ASCII码 ASCII码

PDO扩展连接mysql数据库，并实现用户登录时防sql注入的处理

发布于：2022-01-24 08:49:38  栏目：技术文档

用户登录

  • 使用预处理，防止sql注入攻击
  1. // 1.连接数据库
  2. $config = require_once __DIR__ .DIRECTORY_SEPARATOR .'connect.php';
  4. // var_dump($config);
  6. // pdo预处理接入
  8. // 准备一条预处理sql语句
  9. $sql = "SELECT * FROM `users` WHERE `username`= ? and `password` = ? ";
  10. // 准备要执行的语句，并返回语句对象
  11. $stmt = $pdo->prepare($sql);
  12. // 绑定参数到指定的变量名
  13. $para = [$name,$pwd];
  15. // 执行一条预处理语句
  16. $stmt->execute($para);
  18. $res = $stmt->fetchAll(PDO::FETCH_ASSOC);
  19. // var_dump($res);
  21. if(empty($res)){
  22.     echo (json_encode(array('code'=>1, 'msg'=>'用户名或密码不正确。')));
  23. };

用户登录

  1. <!doctype html>
  2. <html lang="en">
  3. <head>
  4.     <meta charset="UTF-8">
  5.     <meta http-equiv="X-UA-Compatible" content="ie=edge">
  6.     <style>
  7.         *{margin:0;padding:0;border:0;font-size:100%;font:inherit;vertical-align:baseline;}
  8.         article, aside, details, figcaption, figure,footer, header, hgroup, menu, nav, section {display: block;}
  9.         ol,ul{list-style:none;margin:0px;padding:0px;}
  10.         blockquote,q{quotes:none;}
  11.         blockquote:before,blockquote:after,q:before,q:after{content:'';content:none;}
  12.         table{border-collapse:collapse;border-spacing:0;}
  13.         /*-- start editing from here --*/
  14.         a{text-decoration:none;}
  15.         .txt-rt{text-align:right;}/* text align right */
  16.         .txt-lt{text-align:left;}/* text align left */
  17.         .txt-center{text-align:center;}/* text align center */
  18.         .float-rt{float:right;}/* float right */
  19.         .float-lt{float:left;}/* float left */
  20.         .clear{clear:both;}/* clear float */
  21.         .pos-relative{position:relative;}/* Position Relative */
  22.         .pos-absolute{position:absolute;}/* Position Absolute */
  23.         .vertical-base{    vertical-align:baseline;}/* vertical align baseline */
  24.         .vertical-top{    vertical-align:top;}/* vertical align top */
  25.         nav.vertical ul li{    display:block;}/* vertical menu */
  26.         nav.horizontal ul li{    display: inline-block;}/* horizontal menu */
  27.         img{max-width:100%;}
  29.         body {
  30.             font-family: Verdana, serif;
  31.             background: #fffef9;
  32.         }
  33.         .main-login {
  34.             width: 35%;
  35.             margin: 108px auto;
  36.             background: #f2eada;
  37.             background-size: cover;
  38.         }
  39.         .main-login > form {
  40.             height: 368px;
  41.             display: flex;
  42.             flex-direction: column;
  43.             justify-content: space-evenly;
  44.             align-items: center;
  45.         }
  46.         .login-input{
  47.             width: 94%;
  48.             position: relative;
  49.         }
  50.         .login-input  .iconfont{
  51.             position: absolute;
  52.             top: 8px;
  53.             left: 26px;
  54.             z-index: 2;
  55.             font-size: 26px;
  56.             color: #77787b;
  57.         }
  59.         input[type="text"],input[type="password"]{
  60.             font-size: 1em;
  61.             font-weight:100;
  62.             height: 38px;
  63.             width: 82%;
  64.             margin-left: 18px;
  65.             padding-left: 42px;
  66.             position: absolute;
  67.         }
  68.         .login-text > ul {
  69.             width: 100%;
  70.             display: flex;
  71.             justify-content: space-between;
  72.         }
  73.         .login-button{
  74.             font-size: 1.2em;
  75.             height: 38px;
  76.             width: 48%;
  77.             background-color: #1E9FFF;
  78.         }
  80.          .am-topbar-right{
  81.              display: flex;
  82.              flex-direction: column;
  83.              width: 580px;
  84.              height: 400px;
  85.              margin: 200px auto;
  86.              background-color: #fff;
  87.          }
  88.     </style>
  89.     <title>LOGIN</title>
  90. </head>
  91. <body>
  92. <!-- main -->
  93. <div class="main-login">
  94.     <form>
  95.         <div class="login-input">
  96.             <span class="iconfont icon-yonghuming"></span>
  97.             <input class="text" type="text" name="username" placeholder="Username" required="">
  98.         </div>
  99.         <div class="login-input">
  100.             <span class="iconfont icon-mima"></span>
  101.             <input class="text" type="password" name="password" placeholder="Password" required="">
  102.         </div>
  104.         <div class="login-text" style="width: 86%">
  105.             <ul>
  106.                 <li>
  107.                     <label class="anim">
  108.                         <input type="checkbox" class="checkbox" required="">
  109.                         <span> Remember me ?</span>
  110.                     </label>
  111.                 </li>
  112.                 <li><a href="/regist"> Regist account ?</a> </li>
  113.             </ul>
  114.         </div>
  115.         <button type='button' name='btn' class="login-button">LOGIN</button>
  116.     </form>
  117. </div>
  119. <!-- //main -->
  120. </body>
  122. </html>
  123. <script type="text/javascript" src="./JQuery3.5.1/jquery.3.5.1.js"></script>
  124. <script>
  125.     $('button[name="btn"]').click(function() {
  126.         var data = {};
  127.         data.username = $.trim($('input[name="username"]').val());
  128.         data.password = $.trim($('input[name="password"]').val());
  130.         $.post('doLogin.php', data, function(res) {
  131.             // console.log(res);
  132.             alert(res.msg)
  133.         }, 'json')
  134.     })
  135. </script>

执行登录

  1. <?php
  2. // 后端可接受前端传过来的参数
  3. $name = isset($_POST['username']) ? $_POST['username'] : null;
  4. $pwd = isset($_POST['password']) ? $_POST['password'] : null;
  5. $pwd = password_hash('$pwd',PASSWORD_DEFAULT);
  6. // var_dump($name, $pwd);
  7. // die();
  10. // 1.连接数据库
  11. $config = require_once __DIR__ .DIRECTORY_SEPARATOR .'connect.php';
  13. // var_dump($config);
  15. // pdo预处理接入
  17. // 准备一条预处理sql语句
  18. $sql = "SELECT * FROM `users` WHERE `username`= ? and `password` = ? ";
  19. // 准备要执行的语句，并返回语句对象
  20. $stmt = $pdo->prepare($sql);
  21. // 绑定参数到指定的变量名
  22. $para = [$name,$pwd];
  24. // 执行一条预处理语句
  25. $stmt->execute($para);
  27. $res = $stmt->fetchAll(PDO::FETCH_ASSOC);
  28. // var_dump($res);
  30. if(empty($res)){
  31.     echo (json_encode(array('code'=>1, 'msg'=>'用户名或密码不正确。')));
  32. };

[https://help10086.cn/0121/login.php]

相关推荐
阅读 +

© 2020 asciim码

人生就是一场修行