php - 未登录php时如何重定向
问题描述
我现在在我的登录表单中建立了一个 PHP 登录网络,人们可以登录,如果信息正确,他们将被重定向到 welcome.php。现在任何人都可以直接访问这个页面我怎么能做到这一点,只要有人没有登录,那么他们应该被重定向到 login.php 这是我的登录代码
<?php
require_once "config.php";
// Initialize the session
session_start();
// Check if the user is already logged in, if yes then redirect him to welcome page
if(isset($_SESSION["loggedin"]) && $_SESSION["loggedin"] === true){
header("location: welcome.php");
exit;
}
// Include config file
// Define variables and initialize with empty values
$username = $password = "";
$username_err = $password_err = "";
// Processing form data when form is submitted
if($_SERVER["REQUEST_METHOD"] == "POST"){
// Check if username is empty
if(empty(trim($_POST["username"]))){
$username_err = "Please enter username.";
} else{
$username = trim($_POST["username"]);
}
// Check if password is empty
if(empty(trim($_POST["password"]))){
$password_err = "Please enter your password.";
} else{
$password = trim($_POST["password"]);
}
// Validate credentials
if(empty($username_err) && empty($password_err)){
// Prepare a select statement
$sql = "SELECT id, username, password FROM users WHERE username = ?";
if($stmt = mysqli_prepare($con, $sql)){
// Bind variables to the prepared statement as parameters
mysqli_stmt_bind_param($stmt, "s", $param_username);
// Set parameters
$param_username = $username;
// Attempt to execute the prepared statement
if(mysqli_stmt_execute($stmt)){
// Store result
mysqli_stmt_store_result($stmt);
// Check if username exists, if yes then verify password
if(mysqli_stmt_num_rows($stmt) == 1){
// Bind result variables
mysqli_stmt_bind_result($stmt, $id, $username, $hashed_password);
if(mysqli_stmt_fetch($stmt)){
if(password_verify($password, $hashed_password)){
// Password is correct, so start a new session
session_start();
// Store data in session variables
$_SESSION["loggedin"] = true;
$_SESSION["id"] = $id;
$_SESSION["username"] = $username;
// Redirect user to welcome page
header("location: welcome.php");
} else{
// Display an error message if password is not valid
$password_err = "The password you entered was not valid.";
}
}
} else{
// Display an error message if username doesn't exist
$username_err = "No account found with that username.";
}
} else{
echo "Oops! Something went wrong. Please try again later.";
}
}
// Close statement
mysqli_stmt_close($stmt);
}
// Close connection
mysqli_close($con);
}
?>
我已经在welcome.php 中尝试过,但没有工作
<?php
session_start();
include 'config.php';
if (empty($_SESSION['user'])) {
header('Location: index.php');
exit;
}
?>
解决方案
在welcome.php 中,您应该更好地检查用户当前状态。
像登录页面一样,您应该检查在您的代码中按名称设置的用户 cookie $_SESSION['loggedin']
要检查用户是否拥有该 cookie 并且 cookie 设置为 true,请使用此代码
if(isset($_SESSION["loggedin"]) && $_SESSION["loggedin"] === true){
header("location: login.php");
}
推荐阅读
- javascript - 编译 TypeScript 时如何处理外部模块?
- c# - 尝试在 MS TEAMS 频道中发送自适应卡时,Bot 抛出“操作返回无效状态代码 'RequestEntityTooLarge'”异常
- r - 在 R 中删除具有聚合组的重复项
- laravel - Laravel加载主模型不起作用的多态相关模型
- php - 将现有记录重新排序和重新标识到具有相同结构的新表中
- java - 从串行端口读取时接收截断的数据
- python - “如何在 Python 中计算连续时间值的差异”
- firebase - 如何编写此履行代码(包括输出)?
- firebase - Firebase A/B 测试是否支持 REACT?
- azure - 什么是 Microsoft Azure Data Lake 存储 (Gen2) 中的分层命名空间?