wintekweb infoplus: Login System php

Tuesday, May 29, 2012

Login System php

Login System php

Login system basically consist of Registration Form,Login form and Login out links, By looking at the sites which have logging systems you may view basically above files only.but behind those viewable files there are some files hidden and do very important role in logging systems I have created fallowing files to make this system work properly and keeping security to avoid unauthorized person access.

register.php- contains registration form.
register-check.php- validates the above form and checks with database the user existence and conveys correctly filed form data into the MySql table.
dbcon.php- Connects with your database "my_database".
registered.php- inform you have registered successfully and link to login form.
login_form.pp-collect your login details.
check_login- check login details are correct or not If correct direct to member area and If not direct to login_ fail.php.
member-area.php- link to profile area and logout.
login_failed-inform you your login details are wrong.
logout.php- you can logout.
authorisation.php- check member id is present or direct to access-denied.php
access-denied-access is not allowed who are going to type URL of member-area.php.

dbcon.php

Create following table in your data base called "my_database".

CREATE TABLE IF NOT EXISTS `members` (
`member_id` int(11) NOT NULL AUTO_INCREMENT,
`firstname` varchar(100) NOT NULL,
`lastname` varchar(100) NOT NULL,
`login` varchar(100) NOT NULL,
`passwd` varchar(32) NOT NULL,
PRIMARY KEY (`member_id`)
) ENGINE=MyISAM DEFAULT CHARSET=latin1 AUTO_INCREMENT=1;

register.php

<?php
   session_start();
?>
<html>
<head>

<title>Registration Form</title>

</head>
<body>
<?php
   if( isset($_SESSION['ERRMSG_ARR']) && is_array($_SESSION['ERRMSG_ARR']) && count($_SESSION['ERRMSG_ARR']) >0 ) {
       echo '<ul class="err">';
       foreach($_SESSION['ERRMSG_ARR'] as $msg) {
           echo '<li>',$msg,'</li>';
       }
       echo '</ul>';
       unset($_SESSION['ERRMSG_ARR']);
   }
?>
<h2><center><font color=#f09718>Registration Form</font></center></h2>
<form id="loginForm" name="loginForm" method="post" action="register-check.php">
<table bgcolor=#f09718 align="center">
    <tr bgcolor=#ffffff>
      <th>First Name </th>
      <td><input name="fname" type="text" class="textfield" id="fname" /></td>
    </tr>
    <tr bgcolor=#ffffff>
      <th>Last Name </th>
      <td><input name="lname" type="text" class="textfield" id="lname" /></td>
    </tr>
    <tr bgcolor=#ffffff>
      <th width="124">Login</th>
      <td width="168"><input name="login" type="text" class="textfield" id="login" /></td>
    </tr>
    <tr bgcolor=#ffffff>
      <th>Password</th>
      <td><input name="password" type="password" class="textfield" id="password" /></td>
    </tr>
    <tr bgcolor=#ffffff>
      <th>Confirm Password </th>
      <td><input name="cpassword" type="password" class="textfield" id="cpassword" /></td>
    </tr>
    <tr bgcolor=#ffffff>
      <td> </td>
      <td><input type="submit" name="Submit" value="Register" /></td>
    </tr>
</table>
</form>
</body>
</html>

register-check.php

<?php

   session_start();


   require_once('dbcon.php');


   $errmsg_arr = array();


   $errflag = false;


   $link = mysql_connect(DB_HOST, DB_USER, DB_PASSWORD);
   if(!$link) {
       die('Failed to connect to server: ' . mysql_error());
   }

   //Select database
   $db = mysql_select_db(DB_DATABASE);
   if(!$db) {
       die("Unable to select database");
   }

   //Function to sanitize values received from the form. Prevents SQL injection
   function clean($str) {
       $str = @trim($str);
       if(get_magic_quotes_gpc()) {
           $str = stripslashes($str);
       }
       return mysql_real_escape_string($str);
   }

   //Sanitize the POST values
   $fname = clean($_POST['fname']);
   $lname = clean($_POST['lname']);
   $login = clean($_POST['login']);
   $password = clean($_POST['password']);
   $cpassword = clean($_POST['cpassword']);

   //Input Validations
   if($fname == '') {
       $errmsg_arr[] = 'First name missing';
       $errflag = true;
   }
   if($lname == '') {
       $errmsg_arr[] = 'Last name missing';
       $errflag = true;
   }
   if($login == '') {
       $errmsg_arr[] = 'Login ID missing';
       $errflag = true;
   }
   if($password == '') {
       $errmsg_arr[] = 'Password missing';
       $errflag = true;
   }
   if($cpassword == '') {
       $errmsg_arr[] = 'Confirm password missing';
       $errflag = true;
   }
   if( strcmp($password, $cpassword) != 0 ) {
       $errmsg_arr[] = 'Passwords do not match';
       $errflag = true;
   }

   //Check for duplicate login ID
   if($login != '') {
       $qry = "SELECT * FROM members WHERE login='$login'";
       $result = mysql_query($qry);
       if($result) {
           if(mysql_num_rows($result) > 0) {
               $errmsg_arr[] = 'Login ID already in use';
               $errflag = true;
           }
           @mysql_free_result($result);
       }
       else {
           die("Query failed");
       }
   }


   if($errflag) {
       $_SESSION['ERRMSG_ARR'] = $errmsg_arr;
       session_write_close();
       header("location: register.php");
       exit();
   }

   $qry = "INSERT INTO members(firstname, lastname, login, passwd) VALUES('$fname','$lname','$login','".md5($_POST['password'])."')";
   $result = @mysql_query($qry);

   //Check whether the query was successful or not
   if($result) {
       header("location: register-success.php");
       exit();
   }else {
       die("Query failed");
   }
?>

dbcon.php

<?php
   define('DB_HOST', 'localhost');
    define('DB_USER', 'root');
    define('DB_PASSWORD', '');
    define('DB_DATABASE', 'my_database');
?>

register-success.php

<html>
<head>
<title>Registration Successful</title>
</head>
<body>
<h1>Registration Successful</h1>
<p><a href="login_form.php">Click here</a> to login to your account.</p>
</body>
</html>

login_form.php

<head>
<title>Login Form</title>
</head>
<body>
<div align="center">
<table bgcolor=eda528>
<h3>Login Form</h3>
<form id="loginForm" name="loginForm" method="post" action="check_login.php">
<tr bgcolor=#ffffff>
      <td width="112"><b>Login</b></td>
      <td width="188"><input name="login" type="text" class="textfield" id="login" /></td>
    </tr>
    <tr bgcolor=#ffffff>
      <td><b>Password</b></td>
      <td><input name="password" type="password" class="textfield" id="password" /></td>
    </tr>
    <tr bgcolor=#ffffff>
      <td> </td>
      <td><input type="submit" name="Submit" value="Login" /></td>
    </tr>
</table>
</td></tr>
</table>
</div>

</form>
</body>
</html>

check_login.php

<?php

    session_start();


    require_once('dbcon.php');


    $errmsg_arr = array();


    $errflag = false;


    $link = mysql_connect(DB_HOST, DB_USER, DB_PASSWORD);
    if(!$link) {
        die('Failed to connect to server: ' . mysql_error());
    }

    //Select database
    $db = mysql_select_db(DB_DATABASE);
    if(!$db) {
        die("Unable to select database");
    }


    function clean($str) {
        $str = @trim($str);
        if(get_magic_quotes_gpc()) {
            $str = stripslashes($str);
        }
        return mysql_real_escape_string($str);
    }


    $login = clean($_POST['login']);
    $password = clean($_POST['password']);

    //Input Validations
    if($login == '') {
        $errmsg_arr[] = 'Login ID missing';
        $errflag = true;
    }
    if($password == '') {
        $errmsg_arr[] = 'Password missing';
        $errflag = true;
    }

    //If there are input validations, redirect back to the login form
    if($errflag) {
        $_SESSION['ERRMSG_ARR'] = $errmsg_arr;
        session_write_close();
        header("location: login-form.php");
        exit();
    }


    $qry="SELECT * FROM members WHERE login='$login' AND passwd='".md5($_POST['password'])."'";
    $result=mysql_query($qry);

    //Check whether the query was successful or not
    if($result) {
        if(mysql_num_rows($result) == 1) {
            //Login Successful
            session_regenerate_id();
            $member = mysql_fetch_assoc($result);
            $_SESSION['SESS_MEMBER_ID'] = $member['member_id'];
            $_SESSION['SESS_FIRST_NAME'] = $member['firstname'];
            $_SESSION['SESS_LAST_NAME'] = $member['lastname'];
            session_write_close();
            header("location: member-area.php");
            exit();
        }else {
            //Login failed
            header("location: login_failed.php");
            exit();
        }
    }else {
        die("Query failed");
    }
?>

member-area.php

<?php
require_once('authorisation.php');
?>
<head>
<title>Member Area</title>
</head>
<body>
<center><h1>Welcome <?php echo $_SESSION['SESS_FIRST_NAME'];?></h1>
<a href="profile.php"><?php echo $_SESSION['SESS_FIRST_NAME'];?> Enter Your Profile</a> | <a href="logout.php">Logout</a>
<p>members area. </p></center>
</body>
</html>

login_failed.php

<head>
<title>Login Failed</title>
<body>
<h1>Login Failed </h1>
<p align="center"> </p>
<h4 align="center" class="err">Login Failed!<br />
Please check your username and password</h4>
</body>
</html>

profile.php

you can create your own file

logout.php

<?php

   session_start();


   unset($_SESSION['SESS_MEMBER_ID']);
   unset($_SESSION['SESS_FIRST_NAME']);
   unset($_SESSION['SESS_LAST_NAME']);
?>
<html>
<head>

<title>Logged Out</title>

</head>
<body>
<h1>Logout </h1>
<p align="center"> </p>
<h4 align="center" class="err">You have been logged out.</h4>
<p align="center">Click here to <a href="login_form.php">Login</a></p>
</body>
</html>

authorisation.php

<?php
   //Start session
   session_start();

   //Check whether the session variable SESS_MEMBER_ID is present or not
   if(!isset($_SESSION['SESS_MEMBER_ID']) || (trim($_SESSION['SESS_MEMBER_ID']) == '')) {
       header("location: access-denied.php");
       exit();
   }
?>

access-denied.php

<html>
<head>
<title>Access Denied</title>
</head>
<body>
<h1>Access Denied </h1>
<p align="center"> </p>
<h4 align="center" class="err">Access Denied!<br />
You do not have access to this resource.</h4>
</body>
</html>

39 comments:

Thomas HruskaJune 6, 2012 at 7:32 AM
Instead of rolling your own login system, you should use prepackaged solutions like:

http://barebonescms.com/documentation/sso/

That is an enterprise-grade Single Sign-On system.
ReplyDelete
Replies
Emrullah44September 28, 2023 at 1:43 AM
https://bayanlarsitesi.com/
Manisa
Denizli
Malatya
Çankırı

KR4
ReplyDelete
Replies
Şakir3October 3, 2023 at 11:46 AM
yozgat
sivas
bayburt
van
uşak
EM2O
ReplyDelete
Replies
RüyaPeriKızı9October 15, 2023 at 7:07 PM
https://titandijital.com.tr/
amasya parça eşya taşıma
adıyaman parça eşya taşıma
hatay parça eşya taşıma
giresun parça eşya taşıma
31Q1H
ReplyDelete
Replies
BBF0BSierra202DENovember 6, 2023 at 3:20 AM
EC52E
Gümüşhane Lojistik
Batman Parça Eşya Taşıma
Çanakkale Parça Eşya Taşıma
Bilecik Evden Eve Nakliyat
Şırnak Lojistik
ReplyDelete
Replies
8C7FDYareli363A8November 9, 2023 at 10:16 PM
25941
order boldenone
Amasya Evden Eve Nakliyat
Çerkezköy Parke Ustası
Çerkezköy Fayans Ustası
Karabük Evden Eve Nakliyat
Bingöl Evden Eve Nakliyat
Kayseri Evden Eve Nakliyat
order sustanon
order parabolan
ReplyDelete
Replies
350A8Halle49E22November 10, 2023 at 3:02 AM
84808
Çorum Şehir İçi Nakliyat
Tokat Lojistik
Eskişehir Şehir İçi Nakliyat
Çerkezköy Yol Yardım
Bitget Güvenilir mi
Malatya Şehir İçi Nakliyat
Artvin Evden Eve Nakliyat
Gümüşhane Evden Eve Nakliyat
Kilis Şehir İçi Nakliyat
ReplyDelete
Replies
20AA8Alena748E7November 12, 2023 at 12:21 AM
DA36C
Huobi Güvenilir mi
Nevşehir Şehirler Arası Nakliyat
Hakkari Şehirler Arası Nakliyat
Niğde Şehir İçi Nakliyat
İstanbul Lojistik
Erzincan Parça Eşya Taşıma
Tokat Şehir İçi Nakliyat
Maraş Şehir İçi Nakliyat
Kayseri Parça Eşya Taşıma
ReplyDelete
Replies
73069Brittany5EEE3December 5, 2023 at 1:22 PM
5061D
https://referanskodunedir.com.tr/
ReplyDelete
Replies
D556DZariahFD6DADecember 23, 2023 at 5:14 AM
DA70B
kırklareli kadınlarla görüntülü sohbet
kastamonu sesli mobil sohbet
denizli sesli görüntülü sohbet
bilecik sohbet siteleri
uşak sesli sohbet
sesli sohbet
mersin sesli sohbet sitesi
sesli sohbet sesli chat
görüntülü canlı sohbet
ReplyDelete
Replies
CDDBAAnton84996January 4, 2024 at 11:44 PM
1F549
ardahan telefonda canlı sohbet
sesli sohbet siteleri
canlı sohbet sitesi
Ağrı En İyi Sesli Sohbet Uygulamaları
sakarya sesli sohbet mobil
Karaman Sohbet Sitesi
Kırşehir Telefonda Rastgele Sohbet
görüntülü sohbet ücretsiz
en iyi ücretsiz sohbet siteleri
ReplyDelete
Replies
D3442Arturo7EAEFFebruary 1, 2024 at 10:27 PM
1F963
dextools
sushi
uniswap
poocoin
satoshi
solflare
zkswap
bitbox
ellipal
ReplyDelete
Replies
9169AJennifer67B9AFebruary 2, 2024 at 2:37 PM
B3233
dcent
poocoin
dextools
ledger live
aave
zkswap
defillama
solflare
onekey
ReplyDelete
Replies
43D0BKylanD1A95February 10, 2024 at 9:09 AM
94558
trezor suite
dexview
yearn finance
eigenlayer
quickswap
dao maker
poocoin
debank
layerzero
ReplyDelete
Replies
AnonymousAugust 19, 2024 at 2:29 AM
decfwfertfretfry
تصليح افران جدة
ReplyDelete
Replies
AnonymousAugust 20, 2024 at 2:10 AM
DFGFHGJ
نفخ المجاري بالاحساء
ReplyDelete
Replies
AnonymousOctober 19, 2024 at 8:51 AM
شركة مكافحة الصراصير بالدمام hnqCOmtpWg
ReplyDelete
Replies
AnonymousOctober 30, 2024 at 6:32 AM
2xKbpEAvel
ReplyDelete
Replies
AnonymousOctober 30, 2024 at 6:41 AM
شركة عزل اسطح بالقطيف fgmvT1A2sO
ReplyDelete
Replies
AnonymousNovember 5, 2024 at 12:42 AM
شركة عزل اسطح YD1TEgqxtB
ReplyDelete
Replies
AnonymousNovember 16, 2024 at 2:42 AM
شركة مكافحة حشرات AUsHuBxL3m
ReplyDelete
Replies
AnonymousNovember 21, 2024 at 1:16 AM
شركة تنظيف افران بعنيزة louA3YPq2D
ReplyDelete
Replies
AnonymousNovember 24, 2024 at 12:19 AM
شركة تسليك مجاري بالاحساء L2qkKJiszQ
ReplyDelete
Replies
AnonymousNovember 27, 2024 at 6:14 AM
شركة تنظيف خزانات بابها 8Miss4JyHT
ReplyDelete
Replies
AB44E81754Kennedy85D75513A1December 7, 2024 at 2:54 PM
AEF34FA886
beğeni satın al
ReplyDelete
Replies
AnonymousJanuary 19, 2025 at 12:48 PM
شركة صيانة افران بمكة
jJhhGEhSM
ReplyDelete
Replies
AnonymousJanuary 19, 2025 at 1:30 PM
شركة صيانة افران بخميس مشيط
wipRNxDPUaBO
ReplyDelete
Replies
AnonymousJanuary 19, 2025 at 3:32 PM
صيانة افران الغاز
ReplyDelete
Replies
AnonymousJanuary 20, 2025 at 1:38 AM
صيانة افران الغاز بمكة
ReplyDelete
Replies
AnonymousFebruary 1, 2025 at 1:16 PM
7B4E0B97A1
garantili instagram takipçi
ReplyDelete
Replies
AnonymousFebruary 1, 2025 at 3:13 PM
421954C52B
tiktokta takipçi kasma
ReplyDelete
Replies
AnonymousFebruary 1, 2025 at 8:09 PM
38A14ED1BD
turk takipci satin al instagram
ReplyDelete
Replies
AnonymousMay 3, 2025 at 1:41 AM
شركة مكافحة حشرات بالرياض
HRCIPMHOD1
ReplyDelete
Replies
AnonymousMay 15, 2025 at 12:19 AM
62A71B1CD5
instagram takipçi bot
tiktok beğeni satın al
bayan takipçi
telafili takipçi
türk takipçi
ReplyDelete
Replies
AnonymousMay 15, 2025 at 12:24 PM
8722585813
türk bot takipçi
twitter beğeni satın al
organik takipçi
gerçek takipçi
twitter takipçi
ReplyDelete
Replies
AnonymousJune 9, 2025 at 2:21 PM
970D825878
mmorpg oyunlar
sms onay
güvenilir mobil bozum
güvenilir takipçi satın alma
-
ReplyDelete
Replies
AnonymousMay 13, 2026 at 1:04 PM
افضل خدمات التنظيف
شركة تنظيف بالاحساء
ReplyDelete
Replies
AnonymousJuly 28, 2026 at 3:19 AM
دليل العناية بالمنزل والصيانة الذكية

تتطلب الصيانة المنزلية الناجحة وضع خطة دورية للتعامل مع كافة مرافق البيت، بدءاً من الاهتمام بالنظافة العامة وحتى صيانة شبكات المياه وأجهزة التكييف لضمان السلامة والراحة لجميع أفراد الأسرة.
لضمان أداء هذه المهام بفاعلية ودون هدر للوقت والجهد، يُنصح بالاعتماد على الخدمات المتخصصة وفق الترتيب التالي:

العناية الشاملة بالمنزل والمساحات السكنية:

التنظيف الدوري للغرف والأرضيات يقلل من تراكم الأتربة والحد من انتشار الحساسية، ويمكنك الاستعانة بـ:

شركة تنظيف منازل بجازان

غسيل وصيانة المكيفات لرفع الكفاءة:

تنظيف الفلاتر والمجاري الداخلية للمكيفات يحسن جودة الهواء ويوفر استهلاك الطاقة، وتتوفر هذه الخدمة عن طريق:

شركة تنظيف مكيفات بجازان

تنظيف وإزالة دهون أفران الغاز:

تراكم الزيوت والترسبات على الأفران يقلل من كفاءتها ويشكل خطراً تشغيلياً، لذا يُفضل غسيلها وصيانتها عبر:

شركة تنظيف افران غاز بجازان

تعقيم ونظافة خزانات المياه:

ضمان نقاء مياه الشرب والاستخدام اليومي يتطلب تفريغ الخزان وتنظيفه من الشوائب بشكل منتظم مع:

شركة تنظيف خزانات بجازان

معالجة انسدادات شبكات الصرف الصحي:

التخلص السريع من الطفح الانسدادي يمنع ظهور الروائح الكريهة وتضرر البنية التحتية، وهو ما تقدمه:

شركة تسليك مجارى بجازان

الفحص المبكر عن تسربات المياه:

معالجة تسرب المياه في الأسقف والجدران يحمي المنشأة من التآكل ويقلل من ارتفاع الفواتير عبر:

شركة كشف تسربات المياه بجازان

مكافحة الآفات والحشرات:

الرش الوقائي وسد المنافذ يضمن حماية البيت من انتشارت الحشرات الضارة بالصحة العامة بالتعاون مع:

شركة مكافحة حشرات بجازان
#788/7
ReplyDelete
Replies
williamsandrewAugust 11, 2026 at 1:16 AM
buy massey ferguson online
buy john deere 6105m tractor online
Buy John Deere tractor Online
Buy john deere Online
Buy 2018-simplicity-cobalt-2661-zero-turn-lawn-mowerOnline

Buy john deere Online
Buy 2019 john deere Buy 2022 john deere tractor Online
Buy 2022njohn deere tractor Online
Buy 2022 john deere 5125ml tractor Online
ReplyDelete
Replies

Add comment

Tuesday, May 29, 2012

Login System php

39 comments:

About Me

Pageviews last month