KO | EN

GitLite

Minimalist Open Source Repository Search Engine

gitlite — search

#developer-tools #codex #typescript #ai-agents #claude-code #dsh #dsh-plugin #open-source #cli #deepseek-harness #macos #ai-agent

php-login

★ 46 Open GitHub ↗

Simple and secure PHP login system built with PHP, MySQL, jQuery and Bootstrap.

// repository documentation

Was this content helpful?

★ 0 (0 ratings)

![](https://cdn.bailey.pt/phplogin-banner.png)

php-login is a simple and secure login and signup ready made system that will speed up your development. The code is very simple to read and modify, and is built with PHP, MySQL and jQuery (AJAX) using Bootstrap 3 for the form design as well as PHP-Mailer for user account verification and confirmation.

## Installation
### Clone the Repository (recursively to include the PHP-Mailer submodule)
    $ git clone --recursive https://github.com/baiplr/php-login.git

### Creating the MySQL Database

Create database "login" and create the table "members" :

```sql
CREATE TABLE `members` (
  `id` char(23) NOT NULL,
  `username` varchar(65) NOT NULL DEFAULT '',
  `password` varchar(65) NOT NULL DEFAULT '',
  `email` varchar(65) NOT NULL,
  `verified` tinyint(1) NOT NULL DEFAULT '0',
  `mod_timestamp` timestamp NOT NULL DEFAULT CURRENT_TIMESTAMP ON UPDATE CURRENT_TIMESTAMP,
  PRIMARY KEY (`id`),
  UNIQUE KEY `username_UNIQUE` (`username`),
  UNIQUE KEY `id_UNIQUE` (`id`),
  UNIQUE KEY `email_UNIQUE` (`email`)
) ENGINE=InnoDB DEFAULT CHARSET=utf8;

CREATE TABLE `loginAttempts` (
 `IP` varchar(20) NOT NULL,
 `Attempts` int(11) NOT NULL,
 `LastLogin` datetime NOT NULL,
 `Username` varchar(65) DEFAULT NULL,
 `ID` int(11) NOT NULL AUTO_INCREMENT,
 PRIMARY KEY (`ID`)
) ENGINE=InnoDB DEFAULT CHARSET=utf8;
```
### Setup the `login/dbconf.php` file
```php
<?php
 //DATABASE CONNECTION VARIABLES
 $host = "localhost"; // Host name
 $username = "user"; // Mysql username
 $password = "password"; // Mysql password
 $db_name = "login"; // Database name

```

### Setup the `login/config.php` file
Read code comments for a description of each variable

```php
<?php
 //Set this for global site use
 $site_name = 'Test Site';

//Maximum Login Attempts
    $max_attempts = 5;
    //Timeout (in seconds) after max attempts are reached
    $login_timeout = 300;

//ONLY set this if you want a moderator to verify users and not the users themselves, otherwise leave blank or comment out
    $admin_email = '';

//EMAIL SETTINGS
    //SEND TEST EMAILS THROUGH FORM TO https://www.mail-tester.com GENERATED ADDRESS FOR SPAM SCORE
    $from_email = 'youremail@domain.com'; //Webmaster email
    $from_name = 'Test Email'; //"From name" displayed on email

//Find specific server settings at https://www.arclab.com/en/kb/email/list-of-smtp-and-pop3-servers-mailserver-list.html
    $mailServerType = 'smtp';
    //IF $mailServerType = 'smtp'
    $smtp_server = 'smtp.mail.domain.com';
    $smtp_user = 'youremail@domain.com';
    $smtp_pw = 'yourEmailPassword';
    $smtp_port = 465; //465 for ssl, 587 for tls, 25 for other
    $smtp_security = 'ssl';//ssl, tls or ''

//HTML Messages shown before URL in emails (the more
 $verifymsg = 'Click this link to verify your new account!'; //Verify email message
 $active_email = 'Your new account is now active! Click this link to log in!';//Active email message
 //LOGIN FORM RESPONSE MESSAGES/ERRORS
 $signupthanks = 'Thank you for signing up! You will receive an email shortly confirming the verification of your account.';
 $activemsg = 'Your account has been verified! You may now login at <a href="'.$signin_url.'">'.$signin_url.'</a>';

//IGNORE CODE BELOW THIS
```
### Place this code (from `index.php`) at the head of each page :
> *** **Important** *** Checks to see if username $_SESSION variable is set. If not set, redirects to login page.

```php
<?php require "login/loginheader.php"; ?>
```

### Check the Username and the Password using jQuery (Ajax) :

If the user has the right username and password, then the `checklogin.php` will send 'true', register the username and the password in a session, and redirect to `index.php`.
If the username and/or the password are wrong the `checklogin.php` will send "Wrong Username or Password".

###Signup/Login Workflow:
> 1) Create new user using `signup.php` form
> (note: validation occurs both client and server side)
> &nbsp;&nbsp;&nbsp;&nbsp;Validation requires: 
> &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; - Passwords to match and be at least 4 characters
> &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; - Valid email address
> &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; - Unique username
> 2) Password gets hashed and new GUID is generated for User ID
> 3) User gets added to database as unverified
> 4) Email is sent to user email (or $admin_email if set) with verification link
> 5) User (or admin) clicks verification link which sends them to `verifyuser.php` and verifies user in the database
> 6) Verified user may now log in

### Attribution
This script is based upon the original fethica PHP-login script, version 2.0, which can be found [here](https://github.com/therecluse26/PHP-Login/tree/v2.0). PHP-Login 3.0 is maintained by [therecluse26](https://github.com/therecluse26), and this project is a continuation of the v2.0 script.

php-login

Explore Similar Repositories

Was this content helpful?

Recent Feedback

Download README