Can Anyone Get Me an Advanced PHP Login Script?
I need one with advanced admin features and a cp and i need to know how to restrict pages that require login. I also need to know where to put the codes in my webpages. Thx for the help
September 6, 2010 | Filed Under Scripts FAQs
Comments
3 Responses to “Can Anyone Get Me an Advanced PHP Login Script?”
Powered by Yahoo! Answers
Login Codes:
Website Access Manager – http://www.coffeecup.com/website-access-manager/
Depending on what you run:
How to: Create an ASP.NET Login Page – http://msdn.microsoft.com/en-us/library/ms178331.aspx
Creating Login Page – http://www.adesdesign.net/php/tutorials/dreamweaver/secure_login.php
Create login page – http://www.interaktonline.com/Documentation/MXCalendar/4243_createlogin.htm
Login Script: http://www.web2coders.com/modules/modlogin.zip
Bravenet Password Protect – http://www.bravenet.com/webtools/passwd/
HTHs,
Ron
Go to http://www.web2coders.com, scroll down, click on "login script" and download the FREE Zip file: it contains all you need.
If you need more advices, register and join the forum.
<?
/***************************
login.class.php
***************************/
class user{
//To track the switch/errors through out
var $login_error;
//constructor
function user($UserInput){
if($_SERVER['REQUEST_METHOD'] == "POST")
{
$this->validate_user($UserInput);
}
else
{
$this->login_form();
}
}//End function
//Just a simple login form
function login_form(){
echo "<div align=\"center\"><form name=\"LoginForm\" action=\"$_SERVER[PHP_SELF]\" method=\"POST\"><table><tr><td><tr><td>User Name:</td><td><input type=\"text\" name=\"FLU\"></td><td>Password:</td><td><input type=\"password\" name=\"FLP\"></td></tr><tr><td colspan=\"2\"><input type=\"submit\" value=\"Submit\"> <input type=\"reset\" value=\"Reset\"></td></tr></table></div>";
}//End Function
function validate_user($UserInput){
//my chosen user name and password pattern
$this->user_name_pattern = ("^[a-zA-Z0-9]{5,15}$");
$this->password_pattern = ("^[a-zA-Z0-9\!\@\#\$\%\^\&\*\`\~\_]{5,15}$");
//JavaScript History -1
$this->go_back = "<a href=javascript:history.go(-1)><font color=red size=-2>(Go Back)</font></a>";
//Change the redirect location to whare you want to go http://yoursite.com/members/
$this->success_login_redirect = "http://dzsoundnirvana.com/";
switch($UserInput){
case ($UserInput['FLU'] == "" || !ereg($this->user_name_pattern,$UserInput['FLU'])):
$this->login_form();
echo "<div align=\"center\"><font color=\"red\">Invalid user name. Try again or $this->go_back!</font></div>";
$this->login_error == false;
break;
case ($UserInput['FLP'] == "" || !ereg($this->password_pattern,$UserInput['FLP'])):
$this->login_form();
echo "<div align=\"center\"><font color=\"red\">Invalid password. Try again or $this->go_back!</font></div>";
$this->login_error == false;
break;
}
if($this->login_error === false){
//Or you can redirect to a "Forgot password/user name" page or leave it alone. This will kill the script. No output after though!
exit;
}
else{
//Now we go to the Database and validate the user
$this->db();
$this->query_string = "SELECT * FROM users WHERE user_name=’$UserInput[FLU]‘ && password=’" . md5($UserInput['password']) . "’";
$this->query = mysql_query($this->query_string);
//Error check the query
if(!$this->query){
echo "System error! Contact the system administrator!<br>or<br>$this->go_back";
//use this for debugging (below), Delete the // at the beginning
//echo mysql_error();
}
else{
//Need to check if more than 1 user exists if so….throw HACKING error (not supported here)..another class
$this->num_rows = mysql_num_rows($this->query);
if($this->num_rows > 1){
echo "Hacking warning";
exit;
}
else{
//Get the user information and set into the $_SESSION and then redirect to the directed page
$this->user_information = mysql_fetch_assoc($this->query);
//Put all user data into $_SESSION
foreach($this->user_information as $key => $value){
$_SESSION[$key] = $value;
//Now we redirect to the page specified
echo "<script type=\"text/javascript\">window.location=\"$this->success_login_redirect\"</script>";
echo "If you are not redirected <a href=\"this->success_login_redirect\" target=\"_parent\">Click here to continue</a>";
}
}
}//else
}//if($this->login_error === false)/else{
}//End function
function db(){
//Put your database host, database user name, and database password
$this->db_link = mysql_connect("data_base_host","data_base_user","data_base_password");
//Select the DB
//Put your database name
$this->db_select = mysql_select_db("data_base_name");
}
}//End Class
?>
<?
/********************
login.php
********************/
//Start the $_SESSION before any output to the browser
session_start();
if((isset($_SESSION['user_ID'])) && (isset($_SESSION['token'])) && (isset($_SESSION['access_level']))){
//this is where you would put the content you want only validate users to access
echo "You are logged in already";
}
else{
//Work out of the global scope
$UserInput = array();
foreach($_POST as $key => $value){
$UserInput[$key] = $value;
}
require_once(‘login.class.php’);
//Call the user class
$user = new user($UserInput);
}
?>