Question

当我在codeigniter中验证登录时，我遇到了这个问题，似乎它没有在我的数据库中检查所需的密码。我的数据库中所需的密码是哈希使用此

$password_hash = password_hash($password, PASSWORD_BCRYPT);

我如何在模型代码中使用password_verify函数？

这是我的型号代码：

public function login($data) {

    $condition = "username =" . "'" . $data['username'] . "' AND " . "password =" . "'" . $data['password'] . "'";
    $this->db->select('*');
    $this->db->from('users');
    $this->db->where($condition);
    $this->db->limit(1);
    $query = $this->db->get();

    if ($query->num_rows() == 1) 
    {
        return true;
    } else 
    {
        return false;
    }
}

这是我的控制器：

public function login_user() 
{

    $this->form_validation->set_rules('username', 'Username', 'trim|required|xss_clean','required');
    $this->form_validation->set_rules('password', 'Password', 'trim|required|xss_clean','required');

    if ($this->form_validation->run() == FALSE) {

          $this->load->view('login_view');
    } else {
        $data = array(
            'username' => $this->input->post('username'),
            'password' => $this->input->post('password'),
            'firstname' => $this->input->post('firstname'),
            'lastname' => $this->input->post('lastname')
        );
        $result = $this->login_database->login($data);
        if ($result == TRUE) {
                    // Add user data in session
            $this->session->set_userdata('username', $data['username']);
            $this->session->set_userdata('firstname', $data['firstname']);
            $this->session->set_userdata('lastname', $data['lastname']);

            //redirect to dashboard
            $this->load->view('include/sidenavbar');
            $this->load->view('include/topnavbar');
            $this->load->view('dashboard');
        } else {


             $this->session->set_flashdata('message', 'Login is invalid. Please try again!');
            $this->load->view('login_view', $data);
        }
    }
}

谁能帮助我如何做到这一点.. 提前谢谢。

Answer 1

您应该使用password_verify（）来了解您的密码是否有效。

尝试此模型功能：

public function login($data) {
    $this->db->select('password');
    $this->db->from('users');
    $this->db->where('username', $data['username']);
    $this->db->limit(1);
    $query = $this->db->get();

    if ($query->num_rows() == 1) {
        $record = $query->row_array();
        return password_verify($data['password'], $record['password']);
    } else {
        return false;
    }
}

Answer 2

希望这会对您有所帮助：

从模型返回数据后，您可以使用password_verify（）

检查密码是否正确

$data = array(
        'username' => $this->input->post('username'),
        'password' => $this->input->post('password'),
        'firstname' => $this->input->post('firstname'),
        'lastname' => $this->input->post('lastname')
    );

$result = $this->login_database->login($data);
/*$result should return a single user data (in array form here)*/
if (! empty($result)) 
{
    if (password_verify($data['password'], $result['password'])) 
    {
       $this->session->set_userdata('username', $data['username']);
       $this->session->set_userdata('firstname', $data['firstname']);
       $this->session->set_userdata('lastname', $data['lastname']);

       //redirect to dashboard
       redirect('dashboard'); /*use redirect()*/
      //$this->load->view('include/sidenavbar');
      //$this->load->view('include/topnavbar');
      //$this->load->view('dashboard');
    } 
    else 
    {
        $this->session->set_flashdata('message', 'Password is invalid. Please try again!');
        $this->load->view('login_view', $data);
    }      

} 
else 
{
    $this->session->set_flashdata('message', 'Login is invalid. Please try again!');
    $this->load->view('login_view', $data);
}

你的模型应该是这样的：

public function login($data) 
{
    $this->db->where('username', $data['username']);
    $query = $this->db->get('users');

    if ($query->num_rows() == 1) {
        $user = $query->row_array();
        return $user;
    } else {
        return false;
    }
}

更新：信息中心方法

public function dashboard()
{
    /*$data['title'] = 'my title';
    you can pass data to the view like this 
    $this->load->view('dashboard',$data);
    */
    $this->load->view('templates/header');
    $this->load->view('dashboard');
    $this->load->view('templates/footer');
}

用于登录的codeigniter中的密码验证功能

2 个答案: