, json_encode($users, JSON_UNESCAPED_UNICODE), LOCK_EX); // 改密码是"凭据泄露后的自救动作"：必须吊销该账号所有长期凭据， // 否则此前在别处登录得到的长期凭据仍然有效，改密码就白改了。 revokeRememberTokens($currentUser); writeLog($currentUser, 'password_changed', '修改密码，已吊销该账号全部长期登录凭据'); echo json_encode(['success'=>true]); exit; } if ($_GET['action'] === 'edit_message') { session_write_close(); $room = trim($_POST['room'] ?? '公共聊天'); $id = intval($_POST['id'] ?? 0); $newText = trim($_POST['message'] ?? ''); if ($id <= 0 || $newText === '') { http_response_code(400); echo json_encode(['error'=>'参数错误']); exit; } $newText = filterSensitive(mb_substr($newText, 0, 500)); $fp = fopen(MESSAGES_FILE, 'c+'); if (!$fp) { http_response_code(500); echo json_encode(['error'=>'服务器错误']); exit; } flock($fp, LOCK_EX); $messages = json_decode(stream_get_contents($fp), true) ?: []; $found = false; foreach ($messages as &$msg) { if ($msg['id'] == $id && $msg['username'] === $currentUser) { if (time() - ($msg['timestamp'] ?? 0) > RECALL_TIME_LIMIT) { flock($fp, LOCK_UN); fclose($fp); http_response_code(400); echo json_encode(['error'=>'超过2分钟无法编辑']); exit; } $msg['message'] = $newText; $msg['edited'] = true; $msg['edited_at'] = time(); $found = true; break; } } unset($msg); if (!$found) { flock($fp, LOCK_UN); fclose($fp); http_response_code(403); echo json_encode(['error'=>'无权编辑']); exit; } ftruncate($fp, 0); rewind($fp); fwrite($fp, json_encode($messages, JSON_UNESCAPED_UNICODE)); fflush($fp); flock($fp, LOCK_UN); fclose($fp); echo json_encode(['success'=>true, 'edited_id'=>$id, 'new_message'=>$newText]); exit; } if ($_GET['action'] === 'set_announcement') { $groupName = trim($_POST['group'] ?? ''); $content = trim($_POST['content'] ?? ''); if ($groupName === '') { http_response_code(400); echo json_encode(['error'=>'参数错误']); exit; } $groups = json_decode(file_get_contents(GROUPS_FILE), true) ?: []; if (!isset($groups[$groupName])) { http_response_code(400); echo json_encode(['error'=>'群不存在']); exit; } if (($groups[$groupName]['created_by'] ?? '') !== $currentUser) { http_response_code(403); echo json_encode(['error'=>'仅群主可设置公告']); exit; } if ($content === '') { unset($groups[$groupName]['announcement']); } else { $groups[$groupName]['announcement'] = ['content'=>$content, 'set_by'=>$currentUser, 'set_at'=>time()]; } file_put_contents(GROUPS_FILE, json_encode($groups, JSON_UNESCAPED_UNICODE), LOCK_EX); echo json_encode(['success'=>true]); exit; } if ($_GET['action'] === 'get_announcement') { $groupName = trim($_GET['group'] ?? ''); if ($groupName === '') { http_response_code(400); echo json_encode(['error'=>'参数错误']); exit; } $groups = json_decode(file_get_contents(GROUPS_FILE), true) ?: []; if (!isset($groups[$groupName])) { http_response_code(400); echo json_encode(['error'=>'群不存在']); exit; } $ann = $groups[$groupName]['announcement'] ?? null; echo json_encode(['announcement'=>$ann]); exit; } if ($_GET['action'] === 'set_pin_msg') { session_write_close(); $groupName = trim($_POST['group'] ?? ''); $msgId = intval($_POST['id'] ?? 0); $content = trim($_POST['content'] ?? ''); $username = trim($_POST['username'] ?? ''); if ($groupName === '' || $msgId <= 0) { http_response_code(400); echo json_encode(['error'=>'参数错误']); exit; } $groups = json_decode(file_get_contents(GROUPS_FILE), true) ?: []; if (!isset($groups[$groupName])) { http_response_code(400); echo json_encode(['error'=>'群不存在']); exit; } $isCreator = ($groups[$groupName]['created_by'] ?? '') === $currentUser; $isAdmin = listHasUser($groups[$groupName]['admins'] ?? [], $currentUser); if (!$isCreator && !$isAdmin) { http_response_code(403); echo json_encode(['error'=>'仅群主或管理员可置顶消息']); exit; } $groups[$groupName]['pinned_msg'] = [ 'id'=>$msgId, 'username'=>$username, 'content'=>mb_substr($content, 0, 200), 'by'=>$currentUser, 'time'=>time() ]; file_put_contents(GROUPS_FILE, json_encode($groups, JSON_UNESCAPED_UNICODE), LOCK_EX); writeLog($currentUser, 'pin_msg', $groupName . ' 置顶消息 #' . $msgId); echo json_encode(['success'=>true]); exit; } if ($_GET['action'] === 'remove_pin_msg') { session_write_close(); $groupName = trim($_POST['group'] ?? ''); if ($groupName === '') { http_response_code(400); echo json_encode(['error'=>'参数错误']); exit; } $groups = json_decode(file_get_contents(GROUPS_FILE), true) ?: []; if (!isset($groups[$groupName])) { http_response_code(400); echo json_encode(['error'=>'群不存在']); exit; } $isCreator = ($groups[$groupName]['created_by'] ?? '') === $currentUser; $isAdmin = listHasUser($groups[$groupName]['admins'] ?? [], $currentUser); if (!$isCreator && !$isAdmin) { http_response_code(403); echo json_encode(['error'=>'仅群主或管理员可取消置顶']); exit; } unset($groups[$groupName]['pinned_msg']); file_put_contents(GROUPS_FILE, json_encode($groups, JSON_UNESCAPED_UNICODE), LOCK_EX); writeLog($currentUser, 'unpin_msg', $groupName . ' 取消置顶'); echo json_encode(['success'=>true]); exit; } http_response_code(400); echo json_encode(['error'=>'无效操作']); exit; } // 页面加载路径同样要执行单设备校验：否则被顶下线的设备只要刷新一下， // 又能看到完整的聊天界面（轮询虽然会把他踢掉，但那一瞬间界面是好的，观感很糟）。 $authNotice = ''; if (ENFORCE_SINGLE_SESSION && isset($_SESSION['username'])) { $__pageReplaced = authCheckActiveSession($_SESSION['username']); if ($__pageReplaced) { writeLog($_SESSION['username'], 'session_replaced', '页面加载时发现本会话已被其他设备的新登录顶下线'); // 只清本机的会话与凭据。这里绝不能吊销该账号的全部凭据 —— // 那会把"刚在另一台设备上登录成功"的新会话也一并废掉，等于把用户锁在门外。 $_SESSION = []; session_destroy(); setRememberCookie('', 0); $authNotice = '该账号已在其他设备登录，你已被下线'; } } if (!isset($_SESSION['username'])): ?> 登录 - 聊天室

登录

没有账号？注册
ChatRoom - 聊天室
公共聊天
0 人在线
全部公告
已选 0 条
0"
手指上滑，取消发送
图片预览
预览
发送文件
点击这里选择文件
也可以把文件从桌面直接拖进来（拖到聊天区松手即可发送）
还没有选择文件
松开即可发送文件
支持多选文件与整个文件夹
00:00
预览

编辑消息