PHP注册登录页问题求助：头像不显示且添加后登录失效

Hey there! I’ve run into similar snags when adding file uploads to basic auth systems, so let’s work through your problems step by step.

1. Login Page Stopped Working After Adding Avatar Functionality #

This is almost always related to form encoding or accidental code changes. Here’s what to check first:

• Remove enctype="multipart/form-data" from your login form
  That attribute is only needed for forms that upload files (like your registration page). If you added it to the login form by mistake, PHP won’t populate $_POST correctly—meaning your login script can’t grab the username/password values. Your login form should look like this:

  <form method="POST" action="login.php">
      <!-- Username/password fields here -->
  </form>
  

• Check for accidental code changes
  When adding avatar upload logic, it’s easy to overwrite or break existing login code. Compare your current login script to a backup (if you have one) to see if you modified session initialization, database queries, or variable names (e.g., accidentally using $_FILES instead of $_POST for login credentials).

• Enable PHP error reporting
  Turn on error messages to see exactly what’s breaking. Add these lines at the top of your login script:

  error_reporting(E_ALL);
  ini_set('display_errors', 1);
  

  This will show you if there’s an undefined variable, database connection error, or file permission issue that’s crashing the page.

2. Avatar Doesn’t Show Up on the Welcome Page #

This usually boils down to path issues, file permissions, or incorrect data storage. Let’s fix it:

• Verify your upload path logic
  Make sure you’re correctly moving the uploaded file from PHP’s temporary directory to a permanent folder, and storing the full relative path in your database. Example upload code:

  // Define upload directory (create it if it doesn't exist!)
  $upload_dir = 'uploads/';
  if (!file_exists($upload_dir)) {
      mkdir($upload_dir, 0755, true);
  }
  
  // Generate a unique filename to avoid conflicts
  $avatar_filename = time() . '_' . basename($_FILES['avatar']['name']);
  $target_path = $upload_dir . $avatar_filename;
  
  // Validate file is an image (critical for security!)
  $check = getimagesize($_FILES['avatar']['tmp_name']);
  if ($check !== false) {
      // Move the file to permanent storage
      if (move_uploaded_file($_FILES['avatar']['tmp_name'], $target_path)) {
          // Store $target_path in your user database (e.g., 'uploads/1690000000_avatar.jpg')
          $sql = "INSERT INTO users (username, password, avatar) VALUES (?, ?, ?)";
          // Execute query with $target_path as the avatar value
      } else {
          echo "Failed to upload avatar.";
      }
  } else {
      echo "File is not an image.";
  }
  

• Fix file permissions
  Ensure your uploads/ directory has read/write permissions. On Linux, run this command in your terminal:

  chmod 755 uploads/
  

  On Windows, right-click the folder, go to Properties > Security, and give your web server user (e.g., IIS_IUSRS) read/write access.

• Use the correct path in the welcome page
  When displaying the avatar, use the exact path stored in the database. For example:

  // Fetch user data from database
  $user_avatar = $row['avatar']; // Should be something like 'uploads/1690000000_avatar.jpg'
  ?>
  <img src="<?php echo $user_avatar; ?>" alt="Your Avatar" width="100">
  

  Double-check that the path is relative to your welcome page’s location (e.g., if welcome page is in a pages/ folder, you might need ../uploads/...).

Quick Security Tips #

Since you’re a beginner, don’t skip these:

• Always validate file types and sizes to prevent malicious uploads.
• Never trust the user-provided filename—rename files (like we did with the timestamp) to avoid overwriting existing files or executing harmful scripts.
• Store passwords using password_hash() and verify with password_verify() (I hope you’re already doing this! 😊)

内容的提问来源于stack exchange，提问作者Siti Asna