Question

我做了一个简单的登录表单，我猜测代码中有一些错误。

一切正常，但我在与MySQL（mysqli）查询部分挣扎。

但这是我的代码：

<?php
session_start();

if(isset($_SESSION['acuser']))
{
redirectpage();
}
else
{
if($_POST)
{   
if(isset($_POST['button']) && ($_POST['username']) && ($_POST['password']))
{
$db = 'datenbank';
$dbuser = 'root';
$dbpass = '';
$dbhost = 'localhost';

$connection = mysqli_connect($dbhost,$dbuser,$dbpass);
$selection = mysqli_select_db($connection,$db);

$username = mysqli_real_escape_string($connection,(htmlspecialchars($_POST['password'])));
$password = mysqli_real_escape_string($connection, (htmlspecialchars($_POST['password'])));
$password = md5($password);


if($connection)
{
if($selection)
{
$queryuser = "SELECT * FROM main WHERE Username = '$username'";
$result = mysqli_query($connection, $queryuser);

$checkuser = mysqli_num_rows($result);
if($checkuser)
{
$querypass = "SELECT * FROM main WHERE Username = '$username' AND Password ='$password'";
$resultpass = mysqli_query($connection,$querypass);

$checkpass = mysqli_num_rows($resultpass);
if($checkpass)
{   
$data = mysqli_fetch_array ($resultpass);

$_SESSION["acID"] = $data["Id"];
$_SESSION["acUSERNAME"] = $data["Username"];
$_SESSION["acPASSWORD"] = $data["Password"];
$_SESSION["acEMAIL"] = $data["Email"];
}

// Some else stuff
?>

我猜错了＃34; mysqli_query（）＆＃34;和＆＃34; mysqli_num_rows（）＆＃34;！

＆＃34; Mysqli_num_rows（）＆＃34;无法处理＆＃34; mysqli_query（）＆＃34;的输出不知何故！

也许我会在这里找到答案

Answer 1

不确定这是不是问题：

$username = mysqli_real_escape_string($connection,(htmlspecialchars($_POST['password'])));

是与数据库中的密码相同的用户名吗？

＆＃34; mysqli_num_rows＆＃34;与'＃34; mysqli_query＆＃34;的输出斗争

1 个答案: