加密登录密码

Question

有人可以看到我的代码有什么问题吗？当我尝试登录时，它无法识别密码。我有非常相似的 admin 代码，它正在工作，但这个不是。

function register_client(){

  if(isset($_POST['register'])){

    $client_name     = escape_string($_POST['client_name']);

    $client_surname  = escape_string($_POST['client_surname']);

    $client_email    = escape_string($_POST['client_email']);

    $client_phone    = escape_string($_POST['client_phone']);

    $client_password = escape_string($_POST['client_password']);

    $country         = escape_string($_POST['country']);

    $city            = escape_string($_POST['city']);

    $zip_code        = escape_string($_POST['zip_code']);

    $client_address  = escape_string($_POST['client_address']);

    $client_password = password_hash($password, PASSWORD_BCRYPT, array('cost' =>10));

    $get_query = query("SELECT client_email FROM client_db");

    confirm($get_query);

    $tem = 0;

    while($row = fetch_array($get_query)){

    $check_mail = $row['client_email'];

      if($client_email === $check_mail){

        $tem++;

      }

    }

    if($tem === 0){

      $query = query("INSERT INTO client_db(client_name, client_surname, client_email, client_password, client_phone, country, city, zip_code, client_address) VALUES('{$client_name}', '{$client_surname}', '{$client_email}', '{$client_password}',  '{$client_phone}', '{$country}', '{$city}', '{$zip_code}', '{$client_address}') ");

      confirm($query);

      redirect("client_login.php");

    }else{

      set_message("incorrect email address");

    }

  }

}

function login_client(){

  if(isset($_POST['submit_client'])){

    $user_email = escape_string($_POST['client_email']);

    $password = escape_string($_POST['client_password']);

    $query = query("SELECT * FROM client_db WHERE client_email = '{$user_email}' ");

    confirm($query);

    while($row = fetch_array($query)){

    $db_password = $row['client_password'];

    $client_id = $row['client_id'];

}

      if(password_verify($password, $db_password)){

      $_SESSION['user_login'] = $client_id;

      redirect("index.php?id={$client_id}");

    }

Answer 1

也许这一行是错误的，因为 $password 在这里是未知的：$client_password = password_hash($password, PASSWORD_BCRYPT, array('cost' =>10));应该：$client_password = password_hash($client_password, PASSWORD_BCRYPT, array('cost' =>10));