php - PDO 获取与行计数

Question

我正在尝试使用 PDO 在 PHP 中创建登录脚本，但遇到了一个小问题。我可以检查数据是否在字段中，但不确定如何检查用户名和密码组合是否正确。这是检查用户名和密码的片段:

# if data is valid, check against values held in the database
if ($valid) {
    $sql = 'SELECT COUNT(*) FROM authors
    WHERE email = :email AND password = :password';
    
    $s = $dbConnection->prepare($sql);
    $s->bindValue(':email', $email);
    $s->bindValue(':password', $password);
    $s->execute();
    
    $row = $s->fetch();
    
    if($row==1){
        echo "ok";
    }else{
        echo "no";
    }
}

当我输入用户名和密码的任意组合时，我得到的输出为 false(即 echo“no”)。有人可以帮我吗？

<小时/>

更新:已修改代码段

我使用了password_verify，但结果仍然相同:

// if data is valid, check against values held in the database
if ($valid) {
    $sql = 'SELECT * FROM author
    WHERE email = :email';
    
    $s = $dbConnection->prepare($sql);
    $s->bindValue(':email', $email);
    $s->execute();
    
    $row = $s->fetch();
    var_dump($row);

    if(count($row) > 0 && password_verify($password, $row['password'])){
        echo 'ok';
        exit;
    }else {
        echo 'Username and Password are not found';
    }
}

错误数据的var_dump:

bool(false) Username and Password are not found

正确数据的var_dump:

array(4) { ["id"]=> string(1) "3" ["name"]=> string(7) "a@a.com" ["email"]=> string(7) "a@a.com" ["password"]=> string(1) "a" } Username and Password are not found

Answer 1

已经解决了。我使用的解决方案是:

# if data is valid, check against values held in the database and then action as appropriate
if ($valid) {
    $sql = 'SELECT id, email, password FROM author
    WHERE email = :email AND password = :password';

    $s = $dbConnection->prepare($sql);
    $s->bindValue(':email', $email);
    $s->bindValue(':password', $password);
    $s->execute();

    $data = $s->fetch();
    if($data != NULL){
        $_SESSION['loggedIn'] = TRUE;
        $_SESSION['email'] = $email;
        $_SESSION['id'] = $data['id'];
        header('Location:../admin/');
        exit;
    }else{
        unset($_SESSION['loggedIn']);
        unset($_SESSION['email']);
        unset($_SESSION['id']);
        echo 'Incorrect username/password combination';
    }
}