Express implements login verification

const express = require('express');
const static = require('express-static');
const bodyParser = require('body-parser');
const multer = require('multer');
// The path to upload the configuration file, here is the local address const multerObj = multer({ dest: './static/upload' });
const cookieParser = require('cookie-parser');
const cookieSession = require('cookie-session');
const consolidate = require('consolidate');
 
// The sub-route page needs to be used, make sure it has been installed const expressRoute = require('express-route');
const mysql = require('mysql');
 
var server = express();
server.listen(8080);
 
// Process submitted data and files server.use(bodyParser.urlencoded());
server.use(multerObj.any());
 
// cookie and signature processing server.use(cookieParser());
(function () {
    var keys = [];
    for (var i = 0; i < 100000; i++) {
        keys[i] = 'secret' + Math.random();
    };
    server.use(cookieSession({
        name: 'session_id',
        keys: keys,
        maxAge: 20 * 60 * 1000  
    }));
})();
 
// Template rendering server.engine('html', consolidate.ejs);
server.set('views', 'template');
server.set('view engine', 'html');
 
// Route splitting server.use('/', require('./route/web/index.js')()); // Front-end routing server.use('/admin/', require('./route/admin/index.js')()); // Back-end routing // Static data server.use(static('./static/'));

const express = require('express');
 
module.exports = function () {
 
    var router = express.Router();
 
    // Before logging in router.use((req, res, next) => {
        if (!req.session['admin_id'] && req.url != '/login') { 
            res.redirect('/admin/login');
        } else {
            next();
        }
    });
    router.use('/login', require('./login')());
 
    
    // Other routes after normal login router.get('/', (req, res) => {
        res.render('admin/index.ejs', {});
    });
    // Add routing based on business router.use('/banners', require('./banners')());
 
    return router;
};

const express = require('express');
// Encapsulated public method (md5) encryption module const common = require('../../libs/common');
const mysql = require('mysql');
 
var db = mysql.createPool({ 
    host: 'localhost', 
    user: 'root', 
    password: '123456', 
    database: 'blog' 
});
 
module.exports = function () {
    var router = express.Router();
    router.get('/', (req, res) => {
        res.render('admin/login.ejs', {});
    });
    
    router.post('/', (req, res) => {
        var username = req.body.username;
        var password = common.md5(req.body.password + common.MD5_SUFFIX);
        db.query(`SELECT * FROM admin_table WHERE username='${username}'`, (err, data) => {
            if (err) {
                // The returned data is very simple. Actually, an object is returned.res.status(500).send('Database connection error').end();
            } else {
                if (data.length == 0) {
                    res.status(400).send('Administrator does not exist').end();
                } else {
                    if (data[0].password == password) {
                        req.session['admin_id'] = data[0].ID;
                        res.redirect('/admin/');
                    } else {
                        res.status(400).send('Wrong password').end();
                    }
                }
            }
        });
    });
 
    return router;
};

const crypto = require('crypto');
module.exports = {
    MD5_SUFFIX: 'FDSW$t34tregt5tO&$(#RHuyoyiUYE*&OI$HRLuy87odlfh)',
    md5: function (str) {
        var obj = crypto.createHash('md5');
        obj.update(str);
        return obj.digest('hex');
    }
};