Login in php with session

[akino009]

mga boss.. pturo nmn po ako ng ng php codes sa pgLog-in with two different users.. me session po ha..?? 2different admin at users and employers.. dpat po ba sa isang table lng ang account nila..?? thanks po in advance..

 

[alexboi]

below code after mag submit
$_SESSION['user'] = $username;

check if nag true sa authentication mo
if(isset($_SESSION['user'])){
dapat maka access na sya after mag log-in
}else{
balik sa login.php
}

parang ganyan ts...

 

[jskhulitz]

usually, ang common practice, nakahiwalay ang user data sa admin / employer data... but then kung ganyan ang gusto mo, pwede ka gumawa ng 1 table para sa lahat ng users then lagyan mo ng ganitong fields (id as primary key, user_type, username, etc.). dun sa user_type field, jan mo ilagay kung user, admin or employer sya... para magkaroon ka ng distinction.

 

[CodingSource]

So do you mean my access level ang login system mo? Dahil hindi ka pa nag-attempt to write code, basahin mo ito: http://evolt.org/PHP-Login-System-with-Admin-Features/

May code na yan na kasama, tutorial pa, step by step pa. So saan ka? KAMPIHAN NA! Basahin pala :P

Bale parang ganito ang naisip ko:

Schema:

users
-------
id_user
identity
credential
role
... other fields

Account Creation

$email_or_username = "[email protected]";
$password = "PinkEleph4nt"; // not my real password for anything
$role = "admin";
$sql = sprintf("INSERT INTO users SET identity='%s', credential='%s', role='%s'",
    mysql_real_escape_string($email_or_username), 
    mysql_real_escape_string(sha1($password)), 
    mysql_real_escape_string($role));

Account Login

// VALIDATE THE EMAIL/USERNAME and PASSWORD

if($is_valid == TRUE)
{
    $sql = sprintf("SELECT id_user FROM users WHERE identity='%s' AND credential='%s' LIMIT 1",
        mysql_real_escape_string($email_or_username), 
        mysql_real_escape_string(sha1($password)));

    // FETCH ROW save into $row

    if(!empty($row))
    {
        // A user was fetched save it into the session
        $_SESSION['id_user'] = $row['id_user'];

        // SUCCESS
    }
    else
    {
        // FAILURE
    }
}

Check user's role

<?php
function fetch_role()
{
    $role = "guest";
    if(isset($_SESSION['id_user']))
    {
        // User exists
        $sql = sprintf("SELECT * FROM users WHERE id_user='%s' LIMIT 1",
            mysql_real_escape_string($_SESSION['id_user']));

        // RUN THE MYSQL QUERY TO FETCH THE USER, SAVE INTO $row

        if(!empty($row))
        {
            $role = $user_row['role'];
        }
    }

    return $role;
}

...

$role = fetch_role();
if($role == 'guest')
{
    // SHOW GUEST CONTENT
}
elseif($role == 'member')
{
    // SHOW OTHER CONTENT
}
elseif($role == 'admin')
{
    // SHOW ADMIN CONTENT
}

 

[xxx___p_e_r_t_o]

Use role for each users (nakasave sa isang table). Then sa login, pag click ng login palang catch mo na yung data nya then save mo sa $_SESSION. Then validate the user data, if userdata(input) is equal to user saved data(database) then proceed to next page else send an error and redirect to login. Kapag logged in, check mo din yung role if admin, then if admin, view mo lahat ng functionalities ng site else, hide mo yung important functionality para sa simple users. Yan yung basic. Try lang ng try.

Enjoy ang programming..

 

[akino009]

So do you mean my access level ang login system mo? Dahil hindi ka pa nag-attempt to write code, basahin mo ito: http://evolt.org/PHP-Login-System-with-Admin-Features/

May code na yan na kasama, tutorial pa, step by step pa. So saan ka? KAMPIHAN NA! Basahin pala :P

Bale parang ganito ang naisip ko:

Schema:

users
-------
id_user
identity
credential
role
... other fields

Account Creation

$email_or_username = "[email protected]";
$password = "PinkEleph4nt"; // not my real password for anything
$role = "admin";
$sql = sprintf("INSERT INTO users SET identity='%s', credential='%s', role='%s'",
    mysql_real_escape_string($email_or_username), 
    mysql_real_escape_string(sha1($password)), 
    mysql_real_escape_string($role));

Account Login

// VALIDATE THE EMAIL/USERNAME and PASSWORD

if($is_valid == TRUE)
{
    $sql = sprintf("SELECT id_user FROM users WHERE identity='%s' AND credential='%s' LIMIT 1",
        mysql_real_escape_string($email_or_username), 
        mysql_real_escape_string(sha1($password)));

    // FETCH ROW save into $row

    if(!empty($row))
    {
        // A user was fetched save it into the session
        $_SESSION['id_user'] = $row['id_user'];

        // SUCCESS
    }
    else
    {
        // FAILURE
    }
}

Check user's role

<?php
function fetch_role()
{
    $role = "guest";
    if(isset($_SESSION['id_user']))
    {
        // User exists
        $sql = sprintf("SELECT * FROM users WHERE id_user='%s' LIMIT 1",
            mysql_real_escape_string($_SESSION['id_user']));

        // RUN THE MYSQL QUERY TO FETCH THE USER, SAVE INTO $row

        if(!empty($row))
        {
            $role = $user_row['role'];
        }
    }

    return $role;
}

...

$role = fetch_role();
if($role == 'guest')
{
    // SHOW GUEST CONTENT
}
elseif($role == 'member')
{
    // SHOW OTHER CONTENT
}
elseif($role == 'admin')
{
    // SHOW ADMIN CONTENT
}

cge sir.. thanks po.. pag-aralan ko tong codes

 

[CodingSource]

cge sir.. thanks po.. pag-aralan ko tong codes

Pati yung link basahin mo, ha? Malaking tulong din sa iyo iyun kapag hindi gumana eto sa program mo baka gumana sa link na binigay ko sa iyo.

 

[akino009]

Use role for each users (nakasave sa isang table). Then sa login, pag click ng login palang catch mo na yung data nya then save mo sa $_SESSION. Then validate the user data, if userdata(input) is equal to user saved data(database) then proceed to next page else send an error and redirect to login. Kapag logged in, check mo din yung role if admin, then if admin, view mo lahat ng functionalities ng site else, hide mo yung important functionality para sa simple users. Yan yung basic. Try lang ng try.

Enjoy ang programming..

yes.. boss.. enjoy programming

 

[dexter20]

So do you mean my access level ang login system mo? Dahil hindi ka pa nag-attempt to write code, basahin mo ito: http://evolt.org/PHP-Login-System-with-Admin-Features/

May code na yan na kasama, tutorial pa, step by step pa. So saan ka? KAMPIHAN NA! Basahin pala :P

Bale parang ganito ang naisip ko:

Schema:

users
-------
id_user
identity
credential
role
... other fields

Account Creation

$email_or_username = "[email protected]";
$password = "PinkEleph4nt"; // not my real password for anything
$role = "admin";
$sql = sprintf("INSERT INTO users SET identity='%s', credential='%s', role='%s'",
    mysql_real_escape_string($email_or_username), 
    mysql_real_escape_string(sha1($password)), 
    mysql_real_escape_string($role));

Account Login

// VALIDATE THE EMAIL/USERNAME and PASSWORD

if($is_valid == TRUE)
{
    $sql = sprintf("SELECT id_user FROM users WHERE identity='%s' AND credential='%s' LIMIT 1",
        mysql_real_escape_string($email_or_username), 
        mysql_real_escape_string(sha1($password)));

    // FETCH ROW save into $row

    if(!empty($row))
    {
        // A user was fetched save it into the session
        $_SESSION['id_user'] = $row['id_user'];

        // SUCCESS
    }
    else
    {
        // FAILURE
    }
}

Check user's role

<?php
function fetch_role()
{
    $role = "guest";
    if(isset($_SESSION['id_user']))
    {
        // User exists
        $sql = sprintf("SELECT * FROM users WHERE id_user='%s' LIMIT 1",
            mysql_real_escape_string($_SESSION['id_user']));

        // RUN THE MYSQL QUERY TO FETCH THE USER, SAVE INTO $row

        if(!empty($row))
        {
            $role = $user_row['role'];
        }
    }

    return $role;
}

...

$role = fetch_role();
if($role == 'guest')
{
    // SHOW GUEST CONTENT
}
elseif($role == 'member')
{
    // SHOW OTHER CONTENT
}
elseif($role == 'admin')
{
    // SHOW ADMIN CONTENT
}

Sir wala n yung file pareup nmn nung buong system.

 

[CodingSource]

Sir wala n yung file pareup nmn nung buong system.

Naisip lang yan pare. Make sure na meron kang database