PHP 작은 실용적인 권장 사항: 로그인 및 쿼리 기능 코드 예제의 PHP+mysql 구현

<form action="logincheck.php"method="post">

     Yonghu:<inputtype="text" name="username" />

  <br />

  Mima:<input type="password" name="password" />

  <br />

  <input type="submit" name="submit" value="登陆" ahref="logincheck.php" />

      

  <a href="register.php">zhuce:</a>
</form>

<?php

     if(isset($_POST["submit"])&& $_POST["submit"] == "登陆")

     {

          $user= $_POST["username"];

          $psw= $_POST["password"];

          if($user== "" || $psw == "")

          {

              echo"<script>alert(&#39;请输入用户名或密码！&#39;); history.go(-1);</script>";

          }

          else

          {

              $link= mysqli_connect(&#39;localhost&#39;, &#39;sa&#39;, &#39;123456&#39;,&#39;account&#39;);//链接数据库

              mysqli_select_db($link,"account");

              mysqli_query($link,&#39;setname utf8&#39;);

              $sql= "selectuser from zhanghu where user = &#39;$_POST[username]&#39;";

              $result=mysqli_query($link,$sql)or die("Failed".mysql_error());

              if($num=mysqli_num_rows($result))

              {

                   $row= mysqli_fetch_array($result);    //将数据以索引方式储存在数组中

                   echo"welcome ";

                   echo$row[0];

              }

              else

              {

                   echo"<script>alert(&#39;用户名或密码不正确！&#39;);history.go(-1);</script>";

              }

          }

     }

     else

     {

          echo"<script>alert(&#39;Submit Failed!&#39;);history.go(-1);</script>";

     }

 

?>

<?php

     $mysqli=newmysqli();             

     $mysqli->connect("localhost","sa", "123456");

     if(mysqli_connect_errno()) {

          printf("Failllllll:%s\n", mysqli_connect_error());

          exit();

     }

     $mysqli->select_db("booklib");  

     $mysqli->query("SETNAMES utf8");   

     $rsbooks= $mysqli->query("select * from books where Name like&#39;%$_POST[bookname]%&#39;");

  $row_rsbooks = $rsbooks->fetch_assoc();

  $totalRows_rsbooks = $rsbooks->num_rows;    

?> Totel

<?php echo $totalRows_rsbooks ?>books;

<table width="600"border="1">

 <tr>

  <td bgcolor="#99CCFF"align="center">Name</td>

  <td bgcolor="#99CCFF" align="center">ISBN</td>

  <td bgcolor="#99CCFF"align="center">Store</td>

  <td bgcolor="#99CCFF"align="center">Do</td>

 </tr>

 <?php do { ?>

  <tr>

   <td><?php echo $row_rsbooks[&#39;Name&#39;]; ?></td>

   <td><?php echo $row_rsbooks[&#39;ISBN&#39;]; ?></td>

   <td><?php echo $row_rsbooks[&#39;Store&#39;]; ?></td>

   <td><fontcolor="#110BAA">rent</font></td>

  </tr>

  <?php } while ($row_rsbooks = $rsbooks->fetch_assoc()); ?>

</table>

<?php

 $rsbooks->close(); 

 $mysqli->close();

?>