使用PDO登录系统

Question

I've been working with this code forever but cannot figure out what's wrong.

It logs in okay but it does not pass the id into the session. It works with JQuery.

$loginresult = $db->prepare("SELECT * FROM users WHERE username = :username AND password = :password");
$loginresult->bindParam(":username", $username);
$loginresult->bindParam(":password", $encryptedPassword);
$loginresult->execute();
$result = $loginresult->fetch(PDO::FETCH_OBJ);

if($loginresult !== false){
       $_SESSION['loggedin'] = microtime();
       $_SESSION['userid'] = $result->id;
       echo 'true';
}else{
      echo 'false';
}

EDIT: New Code

<?php
require('../../config.php');

$username = $_POST['username'];
$password = $_POST['password'];

$encryptedPassword = crypt($password,$salt);

$loginresult = $db->prepare("SELECT * FROM users WHERE username = :username AND password = :password");
$loginresult->bindParam(":username", $username);
$loginresult->bindParam(":password", $encryptedPassword);
$loginresult->execute();
$count = $loginresult->rowCount();
        var_dump($count);
        print_r($db->errorInfo());
if($count){
        $result = $loginresult->fetch(PDO::FETCH_OBJ);
        var_dump($result);
        print_r($db->errorInfo());
        session_start();
       $_SESSION['loggedin'] = microtime();
       $_SESSION['userid'] = $result->id;
       echo $result->id;
       //echo 'true';
}else{
      echo 'false';
}
?>

Answer 1

You probably want:

if($loginresult){

instead of:

if($loginresult !== true){

Note that fetch only returns false in case of a failure.

And of course you need session_start(); before any output is sent to the browser.