PHP SELECT语句不起作用

Question

我正在为我的网站制作登录表单。当我在我的登录表单上单击提交时，它似乎无法运行SELECT语句，因为它在我的代码中。

$result = $mysqli_conn->query("SELECT * FROM user WHERE email = '$emailclean' AND password = '$passwordclean'"); 

    if($row = mysqli_fetch_assoc($result)){ 

     $finalmessager['success'] = 'You are logged in'; 
     $_SESSION['finalmessager']= $finalmessager; 
    }else{ 
     $finalmessager['fail'] = 'You are not logged in'; 
     $_SESSION['finalmessager']= $finalmessager; 
    } 

它似乎识别$ emailclean，但它似乎不读取$ passwordclean。但是，当我尝试手动将密码，如

$result = $mysqli_conn->query("SELECT * FROM user WHERE email = '$emailclean' AND password = 'celenelqdekdnnd.......'"); 

它似乎工作正常。

我在这里做错了什么？

这是我的代码：

require "../config/init.php"; 
require "../config/config.php"; 
if(isset($_POST['submit'])){ 

$passwordclean = mysqli_real_escape_string($mysqli_conn, hash("sha512", $_POST['password'])); 
$emailclean= mysqli_real_escape_string($mysqli_conn, $_POST['email']); 


$errorCheckr = array(); //an array is introduced to check errors 
$finalmessager = array();//an array to display final message 

if (empty($emailclean)) { 
    $errorCheckr['emailcheck'] = 'Please enter your email'; 

}else{ 
    $_SESSION['email'] = $emailclean; 
} 

if (empty($passwordclean)) { 
    $errorCheckr['passwordcheck'] = 'Please enter your password'; 

}else{ 
    $_SESSION['password'] = $passwordclean; 
} 


//Sanitize 

if (!empty($emailclean) && !filter_var($emailclean, FILTER_VALIDATE_EMAIL)) { 
    $errorCheckr['emailvalidcheck'] = 'Your email is not valid'; 
} 


if (strlen($email) > 50) { 
    $errorCheckr['emaillengthcheck'] = 'Your email is too long'; 
} 

if (!empty($passwordclean) && strlen($passwordclean) < 5) { 
    $errorCheckr['passwordlengthcheck'] = 'Your password is too short'; 
} 


if (empty($errorCheckr)) { 


    $result = $mysqli_conn->query("SELECT * FROM user WHERE email = '$emailclean' AND password = '$passwordclean'"); 

    if($row = mysqli_fetch_assoc($result)){ 

     $finalmessager['success'] = 'You are logged in'; 
     $_SESSION['finalmessager']= $finalmessager; 
    }else{ 
     $finalmessager['fail'] = 'You are not logged in'; 
     $_SESSION['finalmessager']= $finalmessager; 
    } 

    unset($_SESSION['email']); 
    unset($_SESSION['password']); 

    header('location:../loginform.php'); 



}else{  


    $_SESSION['regErrors']= $errorCheckr; 

    header('location:../loginform.php'); 

} 
} 

Answer 1

上的错误首先依次为：

<?php 
error_reporting(E_ALL); 
ini_set('display_errors', '1'); 

测试，如果交变和密码设置：

<?php 
var_dump($_POST['password']); 
var_dump($passwordclean); 

一些提示：

1）为什么要保存密码ord在会议中？

2）你正在检查$ passwordclean的长度，它总是128个字符，因为它是用sha512散列的。

3）：

<?php 
$result = $mysqli_conn->query("SELECT * FROM user WHERE email = '". mysqli_real_escape_string($mysqli_conn, $_POST['email']) ."' AND password = '". mysqli_real_escape_string($mysqli_conn, hash("sha512", $_POST['password'])) ."'");