Phalcon搭建多模块框架二十四：注册security服务并模拟登录

最新推荐文章于 2022-03-21 19:31:01 发布

狂奔的蜗牛zy

最新推荐文章于 2022-03-21 19:31:01 发布

阅读量1k

点赞数

本文链接：https://blog.csdn.net/u014691098/article/details/80638060

版权

phalcon 专栏收录该内容

36 篇文章 6 订阅

订阅专栏

使用Security可以将密码散列、防止跨站点请求伪造攻击、防表单重复提交等。
这里写图片描述
1、打开config/config.php，添加

'security' => [
    // 设置由openssl伪随机生成器生成的字节数
    'random_bytes' => 16,
    // 设置默认hash,0=7(CRYPT_BLOWFISH_Y),1(CRYPT_STD_DES),2(CRYPT_EXT_DES),3(CRYPT_MD5),4(CRYPT_BLOWFISH),5(CRYPT_BLOWFISH_A),6(CRYPT_BLOWFISH_X),8(CRYPT_SHA256),9(CRYPT_SHA512)
    'default_hash' => 7,
    'work_factor' =>8
]

完整的config/config.php

<?php
/**
 * @desc 全局配置文件
 * @author zhaoyang
 * @date 2018年5月3日 下午7:54:47
 */
return [ 
    // 服务配置
    'services' => [ 
        // mysql数据库配置
        'db' => [ 
            'host' => 'localhost',
            'port' => 3306,
            'username' => 'root',
            'password' => '123456',
            'dbname' => 'phalcon',
            'charset' => 'utf8',
            // 是否记录执行的mysql语句
            'logged' => true,
            // 记录执行时间超过0秒的mysql语句
            'max_execute_time' => 0,
            // 比较时间到小数点后几位
            'scale' => 5,
            'log_path' => BASE_PATH . 'runtime/mysql/{Y/m/d}/{YmdH}.log'
        ],
        // 调度器配置
        'dispatcher' => [ 
            // 处理 Not-Found错误配置
            'notfound' => [ 
                // 错误码及错误提示
                'status_code' => 404,
                'message' => 'Not Found',
                // 错误跳转的页面
                'namespace' => DEFAULT_MODULE_NAMESPACE . '\\Controllers',
                'controller' => 'error',
                'action' => 'error404'
            ]
        ],
        // volt引擎相关配置
        'view_engine_volt' => [ 
            // 编译模板目录
            'compiled_path' => BASE_PATH . 'runtime/' . DEFAULT_MODULE . '/compiled/volt' . DS,
            // 是否实时编译
            'compile_always' => false,
            // 附加到已编译的PHP文件的扩展名
            'compiled_extension' => '.php',
            // 使用这个替换目录分隔符
            'compiled_separator' => '%%',
            // 是否要检查在模板文件和它的编译路径之间是否存在差异
            'stat' => true,
            // 模板前缀
            'prefix' => '',
            // 支持HTML的全局自动转义
            'autoescape' => false
        ],
        // 模板相关配置
        'view' => [ 
            // 模板后缀
            'view_suffix' => 'volt,phtml',
            // 模板路径
            'view_path' => APP_PATH . DEFAULT_MODULE . '/views' . DS,
            // 模板引擎,暂时支持viewEngineVolt or viewEnginePhp,与模板后缀一一对应
            'view_service' => 'viewEngineVolt,viewEnginePhp',
            'disable_level' => [
                'level_action_view' => false,
                'level_before_template' => true,
                'level_layout' => true,
                'level_after_template' => true,
                'level_main_layout' => true
            ]
        ],
        // 过滤器设置
        'filter' => [ 
            // 过滤类型，支持string、trim、absint、int、email、float、int!、float!、alphanum、striptags、lower、upper、url、special_chars
            'default_filter' => 'string,trim'
        ],
        // 文件日志,formatter常用line，adapter常用file
        'logger' => [ 
            'line' => [ 
                'format' => '[%date%][%type%] %message%',
                'date_format' => 'Y-m-d H:i:s'
            ],
            'file' => [ 
                'alert' => BASE_PATH . 'runtime/' . DEFAULT_MODULE . '/logs/alert/{Y/m/d}/{YmdH}.log',
                'critical' => BASE_PATH . 'runtime/' . DEFAULT_MODULE . '/logs/critical/{Y/m/d}/{YmdH}.log',
                'debug' => BASE_PATH . 'runtime/' . DEFAULT_MODULE . '/logs/debug/{Y/m/d}/{YmdH}.log',
                'error' => BASE_PATH . 'runtime/' . DEFAULT_MODULE . '/logs/error/{Y/m/d}/{YmdH}.log',
                'emergency' => BASE_PATH . 'runtime/' . DEFAULT_MODULE . '/logs/emergency/{Y/m/d}/{YmdH}.log',
                'info' => BASE_PATH . 'runtime/' . DEFAULT_MODULE . '/logs/info/{Y/m/d}/{YmdH}.log',
                'notice' => BASE_PATH . 'runtime/' . DEFAULT_MODULE . '/logs/notice/{Y/m/d}/{YmdH}.log',
                'warning' => BASE_PATH . 'runtime/' . DEFAULT_MODULE . '/logs/warning/{Y/m/d}/{YmdH}.log'
            ]
        ],
        // session配置
        'session' => [ 
            // 是否自动开启 SESSION
            'auto_start' => true,
            'options' => [ 
                'adapter' => 'files',
                'unique_id' => DEFAULT_MODULE
            ]
            // @formatter:off
            /* // phalcon提供了四种适配器，分别是files、memcache、redis、libmemcached
            'options' => [
                'adapter'    => 'memcache',
                'unique_id' => DEFAULT_MODULE,
                'prefix' => DEFAULT_MODULE,
                'persistent' => true,
                'lifetime' => 3600
            ],
            'options' => [
                'adapter'    => 'redis',
                'unique_id' => DEFAULT_MODULE,
                'prefix' => DEFAULT_MODULE,
                'auth' => '',
                'persistent' => false,
                'lifetime' => 3600,
                'index' => 1
            ] */
            // @formatter:on
        ],
        // 加密配置
        'crypt' => [ 
            // 加密秘钥
            'key' => DEFAULT_MODULE,
            // 填充方式，默认是0（PADDING_DEFAULT），1（PADDING_ANSI_X_923）、2（PADDING_PKCS7）、3（PADDING_ISO_10126）、4（PADDING_ISO_IEC_7816_4）、5（PADDING_ZERO）、6（PADDING_SPACE）
            'padding' => '',
            // 加密方法，默认是"aes-256-cfb"
            'cipher' => ''
        ],
        // cookies配置
        'cookies' => [ 
            // 是否使用加密,使用加密必须要设置crypt 的key值
            'use_encryption' => true
        ],
        // 缓存配置
        'cache' => [ 
            'frontend' => [ 
                // 数据处理方式，支持data（序列化）、json、base64、none、output、igbinary、msgpack
                'data' => [ 
                    'lifetime' => 172800
                ],
                'output' => [
                    'lifetime' => 172800
                ]
            ],
            'backend' => [ 
                // 数据缓存方式，支持memcache、file、redis、mongo、apc、apcu、libmemcached、memory、xcache
                'file' => [ 
                    'cache_dir' => BASE_PATH . 'runtime/' . DEFAULT_MODULE . '/cache/',
                    // 对保存的键名进行md5加密
                    'safekey' => true,
                    'prefix' => ''
                ],
                'memcache' => [ 
                    'host' => 'localhost',
                    'port' => '11211',
                    'persistent' => false,
                    'prefix' => '',
                    // 默认情况下禁用对缓存键的跟踪
                    'stats_key' => ''
                ],
                'redis' => [ 
                    'host' => '127.0.0.1',
                    'port' => 6379,
                    'auth' => '',
                    'persistent' => false,
                    'prefix' => '',
                    'stats_key' => '',
                    'index' => 0
                ]
            ]
        ],
        // 模型元数据缓存配置
        'models_metadata' => [ 
            'options' => [ 
                // 适配器，默认使用memory(内存),还支持apc、apcu、files、libmemcached、memcache、redis、session、xcache
                'adapter' => 'memcache',
                'unique_id' => DEFAULT_MODULE,
                'prefix' => DEFAULT_MODULE,
                'persistent' => false,
                'lifetime' => 3600
            ]
            // @formatter:off
            /* 'options' => [
                'adapter' => 'files',
                'meta_data_dir' => BASE_PATH . 'runtime/' . DEFAULT_MODULE . '/models_metadata/'
            ],
            'options' => [
                'adapter'    => 'memcache',
                'unique_id' => DEFAULT_MODULE,
                'prefix' => DEFAULT_MODULE,
                'persistent' => true,
                'lifetime' => 3600
            ],
            'options' => [
                'adapter' => 'memory',
            ],
            'options' => [
                'adapter'    => 'redis',
                'unique_id' => DEFAULT_MODULE,
                'prefix' => DEFAULT_MODULE,
                'auth' => '',
                'persistent' => false,
                'lifetime' => 3600,
                'index' => 1
            ],
            'options' => [
                'adapter' => 'session',
                'prefix' => DEFAULT_MODULE,
            ] */
            // @formatter:on
        ],
        // 模型缓存配置
        'models_cache' => [ 
            'frontend' => [ 
                'adapter' => 'data',
                'lifetime' => 86400
            ],
            'backend' => [ 
                'adapter' => 'memcache'
            ]
        ],
        // 视图缓存配置
        'view_cache' => [
            'frontend' => [
                'adapter' => 'output',
                'lifetime' => 86400
            ],
            'backend' => [
                'adapter' => 'file',
                'cache_dir' => BASE_PATH . 'runtime/' . DEFAULT_MODULE . '/cache/view/',
                'prefix' => ''
            ]
        ],
        // url配置
        'url' => [
            'base_uri' => '/',
            'static_base_uri' => '/',
            'base_path' => ''
        ],
        'flash' => [
            // 消息class属性值
            'css_classes' => [
                'error' => 'alert alert-danger',
                'success' => 'alert alert-success',
                'notice' => 'alert alert-info',
                'warning' => 'alert alert-warning'
            ],
            // 是否在生成的html中设置自动转义模式
            'autoescape' => true,
            // 是否必须使用HTML隐式格式化输出
            'automatic_html' => true,
            // 是否立即输出，为true时，调用$this->flash->message()或其他设置消息(例如success)时，消息立即输出(echo)
            // 为false时，消息不会输出，会保存在flash对象中并返回消息$res = $this->flash->success('my message');
            'implicit_flush' => false
        ],
        'flash_session' => [
            // 消息class属性值
            'css_classes' => [
                'error' => 'alert alert-danger',
                'success' => 'alert alert-success',
                'notice' => 'alert alert-info',
                'warning' => 'alert alert-warning'
            ],
            // 是否在生成的html中设置自动转义模式
            'autoescape' => true,
            // 是否必须使用HTML隐式格式化输出
            'automatic_html' => true,
            // 是否立即输出，必须设为true（默认为true），否则调用->output()不输出
            'implicit_flush' => true
        ],
        // 安全配置
        'security' => [
            // 设置由openssl伪随机生成器生成的字节数
            'random_bytes' => 16,
            // 设置默认hash,0=7(CRYPT_BLOWFISH_Y),1(CRYPT_STD_DES),2(CRYPT_EXT_DES),3(CRYPT_MD5),4(CRYPT_BLOWFISH),5(CRYPT_BLOWFISH_A),6(CRYPT_BLOWFISH_X),8(CRYPT_SHA256),9(CRYPT_SHA512)
            'default_hash' => 7,
            'work_factor' =>8
        ]
    ]

];

2、如无特殊需求，则无需对home下的config进行单独配置
3、打开config/services.php，添加

$di->set('security', function () {
    $securityConfig = $this->getConfig()->services->security;
    $security = new Security();
    $securityConfig->random_bytes && $security->setRandomBytes($securityConfig->random_bytes);
    $securityConfig->default_hash && $security->setDefaultHash($securityConfig->default_hash);
    $securityConfig->work_factor && $security->setWorkFactor($securityConfig->work_factor);
    return $security;
});

完整的config/services.php

<?php
/**
 * @desc 注册服务
 * @author zhaoyang
 * @date 2018年5月3日 下午8:01:34
 */

use Common\Common;
use Common\Validate;
use Library\Extensions\VoltExtension;
use Library\Plugins\DbProfilerPlugin;
use Library\Plugins\DIspatcherPlugin;
use Phalcon\Cache\Frontend\Factory as CacheFrontendFactory;
use Phalcon\Cache\Backend\Factory as CacheBackendFactory;
use Phalcon\Config;
use Phalcon\Crypt;
use Phalcon\Db\Adapter\Pdo\Mysql;
use Phalcon\Db\Profiler;
use Phalcon\DI;
use Phalcon\Di\FactoryDefault;
use Phalcon\Events\Manager as EventsManager;
use Phalcon\Http\Response\Cookies;
use Phalcon\Logger\Adapter\File as LoggerAdapterFile;
use Phalcon\Logger\Formatter\Line as LoggerFormatterLine;
use Phalcon\Mvc\Dispatcher;
use Phalcon\Mvc\Router;
use Phalcon\Mvc\View;
use Phalcon\Mvc\View\Engine\Volt as ViewEngineVolt;
use Phalcon\Mvc\View\Engine\Php as ViewEnginePhp;
use Phalcon\Session\Factory as SessionFactory;
use Phalcon\Text;
use Phalcon\Mvc\Url;
use Phalcon\Security;
use Phalcon\Flash\Direct as FlashDirect;
use Phalcon\Flash\Session as FlashSession;

$di = new FactoryDefault();

/**
 * @desc 注册调度器服务
 * @author zhaoyang
 * @date 2018年5月3日 下午8:38:34
 */
$di->setShared('dispatcher', function () {
    $config = $this->getConfig();
    $dispatcher = new Dispatcher();
    $defaultNamespace = $config->module_default_namespaces ?? DEFAULT_MODULE_NAMESPACE . '\\Controllers';
    $dispatcher->setDefaultNamespace($defaultNamespace);
    $eventsManager = new EventsManager();
    $eventsManager->attach('dispatch', new DIspatcherPlugin());
    $dispatcher->setEventsManager($eventsManager);
    return $dispatcher;
});

/**
 * @desc 注册配置服务
 * @author zhaoyang
 * @date 2018年5月3日 下午8:38:53
 */
$di->setShared('config', function () use ($config) {
    return new Config($config);
});

/**
 * @desc 注册路由服务
 * @author zhaoyang
 * @date 2018年5月3日 下午8:39:06
 */
$di->setShared('router', function () use ($routerRules) {
    $router = new Router();
    // 自动删除末尾斜线
    $router->removeExtraSlashes(true);
    foreach ($routerRules as $k => $v) {
        $router->add($k, $v);
    }
    return $router;
});

/**
 * @desc 注册视图引擎volt服务
 * @author zhaoyang
 * @date 2018年5月4日 下午5:28:52
 */
$di->setShared('viewEngineVolt', function (View $view, DI $di) {
    // 获取config服务有多种方法，这是其一
    $voltConfig = $di->get('config')->services->view_engine_volt->toArray();
    $voltConfig = Common::convertArrKeyUnderline($voltConfig);
    $viewEngineVolt = new ViewEngineVolt($view, $di);
    $voltConfig['compiledPath'] = isset($voltConfig['compiledPath']) ? Common::dirFormat($voltConfig['compiledPath']) : BASE_PATH . 'runtime/' . DEFAULT_MODULE . '/compiled/volt' . DS;
    $mkdirRes = Common::mkdir($voltConfig['compiledPath']);
    if (!$mkdirRes) {
        throw new \Exception('创建目录 ' . $voltConfig['compiledPath'] . ' 失败');
    }
    $viewEngineVolt->setOptions($voltConfig);
    // 获取编译器对象
    $compiler = $viewEngineVolt->getCompiler();
    // 添加扩展
    $compiler->addExtension(new VoltExtension());
    return $viewEngineVolt;
});

/**
 * @desc 注册视图引擎php服务
 * @author zhaoyang
 * @date 2018年5月4日 下午5:29:15
 */
$di->setShared('viewEnginePhp', function (View $view, DI $di) {
    $viewEnginePhp = new ViewEnginePhp($view, $di);
    return $viewEnginePhp;
});

/**
 * @desc 注册视图服务
 * @author zhaoyang
 * @date 2018年5月3日 下午10:52:37
 */
$di->set('view', function () {
    // 获取config服务有多种方法，这是其二
    $viewConfig = $this->getConfig()->services->view;
    $viewDir = $viewConfig->view_path ?? APP_PATH . DEFAULT_MODULE . '/views' . DS;
    if (isset($viewConfig->view_suffix)) {
        $viewSuffixs = explode(',', $viewConfig->view_suffix);
    } else {
        $viewSuffixs = [ 
            'volt'
        ];
    }
    if (isset($viewConfig->view_service)) {
        $viewServices = explode(',', $viewConfig->view_service);
    } else {
        $viewServices = [ 
            'viewEngineVolt'
        ];
    }
    $engines = [ ];
    foreach ($viewSuffixs as $k => $v) {
        $suffix = '.' . ltrim($v, '.');
        $engines[$suffix] = $viewServices[$k] ?? $viewServices[0];
    }
    $view = new View();
    // 设置视图路径
    $view->setViewsDir($viewDir);
    // 注册视图引擎
    $view->registerEngines($engines);
    $disableLevelConfig = $viewConfig->disable_level;
    // 关闭渲染级别
    $disableLevel = [ ];
    foreach ($disableLevelConfig as $k => $v) {
        if ($v) {
            switch ($k) {
                case 'level_action_view':
                    $disableLevel[View::LEVEL_ACTION_VIEW] = true;
                    break;
                case 'level_before_template':
                    $disableLevel[View::LEVEL_BEFORE_TEMPLATE] = true;
                    break;
                case 'level_layout':
                    $disableLevel[View::LEVEL_LAYOUT] = true;
                    break;
                case 'level_after_template':
                    $disableLevel[View::LEVEL_AFTER_TEMPLATE] = true;
                    break;
                case 'level_main_layout':
                    $disableLevel[View::LEVEL_MAIN_LAYOUT] = true;
                    break;
            }
        }
    }
    $view->disableLevel($disableLevel);
    return $view;
});

/** 
 * @desc 注册验证服务 
 * @author zhaoyang 
 * @date 2018年5月11日 下午7:26:30 
 */
$di->set('validate', function () {
    $validate = new Validate();
    return $validate;
});

/** 
 * @desc 注册性能分析组件 
 * @author zhaoyang 
 * @date 2018年5月20日 下午9:34:33 
 */
$di->setShared('profiler', function () {
    $profiler = new Profiler();
    return $profiler;
});

/** 
 * @desc 注册数据库(连接)服务 
 * @author zhaoyang 
 * @date 2018年5月14日 下午9:01:36 
 */
$di->setShared('db', function () {
    $dbConfig = $this->getConfig()->services->db->toArray();
    $mysql = new Mysql($dbConfig);
    if ($dbConfig['logged'] ?? false) {
        $eventsManager = new EventsManager();
        $eventsManager->attach('db', new DbProfilerPlugin());
        $mysql->setEventsManager($eventsManager);
    }
    return $mysql;
});

/** 
 * @desc 注册日志服务 
 * @author zhaoyang 
 * @date 2018年5月19日 下午6:20:36 
 */
$di->set('logger', function (string $file = null, array $line = null) {
    $config = $this->getConfig()->services->logger;
    $linConfig = clone $config->line;
    !is_null($line) && $linConfig = $linConfig->merge(new Config($line));
    $loggerFormatterLine = new LoggerFormatterLine($linConfig->format, $linConfig->date_format);
    $fileConfig = $config->file;
    if (empty($file)) {
        $file = $fileConfig->info;
    } else if (array_key_exists($file, $fileConfig->toArray())) {
        $file = $fileConfig->$file;
    }
    $file = Common::dirFormat($file);
    $dir = dirname($file);
    $mkdirRes = Common::mkdir($dir);
    if (!$mkdirRes) {
        throw new \Exception('创建目录 ' . $dir . ' 失败');
    }
    $loggerAdapterFile = new LoggerAdapterFile($file);
    $loggerAdapterFile->setFormatter($loggerFormatterLine);
    return $loggerAdapterFile;
});

/** 
 * @desc 注册session服务 
 * @author zhaoyang 
 * @date 2018年5月26日 下午4:48:03 
 */
$di->setShared('session', function () {
    $sessionConfig = $this->getConfig()->services->session;
    $backendConfig = $this->getConfig()->services->cache->backend;
    $optionsArr = $sessionConfig->options->toArray();
    if (!isset($optionsArr['adapter'])) {
        throw new \Exception('session必须设置adapter');
    }
    if (array_key_exists($optionsArr['adapter'], $backendConfig->toArray())) {
        $backendOption = clone $backendConfig->{$optionsArr['adapter']};
        $optionsArr = $backendOption->merge(new Config($optionsArr))->toArray();
    }
    $optionsArr = Common::convertArrKeyUnderline($optionsArr);
    if (version_compare(PHALCON_VERSION, '3.2.0', '>')) {
        $session = SessionFactory::load($optionsArr);
    } else {
        $adapterClassName = 'Phalcon\\Session\\Adapter\\' . Text::camelize($optionsArr['adapter']);
        $session = new $adapterClassName($optionsArr);
    }
    $sessionConfig->auto_start && $session->start();
    return $session;
});

/** 
 * @desc 注册加密服务 
 * @author zhaoyang 
 * @date 2018年5月28日 下午8:17:46 
 */
$di->set('crypt', function (string $key = null, int $padding = null, string $cipher = null) {
    $cryptConfig = $this->getConfig()->services->crypt;
    $crypt = new Crypt();
    if (!empty($cryptConfig->key) || !empty($padding)) {
        $crypt->setKey($key ?? $cryptConfig->key);
    }
    if (!empty($cryptConfig->padding) || !empty($key)) {
        $crypt->setPadding($padding ?? $cryptConfig->padding);
    }
    if (!empty($cryptConfig->cipher) || !empty($cipher)) {
        $crypt->setCipher($cipher ?? $cryptConfig->cipher);
    }
    return $crypt;
});

/** 
 * @desc 注册cookies服务 
 * @author zhaoyang 
 * @date 2018年5月29日 上午9:54:23 
 */
$di->set('cookies', function () {
    $cookiesConfig = $this->getConfig()->services->cookies;
    $cookies = new Cookies();
    isset($cookiesConfig->use_encryption) && $cookies->useEncryption((bool) $cookiesConfig->use_encryption);
    return $cookies;
});

/** 
 * @desc 注册缓存 
 * @author zhaoyang 
 * @date 2018年5月30日 下午10:30:29 
 */
$di->set('cache', function (array $options = []) {
    $cacheConfig = $this->getConfig()->services->cache;
    $frontendConfig = $cacheConfig->frontend;
    if (isset($options['frontend']['adapter'])) {
        $frontendOption = new Config($options['frontend']);
        if (array_key_exists($options['frontend']['adapter'], $frontendConfig->toArray())) {
            $frontendOptionClone = clone $frontendConfig->{$options['frontend']['adapter']};
            $frontendOptionClone->merge($frontendOption);
            $frontendOption = $frontendOptionClone;
        }
    } else {
        $frontendOption = clone $frontendConfig->data;
        $frontendOption->adapter = 'data';
    }
    $frontendOption = Common::convertArrKeyUnderline($frontendOption->toArray());
    if (version_compare(PHALCON_VERSION, '3.2.0', '>')) {
        $frontendCache = CacheFrontendFactory::load($frontendOption);
    } else {
        $frontendClassName = 'Phalcon\\Cache\\Frontend\\' . Text::camelize($frontendOption['adapter']);
        $frontendCache = new $frontendClassName($frontendOption);
    }
    $backendConfig = $cacheConfig->backend;
    if (isset($options['backend']['adapter'])) {
        $backendOption = new Config($options['backend']);
        if (array_key_exists($options['backend']['adapter'], $backendConfig->toArray())) {
            $backendOptionClone = clone $backendConfig->{$options['backend']['adapter']};
            $backendOptionClone->merge($backendOption);
            $backendOption = $backendOptionClone;
        }
    } else {
        $backendOption = clone $backendConfig->file;
        $backendOption->adapter = 'file';
    }
    if ($backendOption->adapter == 'file') {
        if (empty($dir = $backendOption->cache_dir)) {
            throw new \Exception('缓存目录不能为空');
        }
        $dir = Common::dirFormat($dir);
        $mkdirRes = Common::mkdir($dir);
        if (!$mkdirRes) {
            throw new \Exception('创建目录 ' . $dir . ' 失败');
        }
    }
    $backendOption = Common::convertArrKeyUnderline($backendOption->toArray());
    if (version_compare(PHALCON_VERSION, '3.2.0', '>')) {
        $backendOption['frontend'] = $frontendCache;
        $backendCache = CacheBackendFactory::load($backendOption);
    } else {
        $backendClassName = 'Phalcon\\Cache\\Backend\\' . Text::camelize($backendOption['adapter']);
        $backendCache = new $backendClassName($frontendCache, $backendOption);
    }
    return $backendCache;
});

/** 
 * @desc 注册 modelsMetadata服务
 * @author zhaoyang 
 * @date 2018年6月2日 下午10:39:43 
 */
$di->setShared('modelsMetadata', function () {
    $modelsMetadataConfig = $this->getConfig()->services->models_metadata;
    $backendConfig = $this->getConfig()->services->cache->backend;
    $optionsArr = $modelsMetadataConfig->options->toArray();
    if (!isset($optionsArr['adapter'])) {
        throw new \Exception('modelsMetadata必须设置adapter');
    }
    if (array_key_exists($optionsArr['adapter'], $backendConfig->toArray())) {
        $backendOption = clone $backendConfig->{$optionsArr['adapter']};
        $optionsArr = $backendOption->merge(new Config($optionsArr))->toArray();
    }
    if ($optionsArr['adapter'] == 'files') {
        if (empty($optionsArr['meta_data_dir'])) {
            throw new \Exception('缓存目录不能为空');
        }
        $dir = Common::dirFormat($optionsArr['meta_data_dir']);
        $mkdirRes = Common::mkdir($dir);
        if (!$mkdirRes) {
            throw new \Exception('创建目录 ' . $dir . ' 失败');
        }
    }
    $optionsArr = Common::convertArrKeyUnderline($optionsArr);
    $modelsMetadataClassName = 'Phalcon\\Mvc\\Model\\MetaData\\' . Text::camelize($optionsArr['adapter']);
    $modelsMetadata = new $modelsMetadataClassName($optionsArr);
    return $modelsMetadata;
});

/** 
 * @desc 注册modelsCache服务
 * @author zhaoyang 
 * @date 2018年6月3日 下午6:22:31 
 */
$di->set('modelsCache', function (array $options = []) {
    $modelsCacheConfig = clone $this->getConfig()->services->models_cache;
    !empty($options) && $modelsCacheConfig->merge(new Config($options));
    $options = $modelsCacheConfig->toArray();
    $modelsCache = $this->get('cache', [ 
        $options
    ]);
    return $modelsCache;
});

/** 
 * @desc 注册视图缓存 
 * @author zhaoyang 
 * @date 2018年6月4日 下午10:14:52 
 */
$di->set('viewCache', function (array $options = []) {
    $viewCacheConfig = clone $this->getConfig()->services->view_cache;
    !empty($options) && $viewCacheConfig->merge(new Config($options));
    $options = $viewCacheConfig->toArray();
    $viewCache = $this->get('cache', [ 
        $options
    ]);
    return $viewCache;
});

/** 
 * @desc 注册url服务 
 * @author zhaoyang 
 * @date 2018年6月6日 下午8:13:37 
 */
$di->setShared('url', function () {
    $urlConfig = $this->getConfig()->services->url;
    $url = new Url();
    $urlConfig->base_uri && $url->setBaseUri($urlConfig->base_uri);
    $urlConfig->static_base_uri && $url->setStaticBaseUri($urlConfig->static_base_uri);
    $urlConfig->base_path && $url->setBasePath($urlConfig->base_path);
    return $url;
});

/** 
 * @desc 注册flash服务 
 * @author zhaoyang 
 * @date 2018年6月9日 下午8:22:46 
 */
$di->set('flash', function () {
    $flashConfig = $this->getConfig()->services->flash;
    $flashDirect = new FlashDirect($flashConfig->css_classes->toArray());
    $flashDirect->setAutoescape($flashConfig->autoescape);
    $flashDirect->setAutomaticHtml($flashConfig->automatic_html);
    $flashDirect->setImplicitFlush($flashConfig->implicit_flush);
    return $flashDirect;
});

/** 
 * @desc 注册flashSession服务 
 * @author zhaoyang 
 * @date 2018年6月9日 下午8:23:45 
 */
$di->set('flashSession', function () {
    $flashSessionConfig = $this->getConfig()->services->flash_session;
    $flashSession = new FlashSession($flashSessionConfig->css_classes->toArray());
    $flashSession->setAutoescape($flashSessionConfig->autoescape);
    $flashSession->setAutomaticHtml($flashSessionConfig->automatic_html);
    $flashSession->setImplicitFlush($flashSessionConfig->implicit_flush);
    return $flashSession;
});

/** 
 * @desc 注册安全服务 
 * @author zhaoyang 
 * @date 2018年6月7日 下午9:19:07 
 */
$di->set('security', function () {
    $securityConfig = $this->getConfig()->services->security;
    $security = new Security();
    $securityConfig->random_bytes && $security->setRandomBytes($securityConfig->random_bytes);
    $securityConfig->default_hash && $security->setDefaultHash($securityConfig->default_hash);
    $securityConfig->work_factor && $security->setWorkFactor($securityConfig->work_factor);
    return $security;
});

4、打开common/BaseController.php添加如下

final protected function success(string $message, string $jumpUrl = null, bool $redirect = false, bool $externalRedirect = false) {
    if (is_null($jumpUrl)) {
        $this->flashSession->success($message);
        echo '<script>history.go(-1);</script>';
        return false;
    } else if ($redirect || strpos($jumpUrl, '://') !== false) {
        $this->flashSession->success($message);
        return $this->response->redirect($jumpUrl, $externalRedirect);
    } else {
        $this->flash->success($message);
        return $this->forward($jumpUrl);
    }
}

final protected function error(string $message, string $jumpUrl = null, bool $redirect = false, bool $externalRedirect = false) {
   if (is_null($jumpUrl)) {
        $this->flashSession->error($message);
        echo '<script>history.go(-1);</script>';
        return false;
    } else if ($redirect || strpos($jumpUrl, '://') !== false) {
        $this->flashSession->error($message);
        return $this->response->redirect($jumpUrl, $externalRedirect);
    } else {
        $this->flash->error($message);
        return $this->forward($jumpUrl);
    }
}

完整的common/BaseController.php

<?php
/** 
 * @desc 控制器基类
 * @author zhaoyang 
 * @date 2018年5月8日 下午10:37:37 
 */
namespace Common;

use Phalcon\Mvc\Controller;
use Phalcon\Exception;

class BaseController extends Controller {

    /** 
     * @desc 获取get参数
     * @param string $name 参数名
     * @param string|array $filter 过滤类型，支持string、trim、absint、int、email、float、int!、float!、alphanum、striptags、lower、upper、url、special_chars
     * 当为false时，不使用默认过滤，当为字符串例如'string,trim'时采用参数过滤 ，当为数组例如['string','trim']时采用参数+默认过滤，当为null等其他值时时采用默认过滤
     * @param mixed $defaultValue 默认值
     * @param bool $noRecursive 不递归过滤
     * @return mixed
     * @author zhaoyang 
     * @date 2018年5月8日 下午10:38:50 
     */
    final protected function get(string $name = null, $filter = null, $defaultValue = null, bool $noRecursive = false) {
        $data = array_merge($this->request->getQuery(), $this->dispatcher->getParams());
        unset($data['_url']);
        return $this->sanitize($data, $name, $filter, $defaultValue, $noRecursive);
    }

    /** 
     * @desc 获取post参数
     * @param string $name 参数名
     * @param string|array $filter 过滤类型，支持string、trim、absint、int、email、float、int!、float!、alphanum、striptags、lower、upper、url、special_chars
     * 当为false时，不使用默认过滤，当为字符串'string,trim'时采用参数过滤 ，当为数组['string','trim']时采用参数+默认过滤，当为null等其他值时时采用默认过滤
     * @param mixed $defaultValue 默认值
     * @param bool $noRecursive 不递归过滤
     * @param bool $notAllowEmpty 不允许为空
     * @return mixed
     * @author zhaoyang 
     * @date 2018年5月9日 下午8:40:27 
     */
    final protected function post(string $name = null, $filter = null, $defaultValue = null, bool $noRecursive = false, bool $notAllowEmpty = false) {
        $data = $this->request->getPost();
        return $this->sanitize($data, $name, $filter, $defaultValue, $noRecursive);
    }

    /** 
     * @desc 获取post或者get参数
     * @param string $name 参数名
     * @param string|array $filter 过滤类型，支持string、trim、absint、int、email、float、int!、float!、alphanum、striptags、lower、upper、url、special_chars
     * 当为false时，不使用默认过滤，当为字符串例如'string,trim'时采用参数过滤 ，当为数组例如['string','trim']时采用参数+默认过滤，当为null等其他值时时采用默认过滤
     * @param mixed $defaultValue 默认值
     * @param bool $noRecursive 不递归过滤
     * @return mixed
     * @author zhaoyang 
     * @date 2018年5月9日 下午9:41:49 
     */
    final protected function request(string $name = null, $filter = null, $defaultValue = null, bool $noRecursive = false){
        if (isset($name) && $name !== '') {
            return $this->post($name, $filter, $defaultValue, $noRecursive) ?? $this->get($name, $filter, $defaultValue, $noRecursive);
        }
        return array_merge($this->post(null, $filter, $defaultValue, $noRecursive), $this->get(null, $filter, $defaultValue, $noRecursive));
    }

    /** 
     * @param string $name 参数名
     * @param string|array $filter 过滤类型，支持string、trim、absint、int、email、float、int!、float!、alphanum、striptags、lower、upper、url、special_chars
     * 当为false时，不使用默认过滤，当为字符串例如'string,trim'时采用参数过滤 ，当为数组例如['string','trim']时采用参数+默认过滤，当为null等其他值时时采用默认过滤
     * @param mixed $defaultValue 默认值
     * @param bool $noRecursive 不递归过滤
     * @return mixed
     * @author zhaoyang 
     * @date 2018年5月9日 下午10:43:11 
     */
    final protected function json(string $name = null, $filter = null, $defaultValue = null, bool $noRecursive = false){
        $data = $this->request->getJsonRawBody(true);
        if ($data === false) {
            return [ ];
        }
        return $this->sanitize($data, $name, $filter, $defaultValue, $noRecursive);
    }

    /**
     * @param array $data 数据源
     * @param string $name 参数名
     * @param string|array $filter 过滤类型，支持string、trim、absint、int、email、float、int!、float!、alphanum、striptags、lower、upper、url、special_chars
     * 当为false时，不使用默认过滤，当为字符串例如'string,trim'时采用参数过滤 ，当为数组例如['string','trim']时采用参数+默认过滤，当为null等其他值时时采用默认过滤
     * @param mixed $defaultValue 默认值
     * @param bool $noRecursive 不递归过滤
     * @return mixed
     * @author zhaoyang
     * @date 2018年5月9日 下午8:20:15
     */
    final protected function sanitize(array $data, string $name = null, $filter = null, $defaultValue = null, bool $noRecursive = false){
        $nowFilter = null;
        if (is_string($filter) && !empty($filter)) {
            $nowFilter = explode(',', $filter);
        } else if ($filter !== false) {
            $defaultFilter = $this->config->services->filter->default_filter;
            $defaultFilter = isset($defaultFilter) ? explode(',', $defaultFilter) : [ ];
            if (is_array($filter)) {
                $defaultFilter = array_unique(array_merge($filter, $defaultFilter));
            }
            if (!empty($defaultFilter)) {
                $nowFilter = $defaultFilter;
            }
        }
        if (isset($name) && $name !== '') {
            if (isset($data[$name]) && $data[$name] !== '') {
                $data = $data[$name];
            } else {
                $data = $defaultValue;
            }
        }
        if (isset($nowFilter)) {
            $data = $this->filter->sanitize($data, $nowFilter, $noRecursive);
        }
        return $data;
    }

    /** 
     * @desc 转发到其他动作 
     * @param array|string $url  'App\Home\Controllers\forward/index/a/aaa?b=bbb' or 'forward/index/a/aaa?b=bbb' or 'index?b=bbb'
     * @param array|string $vars 参数 ['a'=>'aaa','b'=>'bbb'] or 'a=aaa&b=bbb'
     * @param sring $namespace 命名空间
     * @return void 
     * @author zhaoyang 
     * @date 2018年5月24日 下午5:11:26 
     */
    final protected function forward($url, $vars = null, $namespace = null) {
        if (is_array($url)) {
            $forward = $url;
        } else if (is_string($url)) {
            $forward = [ ];
            $lastbBackslash = strrpos($url, '\\');
            if ($lastbBackslash) {
                $namespace = substr($url, 0, $lastbBackslash);
            }
            if (!empty($namespace)) {
                $forward['namespace'] = $namespace;
            }
            $start = $lastbBackslash === false ? 0 : $lastbBackslash + 1;
            $rest = substr($url, $start);
            $restStrposRes = strpos($rest, '?');
            if($rest == '' || $restStrposRes === 0){
                throw new Exception('方法不能为空');
            }
            if($restStrposRes === false){
                $capname = $rest;
                $paramsString = null;
            }else {
                list ($capname, $paramsString) = explode('?', $rest, 2);
                $capname = trim($capname, '/');
                if (empty($capname)) {
                    throw new Exception('控制器或方法不能为空');
                }
            }
            $capnameArr = explode('/', $capname);
            $capnameArrCount = count($capnameArr);
            if ($capnameArrCount == 1) {
                $forward['action'] = $capnameArr[0];
            } else {
                $forward['controller'] = $capnameArr[0];
                $forward['action'] = $capnameArr[1];
                for ($i = 2; $i < $capnameArrCount; $i += 2) {
                    $forward['params'][$capnameArr[$i]] = $capnameArr[$i + 1] ?? null;
                }
            }
            if ($paramsString !== null) {
                parse_str($paramsString, $paramsArr);
                $forward['params'] = array_merge($forward['params'] ?? [ ], $paramsArr);
            }
        } else {
            throw new Exception('url只能为字符串或者数组');
        }
        if (is_string($vars)) {
            $vars = trim($vars, '?');
            parse_str($vars, $vars);
        }
        if (is_array($vars)) {
            $forward['params'] = array_merge($forward['params'] ?? [ ], $vars);
        }
        $this->dispatcher->forward($forward);
    }

    /** 
     * @desc 成功跳转
     * @param string $message 提示信息
     * @param string $jumpUrl 跳转地址
     * @param bool $redirect 是否使用response->redirect
     * @param bool $externalRedirect 是否跳转到外部地址 
     * @author zhaoyang 
     * @date 2018年6月9日 下午11:10:10 
     */
    final protected function success(string $message, string $jumpUrl = null, bool $redirect = false, bool $externalRedirect = false) {
        if (is_null($jumpUrl)) {
            $this->flashSession->success($message);
            echo '<script>history.go(-1);</script>';
            return false;
        } else if ($redirect || strpos($jumpUrl, '://') !== false) {
            $this->flashSession->success($message);
            return $this->response->redirect($jumpUrl, $externalRedirect);
        } else {
            $this->flash->success($message);
            return $this->forward($jumpUrl);
        }
    }

    /** 
     * @desc 失败跳转
     * @param string $message 提示信息
     * @param string $jumpUrl 跳转地址
     * @param bool $redirect 是否使用response->redirect
     * @param bool $externalRedirect 是否跳转到外部地址  
     * @author zhaoyang 
     * @date 2018年6月10日 上午12:10:16 
     */
    final protected function error(string $message, string $jumpUrl = null, bool $redirect = false, bool $externalRedirect = false) {
        if (is_null($jumpUrl)) {
            $this->flashSession->error($message);
            echo '<script>history.go(-1);</script>';
            return false;
        } else if ($redirect || strpos($jumpUrl, '://') !== false) {
            $this->flashSession->error($message);
            return $this->response->redirect($jumpUrl, $externalRedirect);
        } else {
            $this->flash->error($message);
            return $this->forward($jumpUrl);
        }
    }
}

5、打开home模块下的SecurityController.php控制器

<?php
namespace App\Home\Controllers;

use Common\BaseController;

class SecurityController extends BaseController {

    public function indexAction() {

        $this->view->username = $this->get('username');

        // 或者使用会话袋接受参数，需要使用会话袋传递参数
        // $this->view->username = $this->persistent->username;
    }

    public function loginAction() {
        if ($this->request->isPost()) {
            // return $this->response->redirect('login', true);  <==> return $this->success('', 'login', true, true);
            // return $this->response->redirect('security/login'); <==> return $this->success('', 'security/login', true);
            // return $this->response->redirect('url/index'); <==> return $this->success('', 'url/index', true);
            // return $this->forward('url/index'); <==> return $this->success('', 'url/index');

            if (!$this->security->checkToken()) {
                return $this->error('口令错误');
            }

            // 这里并不赞同密码明文传输，建议用MD5加密后传输
            $rules = [
                ['username', 'presenceof', '用户名不能为空'],
                ['username', 'stringlength', '用户名长度必须大于等于6|用户名长度必须小于等于12', [6,12], 1],
                ['password', 'presenceof', '密码不能为空']
            ];
            $validateRes = $this->validate->addRules($rules)->validate($this->post());

            /* // 如果需要对参数进行单独过滤，则可以使用如下方法
            $requestData = [
                'username' => $this->post('username', ['alphanum']),// 增加一个字母数字过滤
                'password' => $this->post('password', 'trim'),// 仅使用trim过滤
            ];
            $validateRes = $this->validate->addRules($rules)->validate($requestData); */

            if (count($validateRes) > 0){
                return $this->error($validateRes[0]->getMessage());
            }
            $username = $this->post('username');
            $password = $this->post('password');

            /* $username = $requestData['username'];
            $password = $requestData['password']; */

            // 假设根据账号查出密码为$2y$08$QjRnSTNqbUNoM08vNVJYbueEgW4J0xBO92y2FFDYCoPNi4BbnptvC  ($this->security->hash('123456'))
            $findPwd = '$2y$08$QjRnSTNqbUNoM08vNVJYbueEgW4J0xBO92y2FFDYCoPNi4BbnptvC';
            if(!$this->security->checkHash($password, $findPwd)){
                return $this->error('账号或密码错误');
            }
            // 通常都是把用户信息保存在session中，这里只是模拟使用
            return $this->success('登录成功', 'index?username=' . $username);
            // 或者使用pathinfo模式传递参数，这种方式必须有控制器名
            return $this->success('登录成功', 'security/index/username/' . $username);

            // 或者使用会话袋传递参数(数据保存在session中，有效期与session一致),不过该参数只能在本类中使用
            $this->persistent->username = $username;
            return $this->success('登录成功', 'index');
        }
    }

}

6、在public/home/static/css下添加bootstrap.min.css文件
7、在home模块下的views目录下增加公共模板目录public并增加alter.volt模板文件

<link href="{{ static_url('css/bootstrap.min.css') }}" rel="stylesheet" />
<div id="alert-show" style="display:none;z-index: 9999; position: fixed ! important; 
left: {% if alert_left_size is defined%}{{ alert_left_size }}{% else %}50{% endif %}px; top: {% if alert_top_size is defined%}{{ alert_top_size }}{% else %}50{% endif %}px;">{{ flash.output() }}{{ flashSession.output() }}</div>
<script type="text/javascript">
(function(){
var alertShow = document.getElementById('alert-show');
if(alertShow.innerHTML){
    var alert = alertShow.firstChild;
    var alert_time = {% if alert_time is defined%}{{ alert_time }}{% else %}3{% endif %};
    if(alert.classList.contains('alert-success')){
        alert_time = {% if alert_time is defined%}{{ alert_time }}{% else %}1{% endif %};
    }else if(alert.classList.contains('alert-info')){
        alert_time = {% if alert_time is defined%}{{ alert_time }}{% else %}2{% endif %};
    }
    alertShow.style.display="block";
    var interval = setInterval(function(){
        if(--alert_time <= 0) {
            alertShow.style.display="none";
            clearInterval(interval);
        };
    }, 1000);
}
})();  
</script>

8、在home模块下的views目录下增加security目录并增加login.volt模板文件

<!DOCTYPE html>
<html lang="zh-CN">
<head>
</head>
<body>

<h2>登录</h2>
<form action="{{ url('security/login') }}" method="post">
用户名：<input type="text" name="username" ><br>
密码：<input type="password" name="password"><br>
<input type="hidden" name="{{security.getTokenKey()}}"  value="{{security.getToken()}}">
<input type="submit" value="登录">
</form>
</body>
{{ partial('public/alert', ["alert_left_size" : 100, "alert_top_size" : 100]) }}
{# {{ partial('public/alert', ["alert_left_size" : 100, "alert_top_size" : 100, "alert_time":2]) }} #}
</html>

9、在security目录下增加index.volt模板文件

<!DOCTYPE html>
<html lang="zh-CN">
<head>
</head>
<body>

<h2>{{ username }},欢迎登录本系统</h2>

</body>
{{ partial('public/alert') }}
</html>

10、访问/security/login
这里写图片描述
点击登录

输入zhaoyang和123456，点击登录

狂奔的蜗牛zy

关注

0
点赞
踩
0

收藏

觉得还不错? 一键收藏
0
评论
复制链接

分享到 QQ

分享到新浪微博

扫一扫

专栏目录