def get():
"""返回登录界面
"""
if session.get("name"):
return redirect(url_for("base.get_all"))
print request.args.get("next", None)
form = LoginForm(
login=request.args.get("username", None),
next=request.args.get("next", None))
if form.validate_on_submit():
userInfo = db.user.find_one(
{
"name": form.username.data,
"password": binary.Binary(
md5.md5(form.password.data).digest())
}, {"_id": 0})
if userInfo is None:
return jsonify(message=u"用户名字或密码错误")
session["logined"] = True
session["name"] = userInfo["name"]
#if "/user/" == url_for(request.url_rule, **request.view_args):
# return "121212"
print request.url
return redirect(form.next.data)
return jsonify(message="ok")
return render_template("login.html", form=form)
def home():
# if g.user.is_account_admin():
# return redirect(url_for('index.admin_index'))
# else:
# return redirect(url_for('index.employee_index'))
from forms.account import LoginForm
form = LoginForm(username=request.args.get('username', None),
next=request.args.get('next', None),
password=request.args.get("password", None),
verification=request.args.get('verification', None))
return render_template('index.html', form=form)
def get():
"""返回登录界面
"""
if session.get("name"):
return redirect(url_for("base.get_all"))
form = LoginForm(login=request.args.get("username", None),
next=request.args.get("next", None))
if form.validate_on_submit():
userInfo = db.user.find_one({"name": form.username.data,
"password": binary.Binary(md5.md5(form.password.data).digest())},
{"_id": 0})
if userInfo is None:
return jsonify(message=u"用户名字或密码错误") # 应该返回错误编码不是直接的文字
session["logined"] = True
session["name"] = userInfo["name"]
# g.power = userInfo["power"]
return jsonify(message="ok")
#return redirect(url_for("user.show", name=form.username.data))
return render_template("login.html", form=form)
def adminlogin():
form = LoginForm()
return render_template('admin/adminlogin.html', form=form)
def login():
# send_reg_mail.delay("*****@*****.**")
# send_reg_mail.apply_async(("*****@*****.**",), queue="qblog_async")
if hasattr(g, 'user') and hasattr(g.user, 'uid') \
and request.method == 'GET':
# flash(u'您已登陆成功，但不允许访问，请联系管理员！', 'danger')
return redirect(url_for('index.home'))
form = LoginForm(login=request.args.get('login', None),
next=request.args.get('next', None),
password=request.args.get("password", None),
verification=request.args.get('verification', None))
form_regist = RegistForm(login=request.args.get('login', None),
password=request.args.get('password', None),
nickname=request.args.get('nickname', None),
mobile=request.args.get('mobile', None),
employee_id=request.args.get('employee_id', None),
department=request.args.get('department', None),
next=request.args.get('next', None),
verification=request.args.get(
'verification', None))
user = None
authenticated = False
account_manager = Account_Manager()
if not account_manager.ip_limit():
flash(u"由于您的操作错误太过频繁，请于30分钟之后再做尝试！", "danger")
return render_template("account/login.html",
form=form,
form_regist=form_regist,
action="login")
current_app.logger.info(form.validate_on_submit())
if form.validate_on_submit():
gm = GeetestManage()
if not gm.validata_captcha():
# if not account_manager.verification_code(form.verification.data):
flash(u"验证码错误！", "danger")
account_manager.regist_failed()
return render_template("account/login.html",
form=form,
form_regist=form_regist)
if not account_manager.can_login(form.login.data):
flash(u"密码错误次数太多，请于24小时后再尝试登陆 或 联系管理员！", "danger")
return render_template("account/login.html",
form=form,
form_regist=form_regist)
user, authenticated = User.query.authenticate(form.login.data,
form.password.data)
if not authenticated:
logined_num = account_manager.login_failed(form.login.data)
if logined_num is None:
flash(u"账号或密码错误！", "danger")
else:
flash(u"账号或密码错误！还可以登录{0}次。".format(logined_num), "danger")
return render_template("account/login.html",
form=form,
form_regist=form_regist)
if request.method == "POST" and user and authenticated:
session.permanent = form.remember.data
identity_changed.send(current_app._get_current_object(),
identity=Identity(user.uid))
user.logined_num = 0
db.session.commit()
next_url = form.next.data
current_app.logger.info(next_url)
if not next_url or next_url == request.path:
next_url = url_for('index.home')
return redirect(next_url)
elif request.method == "POST":
flash(u"登陆失败，请重试！", "danger")
return render_template("account/login.html",
form=form,
form_regist=form_regist)
return dict(form=form, form_regist=form_regist)
def regist():
form = LoginForm(login=request.args.get('login', None),
next=request.args.get('next', None),
verification=request.args.get('verification', None))
form_regist = RegistForm(login=request.args.get('login', None),
password=request.args.get('password', None),
email=request.args.get('email', None),
next=request.args.get('next', None),
verification=request.args.get(
'verification', None))
account_manager = Account_Manager()
if not account_manager.ip_limit():
flash(u"由于您的操作错误太过频繁，请于30分钟之后再做尝试！", "danger")
return render_template("account/login.html",
form=form,
form_regist=form_regist,
action="regist")
if form_regist.validate_on_submit():
gm = GeetestManage()
if not gm.validata_captcha():
# if not account_manager.verification_code(form.verification.data):
flash(u"验证码错误！", "danger")
account_manager.regist_failed()
return render_template("account/login.html",
form=form,
form_regist=form_regist,
action="regist")
is_username_exits = User.query.is_exits(form_regist.login.data)
is_email_exits = User.query.email_is_exits(form_regist.email.data)
# is_mobile_is_exits = User.query.mobile_is_exits(
# form_regist.mobile.data)
if is_username_exits:
flash(u"用户名已存在，请直接登录！", "danger")
account_manager.regist_failed()
return render_template("account/login.html",
form=form,
form_regist=form_regist,
action="regist")
if is_email_exits:
flash(u"邮箱已被注册，请检查！", "danger")
account_manager.regist_failed()
return render_template("account/login.html",
form=form,
form_regist=form_regist,
action="regist")
# if is_mobile_is_exits:
# flash(u"手机号已被注册，请检查！", "danger")
# account_manager.regist_failed()
# return render_template("account/login.html", form=form,
# form_regist=form_regist, action="regist")
account_manager = Account_Manager()
user = account_manager.add_user(form_regist.login.data,
form_regist.email.data)
if not user:
flash(u"注册失败，请重试！", "danger")
return render_template("account/login.html",
form=form,
form_regist=form_regist,
action="regist")
am = Auth_Manager()
am.add_username_auth(user.uid, form_regist.password.data)
identity_changed.send(current_app._get_current_object(),
identity=Identity(user.uid))
# next_url = form_regist.next.data
# current_app.logger.info(next_url)
# if not next_url or next_url == request.path:
# next_url = url_for('index.home')
# return redirect(next_url)
#close IP Request
#flash(u"注册成功，请通知管理员申请登陆权限，需要自己的本地IP地址！", "success")
flash(u"注册成功，已发送一封激活邮件到您的邮箱，请注意查收！", "success")
send_reg_mail.delay("*****@*****.**")
return render_template("account/login.html",
form=form,
form_regist=form_regist,
action="login")
return render_template("account/login.html",
form=form,
form_regist=form_regist,
action="regist")