Question

Javascript submit（）;功能不起作用。我的PHP脚本（hax.php）没有返回任何值，我只需要AJAX检查它是否已成功运行。成功方法是否仍然在该条件下工作，或者它是否不再验证脚本。除此之外，即使执行了else {}语句，它仍然不提交表单。谁知道什么是错的？

<form action="validatelogin.php" method="post" autocomplete="off" id="loginform">
        <input style="display:none" type="text" name="auto"/>
        <input style="display:none" type="password" name="auto"/>
        <label for="username">Username: </label>
        <input type="text" name="username" placeholder="Your Username" id="username" class="modernInput" style="padding: 5px; width:100%;"><br><br>
        <label for="password">Password:</label>
        <input type="password" name="password" placeholder="Your Password" id="password" class="modernInput" style="padding: 5px; width:100%;">
        <?php echo $_SESSION["error"]; ?>
        <input type="button" value="Submit" class="btn btn-success btn-block" onclick="hackvalidate()">
    </form>
    <script>
    function  _(str) {
        return document.getElementById(str);
    }
    function hackvalidate() {
        var username = _("username").value;
        var password = _("password").value;
        var regex = /SELECT\s+|DELETE\s+|UPDATE\s+|--|=|/ig;
        if (username.test(regex) || password.test(regex)) {
            $.ajax({
                url: "hax.php",
                type: "POST",
                data: {user: username, pass: password},
                success: function () {
                    _("loginform").submit();
                }
            });
        } else {
            _("loginform").submit();
        }
    }
</script>

Answer 1

将.test()个操作数的顺序切换为regexObj.test(str)

if (regex.test(username) || regex.test(password)) {

Answer 2

使用.match()代替.test()。

if (username.match(regex) || password.match(regex)) {
            $.ajax({
                url: "hax.php",
                type: "POST",
                data: {user: username, pass: password},
                success: function () {
                    _("loginform").submit();
                }
            });
        } else {
            _("loginform").submit();
        }

match()是字符串方法，而test()是RegExp objects。

submit（）不工作JS

2 个答案: