Community Learn Tools Library Leisure
search
English
Home > List of blog posts > PHP会话控制实战cookie、session
Blogger Information
Blog 119
fans 3
comment 1
visits 94683
Special Recommendation
More>
Related recommendations
Popular Tutorials
More>
Related Tutorials
Popular Recommendations
Latest courses
Latest Downloads
More>
Web Effects
Website Source Code
Website Materials
Front End Template
PHP会话控制实战cookie、session
赵大叔
Original
777 people have browsed it

COOKIE

1、数据保存在客户端浏览器上，如果浏览器关闭cookie，则无法使用
2、创建cookie：setcookie(名称,值,[过期时间])
3、使用cookie：$_COOKIE['名称']
4、删除cookie：为cookie设置一个已经过期的时间，如：setcookie(名称,值,time()-1)

演示代码

首页：

  1. <?php
  2. // 判断是否已经登录?
  3. if (isset($_COOKIE['user'])) $user = unserialize($_COOKIE['user']);
  5. ?>
  7. <!doctype html>
  8. <html lang="en">
  9. <head>
  10.     <meta charset="UTF-8">
  11.     <title>首页</title>
  12.     <style>
  13.         nav {
  14.             height: 60px;
  15.             background-color: black;
  16.             padding: 0 20px;
  17.             display: flex;
  18.             justify-content: space-between;
  19.             align-items: center;
  20.         }
  21.         nav a {
  22.             color: white;
  23.             text-decoration: none;
  24.         }
  26.         div {
  27.             display: flex;
  28.             align-items: center;
  29.         }
  30.         nav img {
  31.             width: 40px;
  32.             border-radius: 50%;
  33.             margin-right: 10px;
  34.         }
  35.     </style>
  36. </head>
  37. <body>
  38. <nav>
  39.     <a href="index.php">我的博客</a>
  40.     <div>
  41.         <?php if (isset($user)) : ?>
  42.             <a href=""><img src="user.jpg" alt=""></a>
  43.             <a href="" id="logout"><span style="color:red"><?php echo $user['name']?></span>&nbsp;&nbsp;退出</a>
  44.         <?php else: ?>
  45.             <a href="login.php">登录</a>
  46.         <?php endif ?>
  47.     </div>
  48. </nav>
  50. <script>
  51.     // 为退出按钮创建事件监听器
  52.     if (document.querySelector('#logout') !== null) {
  53.         document.querySelector('#logout').addEventListener('click', function(event) {
  54.             if (confirm('是否退出')) {
  55.                 // 禁用默认行为, 其实就是禁用原<a>标签的点击跳转行为,使用事件中的自定义方法处理
  56.                 event.preventDefault();
  57.                 // 跳转到退出事件处理器
  58.                 window.location.assign('handle.php?action=logout');
  59.             }
  60.         });
  61.     }
  62. </script>
  64. </body>
  65. </html>

登录：

  1. <?php
  2. // 判断是否已登录
  3. if (isset($_COOKIE['user']))
  4. exit('<script>alert("请不要重复登录");location.href="index.php";</script>');
  5. ?>
  7. <!doctype html>
  8. <html lang="en">
  9. <head>
  10.     <meta charset="UTF-8">
  11.     <title>登录</title>
  12.     <style>
  14.         body {
  15.             display: flex;
  16.             flex-direction: column;
  17.             text-align: center;
  18.             color: #555;
  19.             font-weight: 300;
  20.         }
  21.         body h3 {
  22.             font-weight: 300;
  23.             font-size: 20px;
  24.             margin-bottom: 10px;
  25.         }
  26.         body form {
  27.             width: 260px;
  28.             padding: 20px;
  29.             box-sizing: border-box;
  30.             background-color: lightcyan;
  31.             margin: auto;
  32.             border-radius: 5px;
  33.             box-shadow: 0 0 5px #aaa;
  34.         }
  35.         body form > div {
  36.             height: 36px;
  37.             display: flex;
  38.             justify-content: space-between;
  39.             align-items: center;
  40.         }
  41.         body form div:last-of-type {
  42.             display: flex;
  43.             justify-content: center;
  44.         }
  45.         body form input {
  46.             border: none;
  47.             outline: none;
  48.             padding-left: 5px;
  49.             height: 20px;
  50.         }
  51.         body form input:hover {
  52.             box-shadow: 0 0 5px #aaa;
  53.         }
  54.         body form button {
  55.             flex:auto;
  56.             height: 30px;
  57.             background-color: green;
  58.             color: white;
  59.             border: none;
  60.             outline: none;
  61.         }
  62.         body form button:hover {
  63.             background-color: lightcoral;
  64.             cursor: pointer;
  65.             box-shadow: 0 0 5px #aaa;
  66.         }
  67.         body a {
  68.             color: #888;
  69.             text-decoration: none;
  70.             margin-top: 15px;
  71.         }
  72.         body a:hover {
  73.             color: lightcoral;
  74.         }
  76.     </style>
  77. </head>
  78. <body>
  79. <h3>用户登录</h3>
  80. <form action="handle.php?action=login" method="post">
  81.     <div>
  82.         <label for="email">邮箱:</label>
  83.         <input type="email" name="email" id="email" placeholder="demo@email.com" required autofocus>
  84.     </div>
  86.     <div>
  87.         <label for="password">密码:</label>
  88.         <input type="password" name="password" id="password" placeholder="不少于6位" required>
  89.     </div>
  91.     <div>
  92.         <button>提交</button>
  93.     </div>
  94. </form>
  95. <a href="register.php">还没有帐号, 注册一个吧</a>
  96. </body>
  97. </html>

注册：

  1. <!doctype html>
  2. <html lang="en">
  3. <head>
  4.     <meta charset="UTF-8">
  5.     <title>注册</title>
  6.     <style>
  8.         body {
  9.             display: flex;
  10.             flex-direction: column;
  11.             text-align: center;
  12.             color: #555;
  13.             font-weight: 300;
  14.         }
  15.         body h3 {
  16.             font-weight: 300;
  17.             font-size: 20px;
  18.             margin-bottom: 10px;
  19.         }
  20.         body form {
  21.             width: 260px;
  22.             padding: 20px;
  23.             box-sizing: border-box;
  24.             background-color: lightcyan;
  25.             margin: auto;
  26.             border-radius: 5px;
  27.             box-shadow: 0 0 5px #aaa;
  28.         }
  29.         body form > div {
  30.             height: 36px;
  31.             display: flex;
  32.             justify-content: space-between;
  33.             align-items: center;
  34.         }
  35.         body form div:last-of-type {
  36.             display: flex;
  37.             justify-content: center;
  38.         }
  39.         body form input {
  40.             border: none;
  41.             outline: none;
  42.             padding-left: 5px;
  43.             height: 20px;
  44.         }
  45.         body form input:hover {
  46.             box-shadow: 0 0 5px #aaa;
  47.         }
  48.         body form button {
  49.             flex:auto;
  50.             height: 30px;
  51.             background-color: green;
  52.             color: white;
  53.             border: none;
  54.             outline: none;
  55.         }
  56.         body form button:hover {
  57.             background-color: lightcoral;
  58.             cursor: pointer;
  59.             box-shadow: 0 0 5px #aaa;
  60.         }
  61.         body a {
  62.             color: #888;
  63.             text-decoration: none;
  64.             margin-top: 15px;
  65.         }
  66.         body a:hover {
  67.             color: lightcoral;
  68.         }
  69.     </style>
  70. </head>
  71. <body>
  72.     <h3>用户注册</h3>
  73.     <form action="handle.php?action=register" method="post" onsubmit="return compare()">
  74.         <div>
  75.             <label for="name">呢称:</label>
  76.             <input type="text" name="name" id="name" placeholder="不少于3个字符" required autofocus>
  77.         </div>
  78.         <div>
  79.             <label for="email">邮箱:</label>
  80.             <input type="email" name="email" id="email" placeholder="demo@email.com" required>
  81.         </div>
  83.         <div>
  84.             <label for="p1">密码:</label>
  85.             <input type="password" name="p1" id="p1" placeholder="不少于6位" required>
  86.         </div>
  88.         <div>
  89.             <label for="p2">重复:</label>
  90.             <input type="password" name="p2" id="p2" placeholder="必须与上面一致" required>
  91.         </div>
  93.         <div>
  94.             <button>提交</button><span id="tips" style="color: red"></span>
  95.         </div>
  96.     </form>
  97.     <a href="login.php">我有帐号,直接登录</a>
  100.     <script>
  101.         // 验证二次密码是否相等?
  102.         function compare() {
  103.             if (document.forms[0].p1.value.trim() !== document.forms[0].p2.value.trim()) {
  104.                 document.querySelector('#tips').innerText = '二次密码不相等';
  105.                 return false;
  106.             }
  107.         }
  108.     </script>
  109. </body>
  110. </html>

控制器：

  1. <?php
  3. // 数据库查询用户资料
  4. $pdo = new PDO('mysql:host=localhost;dbname=phpedu', 'root', 'root');
  5. $stmt = $pdo->prepare('SELECT * FROM `users`');
  6. $stmt->execute();
  7. $users = $stmt->fetchAll(PDO::FETCH_ASSOC);
  9. // print_r($users);die;
  11. // 1. 验证请求来源的合法性
  12. // 设置合法请求地址的白名单
  13. $allowUrls = ['index.php', 'login.php', 'register.php'];
  15. // 获取当前的请求入口地址
  16. //basename():获取当前请求脚本名称
  17. $currentUrl = basename(filter_input(INPUT_SERVER, 'HTTP_REFERER'));
  19. //in_array(),判断当前请求在不在白名单
  20. if(!in_array($currentUrl, $allowUrls)){
  21.     echo '非法来源';
  22. }else{
  23.     // echo '合法来源';
  24. }
  26. // 2.进行请求分发处理
  28. //获取当前请求
  29. // echo $_GET['action'];
  30. //过滤处理, strtolower():字符串转为小写
  31. $action = strtolower(filter_input(INPUT_GET, 'action', FILTER_SANITIZE_STRING));
  33. //switch判断当前请求
  35. switch($action){
  36.     //登录
  37.     case 'login':
  38.         //判断是否是POST请求？
  39.         if(filter_input(INPUT_SERVER, 'REQUEST_METHOD') === 'POST'){
  40.             //获取当前请求的值:+清理特殊字符
  41.             $email = filter_var(filter_input(INPUT_POST, 'email', FILTER_VALIDATE_EMAIL), FILTER_SANITIZE_EMAIL);
  42.             $password = sha1(filter_input(INPUT_POST, 'password'));
  43.             // echo $email, $password .'<hr>';
  45.             //array_filter从数组中获取满足条件的值
  46.             $results = array_filter($users, function ($user)use($email, $password){
  47.                 return $email === $user['email'] && $password === $user['password'];
  48.             });
  49.             // print_r($results);die;
  50.             if(count($results) === 1) {
  51.                 //判断满足条件的指令数量=1？设置cookie
  52.                 //array_pop()=$results[0]
  53.                 setcookie('user', serialize(array_pop($results)));
  54.                 //print_r(unserialize($_COOKIE['user']));
  55.                 exit('<script>alert("验证通过");location.href="index.php"</script>');
  56.             }else{
  57.                 exit('<script>alert("邮箱或密码错误,或没有帐号");location.href="register.php"</script>');
  58.             }
  59.         }else{
  60.             exit('非法请求。');
  61.         }
  62.         break;
  64.     //退出
  65.     case 'logout':
  66.         if (isset($_COOKIE['user'])) {
  67.             setcookie('user', null , time()-3600);
  68.             exit('<script>alert("退出成功");location.assign("index.php")</script>');
  69.         }
  70.         break;
  72.     //注册
  73.     case 'register':
  74.         $name = filter_var(filter_input(INPUT_POST, 'name'), FILTER_SANITIZE_SPECIAL_CHARS);
  75.         $email = filter_var(filter_input(INPUT_POST, 'email', FILTER_VALIDATE_EMAIL), FILTER_SANITIZE_EMAIL);
  76.         $password = sha1(filter_input(INPUT_POST, 'p1'));
  77.         $register_time = time();
  78.         // echo $name .$email .$password .$register_time;die;
  80.         // 2. 将新用户插入到表中
  81.         $sql = "INSERT `users` SET `name`='{$name}', `password`='{$password}', `email`='{$email}', `register_time`={$register_time}";
  82.         $stmt = $pdo->prepare($sql);
  83.         $stmt->execute();
  84.         if ($stmt->rowCount() === 1) exit('<script>alert("注册成功");location.assign("login.php")</script>');
  85.         else exit('<script>alert("注册失败");location.assign("login.php")</script>');
  86.         break;
  88.     //未定义操作
  89.     default:
  90.         exit('未定义操作');
  91. }

效果图：

首页：

登录：

注册：

SESSION

1、数据保存在服务器上
2、启动session：session_start()
3、创建session：$_SESSION['名称']=值
4、使用session：$_SESSION['名称']
5、删除单个session：unset($_SESSION['名称'])
6、删除所有的session：session_unset()
7、销毁session：session_destory()

演示代码

首页：

  1. <?php
  3. // 开启会话
  4. session_start();
  6. // 判断是否已经登录?
  7. if (isset($_SESSION['user'])) $user = unserialize($_SESSION['user']);
  8. ?>

登录：

  1. <?php
  3. // 开启会话
  4. session_start();
  6. // 判断是否已登录
  7. if (isset($_SESSION['user']))
  8.     exit('<script>alert("请不要重复登录");location.href="index.php";</script>');
  9. ?>

控制器：

  1. <?php
  3. // 开启会话
  4. session_start();
  5. // ......
  7. if(count($results) === 1) {
  8.                 //判断满足条件的指令数量=1？设置cookie
  9.                 //array_pop()=$results[0]
  10.                 $_SESSION['user'] = serialize(array_pop($results));
  11.                 //print_r(unserialize($_COOKIE['user']));
  12.                 exit('<script>alert("验证通过");location.href="index.php"</script>');
  13.             }else{
  14.                 exit('<script>alert("邮箱或密码错误,或没有帐号");location.href="register.php"</script>');
  15.             }
  18. case 'logout':
  19.         if (isset($_SESSION['user'])) {
  20.             session_destroy();
  21.             exit('<script>alert("退出成功");location.assign("index.php")</script>');
  22.         }
  23.         break;

总结：cookie、session都不是很难，我觉得难的是设置cookie和session之前的数据处理与及控制器逻辑。

Correcting teacher：天蓬老师天蓬老师

Correction status：qualified

Teacher's comments：是的, 整个业务逻辑才是重点, 到于将用户数据存储在哪, 完全由程序员决定 , 而且就几行代码
Statement of this Website
The copyright of this blog article belongs to the blogger. Please specify the address when reprinting! If there is any infringement or violation of the law, please contact admin@php.cn Report processing!
All comments Speak rationally on civilized internet, please comply with News Comment Service Agreement
0 comments
Author's latest blog post