CREATE TABLE users(id int AUTO_INCREMENT PRIMARY KEY,username varchar(45) ,password varchar(15));The above query will create a table. Now insert some data in the users table.
INSERT INTO users(username,password)VALUES('demo','pass');
Before making login form, we assume, you already know how to make user registration form. If not, you may make registration script yourself as given in tutorial Php Registration Form | Php Registration Script With Mysql.
So now back to php login script, our first step is completed for login script. Now second step is making php login form.
<!-- login.php--> <form name="login_form" id="login_form" method="post" action="login_check.php">Our php login form is ready. As you see, here action attribute is set login_check.php. This is the page, where our form's data is submitted. And on this page, we will check from users table whether user exists or does not exist. And line <?php echo isset($_GET["msg"])?$_GET["msg"]:"";?>. prints error message, if user returns on login.php due to some validation error. Now our third step is making this page.
<table> <tr><td colspan="2"><?php echo isset($_GET["msg"])?$_GET["msg"]:"";?> </td></tr>
<tr><td>Username</td><td><input type="text" name="username" id="username" /> </td></tr>
<tr><td>Password</td><td><input type="password" name="password" id="password" /> </td></tr>
<tr><td></td><td><input type="submit" name="btnsubmit" id="btnsubmit" /> </td></tr>
</table>
</form>
<?php //login_check.php session_start();
$username=isset($_POST["username"])?$_POST["username"]:"";
$password=isset($_POST["password"])?$_POST["password"]:"";
if(!empty($username)&&!empty($password)){
$host="localhost";
$user="mysql_user_name";
$pass="mysql_password";
$database="databse_name";
///open connection
$link=new mysqli($host,$user,$pass,$database);
if ($link->connect_error) { die('Connection error: ' . $link->connect_error); } $query="SELECT * FROM users WHERE username='".$link->real_escape_string($username)."' AND password='".$link->real_escape_string($password)."'";
$result = $link->query($qry);
//count no of rows
$count = $result->num_rows;
if($count==1){
$_SESSION["username"]=$username; header("location:index.php");
}
else
{
header("location:login.php?msg=user not found");
}
$link->close();
}
else
{
header("location:login.php?msg=Username or password caanot be blank.");
}
Next step is making landing page for user after login. Before doing anything on this page, session for login is checked. If session is not found then user is redirected to login page with header function.
<?php //index.php file session_start(); //redirect for login if,user is not logged in
if(!isset($_SESSION["username"]))
{
header("location:login.php");
}
?>
<html>
<head>
<title>User Area</title>
</head><body>
Welcome <?php echo $_SESSION["username"]?> | <a href="logout.php">Logout</a>
</body>
</html>
As you can see, logout link is given on index.php page. Now our final step is making logout page. Where we unset session for login and redirect user to login.php page.
Happy coding<?php
session_start(); if(isset($_SESSION["username"])){
unset($_SESSION["username"]);
header("location:login.php"); }
?>