Question

我想限制注册用户不要只登录用户名和密码，应该：

如果用户voting_status='a'，允许用户使用他们登录用户名和密码
如果voting_status='b'它应该限制用户登录并且回显"you're not allowed to login"其他用户名/密码不正确。

但我不知道如何去做，因为我是编码的新手。我真的需要帮助。这是我迄今为止所能做到的。

<?php
define('DB_HOST', 'localhost');
define('DB_NAME', 'university portal');
define('DB_USER','root');
define('DB_PASSWORD','password007');

$con=mysql_connect(DB_HOST,DB_USER,DB_PASSWORD) or die("Failed to connect to MySQL: " . mysql_error());
$db=mysql_select_db(DB_NAME,$con) or die("Failed to connect to MySQL: " . mysql_error());
/*
$ID = $_POST['user'];
$Password = $_POST['pass'];
*/
function SignIn()
{
    session_start();   //starting the session for user profile page
    if(!empty($_POST['UserName']))   //checking the 'user' name which is from Sign-In.html, is it empty or have some text
    {
        $query = mysql_query("SELECT Username, Password, voting_staus  
                                FROM voters 
                            where Username = '$_POST[UserName]', 
                                Password = '$_POST[password]' 
                                voting_status = 'a' ") 
                    or die(mysql_error());

        $row = mysql_fetch_array($query) or die(mysql_error());

        if(!empty($row['Username']) AND !empty($row['Password'])){
            if($row['voting_status']){
                $_SESSION['Username'] = $row['Password'];
                echo "SUCCESSFULLY LOGIN TO USER PROFILE PAGE...";

            }
        }
        elseif($row[voting_status]=='b') {
            echo "You are not allow to Login Here";
        } else {
            echo "SORRY... YOU ENTERD WRONG ID AND PASSWORD... PLEASE RETRY...";
        }
    }
}

if(isset($_POST['submit'])) {
    SignIn();
}

?>

Answer 1

请进行这些更改

if(!empty($_POST['UserName'])&& !empty($_POST['password']) )   //checking the 'user' name which is from Sign-In.html, is it empty or have some text
    {
        $query = mysql_query("SELECT Username, Password, voting_staus  
                                FROM voters 
                            where Username = '$_POST[UserName]' and 
                                Password = '$_POST[password]' 
                                 ")

并改变这个

        if($row['voting_status'] == 'a'){  // change by mo
            $_SESSION['Username'] = $row['Password'];
            echo "SUCCESSFULLY LOGIN TO USER PROFILE PAGE...";

我在您的查询中进行了更改删除，使用和处于where条件并删除了voting_status。您在查询中使用了错误的拼写状态

如何限制某些注册用户登录？

1 个答案: