创建帐户时需要帮助记录用户的IP
我很新的编码PHP(非常新) ,我为我的网站创建了一个登录/注册系统我目前有一个工作系统,输入他们的“id int (11)“用户名,电子邮件和密码。我现在想添加一个IP列,在创建帐户时记录他们的IP。
创建帐户时需要帮助记录用户的IP
我的问题很明显是我如何才能增加我的代码的方式来输入的用户的IP(只是对我来说,测试的东西和学到的东西网站)地址一旦他们创建一个帐户在我的网站... 。
我对server.php当前的代码
<?php
session_start();
// variable declaration
$username = "";
$email = "";
$errors = array();
$_SESSION['success'] = "";
// connect to database
$db = mysqli_connect('localhost','user','password','db')
or die('Error connecting to MySQL server.');
// REGISTER USER
if (isset($_POST['reg_user'])) {
// receive all input values from the form
$username = mysqli_real_escape_string($db, $_POST['username']);
$email = mysqli_real_escape_string($db, $_POST['email']);
$password_1 = mysqli_real_escape_string($db, $_POST['password_1']);
$password_2 = mysqli_real_escape_string($db, $_POST['password_2']);
// form validation: ensure that the form is correctly filled
if (empty($username)) { array_push($errors, "Username is required"); }
if (empty($email)) { array_push($errors, "Email is required"); }
if (empty($password_1)) { array_push($errors, "Password is required"); }
if ($password_1 != $password_2) {
array_push($errors, "The two passwords do not match");
}
// register user if there are no errors in the form
if (count($errors) == 0) {
$password = md5($password_1);//encrypt the password before saving in the database
$query = "INSERT INTO users (username, email, password)
VALUES('$username', '$email', '$password')";
mysqli_query($db, $query);
$_SESSION['username'] = $username;
$_SESSION['success'] = "You are now logged in";
header('location: index.php');
mysql_error();
}
}
// ...
// LOGIN USER
if (isset($_POST['login_user'])) {
$username = mysqli_real_escape_string($db, $_POST['username']);
$password = mysqli_real_escape_string($db, $_POST['password']);
if (empty($username)) {
array_push($errors, "Username is required");
}
if (empty($password)) {
array_push($errors, "Password is required");
}
if (count($errors) == 0) {
$password = md5($password);
$query = "SELECT * FROM users WHERE username='$username' AND password='$password'";
$results = mysqli_query($db, $query);
if (mysqli_num_rows($results) == 1) {
$_SESSION['username'] = $username;
$_SESSION['success'] = "You are now logged in";
header('location: index.php');
}else {
array_push($errors, "Wrong username/password combination");
}
}
}
?>
获得T中的最简单方法他访客/客户的IP address正在使用$_SERVER['REMOTE_ADDR']
或$_SERVER['REMOTE_HOST']
变量。
但是,有时这不会返回访问者的正确IP地址,所以我们可以使用其他一些服务器变量来获取IP地址。
下面的两个函数仅与从中检索值的方式和区别相同。
getenv()用于获取PHP中环境变量的值。
// Function to get the client IP address
function get_client_ip() {
$ipaddress = '';
if (getenv('HTTP_CLIENT_IP'))
$ipaddress = getenv('HTTP_CLIENT_IP');
else if(getenv('HTTP_X_FORWARDED_FOR'))
$ipaddress = getenv('HTTP_X_FORWARDED_FOR');
else if(getenv('HTTP_X_FORWARDED'))
$ipaddress = getenv('HTTP_X_FORWARDED');
else if(getenv('HTTP_FORWARDED_FOR'))
$ipaddress = getenv('HTTP_FORWARDED_FOR');
else if(getenv('HTTP_FORWARDED'))
$ipaddress = getenv('HTTP_FORWARDED');
else if(getenv('REMOTE_ADDR'))
$ipaddress = getenv('REMOTE_ADDR');
else
$ipaddress = 'UNKNOWN';
return $ipaddress;
}
$ _SERVER是一个包含由Web服务器创建的服务器变量的数组。
// Function to get the client IP address
function get_client_ip() {
$ipaddress = '';
if (isset($_SERVER['HTTP_CLIENT_IP']))
$ipaddress = $_SERVER['HTTP_CLIENT_IP'];
else if(isset($_SERVER['HTTP_X_FORWARDED_FOR']))
$ipaddress = $_SERVER['HTTP_X_FORWARDED_FOR'];
else if(isset($_SERVER['HTTP_X_FORWARDED']))
$ipaddress = $_SERVER['HTTP_X_FORWARDED'];
else if(isset($_SERVER['HTTP_FORWARDED_FOR']))
$ipaddress = $_SERVER['HTTP_FORWARDED_FOR'];
else if(isset($_SERVER['HTTP_FORWARDED']))
$ipaddress = $_SERVER['HTTP_FORWARDED'];
else if(isset($_SERVER['REMOTE_ADDR']))
$ipaddress = $_SERVER['REMOTE_ADDR'];
else
$ipaddress = 'UNKNOWN';
return $ipaddress;
}
现在我该如何实现这个代码到我的server.php,以便每次有人创建一个帐户时都会记录下来?谢谢你的信息! –
请记住,除了'$ _SERVER ['REMOTE_ADDR']'之外的任何东西都可以很容易地被篡改,如果有恶意意图的人想要冒充别人,并用一个“X-Forwarded-For”可以放任何他们想要的。在相信任何其他标头所说的内容之前,根据已知的受信任代理IP检查远程地址。 – SeinopSys
@WollyLinka您可以简单地使用'$ ipaddress = $ _SERVER ['REMOTE_ADDR'];'然后将$ ipaddress的值保存到MySQL表中。 – Ank
您还没有提问任何问题 – symcbean
了解如何使用预处理语句。您可以在这里打开SQL注入。 'mysqli_escape_string()'不足以保护你免受所有攻击。 – miken32
@symcbean您可以清楚地看到我说的 “我现在想添加一个IP列,在创建帐户时记录他们的IP。” 我没有来这里告诉你我想做什么...阅读标题 –