接着之前那篇 “电子商城项目开发(后台功能模块开发)”
登陆页面login.php
<?php
require \'../tools.func.php\';
require \'../db.func.php\';
// 判断当前是否为post提交
if (!empty($_POST[\'username\'])) {
$action = htmlentities($_GET[\'action\']);
$prefix = getDBPrefix();
if ($action == \'reg\') {
$username = htmlentities($_POST[\'username\']);
$password = md5(htmlentities($_POST[\'password\']));
$email = htmlentities($_POST[\'email\']);
$created_at = date(\'Y-m-d H:i:s\');
$sql = "INSERT INTO {$prefix}user(username, password, email, created_at)
VALUES(\'$username\', \'$password\', \'$email\', \'$created_at\')";
if (execute($sql)) {
setInfo(\'注册成功\');
} else {
setInfo(\'注册失败\');
}
} elseif ($action == \'login\') {
$username = htmlentities($_POST[\'username\']);
$password = md5(htmlentities($_POST[\'password\']));
$sql = "SELECT id, username
FROM {$prefix}user
WHERE username = \'$username\' AND password = \'$password\'";
$res = queryOne($sql);
if ($res) {
setSession(\'shop\', [\'username\' => $username, \'id\' => $res[\'id\']]);
header(\'location: index.php\');
} else {
setInfo(\'用户名或者密码错误\');
}
}
}
// 判断操作为login 还是 reg
// 如果是reg,要接收post数据,插入新数据
// 如果是login,要查询数据库,判断用户名或者密码是否正确,正确的话写入session
// 显示结果
require \'header.php\';
?>
<!-- Start Login Register Area -->
<div class="htc__login__register bg__white ptb--130">
<div class="container">
<div class="row">
<div class="col-md-6 col-md-offset-3">
<ul class="login__register__menu" role="tablist">
<li role="presentation" class="login active"><a href="#login" role="tab" data-toggle="tab">登录</a></li>
<li role="presentation" class="register"><a href="#register" role="tab" data-toggle="tab">注册</a></li>
</ul>
</div>
</div>
<!-- Start Login Register Content -->
<div class="row">
<div class="col-md-6 col-md-offset-3">
<div class="htc__login__register__wrap">
<!-- Start Single Content -->
<div id="login" role="tabpanel" class="single__tabs__panel tab-pane fade in active">
<p><?php if (hasInfo()) echo getInfo(); ?></p>
<form id="loginform" class="login" method="post" action="login.php?action=login">
<input type="text" name="username" placeholder="User Name*">
<input type="password" name="password" placeholder="Password*">
</form>
<div class="htc__login__btn mt--30">
<a href="javascript:document.getElementById(\'loginform\').submit();">登录</a>
</div>
</div>
<!-- End Single Content -->
<!-- Start Single Content -->
<div id="register" role="tabpanel" class="single__tabs__panel tab-pane fade">
<p><?php if (hasInfo()) echo getInfo(); ?></p>
<form id="regform" class="login" action="login.php?action=reg" method="post">
<input type="text" name="username" placeholder="Name*">
<input type="email" name="email" placeholder="Email*">
<input type="password" name="password" placeholder="Password*">
</form>
<div class="htc__login__btn">
<a