员工修改密码

app/business/controllers/AdminController.php

@@ -90,14 +90,14 @@ class AdminController extends BaseController
 			if (empty($old)) {
 				util::fail('请填写旧密码');
 			}
-			if (md5($old) != $admin['password']) {
+			if (password_verify($old , $admin['password']) == false) {
 				util::fail('旧密码错误');
 			}
 		}
-		AdminService::updateById($adminId, ['password' => md5($new)]);
+		AdminService::updateById($adminId, ['password' => password_hash($new, PASSWORD_BCRYPT)]);
 		util::ok('修改成功');
 	}
-	
+
 	//确认密码修改
 	public function actionConfirmPassword()
 	{
@@ -117,11 +117,11 @@ class AdminController extends BaseController
 			if (empty($old)) {
 				util::fail('请填写旧密码');
 			}
-			if (md5($old) != $admin['confirmPassword']) {
+			if (password_verify($old , $admin['confirmPassword']) == false) {
 				util::fail('旧密码错误');
 			}
 		}
-		AdminService::updateById($adminId, ['confirmPassword' => md5($new)]);
+		AdminService::updateById($adminId, ['confirmPassword' => password_hash($new, PASSWORD_BCRYPT)]);
 		util::ok('修改成功');
 	}
 	

app/business/controllers/AuthController.php

@@ -29,7 +29,7 @@ class AuthController extends PublicController
 			util::fail('请输入密码');
 		}
 		$admin = AdminService::getByCondition(['mobile' => $mobile]);
-		if ($admin['password'] != md5($password)) {
+		if(password_verify($password , $admin['password']) == false){
 			util::fail('密码错误');
 		}
 		$adminId = $admin['id'];