74 lines
2.4 KiB
Python
74 lines
2.4 KiB
Python
from flask import render_template, request, redirect, url_for
|
|
from .get_db import get_db
|
|
import re
|
|
|
|
def signup():
|
|
error_messages = {
|
|
'username': '',
|
|
'mobileNo': '',
|
|
'password': '',
|
|
'confirmPassword': ''
|
|
}
|
|
|
|
if request.method == 'GET':
|
|
return render_template('signup.html', errors=error_messages)
|
|
|
|
if request.method == 'POST':
|
|
username = request.form['username']
|
|
phone_number = request.form['mobileNo']
|
|
password = request.form['encryptedPassword']
|
|
confirm_password = request.form['encryptedConfirmPassword']
|
|
|
|
# Basic validation for phone number
|
|
if not re.match(r'^\d{11}$', phone_number):
|
|
error_messages['mobileNo'] = '手机号格式有误'
|
|
|
|
# Check password length after MD5 hash
|
|
if len(password) != 32: # MD5 hash length is 32 characters
|
|
error_messages['password'] = '密码格式有误'
|
|
|
|
# Confirm password validation
|
|
if password != confirm_password:
|
|
error_messages['confirmPassword'] = '两次输入的密码不一致'
|
|
|
|
if any(error_messages.values()):
|
|
return render_template('signup.html', errors=error_messages)
|
|
|
|
db = get_db()
|
|
cursor = db.cursor()
|
|
|
|
# 检查已有用户
|
|
sql = """
|
|
SELECT COUNT(*) FROM Users \
|
|
WHERE Phone_number = %s;
|
|
"""
|
|
try:
|
|
cursor.execute(sql, (phone_number,))
|
|
phone_exist = cursor.fetchall()[0][0]
|
|
except Exception as e:
|
|
error_messages['mobileNo'] = "数据库异常，查询失败"
|
|
print(e)
|
|
return render_template('signup.html', errors=error_messages)
|
|
|
|
if phone_exist != 0:
|
|
error_messages['mobileNo'] = "该手机号已注册，请勿重复注册"
|
|
db.close()
|
|
return render_template('signup.html', errors=error_messages)
|
|
|
|
# 插入
|
|
sql = '''
|
|
INSERT INTO Users (Phone_number, Username, `Password`) \
|
|
VALUES (%s, %s, %s); \
|
|
'''
|
|
try:
|
|
cursor.execute(sql, (phone_number, username, password))
|
|
db.commit()
|
|
return redirect(url_for('index'))
|
|
except Exception as e:
|
|
db.rollback()
|
|
print(e)
|
|
error_messages['mobileNo'] = "数据库异常，注册失败"
|
|
return render_template('signup.html', errors=error_messages)
|
|
finally:
|
|
db.close()
|