How To Add Remember Me Feature With Cookies ?

bits2017

39 New Member

Hi,

This is a login.php.

The user is given a choice to either input his/her Username & Password or Email & Password. In short, either log-in inputting your Username or your Email.
People are welcome to provide their own code samples in mysqli procedural or edit (fix) my code by adding comments and displaying it on this thread for all newbies to learn from. From your code and your code comments, I, aswell as other newbies would learn.
It is written in mysqli procedural. I have not learned pdo oop yet. I need help in the login.php to add the "Remember Me" feature using Cookies.
Can someone be the Great Samaritan here to show me an example ? You're welcome to not start from scratch but work on my work (login.php).
registration.ph p, logout.php and account_acivati on.php finished. Those last 3 files are working fine. Working on the home.php now.

login.php

Expand|Select|Wrap|Line Numbers

 
<?php
 
/*

ERROR HANDLING

*/

declare(strict_types=1);

ini_set('display_errors', '1');

ini_set('display_startup_errors', '1');

error_reporting(E_ALL);

mysqli_report(MYSQLI_REPORT_ERROR | MYSQLI_REPORT_STRICT);
 
include 'config.php';
 
// check if user is already logged in

if (is_logged() === true) 

{

    //Redirect user to homepage page after 5 seconds.

    header("refresh:2;url=home.php");

    exit; //

}
 
if (isset($_POST["login_username_or_email"]) && isset($_POST["login_password"]))

    {

        $username_or_email = trim($_POST["login_username_or_email"]);

        $password = $_POST["login_password"];        
 
        //Select Username or Email to check against Mysql DB if they are already registered or not.
 
        if(strpos("$username_or_email", "@"))

        {

            $email = $username_or_email;
 
            $query = "SELECT ids, usernames, passwords, emails, accounts_activations_statuses FROM users WHERE emails = ?";

            $stmt = mysqli_stmt_init($conn);

            $stmt = mysqli_prepare($conn, $query);            

            mysqli_stmt_bind_param($stmt, 's', $email);

            mysqli_stmt_execute($stmt);

            //$result = mysqli_stmt_get_result($stmt); //Which line to use ? This line or the next ?

            $result = mysqli_stmt_bind_result($stmt, $db_id, $db_username, $db_password, $db_email, $db_account_activation_status); // Which line to use ? This line or the one above ?

        }

        else

        {

            $username = $username_or_email;
 
            $query = "SELECT ids, usernames, passwords, emails, accounts_activations_statuses FROM users WHERE usernames = ?";

            $stmt = mysqli_stmt_init($conn);

            $stmt = mysqli_prepare($conn, $query);

            mysqli_stmt_bind_param($stmt, 's', $username);

            mysqli_stmt_execute($stmt);

            $result = mysqli_stmt_bind_result($stmt, $db_id, $db_username, $db_password, $db_email, $db_account_activation_status); // Which line to use ? This line or the one above ?

        }
 
        $row = mysqli_stmt_fetch($stmt);        

        mysqli_stmt_close($stmt);
 
        if (!password_verify($password, $db_password))

        {

            echo "Incorrect User Credentials!';<br>";

            exit();

        }

        else

        {

            $_SESSION["user"] = $db_username;            

            header("location:home.php?user=$db_username");    

        }

    }
 
?>
 
<!DOCTYPE html>

<html>

<head>

<title><?php $site_name?> Member Login Page</title>

  <meta charset="utf-8">

</head>

<body>

<form method="post" action="">

    <h3><?= $site_name ?> Member Login Form</h3>

    <fieldset>

        <label for="login_name">Username/Email:</label>

        <input type="text" name="login_username_or_email" id="login_name" value="">

        <br>

        <label for="login_pass">Password:</label>

        <input type="password" name="login_password" id="login_pass" value="">

    </fieldset>

    <div class="submitsAndHiddens">

        <label for="login_remember">Remember Login Details:</label>

        <input type="checkbox" name="login_remember" />

        <br>

        <button type="submit">Login</button>

        <br>

        <a href="login_password_reset.php">Forgot your Password ? Reset it here!</a>

        <br>

        <a href="register.php">Register here!</a>

    </div>

</form>
 
</body>

</html>

registration.ph p (working)

Expand|Select|Wrap|Line Numbers

 
<?php
 
/*

ERROR HANDLING

*/

declare(strict_types=1);

ini_set('display_errors', '1');

ini_set('display_startup_errors', '1');

error_reporting(E_ALL);

mysqli_report(MYSQLI_REPORT_ERROR | MYSQLI_REPORT_STRICT);
 
include 'config.php';
 
//Step 1: Before registering User account, check if User is already registered or not.
 
//Check if User is already logged-in or not.

if (is_logged() === true) {

    die("You are already logged-in! No need to register again!");

}
 
if ($_SERVER['REQUEST_METHOD'] == "POST")

{

//Step 2: Check User Submitted Details.
 
    //Check if user made all the required inputs or not.

    if (isset($_POST["username"]) && 

       isset($_POST["password"]) &&

       isset($_POST["password_confirmation"]) && 

       isset($_POST["email"]) && 

       isset($_POST["email_confirmation"]) && 

       isset($_POST["first_name"]) && 

       isset($_POST["surname"]) && 

       isset($_POST["gender"])) {
 
//Step  3: Check User details for matches against database. If no matches then validate inputs and register User account.
 
        //Create variables based on user inputs.

        $username     = trim($_POST["username"]);

        $password     = $_POST["password"];

        $password_confirmation = $_POST["password_confirmation"];

        $email         = trim($_POST["email"]);

        $email_confirmation = trim($_POST["email_confirmation"]);

        $first_name    = trim($_POST["first_name"]);

        $surname     = trim($_POST["surname"]);

        $gender     = $_POST["gender"];    

           $account_activation_code = sha1( (string) mt_rand(5, 30)); //Type Casted the INT to STRING on the 1st parameter of sha1 as it needs to be a STRING.

        $account_activation_link = "http://www.".$site_domain."/".$social_network_name."/activate_account.php?email=".$_POST['email']."&account_activation_code=".$account_activation_code."";

        $account_activation_status = 0; // 1 = active; 0 = not active.

        $hashed_password = password_hash($password, PASSWORD_DEFAULT); //Encrypt the password.
 
        //Select Username and Email to check against Mysql DB if they are already registered or not.

        $stmt = mysqli_prepare($conn, "SELECT usernames, emails FROM users WHERE usernames = ? OR emails = ?");

        mysqli_stmt_bind_param($stmt, 'ss', $username, $email);

        mysqli_stmt_execute($stmt);

        $result = mysqli_stmt_get_result($stmt);        

        $row = mysqli_fetch_array($result, MYSQLI_ASSOC);
 
        // Check if inputted Username is already registered or not.

        if ($row['usernames'] == $username) {

            $_SESSION['error'] = "That username is already registered.";

            exit();

        // Check if inputted Username is between the required 8 to 30 characters long or not.

        } elseif (strlen($username) < 8 || strlen($username) > 30) {

            $_SESSION['error'] = "Username must be between 8 to 30 characters long!";

            exit();

        // Check if both inputted Emails match or not.

        } elseif ($email != $email_confirmation) {

            $_SESSION['error'] = "Emails don't match!";

            exit();

        // Check if inputed Email is valid or not.

        } elseif (!filter_var($email, FILTER_VALIDATE_EMAIL)) {

            $_SESSION['error'] = "Invalid email! Insert your real Email in order for us to email you your account activation details.";

            exit();

        // Check if inputted Email is already registered or not.

        } elseif ($row['emails'] == $email) {

            $_SESSION['error'] = "That email is already registered.";

            exit();

        // Check if both inputted Passwords match or not.

        } elseif ($password != $password_confirmation) {

            $_SESSION['error'] = "Passwords don't match.";

            exit();

        // Check if Password is between 8 to 30 characters long or not.

        } elseif (strlen($password) < 8 || strlen($password) > 30) {

            $_SESSION['error'] = "Password must be between 6 to 30 characters long!";

            exit();

        } 

        else 

        {

            //Insert the user's inputs into Mysql database using php's sql injection prevention method "Prepared Statements".

            $stmt = mysqli_prepare($conn, "INSERT INTO users(usernames, passwords, emails, first_names, surnames, genders, accounts_activations_codes, accounts_activations_statuses) VALUES (?, ?, ?, ?, ?, ?, ?, ?)");

            mysqli_stmt_bind_param($stmt, 'sssssssi', $username, $hashed_password, $email, $first_name, $surname, $gender, $account_activation_code, $account_activation_status);

            mysqli_stmt_execute($stmt);

            echo "INSERTING";
 
            //Check if user's registration data was successfully submitted or not.

            if (!$stmt)

            {

                $_SESSION['error'] = "Sorry! Our system is currently experiencing a problem registering your account! You may try registering some other time.";

                exit();

            }

            else 

            {

                //Email the account activation link for user to click it to confirm their email and activate their new account.

                $to = $email;

                $subject = "Your ".$site_name." account activation details!";

                $body  = nl2br("

                ===============================\r\n

                ".$site_name." \r\n

                ===============================\r\n

                From: ".$site_admin_email."\r\n

                To: ".$email."\r\n

                Subject: Yours ".$subject." \r\n

                Message: ".$first_name." ".$surname."\r\n You need to click on this following <a href=".$account_activation_link.">link</a> to activate your account. \r\n");

                $headers = "From: " . $site_admin_email . "\r\n";
 
                if (!mail($to,$subject,$body,$headers)) 

                {

                    $_SESSION['error'] = "Sorry! We have failed to email you your account activation details. Please contact the website administrator!";

                    exit();

                }

                else

                {

                    echo "<h3 style='text-align:center'>Thank you for your registration!<br /> Check your email for details on how to activate your account which you just registered.</h3>";

                    exit();

                }

            }

        }

    }

}
 
?>
 
<!DOCTYPE html>

<html>

    <head>

        <title><?php $social_network_name ?> Signup Page</title>

    </head>

<body>

<div class ="container">
 
<?php

// Error Messages.

if (isset($_SESSION['error']) && !empty($_SESSION['error'])) {

    echo '<p style="color:red;">'.$_SESSION['error'].'</p>';

}

?>
 
<?php

//Session Messages.

if (isset($_SESSION['message']) && !empty($_SESSION['message'])) {

    echo '<p style="color:red;">'.$_SESSION['error'].'</p>';

}

?>
 
<?php

//Clear Registration Session.

function clear_registration_session()

    {

        //Clear the User Form inputs, Session Messages and Session Errors so they can no longer be used.

        unset($_SESSION['message']);

        unset($_SESSION['error']);

        unset($_POST);

        exit();

    }

?>
 
<form method="post" action="">

    <center><h2>Signup Form</h2></center>

    <div class="form-group">

        <center><label>Username:</label>

        <input type="text" placeholder="Enter a unique Username" name="username" required [A-Za-z0-9] value="<?php if(isset($_POST['username'])) { echo htmlentities($_POST['username']); }?>"></center>

    </div>

    <div class="form-group">

        <center><label>Password:</label>

        <input type="password" placeholder="Enter a new Password" name="password" required [A-Za-z0-9]></center>

    </div>

    <div class="form-group">

        <center><label>Repeat Password:</label>

        <input type="password" placeholder="Repeat a new Password" name="password_confirmation" required [A-Za-z0-9]></center>

    </div>

        <div class="form-group">

        <center><label>Email:</label>

        <input type="email" placeholder="Enter your Email" name="email" required [A-Za-z0-9] value="<?php if(isset($_POST['email'])) { echo htmlentities($_POST['email']); }?>"></center>

    </div>

    <div class="form-group">

        <center><label>Repeat Email:</label>

        <input type="email" placeholder="Repeat your Email" name="email_confirmation" required [A-Za-z0-9] value="<?php if(isset($_POST['email_confirmation'])) { echo htmlentities($_POST['email_confirmation']); }?>"></center>

    </div>

    <div class="form-group">

        <center><label>First Name:</label>

        <input type="text" placeholder="Enter your First Name" name="first_name" required [A-Za-z] value="<?php if(isset($_POST['first_name'])) { echo htmlentities($_POST['first_name']); }?>"></center>

    </div>

    <div class="form-group">

        <center><label>Surname:</label>

        <input type="text" placeholder="Enter your Surname" name="surname" required [A-Za-z] value="<?php if(isset($_POST['surname'])) { echo htmlentities($_POST['surname']); }?>"></center>

    </div>

    <div class="form-group">

        <center><label>Gender:</label>

        <input type="radio" name="gender" value="male" <?php if(isset($_POST['gender'])) { echo 'checked'; }?> required>Male<input type="radio" name="gender" value="female" <?php if(isset($_POST['gender'])) { echo 'checked'; }?> required>Female</center>

    </div>

    <center><button type="submit" class="btn btn-default" name="submit">Register!</button></center>

    <center><font color="red" size="3"><b>Already have an account ?</b><br><a href="login.php">Login here!</a></font></center>

</form>

</div>

</body>

</html>

account_activat ion.php (working)

Expand|Select|Wrap|Line Numbers

 
<?php
 
/*

ERROR HANDLING

*/

declare(strict_types=1);

ini_set('display_errors', '1');

ini_set('display_startup_errors', '1');

error_reporting(E_ALL);

mysqli_report(MYSQLI_REPORT_ERROR | MYSQLI_REPORT_STRICT);
 
include 'config.php';
 
if (!isset($_GET["email"], $_GET["account_activation_code"]) === true)

{

    $_SESSION['error'] = "Invalid Email Address! Invalid Account Activation Link! This email is not registered! Try registering an account if you do not already have one! <a href=\"register.php\">Register here!</a>";

    exit();

} 

else 

{    

    $email = htmlspecialchars($_GET['email']);

    $account_activation_code = htmlspecialchars($_GET['account_activation_code']);
 
    $stmt_one = mysqli_stmt_init($conn);    

    if (mysqli_stmt_prepare($stmt_one, "SELECT usernames, accounts_activations FROM users WHERE emails = ? AND accounts_activations_codes = ?"))

    {

        mysqli_stmt_bind_param($stmt_one, 'si', $email,  $account_activation_code);

        mysqli_stmt_execute($stmt_one);

        mysqli_stmt_bind_result($stmt_one, $username, $account_activation_state);

        mysqli_stmt_fetch($stmt_one);

        mysqli_stmt_close($stmt_one);
 
        if ($account_activation_state != 0)

        {    

            echo "Since your account is already activated, why are you trying to activate it again ? Do not do that again and just login from <a href=\"login.php\">this webpage</a> next time! Make a note of that webpage, ok ?";

            exit;

        }

        else

        {

            $account_activation_state = 1;
 
            $stmt_two = mysqli_stmt_init($conn);

            if(mysqli_stmt_prepare($stmt_two, "UPDATE users SET accounts_activations = ? WHERE usernames = ?"))

            {

                mysqli_stmt_bind_param($stmt_two, 'is', $account_activation_state, $username);

                mysqli_stmt_execute($stmt_two);    

                mysqli_stmt_fetch($stmt_two);

                mysqli_stmt_close($stmt_two);
 
                echo "Account Activation State: $account_activation_state";?><br>

                <?php

                echo "Username: $username";            
 
                echo "<h3 style='text-align:center'>Thank you for your confirming your email and activating your account.<br /> You may now try logging into your account.</h3>";

                $_SESSION["user"] = $username;

            }

            else

            {

                echo 'Failure: Something is wrong. Unable to activate your account! Contact Site Admin.';

                echo 'Failure: Mysqli_stmt_prepare($stmt_two)';

                exit;

            }

        }    

    }

    else

    {

        echo 'Failure: This account activation link is invalid or has expired. Try <a href="register.php">registering</a> for an account now.';

        echo 'Failure: Mysqli_stmt_prepare($stmt_one)';

        exit;

    }            

}
 
?>

logout.php (working)

Expand|Select|Wrap|Line Numbers

 
<?php

       session_start();

       session_destroy();

       echo "You have successfully logged-out!";

?><br>

<?php

       echo "<a href='login.php'>Re-Login.</a>";

?><br>

Oct 7 '17 #1

Subscribe Reply

1695

Similar topics

12176

by: GreggTB | last post by:

I've got an page (LOGIN.ASPX) that receives the user's login information. During the page load, it checks the credentials against a database and, if validation is successful, creates an instance of an object that stores the user's basic profile data (username, user type, associated sales region, etc.). I've been taking this user info and...

ASP.NET

2342

VB Login Page Problem

by: Dam6 | last post by:

Okay... Using vb .net within DW MX2004, connecting to an access database: Background: I have created a simple login.aspx page that is supposed to re-direct to default.aspx using FormsAuthentication.RedirectFromLoginPage. The data is correct from testing the dataset etc and the page also informs me that I have entered an incorrect user /...

ASP.NET

2141

Creating secure login page

by: sharp2037 | last post by:

Hi Everyone, I am working on an ASP.net application and I have a homepage to which everyone visits of course and on that front page I have a user ID and password box and a login button. What I don't understand is some sites I visit don't use SSL on the login page. Instead you visit the homepage and there is no padlock. Then you type in...

ASP.NET

2443

How do I protect my login page from prying eyes (forms authentication)?

by: Alan Silver | last post by:

Hello, Sorry this is a bit wordy, but it's a pretty simple question... I have a web site, http://domain/ which is a public site, part of which (http://domain/a/) is protected by forms authentication. I would like to configure it so that anyone not logged in, trying to access the protected part will not be redirected to the login page,...

ASP.NET

4218

Can't create simple login page using asp:login control

by: Sasquatch | last post by:

I'm having trouble creating a simple login page using the asp:login control. I followed some instructions in a WROX book, "Beginning ASP.NET 2.0," and the instructions are very straight forward, but it won't work for me. Here's what I did. 1. Created a new folder named "testlogin" 2. Turned that folder into an application using the IIS...

ASP.NET

2450

asp:login w/ ASP.NET 2.0 -- still can't get basic login page to work

by: Sasquatch | last post by:

I'm still having trouble creating a simple login page using the asp:login control. I followed some instructions in a WROX book, "Beginning ASP.NET 2.0," and the instructions are very straight forward, but it won't work for me. I've got a little better troubleshooting information for everyone now. First, here's how I set this stuff up... ...

ASP.NET

4067

phpmyadmin database built on my server and i cannot connect wiht my login page

by: tolkienarda | last post by:

Hi all I work for a small webdesign company and we have remote hosting. i built a mysql database with phpmyadmin on the server. i then downloaded and modified a php login page. i am continuing to get the ---invalid username or password--- i am not getting the E_USER_ERROR so i don't know if there is a problem with the php, how i set up the...

MySQL Database

2591

Php Login Page User Authentication Issue

by: dgbergman | last post by:

I have created a php login page in my site for my company. The goal is to get people into members area. Below is a list of steps that I take to create my login page in Dreamweaver CS3, can some one verify that I have built the page correct and that is nothing wrong with the code. If there is something wrong with the code is it possible to explain...

PHP

7509

admin login

by: adweaver | last post by:

Hello All, I'm new to the world of php. I've just had a site designed for me by a company, and I'm now trying to manage and grow it, so it will suit my needs. The site was built in a folder called mysite.com/test. I coppied this folder a number of times, so I now have mysite.com/test2, mysite.com/test3 etc. Each folder acts as its own...

PHP

3839

by: tvnaidu | last post by:

This is the Java script I am using fo rlogin page, but cursor not pointing to login box, any idea how can I point cursor to login box when this page loaded?. here admin login take to control page and user login take to status page, if I give direct path without goto login, both pages display, can I add a check if user didn't login, then redirect...

Javascript

7584

Changing the language in Windows 10

by: Hystou | last post by:

Most computers default to English, but sometimes we require a different language, especially when relocating. Forgot to request a specific language before your computer shipped? No problem! You can effortlessly switch the default language on Windows 10 without reinstalling. I'll walk you through it. First, let's disable language...

Windows Server

7888

Problem With Comparison Operator <=> in G++

by: Oralloy | last post by:

Hello folks, I am unable to find appropriate documentation on the type promotion of bit-fields when using the generalised comparison operator "<=>". The problem is that using the GNU compilers, it seems that the internal comparison operator "<=>" tries to promote arguments from unsigned to signed. This is as boiled down as I can make it. ...

C / C++

8108

Maximizing Business Potential: The Nexus of Website Design and Digital Marketing

by: jinu1996 | last post by:

In today's digital age, having a compelling online presence is paramount for businesses aiming to thrive in a competitive landscape. At the heart of this digital strategy lies an intricately woven tapestry of website design and digital marketing. It's not merely about having a website; it's about crafting an immersive digital experience that...

Online Marketing

7644

The easy way to turn off automatic updates for Windows 10/11

by: Hystou | last post by:

Overview: Windows 11 and 10 have less user interface control over operating system update behaviour than previous versions of Windows. In Windows 11 and 10, there is no way to turn off the Windows Update option using the Control Panel or Settings app; it automatically checks for updates and installs any it finds, whether you like it or not. For...

Windows Server

7951

Discussion: How does Zigbee compare with other wireless protocols in smart home applications?

by: tracyyun | last post by:

Dear forum friends, With the development of smart home technology, a variety of wireless communication protocols have appeared on the market, such as Zigbee, Z-Wave, Wi-Fi, Bluetooth, etc. Each protocol has its own unique characteristics and advantages, but as a user who is planning to build a smart home system, I am a bit confused by the...

General

6260

AI Job Threat for Devs

by: agi2029 | last post by:

Let's talk about the concept of autonomous AI software engineers and no-code agents. These AIs are designed to manage the entire lifecycle of a software development project—planning, coding, testing, and deployment—without human intervention. Imagine an AI that can take a project description, break it down, write the code, debug it, and then...

Career Advice

3643

Trying to create a lan-to-lan vpn between two differents networks

by: TSSRALBI | last post by:

Hello I'm a network technician in training and I need your help. I am currently learning how to create and manage the different types of VPNs and I have a question about LAN-to-LAN VPNs. The last exercise I practiced was to create a LAN-to-LAN VPN between two Pfsense firewalls, by using IPSEC protocols. I succeeded, with both firewalls in...

Networking - Hardware / Configuration

3626

Windows Forms - .Net 8.0

by: adsilva | last post by:

A Windows Forms form does not have the event Unload, like VB6. What one acts like?

Visual Basic .NET

2083

transfer the data from one system to another through ip address

by: 6302768590 | last post by:

Hai team i want code for transfer the data from one system to another through IP address by using C# our system has to for every 5mins then we have to update the data what the data is updated we have to send another system

C# / C Sharp