【发布时间】:2014-02-01 07:39:56
【问题描述】:
我正在创建一个登录脚本。标头都在工作,但显然 $_SESSION 保持为空。有谁知道为什么会这样?
$db = dbConnection();
// username and password sent from form
$myusername= $_POST['myusername'];
$mypassword= md5($_POST['mypassword']);
// To protect MySQL injection (more detail about MySQL injection)
$myusername = stripslashes($myusername);
$mypassword = stripslashes($mypassword);
$myusername = mysql_real_escape_string($myusername);
$mypassword = mysql_real_escape_string($mypassword);
$sql="SELECT * FROM " .$members. " WHERE BINARY `username`= '".$myusername."' and BINARY `password`= '".$mypassword."'";
$result = $db->query($sql);
// Mysql_num_row is counting table row
$count=$result->rowCount();
// Fetch this accounts row from db
$row = $result->fetch(PDO::FETCH_ASSOC);
// If result matched $myusername and $mypassword, table row must be 1 row
if($count==1){
$_SESSION['username'] = $myusername;
$_SESSION['privileges'] = $row['privileges'];
$_SESSION['email'] = $row['email'];
header("location:index.php");
}
【问题讨论】:
-
假设你在某处隐藏了
session_start();?