ASCII码 ASCII码

用PDO扩展连接mysql数据库 实现用户登录时防sql注入的处理

发布于：2022-01-26 17:41:29  栏目：技术文档
PDO扩展连接mysql数据库
  1. <?php
  2. //配置数据库信息
  3. $config= [
  4.      'type'     => $type ?? 'mysql'
  5.     ,'username' => $username ?? 'root'
  6.     ,'password' => $password ?? '123456'
  7.     ,'host'     => $host ?? 'localhost'
  8.     ,'port'     => $port ?? '3306'
  9.     ,'charset'  => $charset ?? 'utf8'
  10.     ,'dbname'   => 'mydb' ];
  12. $dsn = sprintf('%s:host=%s;port=%s;charset=%s;dbname=%s'
  13.         ,$config['type']
  14.         ,$config['host']
  15.         ,$config['port']
  16.         ,$config['charset']
  17.         ,$config['dbname']);
  19. //连接数据库
  20. try {
  21.     $pdo = new PDO($dsn, $config['username'], $config['password']);
  22. } catch (PDOException $e) {
  23.     die('Connection error : ' . $e->getMessage());
  24. }
  26. //接受前端传过来的参数
  27. if ( 'login' == $_POST['a'] ){
  28. $n = isset($_POST['username']) ? $_POST['username'] : null;
  29. $p = isset($_POST['password']) ? $_POST['password'] : null;
  30. $p = md5($p);
  32. //使用预处理，防止sql注入攻击
  34. // 准备预处理sql语句
  35. $sql = "SELECT * FROM `webuser` WHERE `username`= ? and `password` = ? ";
  37. // 准备要执行的语句，并返回语句对象
  38. $stmt = $pdo->prepare($sql);
  40. // 执行一条预处理语句
  41. $stmt->execute(array($n,$p));
  43. //返回结果集
  44. $res = $stmt->fetchAll(PDO::FETCH_ASSOC);
  46. if($res){
  47.     echo '登陆成功';
  48. }else{
  49.     echo '帐号或密码不正确';}
  50. }
  51. ?>
  53. <!doctype html>
  54. <html lang="en">
  55. <head>
  56. <meta charset="UTF-8">
  57. <title>用户登录</title>
  58. </head><body>
  59. <form action="" method="POST">
  60. <input type = 'hidden' name = 'a' value = 'login' >
  61. <table border = '1' >
  62. <tr><td>帐号:</td><td><input type = 'text' name = 'username' ></td></tr>
  63. <tr><td>密码:</td><td><input type = 'password' name = 'password' ></td></tr>
  64. <tr><td colspan = '2' style = 'text-align:center'><input type = 'submit' value = '登 陆'></td></tr>
  65. </table></form></body>
  66. </html>
相关推荐
阅读 +

© 2020 asciim码

人生就是一场修行