Question

我想检查密码是否正确（区分大小写）。目前，我正在使用PDO，如下所示：

$sql = 'select * from User
        WHERE Email = :user and Password = :pass AND idRole = :role AND idState_User = :state';

    $stat = $this->_db->prepare($sql);
    $stat->bindParam(':user', $user, PDO::PARAM_STR);    
    $stat->bindParam(':pass', $password, PDO::PARAM_STR);  
    $stat->bindParam(':state', $idState_User, PDO::PARAM_INT);  
    $stat->bindParam(':role', $idRole, PDO::PARAM_INT);          
    $stat->execute();

我想：传递为区分大小写，因为如果密码是＆＃34; paSs1234＆＃34;，我可以使用PASS1234，pass1234或paSs1234登录。如何使此案例敏感？提前谢谢。

Answer 1

$sql = 'select * from User
        WHERE Email = :user 
          AND BINARY `Password` = :pass 
          AND idRole = :role
          AND idState_User = :state';

pdo bindParam区分大小写

1 个答案: