ex

app/admin/controller/Login.php

@@ -51,7 +51,8 @@ class Login extends AdminControl
                 //验证失败
                 ds_json_encode(10001, lang('wrong_checkcode'));
             }
-            checkPasswordSecurity();
+            $res = checkPasswordSecurity();
+            if (!$res) return;
             $condition = array();
             $condition[] = array('admin_name', '=', $admin_name);
             $condition[] = array('admin_password', '=', md5($admin_password));