php - 捕获用户上次登录日期

Question

如何记录用户上次登录日期？我试过用$query = "UPDATE users SET lastlogindate = NOW() WHERE username = "username"它来测试它的工作原理，但不幸的是没有。我显然想确保我也正确记录了经过身份验证的用户的日期。

我应该把它放在这个脚本的什么地方？

<?php 
    require("config.php"); 
    $submitted_username = ''; 
    if(!empty($_POST)){ 
        $query = " 
            SELECT 
                id, 
                username, 
                password, 
                salt, 
                email 
            FROM users 
            WHERE 
                username = :username 
        "; 
        $query_params = array( 
            ':username' => $_POST['username'] 
        ); 

        try{ 
            $stmt = $db->prepare($query); 
            $result = $stmt->execute($query_params); 
        } 
        catch(PDOException $ex){ die("Failed to run query: " . $ex->getMessage()); } 
        $login_ok = false; 
        $row = $stmt->fetch(); 
        if($row){ 
            $check_password = hash('sha256', $_POST['password'] . $row['salt']); 
            for($round = 0; $round < 65536; $round++){
                $check_password = hash('sha256', $check_password . $row['salt']);
            } 
            if($check_password === $row['password']){
                $login_ok = true;
            } 
        } 

        if($login_ok){ 
            unset($row['salt']); 
            unset($row['password']); 
            $_SESSION['user'] = $row;
            $query = "UPDATE users SET lastlogindate = NOW() WHERE username = "deason";
            header("Location: main.php"); 
            die("Redirecting to: main.php"); 
        } 
        else{ 
            print("Login Failed."); 
            $submitted_username = htmlentities($_POST['username'], ENT_QUOTES, 'UTF-8'); 
        } 
    } 
?>  

Answer 1

通常你必须添加引号：

 $query = "UPDATE `users` SET `lastlogindate` = NOW() WHERE `username` = 'deason'";

Answer 2

语法突出显示了它：这是一个引用问题。您在查询中为您的字符串和字符串值使用双引号。

$query = "UPDATE users SET lastlogindate = NOW() WHERE username = "deason";

应该：

$query = "UPDATE users SET lastlogindate = NOW() WHERE username = 'deason'";