A login page that keeps a user login in for a set period of time. Note it will only do it for one browser at a time as it uses a database table, for something fancier you will have to use multiple tokens in a database table schema or a 3rd party tokens that handles multiple devices. Anyways, here’s the PHP and HTML -
<?php
// Load required configuration and libraries
require_once "assets/config/config.php";
require_once "vendor/autoload.php";
// Import classes
use Burroughs\ErrorHandler;
use Burroughs\Database;
use Burroughs\LoginRepository as Login;
// Create an ErrorHandler instance
$errorHandler = new ErrorHandler();
// Set the exception handler to use the ErrorHandler instance
set_exception_handler([$errorHandler, 'handleException']);
// Create a Database instance and establish a connection
$database = new Database();
$pdo = $database->createPDO();
// Create a LoginRepository instance with the database connection
$loginRepository = new Login($pdo);
// Redirect to dashboard if the user is already logged in
if ($loginRepository->check_login_token()) {
header('Location: ../dashboard.php');
exit();
}
// Generate a CSRF token if it doesn't exist and store it in the session
if (!isset($_SESSION['csrf_token'])) {
$_SESSION['csrf_token'] = bin2hex(random_bytes(32));
}
// Process the login form submission
if ($_SERVER['REQUEST_METHOD'] === 'POST') {
// Check if the submitted CSRF token matches the one stored in the session
if (hash_equals($_SESSION['csrf_token'], $_POST['csrf_token'])) {
// Sanitize the username and password input
$username = strip_tags($_POST['username']);
$password = $_POST['password'];
// Verify the user's credentials
if ($loginRepository->verify_credentials($username, $password)) {
// Generate a secure login token
$token = bin2hex(random_bytes(32));
// Store the login token in the database
$loginRepository->store_token_in_database($_SESSION['user_id'], $token);
// Set a secure cookie with the login token
setcookie('login_token', $token, [
'expires' => strtotime('+6 months'),
'path' => '/',
'domain' => 'localhost',
'secure' => false, // Since it's not HTTPS, set this to false
'httponly' => true,
'samesite' => 'Lax'
]);
// Store the login token in the session
$_SESSION['login_token'] = $token;
// Redirect the user to the dashboard
header('Location: ../dashboard.php');
exit;
} else {
// Display an error message for invalid username or password
$error = 'Invalid username or password';
error_log("Login error: " . $error);
}
} else {
// Display an error message
$error = 'Invalid CSRF token';
error_log("Login error: " . $error);
$error = 'An error occurred. Please try again.';
}
}
// Set the Content Security Policy header
header("Content-Security-Policy: default-src 'self'; font-src 'self' https://fonts.gstatic.com; style-src 'self' https://fonts.googleapis.com;");
?>
<!doctype html>
<html lang="en">
<head>
<meta charset="UTF-8">
<meta name="viewport"
content="width=device-width, user-scalable=yes, initial-scale=1.0">
<title>Login Page</title>
<link rel="stylesheet" media="all" href="assets/css/stylesheet.css">
</head>
<body class="site">
<div class="nav">
<input type="checkbox" id="nav-check">
<div class="nav-btn">
<label for="nav-check">
<span></span>
<span></span>
<span></span>
</label>
</div>
<div class="nav-links">
<?php $database->regular_navigation(); ?>
</div>
<div class="name-website">
<h1 class="webtitle">The Photo Tech Guru</h1>
</div>
</div>
<main class="content">
<div class="main_container">
<div class="home_article">
<form class="checkStyle" method="post" action="login.php">
<input type="hidden" name="csrf_token" value="<?php echo $_SESSION['csrf_token']; ?>">
<div class="screenName">
<label class="text_username" for="username">Username</label>
<input id="username" class="io_username" type="text" name="username" value="" required>
</div>
<label class="text_password" for="password">Password</label>
<input id="password" class="io_password" type="password" name="password" required>
<div class="submitForm">
<button class="submitBtn" id="submitForm" type="submit" name="submit" value="login">Login</button>
</div>
</form>
</div>
<div class="home_sidebar">
<ul class="cards">
<li class="card-item">
<a href="https://flickr.com/photos/pepster/">
<figure class="cards">
<img src="assets/images/img_flickr_pictures.jpg" alt="Flickr" width="348" height="174">
<figcaption class="caption">
<h3 class="caption-title">Flickr Images</h3>
</figcaption>
</figure>
</a>
</li>
<li class="card-item">
<a href="https://github.com/Strider64/phototechguru">
<figure class="cards">
<img src="assets/images/img_github_repository.jpg" alt="GitHub Repository">
<figcaption class="caption">
<h3 class="caption-title">GitHub Repository</h3>
</figcaption>
</figure>
</a>
</li>
<li class="card-item">
<a href="https://www.facebook.com/Pepster64">
<figure class="cards">
<img src="assets/images/img-facebook-group.jpg" alt="FaceBook Group">
<figcaption class="caption">
<h3 class="caption-title">Facebook Page</h3>
</figcaption>
</figure>
</a>
</li>
</ul>
</div>
</div>
</main>
<aside class="sidebar">
</aside>
<footer class="colophon">
<p>© <?php echo date("Y") ?> The Photo Tech Guru</p>
</footer>
</body>
</html>
How you check login credentials and connect to the database table is still up to you to develop and code.
