我創建了一個注冊和登錄系統!注冊沒有問題。我輸入所需的用戶名,所需的電子郵件,所需的密碼并按回車鍵,點擊回車鍵后,我來到主頁。問題是當我按下注銷按鈕時,當離開按鈕將我帶到登錄頁面時,當我重新輸入用戶名和密碼時,我得到“不正確的用戶名或密碼”錯誤。 if (isset($_POST['register'])) { $username = mysqli_real_escape_string($db, $_POST['username']); $email = mysqli_real_escape_string($db, $_POST['email']); $password = mysqli_real_escape_string($db, $_POST['password']); $repeatpassword = mysqli_real_escape_string($db, $_POST['repeatpassword']); $username_checker = "SELECT * FROM users WHERE username='$username'"; $email_checker = "SELECT * FROM users WHERE email='$email'"; $name_checker = mysqli_query($db,$username_checker) or die(mysqli_error($db)); $mail_checker = mysqli_query($db,$email_checker) or die(mysqli_error($db)); if(empty($username)){ array_push($errors,"Username is required"); return; } if(empty($email)){ array_push($errors,"Email is required"); return; } if(empty($password)){ array_push($errors,"Password is required"); return; } if(mysqli_num_rows($name_checker) > 0){ array_push($errors,"Username is already recorded in our database"); return; } if(mysqli_num_rows($mail_checker) > 0){ array_push($errors,"Email Address is already recorded in our database"); return; } if(!preg_match("/^[a-zA-Z ]*$/",$username)){ array_push($errors,"The username is only derived from uppercase and lowercase characters"); return; } if(strlen($_POST['username']) < 5){ array_push($errors,"Username must be at least 5 characters long"); return; }
1 回答

湖上湖
TA貢獻2003條經驗 獲得超2個贊
每次對密碼進行哈希處理時,都會創建一個新字符串(哈希),因此,如果您嘗試將散列的密碼與以前散列的密碼進行匹配,則該字符串將永遠不會起作用。
試試這個:
if (password_verify($_POST['password'], $result['password'])) //True if password is correct
$_POST['password']
是純文本形式提交的表單中的密碼。
$result['password']
是數據庫中的哈希密碼。
請看一下PDO準備好的語句,你的代碼真的像這樣危險。
- 1 回答
- 0 關注
- 104 瀏覽
添加回答
舉報
0/150
提交
取消