![[Web front-end] Node.js quick start](https://img.php.cn/upload/course/000/000/067/662b5d34ba7c0227.png)
天蓬老师Correction status：qualified
Teacher's comments：如果让我面试程序员, 一个用户登录验证与注册, 就基本够用了, 因为这个真的不简单, 太多细节
Collection
Collection
<?php// 判断_COOKIE里面有没有user 有的话 unserialize反序列化if (isset($_COOKIE['user'])) $user = unserialize($_COOKIE['user']);?><!DOCTYPE html><html lang="en"><head><meta charset="UTF-8"><meta name="viewport" content="width=device-width, initial-scale=1.0"><title>首页</title></head><style>nav {height: 40px;background-color: deepskyblue;padding: 0 20px;display: flex;justify-content: space-between;align-items: center;}nav > a {/* 更改颜色 */color: white;/* 去掉下划线 */text-decoration: none;}</style><body><nav><a href="index.php">个人中心</a><!-- if 判断是有有user这个变量 有表示已登录 那就显示退出 --><?php if (isset($user)) : ?><a href="" id="logout"><span style="color:red"><?php echo $user['name'] ?> </span><span style="color:2604e6">邮箱：<?php echo $user['email'] ?></span> 退出</a><?php else: ?><!-- 如果没有user 就是没有登录 下面显示登录 --><a href="login.php">登录</a><?php endif ?><a href="register.php">注册</a></nav></body><script>// 为退出按钮创建事件监听器document.querySelector('#logout').addEventListener('click', function(event) {if (confirm('是否退出')) {// 禁用默认行为, 其实就是禁用原<a>标签的点击跳转行为,使用事件中的自定义方法处理event.preventDefault();// 跳转到退出事件处理器window.location.assign('handle.php?action=logout');}});</script></html>
<?php// 查询用户表中的数据 new PDO连接数据库$pdo = new PDO('mysql:host=localhost;dbname=wxf', 'root', '123456');// 查询范围*代表全部 users代表要查询的表$stmt = $pdo->prepare('SELECT * FROM `users`');// 执行上面的语句 执行完毕后为得到数据$stmt->execute();// 这里拿到数据并放到变量users里面 fetchAll多条查询 FETCH_ASSOC只查询关联的$users = $stmt->fetchAll(PDO::FETCH_ASSOC);// 处理用户登录与注册// $action = $_GET['action'];// 使用变量过滤器$action = filter_input(INPUT_GET, 'action');// switch 判断 strtolower全部转为小写switch ( strtolower($action)) {// case如果 登录case 'login':// 判断请求是否合法 $_SERVER['REQUEST_METHOD'] 当前请求是那种方式if ($_SERVER['REQUEST_METHOD'] === 'POST') {//如果请求正确 那么现在获取需要验证的数据$email = $_POST['email'];$password = sha1($_POST['password']);// array_filter过滤数组 $users 相对应 $user ， use 把外部变量$email, $password拿过来$results = array_filter($users, function($user) use ($email, $password) {// 判断用户提交的 是否和数据库中的账户密码一致return $user['email'] === $email && $user['password'] === $password;});// 判断 $results 返回的结果集 如果是1 代表验证通过if (count($results) === 1) {// serialize序列化客户数据setcookie('user', serialize(array_pop($results)));// exit终止操作 通过提示通过exit('<script>alert("登录成功");location.href="index.php"</script>');}// else 没通过 显示账户错误并返回登录界面else {exit('<script>alert("邮箱或密码错误,或者还没有帐号");location.href="login.php";</script>');}} else {die('请求类型错误');}break;// 退出case 'logout':if (isset($_COOKIE['user'])) {setcookie('user', null , time()-3600);exit('<script>alert("退出成功");location.assign("index.php")</script>');}break;// 注册case 'register':// 1. 获取到所有新用户数据$name = $_POST['name'];$email = $_POST['email'];$password = sha1($_POST['p1']);$register_time = time();// 2. 将新用户插入到表中$sql = "INSERT `users` SET `name`='{$name}', `email`='{$email}', `password`='{$password}', `register_time`={$register_time}";// 获取到sql语句$stmt = $pdo->prepare($sql);// 执行sql语句$stmt->execute();// 判断是否成功if ($stmt->rowCount() === 1) exit('<script>alert("注册成功");location.assign("login.php")</script>');else exit('<script>alert("注册失败");location.assign("login.php")</script>');break;// 未定义default:exit('未定义操作');}
<?php// 判断是否已登录if (isset($_COOKIE['user']))exit('<script>alert("请不要重复登录");location.href="index.php";</script>');?><!DOCTYPE html><html lang="en"><head><meta charset="UTF-8"><meta name="viewport" content="width=device-width, initial-scale=1.0"><link rel="stylesheet" type="text/css" href="../css/style.css"><title>用户登录</title></head><body><!-- 只需要验证用户的邮箱和密码就可以 --><h3>用户登录</h3><form action="handle.php?action=login" method="post"><div><label for="email">邮箱:</label><input type="email" name="email" id="email" placeholder="demo@email.com" require autofocus></div><div><label for="password">密码:</label><input type="password" name="password" id="password" placeholder="不少于6位" required></div><div><button>提交</button></div></form><a href="register.php">还没有帐号, 注册一个吧</a></body></html>
<!DOCTYPE html><html lang="en"><head><meta charset="UTF-8"><meta name="viewport" content="width=device-width, initial-scale=1.0"><link rel="stylesheet" type="text/css" href="../css/style.css"><title>注册用户</title></head><body><h3>用户注册</h3><!-- action="handle.php?action=register" 代表要提交的地方 register 代表注册 --><form action="handle.php?action=register" method="post" onsubmit="return compare()"><div><label for="name">呢称:</label><input type="text" name="name" id="name" placeholder="不少于3个字符" required autofocus></div><div><label for="email">邮箱:</label><input type="email" name="email" id="email" placeholder="demo@email.com" required></div><div><label for="p1">密码:</label><input type="password" name="p1" id="p1" placeholder="不少于6位" required></div><div><label for="p2">重复:</label><input type="password" name="p2" id="p2" placeholder="必须与上面一致" required></div><div><button>提交</button><span id="tips" style="color: red"></span></div></form><a href="login.php">我有帐号,直接登录</a><script>// 验证二次密码是否相等?function compare() {if (document.forms[0].p1.value.trim() !== document.forms[0].p2.value.trim()) {document.querySelector('#tips').innerText = '二次密码不相等';return false;}}</script></body></html>
<?php// 开启会话session_start();// 判断_COOKIE里面有没有user 有的话 unserialize反序列化if (isset($_SESSION['user'])) $user = unserialize($_SESSION['user']);?><!DOCTYPE html><html lang="en"><head><meta charset="UTF-8"><meta name="viewport" content="width=device-width, initial-scale=1.0"><title><?php if (isset($user)) : ?>个人中心 - 已经登录<?php else: ?>个人中心 - 未登录<?php endif ?></title></head><style>nav {height: 40px;background-color: deepskyblue;padding: 0 20px;display: flex;justify-content: space-between;align-items: center;}nav > a {/* 更改颜色 */color: white;/* 去掉下划线 */text-decoration: none;}</style><body><nav><a href="index.php">个人中心</a><!-- if 判断是有有user这个变量 有表示已登录 那就显示退出 --><?php if (isset($user)) : ?><a href="" id="logout"><span style="color:red"><?php echo $user['name'] ?> </span><span style="color:2604e6">邮箱：<?php echo $user['email'] ?></span> 退出</a><?php else: ?><!-- 如果没有user 就是没有登录 下面显示登录 --><a href="login.php">登录</a><?php endif ?><a href="register.php">注册</a></nav></body><script>// 为退出按钮创建事件监听器document.querySelector('#logout').addEventListener('click', function(event) {if (confirm('是否退出')) {// 禁用默认行为, 其实就是禁用原<a>标签的点击跳转行为,使用事件中的自定义方法处理event.preventDefault();// 跳转到退出事件处理器window.location.assign('handle.php?action=logout');}});</script></html>
<?php// 开启会话session_start();// 查询用户表中的数据 new PDO连接数据库$pdo = new PDO('mysql:host=localhost;dbname=wxf', 'root', '123456');// 查询范围*代表全部 users代表要查询的表$stmt = $pdo->prepare('SELECT * FROM `users`');// 执行上面的语句 执行完毕后为得到数据$stmt->execute();// 这里拿到数据并放到变量users里面 fetchAll多条查询 FETCH_ASSOC只查询关联的$users = $stmt->fetchAll(PDO::FETCH_ASSOC);// 处理用户登录与注册// $action = $_GET['action'];// 使用变量过滤器$action = filter_input(INPUT_GET, 'action');// switch 判断 strtolower全部转为小写switch ( strtolower($action)) {// case如果 登录case 'login':// 判断请求是否合法 $_SERVER['REQUEST_METHOD'] 当前请求是那种方式if ($_SERVER['REQUEST_METHOD'] === 'POST') {//如果请求正确 那么现在获取需要验证的数据$email = $_POST['email'];$password = sha1($_POST['password']);// array_filter过滤数组 $users 相对应 $user ， use 把外部变量$email, $password拿过来$results = array_filter($users, function($user) use ($email, $password) {// 判断用户提交的 是否和数据库中的账户密码一致return $user['email'] === $email && $user['password'] === $password;});// 判断 $results 返回的结果集 如果是1 代表验证通过if (count($results) === 1) {// serialize序列化客户数据$_SESSION['user'] = serialize(array_pop($results));// exit终止操作 通过提示通过exit('<script>alert("登录成功");location.href="index.php"</script>');}// else 没通过 显示账户错误并返回登录界面else {exit('<script>alert("邮箱或密码错误,或者还没有帐号");location.href="login.php";</script>');}} else {die('请求类型错误');}break;// 退出case 'logout':if (isset($_SESSION['user'])) {session_destroy();exit('<script>alert("退出成功");location.assign("index.php")</script>');}break;// 注册case 'register':// 1. 获取到所有新用户数据$name = $_POST['name'];$email = $_POST['email'];$password = sha1($_POST['p1']);$register_time = time();// 2. 将新用户插入到表中$sql = "INSERT `users` SET `name`='{$name}', `email`='{$email}', `password`='{$password}', `register_time`={$register_time}";// 获取到sql语句$stmt = $pdo->prepare($sql);// 执行sql语句$stmt->execute();// 判断是否成功if ($stmt->rowCount() === 1) exit('<script>alert("注册成功");location.assign("login.php")</script>');else exit('<script>alert("注册失败");location.assign("login.php")</script>');break;// 未定义default:exit('未定义操作');}
<?php// 开启会话session_start();// 判断是否已登录if (isset($_SESSION['user']))exit('<script>alert("请不要重复登录");location.href="index.php";</script>');?><!DOCTYPE html><html lang="en"><head><meta charset="UTF-8"><meta name="viewport" content="width=device-width, initial-scale=1.0"><link rel="stylesheet" type="text/css" href="../css/style.css"><title>用户登录</title></head><body><!-- 只需要验证用户的邮箱和密码就可以 --><h3>用户登录</h3><form action="handle.php?action=login" method="post"><div><label for="email">邮箱:</label><input type="email" name="email" id="email" placeholder="demo@email.com" require autofocus></div><div><label for="password">密码:</label><input type="password" name="password" id="password" placeholder="不少于6位" required></div><div><button>提交</button></div></form><a href="register.php">还没有帐号, 注册一个吧</a></body></html>
<!DOCTYPE html><html lang="en"><head><meta charset="UTF-8"><meta name="viewport" content="width=device-width, initial-scale=1.0"><link rel="stylesheet" type="text/css" href="../css/style.css"><title>注册用户</title></head><body><h3>用户注册</h3><!-- action="handle.php?action=register" 代表要提交的地方 register 代表注册 --><form action="handle.php?action=register" method="post" onsubmit="return compare()"><div><label for="name">呢称:</label><input type="text" name="name" id="name" placeholder="不少于3个字符" required autofocus></div><div><label for="email">邮箱:</label><input type="email" name="email" id="email" placeholder="demo@email.com" required></div><div><label for="p1">密码:</label><input type="password" name="p1" id="p1" placeholder="不少于6位" required></div><div><label for="p2">重复:</label><input type="password" name="p2" id="p2" placeholder="必须与上面一致" required></div><div><button>提交</button><span id="tips" style="color: red"></span></div></form><a href="login.php">我有帐号,直接登录</a><script>// 验证二次密码是否相等?function compare() {if (document.forms[0].p1.value.trim() !== document.forms[0].p2.value.trim()) {document.querySelector('#tips').innerText = '二次密码不相等';return false;}}</script></body></html>
总结：是否登录用cookie里面有没有user检测，页面有无访问权限和一些已登录和未登录显示不一样的内容都可以用此方法。
天蓬老师