-->

Create Login Page with Session and Cookies in PHP

This tutorial will give you an idea on how to use the stored cookie to login and I've added a "logout" function that destroys both session and cookie.

Creating our Database

First, we're going to create a database that contains our data.
1. Open phpMyAdmin.
2. Click databases, create a database and name it as "cookie".
3. After creating a database, click the SQL and paste the below code. See image below for detailed instruction.
    

  1. 
CREATE TABLE `user` (
    

    2. 

  2. 
`userid` INT(11) NOT NULL AUTO_INCREMENT,
    

    3. 

  3. 
`username` VARCHAR(30) NOT NULL,
    

    4. 

  4. 
`password` VARCHAR(30) NOT NULL,
    

    5. 

  5. 
`fullname` VARCHAR(60) NOT NULL,
    

    6. 

  6. 
PRIMARY KEY (`userid`)
    

    7. 

  7. 
) ENGINE=InnoDB DEFAULT CHARSET=latin1;
    

    8.
cookie_login

Inserting Data into our Database

Next, we insert users into our database. This will be our reference when we login.
1. Click the database the we created earlier.
2. Click SQL and paste the code below.
    

  1. 
INSERT INTO `user` (`username`, `password`, `fullname`) VALUES
    

    2. 

  2. 
('neovic', 'devierte', 'neovic devierte'),
    

    3. 

  3. 
('lee', 'ann', 'lee ann');
    

    4.

Creating our Connection

Next step is to create a database connection and save it as "conn.php". This file will serve as our bridge between our form and our database. To create the file, open your HTML code editor and paste the code below after the tag.
    

  1. 
<?php
    

    2. 

  2. 
$conn = mysqli_connect("localhost","root","","cookie");
    

    3. 

  3. 

    

    4. 

  4. 
// Check connection
    

    5. 

  5. 
if (mysqli_connect_errno())
    

    6. 

  6. 
{
    

    7. 

  7. 
echo "Failed to connect to MySQL: " . mysqli_connect_error();
    

    8. 

  8. 
}
    

    9. 

  9. 
?>
    

    10.

Creating our Login Form

Next is to create our login form. In this form, I've added a code that if ever there's a cookie stored, it will show in the login inputs. To create the form, open your HTML code editor and paste the code below after the tag. We name this as "index.php".
    

  1. 
<?php
    

    2. 

  2. 
session_start();
    

    3. 

  3. 
include('conn.php');
    

    4. 

  4. 
?>
    

    5. 

  5. 
<!DOCTYPE html>
    

    6. 

  6. 
<html>
    

    7. 

  7. 
<head>
    

    8. 

  8. 
<title>Login Using Cookie with Logout</title>
    

    9. 

  9. 
</head>
    

    10. 

  10. 
<body>
    

    11. 

  11. 
<h2>Login Form</h2>
    

    12. 

  12. 
<form method="POST" action="login.php">
    

    13. 

  13. 
<label>Username:</label> <input type="text" value="<?php if (isset($_COOKIE["user"])){echo $_COOKIE["user"];}?>" name="username">
    

    14. 

  14. 
<label>Password:</label> <input type="password" value="<?php if (isset($_COOKIE["pass"])){echo $_COOKIE["pass"];}?>" name="password"><br><br>
    

    15. 

  15. 
<input type="checkbox" name="remember"> Remember me <br><br>
    

    16. 

  16. 
<input type="submit" value="Login" name="login">
    

    17. 

  17. 
</form>
    

    18. 

  18. 

    

    19. 

  19. 
<span>
    

    20. 

  20. 
<?php
    

    21. 

  21. 
if (isset($_SESSION['message'])){
    

    22. 

  22. 
echo $_SESSION['message'];
    

    23. 

  23. 
}
    

    24. 

  24. 
unset($_SESSION['message']);
    

    25. 

  25. 
?>
    

    26. 

  26. 
</span>
    

    27. 

  27. 
</body>
    

    28. 

  28. 
</html>
    

    29.

Creating our Login Script

Next step is creating our login script. We name this script as "login.php".
    

  1. 
<?php
    

    2. 

  2. 
if(isset($_POST['login'])){
    

    3. 

  3. 

    

    4. 

  4. 
session_start();
    

    5. 

  5. 
include('conn.php');
    

    6. 

  6. 

    

    7. 

  7. 
$username=$_POST['username'];
    

    8. 

  8. 
$password=$_POST['password'];
    

    9. 

  9. 

    

    10. 

  10. 
$query=mysqli_query($conn,"select * from `user` where username='$username' && password='$password'");
    

    11. 

  11. 

    

    12. 

  12. 
if (mysqli_num_rows($query) == 0){
    

    13. 

  13. 
$_SESSION['message']="Login Failed. User not Found!";
    

    14. 

  14. 
header('location:index.php');
    

    15. 

  15. 
}
    

    16. 

  16. 
else{
    

    17. 

  17. 
$row=mysqli_fetch_array($query);
    

    18. 

  18. 

    

    19. 

  19. 
if (isset($_POST['remember'])){
    

    20. 

  20. 
//set up cookie
    

    21. 

  21. 
setcookie("user", $row['username'], time() + (86400 * 30)); 
    

    22. 

  22. 
setcookie("pass", $row['password'], time() + (86400 * 30)); 
    

    23. 

  23. 
}
    

    24. 

  24. 

    

    25. 

  25. 
$_SESSION['id']=$row['userid'];
    

    26. 

  26. 
header('location:success.php');
    

    27. 

  27. 
}
    

    28. 

  28. 
}
    

    29. 

  29. 
else{
    

    30. 

  30. 
header('location:index.php');
    

    31. 

  31. 
$_SESSION['message']="Please Login!";
    

    32. 

  32. 
}
    

    33. 

  33. 
?>
    

    34.

Creating our Login Success Page

Next, we create a go to page if login is successful. This page will show the user that login successfully. We name this page as "success.php". In this page, I've added the logout link to destroy both session and cookie.
    

  1. 
<?php
    

    2. 

  2. 
session_start();
    

    3. 

  3. 

    

    4. 

  4. 
if (!isset($_SESSION['id']) ||(trim ($_SESSION['id']) == '')) {
    

    5. 

  5. 
header('index.php');
    

    6. 

  6. 
exit();
    

    7. 

  7. 
}
    

    8. 

  8. 
include('conn.php');
    

    9. 

  9. 
$query=mysqli_query($conn,"select * from user where userid='".$_SESSION['id']."'");
    

    10. 

  10. 
$row=mysqli_fetch_assoc($query);
    

    11. 

  11. 
?>
    

    12. 

  12. 
<!DOCTYPE html>
    

    13. 

  13. 
<html>
    

    14. 

  14. 
<head>
    

    15. 

  15. 
<title>Setting Up Cookie on User Login</title>
    

    16. 

  16. 
</head>
    

    17. 

  17. 
<body>
    

    18. 

  18. 
<h2>Login Success</h2>
    

    19. 

  19. 
<?php echo $row['fullname']; ?>
    

    20. 

  20. 
<br>
    

    21. 

  21. 
<a href="logout.php">Logout</a>
    

    22. 

  22. 
</body>
    

    23. 

  23. 
</html>
    

    24.

Creating our Logout Script

Last is our logout script. This script destroys both our session and cookie then redirect us back to our login page. We name the script as "logout.php".
    

  1. 
<?php
    

    2. 

  2. 
session_start();
    

    3. 

  3. 
session_destroy();
    

    4. 

  4. 

    

    5. 

  5. 
if (isset($_COOKIE["user"]) AND isset($_COOKIE["pass"])){
    

    6. 

  6. 
setcookie("user", '', time() - (3600));
    

    7. 

  7. 
setcookie("pass", '', time() - (3600));
    

    8. 

  8. 
}
    

    9. 

  9. 

    

    10. 

  10. 
header('location:index.php');
    

    11. 

  11. 

    

    12. 

  12. 
?>
    

    13.