mysql安全登录注册

ALTER USER 'username'@'localhost' IDENTIFIED BY 'NewStrongPassword';

String query = "SELECT * FROM users WHERE username = ?";
PreparedStatement pstmt = connection.prepareStatement(query);
pstmt.setString(1, username);
ResultSet rs = pstmt.executeQuery();

mysql --ssl-mode=REQUIRED -h hostname -u username -p

REVOKE ALL PRIVILEGES ON database_name.* FROM 'username'@'localhost';
GRANT SELECT, INSERT ON database_name.table_name TO 'username'@'localhost';

<?php
$servername = "localhost";
$username = "admin";
$password = "admin_password";
$dbname = "myDB";

// 创建连接
$conn = new mysqli($servername, $username, $password, $dbname);

// 检查连接
if ($conn->connect_error) {
    die("连接失败: " . $conn->connect_error);
}

// 准备并绑定
$stmt = $conn->prepare("INSERT INTO users (username, password) VALUES (?, ?)");
$stmt->bind_param("ss", $username, $hashed_password);

// 设置参数并执行
$username = $_POST['username'];
$password = $_POST['password'];
$hashed_password = password_hash($password, PASSWORD_DEFAULT);
$stmt->execute();

echo "新记录插入成功";

$stmt->close();
$conn->close();
?>

<?php
$servername = "localhost";
$username = "admin";
$password = "admin_password";
$dbname = "myDB";

// 创建连接
$conn = new mysqli($servername, $username, $password, $dbname);

// 检查连接
if ($conn->connect_error) {
    die("连接失败: " . $conn->connect_error);
}

// 准备并绑定
$stmt = $conn->prepare("SELECT password FROM users WHERE username = ?");
$stmt->bind_param("s", $username);
$stmt->execute();
$stmt->bind_result($hashed_password);

// 设置参数并获取结果
$username = $_POST['username'];
if ($stmt->fetch() && password_verify($_POST['password'], $hashed_password)) {
    echo "登录成功";
} else {
    echo "用户名或密码错误";
}

$stmt->close();
$conn->close();
?>