Advertisement
If you have a new account but are having problems posting or verifying your account, please email us on hello@boards.ie for help. Thanks :)
Hello all! Please ensure that you are posting a new thread or question in the appropriate forum. The Feedback forum is overwhelmed with questions that are having to be moved elsewhere. If you need help to verify your account contact hello@boards.ie
Hi all,
Vanilla are planning an update to the site on April 24th (next Wednesday). It is a major PHP8 update which is expected to boost performance across the site. The site will be down from 7pm and it is expected to take about an hour to complete. We appreciate your patience during the update.
Thanks all.
Vanilla are planning an update to the site on April 24th (next Wednesday). It is a major PHP8 update which is expected to boost performance across the site. The site will be down from 7pm and it is expected to take about an hour to complete. We appreciate your patience during the update.
Thanks all.
Learn php tutor needed
Comments
-
-
-
-
-
-
Advertisement
-
-
-
-
My problem Lyes in the fact I can't get my php login to work and add session Id.
See if you can this to work for you it's a very simple login example using a PDO database connection. The code may not be perfect but I've commented it well enough for you to see how it should be done.
There's a nice NetTuts tutorial explaining why you should use PHP’s PDO for Database Access.
db.php:
[PHP]
<?php
// Variables for the database connection string
$config = array(
'host' => 'localhost',
'username' => 'user_example',
'password' => 'pass_example',
'dbname' => 'db_example'
);
$db = new PDO('mysql:host=' . $config . ';dbname=' . $config, $config, $config);
$db->setAttribute(PDO::ATTR_ERRMODE, PDO::ERRMODE_EXCEPTION);
[/PHP]
users.php: A class for our users
[PHP]<?php
class Users{
private $db;
// The __construct() method is used to make the database connection variable available to the class
// Functions inside a class cannot use variables that are defined outside of the class unless the variable is global
public function __construct($database) {
$this->db = $database;
}
public function login($username, $password) {
// query selects the password and id for the provided username
// Assumption :: your database table contains the fields: id, username, password
$query = $this->db->prepare("SELECT password, id FROM users WHERE username = ?");
$query->bindValue(1, $username);
try {
$query->execute();
$data = $query->fetch();
$stored_password = $data;
$id = $data;
// Hashing the supplied password and comparing it with the stored hashed password.
// NOTE: sha1() isn't the best option for hashing passwords as it does not produce a very secure hash
// bcrypt() is a better method but is more involved so sha1() will suffice for here
if($stored_password === sha1($password)){
return $id;
} else {
return false;
}
} catch (PDOException $e) {
// This should be more graceful but will do for a demo
die($e->getMessage());
}
}
}[/PHP]
init.php:
[PHP]
<?php
// starting the users session
session_start();
// include our database and users files
require 'db.php';
require 'users.php';
// Instantiate the Users class
$users = new Users($db);
// $errors will be used for returning login errors
$errors = array();
[/PHP]
login.php:
[PHP]
<?php
require 'init.php';
// 'a === b' operator evaluates to true if a and b have the same value and type
if (empty($_POST) === false) {
$username = trim($_POST);
$password = trim($_POST);
if (empty($username) === true || empty($password) === true) {
$errors[] = 'Sorry, but you need a username and password.';
} else if ($users->user_exists($username) === false) {
$errors[] = 'Sorry the username doesn\'t exists.';
} else {
$login = $users->login($username, $password);
if ($login === false) {
$errors[] = 'Sorry, that username/password is invalid';
} else {
// username/password is correct and the login method of the $users object returns the user's id
// which is stored in $login.
// The user's id is now set into the user's session
$_SESSION = $login;
// Redirect the user to session.php.
header('Location: session.php');
exit();
}
}
}
?>
<!doctype html>
<html lang="en">
<head>
<meta charset="UTF-8">
<title>Login</title>
</head>
<body>
<h1>Login</h1>
<div id="container">
<?php
if(empty($errors) === false) {
echo '<p>' . implode('</p><p>', $errors) . '</p>';
}
?>
<form method="post" action="">
<h4>Username:</h4>
<input type="text" name="username" value="<?php if(isset($_POST)) echo htmlentities($_POST); ?>" >
<h4>Password:</h4>
<input type="password" name="password">
<br>
<input type="submit" name="submit">
</form>
</div>
</body>
</html>
[/PHP]
logout.php: A basic logout script
[PHP]
<?php
session_start();
session_destroy(); // Destroy the user's session
header('Location:session.php'); // Redirect user to the session page
?>
[/PHP]
session.php: This just dump the session variables in the browser
[PHP]
<?php
session_start();
?>
<!doctype html>
<html lang="en">
<head>
<meta charset="UTF-8">
<title>Session Variables</title>
</head>
<body>
<h1>Session Variables</h1>
<div id="container">
<?php
var_dump($_SESSION);
?>
</div>
</body>
</html>
[/PHP]0 -
-
Advertisement
-
-
-
-
-
-
-
-
-
-
-
Advertisement
-
-
-
-
-
-
-
-
-
-
Advertisement
-
Advertisement