How to Create Login and Logout Page with Session and Cookies in PHP

Submitted by nurhodelta_17 on Tuesday, March 16, 2021 - 16:27.

Language

In my previous tutorial, I've shown you How to Set up Cookie. This tutorial will give you an idea of how to use the stored cookie to login and I've added a "logout" function that destroys both session and cookie.

Creating our Database

First, we're going to create a database that contains our data.

Open phpMyAdmin.
Click databases, create a database and name it as "cookie".
After creating a database, click the SQL and paste the below code. See image below for detailed instruction.

CREATE TABLE `user` (
  `userid` INT(11) NOT NULL AUTO_INCREMENT,
  `username` VARCHAR(30) NOT NULL,
  `password` VARCHAR(30) NOT NULL,
  `fullname` VARCHAR(60) NOT NULL,
PRIMARY KEY (`userid`)
) ENGINE=InnoDB DEFAULT CHARSET=latin1;

Inserting Data into our Database

Next, we insert users into our database. This will be our reference when we log in.

Click the database we created earlier.
Click SQL and paste the code below.

INSERT INTO `user` (`username`, `password`, `fullname`) VALUES
('neovic', 'devierte', 'neovic devierte'),
('lee', 'ann', 'lee ann');

Creating our Connection

The next step is to create a database connection and save it as "conn.php". This file will serve as our bridge between our form and our database. To create the file, open your HTML code editor and paste the code below after the tag.

<?php
$conn = mysqli_connect("localhost","root","","cookie");
 
// Check connection
if (mysqli_connect_errno())
  {
  echo "Failed to connect to MySQL: " . mysqli_connect_error();
  }
?>

Creating our Login Form

Next is to create our login form. In this form, I've added a code that if ever there's a cookie stored, it will show in the login inputs. To create the form, open your HTML code editor and paste the code below after the tag. We name this "index.php".

<?php
        session_start();
        include('conn.php');
?>
<!DOCTYPE html>
<html>
<head>
<title>Login Using Cookie with Logout</title>
</head>
<body>
        <h2>Login Form</h2>
        <form method="POST" action="login.php">
        <label>Username:</label> <input type="text" value="<?php if (isset($_COOKIE["user"])){echo $_COOKIE["user"];}?>" name="username">
        <label>Password:</label> <input type="password" value="<?php if (isset($_COOKIE["pass"])){echo $_COOKIE["pass"];}?>" name="password"><br><br>
        <input type="checkbox" name="remember" <?php if (isset($_COOKIE["user"]) && isset($_COOKIE["pass"])){ echo "checked";}?>> Remember me <br><br>
        <input type="submit" value="Login" name="login">
        </form>
        
        <span>
        <?php
                if (isset($_SESSION['message'])){
                        echo $_SESSION['message'];
                }
                unset($_SESSION['message']);
        ?>
</span>
</body>
</html>

Creating our Login Script

The next step is creating our login script. We name this script as "login.php".

<?php
        if(isset($_POST['login'])){
                
                session_start();
                include('conn.php');
        
                $username=$_POST['username'];
                $password=$_POST['password'];
        
                $query=mysqli_query($conn,"select * from `user` where username='$username' && password='$password'");
        
                if (mysqli_num_rows($query) == 0){
                        $_SESSION['message']="Login Failed. User not Found!";
                        header('location:index.php');
                }
                else{
                        $row=mysqli_fetch_array($query);
                        
                        if (isset($_POST['remember'])){
                                //set up cookie
                                setcookie("user", $row['username'], time() + (86400 * 30)); 
                                setcookie("pass", $row['password'], time() + (86400 * 30)); 
                        }
                        
                        $_SESSION['id']=$row['userid'];
                        header('location:success.php');
                }
        }
        else{
                header('location:index.php');
                $_SESSION['message']="Please Login!";
        }
?>

Creating our Login Success Page

Next, we create a go-to page if login is successful. This page will show the user that login successfully. We name this page as "success.php". On this page, I've added the logout link to destroy both the session and cookie.

<?php
        session_start();
        
        if (!isset($_SESSION['id']) ||(trim ($_SESSION['id']) == '')) {
                header('index.php');
                exit();
        }
        include('conn.php');
        $query=mysqli_query($conn,"select * from user where userid='".$_SESSION['id']."'");
        $row=mysqli_fetch_assoc($query);
?>
<!DOCTYPE html>
<html>
<head>
<title>Setting Up Cookie on User Login</title>
</head>
<body>
        <h2>Login Success</h2>
        <?php echo $row['fullname']; ?>
        <br>
        <a  href="logout.php">Logout</a>
</body>
</html>

Creating our Logout Script

Last is our logout script. This script destroys both our session and the cookie then redirects us back to our login page. We name the script as "logout.php".

<?php
        session_start();
        session_destroy();
        
        if (isset($_COOKIE["user"]) AND isset($_COOKIE["pass"])){
                setcookie("user", '', time() - (3600));
                setcookie("pass", '', time() - (3600));
        }
 
        header('location:index.php');
 
?>

DEMO

And that's the end of this tutorial. I hope this will help you and for your future projects. Feel free to download the working sample source code and test it.

Explore more on this website for tutorials and free source code.

Enjoy :)

Note: Due to the size or complexity of this submission, the author has submitted it as a .zip file to shorten your download time. After downloading it, you will need a program like Winzip to decompress it.

Virus note: All files are scanned once-a-day by SourceCodester.com for viruses, but new viruses come out every day, so no prevention program can catch 100% of them.

FOR YOUR OWN SAFETY, PLEASE:

1. Re-scan downloaded files using your personal virus checker before using it.
2. NEVER, EVER run compiled files (.exe's, .ocx's, .dll's etc.)--only run source code.

How to Create Login and Logout Page with Session and Cookies in PHP

Creating our Database

Inserting Data into our Database

Creating our Connection

Creating our Login Form

Creating our Login Script

Creating our Login Success Page

Creating our Logout Script

Comments

Web development

I want a template i like it

Add new comment