Question

我的问题不是电子邮件成功发送，而是我网站上的确认页面。电子邮件已经发送给用户，但当他们点击链接激活他们的密码时，它会将他们带到确认页面，它应该确认激活，并注册它们，但它根本没有做任何事情。它只是显示一个空白页面，我甚至检查了数据库，没有任何改变。我想要任何帮助，我也有下面的代码。任何帮助都会很棒。

<?php

include('sqlconfig.php');

// Connect to server and select databse.
mysql_connect("$host", "$username", "$password")or die("cannot connect"); 
mysql_select_db("$db_name")or die("cannot select DB"); 

/* Confirmation Code */
$passkey=$_GET['passkey'];
$tbl_name1="temp_users";

/*retrieve data */
$sql1="SELECT * FROM temp_users WHERE confirm='$passkey'";
$result1=mysql_query($sql1);

if($result1){
$count=mysql_num_rows($result1);

/*Fetch The data From the table */
if($count==1){
$rows=mysql_fetch_array($result1);
$Email=$rows['email'];
$First_Name=$rows['FirstN'];
$Last_name=$rows['LastN'];
$password=$rows['password']; 
$phone=$rows['phone'];
$tbl_name2="users";

/*Insert data into new users table */
$sql2="INSERT INTO $tbl_name2(First Name, Last Name, Email, Password, phone)VALUES('$First_Name', '$Last_name', '$Email', '$password', '$phone')";
$result2=mysql_query($sql2);
}

/*If passkey is not found*/
else {
echo "Wrong Confirmation code";
}

/*If activation successful, show, and delete old data from temp table*/
if($result2){

echo "Your account has been activated";

// Delete information of this user from table "temp_members_db" that has this passkey 
$sql3="DELETE FROM $tbl_name1 WHERE confirm_code = '$passkey'";
$result3=mysql_query($sql3);

}


}
?>

Answer 1

未经测试，肯定需要进行一些修改，但是：

<?php

include('sqlconfig.php');

//Connect to Database
$mysqli = new mysqli($hostname, $username, $password, $databasename);
//PHP > 5.3.0
if ($mysqli->connect_error) {
    die('Connect Error (' . $mysqli->connect_errno . ') '
            . $mysqli->connect_error);
}

/* Confirmation Code */
$passkey = $_GET['passkey'];
$tbl_name1 = "temp_users";


/* create a prepared statement */
if ($stmt = $mysqli->prepare("SELECT * FROM temp_users WHERE confirm=?")) {

    $stmt->bind_param("s", $passkey);
    $result = $stmt->get_result();

    $rows = $result->fetch_assoc();

    $stmt->close();

    $Email = $rows['email'];
    $First_Name = $rows['FirstN'];
    $Last_name = $rows['LastN'];
    $password = $rows['password'];
    $phone = $rows['phone'];
    $tbl_name2 = "users";

    /* Create table doesn't return a resultset */
    if ($mysqli->query("INSERT INTO $tbl_name2(First Name, Last Name, Email, Password, phone)VALUES('$First_Name', '$Last_name', '$Email', '$password', '$phone')") === TRUE) {
        echo "Your account has been activated";

        if ($stmt = $mysqli->prepare("DELETE FROM $tbl_name1 WHERE confirm_code = ?")) {
            $stmt->bind_param("s", $passkey);
            $stmt->execute();
            $stmt->close();
        }
    }
    else {
        echo "Wrong Confirmation code";
    }
}

注意：在select查询中使用$_GET['passkey']的值时，我们使用bind_param来避免SQL注入。

我强烈建议您阅读：http://php.net/manual/en/faq.databases.php#faq.databases.mysql.deprecated

Answer 2

试试这个。

if（$ passkey == NULL）//检查passkey是否为null，这可能是空白屏幕的原因

{ 回声“页面上的无效动作”; //一些错误信息 }

否则 { $ flag = FALSE; //在剧本开头的某处开始

    /*retrieve data */
    $sql1="SELECT * FROM temp_users WHERE confirm='$passkey'";

    $result1=mysql_query($sql1);

    if(mysql_num_rows($result1))
        {
        $rows=mysql_fetch_array($result1);
        $Email=$rows['email'];
        $First_Name=$rows['FirstN'];
        $Last_name=$rows['LastN'];
        $password=$rows['password']; 
        $phone=$rows['phone'];
        $tbl_name2="users";

        /*Insert data into new users table */
        $sql2="INSERT INTO $tbl_name2(First Name, Last Name, Email, Password, phone)VALUES('$First_Name', '$Last_name', '$Email', '$password', '$phone')";
        if(mysql_query($sql2))
            {
            $flag = TRUE;
            }

        }
    /*If passkey is not found*/
    else 
        {
        echo "Wrong Confirmation code";
        }

    /*If activation successful, show, and delete old data from temp table*/
    if($flag)
        {
        echo "Your account has been activated";
        // Delete information of this user from table "temp_members_db" that has this passkey 
        $sql3="DELETE FROM $tbl_name1 WHERE confirm_code = '$passkey'";
        $result3=mysql_query($sql3);
        }

}

首先代码将检查查询是否有任何结果，如果是，则获取数据并插入表2中。

引入一个新的变量标志来检查query2是否被执行，如果是，则执行查询3.

编辑：首先检查密钥是否包含某些值，如果没有显示错误，则执行其余代码

电子邮件确认用PHP

2 个答案: