第五讲登录

<meta charset="utf-8">
<?php 
	require_once('db_config.php');
	session_start();
	if (isset($_POST['ok'])) {
		# code...
		$name = $_POST['name'];
		$pwd = md5($_POST['pwd']);
		// 这地方要进行防止SQL注入攻击的功能
        $query_string = "select * from user where name='$name' and password='$pwd'";
        $rs = mysqli_query($link,$query_string);
        if (mysqli_num_rows($rs)==1) {
        	# code...
        	// echo "welcome";
        	$_SESSION['user_name']=$name;
        	// echo "<a href='list_2.php'>用户列表</a><br>";

        	//如果需要登录成功后跳转到指定页面，比如：后台，则在跳转语句前不能有任何输出语句
        	header("location:list_2.php");
        } else {
        	# code...
        	echo "用户名或密码错误<br>";
        }
        
	} else {
		# code...
	}
	
 ?>


<form action="" method="post">
	账户:<input type="text" id="name" name="name" value=""><br>
	密码:<input type="password" id="pwd" name="pwd" value=""><br>
	<input type="submit"  id="ok" name="ok" value="ok">
</form>