Design Gala » login in PHP http://designgala.com Web Usability, Web Technology, User Experience Thu, 26 Aug 2010 11:13:17 +0000 en hourly 1 http://wordpress.org/?v=3.0.1 Creating Secure Login in PHP http://designgala.com/creating-secure-login-in-php/ http://designgala.com/creating-secure-login-in-php/#comments Sat, 15 Apr 2006 21:57:24 +0000 Design Gala http://www.designgala.com/?p=14

This articles demonstrate and explains how to create a secure PHP login script that will allow safe authentication. Here, cookies are not used because of preventive measure against cross-side scripting. The back-end used is MySQL. So, you should have knowledge of MySQL and database as well.

Database Schema

For example lets make a table called login for this tutorial purpose only. For commercial purpose, please do add relevant attributes in the table. Use SQL below to create a table of login.

1
2
3
4
5

CREATE TABLE login (
user_name varchar(20) NOT NULL default '',
user_pass char(32) binary NOT NULL default '',
PRIMARY KEY (username)
);

Creating a HTML Form

1
2
3
4
5

<form method="post" action="login.php" name="login">
<input name="user_name" size="18" type="text" />
<input name="user_pass" size="18" type="text" />
<input name="submit" value="Login" type="submit" />
</form>

Handling Form

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21

if(count($_POST) &gt; 0) {
 $user_name = htmlspecialchars($_POST["user_name"]);
 $user_pass = htmlspecialchars($_POST["user_pass"]);
 
 $sql = "SELECT user_name,user_pass FROM login
           WHERE user_name=\"$user_name\"
            AND    user_pass=\"$user_pass\"";
 
 $rs = mysql_query($sql);               //execute the query
 if(mysql_num_rows($rs)	==	1)  {
 	// username and passwords exists in database
       //other codes
 }
 else {
 	//invalid username of password
 	//redirect to login page
 
 	header("Location: login.php");
 }
 
}

Above is fairly a simple login page. We can add many other functionalities.

]]> http://designgala.com/creating-secure-login-in-php/feed/ 0