function do_login(){ //获取用户名和密码信息,和数据库中比对 echo 111111111; dump($_POST); dump($_SESSION); echo 222222222; $username=$_POST['username']; $password=$_POST['password']; $code=$_POST['code']; #$this->display(); if($_SESSION['verify']!==md5($code)){ $this->error('验证码错误'); } 111111111 array (size=3) 'username' => string '3131' (length=4) 'password' => string '313' (length=3) 'code' => string '1936' (length=4) array (size=3) 'verify' => string '11108a3dbfe4636cb40b84b803b2fff6' (length=32) 'username' => string 'admin' (length=5) 'authority' => string '1' (length=1) 222222222 1936 MD5 加密后的值为: mysql> select md5(1936) from user limit 1; +----------------------------------+ | md5(1936) | +----------------------------------+ | 11108a3dbfe4636cb40b84b803b2fff6 | +----------------------------------+ 1 row in set (0.00 sec) 验证码判断: if($_SESSION['verify']!==md5($code)){ $this->error('验证码错误'); } 验证码错误: 111111111 array (size=3) 'username' => string '3131' (length=4) 'password' => string '4124124' (length=7) 'code' => string '2059' (length=4) array (size=3) 'verify' => string 'd3c95acb3f4a091abb1fdc056dc68c1c' (length=32) 'username' => string 'admin' (length=5) 'authority' => string '1' (length=1) 222222222 mysql> select md5(2059) from user limit 1; +----------------------------------+ | md5(2059) | +----------------------------------+ | 2eace51d8f796d04991c831a07059758 | +----------------------------------+ 1 row in set (0.00 sec) 111111111 array (size=3) 'username' => string '331342453' (length=9) 'password' => string '535353' (length=6) 'code' => string '434224' (length=6) array (size=3) 'verify' => string '7cce53cf90577442771720a370c3c723' (length=32) 'username' => string 'admin' (length=5) 'authority' => string '1' (length=1) 222222222 mysql> select md5(434224) from user limit 1; +----------------------------------+ | md5(434224) | +----------------------------------+ | 80bf385de86b2e02292a10caceed2c4b | +----------------------------------+ 1 row in set (0.00 sec) 111111111 array (size=3) 'username' => string '3131' (length=4) 'password' => string '13131' (length=5) 'code' => string '9424124' (length=7) array (size=1) 'verify' => string 'd04eb5de4d99080be674f159197a514a' (length=32) 222222222 之前session 一直有'username' => string 'admin' 和 'authority' => string '1' 因为session一直有效的原因