fix(admin): update password hashing method- Replace password function with password_hash for secure password storage- Use PASSWORD_DEFAULT algorithm for hashing

- Improve password security in admin controller

Signed-off-by: wolfcode <wolfcode@88.com>

app/admin/controller/Index.php

@@ -109,7 +109,7 @@ class Index extends AdminController
 
             try {
                 $save = $row->save([
-                    'password' => password($post['password']),
+                    'password' => password_hash($post['password'], PASSWORD_DEFAULT),
                 ]);
             }catch (Exception $e) {
                 $this->error('保存失败');

app/admin/controller/Login.php

@@ -53,7 +53,7 @@ class Login extends AdminController
         if (empty($admin)) {
             $this->error('用户不存在');
         }
-        if (password($post['password']) != $admin->password) {
+        if (!password_verify($post['password'], $admin->password)) {
             $this->error('密码输入有误');
         }
         if ($admin->status == 0) {

app/admin/controller/system/Admin.php

@@ -63,7 +63,7 @@ class Admin extends AdminController
             $rule             = [];
             $this->validate($post, $rule);
             if (empty($post['password'])) $post['password'] = '123456';
-            $post['password'] = password($post['password']);
+            $post['password'] = password_hash($post['password'],PASSWORD_DEFAULT);
             try {
                 $save = self::$model::create($post);
             }catch (\Exception $e) {
@@ -114,7 +114,7 @@ class Admin extends AdminController
             }
             try {
                 $save = $row->save([
-                    'password' => password($post['password']),
+                    'password' => password_hash($post['password'], PASSWORD_DEFAULT),
                 ]);
             }catch (\Exception $e) {
                 $this->error('保存失败');

app/admin/service/curd/BuildCurd.php

@@ -1217,6 +1217,7 @@ class BuildCurd
             } elseif ($val['formType'] == 'images') {
                 $templateFile = "view{$this->DS}module{$this->DS}images";
                 $define       = $val['define'] ?? '|';
+                if (strlen($define) > 5) $define = '|';
             } elseif ($val['formType'] == 'file') {
                 $templateFile = "view{$this->DS}module{$this->DS}file";
             } elseif ($val['formType'] == 'files') {
@@ -1234,12 +1235,12 @@ class BuildCurd
             } elseif ($val['formType'] == 'radio') {
                 $templateFile = "view{$this->DS}module{$this->DS}radio";
                 if (!empty($val['define'])) {
-                    $define = $this->buildRadioView($field, '{in name="k" value="' . $val['default'] . '"}checked=""{/in}');
+                    $define = $this->buildRadioView($field, '');
                 }
             } elseif ($val['formType'] == 'checkbox') {
                 $templateFile = "view{$this->DS}module{$this->DS}checkbox";
                 if (!empty($val['define'])) {
-                    $define = $this->buildCheckboxView($field, '{in name="k" value="' . $val['default'] . '"}checked=""{/in}');
+                    $define = $this->buildCheckboxView($field, '');
                 }
             } elseif ($val['formType'] == 'select') {
                 $templateFile = "view{$this->DS}module{$this->DS}select";
@@ -1308,19 +1309,19 @@ class BuildCurd
             } elseif ($val['formType'] == 'radio') {
                 $templateFile = "view{$this->DS}module{$this->DS}radio";
                 if (!empty($val['define'])) {
-                    $define = $this->buildRadioView($field, '{in name="k" value="$row.' . $field . '"}checked=""{/in}');
+                    $define = $this->buildRadioView($field, '{if in_array($k, $row.' . $field . ')}checked{/if}');
                 }
             } elseif ($val['formType'] == 'checkbox') {
                 $templateFile = "view{$this->DS}module{$this->DS}checkbox";
                 if (!empty($val['define'])) {
-                    $define = $this->buildCheckboxView($field, '{in name="k" value="$row.' . $field . '"}checked=""{/in}');
+                    $define = $this->buildCheckboxView($field, '{if in_array($k, $row.' . $field . ')}checked{/if}');
                 }
             } elseif ($val['formType'] == 'select') {
                 $templateFile = "view{$this->DS}module{$this->DS}select";
                 if (isset($val['bindRelation'])) {
-                    $define = $this->buildOptionView($field, '{in name="k" value="$row.' . $field . '"}selected=""{/in}');
+                    $define = $this->buildOptionView($field, '{if $row.' . $field . '==$k}selected{/if}');
                 } elseif (!empty($val['define'])) {
-                    $define = $this->buildOptionView($field, '{in name="k" value="$row.' . $field . '"}selected=""{/in}');
+                    $define = $this->buildOptionView($field, '{if $row.' . $field . '==$k}selected{/if}');
                 }
             } elseif ($field == 'remark' || $val['formType'] == 'textarea') {
                 $templateFile = "view{$this->DS}module{$this->DS}textarea";

app/admin/view/index/index.html

@@ -38,7 +38,7 @@
                     <li class="layui-nav-item mobile layui-hide-xs" lay-unselect>
                         <a href="javascript:;" data-check-screen="full"><i class="fa fa-arrows-alt"></i></a>
                     </li>
-                    <li class="layui-nav-item" lay-unselect>
+                    <li class="layui-nav-item mobile layui-hide-xs" lay-unselect>
                         <div class="layui-form ws-header-theme" lay-filter="header-theme">
                             <input type="checkbox" name="theme-mode" lay-filter="header-theme-mode" lay-skin="switch">
                             <div lay-checkbox>

app/index/controller/Install.php

@@ -24,8 +24,8 @@ class Install extends BaseController
             $errorInfo = '已安装系统，如需重新安装请删除文件：/config/install/lock/install.lock，或者删除 /install 路由';
         }elseif (version_compare(phpversion(), '8.1.0', '<')) {
             $errorInfo = 'PHP版本不能小于8.1.0';
-        }elseif (!extension_loaded("PDO")) {
+        }elseif (!extension_loaded("pdo_mysql")) {
-            $errorInfo = '当前未开启PDO，无法进行安装';
+            $errorInfo = '当前未开启pdo_mysql，无法进行安装';
         }
         if (!is_file(root_path() . '.env')) {
             $errorInfo = '.env 文件不存在，请先配置 .env 文件';
@@ -105,12 +105,12 @@ class Install extends BaseController
             foreach ($sqlArray as $sql) {
                 $pdo->query($sql);
             }
-            $_password = password($password);
+            $hashedPassword = password_hash($password, PASSWORD_DEFAULT);
-            $tableName = 'system_admin';
+            $tableName      = 'system_admin';
-            $update    = [
+            $update         = [
                 'username'    => $username,
                 'head_img'    => '/static/admin/images/head.jpg',
-                'password'    => $_password,
+                'password'    => $hashedPassword,
                 'create_time' => time(),
                 'update_time' => time()
             ];

config/install/sql/install.sql

@@ -88,7 +88,7 @@ CREATE TABLE `ea_system_admin`
     `auth_ids`    varchar(255)         DEFAULT NULL COMMENT '角色权限ID',
     `head_img`    varchar(255)         DEFAULT NULL COMMENT '头像',
     `username`    varchar(50) NOT NULL DEFAULT '' COMMENT '用户登录名',
-    `password`    char(40)    NOT NULL DEFAULT '' COMMENT '用户登录密码',
+    `password`    varchar(255)    NOT NULL DEFAULT '' COMMENT '用户登录密码',
     `phone`       varchar(16)          DEFAULT NULL COMMENT '联系手机号',
     `remark`      varchar(255)         DEFAULT '' COMMENT '备注说明',
     `login_num`   bigint(20) unsigned DEFAULT '0' COMMENT '登录次数',

public/static/admin/js/login.js

@@ -27,6 +27,12 @@ define(["jquery", "easy-admin"], function ($, ea) {
                     }
                 });
 
+                document.addEventListener('keydown', function (event) {
+                    if (event.key === 'Enter' || event.keyCode === 13) {
+                        $('.login-btn').trigger('click')
+                    }
+                });
+
                 $('.login-tip').on('click', function () {
                     $('.icon-nocheck').click();
                 });

public/static/plugs/easy-admin/easy-admin.js

@@ -2,13 +2,16 @@ define(["jquery", "tableSelect", "miniTheme", "xmSelect", "lazyload"], function
 
     //切换日夜模式
     window.onInitElemStyle = function () {
-        miniTheme.renderElemStyle();
+        try {
-        $('iframe').each(function (index, iframe) {
+            miniTheme.renderElemStyle();
-            if (typeof iframe.contentWindow.onInitElemStyle == "function") {
+            $('iframe').each(function (index, iframe) {
-                iframe.contentWindow.onInitElemStyle();
+                if (typeof iframe.contentWindow.onInitElemStyle == "function") {
-            }
+                    iframe.contentWindow.onInitElemStyle();
-        });
+                }
-        miniTheme.changeThemeMainColor();
+            });
+            miniTheme.changeThemeMainColor();
+        } catch (e) {
+        }
     };
     window.onInitElemStyle();
 

public/static/plugs/lay-module/layuimini/layuimini.css

@@ -83,6 +83,7 @@
     display: inline-block;
     height: 40px;
     vertical-align: middle;
+    border-radius: 50%;
 }
 
 .layui-layout-admin .layuimini-logo h1 {

public/static/plugs/lay-module/layuimini/miniMenu.js

@@ -94,7 +94,14 @@ define(["jquery"], function ($) {
         renderLeftMenu :function(leftMenus,options){
             options = options || {};
             var me = this ;
-            var leftMenusHtml =  me.each(leftMenus || [],function (idx,leftMenu) { // 左侧菜单遍历
+            let _i = 0
+            // 左侧菜单遍历
+            var leftMenusHtml =  me.each(leftMenus || [],function (idx,leftMenu) {
+                $(leftMenu).each(function (index, child) {
+                    options.childOpenClass = ''
+                    if (child.child && child.child.length && _i === 0) options.childOpenClass = ' layui-nav-itemed'
+                    _i++
+                })
                 var children = me.renderChildrenMenu(leftMenu.child, { childOpenClass:options.childOpenClass });
                 var leftMenuHtml = me.compileMenu({
                     href:leftMenu.href,