class User(AbstractUser):
  avatar=models.ImageField(upload_to='vaatar/%Y/%m',default='vaatar/default/pang')
  qq=models.CharField(u'qq號(hào)碼', max_length=20,blank=True)
  mobile=models.CharField(u'手機(jī)號(hào)',max_length=11,blank=True,null=True,unique=True)
  login_sta = models.CharField(u'登錄是否鎖定', max_length=2, default=0)
  login_suo = models.DateTimeField(u'登錄鎖定時(shí)間')
  pass_errnum=models.IntegerField(u'用戶(hù)密碼輸入次數(shù)',default=0)
  is_login = models.BooleanField(default=False)
  class Meta:
    verbose_name = u'用戶(hù)'
    verbose_name_plural = verbose_name
    ordering=['-id']
  def __str__(self) :
    return self.username

from django.contrib.auth.hashers import make_password, check_password
from django.http import Http404, HttpResponseRedirect
from django.shortcuts import render, redirect
from django.views.generic.base import View
class LoginView(View):
  def get(self,request):
    return render(request, 'login.html')
  def post(self,request):
    next = request.META.get('HTTP_REFERER')
    username=request.POST.get('username',None)
    password=request.POST.get('password',None)
    try:
      user = User.objects.get(username= username)
      if user.is_login==True:
        return render(request, 'login.html', {'msg': '同時(shí)只能登陸一臺(tái)設(shè)備!'})
      if user.login_sta==True:
        return render(request, 'login.html', {'msg': '賬號(hào)已經(jīng)凍結(jié)!'})
      if (datetime.datetime.now()-user.login_suo).total_seconds() <600:
        return render(request, 'login.html', {'msg': '賬號(hào)鎖定十分鐘內(nèi)不能登陸!'})
      if user.pass_errnum>5:
        user.login_suo=datetime.datetime.now()
        return render(request, 'login.html', {'msg': '密碼輸入超過(guò)5次，用戶(hù)鎖定十分鐘'})
      if check_password(password,user.password) :
        request.session['username'] = username
        if '/logout' or '/reg' in next:
          response = HttpResponseRedirect('/')
        else:
          response= HttpResponseRedirect(next)
        user.last_login=datetime.datetime.now()
        user.is_login=True
        user.pass_errnum=0
        user.save()
        response.set_cookie('username', username, 3600)
        return response
      user.pass_errnum+=1
      user.save()
      return render(request, 'login.html', {'msg': '密碼錯(cuò)誤'})
    except:
      return render(request,'login.html',{'msg':'用戶(hù)名不存在！'})

class LogoutView(View):
  def get(self,request):
    try:
      user = User.objects.get(username__exact=request.session['username'])
      user.last_login=datetime.datetime.now()
      user.is_login=False
      user.save()
      del request.session['username']
      return render(request,'index.html')
    except:
      return HttpResponseRedirect('/')