0

我为一个基本系统在线下载了一个脚本,该脚本将使用户使用用户名 admin 和密码 admin 登录,但是该脚本在登录页面有一个小错误,似乎有一个未声明的变量,我可以看到该变量是未从表单中声明,但我无法以使其工作的方式声明。我需要一种从表单输入中声明 $position 变量的方法,因此它适用于 login.php 这是错误

注意:未定义索引:位置在 C:\Program Files\EasyPHP-5.3.3\www\preenrolmentsystem\login.php 第 20 行源有 2 页,一页用于 login.php,一页用于表单,即 formform.php

这是login.php

<?php
    //Start session
    session_start();
    if (isset($_POST['position'])) {
    //do something with position
} else {
    //position was not set, maybe give it a default value and use that
}
    //Connect to mysql server
    include('connect.php');

    //Function to sanitize values received from the form. Prevents SQL injection
    function clean($str) {
        $str = @trim($str);
        if(get_magic_quotes_gpc()) {
            $str = stripslashes($str);
        }
        return mysql_real_escape_string($str);
    }

    //Sanitize the POST values
    $login = clean($_POST['id']);
    $password = clean($_POST['password']);
    $position = clean($_POST['position']);
    $result = mysql_query("SELECT * FROM user WHERE idnumber='$login' AND password='$password'");
    while($row = mysql_fetch_array($result))
        {
        $position = $row['position'];
        }
    if ($position=='admin')
    {
        //Create query
        $qry="SELECT * FROM admin WHERE idnum='$login' AND password='$password'";
        $result=mysql_query($qry);
        //while($row = mysql_fetch_array($result))
    //  {
    //  $level=$row['position'];
    //  }
        //Check whether the query was successful or not
        if($result) {
            if(mysql_num_rows($result) > 0) {
                //Login Successful
                session_regenerate_id();
                $member = mysql_fetch_assoc($result);
                $_SESSION['SESS_MEMBER_ID'] = $member['id'];
                session_write_close();
                //if ($level="admin"){
                header("location: admin/index.php");
                exit();
            }else {
                //Login failed
                header("location: loginform.php");
                exit();
            }
        }else {
            die("Query failed");
        }
    }
    if ($position=='student')
    {
        //Create query
        $qry="SELECT * FROM prereg WHERE idnumber='$login' AND password='$password'";
        $result=mysql_query($qry);
        //while($row = mysql_fetch_array($result))
    //  {
    //  $level=$row['position'];
    //  }
        //Check whether the query was successful or not
        if($result) {
            if(mysql_num_rows($result) > 0) {
                //Login Successful
                session_regenerate_id();
                $member = mysql_fetch_assoc($result);
                $_SESSION['SESS_MEMBER_ID'] = $member['id'];
                $_SESSION['SESS_FIRST_NAME'] = $member['idnumber'];
                session_write_close();
                //if ($level="admin"){
                header("location: student/profile.php");
                exit();
            }else {
                //Login failed
                header("location: loginform.php");
                exit();
            }
        }else {
            die("Query failed");
        }
    }
    if ($position=='Casher')
    {
        //Create query
        $qry="SELECT * FROM casher WHERE idnumber='$login' AND password='$password'";
        $result=mysql_query($qry);
        //while($row = mysql_fetch_array($result))
    //  {
    //  $level=$row['position'];
    //  }
        //Check whether the query was successful or not
        if($result) {
            if(mysql_num_rows($result) > 0) {
                //Login Successful
                session_regenerate_id();
                $member = mysql_fetch_assoc($result);
                $_SESSION['SESS_MEMBER_ID'] = $member['id'];
                $_SESSION['SESS_FIRST_NAME'] = $member['idnumber'];
                session_write_close();
                //if ($level="admin"){
                header("location: casher/index.php");
                exit();
            }else {
                //Login failed
                header("location: loginform.php");
                exit();
            }
        }else {
            die("Query failed");
        }
    }
    if ($position=='teacher')
    {
        //Create query
        $qry="SELECT * FROM teacher WHERE idnumber='$login' AND password='$password'";
        $result=mysql_query($qry);
        //while($row = mysql_fetch_array($result))
    //  {
    //  $level=$row['position'];
    //  }
        //Check whether the query was successful or not
        if($result) {
            if(mysql_num_rows($result) > 0) {
                //Login Successful
                session_regenerate_id();
                $member = mysql_fetch_assoc($result);
                $_SESSION['SESS_MEMBER_ID'] = $member['id'];
                $_SESSION['SESS_FIRST_NAME'] = $member['idnumber'];
                session_write_close();
                //if ($level="admin"){
                header("location: teacher/index.php");
                exit();
            }else {
                //Login failed
                header("location: loginform.php");
                exit();
            }
        }else {
            die("Query failed");
        }
    }

?>

和 loginform.php

<?php
    //Start session
    session_start();

    //Unset the variables stored in session
    unset($_SESSION['SESS_MEMBER_ID']);
    unset($_SESSION['SESS_FIRST_NAME']);
    unset($_SESSION['SESS_LAST_NAME']);
?>
<html>
<head>
<title>

</title>
<link rel="stylesheet" href="css/main.css" />
<style type="text/css">
<!--
.ed{
border-style:solid;
border-width:thin;
border-color:#00CCFF;
padding:5px;
margin-bottom: 4px;
}
#button1{
text-align:center;
font-family:Arial, Helvetica, sans-serif;
border-style:solid;
border-width:thin;
border-color:#00CCFF;
padding:5px;
background-color:#00CCFF;
height: 34px;
}
-->
</style>
</head>
<body>
    <div id="mainwrapper">
        <div id="header">
            <img src="images/amuni.jpg">
        </div>
        <div id="menu">
            <ul>
                <li>
                    <a href="index.php">Home</a>
                </li>
                <li>
                    <a href="loginform.php">Login</a>
                </li>
                <li>
                    <a href="pre_reg.php">Student Pre Registration</a>
                </li>
                <li>
                    <a href="aboutus.php">About Us</a>
                </li>
                <li>
                    <a href="help.php">Help</a>
                </li>
                <div class="clearfix"></div>
            </ul>
        </div>
        <div id="main" style="padding:20px; text-align:justify; font-family:arial;">

        <form action="login.php" method="post">
        I.D. Number<br>
        <input type="text" name="id" class="ed"><br>
        Password<br>
        <input type="password" name="password" class="ed"><br>
        <input type="submit" value="Login" id="button1">
        </form>
</div>
        <div id="footer">
        </div>
        <div class="clearfix"></div>
    </div>
</body>
</html>

请给出 $position 变量的示例声明以及我如何在两个文件上使用它

4

1 回答 1

0

在表单中添加一个带有名称的隐藏文本,position以便您可以在 PHP 上访问它。

<input type="hidden" name="position" value="somevalue">
于 2013-09-15T08:14:36.387 回答