在继续之前提供有效密码 (Codeigniter)

Question

这里是新手。我有一个模式，员工可以将资金转移给客户。转账前，工作人员必须输入his/her密码才能进行交易。我的目标是有一个关于密码验证的工作功能。我做了一个稍微工作的功能。我在下面提供了一个视频以便更好地解释。

https://streamable.com/z4vgtv //密码正确或错误，结果都是一样的。 “密码不匹配”

控制器：

public function form_validation($userID)
{
    
  
    $this->load->library('form_validation');
    $this->form_validation->set_rules("amount","Amount", 'required|numeric');
    
   
          $password = $this->input->post('password');
          $exists = $this->networks->filename_exists($password);
          
          $count = count($exists);
          if($count >=1)
          {
              
              if($this->form_validation->run())
              {
                  
                  $ref= $this->session->userdata('uid') + time ();
                  $id = $this->input->post('userID');
                  $pData = array(
                      'userID' => $id,
                      'transactionSource' => 'FR',
                      'refNumber' => 'FI-0000' . $ref,
                      "amount" =>$this->input->post("amount"),
                      "transType" =>"in",
                      
                  );
                  
                  $this->networks->fundin($pData);
                  
                  
                  $ref= $this->session->userdata('userID') + time ();
                  
                  $data1 = array(
                      'userID' => $this->session->userdata('uid'),
                      "transactionSource" => 'FR',
                      "refNumber" => 'FO' . $ref,
                      "amount" =>$this->input->post("amount"),
                      "transType" =>"out",
                      
                      
                  );
                     ?>
                    <script> alert("password match");</script>
                    <?php

        
        $this->networks->insert_data($data1);
        
        redirect(base_url() . "network/agents");
                }
        
                else
                    {
                        $this->index();
                    }
                }
                else
                {
                    ?>
                    <script> alert("Password not Match");</script>
                    <?php
                }
                                
 }

型号：

function filename_exists($password)
    {
        $this->db->select('*');
        $this->db->from('users');
        $this->db->where('password', $password);
        $query = $this->db->get();
        $result = $query->result_array();
        return $query->result();
        
    }

观看次数：

<form id="doBetting" method="post" action="<?php echo base_url('network/form_validation');?>/<?php echo $rows->userID; ?>">
                              <div class="input-group input-group-sm" style="width: 100%" >
                                <input type="hidden" id="usertransferid" name="userID">
                                
                        <div class="col-lg-12" >    
                        
                         
                            <input type="number" placeholder="Enter Amount" name="amount" class="form-control" id="box" required>   
                            
                            <br>
                            <input type="password" placeholder="Enter Password"  name="password" class="form-control"  id="cpass" required onblur="check_if_exists();"> 
                            
                            <br>
                            
                            
                            <!--  buttons -->

                            <input type="submit" class="btn btn-success text-bold" name="save" id="insert" value="Transfer">
                            </div>
                                  </div>
                                </div>
                           </form>       
             </div>
        </div>
                
        </div>   
        
        </div>

Ajax:

    <script>
    <script>
function check_if_exists() {

var password = $("#cpass").val();

$.ajax(
    {
        type:"post",
        url: "<?php echo site_url(); ?>network/form_validation",
        data:{password:password},
        success:function(response)
        {
//            remove alert();
        }
    });
} 

check_if_exists();
</script>

Answer 1

用户总是以编码形式将密码保存在数据库中，但在您的情况下，首先您需要对密码进行编码（格式 md5 或您使用的编码格式），然后检查您的用户密码。

public function form_validation($userID) {

$this->load->library('form_validation');
$this->form_validation->set_rules("amount","Amount", 'required|numeric');

 $password = md5(trim($this->input->post('password')));
 $exists = $this->networks->filename_exists($password);

.........

}

在继续之前提供有效密码 (Codeigniter)

Provide a valid password before proceeding (Codeigniter)

javascript

ajax

codeigniter