Question

我正在为我的博客创建一个登录屏幕，但是当它必须验证散列时它会失败。我在谷歌上搜索了很多，并问了几个同学，但它仍然失败了。当您提交时，您会收到警报

密码或用户名错误！

我该如何解决这个问题？

这是我的登录脚本

<form action="" method="post">
    <input type="text" placeholder="username" name="username"maxlength="24"><br>
    <input type="password" placeholder="password" name="password" minlength="8"
           maxlength="16"><br>
    <input type="submit" value="login" name="submit">
</form>

这是我的登录表单

<?php
include_once('resources/db.php');

// var_dump($_POST);
$query = $db->prepare('insert into users (`username`, `password`, `privileges`) values(?, ?, ?)');



$query =$db->prepare('select * from users');

$query->execute();

?>

这是我的注册脚本

<?php

if (isset($_POST)) {
    include_once('resources/db.php');

    $sql = "INSERT INTO users (`username`, `password`) VALUES (:username, :password)";
    $query = $db->prepare($sql);
    $query->execute(array(
        ':username' => $_POST['username'],
        ':password' => password_hash($_POST['password'], PASSWORD_DEFAULT)
    ));

    if ($query) {

        echo "Registered succefully";
    } else {

        echo "Occured and error";
    }
}

?>

//这是注册表格

{{1}}

database structure

database rows

Answer 1

将数据库行更改为varchar（255）

$sql = "SELECT username, password FROM users WHERE username = :username";
$query = $db->prepare($sql);
$query->execute(array(":username" => $_POST['username']));
$user = $query->fetch(PDO::FETCH_ASSOC);

试试这个注册：

<?php

$db = new PDO('mysql:host=localhost;dbname=' . $db_name . ',' . $db_user . ',' . $db_pass);

if (isset($_POST)) {
    include_once('resources/db.php');

    $sql = "INSERT INTO users (`username`, `password`) VALUES (:username, :password)";
    $query = $db->prepare($sql);
    $query->execute(array(
            ':username' => $_POST['username'],
            ':password' => password_hash($_POST['password'], PASSWORD_DEFAULT)
    ));

    if ($query) {

        echo "Registered succefully";
    } else {

        echo "Occured and error";
    }
}

为什么我的密码验证不起作用？

1 个答案: