def post(self): old_password = self.get_body_argument('old_password', None) new_password = self.get_body_argument('new_password', None) new_password_confirm = self.get_body_argument('new_password_confirm', None) if old_password and new_password and new_password_confirm: if len(new_password) >= 6 and len(new_password) <= 18: if new_password == new_password_confirm: md5 = hashlib.md5() md5.update(old_password) password_md5 = md5.hexdigest().upper() query_user = '******' user = db.get(query_user, self.current_user.nick) if user.password.upper() == password_md5: md5 = hashlib.md5() md5.update(new_password) new_password_md5 = md5.hexdigest().upper() update_user = '******' row = db.update(update_user, new_password_md5, self.current_user.nick) if row: self.send_result(True, error_code=None) return self.send_result() return self.send_result(error_code=constants.error_code['wrong_password']) return self.send_result(error_code=constants.error_code['password_confirm_failed']) return self.send_result(error_code=constants.error_code['illegal_password']) return self.send_result(error_code=constants.error_code['missing_parameters'])
def post(self): old_password = self.get_body_argument('old_password', None) new_password = self.get_body_argument('new_password', None) new_password_confirm = self.get_body_argument('new_password_confirm', None) if old_password and new_password and new_password_confirm: if len(new_password) >= 6 and len(new_password) <= 18: if new_password == new_password_confirm: md5 = hashlib.md5() md5.update(old_password) password_md5 = md5.hexdigest().upper() query_user = '******' user = db.get(query_user, self.current_user.nick) if user.password.upper() == password_md5: md5 = hashlib.md5() md5.update(new_password) new_password_md5 = md5.hexdigest().upper() update_user = '******' row = db.update(update_user, new_password_md5, self.current_user.nick) if row: self.send_result(True, error_code=None) return self.send_result() return self.send_result( error_code=constants.error_code['wrong_password']) return self.send_result( error_code=constants.error_code['password_confirm_failed']) return self.send_result( error_code=constants.error_code['illegal_password']) return self.send_result(error_code=constants.error_code['missing_parameters'])
def post(self): title = self.get_body_argument('title', None) #content = self.get_body_argument('content', None) content = self.get_body_argument('html_content', None) category_id = self.get_body_argument('category', None) user_id = self.current_user.id post_public = self.get_body_argument('privacy', None) post_id = self.get_body_argument('id', -1) draft = self.get_body_argument('draft', 0) visible = 1 - int(draft) if title and content and category_id: now = datetime.now() if int(post_id) != -1: sql = 'update tb_post set title = %s, content = %s, public = %s, visible = %s, category_id = %s, updated = %s where id = %s and deleted = 0' num = db.update(sql, title, content, int(post_public), int(visible), int(category_id), now, int(post_id)) else: sql = 'insert into tb_post (title, content, user_id, category_id, public, visible, created) values (%s, %s, %s, %s, %s, %s, %s)' num = db.insert(sql, title, content, long(user_id), int(category_id), int(post_public), int(visible), now) if num: self.send_result(True, error_code=None) return self.send_result() return self.send_result(error_code=constants.error_code['missing_parameters'])
def post(self): post_id = self.get_body_argument('post_id', None) if post_id: query = 'select id, user_id from tb_post where id = %s and deleted = 0' _post = db.query(query) if _post and _post.id == post_id: update_public = 'update tb_post set public = 1 where id = %s' row_count = db.update(update_public, post_id) if row_count: self.send_result(True, error_code=None) return self.send_result() return self.send_result(error_code=constants.error_code['missing_parameters'])
def pretend_delete(cls, id): delete = 'update tb_post set deleted = 1 where id = %s' row = db.update(delete, id) return row > 0
def updatePassword(self, new_password): if self.id: update = 'update tb_user set password = %s where id = %s' row = db.update(update, new_password, self.id) return row return 0
def updateNick(self, new_nick): if self.id: update = 'update tb_user set nick = %s where id = %s' row = db.update(update, new_nick, self.id) return row return 0