php寫的登入時使用者名稱與密碼驗證器

/** * Validator for Login. */ final class LoginValidator { private function __construct() { } /** * Validate the given username and password. * @param $username and $password to be validated * @return array array of {@link Error} s */ public static function validate($username, $password) { $errors = array(); $username = trim($username); if (!$username) { $errors[] = new Error('username', '使用者名稱不可為空。'); } elseif (strlen($username)<3) { $errors[] = new Error('username', '使用者名稱長度不能小於3個字元。'); } elseif (strlen($username)>30) { $errors[] = new Error('username', '使用者名稱長度不能超過30個字元。'); } elseif (!preg_match('/^[A-Za-z]+$/',substr($username, 0, 1))) { $errors[] = new Error('username', '使用者名稱必須以字母開頭。'); } elseif (!preg_match('/^[A-Za-z0-9_]+$/', $username)) { $errors[] = new Error('username', '使用者名稱只能是字母、數字以及底線( _ )的組合。'); } elseif (!trim($password)) { $errors[] = new Error('password', '密碼不可為空。'); } else { // check whether use exists or not $dao = new UserDao(); $user = $dao->findByName($username); if ($user) { if (!($user->getPassword() == sha1($user->getSalt() . $password))) { $errors[] = new Error('password', '使用者名稱或密碼錯誤。'); } } else { $errors[] = new Error('username', '使用者名稱不存在。'); } } return $errors; } } ?> 複製代碼 Error是自己寫的一個類： /** * Validation error. */ final class Error { private $source; private $message; /** * Create new error. * @param mixed $source source of the error * @param string $message error message */ function __construct($source, $message) { $this->source = $source; $this->message = $message; } /** * Get source of the error. * @return mixed source of the error */ public function getSource() { return $this->source; } /** * Get error message. * @return string error message */ public function getMessage() { return $this->message; } } ?> 複製代碼 2、調用驗證器進行驗證 $username = null; $password = null; $msg = ""; if (isset($_POST['username']) && isset($_POST['password'])) { $username = addslashes(trim(stripslashes($_POST ['username']))); $password = addslashes(trim(stripslashes($_POST ['password']))); // validate $errors = LoginValidator::validate($username, $password); if (empty($errors)) { // save the latest ip or login time into database, then processing page forwarding $dao = new UserDao(); $user = $dao->findByName($username); $last_login_ip = Utils::getIpAddress(); $user->setLastLoginIp($last_login_ip); $now = new DateTime(); $user->setLastLoginTime($now); $dao->save($user); UserLogin::setUserInfo($user); Flash::addFlash('登入成功！'); Utils::redirect('welcome'); } foreach ($errors as $e) { $msg .= $e->getMessage()." "; } ?> 複製代碼

