Complete login and registration application using PHP and MySQL (2023)

< ?php define('TITLE',"Start | Full record of"); include 'includes/header.php';?><div id="philosophy"> <hr /> <br /><br /> <h1>Advanced login and registration application</h1> <br /><br / > <p> Let us walk you through the complete login and registration application using PHP and MySQL</p> <br /><br /><br /> </div>< ?php include 'includes/ footer.php'; ?>

//signup.php< ?php define('TITLE',"Signup"); include 'includes/header.php'; if(isset($_SESSION['userId'])) { header("Location: index.php"); exit(); }?><div id="contact"> <hr /> <h1>Register</h1> < ?php $userName = ''; $email = ''; if(isset($_GET['error'])) { if($_GET['error'] == 'empty fields') { echo '<p class="closed">*Fill in all fields'; $userName = $_GET['uid']; $email = $_GET['mail']; } else if ($_GET['error'] == 'invalidmailuid') { echo '<p class="closed">*Please enter a valid email and username</p>'; } else if ($_GET['error'] == 'invalidmail') { echo '<p class="closed">*Please enter a valid email address</p>'; } else if ($_GET['error'] == 'invaliduid') { echo '<p class="closed">*Please enter a valid username</p>'; } else if ($_GET['error'] == 'passwordcheck') { echo '<p class="closed">*Passwords do not match</p>'; } else if ($_GET['error'] == 'usertaken') { echo '<p class="closed">*This username is already in use</p>'; } else if ($_GET['error'] == 'invalidimagetype') { echo '<p class="closed">*Invalid image type. The profile picture must be a .jpg or .png file</p>'; } else if ($_GET['error'] == 'imguloaderror') { echo '<p class="closed">*Image upload error</p>'; } else if ($_GET['error'] == 'imgsizeexceeded') { echo '<p class="closed">*Image too large</p>'; } else if ($_GET['error'] == 'sqlerror') { echo '<p class="closed">*Site error: Please contact your administrator to correct this problem</p>'; } } else if (isset($_GET['enrollment']) == 'success') { echo '<p class="open">*Subscription successful. Log in from the Login menu on the right</p>'; } ?> <form action="includes/signup.inc.php" method='post' id="contact-form" enctype="multipart/form-data"> <input type="text" id="name" name="uid" placeholder="Username" value=<?php echo $userName; ?/>> <input type="email" id="email" name="mail" placeholder="email" value=<?php echo $email; ?/>> <input type="password" id="pwd" name="pwd" placeholder="password"/> <input type="password" id="pwd-repeat" name="pwd-repeat" placeholder ="repeat password"/> <h5>Profile photo</h5> <div class="upload-btn-wrapper"> <button class="btn">Upload a file</button> <input type=" file" name='dp'/> </div> <!-- <img id="userDp" src="" >--> <h5>Genre</h5> <label class="container" for=" gender- m">Male <input type="radio" check="checked" name="gender" value="m" id="gender-m"/> <span class="checkmark"></span> < /label > <label class="container" for="gender-f">Female <input type="radio" name="gender" value="f" id="gender-f"/> <span class=" checkmark"></span> </label> <h5>Optional</h5> <input type="text" id="f-name" name="f-name" placeholder="First Name" /> <input type="text" id="l-name" name="l-name" placeholder="Last Name" /> <input type="text" id="headline" name="headline" placeholder="Your Profile Headline "/ > <textarea id="bio" name="bio" placeholder="What do you want to tell people about yourself"></textarea> <input type="submit" class="button next" name="signup -submit" value="signup"/> </form> <hr /></div>< ?php include 'includes/footer.php'; ?>

//signup.inc.php< ?phpif (isset($_POST['signup-submit'])){ require 'dbh.inc.php'; $userName = $_POST['uid']; $email = $_POST['mail']; $password = $_POST['pwd']; $passwordRepeat = $_POST['pwd-repeat']; $gender = $_POST['gender']; $headline = $_POST['headline']; $bio = $_POST['bio']; $f_name = $_POST['f-name']; $l_name = $_POST['l-name']; if (empty($userName) || empty($email) || empty($password) || empty($passwordRepeat)) { header("Location: ../signup.php?error=emptyfields&uid=".$userName ."&mail=".$email); exit(); } else if (!filter_var($email, FILTER_VALIDATE_EMAIL) && !preg_match("/^[a-zA-Z0-9]*$/", $userName)) { header("Location: ../signup.php? error=invalidmailuid"); exit(); } else if (!filter_var($email, FILTER_VALIDATE_EMAIL)) { header("Location: ../signup.php?error=invalidmail&uid=".$userName); exit(); } else if (!preg_match("/^[a-zA-Z0-9]*$/", $userName)) { header("Location: ../signup.php?error=invaliduid&mail=".$email) ; exit(); } else if ($password !== $passwordRepeat) { header("Location: ../signup.php?error=passwordcheck&uid=".$userName."&mail=".$email); exit(); } else { // checking if a user with the given username already exists $sql = "select uidUsers from users where uidUsers=?;"; $stmt = mysqli_stmt_init($conn); if (!mysqli_stmt_prepare($stmt, $sql)) { header("Location: ../signup.php?error=sqlerror"); exit(); } else { mysqli_stmt_bind_param($stmt, "s", $userName); mysqli_stmt_execute($stmt); mysqli_stmt_store_result($stmt); $resultCheck = mysqli_stmt_num_rows($stmt); if ($resultCheck > 0) { header("Location: ../signup.php?error=usertaken&mail=".$email); exit(); } else { $FileNameNew = 'default.png'; require 'upload.inc.php'; $sql = "insert into users(uidUsers, emailUsers, f_name, l_name, pwdUsers, gender, " . "headline, bio, userImg) " . "values ​​(?,?,?,?,?,?,?,?,?)"; $stmt = mysqli_stmt_init($conn); if (!mysqli_stmt_prepare($stmt, $sql)) { header("Location: ../signup.php?error=sqlerror"); exit(); } else { $hashedPwd = password_hash($password, PASSWORD_DEFAULT); mysqli_stmt_bind_param($stmt, "sssssssss", $userName, $email, $f_name, $l_name, $hashedPwd, $gender, $headline, $bio, $FileNameNew); mysqli_stmt_execute($stmt); mysqli_stmt_store_result($stmt); header("Location: ../signup.php?signup=success"); exit(); } } } } mysqli_stmt_close($stmt); mysqli_close($conn); }else{ header("Location: ../signup.php"); exit();}

//dbh.inc.php< ?php$serverName = "localhost";$dBUsername = "root"; //Database username$dBPassword = "root"; //Database password$dBName = "loginsystem"; //Database servername$conn = mysqli_connect($serverName, $dBUsername, $dBPassword, $dBName, 3306);if (!$conn){ die("Connection failed: ". mysqli_connect_error());}

//header.php< ?php session_start(); requerem 'dbh.inc.php'; $companyName = "Sistema de Login/Registro PHP"; função strip_bad_chars( $input ){ $output = preg_replace( "/[^a-zA-Z0-9_-]/", "", $input); retornar $saída; }?> < !DOCTYPE html><html> <cabeçalho> <título>< ?php echo TÍTULO; ?></title> <link href="includes/styles.css" rel="stylesheet"/> <link rel="shortcut icon" href="" /> </head> <body id="final-example "> <!------- FORMULÁRIO DE LOGIN / LOGOUT ---------> < ?php if(isset($_SESSION['userId'])) { echo '<img id="status " src="">'; } else { echo '<img id="status" src=""/>'; }?> <div id="login"> < ?php if(isset($_SESSION['userId'])) { echo'<div style="text-align: center;"> <img id="userDp" src=./uploads/'.$_SESSION["userImg"].'/> <h3>' . strtoupper($_SESSION['userUid']) . '</h3> <a href="profile.php" class="button login">Perfil</a> <a href="edit-profile.php" class="button login">Editar perfil</a> <a href="includes/logout.inc.php" class="button login">Sair</a> </div>'; } else { if(isset($_GET['error'])) { if($_GET['error'] == 'emptyfields') { echo '<p class="closed">*preencha todos os campos </p>'; } else if($_GET['error'] == 'nouser') { echo '<p class="closed">*nome de usuário não existe</p>'; } else if ($_GET['error'] == 'wrongpwd') { echo '<p class="closed">*senha errada</p>'; } else if ($_GET['error'] == 'sqlerror') { echo '<p class="closed">*erro do site. entre em contato com o administrador para consertá-lo</p>'; } } echo '<form method="post" action="includes/login.inc.php" id="login-form"> <input type="text" id="name" name="mailuid" placeholder=" Nome de usuário..."/> <input type="password" id="password" name="pwd" placeholder="Password..."/> <input type="submit" class="button next login" name= "login-submit" value="Login"/> </form> <a href="signup.php" class="button Previous">Inscrever-se</a>'; } ?> <!------- LOGIN / LOGOUT FORM END ---------> <div class="wrapper"> <div class="content"></div></div ></body></html>

//login.inc.php< ?phpif (isset($_POST['login-submit'])){ require 'dbh.inc.php'; $mailuid = $_POST['mailuid']; $senha = $_POST['pwd']; if (empty($mailuid) || empty($password)) { header("Local: ../index.php?error=emptyfields"); saída(); } else { $sql = "SELECT * FROM users WHERE uidUsers=?;"; $stmt = mysqli_stmt_init($conn); if (!mysqli_stmt_prepare($stmt, $sql)) { header("Localização: ../index.php?error=sqlerror"); saída(); } else { mysqli_stmt_bind_param($stmt, "s", $mailuid); mysqli_stmt_execute($stmt); $resultado = mysqli_stmt_get_result($stmt); if($row = mysqli_fetch_assoc($result)) { $pwdCheck = password_verify($password, $row['pwdUsers']); if ($pwdCheck == false) { header("Localização: ../index.php?error=wrongpwd"); saída(); } else if($pwdCheck == true) { session_start(); $_SESSION['userId'] = $row['idUsers']; $_SESSION['userUid'] = $row['uidUsers']; $_SESSION['emailUsers'] = $row['emailUsers']; $_SESSION['f_name'] = $linha['f_name']; $_SESSION['l_name'] = $row['l_name']; $_SESSION['gênero'] = $linha['gênero']; $_SESSION['manchete'] = $linha['manchete']; $_SESSION['bio'] = $linha['bio']; $_SESSION['userImg'] = $row['userImg']; header("Localização: ../index.php?login=success"); saída(); } else { header("Localização: ../index.php?error=wrongpwd"); saída(); } } else { header("Local: ../index.php?error=nouser"); saída(); } } }} else { header("Localização: ../index.php"); saída();}

//logout.inc.php< ?php session_start(); session_unset(); session_destroy(); header("Location: ../index.php");

//edit-profile.php< ?php define(TITLE, "Edit Profile"); include 'includes/header.php'; if (!isset($_SESSION['userId'])) { header("Location: index.php"); exit(); } ?><div style="text-align: center"> <img id="userDp" src=<?php echo "./uploads/".$_SESSION['userImg']; ?/> > <h1>< ?php echo strtoupper($_SESSION['userUid']); ?></h1></div>< ?php $userName = ''; $email = ''; if(isset($_GET['error'])) { if($_GET['error'] == 'emptyemail') { echo '<p class="closed">*Profile email cannot be empty '; $email = $_GET['mail']; } else if ($_GET['error'] == 'invalidmail') { echo '<p class="closed">*Please enter a valid email address</p>'; } else if ($_GET['error'] == 'emptyoldpwd') { echo '<p class="closed">*You must enter your current password to change it</p>'; } else if ($_GET['error'] == 'emptynewpwd') { echo '<p class="closed">*Please enter new password</p>'; } else if ($_GET['error'] == 'emptyreppwd') { echo '<p class="closed">*Please confirm the new password</p>'; } else if ($_GET['error'] == 'wrongpwd') { echo '<p class="closed">*The current password is wrong</p>'; } else if ($_GET['error'] == 'samepwd') { echo '<p class="closed">*New password cannot be same as old password</p>'; } else if ($_GET['error'] == 'passwordcheck') { echo '<p class="closed">*The confirmation password is not the same as the new password</p>'; } } else if (isset($_GET['edit']) == 'success') { echo '<p class="open">*Profile updated successfully</p>'; }?><form action="includes/profileUpdate.inc.php" method='post' id="contact-form" enctype="multipart/form-data"> <h5>Personal information</h5> <label for ="email">Email</label> <input type="email" id="email" name="email" placeholder="email" value=<?php echo $_SESSION['emailUsers']; ?/>><br /> <label>Full Name</label> <input type="text" id="f-name" name="f-name" placeholder="Name" value=<?php echo $ _SESSION['f_name']; ?/>> <input type="text" id="l-name" name="l-name" placeholder="Last Name" value=<?php echo $_SESSION['l_name']; ?/>> <label class="container" for="gender-m">Male <input type="radio" name="gender" value="m" id="gender-m" <?php if ($ _SESSION['gender'] == 'm'){ ?/>checked="checked" < ?php } ?>> <span class="checkmark"></span> </label> <label class="container " for="gender-f">Female <input type="radio" name="gender" value="f" id="gender-f" <?php if ($_SESSION['gender'] == 'f '){ ?/>checked="checked" < ?php } ?>> <span class="checkmark"></span> </label> <label for="headline">Profile Headline</label> < input type="text" id="headline" name="headline" placeholder="Your Profile Headline" value='<?php echo $_SESSION['headline']; ?/>'><br /> <label for="bio">Profile Bio</label> <textarea id="bio" name="bio" maxlength="5000" placeholder="What do you want to tell people people yourself" >< ?php echo $_SESSION['bio']; ?></textarea> <h5>Change password</h5> <input type="password" id="old-pwd" name="old-pwd" placeholder="current password"/><br /> <input type="password" id="pwd" name="pwd" placeholder="new password"/> <input type="password" id="pwd-repeat" name="pwd-repeat" placeholder="repeat new password "/> <h5>Profile photo</h5> <div class="upload-btn-wrapper"> <button class="btn">Upload a file</button> <input type="file" name=' dp ' value=<?php echo $_SESSION['userImg']; ?/>> </div> <input type="submit" class="button next" name="update-profile" value="Update profile"/> </form><hr />< ?php include 'includes /footer.php'; ?>

//profileUpdate.inc.php< ?phpsession_start();if (isset($_POST['update-profile'])){ require 'dbh.inc.php'; $email = $_POST['email']; $f_name = $_POST['f-name']; $l_name = $_POST['l-name']; $oldPassword = $_POST['old-pwd']; $password = $_POST['pwd']; $passwordRepeat = $_POST['pwd-repeat']; $gender = $_POST['gender']; $headline = $_POST['headline']; $bio = $_POST['bio']; if (empty($email)) { header("Location: ../edit-profile.php?error=emptyemail"); exit(); } else if (!filter_var($email, FILTER_VALIDATE_EMAIL)) { header("Location: ../edit-profile.php?error=invalidmail"); exit(); } else { $sql = "SELECT * FROM users WHERE uidUsers=?;"; $stmt = mysqli_stmt_init($conn); if (!mysqli_stmt_prepare($stmt, $sql)) { header("Location: ../edit-profile.php?error=sqlerror"); exit(); } else { mysqli_stmt_bind_param($stmt, "s", $_SESSION['userUid']); mysqli_stmt_execute($stmt); $result = mysqli_stmt_get_result($stmt); if($line = mysqli_fetch_assoc($result)) { $pwdChange = false; if( (!empty($password) || !empty($passwordRepeat)) && empty($oldPassword)) { header("Location: ../edit-profile.php?error=emptyoldpwd"); exit(); } if( empty($password) && empty($passwordRepeat) && !empty($oldPassword)) { header("Location: ../edit-profile.php?error=emptynewpwd"); exit(); } if (!empty($password) && empty($passwordRepeat) && !empty($oldPassword)) { header("Location: ../edit-profile.php?error=emptyreppwd"); exit(); } if (empty($password) && !empty($passwordRepeat) && !empty($oldPassword)) { header("Location: ../edit-profile.php?error=emptynewpwd"); exit(); } if (!empty($password) && !empty($passwordRepeat) && !empty($oldPassword)) { $pwdCheck = password_verify($oldPassword, $row['pwdUsers']); if ($pwdCheck == false) { header("Location: ../edit-profile.php?error=wrongpwd"); exit(); } if ($oldPassword == $password) { header("Location: ../edit-profile.php?error=samepwd"); exit(); } if ($password !== $passwordRepeat) { header("Location: ../edit-profile.php?error=passwordcheck&mail=".$email); exit(); } $pwdChange = true; } $FileNameNew = $_SESSION['userImg']; require 'upload.inc.php'; $sql = "UPDATE users". "SET f_name=?, " . "l_name=?, " . "emailUsers=?, " . "gender=?, " . "headline=?, " . "bio=?, " . "userImg=?"; if ($pwdChange) { $sql .= ", pwdUsers=?" . "WHERE uidUsers=?;"; } else { $sql .="WHERE uidUsers=?;"; } $stmt = mysqli_stmt_init($conn); if (!mysqli_stmt_prepare($stmt, $sql)) { header("Location: ../edit-profile.php?error=sqlerror"); exit(); } else { if ($pwdChange) { $hashedPwd = password_hash($password, PASSWORD_DEFAULT); mysqli_stmt_bind_param($stmt, "sssssssss", $f_name, $l_name, $email, $gender, $headline, $bio, $FileNameNew, $hashedPwd, $_SESSION['userUid']); } else { mysqli_stmt_bind_param($stmt, "ssssssss", $f_name, $l_name, $email, $gender, $headline, $bio, $FileNameNew, $_SESSION['userUid']); } mysqli_stmt_execute($stmt); mysqli_stmt_store_result($stmt); $_SESSION['emailUsers'] = $email; $_SESSION['f_name'] = $f_name; $_SESSION['l_name'] = $l_name; $_SESSION['gender'] = $gender; $_SESSION['headline'] = $headline; $_SESSION['bio'] = $bio; $_SESSION['userImg'] = $FileNameNew; header("Location: ../edit-profile.php?edit=success"); exit(); } } else { header("Location: ../edit-profile.php?error=sqlerror"); exit(); } } } mysqli_stmt_close($stmt); mysqli_close($conn); }else{ header("Location: ../edit-profile.php"); exit();}