ThinkPHP6 verification code generation and verification: protecting application security

ThinkPHP6 verification code generation and verification: protecting application security

With the development of the Internet, various types of malicious attacks are emerging in endlessly. In order to protect the security of applications, verification codes have become a common security measure. This article will introduce how to generate and verify verification codes in the ThinkPHP6 framework, and explain it through code examples.

1. Generate verification code

In ThinkPHP6, generating verification code can be achieved by using the extension package topthink/think-captcha. First, we need to add dependencies in the composer.json file in the project directory:

"require": {
    "topthink/think-captcha": "^1.0"
}

Then, execute the composer update command to install the dependent packages. After the installation is complete, we can use the verification code object in the controller or service layer to generate the verification code.

Assuming that we need to generate a verification code in the login page, we can perform the following operations in the controller:

use thinkcaptchaacadeCaptcha;

class LoginController extends Controller
{
    public function index()
    {
        // 生成验证码
        $captcha = Captcha::create();
        
        // 把验证码保存到session中
        session('captcha', $captcha->getCode());
        
        // 渲染登录页面，将生成的验证码图片和表单一起展示
        return view('login', [
            'captcha_img' => $captcha->getImage(),
        ]);
    }
}

In the above code, we first use the Captcha class The create method generates a verification code object and saves the verification code to session. Then, pass the generated verification code image and login form to the login page for display.

2. Verify the verification code

After the user submits the login form, we need to verify whether the verification code entered by the user is correct. The ThinkPHP6 framework provides a convenient method for verification code verification.

After the login page form is submitted, we can perform the following operations in the controller to verify the verification code:

use thinkcaptchaacadeCaptcha;

class LoginController extends Controller
{
    public function login()
    {
        // 获取用户输入的验证码
        $inputCode = input('captcha');
        
        // 获取session中保存的验证码
        $sessionCode = session('captcha');
        
        // 进行验证码验证
        if (!captcha_check($inputCode, $sessionCode)) {
            // 验证码错误，返回错误信息
            return '验证码错误！';
        }
        
        // 验证码验证通过，执行登录逻辑
        // ...
    }
}

In the above code, we first pass the input function Obtain the verification code entered by the user, and then obtain the previously generated verification code through the session function. Finally, use the captcha_check function to verify that the verification code is correct. If the verification code is passed, the login logic is executed; otherwise, an error message is returned.

3. Display the verification code in the view

In order to display the verification code on the login page, we need to perform corresponding operations in the corresponding view file. Assume that our login view file is login.html, you can add the following code to the file:

<form action="/login" method="post">
    <div>
        <label for="captcha">验证码：</label>
        <input type="text" id="captcha" name="captcha" required>
    </div>
    <div>
        <img src="{{ captcha_img }}" alt="验证码">
    </div>
    <div>
        <button type="submit">登录</button>
    </div>
</form>

In the above code, we first added an input box to receive user input Verification code. Then, display the verification code image through the img tag, where {{ captcha_img }} uses the syntax of the template engine for output.

Through the above steps, we successfully implemented the verification code generation and verification operations in the ThinkPHP6 framework. As a common security measure, verification codes can prevent malicious attacks very well. I hope this article can help you understand and use the verification code function of ThinkPHP6.

The above is the detailed content of ThinkPHP6 verification code generation and verification: protecting application security. For more information, please follow other related articles on the PHP Chinese website!