使用检索到的数据创建会话

时间:2018-04-14 13:06:24

标签: php session phpmyadmin

我有一个登录页面,用户可以在其中输入用户名和密码。 我创建了一个会话,它将使用下面的代码在主页面上显示用户的用户名。

但是,我想显示用户的全名,而不是用户名。如何使用$_SESSION['username']显示全名?

我的表名为users,由fullname列,usernamepassword组成。

if (isset($_POST['login_user'])) {
  $username = mysqli_real_escape_string($db, $_POST['username']);
  $password = mysqli_real_escape_string($db, $_POST['password']);

  if (empty($username)) {
    array_push($errors, "Username is required");
  }
  if (empty($password)) {
    array_push($errors, "Password is required");
  }

  if (count($errors) == 0) {
    $password = md5($password);
    $query = "SELECT * FROM users WHERE username='$username' AND password='$password'";
    $results = mysqli_query($db, $query);
    if (mysqli_num_rows($results) == 1) {

      $_SESSION['username'] = $username;
      $_SESSION['success'] = "You are now logged in";
      header('location: index.php');
    }else {
      array_push($errors, "Wrong username/password combination");
    }
  }
}

1 个答案:

答案 0 :(得分:2)

使用像mysqli_fetch_assoc这样的数据库查询从db

获取数据
if (count($errors) == 0) {
    $password = md5($password);
    $query = "SELECT * FROM users WHERE username='$username' AND password='$password'";
    $results = mysqli_query($db, $query);
    if (mysqli_num_rows($results) == 1) {

        $row = mysqli_fetch_assoc($results );

        $_SESSION['fullname'] = $row['fullname'];

        $_SESSION['username'] = $username;
        $_SESSION['success'] = "You are now logged in";
        header('location: index.php');
    }else {
      array_push($errors, "Wrong username/password combination");
    }
}

了解更多:https://www.w3schools.com/php/func_mysqli_fetch_row.asp