php mysql实现会员
PHP与MySQL实现会员系统
数据库设计
创建名为users的表，包含以下字段：
CREATE TABLE users (
id INT AUTO_INCREMENT PRIMARY KEY,
username VARCHAR(50) NOT NULL UNIQUE,
password VARCHAR(255) NOT NULL,
email VARCHAR(100) NOT NULL UNIQUE,
created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP
);注册功能实现
创建注册表单register.php：
<form method="post" action="register_process.php">
<input type="text" name="username" placeholder="用户名" required>
<input type="email" name="email" placeholder="邮箱" required>
<input type="password" name="password" placeholder="密码" required>
<button type="submit">注册</button>
</form>处理注册逻辑register_process.php：
<?php
$conn = new mysqli('localhost', 'username', 'password', 'database');
$username = $_POST['username'];
$email = $_POST['email'];
$password = password_hash($_POST['password'], PASSWORD_DEFAULT);
$stmt = $conn->prepare("INSERT INTO users (username, email, password) VALUES (?, ?, ?)");
$stmt->bind_param("sss", $username, $email, $password);
$stmt->execute();
header("Location: login.php");
?>登录功能实现
创建登录表单login.php：
<form method="post" action="login_process.php">
<input type="text" name="username" placeholder="用户名" required>
<input type="password" name="password" placeholder="密码" required>
<button type="submit">登录</button>
</form>处理登录逻辑login_process.php：
<?php
session_start();
$conn = new mysqli('localhost', 'username', 'password', 'database');
$username = $_POST['username'];
$password = $_POST['password'];
$stmt = $conn->prepare("SELECT id, password FROM users WHERE username = ?");
$stmt->bind_param("s", $username);
$stmt->execute();
$result = $stmt->get_result();
if($result->num_rows === 1) {
$user = $result->fetch_assoc();
if(password_verify($password, $user['password'])) {
$_SESSION['user_id'] = $user['id'];
header("Location: dashboard.php");
} else {
echo "密码错误";
}
} else {
echo "用户不存在";
}
?>会话管理
创建受保护页面dashboard.php：
<?php
session_start();
if(!isset($_SESSION['user_id'])) {
header("Location: login.php");
exit;
}
echo "欢迎进入会员中心";
?>安全注意事项
密码必须使用password_hash()函数加密存储
所有SQL查询使用预处理语句防止SQL注入
敏感页面检查会话状态
表单数据需进行验证和过滤
