这是网站的认证书。 这是安全的吗? 最近的方案拟定是否? 它是否陈旧? 是否有“更加安全的方法”我是很新的,但我看不到太多的地方使用头盔授权。

任何帮助都值得赞赏。 这是我有史以来第一次使用的标识,也是登记。 然而,我不相信我像头脑授权一样。

<?php
require_once( connectvars.php );
IF (!isset($_SERVER[ PHP_AUTH_USER ]) || !isset($_SERVER[ PHP_AUTH_PW ])) {
header( HTTP/1.1 401 Unauthorized );
header( WWW-Authenticate: Basic realm="Register" );
exit( <h3> You must enter your username & password to continue );
}
$Dbc  = mysqli_connect( localhost ,  root ,   ,  learn );
$user_username = mysqli_real_escape_string($Dbc, trim($_SERVER[ PHP_AUTH_USER ]));
$user_password = mysqli_real_escape_string($Dbc, trim($_SERVER[ PHP_AUTH_PW ]));
$query = "SELECT ID, Username from members where Username =  $user_username  AND " .
"Password = SHA1( $user_password )";
$data = mysqli_query($Dbc, $query);
if (mysqli_num_rows($data) == 1) {
$row = mysqli_fetch_array($data);
$user_id = $row[ ID ];
$username = $row[ Username ];
}
else {
header( http/1.1 401 unauthorized );
header( www-authenticate: basic realm="Register" );
}
echo ( <p class="Login"> yo are logged in as   . $user_username .  .</p> ); 

if (isset($_POST[ submit ])) {
$username = $_POST[ username ];
$password = $_POST[ password ];
$email = $_POST[ email ];

if (empty($username) ){ 
echo "you forgot to enter a username.</br>";
}
if (empty($password)) {
echo "you forgot to enter a password.</br>";
}   
if (empty($email)) {
echo "you forgot to enter an email.</br>";
}

if(!empty($username) && !empty($password) && !empty($email))  {
$dbc = mysqli_connect( localhost ,  root ,   ,  learn );
$checkusername =  SELECT username FROM members where username = " .$username. " ;
if (mysqli_num_rows(mysqli_query($dbc, $checkusername)) != 0) 
{
    echo "<font color = red> Username <font color = black><u>           $username</u></font> already exists in the database.</font></br>";

$checkemail =  Select email FROM members where email = " .$email. " ;
if (mysqli_num_rows(mysqli_query($dbc, $checkemail)) != 0)
        echo "<font color = red> Email <font color = black><u>     $email</u></font> already exists in the database.</font>";
    mysqli_close($dbc);
}
else 
{
$query = "INSERT INTO members VALUES (0,  $username , SHA1( $password ),  $email )";
mysqli_query($dbc, $query);
echo " Username: <font color = green ><u> $username</u></font> & Password: <font color = green><u> $password</u></font> have been added to the database.";
mysqli_close($dbc);
}
}   
}

?>