关于万能密码的解决方案
1、使用预编译
2、改变验证数据库用户逻辑
//有没有查询到记录
//有用户存在
If(数据库查询的密码==用户输入的密码){
Header("admin.php");
}else
{
Header("ok.php");
}
代码实现:
<?php
functionshowTable($table_name){
$mysqli=newMySQLi("localhost","root","myoa888","phpstudy");
if(mysqli_connect_error()){
die(mysqli_connect_error());
}
$sql="select* from $table_name";
$res=$mysqli->query($sql);
echo"共有= ".$res->num_rows."行,共有=".$res->field_count."列";
//取表头
echo"<table border='1'><tr>";
while($field=$res->fetch_field()){
echo"<th>{$field->name}</th>";
}
echo"</tr>";
while($row=$res->fetch_row()){
echo"<tr>";
foreach($rowas $val){
echo"<td>$val</td>";
}
echo"</tr>";
echo"</tbale>";
}
$res->free();
$mysqli->close();
}
showTable("user1");