瀏覽代碼

Update AccountController

Daniel Supernault 6 年之前
父節點
當前提交
336deae05b
共有 1 個文件被更改,包括 19 次插入0 次删除
  1. 19 0
      app/Http/Controllers/AccountController.php

+ 19 - 0
app/Http/Controllers/AccountController.php

@@ -278,4 +278,23 @@ class AccountController extends Controller
 
 
         return response()->json(['msg' => 'success'], 200);
         return response()->json(['msg' => 'success'], 200);
     }
     }
+
+    public function sudoMode(Request $request)
+    {
+        return view('auth.sudo');
+    }
+
+    public function sudoModeVerify(Request $request)
+    {
+        $this->validate($request, [
+            'password' => 'required|string|max:500'
+        ]);
+        $user = Auth::user();
+        $password = $request->input('password');
+        $next = $request->cookie('redirectNext') ?:'/';
+        if(password_verify($password, $user->password) === true) {
+            return redirect($next)->withCookie('sudoMode', time());
+        }
+        return redirect($next);
+    }
 }
 }