Android：http登錄請求被重定向到php？

Question

所以這是一個跟進this post。我正在嘗試使用鏈接中的代碼登錄。它可以工作，但是我相信login.php文件中有些事情我不知道。這裏是大部分的login.php文件，我提前道歉代碼的牆。

<?php 
session_start(); 
error_reporting(E_ALL^ E_NOTICE); 
//include the connection and variable defination page 
include("include/server.php"); 
include("include/function.php"); 
//checking the form has been submit by user or not 
if(isset($_POST['cmdSubmit']) and $_POST['cmdSubmit']="Login") 
{ 
//$refLink = $_SERVER['HTTP_REFERER']; 
$refLink = "index.php?err_msg=1"; 
$user = addslashes($_POST['username']); 
$pass = addslashes($_POST['password']); 
$remember = $_POST['remember']; 

$strErrorMessage = ""; 
if($user==""){ 
    $strErrorMessage = "User Name can not be blank"; 
} 
if($pass==""){ 
    $strErrorMessage = "Password can not be blank"; 
} 
if($user=="" and $pass==""){ 
    $strErrorMessage = "User Name and Password can not be blank"; 
} 

if($strErrorMessage=="") 
{ 

    if(isset($_POST['remember'])){ 
     //removing all the cookie at set the user name password in cookies 
     unset($_COOKIE[session_name()]);   
     setcookie("usernamex", $_POST['username'], time()+60*60*24*100); 
     setcookie("userpassx", $_POST['password'], time()+60*60*24*100); 
     setcookie("rememberx", $_POST['remember'], time()+60*60*24*100); 
    }else{ 
     if(isset($_COOKIE['rememberx']) && isset($_COOKIE['usernamex']) && isset($_COOKIE['userpassx'])) 
     { 
      unset($_COOKIE[session_name()]);   
      setcookie("usernamex", $_POST['username'], time()); 
      setcookie("userpassx", $_POST['password'], time()); 
      setcookie("rememberx", $_POST['remember'], time()); 
     } 
    } 

    $sqlLogin = "select * from member_mast where username = '".$user."' and password = '".$pass."' and is_deleted_flg=0 and is_profile=0";   
    $queryLogin = mysql_query($sqlLogin) or die(mysql_error()." Please check the Query"); 
    $totLogin = mysql_num_rows($queryLogin);  

    //here checking the user is authorized or not 
    if($totLogin>0) 
    { 
     $rsLogin    = mysql_fetch_array($queryLogin); 
     $_SESSION['uid']  = trim($rsLogin['username']); 
     $_SESSION['memberid']  = trim($rsLogin['user_id']); 
     $_SESSION['userType'] = trim($rsLogin['member_role']); 

     if(isset($_POST["page"]) and trim($_POST["page"])!="") 
     { 
      $pageName  = trim($_POST["page"]); 
      $pagepassId  = trim($_POST["pageid"]); 
      $redirect_url = "http://www.fakesite.com/fspv2/welcome.php?page=".$pageName."&pageid=".$pagepassId; 
     } 
     else 
     { 
      //$redirect_url = "http://www.fakesite.com/fspv2/welcome.php"; 
      //$redirect_url = "welcome.php"; 
      $redirect_url = "welcome.php"; 
     } 
//header("Location: ".$redirect_url); 
?> 
     <script>window.location.href="<?php echo $redirect_url; ?>";</script> 
     <!-- <meta http-equiv="refresh" content="0;url=<?php echo $redirect_url; ?>"> --> 
<?php 
} 
else 
{  
     $displayMessage = "Login failed. If you are authorized, try again"; 
     session_destroy(); 
     $state = "inv"; 
     $_SESSION['username'] = $_POST['username']; 
     $_SESSION['password'] = $_POST['pass'];   
     $username = $_SESSION['username']; 
     $password = $_SESSION['password']; 
    ?> 
     <script>window.location.href="<?php echo $refLink; ?>";</script> 
    <?php  
    } 
} 
else 
{ 
    $state = "inv"; 
    $_SESSION['username'] = $_POST['userid']; 
    $_SESSION['password'] = $_POST['pass']; 
    $username = $_SESSION['username']; 
    $password = $_SESSION['password']; 
    $displayMessage = $strErrorMessage; 
?> 
    <script>window.location.href="<?php echo $refLink; ?>";</script> 
<?php  
} 
} 
//header("Location: ".$refLink); 
?> 
<!--<script>window.location.href="<?php echo $refLink; ?>";</script>--> <!-- <meta http-equiv="refresh" content="0;url=<?php echo $refLink; ?>"> --> 

現在，當我連接到這個login.php它不重要，如果用戶名/密碼是有效的沒有關係。我得到的唯一回應是這樣的

05-18 17:08:50.160: V/RESPONSE(30797): <!--<script>window.location.href="";</script>-->  <!-- <meta http-equiv="refresh" content="0;url=">    -->  

這看起來好像是javascript試圖重定向我，因爲它是一個移動設備。我在那裏可以找到的唯一重定向是將客戶端重定向到「welcome.php」，如果他們成功登錄了，就會出現這種情況。似乎沒有手機login.php在這裏重定向（我可能是錯的）它應該指出，我沒有設計網站或任何我試圖通過我的Android軟件訪問的文件，但我確實可以訪問所有文件。 我的問題是如果這不是我應該訪問的文件/ url，那麼是什麼，或者我如何找到它？如果您需要查看任何其他代碼，請直接詢問。謝謝！

Answer 1

檢查以下行結果的真實狀況：

if($totLogin>0)