php session 管理

function do_login(){
		//获取用户名和密码信息,和数据库中比对
		 echo 111111111;
		dump($_POST);
		dump($_SESSION);
		echo 222222222;
		$username=$_POST['username'];
		$password=$_POST['password'];
		$code=$_POST['code'];
		#$this->display();
		if($_SESSION['verify']!==md5($code)){
			$this->error('验证码错误');
		}

111111111

array (size=3)

  'username' => string '3131' (length=4)
  'password' => string '313' (length=3)
  'code' => string '1936' (length=4)

array (size=3)
  'verify' => string '11108a3dbfe4636cb40b84b803b2fff6' (length=32)
  'username' => string 'admin' (length=5)
  'authority' => string '1' (length=1)

222222222

1936 MD5 加密后的值为：

mysql> select md5(1936) from user limit 1;
+----------------------------------+
| md5(1936)                        |
+----------------------------------+
| 11108a3dbfe4636cb40b84b803b2fff6 |
+----------------------------------+
1 row in set (0.00 sec)

验证码判断:

if($_SESSION['verify']!==md5($code)){
			$this->error('验证码错误');
		}

验证码错误:
111111111

array (size=3)
  'username' => string '3131' (length=4)
  'password' => string '4124124' (length=7)
  'code' => string '2059' (length=4)

array (size=3)
  'verify' => string 'd3c95acb3f4a091abb1fdc056dc68c1c' (length=32)
  'username' => string 'admin' (length=5)
  'authority' => string '1' (length=1)

222222222

mysql> select md5(2059) from user limit 1;
+----------------------------------+
| md5(2059)                        |
+----------------------------------+
| 2eace51d8f796d04991c831a07059758 |
+----------------------------------+
1 row in set (0.00 sec)

111111111

array (size=3)
  'username' => string '331342453' (length=9)
  'password' => string '535353' (length=6)
  'code' => string '434224' (length=6)

array (size=3)
  'verify' => string '7cce53cf90577442771720a370c3c723' (length=32)
  'username' => string 'admin' (length=5)
  'authority' => string '1' (length=1)

222222222

mysql> select md5(434224) from user limit 1;
+----------------------------------+
| md5(434224)                      |
+----------------------------------+
| 80bf385de86b2e02292a10caceed2c4b |
+----------------------------------+
1 row in set (0.00 sec)

111111111

array (size=3)
  'username' => string '3131' (length=4)
  'password' => string '13131' (length=5)
  'code' => string '9424124' (length=7)

array (size=1)
  'verify' => string 'd04eb5de4d99080be674f159197a514a' (length=32)

222222222

之前session 一直有'username' => string 'admin'  和  'authority' => string '1'

因为session一直有效的原因