仅简单的PHP登录系统(不安全)



我正在尝试仅在PHP中登录一个密码,因为我有一个" Pocket Server"总是会更改域(我使用ngrok,所以我不必portforward),而且我需要一个域示踪剂,所以我的用户始终知道指向口袋服务器的链接,我已经有一个网站,我想制作它,以便我不必制作复杂的登录系统,我想仅仅通过一个来识别自己密码,别无其他,网站很简单,它具有文本框和一些文本

目标:

- 具有简单的密码登录

- 如果我登录,我可以更改公共网站上显示的域

到目前为止我的代码:

    <!DOCTYPE html>
<html>
  <meta charset="utf-8">
  <meta name="viewport" content="width=device-width, initial-scale=1">
  <title>Killer Doge</title>
  <link rel="stylesheet" href="style.css">
</head>
<body>
<h1>Killer Doge Tracer (Link changes daily)</h1>
<?php
$text = "domain";
?>
<p>Current domain:</p>
<?php
echo $text;
?>
<br>
<?php echo '<input type="text" name="name1" value="'.$admin.'">';
If ($admin == "694205") {
    echo yees;
}
?>
</body>
</html>

这几乎是@maarten van Middelaar所说的,但是有点复杂。

我将尝试通过代码注释解释:

<?php // always start the session first.
  if (session_status() == PHP_SESSION_NONE) {
    session_start();
  }
  //Check if loginform was submitted:
  if(isset($_POST['admin'])){
    if($_POST['admin'] == '12345678'){
      //user logged in correctly, store in session so you don't get instantly logged out:
      $_SESSION['loggedIn'] = "logged in!";
    }
  }
//check if domainchanger form was submitted and user is logged in
  if(isset($_POST['newdomain']) && isset($_SESSION['loggedIn'])){
   $newDomain = $_POST['newdomain'];
   //TODO: Set new domain in the database so your website can retrieve it.     
  }
  //Check if user is not logged in already
  if(!isset($_SESSION['loggedIn'])):
  //Show login form if not logged in
?>
<form method="post">    
   <input type='text' name='admin' />    
   <input type='submit' value="log in!" />    
</form>
<?php else:
//if logged in, show domain changer thing
//Show the current domain as the default value for the input
//TODO: make database connection here to get current domain
//structure: Create query to get current domain -> $currentDomain = dbresult
?>
<form method="post">
  <input type="text" name="newdomain" value="<?= $currentDomain ?>" />
  <input type='submit' value="change domain!"/>    
</form>
<?php endif ?>

我希望这一切都清楚。试图尽可能逐步进行。如果您有任何疑问,请告诉我:)

相关内容

最新更新