基于数据库的身份验证

基于数据库的身份验证

• 创建用户验证表

  CREATE TABLE logins(

  ​ id INTEGER UNSIGNED NOT NULL AUTO_INCREMENT PRIMARY KEY,

  ​ username VARCHAR(255) NOT NULL,

  ​ pswd CHAR(32) NOT NULL

  );

• 插入一个用户

  INSERT into logins (username,pswd) VALUES('admin','21232f297a57a5a743894a0e4a801fc3')

• simple_check.php

  <?php

  function authenticate_user(){
  header('WWW-Authenticate:Basic realm="Secret Stash"');
  header('HTTP/1.0 401 Unauthorized');
  exit;
  }
  if(!isset($_SERVER['PHP_AUTH_USER'])){
  authenticate_user();
  }
  else{
  $db = new mysqli("localhost","root","root","sql_practice");
  $stmt = $db->prepare("Select username,pswd FROM logins WHERE username=? AND pswd=md5(?)");
  $stmt->bind_param('ss',$_SERVER['PHP_AUTH_USER'],$_SERVER['PHP_AUTH_PW']);
  $stmt->execute();
  $stmt->store_result();
  if($stmt->num_rows == 0){
      authenticate_user();
  }
  else
      echo "Login Successfully";
  }

  ?>