用户存在时 PHP 登录脚本不起作用

Question

我有以下 PHP 数据库登录和查询脚本:

require 'database.php';  

if(!empty($_POST['username']) && !empty($_POST['password'])) {
    $records = $conn->prepare('username FROM users WHERE username == :username');
    $records->bindParam(':username', $_POST['username']);
    $records->execute();
    $result = $records->fetch(PDO::FETCH_ASSOC);

    if(count($result) > 0 && password_verify($_POST['password'], $result['password'])) {
        echo "<script type='text/javascript'>alert('Succesfully logged in!')</script>";
    } else {
        echo "<script type='text/javascript'>alert('Error, wrong credentials.')</script>";
    }
}

但由于某种原因它不起作用。我不断弹出错误，说输入错误。 Database.php 完全没问题，因为我的注册表单正确地将用户放入具有相同文件的数据库中。大家有什么想法吗？

Answer 1

if(!empty($_POST['username']) && !empty($_POST['password'])) {
  // modification in below line: fetch password too
  $records = $conn->prepare('select username, password FROM users WHERE username == :username');
  $records->bindParam(':username', $_POST['username']);
  $records->execute();
  $result = $records->fetch(PDO::FETCH_ASSOC);
    if(count($result) > 0 && password_verify($_POST['password'], $result['password'])){
      echo "<script type='text/javascript'>alert('Succesfully logged in!')</script>";
    } else {
      echo "<script type='text/javascript'>alert('Error, wrong credentials.')</script>";
    }
}

希望这会起作用