PHP MySQL Secure Registration Page

Create Registration Form PHP MySQL

Registration page is basically a page having several fields that the user provide in order to get register themselves for that site. Registration page contains various details about user , that user had to fill Some fields are mandatory and some are optional.

We can apply several validations on registration page using java-script on clicking submit button all the information for that particular user are stored in the database. For every new user he need to register himself and for existing users he just need to login.

In above example there are 4 fields: name , password , mobile number , gender
if these fields are found to be empty it will show error. if the existing user try to register with
same information then error is reported.

Create Database and Table

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

25

26

27

<?php

//connectivity

$con=mysql_connect("localhost","root","") or die(mysql_error());

//create database

mysql_query("create database test");

//select database

mysql_select_db("test");

//create table stuinfo

$que="CREATE TABLE userinfo

 (

user_id INT  AUTO_INCREMENT PRIMARY KEY ,

user_name VARCHAR( 50 ) NOT NULL ,

password VARCHAR( 50 ) NOT NULL ,

mobile BIGINT NOT NULL ,

gender ENUM( 'm', 'f' ) NOT NULL ,

)";

mysql_query($que);

?>

PHP Script

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

25

26

27

28

29

30

31

32

33

34

35

36

37

38

39

40

41

42

43

44

45

46

47

<?php

if(isset($_POST['reg']))

{

if($_POST['un']=="" || $_POST['pwd']=="" $_POST['mob']=="")

{

$err="fill your user name first";

}

else

{

$r=mysql_query("SELECT * FROM userinfo where user_name='{$_POST['un']}'");

$t=mysql_num_rows($r);

if($t)

{

$err="user already exists choose another";

}

else

{

mysql_query("INSERT INTO userinfo values('','{$_POST['un']}','{$_POST['pwd']}','{$_POST['mob']}','{$_POST['gen']}')");

header('location:http://www.phptpoint.com');

}

}

}

?>

Registration Form(HTML Script)

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

25

26

27

28

29

30

31

32

33

34

35

36

37

38

39

40

41

42

43

44

45

46

47

48

49

50

51

52

53

54

55

56

57

58

59

<form method="post" enctype="multipart/form-data">

<table width="438" border="5" align="center">

  <font color="#FF0000"><?php echo $err; ?></font>

  <tr>

    <td width="204" height="47">Enter Your User Name </td>

    <td width="218"><input type="text" name="un"/></td>

  </tr>

  <tr>

    <td height="39">Enter Your Password </td>

    <td><input type="password" name="pwd"/></td>

  </tr>

  <tr>

    <td height="47">Enter Your Mobile </td>

    <td><input type="text" name="mob"/></td>

  </tr>

  <tr>

    <td height="33">Select Your Gender </td>

    <td>

		Male<input type="radio" name="gen" value="m"/>

		Female<input type="radio" name="gen" value="f"/>	</td>

  </tr>

  <tr>

    <td align="center" colspan="2">

	<input type="submit" name="reg" value="Register"/>

	<input type="reset"  value="Reset"/>	</td>

  </tr>

</table>

</form>

In above example there are 4 feilds: name , password , mobile number , gender
if these feilds are found to be empty it will show error. if the existing user try to register with
same information then error is reported.

PHP MySQL Secure Login Page

Create Login Form PHP MySQL

Login page is basically a page having several fields that the user provide in order to get
access of the home page of that site. if there is a previously registered user whose details
are stored in the database and that particular user want to login then the details provided by him
on the login page are cross checked with the fields in the database respectively. if the details are
found to be correct the user is considered to be a valid user .
as we already know that http is a stateless protocol and it doesn’t identify any previous user, that’s why
we maintain the session for that particular user.

Select Database and Table(Saved users data inside table in previous example)

1

2

3

4

5

6

7

8

9

10

11

12

<?php

//database connection

mysql_connect("localhost","root","");

//select database test

mysql_select_db("test");

?>

PHP Script(for dynamic login)

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

25

26

27

28

29

30

31

32

33

34

35

36

37

38

39

40

41

42

43

44

45

46

47

48

49

50

51

52

53

54

<?php

session_start();

if(isset($_POST['signIn']))

{

if($_POST['id']=="" || $_POST['pwd']=="")

{

	$err="fill your id and passwrod first";

}

else

{

$d=mysql_query("SELECT * FROM userinfo where user_name='{$_POST['id']}'");

$row=mysql_fetch_object($d);

$fid=$row->user_name;

$fpass=$row->password;

if($fid==$_POST['id'] && $fpass==$_POST['pwd'])

{

$_SESSION['sid']=$_POST['id'];

header('location:HomePage.php');

}

else

{

$err="invalid id or pass";

}

}

}

?>

Login Form(HTML Script)

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

25

26

27

28

29

30

31

32

33

34

35

36

37

38

39

40

41

42

43

44

45

46

47

48

49

<form method="post">

<table width="323" border="1">

  <tr>

  <font color="#FF0000"><?php echo $err; ?></font>

    <th width="171" scope="row">Enter your id </th>

    <td width="136">

		<input type="text" name="id" />

	</td>

  </tr>

  <tr>

    <th scope="row">Enter your password </th>

    <td>

<input type="password" name="pwd"/>

	</td>

  </tr>

  <tr>

    <th colspan="2" scope="row">

	<input type="submit" value="SignIn" name="signIn"/>

	<a href="http://localhost/Mailserver/index.php?chk=4">SignUp</a>

	</th>

  </tr>

</table>

</form>

In the above example
first connection to database is created after that id and password are entered by the user and as he click on the signing buttons these fields are cross checked with values in the database by using MySQL_query( ) . if user is authenticated then he will be redirected to homepage otherwise it show error message.

PHP MySQL Pagination

How to use Pagination in PHP MySQL

MySQL SELECT query may display the thousands of records from the database.
TO show these thousands of records in a single page is not possible. for that purpose we use the concept of MySQL pagination. In Mysql pagination we divide results into many pages.Basically it is the method of showing somewhat lesser results on page instead of putting them all together on a single page.
Suppose there are 15 records in a table. 5 records on each page are displayed by using pagination.
each of the 3 pages will have 5 records.Each time we click on next page the next 5 records will got
displayed and the previous 5 records will get removed.

Below is the Example.
In above example there is paginate function which has two arguments , one is the connection of database
and other is Limit variable which is basically the number of records on each page.
FOUND_ROWS() function return the number of rows from the table in the absence of limit clause.

Show 5 records on each page

There are 15 records inside userinfo table. Show only 5 records on each page.(use Pagination)

save as paginate.php

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

25

26

27

28

29

30

31

32

33

34

35

36

37

38

39

40

41

42

43

44

45

46

47

48

49

50

51

52

53

54

55

56

57

58

59

60

61

62

63

64

65

66

67

68

69

70

71

72

73

74

75

76

77

78

79

80

81

82

83

84

85

86

87

88

89

90

91

92

93

94

95

96

97

98

99

100

101

102

103

104

105

106

107

108

109

110

111

112

113

114

115

116

117

118

119

120

121

122

123

124

125

126

127

128

129

130

131

132

133

134

135

136

137

138

139

140

141

142

143

144

145

146

147

148

<?php

function paginage($db,$limit)

{

$sql ='select FOUND_ROWS();';

$result=mysql_query($sql);

$row=mysql_fetch_array($result);

$numrows=$row[0];

$paglinks='<p>';

if($numrows > $limit)

{

$page=$_GET['page']?$_GET['page']:1; 

//set page click_page

$currentpage=$_SERVER['PHP_SELF'].'?'.$_SERVER['QUERY_STRING'];

$currentpage=str_replace('&page='.$page,'',$currentpage);

//now if page_click on 1

if($page==1)

{

$paglinks.='<PREV';

}

else

{

$page_pre=$page-1;

$paglinks.='<a href="'.$currentpage.'&page='.$page_pre.'

"><PREV</a>';

}

//number of pages and range(no of links show)

$numofpages=ceil($numrows/$limit);

$range=4;

//left range and right range

$l_range=max(1,$page-(($range-1)/2));

$r_range=min($numofpages,$page+(($range-1)/2));

if(($r_range-$l_range)< $range-1)

{

if($l_range==1)

{

$r_range=min($l_range + ($range-1),$numofpages);

}

else

{

$l_range=max($r_range-($range-1),0);

}

}

$paglinks.=($l_range>1)?'....':'  ';

for($i=1; $i<$numofpages; $i++)//for loop this make the numric page link show

{

if($i==$page)

{

$paglinks.=$i;

}

else

{

if($l_range<= $i and $i<=$r_range)

{

$paglinks.='<a href="'.$currentpage.'&page='.$i.'">['.$i.']</a>';

}

}

}

$paglinks.=($r_range< $numofpages)?'....':'  ';

if($numrows-($limit * $page)>0)

{

$pagenext=$page +1;

$paglinks .=	'<a href="'.$currentpage.'&page='.$pagenext.'">  NEXT></a>';

}

else

{

$paglinks .='NEXT>';

}

}

else

{

$paglinks.='<PRVE   NEXT> ';

}

$paglinks.='</p>';

return $paglinks;

}		 

?>

Select records from userinfo table(Total records are 12). show 5 records on each page.

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

25

26

27

28

29

30

31

32

33

34

35

36

37

38

39

40

41

42

43

44

45

46

47

48

49

50

51

52

53

54

55

56

57

58

59

60

61

62

63

64

65

66

67

68

69

70

71

72

73

74

75

76

77

78

79

<?php

include("paginate.php");

$conn=mysql_connect("localhost","root");

$db=mysql_select_db("test",$conn);

error_reporting(1);

?>

<body>

<table border="1"  class="list" cellpadding="4px" >

<tr>

<td>SN</td>

<td>Name</td>

<td>Email</td>

<td>Mobile</td>

</tr>

<?php

$page=$_GET['page']?$_GET['page']:1;

$limit=5;

$start=($page-1)*$limit; 

$query4='select SQL_CALC_FOUND_ROWS * from userinfo limit '.$start.','.$limit;

$result=mysql_query($query4);

$page_links=paginage($db,$limit);

$num=1;

while($row=mysql_fetch_array($result))

{

echo'<tr>';

echo'<td>'.$row['id'].'</td>';

echo'<td>'.$row['name'].'</td>';

echo'<td>'.$row['email'].'</td>';

echo'<td>'.$row['mobile'].'</td>';

$num++;

echo'</tr>';

}

?>

<tr>

<td colspan="6" align="center"><?php echo $page_links; ?></td>

</tr>

</table>					

</body>

</html>

In display.php we have included the paginate.php and the results fetched by it are shown in a tabular form. The records in the result variable are fetched by mysql_fetch_array() function which is put in a while loop to display all records.
The information fetched by the display function is subdivided into pages and each page contain maximum of 5 records.

Live Demo

Download

Education Life

24 Aug 2015

MySQL OTHERS