08ce60344d
PHP 前后端一体：首页咨询师列表、预约表单、管理后台、二维码准入与邮件通知；敏感配置与提交数据通过 .gitignore 排除。 Co-authored-by: Cursor <cursoragent@cursor.com>
24 lines
637 B
PHP
24 lines
637 B
PHP
<?php
|
|
declare(strict_types=1);
|
|
|
|
require __DIR__ . '/bootstrap.php';
|
|
|
|
if ($_SERVER['REQUEST_METHOD'] !== 'POST') {
|
|
jsonError('方法不允许', 405);
|
|
}
|
|
|
|
$body = getRequestBody();
|
|
$user = trim((string) ($body['user'] ?? ''));
|
|
$password = trim((string) ($body['password'] ?? ''));
|
|
|
|
$config = loadAppConfig();
|
|
$adminUser = (string) ($config['adminUser'] ?? 'frankfrank');
|
|
$adminPassword = (string) ($config['adminPassword'] ?? 'frankfrank');
|
|
|
|
if ($user !== $adminUser || $password !== $adminPassword) {
|
|
jsonError('账号或密码错误', 401);
|
|
}
|
|
|
|
$_SESSION['admin'] = true;
|
|
jsonResponse(['ok' => true, 'message' => '登录成功']);
|