Untitled

Estrutura:

- /login
--- index.php
--- login.php

- /new
--- index.php
--- new.php

- database.php

- logoff.php

- valid.php

- index.php


*****************
database.php
*****************

<?php
  session_start();

  // Database
  $database_serv = 'localhost:3307'; // Serv MySQL
  $database_user = 'root'; // User MySQL
  $database_pass = 'usbw'; // Password MySQL
  $database_bd = 'contador'; // Database

  // Table user Database
  $database_table_user = 'user';

  // Connection
  $database_conexBD = mysql_connect($database_serv, $database_user, $database_pass) or die("Could not connect to the server.");
  mysql_set_charset('utf8',$database_conexBD);


*****************
valid.php
*****************

<?php
session_start();
if (!$_SESSION['user']) { header("Location: login/"); }


*****************
logoff.php
*****************

<?php
  session_start();
  session_destroy();
  header("Location: login/");
?>


*****************
user.sql
*****************

CREATE TABLE IF NOT EXISTS `user` (
  `id` int(55) NOT NULL AUTO_INCREMENT,
  `user` text NOT NULL,
  `email` text NOT NULL,
  `pass` text NOT NULL,
  `first_name` text NOT NULL,
  `last_name` text NOT NULL,
  `age` text NOT NULL,
  PRIMARY KEY (`id`)
) ENGINE=InnoDB  DEFAULT CHARSET=latin1 AUTO_INCREMENT=3 ;


*****************
login/index.php
*****************

<!DOCTYPE HTML>
<html>
  <head>
    <meta charset="utf-8">
    <title>Login</title>
  </head>

  <body>
    <form method="post" action="login.php" method="post">
      <div><input type="text" name="user" placeholder="User" autofocus></div>
      <div><input type="password" name="pass" placeholder="Password"></div>
      <div><button type="submit">Login</button></div>
    </form>
    <br>
    <p><a href="../new/">Register</a></p>
  </body>
</html>


*****************
login/login.php
*****************

<?php
  include "../database.php";

  if (!$_POST['user']) { $rec_user = ""; } else { $rec_user = addslashes($_POST['user']); }
  if (!$_POST['pass']) { $rec_pass = ""; } else { $rec_pass = addslashes($_POST['pass']); }

  if (isset($rec_user)) {
    mysql_select_db($database_bd, $database_conexBD) or die("Could not connect to database.");

    $sql = "SELECT * FROM $database_table_user WHERE user = '$rec_user' AND pass = '$rec_pass' LIMIT 1";
    $query = mysql_query($sql);
    $result = mysql_fetch_assoc($query);
    $count = mysql_num_rows($query);

    if ($count == 0) {
      header("Location: index.php?mess=no_user");
    } else {
      $_SESSION['id'] = $result['id'];
      $_SESSION['user'] = $result['user'];
      $_SESSION['email'] = $result['email'];
      $_SESSION['first_name'] = $result['first_name'];
      $_SESSION['last_name'] = $result['last_name'];
      $_SESSION['age'] = $result['age'];

      header("Location: ../index.php");
    }
  }

?>


*****************
new/index.php
*****************

<!DOCTYPE html>
<html>
  <head>
    <meta charset="utf-8">
    <title>New User</title>
  </head>
  <body>
    <h1>New User</h1>
    <form method="post" action="new.php" method="post">
      <div><input type="text" name="first_name" placeholder="First Name"></div>
      <div><input type="text" name="last_name" placeholder="Last Name"></div>
      <div><input type="email" name="email" placeholder="Email"></div>
      <div><input type="text" name="user" autofocus="on" placeholder="Username"></div>
      <div><input type="password" name="pass" placeholder="Password"></div>
      <div><input type="number" name="age" placeholder="Age"></div>
      <div><button type="submit">Save User</button>
    </form>
    <p>After registration, please <a href="../login/">Login</a></p>
  </body>
</html>


*****************
new/new.php
*****************

<?php
  include "../database.php";

  if (!$_POST['user']) { $rec_user = ""; } else { $rec_user = addslashes($_POST['user']); }

  if (isset($rec_user)) {
    mysql_select_db($database_bd, $database_conexBD) or die("Could not connect to database.");

    $rec_user = addslashes($_POST['user']);
    $rec_pass = addslashes($_POST['pass']);
    $rec_email = addslashes($_POST['email']);
    $rec_age = addslashes($_POST['age']);
    $rec_first_name = addslashes($_POST['first_name']);
    $rec_last_name = addslashes($_POST['last_name']);

    $insert = "INSERT INTO $database_table_user (id, user, email, pass, age, first_name, last_name) VALUES (NULL, '$rec_user', '$rec_email', '$rec_pass', '$rec_age', '$rec_first_name', '$rec_last_name')";

    if (mysql_query($insert)) {
      header("Location: index.php?mess=ok");
    } else {
      header("Location: index.php?mess=no");
    }
  }
?>