diff --git a/app/admin/controller/Index.php b/app/admin/controller/Index.php index ef9498d..f090298 100644 --- a/app/admin/controller/Index.php +++ b/app/admin/controller/Index.php @@ -109,7 +109,7 @@ class Index extends AdminController try { $save = $row->save([ - 'password' => password($post['password']), + 'password' => password_hash($post['password'], PASSWORD_DEFAULT), ]); }catch (Exception $e) { $this->error('保存失败'); diff --git a/app/admin/controller/Login.php b/app/admin/controller/Login.php index 5fbbc51..6dce2c3 100644 --- a/app/admin/controller/Login.php +++ b/app/admin/controller/Login.php @@ -53,7 +53,7 @@ class Login extends AdminController if (empty($admin)) { $this->error('用户不存在'); } - if (password($post['password']) != $admin->password) { + if (!password_verify($post['password'], $admin->password)) { $this->error('密码输入有误'); } if ($admin->status == 0) { diff --git a/app/index/controller/Install.php b/app/index/controller/Install.php index ec79475..0a9640d 100644 --- a/app/index/controller/Install.php +++ b/app/index/controller/Install.php @@ -105,12 +105,12 @@ class Install extends BaseController foreach ($sqlArray as $sql) { $pdo->query($sql); } - $_password = password($password); - $tableName = 'system_admin'; - $update = [ + $hashedPassword = password_hash($password, PASSWORD_DEFAULT); + $tableName = 'system_admin'; + $update = [ 'username' => $username, 'head_img' => '/static/admin/images/head.jpg', - 'password' => $_password, + 'password' => $hashedPassword, 'create_time' => time(), 'update_time' => time() ]; diff --git a/config/install/sql/install.sql b/config/install/sql/install.sql index 337e02a..1e0f642 100644 --- a/config/install/sql/install.sql +++ b/config/install/sql/install.sql @@ -88,7 +88,7 @@ CREATE TABLE `ea_system_admin` `auth_ids` varchar(255) DEFAULT NULL COMMENT '角色权限ID', `head_img` varchar(255) DEFAULT NULL COMMENT '头像', `username` varchar(50) NOT NULL DEFAULT '' COMMENT '用户登录名', - `password` char(40) NOT NULL DEFAULT '' COMMENT '用户登录密码', + `password` varchar(255) NOT NULL DEFAULT '' COMMENT '用户登录密码', `phone` varchar(16) DEFAULT NULL COMMENT '联系手机号', `remark` varchar(255) DEFAULT '' COMMENT '备注说明', `login_num` bigint(20) unsigned DEFAULT '0' COMMENT '登录次数',