一旦登录PHP,如何使页面只能访问

时间:2016-05-23 19:52:54

标签: php mysql

我是PHP的新手,并尝试为作业组合一个原型。我使用以下登录脚本以及用户名和密码的简单表单填写。一旦它针对数据库检查用户名和密码,如果它们匹配,则将用户带到welcome.php页面。如果用户已成功登录,如何才能使welcome.php可见?

<?php
include("web_config.php");

 session_start();

  if($_SERVER["REQUEST_METHOD"] == "POST") {
  // username and password sent from form 

  $myusername = mysqli_real_escape_string($mysqli,$_POST['username']);
  $mypassword = mysqli_real_escape_string($mysqli,$_POST['password']); 

  $sql = "SELECT UserAccountID FROM UserAccounts WHERE Username = '$myusername' and Password = '$mypassword'";
  $result = mysqli_query($mysqli,$sql);
  $row = mysqli_fetch_array($result,MYSQLI_ASSOC);
  $active = $row['active'];

  $count = mysqli_num_rows($result);

  // If result matched $myusername and $mypassword, table row must be 1 row

  if($count == 1) {
   echo "User logged in."; header("location: welcome.php");
   } else {


         $error = "Your Login Name or Password is invalid";
      }
   }
 ?>
  <div style = "font-size:11px; color:#cc0000; margin-top:10px"><?php    echo $error; ?></div>

1 个答案:

答案 0 :(得分:0)

您可能需要查看Using sessions & session variables in a PHP Login Script,其中已包含有关此主题的一些有用信息。