php综合练习--mymessbox--登录_php教程

php综合练习--mymessbox--登录

登录页面：

: 0:0: font-family: '宋体', width::17% width:-left: - margin-left: margin-left: : font-size:-family:-bottom:</style> </head> <body> <div id="wrap"> <div id="welcome">Welcome to mymessbox!</div> <form action="loginok.php" method="post">  择： <select name="loginname" id="sid"> <option value="manager">管理员</option> <option value="user">用户</option> </select> <br><input type="text" name="username" id=""> <br>  码：<input type="password" name="password" id=""> <br><input type="text" name="vcode" id=""><img src="vcode.php" id="vcode"> <br> <input type="submit" value="login" id="sub"> <input type="reset" value="reset" id="res"> </form> </div> </body> </html> login.php

登录页面处理：

= ['loginname' = ['username' = ['password' = (['vcode' = (['rcode'("localhost", "root", "111"("mymessbox"("set names utf8" ( !== "<script>alert('the code is wrong!');window.location.href='login.php'</script>" ( == 'manager' = "select username,password from manager where username='' and password=''" = ( = ( ( >=1['mgusername'] = "<script>alert('login success!');window.location.href='./manager/mg_index.php'</script>" "<script>alert('Login failed!The username or password was wrong!Please login again!');window.location.href='login.php'</script>" = "select username,password from user where username='' and password=''" = ( = ( ( >=1['username'] = "<script>alert('login success!');window.location.href='./user/index.php'</script>" "<script>alert('Login failed!The username or password was wrong!!Please login again!');window.location.href='login.php'</script>" loginok.php

先发这两个吧，虽然还没有完成，还有很多漏洞百出的地方，但是我会一点一点去改。

希望哪个大神在看的时候，能多多指点。不胜感激！

相关阅读：

php综合练习--mymessbox--登录

相关文章

PHP之友评论