if ($username == $row['username'] && $pwd == $row['password'])
Isn’t the above sql already judged?
It should be more rigorous. You can judge some other logic in the if, such as whether the user is bound, etc.
It should be more rigorous. You can judge some other logic in the if, such as whether the user is bound, etc.