后台登陆页login.php
<?php
//1.连接数据库 （创建一个数据库，创建数据表 test_admin）
//id, adminuser, adminpass, created_at, login_at, login_ip
require \'../db.func.php\';
require \'../tools.func.php\';
// POST提交
if (!empty($_POST[\'adminuser\'])) {
//2.查询用户名和密码是否正确 adminuser adminpass
$prefix = getDBPrefix();
$adminuser = htmlentities($_POST[\'adminuser\']);
$adminpass = md5(htmlentities($_POST[\'adminpass\']));
$sql = "SELECT id, adminuser FROM {$prefix}admin
WHERE adminuser = \'$adminuser\'
AND adminpass = \'$adminpass\'";
$res = queryOne($sql);
if ($res) {
//3.写入session
setSession(\'admin\',
[\'adminuser\' => $adminuser, \'id\' => $res[\'id\']]
);
$login_at = date(\'Y-m-d H:i:s\');
$ip = $_SERVER[\'REMOTE_ADDR\'] == \'::1\' ? \'127.0.0.1\' : $_SERVER[\'REMOTE_ADDR\'];
$login_ip = ip2long($ip);
$sql = "UPDATE {$prefix}admin
SET login_at = \'$login_at\', login_ip = \'$login_ip\'
WHERE id = \'{$res[\'id\']}\'";
execute($sql);
//4.跳转到index.php
header(\'location: index.php\');
} else {
setInfo(\'用户名或者密码错误\');
}
}
?>
<!doctype html>
<html>
<head>
<title>商城</title>
<!-- Required meta tags -->
<meta charset="utf-8">
<meta content="width=device-width, initial-scale=1.0, maximum-scale=1.0, user-scalable=0" name="viewport" />
<meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1" />
<!-- Fonts and icons -->
<link rel="stylesheet" type="text/css" href="assets/css/googlefonts.css?family=Roboto:300,400,500,700|Roboto+Slab:400,700|Material+Icons" />
<link rel="stylesheet" href="https://maxcdn.bootstrapcdn.com/font-awesome/latest/css/font-awesome.min.css">
<!-- Material Kit CSS -->
<link href="assets/css/material-dashboard.css?v=2.1.1" rel="stylesheet" />
</head>
<body>
<div class="wrapper ">
<div>
<div>
<div class="container" style="width: 50%;margin-top: 250px;">
<div class="row">
<div class="col-md-12">
<div class="col-md-12">
<div class="card">
<div class="card-header card-header-primary">
<h4 class="card-title">登录</h4>
<p class="card-category">以管理员身份登录后台</p>
</div>
<div class="card-body">
<p><?php if (hasInfo()) echo getInfo(); ?></p>
<form action="login.php" method="post">
<div class="row">
<div class="col-md-12">
<div class="form-group">
<label class="bmd-label-floating">用户名</label>
<input type="text" name="adminuser" class="form-control">
</div>
</div>
</div>
<div class="row">
<div class="col-md-12">
<div class="form-group">
<label class="bmd-label-floating">密码</label>
<input type="password" name="adminpass" class="form-control">
</div>
</div>
</div>
<button type