PHP 脚本报告错误的凭据

Question

好的，这是我的身份验证代码。现在，我有一张 table 和 5 个 PHP 工作脚本，除了这个。成功登录后，用户应该被重定向到他的主页，但问题是，无论登录详细信息如何，PHP 都会回显“无法登录”错误消息。这是脚本:

session_start();
include_once'dbconnect.php';
    if (isset($_SESSION['user']) != "") {
        header ("Location: home.php");  
    }

    if (isset($_POST['login'])) {
        $email = mysql_real_escape_string($_POST['email']);
        $pass = mysql_real_escape_string($_POST['pass']);
        $sql = mysql_query("SELECT * FROM users WHERE email='".$email."'");
        $num = mysql_fetch_assoc($sql);

            if ($num['password'] == $pass)) {
                $_SESSION['user'] = $num['user_id'];
                header ("Location: home.php");
            }
                else {
                    echo "Cannot login";
                }
    }

有什么提示吗？谢谢

Answer 1

session_start();
include_once'dbconnect.php';
    if (isset($_SESSION['user']) != "") {
        header ("Location: home.php");  
    }

    if (isset($_POST['login'])) {
        $email = mysql_real_escape_string($_POST['email']);
        $pass = mysql_real_escape_string($_POST['pass']);
        $sql = mysql_query("SELECT * FROM users WHERE email='".$email."'");
        $num = mysql_fetch_assoc($sql);
        if(count($num)>0){
            if ($num['password'] == $pass)) {
                $_SESSION['user'] = $num['user_id'];
                header ("Location: home.php");
            }
                else {
                    echo "Cannot login";
                }
        }else{
          echo "Cannot login, email id not found";
        }

    }

确保您从数据库中获取密码。