baoshuo/S2OJ
baoshuo/S2OJ
1
1
Fork 0
mirror of https://github.com/renbaoshuo/S2OJ.git synced 2024-11-22 03:08:41 +00:00
Code Issues Actions Packages Releases Activity

feat(user/edit): clear_remember_token
All checks were successful
continuous-integration/drone/push Build is passing
Details

Browse Source
This commit is contained in:
Baoshuo Ren 2023-02-13 22:01:17 +08:00
parent dfdc2a0756
commit 80bca8dba0
Signed by: baoshuo
GPG Key ID: 00CB9680AB29F51A
2 changed files with 43 additions and 21 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

24
web/app/controllers/user_info_edit.php
View File

@ -398,6 +398,24 @@ EOD);
dieWithAlert('密码修改成功！');
}
if (isSuperUser(Auth::user())) {
$clear_remember_token_form = new UOJForm('clear_remember_token');
$clear_remember_token_form->handle = function () use ($user) {
DB::update([
"update user_info",
"set", [
"remember_token" => "",
],
"where", ["username" => $user['username']]
]);
};
$clear_remember_token_form->config['submit_container']['class'] = 'text-end';
$clear_remember_token_form->config['submit_button']['class'] = 'btn btn-sm btn-danger';
$clear_remember_token_form->config['submit_button']['text'] = '清除 remember_token（强制下线）';
$clear_remember_token_form->config['confirm']['smart'] = true;
$clear_remember_token_form->runAtServer();
}
} elseif ($cur_tab == 'privilege') {
$users_default_permissions = UOJContext::getMeta('users_default_permissions');
$type_text = UOJLocale::get('user::normal user');
@ -845,6 +863,12 @@ $pageTitle = $user['username'] == Auth::id()
<button type="submit" id="button-submit-change_password" name="submit-change_password" value="change_password" class="mt-3 btn btn-secondary">更新</button>
</div>
</form>
<?php if (isset($clear_remember_token_form)) : ?>
<hr />
<?php $clear_remember_token_form->printHTML() ?>
<?php endif ?>
</div>
</div>
<script>

6
web/app/models/Auth.php
View File

@ -33,14 +33,13 @@ class Auth {
return $myUser[$name];
}
public static function login($username, $remember = true) {
public static function login($username) {
if (!validateUsername($username)) {
return;
}
$_SESSION['username'] = $username;
if ($remember) {
$remember_token = DB::selectSingle([
"select remember_token from user_info",
"where", ["username" => $username]
@ -61,7 +60,6 @@ class Auth {
$expire = time() + 60 * 60 * 24 * 7;
Cookie::safeSet('uoj_username', $username, $expire, '/', array('httponly' => true));
Cookie::safeSet('uoj_remember_token', $remember_token, $expire, '/', array('httponly' => true));
}
DB::update([
"update user_info",
@ -75,7 +73,7 @@ class Auth {
public static function logout() {
session_unset();
Cookie::safeUnset(session_name(), '/');
Cookie::unsetVar(session_name(), '/');
Cookie::safeUnset('uoj_username', '/');
Cookie::safeUnset('uoj_remember_token', '/');