header("content-type:text/html:charset=utf-8");
include("conn.php");
if(isset($_POST['submitted'])){
$user = $_POST['user'];
$pwd = $_POST['pwd'];
$sql = 'select * from name where user="'.$user.'"';
//$sql = "select * from name where user = '.$user'";
$result = mysqli_query($conn,$sql) ;
$row = mysqli_fetch_array($result);
$cmp_pwd = $row['password'];
$quan =$row['quan'];
$xbb = 1;
$fx = 0;
if( $cmp_pwd == $pwd && $quan == $xbb){ //用从数据库取出的密码和提交的密码比较
echo "";
Header("Location:addhc1.php");
//跳转到指定页面
}elseif($cmp_pwd1 == $pwd && $quan == $fx){
echo "";
Header("Location:bddhc1.php"); //重新载入页面
} else{
echo "";
Header("Location:login1.php"); //重新载入页面
}
}
?>
Copyright 2014-2025 https://www.php.cn/ All Rights Reserved | php.cn | 湘ICP备2023035733号
你的查询语句 少了一个单引号 你可以按照我这样写 $sql = 'select * from name where user ='.$user;
$sql = 'select * from name where user="'.$user.'"';
变量名用单引号。
PHP中,双引号里可以使用变量,你可以这么写:
$sql = “select * from name where user=\'$user\';";