Vous êtes sur la page 1sur 7

User has to fill registration form before login

Registration successfull

Login successfull
Database store users registration information

Implementation of SHA256
!doctype html>
<html>
<head>
<title>Register</title>
<link rel="stylesheet" href="style.css">
</head>
<body style="background-color:#bdc3c7">
<div id="main-wrapper">
<p><center><a href="md5.php">Register</a> | <a
href="login.php">Login</a></center></p>
<center><h3>Registration Form</h3></center>
<form action=" " method="POST">
<div class="inner_container">
<label><b>Username</b></label>
<input type="text" name="user" required>
<label><b>Password</b></label>
<input type="password" name="pass" required>
<button type="submit" value="Register" name="submit"
class="sign_up_btn">Submit </button>
</div>

</form>
</div>
<?php
if(isset($_POST["submit"])){
//mysql_real_escape_string() escapes special characters in string for use in an sql statement
if(!empty($_POST['user']) && !empty($_POST['pass'])) {
$user=$_POST['user'];
$pass=$_POST['pass'];
//put pass xamp or db in ''
$con=mysql_connect('localhost','root','nurhai2695') or die(mysql_error());
mysql_select_db('login') or die("cannot select DB");

$query=mysql_query("SELECT userName,passWord FROM login_user WHERE


userName='.$user.'");
$numrows=mysql_num_rows($query);
if($numrows==0)
{
//sha256hash pass
$encrypt_password=$pass=hash('sha256', $pass);
$sql="INSERT INTO login_user (userName,passWord)
VALUES('$user','$encrypt_password')";
$result=mysql_query($sql);
if($result){
Hashing using SHA-256
echo "Account Successfully Created";
} else {
echo "Failure!";
}

} else {
echo "That username already exists! Please try again with another.";
}
} else {
echo "All fields are required!"; }
}
?>
</body>
</html>
Login

<!doctype html>
<html>
<head>
<title>Login</title>
<link rel="stylesheet" href="style.css">
</head>
<body style="background-color:#bdc3c7">
<div id="main-wrapper">
<p><center><a href="md5.php">Register</a> | <a
href="login.php">Login</a></center></p>
<center><h3>Login</h3></center>
<form action=" " method="POST">
<div class="inner_container">
<label><b>Username</b></label>
<input type="text" name="user" required>
<label><b>Password</b></label>
<input type="password" name="pass" required>
<button type="submit" value="Login" name="submit"
class="sign_up_btn">Login </button>
</div>
</form>
</head>
<?php
if (isset($_POST['submit'])){

if(!empty($_POST['user']) && !empty($_POST['pass'])) {

$user=$_POST['user'];
$pass=$_POST['pass'];

$pass=hash('sha256',$pass);
$con=mysql_connect('localhost','root','nurhai2695') or die(mysql_error());
mysql_select_db('login') or die("cannot select DB");

$query=mysql_query("SELECT * FROM login_user WHERE userName='$user' AND


pasWord='$pass'");

$numrows=mysql_num_rows($query);
if($numrows!=1)

{
session_start();
$_SESSION['sess_user']=$user;

header("Location: member.php");
}
else {
echo "Invalid username or password!";
}

} else {
echo "All fields are required!";
}
}
?>
</body>
</html>
Homepage after user done login

<?php
session_start();
if(!isset($_SESSION["sess_user"])){
header("Location: login.php");
} else {
?>
<!doctype html>
<html>
<head>
<title>Welcome</title>
<link rel="stylesheet" href="css/style.css">
</head>
<body>
<div id="main-wrapper">
<center><h1>HOMEPAGE</h1></center>
<center><h2>Welcome, <?=$_SESSION['sess_user'];?
></h2></center>
<p><center>This a cryptoTest</center></p>
</div>
<form action="login.php" method="post">
<div class="inner_container">
<center><button href="logout.php" class="sign_up_btn"
type="submit">Logout</button><center>
</div>
</form>
</body>
</html>
<?php
}
?>
Logout

<?php
session_start();
unset($_SESSION['sess_user']);
session_destroy();
header("location: login.php");
?>

Vous aimerez peut-être aussi