php mysqli cookies login


php mysqli cookies login

我不知道该怎么办了,当我登录时它很酷,然后当我返回时,它会将我注销,但 cookie 没有被破坏,我希望在我去的任何页面上保持登录状态,是的,提交按钮我可以按下它,因为当我登录时它没有隐藏,请帮助,我正处于丢失它的边缘, 如果错误,请改进我的代码,我知道它是

<?php 
error_reporting(0);
$con = mysqli_connect("localhost","root","","samp");
if (mysqli_connect_errno())
{
    echo "Failed to connect to the database: " . mysqli_connect_error();
    die();
}
session_start();

if(!empty($_POST['username']) && !empty($_POST['password']))
{
    $userName = isset($_POST["username"]) ? $_POST["username"] : null;
    $userPass = isset($_POST["password"]) ? $_POST["password"] : null;
    $hashedPass = hash('whirlpool', $userPass);
    $query = "SELECT Ime FROM Igraci WHERE Ime = '$userName' AND Lozinka = '$hashedPass'";
    $result = mysqli_query( $con, $query);
    $row = mysqli_fetch_array($result);
    if($row)
    {
        $session = md5($userName.$hashedPass);
        mysqli_query($con, "UPDATE Igraci SET session = '$session' WHERE Ime = '$userName' AND Lozinka = '$hashedPass'");
        setcookie("login", $userName,time()+3600);
        echo "You are now logged in with hash: ".htmlspecialchars($_COOKIE["login"]). ' <a href="index.php?logout=1">logout</a>?';
        header('index.php');
    }
    else
    {
        die('Account has not been found.');
    }
}
if(isset($_GET['logout']))
{
    setcookie("login", "", time()-60);  
    exit(); # stop executing here
    header('index.php');
}
if(isset($_COOKIE["login"]) && mb_strlen(isset($_COOKIE["login"]) == '32'))
{
    $session = $con->real_escape_string($_COOKIE["login"]);
    $query = "SELECT Ime FROM Igraci WHERE session = '$session' LIMIT 1";
    $result = mysqli_query( $con, $query); $row = mysqli_fetch_array($result);
    if($row['Ime']) 
    { 
        echo "User is already logged in with username ".$row['Ime']. " and hash: ".htmlspecialchars($_COOKIE["login"]). ' <a href="index.php?logout=1"> logout</a>?';
        exit(); 
    }
}
?>
<!DOCTYPE html>
<html>
<head>
    <title>Roleplay Factory User Control Panel</title>
    <link rel="stylesheet" type="text/css" href="style.css">
    <link href='https://fonts.googleapis.com/css?family=Roboto:300' rel='stylesheet' type='text/css'>
</head>
<body>
<h1>Welcome, please login to your account.</h1>
<form method="post" action="<?php echo $_SERVER['PHP_SELF']; ?>">
    <input type="text" placeholder = "Username" name="username">
    <input type="password" placeholder = "Password" name="password">
    <input type="submit" name="login_button" value="Login">
</form> 
<div class="footer">
<p>roleplay factory &copy; 2016 all rights reserved</p>
</div>
</body>
</html>

更新代码行

header('index.php'); 

要成为

header('location:index.php');