Oop PHP 登录检查散列密码

Question

我的问题是在课堂上检查哈希密码。这是错误：致命错误：未捕获错误：无法在 Auth.php:51 中使用 PDOStatement 类型的对象作为数组堆栈跟踪：#0 index.php(19): Auth->login() #1 {main} 在线 Auth.php 中抛出51if(isset($_POST['login'])) {    $username = $_POST['username'];    $password = $_POST['password'];    #LINE 19    $ui->login($username, $password); }这是我的代码public function login ( $username, $password ) {    $u_login = $this->conn->prepare("SELECT * FROM korisnici WHERE username = :username");    $u_login->bindValue(':username', $username);    $u_login->execute();    $u_login->fetch(PDO::FETCH_ASSOC);    # LINE 51    $u_v_PASS = password_verify($password, $u_login['password']);      if($u_v_PASS->count()) {        echo 'uspesno';    } else {     }}

Answer 1

您正在使用 PDOStatement 对象执行提取，但不存储该提取的结果。相反，您在 PDOStatement 对象本身中查找密码。尝试：

public function login ( $username, $password ) {

    $u_login = $this->conn->prepare("SELECT * FROM korisnici WHERE username = :username");

    $u_login->bindValue(':username', $username);

    $u_login->execute();

    /*

     * Now that the prepared statement has been built and executed, we can

     * try to fetch a matching user and store it as $user - this will be an

     * array if successful or boolean false if not.

     */

    $user = $u_login->fetch(PDO::FETCH_ASSOC);

    /* Check that $user is not false and the password_verify returns boolean

     * true when comparing the password to the hashed password stored in the

     * database.

     */

    if ($user && password_verify($password, $user['password'])) {

        // User was found and password matched

    }

}