<?php require 'access_token.php';?>
<?php
$corpid="wx248505bfbab6d0c1";
$access_token=GetAccess_token_1000006();
//echo $access_token;

//微信OA用户验证
$code=empty($_REQUEST['code'])!=false ? "" : addslashes($_REQUEST['code']);
$NewAdmin=empty($_REQUEST['NewAdmin'])!=false ? "" : addslashes($_REQUEST['NewAdmin']);
if (!empty($code)){
	$api_url="https://qyapi.weixin.qq.com/cgi-bin/user/getuserinfo?access_token=$access_token&code=$code";
	//echo $api_url;exit;
	$api_info=file_get_contents($api_url);
	$api_info=json_decode($api_info,true);
	if (!empty($api_info["UserId"])) {
		$wx_UserId = $api_info["UserId"];
		$sql="select OA_User,OA_User_ID,OA_Power=isnull(OA_Power,''),OA_execLevel,OA_OrderClass,OA_DepartmentID,OA_Name from OA_User where OA_execLevel>-1 and OA_weixinUserID='$wx_UserId'";
		$data = sqlsrv_query($conn,$sql);
		if($data == true){
			if (sqlsrv_rows_affected($data)!=0) {while($rs = sqlsrv_fetch_array($data) ) {
				$admin	= $rs["OA_User"];
				$adminID	= $rs["OA_User_ID"];
				$admin_Power	= $rs["OA_Power"];
				$admin_execLevel	= $rs["OA_execLevel"];
				$adminDepartmentID	= $rs["OA_DepartmentID"];
				$adminName	= $rs["OA_Name"];
				if (!empty(strstr($admin_Power,"020114"))) {
					$sql="select stuff((select ','+vOrder2 from dictionary where vtitle='OrderClass' and vType>0 for xml path('')),1,1,'')";
					$IPdata = sqlsrv_query($conn,$sql);
					if($IPdata == true){if (sqlsrv_rows_affected($IPdata)!=0) {
						while($IPrs = sqlsrv_fetch_array($IPdata) ) {$admin_OrderClass=$IPrs[0];}
					}}
				}else{
					$admin_OrderClass=$rs["OA_OrderClass"];
				}
				setcookie("CAME", "admin_OrderClass=".$admin_OrderClass."&admin_execLevel=".$admin_execLevel."&admin_Power=".$admin_Power."&adminDepartmentID=".$adminDepartmentID."&adminID=".$adminID."&admin=".$admin."&adminName=".$adminName, time()+28800);
			}}else{
				header("Location: /"); exit;
			}
		}
	}else{
		header("Location: /"); exit;
	}
}

if (!empty($adminID)) {
	//用户登陆&记录在线用户	

}else{
	If (!empty($_SERVER['QUERY_STRING'])) {
	  $state=str_replace("&","|",$_SERVER['QUERY_STRING']);
	}else{
	  $state="";
	}
	
	header("Location: https://open.weixin.qq.com/connect/oauth2/authorize?appid=$corpid&redirect_uri=https://".$_SERVER['HTTP_HOST'].$_SERVER['PHP_SELF']."&response_type=code&scope=SCOPE&state=".$state."#wechat_redirect"); exit;
}
?>