PHP 用户登录范例

PHP 用户登录实例

create database PHPDemo01
use PHPDemo01
create table worx_user(
	user_id integer unsigned not null auto_increment,
	username varchar(20) not null,
	password char(40) not null,
	email_addr	varchar(100),
	is_acvtive      tinyint(1) default 0,
        primary key(user_id)
)
engine=myisam default character set latin1
collate latin1_general_cs auto_increment=0;

create table worx_pending(
	user_id integer unsigned not null,
	token char(10)	not null,
	create_date timestamp default current_timestamp,
        foreign key(user_id) references worx_user(user_id)
)
engine=myisam default character set latin1
collate latin1_general_cs;

?

<?php define('IS_ENV_PRODUCTION',true);

error_reporting(E_ALL | E_STRICT);
ini_set('display_errors', !IS_ENV_PRODUCTION);
ini_set('error_log' ,'log/phperror.txt');

date_default_timezone_set('America/New_York');

if(get_magic_quotes_gpc())
{
	function _stripslashes_rcurs($variable,$top = true)
	{
		$clean_data = array();
		foreach($variable as $key => $value)
		{
			$key = ($top)?$key : stripslashes($key);
			$clean_data[$key] = (is_array($value))? stripslashes_rcurs($value,false) : stripslashes($value);
		}
		return $clean_data;
	}
	$_GET = _stripslashes_rcurs($_GET);
	$_POST = _stripslashes_rcurs($_POST);
}
?>

?

<?php define('DB_HOST', 'localhost');
define('DB_USER', 'root');
define('DB_PASSWORD', 'chenhailong');
define('DB_SCHEMA', 'PHPDemo01');
define('DB_TEL_PERFIX', 'WORX_');
if (!$GLOBALS['DB'] = mysql_connect(DB_HOST, DB_USER, DB_PASSWORD)) {
    die('Error :Unable to connect to database server.');
}
if (!mysql_select_db(DB_SCHEMA, $GLOBALS['DB'])) {
    mysql_close($CLOBALS['DB']);
    die('Error :Unable to select database schema.');
}
echo 'chenhailong '
?>

?

<?php function random_text($count,$rm_similar = false)
{
	$chars = array_flip(array_merge(range(0,9),range('A','Z')));
	if($rm_similar)
	{
		unset($chars[0],$chars[1],$chars[2],$chars[5],$chars[8],$chars['B'],$chars['I'],$chars['O'],$chars['Q']
		,$chars['S'],$chars['U'],$chars['V'],$chars['Z']);
	}
	for($i = 0 , $text = '';$i<$count;$i++)
	{
		$text = array_rand($chars);
	}
	return $text;
}
?>

?

<?php class User
{
    private $uid;
    private $fields;
    public function _construct()
    {
        $this->uid = null;
        $this->fields = array('username' => '', 'password' => '', 'emailAddr' => '',
            'isActive' => false);
    }
    public function _get($field)
    {
        if ($field == 'userId') {
            return $this->uid;
        } else {
            return $this->fields[$field];
        }
    }
    public function _set($field, $value)
    {
        if (array_key_exists($field, $this->fields)) {
            $this->fields[$field] = $value;
        }
    }
    public static function validateUserName($username)
    {
        return preg_match('/^[A-Z0-9]{2,20}$/i', $username);
    }
    public static function validateEmailAddr($email)
    {
        return filter_var($email, FILTER_VALIDATE_EMAIL);
    }
    public static function getById($user_id)
    {
        $user = new User();
        $query = sprintf('select username,password,email_addr,is_active' .
            'from %sUser where User_ID =%d', DB_TEL_PERFIX, $user_id);
        $result = mysql_query($query, $GLOBALS['DB']);
        if (mysql_num_rows($result)) {
            $row = mysql_fetch_assoc($result);
            $user->username = $row['USERNAME'];
            $user->password = $row['PASSWORD'];
            $user->emailAddr = $row['EMAIL_ADDR'];
            $user->isactive = $row['IS_ACTIVE'];
            $user->uid = $user_id;
        }
        mysql_free_result($result);
        return $user;
    }

    public static function getByUsername($username)
    {
        $user = new User();
        $query = sprintf('select user_id,password,email_addr,is_active' .
            'from %sUser where username = "$s"', DB_TEL_PERFIX, mysql_real_escape_string($username,
            $GLOBALS['DB']));
        $result = mysql_query($query, $GLOBALS['DB']);
        if (mysql_num_rows($result)) {
            $row = mysql_fetch_assoc($result);
            $user->username = $row['USERNAME'];
            $user->password = $row['PASSWORD'];
            $user->emailAddr = $row['EMAIL_ADDR'];
            $user->isactive = $row['IS_ACTIVE'];
            $user->uid = $user_id;
        }
        mysql_free_result($result);
        return $user;
    }
    public function save()
    {
        if ($this->uid) {
            $query = sprintf('update %sUser set username="%s",password="%s",email_addr="%s",is_active=%d' .
                'where user_id = %d', DB_TEL_PERFIX, mysql_real_escape_string($this->username, $GLOBALS['DB']),
                mysql_real_escape_string($this->password, $GLOBALS['DB']),
                mysql_real_escape_string($this->emailaddr, $GLOBALS['DB']), $this->isActive, $this->
                userId);
            return mysql_query($query, $GLOBALS['DB']);
        } else {
            $query = sprintf('insert into %sUser (username,password,email_addr,is_active) values ("%s","%s","%s","%d")',
                DB_TEL_PERFIX, mysql_real_escape_string($this->username, $GLOBALS['DB']),
                mysql_real_escape_string($this->password, $GLOBALS['DB']),
                mysql_real_escape_string($this->emailaddr, $GLOBALS['DB']), $this->isActive);
            if (mysql_query($query, $GLOBALS['DB'])) {
                $this->uid = mysql_insert_id($GLOBALS['DB']);
                return true;
            } else {
                return false;
            }

        }
    }

    public function setInactive()
    {
        $this->isActive = false;
        $this->save();

        $token = random_text(5);
        $query = sprintf('insert into %sPending (user_id,token) values (%d,"%s")',
            DB_TEL_PERFIX, $this - uid, $token);
        return (mysql_query($query, $GLOBALS['DB'])) ? $token : false;
    }
    public function setActive($token)
    {
        $query = sprintf('select token from %sPending where user_id = %d'.
                        'And token ="%s"',DB_TEL_PERFIX,$this-uid,
                        mysql_real_escape_string($token,$GLOBALS['DB']));
                        $result = mysql_query($query,$GLOBALS['DB']);
        if(!mysql_num_rows($result))
        {
            mysql_free_result($result);
            return false;
        }
        else
        {
            mysql_free_result($result);
        }
    }


}

?>

?