验签过期，与医生接口

application/api/controller/Demo.php

@@ -88,9 +88,10 @@ class Demo extends Api
     public function test3()
     {
         $tv_userid = input('tv_userid');
+        $tv_signtime = input('tv_signtime');
 
         $salt = 'be7bcf1499b0fec801406f6aafbd04c4';
-        $get_sign = md5(md5($tv_userid) . $salt);
+        $get_sign = md5(md5($tv_userid) . $tv_signtime . $salt);
 
         dump($get_sign);
     }

application/api/controller/tvuser/Tvdoctor.php

@@ -12,8 +12,6 @@ class Tvdoctor extends Apitv
     protected $noNeedLogin = ['*'];
     protected $noNeedRight = ['*'];
 
-    protected $Dbapp;
-
     //科室列表
     public function keshi_list(){
         $list = Db::name('keshi')->where('is_show',1)->order('weigh','desc')->select();
@@ -36,17 +34,24 @@ class Tvdoctor extends Apitv
             $where['d.keshi_id'] = $keshi_id;
         }
 
+        //关注
+        $folllow = input('follow',0);
+        if($folllow){
+            $my_follow_ids = controller('Userfollow')->my_follow_uids();
+            $where['d.id'] = ['IN',$my_follow_ids];
+        }
+
         $field = [
             'd.id','d.nickname','d.avatar','d.keshi_id','d.level_id','d.hospital','d.goodat',
             'keshi.name as keshi_name',
             'level.name as level_name',
         ];
-        $list = $this->Dbapp->name('doctor')->alias('d')
+        $list = Db::name('doctor')->alias('d')
             ->field($field)
             ->join('doctor_level level','d.level_id = level.id','LEFT')
             ->join('keshi','d.keshi_id = keshi.id','LEFT')
             ->join('doctor_info info','d.id = info.doctor_id','LEFT')
-            ->where($where)->order('d.ordernum desc')->page($this->page,$this->pagenum)->select();
+            ->where($where)->order('d.ordernum desc')->autopage()->select();
         $list = list_domain_image($list,['avatar']);
 
         $this->success(1,$list);
@@ -61,7 +66,7 @@ class Tvdoctor extends Apitv
             'keshi.name as keshi_name',
             'level.name as level_name',
         ];
-        $info = $this->Dbapp->name('doctor')->alias('d')
+        $info = Db::name('doctor')->alias('d')
             ->field($field)
             ->join('doctor_level level','d.level_id = level.id','LEFT')
             ->join('keshi','d.keshi_id = keshi.id','LEFT')

application/common/controller/Apitv.php

@@ -94,20 +94,24 @@ class Apitv
         }
     }
 
-    //电视盒子用户登录
+    //电视盒子用户登录。本来打算让前端自己走一次登录接口，用token来访问，因为容易混淆token，还是传三个参
     private function tvuser_login(){
-        $tv_userid = input('tv_userid','');
-        $tv_sign   = input('tv_sign','');
-        if(empty($tv_userid) || empty($tv_sign)){
+        $tv_userid   = input('tv_userid','');
+        $tv_signtime = input('tv_signtime','');
+        $tv_sign     = input('tv_sign','');
+        if(empty($tv_userid) || empty($tv_signtime) || empty($tv_sign)){
             $this->error('登录参数缺失');
         }
 
         //验签
         $salt = 'be7bcf1499b0fec801406f6aafbd04c4';
-        $get_sign = md5(md5($tv_userid) . $salt);
+        $get_sign = md5(md5($tv_userid) . $tv_signtime . $salt);
         if($tv_sign != $get_sign){
             $this->error('验签失败');
         }
+        if(time() - $tv_signtime > 300){
+            $this->error('验签过期');
+        }
 
         //找到用户
         $user = Db::name('user')->where('tv_userid',$tv_userid)->find();