youpaishidifu/Sdf1_login
1
1
Fork 0
Code Issues 15 Pull Requests Actions 1 Packages Projects Releases 13 Wiki Activity

第49轮诊断：收回写库前后抓新旧hash/salt完整值入日志，抓对账ping-pong现行
Check Source / check (push) Successful in 5s
Details
Auto Release / build (push) Successful in 2m33s
Details
Simple Test / test (push) Successful in 2s
Details
Test Env / test (push) Successful in 1s
Details

Browse Source
This commit is contained in:
youpaishidifu
2026-10-23 16:04:22 +08:00
parent 7525b8f6b5
commit 5b705d0af2
1 changed files with 20 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/main/java/Sdf1_login/WebManager.java
+20 -1
View File
@@ -4830,8 +4830,27 @@ public class WebManager {
String hash = strOf(row.get("password_hash"));
String salt = strOf(row.get("password_salt"));
if (name.isEmpty() || hash.isEmpty() || salt.isEmpty()) return false;
if (!dbMgr.userExists(name)) dbMgr.createUser(name, hash, salt);
// [凭证诊断49] 收回写库前抓本地旧值，写库后回读，完整新旧值入日志抓 ping-pong 现行
boolean ex49 = dbMgr.userExists(name);
String oldH49 = strOf(ex49 ? dbMgr.getField(name, "password_hash") : null);
String oldS49 = strOf(ex49 ? dbMgr.getField(name, "password_salt") : null);
if (!ex49) dbMgr.createUser(name, hash, salt);
else dbMgr.updatePassword(name, hash, salt);
String newH49 = strOf(dbMgr.getField(name, "password_hash"));
String newS49 = strOf(dbMgr.getField(name, "password_salt"));
boolean hChg49 = !oldH49.equals(newH49);
boolean sChg49 = !oldS49.equals(newS49);
if (hChg49 || sChg49) {
plugin.getLogger().warning("[凭证诊断49] 收回写库 name=" + name
+ " | 本地旧hash=" + oldH49 + " 本地旧salt=" + oldS49
+ " | PHP新hash=" + hash + " PHP新salt=" + salt
+ " | 写后hash=" + newH49 + " 写后salt=" + newS49
+ " | hash变=" + hChg49 + " salt变=" + sChg49
+ " | 写库失败=" + (!newH49.equals(hash) || !newS49.equals(salt)));
} else {
plugin.getLogger().info("[凭证诊断49] 收回写库(无变化) name=" + name
+ " hash=" + newH49 + " salt=" + newS49);
}
String tmpHash = strOf(row.get("temp_password"));
long tmpExpire = longOf(row.get("temp_pw_expire"));
if (!tmpHash.isEmpty() && tmpExpire > 0) {