Posted on by

PHP Login and Remember me Script using Cookie

I was viewing my google analytics account other day and I saw many searches of login with remember me script. Usually I wrote some planned tutorial for php beginners and I was thinking to write a tutorial on cookies but may be another time Login with remember me script is based on cookie. So first you need to know what is cookie. Wikipedia define it as:

An HTTP cookie (also called web cookie, Internet cookie, browser cookie, or simply cookie) is a small piece of data sent from a website and stored on the user’s computer by the user’s web browser while the user is browsing.

Cookie Syntax:

setcookie($name, $value, $expire, $path, $domain, $secure, $httponly);

Parameter Description
$name The name of the cookie.
$value The value of the cookie
$expire The time the cookie expires. Must be in UNIX timestamp
$path The path on the server in which the cookie will be available on. If set to ‘/’, the cookie will be available within the entire domain
$domain The (sub)domain that the cookie is available to
$secure Indicates that the cookie should only be transmitted over a secure HTTPS connection from the client. When set to TRUE, the cookie will only be set if a secure connection exists.
$httponly When TRUE the cookie will be made accessible only through the HTTP protocol

Accessing Cookie:

Super global variable $_COOKIE is used to access cookie like $_COOKE[$name].

login with remember me

What I am going to do:

I will create a login form with email, password and remember me checkbox. If user will submit correct email and password with checked on remember me then I will create a cookie for email and password and create session and redirect user to dashboard.php page.

This tutorial is for beginner and my mainly focus is on cookie and remember me functionality for this i will use md5() function for password. md5() hashing algorithm is now obsolete it is recommend to use password hashing. Visit my post password_hash for registration and login form for better understanding.


PHP Login and Remember me:

Create Database:

1
2
3
 
create database demo;
 

Create MySQL Table:

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
 
CREATE TABLE `tbl_users` (
`id` INT(11) NOT NULL AUTO_INCREMENT,
`user_role_id` INT(11) NULL DEFAULT NULL,
`first_name` VARCHAR(255) NULL DEFAULT NULL,
`last_name` VARCHAR(255) NULL DEFAULT NULL,
`email` VARCHAR(255) NULL DEFAULT NULL,
`password` VARCHAR(255) NULL DEFAULT NULL,
PRIMARY KEY (`id`)
)
COLLATE='latin1_swedish_ci'
ENGINE=InnoDB
AUTO_INCREMENT=5
;
 

Insert Record in Table:

I will use hash of admin123 as password.

1
2
3
 
INSERT INTO `tbl_users` (`id`, `user_role_id`, `first_name`, `last_name`, `email`, `password`) VALUES (1, 1, 'john', 'doe', 'john_doe@example.com', '0192023a7bbd73250516f069df18b500');
 

Database Connection:

1
2
3
4
5
6
7
8
 
$conn = mysqli_connect("localhost","root","","demo");
 
if(!$conn)
{
die(mysqli_error());
}
 

Login Form HTML:

Below is the simple login form. In input field there is a $_COOKIE super global variable in value which will check the value of cookie. If cookie value is already set then it print that value otherwise it will print nothing.

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
 
<form action="<?php echo $_SERVER['PHP_SELF']?>" method="post">
<div>
<input type="text" name="email" placeholder="Enter Email" required value="<?php echo (isset($_COOKIE['wdb_email'])?$_COOKIE['wdb_email']:'')?>">
</div>
<div>
<input type="password" name="password" placeholder="Enter Password" required value="<?php echo (isset($_COOKIE['wdb_email'])?$_COOKIE['wdb_password']:'')?>">
</div>
<div>
<input type="checkbox" name="remember_me" value="1" <?php echo (isset($_COOKIE['wdb_email'])?'checked':'')?>><label>Remember me</label>
</div>
<div>
<input type="submit" name="submit" value="submit">
</div>
 
</form>
 

After Login Submit PHP Code:

When user will press submit button then below code will trigger. First i check email and password must have values then i use md5 for converting password. After that write a query and check user is exist on database or not and get num row. If user exists which means $nuRows is greater than zero. Then I fetch the record and store in $getRow.

$forOneHour is use to create cookie for 1 one hour and then I check the value of $_POST['remember_me'] which means if user checked on remember me checkbox then this value will be 1 and I will create cookies by using setcookie function. Otherwise $_POST['remember_me'] is not set and i wont set cookie. Just create session and redirect user dashboard.php page.

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
 
<?php
if(isset($_POST['submit']))
{
if((isset($_POST['email']) && !empty($_POST['email']))  && (isset($_POST['password']) && !empty($_POST['password'])))
{
$email = trim($_POST['email']);
$password = $_POST['password'];
 
$md5Pass = md5($password);
 
$qry = "select id, user_role_id,first_name, last_name,email  from tbl_users where email = '".$email."' and password = '".$md5Pass."'";
$rs = mysqli_query($conn, $qry);
$numRows = mysqli_num_rows($rs);
 
if($numRows > 1)
{
$getRow = mysqli_fetch_assoc($rs);
//set cookie for one hour
$forOneHour = time() + 3600;
if(isset($_POST['remember_me']) && $_POST['remember_me'] == 1)
{
setcookie("wdb_email",$email,$forOneHour,"/");
setcookie("wdb_password",$password,$forOneHour,"/");
setcookie("wdb_remember_me",$_POST['remember_me'],$forOneHour,"/");
}
else
{
if(isset($_COOKIE['wdb_email']))
{
setcookie("wdb_email","",$forOneHour,"/");
}
if(isset($_COOKIE['wdb_password']))
{
setcookie("wdb_password","",$forOneHour,"/");
}
if(isset($_COOKIE['wdb_remember_me']))
{
setcookie("wdb_remember_me","",$forOneHour,"/");
}
}
$_SESSION = $getRow;
header("location:dashboard.php");
exit;
}
else
{
$errorMsg = "Wrong email or password";
}
 
}
}
 
?>
 

Dashboard.php Page

Dashboard.php has 2 conditions. One is for not accessing directly and second is for logout.

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
 
<?php
session_start();
 
if(!isset($_SESSION['first_name']))
{
header("location:index.php");
exit;
}
 
if(isset($_GET['logout']) && $_GET['logout'] == true)
{
session_destroy();
header("location:index.php");
exit;
}
 
echo "<strong>You are sussessfully login</strong>";
 
?>
 
<br >
<a href="dashboard.php?logout=true">Logout</a>
 

That’s all I hope now are able to create login with remember me script by own. Please note that we will not save secure information like password in cookies. But if we want then it is better to use any salt value or encryption for that.

 

More from WDB24.com

Posted in PHP

Published by Ahsan Zameer

I am a web developer and love to search new stuff on web. Trying different approaches and ideas to make web developing more interesting and enjoyable.

Leave a Reply

Your email address will not be published. Required fields are marked *