PHP Session Example

Previous post was about PHP Session There explained about session its purpose and syntax in detail. Lets see one good example of session.

User login system
1. connection.php
This page is used to establish database connection from application.

<?php
    $con = new mysqli("localhost","root","","session");
?>

<?php

$con = new mysqli("localhost","root","","session");

2. index.php
This page retrives the user detail from database

<?php
    include "header.php";
    include "connection.php";
	if($_POST[em])
	{
		$sql = "select * from `user` where `email`='$_POST[em]' and `password`='$_POST[pw]'";
		$res = $con->query($sql);
		$num = $res->num_rows;
		if($num!=0)
		{
			$row = $res->fetch_array();
            			$_SESSION[userid] = $row[id];
			$_SESSION[chk]    = true;
            			header("location:profile.php");  //redirect one PHP file to another PHP file
		}
		else
		{
			echo "Login Fail";
		}

	}
?>
<br>
<center>
<form method="post" action="">
	<table border="1">
	<tr>
		<td>Email-</td>
		<td><input type="text" name="em"></td>
	</tr>
	<tr>
		<td>Password</td>
		<td><input type="password" name="pw"></td>
	</tr>
	<tr>
		<td colspan="2" align="center"><input type="submit" value="Login"></td>
	</tr>
	</table>
</form>
<a href="registration.php">New User</a>
</center>

<?php

include "header.php";

include "connection.php";

if($_POST[em])

{

$sql = "select * from `user` where `email`='$_POST[em]' and `password`='$_POST[pw]'";

$res = $con->query($sql);

$num = $res->num_rows;

if($num!=0)

{

$row = $res->fetch_array();

$_SESSION[userid] = $row[id];

$_SESSION[chk] = true;

header("location:profile.php"); //redirect one PHP file to another PHP file

}

else

{

echo "Login Fail";

}

<br>

<tr>

<td>Email-</td>

</tr>

<tr>

<td>Password</td>

</tr>

<tr>

</tr>

</table>

</form>

</center>

<?php
    include "connection.php";
	if($_POST[em])
	{
$sql = "INSERT INTO `user`(`id`, `name`, `address`, `phone`, `email`, `password`) VALUES ('','$_POST[nm]','$_POST[add]','$_POST[ph]','$_POST[em]','$_POST[pw]')";
		$con->query($sql);
		header("location:index.php");
	}
?>
<center>
<form method="post" action="">
	<table border="1">
	<tr>
		<td>Name-</td>
		<td><input type="text" name="nm"></td>
	</tr>
	<tr>
		<td>Address-</td>
		<td><textarea name="add" rows="" cols=""></textarea></td>
	</tr>
	<tr>
		<td>Phone-</td>
		<td><input type="number" name="ph"></td>
	</tr>
	<tr>
		<td>Email-</td>
		<td><input type="text" name="em"></td>
	</tr>
	<tr>
		<td>Password</td>
		<td><input type="password" name="pw"></td>
	</tr>
	<tr>
		<td colspan="2" align="center"><input type="submit" value="signin"></td>
	</tr>
	</table>
</form>
<a href="index.php">Already Register</a>
</center>

<?php

include "connection.php";

if($_POST[em])

{

$sql = "INSERT INTO `user`(`id`, `name`, `address`, `phone`, `email`, `password`) VALUES ('','$_POST[nm]','$_POST[add]','$_POST[ph]','$_POST[em]','$_POST[pw]')";

$con->query($sql);

header("location:index.php");

}

<tr>

</tr>

<tr>

<td>Address-</td>

</tr>

<tr>

<td>Phone-</td>

</tr>

<tr>

<td>Email-</td>

</tr>

<tr>

<td>Password</td>

</tr>

<tr>

</tr>

</table>

</form>

<a href="index.php">Already Register</a>

</center>

4. checking.php
Check whether the user is in session or not

<?php
    session_start();
	if($_SESSION[chk]!=true)
	{
		header("location:index.php");
	}
?>

<?php

session_start();

if($_SESSION[chk]!=true)

{

header("location:index.php");

}

5. profile.php
This page displays the user information to page

<?php
    include "header.php";
    include "connection.php";
    include "checking.php";
	
		$sql = "select * from `user` where `id`='$_SESSION[userid]'";
		$res = $con->query($sql);
		$row = $res->fetch_array();
		echo "<table>
		      <tr>
			  <td>$row[name]</td>
			  <td>$row[address]</td>
			  <td>$row[phone]</td>
			  <td>$row[email]</td>
			  </tr>
			  </table>";
		
		echo "<br>
		      <a href='change.php'>Change Password</a>";
	
?>

<?php

include "header.php";

include "connection.php";

include "checking.php";

$sql = "select * from `user` where `id`='$_SESSION[userid]'";

$res = $con->query($sql);

$row = $res->fetch_array();

echo "<table>

<tr>

<td>$row[address]</td>

<td>$row[phone]</td>

<td>$row[email]</td>

</tr>

</table>";

echo "<br>

<a href='change.php'>Change Password</a>";

6. header.php
This page starts the session and show link login or logout bases on user session created or not

<?php
	session_start();
?>
<center>
<?php
	if($_SESSION[chk] != true){
	echo '<a href="index.php">Login</a>';
}
else{
	echo '<a href="logout.php">Logout</a>';
}
?>
&nbsp;
<a href="profile.php">Profile</a>
</center>

<?php

session_start();

<?php

if($_SESSION[chk] != true){

echo '<a href="index.php">Login</a>';

}

else{

echo '<a href="logout.php">Logout</a>';

}

<a href="profile.php">Profile</a>

</center>

7.logout.php
This page is used to destroy the session

<?php
    session_start();
	session_destroy();
	header("location:index.php");
?>

<?php

session_start();

session_destroy();

header("location:index.php");

8. change.php
This page is used to change the user password

<?php
    session_start();
    include "connection.php";
	if($_POST[np])
	{
		$sql = "select * from `user` where `password`='$_POST[op]' and `id`='$_SESSION[userid]'";
		$res = $con->query($sql);
		$num = $res->num_rows;
		if($num!=0)
		{
			if($_POST[np]==$_POST[cp])
			{
				$sql1 = "update `user` set `password` = '$_POST[np]' where `id`='$_SESSION[userid]'";
				$con->query($sql1);
				header("location:logout.php");
			}
			else
			{
				echo "Password Does not Matched";
			}
		}
		else
		{
			echo "Current Password Wrong";
		}
	}
?>
<center>
<form method="post" action="">
	<table border="1">
	<tr>
		<td>Current Password-</td>
		<td><input type="password" name="op"></td>
	</tr>
	<tr>
		<td>New Password-</td>
		<td><input type="password" name="np"></td>
	</tr>
	<tr>
		<td>Confirm Password-</td>
		<td><input type="password" name="cp"></td>
	</tr>
	<tr>
		<td colspan="2" align="center"><input type="submit" value="Login"></td>
	</tr>
	</table>
</form>
<a href="profile.php">Profile</a>
</center>

<?php

session_start();

include "connection.php";

if($_POST[np])

{

$sql = "select * from `user` where `password`='$_POST[op]' and `id`='$_SESSION[userid]'";

$res = $con->query($sql);

$num = $res->num_rows;

if($num!=0)

{

if($_POST[np]==$_POST[cp])

{

$sql1 = "update `user` set `password` = '$_POST[np]' where `id`='$_SESSION[userid]'";

$con->query($sql1);

header("location:logout.php");

}

else

{

echo "Password Does not Matched";

}

else

{

echo "Current Password Wrong";

}

<tr>

<td>Current Password-</td>

</tr>

<tr>

<td>New Password-</td>

</tr>

<tr>

<td>Confirm Password-</td>

</tr>

<tr>

</tr>

</table>

</form>

<a href="profile.php">Profile</a>

</center>

Ebhor.com

Recent Posts