用户登录有关问题请大家帮帮忙

程序员文章站 2022-05-05 12:32:14

...

用户登录问题请大家帮帮忙
$username = htmlspecialchars($_POST['username']);
$password = MD5($_POST['password']);

//包含数据库连接文件
include('conn.php');

//检测用户名及密码是否正确
$check_query = mysql_query("SELECT `uid` FROM `user` WHERE `username`='$username' AND `password`='$password' LIMIT 1");

if($result = mysql_fetch_array($check_query)){
//登录成功
$_SESSION['username'] = $username;
echo "ok";
exit;
} else {
exit('登录失败！点击此处返回重试');
}
?>
请看看代码哪里出错了明明数据库里存在输入的用户名的但还是登录失败
但是如果将`password`='$password'去掉用户名是可以查询到的但是密码随便输入什么都可以登录成功

------解决方案--------------------


	$result = mysql_query("SELECT uid FROM user WHERE username`='$username' AND `password`='$password'");
	echo mysql_num_rows($result)."
";//看一下这个结果是否为1，如果不是，则你的用户名或者密码有问题
	if($mysql_num_rows($result)==1){
		$row=mysql_fetch_array($result));
		$_SESSION['username'] = $row['username'];
		echo "登录成功";
	}else{
		echo "登录失败";
	}