PHP 登入问题!!!

mikeng · 发表于 6-7-2008 01:38 PM

嗨！各位PHP的高手们，请问我要如何做到当用户输入正确的Username时,但不正确的密码；我要在我的Database Table field “Times”增加1，直到3（用户输入三次错误的密码），
Database Table field “Locked”就等于Yes。这时，就算用户输入正确的Username 和密码也不能登入了….希望各位帮帮我，万分谢意。

我的Table
和Coding大概是这样子的；如下:

ID    Userid    Password Locked Times
1    demo       demo             No             0

index.php
<?php require_once('Connections/test.php'); ?>
<?php
if (!function_exists("GetSQLValueString")) {
function GetSQLValueString($theValue, $theType, $theDefinedValue = "", $theNotDefinedValue = "")
{
  $theValue = get_magic_quotes_gpc() ? stripslashes($theValue) : $theValue;
  $theValue = function_exists("mysql_real_escape_string") ? mysql_real_escape_string($theValue) : mysql_escape_string($theValue);
  switch ($theType) {
case "text":
   $theValue = ($theValue != "") ? "'" . $theValue . "'" : "NULL";
   break;
case "long":
case "int":
   $theValue = ($theValue != "") ? intval($theValue) : "NULL";
   break;
case "double":
   $theValue = ($theValue != "") ? "'" . doubleval($theValue) . "'" : "NULL";
   break;
case "date":
   $theValue = ($theValue != "") ? "'" . $theValue . "'" : "NULL";
   break;
case "defined":
   $theValue = ($theValue != "") ? $theDefinedValue : $theNotDefinedValue;
   break;
  }
  return $theValue;
}
}
?>
<?php
if (!isset($_SESSION)) {
  session_start();
}
$loginFormAction = $_SERVER['PHP_SELF'];
if (isset($_GET['accesscheck'])) {
  $_SESSION['PrevUrl'] = $_GET['accesscheck'];
}
if (isset($_POST['username'])) {
  $loginUsername=$_POST['username'];
  $password=$_POST['password'];
  $MM_fldUserAuthorization = "";
  $MM_redirectLoginSuccess = "success.php";
  $MM_redirecttoReferrer = false;
  mysql_select_db($database_test, $test);

  $LoginRS__query=sprintf("SELECT Userid, Password FROM addmen WHERE Userid=%s AND Password=%s",
GetSQLValueString($loginUsername, "text"), GetSQLValueString($password, "text"));

  $LoginRS = mysql_query($LoginRS__query, $test) or die(mysql_error());
  $loginFoundUser = mysql_num_rows($LoginRS);
  if ($loginFoundUser) {
   $loginStrGroup = "";

$_SESSION['MM_Username'] = $loginUsername;
$_SESSION['MM_UserGroup'] = $loginStrGroup;
if (isset($_SESSION['PrevUrl']) && false) {
   $MM_redirectLoginSuccess = $_SESSION['PrevUrl'];
}
header("Location: " . $MM_redirectLoginSuccess );
  }
  else {
   $error1="登入错误!!!<br>";
$error2="Wrong Username/Password!!!";
  }
}
?>
<html>
<head>
<meta http-equiv="Content-Type" c />
<title>TESTING</title>
</head>
<body>
<form id="frmMember" name="frmMember" method="POST" action="<?php echo $loginFormAction; ?>">
  Username:
  <label>
  <input type="text" name="username" id="username" />
  </label>
  <br />
  <br />
  Password:
  <label>
  <input type="password" name="password" id="password" />
  </label>
  <p>
<label>
<input type="submit" name="button" id="button" value="Login" />
</label>
<?php echo $error1;?><?php echo $error2;?><br />
  </p>
</form>
</body>
</html>

success.php
<?php
if (!isset($_SESSION)) {
  session_start();
}

$logoutAction = $_SERVER['PHP_SELF']."?doLogout=true";
if ((isset($_SERVER['QUERY_STRING'])) && ($_SERVER['QUERY_STRING'] != "")){
  $logoutAction .="&". htmlentities($_SERVER['QUERY_STRING']);
}
if ((isset($_GET['doLogout'])) &&($_GET['doLogout']=="true")){
  $_SESSION['MM_Username'] = NULL;
  $_SESSION['MM_UserGroup'] = NULL;
  $_SESSION['PrevUrl'] = NULL;
  unset($_SESSION['MM_Username']);
  unset($_SESSION['MM_UserGroup']);
  unset($_SESSION['PrevUrl']);

  $logoutGoTo = "index.php";
  if ($logoutGoTo) {
header("Location: $logoutGoTo");
exit;
  }
}
?>
<?php
if (!isset($_SESSION)) {
  session_start();
}
$MM_authorizedUsers = "";
$MM_d;
function isAuthorized($strUsers, $strGroups, $UserName, $UserGroup) {
$isValid = False;

  if (!empty($UserName)) {

$arrUsers = Explode(",", $strUsers);
$arrGroups = Explode(",", $strGroups);
if (in_array($UserName, $arrUsers)) {
   $isValid = true;
}
if (in_array($UserGroup, $arrGroups)) {
   $isValid = true;
}
if (($strUsers == "") && true) {
   $isValid = true;
}
  }
  return $isValid;
}
$MM_restrictGoTo = "index.php";
if (!((isset($_SESSION['MM_Username'])) && (isAuthorized("",$MM_authorizedUsers, $_SESSION['MM_Username'], $_SESSION['MM_UserGroup'])))) {
  $MM_qsChar = "?";
  $MM_referrer = $_SERVER['PHP_SELF'];
  if (strpos($MM_restrictGoTo, "?")) $MM_qsChar = "&";
  if (isset($QUERY_STRING) && strlen($QUERY_STRING) > 0)
  $MM_referrer .= "?" . $QUERY_STRING;
  $MM_restrictGoTo = $MM_restrictGoTo. $MM_qsChar . "accesscheck=" . urlencode($MM_referrer);
  header("Location: ". $MM_restrictGoTo);
  exit;
}
?>
<html>
<head>
<meta http-equiv="Content-Type" c />
<title>SUCCESS</title>
</head>
<body>
<p>Login Successful!!</p>
<p>
  <label><a href="<?php echo $logoutAction ?>">Log out</a>  </label>
</p>
</body>
</html>

vampcheah · 发表于 6-7-2008 02:41 PM

你自己都注明了，登入失败时就＋1。用 update 咯
但是记得成功login 后就得 reset 那个 field。

登入时的 select 加多一个 condition，那个 field 的数目必须是小过 3。

以上是用你的 logic 想出来的方法。

mikeng · 发表于 6-7-2008 03:32 PM

谢谢您！我解决了。

		自动登录	找回密码
密码			注册

PHP 登入问题!!!

所属分类: 电脑手机

浏览过的版块