dskpywvki951583595 2016-02-04 09:23
浏览 46
已采纳

Codeigniter form_validation不验证

I'm currently working on my login form. Yesterday when I logged in, even though the credentials are wrong it logs me in so I changed the = to == of this code in my model.

public function can_log_in() {

    $sql ="SELECT * FROM tbl_users WHERE USERNAME = ? AND PASSWORD = ?";
    $data1 = array(
        'USERNAME' => $this->input->post('USERNAME'),
        'PASSWORD' => $this->input->post('PASSWORD')
    );
    $query = $this->db->query($sql, $data1);

    if ($query->num_rows == 1) {
        return true;
    } else {
        return false;
    }
}

Now even if the credentials are right it doesnt log-in. Here are my controllers:

public function loginValidate() {

    $this->load->library('form_validation');

    $this->form_validation->set_rules('USERNAME','Username','required|trim|callback_validateCreds');
    $this->form_validation->set_rules('PASSWORD','Password','required|trim');

    if ($this->form_validation->run() == FALSE) {
        $this->index();
    } else {
        $data = array(
            'USERNAME' => $this->input->post('USERNAME'),
            'is_logged_in' => 1
        );
        $this->session->set_userdata($data);

        redirect('login/adminIndex'); 
    }
}

public function validateCreds() {

    $this->load->library('form_validation');
    $this->load->model('login_model');

    if($this->login_model->can_log_in()) { // can_log_in() model
        return true;
    } else {
        $this->form_validation->set_message('validateCreds','Username and password did not match.');  //return message to validateCreds

        return false;
    }
}
  • 写回答

1条回答 默认 最新

  • dtxpz8785 2016-02-04 09:52
    关注

    in Problem Model function near if($query->num_rows==1)

    you change like this if($query->num_rows()==1)

    full code in model function

    public function can_log_in(){
    
    $sql ="SELECT * FROM tbl_users WHERE USERNAME = ? AND PASSWORD = ?";
    $data1 = array(
        'USERNAME' => $this->input->post('USERNAME'),
        'PASSWORD' => $this->input->post('PASSWORD')
        );
    
    $this->db
    $query = $this->db->query($sql, $data1);
    
    
    if ($query->num_rows() == 1){
    
        return true;
    
    }else{
    
        return false;
    }
    
    本回答被题主选为最佳回答 , 对您是否有帮助呢?
    评论

报告相同问题?

悬赏问题

  • ¥30 这是哪个作者做的宝宝起名网站
  • ¥60 版本过低apk如何修改可以兼容新的安卓系统
  • ¥25 由IPR导致的DRIVER_POWER_STATE_FAILURE蓝屏
  • ¥50 有数据,怎么建立模型求影响全要素生产率的因素
  • ¥50 有数据,怎么用matlab求全要素生产率
  • ¥15 TI的insta-spin例程
  • ¥15 完成下列问题完成下列问题
  • ¥15 C#算法问题, 不知道怎么处理这个数据的转换
  • ¥15 YoloV5 第三方库的版本对照问题
  • ¥15 请完成下列相关问题!