!$code && json_fail('获取code失败');
$url = 'https://api.weixin.qq.com/sns/jscode2session?appid=' . config('xiaocx_app_id') . '&secret=' . config('xiaocx_app_secret') . '&js_code=' . $code . '&grant_type=authorization_code';
$info = http_curl($url, 'get');
if(isset($info['errcode'])){
Error::addInfo(1,99,json_encode($info));
json_fail($info['errmsg']);
}
if (!empty($info['openid'])) {
$user = new User();
$channel = new Channel();
$dayPoster = new DayPoster();
$userDetail = $user->field('id,unionid,is_task')->where(array('openid' => $info['openid'], 'status' => 1))->find();
$content = '授权自主';
$pid = 0;
if (!$userDetail) {
login的接口被攻击了吗,真code 还是假code呢
https://developers.weixin.qq.com/miniprogram/dev/OpenApiDoc/sec-center/safety-control-capability/getUserRiskRank.html