我有一个删除帐户页面，允许用户在检查密码是否正确后删除他们的帐户，但是当用户插入错误的密码时问题是系统显示错误信息密码不正确。当用户插入正确的密码时，系统不会显示任何消息来通知用户。任何人都可以帮助我吗？确认用户帐户被删除不起作用

delete_account.php

<?php 
session_start(); 
$msgToUser=""; 
if(@!$_SESSION['user_id']) 
{ 
    $msgToUser= '<br /><br /><font color = "#FF000">Only registered users can delete their account</font><p><a href = "register.php">Join Here</a></p>'; 
    exit(); 
} 
$id = $_SESSION['user_id']; 

if(isset($_POST['delete'])) 
{ 


     $del_acct_pass = $_POST['del_account_pass']; 
     require_once('include/connect.php'); 
     $check_pass = mysql_query("SELECT password FROM user WHERE password = '$del_acct_pass' AND user_id ='$id'")or die(mysql_error()); 
     $check_pass_num = mysql_num_rows($check_pass); 
     if($check_pass_num>0) 
     { 
     /*$sql = mysql_query("SELECT * FROM user WHERE user_id = '$id'")or die(mysql_error()); 
     $pass_check_num = mysql_num_rows($sql);*/ 


      $pic1=("members/$id/image01.jpg"); 
      if(file_exists($pic1)) 
      { 
        unlink($pic1); 

      } 

      $dir = "members/$id"; 
      rmdir($dir); 

      $sqltable1 = mysql_query("DELETE FROM user WHERE user_id ='$id'")or die(mysql_error()); 
      $sqltable1 = mysql_query("DELETE FROM blabing WHERE u_id ='$id'")or die(mysql_error()); 
      $msgToUser="<h3 style='color:#99FF33'>YOUR Account Has Been Deleted!!!</h3>"; 
      session_destroy(); 



     } 
     $msgToUser = "<h3 style='color:#CC0000'>YOU must Write the correct Password</h3>"; 

} 



?> 
    <table width="70%" align="center" cellpadding="6"> 
      <form action="delete_account.php" method="post" name="delete_form" > 
      <tr> 
       <td bgcolor="#CCCCCC">Delete Your Account </td> 
      </tr> 
      <tr> 
       <td>Please enter Your current Password to proceed with account deletion</td> 
      </tr> 
      <tr> 
       <td><input type="password" name="del_account_pass" id="del_account_pass" /></td> 
      </tr> 
      <tr> 

       <td><input type="submit" name="delete" id="delete" value="Delete Account" /></td> 
      </tr> 
      <tr> 
      <td><?php echo $msgToUser; ?></td> 
      </tr> 
      </form> 
      </table>

来源

2013-05-12 user2372265

再次检查你的代码，在我看来你的代码是完全错误的！例如，如果删除过程没问题，那么它在每个条件中都会回应“你必须写出正确的密码”，它的正确与否！ – rcpayan 2013-05-12 14:01:03

你总是设置$ msgToUser到abouyt密码不正确的消息，始终。

它即使在删除帐户时也会运行。

你可能希望它在Else子句

} else { 
    $msgToUser = "<h3 style='color:#CC0000'>YOU must Write the correct Password</h3>"; 
}

顺便说一句，在你需要在安全读了，你的代码很容易受到SQL注入。

来源

2013-05-12 14:02:06 barryhunter

确认用户帐户被删除不起作用

delete_account.php

回答

相关问题