loginvalidate.php

无刷新技术AJAX,就是在不刷新网页的情况下更新网站内容

<?php
header( "Content-type: text/html; charset=gbk");
header( "Expires: Mon, 26 Jul 1997 05:00:00 GMT" );
header( "Last-Modified: " . gmdate( "D, d M Y H:i:s" ) . " GMT" );
header( "Cache-Control: no-cache, must-revalidate" );
header( "Pragma: no-cache" );
?>
<?php
require_once("public.php");

/*************************
//author: JarryLi  homepage:jiarry.blogchina.com
//本例子为了说明只采用了简单页面验证的方式
//真实环境最好采用数据库，如mysql_connect连接MySql这样
***************************/
$userpass = array(
            "test" => "a94a8fe5ccb19ba61c4c0873d391e987982fbbd3",
            "admin" => "d033e22ae348aeb5660fc2140aec35850c4da997"
           );

if( isset($_POST['name']) )$_SESSION['adminName']=$_POST['name'].trim();
if( isset($_POST['password']) )$_SESSION['adminPassWord']=$_POST['password'].trim();

$validate = "";
if(!Empty($_POST['code'])) $validate = $_POST['code'].trim();

$errorMsg = "";
//开始判断

$rightUser = false; $rightCode =  true;
$errorUser = "<li>error user or password.</li>";
if($validate != $c_validate){
  $rightCode = false;
  $errorMsg .= "<li>error validate code.</li>";
}

while ( list( $u , $p  ) = each($userpass) ){   
    if(  $adminName == $u &&  sha1($adminPassWord) == $p)
      $rightUser = true;
}
$errorMsg .= $errorUser;

$loginSuccessful =  ($rightUser  && $rightCode) ? true : false ;

$_SESSION['loginSuccessful'] = $loginSuccessful; //设置成功登录得session

if($loginSuccessful){
	echo "ok";
	redirectTo($_SERVER['HTTP_REFERER']);
}else{
  echo "<b>Login failed</b>";
  echo $errorMsg . "<br>&nbsp;&nbsp;&nbsp;&nbsp;<a href=\" ".$_SERVER['HTTP_REFERER']."  \">返回</a>";  
}
  
?>