Learn VBA & Macros in 1 Week!

PHP - User Registration Code

Full Excel VBA Course - Beginner to Expert

User Registration Code	View Content

This Works But for Some reason when you Register an Account and try to login it says "Incorrect Username/Password" It is also Allowing Multiple Accounts to be Created Under the Same Username and Password:

DB.php

<?php
session_start();
mysql_connect("localhost", "USERNAME", "PASSWORD");
mysql_select_db("DATABASE_USER");
function user_login ($username, $password)
{
//take the username and prevent SQL injections
$username = mysql_real_escape_string($username);
//begin the query
$sql = mysql_query("SELECT * FROM usersystem WHERE username = 'username' AND password = 'password' LIMIT 1");
//check to see how many rows were returned
$rows = mysql_num_rows($sql);
if ($rows<=0 )
{
echo "Incorrect username/password";
}
else
{
//have them logged in
$_SESSION['sername'] = $username;
}
}
?>

Register.php

<?php
include("db.php");
if (isset($_POST['username']) && isset($_POST['password']) && isset($_POST['email']))

{
//Prevent SQL injections
$username = mysql_real_escape_string($_POST['username']);
$email = mysql_real_escape_string($_POST['email']);

//Get MD5 hash of password
$password = md5($_POST['password']);

//Check to see if username exists
$sql = mysql_query("SELECT username FROM usersystem WHERE username = 'username'");
if(mysql_num_rows($sql) > 0)
{
die ("Username taken.");
}

mysql_query("INSERT INTO usersystem (username, password, email) VALUES ( '$username', '$password', '$email')") or die (mysql_error()); echo "Account created.";

}
?>
<form action="register.php" method="post">
Username: <input name="username" type="text" /><br>
Password: <input type="password" name="password" /><br>
Email: <input name="email" type="text" /><br>
<input type="submit" value="Submit" />
</form>

Login.php

<?php
include("db.php");
if (isset($_POST['username']) && isset($_POST['password']))
{
user_login($_POST['username'], $_POST['password']);
}
?>
<form action="login.php" method="post">
Username: <input name="username" type="text" /><br>
Password: <input type="password" name="password" /><br>
<button type="submit">Submit</button><br>
</form>

Could Anyone Help Please?

Full Excel VBA Course - Beginner to Expert

Similar Tutorials

View Content

User Registration

Similar Tutorials

View Content

Can anyone help with this problem it seems very simple, I am not an experienced PHP coder but keen to progress.

I am trying to create a User Registration project but have a problem. every time I try to login using mysqli_fetch_assoc it drops through to my error Invalid Email /Password it seems that the mysqli code is not working correctly but I do not understand this function enough can anyone help. I have attached the coding if this helps.

This is the function

This is the code I am using

Similar Tutorials

View Content

Hello,

I hope it's ok to ask this question here. I have a registration script, but I'm not sure how to handle it efficiently and I have some questions about it.

This is used in the page 'signup.php'. The class is called 'User'. I haven't noticed any errors or bugs. It would be very useful for me to be aware of my mistakes.

	public function regUser($uname,$upass,$upassverify)
    {
		$new_password = password_hash($upass, PASSWORD_DEFAULT);		
		if(!password_verify($upassverify, $new_password)) {
			// passwords are not the same (I thought it would be better to do this after hashing, but maybe it doesn't matter or it's worse. I'm not sure about it) 
			$info = 'pass_err'; 
		} 
		$stmt1 = $this->db->prepare("SELECT * FROM users WHERE username=:uname");
		$stmt1->execute(array(':uname'=>$uname));

		if($stmt1->rowCount() > 0) {
			// this username has already been used 
			$info = 'user_err'; 
		}
			
		if (!$info) {
			$stmt2 = $this->db->prepare("INSERT INTO users(username,password) 
										 VALUES(:uname, :upass)");
			$stmt2->bindparam(":uname", $uname);
			$stmt2->bindparam(":upass", $new_password);            
			$stmt2->execute();
			// succesfully made an account
			$info = "success";
		}
			header("Location:/signup.php?status=".$info);
			exit();	
    }

Am I using the prepared statements as how I should be using them? Is this a safe way of handling my data or do you see vulnerabilities? I'm using PRG to prevent resubmission but I want to show a 'everything is fine' or 'oh no, something went wrong' to the one who is signinup. If I now go to signup.php?status=success, i see 'eveything is fine', without actually signing up, is there a better way to do this or can I somehow prevent everyone being able to see this?

As you might have noticed in my last post, my English is not very good, sorry about that.

Thanks,

Fabian

Edited September 17, 2019 by Fabel

Registration Form Php Code

Similar Tutorials

View Content

Hello,

I am currently coding a site from scratch. I know i can use templates and everything else but i want the experience. The HTML I've had down for years but it seems PHP is getting a little elusive for me. I'm trying to create a registration form and when i test my site i keep getting parse errors and syntax errors... mainly regarding the use of {} and if/else. Any help would be appreciated. Most of the code is still incomplete, I have to go back and fill in some areas I've left blank for now, but i have commented using // Where the browser is kicking back my errors.

- “Any sufficiently advanced technology is indistinguishable from magic” (Arthur C. Clark, 1962)

<?php
$con = Mysqli_connect("'', '', ''");
if (Mysqli_connect_errno()) {
  echo "Failed to connect to DB. Please check your connection info." . Mysqli_connect_errno;
  // Only if there is an error.
}
//Declaring Variable for Registration form
$fname = "";
$lname = "";
$em = "";
$emc = "";
$pass = "";
$passc = "";
$date = "";
$error_array = "";

if (insert($_POST['register_button'])) {
  // To handle the registration form

  // First Name Values
  $fname = strip_tags($_POST['reg_fname']);
  $fname = str_replace(' ', '', $fname);
  $fname = ucfirst(strtolower($fname));

  // Last Name Values
  $lname = strip_tags($_POST['reg_lname']);
  $lname = str_replace(' ', '', $lname);
  $lname = ucfirst(strtolower($lname));

  // Registration Email Values
  $em  = strip_tags($_POST['reg_email']);
  $em = str_replace(' ', '', $em);

  // Confirm Registration Email Values
  $emc = strip_tags($_POST['reg_emailc']);
  $emc = str_replace(' ', '', $emc);

  // Registrsation Password Values
  $pass = strip_tags($_POST['reg_pass']);

  // Registration Password Confirmation Values
  $passc = strip_tags($_POST['reg_passc']);

  // Registration Date Values
  $date = date("m-d-Y");
  
// Here is where the browser keeps kicking back parse errors
  if ($em == $emc) {
  }
  else {
    echo "Email and Confirmation Email must match";

  }
    if (filter_var($em, FILTER_VALIDATE_EMAIL)) {
      $em = filter_var($em, FILTER_VALIDATE_EMAIL)
    }

      else {
      echo "Invlaid Format";
    }




?>

Login/registration Code Issue

Similar Tutorials

View Content

I have this working code except I can't redirect to a thank you page when a new user registers. When they login it works without issue. I just don't know where or what to put for the registration part. Here is my Code. Any help would be much appreciated. <?php

What Is The Code For Adding Image To Exisiting User

Similar Tutorials

View Content

Hi There,

I want to add a picture to an existing user. The sql looks like:

CREATE TABLE `klanten` (
`id` int(4) unsigned NOT NULL auto_increment,
`username` varchar(32) NOT NULL,
`password` varchar(32) NOT NULL,
`level` int(4) default '1',
`filename` varchar(255) not null,
`mime_type` varchar(255) not null,
`file_size` int not null,
`file_data` mediumblob not null,

primary key (id),
index (filename)
) ENGINE=MyISAM DEFAULT CHARSET=latin1 COLLATE=latin1_general_ci;

id, username, password and level are allready filled in.

Now i need some code to go with

<form method="post" action="process.php" enctype="multipart/form-data">
<div>
<input type="file" name="image" />
<input type="submit" value="Upload Image" />
</div>
</form>

process.php:

<?php
    require_once 'database.php';

    function assertValidUpload($code)
    {
        if ($code == UPLOAD_ERR_OK) {
            return;
        }

        switch ($code) {
            case UPLOAD_ERR_INI_SIZE:
            case UPLOAD_ERR_FORM_SIZE:
                $msg = 'Image is too large';
                break;

            case UPLOAD_ERR_PARTIAL:
                $msg = 'Image was only partially uploaded';
                break;

            case UPLOAD_ERR_NO_FILE:
                $msg = 'No image was uploaded';
                break;

            case UPLOAD_ERR_NO_TMP_DIR:
                $msg = 'Upload folder not found';
                break;

            case UPLOAD_ERR_CANT_WRITE:
                $msg = 'Unable to write uploaded file';
                break;

            case UPLOAD_ERR_EXTENSION:
                $msg = 'Upload failed due to extension';
                break;

            default:
                $msg = 'Unknown error';
        }

        throw new Exception($msg);
    }

    $errors = array();

    try {
        if (!array_key_exists('image', $_FILES)) {
            throw new Exception('Image not found in uploaded data');
        }

        $image = $_FILES['image'];

        // ensure the file was successfully uploaded
        assertValidUpload($image['error']);

        if (!is_uploaded_file($image['tmp_name'])) {
            throw new Exception('File is not an uploaded file');
        }

        $info = getImageSize($image['tmp_name']);

        if (!$info) {
            throw new Exception('File is not an image');
        }
    }
    catch (Exception $ex) {
        $errors[] = $ex->getMessage();
    }

    if (count($errors) == 0) {
        // no errors, so insert the image

        $query = sprintf(
            "insert into klanten (filename, mime_type, file_size, file_data)
                values ('%s', '%s', %d, '%s')",
            mysql_real_escape_string($image['name']),
            mysql_real_escape_string($info['mime']),
            $image['size'],
            mysql_real_escape_string(
                file_get_contents($image['tmp_name'])
            )
        );

        mysql_query($query, $con);

        $id = (int) mysql_insert_id($con);

        // finally, redirect the user to view the new image
        header('Location: view.php?id=' . $id);
        exit;
    }
?>
<html>
    <head>
        <title>Error</title>
    </head>
    <body>
        <div>
            <p>
                The following errors occurred:
            </p>

            <ul>
                <?php foreach ($errors as $error) { ?>
                    <li>
                        <?php echo htmlSpecialChars($error) ?>
                    </li>
                <?php } ?>
            </ul>

            <p>
                <a href="upload.php">Try again</a>
            </p>
        </div>
    </body>
</html>

to add to an existing user.

Can somebody help me here?

Best regards,

Martijn