服务端API安全解决方案详解编程语言

<?php 
public function getGoodsList($params) 
{ 
    $where = [ 
       'cat_id'=>$params['cat_id'] 
    ]; 
    $goods = M('Goods')->where($where)->select(); 
    return json_encode($goods); 
}

<?php 
public function getUserInfo($params, $appKey, $sign) 
{$currentSign = $this->getSign($appKey, $params); 
    if($sign !== $currentSign) { 
        return "签名不合法"; 
    } 
    $where = ['id'=>$params['id']]; 
    $user = M('User')->where($where)->select(); 
    return json_encode($user); 
}

<?php 
 
public function getUserInfo($params, $appKey, $sign, $timestamp) 
{ 
    //判断请求是否过期---假设过期时间是20秒 
    $request_time = getDateTimeByTicks($timestamp); 
    if(($request_time + 20) < $_SERVER["REQUEST_TIME"]) { 
        return "接口过期"; 
    } 
     
    $currentSign = $this->getSign($appKey, $params); 
 
    if($sign !== $currentSign) { 
        return "签名不合法"; 
    } 
     
    $where = [ 
       'id'=>$params['id'] 
    ]; 
    $user = M('User')->where($where)->select(); 
    return json_encode($user); 
} 
 

<?php 
public function updateUserInfo($params, $appKey, $sign, $timestamp) 
{ 
 
    $requestTime = getDateTimeByTicks($timestamp); 
    if(($requestTime + 20) < $_SERVER["REQUEST_TIME"]) { 
        return "接口过期"; 
    } 
 
    // 根据appkey查库获取appSecret值 
    $appSecret = M('Setting')->where(['appKey'=> $appKey])->getField('appSecret'); 
     
    //检验签名是否合法 
    $currentSign = $this->getSign($appKey, $appSecret, $params); 
 
    if($sign !== $currentSign) { 
        return "签名不合法"; 
    } 
     
    $where = ['id'=>$params['id']]; 
    unset($params['id']); 
    $data = M('User')->where($where)->save($params); 
    return json_encode($data); 
}