中等级缺陷6-3和4

whycxzp

2023-10-23 b5ed846711e97d3376e6c9861cab3b23903f4d0c

中等级缺陷6-3和4

 src/main/java/com/whyc/service/LoginService.java

@@ -74,13 +74,9 @@
        }
        return new Response<>().set(1,false,"密码错误");
    }
    public Response login2(String userName, String pwd, HttpServletRequest request) {
        String password = "";
        try {
            password = URLDecoder.decode(pwd, "utf-8");
        }catch (UnsupportedEncodingException e){
            e.printStackTrace();
        }
    public Response login2(String userName, String pwd, HttpServletRequest request) throws UnsupportedEncodingException {
        String password = URLDecoder.decode(pwd, "utf-8");

        String[] dataArr = RSAUtil.decryptFront(password, RSAUtil.fontSeparator);
        //验签md5
        if(!dataArr[1].equals(ActionUtil.EncryptionMD5(org.apache.commons.lang3.StringUtils.trim(dataArr[0])).toString())){