密码保护

小灰灰 2022-01-11 04:33 276阅读 0赞

1.更新User对象，设置对内的\_password

class User(db.Model):

\_\_tablename\_\_ = 'user'

\_password = db.Column(db.String(200), nullable=False) \#内部使用

2.编写对外的password

from werkzeug.security import generate\_password\_hash, check\_password\_hash

@property

def password(self): \#外部使用，取值

return self.\_password

@password.setter

def password(self, row\_password):\#外部使用，赋值

self.\_password = generate\_password\_hash(row\_password)

3.密码验证方法：

def check\_password(self, row\_password): \#密码验证

result = check\_password\_hash(self.\_password,row\_password)

return result

4.登录验证：

password1 = request.form.get('password')

user = User.query.filter(User.username == username).first()

if user:

if user.check\_password(password1):

class User(db.Model):
        __tablename__ = 'user'
        id = db.Column(db.Integer, primary_key=True, autoincrement=True)
        username = db.Column(db.String(20), nullable=False)
        _password = db.Column(db.String(200), nullable=False)  # 内部使用
    
        @property
        def password(self):  # 外部使用
            return self._password
    
        @password.setter
        def password(self, row_password):
            self._password = generate_password_hash(row_password)
    
        def check_password(self, row_password):
            result = check_password_hash(self._password, row_password)
            return result

@app.route('/login/', methods=['GET', 'POST'])
    def login():
        if request.method == 'GET':
            return render_template('login.html')
        else:
            username = request.form.get('username')
            password = request.form.get('password')
            user = User.query.filter(User.username == username).first()
            if user:
                if user.check_password(password):
                    session['user'] = username
                    session['user_id']=user.id
                    session.permanent = True
                    return redirect(url_for('daohang'))
                else:
                    return 'error username or password'

转载于:https://www.cnblogs.com/018linbin/p/8087638.html