login_login.py 2.7 KB

12345678910111213141516171819202122232425262728293031323334353637383940414243444546474849505152535455565758596061626364656667686970717273
  1. from .tool.func import *
  2. def login_login_2():
  3. with get_db_connect() as conn:
  4. curs = conn.cursor()
  5. ip = ip_check()
  6. if ip_or_user(ip) == 0:
  7. return redirect('/user')
  8. if ban_check(None, 'login') == 1:
  9. return re_error('/ban')
  10. if flask.request.method == 'POST':
  11. if captcha_post(flask.request.form.get('g-recaptcha-response', flask.request.form.get('g-recaptcha', ''))) == 1:
  12. return re_error('/error/13')
  13. else:
  14. captcha_post('', 0)
  15. user_agent = flask.request.headers.get('User-Agent', '')
  16. user_id = flask.request.form.get('id', '')
  17. user_data = {}
  18. curs.execute(db_change(
  19. 'select name, data from user_set where id = ? and name = "pw" or name = "encode"'
  20. ), [user_id])
  21. sql_data = curs.fetchall()
  22. if not sql_data:
  23. return re_error('/error/2')
  24. for i in sql_data:
  25. user_data[i[0]] = i[1]
  26. if len(user_data) < 2:
  27. return re_error('/error/2')
  28. if pw_check(
  29. flask.request.form.get('pw', ''),
  30. user_data['pw'],
  31. user_data['encode'],
  32. user_id
  33. ) != 1:
  34. return re_error('/error/10')
  35. curs.execute(db_change('select data from user_set where name = "2fa" and id = ?'), [user_id])
  36. fa_data = curs.fetchall()
  37. if fa_data and fa_data[0][0] != '':
  38. flask.session['login_id'] = user_id
  39. return redirect('/login/2fa')
  40. else:
  41. flask.session['id'] = user_id
  42. ua_plus(user_id, ip, user_agent, get_time())
  43. conn.commit()
  44. return redirect('/user')
  45. else:
  46. return easy_minify(flask.render_template(skin_check(),
  47. imp = [load_lang('login'), wiki_set(), wiki_custom(), wiki_css([0, 0])],
  48. data = '''
  49. <form method="post">
  50. <input placeholder="''' + load_lang('id') + '''" name="id" type="text">
  51. <hr class="main_hr">
  52. <input placeholder="''' + load_lang('password') + '''" name="pw" type="password">
  53. <hr class="main_hr">
  54. ''' + captcha_get() + '''
  55. <button type="submit">''' + load_lang('login') + '''</button>
  56. ''' + http_warning() + '''
  57. </form>
  58. ''',
  59. menu = [['user', load_lang('return')]]
  60. ))