Login & Sign up forms

• You have one database named logindb
• You have one table named login which is part of the database
• You have 2 files login.html and login.php for the login (a login form and a script to check the entries against the database)
• You have 2 other files signup.html and signup.php for the signup form and for the insertion of the dataset inside the database.

The login system works on session variables (see the $_SESSION global variable defined in Php) stocked on the server side and which expire usually after 20 minutes of inactivity.

We also need to store the dataset inside a database (Mysql is used here).

We assume you have some basic knowledge with Mysql or just copy the following code and execute it (for details about setting up a database and adding tables, please have a look to these Mysql tutorials):
CREATE TABLE login( login VARCHAR(50) NOT NULL PRIMARY KEY, -- set the login as primary key to avoid redundance of name email VARCHAR(50), -- optional field for the example pass VARCHAR(30) NOT NULL, ip VARCHAR(16) NOT NULL, -- optional field newsletter ENUM('No','Yes') NOT NULL -- optional field );
Just insert this table inside the database logindb. And remember your username and password (we will assume they are respectively: userlogin and passlogin) to connect to this database.

Let's build an online login form containing a login and a password field:
<form method="post" action="login.php" > Login:<br /> <input type="text" name="login" /><br /> Password:<br /> <input type="text" name="pass" /><br /> <input type="submit" value="Sign in" /><br /> </form>
Store this code inside login.html
You may add some javascript to check the entries on the client side.

Now comes the function to retrieve the data from the login form and match the data against the database:
<? /*Use of Sessions*/ if(!session_id()) session_start(); header("Cache-control: private"); //avoid an IE6 bug (keep this line on top of the page) $login='NO data sent'; /*simple checking of the data*/ if(isset($_POST['login']) && isset($_POST['pass'])) { /*Connection to database logindb using your login name and password*/ $db=mysql_connect('localhost','loginuser','loginpass') or die(mysql_error()); mysql_select_db('logindb'); /*additional data checking and striping*/ $_POST['login']=mysql_real_escape_string(strip_tags(trim($_POST['login']))); $_POST['pass']=mysql_real_escape_string(strip_tags(trim($_POST['pass']))); $q=mysql_query("SELECT * FROM login WHERE login='{$_POST['login']}' AND pass='{$_POST['pass']}'",$db) or die(mysql_error()); /*If there is a matching row*/ if(mysql_num_rows($q) > 0) { $_SESSION['login'] = $_POST['login']; $login='Welcome back '.$_SESSION['login']; } else { $login= 'Wrong login or password'; } mysql_close($db); } //you may echo the data anywhere in the file echo $login; ?>
Store this code inside login.php

The signup html form (just require a login name and a password to confirm):
<form method="post" action="signup.php"> Login:<br /> <input type="text" name="login" /><br /> Password:<br /> <input type="text" name="pass" /><br /> Confirm:<br /> <input type="text" name="confirm" /><br /> <input type="submit" value="Sign up" /><br /> </form>
Store this code inside signup.html
You may add some javascript to check the entries on the client side.
You can also add as many fields as you wish assuming you add columns to the login table.

Finally the script to insert the signup datas inside the database:
<? /*Use of Sessions*/ if(!session_id()) session_start(); header("Cache-control: private"); //avoid an IE6 bug (keep this line on top of the page) $login='NO data sent'; /*simple checking of the data*/ if(isset($_POST['login']) && isset($_POST['pass']) && ($_POST['pass'] == $_POST['confirm'])) { /*Connection to database logindb using your login name and password*/ $db=mysql_connect('localhost','loginuser','loginpass') or die(mysql_error()); mysql_select_db('logindb'); /*additional data checking and striping*/ $_POST['login']=mysql_real_escape_string(strip_tags(trim($_POST['login']))); $_POST['pass']=mysql_real_escape_string(strip_tags(trim($_POST['pass']))); mysql_query("INSERT INTO login SET login='{$_POST['login']}',pass='{$_POST['pass']}'",$db); /*If the database has been updated*/ if(mysql_affected_rows() > 0) { $_SESSION['login'] = $_POST['login']; $login='Welcome '.$_SESSION['login']; } else { $login= 'This login name already exists.'; } mysql_close($db); } //you may echo the data anywhere in the file echo $login; ?>
Store this code inside signup.php

At this point you can upload everything onto your server, arrange the layout and try to signup first and then login.

Comments

Categories

• ASP
• CSS
• Flash
• Html
• Java
• Javascript
• PHP
  • Basics
  • Date & Time
  • Object Oriented
  • Networking
  • Command Line
  • Configuration
  • Database
  • Xml/RSS
  • Email/Mailing
  • Data Mining
  • File Handling
  • Graphism/Images
  • Session & Cookies
  • User authentification
  • Templates/Themes
  • Maths
• Python
• Perl
• Ruby
• Xml