<?phpsession_start();header('Content-Type:text/html; charset=utf-8');class AdminAction extends Action{ public function index(){ if(isset($_POST['username'])){ if(isset($_POST['username'])&&isset($_POST['password'])){ $db=M(); $select=$db->query("select * from developers where username="'.$POST['username'].'" and password="'.$_POST['password'].'""); if($select){ $_SESSION['admin']=$_POST['username']; $this->redirect('Index/index','',2,'用户'.$_POST['username'].'登录成功!'); }else{ $this->redirect('Index/index','',2,'用户名或者密码不正确'); } }else{ $this->redirect('Index/index','',2,'用户名或密码不能为空!'); } } $this->display(); } } ?>
双引号里边还用双引号,另外还有单引号和链接符
username="'.$POST['username'].'"
username='{$POST['username']}'
and password="'.$_POST['password'].'"
??也要改
username="'.$POST['username'].'"
我去那个三个单引号在一起怎么打出来的?
username="'.$POST['username'].'"
我去那个三个单引号在一起怎么打出来的?
真愁人,神马三个单引号,是先单引号,再双引号。
username=\'".$POST['username']."\'
好吧 终于明白了