简体中文(ZH-CN) English(EN) 繁体中文(ZH-TW) 日本語(JA) 한국어(KO) Melayu(MS) Français(FR) Deutsch(DE)
Home > List of blog posts > PHP基础-会话控制和登录小实战
Blogger Information
Blog 57
fans 3
comment 0
visits 59782
Special Recommendation
More>
Related recommendations
Popular Tutorials
More>
Related Tutorials
Popular Recommendations
Latest courses
Latest Downloads
More>
Web Effects
Website Source Code
Website Materials
Front End Template
PHP基础-会话控制和登录小实战
岂几岂几
Original
886 people have browsed it

会话控制和登录小实战

1. 会话控制

  • HTTP 是基于无连接的网络协议, 每一次访问, 对于服务器来说, 都是全新的

  • 有两个地方可以实现多次请求之间共享数据:

    1. 保存到浏览器中的叫: cookie;

    2. 保存到服务器中的叫: session;

COOKIE操作

  • 创建COOKIE: 使用setcookie()函数.

    • 使用语法:

      1.   bool setcookie  (
      2.       string $名字
      3.       [, string $值]
      4.       [, int $过期时间  = 0]
      5.       [, string $路径]
      6.       [, string $域名]
      7.       [, bool $安全  = false]
      8.       [, bool $http只读  = false]
      9.   );

    • 参数含义:

      1. $名字 必需。规定 cookie 的名称。
      2. $值 可选。规定 cookie 的值。
      3. $有效期 可选。规定 cookie 的有效期。要记住，是time() + 有效期秒数. 值为0则表示永久有效。值为负数则表示跟session生命周期一样。
      4. $路径 可选。规定 cookie 的服务器路径。
      5. $域名 可选。规定 cookie 的域名。
      6. $安全 可选。规定是否通过安全的 HTTPS 连接来传输 cookie。
      7. $http安读 可选。如果true，那么js就无法读取改cookie，增加安全性。

    • 举例:

      1. setcookie('loginuser', 'zhangsan', time() + 60 * 60 * 24, '/');
      3. setcookie('manager', 'admin', time() + 60 * 20, '/admin');

  • 获取COOKIE的值: 通过操作超全局数组$_COOKIE实现. 假设COOKIE键名为$cookieName, 则获取其值: $_COOKIE[$cookieName].

  • 修改COOKIE的值:

    • 方法1: 跟取值类似. 假设COOKIE键名为$cookieName, 则修改其值: $_COOKIE[$cookieName] = 新值.

    • 方法2: 相当于使用setcookie()函数再”覆盖创建”一次同键名的COOKIE.

  • 删除COOKIE: 就是用setcookie()给被销毁的cookie设置一个比当前时间早的时间，如：time() - 1;

一个特殊的COOKIE: PHPSESSID

3. SESSION

SESSION操作

  • 在PHP中session的操作就是操作$_SESSION超全局数组。

  • 开始操作前要启用session：session_start().

  • 将数据保存到SESSION中: $_SESSION['key1'] = "value1".

  • 删除单个session数据:用unset。删除全部session数据：session_destroy().

4. 登录小实战

  • 创建库表
  1. DROP DATABASE IF EXISTS `phpedu`;
  2. CREATE DATABASE `phpedu` /*!40100 DEFAULT CHARACTER SET utf8 */;
  3. USE `phpedu`;
  5. DROP TABLE IF EXISTS `users`;
  6. CREATE TABLE `users` (
  7.   `id` int(11) unsigned NOT NULL AUTO_INCREMENT,
  8.   `username` varchar(50) NOT NULL,
  9.   `password` varchar(50) NOT NULL,
  10.   `realname` varchar(50) NOT NULL,
  11.   `sex` int(1) NOT NULL DEFAULT '0',
  12.   `in_use` int(1) NOT NULL DEFAULT '1',
  13.   `create_time` int(11) NOT NULL,
  14.   `update_time` int(11) NOT NULL,
  15.   PRIMARY KEY (`id`)
  16. ) ENGINE=InnoDB DEFAULT CHARSET=utf8;
  • 创建初始数据

  • 页面文件(php/html)

    • 首页(index.php)

      1. <!DOCTYPE html>
      2. <html lang="en">
      4. <head>
      5.   <meta charset="UTF-8">
      6.   <meta name="viewport" content="width=device-width, initial-scale=1.0">
      7.   <title>登录小实战</title>
      8.   <style>
      9.       @import 'css/global.css';
      10.       @import 'css/index.css';
      11.   </style>
      12. </head>
      13. <?php
      14. require('UserStorage.php');
      16. // $userStorage = new UserStorage(1);
      17. $userStorage = new UserStorage(2);
      18. ?>
      20. <body>
      21.   <!-- <header> -->
      22.   <nav class="top-bar">
      23.       <span>LOGO</span>
      24.       <?php if ($userStorage->isLogin()) : ?>
      25.           <div class="user-info">
      26.               <span>你好, <?php echo $userStorage->getUserInfo()['realname'] ?? '没登录' ?></span>
      27.               <a href="doBusiness.php?action=logout">注销</a>
      28.           </div>
      29.       <?php else : ?>
      30.           <div class="user-opra">
      31.               <a href="login.html">登录</a>
      32.               <a href="register.html">注册</a>
      33.           </div>
      34.       <?php endif; ?>
      35.   </nav>
      36.   <!-- </header> -->
      37. </body>
      39. </html>

    • 注册页(register.html)

      1. <!DOCTYPE html>
      2. <html lang="en">
      4. <head>
      5.   <meta charset="UTF-8">
      6.   <meta name="viewport" content="width=device-width, initial-scale=1.0">
      7.   <title>用户注册</title>
      8.   <style>
      9.       @import 'css/global.css';
      11.       @import 'css/register.css';
      13.   </style>
      14. </head>
      16. <body>
      17.   <form action="doBusiness.php?action=register" method="post">
      18.       <section class="register-box">
      19.           <div class="register-title">
      20.               <span>注册新用户</span>
      21.           </div>
      23.           <div class="register-content">
      24.               <div class="register-item">
      25.                   <label for="username">用户名:</label>
      26.                   <input type="text" name="username" id="username" autofocus required>
      27.               </div>
      28.               <div class="register-item">
      29.                   <label for="password">密码:</label>
      30.                   <input type="password" name="password" id="password" required>
      31.               </div>
      32.               <div class="register-item">
      33.                   <label for="repassword">确认密码:</label>
      34.                   <input type="password" name="repassword" id="repassword" required>
      35.               </div>
      36.               <div class="register-item">
      37.                   <label for="realname">姓名</label>
      38.                   <input type="text" name="realname" id="realname" required>
      39.               </div>
      40.               <div class="register-item">
      41.                   <label for="sex_2">性别</label>
      42.                   <div class="radio-item"><input type="radio" name="sex" id="sex_0" value="0"><label
      43.                           for="sex_0">男</label>
      44.                   </div>
      45.                   <div class="radio-item"><input type="radio" name="sex" id="sex_1" value="1"><label
      46.                           for="sex_1">女</label>
      47.                   </div>
      48.                   <div class="radio-item"><input type="radio" name="sex" id="sex_2" value="2" checked><label
      49.                           for="sex_2">保密</label></div>
      50.               </div>
      51.               <div class="register-item">
      52.                   <button type="submit">提交</button>
      53.               </div>
      55.           </div>
      56.           <div class="goto-login">
      57.               <a href="login.html">已有账号, 去登录 >></a>
      58.           </div>
      59.       </section>
      60.   </form>
      61. </body>
      63. </html>

    • 登录页(login.html)

      1. <!DOCTYPE html>
      2. <html lang="en">
      4. <head>
      5. <meta charset="UTF-8" />
      6. <meta name="viewport" content="width=device-width, initial-scale=1.0" />
      7. <title>用户登陆</title>
      8. <style>
      9.   @import "css/global.css";
      11.   @import "css/login.css";
      12. </style>
      13. </head>
      15. <body>
      16. <form action="doBusiness.php?action=login" method="post">
      17.   <section class="login-box">
      18.     <div class="login-title">
      19.       <span>用户登录</span>
      20.     </div>
      21.     <div class="login-content">
      22.       <div class="login-item">
      23.         <label for="username">用户名：</label>
      24.         <input type="text" name="username" id="username" required autofocus />
      25.       </div>
      26.       <div class="login-item">
      27.         <label for="password">密码：</label>
      28.         <input type="password" name="password" id="password" />
      29.       </div>
      30.       <div class="login-item">
      31.         <button type="submit">登陆</button>
      32.       </div>
      33.     </div>
      34.     <div class="goto-register">
      35.       <a href="register.html">还没有账号?赶紧去注册一个吧 >></a>
      36.     </div>
      37.   </section>
      38. </form>
      39. </body>
      41. </html>

  • css文件

    • global.css

      1.   * {
      2.       padding: 0;
      3.       margin: 0;
      4.       box-sizing: border-box;
      5.   }
      7.   html {
      8.       font-family: Helvetica, Geneva, Verdana, Arial;
      9.   }
      11.   body {
      12.       width: 100vw;
      13.       height: 100vh;
      14.   }

    • index.css

      1.   .top-bar {
      2.   height: 60px;
      3.   width: 100vw;
      4.   background-color: #ccc;
      5.   padding: 0 20px;
      7.   display: flex;
      8.   flex-flow: row nowrap;
      9.   justify-content: space-between;
      10.   align-items: center;
      11. }
      13. .top-bar>:first-child {
      14.   font-size: 30px;
      15. }
      17. .top-bar>:last-child>a {
      18.   color: #333;
      19.   text-decoration: none;
      20.   margin-left: 20px;
      21. }
      23. .top-bar>:last-child>a:hover {
      24.   color: red;
      25. }

    • register.css

  1. body {
  2.     display: table-cell;
  3.     vertical-align: middle;
  4.     background: #fafafa;
  5. }
  7. .register-box {
  8.     border: 1px solid #ddd;
  9.     width: 340px;
  10.     height: 340px;
  11.     margin: 0 auto;
  12.     background: white;
  13.     padding: 10px;
  14. }
  16. .register-box>.register-title {
  17.     height: 40px;
  18.     line-height: 30px;
  19.     padding: 0 20px;
  20.     font-size: 20px;
  21.     border-bottom: 1px solid #ddd;
  22.     color: #999;
  23. }
  25. .register-box>.register-content {
  26.     display: flex;
  27.     flex-flow: column nowrap;
  28.     justify-content: start;
  29.     align-items: start;
  30.     padding: 10px;
  31. }
  33. .register-box>.register-content>.register-item {
  34.     height: 40px;
  35.     line-height: 40px;
  36. }
  38. .register-box>.register-content>.register-item>label:first-of-type {
  39.     display: inline-block;
  40.     width: 80px;
  41.     color: #999;
  42.     text-align: justify;
  43. }
  45. .register-box>.register-content>.register-item input {
  46.     border: 1px solid #ddd;
  47.     height: 32px;
  48.     border-radius: 5px;
  49.     width: 200px;
  50. }
  52. .register-box>.register-content>.register-item:nth-last-child(2) {
  53.     display: flex;
  54.     flex-flow: row wrap;
  55.     justify-content: left;
  56.     align-content: center;
  57. }
  59. .register-box>.register-content>.register-item:nth-last-child(2) input {
  60.     width: 30px;
  61.     vertical-align: middle;
  62.     color: #999;
  63.     height: unset;
  64. }
  66. .register-box>.register-content>.register-item:nth-last-child(2) input:hover {
  67.     cursor: pointer;
  68. }
  70. .register-box>.register-content>.register-item:nth-last-child(2) label {
  71.     color: #999;
  72. }
  74. .register-box>.register-content>.register-item:nth-last-child(2) label:hover {
  75.     cursor: pointer;
  76. }
  78. button {
  79.     border: none;
  80.     height: 30px;
  81.     width: 280px;
  82. }
  84. button:hover {
  85.     background-color: #ccc;
  86.     cursor: pointer;
  87.     color: orangered;
  88. }
  91. .goto-login {
  92.     margin-top: 40px;
  93.     text-align: center;
  94. }
  96. .goto-login>a {
  97.     color: orangered;
  98.     text-decoration: none;
  99. }
  101. .goto-login>a:hover {
  102.     cursor: pointer;
  103.     color: darkgreen;
  104. }
  1. - login.css
  1. body {
  2.   display: table-cell;
  3.   vertical-align: middle;
  4.   background-color: #fafafa;
  5. }
  7. .login-box {
  8.   width: 340px;
  9.   height: 220px;
  10.   background-color: #fff;
  11.   margin: 0 auto;
  12.   padding: 10px;
  13. }
  15. .login-box > .login-title {
  16.   height: 40px;
  17.   line-height: 30px;
  18.   font-size: 1.5rem;
  19.   text-align: center;
  20.   color: #aaa;
  21.   border-bottom: 1px solid #ddd;
  22. }
  24. .login-box > .login-content {
  25.   display: flex;
  26.   flex-flow: column nowrap;
  27.   padding: 10px;
  28.   justify-content: start;
  29.   align-items: flex-start;
  30.   color: #aaa;
  31. }
  33. .login-box > .login-content > .login-item {
  34.   height: 40px;
  35.   line-height: 40px;
  36.   vertical-align: middle;
  37.   width: 100%;
  38. }
  40. .login-box > .login-content > .login-item > label {
  41.   display: inline-block;
  42.   width: 80px;
  43.   text-align-last: justify;
  44. }
  46. .login-box > .login-content > .login-item > input {
  47.   height: 32px;
  48.   border: 1px solid #aaa;
  49.   border-radius: 5px;
  50.   width: 200px;
  51. }
  53. .login-box > .login-content > .login-item > button {
  54.   border: none;
  55.   height: 30px;
  56.   line-height: 30px;
  57.   width: 100%;
  58.   margin-top: 30px;
  59.   color: #333;
  60. }
  62. .login-box > .login-content > .login-item > button:hover {
  63.   background-color: #aaa;
  64.   cursor: pointer;
  65.   color: orangered;
  66. }
  68. .goto-register {
  69.   margin-top: 50px;
  70.   text-align: center;
  71. }
  73. .goto-register>a {
  74.   color: orangered;
  75.   text-decoration: none;
  76. }
  78. .goto-register>a:hover {
  79.   cursor: pointer;
  80.   color: darkgreen;
  81. }

  • PHP脚本

    • 请求分发类doBusiness.php
  1. <?php
  2. require('../../out.php');
  3. require('UserStorage.php');
  4. require('UserLogin.php');
  6. // $userStorage = new UserStorage(1);
  7. $userStorage = new UserStorage(2);
  10. try {
  11.     $pdo = new PDO('mysql:host=localhost;dbname=phpedu;charset=utf8;port=3306', 'root', 'root');
  12. } catch (Exception $ex) {
  13.     echobr('系统内部错误');
  14.     die;
  15. }
  18. // 处理用户表相关操作
  19. $action = $_GET['action'];
  21. $userLogin = new UserLogin($pdo, $userStorage);
  23. switch ($action) {
  24.     case 'register':
  25.         $userLogin->doRegister();
  26.         break;
  27.     case 'login':
  28.         $userLogin->doLogin();
  29.         break;
  30.     case 'logout':
  31.         $userLogin->doLogout();
  32.         break;
  33.     default:
  34.         echo "<script>alert('无法处理的请求');window.location = '/0508/index.php';</script>";
  35. }
  1. - 会话管理类UserStorage.php
  1. <?php
  2. class UserStorage
  3. {
  4.     /* 1=cookie; 2=session */
  5.     public $storageType = 1;
  7.     public function __construct(int $storageType)
  8.     {
  9.         try {
  10.             if ($storageType !== 1 && $storageType !== 2) {
  11.                 throw new Exception("无效的存储类型");
  12.             }
  14.             $this->storageType = $storageType;
  15.         } catch (Exception $e) {
  16.             echobr($e->getMessage());
  17.             die;
  18.         }
  19.     }
  21.     public function getUserInfo()
  22.     {
  23.         if (!$this->isLogin()) {
  24.             return [];
  25.         }
  27.         if ($this->storageType === 1) {
  28.             return unserialize($_COOKIE['loginUser']);
  29.         }
  30.         session_start();
  31.         return unserialize($_SESSION['loginUser']);
  32.     }
  34.     public function rmUserInfo()
  35.     {
  36.         if ($this->storageType === 1) {
  37.             setcookie('loginUser', null, time() - 3600 * 24, '/');
  38.         } else {
  39.             session_start();
  40.             unset($_SESSION['loginUser']);
  41.         }
  42.     }
  44.     public function saveUserInfo($userStr)
  45.     {
  46.         if ($this->storageType === 1) {
  47.             $this->saveUserInfo2Cookie($userStr);
  48.         } else {
  49.             $this->saveUserInfo2Session($userStr);
  50.         }
  51.     }
  53.     public function saveUserInfo2Cookie($userStr)
  54.     {
  55.         setcookie('loginUser', $userStr, time() + 3600 * 24, '/');
  56.     }
  58.     public function saveUserInfo2Session($userStr)
  59.     {
  60.         session_start();
  61.         $_SESSION['loginUser'] = $userStr;
  62.     }
  64.     public function isLogin()
  65.     {
  66.         if ($this->storageType === 1) {
  67.             return $this->isLoginInCookie();
  68.         }
  69.         return $this->isLoginInSession();
  70.     }
  72.     public function isLoginInCookie()
  73.     {
  74.         if (isset($_COOKIE['loginUser']) && !empty($_COOKIE['loginUser'])) {
  75.             return true;
  76.         }
  78.         return false;
  79.     }
  81.     public function isLoginInSession()
  82.     {
  83.         session_start();
  84.         if (isset($_SESSION['loginUser']) && !empty($_SESSION['loginUser'])) {
  85.             return true;
  86.         }
  88.         return false;
  89.     }
  90. }
  1. - 登录相关操作类:UserLogin.php
  1. <?php
  2. require_once('UserStorage.php');
  4. class UserLogin
  5. {
  6.     private $pdo;
  7.     private $userStorage;
  9.     public function __construct(PDO $pdo, UserStorage $userStorage)
  10.     {
  11.         $this->pdo = $pdo;
  12.         $this->userStorage = $userStorage;
  13.     }
  15.     public function doRegister()
  16.     {
  17.         /* 解构post请求中的变量 */
  18.         extract($_POST);
  20.         // 数据验证    
  21.         if (strlen($username) < 3 || strlen($username) > 20) {
  22.             echobr("<script>alert('用户名长度需在6-20位之间');window.history.go(-1);</script>");
  23.             exit;
  24.         }
  26.         if (strlen($password) < 6 || strlen($password) > 15) {
  27.             echobr("<script>alert('密码长度需在6-15位之间');window.history.go(-1);</script>");
  28.             exit;
  29.         }
  31.         if ($password !== $repassword) {
  32.             echobr("<script>alert('两次输入的密码不一致');window.history.go(-1);</script>");
  33.             exit;
  34.         }
  36.         // 用户名验证
  37.         $sql = 'SELECT * FROM `users` WHERE `username` = :username';
  38.         $stmt = $this->pdo->prepare($sql);
  39.         $stmt->execute(['username' => $username]);
  40.         if ($stmt->rowCount() > 0) {
  41.             echobr("<script>alert('用户名已被使用');window.history.go(-1);</script>");
  42.             exit;
  43.         }
  45.         // 保存新用户
  46.         $sql = 'INSERT `users` SET `username` = :username, `password` = :pswd, `realname` = :realname, `sex` = :sex, `update_time` = :update_time, `create_time` = :create_time';
  47.         $stmt = $this->pdo->prepare($sql);
  48.         $stmt->execute(['username' => $username, 'pswd' => md5($password), 'realname' => $realname, 'sex' => $sex, 'update_time' => time(), 'create_time' => time()]);
  50.         dumpbr($stmt->debugDumpParams());
  51.         if ($stmt->rowCount() === 1) {
  52.             echobr("<script>alert('注册成功');window.location='/0508/login/index.php'</script>");
  53.         } else {
  54.             echobr($stmt->errorInfo());
  55.             // echobr("<script>alert('注册失败, 请重试');window.history.go(-1);</script>");
  56.             echobr("<script>alert('注册失败, 请重试');</script>");
  57.         }
  58.     }
  61.     public function doLogin()
  62.     {
  63.         // 解构参数
  64.         extract($_POST);
  66.         // 判断是不是已登陆
  67.         if ($this->userStorage->isLogin()) {
  68.             echobr("<script>alert('请不要重复登陆');window.location='/0508/login/index.php'</script>");
  69.             exit;
  70.         }
  72.         // 查询用户信息
  73.         $sql = "SELECT * FROM `users` WHERE `username` = :username";
  74.         $stmt = $this->pdo->prepare($sql);
  75.         $stmt->execute(['username' => $username]);
  76.         if ($stmt->rowCount() < 1) {
  77.             echobr("<script>alert('用户名不存在');window.history.go(-1);</script>");
  78.             exit;
  79.         }
  80.         $user = $stmt->fetch(PDO::FETCH_ASSOC);
  81.         if (md5($password) !== $user['password']) {
  82.             echobr("<script>alert('密码不正确');window.history.go(-1);</script>");
  83.             exit;
  84.         }
  86.         // 去掉密码
  87.         unset($user['password']);
  88.         $userStr = serialize($user);
  90.         // 存到cookie或session中
  91.         $this->userStorage->saveUserInfo($userStr);
  92.         // 跳转回首页
  93.         echobr("<script>alert('登陆成功');window.location='/0508/login/index.php'</script>");
  94.     }
  96.     public function doLogout()
  97.     {
  98.         $this->userStorage->rmUserInfo();
  99.         echobr("<script>alert('注销成功');window.location='/0508/login/index.php';</script>");
  100.     }
  101. }

运行效果:

  • 首页

  • 注册页

  • 登录页

  • 登陆成功

  • 注销成功

学习心得

  • cookie和session个人把它们看成是在不同的请求之间共享数据的两个池子, 一个放在客户端(浏览器), 一个放在服务器端. 可以把一些不太敏感的数据放到cookie中, 可以减少服务器的性能消耗. 而一些比较敏感的数据, 类似用户积分等, 放在session中似乎更安全一些.

  • 登录小实战, 似乎是自己抽象能力不够强, 都是把所有的业务逻辑”按流程”写完后, 才封装整理成相应的操作类. 而数据库操作类, 感觉不封装反而使用起来更灵活一些. 属性过滤器的用法较简单, 但是因为过滤器的种类太多, 相关参数也很杂, 对于初学者, 使用它还没有使用if...else...判断来得快

Correcting teacher：天蓬老师天蓬老师

Correction status：qualified

Teacher's comments：第一: 前端的代码只需要html结构就可以不必提交css 第二: 类中的代码注释太少, 特别是每个方法前, 必须要有说明
Statement of this Website
The copyright of this blog article belongs to the blogger. Please specify the address when reprinting! If there is any infringement or violation of the law, please contact admin@php.cn Report processing!
All comments Speak rationally on civilized internet, please comply with News Comment Service Agreement
0 comments
Author's latest blog post
About us Disclaimer Sitemap
php.cn：Public welfare online PHP training，Help PHP learners grow quickly！