1

我有下面的代码，它允许成员恢复他们的密码。但是我无法发现所犯的错误并且我的条件没有得到满足。当您访问recover.php 时，您将被重定向到index.php，因此最后一个else 语句正在执行（这应该只在用户登录时发生——这意味着如果他们已登录，他们将无法恢复密码）。

<?php
include 'storescripts/init.php';
$msg = "";
if(isset($_GET['success']) === true && empty($_GET['success']) === true)
{
    $msg = "Thanks, we've emailed you.";
}
else
{
    $mode_allowed = array('mem_password');
    if (isset($_GET['mode']) === true && in_array($_GET['mode'],  $mode_allowed) === true)
    {
        if(isset($_POST['mem_email']) === true && empty($_POST['mem_email']) ===  false)
        {
            if (email_exists($_POST['mem_email']) === true)
            {
                recover($_GET['mode'], $_POST['mem_email']);
                header('Location: recover.php?success');
                exit();
            }
            else
            {
                $msg = "<p>Oops, we couldn\'t find that email in the system</p>";
            }
        }
    }
else
    {
        header('Location: index.php');
        exit();
    }
}
logged_in_redirect();
include 'includes/overall/head.php';
include 'includes/overall/template_header.php';
?>
<div id="mainDivShort">
    <h1>Recover</h1>
    <div id="divBreak"></div>
    <?php include ("includes/overall/column_left.php");?>
    <div id="middleContent">
        <?php echo $msg; ?>
        <form action="" method="post">
            <ul>
                <li>Please enter your email address:<br> <input type="text" name="mem_email"></li>
                <li><input type="submit" value="Recover"></li>
            </ul>
        </form>
    </div>
    <?php include ("includes/overall/column_right.php");?>
</div>
<?php include ("includes/overall/template_footer.php");?>

当我注销时访问recover.php 时，我无法确定执行最后一个else 语句的条件是什么。

4

1 回答 1

0

首先：

这是行不通的：

if(isset($_GET['success']) === true && empty($_GET['success']) === true)

它应该是：

if(isset($_GET['success']) === true && empty($_GET['success']) === false)

和

header('Location: recover.php?success');

应该是（否则不会设置 $_GET['success']）：

header('Location: recover.php?success=1');

和：

<form action="" method="post">

应该：

<form action="recover.php?mode=mem_password" method="post">

其余的，你的代码是正确的。

于 2013-03-01T17:04:36.610 回答