v1.0.10

2026-08-03 00:07:01 +08:00
commit 71c6e8d9c1
112 changed files with 7815 additions and 0 deletions
@@ -0,0 +1,37 @@
+<?php
+/**
+ * 找回密码接口  POST /api/auth/forgot.php
+ * 入参：username / contact_email
+ * 说明：占位实现 —— 校验账号存在后返回成功（后续可接入 SMTP 发送重置邮件/短信验证码）。
+ */
+require_once __DIR__ . '/../common/db.php';
+require_once __DIR__ . '/../common/response.php';
+require_once __DIR__ . '/../common/logger.php';
+
+if ($_SERVER['REQUEST_METHOD'] !== 'POST') {
+    Response::error('请求方式错误', 400);
+}
+
+$username     = trim($_POST['username'] ?? '');
+$contactEmail = trim($_POST['contact_email'] ?? '');
+
+if ($username === '' || $contactEmail === '') {
+    Response::error('请输入账号和联系邮箱');
+}
+if (!filter_var($contactEmail, FILTER_VALIDATE_EMAIL)) {
+    Response::error('邮箱格式不正确');
+}
+
+$pdo = DB::getInstance()->getPdo();
+$stmt = $pdo->prepare("SELECT id, username, real_name FROM system_users WHERE username = ? AND is_active = 1 LIMIT 1");
+$stmt->execute([$username]);
+$user = $stmt->fetch();
+
+if (!$user) {
+    Response::error('账号不存在或已禁用');
+}
+
+// TODO: 接入 SMTP 后向 contactEmail 发送重置链接/验证码
+logAction((int)$user['id'], $user['username'], 'forgot', 'auth', 'system_users', (int)$user['id'], ['contact_email' => $contactEmail]);
+
+Response::success(null, '重置邮件已发送（占位实现，请接入SMTP后生效）');