User Login and Registration with Forgot Password using PHP and Mysql

Posted On: April 29, 2020
Posted By: Developer Guidance
Comments: 2

In this tutorial we create the user registration and login process using PHP
and the backend we use MYSQL.

User Login and Registration with Forgot Password tutorial as below

The first thing we’ll need to do is set up our database . In this tutorial we have the following six pages we need named as:

register.php
index.php(login.php)
logincheck.php
dashboard.php
forgotpassword.php
resetpassword.php

Create a database called test. In the test database, add a table called user. The users table will take the following six fields:

id
firstname
lastname
email
password
token

database

MySQL

CREATE TABLE `user` (
  `id` int(11) NOT NULL,
  `firstname` varchar(255) NOT NULL,
  `lastname` varchar(255) NOT NULL,
  `email` varchar(255) NOT NULL,
  `password` varchar(255) NOT NULL,
  `token` varchar(255) NOT NULL
) ENGINE=InnoDB DEFAULT CHARSET=latin1;

CREATE TABLE `user` (

`id` int(11) NOT NULL,

`firstname` varchar(255) NOT NULL,

`lastname` varchar(255) NOT NULL,

`email` varchar(255) NOT NULL,

`password` varchar(255) NOT NULL,

`token` varchar(255) NOT NULL

) ENGINE=InnoDB DEFAULT CHARSET=latin1;

Now we create register.php. Where we form by which user can fill the details. The form have the following fields :

Firstname
Lastname
Email
Password
Register Button

Register.php

PHP

	if (isset($_POST["register"])) {
        $connection = new mysqli("localhost", "root", "", "test");

		$firstname = $connection->real_escape_string($_POST["firstname"]);  		
		$lastname = $connection->real_escape_string($_POST["lastname"]);  				
		$email = $connection->real_escape_string($_POST["email"]);  
		$password = sha1($connection->real_escape_string($_POST["password"])); 
			
		$data = $connection->query("INSERT INTO user (firstname, lastname, email, password) VALUES ('$firstname', '$lastname', '$email', '$password')");

    	if ($data === false)
        	echo "Connection error!";
    	else
    	   echo "Your have been signed up - please now Log In";
	}	             
<!DOCTYPE html>
<html lang="en">
<head>
	<title>Registration Using PHP and Mysql</title>
	<meta charset="UTF-8">
	<meta name="viewport" content="width=device-width, initial-scale=1">
<!--===============================================================================================-->	
	<link rel="icon" type="image/png" href="images/icons/favicon.ico"/>
<!--===============================================================================================-->
	<link rel="stylesheet" href="https://maxcdn.bootstrapcdn.com/bootstrap/4.0.0/css/bootstrap.min.css" integrity="sha384-Gn5384xqQ1aoWXA+058RXPxPg6fy4IWvTNh0E263XmFcJlSAwiGgFAW/dAiS6JXm" crossorigin="anonymous">
<!--===============================================================================================-->

<!--===============================================================================================-->
	<link rel="stylesheet" type="text/css" href="https://cdnjs.cloudflare.com/ajax/libs/material-design-iconic-font/2.2.0/css/material-design-iconic-font.min.css">

	<link rel="stylesheet" type="text/css" href="http://developerguidance.com/contacts/css/main.css">
<!--===============================================================================================-->
</head>
<body>
	
	<div class="limiter">
		<div class="container-login100" style="background-color: #FFF;">
			<div class="wrap-login100">
				<form action="register.php" method="post" class="login100-form validate-form">
					<span class="login100-form-logo">
						DG
					</span>

					<span class="login100-form-title p-b-34 p-t-27">
						Registration 
					</span>

					<div class="wrap-input100 validate-input" data-validate = "Enter First Name">
						<input class="input100" type="text" name="firstname" placeholder="First Name">
						<span class="focus-input100" data-placeholder="&#xf207;"></span>
					</div>
					<div class="wrap-input100 validate-input" data-validate = "Enter Last Name">
						<input class="input100" type="text" name="lastname" placeholder="Last Name">
						<span class="focus-input100" data-placeholder="&#xf207;"></span>
					</div>

					<div class="wrap-input100 validate-input" data-validate = "Enter Email">
						<input class="input100" type="email" name="email" placeholder="Email" autocomplete="off">
						<span class="focus-input100" data-placeholder="&#xf15a;"></span>
					</div>

					<div class="wrap-input100 validate-input" data-validate="Enter password">
						<input class="input100" type="password" name="password" placeholder="Password" autocomplete="off">
						<span class="focus-input100" data-placeholder="&#xf191;"></span>
					</div>

					<div class="contact100-form-checkbox">
						<input class="input-checkbox100" id="ckb1" type="checkbox" name="remember-me">
						<label class="label-checkbox100" for="ckb1">
							Remember me
						</label>
					</div>
					<div class="container-login100-form-btn">
						<input type="submit" name="register" value="Register" class="login100-form-btn">
						</button>
					</div>

					<div class="text-center p-t-90">
						<a class="txt1" href="#">
							Forgot Password?
						</a>
					</div>
				</form>
			</div>
		</div>
	</div>
	
</body>
</html>

if (isset($_POST["register"])) {

$connection = new mysqli("localhost", "root", "", "test");

$firstname = $connection->real_escape_string($_POST["firstname"]);

$lastname = $connection->real_escape_string($_POST["lastname"]);

$email = $connection->real_escape_string($_POST["email"]);

$password = sha1($connection->real_escape_string($_POST["password"]));

$data = $connection->query("INSERT INTO user (firstname, lastname, email, password) VALUES ('$firstname', '$lastname', '$email', '$password')");

if ($data === false)

echo "Connection error!";

else

echo "Your have been signed up - please now Log In";

}

<!DOCTYPE html>

<head>

<title>Registration Using PHP and Mysql</title>

</head>

<body>

</span>

Registration

</span>

</div>

</div>

</div>

</div>

Remember me

</label>

</div>

</button>

</div>

Forgot Password?

</a>

</div>

</form>

</div>

</body>

</html>

for login we use index.php.
The form have the following fields :

email
password

index.php

PHP

session_start();

if (isset($_SESSION["email"]) && isset($_SESSION["loggedIn"])){
	header("Location: dashboard.php");
	exit();
}

if (isset($_POST['login'])){
	$connection= new mysqli("localhost", "root","", "test");

	$email = $connection->real_escape_string($_POST["email"]);
	$password = sha1($connection->real_escape_string($_POST["password"]));
	$data= $connection->query("SELECT firstname FROM user WHERE email='$email' AND password='$password'");
	
	if ($data->num_rows > 0){
		$_SESSION["email"] = $email;
		$_SESSION["loggedIn"] = 1;

		
		header('Location: dashboard.php');
		exit();
	}else{
		echo "incorrect";
	}


}
<!DOCTYPE html>
<html lang="en">
<head>
	<title>Login Using PHP and Mysql</title>
	<meta charset="UTF-8">
	<meta name="viewport" content="width=device-width, initial-scale=1">
<!--===============================================================================================-->	
	<link rel="icon" type="image/png" href="images/icons/favicon.ico"/>
<!--===============================================================================================-->
	<link rel="stylesheet" href="https://maxcdn.bootstrapcdn.com/bootstrap/4.0.0/css/bootstrap.min.css" integrity="sha384-Gn5384xqQ1aoWXA+058RXPxPg6fy4IWvTNh0E263XmFcJlSAwiGgFAW/dAiS6JXm" crossorigin="anonymous">
<!--===============================================================================================-->

<!--===============================================================================================-->
	<link rel="stylesheet" type="text/css" href="https://cdnjs.cloudflare.com/ajax/libs/material-design-iconic-font/2.2.0/css/material-design-iconic-font.min.css">

	<link rel="stylesheet" type="text/css" href="http://developerguidance.com/contacts/css/main.css">
<!--===============================================================================================-->
</head>
<body>
	
	<div class="limiter">
		<div class="container-login100" style="background-color: #FFF;">
			<div class="wrap-login100">
				<form class="login100-form validate-form" action="index.php" method="POST">
					<span class="login100-form-logo">
						DG
					</span>

					<span class="login100-form-title p-b-34 p-t-27">
						Log in
					</span>

					<div class="wrap-input100 validate-input" data-validate = "Enter username">
						<input class="input100" type="email" name="email" placeholder="Email">
						<span class="focus-input100" data-placeholder="&#xf207;"></span>
					</div>

					<div class="wrap-input100 validate-input" data-validate="Enter password">
						<input class="input100" type="password" name="password" placeholder="Password">
						<span class="focus-input100" data-placeholder="&#xf191;"></span>
					</div>

					<div class="contact100-form-checkbox">
						<input class="input-checkbox100" id="ckb1" type="checkbox" name="remember-me">
						<label class="label-checkbox100" for="ckb1">
							Remember me
						</label>
					</div>

					<div class="container-login100-form-btn">
						<input class="login100-form-btn" type="submit" name="login" value="Log In">
					</div>

					<div class="text-center p-t-90">
						<a class="txt1" href="#">
							Forgot Password?
						</a>
					</div>
				</form>
			</div>
		</div>
	</div>
	


</body>
</html>

session_start();

if (isset($_SESSION["email"]) && isset($_SESSION["loggedIn"])){

header("Location: dashboard.php");

exit();

}

if (isset($_POST['login'])){

$connection= new mysqli("localhost", "root","", "test");

$email = $connection->real_escape_string($_POST["email"]);

$password = sha1($connection->real_escape_string($_POST["password"]));

$data= $connection->query("SELECT firstname FROM user WHERE email='$email' AND password='$password'");

if ($data->num_rows > 0){

$_SESSION["email"] = $email;

$_SESSION["loggedIn"] = 1;

header('Location: dashboard.php');

exit();

}else{

echo "incorrect";

}

<!DOCTYPE html>

<head>

<title>Login Using PHP and Mysql</title>

</head>

<body>

</span>

</span>

</div>

</div>

Remember me

</label>

</div>

</div>

Forgot Password?

</a>

</div>

</form>

</div>

</body>

</html>

To check the login process we create loginCheck.php. In this it store the session of the user if user come again or reload the page it leads to dashboard .php

loginCheck.php

session_start();

if (!isset($_SESSION["email"]) || !isset($_SESSION["loggedIn"])){
	header("location: index.php");
	exit();
}

session_start();

if (!isset($_SESSION["email"]) || !isset($_SESSION["loggedIn"])){

header("location: index.php");

exit();

}

dashboard.php

require "loginCheck.php"

<!DOCTYPE html>
<html>
<head>
	<title>Dashobaord</title>
</head>
<body>
	Welcome <?php echo $_SESSION["email"];?>
</body>
</html>

require "loginCheck.php"

<!DOCTYPE html>

<html>

<head>

<title>Dashobaord</title>

</head>

<body>

Welcome {{urvanov-syntax-highlighter-internal:0}}

</body>

</html>

Now we proceed the tutorial how we can get my password if i forgot.
When user forgot the password,User get a link by which a auto generated password is created as shown below

forgotpassword.php

PHP

	if (isset($_POST["forgotpass"])){
		$connection= new mysqli("localhost", "root","", "test");
		$email = $connection->real_escape_string($_POST["email"]);

		$data = $connection->query("SELECT id FROM user WHERE email='$email'");

		if ($data->num_rows > 0){
			$str= "0123456789qwertyyuiokkgffasdasdsvcvd";
			$str = str_shuffle($str);
			$str = substr($str, 0, 9);
			$url = "http://domain.com/resetpassword.php?token=$str&email=$email";

			mail($email, "Reset Password", "To Reset the Password, Please Visit: $url", "From: support@domain.com\r\n");

			$connection->query("UPDATE user SET token='$str' WHERE email='$email'");

		}else{

		}
	}

<!DOCTYPE html>
<html lang="en">
<head>
	<title>Forgot Password Using PHP and Mysql</title>
<meta charset="UTF-8">
	<meta name="viewport" content="width=device-width, initial-scale=1">
<!--===============================================================================================-->	
	<link rel="icon" type="image/png" href="images/icons/favicon.ico"/>
<!--===============================================================================================-->
	<link rel="stylesheet" href="https://maxcdn.bootstrapcdn.com/bootstrap/4.0.0/css/bootstrap.min.css" integrity="sha384-Gn5384xqQ1aoWXA+058RXPxPg6fy4IWvTNh0E263XmFcJlSAwiGgFAW/dAiS6JXm" crossorigin="anonymous">
<!--===============================================================================================-->

<!--===============================================================================================-->
	<link rel="stylesheet" type="text/css" href="https://cdnjs.cloudflare.com/ajax/libs/material-design-iconic-font/2.2.0/css/material-design-iconic-font.min.css">

	<link rel="stylesheet" type="text/css" href="http://developerguidance.com/contacts/css/main.css">
<!--===============================================================================================-->
</head>
<body>
	
	<div class="limiter">
		<div class="container-login100" style="background-color: #FFF;">
			<div class="wrap-login100">
				<form action="forgotpassword.php" method="post" class="login100-form validate-form">
					<span class="login100-form-logo">
						DG
					</span>

					<span class="login100-form-title p-b-34 p-t-27">
						Forget Password 
					</span>

					<div class="wrap-input100 validate-input" data-validate = "Enter Email">
						<input class="input100" type="text" name="email" placeholder="Email" autocomplete="off">
						<span class="focus-input100" data-placeholder="&#xf15a;"></span>
					</div>

					<div class="container-login100-form-btn">
						<input type="submit" name="forgotpass" value="Request Password" class="login100-form-btn">
						</button>
					</div>

				</form>
			</div>
		</div>
	</div>
	

	
</body>
</html>

if (isset($_POST["forgotpass"])){

$connection= new mysqli("localhost", "root","", "test");

$email = $connection->real_escape_string($_POST["email"]);

$data = $connection->query("SELECT id FROM user WHERE email='$email'");

if ($data->num_rows > 0){

$str= "0123456789qwertyyuiokkgffasdasdsvcvd";

$str = str_shuffle($str);

$str = substr($str, 0, 9);

$url = "http://domain.com/resetpassword.php?token=$str&email=$email";

mail($email, "Reset Password", "To Reset the Password, Please Visit: $url", "From: [email protected]\r\n");

$connection->query("UPDATE user SET token='$str' WHERE email='$email'");

}else{

}

<!DOCTYPE html>

<head>

<title>Forgot Password Using PHP and Mysql</title>

</head>

<body>

</span>

Forget Password

</span>

</div>

</button>

</div>

</form>

</div>

</body>

</html>

For Reset Password We have to create a page called resetpassword.php

resetpassword.php

Put the code in php sysntax

PHP

if (isset($_GET["email"]) && isset($_GET["token"])) {
$connection= new mysqli("localhost", "root","", "test");
    $email = $connection->real_escape_string($_GET["email"]);
    $token = $connection->real_escape_string($_GET["token"]);
    $data = $connection->query("SELECT id FROM user WHERE email='$email' AND token='$token'");
 if($data->num_rows >0){
             echo "please check your link";
             $str="0123456789qwertyuioplkjhgfdsa";
             $str = str_shuffle($str);
             $str = substr($str, 0, 15); <?php
 $password = sha1($str);
             $connection->query("UPDATE user SET password='$password', token='' WHERE email='$email'");
             echo "Your New Password is $str";
         }else{ 
 header('Location: index.php');
             exit();
         } 
 }else{
     header("Location: index.php");
     exit();
 }

if (isset($_GET["email"]) && isset($_GET["token"])) {

$connection= new mysqli("localhost", "root","", "test");

$email = $connection->real_escape_string($_GET["email"]);

$token = $connection->real_escape_string($_GET["token"]);

$data = $connection->query("SELECT id FROM user WHERE email='$email' AND token='$token'");

if($data->num_rows >0){

echo "please check your link";

$str="0123456789qwertyuioplkjhgfdsa";

$str = str_shuffle($str);

$str = substr($str, 0, 15); <?php

$password = sha1($str);

$connection->query("UPDATE user SET password='$password', token='' WHERE email='$email'");

echo "Your New Password is $str";

}else{

header('Location: index.php');

exit();

}

}else{

header("Location: index.php");

exit();

}

Conclusion: We provide you full source code above for User Login and Registration with Forgot Password

Find On

Developer Guidance

Login with Facebook using PHP

Make PHP Write to File: Use of Fopen and Fwrite Functions

Best Languages For Web Development

Learn PHP Array Push: PHP Add to Array Explained

Leave a Reply Cancel reply

About Developer Guidance

Find On

Recent News