{"id":1354,"date":"2022-11-28T09:10:16","date_gmt":"2022-11-28T01:10:16","guid":{"rendered":"https:\/\/hostscripter.com\/?p=1354"},"modified":"2022-11-28T09:10:16","modified_gmt":"2022-11-28T01:10:16","slug":"part-6-create-your-own-registration-system-using-php-and-mysql","status":"publish","type":"post","link":"https:\/\/hostscripter.com\/?p=1354","title":{"rendered":"Part 6: Create your own Registration System using PHP and MySql"},"content":{"rendered":"

6. Implementing Account Activation<\/h2>\n

The account activation system will send an email to the user with the activation link when the user has registered.<\/p>\n

The first thing we need to do is to go into\u00a0phpMyAdmin<\/i>\u00a0and select our database, in our case this would be\u00a0phplogin<\/i>, you can either add the column\u00a0activation_code<\/i>\u00a0to the accounts table or execute the SQL statement below.<\/p>\n

<\/div>\n
ALTER<\/span> TABLE<\/span> accounts ADD<\/span> activation_code varchar<\/span>(<\/span>50<\/span>)<\/span> DEFAULT<\/span> ''<\/span><\/code><\/pre>\n
Now we need to edit our\u00a0register.php<\/i>\u00a0file, search for this line of code:<\/p>\n
if<\/span> (<\/span>$stmt<\/span> =<\/span> $con<\/span>-<\/span>><\/span>prepare<\/span>(<\/span>'INSERT INTO accounts (username, password, email) VALUES (?, ?, ?)'<\/span>)<\/span>)<\/span> {<\/span><\/code><\/pre>\n
Replace with:<\/p>\n
<\/div>\n
if<\/span> (<\/span>$stmt<\/span> =<\/span> $con<\/span>-<\/span>><\/span>prepare<\/span>(<\/span>'INSERT INTO accounts (username, password, email, activation_code) VALUES (?, ?, ?, ?)'<\/span>)<\/span>)<\/span> {<\/span><\/code><\/pre>\n
Search for:<\/p>\n
$stmt<\/span>-<\/span>><\/span>bind_param<\/span>(<\/span>'sss'<\/span>,<\/span> $_POST<\/span>[<\/span>'username'<\/span>]<\/span>,<\/span> $password<\/span>,<\/span> $_POST<\/span>[<\/span>'email'<\/span>]<\/span>)<\/span>;<\/span><\/code><\/pre>\n
Replace with:<\/p>\n
<\/div>\n
$uniqid<\/span> =<\/span> uniqid<\/span>(<\/span>)<\/span>;<\/span>\r\n$stmt<\/span>-<\/span>><\/span>bind_param<\/span>(<\/span>'ssss'<\/span>,<\/span> $_POST<\/span>[<\/span>'username'<\/span>]<\/span>,<\/span> $password<\/span>,<\/span> $_POST<\/span>[<\/span>'email'<\/span>]<\/span>,<\/span> $uniqid<\/span>)<\/span>;<\/span>\r\n<\/code><\/pre>\n
The\u00a0$uniqud<\/i>\u00a0variable will generate a unique ID that we’ll use for our activation code, this will be sent to the user’s email address.<\/p>\n
Search for:<\/p>\n
echo<\/span> 'You have successfully registered, you can now login!'<\/span>;<\/span><\/code><\/pre>\n
Replace with:<\/p>\n
<\/div>\n
$from<\/span>    =<\/span> 'noreply@yourdomain.com'<\/span>;<\/span>\r\n$subject<\/span> =<\/span> 'Account Activation Required'<\/span>;<\/span>\r\n$headers<\/span> =<\/span> 'From: '<\/span> .<\/span> $from<\/span> .<\/span> \"\\r\\n\"<\/span> .<\/span> 'Reply-To: '<\/span> .<\/span> $from<\/span> .<\/span> \"\\r\\n\"<\/span> .<\/span> 'X-Mailer: PHP\/'<\/span> .<\/span> phpversion<\/span>(<\/span>)<\/span> .<\/span> \"\\r\\n\"<\/span> .<\/span> 'MIME-Version: 1.0'<\/span> .<\/span> \"\\r\\n\"<\/span> .<\/span> 'Content-Type: text\/html; charset=UTF-8'<\/span> .<\/span> \"\\r\\n\"<\/span>;<\/span>\r\n\/\/ Update the activation variable below<\/span>\r\n$activate_link<\/span> =<\/span> 'http:\/\/yourdomain.com\/phplogin\/activate.php?email='<\/span> .<\/span> $_POST<\/span>[<\/span>'email'<\/span>]<\/span> .<\/span> '&code='<\/span> .<\/span> $uniqid<\/span>;<\/span>\r\n$message<\/span> =<\/span> '<p>Please click the following link to activate your account: <a href=\"'<\/span> .<\/span> $activate_link<\/span> .<\/span> '\">'<\/span> .<\/span> $activate_link<\/span> .<\/span> '<\/a><\/p>'<\/span>;<\/span>\r\nmail<\/span>(<\/span>$_POST<\/span>[<\/span>'email'<\/span>]<\/span>,<\/span> $subject<\/span>,<\/span> $message<\/span>,<\/span> $headers<\/span>)<\/span>;<\/span>\r\necho<\/span> 'Please check your email to activate your account!'<\/span>;<\/span><\/code><\/pre>\n
Upon account registration, the user will need to activate their account using the activation link that is sent to their email address. You need to update both the\u00a0$from<\/i>\u00a0and\u00a0$activate_link<\/i>\u00a0variables.<\/p>\n
Now we can proceed to create the activation file. The activation file will process the GET parameters and verify the email and code. The user’s account will be activated if the code is valid.<\/p>\n
Edit\/create the\u00a0activate.php<\/i>\u00a0file and add the following code:<\/p>\n
<\/div>\n
<?php<\/span>\r\n\/\/ Change this to your connection info.<\/span>\r\n$DATABASE_HOST<\/span> =<\/span> 'localhost'<\/span>;<\/span>\r\n$DATABASE_USER<\/span> =<\/span> 'root'<\/span>;<\/span>\r\n$DATABASE_PASS<\/span> =<\/span> ''<\/span>;<\/span>\r\n$DATABASE_NAME<\/span> =<\/span> 'phplogin'<\/span>;<\/span>\r\n\/\/ Try and connect using the info above.<\/span>\r\n$con<\/span> =<\/span> mysqli_connect<\/span>(<\/span>$DATABASE_HOST<\/span>,<\/span> $DATABASE_USER<\/span>,<\/span> $DATABASE_PASS<\/span>,<\/span> $DATABASE_NAME<\/span>)<\/span>;<\/span>\r\nif<\/span> (<\/span>mysqli_connect_errno<\/span>(<\/span>)<\/span>)<\/span> {<\/span>\r\n\t\/\/ If there is an error with the connection, stop the script and display the error.<\/span>\r\n\texit<\/span>(<\/span>'Failed to connect to MySQL: '<\/span> .<\/span> mysqli_connect_error<\/span>(<\/span>)<\/span>)<\/span>;<\/span>\r\n}<\/span>\r\n\/\/ First we check if the email and code exists...<\/span>\r\nif<\/span> (<\/span>isset<\/span>(<\/span>$_GET<\/span>[<\/span>'email'<\/span>]<\/span>,<\/span> $_GET<\/span>[<\/span>'code'<\/span>]<\/span>)<\/span>)<\/span> {<\/span>\r\n\tif<\/span> (<\/span>$stmt<\/span> =<\/span> $con<\/span>-<\/span>><\/span>prepare<\/span>(<\/span>'SELECT * FROM accounts WHERE email = ? AND activation_code = ?'<\/span>)<\/span>)<\/span> {<\/span>\r\n\t\t$stmt<\/span>-<\/span>><\/span>bind_param<\/span>(<\/span>'ss'<\/span>,<\/span> $_GET<\/span>[<\/span>'email'<\/span>]<\/span>,<\/span> $_GET<\/span>[<\/span>'code'<\/span>]<\/span>)<\/span>;<\/span>\r\n\t\t$stmt<\/span>-<\/span>><\/span>execute<\/span>(<\/span>)<\/span>;<\/span>\r\n\t\t\/\/ Store the result so we can check if the account exists in the database.<\/span>\r\n\t\t$stmt<\/span>-<\/span>><\/span>store_result<\/span>(<\/span>)<\/span>;<\/span>\r\n\t\tif<\/span> (<\/span>$stmt<\/span>-<\/span>><\/span>num_rows<\/span> ><\/span> 0<\/span>)<\/span> {<\/span>\r\n\t\t\t\/\/ Account exists with the requested email and code.<\/span>\r\n\t\t\tif<\/span> (<\/span>$stmt<\/span> =<\/span> $con<\/span>-<\/span>><\/span>prepare<\/span>(<\/span>'UPDATE accounts SET activation_code = ? WHERE email = ? AND activation_code = ?'<\/span>)<\/span>)<\/span> {<\/span>\r\n\t\t\t\t\/\/ Set the new activation code to 'activated', this is how we can check if the user has activated their account.<\/span>\r\n\t\t\t\t$newcode<\/span> =<\/span> 'activated'<\/span>;<\/span>\r\n\t\t\t\t$stmt<\/span>-<\/span>><\/span>bind_param<\/span>(<\/span>'sss'<\/span>,<\/span> $newcode<\/span>,<\/span> $_GET<\/span>[<\/span>'email'<\/span>]<\/span>,<\/span> $_GET<\/span>[<\/span>'code'<\/span>]<\/span>)<\/span>;<\/span>\r\n\t\t\t\t$stmt<\/span>-<\/span>><\/span>execute<\/span>(<\/span>)<\/span>;<\/span>\r\n\t\t\t\techo<\/span> 'Your account is now activated! You can now <a href=\"index.html\">login<\/a>!'<\/span>;<\/span>\r\n\t\t\t}<\/span>\r\n\t\t}<\/span> else<\/span> {<\/span>\r\n\t\t\techo<\/span> 'The account is already activated or doesn\\'t exist!'<\/span>;<\/span>\r\n\t\t}<\/span>\r\n\t}<\/span>\r\n}<\/span>\r\n?><\/span><\/span><\/code><\/pre>\n
If the code reflects the one in the database that is associated with the user’s account then the value of the\u00a0activation_code<\/i>\u00a0column will be updated to\u00a0activated<\/i>.<\/p>\n
If we want to check if the user has activated their account, we can add the following code to the pages we want to restrict non-activated users:<\/p>\n
<\/div>\n
if<\/span> (<\/span>$account<\/span>[<\/span>'activation_code'<\/span>]<\/span> ==<\/span> 'activated'<\/span>)<\/span> {<\/span>\r\n\t\/\/ account is activated<\/span>\r\n\t\/\/ Display home page etc<\/span>\r\n}<\/span> else<\/span> {<\/span>\r\n\t\/\/ account is not activated<\/span>\r\n\t\/\/ redirect user or display an error<\/span>\r\n}<\/span><\/code><\/pre>\n
For the above code to work, you will need to connect to your MySQL database and select the user’s account.<\/p>\n
Also, take note PHP mail function will only work if your computer or server supports it. If it doesn’t send an email, check your configuration or install a mail server such as\u00a0Postfix<\/a>.<\/p>\n
Conclusion<\/h2>\n
Congratulations! You’ve successfully created a\u00a0Login System<\/strong>\u00a0(if you followed the previous tutorial) and registration system with PHP and MySQL. You’re free to use the code in this tutorial and adapt it for your own projects.<\/p>\n
Remember that this is just a secure base that you should work from. Consider changing or implementing your own validation, and implement your own features.<\/p>\n
If you would like more of this tutorial series, feel free to drop a comment and suggest to us what we could create next.<\/p>\n
Enjoy coding!<\/p>\n
<\/a><\/a><\/a><\/a><\/div>
<\/a><\/a><\/a><\/a><\/div>","protected":false},"excerpt":{"rendered":"
6. Implementing Account Activation The account activation system will send an email to the user with the activation link when the user has registered. The first thing we need to […]<\/p>\n","protected":false},"author":301,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"jetpack_post_was_ever_published":false,"_jetpack_newsletter_access":"","_jetpack_newsletter_tier_id":0,"footnotes":""},"categories":[4],"tags":[],"jetpack_featured_media_url":"","jetpack_sharing_enabled":true,"jetpack_shortlink":"https:\/\/wp.me\/p9KaPo-lQ","jetpack_likes_enabled":true,"jetpack-related-posts":[{"id":1349,"url":"https:\/\/hostscripter.com\/?p=1349","url_meta":{"origin":1354,"position":0},"title":"Part 4: Create your own Registration System using PHP and MySql","author":"h05t5cr1pt3r","date":"November 28, 2022","format":false,"excerpt":"4. Registering Users with PHP & MySQL Now we need to create the registration file that will process the form fields, check for basic validation, and insert the new account into our database. The registration page will require a connection to our database and therefore we must include the necessary\u2026","rel":"","context":"In "Blog"","block_context":{"text":"Blog","link":"https:\/\/hostscripter.com\/?cat=4"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":1343,"url":"https:\/\/hostscripter.com\/?p=1343","url_meta":{"origin":1354,"position":1},"title":"Part 1: Create your own Registration System using PHP and MySql","author":"h05t5cr1pt3r","date":"November 28, 2022","format":false,"excerpt":"This tutorial is a follow up to our previous tutorial\u00a0Secure Login System with PHP and MySQL. In this tutorial, we'll be creating a secure registration form and implementing basic validation. A registration form is what your website's visitors can use to register their details, which will subsequently be stored in\u2026","rel":"","context":"In "Blog"","block_context":{"text":"Blog","link":"https:\/\/hostscripter.com\/?cat=4"},"img":{"alt_text":"Secure Registration System with PHP and MySQL","src":"https:\/\/i0.wp.com\/codeshack.io\/web\/img\/posts\/secure-registration-system-php-mysql.png?resize=350%2C200&ssl=1","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/codeshack.io\/web\/img\/posts\/secure-registration-system-php-mysql.png?resize=350%2C200&ssl=1 1x, https:\/\/i0.wp.com\/codeshack.io\/web\/img\/posts\/secure-registration-system-php-mysql.png?resize=525%2C300&ssl=1 1.5x, https:\/\/i0.wp.com\/codeshack.io\/web\/img\/posts\/secure-registration-system-php-mysql.png?resize=700%2C400&ssl=1 2x"},"classes":[]},{"id":1339,"url":"https:\/\/hostscripter.com\/?p=1339","url_meta":{"origin":1354,"position":2},"title":"Part 6: Create your own Login System using PHP and MySql","author":"h05t5cr1pt3r","date":"November 28, 2022","format":false,"excerpt":"6. Creating the Profile Page The profile page will display the account information for the logged-in user. Edit the\u00a0profile.php\u00a0file and add the following code: