ajax+php登录,具有访问级别


ajax + php login with access level

我有一个类似的后AJAX+PHP登录不起作用,但这次我想添加每个用户的权限或访问级别。

以下是我的代码:

checklogin.php

<?php
session_start();
// Connect to db
include('db.php');
$stmt = $conn->prepare('SELECT * FROM users WHERE username = :username AND password = :password');
$stmt->execute(array(':username' => $_POST['username'], ':password' =>   $_POST['password']));
$result = $stmt->fetch(PDO::FETCH_ASSOC);
$affected_rows = $stmt->rowCount();
//$stmt->setFetchMode(PDO::FETCH_ASSOC);
//$affected_rows = $stmt->fetchColumn();
$username = $_POST['username'];
$password = $_POST['password'];

if($affected_rows == 1) {
    while($affected_rows = $result){
        //add the user to our session variables
        $_SESSION['username'] = $username;
        if($affected_rows['authority'] == 'admin'){
            $_SESSION['authority'] == 'admin';
            header("Location: main.php");
            exit;
        }
        if($affected_rows['authority'] == 'doctor'){
            $_SESSION['authority'] == 'doctor';
            header("Location: pages/doctor/index.php");
            exit;
        }
        if($affected_rows['authority'] == 'nurse'){
            $_SESSION['authority'] == 'nurse';
            header("Location: pages/nurse/index.php");
            exit;
        }
    }
    echo 'yes';
}
else {
    echo 'no';
} // end of $affected_rows

 ?>

index.php

<script type="text/javascript" src="http://ajax.googleapis.com/ajax/libs/jquery/1.4.2/jquery.js"></script>
<script language="javascript">  
    $(document).ready(function(){  
        $("#loginForm").submit(function(){  
            $("#report").removeClass().addClass('loader').html('<img src="images/ajax-loader.gif">').fadeIn(1000);  
            $.post("checklogin.php",{ username:$('#username').val(),password:$('#password').val()},function(data){  
                if(data=='yes'){  
                    $("#report").fadeTo(200,1,function(){       
                        $(this).html('Logging in.....').addClass('log').fadeTo(900,1,function(){          
                            document.location='main.php';  
                        });       
                    });  
                } else {  
                    $("#report").fadeTo(200,1,function(){        
                        $(this).html('Username or password error.').addClass('error').fadeTo(900,1);  
                    });    
                }  
            });  
            return false;   
        });  
        $("#password").blur(function(){  
            $("#loginForm").trigger('submit');  
        });  
    });  
</script>  

</head>
<body>
<div class="container">
  <form class="form-signin" action="checklogin.php" method="post" id="loginForm">
    <h2 class="form-signin-heading">User Login</h2>
    <input type="text" class="input-block-level" placeholder="Username" name="username" id="username">
    <input type="password" class="input-block-level" placeholder="Password" name="password" id="password">
    <label class="checkbox">
      <input type="checkbox" value="remember-me"> Remember me
    </label>
    <button class="btn btn-large btn-primary" type="submit" name="login" id="login">Sign in</button> 
    <div id="report"></div>
  </form>
</div> <!-- /container -->

当我输入错误时,它会显示用户名或密码错误,但当我输入正确时,会显示用户名和密码错误。有什么想法吗?我非常感谢你的帮助。谢谢

您的AJAX响应(PHP)不应该重定向。如果您重定向,您返回的响应(例如,"是")将丢失,因为浏览器将遵循重定向并向您提供目标页面中的数据(例如,main.php中的HTML)。