-1
다음 쿼리를 실행하여 새 사용자를 등록합니다. 그러나 사용자 이름, 암호 및 전자 메일 주소 필드 만 데이터베이스에 삽입됩니다. 철자가 데이터베이스에있는 철자와 정확하게 일치하는지 확인했습니다. 어디에 문제가 있는지 잘 모르겠습니다. , 당신이 바인딩 매개 변수를 사용하여 상황을 복잡하게 할 수있다 생각사용자 이름, 암호 및 전자 메일 필드 만 채워집니다.
<?php
/* Main page with two forms: sign up and log in */
require 'db_connection.php';
session_start();
?>
<!DOCTYPE html>
<html>
<head>
<title>Sign-Up Form: <?php include 'css/css.html'; ?></title>
</head>
<?php
/* form.php */
//session_start();
$_SESSION['message'] = '<div class="alert alert-error"><?= $_SESSION[\'message\'] ?></div>';
$mysqli = new mysqli('localhost', 'root', '', 'customer.accounts');
/*if (isset($_POST['btn-submit']))
$first_name = ($_POST['first_name']);
$last_name = ($_POST['last_name']);
$username = ($_POST['username']);
$DeliveryAddress= ($_POST['DeliveryAddress']);
$CreditCardNo= ($_POST['CreditCardNo']); */
if ($_SERVER["REQUEST_METHOD"] == "POST") {
//check if two passwords match
// if ($_POST['password'] == $_POST['password']) {
//define other variables with submitted values from $_POST,
$username = $mysqli->real_escape_string($_POST['username']);
$email = $mysqli->real_escape_string($_POST['email']);
$first_name = $mysqli->real_escape_string($_POST['first_name']);
$last_name = $mysqli->real_escape_string($_POST['last_name']);
$password = $mysqli->real_escape_string($_POST['password']);
$DeliveryAddress = $mysqli->real_escape_string($_POST['DeliveryAddress']);
$CreditCardNo = $mysqli->real_escape_string($_POST['CreditCardNo']);
//md5 hash password for security
$password = md5($_POST['password']);
$_SESSION['username'] = $username;
if(!preg_match('/^[a-zA-Z ]*$/',$first_name)) \t \t \t //validate firstname
{
$nameErr="Name can only contain alphabets";
$execute=false;
}
if(!preg_match('/^[a-zA-Z ]*$/',$last_name)) \t \t \t //validate lastname
{
$nameErr="Name can only contain alphabets";
$execute=false;
}
if(!preg_match('/^[0-9]*$/',$ContactNo)) \t \t \t \t //validate phone
{
$phoneErr="Mobile Number can only contain digits";
$execute=false;
}
if(strlen($ContactNo)<10)
{
$phoneErr="<br/>Mobile number is too short";
$execute=false;
}
if(strlen($CreditCardNo)<16) //validate card details
{
$phoneErr="<br/>Credit Card Number is too short";
$execute=false;
}
if($execute!=false)
//Bind and insert user data into database
$sql = "INSERT INTO useraccounts (first_name,last_name,username, email, password,DeliveryAddress,CreditCardNo) VALUES (?,?,?,?,?,?,?)";
$stmt->bind_param('ssssssi', $first_name, $last_name, $username,$email,$password,$DeliveryAddress,$CreditCardNo);
$username= $_SESSION('username');
$stmt->execute();
//check if mysql query is successful, then register the user.
if ($stmt === true) {
$_SESSION['message'] = "Registration successful!"
. "Added $username to the database!";
//redirect the user to welcome.php if the registration is successful
header("location: welcome.php");
} else {
$_SESSION['message'] = 'User could not be added to the database!';
}
$mysqli->close();
//else {
// $_SESSION['message'] = 'Two passwords do not match!';
//if ($_SERVER["REQUEST_METHOD"] == "POST")
}
function test_input($data){
$data=trim($data);
$data=htmlspecialchars($data);
return $data;
}
//Registration Form
?>
<link href="//db.onlinewebfonts.com/c/a4e256ed67403c6ad5d43937ed48a77b?family=Core+Sans+N+W01+35+Light" rel="stylesheet" type="text/css"/>
<link rel="stylesheet" href="form.css" type="text/css">
<div class="body-content">
<div class="module">
<h1>Create an Account </h1>
<form class="form" action="form.php" method="post" enctype="multipart/form-data" autocomplete="off">
<div class="alert alert-error"> <?= $_SESSION['message'] ?></div>
<input type="text" placeholder="First Name" name="first_name" required />
<input type="text" placeholder="Last Name" name="last_name" required />
<input type="text" placeholder="User Name" name="username" required />
<input type="email" placeholder="Email" name="email" required />
<input type="password" placeholder="Password" name="password" autocomplete="new-password" required />
<input type="password" placeholder="Confirm Password" name="confirmpassword" autocomplete="new-password" required />
<input type="text" placeholder="Delivery Address" name="DeliveryAddress" autocomplete="DeliveryAddress" required />
<input type="text" placeholder="Payment Details" name="CreditCardNo" autocomplete="CreditCardNo" required />
<input type="submit" value="Register" name="submit" class="btn btn-block btn-primary" />
</form>
</div>
신용 카드 번호가 저장되어 있습니까? 나는 당신이 무엇을하고 있는지 알고 있기를 희망한다. –
btw,'$ _SESSION'은 함수가 아니며, (superglobal) 배열이다. –
어디서 PHP 폼 유효성 검사 및 html 폼입니다. 당신이 그것을 게시 할 수 있다면 도움이 될 것입니다 – Jonny