在再次设置会话变量之前取消设置会话变量会导致使用时出现“未定义索引”-解网

问：

在再次设置之前，我正在取消设置一些会话变量，但我发现它们会导致使用。undefined index

我删除了在再次设置变量之前取消设置变量的行，效果很好。

我不明白为什么在重置它们之前取消设置它们会在下一页上产生。undefined index

恢复.php

<?php
@session_start();
unset($_SESSION['reco-id'], $_SESSION['reco-code']);

require_once $_SERVER["DOCUMENT_ROOT"] . "/php/autoloader.php";

if (!isset($_POST['form-recovery-submit'])) return FormUtils::redirect_with_message("Acceso inválido", "/index", true);

$id = $_POST["form-recovery-id"];

$sql = new MySQL();

if (FormUtils::checkIsEmail($id)) {
    $success = FormUtils::formValidateEmail($id);

    if (!$success['success']) return FormUtils::redirect_with_message($success["message"], "/register?reg=0", true);

    $id = $success['message'];
    $user = $sql->getUserByEmail($id);

    if (!$user) FormUtils::redirect_with_message("Ingresaste un email incorrecto o inexistente.", "/register?reg=2", true);
} else {
    $success = FormUtils::formValidateNickname($id);

    if (!$success['success']) return FormUtils::redirect_with_message($success["message"], "/register?reg=0", true);

    $id = $success['message'];
    $user = $sql->getUserByNickname($id);

    if (!$user) FormUtils::redirect_with_message("Ingresaste un usuario incorrecto o inexistente.", "/register?reg=2", true);
}


$code = "327" . random_int(1000, 9999);
$_SESSION["reco-id"] = $id;
$_SESSION["reco-code"] = intval($code);

FormUtils::sendNoReplyEmail("Recuperación de credenciales", "Ingresá el siguiente código para recuperar tus credenciales: $code", $user->getEmail());
?>

<!DOCTYPE html>
<html lang="en">

<head>
    <?php include $_SERVER["DOCUMENT_ROOT"] . '/templates/meta.php' ?>
</head>

<body>
    <?php include $_SERVER["DOCUMENT_ROOT"] . '/templates/header.php' ?>
    <div class="app">
        <div class="app-wrapper">
            <div>
                <p>Por favor, ingresá el código de confirmación que enviamos a tu email.</p>
                <form action="/php/recovery_confirm.php" method="POST">
                    <label for="recovery-code">Código de confirmación:</label>
                    <input type="text" name="recovery-code" id="recovery-code">
                    <label for="recovery-newpass">Ingresá tu nuevo password:</label>
                    <input type="text" name="recovery-newpass" id="recovery-code">
                    <button type="submit" name="recovery-code-submit">Enviar</button>
                </form>
            </div>
        </div>
        <div class="footer">
            <?php include $_SERVER["DOCUMENT_ROOT"] . "/templates/footer.php" ?>
        </div>
    </div>
</body>

</html>

recovery_confirm.php：

<?php
@session_start();
require_once $_SERVER["DOCUMENT_ROOT"] . "/php/autoloader.php";

if (!isset($_POST["recovery-code-submit"])) return FormUtils::redirect_with_message("Acceso inválido.", "/index", true);
if (!isset($_POST["recovery-code"])) return FormUtils::redirect_with_message("El código no puede estar en blanco", "/register?reg=2", true);

//check password
$success = FormUtils::formValidatePass($_POST["recovery-newpass"]);

if (!$success['success']) return FormUtils::redirect_with_message($success["message"], "/register?reg=2", true);
else {
    $pass = $success['message'];
}

$id = $_SESSION["reco-id"];
$code = $_SESSION["reco-code"]; // undefined index
$verify_code = intval($_POST["recovery-code"]); // undefined index

if ($code !== $verify_code) return FormUtils::redirect_with_message("El código introducido no es válido!", "/register?reg=2", true);

$sql = new MySQL();
$conn = $sql->getConnection();

if (FormUtils::checkIsEmail($id)) {
    $query = mysqli_query($sql->getConnection(), "UPDATE `users` SET `pass` = '$pass' WHERE `users`.`Mail` = '$id';");
} else {
    $query = mysqli_query($sql->getConnection(), "UPDATE `users` SET `pass` = '$pass' WHERE `users`.`nick` = '$id';");
}


if (!$query) FormUtils::redirect_with_message("Hubo un error al actualizar tu password. Intentalo nuevamente.", "/register?reg=2", true);

$sql->getConnection()->close();
return FormUtils::redirect_with_message("Tu password ha sido actualizada correctamente!", "/register?reg=1", false);

php 会话变量 undefined-index

在再次设置会话变量之前取消设置会话变量会导致使用时出现“未定义索引”

unsetting session variable before setting it again results in 'undefined index' on use

评论

评论