后台登陆

src/main/java/com/egolm/film/api/admin/service/impl/AdminTokenServiceImpl.java

@@ -9,12 +9,12 @@ import javax.servlet.http.HttpSession;
 import org.springframework.beans.factory.annotation.Autowired;
 import org.springframework.stereotype.Service;
 
-import com.egolm.common.StringUtil;
 import com.egolm.common.jdbc.JdbcTemplate;
 import com.egolm.film.api.admin.service.AdminTokenService;
 import com.egolm.film.config.WebMvcConfig;
 import com.egolm.film.config.XException;
 import com.egolm.film.model.LoginToken;
+import com.egolm.film.util.Common;
 
 @Service
 public class AdminTokenServiceImpl implements AdminTokenService {
@@ -25,27 +25,33 @@ public class AdminTokenServiceImpl implements AdminTokenService {
 	@Override
 	public LoginToken doLogin(String username, String password) {
 		HttpSession session = WebMvcConfig.getSession();
-		String md5String = StringUtil.toMD5HexString(password).toLowerCase();
-		String loginSql = "select * from fc_admin where username = ? and password = ?";
-		List<Map<String, Object>> list = this.jdbcTemplate.queryForList(loginSql, username, md5String);
+		String loginSql = "select * from fc_admin where username = ?";
+		List<Map<String, Object>> list = this.jdbcTemplate.queryForList(loginSql, username);
 		if(list != null) {
 			if(list.size() == 1) {
 				Map<String,Object> map = list.get(0);
 				Integer state = (Integer)map.get("state");
-				if(state == 1) {
-					Integer adminid = (Integer)map.get("adminid");
-					LoginToken token = new LoginToken(adminid);
-					session.setAttribute(TOKEN_NAME, token);
-					Cookie cookie = WebMvcConfig.getCookie(JSESSIONID);
-					if(cookie != null) {
-						String sql = "update fc_admin set token = ? where id = ?";
-						jdbcTemplate.executeUpdate(sql, cookie.getValue(), adminid);
+				String salt = (String)map.get("salt");
+				String pwd = (String)map.get("password");
+				String encodePassword = Common.encodePassword(password, salt);
+				if(encodePassword.equals(pwd)) {
+					if(state == 1) {
+						Integer adminid = (Integer)map.get("adminid");
+						LoginToken token = new LoginToken(adminid);
+						session.setAttribute(TOKEN_NAME, token);
+						Cookie cookie = WebMvcConfig.getCookie(JSESSIONID);
+						if(cookie != null) {
+							String sql = "update fc_admin set token = ? where id = ?";
+							jdbcTemplate.executeUpdate(sql, cookie.getValue(), adminid);
+						}
+						return token;
+					} else if(state == 2) {
+						throw new XException("用户已禁用");
+					} else {
+						throw new XException("用户状态未知");
 					}
-					return token;
-				} else if(state == 2) {
-					throw new XException("用户已禁用");
 				} else {
-					throw new XException("用户状态未知");
+					throw new XException("用户名或密码错误");
 				}
 			} else if(list.size() == 0) {
 				throw new XException("用户名或密码错误");

src/main/java/com/egolm/film/util/Common.java

@@ -22,7 +22,7 @@ public class Common {
 	}
 	
 	public static void main(String[] args) {
-		System.out.println(encodePassword("123456", "5e0vt0"));
+		System.out.println(encodePassword("123456", "78hzar"));
 		System.out.println(getGenerateString(6));
 	}