Question

我好我正在尝试将数据添加到我的用户登录数据库但是由于某种原因我的数据库在注册新用户时没有更新。

这是来自user.inc.php的代码：

<?php
//checks if username already exists in database
function user_exists($user)
{
    $user = mysqli_real_escape_string($user);
    $total = mysqli_query("SELECT user_id FROM user_system WHERE user_name= ('$user')");

    return (mysql_result($total, 0) == '1') ? true : false;
}

//checks if username and password combo is valid
function valid_credent($user, $pass)
{
    $user = mysqli_real_escape_string($user);
    $pass = sha1($pass);
    $total = mysqli_query("SELECT COUNT user_id FROM users 
                        WHERE user_name = '$user' AND 
                        user_password = '$pass' ");

    return(mysql_result($total, 0) == '1') ? true : false;
}

//add user to database
function add_user($user, $pass)
{
    $user = mysqli_real_escape_string(htmlentities($user));
    $pass = sha1($pass);

    $queryStr = "INSERT INTO users (user_name, user_password) VALUES ('$user', '$pass')";
    $R = mysqli_query($mysqli,$queryStr);
}
?>

当我尝试添加查看错误时，我的注册页面上也有警告

Warning: mysql_result() expects parameter 1 to be resource, boolean given in /Applications/XAMPP/xamppfiles/htdocs/PostalCloud/core/user.inc.php on line 8

第8行：

return (mysql_result($total, 0) == '1') ? true : false;

我尝试过使用＆＃34; sanitize（）＆＃34;然而，这并不存在。

更新：修改代码后仍然出现错误。这里是我的register.php代码的一部分，我有一个init.inc.php，它使用mysqli连接数据库。

<?php
include('init.inc.php');

$errors = array();

if(isset($_POST['username'], $_POST['password'], $_POST['repeatPassword']))
{
    if(empty($_POST['username']))
    {
        $errors[] = 'The username cannot by empty. ';
    }

    if(empty($_POST['password']) || empty($_POST['repeatPassword']))
    {
        $errors[] = 'The password cannot by empty. ';
    }

    if($_POST['password'] !== $_POST['repeatPassword'])
    {
        $errors[] = 'Password verification failed. ';
    }

    if(user_exists($_POST['username']))
    {
        $errors[] = 'The username you entered is already taken. ';
    }

    if(empty($errors))
    {
        add_user($_POST['username'], $_POST['password']);

        $_SESSION['username'] = htmlentities($_POST['username']);

        header('Location: protected.php');
        die();
    }
}
?>

init.inc.php：

<?php
session_start();

$exceptions = array('register', 'login');

$page = substr(end(explode('/',$_SERVER['SCRIPT_NAME'])), 0, -4);

if(in_array($page, $exceptions) === false)
{
    if(isset($_SESSION['username']) === false)
    {
        header('Location: login.php');
        die();
    }
}

$mysqli = mysqli_connect('localhost','root','', 'user_system');

$path = dirname(__FILE__);

include("{$path}/core/user.inc.php");
?>

Answer 1

问题是 mysql_query（）返回一个布尔值而不是结果资源。这可能有两个原因：

您执行了返回成功/失败而不是结果的查询设置（例如UPDATE）
您的查询失败

您的查询在列名称上包含单引号..这应该被删除：

$total = mysqli_query("SELECT user_id FROM user_system WHERE user_name= '$user'");

无法使用XAMPP for mac添加到mySQL数据库

1 个答案: