简体中文（ZH-CN）English（EN）繁体中文（ZH-TW）日本語（JA）한국어（KO）Melayu（MS）Français（FR）Deutsch（DE）
Home
Article
Q&A
Course
Topic
Download
Game
Dictionary
Recent Updates

博客列表 >PHP基础-会话控制和登录小实战

PHP基础-会话控制和登录小实战

岂几岂几
岂几岂几原创
2020年05月12日 01:39:55885浏览

会话控制和登录小实战

1. 会话控制

  • HTTP 是基于无连接的网络协议, 每一次访问, 对于服务器来说, 都是全新的

  • 有两个地方可以实现多次请求之间共享数据:

    1. 保存到浏览器中的叫: cookie;

    2. 保存到服务器中的叫: session;

COOKIE操作

  • 创建COOKIE: 使用setcookie()函数.

    • 使用语法:

      1.   bool setcookie  (
      2.       string $名字
      3.       [, string $值]
      4.       [, int $过期时间  = 0]
      5.       [, string $路径]
      6.       [, string $域名]
      7.       [, bool $安全  = false]
      8.       [, bool $http只读  = false]
      9.   );

    • 参数含义:

      1. $名字 必需。规定 cookie 的名称。
      2. $值 可选。规定 cookie 的值。
      3. $有效期 可选。规定 cookie 的有效期。要记住，是time() + 有效期秒数. 值为0则表示永久有效。值为负数则表示跟session生命周期一样。
      4. $路径 可选。规定 cookie 的服务器路径。
      5. $域名 可选。规定 cookie 的域名。
      6. $安全 可选。规定是否通过安全的 HTTPS 连接来传输 cookie。
      7. $http安读 可选。如果true，那么js就无法读取改cookie，增加安全性。

    • 举例:

      1. setcookie('loginuser', 'zhangsan', time() + 60 * 60 * 24, '/');
      3. setcookie('manager', 'admin', time() + 60 * 20, '/admin');

  • 获取COOKIE的值: 通过操作超全局数组$_COOKIE实现. 假设COOKIE键名为$cookieName, 则获取其值: $_COOKIE[$cookieName].

  • 修改COOKIE的值:

    • 方法1: 跟取值类似. 假设COOKIE键名为$cookieName, 则修改其值: $_COOKIE[$cookieName] = 新值.

    • 方法2: 相当于使用setcookie()函数再”覆盖创建”一次同键名的COOKIE.

  • 删除COOKIE: 就是用setcookie()给被销毁的cookie设置一个比当前时间早的时间，如：time() - 1;

一个特殊的COOKIE: PHPSESSID

3. SESSION

SESSION操作

  • 在PHP中session的操作就是操作$_SESSION超全局数组。

  • 开始操作前要启用session：session_start().

  • 将数据保存到SESSION中: $_SESSION['key1'] = "value1".

  • 删除单个session数据:用unset。删除全部session数据：session_destroy().

4. 登录小实战

  • 创建库表
  1. DROP DATABASE IF EXISTS `phpedu`;
  2. CREATE DATABASE `phpedu` /*!40100 DEFAULT CHARACTER SET utf8 */;
  3. USE `phpedu`;
  5. DROP TABLE IF EXISTS `users`;
  6. CREATE TABLE `users` (
  7.   `id` int(11) unsigned NOT NULL AUTO_INCREMENT,
  8.   `username` varchar(50) NOT NULL,
  9.   `password` varchar(50) NOT NULL,
  10.   `realname` varchar(50) NOT NULL,
  11.   `sex` int(1) NOT NULL DEFAULT '0',
  12.   `in_use` int(1) NOT NULL DEFAULT '1',
  13.   `create_time` int(11) NOT NULL,
  14.   `update_time` int(11) NOT NULL,
  15.   PRIMARY KEY (`id`)
  16. ) ENGINE=InnoDB DEFAULT CHARSET=utf8;
  • 创建初始数据

  • 页面文件(php/html)

    • 首页(index.php)

      1. <!DOCTYPE html>
      2. <html lang="en">
      4. <head>
      5.   <meta charset="UTF-8">
      6.   <meta name="viewport" content="width=device-width, initial-scale=1.0">
      7.   <title>登录小实战</title>
      8.   <style>
      9.       @import 'css/global.css';
      10.       @import 'css/index.css';
      11.   </style>
      12. </head>
      13. <?php
      14. require('UserStorage.php');
      16. // $userStorage = new UserStorage(1);
      17. $userStorage = new UserStorage(2);
      18. ?>
      20. <body>
      21.   <!-- <header> -->
      22.   <nav class="top-bar">
      23.       <span>LOGO</span>
      24.       <?php if ($userStorage->isLogin()) : ?>
      25.           <div class="user-info">
      26.               <span>你好, <?php echo $userStorage->getUserInfo()['realname'] ?? '没登录' ?></span>
      27.               <a href="doBusiness.php?action=logout">注销</a>
      28.           </div>
      29.       <?php else : ?>
      30.           <div class="user-opra">
      31.               <a href="login.html">登录</a>
      32.               <a href="register.html">注册</a>
      33.           </div>
      34.       <?php endif; ?>
      35.   </nav>
      36.   <!-- </header> -->
      37. </body>
      39. </html>

    • 注册页(register.html)

      1. <!DOCTYPE html>
      2. <html lang="en">
      4. <head>
      5.   <meta charset="UTF-8">
      6.   <meta name="viewport" content="width=device-width, initial-scale=1.0">
      7.   <title>用户注册</title>
      8.   <style>
      9.       @import 'css/global.css';
      11.       @import 'css/register.css';
      13.   </style>
      14. </head>
      16. <body>
      17.   <form action="doBusiness.php?action=register" method="post">
      18.       <section class="register-box">
      19.           <div class="register-title">
      20.               <span>注册新用户</span>
      21.           </div>
      23.           <div class="register-content">
      24.               <div class="register-item">
      25.                   <label for="username">用户名:</label>
      26.                   <input type="text" name="username" id="username" autofocus required>
      27.               </div>
      28.               <div class="register-item">
      29.                   <label for="password">密码:</label>
      30.                   <input type="password" name="password" id="password" required>
      31.               </div>
      32.               <div class="register-item">
      33.                   <label for="repassword">确认密码:</label>
      34.                   <input type="password" name="repassword" id="repassword" required>
      35.               </div>
      36.               <div class="register-item">
      37.                   <label for="realname">姓名</label>
      38.                   <input type="text" name="realname" id="realname" required>
      39.               </div>
      40.               <div class="register-item">
      41.                   <label for="sex_2">性别</label>
      42.                   <div class="radio-item"><input type="radio" name="sex" id="sex_0" value="0"><label
      43.                           for="sex_0">男</label>
      44.                   </div>
      45.                   <div class="radio-item"><input type="radio" name="sex" id="sex_1" value="1"><label
      46.                           for="sex_1">女</label>
      47.                   </div>
      48.                   <div class="radio-item"><input type="radio" name="sex" id="sex_2" value="2" checked><label
      49.                           for="sex_2">保密</label></div>
      50.               </div>
      51.               <div class="register-item">
      52.                   <button type="submit">提交</button>
      53.               </div>
      55.           </div>
      56.           <div class="goto-login">
      57.               <a href="login.html">已有账号, 去登录 >></a>
      58.           </div>
      59.       </section>
      60.   </form>
      61. </body>
      63. </html>

    • 登录页(login.html)

      1. <!DOCTYPE html>
      2. <html lang="en">
      4. <head>
      5. <meta charset="UTF-8" />
      6. <meta name="viewport" content="width=device-width, initial-scale=1.0" />
      7. <title>用户登陆</title>
      8. <style>
      9.   @import "css/global.css";
      11.   @import "css/login.css";
      12. </style>
      13. </head>
      15. <body>
      16. <form action="doBusiness.php?action=login" method="post">
      17.   <section class="login-box">
      18.     <div class="login-title">
      19.       <span>用户登录</span>
      20.     </div>
      21.     <div class="login-content">
      22.       <div class="login-item">
      23.         <label for="username">用户名：</label>
      24.         <input type="text" name="username" id="username" required autofocus />
      25.       </div>
      26.       <div class="login-item">
      27.         <label for="password">密码：</label>
      28.         <input type="password" name="password" id="password" />
      29.       </div>
      30.       <div class="login-item">
      31.         <button type="submit">登陆</button>
      32.       </div>
      33.     </div>
      34.     <div class="goto-register">
      35.       <a href="register.html">还没有账号?赶紧去注册一个吧 >></a>
      36.     </div>
      37.   </section>
      38. </form>
      39. </body>
      41. </html>

  • css文件

    • global.css

      1.   * {
      2.       padding: 0;
      3.       margin: 0;
      4.       box-sizing: border-box;
      5.   }
      7.   html {
      8.       font-family: Helvetica, Geneva, Verdana, Arial;
      9.   }
      11.   body {
      12.       width: 100vw;
      13.       height: 100vh;
      14.   }

    • index.css

      1.   .top-bar {
      2.   height: 60px;
      3.   width: 100vw;
      4.   background-color: #ccc;
      5.   padding: 0 20px;
      7.   display: flex;
      8.   flex-flow: row nowrap;
      9.   justify-content: space-between;
      10.   align-items: center;
      11. }
      13. .top-bar>:first-child {
      14.   font-size: 30px;
      15. }
      17. .top-bar>:last-child>a {
      18.   color: #333;
      19.   text-decoration: none;
      20.   margin-left: 20px;
      21. }
      23. .top-bar>:last-child>a:hover {
      24.   color: red;
      25. }

    • register.css

  1. body {
  2.     display: table-cell;
  3.     vertical-align: middle;
  4.     background: #fafafa;
  5. }
  7. .register-box {
  8.     border: 1px solid #ddd;
  9.     width: 340px;
  10.     height: 340px;
  11.     margin: 0 auto;
  12.     background: white;
  13.     padding: 10px;
  14. }
  16. .register-box>.register-title {
  17.     height: 40px;
  18.     line-height: 30px;
  19.     padding: 0 20px;
  20.     font-size: 20px;
  21.     border-bottom: 1px solid #ddd;
  22.     color: #999;
  23. }
  25. .register-box>.register-content {
  26.     display: flex;
  27.     flex-flow: column nowrap;
  28.     justify-content: start;
  29.     align-items: start;
  30.     padding: 10px;
  31. }
  33. .register-box>.register-content>.register-item {
  34.     height: 40px;
  35.     line-height: 40px;
  36. }
  38. .register-box>.register-content>.register-item>label:first-of-type {
  39.     display: inline-block;
  40.     width: 80px;
  41.     color: #999;
  42.     text-align: justify;
  43. }
  45. .register-box>.register-content>.register-item input {
  46.     border: 1px solid #ddd;
  47.     height: 32px;
  48.     border-radius: 5px;
  49.     width: 200px;
  50. }
  52. .register-box>.register-content>.register-item:nth-last-child(2) {
  53.     display: flex;
  54.     flex-flow: row wrap;
  55.     justify-content: left;
  56.     align-content: center;
  57. }
  59. .register-box>.register-content>.register-item:nth-last-child(2) input {
  60.     width: 30px;
  61.     vertical-align: middle;
  62.     color: #999;
  63.     height: unset;
  64. }
  66. .register-box>.register-content>.register-item:nth-last-child(2) input:hover {
  67.     cursor: pointer;
  68. }
  70. .register-box>.register-content>.register-item:nth-last-child(2) label {
  71.     color: #999;
  72. }
  74. .register-box>.register-content>.register-item:nth-last-child(2) label:hover {
  75.     cursor: pointer;
  76. }
  78. button {
  79.     border: none;
  80.     height: 30px;
  81.     width: 280px;
  82. }
  84. button:hover {
  85.     background-color: #ccc;
  86.     cursor: pointer;
  87.     color: orangered;
  88. }
  91. .goto-login {
  92.     margin-top: 40px;
  93.     text-align: center;
  94. }
  96. .goto-login>a {
  97.     color: orangered;
  98.     text-decoration: none;
  99. }
  101. .goto-login>a:hover {
  102.     cursor: pointer;
  103.     color: darkgreen;
  104. }
  1. - login.css
  1. body {
  2.   display: table-cell;
  3.   vertical-align: middle;
  4.   background-color: #fafafa;
  5. }
  7. .login-box {
  8.   width: 340px;
  9.   height: 220px;
  10.   background-color: #fff;
  11.   margin: 0 auto;
  12.   padding: 10px;
  13. }
  15. .login-box > .login-title {
  16.   height: 40px;
  17.   line-height: 30px;
  18.   font-size: 1.5rem;
  19.   text-align: center;
  20.   color: #aaa;
  21.   border-bottom: 1px solid #ddd;
  22. }
  24. .login-box > .login-content {
  25.   display: flex;
  26.   flex-flow: column nowrap;
  27.   padding: 10px;
  28.   justify-content: start;
  29.   align-items: flex-start;
  30.   color: #aaa;
  31. }
  33. .login-box > .login-content > .login-item {
  34.   height: 40px;
  35.   line-height: 40px;
  36.   vertical-align: middle;
  37.   width: 100%;
  38. }
  40. .login-box > .login-content > .login-item > label {
  41.   display: inline-block;
  42.   width: 80px;
  43.   text-align-last: justify;
  44. }
  46. .login-box > .login-content > .login-item > input {
  47.   height: 32px;
  48.   border: 1px solid #aaa;
  49.   border-radius: 5px;
  50.   width: 200px;
  51. }
  53. .login-box > .login-content > .login-item > button {
  54.   border: none;
  55.   height: 30px;
  56.   line-height: 30px;
  57.   width: 100%;
  58.   margin-top: 30px;
  59.   color: #333;
  60. }
  62. .login-box > .login-content > .login-item > button:hover {
  63.   background-color: #aaa;
  64.   cursor: pointer;
  65.   color: orangered;
  66. }
  68. .goto-register {
  69.   margin-top: 50px;
  70.   text-align: center;
  71. }
  73. .goto-register>a {
  74.   color: orangered;
  75.   text-decoration: none;
  76. }
  78. .goto-register>a:hover {
  79.   cursor: pointer;
  80.   color: darkgreen;
  81. }

  • PHP脚本

    • 请求分发类doBusiness.php
  1. <?php
  2. require('../../out.php');
  3. require('UserStorage.php');
  4. require('UserLogin.php');
  6. // $userStorage = new UserStorage(1);
  7. $userStorage = new UserStorage(2);
  10. try {
  11.     $pdo = new PDO('mysql:host=localhost;dbname=phpedu;charset=utf8;port=3306', 'root', 'root');
  12. } catch (Exception $ex) {
  13.     echobr('系统内部错误');
  14.     die;
  15. }
  18. // 处理用户表相关操作
  19. $action = $_GET['action'];
  21. $userLogin = new UserLogin($pdo, $userStorage);
  23. switch ($action) {
  24.     case 'register':
  25.         $userLogin->doRegister();
  26.         break;
  27.     case 'login':
  28.         $userLogin->doLogin();
  29.         break;
  30.     case 'logout':
  31.         $userLogin->doLogout();
  32.         break;
  33.     default:
  34.         echo "<script>alert('无法处理的请求');window.location = '/0508/index.php';</script>";
  35. }
  1. - 会话管理类UserStorage.php
  1. <?php
  2. class UserStorage
  3. {
  4.     /* 1=cookie; 2=session */
  5.     public $storageType = 1;
  7.     public function __construct(int $storageType)
  8.     {
  9.         try {
  10.             if ($storageType !== 1 && $storageType !== 2) {
  11.                 throw new Exception("无效的存储类型");
  12.             }
  14.             $this->storageType = $storageType;
  15.         } catch (Exception $e) {
  16.             echobr($e->getMessage());
  17.             die;
  18.         }
  19.     }
  21.     public function getUserInfo()
  22.     {
  23.         if (!$this->isLogin()) {
  24.             return [];
  25.         }
  27.         if ($this->storageType === 1) {
  28.             return unserialize($_COOKIE['loginUser']);
  29.         }
  30.         session_start();
  31.         return unserialize($_SESSION['loginUser']);
  32.     }
  34.     public function rmUserInfo()
  35.     {
  36.         if ($this->storageType === 1) {
  37.             setcookie('loginUser', null, time() - 3600 * 24, '/');
  38.         } else {
  39.             session_start();
  40.             unset($_SESSION['loginUser']);
  41.         }
  42.     }
  44.     public function saveUserInfo($userStr)
  45.     {
  46.         if ($this->storageType === 1) {
  47.             $this->saveUserInfo2Cookie($userStr);
  48.         } else {
  49.             $this->saveUserInfo2Session($userStr);
  50.         }
  51.     }
  53.     public function saveUserInfo2Cookie($userStr)
  54.     {
  55.         setcookie('loginUser', $userStr, time() + 3600 * 24, '/');
  56.     }
  58.     public function saveUserInfo2Session($userStr)
  59.     {
  60.         session_start();
  61.         $_SESSION['loginUser'] = $userStr;
  62.     }
  64.     public function isLogin()
  65.     {
  66.         if ($this->storageType === 1) {
  67.             return $this->isLoginInCookie();
  68.         }
  69.         return $this->isLoginInSession();
  70.     }
  72.     public function isLoginInCookie()
  73.     {
  74.         if (isset($_COOKIE['loginUser']) && !empty($_COOKIE['loginUser'])) {
  75.             return true;
  76.         }
  78.         return false;
  79.     }
  81.     public function isLoginInSession()
  82.     {
  83.         session_start();
  84.         if (isset($_SESSION['loginUser']) && !empty($_SESSION['loginUser'])) {
  85.             return true;
  86.         }
  88.         return false;
  89.     }
  90. }
  1. - 登录相关操作类:UserLogin.php
  1. <?php
  2. require_once('UserStorage.php');
  4. class UserLogin
  5. {
  6.     private $pdo;
  7.     private $userStorage;
  9.     public function __construct(PDO $pdo, UserStorage $userStorage)
  10.     {
  11.         $this->pdo = $pdo;
  12.         $this->userStorage = $userStorage;
  13.     }
  15.     public function doRegister()
  16.     {
  17.         /* 解构post请求中的变量 */
  18.         extract($_POST);
  20.         // 数据验证    
  21.         if (strlen($username) < 3 || strlen($username) > 20) {
  22.             echobr("<script>alert('用户名长度需在6-20位之间');window.history.go(-1);</script>");
  23.             exit;
  24.         }
  26.         if (strlen($password) < 6 || strlen($password) > 15) {
  27.             echobr("<script>alert('密码长度需在6-15位之间');window.history.go(-1);</script>");
  28.             exit;
  29.         }
  31.         if ($password !== $repassword) {
  32.             echobr("<script>alert('两次输入的密码不一致');window.history.go(-1);</script>");
  33.             exit;
  34.         }
  36.         // 用户名验证
  37.         $sql = 'SELECT * FROM `users` WHERE `username` = :username';
  38.         $stmt = $this->pdo->prepare($sql);
  39.         $stmt->execute(['username' => $username]);
  40.         if ($stmt->rowCount() > 0) {
  41.             echobr("<script>alert('用户名已被使用');window.history.go(-1);</script>");
  42.             exit;
  43.         }
  45.         // 保存新用户
  46.         $sql = 'INSERT `users` SET `username` = :username, `password` = :pswd, `realname` = :realname, `sex` = :sex, `update_time` = :update_time, `create_time` = :create_time';
  47.         $stmt = $this->pdo->prepare($sql);
  48.         $stmt->execute(['username' => $username, 'pswd' => md5($password), 'realname' => $realname, 'sex' => $sex, 'update_time' => time(), 'create_time' => time()]);
  50.         dumpbr($stmt->debugDumpParams());
  51.         if ($stmt->rowCount() === 1) {
  52.             echobr("<script>alert('注册成功');window.location='/0508/login/index.php'</script>");
  53.         } else {
  54.             echobr($stmt->errorInfo());
  55.             // echobr("<script>alert('注册失败, 请重试');window.history.go(-1);</script>");
  56.             echobr("<script>alert('注册失败, 请重试');</script>");
  57.         }
  58.     }
  61.     public function doLogin()
  62.     {
  63.         // 解构参数
  64.         extract($_POST);
  66.         // 判断是不是已登陆
  67.         if ($this->userStorage->isLogin()) {
  68.             echobr("<script>alert('请不要重复登陆');window.location='/0508/login/index.php'</script>");
  69.             exit;
  70.         }
  72.         // 查询用户信息
  73.         $sql = "SELECT * FROM `users` WHERE `username` = :username";
  74.         $stmt = $this->pdo->prepare($sql);
  75.         $stmt->execute(['username' => $username]);
  76.         if ($stmt->rowCount() < 1) {
  77.             echobr("<script>alert('用户名不存在');window.history.go(-1);</script>");
  78.             exit;
  79.         }
  80.         $user = $stmt->fetch(PDO::FETCH_ASSOC);
  81.         if (md5($password) !== $user['password']) {
  82.             echobr("<script>alert('密码不正确');window.history.go(-1);</script>");
  83.             exit;
  84.         }
  86.         // 去掉密码
  87.         unset($user['password']);
  88.         $userStr = serialize($user);
  90.         // 存到cookie或session中
  91.         $this->userStorage->saveUserInfo($userStr);
  92.         // 跳转回首页
  93.         echobr("<script>alert('登陆成功');window.location='/0508/login/index.php'</script>");
  94.     }
  96.     public function doLogout()
  97.     {
  98.         $this->userStorage->rmUserInfo();
  99.         echobr("<script>alert('注销成功');window.location='/0508/login/index.php';</script>");
  100.     }
  101. }

运行效果:

  • 首页

  • 注册页

  • 登录页

  • 登陆成功

  • 注销成功

学习心得

  • cookie和session个人把它们看成是在不同的请求之间共享数据的两个池子, 一个放在客户端(浏览器), 一个放在服务器端. 可以把一些不太敏感的数据放到cookie中, 可以减少服务器的性能消耗. 而一些比较敏感的数据, 类似用户积分等, 放在session中似乎更安全一些.

  • 登录小实战, 似乎是自己抽象能力不够强, 都是把所有的业务逻辑”按流程”写完后, 才封装整理成相应的操作类. 而数据库操作类, 感觉不封装反而使用起来更灵活一些. 属性过滤器的用法较简单, 但是因为过滤器的种类太多, 相关参数也很杂, 对于初学者, 使用它还没有使用if...else...判断来得快

上一条：PHP文件上传综合示例下一条：对象序列化与实战案例
声明：本文内容转载自脚本之家，由网友自发贡献，版权归原作者所有，如您发现涉嫌抄袭侵权，请联系admin@php.cn 核实处理。
全部评论
文明上网理性发言，请遵守新闻评论服务协议

相关文章

查看更多