使用php创建登录脚本的问题

Question

我的网站登录脚本需要一些帮助。我只收到“ nouser”错误，但我知道我有一个帐户，并且登录正确。就像它跳过了脚本的登录部分一样。我已经检查了大括号，我认为我是对的。好像从数据库中提取问题吗？

任何人都可以看到错误的地方，或者可以给我一些改进的技巧吗？

if (isset($_POST['login-submit'])) {

        require "dbh.i.php";

        $mailuid = $_POST['mailuid'];
        $password = $_POST['pwd'];

        if (empty($mailuid) && empty($password)) {
            header("Location: ../index.php?error=emptyfields");
            exit();
        } else {
            $sql = "SELECT * FROM users WHERE uidUsers=? OR emailUsers;";
            $stmt = mysqli_stmt_init($connect);

            if (!mysqli_stmt_prepare($stmt, $sql)) {
                header("Location: ../index.php?error=sqlerror");
                exit();
            } else {
                mysqli_stmt_bind_param($stmt, "ss", $mailuid, $mailuid);
                mysqli_stmt_execute($stmt);
                $result = mysqli_stmt_get_result($stmt);

                if ($row = mysqli_fetch_assoc($result)) {
                    $pwdCheck = password_verify($password, $row['pwdUsers']);

                    if ($pwdCheck == false) {
                        header("Location: ../index.php?error=wrongpwd");
                        exit();
                    } else if ($pwdCheck == true) {
                        session_start();
                        $_SESSION[userId] = $row['idUsers'];
                        $_SESSION[userUid] = $row['uidUsers'];
                        header("Location; ../index.php?login=success");
                        exit();
                    } else {
                        header("Location: ../index.php?error=wrongpwd");
                        exit();
                    }
                } else {
                    header("Location: ../index.php?error=nouser");
                    exit();
                }
            }
        }
    } else {
        header("Location: ../index.php?signup");
        exit(); 
    }

Answer 1

我认为您的代码的这一部分是错误的：

$sql = "SELECT * FROM users WHERE uidUsers=? OR emailUsers;";
$stmt = mysqli_stmt_init($connect);
if (!mysqli_stmt_prepare($stmt, $sql)) {
    header("Location: ../index.php?error=sqlerror");
    exit();
} else {
    mysqli_stmt_bind_param($stmt, "ss", $mailuid, $mailuid);

您在查询中仅可替换一个占位符：SELECT * FROM users WHERE uidUsers=? OR emailUsers;，但将其替换两次：mysqli_stmt_bind_param($stmt, "ss", $mailuid, $mailuid);

尝试将您的查询更改为：

SELECT * FROM users WHERE uidUsers=? OR emailUsers=?;

Answer 2

您的$_SESSION[]变量误入了'。

$_SESSION[userId] = $row['idUsers'];
$_SESSION[userUid] = $row['uidUsers'];