ThinkPHP6 verification code generation and verification: protecting application security

With the development of the Internet, various types of malicious attacks are emerging in endlessly. In order to protect the security of applications, verification codes have become a common security measure. This article will introduce how to generate and verify verification codes in the ThinkPHP6 framework, and explain it through code examples.

1. Generate verification code

In ThinkPHP6, generating verification code can be achieved by using the extension package topthink/think-captcha. First, we need to add dependencies in the composer.json file in the project directory:

"require": {
    "topthink/think-captcha": "^1.0"
}

Then, execute the composer update command to install the dependent packages. After the installation is complete, we can use the verification code object in the controller or service layer to generate the verification code.

Assuming that we need to generate a verification code in the login page, we can perform the following operations in the controller:

use thinkcaptchaacadeCaptcha;

class LoginController extends Controller
{
    public function index()
    {
        // 生成驗(yàn)證碼
        $captcha = Captcha::create();
        
        // 把驗(yàn)證碼保存到session中
        session('captcha', $captcha->getCode());
        
        // 渲染登錄頁(yè)面，將生成的驗(yàn)證碼圖片和表單一起展示
        return view('login', [
            'captcha_img' => $captcha->getImage(),
        ]);
    }
}

In the above code, we first use the Captcha class The create method generates a verification code object and saves the verification code to session. Then, pass the generated verification code image and login form to the login page for display.

2. Verify the verification code

After the user submits the login form, we need to verify whether the verification code entered by the user is correct. The ThinkPHP6 framework provides a convenient method for verification code verification.

After the login page form is submitted, we can perform the following operations in the controller to verify the verification code:

use thinkcaptchaacadeCaptcha;

class LoginController extends Controller
{
    public function login()
    {
        // 獲取用戶輸入的驗(yàn)證碼
        $inputCode = input('captcha');
        
        // 獲取session中保存的驗(yàn)證碼
        $sessionCode = session('captcha');
        
        // 進(jìn)行驗(yàn)證碼驗(yàn)證
        if (!captcha_check($inputCode, $sessionCode)) {
            // 驗(yàn)證碼錯(cuò)誤，返回錯(cuò)誤信息
            return '驗(yàn)證碼錯(cuò)誤！';
        }
        
        // 驗(yàn)證碼驗(yàn)證通過(guò)，執(zhí)行登錄邏輯
        // ...
    }
}

In the above code, we first pass the input function Obtain the verification code entered by the user, and then obtain the previously generated verification code through the session function. Finally, use the captcha_check function to verify that the verification code is correct. If the verification code is passed, the login logic is executed; otherwise, an error message is returned.

3. Display the verification code in the view

In order to display the verification code on the login page, we need to perform corresponding operations in the corresponding view file. Assume that our login view file is login.html, you can add the following code to the file:

<form action="/login" method="post">
    <div>
        <label for="captcha">驗(yàn)證碼：</label>
        <input type="text" id="captcha" name="captcha" required>
    </div>
    <div>
        <img src="{{ captcha_img }}" alt="驗(yàn)證碼">
    </div>
    <div>
        <button type="submit">登錄</button>
    </div>
</form>

In the above code, we first added an input box to receive user input Verification code. Then, display the verification code image through the img tag, where {{ captcha_img }} uses the syntax of the template engine for output.

Through the above steps, we successfully implemented the verification code generation and verification operations in the ThinkPHP6 framework. As a common security measure, verification codes can prevent malicious attacks very well. I hope this article can help you understand and use the verification code function of ThinkPHP6.

The above is the detailed content of ThinkPHP6 verification code generation and verification: protecting application security. For more information, please follow other related articles on the PHP Chinese website!