php写的登录时用户名与密码验证器

3. /**

4. * Validator for Login.
5. */
6. final class LoginValidator {

7. private function __construct() {

9. }

10. /**

11. * Validate the given username and password.
12. * @param $username and $password to be validated
13. * @return array array of {@link Error} s
14. */
15. public static function validate($username, $password) {
16. $errors = array();
17. $username = trim($username);
18. if (!$username) {
19. $errors[] = new Error('username', '用户名不能为空。');
20. } elseif (strlen($username) $errors[] = new Error('username', '用户名长度不能小于3个字符。');
21. } elseif (strlen($username)>30) {
22. $errors[] = new Error('username', '用户名长度不能超过30个字符。');
23. } elseif (!preg_match('/^[A-Za-z]+$/',substr($username, 0, 1))) {
24. $errors[] = new Error('username', '用户名必须以字母开头。');
25. } elseif (!preg_match('/^[A-Za-z0-9_]+$/', $username)) {
26. $errors[] = new Error('username', '用户名只能是字母、数字以及下划线( _ )的组合。');
27. } elseif (!trim($password)) {
28. $errors[] = new Error('password', '密码不能为空。');
29. } else {
30. // check whether use exists or not
31. $dao = new UserDao();
32. $user = $dao->findByName($username);

33. if ($user) {

34. if (!($user->getPassword() == sha1($user->getSalt() . $password))) {
35. $errors[] = new Error('password', '用户名或密码错误。');
36. }
37. } else {
38. $errors[] = new Error('username', '用户名不存在。');
39. }
40. }
41. return $errors;
42. }
43. }
44. ?>

复制代码

Error是自己写的一个类：

3. /**

4. * Validation error.
5. */
6. final class Error {

7. private $source;

8. private $message;
10. /**
11. * Create new error.
12. * @param mixed $source source of the error
13. * @param string $message error message
14. */
15. function __construct($source, $message) {
16. $this->source = $source;
17. $this->message = $message;
18. }

19. /**

20. * Get source of the error.
21. * @return mixed source of the error
22. */
23. public function getSource() {
24. return $this->source;
25. }

26. /**

27. * Get error message.
28. * @return string error message
29. */
30. public function getMessage() {
31. return $this->message;
32. }
33. }
34. ?>

复制代码

2、调用验证器进行验证

3. $username = null;

4. $password = null;

5. $msg = "";

6. if (isset($_POST['username']) && isset($_POST['password'])) {

7. $username = addslashes(trim(stripslashes($_POST ['username'])));
8. $password = addslashes(trim(stripslashes($_POST ['password'])));
9. // validate
10. $errors = LoginValidator::validate($username, $password);
12. if (empty($errors)) {
13. // save the latest ip or login time into database, then processing page forwarding
14. $dao = new UserDao();
15. $user = $dao->findByName($username);
16. $last_login_ip = Utils::getIpAddress();
17. $user->setLastLoginIp($last_login_ip);
18. $now = new DateTime();
19. $user->setLastLoginTime($now);
20. $dao->save($user);
21. UserLogin::setUserInfo($user);
22. Flash::addFlash('登录成功！');
23. Utils::redirect('welcome');
24. }
26. foreach ($errors as $e) {
27. $msg .= $e->getMessage()."
    ";
28. }
29. ?>

复制代码