基于等保要求的“迎新管理信息系统”在晋中地区的部署与实现

import flask

from flask_sqlalchemy import SQLAlchemy

from flask_bcrypt import Bcrypt

from flask_login import LoginManager, UserMixin

app = flask.Flask(__name__)

app.config['SQLALCHEMY_DATABASE_URI'] = 'sqlite:///site.db'

app.config['SECRET_KEY'] = 'your-secret-key'

db = SQLAlchemy(app)

bcrypt = Bcrypt(app)

login_manager = LoginManager(app)

class User(UserMixin, db.Model):

id = db.Column(db.Integer, primary_key=True)

username = db.Column(db.String(20), unique=True, nullable=False)

password_hash = db.Column(db.String(128), nullable=False)

def set_password(self, password):

self.password_hash = bcrypt.generate_password_hash(password).decode('utf-8')

def check_password(self, password):

return bcrypt.check_password_hash(self.password_hash, password)

@login_manager.user_loader

def load_user(user_id):

return User.query.get(int(user_id))

@app.route('/login', methods=['GET', 'POST'])

def login():

if flask.request.method == 'POST':

username = flask.request.form['username']

password = flask.request.form['password']

user = User.query.filter_by(username=username).first()

if user and user.check_password(password):

flask.flash('Login successful!')

return flask.redirect(flask.url_for('home'))

else:

flask.flash('Login failed. Check your username and password.')

return flask.render_template('login.html')

@app.route('/register', methods=['GET', 'POST'])

def register():

if flask.request.method == 'POST':

username = flask.request.form['username']

password = flask.request.form['password']

if User.query.filter_by(username=username).first():

flask.flash('Username already exists.')

else:

new_user = User(username=username)

new_user.set_password(password)

db.session.add(new_user)

db.session.commit()

flask.flash('Registration successful! Please log in.')

return flask.redirect(flask.url_for('login'))

return flask.render_template('register.html')

@app.route('/')

def home():

return "Welcome to the New Student Management System!"

if __name__ == '__main__':

app.run(debug=True)

import logging

# 配置日志

logging.basicConfig(filename='app.log', level=logging.INFO, format='%(asctime)s - %(levelname)s - %(message)s')

def log_action(action):

logging.info(f"User performed action: {action}")

# 示例调用

log_action("Logged in")