PHP Session Example

Previous post was about PHP Session There explained about session its purpose and syntax in detail. Lets see one good example of session.

User login system
1. connection.php
This page is used to establish database connection from application.

<!--?php
    $con = new mysqli("localhost","root","","session");
?-->

<!--?php

$con = new mysqli("localhost","root","","session");

?-->

2. index.php
This page retrives the user detail from database

<!--?php
    include "header.php";
    include "connection.php";
	if($_POST[em])
	{
		$sql = "select * from `user` where `email`='$_POST[em]' and `password`='$_POST[pw]'";
		$res = $con--->query($sql);
		$num = $res-&gt;num_rows;
		if($num!=0)
		{
			$row = $res-&gt;fetch_array();
            			$_SESSION[userid] = $row[id];
			$_SESSION[chk]    = true;
            			header("location:profile.php");  //redirect one PHP file to another PHP file
		}
		else
		{
			echo "Login Fail";
		}

	}
?&gt;

<!--?php

include "header.php";

include "connection.php";

if($_POST[em])

{

$sql = "select * from `user` where `email`='$_POST[em]' and `password`='$_POST[pw]'";

$res = $con--->query($sql);

$num = $res->num_rows;

if($num!=0)

{

$row = $res->fetch_array();

$_SESSION[userid] = $row[id];

$_SESSION[chk] = true;

header("location:profile.php"); //redirect one PHP file to another PHP file

}

else

{

echo "Login Fail";

}

New User

<!--?php
    include "connection.php";
	if($_POST[em])
	{
$sql = "INSERT INTO `user`(`id`, `name`, `address`, `phone`, `email`, `password`) VALUES ('','$_POST[nm]','$_POST[add]','$_POST[ph]','$_POST[em]','$_POST[pw]')";
		$con--->query($sql);
		header("location:index.php");
	}
?&gt;

<!--?php

include "connection.php";

if($_POST[em])

{

$sql = "INSERT INTO `user`(`id`, `name`, `address`, `phone`, `email`, `password`) VALUES ('','$_POST[nm]','$_POST[add]','$_POST[ph]','$_POST[em]','$_POST[pw]')";

$con--->query($sql);

header("location:index.php");

}

Already Register

4. checking.php
Check whether the user is in session or not

<!--?php
    session_start();
	if($_SESSION[chk]!=true)
	{
		header("location:index.php");
	}
?-->

<!--?php

session_start();

if($_SESSION[chk]!=true)

{

header("location:index.php");

}

?-->

5. profile.php
This page displays the user information to page

<!--?php
    include "header.php";
    include "connection.php";
    include "checking.php";
	
		$sql = "select * from `user` where `id`='$_SESSION[userid]'";
		$res = $con--->query($sql);
		$row = $res-&gt;fetch_array();
		echo "

<!--?php

include "header.php";

include "connection.php";

include "checking.php";

$sql = "select * from `user` where `id`='$_SESSION[userid]'";

$res = $con--->query($sql);

$row = $res->fetch_array();

echo "

$row[name]

$row[address]

$row[phone]

$row[email]

";
		
		echo "
		      <a href="change.php">Change Password</a>";
	
?&gt;

echo "

<a href="change.php">Change Password</a>";

6. header.php
This page starts the session and show link login or logout bases on user session created or not

<!--?php
	session_start();
?-->

<!--?php

session_start();

?-->

7.logout.php
This page is used to destroy the session

<!--?php
    session_start();
	session_destroy();
	header("location:index.php");
?-->

<!--?php

session_start();

session_destroy();

header("location:index.php");

?-->

8. change.php
This page is used to change the user password

<!--?php
    session_start();
    include "connection.php";
	if($_POST[np])
	{
		$sql = "select * from `user` where `password`='$_POST[op]' and `id`='$_SESSION[userid]'";
		$res = $con--->query($sql);
		$num = $res-&gt;num_rows;
		if($num!=0)
		{
			if($_POST[np]==$_POST[cp])
			{
				$sql1 = "update `user` set `password` = '$_POST[np]' where `id`='$_SESSION[userid]'";
				$con-&gt;query($sql1);
				header("location:logout.php");
			}
			else
			{
				echo "Password Does not Matched";
			}
		}
		else
		{
			echo "Current Password Wrong";
		}
	}
?&gt;

<!--?php

session_start();

include "connection.php";

if($_POST[np])

{

$sql = "select * from `user` where `password`='$_POST[op]' and `id`='$_SESSION[userid]'";

$res = $con--->query($sql);

$num = $res->num_rows;

if($num!=0)

{

if($_POST[np]==$_POST[cp])

{

$sql1 = "update `user` set `password` = '$_POST[np]' where `id`='$_SESSION[userid]'";

$con->query($sql1);

header("location:logout.php");

}

else

{

echo "Password Does not Matched";

}

else

{

echo "Current Password Wrong";

}

Profile

Name-
Address-
Phone-
Email-
Password

Current Password-
New Password-
Confirm Password-