yii2 的登录注册轮子

//利用到了yii2 框架之中的验证规则进行判定而已也不是很高深的东西但是使用框架自身的轮子会有安全性能的隐患

1注册reg controller 中我都以admin 为例子

public function actionAdd()

    {

        $model = new  Admin();

        if (Yii::$app->request->isPost) {

            $post = Yii::$app->request->post();

            if ($re=($model->reg($post))) {

                Yii::$app->session->setFlash('info','添加成功');

                return $this->refresh();

            }

            Yii::$app->session->setFlash('info','添加失败');

        }

        return $this->render('add',['model'=>$model]);

    }

2.1 model

 public function reg($data)

    {

        $this->scenario = 'adminadd';

        if ($this->load($data) && $this->validate()) {

            $this->adminpass = Yii::$app->getSecurity()->generatePasswordHash($this->adminpass); //这儿使用到了yii框架的hash 密码 获取的时候使用validatepassword 验证

            $this->createtime = time();

            if ($this->save(false)) {

                return true;

            }

            return false;

        }

        return false;

    }

2.2 model 中的rules 验证规则

public function rules()

    {

        return [

            ['adminuser', 'required', 'message' => '管理员账号不能为空', 'on' => ['login', 'seekpass', 'changepass', 'adminadd', 'changeemail']],

            ['adminpass', 'required', 'message' => '管理员密码不能为空', 'on' => ['login', 'changepass', 'adminadd', 'changeemail']],

            ['rememberMe', 'boolean', 'on' => 'login'],

            ['adminpass', 'validatePass', 'on' => ['login', 'changeemail']],

            ['adminpass', 'validatePassword', 'on' => ['login']],

            ['adminemail', 'required', 'message' => '电子邮箱不能为空', 'on' => ['seekpass', 'adminadd', 'changeemail']],

            ['adminemail', 'email', 'message' => '电子邮箱格式不正确', 'on' => ['seekpass', 'adminadd', 'changeemail']],

            ['adminemail', 'unique', 'message' => '电子邮箱已被注册', 'on' => ['adminadd', 'changeemail']],

            ['adminuser', 'unique', 'message' => '管理员已被注册', 'on' => 'adminadd'],

            ['adminemail', 'validateEmail', 'on' => 'seekpass'],

            ['repass', 'required', 'message' => '确认密码不能为空', 'on' => ['changepass', 'adminadd']],

            ['repass', 'compare', 'compareAttribute' => 'adminpass', 'message' => '两次密码输入不一致', 'on' => ['changepass', 'adminadd']],

        ];

    }

3 view 页面的展示这个不重要

<?php

use yii\bootstrap\ActiveForm;

use yii\helpers\Html;

$this->title = '注册';

?>

<!-- main container -->

<div class="container-fluid">

    <div id="pad-wrapper" class="new-user">

        <div class="row-fluid header">

            <h3>注册员工</h3>

        </div>

        <div class="row-fluid form-wrapper">

            <!-- left column -->

            <div class="span9 with-sidebar">

                <div class="container">

                    <?php

                    if (Yii::$app->session->hasFlash('info')) {

                        echo Yii::$app->session->getFlash('info');

                    }

                    $form = ActiveForm::begin([

                        'options' => ['class' => 'new_user_form inline-input'],

                        'fieldConfig' => [

                            'template' => '<div class="span12 field-box">{label}{input}</div>{error}'

                        ],

                    ]);

                    ?>

                    <?php echo $form->field($model, 'adminuser')->textInput(['class' => 'span9']); ?>

                    <?php echo $form->field($model, 'adminemail')->textInput(['class' => 'span9']); ?>

                    <?php echo $form->field($model, 'adminpass')->passwordInput(['class' => 'span9']); ?>

                    <?php echo $form->field($model, 'repass')->passwordInput(['class' => 'span9']); ?>

                    <div class="span11 field-box actions">

                        <?php echo Html::submitButton('创建', ['class' => 'btn-glow primary']); ?>

                        <span>或者</span>

                        <?php echo Html::resetButton('取消', ['class' => 'reset']); ?>

                    </div>

                    <?php ActiveForm::end(); ?>

                </div>

            </div>

            <!-- side right column -->

            <div class="span3 form-sidebar pull-right">

                <div class="alert alert-info hidden-tablet">

                    <i class="icon-lightbulb pull-left"></i>

                    请在左侧填写员工相关信息，包括员工账号，电子邮箱，以及密码

                </div>

            </div>

        </div>

    </div>

</div>

</div>

<!-- end main container -->

/-----------------------以上就是简单的注册功能-----------------------------------------------------------------

// 登陆功能 login

controller 中

public function actionLogin()

    {

        $this->layout =false;

        $model = new Admin();

        //登录操作

        if (Yii::$app->request->isPost) {

            //获得数据信息

            $post = Yii::$app->request->post();

            if ($model->login($post)) {

                $this->redirect(['default/index']);

                Yii::$app->end();

            }

        }

        return $this->render('login',['model'=>$model]);

    }

model

注意查看我上面的验证规则一点要看清楚我自定义了两个验证规则验证用户是否存在和密码不匹配的这两种情况

自定义验证1

 public function validatePass()

    {

        if (!$this->hasErrors()) {

            $data = self::find()->where('adminuser = :user', [":user" => $this->adminuser])->one();

            if (is_null($data)) {

                $this->addError("adminpass", "用户或密码错误");

                return false;

            }

            if (!Yii::$app->getSecurity()->validatePassword($this->adminpass, $data->adminpass))

            {

                $this->addError("adminpass", "用户或密码错误");

            }

        }

    }

自定义验证2

public function validatePassword(){

        if (!$this->hasErrors()) {

            $data = self::find()->where('adminuser = :user', [':user' => $this->adminuser])->one();

            if (is_null($data)) {

                $this->addError('adminpass','用户名不存在');

                exit;

            }

            $data2 = self::find()->where('adminuser=:user and adminpass = :pass',[':user'=>$this->adminuser,':pass'=>$data->adminpass])->one();

            if (is_null($data2)) {

                $this->addError('adminpass','密码错误');

            }

        }

    }

model中的login代码

  public function login($data)

    {

        $this->scenario = "login";

        if ($this->load($data) && $this->validate()) {

            $lifetime = $this->rememberMe ? 24*3600 : 0;

            $session = Yii::$app->session;

            session_set_cookie_params($lifetime);

            $session['admin'] = [

                'adminuser' => $this->adminuser,

                'isLogin' => 1,

            ];

            $this->updateAll(['logintime' => time(), 'loginip' => ip2long(Yii::$app->request->userIP)], 'adminuser = :user', [':user' => $this->adminuser]);

            return (bool)$session['admin']['isLogin'];

        }

        return false;

    }

<body class="login-bg">

    <?php $this->beginBody(); ?>

    <div class="row-fluid login-wrapper">

    <a class="brand" href="<?php echo yii\helpers\Url::to(['/index/index']) ?>"></a>

        <?php $form = ActiveForm::begin([

            'fieldConfig' => [

                'template' => '{error}{input}',

            ],

        ]); ?>

        <div class="span4 box">

            <div class="content-wrap">

                <h6>小涛商城 - 后台管理</h6>

                <?php echo $form->field($model, 'adminuser')->textInput(["class" => "span12", "placeholder" => "管理员账号"]); ?>

                <?php echo $form->field($model, 'adminpass')->passwordInput(["class" => "span12", "placeholder" => "管理员密码"]); ?>

                <a href="<?php echo yii\helpers\Url::to(['public/seekpassword']); ?>" class="forgot">忘记密码?</a>

                <?php echo $form->field($model, 'rememberMe')->checkbox([

                    'id' => 'remember-me',

                    'template' => '<div class="remember">{input}<label for="remember-me">记住我</label></div>',

                ]); ?>

                <?php echo Html::submitButton('登录', ["class" => "btn-glow primary login"]); ?>

            </div>

        </div>

        <?php ActiveForm::end(); ?>

    </div>

<?php

    $js = <<<JS

        $(function () {

            // bg switcher

            var \$btns = $(".bg-switch .bg");

            \$btns.click(function (e) {

                e.preventDefault();

                \$btns.removeClass("active");

                $(this).addClass("active");

                var bg = $(this).data("img");

                $("html").css("background-image", "url('img/bgs/" + bg + "')");

            });

        });

JS;

$this->registerJs($js);

?>

<?php $this->endBody(); ?>

</body>

巴特西

yii2 的登录注册轮子

最新文章

热门文章

巴特西

yii2 的登录注册 轮子

最新文章

热门文章

yii2 的登录注册轮子