我的PHP Cookie登录代码问题：静态账号无法登录且Cookie未存储

Hey there! As someone who’s stumbled through PHP cookies and sessions as a newbie myself, let’s break down why your static-credential login setup isn’t working and why cookies aren’t sticking across devices. Let’s go step by step to fix this:

The most common rookie mistake with setcookie() is calling it after any output (even a single space, HTML tag, or echo statement). PHP requires cookies to be sent in the HTTP headers, which have to come before any content.

Here’s a correct example of setting a cookie after validating credentials:

<?php
// Handle login submission
if ($_SERVER['REQUEST_METHOD'] === 'POST') {
    $input_user = $_POST['username'];
    $input_pass = $_POST['password'];

    // Static credential check
    if ($input_user === 'user1' && $input_pass === 'user1') {
        // Set cookie: name, value, expiration (1 hour from now), root path (applies to entire site)
        setcookie('logged_in_user', 'user1', time() + 3600, '/');
        
        // Redirect to avoid resubmitting the form on refresh
        header('Location: your-dashboard-page.php');
        exit; // Always exit after a header redirect
    } else {
        $error = "Wrong username or password!";
    }
}
?>

<!-- Login form comes AFTER the PHP logic -->
<form method="POST" action="">
    <label>Username: <input type="text" name="username"></label><br>
    <label>Password: <input type="password" name="password"></label><br>
    <button type="submit">Login</button>
    <?php if (isset($error)) echo "<p style='color:red'>$error</p>"; ?>
</form>

Even if your code is right, cookies won’t store if:

• Your browser has cookies disabled (check your privacy settings—make sure "Allow all cookies" is enabled for your local development site).
• You’re testing on localhost and accidentally set a domain parameter in setcookie() (skip the domain argument entirely for local testing, since browsers can finicky about localhost cookies).

To check if cookies are being sent:

1. Open your browser’s dev tools (F12).
2. Go to the Application tab (Chrome) or Storage tab (Firefox).
3. Expand the Cookies section and look for your site’s domain—your logged_in_user cookie should appear here after a successful login.

Since you’re new, enabling error messages will reveal hidden issues (like accidental output before setcookie()). Add these lines at the very top of your PHP file:

error_reporting(E_ALL);
ini_set('display_errors', 1);

If you see a warning like "Cannot modify header information - headers already sent", that means you have output (a space, HTML, etc.) before your setcookie() call—fix that first!

If you later switch to sessions instead of cookies, remember to call session_start() at the very top of every page that uses sessions (before any output). Sessions rely on a default cookie (PHPSESSID) to work, so fixing your cookie issues will also fix session problems down the line.

Start with the first two steps—9 times out of 10, the problem is either premature output or a missing parameter in setcookie(). Test on one device first, get it working there, then try others once the core logic is solid.

内容的提问来源于stack exchange，提问作者user8130268