PHP中处理直接URL访问的会话失败

e4yzc0pl  于 2023-11-16  发布在  PHP
关注(0)|答案(1)|浏览(121)

我创建了一个会话来限制用户通过URL访问主页，并将他们引导到登录页面（index.php）。但是用户无法使用正确的凭据登录，它仍然会引导回登录页面。似乎会话有问题，因为登录没有会话。
index.php（root folfer）

  1. <!DOCTYPE html>
  2. <html lang="en">
  3. <head>
  4.   <meta charset="UTF-8">
  5.   <meta name="viewport" content="width=device-width, initial-scale=1.0">
  6.   <meta name="description" content="The Best Restaurant..">
  7.   
  8.   <title>Signature Cuisine</title>
  9.   <link rel="stylesheet" href="style.css">
  10.   <link rel="stylesheet" href="mediaquaries.css">
  11.   
  12.   <script src="https://kit.fontawesome.com/5cab703b53.js" crossorigin="anonymous"></script>
  13.   <script src="script.js"></script>
  15. </head> 
  16. <body>  
  18. <div class="page_title_background" id="login_page_background">
  19.     <div class="container" id="login_page_form">
  20.     <form action="includes/login.inc.php" method="post">
  21.      <h2>LOGIN</h2>
  22.      <div class="login_form">
  23.         <label>User Name</label>
  24.         <input type="text" id="fname" name="uid" autocomplete="off">
  25.      </div>
  26.      <div class="login_form">
  27.         <label>Password</label>
  28.         <input type="password" id="lname" name="pwd" autocomplete="off">
  29.      </div> 
  30.      <div class="adminpage_submitbtn">
  31.      <button name="login" type="submit" id="login_page_submit_btn">Login</button>
  32.      </div>
  33.          <div class="error-message">
  34.             <?php
  35.             $errorMessage = '';
  36.             
  37.             if (isset($_GET["error"])) {
  38.                 if ($_GET["error"] == "emptyinput") {
  39.                     $errorMessage = 'Fill in all fields!';
  40.                 } elseif ($_GET["error"] == "wronglogin") {
  41.                     $errorMessage = 'Invalid details!';
  42.                 } elseif ($_GET["error"] == "stmtfailed") {
  43.                     $errorMessage = 'Something went wrong!';
  44.                 } elseif ($_GET["error"] == "none") {
  45.                     $errorMessage = 'Account created!';
  46.                 } elseif ($_GET["error"] == "nouser") {
  47.                     $errorMessage = 'User not found!';
  48.                 }
  49.             } elseif (isset($_SESSION['error']) && $_SESSION['error'] == 'emptyinput') {
  50.                 $errorMessage = 'Fill in all fields!';
  51.             }
  52.             
  53.             echo '<div class="error">' . $errorMessage . '</div>';
  54.             ?>
  55.         </div>
  56.     </form>
  57.  </div>
  59.   <p class="reg_link_p">New Here? <a href="signup.php">Register!</a></p>
  60. </div>
  62. </body>
  63. </html>

字符串
home.php（根文件夹）

  1. <?php
  2. session_start();
  4. if (!defined('MY_APP')) {
  5.     // If MY_APP is not defined, redirect to another page or display an error message
  6.     header("Location: index.php");
  7.     exit();
  8. }
  10. // Include necessary files such as header
  11. include_once 'header.php';
  12. ?>
  14. <!---------------------------------------- PAGE 1 ------------------------------>
  18. <!---------------------------------------- TEST ------------------------------------------>
  20. <?php 
  21. include_once 'footer.php';
  22. ?>

型
login.inc.php（root/includes）

  1. <?php
  2. session_start();
  3. require_once 'dbh.inc.php';
  4. require_once 'functions.inc.php';
  6. if (isset($_POST["login"])) {
  7.     $username = $_POST["uid"];
  8.     $pwd = $_POST["pwd"];
  10.     if (emptyInputLogin($username, $pwd)) {
  11.         header('Location:../index.php?error=emptyinput');
  12.         exit();
  13.     }
  15.     $loginResult = loginUser($conn, $username, $pwd);
  17.     if ($loginResult === "success") {
  18.         header('Location: ../home.php');
  19.         exit();
  20.     } elseif ($loginResult === "nouser") {
  21.         header('Location: ../index.php?error=nouser');
  22.         exit();
  23.     } elseif ($loginResult === "wrongpassword") {
  24.         header('Location: ../index.php?error=wronglogin');
  25.         exit();
  26.     }
  27. } else {
  28.     header('Location:../index.php');
  29.     exit();
  30. }
  31. ?>

型
functions.inc.php（root/includes）

  1. <?php
  3. session_start();
  5. require_once 'dbh.inc.php';
  7. function emptyInputSignup($name, $email, $username, $pwd, $pwdRepeat) {
  8.     $result;
  9.     if (empty($name) || empty($email) || empty($username) || empty($pwd) || empty($pwdRepeat) ) {
  10.         $result = true;
  11.     } else {
  12.         $result = false;
  13.     }
  14.     return $result;
  15. }
  17. function invalidUid($username) {
  18.     $result;
  19.     if (!preg_match("/^[a-zA-Z0-9]*$/", $username)) {
  20.         $result = true;
  21.     } else {
  22.         $result = false;
  23.     }
  24.     return $result;
  25. }
  27. function invalidEmail($email) {
  28.     $result;
  29.     if (!filter_var($email, FILTER_VALIDATE_EMAIL)) {
  30.         $result = true;
  31.     } else {
  32.         $result = false;
  33.     }
  34.     return $result;
  35. }
  37. function pwdMathch($pwd , $pwdRepeat) {
  38.     $result;
  39.     if ($pwd !== $pwdRepeat) {
  40.         $result = true;
  41.     } else {
  42.         $result = false;
  43.     }
  44.     return $result;
  45. }
  47. function uidExists($conn, $username) {
  48.     $sql = "SELECT * FROM ad_users WHERE usersUid = ? OR usersEmail = ?;";
  49.     $stmt = mysqli_stmt_init($conn);
  50.     if (!mysqli_stmt_prepare($stmt, $sql)) {
  51.         header("Location:../index.php?error=stmtfailed");
  52.         exit();
  53.     }
  54.     mysqli_stmt_bind_param($stmt, "ss", $username, $username);
  55.     mysqli_stmt_execute($stmt);
  56.     $resultData = mysqli_stmt_get_result($stmt);
  58.     if ($row = mysqli_fetch_assoc($resultData)) {
  59.         return $row;
  60.     } else {
  61.         return false;
  62.     }
  63.     mysqli_stmt_close($stmt);
  64. }
  66. function createUser($conn, $name, $email, $username, $pwd) {
  67.     $sql = "INSERT INTO ad_users (usersName, usersEmail, usersUid, usersPwd) VALUES (?,?,?,?);";
  68.     $stmt = mysqli_stmt_init($conn);
  69.     if (!mysqli_stmt_prepare($stmt, $sql)) {
  70.         header("Location:../signup.php?error=stmtfailed");
  71.         exit();
  72.     }
  73.     $hashedPwd = password_hash($pwd, PASSWORD_DEFAULT);
  74.     mysqli_stmt_bind_param($stmt, "ssss", $name, $email, $username, $hashedPwd);
  75.     mysqli_stmt_execute($stmt);
  76.     mysqli_stmt_close($stmt);
  77.     header("Location:../index.php?error=none");
  78.     exit();
  79. }
  81. function emptyInputLogin($username, $pwd) {
  82.     if (empty($username) || empty($pwd)) {
  83.         return true; // Return true if input is empty
  84.     }
  85.     return false; // If not empty, return false
  86. }
  88. function loginUser($conn, $username, $pwd) {
  89.     $user = uidExists($conn, $username);
  91.     if ($user === false) {
  92.         // User doesn't exist
  93.         return "nouser";
  94.     }
  96.     $pwdHashed = $user["usersPwd"];
  97.     $checkPwd = password_verify($pwd, $pwdHashed);
  99.     if ($checkPwd === false) {
  100.         // Incorrect password
  101.         return "wrongpassword";
  102.     } else {
  103.         // Password is correct, set session variables and return success
  104.         session_start();
  105.         $_SESSION["userid"] = $user["usersId"];
  106.         $_SESSION["useruid"] = $user["usersUid"];
  107.         $_SESSION["username"] = $user["usersName"];
  108.         return "success";
  109.     }
  110. }

型
尝试了不同的方法来调试和找到问题，但失败了。我希望用户只能通过index.php登录到home.php，并限制用户使用URL访问主页。

php

1条答案

按热度按时间
sxpgvts3

sxpgvts31#

在您的主页上，您需要检查会话是否已设置。

  1. if (isset($_SESSION["userid"])){
  2.    header('Location: ../index.php?error=wronglogin');
  3.    exit();
  4. }

字符串

赞(0）分享  回复(0）举报  2023-11-16
我来回答

相关问题

    查看更多

    热门标签

    更多
    JavaquerypythonNode开发语言requestUtil数据库Table后端算法LoggerMessageElementParser

    最新问答

    更多
    • 蜀ICP备13028337号-1 大数据知识库 https://www.saoniuhuo.com © All rights reserved
    • 本站内容来源互联网,如果侵犯您的权益请联系我们删除, 联系方式：448109455@qq.com