CakePHP的登录与两个用户名和电子邮件使用验证组件 [英] CakePHP Login with both username and email using Auth Component

问题描述

我想在auth组件，允许用户登录四川省入境无论是用户名或电子邮件。
在我的用户表，这两个领域 - 用户名和USEREMAIL是唯一的。
在注册时，就像生成的密码：

I want the auth component to allow user to login entrying either username or email. In my users table, both fields - userName and userEmail are unique. At time of registration, the password is generated like:

SHA1（$用户名密码$）;

sha1($username.$password);

问题是，用户无法使用电子邮件进行登录。

The problem is that user is not able to login using email.

应用控制器

 var $components = array('Auth');

 public function beforeFilter(){

if(isset($this->params['prefix']) && $this->params['prefix'] == 'webadmin') {

       $this->Auth->userModel = 'Admin';
      $this->Auth->logoutRedirect = $this->Auth->loginAction = array('prefix' => 'webadmin', 'controller' => 'login', 'action' => 'index');
        $this->Auth->loginError = 'Invalid Username/Password Combination!';
        $this->Auth->authError = 'Please login to proceed further!';
         $this->Auth->flashElement = "auth.front.message";
        $this->Auth->loginRedirect = array('prefix'=>'webadmin', 'controller'=>'dashboard', 'action'=>'index');
            }
          else{


         $this->layout="front";  

        //$this->Auth->autoRedirect = false;

        // $this->Auth->logoutRedirect = $this->Auth->loginAction = array('controller' => 'users', 'action' => 'login');
    //   $this->Auth->loginRedirect = array('controller'=>'blogs', 'action'=>'index');
         $this->Auth->fields = array(
            'username' => 'userName',
            'password' => 'password'
           );
          $this->Auth->userScope = array('User.status'=>1); 

         $this->Auth->loginError = "The username/email and password you entered doesn't match our records.";
         $this->Auth->authError = 'Please login to view this page!';
         $this->Auth->flashElement = "auth.front.message";
         $this->Auth->loginRedirect = array('controller'=>'profiles', 'action'=>'index');

    }

用户控制器：登录功能是这样：

if(!empty($this->data))
{ 
   // Try to login with Email
    if (!empty($this->Auth->data)) {
    // save username entered in the login form
    $username = $this->Auth->data['User']['userName'];

    // find a user by e-mail
    $find_by_email = $this->User->find('first', array(
                    'conditions' => array('userEmail' => $this->Auth->data['User']['userName']),
                    'fields' => 'userName'));
        // found
        if (!empty($find_by_email))
        {

        $this->Auth->data['User']['userName'] = $find_by_email['User']['userName'];
        $this->data['User']['password']=$this->Auth->data['User']['password'];

          if (!$this->Auth->login($this->data)) {

            // login failed
            // bring back the username entered in the login form
            $this->Auth->data['User']['username'] = $username;
          } else {
          $this->Session->delete('Message.auth');
          // redirect
          if ($this->Auth->autoRedirect) {
          $this->redirect($this->Auth->redirect(), null, true);
          }
        }
       }
    }
}

Auth.php：（我已经在这里了一些变化的方式密码我使用CakePHP的会话自动登录到SMF论坛产生的）

    function login($data = null) {
 $data['User.password'] = sha1(strtolower($data['User.userName']) . $_POST['data']['User']['password']);


        $this->__setDefaults();
        $this->_loggedIn = false;

        if (empty($data)) {
            $data = $this->data;
        }

        if ($user = $this->identify($data)) {

            $this->Session->write($this->sessionKey, $user);
            $this->_loggedIn = true;
        }
        return $this->_loggedIn;
    }

我把帮助下的此链接，但我不是auth.php获得在$数据的用户名['User.userName']，我收到的电子邮件在这里，所以密码出错，并导致登录失败。

I took help from this link, but I am not getting username in $data['User.userName'] in auth.php, I getting email here, so the password goes wrong and results in login failure.

请帮忙。

推荐答案

我可以使它工作的唯一方法是通过修改蛋糕auth.php。

The only way I could make it work is by modifying auth.php in cake.

应用控制器
我已将此添加到code之前过滤器：

App Controller I added this to the code in before filter:

 $this->Auth->fields = array(
        'username' => 'userName',
    'email'=>'userEmail',
        'password' => 'password'
     );

用户控制器我删除了所有额外的code。

Users Controller I removed all the extra code.

Auth.php
我更改了识别功能//我想要的方式加密密码后，检查电子邮件。

Auth.php I made changes to the identify function to check email after encrypting the password in //the way I wanted.

function identify($user = null, $conditions = null) {
        if ($conditions === false) {
            $conditions = array();
        } elseif (is_array($conditions)) {
            $conditions = array_merge((array)$this->userScope, $conditions);
        } else {
            $conditions = $this->userScope;
        }
        $model =& $this->getModel();


        if (empty($user)) {
            $user = $this->user();
            if (empty($user)) {
                return null;
            }
        } elseif (is_object($user) && is_a($user, 'Model')) {
            if (!$user->exists()) {
                return null;
            }
            $user = $user->read();
            $user = $user[$model->alias];
        } elseif (is_array($user) && isset($user[$model->alias])) {
            $user = $user[$model->alias];
        }

        if (is_array($user) && (isset($user[$this->fields['username']]) || isset($user[$model->alias . '.' . $this->fields['username']]))) {
            if (isset($user[$this->fields['username']]) && !empty($user[$this->fields['username']])  && !empty($user[$this->fields['password']])) {
                if (trim($user[$this->fields['username']]) == '=' || trim($user[$this->fields['password']]) == '=') {
                    return false;
                }
                $find = array(
                    $model->alias.'.'.$this->fields['username'] => $user[$this->fields['username']],
                    $model->alias.'.'.$this->fields['password'] => $user[$this->fields['password']]
                );
            } elseif (isset($user[$model->alias . '.' . $this->fields['username']]) && !empty($user[$model->alias . '.' . $this->fields['username']])) {
                if (trim($user[$model->alias . '.' . $this->fields['username']]) == '=' || trim($user[$model->alias . '.' . $this->fields['password']]) == '=') {
                    return false;
                }

            // my code starts
            $user['User.userEmail']=$user['User.userName']; 
    //find username using email
        $find_by_email= $model->find('first', array(
                'fields' => array('User.userName','User.realpass'), 
                'conditions' => array($model->alias.'.'.$this->fields['email'] => $user[$model->alias . '.' . $this->fields['email']]),
                'recursive' => 0
            )); 



        if(!empty($find_by_email))
        {
        $uname=strtolower($find_by_email['User']['userName']);
        $pwd=$user[$model->alias . '.' . $this->fields['password']];
        }
        else
        {
        $uname=strtolower($user[$model->alias . '.' . $this->fields['username']]);
        $pwd=$user[$model->alias . '.' . $this->fields['password']];
        }
         $thepassword = sha1($uname.$pwd); // encrypt password


            // find user where username or email equals to the username passed  
                $find = array(
                    'OR' => array($model->alias.'.'.$this->fields['username'] => $user[$model->alias . '.' . $this->fields['username']], $model->alias.'.'.$this->fields['email'] => $user[$model->alias . '.' . $this->fields['username']]),
                    $model->alias.'.'.$this->fields['password'] => $thepassword
                );
            } else {
                return false;
            }


            $cond=array_merge($find, $conditions);

            $data = $model->find('first', array(
                'conditions' => $cond,
                'recursive' => 0
            ));

  // my code ends here

            if (empty($data) || empty($data[$model->alias])) {
                return null;
            }
        } elseif (!empty($user) && is_string($user)) {
            $data = $model->find('first', array(
                'conditions' => array_merge(array($model->escapeField() => $user), $conditions),
            ));
            if (empty($data) || empty($data[$model->alias])) {
                return null;
            }
        }

        if (!empty($data)) {
            if (!empty($data[$model->alias][$this->fields['password']])) {
                unset($data[$model->alias][$this->fields['password']]);
            }
            return $data[$model->alias];
        }
        return null;
    }

最后，我评论密码加密code返回简单的密码，这样我可以对它进行加密，我需要在上面的功能笏。

Lastly, I commented the password encrypt code to return the simple password so that I can encrypt it the wat I needed in the above function.

function password($password) {
//return Security::hash($password, null, true);
 return $password;
}

这篇关于CakePHP的登录与两个用户名和电子邮件使用验证组件的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！