51ecshop助理登陆 ecshop 2.7.3 出错的修复

作者：csuper 发表于：2012-11-01

ecaService.php文件中

将

function checkLogin($username, $password)
{
$username = base64_decode($username);
$password = base64_decode($password);

//$username = str_iconv(ECS_CHARSET, EC_CHARSET, $username);
//$password = str_iconv(ECS_CHARSET, EC_CHARSET, $password);

//return true;

    $sql = "SELECT user_id, user_name, password, last_login, action_list, last_login".
            " FROM " . $GLOBALS['ecs']->table('admin_user') .
            " WHERE user_name = '" . $username. "' AND password = '" . md5($password) . "'";

    $row = $GLOBALS['db']->getRow($sql);
    if ($row)
    {
     return true;
    }else{
      return false;
    }
}

替换成：

function checkLogin($username, $password)
{
$username = base64_decode($username);
$password = base64_decode($password);

//$username = str_iconv(ECS_CHARSET, EC_CHARSET, $username);
//$password = str_iconv(ECS_CHARSET, EC_CHARSET, $password);

//return true;
$sql="SELECT `ec_salt` FROM ". $GLOBALS['ecs']->table('admin_user') ." WHERE user_name = '" . $username ."'";
$ec_salt =$GLOBALS['db']->getOne($sql);

$sql = "SELECT user_id, user_name, password, last_login, action_list, last_login".
  " FROM " . $GLOBALS['ecs']->table('admin_user') .
  " WHERE user_name = '" . $username. "' AND password = '" . md5(md5($password).$ec_salt). "'";

$row = $GLOBALS['db']->getRow($sql);
if ($row)
{
  return true;
}else{
  return false;
}
}

ok！！！！！！！

版权声明

本文仅代表作者观点，不代表Csuper立场。
本文系作者授权百度百家发表，未经许可，不得转载。