Hello and welcome to our community! Is this your first visit?
Register
Enjoy an ad free experience by logging in. Not a member yet? Register.
Results 1 to 13 of 13
  1. #1
    New Coder
    Join Date
    Jun 2009
    Posts
    18
    Thanks
    2
    Thanked 0 Times in 0 Posts

    Post Easy Registration/Login system

    Okay here is a nice tutorial, you can copy and paste (But where will that get you) Basicly this will most likely teach you how to get a feel of the code... and what it does.

    Okay first create a database, I have created all mine as - reg so as my website is www.sabregames.com, the prefix for the php to connect to the database will be "sabre_" (Because it's my username) so my first page will be the database connection. Once you have made your Mysql database,

    This is the "MySQL Query"
    Code:
    CREATE TABLE users (
        username varchar(30),
        password varchar(32));
    Create a page called " database.php "
    PHP Code:
    <?

    /**
     * Connect to the mysql database.
     */
    $conn mysql_connect("localhost""User_Name""Pass") or die(mysql_error());
    mysql_select_db('Database Name'$conn) or die(mysql_error());

    ?>
    Fill in the "User_Name" with the username of the database mine shall be "sabre_reg" my password will be "reg" and my databasename shall be "sabre_reg" I find it easier myself to create all the names the same, Now this isn't the safest but it is the easiest.

    Now create a " login.php "
    PHP Code:
    <?

    /**
     * Checks whether or not the given username is in the
     * database, if so it checks if the given password is
     * the same password in the database for that user.
     * If the user doesn't exist or if the passwords don't
     * match up, it returns an error code (1 or 2). 
     * On success it returns 0.
     */
    function confirmUser($username$password){
       global 
    $conn;
       
    /* Add slashes if necessary (for query) */
       
    if(!get_magic_quotes_gpc()) {
        
    $username addslashes($username);
       }

       
    /* Verify that user is in database */
       
    $q "select password from users where username = '$username'";
       
    $result mysql_query($q,$conn);
       if(!
    $result || (mysql_numrows($result) < 1)){
          return 
    1//Indicates username failure
       
    }

       
    /* Retrieve password from result, strip slashes */
       
    $dbarray mysql_fetch_array($result);
       
    $dbarray['password']  = stripslashes($dbarray['password']);
       
    $password stripslashes($password);

       
    /* Validate that password is correct */
       
    if($password == $dbarray['password']){
          return 
    0//Success! Username and password confirmed
       
    }
       else{
          return 
    2//Indicates password failure
       
    }
    }

    /**
     * checkLogin - Checks if the user has already previously
     * logged in, and a session with the user has already been
     * established. Also checks to see if user has been remembered.
     * If so, the database is queried to make sure of the user's 
     * authenticity. Returns true if the user has logged in.
     */
    function checkLogin(){
       
    /* Check if user has been remembered */
       
    if(isset($_COOKIE['cookname']) && isset($_COOKIE['cookpass'])){
          
    $_SESSION['username'] = $_COOKIE['cookname'];
          
    $_SESSION['password'] = $_COOKIE['cookpass'];
       }

       
    /* Username and password have been set */
       
    if(isset($_SESSION['username']) && isset($_SESSION['password'])){
          
    /* Confirm that username and password are valid */
          
    if(confirmUser($_SESSION['username'], $_SESSION['password']) != 0){
             
    /* Variables are incorrect, user not logged in */
             
    unset($_SESSION['username']);
             unset(
    $_SESSION['password']);
             return 
    false;
          }
          return 
    true;
       }
       
    /* User not logged in */
       
    else{
          return 
    false;
       }
    }

    /**
     * Determines whether or not to display the login
     * form or to show the user that he is logged in
     * based on if the session variables are set.
     */
    function displayLogin(){
       global 
    $logged_in;
       if(
    $logged_in){
          echo 
    "<h1>Logged In!</h1>";
          echo 
    "Welcome <b>$_SESSION[username]</b>, you are logged in. <a href=\"logout.php\">Logout</a>";
       }
       else{
    ?>

    <h1>Login</h1>
    <form action="" method="post">
    <table align="left" border="0" cellspacing="0" cellpadding="3">
    <tr><td>Username:</td><td><input type="text" name="user" maxlength="30"></td></tr>
    <tr><td>Password:</td><td><input type="password" name="pass" maxlength="30"></td></tr>
    <tr><td colspan="2" align="left"><input type="checkbox" name="remember">
    <font size="2">Remember me next time</td></tr>
    <tr><td colspan="2" align="right">
        <input name="Join" type="button" value="Join"><input type="submit" name="sublogin" value="Login"></td></tr>
    <tr><td colspan="2" align="left">&nbsp;</td></tr>
    </table>
    </form>

    <?
       
    }
    }


    /**
     * Checks to see if the user has submitted his
     * username and password through the login form,
     * if so, checks authenticity in database and
     * creates session.
     */
    if(isset($_POST['sublogin'])){
       
    /* Check that all fields were typed in */
       
    if(!$_POST['user'] || !$_POST['pass']){
          die(
    'You didn\'t fill in a required field.');
       }
       
    /* Spruce up username, check length */
       
    $_POST['user'] = trim($_POST['user']);
       if(
    strlen($_POST['user']) > 30){
          die(
    "Sorry, the username is longer than 30 characters, please shorten it.");
       }

       
    /* Checks that username is in database and password is correct */
       
    $md5pass md5($_POST['pass']);
       
    $result confirmUser($_POST['user'], $md5pass);

       
    /* Check error codes */
       
    if($result == 1){
          die(
    'That username doesn\'t exist in our database.');
       }
       else if(
    $result == 2){
          die(
    'Incorrect password, please try again.');
       }

       
    /* Username and password correct, register session variables */
       
    $_POST['user'] = stripslashes($_POST['user']);
       
    $_SESSION['username'] = $_POST['user'];
       
    $_SESSION['password'] = $md5pass;

       
    /**
        * This is the cool part: the user has requested that we remember that
        * he's logged in, so we set two cookies. One to hold his username,
        * and one to hold his md5 encrypted password. We set them both to
        * expire in 100 days. Now, next time he comes to our site, we will
        * log him in automatically.
        */
       
    if(isset($_POST['remember'])){
          
    setcookie("cookname"$_SESSION['username'], time()+60*60*24*100"/");
          
    setcookie("cookpass"$_SESSION['password'], time()+60*60*24*100"/");
       }

       
    /* Quick self-redirect to avoid resending data on refresh */
       
    echo "<meta http-equiv=\"Refresh\" content=\"0;url=$HTTP_SERVER_VARS[PHP_SELF]\">";
       return;
    }

    /* Sets the value of the logged_in variable, which can be used in your code */
    $logged_in checkLogin();

    ?>
    Basicly no need to change any of this... but if needed just ask and i shall make changes for you.

    Now you can create a " register.php "
    PHP Code:
    <<?
    session_start
    (); 
    include(
    "database.php");

    /**
     * Returns true if the username has been taken
     * by another user, false otherwise.
     */
    function usernameTaken($username){
       global 
    $conn;
       if(!
    get_magic_quotes_gpc()){
          
    $username addslashes($username);
       }
       
    $q "select username from users where username = '$username'";
       
    $result mysql_query($q,$conn);
       return (
    mysql_numrows($result) > 0);
    }

    /**
     * Inserts the given (username, password) pair
     * into the database. Returns true on success,
     * false otherwise.
     */
    function addNewUser($username$password){
       global 
    $conn;
       
    $q "INSERT INTO users VALUES ('$username', '$password')";
       return 
    mysql_query($q,$conn);
    }

    /**
     * Displays the appropriate message to the user
     * after the registration attempt. It displays a 
     * success or failure status depending on a
     * session variable set during registration.
     */
    function displayStatus(){
       
    $uname $_SESSION['reguname'];
       if(
    $_SESSION['regresult']){
    ?>

    <h1>Registered!</h1>
    <p>Thank you <b><? echo $uname?></b>, your information has been added to the database, you may now <META HTTP-EQUIV="Refresh"
          CONTENT="2; URL=/login.php"><a href="main.php" title="Login">log in</a>.</p>

    <?
       
    }
       else{
    ?>

    <h1>Registration Failed</h1>
    <p>We're sorry, but an error has occurred and your registration for the username <b><? echo $uname?></b>, could not be completed.<br>
    Please try again at a later time.</p>

    <?
       
    }
       unset(
    $_SESSION['reguname']);
       unset(
    $_SESSION['registered']);
       unset(
    $_SESSION['regresult']);
    }

    if(isset(
    $_SESSION['registered'])){
    /**
     * This is the page that will be displayed after the
     * registration has been attempted.
     */
    ?>

    <html>
    <title>Registration Page</title>
    <body>

    <? displayStatus(); ?>

    </body>
    </html>

    <?
       
    return;
    }

    /**
     * Determines whether or not to show to sign-up form
     * based on whether the form has been submitted, if it
     * has, check the database for consistency and create
     * the new account.
     */
    if(isset($_POST['subjoin'])){
       
    /* Make sure all fields were entered */
       
    if(!$_POST['user'] || !$_POST['pass']){
          die(
    'You didn\'t fill in a required fields.<br>
          You shall now be re-directed to the registration form.
          <META HTTP-EQUIV="Refresh"
          CONTENT="2; URL=http://www.sabregames.com/register.php">.'
    );
       }

       
    /* Spruce up username, check length */
       
    $_POST['user'] = trim($_POST['user']);
       if(
    strlen($_POST['user']) > 30){
          die(
    "Sorry, the username is longer than 30 characters, please shorten it.");
       }

       
    /* Check if username is already in use */
       
    if(usernameTaken($_POST['user'])){
          
    $use $_POST['user'];
          die(
    "Arg! someone beat you to it, the username: <strong>$use</strong> is already taken, I guess you have to choose another.");
       }

       
    /* Add the new account to the database */
       
    $md5pass md5($_POST['pass']);
       
    $_SESSION['reguname'] = $_POST['user'];
       
    $_SESSION['regresult'] = addNewUser($_POST['user'], $md5pass);
       
    $_SESSION['registered'] = true;
       echo 
    "<meta http-equiv=\"Refresh\" content=\"0;url=$HTTP_SERVER_VARS[PHP_SELF]\">";
       return;
    }
    else{
    /**
     * This is the page with the sign-up form, the names
     * of the input fields are important and should not
     * be changed.
     */
    ?>

    <html>
    <title>Registration Page</title>
    <body>
    <h1>Register</h1>
    <form action="<? echo $HTTP_SERVER_VARS['PHP_SELF']; ?>" method="post">
    <table align="left" border="0" cellspacing="0" cellpadding="3">
    <tr><td>Username:</td><td><input type="text" name="user" maxlength="30"></td></tr>
    <tr><td>Password:</td><td><input type="password" name="pass" maxlength="30"></td></tr>
    <tr><td colspan="2" align="right"><input type="submit" name="subjoin" value="Join!"></td></tr>
    </table>
    </form>
    </body>
    </html>


    <?
    }
    ?>
    A nice and easy code which just adds a registration page to your site, If using dream weaver/Microsoft expression web Do not worry about the 2 parts saying "Registered!" and "Registration Failed" that's just if they fail for registering and also if they are successful. After this it re-directs you to login.php after 2 seconds.

    Now you will need to create a " main.php "
    PHP Code:
    <? 
    /* Include Files *********************/
    session_start(); 
    include(
    "database.php");
    include(
    "login.php");
    /*************************************/
    ?>

    <html>
    <title>Jasons Login Script</title>
    <body>

    <? displayLogin(); ?>

    </body>
    </html>
    This is the place that tells you that you are logged into the system pretty simple, It connects to the database to find your username and checks your password, also logs you in.

    Now create the last page " main2.php "
    PHP Code:
    <? 
    /* Include Files *********************/
    session_start(); 
    include(
    "database.php");
    include(
    "login.php");
    /*************************************/
    ?>

    <html>
    <title>Jasons Login Script</title>
    <body>

    <? 
    if($logged_in){
       echo 
    'Logged in as '.$_SESSION['username'].', <a href="logout.php">logout</a>';
    }else{
       echo 
    'Not logged in.';
    }
    ?>

    </body>
    </html>
    This will basicly show your username and a logout text link, If you wish for this to be a button please ask i shall be more than happy to do this for you


    That is the end of the tutorial. I hope it was nice and easy Please Comment.

  • #2
    Supreme Master coder! _Aerospace_Eng_'s Avatar
    Join Date
    Dec 2004
    Location
    In a place far, far away...
    Posts
    19,291
    Thanks
    2
    Thanked 1,043 Times in 1,019 Posts
    Where do you define $logged_in? Also why are you using short open tags e.g. <? as opposed to <?php

    Also why are you using outdated HTTP_SERVER_VARS? I suggest you learn php better before you post more tutorials. The tutorials I've seen you post use techniques that can be done better such as your use of a meta refresh.
    ||||If you are getting paid to do a job, don't ask for help on it!||||

  • #3
    Regular Coder
    Join Date
    Sep 2007
    Posts
    263
    Thanks
    19
    Thanked 0 Times in 0 Posts
    Anyway to make this write to a text file instead of DB?

  • #4
    Regular Coder
    Join Date
    Oct 2009
    Posts
    190
    Thanks
    12
    Thanked 2 Times in 2 Posts
    Quote Originally Posted by IFeelYourPain View Post
    Anyway to make this write to a text file instead of DB?
    For what reason? There are some issues with utilizing txt documents for things like this.

  • #5
    New to the CF scene
    Join Date
    Aug 2010
    Posts
    1
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Adding info to the registration page

    Hi Jason:

    I am not the least bit conversant with PHP but I was able to copy everything and made it work, except my database insists on creating unique random character passwords. How do I correct that?

    Also, I would like to add information fields, like name, address, and email
    Could you put me on the path to doing that?

    I appreciate your effort in producing this system. Thanks a million!

    Cal Smith

    PS: It is very irksome to read comments like that of Aerospace Eng. Putdowns like that are the realm of social idiots.

    My mother taught me 70 years ago that "if you can't say something positive about somebody's good intentions, keep your mouth shut"

  • #6
    Senior Coder kbluhm's Avatar
    Join Date
    Apr 2007
    Location
    Philadelphia, PA, USA
    Posts
    1,509
    Thanks
    3
    Thanked 258 Times in 254 Posts
    Quote Originally Posted by cals5839 View Post
    PS: It is very irksome to read comments like that of Aerospace Eng. Putdowns like that are the realm of social idiots.

    My mother taught me 70 years ago that "if you can't say something positive about somebody's good intentions, keep your mouth shut"
    I agree with his criticisms. Sometimes the truth hurts.

  • #7
    Regular Coder
    Join Date
    Sep 2010
    Location
    Virginia
    Posts
    112
    Thanks
    11
    Thanked 7 Times in 7 Posts
    Useful script. ;o

    Quote Originally Posted by cals5839 View Post
    My mother taught me 70 years ago
    the hell?

  • #8
    New Coder
    Join Date
    Dec 2009
    Posts
    32
    Thanks
    1
    Thanked 3 Times in 3 Posts
    Has almost no security either but for a mock up it is ok just dont use in a production setting...

  • #9
    New to the CF scene
    Join Date
    Oct 2010
    Posts
    1
    Thanks
    0
    Thanked 0 Times in 0 Posts
    As a new PHP programmer, this was very helpful to get some of the basics down. Thank you.

  • #10
    New to the CF scene
    Join Date
    Jun 2011
    Posts
    4
    Thanks
    0
    Thanked 0 Times in 0 Posts
    Thank you for sharing all of these tactics. Its been proven very useful in helping me find a solution to a problem simular to this. I look forward to connecting with more of you in the coming months.

  • #11
    New Coder
    Join Date
    Jun 2011
    Posts
    15
    Thanks
    6
    Thanked 0 Times in 0 Posts
    Nice share, It's working for me.
    It's amazing how hard is to find working snippets, i read tons of blogs with different snippets and they don't work most of the time...

  • #12
    New Coder
    Join Date
    Jul 2011
    Location
    Texas
    Posts
    19
    Thanks
    0
    Thanked 0 Times in 0 Posts
    Where is the "logout.php" ?

  • #13
    New to the CF scene
    Join Date
    Sep 2011
    Location
    Cardiff
    Posts
    3
    Thanks
    0
    Thanked 0 Times in 0 Posts
    Anyone find this code working I tried it and end up with 4 errors. Unfortunately I couldn't save the error logs. By the way is there any answers about writing it on a txt file instead of a DB. Thanks.


  •  

    Posting Permissions

    • You may not post new threads
    • You may not post replies
    • You may not post attachments
    • You may not edit your posts
    •