登录页和寄存器之间的连接

camsedfj  于 2021-06-21  发布在  Mysql
关注(0)|答案(2)|浏览(372)

我是新来的 php ,我正在尝试链接登录页和注册页。一旦我按下登录按钮,它会直接进入链接页面,尽管我输入了错误的密码。
我试着用 mysqlinumrows . 登录后的结果仍在登录页面中。我试过修,但修不好。我希望有人能帮我减轻我的压力,知道我的错误,在下面的代码我附上。

代码:

<?php
    session_start();
    $_SESSION['message'] = '';
    $mysqli=new MySQLi('127.0.0.1','root','','accounts');

    if($_SERVER["REQUEST_METHOD"] == "POST") {
        if ($_POST['password']== $_POST['confirmpassword']) {

            $username = $mysqli->real_escape_string($_POST['username']);
            $email = $mysqli->real_escape_string($_POST['email']);
            $password = md5($_POST['password']);
            $profile_path = $mysqli->real_escape_string('images/'.$_FILES['profile']['name']);

            if (preg_match("!image!", $_FILES['profile']['type'])) {

                if (copy($_FILES['profile']['tmp_name'],$profile_path)){
                    $_SESSION['username'] =$username;
                    $_SESSION['profile'] =$profile_path;

                    $sql ="INSERT INTO users(username,email,password,profile)"
                    ."VALUES ('$username','$email','$password','$profile_path')";       

                    if($mysqli->query($sql)=== true) {
                              $_SESSION['message'] =  'Registration successful!
                              Added $username to the database!';
                         header("location:RegisterLogin.php");
                          }
                          else {
                              $_SESSION['message'] = "User could not be added to the database!";
                }
            }
            else{
                $_SESSION['message'] = "file failed!";

            }
            }
            else {
                $_SESSION['message'] = "Please only upload GIF,JPG, or PNG images!";
        }
        }
        else{
            $_SESSION['message'] = "two password do not match!";
        }
        }

    ?> 

    (Login Form)
    <?php 
    session_start();
    $_SESSION['message']=''; 
    $mysqli=new MySQLi('127.0.0.1','root','','accounts');

    if(isset($_POST['username'])) {
        $username = $mysqli->real_escape_string($_POST['username']);
            $password = md5($_POST['password']);
            $sql="SELECT * FROM users WHERE  username ='$username' AND password=$password";
            $result = mysqli_query($mysqli,$sql);

            if(mysqli_affected_rows($result) == 1){
                  $_SESSION['username'] = $username;
                 $_SESSION['message'] =  "Registration successful!";
        header("location:Welcome.php");
        }
        else{
            $_SESSION['message'] = "Login Failed!"; 
        }
    }
    ?>
hgc7kmma

hgc7kmma1#

首先你必须有表单标签。尝试此格式

<form action="" method="post">
  <input type="text" name="username">
  <input type="password" name="password">
  <input type="submit" name="login">
</form>

对于您的php代码:

if(isset($_POST['login'])) {
            $username = $mysqli->real_escape_string($_POST['username']);
            $password = md5($_POST['password']);
            $sql="SELECT * FROM users WHERE  username ='$username' AND password=$password";
            $result = mysqli_query($mysqli,$sql);

            if(mysqli_affected_rows($result) == 1){
                  $_SESSION['username'] = $username;
                 $_SESSION['message'] =  "Registration successful!";
        header("location:Welcome.php");
        }
        else{
            $_SESSION['message'] = "Login Failed!"; 
        }
    }

如果不是你的问题,请在下面评论。我会帮你的。

wvmv3b1j

wvmv3b1j2#

纠正你的错误 select 在登录页中查询到 $sql="SELECT * FROM users WHERE username ='$username' AND password='$password' "; 向密码变量添加单引号

相关问题