Просмотр исходного кода

优化前端js校检关键操作密码的逻辑

niujiuru 1 день назад
Родитель
Сommit
e840880b59
2 измененных файлов с 14 добавлено и 10 удалено
  1. 13 9
      web-ui.service/web/static/js/page1.js
  2. 1 1
      web-ui.service/web_handler.go

+ 13 - 9
web-ui.service/web/static/js/page1.js

@@ -248,11 +248,10 @@ function switchAutoUpgrade(event, action) {
   }
 
   let password = prompt("请输入操作密码:");
-
-  if (password !== "yfkj123456") {
-    alert("密码错误");
+  if (password === null) {
     return;
   }
+  password = password.trim();
 
   const btn = event.currentTarget;
   btn.disabled = true;
@@ -265,7 +264,7 @@ function switchAutoUpgrade(event, action) {
     body: JSON.stringify({
       name: "yfkj-upgrade.service",
       action: action,
-      secret: "yfkj!@#$%^"
+      secret: password
     })
   })
   .then(async r => {
@@ -296,11 +295,10 @@ function startPublicAccess(event) {
   }
 
   let password = prompt("请输入操作密码:");
-
-  if (password !== "yfkj123456") {
-    alert("密码错误");
+  if (password === null) {
     return;
   }
+  password = password.trim();
 
   const btn = event.currentTarget;
   btn.disabled = true;
@@ -313,7 +311,7 @@ function startPublicAccess(event) {
     body: JSON.stringify({
       name: "yfkj-frp-client.service",
       action: "start",
-      secret: "yfkj!@#$%^"
+      secret: password
     })
   })
   .then(async r => {
@@ -339,6 +337,12 @@ function stopPublicAccess(event) {
     return;
   }
 
+  let password = prompt("请输入操作密码:");
+  if (password === null) {
+    return;
+  }
+  password = password.trim();
+
   const btn = event.currentTarget;
   btn.disabled = true;
 
@@ -350,7 +354,7 @@ function stopPublicAccess(event) {
     body: JSON.stringify({
       name: "yfkj-frp-client.service",
       action: "stop",
-      secret: "yfkj!@#$%^"
+      secret: password
     })
   })
   .then(async r => {

+ 1 - 1
web-ui.service/web_handler.go

@@ -465,7 +465,7 @@ func serviceControlHandler(w http.ResponseWriter, r *http.Request) {
 		return
 	}
 
-	if req.Secret != "yfkj!@#$%^" {
+	if req.Secret != "yfkj123456" {
 		http.Error(w, "密码错误", http.StatusForbidden)
 		return
 	}