PHP调用QQ互联接口实现QQ登录网站功能示例

<?php
header("Content-Type: text/html;charset=utf-8");
//应用APP ID
$app_id = "101486017";
//应用APP Key
$app_secret = "13a1811780f29d7a5b64e598c38a4494";
//应用填写的网站回调域
$my_url = "http://www.msllws.top/qqlogin";
//Step1：获取Authorization Code
session_start();
$code = $_REQUEST["code"];//存放Authorization Code
if(empty($code)) {
//state参数用于防止CSRF攻击，成功授权后回调时原样带回
$_SESSION['state'] = md5(uniqid(rand(), TRUE));
//拼接URL
$dialog_url = "https://graph.qq.com/oauth2.0/authorize?response_type=code&client_id=".$app_id."&redirect_uri=".urlencode($my_url)."&state=".$_SESSION['state'];
echo("<script  top.location.href='".$dialog_url."'</script ");
}
//Step2：通过Authorization Code获取Access Token
if($_REQUEST['state'] == $_SESSION['state'] || 1) {
//拼接URL
$token_url = "https://graph.qq.com/oauth2.0/token?grant_type=authorization_code&"."client_id=".$app_id."&redirect_uri=".urlencode($my_url)."&client_secret=".$app_secret."&code=".$code;
$response = file_get_contents($token_url);
//如果用户临时改变主意取消登录，返回true!==false,否则执行step3 
if (strpos($response, "callback") !== false) {
$lpos = strpos($response, "(");
$rpos = strrpos($response, ")");
$response = substr($response, $lpos + 1, $rpos - $lpos -1);
$msg = json_decode($response);
if (isset($msg- error)) {
echo "<h3 error:</h3 ".$msg- error;
echo "<h3 msg :</h3 ".$msg- error_description;
exit;
}
}
//Step3：使用Access Token来获取用户的OpenID
$params = array();
parse_str($response, $params);//把传回来的数据参数变量化
$graph_url = "https://graph.qq.com/oauth2.0/me?access_token=".$params['access_token'];
$str = file_get_contents($graph_url);
if (strpos($str, "callback") !== false) {
$lpos = strpos($str, "(");
$rpos = strrpos($str, ")");
$str = substr($str, $lpos + 1, $rpos - $lpos -1);
}
$user = json_decode($str);//存放返回的数据 client_id ，openid
if (isset($user- error)) {
echo "<h3 error:</h3 ".$user- error;
echo "<h3 msg :</h3 ".$user- error_description;
exit;
}
//Step4：使用openid和access_token获取用户信息
$user_data_url = "https://graph.qq.com/user/get_user_info?access_token={$params['access_token']}&oauth_consumer_key={$app_id}&openid={$user- openid}&format=json";
$user_data = file_get_contents($user_data_url);//获取到的用户信息
//以下为授权成功后的自定义操作
if($user_data){
// ......
echo("<script  top.location.href='http://www.msllws.top'</script ");
}else{
echo '未知错误';
}
}else{
echo("The state does not match. You may be a victim of CSRF.");
}