更新WebQQ登录

zhanghe06 · zhanghe06 · commit 4bcc801b2c7e · 2015-06-16T23:08:15.000+08:00
diff --git a/pswEncrypt.py b/pswEncrypt.py
@@ -0,0 +1,58 @@
+# encoding: utf-8
+__author__ = 'zhanghe'
+
+import hashlib
+
+
+class EncryptPsw():
+    def __init__(self):
+        pass
+
+    def _user_to_bin(self, user):
+        return self._hex_to_bin(hex(int(user))[2:].zfill(16))
+
+    def encrypt(self, user, psw, verify_code):
+        bin_user = self._user_to_bin(user)
+        psw_1 = self._md5_encrypt_1(psw)
+
+        psw_1 = self._hex_to_bin(psw_1)
+        psw_2 = self._md5_encrypt_2(psw_1, bin_user)
+        psw_3 = self._md5_encrypt_3(psw_2, verify_code)
+
+        return psw_3
+
+    @staticmethod
+    def _hex_to_bin(string):  # 字符串转bytes数组
+        length = len(string)
+        tmp = []
+        for i in range(0, length, 2):
+            tmp.append(int("0x" + string[i:i + 2], base=16))
+        return bytes(tmp)
+
+    @staticmethod
+    def _md5_encrypt_1(psw):  # 密码的第一次加密
+        md5 = hashlib.md5()
+        md5.update(psw.encode("ISO-8859-1"))
+        return md5.hexdigest().upper()
+
+    @staticmethod
+    def _md5_encrypt_2(psw, user):  # 密码的第二次加密
+        md5 = hashlib.md5()
+        md5.update(psw + user)
+        return md5.hexdigest().upper()
+
+    @staticmethod
+    def _md5_encrypt_3(psw, verify_code):  # 密码的第三次加密
+        md5 = hashlib.md5()
+        md5.update((psw + verify_code.upper()).encode("ISO-8859-1"))
+        return md5.hexdigest().upper()
+
+
+def main():
+    a = EncryptPsw()
+    psw = a.encrypt("888888888", "123456", "!xyz")
+    print(psw)
+
+
+if __name__ == "__main__":
+    main()
diff --git a/static/js/web_qq/10125/mq_comm.js b/static/js/web_qq/10125/mq_comm.js
@@ -2326,6 +2326,7 @@ $.RSA = $pt.RSA = function() {
         } else {
             var z = 0;
             for (var A = 0; A < D.length; A += 2) {
+                //解析十六进制，转为整数
                 B[z++] = parseInt(D.substr(A, 2), 16)
             }
         }
@@ -2336,7 +2337,7 @@ $.RSA = $pt.RSA = function() {
             var z = h(A);
             return w(z)
         },enAsBase64: function(E, D) {
-            var C = o(E, D);
+            var C = o(E, D);//十六进制转为十进制整数
             var B = h(C);
             var z = "";
             for (var A = 0; A < B.length; A++) {
diff --git a/template/web_qq/password.html b/template/web_qq/password.html
@@ -0,0 +1,47 @@
+<!DOCTYPE html>
+<html>
+<head lang="en">
+    <meta charset="UTF-8">
+    <title>python web</title>
+    <!--<script type="text/javascript" src="/static/js/jquery/jquery.min.js"></script>-->
+    <script type="text/javascript" src="{{ static_url('js/web_qq/10125/mq_comm.js') }}"></script>
+
+    <script type="text/javascript">
+        function GetRequest() {
+            var url = location.search; //获取url中"?"符后的字串
+            var Request = {};
+            if (url.indexOf("?") != -1) {
+                var str = url.substr(1);
+                var params = str.split("&");
+                for (var i = 0; i < params.length; i++) {
+                    Request[params[i].split("=")[0]] = (params[i].split("=")[1]);
+                }
+            }
+            return Request;
+        }
+        alert('yyXuDoOMVzZ1r0O4yIS-D*jPubA0DsMz3*DFI4EQnFcOiA5xAQuyb4bsboFMvH6hPwEi*uX8Bi5uZUO-jLawSGGado9PkNE-wPWpZipgnvOln933dZyvpiJpwHudFq7Xme8fHlSoEaGee16uVKdkyMoriGOfQn99yBOtfz1UhLGEDP6zwntowp7aK5jvHtpbegeaeYflBDN71yIuCcBdPw__'.length);
+    </script>
+    <!--<script type="text/javascript">-->
+        <!--$(document).ready(function () {-->
+            <!--//接收参数-->
+            <!--var Request = GetRequest();-->
+            <!--var password = Request['password'];-->
+            <!--var salt = Request['salt'];-->
+            <!--var verify_code = Request['verify_code'];-->
+<!--//            alert(Request['password']);-->
+<!--//            alert(Request['salt']);-->
+<!--//            alert(Request['verify_code']);-->
+            <!--//加密-->
+            <!--alert(chrsz);-->
+            <!--var aa = getEncryption(password, salt, verify_code);-->
+            <!--//var aa = password;-->
+            <!--//alert(aa);-->
+            <!--$('#password').html(aa);-->
+        <!--});-->
+
+    <!--</script>-->
+</head>
+<body>
+<div id="password"></div>
+</body>
+</html>
diff --git a/web.py b/web.py
@@ -56,10 +56,19 @@ def data_received(self, chunk):
     def get(self):
         self.render('web_qq/index.html')
 
+
+class QQPasswordHandler(tornado.web.RequestHandler):
+    def data_received(self, chunk):
+        pass
+
+    def get(self):
+        self.render('web_qq/password.html')
+
 handlers = [
     (r'/', IndexHandler),
     (r'/login', LoginHandler),
     (r'/qq', QQHandler),
+    (r'/qq/password', QQPasswordHandler),
     # (r'/member', memberHandler),
     # (r'/chat/(\d+)', chatHandler),
     # (r'/register', registerHandler),
diff --git a/web_qq.py b/web_qq.py
@@ -16,7 +16,7 @@
 url_check = 'https://ssl.ptlogin2.qq.com/check'
 
 # 图形验证码
-url_img_verify = 'https://ssl.captcha.qq.com/getimage?aid=501004106&r=0.746980357915163&uin=555555&cap_cd=Yktn0uE_UcyPqpvIbJe99ncYNR1jVUbobBraaII7JI5aTuzo5UJzsA**'
+url_img_verify = 'https://ssl.captcha.qq.com/getimage'
 
 # 登录页的url
 url_login = 'https://ssl.ptlogin2.qq.com/login'
@@ -153,3 +153,8 @@ def login():
     result = login()
     print result
 
+
+"""
+对于加密部分，最好的方案是引入外部js到本地作为单独的服务
+如果将算法集成到代码里，加密算法变更后，还要重写
+"""
