[代碼]php代碼：

//檢查用戶名與密碼是否合法
    $sql="SELECT `ec_salt` FROM ". $ecs->table('users') ."WHERE user_name = '" . $_POST['user_name']."'";
    $ec_salt =$db->getOne($sql);
    if(!empty($ec_salt))
    {
         /* 檢查密碼是否正確 */
         $sql = "SELECT user_id".
            " FROM " . $ecs->table('users') .
            " WHERE user_name = '" . $_POST['user_name']. "' AND password = '" . md5(md5($_POST['user_password']).$ec_salt) . "'";
    }
    else
    {
         /* 檢查密碼是否正確 */
         $sql = "SELECT user_id".
            " FROM " . $ecs->table('users') .
            " WHERE user_name = '" . $_POST['user_name']. "' AND password = '" . md5($_POST['user_password']) . "'";
    }
    $row = $db->getRow($sql);
   
    //驗證用戶密碼正確之后扣除用戶積分
    if ($row)
    {
           //驗證合法的操作
    }
    else {
        sys_msg("用戶名或密碼錯誤！", 1);
    }