Example Login/Session Techniques

[sde]

Since there has been many inquiries/posts regarding login and sessions, I decided to create and test some scripts to share.

I've made a mock-up site consisting of 8 pages:

auth.php      // the meat and potatoes of this subject
connect.php // an excellent connection script
logout.php   // destroy session and re-direct to login

nav.php     // navigation include for site
index.php  // main page of site
link_1.php // page of site
link_2.php // page of site
link_3.php // page of site

Here is the SQL Schema for the table I Query:

CREATE TABLE users (
  user_id int(10) unsigned NOT NULL auto_increment,
  username varchar(20) NOT NULL default '',
  password varchar(20) NOT NULL default '',
  PRIMARY KEY  (user_id)
) TYPE=MyISAM;

if you copy and paste these files into your favorite text editor, edit the connect.php with your mysql settings, it should work on your server if sessions are supported.

Due to a limit in characters per post, I will post the source for each page in its own post.

[sde]

PHP Code:

<?
// Login & Session example by sde
// auth.php

// start session
session_start(); 

// convert username and password from _POST or _SESSION
if($_POST["username"])
{
  $username=$_POST["username"];
  $password=$_POST["password"];  
}
elseif($_SESSION["username"])
{
  $username=$_SESSION["username"];
  $password=$_SESSION["password"];
}

// start and register session variables
session_register("username");
session_register("password");

// connect to database
include("connect.php");

// query for a user/pass match
$result=mysql_query("select * from users where username='" . $username . "' and password='" . $password . "'");

// retrieve number of rows resulted
$num=mysql_num_rows($result); 

// print login form and exit if failed.
if($num < 1){
  session_destroy();
  echo "You are not authenticated.  Please login.<br><br>
  
  <form method=POST action=index.php>
  username: <input type=text name=\"username\">
  password: <input type=password name=\"password\">
  <input type=submit>
  </form>";
  
  exit;
}
?>

[sde]

PHP Code:

<?
// Login & Session example by sde
// connect.php

// replace with your db info
$hostname="localhost";
$mysql_login="root";
$mysql_password="";
$database="test";

if (!($db = mysql_connect("$hostname", "$mysql_login" , "$mysql_password")))
{
  print("Can't connect to mysql.");    
}
else
{
  if (!(mysql_select_db("$database",$db)))
  {
    print("Can't connect to db.");
  }
}
?>

[sde]

PHP Code:

<?
// Login & Session example by sde
// logout.php

// you must start session before destroying it
session_start();
session_destroy();

echo "You have been successfully logged out.

<br><br>
You will now be returned to the login page.

<META HTTP-EQUIV=\"refresh\" content=\"2; URL=index.php\"> ";
?>

[sde]

PHP Code:

<?
// Login & Session example by sde
// nav.php
?>

<a href=index.php>Home</a> |
<a href=link_1.php>link_1</a> | 
<a href=link_2.php>link_2</a> | 
<a href=link_3.php>link_3</a> |
<a href=logout.php>logout</a>

<br><br>

[sde]

PHP Code:

<?
// Login & Session example by sde
// index.php

// include auth and nav
include("auth.php");

// begin content
include("nav.php");

echo "This is my home page.";
?>

[sde]

PHP Code:

<?
// Login & Session example by sde
// link_1.php

// include auth and nav
include("auth.php");

// begin content
include("nav.php");

echo "This is my Link 1.";
?>

[sde]

PHP Code:

<?
// Login & Session example by sde
// link_2.php

// include auth and nav
include("auth.php");

// begin content
include("nav.php");

echo "This is my Link 2.";
?>

[sde]

PHP Code:

<?
// Login & Session example by sde
// link_3.php

// include auth and nav
include("auth.php");

// begin content
include("nav.php");

echo "This is my Link 3.";
?>

[technobard]

Nicely done. It looks like the stuff that NUMs are made of.

[sde]

=) good thinking .. i didn't feel like doin a whole lot of explaining though. i'll port it over to a num soon.

[trevor]

thanks man,

[Ilya020]

I think its a giant spam message.

but really, nicely done..hopefully..I will need this soon!


Ilya

[trevor]

sde,

I have a few questions. If your not to busy can you come to the codenewbie irc?

thanks