Using PHP for Password Identification!

RageD · Mar 15, 2006

This is an alternative to Javascript and all other ways of password identification for a page view! You can also use MySQL for multiple kinds of passwords, but if you only want a couple, this is the way to go: (This requires NO MySQL)

PHP:

<?php
// Let's define the page that we will see the login form & page title
$pagetitle = "Page Title Here";
if($page == ""){ ?>
<HTML>
<TITLE><?php echo($pagetitle); ?></TITLE>
<BODY>
<form name="login" method="post" action="?page=login">
Password: <input type=password name="password"><br>
<input type=submit value="Login"><input type=reset>
</form>
</BODY>
</HTML>
<?php
// Let's end that section with the following bracket
}
// Start the login page
if($page == "login"){
// The value '$password' comes from name="password" in the password field
    if($password !== "PasswordHere"){
         echo('Incorrect Password');
         exit;
     }
     else{
          echo('You are now logged in!!  Page content goes here!');
     }
}
?>

-Thanks

-RageD

bbalegere · Mar 17, 2006

Simple but effective.

wackyjoe · Mar 17, 2006

thats preety unsecure.

but for a small site with not much traffic its good...

btw if Globals are turned off...HIGHELY RECCOMEMDED

$page = $_GET['page'];

tm · Mar 17, 2006

Hey,
The script would be good for an admin panel or something similar.
I might like to make a few additions to your script

- add cookies so you won't have to login every time. the 3600 is in seconds - that's an hour. Change if you wish. (86400 is a day).

PHP:

<?php
// Let's define the page that we will see the login form & page title
$pagetitle = "Page Title Here";

setcookie("TestCookie", "hello");
if(empty($_COOKIE['TestCookie'])) { die("Cookies disabled!"); } else { setcookie("TestCookie", "hello", time()-3600); }

if(empty($_COOKIE['adminformpassword'])){ ?>
<HTML>
<TITLE><?php echo($pagetitle); ?></TITLE>
<BODY>
<form name="login" method="post" action="?page=login">
Password: <input type=password name="password"><br>
<input type=submit value="Login"><input type=reset>
</form>
</BODY>
</HTML>
<?php
// Let's end that section with the following bracket
}
// Start the login page
if($page == "login"){
// The value '$password' comes from name="password" in the password field
    $password = $_POST['password'];
    if($password == "YourPasswordHere") {
    setcookie("adminformpassword", md5($password), time()+3600);
    }
    if(md5($password) != $_COOKIE['adminformpassword']){
         echo('Incorrect Password');
         exit;
    }
     else
    {
          echo('You are now logged in!!  Page content goes here!');
     }
}
?>

Jim_ · Mar 17, 2006

Or, you could use a session cookie...

PHP:

<?php
$adminpass = "testpassword";
session_start();
if($_GET['act']=="login"){
  if($_POST['passwordx']==$adminpass){
    $_SESSION['logged_in'] = md5($adminpass);
    echo "Logged in.";
  }
}
if($_GET['act']=="logout"){
  session_unset();
  echo "Logged out.";
}
if(isset($_SESSION['logged_in']) && $_SESSION['logged_in']==md5($adminpass)) {
//admin is logged in
//display page here
} else {
//admin is not logged in, so show login form
echo "<form action=\"admin.php?act=login\" method=\"post\"><input type=\"password\" name=\"passwordx\"><input type=\"submit\" value=\"Login\"></form>";
}
?>

stscac · Mar 17, 2006

This sort of thing would qualify to be in the CODE section of the Programming section, but I also think it is fitting to put in the Webmaster Tutorial section.

-Steve

markkk · Mar 22, 2006

thanks a lot..

sacx13 · Mar 23, 2006

Another simple code

My code is reading the passwords from a simple file. The user and passwords are delimited by comas. Ex
user1,pass1
user2,pass2

PHP:

<?php
 $username=$_POST['username'];
 $password=$_POST['password'];
 $handle = fopen('/etc/php.pas',"r");

while(!feof($handle))
{
$line = fgets($handle,1024);
list($u,$p) = explode(',',$line);

$u = trim($u);
$p = trim($p);
    if ($username!="")
    if ($username==$u && $password==$p)
    {
        // just add your session cookies here and etc.
        header("Location: test.html");
        exit();
    }
}

fclose($handle);
?>

RageD · Mar 24, 2006

Yep

If you wanted to be very technical and secure you could just create a quick MySQL connect script and encrypt everything to a DB... You could use md5 encryption, or whatever you wanted..

-RageD

sacx13 · Mar 31, 2006

For a simple page you dont need a mysql database for authentication ...

Regards

Using PHP for Password Identification!

More options

RageD

VIP Member

bbalegere

Established Member

wackyjoe

Established Member

tm

Established Member

Jim_

Established Member

stscac

A Wealth of KnowledgeVIP Member

markkk

Established Member

sacx13

Established Member

RageD

VIP Member

sacx13

Established Member

Similar threads

We're social

New posts

Auction activity

What non .com extensions have you sold in 2024?

Polls of interest

Popular this week

Community favorite

Popular this month

Blog favorites

Pinned

Appreciation

Agreement