问无法使用已被散列的密码登录。

EN

<?php  

 include_once '../database.php';
 include_once 'reg_Customer.php';
 session_start();
 if(isset($_SESSION["CustomerName"]))  
      {  
        header("location:index.php");
      }

 try  
 {  
       $conn = new PDO("mysql:host=$servername;dbname=$dbname", $username, $password);
       $conn->setAttribute(PDO::ATTR_ERRMODE, PDO::ERRMODE_EXCEPTION);
      if(isset($_POST["login"]))  
      {  
           if(empty($_POST["CustomerName"]) || empty($_POST["CustomerPass"]))  
           {  
                $message = '<label>All fields are required</label>';  
           }  
           else  
           {  

                $query = "SELECT * FROM customer WHERE CustomerName = :CustomerName AND CustomerPass = ".md5(CustomerPass)."";
                $stmt = $conn->prepare($query);  
                $stmt->execute(  
                     array(  
                          'CustomerName'     =>     $_POST["CustomerName"],  
                         md5('CustomerPass')     =>     $_POST["CustomerPass"] 
                     )  
                );  
                $count = $stmt->rowCount();  
                if($count > 0)  
                {  
                    
                    $_SESSION["CustomerName"] = $_POST["CustomerName"];  
                   
                  

                     header("location:index.php");  
                }  
                else  
                {  
                     $message = '<label>Wrong Password</label>';  
                }  
           }  
      }  
 }  
 catch(PDOException $error)  
 {  
      $message = $error->getMessage();  
 }  
 ?>