php - 使用哈希密码重定向到不同的页面不起作用

Question

我的 php 代码对密码进行了哈希处理。如果他们是新用户，我想将用户重定向到 edit_password.php。我用他们的用户名将他们设为默认帐户，默认密码是 admin。密码是我重定向的依据。但我对如何使用我的代码制作它感到困惑，请检查我的代码，谢谢。这是我的代码：

<?php 

    require("common.php"); 

    $submitted_username = ''; 

    if(!empty($_POST)) 
    { 
        $query = " 
            SELECT 
                id, 
                username, 
                password, 
                salt, 
                email 
            FROM users 
            WHERE 
                username = :username 
        "; 

        $query_params = array( 
            ':username' => $_POST['username'] 
        ); 

        try 
        { 
            $stmt = $db->prepare($query); 
            $result = $stmt->execute($query_params); 
        } 
        catch(PDOException $ex) 
        { 
            die("Failed to run query: " . $ex->getMessage()); 
        } 

        $login_ok = false; 

        $row = $stmt->fetch(); 
        if($row) 
        { 
            $check_password = hash('sha256', $_POST['password'] . $row['salt']); 
            for($round = 0; $round < 65536; $round++) 
            { 
                $check_password = hash('sha256', $check_password . $row['salt']); 
            } 

        if($check_password === $row['password']) // <---- i want to insert some code here like if($check_password === $row['password'] || 'admin') to redirect new users. but i dont know how to.
            { 
                $login_ok = true; 
            } 
          if($login_ok) 
        { 
            unset($row['salt']); 
            unset($row['password']); 

            $_SESSION['user'] = $row; 

            header("Location: index.php"); 
            die("Redirecting to: index.php"); 

        } 
        else 
        { 
            echo("<font color=red>Login Failed.</font>"); 

            $submitted_username = htmlentities($_POST['username'], ENT_QUOTES, 'UTF-8'); 
        } 
        }
    }

?> 

提前致谢。

Answer 1

if($login_ok) 
        { 
            unset($row['salt']); 
            unset($row['password']); 


            $_SESSION['user'] = $row; 
        if($_POST['password'] === "admin")
            {
                header(""); 
            }
            else
                {
                    header("Location: index.php"); 
                    die("Redirecting to: index.php"); 
                }
        } 

一旦您验证了用户，一个简单的条件检查应该可以解决问题。