9cc8998300
修复: 1. 后台无法查看生成的工单 2. 前端页面JS远程资源失效问题 3. 前台用户密码修改设计缺陷（Issued By 藏形匿影） 优化: 1. 多处代码提升二次开发可读性 新增: 1. 安全工单模块中动态更新功能
83 lines
2.2 KiB
PHP
83 lines
2.2 KiB
PHP
<?php
|
|
namespace User\Controller;
|
|
use Think\Controller;
|
|
|
|
/**
|
|
* @Author: Zhou Yuyang <1009465756@qq.com> 10:28 2016/12/03
|
|
* @Copyright 2015-2020 SISMO
|
|
* @Project homepage https://github.com/CNSISMO
|
|
* @Version 1.8
|
|
*/
|
|
|
|
class LoginController extends Controller {
|
|
//登陆主页
|
|
public function index(){
|
|
$tmodel= M('setting');
|
|
$title = $tmodel->where('id=1')->select();
|
|
$this->assign('title', $title);
|
|
$this->display();
|
|
}
|
|
//登陆验证
|
|
public function login(){
|
|
if(!IS_POST)$this->error("非法请求");
|
|
$member = M('member');
|
|
$username = I('username','','htmlspecialchars');
|
|
$password = I('password');
|
|
$code = I('verify','','strtolower');
|
|
//验证验证码是否正确
|
|
if(!($this->check_verify($code))){
|
|
$this->error('验证码错误');
|
|
}
|
|
|
|
$user = $member->where(array('username'=>$username))->find();
|
|
|
|
|
|
if($user['password'] != md5(md5(md5($user['salt']).md5($password)."SR")."CMS")) {
|
|
$this->error('账号或密码错误 :(') ;
|
|
}
|
|
// 验证账户是否被禁用
|
|
if($user['status'] == 0){
|
|
$this->error('账号被禁用，请联系网站管理员 :(') ;
|
|
}
|
|
|
|
//更新登陆信息
|
|
$data =array(
|
|
'id' => $user['id'],
|
|
'update_at' => time(),
|
|
'login_ip' => get_client_ip(),
|
|
);
|
|
|
|
//如果数据更新成功 跳转到后台主页
|
|
if($member->save($data)){
|
|
session('userId',$user['id']);
|
|
session('username',$user['username']);
|
|
// session('token',md5(time().$user['salt']));
|
|
$this->success("登陆成功",U('Index/index'));
|
|
}
|
|
//定向之后台主页
|
|
|
|
|
|
}
|
|
|
|
//验证码
|
|
public function verify(){
|
|
ob_clean();
|
|
$Verify = new \Think\Verify();
|
|
$Verify->codeSet = '123456789abcdefg';
|
|
$Verify->fontSize = 16;
|
|
$Verify->length = 4;
|
|
$Verify->entry();
|
|
}
|
|
protected function check_verify($code){
|
|
$verify = new \Think\Verify();
|
|
return $verify->check($code);
|
|
}
|
|
|
|
|
|
//退出登录
|
|
public function logout(){
|
|
session('userId',null);
|
|
session('username',null);
|
|
redirect(U('Login/index'));
|
|
}
|
|
} |