first commit

server/router_handler/user.js

@@ -0,0 +1,100 @@
+var db = require("../comman/db.js")
+const bcrypt = require('bcryptjs')
+/**
+ * 在这里定义和用户相关的路由处理函数，供 /router/user.js 模块进行调用
+ */
+
+// 注册用户的处理函数
+exports.regUser = (req, res) => {
+    var data = req.body;
+    if (data.Username == "" || data.Name == "" || data.Password == "") {
+        return res.send("传入数据非法")
+    }
+    const sqlStr = 'select * from employeelist where Username=?'
+    //res.setHeader("refresh","3; url=../index.html")
+
+    db.query(sqlStr, data.Username, (err, result) => {
+        if (err) {
+            return res.send(err)
+        }
+        if (result.length > 0) {
+            res.setHeader("refresh", "3; url=../html/register.html")
+            return res.send("用户已存在 请更换用户名")
+
+        }
+        delete data.configPassword
+        data.Password = bcrypt.hashSync(data.Password, 10)
+        data.Acess = 0
+        data.Pic = null
+        console.log(data);
+        const sql = "insert into employeelist set ?";
+        db.query(sql, data, (err, result) => {
+            console.log(result);
+            console.log(err)
+            res.setHeader("refresh", "3; url=../index.html")
+            res.send('reguser OK')
+        });
+        // res.setHeader('refresh:3; url=../index.html')
+
+        //res.render('new.html')
+    })
+}
+
+
+// 登录的处理函数
+exports.login = (req, res) => {
+
+  const userinfo = req.body
+  // 定义 SQL 语句
+  const sql = `select * from employeelist where Username=?`
+  // 执行 SQL 语句，根据用户名查询用户的信息
+  db.query(sql, userinfo.Username, (err, results) => {
+    // 执行 SQL 语句失败
+    if (err) return res.send(err)
+    // 执行 SQL 语句成功，但是获取到的数据条数不等于 1
+    if (results.length !== 1) {
+      res.setHeader("refresh", "3; url=../html/login.html")
+      return res.send('登录失败！')
+    }
+
+    // TODO：判断密码是否正确
+    const compareResult = bcrypt.compareSync(userinfo.Password, results[0].Password)
+    if (!compareResult) {
+      res.setHeader("refresh", "3; url=../html/login.html")
+      return res.send('登录失败！')
+    }
+
+    // TODO：在服务器端生成 Token 的字符串
+      req.session.username=userinfo.Username;
+    req.session.islogin = true;
+    if (userinfo.Username=="renlixin"){
+        req.session.isadmin=true;
+    }else
+    {
+        req.session.isadmin=false;
+    }
+
+    var message = {
+
+
+      message: "login ok"
+    }
+    res.setHeader("refresh", "3; url=../index.html")
+    res.send(message.message)
+  })
+
+
+
+
+}
+
+
+
+
+exports.logout = (req, res) => {
+    req.session.islogin = false;
+    req.session.destroy();
+    res.setHeader("refresh", "3; url=../html/login.html")
+    res.send('logout ok')
+
+}