How to password protect file or page in php with script

By

 

Password protecting a file or page in PHP typically involves creating a login system with a username and password. Here's a simplified example of how you can password protect a page using PHP:

1. Create the Login Page (login.php):

php
<?php
session_start();

// Check if the user is already logged in
if (isset($_SESSION['username'])) {
    header('Location: protected-page.php');
    exit();
}

// Check if the login form is submitted
if ($_SERVER['REQUEST_METHOD'] === 'POST') {
    $username = $_POST['username'];
    $password = $_POST['password'];

    // Replace these with your own username and password
    $validUsername = 'your_username';
    $validPassword = 'your_password';

    if ($username === $validUsername && $password === $validPassword) {
        $_SESSION['username'] = $username;
        header('Location: protected-page.php');
        exit();
    } else {
        $error = 'Invalid username or password';
    }
}
?>
<!DOCTYPE html>
<html>
<head>
    <title>Login</title>
</head>
<body>
    <h2>Login</h2>
    <?php if (isset($error)) { echo "<p>$error</p>"; } ?>
    <form method="POST">
        <label for="username">Username:</label>
        <input type="text" id="username" name="username" required><br>

        <label for="password">Password:</label>
        <input type="password" id="password" name="password" required><br>

        <input type="submit" value="Login">
    </form>
</body>
</html>

In this script, you create a basic login form where users enter their username and password. If the provided username and password match the valid credentials, the user is redirected to the protected page. Adjust the $validUsername and $validPassword variables with the actual username and password.

2. Create the Protected Page (protected-page.php):

php
<?php
session_start();

// Check if the user is not logged in
if (!isset($_SESSION['username'])) {
    header('Location: login.php');
    exit();
}
?>
<!DOCTYPE html>
<html>
<head>
    <title>Protected Page</title>
</head>
<body>
    <h2>Welcome, <?php echo $_SESSION['username']; ?></h2>
    <p>This is the protected page.</p>
    <a href="logout.php">Logout</a>
</body>
</html>

In the protected page, you check if the user is logged in by verifying the presence of the username in the session. If not, they are redirected to the login page.

3. Create the Logout Page (logout.php):

php
<?php
session_start();

// Destroy the session and log the user out
session_destroy();

// Redirect to the login page
header('Location: login.php');
exit();
?>

The logout page destroys the session and redirects the user back to the login page.

With these three scripts, you've created a basic password protection system for a page in PHP. Users must log in with the correct username and password to access the protected page. Make sure to replace the example credentials with your own and further enhance security, such as using password hashing and adding additional security features.

Viewers
Read Also

No comments:

Post a Comment

SEARCH