连续 10 次登录错误，请 {$info} {$s} 秒后再登录！
"); } } if (md5($user['password'] . session('loginskey')) !== $data['password']) { if (empty($cache) || empty($cache['time']) || empty($cache['number']) || $cache['time'] + 3600 < time()) { $cache = ['time' => time(), 'number' => 1, 'geoip' => $this->request->ip()]; } elseif ($cache['number'] + 1 <= 10) { $cache = ['time' => time(), 'number' => $cache['number'] + 1, 'geoip' => $this->request->ip()]; } cache('user_login_' . $user['username'], $cache); if (($diff = 10 - $cache['number']) > 0) { $this->error("登录账号或密码错误！还有 {$diff} 次尝试机会，将锁定一小时内禁止登录！
"); } else { _syslog('系统管理', "账号{$user['username']}连续10次登录密码错误，请注意账号安全！"); $this->error("登录账号或密码错误！尝试次数达到上限，锁定一小时内禁止登录！
"); } } // 登录成功并更新账号 cache('user_login_' . $user['username'], null); Db::name('SystemUser')->where(['id' => $user['id']])->update([ 'login_at' => Db::raw('now()'), 'login_ip' => $this->request->ip(), 'login_num' => Db::raw('login_num+1'), ]); session('user', $user); session('loginskey', null); empty($user['authorize']) || \app\admin\service\Auth::applyNode(); _syslog('系统管理', '用户登录系统成功'); $this->success('登录成功，正在进入系统...', url('@admin')); } } /** * 退出登录 */ public function out() { if ($_SESSION) $_SESSION = []; [session_unset(), session_destroy()]; $this->success('退出登录成功！', url('@admin/login')); } }