PHP Login Registration Script by using Password_hash() & Password verify() method for Secure login
If you are looking for ways to use the password_hash() method to log in and register in a PHP script. In this tutorial we will discuss how to use the PHP password hash method to secure logins and registrations. This PHP password_hash() method creates a new password hash using an efficient one-way hashing algorithm. This method was first introduced in PHP 5.5 and creates a new password hash with a length of 60 characters. We store this hash password in our database. It is very difficult to hack and can be verified using a password verification method. If you are building an application and want to implement a strong login for your application, you can use this password_hash() method for a strong registration for your application. When we register with this type of registration, the password is hashed with the password_hash() method and stored in the database. When we log in, this type of hash password can be confirmed using the password_verify() method.
This is a complete system to exit the registration system using the password_hash() method. If a new user enters this type of system, this system generates a password hash from the password he entered when logging in with the password_hash() method. This method produces 60 characters with a password hash using the password hashing algorithm. After we save this hash password in the database and the user enters, enter your password with this user after confirmation. Because the user has entered a password with a password hash using the password_verify() method, this method checks this Password hash with a normal password string. If the two passwords match, true is returned to indicate the password match. However, if you adopt this method again incorrectly means that the passwords do not match. This is the best way to prevent password hacking.
If you want to learn Login Registration with Jquery AJAX in PHP Mysql without page refresh
- Create Database connection
<?php
// Database configuration
$dbHost = "localhost";
$dbUsername = "root";
$dbPassword = "";
$dbName = "registration";
// Create database connection
$con = new mysqli($dbHost, $dbUsername, $dbPassword, $dbName);
// Check connection
if ($con->connect_error) {
die("Connection failed: " . $con->connect_error);
}
?>2. Create Registration HTML Form and PHP Cod
index.php
<?php
// Include database connectivity
include_once('config.php');
if (isset($_POST['submit'])) {
$errorMsg = "";
$fullname = mysqli_real_escape_string($con, $_POST['fullname']);
$username = mysqli_real_escape_string($con, $_POST['username']);
$email = mysqli_real_escape_string($con, $_POST['email']);
$password = mysqli_real_escape_string($con, $_POST['password']);
$password = password_hash($password, PASSWORD_DEFAULT);
$sql = "SELECT * FROM students WHERE email = '$email'";
$execute = mysqli_query($con, $sql);
if (!filter_var($email, FILTER_VALIDATE_EMAIL)) {
$errorMsg = "Email in not valid try again";
}else if(strlen($password) < 6) {
$errorMsg = "Password should be six digits";
}else if($execute->num_rows == 1){
$errorMsg = "This Email is already exists";
}else{
$query= "INSERT INTO students(fullname,username,email,password)
VALUES('$fullname','$username','$email','$password')";
$result = mysqli_query($con, $query);
if ($result == true) {
header("Location:login.php");
}else{
$errorMsg = "You are not Registred..Please Try again";
}
}
}
?>
<!Doctype html>
<html lang="en">
<head>
<meta charset="utf-8">
<title>PHP Password hash Registration in PHP Mysql</title>
<meta name="viewport" content="width=device-width, initial-scale=1">
<link rel="stylesheet" href="https://maxcdn.bootstrapcdn.com/bootstrap/4.5.0/css/bootstrap.min.css">
<script src="https://ajax.googleapis.com/ajax/libs/jquery/3.5.1/jquery.min.js"></script>
<script src="https://maxcdn.bootstrapcdn.com/bootstrap/4.5.0/js/bootstrap.min.js"></script>
</head>
<body>
<div class="container" style="margin-top:50px">
<h1 style="text-align:center;">PHP Password_hash Registration in PHP Mysql</h1><br>
<div class="row">
<div class="col-md-4"></div>
<div class="col-md-4">
<?php
if (isset($errorMsg)) {
echo "<div class='alert alert-danger alert-dismissible'>
<button type='button' class='close' data-dismiss='alert'>×</button>
$errorMsg
</div>";
}
?>
<form action="" method="POST">
<div class="form-group">
<input type="text" class="form-control" name="fullname" placeholder="Full Name" required="">
</div>
<div class="form-group">
<input type="text" class="form-control" name="username" placeholder="Username" required="">
</div>
<div class="form-group">
<input type="email" class="form-control" name="email" placeholder="Email" required="">
</div>
<div class="form-group">
<input type="password" class="form-control" name="password" placeholder="Password" required="">
</div>
<p>If you have account <a href="login.php">Login</a></p>
<input type="submit" class="btn btn-warning btn btn-block" name="submit" value="Sign Up">
</form>
</div>
</div>
</div>
</body>
</html>Output
3. Create Login HTML Form and PHP Code
login.php
<?php
session_start();
if (isset($_SESSION['id'])) {
header("Location:profile.php");
}
// Include database connectivity
include_once('config.php');
if (isset($_POST['submit'])) {
$errorMsg = "";
$email = mysqli_real_escape_string($con, $_POST['email']);
$password = mysqli_real_escape_string($con, $_POST['password']);
if (!empty($email) || !empty($password)) {
$query = "SELECT * FROM students WHERE email = '$email'";
$result = mysqli_query($con, $query);
if(mysqli_num_rows($result) == 1){
while ($row = mysqli_fetch_assoc($result)) {
if (password_verify($password, $row['password'])) {
$_SESSION['id'] = $row['id'];
$_SESSION['fullname'] = $row['fullname'];
header("Location:profile.php");
}else{
$errorMsg = "Email or Password is invalid";
}
}
}else{
$errorMsg = "No user found on this email";
}
}else{
$errorMsg = "Email and Password is required";
}
}
?>
<!Doctype html>
<html lang="en">
<head>
<meta charset="utf-8">
<title>PHP Password hash Login in PHP Mysql</title>
<meta name="viewport" content="width=device-width, initial-scale=1">
<link rel="stylesheet" href="https://maxcdn.bootstrapcdn.com/bootstrap/4.5.0/css/bootstrap.min.css">
<script src="https://ajax.googleapis.com/ajax/libs/jquery/3.5.1/jquery.min.js"></script>
<script src="https://maxcdn.bootstrapcdn.com/bootstrap/4.5.0/js/bootstrap.min.js"></script>
</head>
<body>
<div class="container" style="margin-top:50px">
<h1 style="text-align: center;">PHP Password_hash Login in PHP Mysql</h1><br>
<div class="row">
<div class="col-md-4"></div>
<div class="col-md-4" style="margin-top:20px">
<?php
if (isset($errorMsg)) {
echo "<div class='alert alert-danger alert-dismissible'>
<button type='button' class='close' data-dismiss='alert'>×</button>
$errorMsg
</div>";
}
?>
<form action="" method="POST">
<div class="form-group">
<input type="email" class="form-control" name="email" placeholder="Email">
</div>
<div class="form-group">
<input type="password" class="form-control" name="password" placeholder="Password">
</div>
<p>Are you new user? <a href="index.php">Sign Up</a></p>
<input type="submit" class="btn btn-warning btn btn-block" name="submit" value="Login">
</form>
</div>
</div>
</div>
</body>
</html>Output
4. Create User Profile Page after Login Successful
profile.php
<?php
session_start();
if (!isset($_SESSION['id'])) {
header("Location:login.php");
}
?>
<!Doctype html>
<html lang="en">
<head>
<meta charset="utf-8">
<title>User Profile Page</title>
<meta name="viewport" content="width=device-width, initial-scale=1">
<link rel="stylesheet" href="https://maxcdn.bootstrapcdn.com/bootstrap/4.5.0/css/bootstrap.min.css">
<script src="https://ajax.googleapis.com/ajax/libs/jquery/3.5.1/jquery.min.js"></script>
<script src="https://maxcdn.bootstrapcdn.com/bootstrap/4.5.0/js/bootstrap.min.js"></script>
</head>
<body>
<div class="container" style="margin-top:50px">
<h1 style="text-align:center;">User Profile Page</h1><br>
<div class="row">
<h5>Hello, <?php echo ucwords($_SESSION['fullname']); ?> <small><a href="logout.php">Logout</a></small></h5>
</div>
</div>
</body>
</html>include_once('config.php'); session_start(); session_destroy(); session_unset($_SESSION['id']); session_unset($_SESSION['fullname']); header("Location:login.php");
You can always support by sharing on social media or recommending my blog to your friends and colleagues.
If you have any suggestions / problems about this tutorial, please comment on the form below.😊
PHP Login Registration Script by using Password_hash() & Password verify() method for Secure login
Originally published at https://www.webscodex.com on August 1, 2020.