PHP Signup, Encrypted Login & User Management

Introduction to PHP Signup, Encrypted Login & User Management Tutorial

In this tutorial, we will be creating a comprehensive PHP-based system for user registration, login, and management. This system will include features such as:

• User registration with email verification
• Secure login with password hashing and salting
• User profile management
• Admin dashboard for managing users
• Password recovery feature

This tutorial assumes that you have a basic understanding of PHP and SQL. If you're new to PHP, I recommend starting with some beginner-friendly resources and then coming back to this tutorial.

Prerequisites

• PHP 7.2 or higher
• MySQL 5.7 or higher
• A code editor or IDE (e.g. Sublime Text, Atom, Visual Studio Code)
• A web server (e.g. Apache, Nginx)

Database Setup

Before we begin, we need to create a database for our system. Create a new MySQL database and run the following SQL queries to create the necessary tables:

CREATE TABLE users (
    id INT PRIMARY KEY AUTO_INCREMENT,
    username VARCHAR(50) NOT NULL,
    email VARCHAR(100) NOT NULL,
    password VARCHAR(255) NOT NULL,
    created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP,
    updated_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP ON UPDATE CURRENT_TIMESTAMP
);

CREATE TABLE sessions (
    id INT PRIMARY KEY AUTO_INCREMENT,
    user_id INT NOT NULL,
    session_key VARCHAR(255) NOT NULL,
    created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP,
    updated_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP ON UPDATE CURRENT_TIMESTAMP,
    FOREIGN KEY (user_id) REFERENCES users(id)
);

Part 1: User Registration

In this part, we will create a user registration form and process the submitted data.

Step 1: Create the User Registration Form

Create a new PHP file called register.php and add the following code:

<?php

// Check if the form has been submitted
if ($_SERVER['REQUEST_METHOD'] == 'POST') {
    // Get the submitted data
    $username = $_POST['username'];
    $email = $_POST['email'];
    $password = $_POST['password'];
    $confirm_password = $_POST['confirm_password'];

    // Validate the data
    if (!preg_match('/^[a-zA-Z0-9_]+$/', $username)) {
        $errors[] = 'Invalid username';
    }
    if (!filter_var($email, FILTER_VALIDATE_EMAIL)) {
        $errors[] = 'Invalid email';
    }
    if (strlen($password) < 8) {
        $errors[] = 'Password must be at least 8 characters';
    }
    if ($password!= $confirm_password) {
        $errors[] = 'Passwords do not match';
    }

    // If there are no errors, create the user
    if (empty($errors)) {
        // Hash the password using bcrypt
        $hashed_password = password_hash($password, PASSWORD_BCRYPT);

        // Insert the user into the database
        $query = "INSERT INTO users (username, email, password) VALUES ('$username', '$email', '$hashed_password')";
        $result = mysqli_query($conn, $query);

        if ($result) {
            // Send a verification email
            $subject = 'Verify your email address';
            $message = 'Hello '. $username. ', please click this link to verify your email address: http://yourwebsite.com/verify/'. $email;
            mail($email, $subject, $message);

            // Redirect to the login page
            header('Location: login.php');
            exit;
        } else {
            $errors[] = 'Error creating user';
        }
    }
}

// Display the registration form
?>

<form action="<?php echo $_SERVER['PHP_SELF'];?>" method="post">
    <label for="username">Username:</label>
    <input type="text" id="username" name="username"><br><br>
    <label for="email">Email:</label>
    <input type="email" id="email" name="email"><br><br>
    <label for="password">Password:</label>
    <input type="password" id="password" name="password"><br><br>
    <label for="confirm_password">Confirm Password:</label>
    <input type="password" id="confirm_password" name="confirm_password"><br><br>
    <input type="submit" value="Register">
</form>

Step 2: Process the Registration Form

In this step, we will process the submitted data and create the user in the database.

Step 3: Send a Verification Email

In this step, we will send a verification email to the user's email address.

Part 2: User Login

In this part, we will create a user login form and process the submitted data.

Step 1: Create the User Login Form

Create a new PHP file called login.php and add the following code:

<?php

// Check if the form has been submitted
if ($_SERVER['REQUEST_METHOD'] == 'POST') {
    // Get the submitted data
    $email = $_POST['email'];
    $password = $_POST['password'];

    // Validate the data
    if (!filter_var($email, FILTER_VALIDATE_EMAIL)) {
        $errors[] = 'Invalid email';
    }
    if (strlen($password) < 8) {
        $errors[] = 'Password must be at least 8 characters';
    }

    // If there are no errors, log the user in
    if (empty($errors)) {
        // Query the database to get the user's information
        $query = "SELECT * FROM users WHERE email = '$email'";
        $result = mysqli_query($conn, $query);
        $user = mysqli_fetch_assoc($result);

        // Check if the password is correct
        if (password_verify($password, $user['password'])) {
            // Start a session
            session_start();
            $_SESSION['user_id'] = $user['id'];
            $_SESSION['username'] = $user['username'];

            // Redirect to the dashboard
            header('Location: dashboard.php');
            exit;
        } else {
            $errors[] = 'Invalid email or password';
        }
    }
}

// Display the login form
?>

<form action="<?php echo $_SERVER['PHP_SELF'];?>" method="post">
    <label for="email">Email:</label>
    <input type="email" id="email" name="email"><br><br>
    <label for="password">Password:</label>
    <input type="password" id="password" name="password"><br><br>
    <input type="submit" value="Login">
</form>

Step 2: Log the User In

In this step, we will log the user in and start a session.

Step 3: Display the Dashboard

In this step, we will display the dashboard for the user.

Part 3: User Profile Management

In this part, we will create a user profile management system.

Step 1: Create the User Profile Form

Create a new PHP file called profile.php and add the following code:

<?php

// Check if the user is logged in
if (!isset($_SESSION['user_id'])) {
    header('Location: login.php');
    exit;
}

// Get the user's information
$query = "SELECT * FROM users WHERE id = '". $_SESSION['user_id']. "'";
$result = mysqli_query($conn, $query);
$user = mysqli_fetch_assoc($result);

// Display the profile form
?>

<form action="<?php echo $_SERVER['PHP_SELF'];?>" method="post">
    <label for="username">Username:</label>
    <input type="text" id="username" name="username" value="<?php echo $user['username'];?>"><br><br>
    <label for="email">Email:</label>
    <input type="email" id="email" name="email" value="<?php echo $user['email'];?>"><br><br>
    <input type="submit" value="Update Profile">
</form>

Step 2: Update the User's Information

In this step, we will update the user's information in the database.

Step 3: Display the Updated Profile

In this step, we will display the updated profile information.

Part 4: Admin Dashboard

In this part, we will create an admin dashboard to manage users.

Step 1: Create the Admin Dashboard

Create a new PHP file called admin.php and add the following code:

<?php

// Check if the user is an admin
if (!isset($_SESSION['user_id']) || $_SESSION['user_id']!= 1) {
    header('Location: login.php');
    exit;
}

// Get all users
$query = "SELECT * FROM users";
$result = mysqli_query($conn, $query);

// Display the admin dashboard
?>

<table>
    <tr>
        <th>Username</th>
        <th>Email</th>
        <th>Actions</th>
    </tr>
    <?php while ($user = mysqli_fetch_assoc($result)) {?>
    <tr>
        <td><?php echo $user['username'];?></td>
        <td><?php echo $user['email'];?></td>
        <td>
            <a href="edit.php?id=<?php echo $user['id'];?>">Edit</a>
            <a href="delete.php?id=<?php echo $user['id'];?>">Delete</a>
        </td>
    </tr>
    <?php }?>
</table>

Step 2: Edit a User

In this step, we will create a form to edit a user's information.

Step 3: Delete a User

In this step, we will delete a user from the database.

Conclusion

In this tutorial, we have created a comprehensive PHP-based system for user registration, login, and management. We have covered topics such as password hashing and salting, session management, and user profile management. We have also created an admin dashboard to manage users. This system is secure and scalable, and can be used in a variety of applications.

Next Steps

• Implement additional features such as password recovery and two-factor authentication.
• Improve the user interface and user experience.
• Integrate with other systems such as email and social media.
• Test the system thoroughly for security vulnerabilities.

I hope this tutorial has been helpful in creating a comprehensive PHP-based system for user registration, login, and management. If you have any questions or need further assistance, please don't hesitate to ask.