使用php和mysql失败执行语句 [英] fail execute statement with php and mysql

问题描述

我这样插入用户输出:

  $userName= SanitizeString($userName);
  $pass= SanitizeString($pass);
  $email= SanitizeString($email);

  $userName=mysql_real_escape_string($userName);
  $pass=mysql_real_escape_string($pass);
  $email=mysql_real_escape_string($email);

  $salt = 'SHIFLETT';
  $password_hash = md5($salt . md5($pass.$salt));

 mysql_query("INSERT INTO users (user_name,pass,email,reputation,role,ban,date) VALUES ('$userName', '$password_hash', '$email', '$reputation',   '$role','false','$date')" ) or exit(mysql_error());

那是SanitizeString($ var)函数:

That is the SanitizeString($var) function:

   function SanitizeString($var)
   {
       $var=stripslashes($var);
       $var=htmlentities($var, ENT_QUOTES, 'UTF-8');
       $var=strip_tags($var);
       return $var;
   }

但是，当我尝试通过此查询查找用户密码和名称时.失败:

But when I try to find the users password and name with this query. It fails:

       $user_name=SanitizeString($user_name);
   $pass=SanitizeString($pass);


  $user_name=mysql_real_escape_string($user_name);
  $pass=mysql_real_escape_string($pass);


   $salt = 'SHIFLETT';
   $password_hash = md5($salt . md5($pass.$salt));

   $result=mysql_query("SELECT COUNT(*) AS Result FROM users WHERE user_name='$user_name' AND pass='$password_hash' LIMIT 1") or die(mysql_error());

如果计数大于0表示它发现了一个结果，则用户应该登录.但这不会发生.为什么?

if the count is greater than 0 than it means it found one result and the user should log in. But that doesnt happen..Why?

对此进行更多更新:

   if(mysql_num_rows($result)>0)
       {
           echo "Login successful".mysql_num_rows($result);
           return $dataArray=TRUE;
       }
       else
       {
           echo "Login unsuccessful:".mysql_num_rows($result);
       }

推荐答案

如果要使用COUNT(*)，则必须使用GROUP BY，但是您可以像这样使用mysql_num_rows()获取行数.

You have to use GROUP BY if you want to use COUNT(*), but you can get the number of rows with mysql_num_rows() like this.

$result=mysql_query("SELECT * AS Result FROM users WHERE user_name='$user_name' AND pass='$password_hash' LIMIT 1") or die(mysql_error());
$num_rows = mysql_num_rows($result);

这篇关于使用php和mysql失败执行语句的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！