???????? ??? ????? ???? ???? ??

?????? ?? ? ????????? ?? ?????? ??? ????? ???? ?? ?????. . ???? ??? ??? ?? ??? ??? ???? ??? ?? ?????. ? Q&A??? ??? ??? ??? ?? ???????? ?? ??? ????? ???? ???? ??? ???????.

??:

???? ??? ??????. MySQL ??????? ??? ??? ????? ?? ??????. ??, ??? ????? ?? ?? ?? ??? ?? ?? ?? ??? ??? ???? ????.

?? ?? ?? ??:

$servername = 'localhost';
$username = 'root';
$pwd = '';
$dbname = 'lp001';

$connect = new mysqli($servername, $username, $pwd, $dbname);

if ($connect->connect_error) {
    die('connection failed, reason: ' . $connect->connect_error);
}

$name = mysqli_real_escape_string($connect, $_POST['name']);
$password = mysqli_real_escape_string($connect, $_POST['password']);
$saltQuery = "SELECT salt FROM users WHERE name = '$name';";
$result = mysqli_query($connect, $saltQuery);
if ($result === false) {
    die(mysqli_error());
}
$row = mysqli_fetch_assoc($result);
$salt = $row['salt'];

$saltedPW = $password . $salt;
$hashedPW = hash('sha256', $saltedPW);
$sqlQuery = "SELECT * FROM users WHERE name = '$name' AND password = '$hashedPW'";

if (mysqli_query($connect, $sqlQuery)) {
    echo '<h1>Welcome to the member site ' . $name . '</h1>';
} else {
    echo 'error adding the query: ' . $sql_q . '<br> Reason: ' . mysqli_error($connect);
}

?? ??:

??? ??? ?? ?? ??? ????. ??? ??? ???? ??? ?? ???? ????? ???? ????? ?? ??? ?????.

1. ???????? ??? ???? ??? ?????.

   SQL ??? ???? ??? ??? ??? ?? ???????? ?? ??? ???? ??? ?????.

2. ??? ???? ??:

   ?? ??? ??? ???? ??? ????? ???? ??????? ????? ???? ? ??? ?? ??? ?? ??? ???? ?????.

3. ??? ????? ??? ??? ?????.

   ??? ?? ????? ??? ?? ???? ??? ?????. ???? ?? ???? ????? ??? ????.

??? ??? ??? ??? ?? ?? ?? ??? ???? ?????.

$verifyQuery = "SELECT id, password FROM users WHERE name = '$name';";
$verifyResult = mysqli_query($connect, $verifyQuery);
if ($verifyResult === false) {
    die(mysqli_error());
}
$verifyRow = mysqli_fetch_assoc($verifyResult);
if ($verifyRow) {
    $storedHash = $verifyRow['password'];
    $saltedPW = $password . $verifyRow['salt'];
    $hashedPW = hash('sha256', $saltedPW);

    if ($hashedPW === $storedHash) {
        // User authenticated successfully
    } else {
        // Incorrect password
    }
} else {
    // User not found
}

??:

??? ??? ??? ???? ??????? ??? ?? ??? ???? ??? ???? ??? ????? ???? ??? ? ????. ?? ?? ??? ?? ??? ???? ??? ???? ?? ?????? ?????.

? ??? MySQL ???????? ??? ???? ??? ???? ?? ??? ??????? ?? ?????. ??? ??? PHP ??? ????? ?? ?? ??? ?????!