Requirements
•
You
should have following environments installed:
–
PHP
–
MySQL
Database
–
Apache
Server
•
Any
internet browser
•
Notepad
or any other text editor.
4 Files are created
•
Login
Page (login.php)
•
Authentication
Page (auth.php)
•
Home
Page (home.php)
•
Logout
Page (logout.php)
Database and Table Information
Host Name: localhost
User: root
Password:
“NULL”
Database: database_name
Table: users
Id
|
user
|
pass
|
1
|
userone
|
testpassword1
|
2
|
usertwo
|
testpassword2
|
Login Page (login.php)
<html>
<head>
<title>Login
Page</title>
</head>
<body>
<?php
//shows message if incorrect username or password
if(isset($_REQUEST['msg']))
{
echo $_REQUEST['msg'];
}
?>
<form action="auth.php"
method="post" name="loginForm">
Username: <input
type="text" name="user" /><br />
Password: <input
type="password" name="pass" /><br />
<input
type="hidden" name="submitting" value="true"
/>
<input
type="submit" name="login" value=" Login " />
</form>
</body>
</html>
Authentication Page (auth.php)
<?php
//check if the form is
submitted
if(isset($_POST['submitting']))
{
//connection to database started
$conn=mysql_connect("localhost","root","");
$db_select=mysql_select_db("database_name",$conn);
//connection to database ended
$user=$_POST['user'];
$pass=$_POST['pass'];
//checks if a user exists in database
having `user` and `pass` equal to $user and $pass respectively. (Check out prevention from SQL Injection)
$chkqry=mysql_query("select `id` from
`users` where `user`='".$user."' and `pass`='".$pass."'");
//if user exists then, set cookie
`SessionId` and redirect to home.php page
if(mysql_num_rows($chkqry)>0) {
setcookie("SessionId",$user,0);
header('location:home.php');
}
//if user doesn’t exist then, shows message
‘Incorrect Username or Password’ on login.php page
else {
header('location:login.php?msg=Incorrect
Username or Password');
}
}
?>
Home Page (home.php)
<?php
//if cookie is not set, redirect to
login.php
if(!isset($_COOKIE['SessionId'])) {
header('location:login.php');
}
?>
Hello
<?php echo $_COOKIE['SessionId'];?>, You are logged in.<br />
For
Logging out, <a href='logout.php'>Click Here</a>
Logout Page (logout.php)
<?php
//unsets cookie by setting cookie to some
previous time -1000.
if(isset($_COOKIE['SessionId'])) {
setcookie('SessionId','',-1000);
}
//then go back to login.php
header('location:login.php');
?>
No comments:
Post a Comment