当前位置：首页 > PHP

php mysql实现注册

2026-02-15 11:31:01PHP

使用PHP和MySQL实现用户注册功能

创建数据库表

在MySQL中创建一个用户表，用于存储注册信息：

php mysql实现注册

CREATE TABLE users (
    id INT AUTO_INCREMENT PRIMARY KEY,
    username VARCHAR(50) NOT NULL UNIQUE,
    email VARCHAR(100) NOT NULL UNIQUE,
    password VARCHAR(255) NOT NULL,
    created_at DATETIME DEFAULT CURRENT_TIMESTAMP
);

创建注册表单HTML

创建一个简单的HTML表单用于用户输入注册信息：

php mysql实现注册

<form action="register.php" method="post">
    <label for="username">用户名:</label>
    <input type="text" name="username" required>

    <label for="email">邮箱:</label>
    <input type="email" name="email" required>

    <label for="password">密码:</label>
    <input type="password" name="password" required>

    <label for="confirm_password">确认密码:</label>
    <input type="password" name="confirm_password" required>

    <button type="submit">注册</button>
</form>

处理注册逻辑的PHP代码

创建register.php文件处理表单提交：

<?php
// 数据库连接配置
$host = 'localhost';
$dbname = 'your_database';
$username = 'your_username';
$password = 'your_password';

try {
    $pdo = new PDO("mysql:host=$host;dbname=$dbname", $username, $password);
    $pdo->setAttribute(PDO::ATTR_ERRMODE, PDO::ERRMODE_EXCEPTION);
} catch (PDOException $e) {
    die("数据库连接失败: " . $e->getMessage());
}

if ($_SERVER['REQUEST_METHOD'] === 'POST') {
    // 获取表单数据
    $username = trim($_POST['username']);
    $email = trim($_POST['email']);
    $password = $_POST['password'];
    $confirm_password = $_POST['confirm_password'];

    // 验证输入
    if (empty($username) || empty($email) || empty($password) || empty($confirm_password)) {
        die("所有字段都是必填的");
    }

    if ($password !== $confirm_password) {
        die("两次输入的密码不匹配");
    }

    if (strlen($password) < 8) {
        die("密码长度至少需要8个字符");
    }

    // 检查用户名和邮箱是否已存在
    $stmt = $pdo->prepare("SELECT id FROM users WHERE username = ? OR email = ?");
    $stmt->execute([$username, $email]);

    if ($stmt->rowCount() > 0) {
        die("用户名或邮箱已被注册");
    }

    // 哈希密码
    $password_hash = password_hash($password, PASSWORD_DEFAULT);

    // 插入新用户
    $stmt = $pdo->prepare("INSERT INTO users (username, email, password) VALUES (?, ?, ?)");
    $stmt->execute([$username, $email, $password_hash]);

    echo "注册成功!";
}
?>

安全增强措施

为增强安全性，可以在代码中添加以下功能：

// 防止SQL注入
$username = filter_var($username, FILTER_SANITIZE_STRING);
$email = filter_var($email, FILTER_SANITIZE_EMAIL);

// 验证邮箱格式
if (!filter_var($email, FILTER_VALIDATE_EMAIL)) {
    die("无效的邮箱格式");
}

// 使用预处理语句防止SQL注入
$stmt = $pdo->prepare("INSERT INTO users (username, email, password) VALUES (:username, :email, :password)");
$stmt->bindParam(':username', $username);
$stmt->bindParam(':email', $email);
$stmt->bindParam(':password', $password_hash);
$stmt->execute();