PHP pdo登录脚本

Question

我使用 pdo 创建登录脚本，但遇到一些问题

if($_POST['giris']){
        $query = $db->prepare("SELECT * FROM user WHERE 
        username = :userg,
        pw = :pwg");
        $result = $query->execute(array(
        'userg' => $_POST['userg'],
        'pwg' => $_POST['pwg'],
        ));

        if($result > 0){
            echo "ok";
        }else{
            echo "no";
        }

    }

我想如果结果有问题我该如何解决？我想要如果用户名 = 用户名和密码就可以登录。

Answer 1

更改此:

$query = $db->prepare("SELECT * FROM user WHERE 
    username = :userg,
    pw = :pwg");
    $result = $query->execute(array(
    'userg' => $_POST['userg'],
    'pwg' => $_POST['pwg'],
    ));

对此:

$query = $db->prepare("SELECT * FROM user WHERE 
    username = :userg AND pw = :pwg");
    $query->bindParam(':userg', $_POST['userg']);
    $query->bindParam(':pwg', $_POST['pwg']);
    $query->execute();

感谢 Fred-ii- 发现我在选择查询中的错误!更改:

if($result > 0){
        echo "ok";
    }else{
        echo "no";
    }

致:

$count = $query->rowCount();
if($count==1){
echo "ok";
    }else{
        echo "no";
    }