PHP-and-MySQL/C4/User-Login-Part-3/English

Time	Narration
0:00	Welcome to the 3rd part of our "User login" tutorial.
00:07	Here, we'll create a session in which the user can enter a page and they're allowed to be inside the page as long as they have successfully logged in.
0:16	To start any session, we will need a function which is "start session".
00:25	Is it "start session" or "session start"? Let's just test it quickly.
00:34	Right, an error! So, it must be "session start". Sorry I was a bit confused there.
00:40	"Session start", okay? So refresh, resend and "You're in!"
0:42	We've started the session and this lets us add a session variable.
0:51	So, "You're in!". After this I'll say "Click here to enter the secret... no, the member page." okay?
1:12	And this is going to be a link to a page called "member dot php".
1:19	Let's just recap. As long as we send the right data we're going to say "Click here to enter the member page" which we haven't created yet.
1:30	Let me remind you here that we just created our "session start" here, which is very important.
1:36	We're going to create a session and to do this let me start and type here the dollar sign underscore session and then in brackets, in square brackets, we will give it a session name.
1:53	I'll call it "username" and that will be equal to our "username". I think I will say "dbusername" because that's a more direct value from the database.
2:08	We have our session set.
2:10	As long as the user is in their browser not the browser you evoked them with, then when we echo out our session in any page now, this will be set as a session.
2:20	To prove this I'll create a new page.
2:25	It'll be the "member dot php" page.
2:28	So I'll save this as "member dot php".
2:30	Here I'll say "echo" and I'll echo the "username session", okay?
2:42	In fact, I'll concatenate at the start "Welcome" and at the end, just to make it more expressive let me add an exclamation mark.
2:55	As long as we are logged in, this should run this command here, setting our session in our browser to our "username" on any other page we create.
3:06	If this is any other page over here and you use this code to set, it will work.
3:11	You will, of course, need this function inside here, as well.
3:18	So you need "session start" inside every page that you call or declare a session in.
3:29	There we restart. Let's go back to the main page.
3:35	I'll login with my details as "Alex" and "abc", click log in.
3:41	"You're in! Click here to enter the member page". Now as you can see, there is no error. I've successfully created my session.
3:49	If I click here, we get "Welcome!" We have got only that. Let's see what happened.
3:52	Let's go back and see what I've done wrong. This should be "username".
4:00	I'm not using any comparison here but I've put a double equals to sign here. That might be wrong.
4.07	Now this should work. Let's go back to our "index" page and let's log in again, as we did before.
4:17	Login, okay, "You're in! Click here to enter the member page". Click here and "Welcome, alex!".
4:26	Now I'll go back to the login page.
4:28	Most people would think all that data has been lost now.
4:32	If I go back to the member page which is "member dot php" and press enter it is still saying "alex".
4:40	And in some second-starts if I close my browser and reopen it and I go to "local host php academy" then go back to my page which is the "login" session and back to my member page I'm still logged in. okay?
5:03	So my user is logged in. If I close the browser I am still going to be logged in when I enter back.
5:12	This is a very useful function if you're doing this kind of logging in.
5:19	A lot of websites to do this to keep you logged in.
5:23	But now I want to create a log out page.
5:26	To log out all we need to do is, we need to create a separate page and let's just save it as "logout dot php".
5:33	And we need to end our session here.
5:39	First of all, before we destroy our session we need to start it.
5:46	So I'll type "session start" here. Let me confirm it once.
5:55	Ok and then we need to say "session destroy". Sorry, not sestroy, destroy.
6:04	If we run this page here, it will destroy our session.
6:08	Here I could type a friendly error message "You've been logged out. Click here to return".
6:20	Let me create a link back to our "index dot php" page.
6:32	Now I'll test this again. For example, lets say.....
6:35	Lets put a break there. Here I'll create a link to log out.
6:41	Its important to give the link the user to our "logout dot php" page otherwise they'll not know how to logout.
6:50	We refresh this and it will create a log out link, to log out from the php page.
6:55	Click on this and you get "You've been logged out. Click here to return."
6:59	I assume that we've been logged out. Trying to go back to our member page dot php.
7:04	We have got no variable here.
7:06	Now you don't want the users to get access to this page because they are not logged in right now.
7:13	So, here I'll say session start then I'll say "if session and the session name which is username.
7:19	Next I'll echo out my data to say "Welcome" else I'll say die.
7:25	No! Not me - I want my page to die! So I'll say "You must be logged in".
7:45	We're saying, if this session exists or if it has been created by using a correct username and password we can echo out our friendly message to say "Welcome" otherwise kill the page and say "You must be logged in!".
7:55	So, this is all in this part of the tutorial. Let me summarise this for you.
8:04	Remember I'm not logged in. So let me login.
8:06	I am in. There's my member page. I can log out. I return here.
8:10	Now as we've created member dot php, press Enter.
8:14	It displays, "You must be logged in!".
8:16	So for example I'm going to log in but I'll not click here to go.
6:22	I'll just forward myself to "member dot php". Message has been created and I've been allowed access.
8:29	Okay so that's it for now. This is the last part of this tutorial. If you have any questions on this I'll be more than happy to help.
8:37	This is Evan Varkey dubbing for the Spoken Tutorial Project. Bye.

Contributors and Content Editors

Pravin1389