gpt4 book ai didi

php - HTML PHP MYSQL 更改密码

转载 作者:行者123 更新时间:2023-11-29 09:06:34 24 4
gpt4 key购买 nike

嗨,我有这个 http://kramansronet.comze.com/

注册并一切正常

当您在页面的成员(member)部分时,我如何添加更改密码字段?

这是我的成员(member)登录页面

  <?php include "base.php"; ?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<title>User Management System (Tom Cameron for NetTuts)</title>
<link rel="stylesheet" href="style.css" type="text/css" />
</head>
<body>
<div id="main">
<?php
if(!empty($_SESSION['LoggedIn']) && !empty($_SESSION['Username']))
{
?>

<h1>Member Area</h1>
<p>Thanks for logging in! Your username is <b><?=$_SESSION['Username']?></b> and your email address is <b><?=$_SESSION['EmailAddress']?></b>.</p><br>

<h3>Account Tools:</h3>
Username: <?=$_SESSION['Username']?><br>
Password: <?=$_SESSION['password']?><br>
Email: <?=$_SESSION['EmailAddress']?><br>
Account Type: <?=$_SESSION['accounttype']?><br>


<ul>

<li><a href="logout.php">Logout.</a></li>
</ul>

<?php
}
elseif(!empty($_POST['username']) && !empty($_POST['password']))
{
$username = mysql_real_escape_string($_POST['username']);
$password = md5(mysql_real_escape_string($_POST['password']));

$checklogin = mysql_query("SELECT * FROM users WHERE Username = '".$username."' AND Password = '".$password."'");

if(mysql_num_rows($checklogin) == 1)
{
$row = mysql_fetch_array($checklogin);
$email = $row['EmailAddress'];
$accounttype = $row['accounttype'];

$_SESSION['Username'] = $username;
$_SESSION['EmailAddress'] = $email;
$_SESSION['accounttype'] = $accounttype;
$_SESSION['LoggedIn'] = 1;

echo "<h1>Success</h1>";
echo "<p>Please Refresh your browser to go to memeber page.</p>";
echo "<meta http-equiv='refresh' content='=2;index.php' />";
}
else
{
echo "<h1>Error</h1>";
echo "<p>Sorry, your account could not be found. Please <a href=\"index.php\">click here to try again</a>.</p>";
}
}
else
{
?>

<h1>Member Login</h1>

<p>Thanks for visiting! Please either login below, or <a href="register.php">click here to register</a>.</p>

<form method="post" action="index.php" name="loginform" id="loginform">
<fieldset>
<label for="username">Username:</label><input type="text" name="username" id="username" /><br />
<label for="password">Password:</label><input type="password" name="password" id="password" /><br />
<input type="submit" name="login" id="login" value="Login" />
</fieldset>
</form>

<?php
}
?>
</div>
</body>
</html>

最佳答案

页面应要求用户输入当前密码(作为安全预防措施),并在另外两个输入字段中输入新密码两次 - 再次作为预防措施。

这是在 HTML 中使用 form 中的 password 类型的 input 字段完成的。

然后,在 PHP 中,检查给定的密码是否属于当前登录的用户(来自 session )。如果是这种情况,并且两个新密码都匹配,即用户没有输入任何密码,则使用 SQL UPDATE 更新数据库。声明。

像往常一样处理密码时,proper hashing should be used .

关于php - HTML PHP MYSQL 更改密码,我们在Stack Overflow上找到一个类似的问题: https://stackoverflow.com/questions/6887961/

24 4 0
Copyright 2021 - 2024 cfsdn All Rights Reserved 蜀ICP备2022000587号
广告合作:1813099741@qq.com 6ren.com