module/user/model.php 中 checkPassword() 使用 $_POST 的问题

    public function checkPassword($canNoPassword = false)

    {

        // 下面直接使用 $_POST['password1'] 是有什么特殊考虑吗？

        // 是不是应该使用 $this->post->password1

        if(!$canNoPassword and empty($_POST['password1'])) dao::$errors['password'][] = sprintf($this->lang->error->notempty, $this->lang->user->password);
        if($this->post->password1 != false)
        {
            if($this->post->password1 != $this->post->password2) dao::$errors['password'][] = $this->lang->error->passwordsame;
            if(!validater::checkReg($this->post->password1, '|(.){6,}|')) dao::$errors['password'][] = $this->lang->error->passwordrule;
        }
        return !dao::isError();
    }