php写的一个登录验证类

3. final class UserLogin {

4. public function __construct() {

6. }
7. public static function getUserInfo() {
8. if (isset($_COOKIE["user_id"])&&$_COOKIE["user_id"]&&(trim($_COOKIE["user_id"])!="")) {
9. if (isset($_SESSION["USER_INFO"]))
10. return $_SESSION["USER_INFO"];
11. $dao = new UserDao();
12. $user = $dao->find($_COOKIE["user_id"]);
13. if ($user) {
14. $_SESSION["USER_INFO"] = $user;
15. setcookie("docloud_sid", session_id(), time() + 36000);
16. setcookie("user_id", $_COOKIE["user_id"], time() + 36000);
18. if (array_key_exists("selected_prj_id", $_COOKIE))
19. setcookie("selected_prj_id", $_COOKIE["selected_prj_id"], time() + 36000);
21. if (array_key_exists("selected_class_id", $_COOKIE))
22. setcookie("selected_class_id", $_COOKIE["selected_class_id"], time() + 36000);
24. if (array_key_exists("selected_image_id", $_COOKIE))
25. setcookie("selected_image_id", $_COOKIE["selected_image_id"], time() + 36000);
27. if (array_key_exists("test_image_ids", $_COOKIE))
28. setcookie("test_image_ids", $_COOKIE["test_image_ids"], time() + 36000);
30. if (array_key_exists("upload_image_ids", $_COOKIE))
31. setcookie("upload_image_ids", $_COOKIE["upload_image_ids"], time() + 36000);
32. return $user;
33. }
34. }
35. self::clearCookie();
36. return null;
37. }

38. public static function setUserInfo($userInfo) {

39. $_SESSION["USER_INFO"] = $userInfo;
40. setcookie("docloud_sid", session_id(), time() + 36000);
41. setcookie("user_id", $userInfo->getId(), time() + 36000);
42. }

43. public static function isLogin() {

44. if (self::getUserInfo()) {
45. return true;
46. }
47. return false;
48. }

49. public static function delUserInfo() {

50. self::clearCookie();
51. session_destroy();
52. }
54. private static function clearCookie() {
55. setcookie("docloud_sid", "", time() - 36000);
56. setcookie("user_id", "", time() - 36000);
57. setcookie("selected_prj_id", "", time() - 36000);
58. setcookie("selected_class_id", "", time() - 36000);
59. setcookie("selected_image_id", "", time() - 36000);
60. setcookie("test_image_ids", "", time() - 36000);
61. setcookie("upload_image_ids", "", time() - 36000);
62. }
63. }

64. /**

65. * Validator for Login.
66. */
67. final class LoginValidator {
68. private function __construct() {
69. }

70. /**

71. * Validate the given username and password.
72. * @param $username and $password to be validated
73. * @return array array of {@link Error} s
74. */
75. public static function validate($username, $password) {
76. $errors = array();
77. $username = trim($username);
78. if (!$username) {
79. $errors[] = new Error('username', '用户名不能为空。');
80. } elseif (strlen($username) $errors[] = new Error('username', '用户名长度不能小于3个字符。');
81. } elseif (strlen($username)>30) {
82. $errors[] = new Error('username', '用户名长度不能超过30个字符。');
83. } elseif (!preg_match('/^[A-Za-z]+$/',substr($username, 0, 1))) {
84. $errors[] = new Error('username', '用户名必须以字母开头。');
85. } elseif (!preg_match('/^[A-Za-z0-9_]+$/', $username)) {
86. $errors[] = new Error('username', '用户名只能是字母、数字以及下划线( _ )的组合。');
87. } elseif (!trim($password)) {
88. $errors[] = new Error('password', '密码不能为空。');
89. } else {
90. // check whether use exists or not
91. $dao = new UserDao();
92. $user = $dao->findByName($username);

93. if ($user) {

94. if (!($user->getPassword() == sha1($user->getSalt() . $password))) {
95. $errors[] = new Error('password', '用户名或密码错误。');
96. }
97. } else {
98. $errors[] = new Error('username', '用户名不存在。');
99. }
100. }
101. return $errors;
102. }
103. }

104. /**

105. * Validation error.
106. */
107. final class Error {
108. private $source;
109. private $message;

110. /**

111. * Create new error.
112. * @param mixed $source source of the error
113. * @param string $message error message
114. */
115. function __construct($source, $message) {
116. $this->source = $source;
117. $this->message = $message;
118. }

119. /**

120. * Get source of the error.
121. * @return mixed source of the error
122. */
123. public function getSource() {
124. return $this->source;
125. }

126. /**

127. * Get error message.
128. * @return string error message
129. */
130. public function getMessage() {
131. return $this->message;
132. }
133. }

134. // if logged in, logout 页面的跳转类在http://www.cnblogs.com/setsail/archive/2012/12/18/2823231.html 里这里不再重复书写

135. if (UserLogin::isLogin() && $_COOKIE["user_id"]==1) {
136. UserLogin::delUserInfo();
137. }elseif (UserLogin::isLogin()){
138. Utils::redirect('welcome');
139. }

140. $username = null;

141. $password = null;
142. $msg = "";

143. if (isset($_POST['username']) && isset($_POST['password'])) {

144. $username = addslashes(trim(stripslashes($_POST ['username'])));
145. $password = addslashes(trim(stripslashes($_POST ['password'])));
146. // validate
147. $errors = LoginValidator::validate($username, $password);
149. if (empty($errors)) {
150. // save
151. $dao = new UserDao();
152. $user = $dao->findByName($username);
153. $last_login_ip = Utils::getIpAddress();
154. $user->setLastLoginIp($last_login_ip);
155. $now = new DateTime();
156. $user->setLastLoginTime($now);
157. $dao->save($user);
158. UserLogin::setUserInfo($user);
159. Flash::addFlash('登录成功！');
160. Utils::redirect('welcome');
161. }
163. foreach ($errors as $e) {
164. $msg .= $e->getMessage()."
     ";
165. }
166. }
167. ?>

复制代码