php - 无法使用 sha1 哈希密码登录

Question

我在注册时使用 sha1 来散列密码，这是其中的一段代码:

$password = sha1 ($_POST['password']);

    $query = "INSERT INTO admin (forename,surname,email,securityq, securitya,password) VALUES ('$forename','$surname','$email','$securityq','$securitya','$password')";

这是我在登录表单中的代码:

$email = $_POST['email'];
$password = sha1($_POST['pass']);

$query = mysql_query ("SELECT * FROM admin WHERE email = '$_POST[email]' AND password = $password  ");

这仍然不允许我登录，我的“无效登录凭据”是尝试登录的唯一结果。

Answer 1

选择前需要对输入的密码进行哈希运算

$email = $_POST['email'];
$password = md5($_POST['pass']);

$query = mysql_query ("SELECT * FROM admin WHERE email = '$_POST[email]' AND password = '$password'");