How To Add Remember Me Feature With Cookies ?

bits2017

39 New Member

Hi,

This is a login.php.

The user is given a choice to either input his/her Username & Password or Email & Password. In short, either log-in inputting your Username or your Email.
People are welcome to provide their own code samples in mysqli procedural or edit (fix) my code by adding comments and displaying it on this thread for all newbies to learn from. From your code and your code comments, I, aswell as other newbies would learn.
It is written in mysqli procedural. I have not learned pdo oop yet. I need help in the login.php to add the "Remember Me" feature using Cookies.
Can someone be the Great Samaritan here to show me an example ? You're welcome to not start from scratch but work on my work (login.php).
registration.php, logout.php and account_acivation.php finished. Those last 3 files are working fine. Working on the home.php now.

login.php

Expand|Select|Wrap|Line Numbers

 
<?php
 
/*

ERROR HANDLING

*/

declare(strict_types=1);

ini_set('display_errors', '1');

ini_set('display_startup_errors', '1');

error_reporting(E_ALL);

mysqli_report(MYSQLI_REPORT_ERROR | MYSQLI_REPORT_STRICT);
 
include 'config.php';
 
// check if user is already logged in

if (is_logged() === true) 

{

    //Redirect user to homepage page after 5 seconds.

    header("refresh:2;url=home.php");

    exit; //

}
 
if (isset($_POST["login_username_or_email"]) && isset($_POST["login_password"]))

    {

        $username_or_email = trim($_POST["login_username_or_email"]);

        $password = $_POST["login_password"];        
 
        //Select Username or Email to check against Mysql DB if they are already registered or not.
 
        if(strpos("$username_or_email", "@"))

        {

            $email = $username_or_email;
 
            $query = "SELECT ids, usernames, passwords, emails, accounts_activations_statuses FROM users WHERE emails = ?";

            $stmt = mysqli_stmt_init($conn);

            $stmt = mysqli_prepare($conn, $query);            

            mysqli_stmt_bind_param($stmt, 's', $email);

            mysqli_stmt_execute($stmt);

            //$result = mysqli_stmt_get_result($stmt); //Which line to use ? This line or the next ?

            $result = mysqli_stmt_bind_result($stmt, $db_id, $db_username, $db_password, $db_email, $db_account_activation_status); // Which line to use ? This line or the one above ?

        }

        else

        {

            $username = $username_or_email;
 
            $query = "SELECT ids, usernames, passwords, emails, accounts_activations_statuses FROM users WHERE usernames = ?";

            $stmt = mysqli_stmt_init($conn);

            $stmt = mysqli_prepare($conn, $query);

            mysqli_stmt_bind_param($stmt, 's', $username);

            mysqli_stmt_execute($stmt);

            $result = mysqli_stmt_bind_result($stmt, $db_id, $db_username, $db_password, $db_email, $db_account_activation_status); // Which line to use ? This line or the one above ?

        }
 
        $row = mysqli_stmt_fetch($stmt);        

        mysqli_stmt_close($stmt);
 
        if (!password_verify($password, $db_password))

        {

            echo "Incorrect User Credentials!';<br>";

            exit();

        }

        else

        {

            $_SESSION["user"] = $db_username;            

            header("location:home.php?user=$db_username");    

        }

    }
 
?>
 
<!DOCTYPE html>

<html>

<head>

<title><?php $site_name?> Member Login Page</title>

  <meta charset="utf-8">

</head>

<body>

<form method="post" action="">

    <h3><?= $site_name ?> Member Login Form</h3>

    <fieldset>

        <label for="login_name">Username/Email:</label>

        <input type="text" name="login_username_or_email" id="login_name" value="">

        <br>

        <label for="login_pass">Password:</label>

        <input type="password" name="login_password" id="login_pass" value="">

    </fieldset>

    <div class="submitsAndHiddens">

        <label for="login_remember">Remember Login Details:</label>

        <input type="checkbox" name="login_remember" />

        <br>

        <button type="submit">Login</button>

        <br>

        <a href="login_password_reset.php">Forgot your Password ? Reset it here!</a>

        <br>

        <a href="register.php">Register here!</a>

    </div>

</form>
 
</body>

</html>

registration.php (working)

Expand|Select|Wrap|Line Numbers

 
<?php
 
/*

ERROR HANDLING

*/

declare(strict_types=1);

ini_set('display_errors', '1');

ini_set('display_startup_errors', '1');

error_reporting(E_ALL);

mysqli_report(MYSQLI_REPORT_ERROR | MYSQLI_REPORT_STRICT);
 
include 'config.php';
 
//Step 1: Before registering User account, check if User is already registered or not.
 
//Check if User is already logged-in or not.

if (is_logged() === true) {

    die("You are already logged-in! No need to register again!");

}
 
if ($_SERVER['REQUEST_METHOD'] == "POST")

{

//Step 2: Check User Submitted Details.
 
    //Check if user made all the required inputs or not.

    if (isset($_POST["username"]) && 

       isset($_POST["password"]) &&

       isset($_POST["password_confirmation"]) && 

       isset($_POST["email"]) && 

       isset($_POST["email_confirmation"]) && 

       isset($_POST["first_name"]) && 

       isset($_POST["surname"]) && 

       isset($_POST["gender"])) {
 
//Step  3: Check User details for matches against database. If no matches then validate inputs and register User account.
 
        //Create variables based on user inputs.

        $username     = trim($_POST["username"]);

        $password     = $_POST["password"];

        $password_confirmation = $_POST["password_confirmation"];

        $email         = trim($_POST["email"]);

        $email_confirmation = trim($_POST["email_confirmation"]);

        $first_name    = trim($_POST["first_name"]);

        $surname     = trim($_POST["surname"]);

        $gender     = $_POST["gender"];    

           $account_activation_code = sha1( (string) mt_rand(5, 30)); //Type Casted the INT to STRING on the 1st parameter of sha1 as it needs to be a STRING.

        $account_activation_link = "http://www.".$site_domain."/".$social_network_name."/activate_account.php?email=".$_POST['email']."&account_activation_code=".$account_activation_code."";

        $account_activation_status = 0; // 1 = active; 0 = not active.

        $hashed_password = password_hash($password, PASSWORD_DEFAULT); //Encrypt the password.
 
        //Select Username and Email to check against Mysql DB if they are already registered or not.

        $stmt = mysqli_prepare($conn, "SELECT usernames, emails FROM users WHERE usernames = ? OR emails = ?");

        mysqli_stmt_bind_param($stmt, 'ss', $username, $email);

        mysqli_stmt_execute($stmt);

        $result = mysqli_stmt_get_result($stmt);        

        $row = mysqli_fetch_array($result, MYSQLI_ASSOC);
 
        // Check if inputted Username is already registered or not.

        if ($row['usernames'] == $username) {

            $_SESSION['error'] = "That username is already registered.";

            exit();

        // Check if inputted Username is between the required 8 to 30 characters long or not.

        } elseif (strlen($username) < 8 || strlen($username) > 30) {

            $_SESSION['error'] = "Username must be between 8 to 30 characters long!";

            exit();

        // Check if both inputted Emails match or not.

        } elseif ($email != $email_confirmation) {

            $_SESSION['error'] = "Emails don't match!";

            exit();

        // Check if inputed Email is valid or not.

        } elseif (!filter_var($email, FILTER_VALIDATE_EMAIL)) {

            $_SESSION['error'] = "Invalid email! Insert your real Email in order for us to email you your account activation details.";

            exit();

        // Check if inputted Email is already registered or not.

        } elseif ($row['emails'] == $email) {

            $_SESSION['error'] = "That email is already registered.";

            exit();

        // Check if both inputted Passwords match or not.

        } elseif ($password != $password_confirmation) {

            $_SESSION['error'] = "Passwords don't match.";

            exit();

        // Check if Password is between 8 to 30 characters long or not.

        } elseif (strlen($password) < 8 || strlen($password) > 30) {

            $_SESSION['error'] = "Password must be between 6 to 30 characters long!";

            exit();

        } 

        else 

        {

            //Insert the user's inputs into Mysql database using php's sql injection prevention method "Prepared Statements".

            $stmt = mysqli_prepare($conn, "INSERT INTO users(usernames, passwords, emails, first_names, surnames, genders, accounts_activations_codes, accounts_activations_statuses) VALUES (?, ?, ?, ?, ?, ?, ?, ?)");

            mysqli_stmt_bind_param($stmt, 'sssssssi', $username, $hashed_password, $email, $first_name, $surname, $gender, $account_activation_code, $account_activation_status);

            mysqli_stmt_execute($stmt);

            echo "INSERTING";
 
            //Check if user's registration data was successfully submitted or not.

            if (!$stmt)

            {

                $_SESSION['error'] = "Sorry! Our system is currently experiencing a problem registering your account! You may try registering some other time.";

                exit();

            }

            else 

            {

                //Email the account activation link for user to click it to confirm their email and activate their new account.

                $to = $email;

                $subject = "Your ".$site_name." account activation details!";

                $body  = nl2br("

                ===============================\r\n

                ".$site_name." \r\n

                ===============================\r\n

                From: ".$site_admin_email."\r\n

                To: ".$email."\r\n

                Subject: Yours ".$subject." \r\n

                Message: ".$first_name." ".$surname."\r\n You need to click on this following <a href=".$account_activation_link.">link</a> to activate your account. \r\n");

                $headers = "From: " . $site_admin_email . "\r\n";
 
                if (!mail($to,$subject,$body,$headers)) 

                {

                    $_SESSION['error'] = "Sorry! We have failed to email you your account activation details. Please contact the website administrator!";

                    exit();

                }

                else

                {

                    echo "<h3 style='text-align:center'>Thank you for your registration!<br /> Check your email for details on how to activate your account which you just registered.</h3>";

                    exit();

                }

            }

        }

    }

}
 
?>
 
<!DOCTYPE html>

<html>

    <head>

        <title><?php $social_network_name ?> Signup Page</title>

    </head>

<body>

<div class ="container">
 
<?php

// Error Messages.

if (isset($_SESSION['error']) && !empty($_SESSION['error'])) {

    echo '<p style="color:red;">'.$_SESSION['error'].'</p>';

}

?>
 
<?php

//Session Messages.

if (isset($_SESSION['message']) && !empty($_SESSION['message'])) {

    echo '<p style="color:red;">'.$_SESSION['error'].'</p>';

}

?>
 
<?php

//Clear Registration Session.

function clear_registration_session()

    {

        //Clear the User Form inputs, Session Messages and Session Errors so they can no longer be used.

        unset($_SESSION['message']);

        unset($_SESSION['error']);

        unset($_POST);

        exit();

    }

?>
 
<form method="post" action="">

    <center><h2>Signup Form</h2></center>

    <div class="form-group">

        <center><label>Username:</label>

        <input type="text" placeholder="Enter a unique Username" name="username" required [A-Za-z0-9] value="<?php if(isset($_POST['username'])) { echo htmlentities($_POST['username']); }?>"></center>

    </div>

    <div class="form-group">

        <center><label>Password:</label>

        <input type="password" placeholder="Enter a new Password" name="password" required [A-Za-z0-9]></center>

    </div>

    <div class="form-group">

        <center><label>Repeat Password:</label>

        <input type="password" placeholder="Repeat a new Password" name="password_confirmation" required [A-Za-z0-9]></center>

    </div>

        <div class="form-group">

        <center><label>Email:</label>

        <input type="email" placeholder="Enter your Email" name="email" required [A-Za-z0-9] value="<?php if(isset($_POST['email'])) { echo htmlentities($_POST['email']); }?>"></center>

    </div>

    <div class="form-group">

        <center><label>Repeat Email:</label>

        <input type="email" placeholder="Repeat your Email" name="email_confirmation" required [A-Za-z0-9] value="<?php if(isset($_POST['email_confirmation'])) { echo htmlentities($_POST['email_confirmation']); }?>"></center>

    </div>

    <div class="form-group">

        <center><label>First Name:</label>

        <input type="text" placeholder="Enter your First Name" name="first_name" required [A-Za-z] value="<?php if(isset($_POST['first_name'])) { echo htmlentities($_POST['first_name']); }?>"></center>

    </div>

    <div class="form-group">

        <center><label>Surname:</label>

        <input type="text" placeholder="Enter your Surname" name="surname" required [A-Za-z] value="<?php if(isset($_POST['surname'])) { echo htmlentities($_POST['surname']); }?>"></center>

    </div>

    <div class="form-group">

        <center><label>Gender:</label>

        <input type="radio" name="gender" value="male" <?php if(isset($_POST['gender'])) { echo 'checked'; }?> required>Male<input type="radio" name="gender" value="female" <?php if(isset($_POST['gender'])) { echo 'checked'; }?> required>Female</center>

    </div>

    <center><button type="submit" class="btn btn-default" name="submit">Register!</button></center>

    <center><font color="red" size="3"><b>Already have an account ?</b><br><a href="login.php">Login here!</a></font></center>

</form>

</div>

</body>

</html>

account_activation.php (working)

Expand|Select|Wrap|Line Numbers

 
<?php
 
/*

ERROR HANDLING

*/

declare(strict_types=1);

ini_set('display_errors', '1');

ini_set('display_startup_errors', '1');

error_reporting(E_ALL);

mysqli_report(MYSQLI_REPORT_ERROR | MYSQLI_REPORT_STRICT);
 
include 'config.php';
 
if (!isset($_GET["email"], $_GET["account_activation_code"]) === true)

{

    $_SESSION['error'] = "Invalid Email Address! Invalid Account Activation Link! This email is not registered! Try registering an account if you do not already have one! <a href=\"register.php\">Register here!</a>";

    exit();

} 

else 

{    

    $email = htmlspecialchars($_GET['email']);

    $account_activation_code = htmlspecialchars($_GET['account_activation_code']);
 
    $stmt_one = mysqli_stmt_init($conn);    

    if (mysqli_stmt_prepare($stmt_one, "SELECT usernames, accounts_activations FROM users WHERE emails = ? AND accounts_activations_codes = ?"))

    {

        mysqli_stmt_bind_param($stmt_one, 'si', $email,  $account_activation_code);

        mysqli_stmt_execute($stmt_one);

        mysqli_stmt_bind_result($stmt_one, $username, $account_activation_state);

        mysqli_stmt_fetch($stmt_one);

        mysqli_stmt_close($stmt_one);
 
        if ($account_activation_state != 0)

        {    

            echo "Since your account is already activated, why are you trying to activate it again ? Do not do that again and just login from <a href=\"login.php\">this webpage</a> next time! Make a note of that webpage, ok ?";

            exit;

        }

        else

        {

            $account_activation_state = 1;
 
            $stmt_two = mysqli_stmt_init($conn);

            if(mysqli_stmt_prepare($stmt_two, "UPDATE users SET accounts_activations = ? WHERE usernames = ?"))

            {

                mysqli_stmt_bind_param($stmt_two, 'is', $account_activation_state, $username);

                mysqli_stmt_execute($stmt_two);    

                mysqli_stmt_fetch($stmt_two);

                mysqli_stmt_close($stmt_two);
 
                echo "Account Activation State: $account_activation_state";?><br>

                <?php

                echo "Username: $username";            
 
                echo "<h3 style='text-align:center'>Thank you for your confirming your email and activating your account.<br /> You may now try logging into your account.</h3>";

                $_SESSION["user"] = $username;

            }

            else

            {

                echo 'Failure: Something is wrong. Unable to activate your account! Contact Site Admin.';

                echo 'Failure: Mysqli_stmt_prepare($stmt_two)';

                exit;

            }

        }    

    }

    else

    {

        echo 'Failure: This account activation link is invalid or has expired. Try <a href="register.php">registering</a> for an account now.';

        echo 'Failure: Mysqli_stmt_prepare($stmt_one)';

        exit;

    }            

}
 
?>

logout.php (working)

Expand|Select|Wrap|Line Numbers

 
<?php

       session_start();

       session_destroy();

       echo "You have successfully logged-out!";

?><br>

<?php

       echo "<a href='login.php'>Re-Login.</a>";

?><br>

Oct 7 '17 #1

Subscribe Reply

1690

Similar topics

12153

by: GreggTB | last post by:

I've got an page (LOGIN.ASPX) that receives the user's login information. During the page load, it checks the credentials against a database and, if validation is successful, creates an instance of...

ASP.NET

2335

VB Login Page Problem

by: Dam6 | last post by:

Okay... Using vb .net within DW MX2004, connecting to an access database: Background: I have created a simple login.aspx page that is supposed to re-direct to default.aspx using...

ASP.NET

2137

Creating secure login page

by: sharp2037 | last post by:

Hi Everyone, I am working on an ASP.net application and I have a homepage to which everyone visits of course and on that front page I have a user ID and password box and a login button. What...

ASP.NET

2438

How do I protect my login page from prying eyes (forms authentication)?

by: Alan Silver | last post by:

Hello, Sorry this is a bit wordy, but it's a pretty simple question... I have a web site, http://domain/ which is a public site, part of which (http://domain/a/) is protected by forms...

ASP.NET

4207

Can't create simple login page using asp:login control

by: Sasquatch | last post by:

I'm having trouble creating a simple login page using the asp:login control. I followed some instructions in a WROX book, "Beginning ASP.NET 2.0," and the instructions are very straight forward,...

ASP.NET

2446

asp:login w/ ASP.NET 2.0 -- still can't get basic login page to work

by: Sasquatch | last post by:

I'm still having trouble creating a simple login page using the asp:login control. I followed some instructions in a WROX book, "Beginning ASP.NET 2.0," and the instructions are very straight...

ASP.NET

4057

phpmyadmin database built on my server and i cannot connect wiht my login page

by: tolkienarda | last post by:

Hi all I work for a small webdesign company and we have remote hosting. i built a mysql database with phpmyadmin on the server. i then downloaded and modified a php login page. i am continuing to...

MySQL Database

2590

Php Login Page User Authentication Issue

by: dgbergman | last post by:

I have created a php login page in my site for my company. The goal is to get people into members area. Below is a list of steps that I take to create my login page in Dreamweaver CS3, can some one...

PHP

7501

admin login

by: adweaver | last post by:

Hello All, I'm new to the world of php. I've just had a site designed for me by a company, and I'm now trying to manage and grow it, so it will suit my needs. The site was built in a folder...

PHP

3821

by: tvnaidu | last post by:

This is the Java script I am using fo rlogin page, but cursor not pointing to login box, any idea how can I point cursor to login box when this page loaded?. here admin login take to control page and...

Javascript

7130

What is ONU?

by: marktang | last post by:

ONU (Optical Network Unit) is one of the key components for providing high-speed Internet services. Its primary function is to act as an endpoint device located at the user's premises. However,...

General

7171

Problem With Comparison Operator <=> in G++

by: Oralloy | last post by:

Hello folks, I am unable to find appropriate documentation on the type promotion of bit-fields when using the generalised comparison operator "<=>". The problem is that using the GNU compilers,...

C / C++

7220

Maximizing Business Potential: The Nexus of Website Design and Digital Marketing

by: jinu1996 | last post by:

In today's digital age, having a compelling online presence is paramount for businesses aiming to thrive in a competitive landscape. At the heart of this digital strategy lies an intricately woven...

Online Marketing

6893

The easy way to turn off automatic updates for Windows 10/11

by: Hystou | last post by:

Overview: Windows 11 and 10 have less user interface control over operating system update behaviour than previous versions of Windows. In Windows 11 and 10, there is no way to turn off the Windows...

Windows Server

7386

Discussion: How does Zigbee compare with other wireless protocols in smart home applications?

by: tracyyun | last post by:

Dear forum friends, With the development of smart home technology, a variety of wireless communication protocols have appeared on the market, such as Zigbee, Z-Wave, Wi-Fi, Bluetooth, etc. Each...

General

3098

Trying to create a lan-to-lan vpn between two differents networks

by: TSSRALBI | last post by:

Hello I'm a network technician in training and I need your help. I am currently learning how to create and manage the different types of VPNs and I have a question about LAN-to-LAN VPNs. The...

Networking - Hardware / Configuration

1427

transfer the data from one system to another through ip address

by: 6302768590 | last post by:

Hai team i want code for transfer the data from one system to another through IP address by using C# our system has to for every 5mins then we have to update the data what the data is updated ...

C# / C Sharp

664

How to add payments to a PHP MySQL app.

by: muto222 | last post by:

How can i add a mobile payment intergratation into php mysql website.

PHP

295

Comprehensive Guide to Website Development in Toronto: Expert Insights from BSMN Consultancy

by: bsmnconsultancy | last post by:

In today's digital era, a well-designed website is crucial for businesses looking to succeed. Whether you're a small business owner or a large corporation in Toronto, having a strong online presence...

General