用户注册CodeIgniter


User registration with CodeIgniter

我正在尝试用CodeIgniter建立一个注册系统。我有一个名为Register的控制器,代码如下:

class Register extends CI_Controller {
    public function index()
    {
        $this->load->helper(array('form', 'url'));
        $this->load->library('form_validation');
        $this->form_validation->set_error_delimiters('<span class="error">', '</span>');
        $this->form_validation->set_rules('username', 'username', 'required|min_length[3]|max_length[12]|trim');
        $this->form_validation->set_rules('password', 'password', 'required|min_length[2]|md5');
        $this->form_validation->set_rules('email', 'email', 'required|valid_email|trim');
        $this->form_validation->set_rules('artist', 'artist', 'max_length[32]|trim');
        $this->form_validation->set_rules('captcha', 'CAPTCHA', 'required|trim');
        $this->load->view('header');
        if(!$this->form_validation->run())
        {
            $this->load->view('register_form');
        }
        else
        {
            $this->load->view('register_done');
        }
        $this->load->view('footer');
    }
}

到目前为止一切顺利。如果转到注册页面,就会显示注册表单。如果我发送表单并且它通过了表单验证检查,我将获得成功页面,如果表单有错误,我将获得带有一些错误消息的表单。

现在我要做的是数据库的东西。我知道如何将注册表单中的POST值获取到数据库中,但不知道如何检查用户名或电子邮件是否已经存在,如果存在,则在注册表单上显示该错误。这是我的注册表单视图:

<?php $this->load->helper('form'); ?>
<?php echo form_open('register'); ?>
    <ul id="register">
        <ul>
            <h3>Account information</h3>
            <li>
                <label for="username">Choose a username</label>
                <input type="text" name="username" value="<?php echo set_value('username'); ?>" />
                <span class="desc">The name you'd like to be known by</span>
                <?php echo form_error('username'); ?>
            </li>
            <li>
                <label for="password">Pick a password</label>
                <input type="password" name="password" />
                <span class="desc">The best passwords are random and more than 6 characters long</span>
                <?php echo form_error('password'); ?>
            </li>
            <li>
                <label for="email">Enter your valid email address</label>
                <input type="text" name="email" value="<?php echo set_value('email'); ?>" />
                <span class="desc">We'll send you an activation email</span>
                <?php echo form_error('email'); ?>
            </li>
        </ul>
        <ul>
            <h3>About you</h3>
            <li>
                <label for="band">Who's your favorite artist?</label>
                <input type="text" name="artist" value="<?php echo set_value('artist'); ?>" />
                <span class="desc">Don't put Lady GaGa.</span>
                <?php echo form_error('artist'); ?>
            </li>
        </ul>
        <ul>
            <h3>Security question</h3>
            <li>
                <label for="captcha">Enter the letters you see in the image</label>
                <?php $this->load->helper('captcha');
                $cap = create_captcha(array('img_path' => './captcha/', 'img_url' => 'http://localhost/captcha/', 'img_width' => 200, 'img_height' => 30));
                $data = array('captcha_time' => $cap['time'], 'ip_address' => $this->input->ip_address(), 'word' => $cap['word']);
                $query = $this->db->insert_string('captcha', $data);
                $this->db->query($query);
                echo $cap['image']; ?>
                <input type="text" name="captcha" />
                <?php echo form_error('captcha'); ?>
            </li>
        </ul>
        <ul>
            <h3 class="submit">
                <input type="submit" value="Register" />
            </h3>
        </ul>
    </ul>
<?php echo form_close(); ?>

正如您所看到的,我正在利用CI的form_error()功能在字段下显示表单错误,并且我希望"username already exists"错误也显示在username字段下。

有人能提供一些帮助吗?哪怕是在正确的方向上轻轻一推?

谢谢!

我强烈建议您考虑使用另一个已经在这方面做得很好的库:TankAuthTankAuth很容易修改,并提供电子邮件确认,非常安全的密码散列,一个坚实的数据库模式,和非常干净的代码

没有理由重新发明轮子,特别是当涉及到像用户身份验证这样很难正确处理的事情时。

编辑:

例如,这里是TankAuth提供的所有安全方面的东西,你必须自己编码(如果你关心安全性)——这需要多少时间?

Using phpass library for password hashing (instead of unsafe md5).
Counting login attempt for bruteforce preventing (optional). Failed login attempts determined by IP and by username.
Logging last login IP-address and time (optional).
CAPTCHA for registration and repetitive login attempt (optional).
Unactivated accounts and forgotten password requests auto-expire.

你需要为你的控制器创建一个模型
你的模型看起来像这样:

class Register_model extends CI_Model {
    function register_user()
    {
        $data['username'] = $this->input->post('username');
        $data['password'] = sha1($this->input->post('password'));
        ... (your other post data) ...
        $this->db->insert('users', $data);
    }
}
在你的控制器中,你可以这样调用模型:
$this->load->model('Register_model');

方法在这里:

else
{
    $this->Register_model->register_user(); 
    $this->load->view('register_done');
}

如果要检查用户名是否可用,只需将SELECT query放在register_user()方法(函数)的第一行。

要做检查,你应该在你的模型中有函数可以为你查找这些类型的东西:

class Model{
    function getUserByEmail($email);
    function getUserByUsername($username);
    ...
}        

然后在控制器中你可以调用这些方法

...
$result = $model->getUserByEmail($_POST['email']); // You'll need to sanitize your POST
if(count($result) > 0){
    // Sent error about email already existing and flag to not insert/update user
}
...

在CodeIgniter中最简单的解决方案是使用回调函数作为表单验证中的规则之一。我自己也用过这种方法来检查用户名和电子邮件。

这里是docs

define ('BASEPATH') OR exit('No direct script access allowed');

类User扩展CI_Controller {

public function __construct() {
    parent::__construct();
    $this->load->helper('form');
    // Load session library
    $this->load->library('session');
    // Load database
    $this->load->model('User_model');
}
public function index()
    {
        $this->load->view('index');
    }
    public function project()
    {
          $this->data['posts'] = $this->User_model->getPosts(); // calling Post model method getPosts()
            $this->load->view('tables', $this->data);
            // $this->load->aview('project');
    }
    public function get_project()
    {
        $this->User_model->get_project($data);
    }
    public  function signin()
    {
        $data = array(
            'email' => $this->input->post('email'),
            'password' => $this->input->post('password')
        );
        $this->User_model->signin($data);
    }
    public function logout()
    {
        $this->session->unset_userdata($_SESSION['email']);
        // $this->session->sess_destroy();
        redirect('User');
    }
    public function signup()
    {
     $data = array(
            'name' => $this->input->post('name'),
            'phone' => $this->input->post('phone'),
            'email' => $this->input->post('email'),
            'password' => $this->input->post('password')
        );
     if($this->User_model->signup($data))
     {
        echo "no insert";
     }
     else
     {
        $this->load->view('index', $data);
     }
}
}
<?php
Class User_model extends CI_Model {
    function __construct() {
    parent::__construct();
    $this->load->library('session');

    }
    public function signup($data)
    {
        $this->db->insert('user_signup',$data);
    }
    public function getPosts()
     {
              $this->db->select("*"); 
              $this->db->from('user_data');
              $query = $this->db->get();
              return $query->result();
    }

    public function signin($data)
    {
            $this->db->where('email',$data['email']);
            $this->db->where('password',$data['password']);
            $query=$this->db->get('user_signup');
            if($query->num_rows()==1){
                $_SESSION['email'] = $data['email'];
                $this->load->view('popup',$data);
                return true;
    }
    else{
            echo "no";
            return false;
    }
    }
}