blocks|key|4995966|text|你必须在用户登录后创建一个会话，例如指定正确的凭据。一旦你这样做了，你将不得不在每个页面上进行会话检查，这些页面只需要由登录的用户查看。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|4995967|有关更多信息，请查看CI的Session+Class。|offset|length|4995968|entityMap|0|LINK|mutability|MUTABLE|url|http://codeigniter.com/user_guide/libraries/sessions.html^0|0|D|D|0|0^^$0|@$1|2|3|4|5|6|7|N|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|O|8|@]|9|@$D|P|E|Q|1|R]]|A|$]]|$1|F|3|-4|5|6|7|S|8|@]|9|@]|A|$]]]|G|$H|$5|I|J|K|A|$L|M]]]]

You will have to create a session after users gets logged in eg specified correct credentials. Once you have done that, you will have to put up session check on every page that needs to be viewed only by logged in users.

Take a look at CI's <a href="http://codeigniter.com/user_guide/libraries/sessions.html" rel="nofollow">Session Class</a> for more information.

blocks|key|4995995|text|我在CI中使用了两种用户身份验证方法|type|unstyled|depth|inlineStyleRanges|entityRanges|data|4995996|您可以通过__construct()函数按页执行此操作，检查用户是否已登录，然后相应地对其进行重定向。|offset|length|style|CODE|4995997|或者，您可以扩展基本控制器，以便(例如)拥有一个常规控制器，用于不需要身份验证的页面，一个“公共”控制器，它要求您登录，以及一个“管理”控制器，它只允许特定类型的用户。|4995998|我再一次向Phil+Sturgeon提及这一点-+extending+base+controllers|4995999|我也推荐你看看一些Auth库--+Ion+Auth和Tank+Auth被普遍认为是非常好的--但也有很多可用的。|4996000|你的功能也是相当有限的--用户只能做一个选项(main)。|4996001|更好的方法是|4996002|<?php

class+Foo+extends+Controller+{

++++function+__construct()+
++++{
++++++++$is_logged_in+=+$this->session->userdata('is_logged_in');

++++++++if(!isset($is_logged_in)%7C%7C$is_logged_in!=+TRUE+)
++++++++{
++++++++++++redirect('login');
++++++++}
++++}
++++//+else,+logged+in..proceed
}|code-block|syntax|javascript|4996003|例如。|4996004|entityMap|0|LINK|mutability|MUTABLE|url|http://philsturgeon.co.uk/news/2010/02/CodeIgniter-Base-Classes-Keeping-it-DRY|1|http://codeigniter.com/forums/viewthread/145263/|2|http://codeigniter.com/forums/viewthread/110993/^0|0|5|D|0|0|P|Q|0|0|H|8|1|Q|9|2|0|0|0|0|0^^$0|@$1|2|3|4|5|6|7|1A|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|1B|8|@$D|1C|E|1D|F|G]]|9|@]|A|$]]|$1|H|3|I|5|6|7|1E|8|@]|9|@]|A|$]]|$1|J|3|K|5|6|7|1F|8|@]|9|@$D|1G|E|1H|1|1I]]|A|$]]|$1|L|3|M|5|6|7|1J|8|@]|9|@$D|1K|E|1L|1|1M]|$D|1N|E|1O|1|1P]]|A|$]]|$1|N|3|O|5|6|7|1Q|8|@]|9|@]|A|$]]|$1|P|3|Q|5|6|7|1R|8|@]|9|@]|A|$]]|$1|R|3|S|5|T|7|1S|8|@]|9|@]|A|$U|V]]|$1|W|3|X|5|6|7|1T|8|@]|9|@]|A|$]]|$1|Y|3|-4|5|6|7|1U|8|@]|9|@]|A|$]]]|Z|$10|$5|11|12|13|A|$14|15]]|16|$5|11|12|13|A|$14|17]]|18|$5|11|12|13|A|$14|19]]]]

i've worked with two approaches with user authentication in CI

you can do it on a per-page basis, via the <code>__construct()</code> function, checking if the user is logged in and then redirecting them accordingly.

alternatively you can extend the base controllers so that you have (for example) a regular controller, for pages that require no authentication, a "Public" controller which require you to be logged in, and an "Admin" controller that allows only certain types of user.

I refer once again to Phil Sturgeon for this - <a href="http://philsturgeon.co.uk/news/2010/02/CodeIgniter-Base-Classes-Keeping-it-DRY" rel="nofollow">extending base controllers</a>

i'd also recommend looking at some Auth Libraries - <a href="http://codeigniter.com/forums/viewthread/145263/" rel="nofollow">Ion Auth</a> and <a href="http://codeigniter.com/forums/viewthread/110993/" rel="nofollow">Tank Auth</a> are generally accepted as very good - but there are plenty available.

Your function is also fairly limited - the user can only ever do one option (main).

The better approach is

<pre><code>&lt;?php

class Foo extends Controller {

 function __construct() 
 {
 $is_logged_in = $this-&gt;session-&gt;userdata('is_logged_in');

 if(!isset($is_logged_in)||$is_logged_in!= TRUE )
 {
 redirect('login');
 }
 }
 // else, logged in..proceed
}
</code></pre>

for instance.

blocks|key|1309506|text|你说过：|type|unstyled|depth|inlineStyleRanges|entityRanges|data|1309507|1309508|我在登录时遇到此问题，任何人都可以在另一个地址中键入另一个地址，然后转到另一个帐户|blockquote|1309509|1309510|1309511|据我所知，当您验证用户的凭据时，您不会在您的会话中存储该用户的ID。|1309512|您需要在每个会话中存储ID，以便知道谁正在查看每个页面以及您需要向他显示什么。|1309513|控制器示例：|offset|length|style|BOLD|1309514|function+validate_credentials()+{
++++$this->load->model('users_model');
++++if($this->users_model->check_pass()+==+true)+{
+++++++$data+=+array(
+++++++++++++'email'+=>+$this->input->post('email'),
+++++++++++++'is_logged_in'+=>+true,
+++++++++++++'user_id'+=>+$this->users_model->get_userid()
+++++++++++++);
+++++++$this->session->set_userdata($data);
++++}
}|code-block|syntax|javascript|1309515|模型示例：|1309516|function+get_userid()+{
++++$this->db->where('email',+$this->input->post('email'));
++++$q+=+$this->db->get('users');
++++$r+=+$q->row();
++++return+$r->id;
}|1309517|现在，您可以基于$this->session->userdata(‘user_id’)动态加载内容，并确定他们应该在每个页面上看到什么。|1309518|PS:如果你想拥有角色，你只需要在你的会话中存储用户角色，添加另一个'key‘=>+'val’|1309519|希望这能有所帮助。|1309520|entityMap^0|0|0|0|0|0|0|0|0|6|0|0|0|5|0|0|0|0|0^^$0|@$1|2|3|4|5|6|7|18|8|@]|9|@]|A|$]]|$1|B|3|-4|5|6|7|19|8|@]|9|@]|A|$]]|$1|C|3|D|5|E|7|1A|8|@]|9|@]|A|$]]|$1|F|3|-4|5|6|7|1B|8|@]|9|@]|A|$]]|$1|G|3|-4|5|6|7|1C|8|@]|9|@]|A|$]]|$1|H|3|I|5|6|7|1D|8|@]|9|@]|A|$]]|$1|J|3|K|5|6|7|1E|8|@]|9|@]|A|$]]|$1|L|3|M|5|6|7|1F|8|@$N|1G|O|1H|P|Q]]|9|@]|A|$]]|$1|R|3|S|5|T|7|1I|8|@]|9|@]|A|$U|V]]|$1|W|3|X|5|6|7|1J|8|@$N|1K|O|1L|P|Q]]|9|@]|A|$]]|$1|Y|3|Z|5|T|7|1M|8|@]|9|@]|A|$U|V]]|$1|10|3|11|5|6|7|1N|8|@]|9|@]|A|$]]|$1|12|3|13|5|6|7|1O|8|@]|9|@]|A|$]]|$1|14|3|15|5|6|7|1P|8|@]|9|@]|A|$]]|$1|16|3|-4|5|6|7|1Q|8|@]|9|@]|A|$]]]|17|$]]

You said:

<blockquote>
 i have this problem when loged in any one can type another address in another address and go to another account
</blockquote>

As I understand, when you validate the credentials of a user you are no storing in your session the ID of that user.

You need to store the ID in every session to know who is viewing each page and what you need to show him.

Controller Example:

<pre><code>function validate_credentials() {
 $this-&gt;load-&gt;model('users_model');
 if($this-&gt;users_model-&gt;check_pass() == true) {
 $data = array(
 'email' =&gt; $this-&gt;input-&gt;post('email'),
 'is_logged_in' =&gt; true,
 'user_id' =&gt; $this-&gt;users_model-&gt;get_userid()
 );
 $this-&gt;session-&gt;set_userdata($data);
 }
}
</code></pre>

Model Example:

<pre><code>function get_userid() {
 $this-&gt;db-&gt;where('email', $this-&gt;input-&gt;post('email'));
 $q = $this-&gt;db-&gt;get('users');
 $r = $q-&gt;row();
 return $r-&gt;id;
}
</code></pre>

Now you can load the content dynamically based on $this->session->userdata('user_id'); and determine what they should see on every page.

PS: If you want to have roles you only have to store the user role in your session adding another 'key' => 'val'

Hope that helps.

blocks|key|1309522|text|//model

function+fetchrowlogin($info,$table){

++++$this->db->select('*');
++++$this->db->where($info);
++++$this->db->from($table);
++++$query+=+$this->db->get();
++++if($query->num_rows()+>+0){
++++$row+=+$query->row_array();
++++++++return+$row;
++++}
}


///controller

function+login(){

++++if(isset($_POST['login'])){

++++++++$log['email']+=+$_POST['email'];
++++++++$log['password']+=+$_POST['password'];
++++++++$details+=+$this->User_model->fetchrowlogin($log,'candidate');

++++++++if(count($details)){
++++++++++++$ids+=+$details['id'];
++++++++++++$email+=+$details['email'];
++++++++++++$fname+=+$details['fname'];

++++++++++++$this->session->set_userdata(array(

++++++++++++++++'custid'+=>+$ids,
++++++++++++++++'emailid'=>+$email,
++++++++++++++++'fname'=>+$fname,
++++++++++++));
++++++++redirect('http://localhost/test27/index.php/welcome/dashboard');
++++++++}else{

++++++++redirect(base_url().'front1');


++++++++}

++++}



++++$this->load->view('front/login');
}|type|code-block|depth|inlineStyleRanges|entityRanges|data|syntax|javascript|1309523|unstyled|entityMap^0|0^^$0|@$1|2|3|4|5|6|7|G|8|@]|9|@]|A|$B|C]]|$1|D|3|-4|5|E|7|H|8|@]|9|@]|A|$]]]|F|$]]

<pre><code>//model

function fetchrowlogin($info,$table){

 $this-&gt;db-&gt;select('*');
 $this-&gt;db-&gt;where($info);
 $this-&gt;db-&gt;from($table);
 $query = $this-&gt;db-&gt;get();
 if($query-&gt;num_rows() &gt; 0){
 $row = $query-&gt;row_array();
 return $row;
 }
}


///controller

function login(){

 if(isset($_POST['login'])){

 $log['email'] = $_POST['email'];
 $log['password'] = $_POST['password'];
 $details = $this-&gt;User_model-&gt;fetchrowlogin($log,'candidate');

 if(count($details)){
 $ids = $details['id'];
 $email = $details['email'];
 $fname = $details['fname'];

 $this-&gt;session-&gt;set_userdata(array(

 'custid' =&gt; $ids,
 'emailid'=&gt; $email,
 'fname'=&gt; $fname,
 ));
 redirect('http://localhost/test27/index.php/welcome/dashboard');
 }else{

 redirect(base_url().'front1');


 }

 }



 $this-&gt;load-&gt;view('front/login');
}
</code></pre>

I have developed a login using codeigniter, but I have this problem when loged in any one can type another address in another address and go to another account. how to avoid that? please instruct me?

This is the way how I coded the login:

<pre><code>function index()
{
 $this-&gt;is_logged_in();
}

function is_logged_in(){
 $is_logged_in = $this-&gt;session-&gt;userdata('is_logged_in');

 if(!isset($is_logged_in)||$is_logged_in!= TRUE ){
 echo 'you are not logged in ';
 echo anchor('login_controller','Login');
 }else{
 $this-&gt;main(); 
 }
}
</code></pre>

login using codeigniter

翻译质量差，导致语言生硬或混乱。

没有提供实际的解决方法或示例。

解答不清晰，无法理解或解决问题。

页面排版不美观，阅读体验差。

文章

问答

视频

学习中心

腾讯云实验室

直播

竞赛

腾讯云代码分析专区

腾讯iOA零信任安全管理系统专区

腾讯云架构师技术同盟交流圈

腾讯云数据库专区

腾讯云顾问专区

腾讯云原生专区

腾讯混元专区

腾讯云TCE专区

腾讯云Lighthouse专区

腾讯云HAI专区

腾讯云Edgeone专区

腾讯云存储专区

腾讯云智能专区

腾讯轻联专区 

腾讯云开发专区

TAPD专区

腾讯轻量云游戏服专区

腾讯云最具价值专家

腾讯云架构师技术同盟

腾讯云创作之星

腾讯云开发者先锋

腾讯云代码助手

云原生构建

TAPD 敏捷项目管理

Cloud Studio

SDK中心

API中心

命令行工具

涵盖代码开发、场景应用、自动测试全流程，助你从零构建专属AI助手

一站式MCP教程库，解锁AI应用新玩法

我已经开发了一个使用codeigniter的登录，但我有这个问题，当登录时，任何人都可以在另一个地址键入另一个地址，并转到另一个帐户。如何避免这种情况？请指点我？这是我对登录进行编码的方式：function index(){    $this->is_logged_in();}function is_logged_in...

问使用codeigniter登录
EN

Stack Overflow用户

社区

活动

圈层

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问使用codeigniter登录EN