我有一個(gè)用 Laravel 構(gòu)建的網(wǎng)絡(luò)應(yīng)用程序。我正在另一個(gè)網(wǎng)站上工作，但不是在 Laravel 上工作。我需要使用 Laravel 站點(diǎn)數(shù)據(jù)庫上的用戶表對(duì)這個(gè)新站點(diǎn)上的用戶進(jìn)行身份驗(yàn)證。密碼使用 bcrypt 進(jìn)行哈希處理。我嘗試在用戶登錄之前驗(yàn)證密碼，但我似乎遺漏了一些東西。有人可以幫忙嗎？<?php if (isset($_POST['login'])) { $user = mysqli_real_escape_string($_POST['email']); $pass = mysqli_real_escape_string($_POST['password']); //input entered $dpass = password_hash('$pass', PASSWORD_DEFAULT)."\n"; echo $dpass; $query = mysqli_query($conn, "SELECT * FROM users WHERE `email` = '$user' AND `password` ='$pass'"); $numrows = mysqli_num_rows($query); if ($numrows != 0) { while ($row = mysqli_fetch_assoc($query)) { $dbemail = $row['email']; $dbpassword = $row['password']; } if ($user === $dbemail && password_verify($pass, $dbpassword)) { session_start(); $_SESSION['email'] = $username; // Redirect Browser header("Location:mentor.php"); } } else { echo "<div class='alert alert-danger alert-dismissible'> <a href='#' class='close' data-dismiss='alert' aria-label='close'>×</a> <strong>Warning!</strong> Invalid credentials. </div>"; }}?>
2 回答
撒科打諢
TA貢獻(xiàn)1934條經(jīng)驗(yàn) 獲得超2個(gè)贊
經(jīng)過上述評(píng)論的建議后，我得出了這個(gè)有效的結(jié)論。
<?php
if(isset($_POST['login'])){
$user = mysqli_real_escape_string($conn,$_POST['email']);
$pass = mysqli_real_escape_string($conn,$_POST['password']); //input entered
$query = mysqli_query($conn, "SELECT * FROM users WHERE `email` = '$user'");
$numrows = mysqli_num_rows($query);
if($numrows !=0)
{
while($row = mysqli_fetch_assoc($query))
{
$dbemail=$row['email'];
$dbpassword=$row['password'];
}
if(password_verify($pass, $dbpassword))
{
session_start();
$_SESSION['email'] = $username;
//Redirect Browser
}
}
else
{
echo "<div class='alert alert-danger alert-dismissible'>
<a href='#' class='close' data-dismiss='alert' aria-label='close'>×</a>
<strong>Warning!</strong> Invalid credentials.
</div>";
}
}?>
智慧大石
TA貢獻(xiàn)1946條經(jīng)驗(yàn) 獲得超3個(gè)贊
不確定，但你嘗試過嗎
password_verify(mysqli_real_escape_string($_POST['password']), $dbpassword)
我的意思是比較未加密的密碼與哈希值。在 Laravel 中
Hash::check()
還需要非哈希密碼作為參數(shù)。
- 2 回答
- 0 關(guān)注
- 221 瀏覽
添加回答
舉報(bào)
0/150
提交
取消