Question

我正在尝试登录以下代码中的管理员和讲师页面。但它无法正常工作。当我输入loginid和密码后登录时，点击提交，没有错误发生。 admin.php的

<?php 
session_start();
if(isset($_SESSION["userid"]))
{
    if($_SESSION["type"]=="admin")
    {
    header("Location: dashboard.php");
    }
    else
    {   
    header("Location: lectureaccount.php");
    }
}

include("header.php"); 
include("conection.php");
if(isset($_POST["uid"]) && isset($_POST["pwd"]) )
{
//  echo "sdfsd".   $_POST[uid];
$result = mysql_query("SELECT * FROM administrator WHERE adminid='$_POST[uid]'");
while($row = mysql_fetch_array($result))
  {
$pwdmd5 = $row["password"];
  }

if(md5($_POST["pwd"])=='$pwdmd5')
{
    $_SESSION["userid"] = $_POST["uid"];
    $_SESSION["type"]="admin";
    header("Location: dashboard.php");
}
else
{
$log =  "Login failed.. Please try again..";
}
}

if(isset($_POST["luid"]) && isset($_POST["lpwd"]))
{

$result = mysql_query("SELECT * FROM lectures WHERE lecid='$_POST[luid]'");
    while($row = mysql_fetch_array($result))
     {
$pwdm= $row["password"];
$_SESSION["lecname"] = $row["lecname"];
$_SESSION["coid"] = $row["courseid"];
    }
//echo"pwd". md5($_POST["lpwd"]);

if(md5($_POST["lpwd"])==$pwdm)
    {
        //echo $_POST["lpwd"];
    $_SESSION["userid"] = $_POST["luid"];
    $_SESSION["type"]=="lecturer";
    header("Location: lectureaccount.php");
    }
else
    {
        $log12 =  "Login failed.. Please try again..";
    }
}
?>
<section id="page">
<header id="pageheader" class="normalheader">
<h2 class="sitedescription">
</h2>
</header>

<section id="contents">

<article class="post">
  <header class="postheader">
  <h2><u>Admin Login</u></h2>
   <?php $log = isset($_POST['log']) ?>
  <h2><?php echo $log;?></h2>
  </header>
  <section class="entry">
  <form action="admin.php" method="post" class="form">
   <p class="textfield">
      <label for="author">
             <small>Admin Login ID (required)</small>
          </label>
           <input name="uid" id="uid" value="" size="22" tabindex="1" type="text">
   </p>
   <p class="textfield">
   <label for="email">
              <small>Password (required)</small>
          </label>
       <input name="pwd" id="pwd" value="" size="22" tabindex="2" type="password">
   </p>
   <p>
     <input name="submit" id="submit" tabindex="5" type="image" src="images/submit.png">
     <input name="comment_post_ID" value="1" type="hidden">

   </p>
   <div class="clear"></div>
</form>
  <form action="admin.php" method="post" class="form">
<div class="clear">
<hr />
  <header class="postheader">
    <h2><u>Lectures Login</u></h2>
   <?php $log12 = isset($_POST['log12']) ?>
   <h2><?php echo $log12;?></h2>
  </header>
  <section class="entry">

      <p class="textfield">
        <label for="author2"> <small><br />
          Lecture Login ID (required)</small> </label>
        <input name="luid" id="luid" value="" size="22" tabindex="3" type="text" />
      </p>
      <p class="textfield">
        <label for="email2"> <small>Password (required)</small> </label>
        <input name="lpwd" id="lpwd" size="22" tabindex="4" type="password" />
      </p>
      <p>
        <input name="submit2" id="submit2" tabindex="5" type="image" src="images/submit.png" />
        <input name="comment_post_ID2" value="1" type="hidden" />
      </p>
      <div class="clear"></div>
    </form>
    <div class="clear"></div>
  </section>
</div>
</section>
</article>
</section>

<?php 
include("adminmenu.php");
include("footer.php"); ?>

数据库：管理员中的表字段为：adminid，password，adminname，address，contactno 讲座中的表格字段是： lecid，密码，courseid，lecname，性别，地址，contactno。

请为此问题提供解决方案。

Answer 1

而不是使用此代码

if(md5($_POST["pwd"])=='$pwdmd5')

使用此

if(md5($_POST["pwd"])==$pwdmd5)

在第一种情况下，散列的密码与字符串$pwdmd5进行比较，在第二种情况下与$ pwdmd5的内容进行比较

PHP：登录管理页面

1 个答案: