class loginattempts{
public $max_attempts = 5;
public function loginAttempts(){
global $ALIST;
$user_ip = $_SERVER["REMOTE_ADDR"];
$user_locked = "locked";
if($user_max_attempts >= $this->max_attempts){
// update ip statue to locked //
$attemtps_pdo = "UPDATE `attempts` SET `USER_STATUS`= ? WHERE IP = ?";
$results = $ALIST->update($attempts_pdo,$user_locked,$user_ip);
echo " locked";
}else{
// update ip attemtps ++ 1 //
//add sql injection //
$attemtps_pdo = "UPDATE `attempts` SET `MAX_ATTEMPTS`= ? +1 WHERE IP = ?";
$results = $ALIST->update($attempts_pdo,"MAX_ATTEMPTS",$user_ip);
echo " is not locked";
}
}db.php
class data{
public function update($sql,$values1,$values2){
$results = $this->connection->prepare($sql);
$results->bindValue(1,$values1);
$results->bindValue(2,$values2);
$results->execute();
}
$ALIST = new Data;
}到数据库的连接没有问题,但是一旦我绕过UPDATE查询到函数update,我的数据库就不会再更新了,我在这里做错了什么?
发布于 2015-05-20 13:43:53
检查您的类的拼写,您使用的是类data,但这= $ALIST =新的数据;
更改拼写,然后重试,它们必须匹配。
并尝试在loginattempts类的数据类中指定update方法,以避免任何全局变量
https://stackoverflow.com/questions/30340669
复制相似问题