php - 是否可以显示 'Session User"

标签 php mysql

您好，我正在尝试让发表评论并登录其帐户的用户在发表评论时显示其“登录名”，当用户想要发表评论时，它会要求提供他们的姓名和评论。是否可以显示他们的名字，从 session 中获取它来显示它？谢谢!

http://puu.sh/cByNU/697e58cdf6.jpg http://puu.sh/cByNU/697e58cdf6.jpg

在我以“测试”身份登录的图像上，是否可以删除“名称”字段，并且当他们发表评论时，它将在搜索框所在的位置获取他们的名字(测试)。

谢谢!

我的代码:

<?php
 session_start();
 include "../includes/config.php";
  include "function.php";
  include ('../includes/header.php'); 
?>

<!DOCTYPE HTML>

<html>
<head>
<title>Honda</title>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1">
<link href='http://fonts.googleapis.com/css?family=Julius+Sans+One' rel='stylesheet' type='text/css'>
<link href="../css/style.css" rel="stylesheet" type="text/css" media="all" />
<!--start lightbox -->
<link rel="stylesheet" type="text/css" href="../css/jquery.lightbox.css">
<script src="../js/jquery.min.js"></script>
<script src="../js/jquery.lightbox.js"></script>
<script>
  // Initiate Lightbox
  $(function() {
    $('.gallery1 a').lightbox(); 
  });
</script>

</head>
<body>
<!--start header-->
<div class="h_bg">
<div class="wrap">
<div class="wrapper">
<div class="header">
    <div class="logo">
         <a href="index.php"><img src="../images/logo.png"> </a>
    </div>
    <div class="cssmenu">
    <ul>
       <li><a href="index.php"><span>Home</span></a></li>
        <li><a href="about.php"><span>About</span></a></li>
       <li class="active" class="has-sub"><a href="service.php"><span>Gallery</span></a>
       </li>
       <li class="last"><a href="contact.php"><span>Contact</span></a></li>
     <div class="clear"></div>

     <form action="search.php" method="GET">
                     <div class="search">
                    <h2>search</h2>
            <form>

                <input type="text" name="query" placeholder="Enter Your search..." />
                <input type="submit" value="">
            </form>
        </div>
        </form>

                                 <div class="search1">


            <form action="" method="POST">
        <br>
 <h2>Welcome, <?=$_SESSION['sess_user'];?>!</h2><br><br>
                                <div class="pw">
                <a href="changepassword.php"><h3>Change details</h3></a>
                </div>

                <br><br>
 <h2><a href="logout.php">Logout</a></h2>
    </form> 
    </div>



    </div>
     </ul>
    </div>
    <div class="clear"></div>
</div>
</div>
</div>
</div>
<!-- start content -->
<div class="content_bg">
<div class="wrap">
<div class="wrapper">
    <div class="main">
<div class="ser-main">
        <h2 class="style">Gallery of honda</h2>
        <div class="ser-grid-list img_style">
        <div class="gallery1">
            <a href="../images/ser_pic1.jpg"><img src="../images/ser_pic1.jpg" alt=""></a>
        </div>
        </div>
        <div class="ser-grid-list img_style">
        <div class="gallery1">
            <a href="../images/ser_pic2.jpg"><img src="../images/ser_pic2.jpg" alt=""></a>
        </div>
        </div>
        <div class="ser-grid-list img_style">
        <div class="gallery1">
            <a href="../images/ser_pic3.jpg"><img src="../images/ser_pic3.jpg" alt=""></a>
        </div>
        </div>
        <div class="ser-grid-list img_style">
        <div class="gallery1">
            <a href="../images/ser_pic4.jpg"><img src="../images/ser_pic4.jpg" alt=""></a>
        </div>










        </div>
        <div class="clear"></div>
    </div>
</div>
</div>
</div>
<div class="footer_bg">
<div class="wrap">
<div class="wrapper">
    <div class="footer">

                <div class="search69">


        <?php

if(isset($_POST['submit'])  
    && !empty($_POST['name']) 
    && !empty($_POST['comment']) ){

$name=$_POST['name'];
$comment=$_POST['comment'];
$submit=$_POST['submit'];


$insert=mysql_query("INSERT INTO comment (name,comment) VALUES ('$name','$comment') ");
echo "<meta HTTP-EQUIV='REFRESH' content='0; url=service.php'>";
}
else
{
echo "";
}
?>





        <form class="comments" action="service.php" method="POST">



<h2>Name: </h2><br><input type="text" name="name" required/><br><br>
<h2>Comment:</h2><textarea name="comment" rows="10" cols="50"  required></textarea><br><br><br>
<input type="submit" name="submit" value="Comment">

</form>



<?php


$getquery=mysql_query("SELECT * FROM comment ORDER BY id DESC");
while($rows=mysql_fetch_assoc($getquery))
{
$id=$rows['id'];
$date=$rows['date'];
$name=$rows['name'];
$comment=$rows['comment'];
echo '<h2><hr size="1"/><br><font color="green">' . $name .  '</font><h2><br/>' . '<br/>' . $comment .  '<br/><br><font color="red">' . $date. '</font><br/>' . '<hr size="1"/>'
;}



?>





</div>
        <div class="copy">
            <p class="w3-link">2014&nbsp;</p>
            <a href="terms.php">Privacy & Policy</a>



        </div>
                <div class="f_nav">
        <ul>
            <li><a href="#">Skype</a></li>
            <li><a href="#">Linked in</a></li>
            <li><a href="#">Twitter</a></li>
            <li><a href="#">Facebook</a></li>
        </ul>
        </div>
        <div class="clear"></div>
    </div>
</div>
</div>
</div>
</body>
</html>

(该页上我的所有代码)

最佳答案

更新:

这里的人会杀了我，因为现在我只是编辑了你的代码，而不是重写为 mysqli 或 PDO，但正如我所见，你卡住了，所以我刚刚更新了，因为我不想与那个也是。我做了一些修改，请检查我的评论。 (将插入 block 移至文件顶部、添加错误消息、删除不需要的变量、将 rows 变量重命名为 row 等...)

<?php
session_start();
include "../includes/config.php";
include "function.php";
include ('../includes/header.php');

//Set an empty errorMsg because later we will check it.
$errorMsg = '';

//If everything is set, or the SESSION["sess_user"] not empty.
//I moved this whole thing here, because if there are no output, we can
//redirect user from PHP, and do not need to use META REFREHS...
if (isset($_POST['submit']) && !empty($_POST['comment']) && (!empty($_POST["name"]) || !empty($_SESSION["sess_user"]))) {
    if (!empty($_SESSION["sess_user"])) {
        $name = $_SESSION["sess_user"];
    } else {
        $name = $_POST["name"];
    }
    //$comment = $_POST['comment']; //Use $_POST["comment"] directly
    //$submit = $_POST['submit']; //Do not use it anywhere
    $insert = mysql_query("INSERT INTO comment (name,comment) VALUES ('" . mysql_real_escape_string($name) . "','" . mysql_real_escape_string($_POST["comment"]) . "')");
    Header("Location: service.php");
} else {
    $errorMsg = "You need to fill all the fields.";
}
?>
<!DOCTYPE HTML>
<html>
    <head>
        <title>Honda</title>
        <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
        <meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1">
        <link href='http://fonts.googleapis.com/css?family=Julius+Sans+One' rel='stylesheet' type='text/css'>
        <link href="../css/style.css" rel="stylesheet" type="text/css" media="all" />
        <!--start lightbox -->
        <link rel="stylesheet" type="text/css" href="../css/jquery.lightbox.css">
        <script src="../js/jquery.min.js"></script>
        <script src="../js/jquery.lightbox.js"></script>
        <script>
            // Initiate Lightbox
            $(function() {
                $('.gallery1 a').lightbox();
            });
        </script>
    </head>
    <body>
        <!--start header-->
        <div class="h_bg">
            <div class="wrap">
                <div class="wrapper">
                    <div class="header">
                        <div class="logo">
                            <a href="index.php"><img src="../images/logo.png"> </a>
                        </div>
                        <div class="cssmenu">
                            <ul>
                                <li><a href="index.php"><span>Home</span></a></li>
                                <li><a href="about.php"><span>About</span></a></li>
                                <li class="active" class="has-sub"><a href="service.php"><span>Gallery</span></a>
                                </li>
                                <li class="last"><a href="contact.php"><span>Contact</span></a></li>
                                <div class="clear"></div>

                                <form action="search.php" method="GET">
                                    <div class="search">
                                        <h2>search</h2>
                                        <form>

                                            <input type="text" name="query" placeholder="Enter Your search..." />
                                            <input type="submit" value="">
                                        </form>
                                    </div>
                                </form>
                                <div class="search1">
                                    <form action="" method="POST">
                                        <br>
                                        <h2>Welcome, <?= $_SESSION['sess_user']; ?>!</h2><br><br>
                                        <div class="pw">
                                            <a href="changepassword.php"><h3>Change details</h3></a>
                                        </div>
                                        <br><br>
                                        <h2><a href="logout.php">Logout</a></h2>
                                    </form> 
                                </div>
                        </div>
                        </ul>
                    </div>
                    <div class="clear"></div>
                </div>
            </div>
        </div>
    </div>
    <!-- start content -->
    <div class="content_bg">
        <div class="wrap">
            <div class="wrapper">
                <div class="main">
                    <div class="ser-main">
                        <h2 class="style">Gallery of honda</h2>
                        <div class="ser-grid-list img_style">
                            <div class="gallery1">
                                <a href="../images/ser_pic1.jpg"><img src="../images/ser_pic1.jpg" alt=""></a>
                            </div>
                        </div>
                        <div class="ser-grid-list img_style">
                            <div class="gallery1">
                                <a href="../images/ser_pic2.jpg"><img src="../images/ser_pic2.jpg" alt=""></a>
                            </div>
                        </div>
                        <div class="ser-grid-list img_style">
                            <div class="gallery1">
                                <a href="../images/ser_pic3.jpg"><img src="../images/ser_pic3.jpg" alt=""></a>
                            </div>
                        </div>
                        <div class="ser-grid-list img_style">
                            <div class="gallery1">
                                <a href="../images/ser_pic4.jpg"><img src="../images/ser_pic4.jpg" alt=""></a>
                            </div>
                        </div>
                        <div class="clear"></div>
                    </div>
                </div>
            </div>
        </div>
        <div class="footer_bg">
            <div class="wrap">
                <div class="wrapper">
                    <div class="footer">
                        <div class="search69">
                            <?php
                            //Added here the errorMsg
                            if (!empty($errorMsg)) {
                                ?>
                                <div class="error"><?php echo $errorMsg; ?></div>
                                <?php
                            }
                            ?>
                            <form class="comments" action="service.php" method="POST">
                                <?php
                                if (!empty($_SESSION['sess_user'])) {
                                    //If user logged in, use the name of it
                                    ?>
                                    <h2>Name: </h2><br><?php echo $_SESSION['sess_user']; ?>
                                    <br><br>
                                    <?php
                                } else {
                                    //Else, ask it
                                    ?>
                                    <h2>Name: </h2><br><input type="text" name="name" required/><br><br>
                                    <?php
                                }
                                ?>

                                <h2>Comment:</h2><textarea name="comment" rows="10" cols="50"  required></textarea><br><br><br>
                                <input type="submit" name="submit" value="Comment">
                            </form>

                            <?php
                            $getquery = mysql_query("SELECT * FROM comment ORDER BY id DESC");
                            //This is one row, not rows
                            while ($row = mysql_fetch_assoc($getquery)) {
                                /*
                                 * These are not necessary
                                $id = $rows['id'];
                                $date = $rows['date'];
                                $name = $rows['name'];
                                $comment = $rows['comment'];
                                 */
                                echo '<h2><hr size="1"/><br><font color="green">' . $row['name'] . '</font><h2><br/>' . '<br/>' . $row['comment'] . '<br/><br><font color="red">' . $row['date'] . '</font><br/>' . '<hr size="1"/>'
                                ;
                            }
                            ?>

                        </div>
                        <div class="copy">
                            <p class="w3-link">2014&nbsp;</p>
                            <a href="terms.php">Privacy & Policy</a>
                        </div>
                        <div class="f_nav">
                            <ul>
                                <li><a href="#">Skype</a></li>
                                <li><a href="#">Linked in</a></li>
                                <li><a href="#">Twitter</a></li>
                                <li><a href="#">Facebook</a></li>
                            </ul>
                        </div>
                        <div class="clear"></div>
                    </div>
                </div>
            </div>
        </div>
</body>
</html>

注意:不要使用 mysql 函数，因为它们已被弃用。使用 mysqli 或 PDO 函数代替。

Acoid 用于 sql 注入(inject)，因此转义您的数据!

关于php - 是否可以显示 'Session User"，我们在Stack Overflow上找到一个类似的问题： https://stackoverflow.com/questions/26713897/

上一篇：PHP 代码 (mysqli) 查询在特定代码后不起作用

下一篇：php - ORM 和 Symfony2 违反完整性约束 1062

相关文章：

用于嵌套 Div 标签的 PHP RegEx

php - AJAX sendlike.php 喜欢和不喜欢 PHP 和 mysql

mysql - 如何在 Grails 中显示来自数据库的表情符号

mysql - 具有父类(super class)型表的其他 JOIN 结果的 JOIN 表

phpMyadmin 错误 "continue"目标开关相当于 "break"

mysql - 具有许多嵌套子句的查询速度缓慢

php - Laravel 集合包含

php - datetimepicker日历不显示

php - mysqli_fetch_assoc()需要参数/调用成员函数bind_param()错误。如何获取并修复实际的mysql错误？

mysql - Rails - 在组、用户、所有者、成员协会方面遇到困难

©2024 IT工具网  联系我们