访问

Question

页

所以之前创建会话时，执行用户点击登录验证码：LoggedIn.php

<?php 
include 'connect.php'; 
if (!isset($_POST['username'], $_POST['password'])) { 
    // Could not get the data that should have been sent. 
    die ('Username and/or password does not exist!'); 
} 
// Prepare our SQL 
if ($stmt = $mysqli->prepare('SELECT password FROM users WHERE username = ?')) { 
    // Bind parameters (s = string, i = int, b = blob, etc), hash the password using the PHP password_hash function. 
    $stmt->bind_param('s', $_POST['username']); 
    if(!$stmt->execute()){ 
    trigger_error("there was an error....".$mysqli->error, E_USER_WARNING); 
    } 
    $stmt->store_result(); 
    // Store the result so we can check if the account exists in the database. 
    if ($stmt->num_rows > 0) { 
     $stmt->bind_result($password); 
     $stmt->fetch();  
     // Account exists, now we verify the password. 
     if (password_verify($_POST['password'], $password)) { 
      // Verification success! User has loggedin! 
      header('location: userPage.php'); 
        //**should I create the session here?** 

     } else { 
      echo 'Incorrect username and/or password!'; 
     } 
    } else { 
     echo 'Incorrect username blar password!'; 
    } 
    $stmt->close(); 
} else { 
    echo 'Could not prepare statement!'; 
} 
?> 

OR应该当他们在userPage.php会话创建。 这是他们得到在登录时

<?php 
ob_start(); 
include 'connect.php'; 
if(!isset($_SESSION['username']) || !isset($_SESSION['password'])) 
{ 
    header("location:http://www.fortunefilly.com/loginTemplate.php"); 
} 
else 
{ 
    session_start(); 
    $username =$_SESSION['username'] ; 
} 
?> 

访问的页面，但我不认为它实际上是创建一个会话，因为我尝试回声出$ USERNAME，但它不工作。只是在场景中几个三分球将是有益的

预先感谢您

Answer 1

如果您打算使用/创建/取消设置（任何）会话，您必须在代码的最开始处编写session_start();：

LoggedIn.php

<?php 
include 'connect.php'; 
session_start(); 
if (!isset($_POST['username'], $_POST['password'])) { 
    // Could not get the data that should have been sent. 
    die ('Username and/or password does not exist!'); 

或者在您的userPage.php：

<?php 
session_start(); 
ob_start(); 
include 'connect.php'; 
if(!isset($_SESSION['username']) || !isset($_SESSION['password'])) 
{ 
    header("location:http://www.fortunefilly.com/loginTemplate.php"); 
} 

编辑：

现在再回到这个问题，你需要set会议，良好的palce将是：

if (password_verify($_POST['password'], $password)) { 
      // Verification success! User has loggedin! 

      header('location: userPage.php'); 
        //**should I create the session here?** 

服用右出像牙齿疼痛：

if(!isset($_SESSION['username'])){ //should do it 

Answer 2

会议必须在访问会话变量之前启动：

<?php 
session_start(); 
ob_start(); 
include 'connect.php'; 
if(!isset($_SESSION['username']) || !isset($_SESSION['password'])) 
{ 
    header("location:http://www.fortunefilly.com/loginTemplate.php"); 
} 
else 
{ 
    $username =$_SESSION['username'] ; 
} 

>