PHP会话控制session和cookie - 课后作业

Community Learn Tools Library Leisure

English

Home > List of blog posts > PHP会话控制session和cookie

Blogger Information

Blog 9

fans 1

comment 0

visits 7028

Special Recommendation

More>

Related recommendations

SESSION

1、数据保存在服务器上
2、启动session：session_start()
3、创建session：$_SESSION[‘名称’]=值
4、使用session：$_SESSION[‘名称’]
5、删除单个session：unset($_SESSION[‘名称’])
6、删除所有的session：session_unset()
7、销毁session：session_destory()

handle.php

<?php
//echo phpinfo();
// 开启会话
session_start();
// 查询用户表中的数据
$pdo = new PDO('mysql:host=localhost;dbname=phpedu','root','root');
$sql = 'SELECT * FROM `user`';
$stmt = $pdo->prepare($sql);
$stmt->execute();
$users = $stmt->fetchALL(PDO::FETCH_ASSOC);
// 处理用户登录与注册
$action = $_GET['action'];
switch(strtolower($action))
{
    case 'login':
        // 判断请求是否合t法
        if ($_SERVER['REQUEST_METHOD'] === 'POST') {
            // 获取需要验证的数据
            $email = $_POST['email'];
            $password = sha1($_POST['password']);
            //array_filter(): 用回调过滤数组中的单元,返回计算结果为true的元素组成的数组
            //判断验证的邮箱和密码是否在数据库中存在
            $results = array_filter($users, function($user) use ($email, $password) {
                return $user['email'] === $email && $user['password'] === $password;
            });
            if (count($results) === 1) {
                //将身份信息序列化存到session中
                $_SESSION['user'] = serialize(array_pop($results));
                //将身份信息序列化存到cookie中
                //setcookie('user', serialize(array_pop($results)));
                exit('<script>alert("验证通过");location.href="index.php"</script>');
            } else {
                exit('<script>alert("邮箱或密码错误,或者还没有帐号");location.href="login.php";</script>');
            }
        } else {
            die('请求类型错误');
        }
    break;
    case 'logout' :
        if(isset($_SESSION['user'])){
            unset($_SESSION);
            session_destroy();
            setcookie('user','',time()-3600);
            //将身份信息从cookie中删除
            //setcookie('user', null , time()-3600);
        }
    break;
    case 'register' :
        if($_SERVER['REQUEST_METHOD'] == 'POST'){
            $data['name'] = $_POST['name'];
            $data['email'] = $_POST['email'];
            $data['password'] = $_POST['p1'];
            $data['add_time'] = time();
            //注册前判断数据库只是否存在重复的邮箱
            $results = array_filter($users,function ($user) use($email){
                if($user['email'] == $email){
                    return false;
                }else{
                    return true;
                }
            });
//            $keys = array_keys($data);
//            $values = array_values($data);
//            array_walk($keys,function (&$item,$key){
//               $item = "`$item`";
//            });
//            array_walk($values,function (&$item,$key){
//                $item = "'$item'";
//            });
            //将获取到的数据封装成sql语句
            $keys = [];
            $values = [];
            array_walk($data,function ($item,$key){
               $keys[] = "`$key`";
               $values[] = "'$item'";
            });
            $keys = implode(',',$keys);
            $values = implode(',',$values);
            if($results){
                $sql = "INSERT `user` ($keys) VALUES ($values)";
                $stmt = $pdo->prepare($sql);
                $stmt->execute();
                if($stmt->rowCount() ===1)exit('<script>alert("注册成功");location.assign("login.php")</script>');
                else exit('<script>alert("注册失败");location.assign("login.php")</script>');
                break;
            }
        }else{
            die('请求类型错误');
        }
}

index.php

<?php
// 开启会话
session_start();
// 判断是否已经登录?
if (isset($_SESSION['user'])) $user = unserialize($_SESSION['user']);
?>
<!DOCTYPE html>
<html lang="en">
<head>
    <meta charset="UTF-8">
    <meta name="viewport" content="width=device-width, initial-scale=1.0">
    <link rel="stylesheet" type="text/css" href="./css/index.css">
    <title>首页</title>
</head>
<body>
    <nav>
        <a href="index.php">我的论坛</a>
        <?php if (isset($user)) : ?>
            <a href="" id="logout"><span style="color:red"><?php echo $user['name']?></span>&nbsp;&nbsp;退出</a>
        <?php else: ?>
        <a href="login.php">登录</a>
        <?php endif ?>
    </nav>
</body>
<script>
    //        为退出按钮创建事件监听器
document.querySelector('#logout').addEventListener('click', function(event) {
    if (confirm('是否退出')) {
        // 禁用默认行为, 其实就是禁用原<a>标签的点击跳转行为,使用事件中的自定义方法处理
        event.preventDefault();
        // 跳转到退出事件处理器
        window.location.assign('handle.php?action=logout');
    }
});
</script>
</html>

<?php
// 开启会话
session_start();
// 判断是否已登录
if (isset($_SESSION['user']))
    exit('<script>alert("请不要重复登录");location.href="index.php";</script>');
?>
<!DOCTYPE html>
<html lang="en">
<head>
    <meta charset="UTF-8">
    <title>用户登录</title>
    <link rel="stylesheet" type="text/css" href="./css/style.css?1.0">
</head>
<body>
    <h3>用户登录</h3>
    <form action="handle.php?action=login" method="post">
        <div>
            <label for="email">邮箱:</label>
            <input type="email" name="email" id="email" placeholder="demo@email.com" required autofocus>
        </div>
        <div>
            <label for="password">密码:</label>
            <input type="password" name="password" id="password" placeholder="不少于6位" required>
        </div>
        <div>
            <button>提交</button>
        </div>
    </form>
    <a href="register.php">还没有帐号, 注册一个吧</a>
</body>
</html>

register.php

<!DOCTYPE html>
<html lang="en">
<head>
    <meta charset="UTF-8">
    <meta name="viewport" content="width=device-width, initial-scale=1.0">
    <link rel="stylesheet" type="text/css" href="./css/style.css">
    <title>注册用户</title>
</head>
<body>
<h3>用户注册</h3>
        <form action="handle.php?action=register" method="post" onsubmit="return compare()">
            <div>
                <label for="name">呢称:</label>
                <input type="text" name="name" id="name" placeholder="不少于3个字符" required autofocus>
            </div>
            <div>
                <label for="email">邮箱:</label>
                <input type="email" name="email" id="email" placeholder="demo@email.com" required>
            </div>
            <div>
                <label for="p1">密码:</label>
                <input type="password" name="p1" id="p1" placeholder="不少于6位" required>
            </div>
            <div>
                <label for="p2">重复:</label>
                <input type="password" name="p2" id="p2" placeholder="必须与上面一致" required>
            </div>
            <div>
                <button>提交</button><span id="tips" style="color: red"></span>
            </div>
        </form>
        <a href="login.php">我有帐号,直接登录</a>
        <script>
            // 验证二次密码是否相等?
            function compare() {
                if (document.forms[0].p1.value.trim() !== document.forms[0].p2.value.trim()) {
                    document.querySelector('#tips').innerText = '二次密码不相等';
                    return false;
                }
            }
        </script>
</body>
</html>

Correcting teacher：

天蓬老师

Correction status：qualified

Teacher's comments：cookie与session其实是一对好兄弟, 谁也离不开谁的

Statement of this Website

The copyright of this blog article belongs to the blogger. Please specify the address when reprinting! If there is any infringement or violation of the law, please contact admin@php.cn Report processing!

All comments Speak rationally on civilized internet, please comply with News Comment Service Agreement

0 comments

Author's latest blog post

html基础知识

2020-04-04 16:44:38

COOKIE

SESSION

handle.php

index.php

login.php

register.php