将IP地址存储在单列中

Question

Here is my code which insert a single value of IP Address when user login. If the user tries to login from a different IP then user will get an email to confirm. After the user clicks on the link sent in the email, the IP address is updated. Instead of updating the IP adddress, I want to store all IPs when whenever the user confirms its identity so that if the user can be able to login same IP that we have stored in our array.

Basically I want to store IP address as an array.

<?php

       include 'header.php';
   include('config.php');
         $eemail=$_GET['email'];

        if(isset($_POST['scode']))
        {
     $unncode=$_POST['uncode'];

      $sql1="SELECT * FROM nennetwork WHERE code ='$unncode'";
        $res=mysql_query($sql1);

    $rows = mysql_fetch_array($res);

     $ccode = $rows['code'] ;

      if($unncode==$ccode)
     $eemail=$_GET['email'];
       $ips = $_SERVER['REMOTE_ADDR'];
   if(mysql_query("update nennetwork set useripp= '".$ips ."' WHERE email ='$eemail'"))
        {
       $mmmsg= "You can <a href='".'index.php'."' class='ac'>Login</a> if the code matches the code that we have sent you.";


      }


      else{

     $mmmsg="Please submit the numeric code that we sent to your email.";

     }}

        ?> 

Answer 1

Ok, besides a massive case for SQL injection (READ UP ON php-pdo on php.net, great simple to use examples).

The troublesome query for you which does not insert:

if(mysql_query("update nennetwork set useripp= '".$ips ."' WHERE email ='$eemail'"))

Could be replaced by:

INSERT INTO nennetwork (useripp, email) VALUES (?,?) 
  ON DUPLICATE KEY UPDATE useripp=?;

For this to work you will need 1 index:

CREATE UNIQUE INDEX idx_nennetwork_nn_1 ON nennetwork(email);

This will cause the duplicate key to trigger the update or the insert depending on the data involved.

(Read php-pdo on how to get the ?,? and ? be replaced by bind variables and some safer code).