可捕获的致命错误:类mysqli_result的对象无法转换为字符串in /opt/lampp/htdocs/internshala/controller/signup.php第40行警告:mysqli_num_rows()期望参数1为mysqli_result,在38行中的/opt/lampp/htdocs/internshala/controller/signup.php中给出的数组
if(isset($_POST['btn-login']))
{
$username = trim($_POST['username']);
$username = strip_tags($username);
$username = htmlspecialchars($username);
$qry="select id,pwd,username from users where username='".$_POST['username']."'";
$res=mysqli_query($conn,$qry);
$row=mysqli_fetch_array($res);
$count = mysqli_num_rows($row); // if uname/pass correct it returns must be 1 row
//echo $_POST['pwd'];
echo $res;
echo $count;
echo $row;
if($count == 1 && $row['pwd']==$_POST['pwd']) {
echo "djfgk";
$_SESSION['username'] = $row['username'];
$_SESSION['userid']=$row['id'];
header("Location: userdashboard.php");
} else {
$errMSG = "Incorrect Credentials, Try again...";
echo $errMSG;
}
}
不要直接发布变量。 SQL注入!!!! – Akintunde007
可能的复制的[PHP和MySQL:mysqli的\ _num \ _rows()预计参数1是mysqli的\ _result,给定的boolean(http://stackoverflow.com/questions/2546314/php-mysql-mysqli-num-rows -expects参数-1-待mysqli的-结果布尔) – Naruto