pc

application/models/DAO/Member.php

@@ -71,10 +71,13 @@ class MemberModel extends \DAO\AbstractModel
         $where[NameConst::memberMobile] = $mobile;
         $addKey=Common::getConfig('password.key');
         if(!empty($addKey)){
-            $where[NameConst::memberPasswd] = Common::format("MD5(CONCAT(member_time,member_passwd,'{0}'))",$addKey);
+            $where='';
+            $where=Common::format("(member_mobile = '{0}') AND (member_passwd = MD5(CONCAT(member_time,'{1}','{2}')))",$mobile,$password,$addKey);
+           // $where[NameConst::memberPasswd] = Common::format("MD5(CONCAT(member_time,member_passwd,'{0}'))",$addKey);
         }else{
             $where[NameConst::memberPasswd]=md5($password);
         }
+
         $result = $this->db->select($this->availMemberColumn)->from($this->_tableName)->where($where)->fetchOne();
         if ($result) {
             $memberAvatarUrl = $this->getMemberAvatarUrl($result['member_id'], $result['member_avatar']);

conf/application.ini

@@ -117,6 +117,7 @@ resources.database.params.password = "!@#$%12345werty"
 resources.database.params.charset  = "UTF8"
 resources.database.params.driver_options.1002 = "SET NAMES utf8"
 
+
 ; 从库配置
 resources.database.slave.params.driver   = "pdo_mysql"
 resources.database.slave.params.hostname = "127.0.0.1"
@@ -143,6 +144,8 @@ redis.database.params.prefix = "qm_"
 redis.database.params.password = "23456ertyu"
 out.config="/data/config"
 
+;password.key='~!@#$`1234qwertasdfgzxcvb';
+
 ; 锁文件
 out.locks="/data/locks";
 ; redis配置