怎样把用户登陆表单和验证码结合起来？

nothing9

初学php，写的很乱，以下代码可以验证单一用户，请问：如何加入从mysql数据表中读取数据来验证多个用户？

<?php
//Filename:authpage.php
srand((double)microtime()*1000000);

$array="0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz";

for($i=0;$i<4;$i++)
  {
  $authnum .=substr($array,rand(0,61),1);
  }
?>
<?
if ((!isset($_POST['user'])) || (!isset($_POST['pass'])) || (!isset($_POST['authinput']))) {
?>
<form action="<?php echo $PHP_SELF; ?>" method="post">
    用户名：<input type="text" name="user" value="abcd" style="width: 80px" />
    密码：<input type="text" name="pass" value="1234" style="width: 80px" />
    验证码：<input type="text" name="authinput" style="width: 80px" />
    <input type="hidden" name="authnum" value="<? echo $authnum; ?>" />
    <img src="authimg.php?authnum=<? echo $authnum; ?>" />
    <input type="submit" name="验证" value="登陆" />
</form>
<?
exit;

} else if ((isset($_POST['user'])) && (isset($_POST['pass'])) || (!isset($_POST['authinput']))){

/* Values contain some values, so check to see if they're correct */

if (($_POST['user'] != "abcd") || ($_POST['pass'] != "1234") || strcmp($_POST['authnum'],$_POST['authinput']) != "0") {
?>
<form action="<?php echo $PHP_SELF; ?>" method="post">
    用户名：<input type="text" name="user" style="width: 80px" />
    密码：<input type="password" name="pass" style="width: 80px" />
    验证码：<input type="text" name="authinput" style="width: 80px" />
    <input type="hidden" name="authnum" value="<? echo $authnum; ?>" />
    <img src="authimg.php?authnum=<? echo $authnum; ?>" />
    <input type="submit" name="验证" value="登陆" />
</form>
<?
exit;
} else if (($_POST['user'] == "abcd") || ($_POST['pass'] == "1234") || (strcmp($_POST['authnum'],$_POST['authinput'])== "0" )) {
/* if all values are correct, print success message */
echo "<P>You're authorized!</p>";
}
}
?>
<?php
include "footer.php";
?>


数据库
$myconn=mysql_connect("localhost","root","abcd1234");
mysql_select_db("mydb",$myconn);
$strSql="select * from user where user='".$_POST['user']."' and passwd='".$_POST['pass']."'";

如何通过mysql数据库来验证，而不是用 if (($_POST['user'] == "abcd") || ($_POST['pass'] == "1234")) 来判断？

nothing9

Windows XP SP2 + Apache 1.3.33 + MySQL 4.0.21 + PHP 4.3.10

authnum.php

1. <?
   
2. Header("Content-type:image/png");
   
3. session_start();
   
4. $authnum_session = '';
   
5. $str = 'abcdefghijkmnpqrstuvwxyz1234567890';
   
6. $l = strlen($str);
   
7. for($i=1;$i<=4;$i++)
   
8. {
   
9. $num=rand(0,$l-1);
   
10. $authnum_session.= $str[$num];
    
11. }
    
12. $_SESSION['authnum_session'] = $authnum_session;
    
13. srand((double)microtime()*1000000);
    
14. $im = imagecreate(50,20);
    
15. $black = ImageColorAllocate($im, 0,0,0);
    
16. $white = ImageColorAllocate($im, 255,255,255);
    
17. $gray = ImageColorAllocate($im, 200,200,200);
    
18. imagefill($im,68,30,$gray);
    
19. $li = ImageColorAllocate($im, 220,220,220);
    
20. for($i=0;$i<3;$i++)
    
21. {
    
22. imageline($im,rand(0,30),rand(0,21),rand(20,40),rand(0,21),$li);
    
23. }
    
24. imagestring($im, 5, 8, 2, $authnum_session, $white);
    
25. for($i=0;$i<90;$i++)
    
26. {
    
27. imagesetpixel($im, rand()%70 , rand()%30 , $gray);
    
28. }
    
29. ImagePNG($im);
    
30. ImageDestroy($im);
    
31. ?>

复制代码

login.php

1. 
   
2. <?php
   
3. /*
   
4. --------------------------------------------------------
   
5. CREATE TABLE user (
   
6.    id smallint(6) NOT NULL auto_increment,
   
7.    user varchar(12) NOT NULL,
   
8.    passwd varchar(32) NOT NULL,
   
9.    UNIQUE id (id)
   
10. );
    
11. --------------------------------------------------------
    
12. */
    
13. session_start();
    
14. if ($_POST['user']=="" && $_POST['pass']=="" && !isset($HTTP_POST_VARS['authinput']))
    
15. {
    
16. ?>
    
17. <form action="<?php echo $PHP_SELF ?>" method="post">
    
18. user:<input type="text" name="user" value="abcd"><br>
    
19. pass:<input type="text" name="pass" value="1234"><br>
    
20. auth：<input type="text" name="authinput">
    
21. <input type="text" name="authnum" style="width: 80px" value="<? echo $_SESSION['authnum_session']; ?>" />
    
22. <img src="authnum.php?authnum=<? echo $_SESSION['authnum_session']; ?>">
    
23. <input type="submit" value="ok">
    
24. </form>
    
25. <?
    
26. }
    
27. else
    
28. {
    
29.   $myconn=mysql_connect("localhost","root","abcd1234");
    
30.   mysql_select_db("mydb",$myconn);
    
31.   $strSql="select * from user where user='".$_POST['user']."' and passwd='".md5($_POST['pass'])."'";
    
32.   $result=mysql_query($strSql,$myconn);
    
33.   $row = mysql_fetch_array($result);
    
34.   $id = $row[id];
    
35.   mysql_close($myconn);
    
36. if($id="" || strcmp($HTTP_POST_VARS['authnum'],$HTTP_POST_VARS['authinput'])!==0)
    
37. {
    
38. echo "Login Fail!";
    
39. }
    
40. else
    
41. {
    
42. echo "OK!<br><a href=\"next.php\">next page</a><br>";
    
43. }
    
44. }
    
45. ?>
    

复制代码