在php登錄後重定向頁面

Question

我是一名PHP新手，我使用了一個簡單的登錄表單，其中包含源代碼。代碼正在工作，但它不會將我重定向到主頁，而是保持在登錄頁面中。下面是驗證碼，負責重定向，如果用戶輸入正確的憑據：

ob_start(); 
session_start(); 
$error=''; 
if(isset($_POST['submit'])){ 
if(empty($_POST['username']) || empty($_POST['password'])){ 
    $error="Username or Password is invalid"; 
} 
else{ 
    $username=$_POST['username']; 
    $password=$_POST['password']; 

    $cxn=mysql_connect("localhost","root","admin"); 
    $username=stripslashes($username); 
    $password=stripslashes($password); 
    $username=mysql_real_escape_string($username); 
    $password=mysql_real_escape_string($password); 

    $db=mysql_select_db("hrdb",$cxn); 
    $query=mysql_query("select * from login where Username='$username' AND 
    Password='$password'",$cxn); 

    $rows=mysql_num_rows($query); 
    if($rows==1){ 
     $_SESSION['log_user']=$username; 
     echo "test"; 
     header('Location: http://localhost/HRMS/profile.php'); 
     exit; 
    }else{ 
     $error="Username or password is invalid"; 
    } 
    mysql_close($cxn); 
    } 
    } 
    ob_end_flush(); 

Answer 1

您可以使用header（）函數來發送新的HTTP頭，但是這必須在任何發送到瀏覽器HTML或文本（例如在聲明之前）。

您可能希望header電話後，包括die：

header("Location: http://localhost/HRMS/profile.php"); 
die(); 

Answer 2

我會建議你使用的mysqli替代MySQL和 也有細微的變化，請仔細檢查它 和測試工作的代碼現在好了。

ob_start(); 
    session_start(); 
    $error=''; 


    if(isset($_POST['submit'])){ 
     if(empty($_POST['username']) || empty($_POST['password'])){ 
      $error="Username or Password is invalid"; 
     } 
     else{ 
      $username=$_POST['username']; 
      $password= md5($_POST['password']); 

      $cxn= mysqli_connect("localhost","root","","hrdb"); 
      $username=stripslashes($username); 
      $password=stripslashes($password); 
      $username=mysqli_real_escape_string($cxn,$username);; 
      $password=mysqli_real_escape_string($cxn,$password);; 

      $query=mysqli_query($cxn,"select * from user_mst_tbl where USER_NAME='".$username."' AND 
      PASS_WORD='".$password."'"); 

      $rows=mysqli_num_rows($query); 
      if($rows==1){ 
       $_SESSION['log_user']=$username; 
       echo "test"; 
       header('Location: http://localhost/HRMS/profile.php'); 

      }else{ 
       $error="Username or password is invalid"; 
      } 
      mysql_close($cxn); 
     } 
    } 
    ob_end_flush(); 

Answer 3

您收到的錯誤：

Deprecated: mysql_connect(): The mysql extension is deprecated and will be removed in the future: use mysqli or PDO instead

因爲你已經安裝了XAMPP更高版本。

您需要考慮使用prepared statement而不是deprecatedmysql_* API。在您的查詢中使用它之前，您不需要清理每個變量，因爲準備好的語句將爲您執行。

如果您打算使用PHP的功能header()，請確保在調用header()之前沒有任何輸出。

還請檢查您的profile.php，如果它也有header()調用，它會將頁面重定向回登錄頁面。

<?php 

/* MAKE SURE THAT THERE ARE NO HTML/OUTPUTS ABOVE THIS CODE */ 

ob_start(); 
session_start(); 
$error = ""; 

/* ESTABLISH CONNECTION */ 
$con = new mysqli("localhost", "root", "admin", "hrdb"); 

/* CHECK CONNECTION */ 
if (mysqli_connect_errno()) { 
    printf("Connect failed: %s\n", mysqli_connect_error()); 
    exit(); 
} 

if(isset($_POST['submit'])){ 

    if(empty($_POST['username']) || empty($_POST['password'])){ 
    $error="Username or Password is invalid"; 
    } 
    else{ 

    if($stmt = $con->prepare("SELECT Username FROM login WHERE Username = ? AND Password = ?")){ /* CHECK AND PREPARE THE QUERY */ 
     $stmt->bind_param("ss",$_POST["username"],$_POST["password"]); /* BIND THESE VARIABLES TO YOUR PREPARED QUERY; s STANDS FOR STRINGS */ 
     $stmt->execute(); /* EXECUTE THE QUERY */ 
     $rows = $stmt->num_rows; /* GET NUMBER OF ROWS/RESULTS */ 
     if($rows == 1){ /* IF FOUND RESULT */ 
     $stmt->bind_result($username); /* STORE THE RESULT TO THIS VARIABLE */ 
     $stmt->fetch(); /* FETCH THE RESULT */ 
     $_SESSION['log_user'] = $username; /* STORE THE RESULT TO THIS SESSION VARIABLE */ 
     /* header('LOCATION: http://localhost/HRMS/profile.php'); REDIRECT THE PAGE TO profile.php */ 
     ?> 
      <meta http-equiv="refresh" content=".5; URL='profile.php'"/> <!-- REDIRECT TO profile.php IN HALF A SECOND --> 
     <?php 
     } 
     else { 
     $error="Username or password is invalid"; 
     } 
     $stmt->close(); 
    } /* END OF PREPARED STATEMENT */ 

    } /* END OF ELSE */ 

} /* END OF ISSET SUBMIT */ 

ob_end_flush(); 

?> 

您還應該保護存儲在數據庫中的密碼。您可以使用password_hash()。