2 回答

TA貢獻1812條經驗 獲得超5個贊
不安全,但把:
<?php
$uname=$_POST['uname'];
$password=$_POST['password'];
session_start();
$con=mysqli_connect("localhost","root","g7trj98o6fyr5","login");//mysqli("localhost","username of database","password of database","database name")
$result=mysqli_query($con,"SELECT * FROM `login_info` WHERE `uname`='$uname' && `password`='$password'");
$count=mysqli_num_rows($result);
if($count==1)
{
echo "Login success";
$_SESSION['log']=1;
$_SESSION['uname'] = $_POST['uname'];
header("refresh:2;url=welcome.php");
}
else
{
echo "please fill proper details";
header("refresh:2;url=index.php");
}
?>
然后檢查:
if($logedInUsername == $_SESSION['uname'])
...
您還需要在welcome.php 中將$logedInUsername 設置為$row['uname'] 或檢查
if($row['uname'] == $_SESSION['uname'])

TA貢獻1829條經驗 獲得超9個贊
登錄成功后在 login.php 中執行這個 $_SESSION['uname'] = $_POST['uname'];
在welcome.php 中執行這個 $logedInUsername = $_SESSION['uname'];
現在當前登錄的用戶名存儲在$logedInUsernamewelcome.php中以供使用,這是因為SESSION是php中的全局變量,可以從任何地方訪問。
while 循環和其中的 if 語句現在應如下所示:
while($row = mysqli_fetch_array($result))
{
echo "<tr>";
echo "<td>" . $row['uname'] . "</td>";
echo "<td>" . $row['clickrate'] . "</td>";
if($row['uname'] == $logedInUsername)
echo "<td>" . $row['yourword'] . "<a href='edityourword.php?edit=$row[yourword]'> edit</a></td>";
else
echo "<td>" . $row['yourword'] . "</td>";
echo "</tr>";
}
echo "</table>";
?>
- 2 回答
- 0 關注
- 139 瀏覽
添加回答
舉報