jaygtel wrote: How can I do this in my version of Dreamweaver CC 2017? |
This can be as hard as you like or as easy as you like. Assuming your server has php5.5 or above enabled you can use the password_hash and password_verify php functions.
Example code php/mysqli (scroll below). You need 3 columns in your database - id, username and password. Make sure the username is set to var(50) and the password is set to var(150). The id should be the primary key and set to int(11)
First you need to hash the password/s as you should not store unencrypted passwords in your database for security reasons.
To do this, if you are not going to create a registration page, you can insert the line of code below into a php page, run it in the browser which will return the hashed password which in this case is "SecretPassword"
<?php echo password_hash("SecretPassword", PASSWORD_BCRYPT); ?>
When you have the hashed password you can copy it and paste it into the database password field, repeat operation for each user using a different password. The reason you should have a registration page, if you think you wlll have more than a handful of users, is that you can check to see that the same password is not being used again.
Once you have your database informatuon set up copy the LOGIN PAGE code below and paste into a php file and save to your site folder as login.php - Replace 'server_name, username, password, database_name' in the database connection string with those of your own.
The code is querying a table in the database named 'users' - 'SELECT * FROM users' - replace with your database table name.
Change the page see code below (header('Location: http://www.bbc.co.uk');) where you wish successful logins to be directed, can be a page in your site folder.
That's it. If you have followed the instrcutions you should not have a working login page.
<!-------------------------------------------------------------- LOGIN PAGE --------------------------------------------------->
<?php session_start() ?>
<?php $conn = new mysqli('server_name' , 'username' , 'password , 'database_name'); ?>
<?php
if(isset($_POST['submit'])) {
$username = $conn->real_escape_string(trim($_POST['username']));
$password = $conn->real_escape_string(trim($_POST['password']));
$get_users = $conn->query('SELECT * FROM users') or die($conn->error);
while($row = $get_users->fetch_assoc()) {
if ($row['username'] == $username && password_verify($password, $row['password'])) {
$_SESSION['username'] = $username;
$_SESSION['password'] = $password;
header('Location: http://www.bbc.co.uk');
}
else {
$response = "Sorry you do not have permission to access this website";
}
}
}
?>
<!DOCTYPE html>
<html>
<head>
<meta charset="UTF-8" />
<title>Secure Login</title>
</head>
<body>
<?php
if(isset($response)) {
echo $response;
}
?>
<form id="login" name="login" method="post" action="">
<label>Username</label><br />
<input type="text" name="username" id="username" value=""/><br />
<label>Password</label><br />
<input type="text" name="password" id="password" value=""/><br />
<input type="submit" name="submit" id="submit" value="Submit" />
</form>
</body>
</html>
<!-------------------------------------------------------------- END LOGIN PAGE --------------------------------------------------->
IMPORTANT: The piece of code below NEEDS to go at the very start of each page that you wish to be securely protected:
<?php session_start(); ?>
<?php
if(!isset($_SESSION['username'])) {
header('Location: login.php');
}
?>
1 Correct answer
5
Replies
AdChoices