PHP MySQL Data Transfer in secured way
By this post we can learn the below thing in php
- Prevent refreshing
- Prevent Back button in browser
- separate configuration file creation (config.php)
- separate function file creation(functions.php)
- password encryption using md5 hash
- design in form validation
Pre requisite:
- Install xampp for Apache server, php & Mysql database
Step-1: create a file index.php and write the below code
<?php
include "functions.php";
include "config.php";
$a = isset($_POST['uname']) ? $_POST['uname'] : null;
$b = isset($_POST['pass']) ? $_POST['pass'] : null;
if ($a <> null || $b <> null){
$sql = "INSERT INTO user (uname, pass)
VALUES ('$a', md5('$b'))";
if ($conn->query($sql) === TRUE) {
successinsert();
} else {
echo "Error: " . $sql . "<br>" . $conn->error;
}
}
$conn->close();
?>
<script language="javascript" type="text/javascript">
if ( window.history.replaceState ) {
window.history.replaceState( null, null, window.location.href );
}
window.history.forward();
</script>
<html>
<body>
<form action="<?php echo htmlspecialchars($_SERVER["PHP_SELF"]);?>" method="post">
User Name: <input type="text" name="uname" required maxlength="30" size="30"><br><br>
Password: <input type="password" name="pass" pattern="(?=.*\d)(?=.*[a-z])(?=.*[A-Z]).{8,}" size="8"><br>
<input type="submit">
</form>
<div id="message">
<h3>Password must contain the following:</h3>
<p id="letter" class="invalid">A <b>lowercase</b> letter</p>
<p id="capital" class="invalid">A <b>capital (uppercase)</b> letter</p>
<p id="number" class="invalid">A <b>number</b></p>
<p id="length" class="invalid">Minimum <b>8 characters</b></p>
</div>
</body>
</script>
</html>
Step-2: create config.php file for DB connection checking
<?php
$servername = "localhost";
$username = "root";
$password = "";
$dbname = "testDB";
// Create connection
$conn = new mysqli($servername, $username, $password, $dbname);
// Check connection
if ($conn->connect_error) {
die("Connection failed: " . $conn->connect_error);
}
?>
3: Create functions.php file for keeping all function in separate file.
<?php
function successinsert(){
echo '<script>alert("Data inserted Successfully");</script>';
}
?>
