test.php
<html>
<head>
<title>Login</title>
</head>
<body>
<h2>登录页面</h2>
<form action="doLogin.php" method="post">
username:<input type="text" name="username" id=""<br/>
password:<input type="password" name="password" id=""><br/>
<input type="submit" value="登录">
</form>
</body>
</html>
doLogin.php
<?php
header("Content-type:text/html;charset=utf-8");
$mysqli = new mysqli('localhost', 'root', '', 'test');
if ($mysqli->errno) {
die('Connect Error ' . $mysqli->error);
}
$mysqli->set_charset('UTF8');
$username = $_POST['username'];
$password = md5($_POST['password']);
$sql = "SELECT * FROM user WHERE username='{$username}' AND password ='{$password}'";
$mysqli_result = $mysqli->query($sql);
if ($mysqli_result && $mysqli_result->num_rows > 0) {
echo "登录成功";
} else {
echo "登录失败";
}
?>
Paste_Image.png
Paste_Image.png
Paste_Image.png
预处理语句
<?php
header("Content-type:text/html;charset=utf-8");
$mysqli = new mysqli('localhost', 'root', '', 'test');
if ($mysqli->errno) {
die('Connect Error ' . $mysqli->error);
}
$mysqli->set_charset('UTF8');
$username = $_POST['username'];
$password = md5($_POST['password']);
$sql = "SELECT * FROM user WHERE username=? AND password=?";
$mysqli_stmt = $mysqli->prepare($sql);
$mysqli_stmt->bind_param('ss', $username, $password);
if ($mysqli_stmt->execute()) {
$mysqli_stmt->store_result();
if ($mysqli_stmt->num_rows > 0) {
echo "登录成功";
} else {
echo "登录失败";
}
}
//释放结果集
$mysqli_stmt->free_result();
//关闭预处理语句
$mysqli_stmt->close();
//关闭连接
$mysqli->close();
?>
Paste_Image.png
