使用 nodejs 进行身份验证

Question

我无法在我的 nodejs 应用程序中进行登录。当我进行身份验证时，即使我输入了错误的用户，我的页面 home render:

这是我的验证码：

app.post('/auth', urlencodedParser, function(req, res) {
    var username = "'" + req.body.usernames + "'";
    var password = "'" + req.body.passwords + "'";
    var client = new Client(conString);
    client.connect();
    if (username && password) {
        client.query('SELECT * FROM Utilisateur WHERE username = ? AND password = ?', [username, password],function(err, results) {
            if (err) {
               console.log('error running the authentication:', err);
            }
            results = JSON.parse("[{},{}]")
            if (results.length > 0) {
                req.session.loggedin = true
                req.session.username = username
                res.render('home')
            }
        });
    }
});

Answer 1

使用sql 库而不是客户端。

app.post('/auth', urlencodedParser, function(req, res) {
        var username = "'" + req.body.usernames + "'";
        var password = "'" + req.body.passwords + "'";
        var mysql = require('mysql');
        var con = mysql.createConnection({
          host: "localhost",
          user: "yourusername",
          password: "yourpassword",
          database: "mydb"
       });

        if (username && password) {
            con.connect(function(err) {
                 if (err) throw err;
                 con.query('SELECT * FROM Utilisateur WHERE username = ? AND password = ?', [username, password],function(err, results) {
                    if (err) {
                        console.log('error running the authentication:', err);
                    }
                    results = JSON.parse("[{},{}]")
                    if (results.length > 0) {
                        req.session.loggedin = true
                        req.session.username = username
                        res.render('home')
                    }
                 });  
            });
        }
    });

使用 nodejs 进行身份验证

Authentication with nodejs

sql

phppgadmin

node.js