edit

service/agent/src/Auth.php

@@ -25,7 +25,7 @@ class Auth
         if (!$user) {
             Dever::alert('登录失败，手机号错误，请重新输入');
         }
-        if ($pass && ($user['password'] != sha1($pass) && $user['password'] != sha1(md5($pass)))) {
+        if ($pass && ($user['password'] != sha1($pass) && $user['old_pwd'] != md5($pass. $user['old_salt']))) {
             Dever::alert('登录失败，密码错误，请重新输入');
         }
 
@@ -52,7 +52,7 @@ class Auth
         if (!$user) {
             Dever::alert('登录失败，手机号错误，请重新输入');
         }
-        if ($pass && ($user['password'] != sha1($pass) && $user['password'] != sha1(md5($pass)))) {
+        if ($pass && ($user['password'] != sha1($pass) && $user['old_pwd'] != md5($pass. $user['old_salt']))) {
             Dever::alert('登录失败，密码错误，请重新输入');
         }