Question

我開發了一個用於登錄的登錄表單，但是當我嘗試登錄時它無法通過。以下是我使用的代碼的一部分。當我回顯$num時，具有$num = mysql_num_rows()的部分將返回零。這是爲什麼？看來我的INSERT查詢沒有返回結果。請幫忙。

if ($warning==''){ 
     $query="SELECT first_name FROM tblusers WHERE (email='$username') AND (password='".md5($_POST['password'])."')"; 
     $result=@mysql_query($query); 
     $num = mysql_num_rows($result); 
     @mysql_close(); 
     echo $num."perfecto".$result;   
     if($num==1) 
     { 
      $u=new User($username); 
      include ('includes/highlight.inc.php'); 
      //insert user into session 
      if ($username=='admin'){ 
       $_SESSION['user']=$username; 
       $p=new Page('Log In'.$username); 
       $p->setHeading('Welcome '.$u->getFirstName()); 
       $p->setContent($cont."<br/><br/><br/> Use the administrator's panel on the right to do the administration work of the 
           website. To block and unblock users you use the <font color=red><b>View Auctions</b></font> link, and 
           that is when you can block the user after assessing their record."); 
       $p->printIt(); 
      } else { 
      $_SESSION['user']=$username; 
      $p=new Page('Log In'.$username); 
      $p->setHeading('Welcome '.$u->getFirstName()); 
      $p->setContent($cont."<br/><br/><br/>".$text); 
      $p->printIt(); } 

     } 

Answer 1

改變你的查詢字符串：

$query="SELECT first_name FROM tblusers WHERE email='".$username."' AND password='".md5($_POST['password'])."'"; 

，並檢查使用echo $query，以確保它是正確的查詢字符串

Answer 2

如下更改您的查詢字符串：

$password = md5($_POST['password']); 
$query = "SELECT first_name FROM tblusers WHERE email='".$username."' AND password = '".$password."'"; 

希望這可以幫助你。