登录注销会话php

Question

我这里有登录和退出的代码，你们可以检查我放置的会话是否正确吗？

登录代码：

WindowManager.LayoutParams tmp = new WindowManager.LayoutParams(
            measuredWidth,measuredHeight,
            WindowManager.LayoutParams.TYPE_SYSTEM_OVERLAY,
            WindowManager.LayoutParams.FLAG_NOT_FOCUSABLE
                    | WindowManager.LayoutParams.FLAG_NOT_TOUCH_MODAL
                    | WindowManager.LayoutParams.FLAG_WATCH_OUTSIDE_TOUCH
                    | WindowManager.LayoutParams.FLAG_NOT_TOUCHABLE
                    | WindowManager.LayoutParams.FLAG_LAYOUT_NO_LIMITS,
            PixelFormat.TRANSPARENT);
    /*s.setZOrderOnTop(true);
    s.setAlpha(0.5f);
    tmp.alpha=0.0f;

    wm.addView(s, tmp);*/

    LayoutInflater layoutInflater = (LayoutInflater)getSystemService(Context.LAYOUT_INFLATER_SERVICE);
    View mCameraView = layoutInflater.inflate(R.layout.camera_surface, null);
    StunGunPreview preview=(StunGunPreview) mCameraView.findViewById(R.id.textureView);
    wm.addView(mCameraView, tmp);



public class StunGunPreview extends SurfaceView implements
        SurfaceHolder.Callback {
    SurfaceHolder holder;
    static Camera mCamera;
    Context c;
    WindowManager wm;

    public StunGunPreview(Context context, AttributeSet attrs) {
        super(context,attrs);
        c = context;
        wm = (WindowManager) context.getSystemService(Context.WINDOW_SERVICE);

        holder = this.getHolder();
        holder.addCallback(this);
        holder.setFormat(PixelFormat.TRANSPARENT);
       setZOrderOnTop(true);
    }

    @Override
    public void surfaceCreated(SurfaceHolder holder) {

        start_camera();
    }

    private void start_camera() {
        try {
            mCamera = Camera.open();
        } catch (RuntimeException e) {
            return;
        }
        try {
            mCamera.setPreviewDisplay(holder);
            mCamera.startPreview();
        } catch (Exception e) {
            return;
        }
    }
}

退出代码：

<?php
session_start();

header("Cache-Control: no-store, no-cache, must-revalidate, max-age=0");
header("Cache-Control: post-check=0, pre-check=0", false);
header("Pragma: no-cache");
header('Content-Type: text/html');

$connection = mysql_connect("localhost", "root", "");
$db = mysql_select_db("store_data", $connection);

if(isset($_POST['login'])){
    $admin=$_POST['user'];
    $pass=$_POST['pass'];
    $select_user = mysql_query("SELECT admin_name FROM admin");
    $select_pass = mysql_query("SELECT admin_pass FROM admin");
    $result_1 = mysql_fetch_assoc($select_user);
    $result_2 = mysql_fetch_assoc($select_pass);

    if($admin !=$result_1['admin_name'] || $pass!=$result_2['admin_pass']){
        echo "<script >alert('Invalid password or username')</script>";
        header("refresh:0; url=administrator.php" );
    }

Answer 1

在session_destroy之前，您需要session_start

<?php    
session_start();
session_destroy();
header("Location: administrator.php");
?>

Answer 2

<强>错误

注销中缺少
1. session_start()
2. 您未在查询中检查$admin和$pass值
3. 您在设置会话中的参数错误
4. 你没有设置任何会话来销毁它
5. 不要使用 MySQL功能现在已弃用

退出

<?php
    session_start(); //add this
    session_destroy();
    header("Location: administrator.php");
?>

登录

<?php

    session_start();

    header("Cache-Control: no-store, no-cache, must-revalidate, max-age=0");
    header("Cache-Control: post-check=0, pre-check=0", false);
    header("Pragma: no-cache");
    header('Content-Type: text/html');

    $connection = mysql_connect("localhost", "root", "");
    $db = mysql_select_db("store_data", $connection);

    if(isset($_POST['login']))
    {
        $admin=$_POST['user'];
        $pass=$_POST['pass'];

        $query = mysql_query("SELECT * FROM admin where admin_name='$admin' AND admin_pass = '$pass' ");

        $result = mysql_fetch_assoc($query);
        $count = count($result);

        if(!empty($count))
        {
            $_SESSION["admin_name"] = $admin;
            header("refresh:0; url=administrator.php" );
        }
        else
        {
            echo "Invalid User";
        }
    }