2013-02-11 107 views
0

我目前遇到了登录问题 - 第一次登录尝试总是被拒绝,但第二次尝试成功。任何想法如何解决这个问题?首次尝试登录被拒绝,但第二次尝试成功

的login.php

if(isset($_POST['pmsubmit'])) 
    { 
    LoginSubmit('pm', 'pmname', 'pmpass'); 
    } 

    if (isset($_POST['tssubmit'])) { 
    LoginSubmit('ts', 'dept', 'tspass'); 
    } 

function LoginSubmit($pm_or_ts, $the_name_input, $the_pass_input) 
{ 
    global $pdo; 
    $salt = "$2a$12ehTk6%^jswam)*usnyruhst"; 
    $posted_name = $_POST[$the_name_input]; 
    $posted_pass = crypt($_POST[$the_pass_input], $salt); 
    // check if password matches the one in the table 
    $query = $pdo->prepare("SELECT * FROM db_pass WHERE pass = :pass"); 
    $query->execute(array(":pass" => $posted_pass)); 
    // if there is a match then we log in the user 
    if ($query->rowCount() > 0) 
    { 
    // session stuff 
    $_SESSION[$the_name] = $posted_name; 
     $_SESSION['id'] = $row['id']; 
    // refresh page 
    header('Location: ' . $pm_or_ts . '/index.php') ; 
    exit; 
    } 
    // if there is no match then we present the user with an error 
    else 
    { 
    echo ' 
    <script> 
    $(function() { 
     $("#dialog-message").dialog({ 
     modal: true, 
     buttons: { 
     Ok: function() { 
      $(this).dialog("close"); 
      } 
     } 
     }); 
    }); 
    </script> 
     <div id="dialog-message" title="Incorrect password"> 
     The password you have provided is incorrect.<br>Please try again. 
    </div> 
    '; 
    } 
} 
?> 

PM/index.php文件

<?php 
session_start(); 
setcookie("pmw", $_SESSION[$thename], time()+7200, '/'); 
require_once("../resources/php/connection.php"); 

if (empty($_SESSION[$thename]) || empty($_COOKIE['pmw'])) { 
    header("Location: ../login.php"); 
    exit; 
} 
?> 

TS/index.php文件

<?php 
session_start(); 
setcookie("ts", $_SESSION[$thename], time()+7200, '/'); 
require_once("../resources/php/connection.php"); 

if (empty($_SESSION[$thename]) || empty($_COOKIE['ts'])) { 
    header("Location: ../login.php"); 
    exit; 
} 
?> 
+0

嗯,首先,你要在你的登录函数中设置'$ _SESSION [$ the_name]',但'$ the_name'似乎没有被定义。这就是为什么我相信PHP通知应该始终处于开启状态(或未定义变量不应超过通知)的原因之一。 – 2013-02-11 13:39:01

+0

你也在设置'$ _SESSION ['id'] = $ row ['id']'并且'$ row'没有被定义。 – 2013-02-11 13:39:34

+0

@ColinMorelli谢谢你的回应。我需要做些什么改变? – methuselah 2013-02-11 13:43:10

回答

2

我想你login.php你没有开始会话,你直接将值初始化为$ _SESSION [$ the_name]。所以在login.php文件的开头写上session_start()。

相关问题