<?php
$db_host = "******"; // mySQL database host
$db_user = "users"; // mySQL database user
$db_password = "******"; // mySQL database password
$db_name = "users"; // the name of your mySQL database
$conn = mysql_connect($db_host,$db_user,$db_password) or die(mysql_error());
mysql_select_db($db_name);
 
// is ?try=true in the url?
if (isset($_GET['try'])) {
 
	// Yes, the user has clicked on the submit button, let's check if he filled in all the fields
	if(empty($_POST['username']) OR 
   empty($_POST['password']) OR 
   empty($_POST['email']) ) {
 
	// At least one of the file is empty, display an error
	echo 'You haven't filled in all the fields. Please do it again.';
 
} else {
 
	// User has filled it all in!
 
	// SQL save variables
	$username = mysql_real_escape_string($_POST['username']);
	$password = MD5($_POST['password']);
	$email = mysql_real_escape_string($_POST['email']);
 
		$query = mysql_query("SELECT COUNT(id) FROM users 
   WHERE username = '" . $username . "' 
   OR email = '" . $email . "' &quot;) or die(mysql_error());
 
 
		list($count) = mysql_fetch_row($query);
 
		if($count == 0) {
 
			// Username and Email are free!
			mysql_query("INSERT INTO users
					(username, password, email)
					VALUES
					('" . $username . "', '" . $password . "', '" . $email . "')
					&quot;) or die(mysql_error());
 
			echo 'You are successfully registered!';
 
		} else {
 
			// Username or Email already taken
			echo 'Username or Email address already taken!';
 
		}
 
 
}
 
}
 
?>
 
<form action="register.php?try=true" method="post">
 
Username: <input type="text" name="username"><br>
<br>
Password: <input type="password" name="password"><br>
<br>
Email: <input type="text" name="email"><br>
<br>
<input type="submit" value="register">
 
</form> 
 

<?php
 
$conn = mysql_connect('******', 'users', '******') or die(mysql_error());
mysql_select_db('users', $conn);
 
// Start the session (DON'T FORGET!!)
session_start();
 
// Check if user wants to login (GET info)
if(isset($_GET['try'])) {
 
	// That's nice, user wants to login. But lets check if user has filled in all information
	If(empty($_POST['username']) OR empty($_POST['password'])) {
 
		// User hasn't filled it all in!
		echo 'Please fill in all the required fields!';
 
	} else {
 
		// User filled it all in!
 
    	// Make variables save with addslashes and md5
		$username = addslashes($_POST['username']);
		$password = md5($_POST['password']);
 
		// Search for a combination
		$query = mysql_query("SELECT id FROM users
					   WHERE username = '" . $username . "' 
					   AND password = '" . $password . "'
					  &quot;) or die(mysql_error());
 
		// Save result
		list($user_id) = mysql_fetch_row($query);
 
		// If the user_id is empty no combination was found
		if(empty($user_id)) {
 
			echo 'No combination of username and password found.';
 
		} else {
 
			// the user_id variable doesn't seem to be empty, so a combination was found!
 
			// Create new session, store the user id
			$_SESSION['user_id'] = $user_id;
 
			// Redirect to userpanel.php
			header('location: userpanel.php');
 
		}		
 
	}
 
}
 
?>
 
<form action="login.php?try=true" method="post">
 
Username: <input type="text" name="username"><br>
<br>
Password: <input type="password" name="password"><br>
<br>
<input type="submit" value="Login!">
 
</form>
 

<?php
 
// Start session
session_start(); 
 
$conn = mysql_connect('******', 'users', '******') or die(mysql_error());
mysql_select_db('users', $conn);
 
// Check if user is logged in
if(isset($_SESSION['user_id'])) {
 
	// User is logged in!
	$query = mysql_query("SELECT username FROM users
				   WHERE ID = " . $_SESSION['user_id'] . " LIMIT 1&quot;)
				   or die(mysql_error());
 
	list($username) = mysql_fetch_row($query);
 
	echo 'Hi '. $username . ', welcome to your profile!';
 
} else {
 
	// User not logged in
	echo 'Please login before opening the user panel.';
 
}
 
?>
 

<?php
 
// Start session
session_start(); 
 
// Show all session info
print_r($_SESSION);
 
// Halt further execution
die();
 
$conn = mysql_connect('******', 'users', '******') or die(mysql_error());
mysql_select_db('users', $conn);
 
// Check if user is logged in
if(isset($_SESSION['user_id'])) {
 
	// User is logged in!
	$query = mysql_query("SELECT username FROM users
				   WHERE ID = " . $_SESSION['user_id'] . " LIMIT 1&quot;)
				   or die(mysql_error());
 
	list($username) = mysql_fetch_row($query);
 
	echo 'Hi '. $username . ', welcome to your profile!';
 
} else {
 
	// User not logged in
	echo 'Please login before opening the user panel.';
 
}
 
?>
 

<?php
 
phpinfo();
 
?>