bindParam用MD5（）列PDO PHP

Question

我嘗試比較用戶密碼什麼內部數據庫，並與隨之而來的登錄表單躺着，但是當我這樣做：

$stmt = $dbh->prepare('SELECT * FROM users WHERE (username = :username, password = :password)'); 
$stmt->bindParam(':username', $_POST['username']); 
$stmt->bindParam(':password', md5($_POST['password'])); 
$stmt->execute(); 
$stmt->fetch(); // return false 

我做錯了嗎？

Answer 1

你應該寫這樣的查詢：

SELECT * FROM users WHERE (username = :username AND password = :password) 

Answer 2

查詢是錯誤的。 試試這個：

$stmt = $dbh->prepare('SELECT * FROM users WHERE username = :username AND password = :password'); 

Answer 3

讓你的查詢正確無誤。使用下面的代碼

$stmt = $dbh->prepare('SELECT * FROM users WHERE username = :username AND password = :password'); 
$stmt->bindParam(':username', $_POST['username']); 
$stmt->bindParam(':password', md5($_POST['password'])); 
$stmt->execute(); 
$stmt->fetch(); // return false 

希望這有助於你