Authentication of username and password using PHP(MySQL)

 

For sites that need login facilities, entered username and password should be checked with the database to verify the username. Here is an example for doing this. Form.html has a form to enter login and password details. When clicking the submit button it will pass the login username and password to auth.php.

Codes needed for both files are given below.

Form.html

  1: <form action='http://auth.php' method='post' name='form1' class='loginbg' id='form1'>
  2:   <p align='left'>UserName
  3:     <input name='username' type='text' size='10' />
  4:   </p>
  5:   <p align='left'>Password
  6:     <input name='password' type='password' size='10' />
  7:   </p>
  8:   <p align="center">
  9:     <input name='Login' type="submit" class="login" id="Login" value="login" />
 10:   </p>
 11: </form>

auth.php

stripslashes($username); is used to remove any slashes present in the field. This is used to prevent SQL injection. Here student details is the database and details is the table name under the database.

  1: <?php
  2:   error_reporting(0);
  3:   session_start();
  4:   $_SESSION['authuser']=0;
  5:   $username=$_POST['username'];
  6:   $password=$_POST['password'];
  7:   $username = stripslashes($username);
  8:   $password = stripslashes($password);
  9:   $con = mysql_connect("localhost","root","");  
 10:   if (!$con)
 11:     {
 12:     die('Sorry ... Could not connect: ' . mysql_error().'Plz try again later');
 13:     }
 14: 
 15:   mysql_select_db("student details", $con);
 16:  
 17:   $vrfy=mysql_query("SELECT `Id` FROM `details` WHERE `User_Name`='$username' AND Password='$password'");
 18:   $rslt = mysql_fetch_array($vrfy);
 19:   if($rslt['Id']!='')
 20:   {
 21:   
 22:     $_SESSION['username']=$username;
 23:     $_SESSION['password']=$password;
 24:     if($rslt['Id']==0)
 25:     $_SESSION['authuser']=2;
 26:     else
 27:     $_SESSION['authuser']=1;
 28:     echo "Login successfull.. You will be redirected to your personal page..";
 29:     header( "refresh:2;url=../Form/viewdtls.php" );
 30:   }
 31: 
 32:   else
 33:   {
 34:     echo "Login Failed .. Please check your password and user id.\n You will be redirected to home page.";
 35:     header( "refresh:2;url=../index.php" );
 36:   }
 37: ?>