Question

我有一个登录系统到后台，但用户验证不起作用。

我的登录代码是：

$userName = isset($_POST["user-name"]) ? $_POST["user-name"]: '';
$userPass = isset($_POST["user-pass"]) ? $_POST["user-pass"]: '';

if ($userName != '0' && $userPass != '0'){

    $criptSen = hash("whirlpool", $userPass);
    $rediURL  = isset($_GET["url"]) ? $_GET["url"]: ''; 

    $SQL = "SELECT Usuario, Senha, Rank FROM utilizadores WHERE Usuario='$userName' AND Senha='$criptSen' limit 1";
    $query = mysql_query($SQL);

    if (mysql_num_rows($query)>0)
    {
        $row = mysql_fetch_array($query);
        $_SESSION['Usuario'] = $row['Usuario'];     
        $_SESSION['Rank']    = $row['Rank'];
        mysql_free_result($query);

        if($row['Rank'] == 0){
            header("Location: membro.php");
        } else {
            if($row['Rank'] == 1) {
                header("Location: admin/index1.php");                
            }
        }       

    } else {
        if (isset($query)){
            mysql_free_result($query);
        }
        header('location: index.php');      
    }   

} else {
    header('location: index.php');
}
?>

我验证会话的代码是真的：当我登录时，他的工作正常，我认为这段代码是错误的，我需要你的帮助才能正确构建它。

<?php
@$Usuario = $_SESSION["Usuario"];
@$Rank   = $_SESSION['Rank']

if(!(isset($Usuario) && isset($Senha))){

$url = explode("/", $_SERVER["REQUEST_URI"]);

header("Location: index1.php?url=$url[3]");

} else if(isset($Usuario) && isset($Senha)){

$SQL = mysql_query("SELECT Usuario, Senha FROM utilizadores WHERE Usuario='$Usuario' AND Senha='$Senha' AND Rank=1");

if(mysql_num_rows($SQL) == 0){
    echo "<script>alert(\"Area Restrita\");</scrpit>";
    header("Location: ../index.php");
} 
}
?>

在php中验证会话

0 个答案: