为什么要在未在网页的php脚本中运行的sql查询中更新密码？

Question

我正在创建一个网站，其中包含客户端和自由职业者的两个数据库表。现在，我必须集成所有内容，例如配置文件凭据，密码，图像等。

最初，应用程序处理两个不同的文件（在两个不同的文件夹中）。密码和其他个人资料凭据（例如，自由职业者和客户的名称，用户名和电子邮件）的更改。因此，要将所有内容集成到单个文件中，我将在客户端之一中执行freelancer表的所有sql查询。所有配置文件凭据均已成功更新，但密码未成功更新。我不明白为什么？

这是Client / profile.php文件

$client = new Client();
$freelancer = new Freelancer();

//Check if Client is logged in
if (!$client->isLoggedIn() && !$freelancer->isLoggedIn()) { 
    Redirect::to('../index.php');
}

//Get Instructor's Data
$query = DB::getInstance()->get("client", "*", ["clientid" => $client->data()->clientid]);
if ($query->count()) {
    foreach ($query->results() as $row) {
        $nid = $row->id;
        $name = $row->name; 
        $username = $row->username;
        $email = $row->email;
        $bgimage = $row->bgimage;
        $phone = $row->phone;
    }
}

//Edit Profile Data
if (isset($_POST['profile'])) {
    if (Input::exists()) {
        if (Token::check(Input::get('token'))) {

            $errorHandler = new ErrorHandler;

            $validator = new Validator($errorHandler);

            $validation = $validator->check($_POST, [
                'username' => [
                    'required' => true,
                    'maxlength' => 20,
                    'minlength' => 2
                ],
                'name' => [
                    'required' => true,
                    'maxlength' => 100,
                    'minlength' => 2
                ],
                'email' => [
                    'required' => true,
                    'maxlength' => 255,
                    'email' => true,
                ],
                'phone' => [
                    'required' => false,
                    'maxlength' => 10,
                    'minlength' => 10
                ]
            ]);

            if (!$validation->fails()) {


                $client->update([
                    'name' => Input::get('name'),
                    'username' => Input::get('username'),
                    'email' => Input::get('email'),
                    'phone' => Input::get('phone')
                ], [
                    'clientid' => $client->data()->clientid
                ]);

                if (count($client) > 0) {
                    $noError = true;
                } 
                else {
                    $hasError = true;
                }

                $freelancer->update([
                    'name' => Input::get('name'),
                    'username' => Input::get('username'),
                    'email' => Input::get('email'),
                    'phone' => Input::get('phone')
                ], [
                    'freelancerid' => $freelancer->data()->freelancerid
                ]);

                if (count($freelancer) > 0) {
                    $noError = true;
                } else {
                    $hasError = true;
                }
            } 
            else {
                $error = '';
                foreach ($validation->errors()->all() as $err) {
                    $str = implode(" ", $err);
                    $error .= '
               <div class="alert alert-danger fade in">
                <a href="#" class="close" data-dismiss="alert">&times;</a>
                <strong>Error!</strong> ' . $str . '
               </div>
               ';
                }
            }
        }
    }
}

/*Edit Password Data*/
if (isset($_POST['register'])) {
    if (Input::exists()) {
        if (Token::check(Input::get('token'))) {

            $errorHandler = new ErrorHandler;

            $validator = new Validator($errorHandler);

            $validation = $validator->check($_POST, [
                'password_current' => [
                    'required' => true,
                    'maxlength' => 300
                ],
                'password_new' => [
                    'required' => true,
                    'minlength' => 6
                ],
                'password_new_again' => [
                    'required' => true,
                    'match' => 'password_new'
                ]
            ]);

            if (!$validation->fails()) { //working fine

                if ( (Hash::make(Input::get('password_current'), $client->data()->salt) !== $client->data()->password) && (Hash::make(Input::get('password_current'), $freelancer->data()->salt) !== $freelancer->data()->password) ){
                    $hasError = true; 
                } 
                else {
                    $salt = Hash::salt(32);

                    $changed_password = Hash::make(Input::get('password_new'), $salt);

                     $client->update([
                        'password' => $changed_password, 
                        'salt' => $salt
                     ], [
                        'clientid' => $client->data()->clientid
                     ]);
                    $noError = true;
                }

                if (!$validation->fails()) { //not working

                    if (Hash::make(Input::get('password_current'), $freelancer->data()->salt) !== $freelancer->data()->password) {
                        $hasError = true;
                    } 
                    else {
                          $salt = Hash::salt(32);
                          $freelancer->update([
                            'password' => Hash::make(Input::get('password_new'), $salt),
                            'salt' => $salt
                              ],[
                            'freelancerid' => $freelancer->data()->freelancerid
                              ]);
                          $noError = true;
                }
            }

            else {
                $error = '';
                foreach ($validation->errors()->all() as $err) {
                    $str = implode(" ", $err);
                    $error .= '
               <div class="alert alert-danger fade in">
                <a href="#" class="close" data-dismiss="alert">&times;</a>
                <strong>Error!</strong> ' . $str . '
               </div>
               ';
                }
            }
        }
    }
}

这是Freelancer / profile.php文件代码，用于更改密码

if(isset($_POST['register'])){
    if (Input::exists()) {
        if (Token::check(Input::get('token'))) {

            $errorHandler = new ErrorHandler;

            $validator = new Validator($errorHandler);

            $validation = $validator->check($_POST, [
                'password_current' => [
                'required' => true,
                'maxlength' => 300
                ],
                'password_new' => [
                'required' => true,
                'minlength' => 6
                ],
                'password_new_again' => [
                'required' => true,
                'match' => 'password_new'
                ]
            ]);

            if (!$validation->fails()) {

                if (Hash::make(Input::get('password_current'), $freelancer->data()->salt) !== $freelancer->data()->password) {
                    $hasError = true;
                } 
                else {
                    $salt = Hash::salt(32);
                    $freelancer->update([
                        'password' => Hash::make(Input::get('password_new'), $salt),
                        'salt' => $salt
                        ],[
                        'freelancerid' => $freelancer->data()->freelancerid
                        ]);
                    $noError = true;
                }

            } 
            else {
                $error = '';
                foreach ($validation->errors()->all() as $err) {
                    $str = implode(" ",$err);
                    $error .= '
                        <div class="alert alert-danger fade in">
                        <a href="#" class="close" data-dismiss="alert">&times;</a>
                        <strong>Error!</strong> '.$str.'
                        </div>
                    ';
            }
        }   
        }
}
}

我的问题是，更改用户名，电子邮件和电话号码的查询是否正常，为什么自由职业者的密码更改不起作用？

Answer 1

哈希函数算法可以为相同的输入字符串提供两个加密的字符串，因此当我为客户端和自由职业者两次调用该函数时，两个不同的字符串并存储在数据库中。