0
我試了很多，使這個代碼適用於我的registration.php頁面，我只想檢查電子郵件和用戶名是否已經註冊在我的數據庫中。我試着只檢查用戶名，它工作正常，但現在我也想檢查電子郵件是否已註冊。任何有關這方面的幫助將不勝感激。以下是我的registration.php代碼，希望有人會幫助！謝謝！PHP - 檢查電子郵件和用戶名是否已經存在於MySQL數據庫
<?php
/*
Our "config.inc.php" file connects to database every time we include or require
it within a php script. Since we want this script to add a new user to our db,
we will be talking with our database, and therefore,
let's require the connection to happen:
*/
require("config.inc.php");
//if posted data is not empty
if (!empty($_POST)) {
//If the username or password is empty when the user submits
//the form, the page will die.
//Using die isn't a very good practice, you may want to look into
//displaying an error message within the form instead.
//We could also do front-end form validation from within our Android App,
//but it is good to have a have the back-end code do a double check.
if (empty($_POST['username']) || empty($_POST['password']) || empty($_POST['FullName']) || empty($_POST['emailadd'])) {
// Create some data that will be the JSON response
$response["success"] = 0;
$response["message"] = "Please fill in all the fields!";
//die will kill the page and not execute any code below, it will also
//display the parameter... in this case the JSON data our Android
//app will parse
die(json_encode($response));
}
//if the page hasn't died, we will check with our database to see if there is
//already a user with the username specificed in the form. ":user" is just
//a blank variable that we will change before we execute the query. We
//do it this way to increase security, and defend against sql injections
$query = " SELECT 1 FROM users WHERE username = :user , eadd = :email";
//now lets update what :user should be
$query_params = array(
':user' => $_POST['username'],
':email' => $_POST['eadd']
);
//Now let's make run the query:
try {
// These two statements run the query against your database table.
$stmt = $db->prepare($query);
$result = $stmt->execute($query_params);
}
catch (PDOException $ex) {
// For testing, you could use a die and message.
//die("Failed to run query: " . $ex->getMessage());
//or just use this use this one to product JSON data:
$response["success"] = 0;
$response["message"] = "Database Error1. Please Try Again!";
die(json_encode($response));
}
//fetch is an array of returned data. If any data is returned,
//we know that the username is already in use, so we murder our
//page
$row = $stmt->fetch();
if ($row) {
// For testing, you could use a die and message.
//die("The username is already in use! Try a different username!");
//You could comment out the above die and use this one:
$response["success"] = 0;
$response["message"] = "The username is already in use! Try a different username!";
die(json_encode($response));
}
//If we have made it here without dying, then we are in the clear to
//create a new user. Let's setup our new query to create a user.
//Again, to protect against sql injects, user tokens such as :user and :pass
$query = "INSERT INTO users (username, password, FullName, eadd) VALUES (:user, :pass, :fulnme, :email)";
//Again, we need to update our tokens with the actual data:
$query_params = array(
':user' => $_POST['username'],
':pass' => $_POST['password'],
':fulnme' => $_POST['FullName'],
':email' => $_POST['eadd']
);
//time to run our query, and create the user
try {
$stmt = $db->prepare($query);
$result = $stmt->execute($query_params);
}
catch (PDOException $ex) {
// For testing, you could use a die and message.
//die("Failed to run query: " . $ex->getMessage());
//or just use this use this one:
$response["success"] = 0;
$response["message"] = "Database Error2. Please Try Again!";
die(json_encode($response));
}
//If we have made it this far without dying, we have successfully added
//a new user to our database. We could do a few things here, such as
//redirect to the login page. Instead we are going to echo out some
//json data that will be read by the Android application, which will login
//the user (or redirect to a different activity, I'm not sure yet..)
$response["success"] = 1;
$response["message"] = "Registration was successful!";
echo json_encode($response);
//for a php webservice you could do a simple redirect and die.
//header("Location: login.php");
//die("Redirecting to login.php");
} else {
?>
<h1>Register</h1>
<form action="register.php" method="post">
Full Name<br />
<input type="text" name="Name" value="" />
<br /><br />
Email Address<br />
<input type="text" name="eadd" value="" />
<br /><br />
Username:<br />
<input type="text" name="username" value="" />
<br /><br />
Password:<br />
<input type="password" name="password" value="" />
<br /><br />
<input type="submit" value="Register" />
</form>
<?php
}
?>
哇！這是很多評論！ –
那你想要什麼？如果用戶名和密碼已註冊，或者用戶名或電子郵件地址是否已經註冊？這個AND/OR對你的回答至關重要 – Anigel
那麼問題是什麼？發生了什麼或沒有發生什麼？我們看到太多的代碼，並沒有描述它做了什麼或應該做什麼。 – deceze