Skip to content

增加 csrf 的判断 #55

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
wants to merge 2 commits into
base: master
Choose a base branch
from
Open

增加 csrf 的判断 #55

Changes from 1 commit
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
7bf9ccd
add csrf
momaek Feb 26, 2018
ac01b21
fix login usename or pwd err notice '用户名或者密码错误'
momaek Feb 26, 2018
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Prev Previous commit
fix login usename or pwd err notice '用户名或者密码错误'
  • Loading branch information
@momaek
momaek committed Feb 26, 2018
commit ac01b21e00a264f6c43dfb696ac84201f70e366e
6 changes: 4 additions & 2 deletions src/logic/user.go
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -370,6 +370,8 @@ func (UserLogic) Total() int64 {
var (
ErrUsername = errors.New("用户名不存在")
ErrPasswd = errors.New("密码错误")

ErrUnameOrPwd = errors.New("用户名或密码错误")
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

告知用户名或密码错误，是怕猜测吗？

Copy link
Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

对

)

// Login 登录；成功返回用户登录信息(user_login)
Expand All @@ -385,7 +387,7 @@ func (self UserLogic) Login(ctx context.Context, username, passwd string) (*mode
// 校验用户
if userLogin.Uid == 0 {
objLog.Infof("user %q is not exists!", username)
return nil, ErrUsername
return nil, ErrUnameOrPwd
}

// 检验用户状态是否正常（未激活的可以登录，但不能发布信息）
Expand All @@ -405,7 +407,7 @@ func (self UserLogic) Login(ctx context.Context, username, passwd string) (*mode
objLog.Debugf("passwd: %s, passcode: %s, md5passwd: %s, dbpasswd: %s", passwd, userLogin.Passcode, md5Passwd, userLogin.Passwd)
if md5Passwd != userLogin.Passwd {
objLog.Infof("用户名 %q 填写的密码错误", username)
return nil, ErrPasswd
return nil, ErrUnameOrPwd
}

go func() {
Expand Down