我在mysql数据库中插入信息时遇到问题

Question

我实际上是php和mysqli编程的新手，我创建了一个登录和注册表单。我在互联网上做了一些关于编码和如何完成这项工作的研究，当我试图注册用户时，我在将信息插入mysql数据库时遇到了问题。我收到消息">SQLSTATE[HY093]：无效参数编号：未定义参数">

require_once 'dbconfig.php';
class USER
{   
private $conn;
public function __construct()
{
$database = new Database();
$db = $database->dbConnection();
$this->conn = $db;
}
public function runQuery($sql)
{
$stmt = $this->conn->prepare($sql);
return $stmt;
}
public function lasdID()
{
$stmt = $this->conn->lastInsertId();
return $stmt;
}
public function register($uname,$email,$upass,$code,$spol)
{
try
{                           
$password = md5($upass);
$stmt = $this->conn->prepare("INSERT INTO tbl_users(userName,userEmail,userPass,tokenCode,spol) 
VALUES(:user_name, :user_mail, :user_pass, :active_code, :spol)");
$stmt->bindparam(":user_mail",$email);
$stmt->bindparam(":user_pass",$password);
$stmt->bindparam(":spol",$spol);
$stmt->bindparam(":active_code",$code);
$stmt->execute();   
return $stmt;
}
catch(PDOException $ex)
{
echo $ex->getMessage();
}
}
public function login($email,$upass)
{
try
{
$stmt = $this->conn->prepare("SELECT * FROM tbl_users WHERE userEmail=:email_id");
$stmt->execute(array(":email_id"=>$email));
$userRow=$stmt->fetch(PDO::FETCH_ASSOC);
if($stmt->rowCount() == 1)
{
if($userRow['userStatus']=="Y")
{
if($userRow['userPass']==md5($upass))
{
$_SESSION['userSession'] = $userRow['userID'];
return true;
}
else
{
header("Location: index.php?narobe");
exit;
}
}
else
{
header("Location: index.php?inactive");
exit;
} 
}
else
{
header("Location: index.php?error");
exit;
}  
}
catch(PDOException $ex)
{
echo $ex->getMessage();
}
} 
public function is_logged_in()
{
if(isset($_SESSION['userSession']))
{
return true;
}
}
public function redirect($url)
{
header("Location: $url");
}
public function logout()
{
session_destroy();
$_SESSION['userSession'] = false;
}

我不确定是我在mysql表中犯了错误，还是我只是键入了一个错误的代码。如果有人能帮我解决一个问题，那将是令人惊讶的。

这是mysql表的图片

https://ibb.co/djfXDK0

Answer 1

您需要将$uname参数添加到绑定参数中，您忘记了一行代码：

$password = md5($upass);
$stmt = $this->conn->prepare("INSERT INTO tbl_users(userName,userEmail,userPass,tokenCode,spol) 
VALUES(:user_name, :user_mail, :user_pass, :active_code, :spol)");
$stmt->bindparam(":user_name",$uname);
$stmt->bindparam(":user_mail",$email);
$stmt->bindparam(":user_pass",$password);
$stmt->bindparam(":spol",$spol);
$stmt->bindparam(":active_code",$code);
$stmt->execute();

您不应该使用MD5作为密码的哈希，您应该使用函数password_hash()和password_verify()TR中内置的php