用户修改密码时需校验原密码

This commit is contained in:
zmister 2021-10-28 21:02:38 +08:00
parent 0fff3cf126
commit 2324148bde
3 changed files with 47 additions and 24 deletions

View File

@ -1009,9 +1009,13 @@ def admin_register_code(request):
def change_pwd(request): def change_pwd(request):
if request.method == 'POST': if request.method == 'POST':
try: try:
old_pwd = request.POST.get('old_pwd', None)
password = request.POST.get('password',None) password = request.POST.get('password',None)
password2 = request.POST.get('password2',None) password2 = request.POST.get('password2',None)
print(password, password2) # print(password, password2)
user = request.user.check_password(old_pwd)
if user is False:
return JsonResponse({'status':False,'data':_('密码错误!')})
if password and password== password2: if password and password== password2:
if len(password) >= 6: if len(password) >= 6:
user = User.objects.get(id=request.user.id) user = User.objects.get(id=request.user.id)

View File

@ -66,25 +66,34 @@
title:'{% trans "修改密码" %}', title:'{% trans "修改密码" %}',
area:'300px;', area:'300px;',
id:'changePwd', id:'changePwd',
content:'<div style="padding:10px 0 0 20px;">修改用户密码:</div><div style="padding: 20px;"><input class="layui-input" type="password" id="newPwd1" style="margin-bottom:10px;" placeholder="输入新密码" required lay-verify="required"><input class="layui-input" type="password" id="newPwd2" placeholder="再次确认新密码" required lay-verify="required"></div>', content:'<div style="padding:10px 0 0 20px;">修改用户密码:</div><div style="padding: 20px;"><input class="layui-input" type="password" id="oldPwd" style="margin-bottom:10px;" placeholder="输入原密码" required lay-verify="required"><input class="layui-input" type="password" id="newPwd1" style="margin-bottom:10px;" placeholder="输入新密码" required lay-verify="required"><input class="layui-input" type="password" id="newPwd2" placeholder="再次确认新密码" required lay-verify="required"></div>',
btn:['{% trans "确认修改" %}','{% trans "取消" %}'], btn:['{% trans "确认修改" %}','{% trans "取消" %}'],
yes:function (index,layero) { yes:function (index,layero) {
layer.load(1); layer.load(1);
data = { data = {
'old_pwd':$("#oldPwd").val(),
'password':$("#newPwd1").val(), 'password':$("#newPwd1").val(),
'password2':$("#newPwd2").val(), 'password2':$("#newPwd2").val(),
} }
$.post("{% url 'modify_pwd' %}",data,function(r){ $.ajax({
layer.closeAll("loading"); url:"{% url 'modify_pwd' %}",
type:"post",
data:data,
success:function(r){
layer.closeAll('loading');
if(r.status){ if(r.status){
//修改成功 //修改成功
// window.location.reload();
layer.close(index) layer.close(index)
layer.msg("{% trans '修改成功' %}") layer.msg("{% trans '修改成功' %}")
}else{ }else{
//修改失败,提示 //修改失败,提示
//console.log(r) //console.log(r)
layer.msg(r.data) layer.msg(r.data,{icon:2})
}
},
error:function(){
layer.closeAll('loading');
layer.msg("修改异常",{icon:2})
} }
}) })
}, },

View File

@ -447,16 +447,21 @@
title:'{% trans "修改密码" %}', title:'{% trans "修改密码" %}',
area:'300px;', area:'300px;',
id:'changePwd', id:'changePwd',
content:'<div style="padding:10px 0 0 20px;">修改用户[' + username + ']的密码:</div><div style="padding: 20px;"><input class="layui-input" type="password" id="newPwd1" style="margin-bottom:10px;" placeholder="输入新密码" required lay-verify="required"><input class="layui-input" type="password" id="newPwd2" placeholder="再次确认新密码" required lay-verify="required"></div>', content:'<div style="padding:10px 0 0 20px;">修改用户[' + username + ']的密码:</div><div style="padding: 20px;"><input class="layui-input" type="password" id="oldPwd" style="margin-bottom:10px;" placeholder="输入原密码" required lay-verify="required"><input class="layui-input" type="password" id="newPwd1" style="margin-bottom:10px;" placeholder="输入新密码" required lay-verify="required"><input class="layui-input" type="password" id="newPwd2" placeholder="再次确认新密码" required lay-verify="required"></div>',
btn:['{% trans "确认修改" %}','{% trans "取消" %}'], btn:['{% trans "确认修改" %}','{% trans "取消" %}'],
yes:function (index,layero) { yes:function (index,layero) {
layer.load(1); layer.load(1);
data = { data = {
'old_pwd':$("#oldPwd").val(),
'password':$("#newPwd1").val(), 'password':$("#newPwd1").val(),
'password2':$("#newPwd2").val(), 'password2':$("#newPwd2").val(),
} }
$.post("{% url 'modify_pwd' %}",data,function(r){ $.ajax({
layer.closeAll("loading"); url:"{% url 'modify_pwd' %}",
type:"post",
data:data,
success:function(r){
layer.closeAll('loading');
if(r.status){ if(r.status){
//修改成功 //修改成功
window.location.reload(); window.location.reload();
@ -464,7 +469,12 @@
}else{ }else{
//修改失败,提示 //修改失败,提示
//console.log(r) //console.log(r)
layer.msg(r.data) layer.msg(r.data,{icon:2})
}
},
error:function(){
layer.closeAll('loading');
layer.msg("修改异常",{icon:2})
} }
}) })
}, },