// Password 修改登录密码
func (m *ProfileController) Password() {
admin := models.Admin{Account: m.userName}
if err := orm.NewOrm().Read(&admin, "Account"); err != nil {
m.error(err.Error())
}
if m.Ctx.Request.Method == "POST" {
var errmsg string
oldPassword := strings.TrimSpace(m.GetString("old-password"))
newPassword := strings.TrimSpace(m.GetString("new-password"))
confirmPassword := strings.TrimSpace(m.GetString("confirm-password"))
if newPassword != "" {
if oldPassword == "" || toolkit.SHA256([]byte(oldPassword)) != admin.Password {
errmsg = "原密码输入错误"
} else if len(newPassword) < 6 {
errmsg = "密码长度不能少于6个字符"
} else if newPassword != confirmPassword {
errmsg = "两次输入的密码不一致"
}
if len(errmsg) == 0 {
admin.Password = toolkit.SHA256([]byte(newPassword))
admin.Update("password")
m.Data["result"] = true
} else {
m.Data["errmsg"] = errmsg
}
}
}
m.Data["admin"] = admin
m.display("password")
}
// Login 登录处理
func (m *ProfileController) Login() {
if m.Ctx.Request.Method == "GET" {
} else if m.Ctx.Request.Method == "POST" {
account := strings.TrimSpace(m.GetString("account"))
password := strings.TrimSpace(m.GetString("password"))
remember := m.GetString("remember")
// fmt.Println("account = " + account)
// fmt.Println("password = "******"" && password != "" {
var admin models.Admin
admin.Account = account
// if account == "admin" && password == "123456" {
// admin.NickName = "我是管理员"
// admin.LastIP = m.GetClientIP()
// admin.Password = toolkit.SHA256([]byte(password))
// admin.LastTime = toolkit.GetTime()
// admin.Token = toolkit.GenUID()
// admin.Email = "*****@*****.**"
// admin.Status = 1
// admin.Head = "default.png"
// admin.Insert()
// m.Redirect(beego.AppConfig.String("adminurl"), 302)
// return
// }
if admin.Read("account") != nil || admin.Password != toolkit.SHA256([]byte(password)) {
// 用户名或密码输入错误
fmt.Println("账号或密码填写错误")
m.Data["errmsg"] = "账号或密码填写错误"
} else {
// 登录成功
token := toolkit.GenUID()
admin.LastIP = m.GetClientIP()
admin.LastTime = toolkit.GetTime()
admin.Token = token
admin.Update()
key := []byte(beego.AppConfig.String("aeskey"))
result, err := toolkit.AesEncrypt([]byte(m.GetClientIP()+"|"+token), key)
if err != nil {
return
}
auth := base64.StdEncoding.EncodeToString(result)
fmt.Println("auth = " + auth)
if remember == "yes" {
m.Ctx.SetCookie("auth", auth, 7*86400)
} else {
m.Ctx.SetCookie("auth", auth)
}
m.Redirect(beego.AppConfig.String("adminurl"), 302)
}
} else {
// 用户名或密码为空
fmt.Println("账号或密码为空")
m.Data["errmsg"] = "账号或密码不能为空"
}
}
m.TplName = beego.AppConfig.String("adminpath") + "/login.html"
}