登录和注册MySql问题


Login and Registration MySql Issuse

我的登录php和SQL 有一些问题

这就是正在显示的错误;

Warning: mysql_real_escape_string(): Access denied for user ''@'web83.local.one.com' (using password: NO) in /customers/2/2/3/srbportal.com/httpd.www/core/functions/general.php on line 3 Warning: mysql_real_escape_string(): A link to the server could not be established in /customers/2/2/3/srbportal.com/httpd.www/core/functions/general.php on line 3 Warning: mysql_query(): Access denied for user ''@'web83.local.one.com' (using password: NO) in /customers/2/2/3/srbportal.com/httpd.www/core/functions/users.php on line 4 Warning: mysql_query(): A link to the server could not be established in /customers/2/2/3/srbportal.com/httpd.www/core/functions/users.php on line 4 Warning: mysql_result() expects parameter 1 to be resource, boolean given in /customers/2/2/3/srbportal.com/httpd.www/core/functions/users.php on line 4

General.php:

<?php
function sanitize($data) {
    return htmlentities(strip_tags(mysql_real_escape_string($data)));
}
?>

users.php

<?php
function user_exists($username) {
    $username = sanitize($username);
    return (mysql_result(mysqli_query("SELECT COUNT(`user_id`) FROM `users` WHERE `username` =     '$username'"), 0) == 1) ? true : false;
}
function user_active($username) {
    $username = sanitize($username);
    return (mysqli_result(mysqli_query("SELECT COUNT(`user_id`) FROM `users` WHERE `username` = '$username' AND active = 1"), 0) == 1) ? true : false;
}
function user_id_from_username($username) {
    $username = sanitize($username);
    return mysql_result(mysql_query("SELECT `user_id` FROM `users` WHERE `username` = '$username'"), 0, 'user_id');
}
function login($username, $password) {
    $user_id = user_id_from_username($username);
    $username = sanitize($username);
    $password = md5($password);
    return (mysql_result(mysql_query("SELECT COUNT(`user_id`) FROM `users` WHERE `username` = '$username' AND `password` = '$password'"), 0) == 1) ? $user_id : false;
}
?>

任何帮助都将是惊人的!!

Access denied for user ''@'web83.local.one.com'

您正在尝试在没有指定任何MySQL用户的情况下登录。

并且尝试使用PDO,mysql被弃用

您可以使用参数化查询而不是清除输入。如果您使用bcrypt而不是md5