小编pri*_*sca的帖子

使用套接字安全登录

我试图通过使用套接字创建一个安全的登录程序.这是我写的代码:

<?php

$myusername=$_POST["username"];
$mypassword=$_POST["password"];
$host="localhost";
$port=80;
$timeout=60;
$target="/admin_area.php";
if($myusername=="admin" && $mypassword=="passwd")

{
  if (!$sock=fsockopen("ssl://".$host,$port,$errnum,$errstr,$timeout))

  {
    die ("Could not open socket: [$errnum] $errstr");
  }

  else
  {
    $posted_vars=array("username"=>$myusername,
                       "password"=>$mypassword);
    $body="";
    foreach ($posted_vars as $parameter=>$value)

    {
      $body.="&".$parameter."=".$value;
    }
    $headers="POST ".$target." HTTP/1.0 \r\n";
    $headers.="Content-Type: application/x-www-form-urlencoded \r\n";
    $headers.="Content-Length: ".strlen($body)." \r\n";
    $headers.="Connection: Keep-Alive \r\n";
    $headers.="Authorization: Basic ".base64_encode($myusername.":".$mypassword)." \r\n\r\n";
    fputs ($sock,$headers.$body);
    $data="";
    while (!feof ($sock))

    {
      $data.=fgets($sock,3000);
    }
    list($res_head,$res_body)=explode("\r\n\r\n",$data);
    echo $res_body;
  }
}

else

{
  echo "Login not happened successfully";
}

?>

Run Code Online (Sandbox Code Playgroud)

当我运行它时,会返回以下警告: