php通过邮件登录mysql

Question

大家好，我已经通过电子邮件登录，我想添加通过电子邮件登录。 当我在 sql 查询中添加 (login=:login OR) 时，我遇到了可以通过任何密码登录的错误。

这里有一些代码:

public function login($login,$upass)
{
    try {
        $stmt = $this->conn->prepare("SELECT * FROM Klient WHERE login=:login OR email=:login LIMIT 1");
        $stmt->execute(array(':login' => $login));
        $userRow = $stmt->fetch(PDO::FETCH_ASSOC);

        if ($stmt->rowCount() == 1) {
            if ($userRow['userStatus'] == "Y") {
                if ($userRow['haslo'] = $upass) {
                    $_SESSION['userSession'] = $userRow['idKlient'];
                    return true;
                } else {
                    header("Location: index.php?error");
                    exit;
                }
            } else {
                header("Location: index.php?inactive");
                exit;
            }
        } else {
            header("Location: index.php?error");
            exit;
        }
    } catch (PDOException $ex) {
        echo $ex->getMessage();
    }
}

编辑:

我正在尝试添加password_hash()，但是当我登录我的网站时出现故障。 我尝试添加密码哈希，但当我登录时我的网站出现故障。

public function login($login, $upass)
    {
        try {
            $stmt = $this->conn->prepare("SELECT * FROM Klient WHERE login=:user_login OR email=:user_login");
            $stmt->execute(array(":user_login" => $login));
            $userRow = $stmt->fetch(PDO::FETCH_ASSOC);

        if ($stmt->rowCount() == 1) {
            if ($userRow['userStatus'] == "Y") {
                if ( password_verify($upass, $userRow['haslo'])) {
                    $_SESSION['userSession'] = $userRow['idKlient'];
                    return true;
                } else {
                    header("Location: index.php?error");
                    exit;
                }
            } else {
                header("Location: index.php?inactive");
                exit;
            }
        } else {
            header("Location: index.php?error");
            exit;
        }
    } catch (PDOException $ex) {
        echo $ex->getMessage();
    }
}

Answer 1

您还需要在此处更改添加电子邮件参数

    $stmt->execute(array(':login' => $login,':email' => $login));