没有不值得去解决的问题,也没有不值得去学习的技术!

Fix for Empty Password Notification to Other Applications When Changing Passwords in UCenter

Notification table after updating the program!
List of user tables in the UCenter database
List of user tables in the UCenter database
After modifying the user password in Application A, the password is found to be empty in the update user password notification list!
After modifying the user password in Application A, the password is found to be empty in the update user password notification list!

The password is likely left empty for security reasons. After analyzing the code execution flow, the solution is as follows. I use MD5 encryption for the password:

UCenter backend notification program after changing the password:
ucenter.kchmc.net/control/admin/user.php

//$_ENV[‘note’]->add(‘updatepw’, ‘username=’.urlencode($username).’&password=’);
$_ENV[‘note’]->add(‘updatepw’, ‘username=’.urlencode($username).’&password=’.md5($orgpassword));

UCenter notification program:
ucenter.kchmc.net/control/user.php

//$_ENV[‘note’]->add(‘updatepw’, ‘username=’.urlencode($username).’&password=’);
$_ENV[‘note’]->add(‘updatepw’, ‘username=’.urlencode($username).’&password=’.md5($newpw));

If the password is modified in Application A, and the other applications to be notified use independent user databases, you need to modify the corresponding code in the UCenter client (uc_client):
kchmc.net/phpsso_server/api/uc_client/control/user.php

//$_ENV[‘note’]->add(‘updatepw’, ‘username=’.urlencode($username).’&password=’);
$_ENV[‘note’]->add(‘updatepw’, ‘username=’.urlencode($username).’&password=’.md5($newpw));

Notification table after updating the program!
Notification table after updating the program!

At this point, kchmc.net and ucenter.kchmc.net may have already updated the password, but other applications might not have been notified yet, or the notification may have failed. One solution now is to simply wait, or manually trigger the notification again directly from the notification list on ucenter.kchmc.net!

关于作者 · 持续学习与技术实践

我是一名拥有 15 年以上开发经验的技术从业者,自 2013 年起持续运营个人技术博客,记录工作与个人项目中遇到的真实问题,以及解决问题过程中的探索、实践和思考。

除了技术写作,我也在持续开发和维护自己的独立项目,探索新技术和新工具在实际场景中的应用。我始终相信,没有不值得去解决的问题,也没有不值得去学习的技术。

如果这篇文章对你有所帮助,欢迎浏览博客中的其他文章,也欢迎交流技术经验与想法。

关于我  ·  GitHub  ·  邮件联系