Codeigniter登录不起作用

Question

我重复使用了一年前创建的旧CodeIgniter项目的登录系​​统，我有点生疏，但我查找了一段时间，我找不出原因用户名和密码不起作用。我使用的注册码是使用MD5加密的，我已经设置了一个加密密钥。

登录视图代码：

  <?php echo form_open('Login_controller/Login'); ?> 
      <label for="Username">Username:</label> 
      <input type="text" id="Username" name="Username" autofocus placeholder="Your username"/> 
      <label for="Password">Password:</label> 
      <input type="password" id="Password" name="Password" placeholder="Your password" /> 

      <input type="submit" name="Login" value="Login" > 
      <?php echo validation_errors(); ?> 
      <p>Not an existing user? <a href="<?php echo site_url("Register_controller")?>">REGISTER</a><p> 
     </form> 

登录控制器代码：

function Login() 
{ 
    $this->load->library('form_validation'); 
    $this->form_validation->set_rules('Username', 'Username', 'trim|required'); 
    $this->form_validation->set_rules('Password', 'Password', 'trim|required|callback_CheckDatabase'); 

    if($this->form_validation->run() == FALSE) 
    { 
     $this->load->view('Login_view'); //Reloads the login view with validation errors if the login attempt is unsuccessful.// 
    } 

    else 
    { 
     redirect('Home_controller'); //Redirect to the homepage on successful login attempt.// 
    } 
} 


function CheckDatabase($password) //This function is only run when password validation is correct.// 
{ 
    $username = $this->input->post('Username'); //Sets the username as a $username.// 
    $result = $this->User_model->Login($username, $password); 

    if($result) 
    { 
     $sess_array = array(); 
     foreach($result as $row) 
     { 
      $sess_array = array(//Makes an array of the data to be stored in the session.// 
      'id' => $row->UserID 
      ); 

      $this->session->set_userdata('logged_in', $sess_array); //Sets $sess_array as the session.// 
     } 

     return TRUE; 
    } 

    else //Ran if the username or password aren't matched in the CIUsers database. Returns error message.// 
    { 
     $this->form_validation->set_message('CheckDatabase', 'Invalid login details.'); 
     return false; 
    } 
} 

用户模型代码：

function Login($username, $password) 
    { 
    $this -> db -> select('UserID, Username, Password'); 
    $this -> db -> from('CIUsers'); 
    $this -> db -> where('Username', $username); 
    $this -> db -> where('Password', md5($password)); 
    $this -> db -> limit(1); 

    $query = $this -> db -> get(); 

    if($query -> num_rows() == 1) 
    { 
     return $query->result(); 
    } 

    else 
    { 
     return false; 
    } 
} 

它返回我的 “无效的登录详细信息” 的消息，并没有错误。

Answer 1

我用过的打印

$this->db->last_query(); 

，并意识到，我是限制了我的数据库密码长度20没有意识到加密使它超过20，将其改为50固定的问题。

Answer 2

首先md5不安全的登录，你应该尝试使用密码哈希技术。

尝试这样

public function login() { 
// create the data object 
$data = new stdClass(); 
// load form helper and validation library 
$this->load->helper('form'); 
$this->load->library('form_validation'); 
// set validation rules 
$this->form_validation->set_rules('username', 'Username', 'required|alpha_numeric'); 
$this->form_validation->set_rules('password', 'Password', 'required'); 
if ($this->form_validation->run() == false) { 
// validation not ok, send validation errors to the view 
$this->load->view('header'); 
$this->load->view('user/login/login'); 
$this->load->view('footer'); 
} else { 
// set variables from the form 
$username = $this->input->post('username'); 
$password = $this->input->post('password'); 
if ($this->user_model->resolve_user_login($username, $password)) { 
$user_id = $this->user_model->get_user_id_from_username($username); 
$user = $this->user_model->get_user($user_id); 
echo "logged in success"; 
} else { 
// login failed 
$data->error = 'Wrong username or password.'; 
// send error to the view 
$this->load->view('login', $data); 
} 
} 

，并在模型中这样

public function resolve_user_login($username, $password) { 
$this->db->select('password'); 
$this->db->from('users'); 
$this->db->where('username', $username); 
$hash = $this->db->get()->row('password'); 
return $this->verify_password_hash($password, $hash); 
} 
public function get_user_id_from_username($username) { 
$this->db->select('id'); 
$this->db->from('users'); 
$this->db->where('username', $username); 
return $this->db->get()->row('id'); 
} 
public function get_user($user_id) { 
$this->db->from('users'); 
$this->db->where('id', $user_id); 
return $this->db->get()->row(); 
} 
private function hash_password($password) { 
return password_hash($password, PASSWORD_BCRYPT); 
} 
private function verify_password_hash($password, $hash) { 
return password_verify($password, $hash); 
} 

对于完全教程阅读本http://w3code.in/2015/09/create-login-and-registration-with-codeigniter/