获取用户名和密码进行身份验证

Question

I try to authenticate user by matching username and password input with database. The password is SHA1. Here's the related code :

public function init()
{
    $bootstrap = $this->getInvokeArg('bootstrap');
    $this->db = $bootstrap->getResource('auth');
    $this->session = new Zend_Session_Namespace('login');
    if(isset($this->session->isLogin)){
        $this->_helper->redirector('/guestbook');
    }
}

public function validAction()
{
    if(!isset($this->session->isLogin)){
        $username = mysql_escape_string($_POST['username']);
        $password = mysql_escape_string($_POST['password']);

        $login = $this->loginLocal($username, $password);
        if($login['username']!=''){
            echo '{success:true, result:{message:\'Welcome, '.$username.'!\'}}';
        } else {
            echo '{success:false, errors:{reason:\'Login failed, try again.\'}}';
        }
    }
}

private function loginLocal($username, $password) {
    $sql = "SELECT * FROM USER WHERE username = '".$username."' AND password = SHA1('".$password."')";

    $fetch = $this->db->query($sql);
    $login = $fetch->fetch();

    return $login;
}

But it's not working, with thrown error "Call to a member function query() on a non-object". Is this query error or what, I haven't figured it out. Any help appreciated, thank you.

UPDATE :

Here I add init function and validAction function. I am using Zend Framework on Netbeans. Indeed, $this->db is NULL, so how we can initialize it? Thank you.

Answer 1

Your database connection is not initialized

Do it like this

$db=new mysqli($server,$user,$pass,$databaseName) or die("Database error :".$db->error); 

Then your query should be

$fetch = $db->query($sql);