bozhihouc/SRCMS
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

SRCMS V2 开发版

Browse Source 
唯一的改变就是万变，重新定义安全应急响应中心。
This commit is contained in:
Martin Zhou
2017-02-03 12:32:57 +08:00
parent 0ad6b00156
commit 684da35950
505 changed files with 88079 additions and 3292 deletions
Download Patch File Download Diff File Expand all files Collapse all files

61
Application/User/Controller/LoginController.class.php
View File

@@ -3,12 +3,13 @@ namespace User\Controller;
use Think\Controller;
/**
* @Author: Zhou Yuyang <1009465756@qq.com> 10:28 2016/12/03
* @Author: Zhou Yuyang <1009465756@qq.com> 10:28 2017/02/02
* @Copyright 2015-2020 SISMO
* @Project homepage https://github.com/CNSISMO
* @Version 1.8
* @Version 2.0
*/
class LoginController extends Controller {
//登陆主页
public function index(){
@@ -17,45 +18,59 @@ class LoginController extends Controller {
$this->assign('title', $title);
$this->display();
}
public function svalid(){
$email =I('get.email','','email');
$this->assign('email', $email);
$this->display();
}
public function valid(){
if(!IS_POST){$this->error("非法请求");}
$code = I('verify','','strtolower');
$email =I('get.email','','email');
$token = session('token');
$member = M('member');
$user = $member->where(array('email'=>$email))->find();
if($token != $user['token']){$this->error("非法请求");}
//验证验证码是否正确
if(!($this->check_verify($code))){
session('userId',null);
session('username',null);
$this->error('验证码错误',U('Login/index'));
}
//如果验证码校验成功 跳转到后台主页
session('userId',$user['id']);
session('username',$user['username']);
$this->success("登陆成功",U('Index/index'));
}
//登陆验证
public function login(){
if(!IS_POST)$this->error("非法请求");
if(!IS_POST){$this->error("非法请求");}
$member = M('member');
$username = I('username','','htmlspecialchars');
$password = I('password');
$code = I('verify','','strtolower');
//验证验证码是否正确
if(!($this->check_verify($code))){
$this->error('验证码错误');
}
$user = $member->where(array('username'=>$username))->find();
if($user['password'] != md5(md5(md5($user['salt']).md5($password)."SR")."CMS")) {
$this->error('账号或密码错误 :(') ;
}
// 验证账户是否被禁用
if($user['status'] == 0){
$this->error('账号被禁用，请联系网站管理员 :(') ;
$this->error('账号被禁用，请联系管理员 :(') ;
}
$token = md5(md5($user['email'].time()).time());
//更新登陆信息
$data =array(
'id' => $user['id'],
'update_at' => time(),
'login_ip' => get_client_ip(),
'token' => $token,
);
//如果数据更新成功 跳转到后台主页
//登陆成功
if($member->save($data)){
session('userId',$user['id']);
session('username',$user['username']);
// session('token',md5(time().$user['salt']));
$this->success("登陆成功",U('Index/index'));
}
//定向之后台主页
session('token',$token);
$this->success("请先完成验证",U('Login/svalid?email=').$user['email']);
}
}