PHP [PHP] OOP登录/注册脚本（没有HTML表单）

Posted 2021-05-15

<?php
session_start();
DEFINE("USED_LOCALLY", "1");
include("functions.php");

interface post_data {

	// Create interface that the main class will rely on
	
	function login_get_data();
	function login_clean_data();
	function login_check_data();

	function register_get_clean_data();
	function register_add_data();

	function logout();
	}

abstract class sql_server {

	// Class that handles the SQL connection

	public $cnx;
	public function __construct() {
		$this -> cnx = mysql_connect("localhost", "root", "password");
		mysql_select_db("login", $this -> cnx);
		}
	}

class post_data_class extends sql_server implements post_data {
	// Creating the main variables and setting them to private for security

	private $login_vars = array("Username" => NULL,
			           "Password" => NULL);
	private $register_vars = array("Full Name" => NULL,
					"Country" => NULL,
					"Phone Number" => NULL,
					"Address" => NULL,
					"Email" => NULL,
					"User_Name" => NULL,
					"Pass_Word" => NULL);

	// Getting the POST data automatically and setting them to the private variables.

	public function __construct() {
		parent::__construct();

		if(isset($_POST["login_submit"])) { 
			
			// Stating the process by collecting data

			$this -> login_get_data();
		}

		else {
	
		// Logging off if no form has been submitted and there's a GET in the URL
	
			if(isset($_GET["logout"])) {
				
				// Logging out 

				$this -> logout();

			}

		}

		if(isset($_POST["register_submit"])) {
		
			// Working on the register script if the register form was submitted
			
			$this -> register_get_clean_data();
		}

		else {
			redirect("index.php");
			die();
		}
	}

	public function login_get_data() {
		
		// Giving error if any of the fields are empty

		if(empty($_POST["username"]) || empty($_POST["password"])) {
			$_SESSION["login"]["error"] = "Make sure none of the fields are empty";
			redirect("index.php");
			die();
		}

		// Else, processing

		else {
			$this -> login_vars["Username"] = $_POST["username"];
			$this -> login_vars["Password"] = $_POST["password"]; 

			$this -> login_clean_data();
		}
	}

	public function register_get_clean_data() {
		
		// Giving error in case any of the fields are empty

		if(empty($_POST["full_name"]) || empty($_POST["phone_number"]) || empty($_POST["email"]) || empty($_POST["address"]) || empty($_POST["user_name"]) || empty($_POST["pass_word"]) || empty($_POST["pass_word_verification"])) {
			$_SESSION["register"]["error"] = "Make sure none of the fields are empty.";
			redirect("index.php");
			die();
		}

		// Verifying information
		
		// Full Name

		if(!preg_match("/(.*)\\s(.*)/", $_POST["full_name"]) || strlen($_POST["full_name"]) < 5) {
			$_SESSION["register"]["error"] = "Make sure your full name is a valid one.";
		}
		
		// Phone Number 

		if(!is_numeric($_POST["phone_number"]) || strlen($_POST["phone_number"]) < 5) {
			$_SESSION["register"]["error"] .= "<br />" . "Make sure your phone number is a valid one.";
		}

		// Email

		if(!is_valid_email($_POST["email"])) {
			$_SESSION["register"]["error"] .= "<br />" . "Make sure your e-mail is a valid one.";
		}

		else {
			$clean_email = sanitize($_POST["email"]);
			$clean_email_check = mysql_query("SELECT * FROM Users WHERE 'Email' = '" . $clean_email . "'");
			if(mysql_num_rows($clean_email_check) > 0) {
				$_SESSION["register"]["error"] .= "<br />" . "Your email is already taken.";
			}
		}

		// Address

		if(!preg_match("/(.*)\\s(.*)/", $_POST["address"]) || strlen($_POST["address"]) < 10) {
			$_SESSION["register"]["error"] .= "<br />" . "Make sure your address is a valid one.";
		}

		// Username

		if(strlen($_POST["user_name"]) > 15) {
			$_SESSION["register"]["error"] .= "<br />" . "Your username is too long.";
		}
		
		else {

			$clean_user_name = sanitize($_POST["user_name"]);

			$user_name_check = mysql_query("SELECT * FROM Users WHERE 'Username' = '" . $clean_user_name . "'");
		
			if(mysql_num_rows($user_name_check) > 0) {
				$_SESSION["register"]["error"] .= "<br />" . "Your username is already taken.";
			}
		}
		// Password

		if($_POST["pass_word"] !== $_POST["pass_word_verification"]) {
			$_SESSION["register"]["error"] .= "<br />" . "Make sure your passwords match.";
		}

		if(isset($_SESSION["register"]["error"])) {
		
			redirect("index.php");
			die();
		}

 
 		// Sanitizing the results

		$temporary_register_array = array("Full Name" => $_POST["full_name"],
						"Country" => $_POST["country"],
						"Email" => $_POST["email"],
						"Address" => $_POST["address"],
                                                "Phone Number" => $_POST["phone_number"],
						"User_Name" => $_POST["user_name"],
						"Pass_Word" => hash('sha512', $_POST["pass_word"]));

		$clean_register_results = array_map("sanitize", $temporary_register_array);

		$this -> register_vars = $clean_register_results;

		$this -> register_add_data();

	}


	public function login_clean_data() {

	// Function that sanitizes the POST data

		$clean_results = array_map("sanitize", $this -> login_vars);

		$this -> login_vars["Username"] = $clean_results["Username"];
		$this -> login_vars["Password"] = hash('sha512', $clean_results["Password"]);
		
	
		// Processing the last step which is checking to see if what is provided is correct

		$this -> login_check_data();
	}

	public function login_check_data() {

		// Checking the database for the given information

		$query = "SELECT * FROM Users
			WHERE `Username` = '" . $this -> login_vars["Username"] . "' && `Password` = '" . $this -> login_vars["Password"] . "'";
		$query = mysql_query($query);

		if(mysql_num_rows($query) > 0) {
			
			// If information is valid
			
			$_SESSION["id"] = 1;
			$_SESSION["username"] = $this -> login_vars["Username"];
			$_SESSION["password"] = $this -> login_vars["Password"];
		
			redirect("index.php");
			die();
		}

		else {
			$_SESSION["login"]["error"] = "Username/Password combination is invalid.";
			redirect("index.php");
			die();
		}
	}

	public function register_add_data() {

		// Adding the values to the database

		mysql_query("INSERT INTO Users
				(`Username`, `Password`, `Full Name`, `Phone Number`, `Address`, `Country`, `Email`)
				VALUES ('" . $this -> register_vars["User_Name"] . "', '" . $this -> register_vars["Pass_Word"] . "', '" . $this -> register_vars["Full Name"] . "', '00" . $this -> register_vars["Phone Number"] . "', '" . $this -> register_vars["Address"] . "', '" . $this -> register_vars["Country"] . "', '" . $this -> register_vars["Email"] . "')");
        redirect("index.php");
	}






	public function logout() {
		
		// Exiting if user is not logged in

		if(!is_logged_in()) {
			die("You are not logged in.");
		}
				
		else {
			$_SESSION = array();
			session_destroy();
			redirect("index.php");
			die();
		}
	}

}

	$start = new post_data_class();
?>