登录PHP和Mysql

好吧，基本上我有一个login.php，它只是包含这个表单和从我的mysql数据库连接：这是连接到我的其他文件，login_success.php其中包含代码的主体，使我的登录功能。登录PHP和Mysql

<?php 
    include "header2.php"; 
    session_start(); 
    ?> 
    <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"> 
    <html xmlns="http://www.w3.org/1999/xhtml"> 
    <head> 
    <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> 
    <title>Login</title> 
    <style type="text/css"> 
    #title { 
    height: 200px; 
    width: 600px; 
    margin-top: 30px; 
    margin-right: auto; 
    margin-bottom: 10px; 
    margin-left: auto; 
    padding-top: 20px; 
    padding-right: 20px; 
    padding-bottom: 35px; 
    padding-left: 20px; 
    } 
    strong { 
    font-size: 28px; 
    font-family: Georgia, "Times New Roman", Times, serif; 
    font-weight: bolder; 
    color: #31CAF5; 
    } 
    #username, #password { 
    width: 80%; 
    height: 25px; 
    padding: 5px; 
    color: #999; 
    background-color: #FFF; 
    border: thin solid #CCC; 
    padding-top: 10px; 

    } 
    #login, #reset { 
    width: 70px; 
    height: 30px; 
    } 
    #error { 
    height: 20px; 
    color: #FFF; 
    font-size: 14px; 
    background-color: #FF3C3C; 
    padding-top: 5px; 
    padding-bottom: 5px; 
    font-family: Verdana, Geneva, sans-serif; 
    text-align: center; 
    } 
    </style> 
    </head> 
    <body> 
    <div id="title"> <strong>User Login</strong><br /> 
    <hr noshade="noshade" /> 
    <?php 
    include ('db_connect.php'); 
    ?> 
    <form id="form1" name="form1" method="post" action="login_success.php"> 
    <table width="100%" border="0" cellpadding="5"> 
    <tr> 
    <td width="16%"> <label for="username">Username</label></td> 
    <td width="3%">:</td> 
    <td width="81%"><input type="text" name="username" id="username" /></td> 
    </tr> 
    <tr> 
    <td> <label for="password">Password</label></td> 
    <td>:</td> 
    <td><input type="password" name="password" id="password" /></td> 
    </tr> 
    <tr> 
    <td>&nbsp;</td> 
    <td>&nbsp;</td> 
    <td> <input type="submit" name="login" id="login" value="Log In" /> 
    &nbsp;&nbsp; 
    <input type="reset" name="reset" id="reset" value="Reset" /></td> 
    </tr> 
    </table> 
    </form> 
    </div> 
    </body> 
    </html> 
    <?php 
    //endif; 
    include "footer.php" ?>

这里的代码是我的文件login_success。这个想法是，当用户输入正确的登录凭证时，它会将它们启动到会话loggedIn中。它旨在允许在数据库上散列的密码。但是，由于某些原因，即使它不是保存在数据库中的登录凭据，也可以通过此操作获取详细信息。

<?php 
    session_start(); 
    //For cases where users are not logged in redirect back to login page. 


     include "conn.php"; 
     include "header.php"; 

     $username = $_POST['username']; 
     $password = $_POST['password']; 
     $password = md5($password); 

     //echo "password ".$password; 
     //echo "username ".$username; 

     $qry = "SELECT * FROM login WHERE username = '$username'"; 
     $userlogin = mysqli_query($_SESSION['conn'],$qry); 
     $result = mysqli_fetch_array($userlogin); 


     if (strcmp($result['password'], $password)==0) { 
      $_SESSION["loggedIn"] = $username; 
      $_SESSION["message"] = "Logged In Successfully."; 
      header('Location: members.php'); 
     } 
     else { 
      $_SESSION["message"] = "Log In Failed"; 
      header('Location: login.php'); 
     } 



    if(!isset($_SESSION["loggedIn"])){ 
        header("Location: index.php"); 
        exit; 
       } 
     echo '<h1> Congratulations '.$_SESSION['loggedIn'].'</h1> <br> <h2>You successfully logged in!</h2><br> 



      <h3><a href="logout.php">Logout</a> <a href="members.php">Continue</a></h3><br/><br/>'; 

    include ("footer.php");?>

来源

2013-03-18 Elliot Saunders

什么是你的问题？ – sgeddes 2013-03-18 02:39:37

我不完全确定你的问题是什么... – blainarmstrong 2013-03-18 02:40:03

对不起。我筋疲力尽，现在我的英语基本上很糟糕。使用这两个PHP文件，我的登录表单只是允许通过任何凭据，说“成功登录”。但是，我已经在我的数据库上设置了用户帐户。即用户名+密码，这是唯一允许成功登录的帐户。我的问题是，为什么会发生这种情况？ – 2013-03-18 02:41:49

试试这个。我认为STRCMP功能在这里

罪魁祸首

<?php 
if (strcmp($result['password'], $password)==0) { 
      $_SESSION["loggedIn"] = $username; 
      $_SESSION["message"] = "Logged In Successfully."; 
      header('Location: members.php'); 
     } 
     else { 
      $_SESSION["message"] = "Log In Failed"; 
      header('Location: login.php'); 
     } 
?>

应该

<?php 
if ($result == true) { 
      $_SESSION["loggedIn"] = $result['username']; 
      $_SESSION["message"] = "Logged In Successfully."; 
      header('Location: members.php'); 
     } 
     else { 
      $_SESSION["message"] = "Log In Failed"; 
      header('Location: login.php'); 
     } 

?>

来源

2013-03-18 05:42:13 none

登录PHP和Mysql

回答

相关问题