慢PHP登录表单

Question

I am making a login information form but the loading of the form itself takes a long time (1-2 sec), so I am wondering if I am doing something wrong. I am also very worried about the security of this particular approach.

Thanks for any help whatsoever!

<?
        if(isset($_POST['send']))
        {
            $connection=mysqli_connect('host','user','password','database');

            $email=$_POST['email'];
            $password=$_POST['password'];

            $query=mysqli_prepare($connection,'SELECT access FROM users_table WHERE email=? AND password=?');   
            mysqli_bind_param($query,'ss',$email,$password);
            mysqli_stmt_execute($query);
            mysqli_stmt_bind_result($query,$access);
            mysqli_stmt_fetch($query);

            if($access>=0)
            {
                session_start();
                $_SESSION['user_email']=$email;
                $_SESSION['user_password']=$password;
                $_SESSION['user_access']=$access;

                switch($access)
                {
                    case(0):
                        header('Location:admin page');
                    case(1):
                        header('Location:user page');
                }
            }
            else
            {
                echo 'Wrong Password!';
            }

            mysqli_stmt_close($query);

            mysqli_close($connection);
        }
        else
        {
            ?>
                <div id='login'>
                    <form method='POST' action=''>
                        <input name='email' type='email' placeholder='Enter your email...'>
                        <input name='password' type='password' placeholder='and your password.'>
                        <input class='button' name='send' type='submit' value='Send'>
                    </form>
                </div>
            <?
        }
    ?>

Answer 1

The bottleneck is probably from the MySQL connection (is the MySQL server located remotely from the web server?)

You can find this out by saving a timestamp (using microtime()) before and after the mysqli_connect function, then subtracting end-start to get the total time.

Example:

$t = microtime(true);
// do connection here
die(microtime(true) - $t);