feat(认证): 实现多管理员账号支持并更新密码配置

- 将单管理员配置改为支持多账号的数组结构 - 更新数据库和SMTP服务的密码配置 - 修改登录逻辑以支持多账号验证
2025-07-15 19:42:29 +08:00
parent 387583d14d
commit 3ca83c8662
2 changed files with 16 additions and 8 deletions
--- a/admin/login.php
+++ b/admin/login.php
@@ -10,11 +10,14 @@ if (!isset($_SESSION['admin'])) {
        $username = $_POST['username'];
        $password = $_POST['password'];

-        if ($username === ADMIN_USERNAME && $password === ADMIN_PASSWORD) {
+        $adminFound = false;
+        foreach ($admin_accounts as $account) {
+            if ($username === $account['username'] && $password === $account['password']) {
                $_SESSION['admin'] = [
-                    'id' => 1, // 配置文件中未定义管理员ID，使用默认值1
-                    'username' => $username
+                    'id' => $account['id'],
+                    'username' => $account['username']
                ];
+                $adminFound = true;
                
                // 处理自动登录
                if (isset($_POST['remember_me']) && $_POST['remember_me'] === 'on') {
@@ -34,9 +37,12 @@ if (!isset($_SESSION['admin'])) {
                
                header('Location: index.php');
                exit();
-            } else {
-                $error = '用户名或密码错误';
            }
+        }
+        
+        if (!$adminFound) {
+            $error = '用户名或密码错误';
+        }
    }
 ?>
 <!DOCTYPE html>