Alright thanks for that information, now I just need to apply it to the new set of scripts that I have created. The following set allows users to register, login, view their status, and of course an admin can register them. The user edit is a bit barbaric but it works and I couldn't think of any other way to do it.
Code:
<!---registration.php--->
<html>
<head>
<title>User Registration Form</title>
</head>
<body>
<h1>User Registration Form</h1>
<p>This is a simple registration form using php</p>
<form method="post" action="uregsubmit.php">
Name:<input type="text" name="name" />
<br />
Username:<input type="text" name="username" />
<br />
Password:<input type="password" name="password" />
<br />
Email:<input type="text" name="email" />
<br />
<input type="submit" value="Register" />
</form>
</body>
</html>
Code:
<?php
//uregsubmit.php
$dbname = "scripts";
$dbuser = "root";
$dbpass = "";
$dbhost = "localhost";
$link = mysql_connect($dbhost, $dbuser, $dbpass);
if (!$link){
die("Could not connect to the database");
}
mysql_select_db($dbname) or die("Couldn't select database");
$query = "SELECT * FROM users WHERE username='$_POST[username]'";
$results = mysql_query($query, $link);
$row = mysql_fetch_array($results);
if ($row['username'] == $_POST[username]){
echo "Username in use please try another";
} else {
$query = "INSERT INTO users(name, username, password, email, registered, status) values('$_POST[name]','$_POST[username]','$_POST[password]',
'$_POST[email]','0','0')";
mysql_query($query,$link);
mysql_close($link);
print "Thank you for registering please wait for an admin to activate your account.<br />";
print "<a href='login.php'>Login Page</a>";
}
?>
Code:
<!---login.php--->
<html>
<head>
<title>Login Page</title>
</head>
<body>
<h1>Simple Login Script in action</h1>
<p>This script is an extension of the registration.php script. You type in your credentials from registration.php into this form to log
in pending your account has been verified by an admin. The only downfall is the user has to make themselves an admin using phpmyadmin</p>
<form method="post" action="logsubmit.php">
Username:<input type="text" name="username" />
<br />
Password:<input type="password" name="password" />
<br />
<input type="submit" value="Login" />
</form>
</body>
</html>
Code:
<?php
//logsubmit.php
$dbname = "scripts";
$dbuser = "root";
$dbpass = "";
$dbhost = "localhost";
$link = mysql_connect($dbhost, $dbuser, $dbpass);
if (!$link) {
die("Couldn't connect to the database");
}
mysql_select_db($dbname) or die("Couldn't select database");
$query = "SELECT * FROM users WHERE username='$_POST[username]' AND password='$_POST[password]'";
$results = mysql_query($query, $link);
$row = mysql_fetch_array($results);
if ($row['registered'] == 0) {
print "Sorry your account has not yet been activated";
} else {
session_start();
$_SESSION['username'] = $_POST[username];
$_SESSION['status'] = $row['status'];
print "Thank you for logging in ";
print $_SESSION['username'];
print "<br />Please click the following link to see your status";
print "<br /><a href='userstatus.php'>Status</a>";
}
mysql_close($link);
print "<br /><a href='logout.php'>Logout</a>";
?>
Code:
<?php
//userstatus.php
session_start();
print "Hello again ";
print $_SESSION['username'];
print "<br />";
if ($_SESSION['status'] == 1) {
print "You are a regular user.";
print "Since you are a regular user all you can do is sit here.";
}
if ($_SESSION['status'] == 2) {
print "You are an administrator";
print "<br />Since you are an administrator you can edit other users here";
print "<br /><a href='useredit.php'>Edit Users</a>";
}
print "<br /><a href='logout.php'>Logout</a>";
?>
Code:
<?php
//useredit.php
session_start();
if ($_SESSION['status'] == 1) {
print "You do not belong on this page.";
}
if ($_SESSION['status'] == 2){
$dbname = "scripts";
$dbuser = "root";
$dbpass = "";
$dbhost = "localhost";
$link = mysql_connect($dbhost, $dbuser, $dbpass);
if (!$link) {
die("Couldn't connect to the database");
}
mysql_select_db($dbname, $link);
$query = "SELECT * FROM users WHERE registered='0'";
$results = mysql_query($query);
print "<p>Here are the users that have yet to be approved.</p>";
while ($row = mysql_fetch_array($results)) {
print $row['name'] . " " . $row['username'] . " " . $row['password'] . " "
. $row['email'];
print " <a href=" . "useredited.php?registered=yes&uname=" . $row['username'] . ">Register</a><br />";
}
mysql_close($link);
}
print "<br /><a href='logout.php'>Logout</a>";
?>
Code:
<?php
//useredited.php
session_start();
$dbname = "scripts";
$dbuser = "root";
$dbpass = "";
$dbhost = "localhost";
$link = mysql_connect($dbhost, $dbuser, $dbpass);
if (!link) {
die("Couldn't connect to database");
}
mysql_select_db($dbname);
$query = "UPDATE users SET registered='1' WHERE username='$_GET[uname]'";
mysql_query($query, $link);
mysql_close($link);
print $_GET[uname] . " has been registered and can now log in.";
print "<br />Return to the user editor page here. ";
print "<a href='useredit.php'>Edit users</a>";
print "<br />Or you may logout here. ";
print "<a href='logout.php'>Logout</a>";
?>
Code:
<?php
//logout.php
session_start();
session_destroy();
print "You have been successfully logged out.";
?>
. Here is the first one, it is an extremely simple guestbook using php and mysql.
