阻止沒有[激活具有「真實」值]的用戶登錄

Question

如何防止用戶在沒有郵件確認的情況下登錄？

數據庫設置正確。當用戶通過單擊收到的消息中的鏈接確認註冊時，值「確認」從0（默認值）變爲1. 當然是布爾類型。我需要「else if」語句來工作，但我無法弄清楚。這裏是我的代碼：

public function postSignin(Request $request) 
{ 
    $this->validate($request, [ 
     'email' => 'required', 
     'password' => 'required' 
    ]); 

    if (!Auth::attempt($request->only(['email', 'password']), 
     $request->has('remember'))) 
    { 
     return redirect()->back()->with(notify()->flash("Ooops..", "error", [ 
      'timer' => 5000, 
      'text' => 'Could not sign in with those details', 
     ])); 
    } 
    else if ((Auth::attempt($request->only(['email', 'password'])))&&('confirmed'===0)) 
    { 
     return redirect()->back()->with(notify()->flash("Ooops..", "error", [ 
      'timer' => 5000, 
      'text' => 'Activate your account', 
     ])); 
    } 
    else 
    { 
    return redirect()->route('home'); 
    } 
} 

Answer 1

public function postSignin(Request $request) 
{ 
    $this->validate($request, [ 
    'email' => 'required', 
    'password' => 'required' 
    ]); 

// This line will always log the user **in** if the account is confirmed or not. 
if (!Auth::attempt($request->only(['email', 'password']), 
    $request->has('remember'))) 
{ 
    return redirect()->back()->with(notify()->flash("Ooops..", "error", [ 
     'timer' => 5000, 
     'text' => 'Could not sign in with those details', 
    ])); 
} 
else if (!Auth::attempt(["email"=>$request->input("email"),"password"=>$request->input('password'),"confirmation"=>1]) 
{ 
    return redirect()->back()->with(notify()->flash("Ooops..", "error", [ 
     'timer' => 5000, 
     'text' => 'Activate your account', 
    ])); 
} 
else 
{ 
return redirect()->route('home'); 
} 
}