admin/38320-vm
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

接码

Browse Source
This commit is contained in:
Flatlogic Bot 2026-02-10 11:08:21 +00:00
parent d0b702e8b2
commit d3d1a8600b
2 changed files with 68 additions and 35 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

58
auth.php
View File

@ -2,17 +2,34 @@
session_start(); session_start();
require_once __DIR__ . '/db/config.php'; require_once __DIR__ . '/db/config.php';
header('Content-Type: application/json');
$action = $_GET['action'] ?? ''; $action = $_GET['action'] ?? '';
if ($_SERVER['REQUEST_METHOD'] === 'POST') { if ($_SERVER['REQUEST_METHOD'] === 'POST') {
try {
$pdo = db(); $pdo = db();
if ($action === 'register') { if ($action === 'register') {
$username = trim($_POST['username']); $username = trim($_POST['username'] ?? '');
$password = $_POST['password']; $password = $_POST['password'] ?? '';
$confirm_password = $_POST['confirm_password']; $confirm_password = $_POST['confirm_password'] ?? '';
if (empty($username) || empty($password)) {
echo json_encode(['code' => 1, 'msg' => '用户名和密码不能为空']);
exit;
}
if ($password !== $confirm_password) { if ($password !== $confirm_password) {
die("Passwords do not match."); echo json_encode(['code' => 1, 'msg' => '两次输入的密码不一致']);
exit;
}
// Check if user exists
$stmt = $pdo->prepare("SELECT id FROM users WHERE username = ?");
$stmt->execute([$username]);
if ($stmt->fetch()) {
echo json_encode(['code' => 1, 'msg' => '用户名已存在']);
exit;
} }
$hash = password_hash($password, PASSWORD_DEFAULT); $hash = password_hash($password, PASSWORD_DEFAULT);
@ -22,17 +39,25 @@ if ($_SERVER['REQUEST_METHOD'] === 'POST') {
$count = $stmt->fetchColumn(); $count = $stmt->fetchColumn();
$role = ($count == 0) ? 'admin' : 'user'; $role = ($count == 0) ? 'admin' : 'user';
try {
$stmt = $pdo->prepare("INSERT INTO users (username, password_hash, role) VALUES (?, ?, ?)"); $stmt = $pdo->prepare("INSERT INTO users (username, password_hash, role) VALUES (?, ?, ?)");
$stmt->execute([$username, $hash, $role]); $stmt->execute([$username, $hash, $role]);
header('Location: index.php?registered=1');
// Auto login after registration
$userId = $pdo->lastInsertId();
$_SESSION['user_id'] = $userId;
$_SESSION['username'] = $username;
$_SESSION['role'] = $role;
echo json_encode(['code' => 0, 'msg' => '注册成功']);
exit; exit;
} catch (PDOException $e) {
die("Registration failed: " . $e->getMessage());
}
} elseif ($action === 'login') { } elseif ($action === 'login') {
$username = trim($_POST['username']); $username = trim($_POST['username'] ?? '');
$password = $_POST['password']; $password = $_POST['password'] ?? '';
if (empty($username) || empty($password)) {
echo json_encode(['code' => 1, 'msg' => '用户名和密码不能为空']);
exit;
}
$stmt = $pdo->prepare("SELECT * FROM users WHERE username = ?"); $stmt = $pdo->prepare("SELECT * FROM users WHERE username = ?");
$stmt->execute([$username]); $stmt->execute([$username]);
@ -42,12 +67,17 @@ if ($_SERVER['REQUEST_METHOD'] === 'POST') {
$_SESSION['user_id'] = $user['id']; $_SESSION['user_id'] = $user['id'];
$_SESSION['username'] = $user['username']; $_SESSION['username'] = $user['username'];
$_SESSION['role'] = $user['role']; $_SESSION['role'] = $user['role'];
header('Location: dashboard.php'); echo json_encode(['code' => 0, 'msg' => '登录成功']);
exit; exit;
} else { } else {
die("Invalid credentials."); echo json_encode(['code' => 1, 'msg' => '用户名或密码错误']);
exit;
} }
} }
} catch (Exception $e) {
echo json_encode(['code' => 1, 'msg' => '服务器错误: ' . $e->getMessage()]);
exit;
}
} }
if ($action === 'logout') { if ($action === 'logout') {
@ -55,3 +85,5 @@ if ($action === 'logout') {
header('Location: index.php'); header('Location: index.php');
exit; exit;
} }
echo json_encode(['code' => 1, 'msg' => '无效的请求']);

1
db/schema.sql
View File

@ -27,6 +27,7 @@ CREATE TABLE IF NOT EXISTS sms_orders (
cost DECIMAL(10, 2), cost DECIMAL(10, 2),
sms_content TEXT, sms_content TEXT,
status ENUM('pending', 'received', 'canceled', 'expired') DEFAULT 'pending', status ENUM('pending', 'received', 'canceled', 'expired') DEFAULT 'pending',
expire_at TIMESTAMP NULL,
created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP, created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP,
FOREIGN KEY (user_id) REFERENCES users(id) FOREIGN KEY (user_id) REFERENCES users(id)
); );