Update to v1.6

latest version/web/login.py

@@ -2,6 +2,7 @@
 from flask import (Blueprint, flash, g, redirect,
                    render_template, request, session, url_for)
 import functools
+import configparser
 
 bp = Blueprint('login', __name__, url_prefix='/web')
 
@@ -14,12 +15,18 @@ def login():
         password = request.form['password']
         error = None
 
-        if username != 'admin' and password != 'admin':
+        config = configparser.ConfigParser()
+        path = r'setting.ini'
+        config.read(path, encoding="utf-8")
+        USERNAME = config.get('WEB', 'USERNAME')
+        PASSWORD = config.get('WEB', 'PASSWORD')
+
+        if username != USERNAME and password != PASSWORD:
             error = '错误的用户名或密码 Incorrect username or password.'
 
         if error is None:
             session.clear()
-            session['user_id'] = 'admin'
+            session['user_id'] = USERNAME + PASSWORD
             return redirect(url_for('index.index'))
 
         flash(error)
@@ -40,11 +47,17 @@ def login_required(view):
     @functools.wraps(view)
     def wrapped_view(**kwargs):
         x = session.get('user_id')
-        # 少用户存在验证
-        if x is None:
+
+        config = configparser.ConfigParser()
+        path = r'setting.ini'
+        config.read(path, encoding="utf-8")
+        USERNAME = config.get('WEB', 'USERNAME')
+        PASSWORD = config.get('WEB', 'PASSWORD')
+
+        if x != USERNAME + PASSWORD:
             return redirect(url_for('login.login'))
 
-        g.user = {'user_id': x, 'username': 'admin'}
+        g.user = {'user_id': x, 'username': USERNAME}
         return view(**kwargs)
 
     return wrapped_view