请大家帮忙CHECK一下

Jonnes

请大家帮忙CHECK一下

1. <?php
   
2. $username = "$_POST['username']";
   
3. $pwd = "$_POST['password']";
   
4. $errmsg = "";
   
5. if (empty($username))
   
6. $errmsg = "&#25968;&#25454;&#36755;&#20837;&#19981;&#23436;&#25972;";
   
7. if(empty($errmsg)) {
   
8. $find = "SELECT * FROM user WHERE username='$username' AND password='$pwd'";
   
9. $rs = $db->query($find);
   
10. if ($rs && $rs->num_rows > 0) {
    
11. session_start();
    
12. $_SESSION["user"] = $username;
    
13. $errmsg = "<meta http-equiv='refresh' content='0; url=index.php' />";
    
14. $find = "WHERE username='$username'";
    
15. $db->query($find);
    
16. }
    
17. else {
    
18. $errmsg = "&#29992;&#25143;&#21517;&#25110;&#23494;&#30721;&#19981;&#27491;&#30830;&#65292;&#30331;&#24405;&#22833;&#36133;!";
    
19. }
    
20. ?>

复制代码

clear

帮顶一下，发错地方了吧，这很快就沉的