Cookies在PHP中无法正常工作以进行重定向

Question

I seem to have an issue with my code. It doesn't redirect if cookies are not there, and it doesn't include my header.php if the cookie is there. I made a test cookie script and I can confirm if the cookie is/or not present.

CODE:

//checks cookies to make sure they are logged in 
    if(isset($_COOKIE["user"]))
{
$username = $_COOKIE["user"]; 
$pass = $_COOKIE["password"];
$check = mysql_query("SELECT * FROM members WHERE email = '$username'") or die(mysql_error()); 
$info = mysql_fetch_array( $check );

//if the cookie has the wrong password, they are taken to the login page 
if ($pass != $info['password']) 
    {
    header("Location: login.php"); 
    exit();
    } 
else //otherwise they are shown the admin area   
    { 
    include 'header.php';
    }
}

Answer 1

Apart from the bunch of bad practices in your script, what I suppose is causing the malfunction is this:

$info = mysql_fetch_array( $check );
if ($pass != $info['password']) 

If you throw an eye at the manual this is what it says

Return Values

Returns an array of strings that corresponds to the fetched row, or FALSE if there are no more rows...

So the code should look like

$info = mysql_fetch_array( $check );
if ($pass != $info[0]['password']) 

Or in php gte 5.4

$info = mysql_fetch_array( $check )[0];
if ($pass != $info['password'])

You should make sure you have display_errors set to E_ALL so you can debug simple errors like that yourself easier.

Answer 2

Mysql functions are deprecated. Mysqli or PDO, along with prepared statements, should be used. Example:

//checks cookies to make sure they are logged in 
if(isset($_COOKIE["user"]) && isset($_COOKIE["password"])) {    
  $password = $_COOKIE["password"];
  /* Create the prepared statement */
  if ($stmt = $mysqli->prepare("SELECT password FROM members WHERE email = ?")) {

    /*bind parameters */
    $stmt->bind_param("s", $_COOKIE['user']);

    /* Execute the prepared Statement */
    $stmt->execute();

    /* Bind results to variables */
    $stmt->bind_result($dbPassword);

    /* fetch values */
    $stmt->fetch();

    if($password != $dbPassword) {
    //password didn't match, boot 'em
      header('Location:fail.php');
      exit();
    }
    //password matched, let 'em in
    else {
      header('Location:pass.php');
      exit();
    }
}
//no cookies set, boot 'em
else {
    header('Location:fail.php');
    exit();
}

Side note: don't store plain text passwords. You should be hashing the password, and adding salt.