Php comprehensive exercises -- mymessbox -- Logon

Logon page:

: 0: 0: font-family: ' ', width: 17% width:-left:-margin-left: font-size:-family: -bottom: </style> Logon page processing:

= ['Loginname' = ['username' = ['Password' = (['vcode' = (['rcode' ("localhost", "root ", "111" ("mymessbox" ("set names utf8 "(! = "<Script> alert ('the code is wrong! '); Window. location. href = 'login. php' </script> "(= 'manager' =" select username, password from manager where username = ''and password ='' "= (> = 1 ['mgusername'] =" <script> alert ('login success! '); Window. location. href ='./manager/mg_index.php' </script> "" <script> alert ('login failed! The username or password was wrong! Please login again! '); Window. location. href = 'login. php' </script> "=" select username, password from user where username = ''and password ='' "= (> = 1 ['username'] =" <script> alert ('login success! '); Window. location. href ='./user/index. php' </script> "" <script> alert ('login failed! The username or password was wrong !! Please login again! '); Window. location. href = 'login. php' </script>"Loginok. php

Let's start with these two. Although they haven't been completed yet, there are still many loopholes, but I will change them at 1.1.

I hope you can give more advice when looking at it. Thank you!