+------------+-------------+------+-----+---------+----------------+
| Field | Type | Null | Key | Default | Extra |
+------------+-------------+------+-----+---------+----------------+
| uid | int(11) | NO | PRI | NULL | auto_increment |
| uname | varchar(20) | YES | | NULL | |
| upwd | varchar(20) | YES | | NULL | |
| uflag | int(11) | YES | | NULL | |
| identifier | varchar(32) | YES | | NULL | |
| token | varchar(32) | YES | | NULL | |
| timeout | int(11) | YES | | NULL | |
+------------+-------------+------+-----+---------+----------------+

<?php
namespace Test\Controller;
use Think\Controller;
class TestController extends Controller {
 public function login(){
  //判斷是否永久登錄
  $this->checkLong();
  //已經(jīng)登錄則跳轉(zhuǎn)至個人中心
  if(isset($_SESSION['username'])){
   $this->redirect('Test/ucenter');
  }else{
   //判斷是否存在cookie
   if(isset($_COOKIE['username'])){
    $this->assign('username',$_COOKIE['username']);
   }
   //顯示注冊頁
   $this->display("test");
  }
 }
 //顯示驗證碼
 public function verifyImg(){
  $verify = new \Think\Verify();
  //$verify->useZh = true; //使用中文驗證碼
  $verify->length = 4; 
  $verify->entry();
 }
 //驗證登錄
 public function check(){
  $verify = new \Think\Verify();
  if($verify->check(I("yzm"))){
   //判斷用戶名密碼
   $user = new \Test\Model\TestModel();
   $res = $user->checkName(I("username"),I("pwd"));
   if($res === false){
    echo "用戶名或密碼錯誤";
   }else{
    //用戶信息存入session
    session("username",$res['uname']);
    session("id",$res['uid']);
    //如果用戶勾選了"記住我",則保持持久登陸
    if(I("remember")){
     $salt = $this->random_str(16);
     //第二分身標識
     $identifier = md5($salt . md5(I("username") . $salt));
     //永久登錄標識
     $token = md5(uniqid(rand(), true));
     //永久登錄超時時間(1周)
     $timeout = time()+3600*24*7;
     //存入cookie
     setcookie('auth',"$identifier:$token",$timeout);
     $user->saveRemember($res['uid'],$identifier,$token,$timeout);
    }
    //把用戶名存入cookie，退出登錄后在表單保存用戶名信息
    setcookie('username',I('username'),time()+3600*24);
    //跳轉(zhuǎn)至?xí)T中心
    $this->redirect('Test/ucenter');
   }
  }else{
   echo "輸入錯誤";
  }
 } 
 //測試strstr函數(shù)
 public function strstrtest(){
  $param = "Think\Verify";
  //第三個參數(shù)為true，返回'Think'；沒有第三個參數(shù)，返回'\Verify'
  $name = strstr($param,'\\',true);
  echo $name;
 }
 //用戶中心
 public function ucenter(){
  //判斷是否永久登錄
  $this->checkLong();
  $this->assign("session",$_SESSION);
  $this->display("ucenter");
 }
 //退出登錄
 public function loginout(){
  session(null);
  setcookie('auth', '', time()-1);
  $this->redirect("Test/login");
 }
 //生成隨機數(shù),用于生成salt
 public function random_str($length){
  //生成一個包含 大寫英文字母, 小寫英文字母, 數(shù)字 的數(shù)組
  $arr = array_merge(range(0, 9), range('a', 'z'), range('A', 'Z'));
  $str = '';
  $arr_len = count($arr);
  for ($i = 0; $i < $length; $i++){
   $rand = mt_rand(0, $arr_len-1);
   $str.=$arr[$rand];
  }
  return $str;
 }
 //判斷是否持久登錄
 public function checkLong(){
  $check = new \Test\Model\TestModel();
  $is_long = $check->checkRemember();
  if($is_long === false){
  }else{
   session("username",$is_long['uname']);
   session("id",$is_long['uid']);
  }
 }
}

<?php
namespace Test\Model;
use Think\Model;
class TestModel extends Model{
 //驗證登錄信息
 public function checkName($name,$pwd){
  $admin = M("admin");
  $info = $admin->getByUname($name);
  if($info != null){
   //驗證密碼
   if($info['upwd'] == $pwd){
    return $info;
   }else{
    return false;
   }
  }else{
   return false;
  }
 }
 //當用戶勾選"記住我"
 public function saveRemember($uid,$identifier,$token,$timeout){
  $admin = M("admin");
  $data['identifier'] = $identifier;
  $data['token'] = $token;
  $data['timeout'] = $timeout;
  $where = " uid = ".$uid;
  $res = $admin->data($data)->where($where)->save();
  return $res;
 }
 //驗證用戶是否永久登錄（記住我）
 public function checkRemember(){
  $arr = array();
  $now = time();
  list($identifier,$token) = explode(':',$_COOKIE['auth']);
  if (ctype_alnum($identifier) && ctype_alnum($token)){
   $arr['identifier'] = $identifier;
   $arr['token'] = $token;
  }else{
   return false;
  }
  $admin = M("admin");
  $info = $admin->getByidentifier($arr['identifier']);
  if($info != null){
   if($arr['token'] != $info['token']){
    return false;
   }else if($now > $info['timeout']){
    return false;
   }else{
    return $info;
   }
  }else{
   return false;
  }
 }
}

<DOCTYPE html>
<html lang="en">
<head>
 <meta charset="UTF-8">
 <title>Document</title>
</head>
<body>
<form action="__CONTROLLER__/check" method="post">
<if condition="$username neq null">
 <input type="text" name="username" placeholder="用戶名" value="{$username}"><br>
<else />
 <input type="text" name="username" placeholder="用戶名"><br> 
</if>
<input type="password" name="pwd" placeholder="密碼"><br>
<input type="text" name="yzm" placeholder="驗證碼"><img src="__CONTROLLER__/verifyImg" onClick="this.src=this.src+'?'+Math.random()"><br>
<input type="checkbox" name="remember" id="remember"><label for="remember">記住我</label>
<input type="submit" value="提交"> 
</form>
</body>
</html>

<DOCTYPE html>
<html lang="en">
<head>
 <meta charset="UTF-8">
 <title>Documenttitle>
</head>
<body>
 <if condition="$session['username'] neq null">
 <i>{$session.username},</i>
 <else />
 <i>游客,</i>
 </if>
 歡迎您<br>
 <a href="__CONTROLLER__/loginout">退出登錄</a>
</body>
</html>